@andrew.ng/symbion 0.1.0

package/apps/daemon/dist/rpc/handlers.d.ts

@@ -0,0 +1,118 @@
+import { validateAllArtifacts } from "@symbion/core";
+import { RpcError } from "./rpcError.js";
+import type * as contract from "./contract.js";
+export { RpcError };
+export declare const handlers: {
+    ping(_params: contract.PingParams, ctx: {
+        port: number;
+        version: string;
+    }): contract.PingResult;
+    browseFolder(params: contract.BrowseFolderParams): Promise<contract.BrowseFolderResult>;
+    validatePath(params: contract.ValidatePathParams): contract.ValidatePathResult;
+    listDir(params: contract.ListDirParams): contract.ListDirResult;
+    makeDir(params: contract.MakeDirParams): contract.MakeDirResult;
+    listProjects(_params: contract.ListProjectsParams): contract.ListProjectsResult;
+    createProject(params: contract.CreateProjectParams): contract.CreateProjectResult;
+    loadProject(params: contract.LoadProjectParams): contract.LoadProjectResult;
+    saveArtifact(params: contract.SaveArtifactParams): contract.SaveArtifactResult;
+    deleteArtifact(params: contract.DeleteArtifactParams): contract.DeleteArtifactResult;
+    updateSettings(params: contract.UpdateSettingsParams): contract.UpdateSettingsResult;
+    scanClaudeDir(params: contract.ScanClaudeDirParams): contract.ScanClaudeDirResult;
+    importArtifacts(params: contract.ImportArtifactsParams): contract.ImportArtifactsResult;
+    /**
+     * applyTemplate — stages one bundled template (apps/web's static gallery)
+     * into a project's store as a new draft artifact, with server-side
+     * auto-suffix collision resolution. See packages/rpc-types's
+     * ApplyTemplateParams doc comment + docs/loops/templates-marketplace-STATE.md
+     * PLAN §0(b)/§2 for the full rationale (new RPC vs. extending
+     * importArtifacts; TOCTOU; never-block-never-overwrite collision policy).
+     *
+     * Defense-in-depth shape re-validation: the daemon never trusts the
+     * client's `template.kind`/`name`/`description` even though this content
+     * originates from the web app's own bundled, build-time-reviewed data
+     * (not arbitrary external input) — same posture as every other mutating
+     * handler in this file (see saveArtifact/importArtifacts comments above).
+     */
+    applyTemplate(params: contract.ApplyTemplateParams): contract.ApplyTemplateResult;
+    /**
+     * fetchAuthorTemplates — templates-authors v2 extension (PLAN §P2). Looks
+     * up `authorId` in AUTHOR_REGISTRY (packages/core) server-side — never
+     * trusts/reads any client-supplied owner/repo fields, even if a
+     * hand-crafted request sends them (PLAN §P8 SSRF finding #1(a)). An
+     * unknown authorId, or one resolving to a `kind: "bundled"` entry (e.g.
+     * "symbion" — the bundled author can't be routed through the network-fetch
+     * path), is a programming/client-bug error -> thrown RpcError, NOT a
+     * well-formed outcome. A known `kind: "github"` author always resolves
+     * (never throws) to a `FetchAuthorTemplatesOutcome` — every external
+     * failure mode (network/rate-limit/not-found/per-file/parse) is a
+     * well-formed, expected-to-sometimes-fail result, not a daemon bug.
+     */
+    fetchAuthorTemplates(params: contract.FetchAuthorTemplatesParams): Promise<contract.FetchAuthorTemplatesResult>;
+    render(params: contract.RenderParams): contract.RenderResult;
+    computeDiff(params: contract.ComputeDiffParams): contract.ComputeDiffResult;
+    write(params: contract.WriteParams): contract.WriteResult;
+    gitStatus(params: contract.GitStatusParams): contract.GitStatusResult;
+    renderRunCommand(params: contract.RenderRunCommandParams): contract.RenderRunCommandResult;
+    /**
+     * listModels — single source of truth for a provider's model list, so apps/web
+     * never hand-duplicates it (resolves STATE §10.7 Risk R1 per the user's
+     * amendment). For the 3 cloud providers this is still a static, hardcoded,
+     * zero-network-call list (unchanged, AC5). For Ollama, this now performs a real
+     * `GET /api/tags` network call against the local Ollama instance (per
+     * docs/loops/ollama-dynamic-models-STATE.md §6.2/§6.4) — bounded by a 3000ms
+     * timeout, never hangs indefinitely (AC6).
+     *
+     * Three resolved outcomes (never a thrown RpcError for these, since both are
+     * well-formed, expected facts about a reachable Ollama, not daemon bugs):
+     * - `{models, outcome:"ok"}` — non-empty list (cloud providers always land here).
+     * - `{models:[], outcome:"empty"}` — Ollama reachable, zero models pulled.
+     * - `{models:[], outcome:"fetch-failed", errorMessage}` — Ollama reachable but
+     *   `/api/tags` itself failed (malformed JSON / non-2xx / missing `models` field).
+     *
+     * `provider-not-running` (Ollama unreachable) is the ONE case that still THROWS
+     * `RpcError("llm-provider-not-running", ...)` — unchanged shape, AC4.
+     */
+    listModels(params: contract.ListModelsParams): Promise<contract.ListModelsResult>;
+    /**
+     * generateBody — the first async, slow, externally-fallible RPC handler in the
+     * codebase (STATE §10.1/§10.2). Touches neither disk nor git: pure inference in,
+     * text out. Deliberately does NOT call findProjectPath/loadProjectStore — the
+     * request already carries all needed context inline (STATE §10.2).
+     */
+    generateBody(params: contract.GenerateBodyParams): Promise<contract.GenerateBodyResult>;
+    /**
+     * checkProviderStatus — read-only liveness/auth check, widened per
+     * docs/loops/multi-provider-settings-STATE.md §3.2/§4b from the literal
+     * "ollama" to the 4-id union. Ollama keeps its exact existing path
+     * (checkOllamaReachable, unchanged). The 3 api-key providers: first check
+     * secrets.ts has a stored key (if not, short-circuit to
+     * { reachable:false, errorCode:"not-configured" } with ZERO network calls —
+     * never attempt a guaranteed-auth-failure round-trip); if a key exists,
+     * construct the provider (reads its own key internally) and perform ONE
+     * cheap authenticated call via checkApiKeyProviderReachable. Never throws
+     * on "not reachable" — that is a valid resolved result, not a server error.
+     */
+    checkProviderStatus(params: contract.CheckProviderStatusParams): Promise<contract.CheckProviderStatusResult>;
+    /**
+     * listProviders — returns all 4 providers' static descriptor + current
+     * persisted state (masked key, model, configured/active) in one call,
+     * backing the Settings page's initial render and useActiveProvider()'s
+     * one-call-per-mount resolution (STATE §3.2/§4a/§4d).
+     */
+    listProviders(_params: contract.ListProvidersParams): contract.ListProvidersResult;
+    /**
+     * saveProviderKey — validates providerId against the 3 api-key ids (ollama
+     * never has a stored key) and apiKey under a size cap (mirrors
+     * generateBody's MAX_FIELD_LEN pattern), then upserts via secrets.ts.
+     * Returns the masked descriptors — apiKey is NEVER serialized raw.
+     */
+    saveProviderKey(params: contract.SaveProviderKeyParams): contract.SaveProviderKeyResult;
+    /** clearProviderKey — removes one provider's stored key/model. If it was active,
+     * activeProviderId resets to null (no automatic fallback to ollama). */
+    clearProviderKey(params: contract.ClearProviderKeyParams): contract.ClearProviderKeyResult;
+    /** setActiveProvider — rejects (invalid-params) if the target api-key provider has no
+     * stored key; ollama always succeeds (needs none). Never a silent no-op. */
+    setActiveProvider(params: contract.SetActiveProviderParams): contract.SetActiveProviderResult;
+};
+export { validateAllArtifacts };
+//# sourceMappingURL=handlers.d.ts.map

