@anthara/pi-claude 0.0.0-stage → 0.1.0

package/dist/kernel/plugin-management/plugin-subcommands.d.ts

@@ -0,0 +1,9 @@
+import type { OptionPrompter } from '../plugin-config/configure-options.js';
+import type { GitClient } from '../plugin-install/git-client.js';
+export interface PluginCommandSetting {
+    readonly git: GitClient;
+    readonly agentDir: string;
+    readonly claudeDir: string;
+    readonly prompter?: OptionPrompter;
+}
+export declare function runPluginSubcommand(args: readonly string[], invocation: string, setting: PluginCommandSetting): Promise<string>;

package/dist/kernel/plugin-management/plugin-subcommands.js

@@ -0,0 +1,159 @@
+import { listInstalledPlugins } from '../plugin-catalog/plugin-installs.js';
+import { ClaudeCodeInstallReadOnlyError } from '../plugin-install/errors.js';
+import { parsePluginId } from '../plugin-install/dependencies/plugin-id.js';
+import { installRoot } from '../plugin-install/install-layout.js';
+import { MarketplaceInstaller } from '../plugin-install/marketplaces/marketplace-installer.js';
+import { MarketplaceRegistry } from '../plugin-install/marketplaces/marketplace-registry.js';
+import { PluginInstaller } from '../plugin-install/plugin-installer.js';
+import { ignoredManifestFields } from '../plugin-install/plugin-manifest.js';
+import { splitRef } from '../plugin-install/plugin-ref.js';
+import { parsePluginSource } from '../plugin-install/plugin-source.js';
+import { CommandUsageError } from '../subcommands/errors.js';
+import { runSubcommand, wrongArgumentsError, } from '../subcommands/subcommand-table.js';
+import { configureAllOptions, promptForUnsetOptions } from './configure-plugin.js';
+import { disabledText, enabledText, installedText, listText, marketplaceAddedText, marketplaceListText, marketplaceRemovedText, marketplacesUpdatedText, removedText, updatedText, } from './plugin-messages.js';
+export function runPluginSubcommand(args, invocation, setting) {
+    return runSubcommand(PLUGIN_SUBCOMMANDS, args, contextFor(invocation, setting));
+}
+function contextFor(invocation, { git, agentDir, claudeDir, prompter }) {
+    const root = installRoot(agentDir);
+    const installer = new PluginInstaller(git, root);
+    const marketplaces = new MarketplaceRegistry(git, root);
+    return {
+        invocation,
+        configuration: { agentDir, claudeDir, ...(prompter === undefined ? {} : { prompter }) },
+        installer,
+        marketplaces,
+        marketplaceInstaller: new MarketplaceInstaller(git, root, marketplaces, installer),
+        claudeCodeInstalls: () => listInstalledPlugins({ claudeDir, agentDir }).filter(({ plugin }) => plugin.origin === 'claude-code'),
+    };
+}
+async function addPlugin(args, context) {
+    const source = parsePluginSource(singleArgument('add', args, context));
+    return afterInstall([await context.installer.add(source)], context);
+}
+async function installFromMarketplace(args, context) {
+    const target = parsePluginId(singleArgument('install', args, context));
+    if (target.kind === 'malformed') {
+        throw usageError('install', context);
+    }
+    return afterInstall(await context.marketplaceInstaller.install(target.id), context);
+}
+async function afterInstall(records, context) {
+    const installed = installedText(records, [...new Set(records.flatMap(({ installPath }) => ignoredManifestFields(installPath)))]);
+    return installed + (await promptInTurn(records, context.configuration));
+}
+const promptInTurn = (records, configuration) => records.reduce(async (text, { name }) => (await text) + (await promptForUnsetOptions(name, configuration)), Promise.resolve(''));
+function marketplaceCommand(args, context) {
+    const [name, ...rest] = args;
+    const action = MARKETPLACE_ACTIONS.get(name ?? '');
+    if (action === undefined) {
+        const problem = name === undefined ? 'Say what to do with marketplaces.' : `"${name}" is not a marketplace command.`;
+        throw new CommandUsageError(problem, [...MARKETPLACE_ACTIONS.values()].map(({ usage }) => `${context.invocation} marketplace ${usage}`));
+    }
+    return action.run(rest, context);
+}
+async function addMarketplace(args, context) {
+    const source = parsePluginSource(marketplaceArgument('add', args, context));
+    return marketplaceAddedText(await context.marketplaces.add(source));
+}
+async function updateMarketplaces(args, context) {
+    if (args.length > 1) {
+        throw marketplaceUsageError('update', context);
+    }
+    return marketplacesUpdatedText(await context.marketplaces.update(args[0]));
