@agimon-ai/doompi-core 0.0.1-alpha.100

package/dist/src/services/webauthnPolicy/index.cjs

@@ -0,0 +1,163 @@
+//#region src/services/webauthnPolicy/index.ts
+/**
+* What a passkey is allowed to prove, and for how long.
+*
+* A session cookie is a bearer token: whoever holds the bytes is you. A passkey
+* is a private key in the device's secure enclave that never leaves it, so the
+* cookie stops being the only thing between a stolen phone and this machine.
+* The cookie does not go away, because a WebSocket cannot run a ceremony per
+* frame; what changes is that the cookie is short-lived, re-mintable with a
+* gesture rather than a QR, and insufficient on its own for the actions below.
+*
+* The crypto lives in the adapter. This file is the policy: which actions need
+* a fresh signature, how long a challenge is good for, and when a counter says
+* the credential has been cloned.
+*/
+/**
+* Actions that need a fresh gesture even from a live session.
+*
+* These are escalation paths rather than ordinary prompting or tool approval:
+* credentials redirect machine traffic, sessions run code in a selected directory,
+* repository writes change future sessions, and live MCP operations may start local
+* processes or contact remote servers.
+*/
+const STEP_UP_ACTIONS = [
+	"provider.login",
+	"provider.logout",
+	"session.create",
+	"settings.write",
+	"mcp.discover",
+	"mcp.authorize",
+	"computer-use.activate"
+];
+/** Short enough that a captured challenge is useless, long enough for a slow Face ID. */
+const STEP_UP_CHALLENGE_TTL_MS = 6e4;
+/** A registration or sign-in ceremony the user has to complete. */
+const CEREMONY_TTL_MS = 12e4;
+/**
+* Which action, if any, a request is attempting.
+*
+* Matched here rather than at each route so the list of gated operations is one
+* readable table instead of three call sites that can drift apart. Anything not
+* named is not gated, which is the safe default only because the gate is an
+* addition to the session check rather than a replacement for it.
+*/
+const GATED_ROUTES = [
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces$/u,
+		action: "session.create"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces\/[^/]+\/(?:resume|sessions(?:\/[^/]+\/(?:resume|revive))?)$/u,
+		action: "session.create"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces\/[^/]+\/plugins\/git\/sessions$/u,
+		action: "session.create"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/plugins\/doompi\/logins(?:\/[^/]+\/answer)?$/u,
+		action: "provider.login"
+	},
+	{
+		method: "DELETE",
+		pattern: /^\/api\/plugins\/doompi\/providers\/[^/]+$/u,
+		action: "provider.logout"
+	},
+	{
+		method: "PUT",
+		pattern: /^\/api(?:\/workspaces\/[^/]+)?\/settings\/(?:value|repository\/selection|images)$/u,
+		action: "settings.write"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces\/[^/]+\/plugins\/mcp\/repository\/discover$/u,
+		action: "mcp.discover"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces\/[^/]+\/plugins\/mcp\/repository\/authorize$/u,
+		action: "mcp.authorize"
+	},
+	{
+		method: "DELETE",
+		pattern: /^\/api\/workspaces\/[^/]+\/plugins\/mcp\/repository\/authorize\/[^/]+$/u,
+		action: "mcp.authorize"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces\/[^/]+\/sessions\/[^/]+\/plugins\/computer-use\/activate$/u,
+		action: "computer-use.activate"
+	}
+];
+function stepUpActionFor(method, path) {
+	const wanted = method.toUpperCase();
+	return GATED_ROUTES.find((route) => route.method === wanted && route.pattern.test(path))?.action;
+}
+function isStepUpAction(value) {
+	return typeof value === "string" && STEP_UP_ACTIONS.includes(value);
+}
+/**
+* Whether a signature counter moved the way a real authenticator moves it.
+*
+* A counter that stays at zero means the authenticator does not implement one,
+* which is common and not a signal. A counter that goes backwards or repeats
+* while claiming to count means two things are signing with the same key, which
+* is the definition of a cloned credential.
+*/
+function counterVerdict(stored, presented) {
+	if (stored === 0 && presented === 0) return "ok";
+	return presented > stored ? "ok" : "clone-suspected";
+}
+/** Whether a ceremony or step-up challenge is still live. */
+function challengeIsFresh(issuedAt, now, ttlMs) {
+	return now - issuedAt < ttlMs;
+}
+/** A quick tunnel's domain; its hostname rotates on every start. */
+const ROTATING_SUFFIX = ".trycloudflare.com";
+/** Dotted-quad, and the bracketed form a URL uses for v6. */
+const IPV4 = /^\d{1,3}(?:\.\d{1,3}){3}$/u;
+/**
+* The relying party id a passkey is bound to.
+*
+* Derived from the configured tunnel hostname and nothing else, never from a
+* request header: `rpID` is the entire scope of a credential, so a caller who
+* could influence it could mint credentials against somebody else's origin.
+*
+* Three things are refused rather than accepted and regretted later:
+*
+* - A quick tunnel, whose hostname rotates on every start, so a passkey
+*   registered now would silently stop working on the next one.
+* - An IP address, which WebAuthn does not accept as a relying party id at all;
+*   registering against one fails in the browser rather than here, which is a
+*   much worse place to find out.
+* - Anything without a dot, which cannot be a public tunnel hostname.
