@agent-deck/shared 1.8.2 → 1.9.0

package/dist/utils/agent-deck-home.d.ts

@@ -1,9 +1,24 @@
 /** Dev monorepo / tsx — separate data dir from production `agent-deck start`. */
 export declare function isAgentDeckDevMode(): boolean;
+/** The user's real store root. Both this and its `dev/` subdir are real user data. */
+export declare function realAgentDeckHome(): string;
+/**
+ * Exported for tests: is `target` the store root at `root`, or inside it?
+ *
+ * Compares lexically first, then again through `realpathSync`, because this store root
+ * is routinely a symlink into a git-synced tree (and so are its children). A
+ * lexical-only check lets `AGENT_DECK_HOME=<realpath of ~/.agent-deck>`, or a link
+ * pointing back at it, write to the real store while looking isolated.
+ */
+export declare function isUnderStoreRoot(target: string, root: string): boolean;
 /**
  * Agent Deck data root: SQLite, credential yaml metadata, dev secret files.
  * Production CLI → ~/.agent-deck
  * Monorepo dev (AGENT_DECK_DEV=1) → ~/.agent-deck/dev
+ *
+ * Under a test runner this throws rather than hand back the real store, so a test
+ * that forgets to isolate `AGENT_DECK_HOME` fails loudly instead of writing stray
+ * decks and services into the developer's (often git-synced) store.
  */
 export declare function resolveAgentDeckHome(): string;
 //# sourceMappingURL=agent-deck-home.d.ts.map

package/dist/utils/agent-deck-home.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-deck-home.d.ts","sourceRoot":"","sources":["../../src/utils/agent-deck-home.ts"],"names":[],"mappings":"AAIA,iFAAiF;AACjF,wBAAgB,kBAAkB,IAAI,OAAO,CAS5C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAO7C"}
+{"version":3,"file":"agent-deck-home.d.ts","sourceRoot":"","sources":["../../src/utils/agent-deck-home.ts"],"names":[],"mappings":"AAUA,iFAAiF;AACjF,wBAAgB,kBAAkB,IAAI,OAAO,CAS5C;AAED,sFAAsF;AACtF,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAwBD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAKtE;AAeD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAkB7C"}

package/dist/utils/agent-deck-home.js

@@ -4,9 +4,17 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.isAgentDeckDevMode = isAgentDeckDevMode;
+exports.realAgentDeckHome = realAgentDeckHome;
+exports.isUnderStoreRoot = isUnderStoreRoot;
 exports.resolveAgentDeckHome = resolveAgentDeckHome;
+const node_fs_1 = __importDefault(require("node:fs"));
 const node_os_1 = __importDefault(require("node:os"));
 const node_path_1 = __importDefault(require("node:path"));
+/**
+ * Escape hatch for the test guard below. Only for tests that assert default path
+ * resolution and never write — never for tests that touch the store.
+ */
+const ALLOW_REAL_HOME_IN_TESTS_ENV = 'AGENT_DECK_ALLOW_REAL_HOME_IN_TESTS';
 /** Dev monorepo / tsx — separate data dir from production `agent-deck start`. */
 function isAgentDeckDevMode() {
     const flag = process.env.AGENT_DECK_DEV?.trim().toLowerCase();
@@ -18,16 +26,74 @@ function isAgentDeckDevMode() {
     }
     return process.env.NODE_ENV === 'development';
 }
+/** The user's real store root. Both this and its `dev/` subdir are real user data. */
+function realAgentDeckHome() {
+    return node_path_1.default.join(node_os_1.default.homedir(), '.agent-deck');
+}
+/** Vitest sets VITEST=true and NODE_ENV=test; either marks a test process. */
+function isTestRunnerProcess() {
+    const vitest = process.env.VITEST?.trim().toLowerCase();
+    return vitest === '1' || vitest === 'true' || process.env.NODE_ENV === 'test';
+}
+function containsOrEquals(root, target) {
+    return target === root || target.startsWith(`${root}${node_path_1.default.sep}`);
+}
+/**
+ * `realpathSync` throws on a path that does not exist yet; the literal path is then
+ * all there is to compare, and the lexical pass has already used it.
+ */
+function realpathOrSelf(target) {
+    try {
+        return node_fs_1.default.realpathSync(target);
+    }
+    catch {
+        return target;
+    }
+}
+/**
+ * Exported for tests: is `target` the store root at `root`, or inside it?
+ *
+ * Compares lexically first, then again through `realpathSync`, because this store root
+ * is routinely a symlink into a git-synced tree (and so are its children). A
+ * lexical-only check lets `AGENT_DECK_HOME=<realpath of ~/.agent-deck>`, or a link
+ * pointing back at it, write to the real store while looking isolated.
+ */
+function isUnderStoreRoot(target, root) {
+    if (containsOrEquals(root, target)) {
+        return true;
+    }
+    return containsOrEquals(realpathOrSelf(root), realpathOrSelf(target));
+}
+function isRealAgentDeckHome(target) {
+    return isUnderStoreRoot(target, realAgentDeckHome());
+}
+function agentDeckHomeFromEnv() {
+    if (process.env.AGENT_DECK_HOME?.trim()) {
+        return node_path_1.default.resolve(process.env.AGENT_DECK_HOME.trim());
+    }
+    const base = realAgentDeckHome();
+    return isAgentDeckDevMode() ? node_path_1.default.join(base, 'dev') : base;
+}
 /**
  * Agent Deck data root: SQLite, credential yaml metadata, dev secret files.
  * Production CLI → ~/.agent-deck
  * Monorepo dev (AGENT_DECK_DEV=1) → ~/.agent-deck/dev
+ *
+ * Under a test runner this throws rather than hand back the real store, so a test
+ * that forgets to isolate `AGENT_DECK_HOME` fails loudly instead of writing stray
+ * decks and services into the developer's (often git-synced) store.
  */
 function resolveAgentDeckHome() {
-    if (process.env.AGENT_DECK_HOME?.trim()) {
-        return node_path_1.default.resolve(process.env.AGENT_DECK_HOME.trim());
+    const home = agentDeckHomeFromEnv();
+    // Test-runner check first: production never pays for the realpath syscalls.
+    if (isTestRunnerProcess() &&
+        process.env[ALLOW_REAL_HOME_IN_TESTS_ENV]?.trim() !== '1' &&
+        isRealAgentDeckHome(home)) {
+        throw new Error(`Refusing to use the real Agent Deck store (${home}) from a test process. ` +
+            'Set AGENT_DECK_HOME to a temp dir for this test — each package vitest config ' +
+            'already points the whole run at one. If the test only asserts default path ' +
+            `resolution and writes nothing, set ${ALLOW_REAL_HOME_IN_TESTS_ENV}=1.`);
     }
-    const base = node_path_1.default.join(node_os_1.default.homedir(), '.agent-deck');
-    return isAgentDeckDevMode() ? node_path_1.default.join(base, 'dev') : base;
+    return home;
 }
 //# sourceMappingURL=agent-deck-home.js.map