+}
+function removeMarketplace(args, context) {
+    const name = marketplaceArgument('remove', args, context);
+    context.marketplaces.remove(name);
+    return marketplaceRemovedText(name);
+}
+function listMarketplaces(args, context) {
+    if (args.length > 0) {
+        throw marketplaceUsageError('list', context);
+    }
+    return marketplaceListText(context.marketplaces.list());
+}
+function marketplaceArgument(action, args, context) {
+    const [only, ...extra] = args;
+    if (only === undefined || only === '' || extra.length > 0) {
+        throw marketplaceUsageError(action, context);
+    }
+    return only;
+}
+function marketplaceUsageError(action, { invocation }) {
+    const usage = MARKETPLACE_ACTIONS.get(action)?.usage ?? '';
+    return new CommandUsageError(`${invocation} marketplace ${action} was given the wrong arguments.`, [`${invocation} marketplace ${usage}`]);
+}
+async function enablePlugin(args, context) {
+    const name = singleArgument('enable', args, context);
+    assertNotReadOnly(name, context);
+    context.installer.enable(name);
+    return enabledText(name) + (await promptForUnsetOptions(name, context.configuration));
+}
+function configurePlugin(args, context) {
+    const name = singleArgument('configure', args, context);
+    assertNotReadOnly(name, context);
+    return configureAllOptions(name, context.configuration);
+}
+async function updatePlugin(args, context) {
+    const { name, ref } = updateTargetOf(singleArgument('update', args, context), context);
+    assertNotReadOnly(name, context);
+    const record = await context.installer.update(name, ref);
+    return updatedText(record, ignoredManifestFields(record.installPath));
+}
+const changeNamedPlugin = (subcommand, change, report) => (args, context) => {
+    const name = singleArgument(subcommand, args, context);
+    assertNotReadOnly(name, context);
+    change(context.installer, name);
+    return report(name);
+};
+function listPlugins(args, context) {
+    if (args.length > 0) {
+        throw usageError('list', context);
+    }
+    return listText(context.installer.list(), context.claudeCodeInstalls());
+}
+function assertNotReadOnly(name, { installer, claudeCodeInstalls }) {
+    const installedHere = installer.list().some((record) => record.name === name);
+    if (!installedHere && claudeCodeInstalls().some(({ plugin }) => plugin.name === name)) {
+        throw new ClaudeCodeInstallReadOnlyError(name);
+    }
+}
+function singleArgument(subcommand, args, context) {
+    const [only, ...extra] = args;
+    if (only === undefined || only === '' || extra.length > 0) {
+        throw usageError(subcommand, context);
+    }
+    return only;
+}
+function updateTargetOf(target, context) {
+    const { subject: name, ref } = splitRef(target);
+    if (name === '' || ref === '') {
+        throw usageError('update', context);
+    }
+    return ref === undefined ? { name } : { name, ref };
+}
+const usageError = (subcommand, context) => wrongArgumentsError(PLUGIN_SUBCOMMANDS, subcommand, context);
+const PLUGIN_SUBCOMMANDS = {
+    commandName: 'plugin',
+    missingSubcommandProblem: 'Say what to do with plugins.',
+    subcommands: new Map([
+        ['add', { usage: 'add <github:owner/repo[@tag|sha] | git-url[@tag|sha] | local-git-checkout>', run: addPlugin }],
+        ['update', { usage: 'update <name>[@tag|sha]', run: updatePlugin }],
+        ['remove', { usage: 'remove <name>', run: changeNamedPlugin('remove', (installer, name) => { installer.remove(name); }, removedText) }],
+        ['enable', { usage: 'enable <name>', run: enablePlugin }],
+        ['disable', { usage: 'disable <name>', run: changeNamedPlugin('disable', (installer, name) => { installer.disable(name); }, disabledText) }],
+        ['configure', { usage: 'configure <name>', run: configurePlugin }],
+        ['list', { usage: 'list', run: listPlugins }],
+        ['marketplace', { usage: 'marketplace add <source> | list | update [name] | remove <name>', run: marketplaceCommand }],
+        ['install', { usage: 'install <name>@<marketplace>', run: installFromMarketplace }],
+    ]),
+};
+const MARKETPLACE_ACTIONS = new Map([
+    ['add', { usage: 'add <github:owner/repo[@tag|sha] | git-url[@tag|sha] | local-git-checkout>', run: addMarketplace }],
+    ['list', { usage: 'list', run: listMarketplaces }],
+    ['update', { usage: 'update [name]', run: updateMarketplaces }],
+    ['remove', { usage: 'remove <name>', run: removeMarketplace }],
+]);
+//# sourceMappingURL=plugin-subcommands.js.map

