@apicircle/core 1.0.9 → 1.1.0

package/dist/{patches-h_K1VcZR.d.cts → patches-B3VGNVgf.d.cts}

@@ -1,4 +1,4 @@
-import { RequestAuth, GlobalSchema, GlobalGraphQL, GlobalFileAsset, Folder, Request, WorkspaceSynced, WorkspaceLocal, Environment, EnvPriorityRef, SecretKeyMeta, Assertion, MockServer, AssetGitRef, ExecutionPlan, WorkspaceSnapshotTrigger } from '@apicircle/shared';
+import { RequestAuth, GlobalSchema, GlobalGraphQL, GlobalFileAsset, Folder, Request, WorkspaceSynced, WorkspaceLocal, Environment, EnvPriorityRef, SecretKeyMeta, SecretCryptoMeta, Assertion, MockServer, ReleaseVersion, LinkedWorkspace, ReleaseHistory, LinkedSnapshot, RequestOverride, EnvironmentVariableOverride, AssetGitRef, ExecutionPlan, WorkspaceSnapshotTrigger } from '@apicircle/shared';
 
 /**
  * One credential-bearing field discovered inside an export envelope.
@@ -240,6 +240,10 @@ type WorkspacePatch = {
     kind: 'folder.move';
     id: string;
     newParentId: string | null;
+} | {
+    kind: 'folder.update';
+    id: string;
+    patch: Partial<Pick<Folder, 'name' | 'auth'>>;
 } | {
     kind: 'folder.import_apicircle';
     parsed: ParsedApicircleFolderExport;
@@ -259,6 +263,11 @@ type WorkspacePatch = {
 } | {
     kind: 'secretKey.upsert';
     meta: SecretKeyMeta;
+} | {
+    kind: 'secret.crypto.set';
+    crypto: SecretCryptoMeta;
+} | {
+    kind: 'secret.crypto.clear';
 } | {
     kind: 'assertion.upsert';
     requestId: string;
@@ -273,6 +282,49 @@ type WorkspacePatch = {
 } | {
     kind: 'mock.delete';
     id: string;
+} | {
+    kind: 'release.publish';
+    entry: ReleaseVersion;
+} | {
+    kind: 'release.deprecate';
+    version: string;
+} | {
+    kind: 'release.yank';
+    version: string;
+} | {
+    kind: 'linkedWorkspace.upsert';
+    link: LinkedWorkspace;
+    ledger?: ReleaseHistory;
+    snapshot?: LinkedSnapshot;
+} | {
+    kind: 'linkedWorkspace.remove';
+    id: string;
+} | {
+    kind: 'linkedWorkspace.applyUpdate';
+    id: string;
+    pinnedVersion: string | null;
+    snapshot: LinkedSnapshot;
+    ledger: ReleaseHistory;
+    requestOverrides: RequestOverride[];
+    envVarOverrides: EnvironmentVariableOverride[];
+} | {
+    kind: 'linkedOverride.setRequest';
+    override: RequestOverride;
+} | {
+    kind: 'linkedOverride.removeRequest';
+    linkedWorkspaceId: string;
+    itemId: string;
+} | {
+    kind: 'linkedOverride.setEnvVar';
+    override: EnvironmentVariableOverride;
+} | {
+    kind: 'linkedOverride.removeEnvVar';
+    linkedWorkspaceId: string;
+    envName: string;
+    varKey: string;
+} | {
+    kind: 'linkedOverride.clearForLink';
+    linkedWorkspaceId: string;
 } | {
     kind: 'globalAsset.upsertFile';
     file: GlobalFileAsset;

package/dist/{patches-h_K1VcZR.d.ts → patches-B3VGNVgf.d.ts}

@@ -1,4 +1,4 @@
-import { RequestAuth, GlobalSchema, GlobalGraphQL, GlobalFileAsset, Folder, Request, WorkspaceSynced, WorkspaceLocal, Environment, EnvPriorityRef, SecretKeyMeta, Assertion, MockServer, AssetGitRef, ExecutionPlan, WorkspaceSnapshotTrigger } from '@apicircle/shared';
+import { RequestAuth, GlobalSchema, GlobalGraphQL, GlobalFileAsset, Folder, Request, WorkspaceSynced, WorkspaceLocal, Environment, EnvPriorityRef, SecretKeyMeta, SecretCryptoMeta, Assertion, MockServer, ReleaseVersion, LinkedWorkspace, ReleaseHistory, LinkedSnapshot, RequestOverride, EnvironmentVariableOverride, AssetGitRef, ExecutionPlan, WorkspaceSnapshotTrigger } from '@apicircle/shared';
 
