@andrew.ng/symbion 0.1.0

package/apps/daemon/dist/llm/remoteProvider.js

@@ -0,0 +1,88 @@
+/**
+ * RemoteProvider — stub-grade in v1 per STATE §9 ("doesn't need a finished
+ * provider-switch UI" but the interface/seam must be real, not a TODO).
+ * Implements the same LlmProvider interface against Anthropic's Messages API
+ * shape, as a concrete placeholder for "some remote vendor."
+ *
+ * The API key is read EXCLUSIVELY from process.env.SYMBION_REMOTE_LLM_API_KEY
+ * at call time — never persisted to disk, never accepted as a request param,
+ * never read from apps/web. If unset, generate() throws LlmError("auth", ...)
+ * immediately, with NO network call attempted (TC-D7).
+ */
+import { LlmError } from "./types.js";
+export const REMOTE_API_KEY_ENV_VAR = "SYMBION_REMOTE_LLM_API_KEY";
+const REMOTE_DEFAULT_BASE_URL = "https://api.anthropic.com/v1/messages";
+const REMOTE_MODELS = [
+    { id: "claude-haiku-4-5", label: "Claude Haiku 4.5 (nhanh)", tier: "fast" },
+    { id: "claude-sonnet-4-5", label: "Claude Sonnet 4.5 (cân bằng)", tier: "balanced" },
+    { id: "claude-opus-4-1", label: "Claude Opus 4.1 (tốt nhất)", tier: "best" },
+];
+export class RemoteProvider {
+    id = "remote";
+    baseUrl;
+    constructor(opts = {}) {
+        this.baseUrl = opts.baseUrl ?? REMOTE_DEFAULT_BASE_URL;
+    }
+    listModels() {
+        return REMOTE_MODELS;
+    }
+    async generate(req) {
+        const apiKey = process.env[REMOTE_API_KEY_ENV_VAR];
+        if (!apiKey) {
+            throw new LlmError("auth", "Thiếu hoặc sai cấu hình API key cho remote provider.");
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), req.timeoutMs);
+        try {
+            let res;
+            try {
+                res = await fetch(this.baseUrl, {
+                    method: "POST",
+                    headers: {
+                        "Content-Type": "application/json",
+                        "x-api-key": apiKey,
+                        "anthropic-version": "2023-06-01",
+                    },
+                    body: JSON.stringify({
+                        model: req.model,
+                        system: req.systemPrompt,
+                        max_tokens: 4096,
+                        messages: [{ role: "user", content: req.userPrompt }],
+                    }),
+                    signal: controller.signal,
+                });
+            }
+            catch {
+                if (controller.signal.aborted) {
+                    throw new LlmError("timeout", `Quá thời gian chờ (${req.timeoutMs}ms) khi gọi remote provider.`);
+                }
+                throw new LlmError("network", "Lỗi mạng khi gọi remote provider.");
+            }
+            if (res.status === 401 || res.status === 403) {
+                throw new LlmError("auth", "Thiếu hoặc sai cấu hình API key cho remote provider.");
+            }
+            if (res.status === 429) {
+                throw new LlmError("rate-limit", "Bị giới hạn tần suất gọi — thử lại sau.");
+            }
+            if (!res.ok) {
+                throw new LlmError("invalid-response", `Remote provider trả về lỗi HTTP ${res.status}.`);
+            }
+            let json;
+            try {
+                json = (await res.json());
+            }
+            catch {
+                throw new LlmError("invalid-response", "Phản hồi không hợp lệ từ remote provider (không phải JSON).");
+            }
+            const text = json.content?.[0]?.text;
+            if (typeof text !== "string") {
+                throw new LlmError("invalid-response", "Phản hồi không hợp lệ từ remote provider.");
+            }
+            return { text };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+//# sourceMappingURL=remoteProvider.js.map

