@adhdev/mesh-shared 1.0.82-rc.22 → 1.0.82-rc.24

package/dist/assistant-protocol.d.ts

@@ -11,15 +11,16 @@
  *   - the daemon-only verbs (launch / MCP-only pull / owner actions) that have
  *     no tool.
  *
- * Assistant tools are a separate set from the mesh tools: none of these names
- * belongs in `CANONICAL_MESH_TOOL_NAMES`, and the coordinator/worker MCP modes
- * never publish them.
+ * Assistant-specific tools remain separate from mesh tools. Driver discovery
+ * (list/describe) is shared across all three modes; invoke remains Worker-only.
  */
-export declare const ASSISTANT_TOOLS: readonly ["projects", "environment", "assistant_action", "project_watch", "project_status", "project_send", "project_read", "project_add", "project_attach_remote", "discover_repos", "memory", "skill_view", "skill_manage", "project_note", "launch_defaults", "launch_defaults_set"];
+export declare const ASSISTANT_TOOLS: readonly ["projects", "environment", "assistant_action", "project_watch", "project_status", "project_send", "project_read", "project_add", "project_attach_remote", "discover_repos", "memory", "skill_view", "skill_manage", "project_note", "launch_defaults", "launch_defaults_set", "driver_list", "driver_describe"];
 export type AssistantTool = typeof ASSISTANT_TOOLS[number];
 export declare function isAssistantTool(value: unknown): value is AssistantTool;
 /** Daemon verb names (§4.4 table + the five verbs below it). */
 export declare const ASSISTANT_VERB: {
+    readonly driverList: "driver_list";
+    readonly driverDescribe: "driver_describe";
     readonly projects: "assistant_projects";
     readonly environment: "assistant_environment";
     readonly action: "assistant_action";
@@ -61,11 +62,128 @@ export declare const ASSISTANT_WRITE_TOOLS: readonly AssistantTool[];
 export declare const ASSISTANT_OWNER_VERBS: readonly AssistantVerb[];
 /** The only assistant verbs accepted while an idle review turn is open (§4.10.7). */
 export declare const ASSISTANT_REVIEW_TURN_VERBS: readonly AssistantVerb[];
-/**
- * Env var the daemon sets on the assistant CLI's process (§4.5), read by the
+/** Env var the daemon sets on the assistant CLI's process (§4.5), read by the
  * assistant MCP server and forwarded on every verb as
  * `ASSISTANT_SESSION_ID_ARG`. Routing / ownership only — never an auth gate.
  */
 export declare const ASSISTANT_SESSION_ID_ENV = "ADHDEV_ASSISTANT_SESSION_ID";
 /** Request arg carrying the calling assistant session id. */
 export declare const ASSISTANT_SESSION_ID_ARG = "assistantSessionId";
+/**
+ * Conceptual single-assistant slot in the verified account namespace.
+ * Fixed to `'personal'` — one logical assistant per account with one
+ * owner-selected active execution daemon binding per project ACL.
+ */
+export declare const ASSISTANT_ACCOUNT_SLOT: "personal";
+export type AssistantAccountSlot = typeof ASSISTANT_ACCOUNT_SLOT;
+/**
+ * Daemon commands for remote project discovery, host ACL grant/revoke, and
+ * assistant-side follow/unfollow. Registered outside `ASSISTANT_VERB` so the
+ * assistant MCP server tool/verb parity table remains untouched.
+ */
+export declare const ASSISTANT_REMOTE_PROJECT_COMMAND: "assistant_remote_project";
+export declare const ASSISTANT_REMOTE_PROJECT_CATALOG_COMMAND: "assistant_remote_project_catalog";
+export declare const ASSISTANT_REMOTE_PROJECT_ACCESS_COMMAND: "assistant_remote_project_access";
+export declare const ASSISTANT_REMOTE_FOLLOW_COMMAND: "assistant_remote_follow";
+/**
+ * Narrow operations a non-roster follower deputy is permitted to invoke on
+ * `assistant_remote_project` when the host's `assistantRemoteAccess` ACL is active.
+ * `note`, `terminal`, and `inventory` remain strictly roster-member-only.
+ */
+export declare const ASSISTANT_FOLLOWER_ALLOWED_OPS: readonly ["status", "read", "poll", "report", "send"];
+export type AssistantFollowerAllowedOp = typeof ASSISTANT_FOLLOWER_ALLOWED_OPS[number];