package/dist/utils/agent-deck-home.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-deck-home.js","sourceRoot":"","sources":["../../src/utils/agent-deck-home.ts"],"names":[],"mappings":";;;;;AAKA,gDASC;AAOD,oDAOC;AA3BD,sDAAyB;AACzB,0DAA6B;AAE7B,iFAAiF;AACjF,SAAgB,kBAAkB;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC;QACxC,OAAO,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;IACpD,OAAO,kBAAkB,EAAE,CAAC,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"agent-deck-home.js","sourceRoot":"","sources":["../../src/utils/agent-deck-home.ts"],"names":[],"mappings":";;;;;AAWA,gDASC;AAGD,8CAEC;AAgCD,4CAKC;AAwBD,oDAkBC;AAxGD,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAE7B;;;GAGG;AACH,MAAM,4BAA4B,GAAG,qCAAqC,CAAC;AAE3E,iFAAiF;AACjF,SAAgB,kBAAkB;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC;AAChD,CAAC;AAED,sFAAsF;AACtF,SAAgB,iBAAiB;IAC/B,OAAO,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,SAAS,mBAAmB;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxD,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;AAChF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,MAAc;IACpD,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,mBAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,MAAc;IACpC,IAAI,CAAC;QACH,OAAO,iBAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gBAAgB,CAAC,MAAc,EAAE,IAAY;IAC3D,IAAI,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,gBAAgB,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,OAAO,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,oBAAoB;IAC3B,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC;QACxC,OAAO,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,OAAO,kBAAkB,EAAE,CAAC,CAAC,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,oBAAoB;IAClC,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IAEpC,4EAA4E;IAC5E,IACE,mBAAmB,EAAE;QACrB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG;QACzD,mBAAmB,CAAC,IAAI,CAAC,EACzB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,yBAAyB;YACzE,+EAA+E;YAC/E,6EAA6E;YAC7E,sCAAsC,4BAA4B,KAAK,CAC1E,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-deck/shared",
-  "version": "1.8.2",
+  "version": "1.9.0",
   "description": "Shared types, schemas, and utilities for Agent Deck",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/dist/schemas/repo-deck.d.ts

@@ -1,15 +0,0 @@
-import { z } from 'zod';
-/** Minimal repo manifest at `.agent-deck/deck.yaml` — links a workspace to a dashboard deck. */
-export declare const RepoDeckManifestSchema: z.ZodObject<{
-    deck_id: z.ZodString;
-    name: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    deck_id: string;
-    name?: string | undefined;
-}, {
-    deck_id: string;
-    name?: string | undefined;
-}>;
-export type RepoDeckManifest = z.infer<typeof RepoDeckManifestSchema>;
-export declare const REPO_DECK_MANIFEST_PATH = ".agent-deck/deck.yaml";
-//# sourceMappingURL=repo-deck.d.ts.map

package/dist/schemas/repo-deck.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"repo-deck.d.ts","sourceRoot":"","sources":["../../src/schemas/repo-deck.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gGAAgG;AAChG,eAAO,MAAM,sBAAsB;;;;;;;;;EAGjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,uBAAuB,0BAA0B,CAAC"}

package/dist/schemas/repo-deck.js

@@ -1,11 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.REPO_DECK_MANIFEST_PATH = exports.RepoDeckManifestSchema = void 0;
-const zod_1 = require("zod");
-/** Minimal repo manifest at `.agent-deck/deck.yaml` — links a workspace to a dashboard deck. */
-exports.RepoDeckManifestSchema = zod_1.z.object({
-    deck_id: zod_1.z.string().uuid('deck_id must be a valid Agent Deck UUID'),
-    name: zod_1.z.string().min(1).optional(),
-});
-exports.REPO_DECK_MANIFEST_PATH = '.agent-deck/deck.yaml';
-//# sourceMappingURL=repo-deck.js.map

package/dist/schemas/repo-deck.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"repo-deck.js","sourceRoot":"","sources":["../../src/schemas/repo-deck.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,gGAAgG;AACnF,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,yCAAyC,CAAC;IACnE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAIU,QAAA,uBAAuB,GAAG,uBAAuB,CAAC"}