package/apps/daemon/dist/llm/remoteProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteProvider.js","sourceRoot":"","sources":["../../src/llm/remoteProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAA0F,MAAM,YAAY,CAAC;AAE9H,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAEnE,MAAM,uBAAuB,GAAG,uCAAuC,CAAC;AAExE,MAAM,aAAa,GAAqB;IACtC,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,MAAM,EAAE;IAC3E,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,8BAA8B,EAAE,IAAI,EAAE,UAAU,EAAE;IACpF,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,MAAM,EAAE;CAC7E,CAAC;AAOF,MAAM,OAAO,cAAc;IAChB,EAAE,GAAG,QAAiB,CAAC;IACf,OAAO,CAAS;IAEjC,YAAY,OAA8B,EAAE;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,uBAAuB,CAAC;IACzD,CAAC;IAED,UAAU;QACR,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,sDAAsD,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;oBAC9B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,WAAW,EAAE,MAAM;wBACnB,mBAAmB,EAAE,YAAY;qBAClC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,MAAM,EAAE,GAAG,CAAC,YAAY;wBACxB,UAAU,EAAE,IAAI;wBAChB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;qBACtD,CAAC;oBACF,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,sBAAsB,GAAG,CAAC,SAAS,8BAA8B,CAAC,CAAC;gBACnG,CAAC;gBACD,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,sDAAsD,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,mCAAmC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3F,CAAC;YAED,IAAI,IAA4C,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2C,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,6DAA6D,CAAC,CAAC;YACxG,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;YACtF,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}

package/apps/daemon/dist/llm/secrets.d.ts

@@ -0,0 +1,55 @@
+export declare const CURRENT_PROVIDERS_SCHEMA_VERSION: 1;
+export type ApiKeyProviderId = "openai" | "anthropic" | "gemini";
+export type ProviderId = "ollama" | ApiKeyProviderId;
+export interface ProvidersConfig {
+    schemaVersion: 1;
+    /** null = no active provider selected yet (fresh install / all keys cleared). */
+    activeProviderId: ProviderId | null;
+    providers: Partial<Record<ApiKeyProviderId, {
+        apiKey: string;
+        model: string;
+    }>>;
+}
+declare const DEFAULT_PROVIDERS_CONFIG: ProvidersConfig;
+export declare function providersConfigPath(): string;
+/**
+ * loadProvidersConfig — read + parse + validate. Fail-soft contract per
+ * STATE §3.3: missing file, corrupt JSON, missing/wrong schemaVersion, or a
+ * future (greater than current) schemaVersion ALL resolve to the default
+ * empty config — NEVER throws, NEVER crashes the daemon. Does NOT eagerly
+ * create the file on a missing-file read (deliberate departure from
+ * loadGlobalConfig()'s eager-write behavior — see STATE §3.3 rationale).
+ */
+export declare function loadProvidersConfig(): ProvidersConfig;
+/**
+ * saveProvidersConfig — atomic temp->rename write (reuses store.ts's exact
+ * primitive), with 0o600 file permissions (owner read/write only).
+ */
+export declare function saveProvidersConfig(config: ProvidersConfig): void;
+export declare class ProviderNotConfiguredError extends Error {
+    constructor(providerId: string);
+}
+/** setProviderKey — upserts one provider's entry. Never logs `apiKey`. */
+export declare function setProviderKey(providerId: ApiKeyProviderId, apiKey: string, model: string): ProvidersConfig;
+/**
+ * clearProviderKey — removes one provider's stored key/model. If it was
+ * active, resets activeProviderId to null (NOT a fallback to ollama — STATE
+ * §5's explicit "no automatic fallback" rule extends here).
+ */
+export declare function clearProviderKey(providerId: ApiKeyProviderId): ProvidersConfig;
+/**
+ * setActiveProvider — validates the provider has a stored key (or is
+ * "ollama", which needs none) before accepting; throws
+ * ProviderNotConfiguredError otherwise (surfaced as RPC invalid-params by the
+ * handler, not a silent no-op).
+ */
+export declare function setActiveProvider(providerId: ProviderId): ProvidersConfig;
+/**
+ * maskKey — "sk-...ab12" style masking (last 4 chars only, fixed prefix
+ * ellipsis). The ONLY function permitted to touch a raw key for display.
+ * Never throws; never returns the raw string unmasked, even for very short
+ * inputs (TC-S7).
+ */
+export declare function maskKey(apiKey: string): string;
+export { DEFAULT_PROVIDERS_CONFIG };
+//# sourceMappingURL=secrets.d.ts.map

package/apps/daemon/dist/llm/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/llm/secrets.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAE3D,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AACjE,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,gBAAgB,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,CAAC,CAAC;IACjB,iFAAiF;IACjF,gBAAgB,EAAE,UAAU,GAAG,IAAI,CAAC;IACpC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CACjF;AAED,QAAA,MAAM,wBAAwB,EAAE,eAI/B,CAAC;AAOF,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAYD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,eAAe,CA+DrD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAEjE;AAED,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,UAAU,EAAE,MAAM;CAI/B;AAED,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,CAK3G;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,GAAG,eAAe,CAQ9E;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,UAAU,GAAG,eAAe,CAQzE;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAM9C;AAED,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/apps/daemon/dist/llm/secrets.js