+*/
+function relyingPartyId(publicOrigin) {
+	if (publicOrigin === void 0) return void 0;
+	let host;
+	try {
+		host = new URL(publicOrigin).hostname.toLowerCase();
+	} catch {
+		return;
+	}
+	if (host.endsWith(ROTATING_SUFFIX)) return void 0;
+	if (IPV4.test(host) || host.startsWith("[")) return void 0;
+	if (!host.includes(".")) return void 0;
+	return host;
+}
+//#endregion
+exports.CEREMONY_TTL_MS = CEREMONY_TTL_MS;
+exports.STEP_UP_ACTIONS = STEP_UP_ACTIONS;
+exports.STEP_UP_CHALLENGE_TTL_MS = STEP_UP_CHALLENGE_TTL_MS;
+exports.challengeIsFresh = challengeIsFresh;
+exports.counterVerdict = counterVerdict;
+exports.isStepUpAction = isStepUpAction;
+exports.relyingPartyId = relyingPartyId;
+exports.stepUpActionFor = stepUpActionFor;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/webauthnPolicy/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../../src/services/webauthnPolicy/index.ts"],"sourcesContent":["/**\n * What a passkey is allowed to prove, and for how long.\n *\n * A session cookie is a bearer token: whoever holds the bytes is you. A passkey\n * is a private key in the device's secure enclave that never leaves it, so the\n * cookie stops being the only thing between a stolen phone and this machine.\n * The cookie does not go away, because a WebSocket cannot run a ceremony per\n * frame; what changes is that the cookie is short-lived, re-mintable with a\n * gesture rather than a QR, and insufficient on its own for the actions below.\n *\n * The crypto lives in the adapter. This file is the policy: which actions need\n * a fresh signature, how long a challenge is good for, and when a counter says\n * the credential has been cloned.\n */\n\n/**\n * Actions that need a fresh gesture even from a live session.\n *\n * These are escalation paths rather than ordinary prompting or tool approval:\n * credentials redirect machine traffic, sessions run code in a selected directory,\n * repository writes change future sessions, and live MCP operations may start local\n * processes or contact remote servers.\n */\nexport const STEP_UP_ACTIONS = [\n  'provider.login',\n  'provider.logout',\n  'session.create',\n  'settings.write',\n  'mcp.discover',\n  'mcp.authorize',\n  'computer-use.activate',\n] as const;\n\nexport type StepUpAction = (typeof STEP_UP_ACTIONS)[number];\n\n/** Short enough that a captured challenge is useless, long enough for a slow Face ID. */\nexport const STEP_UP_CHALLENGE_TTL_MS = 60_000;\n/** A registration or sign-in ceremony the user has to complete. */\nexport const CEREMONY_TTL_MS = 120_000;\n\n/**\n * Which action, if any, a request is attempting.\n *\n * Matched here rather than at each route so the list of gated operations is one\n * readable table instead of three call sites that can drift apart. Anything not\n * named is not gated, which is the safe default only because the gate is an\n * addition to the session check rather than a replacement for it.\n */\nconst GATED_ROUTES: readonly { method: string; pattern: RegExp; action: StepUpAction }[] = [\n  { method: 'POST', pattern: /^\\/api\\/workspaces$/u, action: 'session.create' },\n  {\n    method: 'POST',\n    // Reviving a recorded session starts an agent in a directory, so it is gated\n    // exactly as creating one is.\n    pattern: /^\\/api\\/workspaces\\/[^/]+\\/(?:resume|sessions(?:\\/[^/]+\\/(?:resume|revive))?)$/u,\n    action: 'session.create',\n  },\n  // The git new-session dialog starts a worktree session, which runs code in a directory.\n  { method: 'POST', pattern: /^\\/api\\/workspaces\\/[^/]+\\/plugins\\/git\\/sessions$/u, action: 'session.create' },\n  { method: 'POST', pattern: /^\\/api\\/plugins\\/doompi\\/logins(?:\\/[^/]+\\/answer)?$/u, action: 'provider.login' },\n  { method: 'DELETE', pattern: /^\\/api\\/plugins\\/doompi\\/providers\\/[^/]+$/u, action: 'provider.logout' },\n  {\n    method: 'PUT',\n    pattern: /^\\/api(?:\\/workspaces\\/[^/]+)?\\/settings\\/(?:value|repository\\/selection|images)$/u,\n    action: 'settings.write',\n  },\n  {\n    method: 'POST',\n    pattern: /^\\/api\\/workspaces\\/[^/]+\\/plugins\\/mcp\\/repository\\/discover$/u,\n    action: 'mcp.discover',\n  },\n  {\n    method: 'POST',\n    pattern: /^\\/api\\/workspaces\\/[^/]+\\/plugins\\/mcp\\/repository\\/authorize$/u,\n    action: 'mcp.authorize',\n  },\n  {\n    method: 'DELETE',\n    pattern: /^\\/api\\/workspaces\\/[^/]+\\/plugins\\/mcp\\/repository\\/authorize\\/[^/]+$/u,\n    action: 'mcp.authorize',\n  },\n  {\n    method: 'POST',\n    pattern: /^\\/api\\/workspaces\\/[^/]+\\/sessions\\/[^/]+\\/plugins\\/computer-use\\/activate$/u,\n    action: 'computer-use.activate',\n  },\n];\nexport function stepUpActionFor(method: string, path: string): StepUpAction | undefined {\n  const wanted = method.toUpperCase();\n  return GATED_ROUTES.find((route) => route.method === wanted && route.pattern.test(path))?.action;\n}\n\nexport function isStepUpAction(value: unknown): value is StepUpAction {\n  return typeof value === 'string' && (STEP_UP_ACTIONS as readonly string[]).includes(value);\n}\n\nexport interface StoredCredential {\n  /** Opaque handle for display and revocation. */\n  id: string;\n  /** The authenticator's credential id, base64url, as WebAuthn reports it. */\n  credentialId: string;\n  /** Base64url public key; the private half never leaves the device. */\n  publicKey: string;\n  /** Signature counter, for clone detection. */\n  counter: number;\n  transports: string[];\n  label: string;\n  createdAt: number;\n  lastUsedAt: number;\n}\n\nexport type CounterVerdict = 'ok' | 'clone-suspected';\n\n/**\n * Whether a signature counter moved the way a real authenticator moves it.\n *\n * A counter that stays at zero means the authenticator does not implement one,\n * which is common and not a signal. A counter that goes backwards or repeats\n * while claiming to count means two things are signing with the same key, which\n * is the definition of a cloned credential.\n */\nexport function counterVerdict(stored: number, presented: number): CounterVerdict {\n  if (stored === 0 && presented === 0) return 'ok';\n  return presented > stored ? 'ok' : 'clone-suspected';\n}\n\n/** Whether a ceremony or step-up challenge is still live. */\nexport function challengeIsFresh(issuedAt: number, now: number, ttlMs: number): boolean {\n  return now - issuedAt < ttlMs;\n}\n\n/** A quick tunnel's domain; its hostname rotates on every start. */\nconst ROTATING_SUFFIX = '.trycloudflare.com';\n/** Dotted-quad, and the bracketed form a URL uses for v6. */\nconst IPV4 = /^\\d{1,3}(?:\\.\\d{1,3}){3}$/u;\n\n/**\n * The relying party id a passkey is bound to.\n *\n * Derived from the configured tunnel hostname and nothing else, never from a\n * request header: `rpID` is the entire scope of a credential, so a caller who\n * could influence it could mint credentials against somebody else's origin.\n *\n * Three things are refused rather than accepted and regretted later:\n *\n * - A quick tunnel, whose hostname rotates on every start, so a passkey\n *   registered now would silently stop working on the next one.\n * - An IP address, which WebAuthn does not accept as a relying party id at all;\n *   registering against one fails in the browser rather than here, which is a\n *   much worse place to find out.\n * - Anything without a dot, which cannot be a public tunnel hostname.