 /**
  * One credential-bearing field discovered inside an export envelope.
@@ -240,6 +240,10 @@ type WorkspacePatch = {
     kind: 'folder.move';
     id: string;
     newParentId: string | null;
+} | {
+    kind: 'folder.update';
+    id: string;
+    patch: Partial<Pick<Folder, 'name' | 'auth'>>;
 } | {
     kind: 'folder.import_apicircle';
     parsed: ParsedApicircleFolderExport;
@@ -259,6 +263,11 @@ type WorkspacePatch = {
 } | {
     kind: 'secretKey.upsert';
     meta: SecretKeyMeta;
+} | {
+    kind: 'secret.crypto.set';
+    crypto: SecretCryptoMeta;
+} | {
+    kind: 'secret.crypto.clear';
 } | {
     kind: 'assertion.upsert';
     requestId: string;
@@ -273,6 +282,49 @@ type WorkspacePatch = {
 } | {
     kind: 'mock.delete';
     id: string;
+} | {
+    kind: 'release.publish';
+    entry: ReleaseVersion;
+} | {
+    kind: 'release.deprecate';
+    version: string;
+} | {
+    kind: 'release.yank';
+    version: string;
+} | {
+    kind: 'linkedWorkspace.upsert';
+    link: LinkedWorkspace;
+    ledger?: ReleaseHistory;
+    snapshot?: LinkedSnapshot;
+} | {
+    kind: 'linkedWorkspace.remove';
+    id: string;
+} | {
+    kind: 'linkedWorkspace.applyUpdate';
+    id: string;
+    pinnedVersion: string | null;
+    snapshot: LinkedSnapshot;
+    ledger: ReleaseHistory;
+    requestOverrides: RequestOverride[];
+    envVarOverrides: EnvironmentVariableOverride[];
+} | {
+    kind: 'linkedOverride.setRequest';
+    override: RequestOverride;
+} | {
+    kind: 'linkedOverride.removeRequest';
+    linkedWorkspaceId: string;
+    itemId: string;
+} | {
+    kind: 'linkedOverride.setEnvVar';
+    override: EnvironmentVariableOverride;
+} | {
+    kind: 'linkedOverride.removeEnvVar';
+    linkedWorkspaceId: string;
+    envName: string;
+    varKey: string;
+} | {
+    kind: 'linkedOverride.clearForLink';
+    linkedWorkspaceId: string;
 } | {
     kind: 'globalAsset.upsertFile';
     file: GlobalFileAsset;

package/dist/workspace/file-backed.cjs

@@ -39,10 +39,10 @@ var import_node_fs = require("fs");
 var path = __toESM(require("path"), 1);
 var import_shared = require("@apicircle/shared");
 var import_proper_lockfile = __toESM(require("proper-lockfile"), 1);
-var SYNCED_FILE = "workspace.synced.json";
+var SYNCED_FILE = "workspace.json";
 var LOCAL_FILE = "workspace.local.json";
 async function loadFromFile(dir, options = {}) {
-  const syncedPath = path.join(dir, SYNCED_FILE);
+  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);
   const localPath = path.join(dir, LOCAL_FILE);
   let syncedRaw;
   try {
@@ -64,7 +64,7 @@ async function loadFromFile(dir, options = {}) {
 }
 async function saveToFile(dir, state, options = {}) {
   await import_node_fs.promises.mkdir(dir, { recursive: true });
-  const syncedPath = path.join(dir, SYNCED_FILE);
+  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);
   const localPath = path.join(dir, LOCAL_FILE);
   await ensureFile(syncedPath);
   const release = await import_proper_lockfile.default.lock(syncedPath, {
@@ -80,7 +80,7 @@ async function saveToFile(dir, state, options = {}) {
 }
 async function withWorkspace(dir, fn, options = {}) {
   await import_node_fs.promises.mkdir(dir, { recursive: true });
-  const syncedPath = path.join(dir, SYNCED_FILE);
+  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);
   const localPath = path.join(dir, LOCAL_FILE);
   await ensureFile(syncedPath);
   const release = await import_proper_lockfile.default.lock(syncedPath, {