@@ -0,0 +1,167 @@
+/**
+ * secrets.ts — owns the on-disk `providers.json` file (API keys + active
+ * provider selection) under the user-level config dir, per
+ * docs/loops/multi-provider-settings-STATE.md §3.2/§3.3.
+ *
+ * Daemon-only. Never imported by packages/core or apps/web. Plaintext-at-rest
+ * is the locked v1 decision (flagged to /cso, see STATE §9) — this module
+ * adds only an OS file-permission guard (0o600) on top of that, no encryption.
+ *
+ * `maskKey()` is the ONLY function in this codebase permitted to touch a raw
+ * key for display purposes — every RPC result shape must pass keys through
+ * it before crossing into JSON (handlers.ts never serializes a raw apiKey).
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { globalConfigDir, atomicWriteJson } from "../store/store.js";
+export const CURRENT_PROVIDERS_SCHEMA_VERSION = 1;
+const DEFAULT_PROVIDERS_CONFIG = {
+    schemaVersion: CURRENT_PROVIDERS_SCHEMA_VERSION,
+    activeProviderId: null,
+    providers: {},
+};
+function defaultConfig() {
+    // Fresh object each call — callers mutate the returned config freely.
+    return { schemaVersion: CURRENT_PROVIDERS_SCHEMA_VERSION, activeProviderId: null, providers: {} };
+}
+export function providersConfigPath() {
+    return join(globalConfigDir(), "providers.json");
+}
+const API_KEY_PROVIDER_IDS = new Set(["openai", "anthropic", "gemini"]);
+function isApiKeyProviderId(id) {
+    return API_KEY_PROVIDER_IDS.has(id);
+}
+function isValidProviderId(id) {
+    return typeof id === "string" && (id === "ollama" || isApiKeyProviderId(id));
+}
+/**
+ * loadProvidersConfig — read + parse + validate. Fail-soft contract per
+ * STATE §3.3: missing file, corrupt JSON, missing/wrong schemaVersion, or a
+ * future (greater than current) schemaVersion ALL resolve to the default
+ * empty config — NEVER throws, NEVER crashes the daemon. Does NOT eagerly
+ * create the file on a missing-file read (deliberate departure from
+ * loadGlobalConfig()'s eager-write behavior — see STATE §3.3 rationale).
+ */
+export function loadProvidersConfig() {
+    const absPath = providersConfigPath();
+    if (!existsSync(absPath)) {
+        return defaultConfig();
+    }
+    let rawText;
+    try {
+        rawText = readFileSync(absPath, "utf-8");
+    }
+    catch (err) {
+        console.warn(`[symbion] providers.json không thể đọc được, dùng cấu hình rỗng mặc định: ${err.message}`);
+        return defaultConfig();
+    }
+    let raw;
+    try {
+        raw = JSON.parse(rawText);
+    }
+    catch {
+        console.warn("[symbion] providers.json chứa JSON không hợp lệ — dùng cấu hình rỗng mặc định.");
+        return defaultConfig();
+    }
+    if (typeof raw !== "object" || raw === null) {
+        console.warn("[symbion] providers.json có cấu trúc không hợp lệ — dùng cấu hình rỗng mặc định.");
+        return defaultConfig();
+    }
+    const record = raw;
+    const schemaVersion = record["schemaVersion"];
+    if (typeof schemaVersion !== "number") {
+        console.warn("[symbion] providers.json thiếu schemaVersion — dùng cấu hình rỗng mặc định.");
+        return defaultConfig();
+    }
+    if (schemaVersion > CURRENT_PROVIDERS_SCHEMA_VERSION) {
+        // Distinguishable warning from the "corrupt" cases above, per STATE §3.3 case 4 —
+        // written by a future Symbion version; refuse to silently downgrade-interpret it.
+        console.warn(`[symbion] providers.json có schemaVersion=${schemaVersion} (mới hơn phiên bản hiện tại) — dùng cấu hình rỗng mặc định.`);
+        return defaultConfig();
+    }
+    const activeProviderIdRaw = record["activeProviderId"];
+    const activeProviderId = activeProviderIdRaw === null
+        ? null
+        : isValidProviderId(activeProviderIdRaw)
+            ? activeProviderIdRaw
+            : null;
+    const providersRaw = record["providers"];
+    const providers = {};
+    if (typeof providersRaw === "object" && providersRaw !== null) {
+        for (const [id, value] of Object.entries(providersRaw)) {
+            if (!isApiKeyProviderId(id))
+                continue;
+            if (typeof value !== "object" || value === null)
+                continue;
+            const entry = value;
+            if (typeof entry["apiKey"] !== "string" || typeof entry["model"] !== "string")
+                continue;
+            providers[id] = { apiKey: entry["apiKey"], model: entry["model"] };
+        }
+    }
+    return { schemaVersion: CURRENT_PROVIDERS_SCHEMA_VERSION, activeProviderId, providers };
+}
+/**
+ * saveProvidersConfig — atomic temp->rename write (reuses store.ts's exact
+ * primitive), with 0o600 file permissions (owner read/write only).
+ */
+export function saveProvidersConfig(config) {
+    atomicWriteJson(providersConfigPath(), config, { mode: 0o600, dirMode: 0o700 });
+}
+export class ProviderNotConfiguredError extends Error {
+    constructor(providerId) {
+        super(`Chưa cấu hình API key cho nhà cung cấp này: ${providerId}`);
+        this.name = "ProviderNotConfiguredError";
+    }
+}
+/** setProviderKey — upserts one provider's entry. Never logs `apiKey`. */
+export function setProviderKey(providerId, apiKey, model) {
+    const config = loadProvidersConfig();
+    config.providers[providerId] = { apiKey, model };
+    saveProvidersConfig(config);
+    return config;
+}
+/**
+ * clearProviderKey — removes one provider's stored key/model. If it was
+ * active, resets activeProviderId to null (NOT a fallback to ollama — STATE
+ * §5's explicit "no automatic fallback" rule extends here).
+ */
+export function clearProviderKey(providerId) {
+    const config = loadProvidersConfig();
+    delete config.providers[providerId];
+    if (config.activeProviderId === providerId) {
+        config.activeProviderId = null;
+    }
+    saveProvidersConfig(config);
+    return config;
+}
+/**
+ * setActiveProvider — validates the provider has a stored key (or is
+ * "ollama", which needs none) before accepting; throws
+ * ProviderNotConfiguredError otherwise (surfaced as RPC invalid-params by the
+ * handler, not a silent no-op).
+ */
+export function setActiveProvider(providerId) {
+    const config = loadProvidersConfig();
+    if (providerId !== "ollama" && !config.providers[providerId]) {
+        throw new ProviderNotConfiguredError(providerId);
+    }
+    config.activeProviderId = providerId;
+    saveProvidersConfig(config);
+    return config;
+}
+/**
+ * maskKey — "sk-...ab12" style masking (last 4 chars only, fixed prefix
+ * ellipsis). The ONLY function permitted to touch a raw key for display.
+ * Never throws; never returns the raw string unmasked, even for very short
+ * inputs (TC-S7).
+ */
+export function maskKey(apiKey) {
+    if (apiKey.length <= 4) {
+        return "*".repeat(apiKey.length);
+    }
+    const last4 = apiKey.slice(-4);
+    return `...${last4}`;
+}
+export { DEFAULT_PROVIDERS_CONFIG };
+//# sourceMappingURL=secrets.js.map