\n */\nexport function relyingPartyId(publicOrigin: string | undefined): string | undefined {\n  if (publicOrigin === undefined) return undefined;\n  let host: string;\n  try {\n    host = new URL(publicOrigin).hostname.toLowerCase();\n  } catch {\n    return undefined;\n  }\n  if (host.endsWith(ROTATING_SUFFIX)) return undefined;\n  if (IPV4.test(host) || host.startsWith('[')) return undefined;\n  if (!host.includes('.')) return undefined;\n  return host;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,kBAAkB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAKA,MAAa,2BAA2B;;AAExC,MAAa,kBAAkB;;;;;;;;;AAU/B,MAAM,eAAqF;CACzF;EAAE,QAAQ;EAAQ,SAAS;EAAwB,QAAQ;CAAiB;CAC5E;EACE,QAAQ;EAGR,SAAS;EACT,QAAQ;CACV;CAEA;EAAE,QAAQ;EAAQ,SAAS;EAAuD,QAAQ;CAAiB;CAC3G;EAAE,QAAQ;EAAQ,SAAS;EAAyD,QAAQ;CAAiB;CAC7G;EAAE,QAAQ;EAAU,SAAS;EAA+C,QAAQ;CAAkB;CACtG;EACE,QAAQ;EACR,SAAS;EACT,QAAQ;CACV;CACA;EACE,QAAQ;EACR,SAAS;EACT,QAAQ;CACV;CACA;EACE,QAAQ;EACR,SAAS;EACT,QAAQ;CACV;CACA;EACE,QAAQ;EACR,SAAS;EACT,QAAQ;CACV;CACA;EACE,QAAQ;EACR,SAAS;EACT,QAAQ;CACV;AACF;AACA,SAAgB,gBAAgB,QAAgB,MAAwC;CACtF,MAAM,SAAS,OAAO,YAAY;CAClC,OAAO,aAAa,MAAM,UAAU,MAAM,WAAW,UAAU,MAAM,QAAQ,KAAK,IAAI,CAAC,CAAC,EAAE;AAC5F;AAEA,SAAgB,eAAe,OAAuC;CACpE,OAAO,OAAO,UAAU,YAAa,gBAAsC,SAAS,KAAK;AAC3F;;;;;;;;;AA2BA,SAAgB,eAAe,QAAgB,WAAmC;CAChF,IAAI,WAAW,KAAK,cAAc,GAAG,OAAO;CAC5C,OAAO,YAAY,SAAS,OAAO;AACrC;;AAGA,SAAgB,iBAAiB,UAAkB,KAAa,OAAwB;CACtF,OAAO,MAAM,WAAW;AAC1B;;AAGA,MAAM,kBAAkB;;AAExB,MAAM,OAAO;;;;;;;;;;;;;;;;;AAkBb,SAAgB,eAAe,cAAsD;CACnF,IAAI,iBAAiB,KAAA,GAAW,OAAO,KAAA;CACvC,IAAI;CACJ,IAAI;EACF,OAAO,IAAI,IAAI,YAAY,CAAC,CAAC,SAAS,YAAY;CACpD,QAAQ;EACN;CACF;CACA,IAAI,KAAK,SAAS,eAAe,GAAG,OAAO,KAAA;CAC3C,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,WAAW,GAAG,GAAG,OAAO,KAAA;CACpD,IAAI,CAAC,KAAK,SAAS,GAAG,GAAG,OAAO,KAAA;CAChC,OAAO;AACT"}

package/dist/src/services/webauthnPolicy/index.d.mts

@@ -0,0 +1,41 @@
+//#region src/services/webauthnPolicy/index.d.ts
+/**
+ * What a passkey is allowed to prove, and for how long.
+ *
+ * A session cookie is a bearer token: whoever holds the bytes is you. A passkey
+ * is a private key in the device's secure enclave that never leaves it, so the
+ * cookie stops being the only thing between a stolen phone and this machine.
+ * The cookie does not go away, because a WebSocket cannot run a ceremony per
+ * frame; what changes is that the cookie is short-lived, re-mintable with a
+ * gesture rather than a QR, and insufficient on its own for the actions below.
+ *
+ * The crypto lives in the adapter. This file is the policy: which actions need
+ * a fresh signature, how long a challenge is good for, and when a counter says
+ * the credential has been cloned.
+ */
+/**
+ * Actions that need a fresh gesture even from a live session.
+ *
+ * These are escalation paths rather than ordinary prompting or tool approval:
+ * credentials redirect machine traffic, sessions run code in a selected directory,
+ * repository writes change future sessions, and live MCP operations may start local
+ * processes or contact remote servers.
+ */
+export declare const STEP_UP_ACTIONS: readonly ['provider.login', 'provider.logout', 'session.create', 'settings.write', 'mcp.discover', 'mcp.authorize', 'computer-use.activate'];
+export type StepUpAction = (typeof STEP_UP_ACTIONS)[number];
+export interface StoredCredential {
+  /** Opaque handle for display and revocation. */
+  id: string;
+  /** The authenticator's credential id, base64url, as WebAuthn reports it. */
+  credentialId: string;
+  /** Base64url public key; the private half never leaves the device. */
+  publicKey: string;
+  /** Signature counter, for clone detection. */
+  counter: number;
+  transports: string[];
+  label: string;
+  createdAt: number;
+  lastUsedAt: number;
+}
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/services/webauthnPolicy/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/webauthnPolicy/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;qBAuBa;YAUD,uBAAuB;iBA+DlB;;EAEf;;EAEA;;EAEA;;EAEA;EACA;EACA;EACA;EACA"}

package/dist/src/services/webauthnPolicy/index.mjs

@@ -0,0 +1,156 @@
+//#region src/services/webauthnPolicy/index.ts
+/**
+* What a passkey is allowed to prove, and for how long.
+*
+* A session cookie is a bearer token: whoever holds the bytes is you. A passkey
+* is a private key in the device's secure enclave that never leaves it, so the
+* cookie stops being the only thing between a stolen phone and this machine.
+* The cookie does not go away, because a WebSocket cannot run a ceremony per
+* frame; what changes is that the cookie is short-lived, re-mintable with a
+* gesture rather than a QR, and insufficient on its own for the actions below.
+*
+* The crypto lives in the adapter. This file is the policy: which actions need
+* a fresh signature, how long a challenge is good for, and when a counter says
+* the credential has been cloned.
+*/
+/**
+* Actions that need a fresh gesture even from a live session.
+*
+* These are escalation paths rather than ordinary prompting or tool approval:
+* credentials redirect machine traffic, sessions run code in a selected directory,
+* repository writes change future sessions, and live MCP operations may start local
+* processes or contact remote servers.
+*/
+const STEP_UP_ACTIONS = [
+	"provider.login",
+	"provider.logout",
+	"session.create",
+	"settings.write",
+	"mcp.discover",
+	"mcp.authorize",
+	"computer-use.activate"
+];
+/** Short enough that a captured challenge is useless, long enough for a slow Face ID. */
+const STEP_UP_CHALLENGE_TTL_MS = 6e4;
+/** A registration or sign-in ceremony the user has to complete. */
+const CEREMONY_TTL_MS = 12e4;
+/**
+* Which action, if any, a request is attempting.
+*
+* Matched here rather than at each route so the list of gated operations is one
+* readable table instead of three call sites that can drift apart. Anything not
+* named is not gated, which is the safe default only because the gate is an
+* addition to the session check rather than a replacement for it.
+*/
+const GATED_ROUTES = [
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces$/u,
+		action: "session.create"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces\/[^/]+\/(?:resume|sessions(?:\/[^/]+\/(?:resume|revive))?)$/u,
+		action: "session.create"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces\/[^/]+\/plugins\/git\/sessions$/u,
+		action: "session.create"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/plugins\/doompi\/logins(?:\/[^/]+\/answer)?$/u,
+		action: "provider.login"
+	},
+	{
+		method: "DELETE",
+		pattern: /^\/api\/plugins\/doompi\/providers\/[^/]+$/u,
+		action: "provider.logout"
+	},
+	{
+		method: "PUT",
+		pattern: /^\/api(?:\/workspaces\/[^/]+)?\/settings\/(?:value|repository\/selection|images)$/u,
+		action: "settings.write"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces\/[^/]+\/plugins\/mcp\/repository\/discover$/u,
+		action: "mcp.discover"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces\/[^/]+\/plugins\/mcp\/repository\/authorize$/u,
+		action: "mcp.authorize"
+	},
+	{
+		method: "DELETE",
+		pattern: /^\/api\/workspaces\/[^/]+\/plugins\/mcp\/repository\/authorize\/[^/]+$/u,
+		action: "mcp.authorize"
+	},
+	{
+		method: "POST",
+		pattern: /^\/api\/workspaces\/[^/]+\/sessions\/[^/]+\/plugins\/computer-use\/activate$/u,
+		action: "computer-use.activate"
+	}
+];
+function stepUpActionFor(method, path) {
+	const wanted = method.toUpperCase();
+	return GATED_ROUTES.find((route) => route.method === wanted && route.pattern.test(path))?.action;
+}
+function isStepUpAction(value) {
+	return typeof value === "string" && STEP_UP_ACTIONS.includes(value);
+}
+/**
+* Whether a signature counter moved the way a real authenticator moves it.