package/dist/workspace/file-backed.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/workspace/fileBackedWorkspace.ts"],"sourcesContent":["import { promises as fs } from 'node:fs';\nimport * as path from 'node:path';\nimport { FONT_SIZE_PERCENT_DEFAULT } from '@apicircle/shared';\nimport type { WorkspaceLocal, WorkspaceSynced } from '@apicircle/shared';\nimport lockfile from 'proper-lockfile';\nimport type { WorkspaceState } from './patches';\n\n// =============================================================================\n// fileBackedWorkspace — load/save a `{ synced, local }` pair as two JSON\n// files on disk, with a `proper-lockfile` advisory lock so concurrent CLI /\n// MCP writers can't corrupt the document.\n//\n// Layout (relative to the directory passed in):\n//   workspace.synced.json   ← matches WorkspaceSynced exactly, push-to-git target\n//   workspace.local.json    ← WorkspaceLocal, host-private (CLI/MCP doesn't push)\n//\n// The lock is held on `workspace.synced.json` because that's the file the\n// editor races against. Stale locks are released after 30s.\n// =============================================================================\n\nconst SYNCED_FILE = 'workspace.synced.json';\nconst LOCAL_FILE = 'workspace.local.json';\n\nexport interface LoadFromFileOptions {\n  /** When true, return `null` instead of throwing if the synced file is missing. */\n  allowMissing?: boolean;\n}\n\nexport interface SaveToFileOptions {\n  /** Lock timeout (ms). Defaults to 30000. */\n  lockTimeoutMs?: number;\n}\n\n/**\n * Load both workspace documents from `dir`. The synced file is required;\n * the local file is optional and falls back to a minimal empty shape so a\n * CLI on a fresh machine can still operate (it just won't have history /\n * overrides until the desktop app runs once).\n */\nexport async function loadFromFile(\n  dir: string,\n  options: LoadFromFileOptions = {},\n): Promise<WorkspaceState | null> {\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  let syncedRaw: string;\n  try {\n    syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n  } catch (err) {\n    if (options.allowMissing && isENOENT(err)) return null;\n    throw err;\n  }\n  const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n\n  let local: WorkspaceLocal;\n  try {\n    local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n    local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    local = createEmptyLocalForSynced(synced);\n  }\n\n  return { synced, local };\n}\n\n/**\n * Atomically write both documents back to disk. Acquires an advisory lock\n * on the synced file for the duration of the write so a parallel CLI /\n * MCP / desktop save can't interleave.\n *\n * Both files are written via `<file>.tmp` + rename so a crash mid-write\n * never leaves a partial JSON document on disk.\n */\nexport async function saveToFile(\n  dir: string,\n  state: WorkspaceState,\n  options: SaveToFileOptions = {},\n): Promise<void> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  // proper-lockfile requires the target file to exist. Touch it on first save.\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    await writeJsonAtomic(syncedPath, state.synced);\n    await writeJsonAtomic(localPath, state.local);\n  } finally {\n    await release();\n  }\n}\n\n/**\n * Run a load → mutate → save cycle under one lock so a single mutation\n * can't be clobbered by a racing reader-then-writer.