package/apps/daemon/dist/llm/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/llm/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAErE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAU,CAAC;AAY3D,MAAM,wBAAwB,GAAoB;IAChD,aAAa,EAAE,gCAAgC;IAC/C,gBAAgB,EAAE,IAAI;IACtB,SAAS,EAAE,EAAE;CACd,CAAC;AAEF,SAAS,aAAa;IACpB,sEAAsE;IACtE,OAAO,EAAE,aAAa,EAAE,gCAAgC,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,gBAAgB,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE7F,SAAS,kBAAkB,CAAC,EAAU;IACpC,OAAO,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAW;IACpC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,6EAA8E,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACpH,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;QAC/F,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QACjG,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,aAAa,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9C,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;QAC5F,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,aAAa,GAAG,gCAAgC,EAAE,CAAC;QACrD,kFAAkF;QAClF,kFAAkF;QAClF,OAAO,CAAC,IAAI,CACV,6CAA6C,aAAa,8DAA8D,CACzH,CAAC;QACF,OAAO,aAAa,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,mBAAmB,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACvD,MAAM,gBAAgB,GACpB,mBAAmB,KAAK,IAAI;QAC1B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,iBAAiB,CAAC,mBAAmB,CAAC;YACtC,CAAC,CAAC,mBAAmB;YACrB,CAAC,CAAC,IAAI,CAAC;IAEb,MAAM,YAAY,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,SAAS,GAAiC,EAAE,CAAC;IACnD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC9D,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAuC,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAAE,SAAS;YACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAS;YAC1D,MAAM,KAAK,GAAG,KAAgC,CAAC;YAC/C,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ;gBAAE,SAAS;YACxF,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,gCAAgC,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAuB;IACzD,eAAe,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAY,UAAkB;QAC5B,KAAK,CAAC,+CAA+C,UAAU,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,UAA4B,EAAE,MAAc,EAAE,KAAa;IACxF,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjD,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAA4B;IAC3D,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,gBAAgB,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC;IACjC,CAAC;IACD,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAsB;IACtD,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,IAAI,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,0BAA0B,CAAC,UAAU,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,CAAC,gBAAgB,GAAG,UAAU,CAAC;IACrC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,MAAc;IACpC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,MAAM,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,OAAO,EAAE,wBAAwB,EAAE,CAAC"}

