@adhdev/mesh-shared 1.0.82-rc.23 → 1.0.82-rc.25

package/dist/assistant-protocol.d.ts

@@ -62,11 +62,128 @@ export declare const ASSISTANT_WRITE_TOOLS: readonly AssistantTool[];
 export declare const ASSISTANT_OWNER_VERBS: readonly AssistantVerb[];
 /** The only assistant verbs accepted while an idle review turn is open (§4.10.7). */
 export declare const ASSISTANT_REVIEW_TURN_VERBS: readonly AssistantVerb[];
-/**
- * Env var the daemon sets on the assistant CLI's process (§4.5), read by the
+/** Env var the daemon sets on the assistant CLI's process (§4.5), read by the
  * assistant MCP server and forwarded on every verb as
  * `ASSISTANT_SESSION_ID_ARG`. Routing / ownership only — never an auth gate.
  */
 export declare const ASSISTANT_SESSION_ID_ENV = "ADHDEV_ASSISTANT_SESSION_ID";
 /** Request arg carrying the calling assistant session id. */
 export declare const ASSISTANT_SESSION_ID_ARG = "assistantSessionId";
+/**
+ * Conceptual single-assistant slot in the verified account namespace.
+ * Fixed to `'personal'` — one logical assistant per account with one
+ * owner-selected active execution daemon binding per project ACL.
+ */
+export declare const ASSISTANT_ACCOUNT_SLOT: "personal";
+export type AssistantAccountSlot = typeof ASSISTANT_ACCOUNT_SLOT;
+/**
+ * Daemon commands for remote project discovery, host ACL grant/revoke, and
+ * assistant-side follow/unfollow. Registered outside `ASSISTANT_VERB` so the
+ * assistant MCP server tool/verb parity table remains untouched.
+ */
+export declare const ASSISTANT_REMOTE_PROJECT_COMMAND: "assistant_remote_project";
+export declare const ASSISTANT_REMOTE_PROJECT_CATALOG_COMMAND: "assistant_remote_project_catalog";
+export declare const ASSISTANT_REMOTE_PROJECT_ACCESS_COMMAND: "assistant_remote_project_access";
+export declare const ASSISTANT_REMOTE_FOLLOW_COMMAND: "assistant_remote_follow";
+/**
+ * Narrow operations a non-roster follower deputy is permitted to invoke on
+ * `assistant_remote_project` when the host's `assistantRemoteAccess` ACL is active.
+ * `note`, `terminal`, and `inventory` remain strictly roster-member-only.
+ */
+export declare const ASSISTANT_FOLLOWER_ALLOWED_OPS: readonly ["status", "read", "poll", "report", "send"];
+export type AssistantFollowerAllowedOp = typeof ASSISTANT_FOLLOWER_ALLOWED_OPS[number];
+export declare function isAssistantFollowerAllowedOp(value: unknown): value is AssistantFollowerAllowedOp;
+/**
+ * Host-authoritative narrow project ACL persisted on the hosting daemon's
+ * `LocalMeshEntry` in `meshes.json`. Revocation increments `grantRevision`
+ * and retains a `'revoked'` tombstone so stale follower caches cannot replay.
+ */
+export interface AssistantRemoteAccessBinding {
+    hostDaemonId: string;
+    meshId: string;
+    accountSlot: AssistantAccountSlot;
+    activeDaemonId: string;
+    bindingRevision: number;
+    grantRevision: number;
+    status: 'active' | 'revoked';
+    allowedOps: readonly AssistantFollowerAllowedOp[];
+    grantedAt: number;
+    revokedAt?: number;
+}
+/**
+ * Durable owner-binding receipt persisted in the assistant daemon's
+ * `assistant.json`. Survives ordinary daemon restarts and session/provider
+ * replacements (`bindSession`), while missing/corrupt/mismatched receipts
+ * fail closed until owner reconciliation.