\n */\nexport async function withWorkspace<T>(\n  dir: string,\n  fn: (state: WorkspaceState) => Promise<{ next: WorkspaceState; result?: T }>,\n  options: SaveToFileOptions = {},\n): Promise<T | undefined> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    const syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n    const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n    let local: WorkspaceLocal;\n    try {\n      local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n      local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n    } catch (err) {\n      if (!isENOENT(err)) throw err;\n      local = createEmptyLocalForSynced(synced);\n    }\n    const out = await fn({ synced, local });\n    await writeJsonAtomic(syncedPath, out.next.synced);\n    await writeJsonAtomic(localPath, out.next.local);\n    return out.result;\n  } finally {\n    await release();\n  }\n}\n\n// ---------------------------------------------------------------------------\n// internals\n// ---------------------------------------------------------------------------\n\n// File mode for workspace JSON: owner read/write only. Default `fs.writeFile`\n// uses 0o666 minus umask (typically 0o644 — world-readable). The workspace\n// docs carry the synced state (which after redaction is mostly safe to read\n// but still includes per-workspace metadata) and the local state (which\n// holds the encrypted Secret Vault payload table, session metadata, and the\n// vault entries themselves). On multi-user POSIX hosts (CI runners,\n// classroom VMs, shared dev servers) the default would leak both. 0o600\n// keeps the file owner-only. Windows ignores POSIX modes — the inherited\n// per-user ACL under %USERPROFILE% is what protects it there.\nconst WORKSPACE_FILE_MODE = 0o600;\n\nasync function ensureFile(filePath: string): Promise<void> {\n  try {\n    await fs.access(filePath);\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    await fs.writeFile(filePath, '{}', { encoding: 'utf-8', mode: WORKSPACE_FILE_MODE });\n  }\n}\n\nasync function writeJsonAtomic(filePath: string, value: unknown): Promise<void> {\n  const tmp = `${filePath}.tmp`;\n  await fs.writeFile(tmp, JSON.stringify(value, null, 2) + '\\n', {\n    encoding: 'utf-8',\n    mode: WORKSPACE_FILE_MODE,\n  });\n  await fs.rename(tmp, filePath);\n}\n\nfunction isENOENT(err: unknown): boolean {\n  return typeof err === 'object' && err !== null && 'code' in err && err.code === 'ENOENT';\n}\n\nfunction createEmptyLocalForSynced(synced: WorkspaceSynced): WorkspaceLocal {\n  return {\n    schemaVersion: 1,\n    workspaceId: synced.workspaceId,\n    executionPlans: {},\n    history: { requestRuns: [], planRuns: [] },\n    secretIndex: { entries: {} },\n    sessions: { github: { workspace: null, links: {} } },\n    connectedRepo: null,\n    workingBranch: null,\n    seededWorkspaceSha: null,\n    retiredBranch: null,\n    sync: {\n      lastPulledSnapshot: null,\n      lastPulledSha: null,\n      lastPulledAt: null,\n      dirtyKeys: [],\n    },\n    linkedCollections: {},\n    attachmentCache: {},\n    globalContext: {},\n    mockRuntime: { active: {} },\n    ui: {\n      activeRequestId: null,\n      sidebarExpandedSections: [],\n      themeId: 'one-dark-pro',\n      fontId: 'system-sans',\n      fontSizePercent: FONT_SIZE_PERCENT_DEFAULT,\n    },\n    settings: { validateOnSend: true, monacoConsumesWheel: false },\n    snapshots: { entries: [], maxBytes: 50 * 1024 * 1024 },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA+B;AAC/B,WAAsB;AACtB,oBAA0C;AAE1C,6BAAqB;AAgBrB,IAAM,cAAc;AACpB,IAAM,aAAa;AAkBnB,eAAsB,aACpB,KACA,UAA+B,CAAC,GACA;AAChC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAE3C,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,eAAAA,SAAG,SAAS,YAAY,OAAO;AAAA,EACnD,SAAS,KAAK;AACZ,QAAI,QAAQ,gBAAgB,SAAS,GAAG,EAAG,QAAO;AAClD,UAAM;AAAA,EACR;AACA,QAAM,SAAS,KAAK,MAAM,SAAS;AAEnC,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,MAAM,eAAAA,SAAG,SAAS,WAAW,OAAO,CAAC;AACxD,YAAQ,EAAE,GAAG,OAAO,iBAAiB,MAAM,mBAAmB,CAAC,EAAE;AAAA,EACnE,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,YAAQ,0BAA0B,MAAM;AAAA,EAC1C;AAEA,SAAO,EAAE,QAAQ,MAAM;AACzB;AAUA,eAAsB,WACpB,KACA,OACA,UAA6B,CAAC,GACf;AACf,QAAM,eAAAA,SAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAG3C,QAAM,WAAW,UAAU;AAE3B,QAAM,UAAU,MAAM,uBAAAC,QAAS,KAAK,YAAY;AAAA,IAC9C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO,QAAQ,iBAAiB;AAAA,EAClC,CAAC;AACD,MAAI;AACF,UAAM,gBAAgB,YAAY,MAAM,MAAM;AAC9C,UAAM,gBAAgB,WAAW,MAAM,KAAK;AAAA,EAC9C,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAMA,eAAsB,cACpB,KACA,IACA,UAA6B,CAAC,GACN;AACxB,QAAM,eAAAD,SAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAC3C,QAAM,WAAW,UAAU;AAE3B,QAAM,UAAU,MAAM,uBAAAC,QAAS,KAAK,YAAY;AAAA,IAC9C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO,QAAQ,iBAAiB;AAAA,EAClC,CAAC;AACD,MAAI;AACF,UAAM,YAAY,MAAM,eAAAD,SAAG,SAAS,YAAY,OAAO;AACvD,UAAM,SAAS,KAAK,MAAM,SAAS;AACnC,QAAI;AACJ,QAAI;AACF,cAAQ,KAAK,MAAM,MAAM,eAAAA,SAAG,SAAS,WAAW,OAAO,CAAC;AACxD,cAAQ,EAAE,GAAG,OAAO,iBAAiB,MAAM,mBAAmB,CAAC,EAAE;AAAA,IACnE,SAAS,KAAK;AACZ,UAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,cAAQ,0BAA0B,MAAM;AAAA,IAC1C;AACA,UAAM,MAAM,MAAM,GAAG,EAAE,QAAQ,MAAM,CAAC;AACtC,UAAM,gBAAgB,YAAY,IAAI,KAAK,MAAM;AACjD,UAAM,gBAAgB,WAAW,IAAI,KAAK,KAAK;AAC/C,WAAO,IAAI;AAAA,EACb,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAeA,IAAM,sBAAsB;AAE5B,eAAe,WAAW,UAAiC;AACzD,MAAI;AACF,UAAM,eAAAA,SAAG,OAAO,QAAQ;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,UAAM,eAAAA,SAAG,UAAU,UAAU,MAAM,EAAE,UAAU,SAAS,MAAM,oBAAoB,CAAC;AAAA,EACrF;AACF;AAEA,eAAe,gBAAgB,UAAkB,OAA+B;AAC9E,QAAM,MAAM,GAAG,QAAQ;AACvB,QAAM,eAAAA,SAAG,UAAU,KAAK,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI,MAAM;AAAA,IAC7D,UAAU;AAAA,IACV,MAAM;AAAA,EACR,CAAC;AACD,QAAM,eAAAA,SAAG,OAAO,KAAK,QAAQ;AAC/B;AAEA,SAAS,SAAS,KAAuB;AACvC,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,OAAO,IAAI,SAAS;AAClF;AAEA,SAAS,0BAA0B,QAAyC;AAC1E,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,OAAO;AAAA,IACpB,gBAAgB,CAAC;AAAA,IACjB,SAAS,EAAE,aAAa,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,IACzC,aAAa,EAAE,SAAS,CAAC,EAAE;AAAA,IAC3B,UAAU,EAAE,QAAQ,EAAE,WAAW,MAAM,OAAO,CAAC,EAAE,EAAE;AAAA,IACnD,eAAe;AAAA,IACf,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,eAAe;AAAA,IACf,MAAM;AAAA,MACJ,oBAAoB;AAAA,MACpB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,WAAW,CAAC;AAAA,IACd;AAAA,IACA,mBAAmB,CAAC;AAAA,IACpB,iBAAiB,CAAC;AAAA,IAClB,eAAe,CAAC;AAAA,IAChB,aAAa,EAAE,QAAQ,CAAC,EAAE;AAAA,IAC1B,IAAI;AAAA,MACF,iBAAiB;AAAA,MACjB,yBAAyB,CAAC;AAAA,MAC1B,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,iBAAiB;AAAA,IACnB;AAAA,IACA,UAAU,EAAE,gBAAgB,MAAM,qBAAqB,MAAM;AAAA,IAC7D,WAAW,EAAE,SAAS,CAAC,GAAG,UAAU,KAAK,OAAO,KAAK;AAAA,EACvD;AACF;","names":["fs","lockfile"]}
+{"version":3,"sources":["../../src/workspace/fileBackedWorkspace.ts"],"sourcesContent":["import { promises as fs } from 'node:fs';\nimport * as path from 'node:path';\nimport { FONT_SIZE_PERCENT_DEFAULT } from '@apicircle/shared';\nimport type { WorkspaceLocal, WorkspaceSynced } from '@apicircle/shared';\nimport lockfile from 'proper-lockfile';\nimport type { WorkspaceState } from './patches';\n\n// =============================================================================\n// fileBackedWorkspace — load/save a `{ synced, local }` pair as two JSON\n// files on disk, with a `proper-lockfile` advisory lock so concurrent CLI /\n// MCP writers can't corrupt the document.