package/dist/kernel/plugin-management/plugin-subcommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-subcommands.js","sourceRoot":"","sources":["../../../src/kernel/plugin-management/plugin-subcommands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAqB,MAAM,sCAAsC,CAAC;AAC/F,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAG7E,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAElE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yDAAyD,CAAC;AAC/F,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EACL,aAAa,EACb,mBAAmB,GAIpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAA6B,MAAM,uBAAuB,CAAC;AAC9G,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,QAAQ,EACR,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAwB9B,MAAM,UAAU,mBAAmB,CAAC,IAAuB,EAAE,UAAkB,EAAE,OAA6B;IAC5G,OAAO,aAAa,CAAC,kBAAkB,EAAE,IAAI,EAAE,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAwB;IAClG,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxD,OAAO;QACL,UAAU;QACV,aAAa,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;QACvF,SAAS;QACT,YAAY;QACZ,oBAAoB,EAAE,IAAI,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC;QAClF,kBAAkB,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,aAAa,CAAC;KAChI,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAuB,EAAE,OAA6B;IAC7E,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACvE,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAuB,EAAE,OAA6B;IAC1F,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,OAAO,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAiC,EAAE,OAA6B;IAC1F,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjI,OAAO,SAAS,GAAG,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,OAAiC,EAAE,aAAmC,EAAmB,EAAE,CAC/G,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AAEnI,SAAS,kBAAkB,CAAC,IAAuB,EAAE,OAA6B;IAChF,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,IAAI,IAAI,iCAAiC,CAAC;QACrH,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC,GAAG,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3I,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAuB,EAAE,OAA6B;IAClF,MAAM,MAAM,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5E,OAAO,oBAAoB,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAuB,EAAE,OAA6B;IACtF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,qBAAqB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,uBAAuB,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAuB,EAAE,OAA6B;IAC/E,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAuB,EAAE,OAA6B;IAC9E,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,mBAAmB,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,IAAuB,EAAE,OAA6B;IACjG,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,EAAE,UAAU,EAAwB;IACjF,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;IAC3D,OAAO,IAAI,iBAAiB,CAAC,GAAG,UAAU,gBAAgB,MAAM,iCAAiC,EAAE,CAAC,GAAG,UAAU,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC;AAC7I,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAuB,EAAE,OAA6B;IAChF,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACrD,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,eAAe,CAAC,IAAuB,EAAE,OAA6B;IAC7E,MAAM,IAAI,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAuB,EAAE,OAA6B;IAChF,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,cAAc,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACvF,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,iBAAiB,GACrB,CAAC,UAAkB,EAAE,MAAyB,EAAE,MAAgC,EAAE,EAAE,CACpF,CAAC,IAAuB,EAAE,OAA6B,EAAU,EAAE;IACjE,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC,CAAC;AAEJ,SAAS,WAAW,CAAC,IAAuB,EAAE,OAA6B;IACzE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAwB;IAC9F,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9E,IAAI,CAAC,aAAa,IAAI,kBAAkB,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,8BAA8B,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,IAAuB,EAAE,OAA6B;IAChG,MAAM,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,OAA6B;IACnE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,IAAI,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,UAAkB,EAAE,OAA6B,EAAqB,EAAE,CAC1F,mBAAmB,CAAC,kBAAkB,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAE/D,MAAM,kBAAkB,GAA0C;IAChE,WAAW,EAAE,QAAQ;IACrB,wBAAwB,EAAE,8BAA8B;IACxD,WAAW,EAAE,IAAI,GAAG,CAA2C;QAC7D,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,4EAA4E,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAChH,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;QACnE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC;QACvI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;QACzD,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,iBAAiB,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;QAC5I,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC;QAClE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;QAC7C,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,iEAAiE,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC;QACtH,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,GAAG,EAAE,sBAAsB,EAAE,CAAC;KACpF,CAAC;CACH,CAAC;AAEF,MAAM,mBAAmB,GAA0D,IAAI,GAAG,CAA2C;IACnI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,4EAA4E,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;IACrH,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC;IAClD,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC;IAC/D,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;CAC/D,CAAC,CAAC"}

package/dist/kernel/private-files/confined-removal.d.ts

@@ -0,0 +1 @@
+export declare function removeWithin(root: string, target: string): void;