package/apps/daemon/dist/llm/types.d.ts

@@ -0,0 +1,50 @@
+/**
+ * LlmProvider — the seam every model-inference call in apps/daemon goes through.
+ * No fs/network code lives in packages/core; this interface and its concrete
+ * adapters (ollamaProvider.ts, anthropicProvider.ts, openaiProvider.ts,
+ * geminiProvider.ts) are daemon-only, per docs/loops/auto-generate-body-STATE.md
+ * §10.1 and widened per docs/loops/multi-provider-settings-STATE.md §3.2.
+ */
+export interface LlmGenerateRequest {
+    systemPrompt: string;
+    userPrompt: string;
+    /** provider-specific model id. */
+    model: string;
+    /** budget for the whole request, enforced via AbortController (not setTimeout-only). */
+    timeoutMs: number;
+    /** caps output tokens when set — used by status-check pings to bound cost; omitted means provider default. */
+    maxTokens?: number;
+}
+export interface LlmGenerateResult {
+    text: string;
+}
+export type LlmErrorCode = "timeout" | "network" | "auth" | "rate-limit" | "invalid-response" | "provider-not-running"
+/** active provider has no key/never configured — distinct from "auth" (key present but
+ *  rejected by the provider). New in docs/loops/multi-provider-settings-STATE.md §3.2. */
+ | "not-configured" | "unknown";
+export declare class LlmError extends Error {
+    code: LlmErrorCode;
+    constructor(code: LlmErrorCode, message: string);
+}
+export interface LlmModelOption {
+    id: string;
+    label: string;
+    /** Optional — per docs/loops/ollama-dynamic-models-STATE.md §6.3, dynamically-discovered
+     *  Ollama models with no confidently-parseable parameter-count hint in their tag name have
+     *  no tier (honest "unknown" rather than a guessed default). The 3 cloud providers' static
+     *  entries always set this. */
+    tier?: "fast" | "balanced" | "best";
+}
+export interface LlmProvider {
+    id: "ollama" | "openai" | "anthropic" | "gemini";
+    /**
+     * Static/hardcoded for the 3 cloud providers (openai/anthropic/gemini) — per STATE §9 of
+     * multi-provider-settings-STATE.md, unchanged. For Ollama, this now performs a real
+     * `GET /api/tags` network call against the local Ollama instance (per
+     * docs/loops/ollama-dynamic-models-STATE.md §6.1/§6.2) — async for ALL 4 providers so the
+     * interface has one shape, no special-casing by provider id at any call site.
+     */
+    listModels(): Promise<LlmModelOption[]>;
+    generate(req: LlmGenerateRequest): Promise<LlmGenerateResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/apps/daemon/dist/llm/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/llm/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAC;IAClB,8GAA8G;IAC9G,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,YAAY,GACpB,SAAS,GACT,SAAS,GACT,MAAM,GACN,YAAY,GACZ,kBAAkB,GAClB,sBAAsB;AACxB;0FAC0F;GACxF,gBAAgB,GAChB,SAAS,CAAC;AAEd,qBAAa,QAAS,SAAQ,KAAK;IACjC,IAAI,EAAE,YAAY,CAAC;gBACP,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM;CAKhD;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd;;;mCAG+B;IAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;IACjD;;;;;;OAMG;IACH,UAAU,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/D"}