\n//\n// Layout (relative to the directory passed in):\n//   workspace.json          ← matches WorkspaceSynced exactly\n//   workspace.local.json    ← WorkspaceLocal, host-private (CLI/MCP doesn't push)\n//\n// The lock is held on `workspace.json` because that's the file the\n// editor races against. Stale locks are released after 30s.\n// =============================================================================\n\nconst SYNCED_FILE = 'workspace.json';\nconst LOCAL_FILE = 'workspace.local.json';\n\nexport interface LoadFromFileOptions {\n  /** When true, return `null` instead of throwing if the synced file is missing. */\n  allowMissing?: boolean;\n  /** Override the synced filename. Defaults to `workspace.json`. */\n  syncedFilename?: string;\n}\n\nexport interface SaveToFileOptions {\n  /** Lock timeout (ms). Defaults to 30000. */\n  lockTimeoutMs?: number;\n  /** Override the synced filename. Defaults to `workspace.json`. */\n  syncedFilename?: string;\n}\n\n/**\n * Load both workspace documents from `dir`. The synced file is required;\n * the local file is optional and falls back to a minimal empty shape so a\n * CLI on a fresh machine can still operate (it just won't have history /\n * overrides until the desktop app runs once).\n */\nexport async function loadFromFile(\n  dir: string,\n  options: LoadFromFileOptions = {},\n): Promise<WorkspaceState | null> {\n  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  let syncedRaw: string;\n  try {\n    syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n  } catch (err) {\n    if (options.allowMissing && isENOENT(err)) return null;\n    throw err;\n  }\n  const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n\n  let local: WorkspaceLocal;\n  try {\n    local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n    local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    local = createEmptyLocalForSynced(synced);\n  }\n\n  return { synced, local };\n}\n\n/**\n * Atomically write both documents back to disk. Acquires an advisory lock\n * on the synced file for the duration of the write so a parallel CLI /\n * MCP / desktop save can't interleave.\n *\n * Both files are written via `<file>.tmp` + rename so a crash mid-write\n * never leaves a partial JSON document on disk.\n */\nexport async function saveToFile(\n  dir: string,\n  state: WorkspaceState,\n  options: SaveToFileOptions = {},\n): Promise<void> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  // proper-lockfile requires the target file to exist. Touch it on first save.\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    await writeJsonAtomic(syncedPath, state.synced);\n    await writeJsonAtomic(localPath, state.local);\n  } finally {\n    await release();\n  }\n}\n\n/**\n * Run a load → mutate → save cycle under one lock so a single mutation\n * can't be clobbered by a racing reader-then-writer.\n */\nexport async function withWorkspace<T>(\n  dir: string,\n  fn: (state: WorkspaceState) => Promise<{ next: WorkspaceState; result?: T }>,\n  options: SaveToFileOptions = {},\n): Promise<T | undefined> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    const syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n    const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n    let local: WorkspaceLocal;\n    try {\n      local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n      local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n    } catch (err) {\n      if (!isENOENT(err)) throw err;\n      local = createEmptyLocalForSynced(synced);\n    }\n    const out = await fn({ synced, local });\n    await