package/dist/kernel/private-files/confined-removal.js

@@ -0,0 +1,27 @@
+import { realpathSync, rmSync } from 'node:fs';
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { RemovalOutsideRootError } from './errors.js';
+export function removeWithin(root, target) {
+    assertStrictlyInside(root, target);
+    rmSync(target, { recursive: true, force: true });
+}
+// the parent is resolved through symlinks, so a link inside the root cannot lead the deletion outside it
+function assertStrictlyInside(root, target) {
+    const absoluteTarget = resolve(target);
+    const canonicalTarget = join(realpathOrResolve(dirname(absoluteTarget)), basename(absoluteTarget));
+    if (!isStrictlyInside(relative(realpathOrResolve(root), canonicalTarget))) {
+        throw new RemovalOutsideRootError(target, root);
+    }
+}
+function isStrictlyInside(pathFromRoot) {
+    return (pathFromRoot !== '' && pathFromRoot !== '..' && !pathFromRoot.startsWith(`..${sep}`) && !isAbsolute(pathFromRoot));
+}
+function realpathOrResolve(path) {
+    try {
+        return realpathSync(path);
+    }
+    catch {
+        return resolve(path);
+    }
+}
+//# sourceMappingURL=confined-removal.js.map

package/dist/kernel/private-files/confined-removal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confined-removal.js","sourceRoot":"","sources":["../../../src/kernel/private-files/confined-removal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAc;IACvD,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,yGAAyG;AACzG,SAAS,oBAAoB,CAAC,IAAY,EAAE,MAAc;IACxD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;IACnG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAoB;IAC5C,OAAO,CACL,YAAY,KAAK,EAAE,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAClH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/kernel/private-files/errors.d.ts

@@ -0,0 +1,7 @@
+import { AntharaError } from '../../errors/anthara-error.js';
+export declare class MalformedConfigFileError extends AntharaError {
+    constructor(filePath: string, expectation: string);
+}
+export declare class RemovalOutsideRootError extends AntharaError {
+    constructor(target: string, root: string);
+}

package/dist/kernel/private-files/errors.js

@@ -0,0 +1,12 @@
+import { AntharaError } from '../../errors/anthara-error.js';
+export class MalformedConfigFileError extends AntharaError {
+    constructor(filePath, expectation) {
+        super(`Cannot use ${filePath}: it is not ${expectation}. Fix or remove the file, then try again.`);
+    }
+}
+export class RemovalOutsideRootError extends AntharaError {
+    constructor(target, root) {
+        super(`Refusing to delete ${target}: pi-claude only deletes inside ${root}.`);
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/kernel/private-files/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/kernel/private-files/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,MAAM,OAAO,wBAAyB,SAAQ,YAAY;IACxD,YAAY,QAAgB,EAAE,WAAmB;QAC/C,KAAK,CAAC,cAAc,QAAQ,eAAe,WAAW,2CAA2C,CAAC,CAAC;IACrG,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,YAAY;IACvD,YAAY,MAAc,EAAE,IAAY;QACtC,KAAK,CAAC,sBAAsB,MAAM,mCAAmC,IAAI,GAAG,CAAC,CAAC;IAChF,CAAC;CACF"}

package/dist/kernel/private-files/file-system-errors.d.ts

@@ -0,0 +1,2 @@
+export declare const isOccupiedRenameTarget: (error: unknown) => error is NodeJS.ErrnoException;
+export declare const isMissingPath: (error: unknown) => error is NodeJS.ErrnoException;

package/dist/kernel/private-files/file-system-errors.js

@@ -0,0 +1,7 @@
+const OCCUPIED_TARGET_CODES = new Set(['ENOTEMPTY', 'EEXIST']);
+const MISSING_PATH_CODE = 'ENOENT';
+const errnoCodeOf = (error) => (error instanceof Error ? error.code : undefined);
+// a directory renamed onto one that already holds entries: another session published there first
+export const isOccupiedRenameTarget = (error) => OCCUPIED_TARGET_CODES.has(errnoCodeOf(error));
+export const isMissingPath = (error) => errnoCodeOf(error) === MISSING_PATH_CODE;
+//# sourceMappingURL=file-system-errors.js.map

package/dist/kernel/private-files/file-system-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-system-errors.js","sourceRoot":"","sources":["../../../src/kernel/private-files/file-system-errors.ts"],"names":[],"mappings":"AAAA,MAAM,qBAAqB,GAAyB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrF,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAEnC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAE,KAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAE9H,iGAAiG;AACjG,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAc,EAAkC,EAAE,CACvF,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAc,EAAkC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,iBAAiB,CAAC"}