+ */
+export interface AssistantOwnerBindingReceipt {
+    accountSlot: AssistantAccountSlot;
+    daemonId: string;
+    bindingRevision: number;
+    boundAt: number | string;
+}
+export type FollowedRemoteProjectState = 'followed' | 'unfollowed' | 'revoked';
+export type RemoteAccessState = 'not_granted' | 'granted_unfollowed' | 'followed' | 'revoked' | 'host_unreachable' | 'binding_mismatch';
+/**
+ * Assistant-local followed remote project reference persisted in `assistant.json`.
+ * Never injected into `meshes.json`, `mesh-host-records.json`, `mesh-node-state-push.json`,
+ * or `inlineMeshCache`.
+ */
+export interface FollowedRemoteProjectEntry {
+    /** Canonical key: `${canonicalDaemonId(hostDaemonId)}::${meshId}` */
+    key: string;
+    hostDaemonId: string;
+    hostLabel?: string;
+    meshId: string;
+    name: string;
+    slug: string;
+    sanitizedRepoIdentity: string | null;
+    repoIdentity?: string;
+    accountSlot: AssistantAccountSlot;
+    bindingRevision: number;
+    grantRevision: number;
+    state: FollowedRemoteProjectState;
+    followedAt: number | string;
+    updatedAt: number | string;
+    unfollowedAt?: number | string;
+    revokedAt?: number | string;
+    lastCursor?: string | null;
+    coordinatorSessionId?: string | null;
+    lastErrorCode?: string;
+    lastObserved?: {
+        observedAt: number | string;
+        coordinatorState?: string;
+        coordinatorMissing?: boolean;
+        coordinatorPresent?: boolean;
+        lastHeadline?: string;
+        summary?: string;
+    };
+}
+/**
+ * Content-free canonical catalog metadata returned by `assistant_remote_project_catalog`
+ * for meshes actually hosted on the queried remote daemon.
+ */
+export interface RemoteProjectCatalogItem {
+    hostDaemonId: string;
+    meshId: string;
+    name: string;
+    sanitizedRepoIdentity: string | null;
+    coordinatorState?: 'none' | 'idle' | 'working' | 'waiting' | string;
+    capabilities: {
+        status: true;
+        read: true;
+        poll: true;
+        report: true;
+        send: true;
+        coordinatorPresent?: boolean;
+    };
+    observedAt: number | string;
+}
+/** Build the canonical `(hostDaemonId, meshId)` key used across assistant follow state. */
+export declare function followedRemoteProjectKey(hostDaemonId: string, meshId: string): string;
+/**
+ * Sanitize a repository identity or remote URL into a content-free `host/path`
+ * identifier suitable for remote discovery catalogs. Strips credentials, query
+ * strings, fragments, and `.git` suffixes, and rejects local filesystem paths.
+ */
+export declare function sanitizeRemoteRepoIdentity(raw: string | null | undefined): string | null;

package/dist/index.js

@@ -20,7 +20,13 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  ASSISTANT_ACCOUNT_SLOT: () => ASSISTANT_ACCOUNT_SLOT,
+  ASSISTANT_FOLLOWER_ALLOWED_OPS: () => ASSISTANT_FOLLOWER_ALLOWED_OPS,
   ASSISTANT_OWNER_VERBS: () => ASSISTANT_OWNER_VERBS,
+  ASSISTANT_REMOTE_FOLLOW_COMMAND: () => ASSISTANT_REMOTE_FOLLOW_COMMAND,