writeJsonAtomic(syncedPath, out.next.synced);\n    await writeJsonAtomic(localPath, out.next.local);\n    return out.result;\n  } finally {\n    await release();\n  }\n}\n\n// ---------------------------------------------------------------------------\n// internals\n// ---------------------------------------------------------------------------\n\n// File mode for workspace JSON: owner read/write only. Default `fs.writeFile`\n// uses 0o666 minus umask (typically 0o644 — world-readable). The workspace\n// docs carry the synced state (which after redaction is mostly safe to read\n// but still includes per-workspace metadata) and the local state (which\n// holds the encrypted Secret Vault payload table, session metadata, and the\n// vault entries themselves). On multi-user POSIX hosts (CI runners,\n// classroom VMs, shared dev servers) the default would leak both. 0o600\n// keeps the file owner-only. Windows ignores POSIX modes — the inherited\n// per-user ACL under %USERPROFILE% is what protects it there.\nconst WORKSPACE_FILE_MODE = 0o600;\n\nasync function ensureFile(filePath: string): Promise<void> {\n  try {\n    await fs.access(filePath);\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    await fs.writeFile(filePath, '{}', { encoding: 'utf-8', mode: WORKSPACE_FILE_MODE });\n  }\n}\n\nasync function writeJsonAtomic(filePath: string, value: unknown): Promise<void> {\n  const tmp = `${filePath}.tmp`;\n  await fs.writeFile(tmp, JSON.stringify(value, null, 2) + '\\n', {\n    encoding: 'utf-8',\n    mode: WORKSPACE_FILE_MODE,\n  });\n  await fs.rename(tmp, filePath);\n}\n\nfunction isENOENT(err: unknown): boolean {\n  return typeof err === 'object' && err !== null && 'code' in err && err.code === 'ENOENT';\n}\n\nfunction createEmptyLocalForSynced(synced: WorkspaceSynced): WorkspaceLocal {\n  return {\n    schemaVersion: 1,\n    workspaceId: synced.workspaceId,\n    executionPlans: {},\n    history: { requestRuns: [], planRuns: [] },\n    secretIndex: { entries: {} },\n    sessions: { github: { workspace: null, links: {} } },\n    connectedRepo: null,\n    workingBranch: null,\n    seededWorkspaceSha: null,\n    retiredBranch: null,\n    sync: {\n      lastPulledSnapshot: null,\n      lastPulledSha: null,\n      lastPulledAt: null,\n      dirtyKeys: [],\n    },\n    linkedCollections: {},\n    attachmentCache: {},\n    globalContext: {},\n    mockRuntime: { active: {} },\n    ui: {\n      activeRequestId: null,\n      sidebarExpandedSections: [],\n      themeId: 'one-dark-pro',\n      fontId: 'system-sans',\n      fontSizePercent: FONT_SIZE_PERCENT_DEFAULT,\n    },\n    settings: { validateOnSend: true, monacoConsumesWheel: false },\n    snapshots: { entries: [], maxBytes: 50 * 1024 * 1024 },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA+B;AAC/B,WAAsB;AACtB,oBAA0C;AAE1C,6BAAqB;AAgBrB,IAAM,cAAc;AACpB,IAAM,aAAa;AAsBnB,eAAsB,aACpB,KACA,UAA+B,CAAC,GACA;AAChC,QAAM,aAAkB,UAAK,KAAK,QAAQ,kBAAkB,WAAW;AACvE,QAAM,YAAiB,UAAK,KAAK,UAAU;AAE3C,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,eAAAA,SAAG,SAAS,YAAY,OAAO;AAAA,EACnD,SAAS,KAAK;AACZ,QAAI,QAAQ,gBAAgB,SAAS,GAAG,EAAG,QAAO;AAClD,UAAM;AAAA,EACR;AACA,QAAM,SAAS,KAAK,MAAM,SAAS;AAEnC,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,MAAM,eAAAA,SAAG,SAAS,WAAW,OAAO,CAAC;AACxD,YAAQ,EAAE,GAAG,OAAO,iBAAiB,MAAM,mBAAmB,CAAC,EAAE;AAAA,EACnE,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,YAAQ,0BAA0B,MAAM;AAAA,EAC1C;AAEA,SAAO,EAAE,QAAQ,MAAM;AACzB;AAUA,eAAsB,WACpB,KACA,OACA,UAA6B,CAAC,GACf;AACf,QAAM,eAAAA,SAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAkB,UAAK,KAAK,QAAQ,kBAAkB,WAAW;AACvE,QAAM,YAAiB,UAAK,KAAK,UAAU;AAG3