package/apps/daemon/dist/rpc/handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/rpc/handlers.ts"],"names":[],"mappings":"AAGA,OAAO,EAML,oBAAoB,EAMrB,MAAM,eAAe,CAAC;AAwCvB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,KAAK,KAAK,QAAQ,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,QAAQ,EAAE,CAAC;AA+FpB,eAAO,MAAM,QAAQ;kBACL,QAAQ,CAAC,UAAU,OAAO;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,QAAQ,CAAC,UAAU;yBAIpE,QAAQ,CAAC,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;yBAMxE,QAAQ,CAAC,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB;oBAmC9D,QAAQ,CAAC,aAAa,GAAG,QAAQ,CAAC,aAAa;oBAI/C,QAAQ,CAAC,aAAa,GAAG,QAAQ,CAAC,aAAa;0BAIzC,QAAQ,CAAC,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB;0BAKzD,QAAQ,CAAC,mBAAmB,GAAG,QAAQ,CAAC,mBAAmB;wBAoB7D,QAAQ,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB;yBAKtD,QAAQ,CAAC,kBAAkB,GAAG,QAAQ,CAAC,kBAAkB;2BAgCvD,QAAQ,CAAC,oBAAoB,GAAG,QAAQ,CAAC,oBAAoB;2BAU7D,QAAQ,CAAC,oBAAoB,GAAG,QAAQ,CAAC,oBAAoB;0BAgB9D,QAAQ,CAAC,mBAAmB,GAAG,QAAQ,CAAC,mBAAmB;4BAMzD,QAAQ,CAAC,qBAAqB,GAAG,QAAQ,CAAC,qBAAqB;IAmCvF;;;;;;;;;;;;;OAaG;0BACmB,QAAQ,CAAC,mBAAmB,GAAG,QAAQ,CAAC,mBAAmB;IAgGjF;;;;;;;;;;;;OAYG;iCACgC,QAAQ,CAAC,0BAA0B,GAAG,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC;mBAatG,QAAQ,CAAC,YAAY,GAAG,QAAQ,CAAC,YAAY;wBAcxC,QAAQ,CAAC,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB;kBAqB7D,QAAQ,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW;sBA8EvC,QAAQ,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe;6BAI5C,QAAQ,CAAC,sBAAsB,GAAG,QAAQ,CAAC,sBAAsB;IAI1F;;;;;;;;;;;;;;;;;;OAkBG;uBACsB,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAqBvF;;;;;OAKG;yBACwB,QAAQ,CAAC,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAkD7F;;;;;;;;;;;OAWG;gCAC+B,QAAQ,CAAC,yBAAyB,GAAG,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IAsBlH;;;;;OAKG;2BACoB,QAAQ,CAAC,mBAAmB,GAAG,QAAQ,CAAC,mBAAmB;IAIlF;;;;;OAKG;4BACqB,QAAQ,CAAC,qBAAqB,GAAG,QAAQ,CAAC,qBAAqB;IAmBvF;4EACwE;6BAC/C,QAAQ,CAAC,sBAAsB,GAAG,QAAQ,CAAC,sBAAsB;IAQ1F;gFAC4E;8BAClD,QAAQ,CAAC,uBAAuB,GAAG,QAAQ,CAAC,uBAAuB;CAY9F,CAAC;AAwCF,OAAO,EAAE,oBAAoB,EAAE,CAAC"}