+  ASSISTANT_REMOTE_PROJECT_ACCESS_COMMAND: () => ASSISTANT_REMOTE_PROJECT_ACCESS_COMMAND,
+  ASSISTANT_REMOTE_PROJECT_CATALOG_COMMAND: () => ASSISTANT_REMOTE_PROJECT_CATALOG_COMMAND,
+  ASSISTANT_REMOTE_PROJECT_COMMAND: () => ASSISTANT_REMOTE_PROJECT_COMMAND,
   ASSISTANT_REVIEW_TURN_VERBS: () => ASSISTANT_REVIEW_TURN_VERBS,
   ASSISTANT_SESSION_ID_ARG: () => ASSISTANT_SESSION_ID_ARG,
   ASSISTANT_SESSION_ID_ENV: () => ASSISTANT_SESSION_ID_ENV,
@@ -229,11 +235,13 @@ __export(index_exports, {
   expandDaemonIdForms: () => expandDaemonIdForms,
   findOwnershipConflicts: () => findOwnershipConflicts,
   foldKeyedDoc: () => foldKeyedDoc,
+  followedRemoteProjectKey: () => followedRemoteProjectKey,
   formatQuotaAccount: () => formatQuotaAccount,
   hasGitStatusEvidence: () => hasGitStatusEvidence,
   hasWorkerProtocolFooter: () => hasWorkerProtocolFooter,
   interpolateString: () => interpolateString,
   isActionableProviderApproval: () => isActionableProviderApproval,
+  isAssistantFollowerAllowedOp: () => isAssistantFollowerAllowedOp,
   isAssistantTool: () => isAssistantTool,
   isBlockedStatus: () => isBlockedStatus,
   isBusyStatus: () => isBusyStatus,
@@ -357,6 +365,7 @@ __export(index_exports, {
   retiredMeshToolError: () => retiredMeshToolError,
   sanitizeModelIdentifier: () => sanitizeModelIdentifier,
   sanitizeRefusalCode: () => sanitizeRefusalCode,
+  sanitizeRemoteRepoIdentity: () => sanitizeRemoteRepoIdentity,
   scoreGitStatusCandidate: () => scoreGitStatusCandidate,
   scoreGitUpstreamFreshness: () => scoreGitUpstreamFreshness,
   sessionIdsEquivalent: () => sessionIdsEquivalent,
@@ -1164,7 +1173,8 @@ var CANONICAL_MESH_TOOL_NAMES = [
   "mesh_review_inbox",
   "mesh_node_slots",
   "driver_list",
-  "driver_describe"
+  "driver_describe",
+  "artifact_list"
 ];
 var CANONICAL_MESH_TOOL_COUNT = CANONICAL_MESH_TOOL_NAMES.length;
 var RETIRED_MESH_TOOLS = {
@@ -2048,7 +2058,8 @@ var WORKER_TOOLS = [
   "git_diff",
   "driver_list",
   "driver_describe",
-  "driver_invoke"
+  "driver_invoke",
+  "artifact_register"
 ];
 var WORKER_TOOL_SET = new Set(WORKER_TOOLS);
 function isWorkerTool(value) {
@@ -2224,6 +2235,63 @@ var ASSISTANT_REVIEW_TURN_VERBS = [
 ];
 var ASSISTANT_SESSION_ID_ENV = "ADHDEV_ASSISTANT_SESSION_ID";
 var ASSISTANT_SESSION_ID_ARG = "assistantSessionId";
+var ASSISTANT_ACCOUNT_SLOT = "personal";
+var ASSISTANT_REMOTE_PROJECT_COMMAND = "assistant_remote_project";
+var ASSISTANT_REMOTE_PROJECT_CATALOG_COMMAND = "assistant_remote_project_catalog";
+var ASSISTANT_REMOTE_PROJECT_ACCESS_COMMAND = "assistant_remote_project_access";
+var ASSISTANT_REMOTE_FOLLOW_COMMAND = "assistant_remote_follow";
+var ASSISTANT_FOLLOWER_ALLOWED_OPS = ["status", "read", "poll", "report", "send"];
+var ASSISTANT_FOLLOWER_ALLOWED_OP_SET = new Set(ASSISTANT_FOLLOWER_ALLOWED_OPS);
+function isAssistantFollowerAllowedOp(value) {
+  return typeof value === "string" && ASSISTANT_FOLLOWER_ALLOWED_OP_SET.has(value);
+}
+function followedRemoteProjectKey(hostDaemonId, meshId) {
+  const canonHost = canonicalDaemonId(hostDaemonId) ?? hostDaemonId.trim();
+  return `${canonHost}::${meshId.trim()}`;
