@akanjs/devkit 3.0.0-beta.1 → 3.0.0-beta.11

package/cloud/cloudApi.ts

@@ -43,6 +43,30 @@ class HttpClient {
   }
 }
 
+/**
+ * A share the control plane just issued. `token` is the connector credential — whoever holds it can become the
+ * origin behind `hostname`, so it is never written to disk or logged, only handed to the agent in memory.
+ */
+export interface TunnelGrant {
+  code: string;
+  hostname: string;
+  url: string;
+  /** The gateway to dial, as `wss://tunnel.akanjs.com`. The control plane names it; the CLI never assumes one. */
+  gatewayUrl: string;
+  token: string;
+  expiresAt: string | null;
+}
+
+export interface TunnelSummary {
+  code: string;
+  hostname: string;
+  url: string;
+  name: string | null;
+  createdAt: string;
+  expiresAt: string | null;
+  connected: boolean;
+}
+
 export class CloudApi {
   readonly #api: HttpClient;
   #accessToken: AccessToken | null = null;
@@ -108,6 +132,17 @@ export class CloudApi {
     this.#api.setHeaders({ Authorization: `Bearer ${this.#accessToken.jwt}` });
     return this.#accessToken;
   }
+  async requestTunnel(input: { name: string; ttlMinutes?: number }): Promise<TunnelGrant> {
+    return await this.#api.post<TunnelGrant>(`/requestTunnel`, input);
+  }
+  /** The generated name of the model's own `inSelf` slice: a hand-written `listTunnels` would collide with it. */
+  async tunnelListInSelf(): Promise<TunnelSummary[]> {
+    return await this.#api.get<TunnelSummary[]>(`/tunnelListInSelf`);
+  }
+  /** Hands the grant back. The CLI calls this "stop", which is what the operator is doing, not what it does. */
+  async revokeTunnel(code: string): Promise<boolean> {
+    return await this.#api.post<boolean>(`/revokeTunnel`, { code });
+  }
   async getRemoteSelf(): Promise<{ id: string; nickname: string } | null> {
     try {
       const data = await this.#api.get<{ id: string; nickname: string }>(`/getRemoteSelf`);

package/executors.ts

@@ -1714,6 +1714,7 @@ export class AppExecutor extends SysExecutor {
       executor: this,
       getPath: (rel) => this.getPath(rel),
       fileExists: (rel) => FileSys.fileExists(this.getPath(rel)),
+      readFile: (rel) => this.readFile(rel),
       writeFile: async (rel, content, opts) => {
         await this.writeFile(rel, content, opts);
       },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akanjs/devkit",
-  "version": "3.0.0-beta.1",
+  "version": "3.0.0-beta.11",
   "sourceType": "module",
   "type": "module",
   "publishConfig": {
@@ -44,7 +44,7 @@
     "@langchain/openai": "^1.4.6",
     "@tailwindcss/node": "^4.3.0",
     "@trapezedev/project": "^7.1.4",
-    "akanjs": "3.0.0-beta.1",
+    "akanjs": "3.0.0-beta.11",
     "chalk": "^5.6.2",
     "commander": "^14.0.3",
     "dayjs": "^1.11.20",

package/subspace.test.ts

@@ -424,6 +424,27 @@ describe("SubspaceConfig", () => {
     ).toThrow(/duplicate subspace/);
   });
 
+  test("refuses two subspaces on one cloud workspace, and takes a declaration with none", () => {
+    expect(
+      () =>
+        new SubspaceConfig({
+          subspaces: [
+            { name: "a", repo: "a.git", apps: ["one"], workspaceId: "project" },
+            { name: "b", repo: "b.git", apps: ["two"], workspaceId: "project" },
+          ],
+        }),
+    ).toThrow(/same workspaceId/);
+    expect(
+      () =>
+        new SubspaceConfig({
+          subspaces: [
+            { name: "a", repo: "a.git", apps: ["one"] },
+            { name: "b", repo: "b.git", apps: ["two"], workspaceId: "project" },
+          ],
+        }),
+    ).not.toThrow();
+  });
+
   test("defaults the pushable branches and rejects anything else", () => {
     const config = new SubspaceConfig({ subspaces: [{ name: "a", repo: "a.git", apps: ["one"] }] });
     expect(config.pushableBranches).toEqual(SubspaceConfig.defaultPushableBranches);

package/subspace.ts

@@ -55,6 +55,17 @@ export interface SubspacePushResult {
   prunedDependencies?: string[];
 }
 
+export interface SubspaceEnvUploadResult {
+  name: string;
+  /** The cloud workspace whose env archive was replaced: the subspace's own, never this workspace's. */
+  workspaceId: string;
+  host: string;
+  outcome: "uploaded" | "cancelled";
+  apps: string[];
+  libs: string[];
+  files: string[];
+}
+
 export interface SubspacePullResult {
   name: string;
   applied: string[];
@@ -100,6 +111,9 @@ export class Subspace {
   get apps() {
     return this.#declaration.apps;
   }
+  get workspaceId() {
+    return this.#declaration.workspaceId;
+  }
   get #remote() {
     return `subspace-${this.#declaration.name}`;
   }
@@ -700,6 +714,25 @@ export function formatSubspacePullResult(result: SubspacePullResult) {
   return sections.join("\n");
 }
 
+export function formatSubspaceEnvUpload(result: SubspaceEnvUploadResult) {
+  const sections = [
+    `Akan Subspace Env Upload — ${result.name}`,
+    `cloud workspace: ${result.workspaceId} · host: ${result.host}`,
+    "",
+    ...(result.outcome === "cancelled"
+      ? ["  cancelled — the subspace's env archive is untouched."]
+      : [
+          `Uploaded (${result.files.length}), replacing that workspace's whole archive:`,
+          "",
+          ...result.files.map((file) => `  ${file}`),
+          "",
+          `  apps: ${result.apps.join(", ")}`,
+          `  libs: ${result.libs.join(", ") || "(none)"}`,
+        ]),
+  ];
+  return sections.join("\n");
+}
+
 export function formatSubspaceDiff(result: SubspaceDiffResult) {
   const total = result.app.files.length + result.libs.files.length;
   const sections = [

package/subspaceConfig.ts

@@ -37,6 +37,7 @@ export class SubspaceConfig {
   #assertValid() {
     const seenNames = new Set<string>();
     const appOwners = new Map<string, string>();
+    const idOwners = new Map<string, string>();
     for (const subspace of this.subspaces) {
       if (!subspace.name || !subspace.repo)
         throw new Error(`${SubspaceConfig.fileName}: every subspace needs a name and a repo`);
@@ -55,6 +56,15 @@ export class SubspaceConfig {
           );
         appOwners.set(app, subspace.name);
       }
+      if (!subspace.workspaceId) continue;
+      const idOwner = idOwners.get(subspace.workspaceId);
+      //* An env upload replaces the cloud workspace's archive whole, so two subspaces sharing one would
+      //* each overwrite the other's values.
+      if (idOwner)
+        throw new Error(
+          `${SubspaceConfig.fileName}: subspaces "${idOwner}" and "${subspace.name}" declare the same workspaceId`,
+        );
+      idOwners.set(subspace.workspaceId, subspace.name);
     }
   }