+export declare function isAssistantFollowerAllowedOp(value: unknown): value is AssistantFollowerAllowedOp;
+/**
+ * Host-authoritative narrow project ACL persisted on the hosting daemon's
+ * `LocalMeshEntry` in `meshes.json`. Revocation increments `grantRevision`
+ * and retains a `'revoked'` tombstone so stale follower caches cannot replay.
+ */
+export interface AssistantRemoteAccessBinding {
+    hostDaemonId: string;
+    meshId: string;
+    accountSlot: AssistantAccountSlot;
+    activeDaemonId: string;
+    bindingRevision: number;
+    grantRevision: number;
+    status: 'active' | 'revoked';
+    allowedOps: readonly AssistantFollowerAllowedOp[];
+    grantedAt: number;
+    revokedAt?: number;
+}
+/**
+ * Durable owner-binding receipt persisted in the assistant daemon's
+ * `assistant.json`. Survives ordinary daemon restarts and session/provider
+ * replacements (`bindSession`), while missing/corrupt/mismatched receipts
+ * fail closed until owner reconciliation.
+ */
+export interface AssistantOwnerBindingReceipt {
+    accountSlot: AssistantAccountSlot;
+    daemonId: string;
+    bindingRevision: number;
+    boundAt: number | string;
+}
+export type FollowedRemoteProjectState = 'followed' | 'unfollowed' | 'revoked';
+export type RemoteAccessState = 'not_granted' | 'granted_unfollowed' | 'followed' | 'revoked' | 'host_unreachable' | 'binding_mismatch';
+/**
+ * Assistant-local followed remote project reference persisted in `assistant.json`.
+ * Never injected into `meshes.json`, `mesh-host-records.json`, `mesh-node-state-push.json`,
+ * or `inlineMeshCache`.
+ */
+export interface FollowedRemoteProjectEntry {
+    /** Canonical key: `${canonicalDaemonId(hostDaemonId)}::${meshId}` */
+    key: string;
+    hostDaemonId: string;
+    hostLabel?: string;
+    meshId: string;
+    name: string;
+    slug: string;
+    sanitizedRepoIdentity: string | null;
+    repoIdentity?: string;
+    accountSlot: AssistantAccountSlot;
+    bindingRevision: number;
+    grantRevision: number;
+    state: FollowedRemoteProjectState;
+    followedAt: number | string;
+    updatedAt: number | string;
+    unfollowedAt?: number | string;
+    revokedAt?: number | string;
+    lastCursor?: string | null;
+    coordinatorSessionId?: string | null;
+    lastErrorCode?: string;
+    lastObserved?: {
+        observedAt: number | string;
+        coordinatorState?: string;
+        coordinatorMissing?: boolean;
+        coordinatorPresent?: boolean;
+        lastHeadline?: string;
+        summary?: string;
+    };
+}
+/**
+ * Content-free canonical catalog metadata returned by `assistant_remote_project_catalog`
+ * for meshes actually hosted on the queried remote daemon.
+ */
+export interface RemoteProjectCatalogItem {
+    hostDaemonId: string;
+    meshId: string;
+    name: string;
+    sanitizedRepoIdentity: string | null;
+    coordinatorState?: 'none' | 'idle' | 'working' | 'waiting' | string;
+    capabilities: {
+        status: true;
+        read: true;
+        poll: true;
+        report: true;
+        send: true;
+        coordinatorPresent?: boolean;
+    };
+    observedAt: number | string;
+}
+/** Build the canonical `(hostDaemonId, meshId)` key used across assistant follow state. */
+export declare function followedRemoteProjectKey(hostDaemonId: string, meshId: string): string;
+/**
+ * Sanitize a repository identity or remote URL into a content-free `host/path`
+ * identifier suitable for remote discovery catalogs. Strips credentials, query
+ * strings, fragments, and `.git` suffixes, and rejects local filesystem paths.
+ */
+export declare function sanitizeRemoteRepoIdentity(raw: string | null | undefined): string | null;

package/dist/index.d.ts

@@ -44,3 +44,4 @@ export * from './keyed-doc-delta';
 export * from './provider-approval';
 export * from './provider-question';
 export * from './launch-defaults';
+export * from './role-launch';