package/dist/kernel/private-files/leftovers.d.ts

@@ -0,0 +1,2 @@
+export declare function timestampedPrefix(prefix: string, madeAt?: number): string;
+export declare function sweepOldLeftovers(root: string, prefixes: readonly string[], now?: number): void;

package/dist/kernel/private-files/leftovers.js

@@ -0,0 +1,40 @@
+import { existsSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { removeWithin } from './confined-removal.js';
+import { isMissingPath } from './file-system-errors.js';
+// long past any staging or retirement a live run is still busy with
+const LEFTOVER_MAX_AGE_MS = 60 * 60 * 1000;
+const MADE_AT = /^(\d+)-/;
+// A staging or retired directory carries the time it was made in its name: a rename keeps no reliable time on every
+// file system, and a name read once is all a sweep needs to leave a younger one, which a live run may own, alone.
+export function timestampedPrefix(prefix, madeAt = Date.now()) {
+    return `${prefix}${String(madeAt)}-`;
+}
+// what a crashed run left behind: entries named `<prefix><time>-…` that are over an hour old, removed within `root` only
+export function sweepOldLeftovers(root, prefixes, now = Date.now()) {
+    if (!existsSync(root)) {
+        return;
+    }
+    for (const name of readdirSync(root).filter((entry) => isOldLeftover(entry, prefixes, now))) {
+        removeLeftover(root, join(root, name));
+    }
+}
+function isOldLeftover(name, prefixes, now) {
+    return prefixes.some((prefix) => name.startsWith(prefix) && isOlderThanMaxAge(name.slice(prefix.length), now));
+}
+function isOlderThanMaxAge(nameAfterPrefix, now) {
+    const madeAt = MADE_AT.exec(nameAfterPrefix)?.[1];
+    return madeAt !== undefined && now - Number(madeAt) > LEFTOVER_MAX_AGE_MS;
+}
+// two runs that stage at the same moment can sweep the same leftover
+function removeLeftover(root, leftover) {
+    try {
+        removeWithin(root, leftover);
+    }
+    catch (error) {
+        if (!isMissingPath(error)) {
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=leftovers.js.map

package/dist/kernel/private-files/leftovers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leftovers.js","sourceRoot":"","sources":["../../../src/kernel/private-files/leftovers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,oEAAoE;AACpE,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,OAAO,GAAG,SAAS,CAAC;AAE1B,oHAAoH;AACpH,kHAAkH;AAClH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,SAAiB,IAAI,CAAC,GAAG,EAAE;IAC3E,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;AACvC,CAAC;AAED,yHAAyH;AACzH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,QAA2B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACnG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5F,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,QAA2B,EAAE,GAAW;IAC3E,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AACjH,CAAC;AAED,SAAS,iBAAiB,CAAC,eAAuB,EAAE,GAAW;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,MAAM,KAAK,SAAS,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,mBAAmB,CAAC;AAC5E,CAAC;AAED,qEAAqE;AACrE,SAAS,cAAc,CAAC,IAAY,EAAE,QAAgB;IACpD,IAAI,CAAC;QACH,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/kernel/private-files/private-files.d.ts

@@ -0,0 +1,19 @@
+export declare const OWNER_ONLY_DIRECTORY_MODE = 448;
+export declare const OWNER_ONLY_FILE_MODE = 384;
+export declare const JSON_INDENT = 2;
+export type JsonObject = Record<string, unknown>;
+interface ParsedJson {
+    readonly kind: 'parsed';
+    readonly value: unknown;
+}
+interface UnparseableJson {
+    readonly kind: 'unparseable';
+}
+type JsonParse = ParsedJson | UnparseableJson;
+export declare function isJsonObject(value: unknown): value is JsonObject;
+export declare function parseJson(text: string): JsonParse;
+export declare function readJsonObject(filePath: string): JsonObject;
+export declare function readJsonObjectLeniently(filePath: string): JsonObject;
+export declare function ensurePrivateDirectory(directory: string): void;
+export declare function writeJsonAtomically(filePath: string, value: unknown): void;
+export {};