+*
+* A counter that stays at zero means the authenticator does not implement one,
+* which is common and not a signal. A counter that goes backwards or repeats
+* while claiming to count means two things are signing with the same key, which
+* is the definition of a cloned credential.
+*/
+function counterVerdict(stored, presented) {
+	if (stored === 0 && presented === 0) return "ok";
+	return presented > stored ? "ok" : "clone-suspected";
+}
+/** Whether a ceremony or step-up challenge is still live. */
+function challengeIsFresh(issuedAt, now, ttlMs) {
+	return now - issuedAt < ttlMs;
+}
+/** A quick tunnel's domain; its hostname rotates on every start. */
+const ROTATING_SUFFIX = ".trycloudflare.com";
+/** Dotted-quad, and the bracketed form a URL uses for v6. */
+const IPV4 = /^\d{1,3}(?:\.\d{1,3}){3}$/u;
+/**
+* The relying party id a passkey is bound to.
+*
+* Derived from the configured tunnel hostname and nothing else, never from a
+* request header: `rpID` is the entire scope of a credential, so a caller who
+* could influence it could mint credentials against somebody else's origin.
+*
+* Three things are refused rather than accepted and regretted later:
+*
+* - A quick tunnel, whose hostname rotates on every start, so a passkey
+*   registered now would silently stop working on the next one.
+* - An IP address, which WebAuthn does not accept as a relying party id at all;
+*   registering against one fails in the browser rather than here, which is a
+*   much worse place to find out.
+* - Anything without a dot, which cannot be a public tunnel hostname.
+*/
+function relyingPartyId(publicOrigin) {
+	if (publicOrigin === void 0) return void 0;
+	let host;
+	try {
+		host = new URL(publicOrigin).hostname.toLowerCase();
+	} catch {
+		return;
+	}
+	if (host.endsWith(ROTATING_SUFFIX)) return void 0;
+	if (IPV4.test(host) || host.startsWith("[")) return void 0;
+	if (!host.includes(".")) return void 0;
+	return host;
+}
+//#endregion
+export { CEREMONY_TTL_MS, STEP_UP_ACTIONS, STEP_UP_CHALLENGE_TTL_MS, challengeIsFresh, counterVerdict, isStepUpAction, relyingPartyId, stepUpActionFor };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/webauthnPolicy/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/webauthnPolicy/index.ts"],"sourcesContent":["/**\n * What a passkey is allowed to prove, and for how long.\n *\n * A session cookie is a bearer token: whoever holds the bytes is you. A passkey\n * is a private key in the device's secure enclave that never leaves it, so the\n * cookie stops being the only thing between a stolen phone and this machine.\n * The cookie does not go away, because a WebSocket cannot run a ceremony per\n * frame; what changes is that the cookie is short-lived, re-mintable with a\n * gesture rather than a QR, and insufficient on its own for the actions below.\n *\n * The crypto lives in the adapter. This file is the policy: which actions need\n * a fresh signature, how long a challenge is good for, and when a counter says\n * the credential has been cloned.\n */\n\n/**\n * Actions that need a fresh gesture even from a live session.\n *\n * These are escalation paths rather than ordinary prompting or tool approval:\n * credentials redirect machine traffic, sessions run code in a selected directory,\n * repository writes change future sessions, and live MCP operations may start local\n * processes or contact remote servers.\n */\nexport const STEP_UP_ACTIONS = [\n  'provider.login',\n  'provider.logout',\n  'session.create',\n  'settings.write',\n  'mcp.discover',\n  'mcp.authorize',\n  'computer-use.activate',\n] as const;\n\nexport type StepUpAction = (typeof STEP_UP_ACTIONS)[number];\n\n/** Short enough that a captured challenge is useless, long enough for a slow Face ID. */\nexport const STEP_UP_CHALLENGE_TTL_MS = 60_000;\n/** A registration or sign-in ceremony the user has to complete. */\nexport const CEREMONY_TTL_MS = 120_000;\n\n/**\n * Which action, if any, a request is attempting.\n *\n * Matched here rather than at each route so the list of gated operations is one\n * readable table instead of three call sites that can drift apart. Anything not\n * named is not gated, which is the safe default only because the gate is an\n * addition to the session check rather than a replacement for it.\n */\nconst GATED_ROUTES: readonly { method: string; pattern: RegExp; action: StepUpAction }[] = [\n  { method: 'POST', pattern: /^\\/api\\/workspaces$/u, action: 'session.create' },\n  {\n    method: 'POST',\n    // Reviving a recorded session starts an agent in a directory, so it is gated\n    // exactly as creating one is.\n    pattern: /^\\/api\\/workspaces\\/[^/]+\\/(?:resume|sessions(?:\\/[^/]+\\/(?:resume|revive))?)$/u,\n    action: 'session.create',\n  },\n  // The git new-session dialog starts a worktree session, which runs code in a directory.\n  { method: 'POST', pattern: /^\\/api\\/workspaces\\/[^/]+\\/plugins\\/git\\/sessions$/u, action: 'session.create' },\n  { method: 'POST', pattern: /^\\/api\\/plugins\\/doompi\\/logins(?:\\/[^/]+\\/answer)?$/u, action: 'provider.login' },\n  { method: 'DELETE', pattern: /^\\/api\\/plugins\\/doompi\\/providers\\/[^/]+$/u, action: 'provider.logout' },\n  {\n    method: 'PUT',\n    pattern: /^\\/api(?:\\/workspaces\\/[^/]+)?