package/apps/daemon/dist/llm/types.js

@@ -0,0 +1,16 @@
+/**
+ * LlmProvider — the seam every model-inference call in apps/daemon goes through.
+ * No fs/network code lives in packages/core; this interface and its concrete
+ * adapters (ollamaProvider.ts, anthropicProvider.ts, openaiProvider.ts,
+ * geminiProvider.ts) are daemon-only, per docs/loops/auto-generate-body-STATE.md
+ * §10.1 and widened per docs/loops/multi-provider-settings-STATE.md §3.2.
+ */
+export class LlmError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "LlmError";
+    }
+}
+//# sourceMappingURL=types.js.map

package/apps/daemon/dist/llm/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/llm/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA6BH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,IAAI,CAAe;IACnB,YAAY,IAAkB,EAAE,OAAe;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF"}

package/apps/daemon/dist/net/findOpenPort.d.ts

@@ -0,0 +1,26 @@
+/**
+ * findOpenPort — E15 port-scan retry. Extracted as a standalone, named,
+ * exported function with an injectable `tryBind` so it's unit-testable
+ * without binding real sockets (the default `tryBind` does bind a real
+ * socket via `startServer`/an http server in production call sites).
+ */
+export interface FindOpenPortOptions {
+    /** max number of ports to try (inclusive of the start port) before giving up. */
+    maxAttempts?: number;
+}
+/** Error code Node uses for "address already in use". */
+export declare const EADDRINUSE = "EADDRINUSE";
+/**
+ * Scans forward from `startPort`, calling `tryBind(port)` for each candidate.
+ * `tryBind` should attempt to bind/listen and resolve with the bound handle,
+ * or reject with an error carrying `.code === "EADDRINUSE"` if the port is
+ * taken (any other rejection is rethrown immediately — not retried).
+ *
+ * Returns `{ port, handle }` for the first port that successfully binds.
+ * Throws if no open port is found within `maxAttempts`.
+ */
+export declare function findOpenPort<T>(startPort: number, tryBind: (port: number) => Promise<T>, options?: FindOpenPortOptions): Promise<{
+    port: number;
+    handle: T;
+}>;
+//# sourceMappingURL=findOpenPort.d.ts.map

package/apps/daemon/dist/net/findOpenPort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"findOpenPort.d.ts","sourceRoot":"","sources":["../../src/net/findOpenPort.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,yDAAyD;AACzD,eAAO,MAAM,UAAU,eAAe,CAAC;AAEvC;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,EACrC,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,CAAC,CAAA;CAAE,CAAC,CAmBtC"}

package/apps/daemon/dist/net/findOpenPort.js

@@ -0,0 +1,37 @@
+/**
+ * findOpenPort — E15 port-scan retry. Extracted as a standalone, named,
+ * exported function with an injectable `tryBind` so it's unit-testable
+ * without binding real sockets (the default `tryBind` does bind a real
+ * socket via `startServer`/an http server in production call sites).
+ */
+/** Error code Node uses for "address already in use". */
+export const EADDRINUSE = "EADDRINUSE";
+/**
+ * Scans forward from `startPort`, calling `tryBind(port)` for each candidate.
+ * `tryBind` should attempt to bind/listen and resolve with the bound handle,
+ * or reject with an error carrying `.code === "EADDRINUSE"` if the port is
+ * taken (any other rejection is rethrown immediately — not retried).
+ *
+ * Returns `{ port, handle }` for the first port that successfully binds.
+ * Throws if no open port is found within `maxAttempts`.
+ */
+export async function findOpenPort(startPort, tryBind, options = {}) {
+    const maxAttempts = options.maxAttempts ?? 20;
+    let port = startPort;
+    for (let attempt = 0; attempt < maxAttempts; attempt++) {
+        try {
+            const handle = await tryBind(port);
+            return { port, handle };
+        }
+        catch (err) {
+            const code = err?.code;
+            if (code === EADDRINUSE) {
+                port += 1;
+                continue;
+            }
+            throw err;
+        }
+    }
+    throw new Error(`Không tìm được cổng trống bắt đầu từ ${startPort} (đã thử ${maxAttempts} cổng).`);
+}
+//# sourceMappingURL=findOpenPort.js.map