package/dist/kernel/private-files/private-files.js

@@ -0,0 +1,51 @@
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { MalformedConfigFileError } from './errors.js';
+export const OWNER_ONLY_DIRECTORY_MODE = 0o700;
+export const OWNER_ONLY_FILE_MODE = 0o600;
+export const JSON_INDENT = 2;
+const JSON_OBJECT_EXPECTATION = 'a JSON object';
+const UNPARSEABLE = { kind: 'unparseable' };
+export function isJsonObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export function parseJson(text) {
+    try {
+        return { kind: 'parsed', value: JSON.parse(text) };
+    }
+    catch {
+        return UNPARSEABLE;
+    }
+}
+// For a file anthara owns: an absent file reads as empty, and anything but a JSON object is refused rather than
+// silently overwritten. The refusal names the file and never its content, which may hold a secret.
+export function readJsonObject(filePath) {
+    if (!existsSync(filePath)) {
+        return {};
+    }
+    const parsed = parseJson(readFileSync(filePath, 'utf8'));
+    if (parsed.kind === 'unparseable' || !isJsonObject(parsed.value)) {
+        throw new MalformedConfigFileError(filePath, JSON_OBJECT_EXPECTATION);
+    }
+    return parsed.value;
+}
+// For a file another program also owns, whatever cannot be used reads as empty.
+export function readJsonObjectLeniently(filePath) {
+    try {
+        return jsonObjectOrEmpty(parseJson(readFileSync(filePath, 'utf8')));
+    }
+    catch {
+        return {};
+    }
+}
+const jsonObjectOrEmpty = (parsed) => parsed.kind === 'parsed' && isJsonObject(parsed.value) ? parsed.value : {};
+export function ensurePrivateDirectory(directory) {
+    mkdirSync(directory, { recursive: true, mode: OWNER_ONLY_DIRECTORY_MODE });
+}
+export function writeJsonAtomically(filePath, value) {
+    ensurePrivateDirectory(dirname(filePath));
+    const temporaryPath = `${filePath}.${String(process.pid)}.tmp`;
+    writeFileSync(temporaryPath, `${JSON.stringify(value, null, JSON_INDENT)}\n`, { mode: OWNER_ONLY_FILE_MODE });
+    renameSync(temporaryPath, filePath);
+}
+//# sourceMappingURL=private-files.js.map

package/dist/kernel/private-files/private-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-files.js","sourceRoot":"","sources":["../../../src/kernel/private-files/private-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAE1C,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAC7B,MAAM,uBAAuB,GAAG,eAAe,CAAC;AAehD,MAAM,WAAW,GAAoB,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;AAE7D,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC;AAED,gHAAgH;AAChH,mGAAmG;AACnG,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,MAAiB,EAAc,EAAE,CAC1D,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAE7E,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,KAAc;IAClE,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1C,MAAM,aAAa,GAAG,GAAG,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;IAC/D,aAAa,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAC9G,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC"}

package/dist/kernel/project-trust/claude-project-content.d.ts

@@ -0,0 +1 @@
+export declare const hasExecutableClaudeContent: (projectFolders: readonly string[]) => boolean;

package/dist/kernel/project-trust/claude-project-content.js

@@ -0,0 +1,14 @@
+// Portions adapted from pi-code (MIT, github.com/ilovepixelart/pi-code), extensions/internal/project-approval.ts.
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+const EXECUTABLE_CLAUDE_ENTRIES = [
+    '.mcp.json',
+    join('.claude', 'settings.json'),
+    join('.claude', 'settings.local.json'),
+    join('.claude', 'commands'),
+    join('.claude', 'skills'),
+    join('.claude', 'agents'),
+    join('.claude', 'output-styles'),
+];
+export const hasExecutableClaudeContent = (projectFolders) => projectFolders.some((folder) => EXECUTABLE_CLAUDE_ENTRIES.some((entry) => existsSync(join(folder, entry))));
+//# sourceMappingURL=claude-project-content.js.map

package/dist/kernel/project-trust/claude-project-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-project-content.js","sourceRoot":"","sources":["../../../src/kernel/project-trust/claude-project-content.ts"],"names":[],"mappings":"AAAA,kHAAkH;AAClH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,yBAAyB,GAAsB;IACnD,WAAW;IACX,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC;IAChC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC;IACtC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;IAC3B,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;IACzB,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;IACzB,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC;CACjC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,cAAiC,EAAW,EAAE,CACvF,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/kernel/project-trust/project-trust.d.ts