\\/settings\\/(?:value|repository\\/selection|images)$/u,\n    action: 'settings.write',\n  },\n  {\n    method: 'POST',\n    pattern: /^\\/api\\/workspaces\\/[^/]+\\/plugins\\/mcp\\/repository\\/discover$/u,\n    action: 'mcp.discover',\n  },\n  {\n    method: 'POST',\n    pattern: /^\\/api\\/workspaces\\/[^/]+\\/plugins\\/mcp\\/repository\\/authorize$/u,\n    action: 'mcp.authorize',\n  },\n  {\n    method: 'DELETE',\n    pattern: /^\\/api\\/workspaces\\/[^/]+\\/plugins\\/mcp\\/repository\\/authorize\\/[^/]+$/u,\n    action: 'mcp.authorize',\n  },\n  {\n    method: 'POST',\n    pattern: /^\\/api\\/workspaces\\/[^/]+\\/sessions\\/[^/]+\\/plugins\\/computer-use\\/activate$/u,\n    action: 'computer-use.activate',\n  },\n];\nexport function stepUpActionFor(method: string, path: string): StepUpAction | undefined {\n  const wanted = method.toUpperCase();\n  return GATED_ROUTES.find((route) => route.method === wanted && route.pattern.test(path))?.action;\n}\n\nexport function isStepUpAction(value: unknown): value is StepUpAction {\n  return typeof value === 'string' && (STEP_UP_ACTIONS as readonly string[]).includes(value);\n}\n\nexport interface StoredCredential {\n  /** Opaque handle for display and revocation. */\n  id: string;\n  /** The authenticator's credential id, base64url, as WebAuthn reports it. */\n  credentialId: string;\n  /** Base64url public key; the private half never leaves the device. */\n  publicKey: string;\n  /** Signature counter, for clone detection. */\n  counter: number;\n  transports: string[];\n  label: string;\n  createdAt: number;\n  lastUsedAt: number;\n}\n\nexport type CounterVerdict = 'ok' | 'clone-suspected';\n\n/**\n * Whether a signature counter moved the way a real authenticator moves it.\n *\n * A counter that stays at zero means the authenticator does not implement one,\n * which is common and not a signal. A counter that goes backwards or repeats\n * while claiming to count means two things are signing with the same key, which\n * is the definition of a cloned credential.\n */\nexport function counterVerdict(stored: number, presented: number): CounterVerdict {\n  if (stored === 0 && presented === 0) return 'ok';\n  return presented > stored ? 'ok' : 'clone-suspected';\n}\n\n/** Whether a ceremony or step-up challenge is still live. */\nexport function challengeIsFresh(issuedAt: number, now: number, ttlMs: number): boolean {\n  return now - issuedAt < ttlMs;\n}\n\n/** A quick tunnel's domain; its hostname rotates on every start. */\nconst ROTATING_SUFFIX = '.trycloudflare.com';\n/** Dotted-quad, and the bracketed form a URL uses for v6. */\nconst IPV4 = /^\\d{1,3}(?:\\.\\d{1,3}){3}$/u;\n\n/**\n * The relying party id a passkey is bound to.\n *\n * Derived from the configured tunnel hostname and nothing else, never from a\n * request header: `rpID` is the entire scope of a credential, so a caller who\n * could influence it could mint credentials against somebody else's origin.\n *\n * Three things are refused rather than accepted and regretted later:\n *\n * - A quick tunnel, whose hostname rotates on every start, so a passkey\n *   registered now would silently stop working on the next one.\n * - An IP address, which WebAuthn does not accept as a relying party id at all;\n *   registering against one fails in the browser rather than here, which is a\n *   much worse place to find out.\n * - Anything without a dot, which cannot be a public tunnel hostname.\n */\nexport function relyingPartyId(publicOrigin: string | undefined): string | undefined {\n  if (publicOrigin === undefined) return undefined;\n  let host: string;\n  try {\n    host = new URL(publicOrigin).hostname.toLowerCase();\n  } catch {\n    return undefined;\n  }\n  if (host.endsWith(ROTATING_SUFFIX)) return undefined;\n  if (IPV4.test(host) || host.startsWith('[')) return undefined;\n  if (!host.includes('.')) return undefined;\n  return host;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAuBA,MAAa,kBAAkB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAKA,MAAa,2BAA2B;;AAExC,MAAa,kBAAkB;;;;;;;;;AAU/B,MAAM,eAAqF;CACzF;EAAE,QAAQ;EAAQ,SAAS;EAAwB,QAAQ;CAAiB;CAC5E;EACE,QAAQ;EAGR,SAAS;EACT,QAAQ;CACV;CAEA;EAAE,QAAQ;EAAQ,SAAS;EAAuD,QAAQ;CAAiB;CAC3G;EAAE,QAAQ;EAAQ,SAAS;EAAyD,QAAQ;CAAiB;CAC7G;EAAE,QAAQ;EAAU,SAAS;EAA+C,QAAQ;CAAkB;CACtG;EACE,QAAQ;EACR,SAAS;EACT,QAAQ;CACV;CACA;EACE,QAAQ;EACR,SAAS;EACT,QAAQ;CACV;CACA;EACE,QAAQ;EACR,SAAS;EACT,QAAQ;CACV;CACA;EACE,QAAQ;EACR,SAAS;EACT,QAAQ;CACV;CACA;EACE,QAAQ;EACR,SAAS;EACT,QAAQ;CACV;AACF;AACA,SAAgB,gBAAgB,QAAgB,MAAwC;CACtF,MAAM,SAAS,OAAO,YAAY;CAClC,OAAO,aAAa,MAAM,UAAU,MAAM,WAAW,UAAU,MAAM,QAAQ,KAAK,IAAI,CAAC,CAAC,EAAE;AAC5F;AAEA,SAAgB,eAAe,OAAuC;CACpE,OAAO,OAAO,UAAU,YAAa,gBAAsC,SAAS,KAAK;AAC3F;;;;;;;;;AA2BA,SAAgB,eAAe,QAAgB,WAAmC;CAChF,IAAI,WAAW,KAAK,cAAc,GAAG,OAAO;CAC5C,OAAO,YAAY,SAAS,OAAO;AACrC;;AAGA,SAAgB,iBAAiB,UAAkB,KAAa,OAAwB;CACtF,OAAO,MAAM,WAAW;AAC1B;;AAGA,MAAM,kBAAkB;;AAExB,MAAM,OAAO;;;;;;;;;;;;;;;;;AAkBb,SAAgB,eAAe,cAAsD;CACnF,IAAI,iBAAiB,KAAA,GAAW,OAAO,KAAA;CACvC,IAAI;CACJ,IAAI;EACF,OAAO,IAAI,IAAI,YAAY,CAAC,CAAC,SAAS,YAAY;CACpD,QAAQ;EACN;CACF;CACA,IAAI,KAAK,SAAS,eAAe,GAAG,OAAO,KAAA;CAC3C,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,WAAW,GAAG,GAAG,OAAO,KAAA;CACpD,IAAI,CAAC,KAAK,SAAS,GAAG,GAAG,OAAO,KAAA;CAChC,OAAO;AACT"}

package/dist/src/services/workspaceRegistry/index.cjs

@@ -0,0 +1,151 @@
+const require_runtime = require("../../../_virtual/_rolldown/runtime.cjs");
+const require_syncLocation = require("../../../syncLocation.cjs");
+let node_crypto = require("node:crypto");
+node_crypto = require_runtime.__toESM(node_crypto, 1);
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+//#region src/services/workspaceRegistry/index.ts
+const REGISTRY_FILE = "workspaces.json";
+/** Kept in the repository's git data, which moves with the checkout and is shared by its worktrees. */
+const WORKSPACE_MARKER_FILE = "doompi-workspace-id";
+const DIRECTORY_MODE = 448;
+const FILE_MODE = 384;
+function parseRecord(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+	const record = value;
+	if (typeof record.id !== "string" || record.id === "") return void 0;
+	if (typeof record.root !== "string" || !node_path.default.isAbsolute(record.root)) return void 0;
+	const name = typeof record.name === "string" && record.name.trim() !== "" ? record.name : void 0;
+	return {
+		id: record.id,
+		root: record.root,
+		...name === void 0 ? {} : { name }
+	};
+}
+/** Durable workspace membership, independent of whether a workspace can currently mount. */