+}
+function sanitizeRemoteRepoIdentity(raw) {
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  if (!trimmed) return null;
+  if (trimmed.startsWith("/") || trimmed.startsWith("./") || trimmed.startsWith("../") || trimmed.startsWith("~/") || trimmed.startsWith("\\") || /^[a-zA-Z]:[\\/]/.test(trimmed) || /^file:/i.test(trimmed)) {
+    return null;
+  }
+  const withoutQuery = trimmed.replace(/[?#].*$/, "").replace(/\/+$/, "");
+  if (!withoutQuery) return null;
+  let host = "";
+  let repoPath = "";
+  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(withoutQuery)) {
+    try {
+      const url = new URL(withoutQuery);
+      if (url.protocol === "file:") return null;
+      host = url.hostname.toLowerCase();
+      repoPath = decodeURIComponent(url.pathname).replace(/^\/+|\/+$/g, "").replace(/\.git$/i, "");
+    } catch {
+      return null;
+    }
+  } else {
+    const scpMatch = withoutQuery.match(/^(?:[^@/:]+@)?(\[[^\]]+\]|[^/:]+):(.+)$/);
+    if (scpMatch) {
+      host = scpMatch[1].replace(/^\[|\]$/g, "").toLowerCase();
+      repoPath = scpMatch[2].replace(/^\/+|\/+$/g, "").replace(/\.git$/i, "");
+    } else {
+      const slash = withoutQuery.indexOf("/");
+      if (slash > 0) {
+        const rawHost = withoutQuery.slice(0, slash);
+        const atIdx = rawHost.lastIndexOf("@");
+        host = (atIdx >= 0 ? rawHost.slice(atIdx + 1) : rawHost).toLowerCase();
+        repoPath = withoutQuery.slice(slash + 1).replace(/^\/+|\/+$/g, "").replace(/\.git$/i, "");
+      }
+    }
+  }
+  if (!host || !repoPath) return null;
+  if (!host.includes(".") && host !== "localhost") return null;
+  if (/[\s@:\\]/.test(host)) return null;
+  const segments = repoPath.split("/").filter(Boolean);
+  if (segments.length === 0) return null;
+  if (segments.some((seg) => seg === "." || seg === ".." || /[\s@:\\]/.test(seg))) return null;
+  return `${host}/${segments.join("/")}`.slice(0, 200);
+}
 
 // src/turn-evidence.ts
 var MESH_TOPIC_PROTOCOL_VERSION = 2;
@@ -4050,7 +4118,13 @@ function isProviderQuestionBinding(value) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ASSISTANT_ACCOUNT_SLOT,
+  ASSISTANT_FOLLOWER_ALLOWED_OPS,
   ASSISTANT_OWNER_VERBS,
+  ASSISTANT_REMOTE_FOLLOW_COMMAND,
+  ASSISTANT_REMOTE_PROJECT_ACCESS_COMMAND,
+  ASSISTANT_REMOTE_PROJECT_CATALOG_COMMAND,
+  ASSISTANT_REMOTE_PROJECT_COMMAND,
   ASSISTANT_REVIEW_TURN_VERBS,
   ASSISTANT_SESSION_ID_ARG,
   ASSISTANT_SESSION_ID_ENV,
@@ -4259,11 +4333,13 @@ function isProviderQuestionBinding(value) {
   expandDaemonIdForms,
   findOwnershipConflicts,
   foldKeyedDoc,
+  followedRemoteProjectKey,
   formatQuotaAccount,
   hasGitStatusEvidence,
   hasWorkerProtocolFooter,
   interpolateString,
   isActionableProviderApproval,
+  isAssistantFollowerAllowedOp,
   isAssistantTool,
   isBlockedStatus,
   isBusyStatus,
@@ -4387,6 +4463,7 @@ function isProviderQuestionBinding(value) {
   retiredMeshToolError,
   sanitizeModelIdentifier,
   sanitizeRefusalCode,
+  sanitizeRemoteRepoIdentity,
   scoreGitStatusCandidate,
   scoreGitUpstreamFreshness,
   sessionIdsEquivalent,