@@ -0,0 +1,8 @@
+import { type ExtensionContext } from '@earendil-works/pi-coding-agent';
+import { type TrustDecisions } from './trust-decisions.js';
+import type { TrustState } from './trust-state.js';
+type TrustContext = Pick<ExtensionContext, 'cwd' | 'hasUI' | 'isProjectTrusted' | 'ui'>;
+export declare function projectTrustFor(ctx: TrustContext, decisions?: TrustDecisions): Promise<TrustState>;
+export declare function trustDecisionFor(ctx: TrustContext, decisions?: TrustDecisions): Promise<TrustState>;
+export declare function savedTrustDecisionFor(ctx: TrustContext, decisions?: TrustDecisions): TrustState;
+export {};

package/dist/kernel/project-trust/project-trust.js

@@ -0,0 +1,57 @@
+// Portions adapted from pi-code (MIT, github.com/ilovepixelart/pi-code), extensions/internal/project-approval.ts.
+import { homedir } from 'node:os';
+import { getAgentDir, hasTrustRequiringProjectResources } from '@earendil-works/pi-coding-agent';
+import { projectFolders } from '../claude-home/project-folders.js';
+import { processSlot } from '../session-slots/process-slot.js';
+import { hasExecutableClaudeContent } from './claude-project-content.js';
+import { PiTrustDecisions } from './trust-decisions.js';
+import { askToTrust } from './trust-prompt.js';
+const DECISIONS_SLOT = 'project-trust';
+const piTrustDecisions = () => new PiTrustDecisions(getAgentDir());
+export async function projectTrustFor(ctx, decisions = piTrustDecisions()) {
+    if (ctx.isProjectTrusted() && !hasExecutableClaudeContent(projectFolders(ctx.cwd, homedir()))) {
+        return 'trusted';
+    }
+    return trustDecisionFor(ctx, decisions);
+}
+export async function trustDecisionFor(ctx, decisions = piTrustDecisions()) {
+    const decidedByPi = piDecisionFor(ctx);
+    return decidedByPi === 'undecided' ? decisionFor(ctx, decisions) : decidedByPi;
+}
+export function savedTrustDecisionFor(ctx, decisions = piTrustDecisions()) {
+    const decidedByPi = piDecisionFor(ctx);
+    const saved = decidedByPi === 'undecided' ? decisions.get(ctx.cwd) : decidedByPi;
+    return saved === 'undecided' ? 'untrusted' : saved;
+}
+function piDecisionFor(ctx) {
+    if (!ctx.isProjectTrusted()) {
+        return 'untrusted';
+    }
+    return hasTrustRequiringProjectResources(ctx.cwd) ? 'trusted' : 'undecided';
+}
+function decisionFor(ctx, decisions) {
+    const decided = processSlot(DECISIONS_SLOT, () => new Map());
+    const earlier = decided.get(ctx.cwd);
+    if (earlier !== undefined) {
+        return earlier;
+    }
+    const decision = decide(ctx, decisions);
+    decided.set(ctx.cwd, decision);
+    return decision;
+}
+async function decide(ctx, decisions) {
+    const saved = decisions.get(ctx.cwd);
+    if (saved !== 'undecided') {
+        return saved;
+    }
+    if (!ctx.hasUI) {
+        ctx.ui.notify(untrustedWithoutAskingNotice(ctx.cwd), 'warning');
+        return 'untrusted';
+    }
+    const answer = await askToTrust(ctx.ui, ctx.cwd);
+    decisions.set(ctx.cwd, answer);
+    return answer;
+}
+const untrustedWithoutAskingNotice = (cwd) => `The Claude Code configuration in ${cwd} stays off: this session cannot ask whether to trust the project. Start an ` +
+    'interactive session there once to answer.';
+//# sourceMappingURL=project-trust.js.map

package/dist/kernel/project-trust/project-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-trust.js","sourceRoot":"","sources":["../../../src/kernel/project-trust/project-trust.ts"],"names":[],"mappings":"AAAA,kHAAkH;AAClH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,iCAAiC,EAAyB,MAAM,iCAAiC,CAAC;AACxH,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAwC,MAAM,sBAAsB,CAAC;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAK/C,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC,MAAM,gBAAgB,GAAG,GAAmB,EAAE,CAAC,IAAI,gBAAgB,CAAC,WAAW,EAAE,CAAC,CAAC;AAEnF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAiB,EAAE,YAA4B,gBAAgB,EAAE;IACrG,IAAI,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,0BAA0B,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;QAC9F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAiB,EAAE,YAA4B,gBAAgB,EAAE;IACtG,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAiB,EAAE,YAA4B,gBAAgB,EAAE;IACrG,MAAM,WAAW,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IACjF,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,GAAiB;IACtC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,iCAAiC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,GAAiB,EAAE,SAAyB;IAC/D,MAAM,OAAO,GAAG,WAAW,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,GAAG,EAA+B,CAAC,CAAC;IAC1F,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAiB,EAAE,SAAyB;IAChE,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC;QAChE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACjD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,4BAA4B,GAAG,CAAC,GAAW,EAAU,EAAE,CAC3D,oCAAoC,GAAG,6EAA6E;IACpH,2CAA2C,CAAC"}