+function createWorkspaceRegistry(options) {
+	const notice = options.onNotice ?? (() => {});
+	const filePath = node_path.default.join(options.directory, REGISTRY_FILE);
+	const load = () => {
+		let raw;
+		try {
+			raw = node_fs.default.readFileSync(filePath, "utf8");
+		} catch (error) {
+			if (error instanceof Error && "code" in error && error.code === "ENOENT") return [];
+			notice(`${filePath} could not be read: ${error instanceof Error ? error.message : String(error)}`);
+			return [];
+		}
+		let parsed;
+		try {
+			parsed = JSON.parse(raw);
+		} catch {
+			notice(`workspaces at ${filePath} are not valid JSON; none will be restored`);
+			return [];
+		}
+		if (!Array.isArray(parsed)) {
+			notice(`workspaces at ${filePath} are not a list; none will be restored`);
+			return [];
+		}
+		const records = [];
+		for (const entry of parsed) {
+			const record = parseRecord(entry);
+			if (record === void 0) notice(`workspaces at ${filePath} contain an unusable entry; skipping it`);
+			else if (!records.some((candidate) => candidate.id === record.id)) records.push(record);
+		}
+		return records;
+	};
+	let current = load();
+	const persist = (next) => {
+		const temporary = `${filePath}.${String(process.pid)}.tmp`;
+		try {
+			node_fs.default.mkdirSync(options.directory, {
+				recursive: true,
+				mode: DIRECTORY_MODE
+			});
+			node_fs.default.writeFileSync(temporary, `${JSON.stringify(next, void 0, 2)}\n`, { mode: FILE_MODE });
+			node_fs.default.renameSync(temporary, filePath);
+		} catch (error) {
+			try {
+				node_fs.default.rmSync(temporary, { force: true });
+			} catch (cleanupError) {
+				notice(`${temporary} could not be removed: ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}`);
+			}
+			throw new Error(`${filePath} could not be saved`, { cause: error });
+		}
+	};
+	return {
+		list: () => current,
+		add(record) {
+			if (record.id === "" || !node_path.default.isAbsolute(record.root)) throw new Error("Invalid workspace record.");
+			const next = current.some((held) => held.id === record.id) ? current.map((held) => held.id === record.id ? record : held) : [...current, record];
+			persist(next);
+			current = next;
+		},
+		remove(id) {
+			const next = current.filter((held) => held.id !== id);
+			if (next.length === current.length) return;
+			persist(next);
+			current = next;
+		}
+	};
+}
+/** The workspace id recorded in a checkout's git data, if any. */
+function readWorkspaceMarker(checkoutRoot) {
+	const commonDirectory = require_syncLocation.gitCommonDirectory(checkoutRoot);
+	if (commonDirectory === void 0) return void 0;
+	try {
+		const id = node_fs.default.readFileSync(node_path.default.join(commonDirectory, WORKSPACE_MARKER_FILE), "utf8").trim();
+		return id === "" ? void 0 : id;
+	} catch (error) {
+		if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
+		throw error;
+	}
+}
+/**
+* Records a workspace id in a checkout's git data so the workspace keeps its id when the
+* repository moves. A checkout without git data has nowhere to keep it; returns false.
+*/
+function writeWorkspaceMarker(checkoutRoot, id) {
+	const commonDirectory = require_syncLocation.gitCommonDirectory(checkoutRoot);
+	if (commonDirectory === void 0) return false;
+	node_fs.default.writeFileSync(node_path.default.join(commonDirectory, WORKSPACE_MARKER_FILE), `${id}\n`, { mode: FILE_MODE });
+	return true;
+}
+/**
+* Decides which workspace a checkout belongs to. An exact root match wins. Otherwise the id
+* in the repository's git data names the workspace: a checkout of a workspace whose root still
+* exists joins it, and one whose recorded root is gone is that workspace, moved. Anything else
+* is a new workspace.
+*/
+function identifyWorkspace(input) {
+	const exact = input.records.find((record) => record.root === input.checkoutRoot);
+	if (exact !== void 0) return {
+		id: exact.id,
+		root: exact.root,
+		moved: false
+	};
+	const owner = input.marker === void 0 ? void 0 : input.records.find((record) => record.id === input.marker);
+	if (owner !== void 0) return (input.exists ?? node_fs.default.existsSync)(owner.root) ? {
+		id: owner.id,
+		root: owner.root,
+		moved: false
+	} : {
+		id: owner.id,
+		root: input.checkoutRoot,
+		moved: true
+	};
+	return {
+		id: input.marker ?? (input.newId ?? node_crypto.default.randomUUID)(),
+		root: input.checkoutRoot,
+		moved: false
+	};
+}
+//#endregion
+exports.createWorkspaceRegistry = createWorkspaceRegistry;
+exports.identifyWorkspace = identifyWorkspace;
+exports.readWorkspaceMarker = readWorkspaceMarker;
+exports.writeWorkspaceMarker = writeWorkspaceMarker;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/workspaceRegistry/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["path","fs","gitCommonDirectory","crypto"],"sources":["../../../../src/services/workspaceRegistry/index.ts"],"sourcesContent":["import crypto from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { gitCommonDirectory } from '../syncLocation';\n\nconst REGISTRY_FILE = 'workspaces.json';\n/** Kept in the repository's git data, which moves with the checkout and is shared by its worktrees. */\nconst WORKSPACE_MARKER_FILE = 'doompi-workspace-id';\nconst DIRECTORY_MODE = 0o700;\nconst FILE_MODE = 0o600;\n\nexport interface WorkspaceRecord {\n  id: string;\n  root: string;\n  /** Display name chosen when the workspace was added; the folder basename stands in when absent. */\n  name?: string;\n}\n\nexport interface WorkspaceRegistry {\n  list(): readonly WorkspaceRecord[];\n  add(record: WorkspaceRecord): void;\n  remove(id: string): void;\n}\n\nexport interface WorkspaceRegistryOptions {\n  directory: string;\n  onNotice?: (message: string) => void;\n}\n\nfunction parseRecord(value: unknown): WorkspaceRecord | undefined {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) return undefined;\n  const record = value as Record<string, unknown>;\n  if (typeof record.id !