package/apps/daemon/dist/net/findOpenPort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findOpenPort.js","sourceRoot":"","sources":["../../src/net/findOpenPort.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,yDAAyD;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC;AAEvC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,OAAqC,EACrC,UAA+B,EAAE;IAEjC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,IAAI,IAAI,GAAG,SAAS,CAAC;IAErB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAAyC,EAAE,IAAI,CAAC;YAC9D,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxB,IAAI,IAAI,CAAC,CAAC;gBACV,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,YAAY,WAAW,SAAS,CAAC,CAAC;AACrG,CAAC"}

package/apps/daemon/dist/rpc/contract.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Shared RPC request/response types — the contract between apps/daemon and apps/web.
+ * The actual shapes live in the type-only `@symbion/rpc-types` package so both
+ * the daemon (Node) and the web client (browser bundle) consume the exact
+ * same definitions with no hand-mirroring / drift risk. This file just
+ * re-exports them for daemon-local call sites that import from
+ * "./contract" (or "../rpc/contract").
+ */
+export type { PingParams, PingResult, BrowseFolderParams, BrowseFolderResult, ValidatePathParams, ValidatePathResult, ListDirParams, ListDirEntry, ListDirResult, MakeDirParams, MakeDirResult, ListProjectsParams, ListProjectsResult, CreateProjectParams, CreateProjectResult, LoadProjectParams, LoadProjectResult, SaveArtifactParams, SaveArtifactResult, DeleteArtifactParams, DeleteArtifactResult, UpdateSettingsParams, UpdateSettingsResult, ScanClaudeDirParams, ScanClaudeDirResult, ImportArtifactsParams, ImportArtifactsResult, ApplyTemplateParams, ApplyTemplateResult, FetchAuthorTemplatesParams, FetchAuthorTemplatesResult, FetchAuthorTemplatesOutcome, RenderParams, RenderResult, ComputeDiffParams, ComputeDiffResult, WriteFileSelection, WriteParams, WriteResult, GitStatusParams, GitStatusResult, RenderRunCommandParams, RenderRunCommandResult, LlmModelOption, ListModelsParams, ListModelsResult, ListModelsOutcome, GenerateBodyParams, GenerateBodyResult, HostEnvironment, InstallInstructions, CheckProviderStatusParams, CheckProviderStatusResult, ProviderId, LlmErrorCode, ProviderDescriptor, ListProvidersParams, ListProvidersResult, SaveProviderKeyParams, SaveProviderKeyResult, ClearProviderKeyParams, ClearProviderKeyResult, SetActiveProviderParams, SetActiveProviderResult, RpcMethod, RpcRequest, RpcErrorBody, } from "@symbion/rpc-types";
+//# sourceMappingURL=contract.d.ts.map

package/apps/daemon/dist/rpc/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/rpc/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,YAAY,EACV,UAAU,EACV,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,aAAa,EACb,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,EAC1B,2BAA2B,EAC3B,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,WAAW,EACX,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,SAAS,EACT,UAAU,EACV,YAAY,GACb,MAAM,oBAAoB,CAAC"}

package/apps/daemon/dist/rpc/contract.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contract.js.map

package/apps/daemon/dist/rpc/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/rpc/contract.ts"],"names":[],"mappings":""}

package/apps/daemon/dist/rpc/guard.d.ts

@@ -0,0 +1,18 @@
+export declare class PathConfinementError extends Error {
+    constructor(message: string);
+}
+/**
+ * resolveConfinedPath — the filesystem analogue of "no DELETE without WHERE".
+ * Resolves `relPath` against `projectRoot` and guarantees the result stays
+ * inside the project root. Rejects:
+ *  - `..` traversal that escapes the root
+ *  - absolute paths (relPath must be relative)
+ *  - symlinks whose real target resolves outside the root (checked on the
+ *    deepest EXISTING ancestor directory, since the leaf file may not exist yet)
+ *
+ * Throws PathConfinementError on any violation. Never returns a path outside root.
+ */
+export declare function resolveConfinedPath(projectRoot: string, relPath: string): string;
+/** Defense-in-depth: ensure a candidate relPath does not contain raw `..` segments at all. */
+export declare function rejectTraversalSegments(relPath: string): void;
+//# sourceMappingURL=guard.d.ts.map

package/apps/daemon/dist/rpc/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/rpc/guard.ts"],"names":[],"mappings":"AAIA,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAoDhF;AAED,8FAA8F;AAC9F,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAK7D"}