package/dist/kernel/project-trust/trust-decisions.d.ts

@@ -0,0 +1,12 @@
+import { type TrustState } from './trust-state.js';
+export type SavedTrust = TrustState | 'undecided';
+export interface TrustDecisions {
+    get(cwd: string): SavedTrust;
+    set(cwd: string, state: TrustState): void;
+}
+export declare class PiTrustDecisions implements TrustDecisions {
+    #private;
+    constructor(agentDir: string);
+    get(cwd: string): SavedTrust;
+    set(cwd: string, state: TrustState): void;
+}

package/dist/kernel/project-trust/trust-decisions.js

@@ -0,0 +1,16 @@
+import { ProjectTrustStore } from '@earendil-works/pi-coding-agent';
+import { trustStateOf } from './trust-state.js';
+export class PiTrustDecisions {
+    #store;
+    constructor(agentDir) {
+        this.#store = new ProjectTrustStore(agentDir);
+    }
+    get(cwd) {
+        const decision = this.#store.get(cwd);
+        return decision === null ? 'undecided' : trustStateOf(decision);
+    }
+    set(cwd, state) {
+        this.#store.set(cwd, state === 'trusted');
+    }
+}
+//# sourceMappingURL=trust-decisions.js.map

package/dist/kernel/project-trust/trust-decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-decisions.js","sourceRoot":"","sources":["../../../src/kernel/project-trust/trust-decisions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,YAAY,EAAmB,MAAM,kBAAkB,CAAC;AASjE,MAAM,OAAO,gBAAgB;IAClB,MAAM,CAAoB;IAEnC,YAAY,QAAgB;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,GAAG,CAAC,GAAW;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAClE,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAiB;QAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC;IAC5C,CAAC;CACF"}

package/dist/kernel/project-trust/trust-prompt.d.ts

@@ -0,0 +1,3 @@
+import type { ExtensionUIContext } from '@earendil-works/pi-coding-agent';
+import { type TrustState } from './trust-state.js';
+export declare function askToTrust(ui: Pick<ExtensionUIContext, 'confirm'>, cwd: string): Promise<TrustState>;

package/dist/kernel/project-trust/trust-prompt.js

@@ -0,0 +1,9 @@
+import { trustStateOf } from './trust-state.js';
+const TRUST_QUESTION = "Trust this project's Claude Code configuration?";
+export async function askToTrust(ui, cwd) {
+    return trustStateOf(await ui.confirm(TRUST_QUESTION, trustExplanation(cwd)));
+}
+const trustExplanation = (cwd) => `${cwd}\n\nIt ships Claude Code settings, MCP servers, skills, commands or agents, which can run commands on this ` +
+    "machine, or Claude instructions that import files from outside the project. Your answer is kept in pi's trust " +
+    'store, so this project is asked about once.';
+//# sourceMappingURL=trust-prompt.js.map

package/dist/kernel/project-trust/trust-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-prompt.js","sourceRoot":"","sources":["../../../src/kernel/project-trust/trust-prompt.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAmB,MAAM,kBAAkB,CAAC;AAEjE,MAAM,cAAc,GAAG,iDAAiD,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAuC,EAAE,GAAW;IACnF,OAAO,YAAY,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAU,EAAE,CAC/C,GAAG,GAAG,6GAA6G;IACnH,gHAAgH;IAChH,6CAA6C,CAAC"}

package/dist/kernel/project-trust/trust-state.d.ts

@@ -0,0 +1,2 @@
+export type TrustState = 'trusted' | 'untrusted';
+export declare const trustStateOf: (trusted: boolean) => TrustState;

package/dist/kernel/project-trust/trust-state.js

@@ -0,0 +1,2 @@
+export const trustStateOf = (trusted) => (trusted ? 'trusted' : 'untrusted');
+//# sourceMappingURL=trust-state.js.map

package/dist/kernel/project-trust/trust-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-state.js","sourceRoot":"","sources":["../../../src/kernel/project-trust/trust-state.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAgB,EAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC"}

package/dist/kernel/prompt-catalog/command-sources.d.ts

@@ -0,0 +1,5 @@
+import type { CatalogPlugin } from '../plugin-catalog/plugin-catalog.js';
+import { type CommandRead } from './read-command.js';
+export declare function pluginCommands(plugin: CatalogPlugin): CommandRead[];
+export declare function userCommands(commandsDir: string): CommandRead[];
+export declare function projectCommands(projectFolders: readonly string[]): CommandRead[];