== 'string' || record.id === '') return undefined;\n  if (typeof record.root !== 'string' || !path.isAbsolute(record.root)) return undefined;\n  const name = typeof record.name === 'string' && record.name.trim() !== '' ? record.name : undefined;\n  return { id: record.id, root: record.root, ...(name === undefined ? {} : { name }) };\n}\n\n/** Durable workspace membership, independent of whether a workspace can currently mount. */\nexport function createWorkspaceRegistry(options: WorkspaceRegistryOptions): WorkspaceRegistry {\n  const notice = options.onNotice ?? ((): void => {});\n  const filePath = path.join(options.directory, REGISTRY_FILE);\n\n  const load = (): WorkspaceRecord[] => {\n    let raw: string;\n    try {\n      raw = fs.readFileSync(filePath, 'utf8');\n    } catch (error) {\n      if (error instanceof Error && 'code' in error && error.code === 'ENOENT') return [];\n      notice(`${filePath} could not be read: ${error instanceof Error ? error.message : String(error)}`);\n      return [];\n    }\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(raw);\n    } catch {\n      notice(`workspaces at ${filePath} are not valid JSON; none will be restored`);\n      return [];\n    }\n    if (!Array.isArray(parsed)) {\n      notice(`workspaces at ${filePath} are not a list; none will be restored`);\n      return [];\n    }\n    const records: WorkspaceRecord[] = [];\n    for (const entry of parsed) {\n      const record = parseRecord(entry);\n      if (record === undefined) notice(`workspaces at ${filePath} contain an unusable entry; skipping it`);\n      else if (!records.some((candidate) => candidate.id === record.id)) records.push(record);\n    }\n    return records;\n  };\n\n  let current = load();\n\n  const persist = (next: readonly WorkspaceRecord[]): void => {\n    const temporary = `${filePath}.${String(process.pid)}.tmp`;\n    try {\n      fs.mkdirSync(options.directory, { recursive: true, mode: DIRECTORY_MODE });\n      fs.writeFileSync(temporary, `${JSON.stringify(next, undefined, 2)}\\n`, { mode: FILE_MODE });\n      fs.renameSync(temporary, filePath);\n    } catch (error) {\n      try {\n        fs.rmSync(temporary, { force: true });\n      } catch (cleanupError) {\n        notice(\n          `${temporary} could not be removed: ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}`,\n        );\n      }\n      throw new Error(`${filePath} could not be saved`, { cause: error });\n    }\n  };\n\n  return {\n    list: () => current,\n    add(record) {\n      if (record.id === '' || !path.isAbsolute(record.root)) throw new Error('Invalid workspace record.');\n      // Replaced in place: registry order is the tie-break when checkouts are matched to workspaces.\n      const next = current.some((held) => held.id === record.id)\n        ? current.map((held) => (held.id === record.id ? record : held))\n        : [...current, record];\n      persist(next);\n      current = next;\n    },\n    remove(id) {\n      const next = current.filter((held) => held.id !== id);\n      if (next.length === current.length) return;\n      persist(next);\n      current = next;\n    },\n  };\n}\n\n/** The workspace id recorded in a checkout's git data, if any. */\nexport function readWorkspaceMarker(checkoutRoot: string): string | undefined {\n  const commonDirectory = gitCommonDirectory(checkoutRoot);\n  if (commonDirectory === undefined) return undefined;\n  try {\n    const id = fs.readFileSync(path.join(commonDirectory, WORKSPACE_MARKER_FILE), 'utf8').trim();\n    return id === '' ? undefined : id;\n  } catch (error) {\n    if (error instanceof Error && 'code' in error && error.code === 'ENOENT') return undefined;\n    throw error;\n  }\n}\n\n/**\n * Records a workspace id in a checkout's git data so the workspace keeps its id when the\n * repository moves. A checkout without git data has nowhere to keep it; returns false.\n */\nexport function writeWorkspaceMarker(checkoutRoot: string, id: string): boolean {\n  const commonDirectory = gitCommonDirectory(checkoutRoot);\n  if (commonDirectory === undefined) return false;\n  fs.writeFileSync(path.join(commonDirectory, WORKSPACE_MARKER_FILE), `${id}\\n`, { mode: FILE_MODE });\n  return true;\n}\n\nexport interface WorkspaceIdentity {\n  readonly id: string;\n  /** The workspace root. Differs from the checkout when the checkout joins an existing workspace. */\n  readonly root: string;\n  /** The recorded root no longer exists and this checkout takes its place. */\n  readonly moved: boolean;\n}\n\n/**\n * Decides which workspace a checkout belongs to. An exact root match wins. Otherwise the id\n * in the repository's git data names the workspace: a checkout of a workspace whose root still\n * exists joins it, and one whose recorded root is gone is that workspace, moved. Anything else\n * is a new workspace.\n */\nexport function identifyWorkspace(input: {\n  readonly records: readonly WorkspaceRecord[];\n  readonly checkoutRoot: string;\n  readonly marker?: string;\n  readonly exists?: (root: string) => boolean;\n  readonly newId?: () => string;\n}): WorkspaceIdentity {\n  const exact = input.records.find((record) => record.root === input.checkoutRoot);\n  if (exact !== undefined) return { id: exact.id, root: exact.root, moved: false };\n  const owner = input.marker === undefined ? undefined : input.records.find((record) => record.id === input.marker);\n  if (owner !