package/apps/daemon/dist/rpc/guard.js

@@ -0,0 +1,75 @@
+import { realpathSync, existsSync } from "node:fs";
+import { dirname, isAbsolute, normalize, relative, resolve } from "node:path";
+import { isWindowsStyleAbsolute } from "./pathStyle.js";
+export class PathConfinementError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "PathConfinementError";
+    }
+}
+/**
+ * resolveConfinedPath — the filesystem analogue of "no DELETE without WHERE".
+ * Resolves `relPath` against `projectRoot` and guarantees the result stays
+ * inside the project root. Rejects:
+ *  - `..` traversal that escapes the root
+ *  - absolute paths (relPath must be relative)
+ *  - symlinks whose real target resolves outside the root (checked on the
+ *    deepest EXISTING ancestor directory, since the leaf file may not exist yet)
+ *
+ * Throws PathConfinementError on any violation. Never returns a path outside root.
+ */
+export function resolveConfinedPath(projectRoot, relPath) {
+    // Closes the Windows-style-traversal gap unconditionally for every caller,
+    // regardless of whether that caller also remembers to call
+    // rejectTraversalSegments separately.
+    rejectTraversalSegments(relPath);
+    if (isAbsolute(relPath) || isWindowsStyleAbsolute(relPath)) {
+        throw new PathConfinementError(`Đường dẫn tuyệt đối không được phép: ${relPath}`);
+    }
+    const root = resolve(projectRoot);
+    const candidate = resolve(root, relPath);
+    const normalizedCandidate = normalize(candidate);
+    // Must resolve to a location inside root (or equal to root, which we disallow for files).
+    const rel = relative(root, normalizedCandidate);
+    if (rel.startsWith("..") || isAbsolute(rel)) {
+        throw new PathConfinementError(`Đường dẫn vượt ra ngoài project root: ${relPath}`);
+    }
+    if (rel === "") {
+        throw new PathConfinementError(`Đường dẫn không hợp lệ (trỏ vào chính project root): ${relPath}`);
+    }
+    // Symlink-escape check: walk up from the deepest existing ancestor directory and
+    // verify its realpath is still inside root's realpath. Catches the case where an
+    // intermediate directory is a symlink pointing outside the project.
+    let realRoot;
+    try {
+        realRoot = realpathSync(root);
+    }
+    catch {
+        // project root itself doesn't exist (shouldn't normally happen) — fail closed.
+        throw new PathConfinementError(`Project root không tồn tại: ${root}`);
+    }
+    let probe = dirname(normalizedCandidate);
+    while (probe !== root && probe.length >= root.length) {
+        if (existsSync(probe)) {
+            const realProbe = realpathSync(probe);
+            const relReal = relative(realRoot, realProbe);
+            if (relReal.startsWith("..") || isAbsolute(relReal)) {
+                throw new PathConfinementError(`Symlink trỏ ra ngoài project root: ${relPath}`);
+            }
+            break;
+        }
+        const parent = dirname(probe);
+        if (parent === probe)
+            break;
+        probe = parent;
+    }
+    return normalizedCandidate;
+}
+/** Defense-in-depth: ensure a candidate relPath does not contain raw `..` segments at all. */
+export function rejectTraversalSegments(relPath) {
+    const segments = relPath.split(/[\\/]/);
+    if (segments.includes("..")) {
+        throw new PathConfinementError(`Đường dẫn chứa ".." không được phép: ${relPath}`);
+    }
+}
+//# sourceMappingURL=guard.js.map

package/apps/daemon/dist/rpc/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/rpc/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,OAAe;IACtE,2EAA2E;IAC3E,2DAA2D;IAC3D,sCAAsC;IACtC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEjC,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,mBAAmB,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAEjD,0FAA0F;IAC1F,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,oBAAoB,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAAC,wDAAwD,OAAO,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,iFAAiF;IACjF,iFAAiF;IACjF,oEAAoE;IACpE,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,MAAM,IAAI,oBAAoB,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,KAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACzC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrD,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpD,MAAM,IAAI,oBAAoB,CAC5B,sCAAsC,OAAO,EAAE,CAChD,CAAC;YACJ,CAAC;YACD,MAAM;QACR,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,KAAK;YAAE,MAAM;QAC5B,KAAK,GAAG,MAAM,CAAC;IACjB,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC"}