== undefined) {\n    const exists = input.exists ?? fs.existsSync;\n    return exists(owner.root)\n      ? { id: owner.id, root: owner.root, moved: false }\n      : { id: owner.id, root: input.checkoutRoot, moved: true };\n  }\n  return { id: input.marker ?? (input.newId ?? crypto.randomUUID)(), root: input.checkoutRoot, moved: false };\n}\n"],"mappings":";;;;;;;;;AAMA,MAAM,gBAAgB;;AAEtB,MAAM,wBAAwB;AAC9B,MAAM,iBAAiB;AACvB,MAAM,YAAY;AAoBlB,SAAS,YAAY,OAA6C;CAChE,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,GAAG,OAAO,KAAA;CAChF,MAAM,SAAS;CACf,IAAI,OAAO,OAAO,OAAO,YAAY,OAAO,OAAO,IAAI,OAAO,KAAA;CAC9D,IAAI,OAAO,OAAO,SAAS,YAAY,CAACA,UAAAA,QAAK,WAAW,OAAO,IAAI,GAAG,OAAO,KAAA;CAC7E,MAAM,OAAO,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,KAAK,MAAM,KAAK,OAAO,OAAO,KAAA;CAC1F,OAAO;EAAE,IAAI,OAAO;EAAI,MAAM,OAAO;EAAM,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;CAAG;AACrF;;AAGA,SAAgB,wBAAwB,SAAsD;CAC5F,MAAM,SAAS,QAAQ,mBAAyB,CAAC;CACjD,MAAM,WAAWA,UAAAA,QAAK,KAAK,QAAQ,WAAW,aAAa;CAE3D,MAAM,aAAgC;EACpC,IAAI;EACJ,IAAI;GACF,MAAMC,QAAAA,QAAG,aAAa,UAAU,MAAM;EACxC,SAAS,OAAO;GACd,IAAI,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,UAAU,OAAO,CAAC;GAClF,OAAO,GAAG,SAAS,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG;GACjG,OAAO,CAAC;EACV;EACA,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,GAAG;EACzB,QAAQ;GACN,OAAO,iBAAiB,SAAS,2CAA2C;GAC5E,OAAO,CAAC;EACV;EACA,IAAI,CAAC,MAAM,QAAQ,MAAM,GAAG;GAC1B,OAAO,iBAAiB,SAAS,uCAAuC;GACxE,OAAO,CAAC;EACV;EACA,MAAM,UAA6B,CAAC;EACpC,KAAK,MAAM,SAAS,QAAQ;GAC1B,MAAM,SAAS,YAAY,KAAK;GAChC,IAAI,WAAW,KAAA,GAAW,OAAO,iBAAiB,SAAS,wCAAwC;QAC9F,IAAI,CAAC,QAAQ,MAAM,cAAc,UAAU,OAAO,OAAO,EAAE,GAAG,QAAQ,KAAK,MAAM;EACxF;EACA,OAAO;CACT;CAEA,IAAI,UAAU,KAAK;CAEnB,MAAM,WAAW,SAA2C;EAC1D,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,QAAQ,GAAG,EAAE;EACrD,IAAI;GACF,QAAA,QAAG,UAAU,QAAQ,WAAW;IAAE,WAAW;IAAM,MAAM;GAAe,CAAC;GACzE,QAAA,QAAG,cAAc,WAAW,GAAG,KAAK,UAAU,MAAM,KAAA,GAAW,CAAC,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;GAC1F,QAAA,QAAG,WAAW,WAAW,QAAQ;EACnC,SAAS,OAAO;GACd,IAAI;IACF,QAAA,QAAG,OAAO,WAAW,EAAE,OAAO,KAAK,CAAC;GACtC,SAAS,cAAc;IACrB,OACE,GAAG,UAAU,yBAAyB,wBAAwB,QAAQ,aAAa,UAAU,OAAO,YAAY,GAClH;GACF;GACA,MAAM,IAAI,MAAM,GAAG,SAAS,sBAAsB,EAAE,OAAO,MAAM,CAAC;EACpE;CACF;CAEA,OAAO;EACL,YAAY;EACZ,IAAI,QAAQ;GACV,IAAI,OAAO,OAAO,MAAM,CAACD,UAAAA,QAAK,WAAW,OAAO,IAAI,GAAG,MAAM,IAAI,MAAM,2BAA2B;GAElG,MAAM,OAAO,QAAQ,MAAM,SAAS,KAAK,OAAO,OAAO,EAAE,IACrD,QAAQ,KAAK,SAAU,KAAK,OAAO,OAAO,KAAK,SAAS,IAAK,IAC7D,CAAC,GAAG,SAAS,MAAM;GACvB,QAAQ,IAAI;GACZ,UAAU;EACZ;EACA,OAAO,IAAI;GACT,MAAM,OAAO,QAAQ,QAAQ,SAAS,KAAK,OAAO,EAAE;GACpD,IAAI,KAAK,WAAW,QAAQ,QAAQ;GACpC,QAAQ,IAAI;GACZ,UAAU;EACZ;CACF;AACF;;AAGA,SAAgB,oBAAoB,cAA0C;CAC5E,MAAM,kBAAkBE,qBAAAA,mBAAmB,YAAY;CACvD,IAAI,oBAAoB,KAAA,GAAW,OAAO,KAAA;CAC1C,IAAI;EACF,MAAM,KAAKD,QAAAA,QAAG,aAAaD,UAAAA,QAAK,KAAK,iBAAiB,qBAAqB,GAAG,MAAM,CAAC,CAAC,KAAK;EAC3F,OAAO,OAAO,KAAK,KAAA,IAAY;CACjC,SAAS,OAAO;EACd,IAAI,iBAAiB,SAAS,UAAU,SAAS,MAAM,SAAS,UAAU,OAAO,KAAA;EACjF,MAAM;CACR;AACF;;;;;AAMA,SAAgB,qBAAqB,cAAsB,IAAqB;CAC9E,MAAM,kBAAkBE,qBAAAA,mBAAmB,YAAY;CACvD,IAAI,oBAAoB,KAAA,GAAW,OAAO;CAC1C,QAAA,QAAG,cAAcF,UAAAA,QAAK,KAAK,iBAAiB,qBAAqB,GAAG,GAAG,GAAG,KAAK,EAAE,MAAM,UAAU,CAAC;CAClG,OAAO;AACT;;;;;;;AAgBA,SAAgB,kBAAkB,OAMZ;CACpB,MAAM,QAAQ,MAAM,QAAQ,MAAM,WAAW,OAAO,SAAS,MAAM,YAAY;CAC/E,IAAI,UAAU,KAAA,GAAW,OAAO;EAAE,IAAI,MAAM;EAAI,MAAM,MAAM;EAAM,OAAO;CAAM;CAC/E,MAAM,QAAQ,MAAM,WAAW,KAAA,IAAY,KAAA,IAAY,MAAM,QAAQ,MAAM,WAAW,OAAO,OAAO,MAAM,MAAM;CAChH,IAAI,UAAU,KAAA,GAEZ,QADe,MAAM,UAAUC,QAAAA,QAAG,WAAA,CACpB,MAAM,IAAI,IACpB;EAAE,IAAI,MAAM;EAAI,MAAM,MAAM;EAAM,OAAO;CAAM,IAC/C;EAAE,IAAI,MAAM;EAAI,MAAM,MAAM;EAAc,OAAO;CAAK;CAE5D,OAAO;EAAE,IAAI,MAAM,WAAW,MAAM,SAASE,YAAAA,QAAO,WAAA,CAAY;EAAG,MAAM,MAAM;EAAc,OAAO;CAAM;AAC5G"}

package/dist/src/services/workspaceRegistry/index.d.mts

@@ -0,0 +1,47 @@
+//#region src/services/workspaceRegistry/index.d.ts
+export interface WorkspaceRecord {
+  id: string;
+  root: string;
+  /** Display name chosen when the workspace was added; the folder basename stands in when absent. */
+  name?: string;
+}
+export interface WorkspaceRegistry {
+  list(): readonly WorkspaceRecord[];
+  add(record: WorkspaceRecord): void;
+  remove(id: string): void;
+}
+export interface WorkspaceRegistryOptions {
+  directory: string;
+  onNotice?: (message: string) => void;
+}
+/** Durable workspace membership, independent of whether a workspace can currently mount. */
+export declare function createWorkspaceRegistry(options: WorkspaceRegistryOptions): WorkspaceRegistry;
+/** The workspace id recorded in a checkout's git data, if any. */
+export declare function readWorkspaceMarker(checkoutRoot: string): string | undefined;
+/**
+ * Records a workspace id in a checkout's git data so the workspace keeps its id when the
+ * repository moves. A checkout without git data has nowhere to keep it; returns false.
+ */
+export declare function writeWorkspaceMarker(checkoutRoot: string, id: string): boolean;
+export interface WorkspaceIdentity {
+  readonly id: string;
+  /** The workspace root. Differs from the checkout when the checkout joins an existing workspace. */
+  readonly root: string;
+  /** The recorded root no longer exists and this checkout takes its place. */
+  readonly moved: boolean;
+}
+/**
+ * Decides which workspace a checkout belongs to. An exact root match wins. Otherwise the id
+ * in the repository's git data names the workspace: a checkout of a workspace whose root still
+ * exists joins it, and one whose recorded root is gone is that workspace, moved. Anything else
+ * is a new workspace.
+ */
+export declare function identifyWorkspace(input: {
+  readonly records: readonly WorkspaceRecord[];
+  readonly checkoutRoot: string;
+  readonly marker?: string;
+  readonly exists?: (root: string) => boolean;
+  readonly newId?: () => string;
+}): WorkspaceIdentity;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/services/workspaceRegistry/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/workspaceRegistry/index.ts"],"mappings":";iBAYiB;EACf;EACA;;EAEA;;iBAGe;EACf,iBAAiB;EACjB,IAAI,QAAQ;EACZ,OAAO;;iBAGQ;EACf;EACA,YAAY;;;wBAaE,wBAAwB,SAAS,2BAA2B;;wBA0E5D,oBAAoB;;;;;wBAgBpB,qBAAqB,sBAAsB;iBAO1C;WACN;;WAEA;;WAEA;;;;;;;;wBASK,kBAAkB;WACvB,kBAAkB;WAClB;WACA;WACA,UAAU;WACV;IACP"}