C,QAAM,WAAW,UAAU;AAE3B,QAAM,UAAU,MAAM,uBAAAC,QAAS,KAAK,YAAY;AAAA,IAC9C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO,QAAQ,iBAAiB;AAAA,EAClC,CAAC;AACD,MAAI;AACF,UAAM,gBAAgB,YAAY,MAAM,MAAM;AAC9C,UAAM,gBAAgB,WAAW,MAAM,KAAK;AAAA,EAC9C,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAMA,eAAsB,cACpB,KACA,IACA,UAA6B,CAAC,GACN;AACxB,QAAM,eAAAD,SAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAkB,UAAK,KAAK,QAAQ,kBAAkB,WAAW;AACvE,QAAM,YAAiB,UAAK,KAAK,UAAU;AAC3C,QAAM,WAAW,UAAU;AAE3B,QAAM,UAAU,MAAM,uBAAAC,QAAS,KAAK,YAAY;AAAA,IAC9C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO,QAAQ,iBAAiB;AAAA,EAClC,CAAC;AACD,MAAI;AACF,UAAM,YAAY,MAAM,eAAAD,SAAG,SAAS,YAAY,OAAO;AACvD,UAAM,SAAS,KAAK,MAAM,SAAS;AACnC,QAAI;AACJ,QAAI;AACF,cAAQ,KAAK,MAAM,MAAM,eAAAA,SAAG,SAAS,WAAW,OAAO,CAAC;AACxD,cAAQ,EAAE,GAAG,OAAO,iBAAiB,MAAM,mBAAmB,CAAC,EAAE;AAAA,IACnE,SAAS,KAAK;AACZ,UAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,cAAQ,0BAA0B,MAAM;AAAA,IAC1C;AACA,UAAM,MAAM,MAAM,GAAG,EAAE,QAAQ,MAAM,CAAC;AACtC,UAAM,gBAAgB,YAAY,IAAI,KAAK,MAAM;AACjD,UAAM,gBAAgB,WAAW,IAAI,KAAK,KAAK;AAC/C,WAAO,IAAI;AAAA,EACb,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAeA,IAAM,sBAAsB;AAE5B,eAAe,WAAW,UAAiC;AACzD,MAAI;AACF,UAAM,eAAAA,SAAG,OAAO,QAAQ;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,UAAM,eAAAA,SAAG,UAAU,UAAU,MAAM,EAAE,UAAU,SAAS,MAAM,oBAAoB,CAAC;AAAA,EACrF;AACF;AAEA,eAAe,gBAAgB,UAAkB,OAA+B;AAC9E,QAAM,MAAM,GAAG,QAAQ;AACvB,QAAM,eAAAA,SAAG,UAAU,KAAK,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI,MAAM;AAAA,IAC7D,UAAU;AAAA,IACV,MAAM;AAAA,EACR,CAAC;AACD,QAAM,eAAAA,SAAG,OAAO,KAAK,QAAQ;AAC/B;AAEA,SAAS,SAAS,KAAuB;AACvC,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,OAAO,IAAI,SAAS;AAClF;AAEA,SAAS,0BAA0B,QAAyC;AAC1E,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,OAAO;AAAA,IACpB,gBAAgB,CAAC;AAAA,IACjB,SAAS,EAAE,aAAa,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,IACzC,aAAa,EAAE,SAAS,CAAC,EAAE;AAAA,IAC3B,UAAU,EAAE,QAAQ,EAAE,WAAW,MAAM,OAAO,CAAC,EAAE,EAAE;AAAA,IACnD,eAAe;AAAA,IACf,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,eAAe;AAAA,IACf,MAAM;AAAA,MACJ,oBAAoB;AAAA,MACpB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,WAAW,CAAC;AAAA,IACd;AAAA,IACA,mBAAmB,CAAC;AAAA,IACpB,iBAAiB,CAAC;AAAA,IAClB,eAAe,CAAC;AAAA,IAChB,aAAa,EAAE,QAAQ,CAAC,EAAE;AAAA,IAC1B,IAAI;AAAA,MACF,iBAAiB;AAAA,MACjB,yBAAyB,CAAC;AAAA,MAC1B,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,iBAAiB;AAAA,IACnB;AAAA,IACA,UAAU,EAAE,gBAAgB,MAAM,qBAAqB,MAAM;AAAA,IAC7D,WAAW,EAAE,SAAS,CAAC,GAAG,UAAU,KAAK,OAAO,KAAK;AAAA,EACvD;AACF;","names":["fs","lockfile"]}

package/dist/workspace/file-backed.d.cts

@@ -1,13 +1,17 @@
-import { W as WorkspaceState } from '../patches-h_K1VcZR.cjs';
+import { W as WorkspaceState } from '../patches-B3VGNVgf.cjs';
 import '@apicircle/shared';
 
 interface LoadFromFileOptions {
     /** When true, return `null` instead of throwing if the synced file is missing. */
     allowMissing?: boolean;
+    /** Override the synced filename. Defaults to `workspace.json`. */
+    syncedFilename?: string;
 }
 interface SaveToFileOptions {
     /** Lock timeout (ms). Defaults to 30000. */
     lockTimeoutMs?: number;
+    /** Override the synced filename. Defaults to `workspace.json`. */
+    syncedFilename?: string;
 }
 /**
  * Load both workspace documents from `dir`. The synced file is required;

package/dist/workspace/file-backed.d.ts

@@ -1,13 +1,17 @@
-import { W as WorkspaceState } from '../patches-h_K1VcZR.js';
+import { W as WorkspaceState } from '../patches-B3VGNVgf.js';
 import '@apicircle/shared';
 
 interface LoadFromFileOptions {
     /** When true, return `null` instead of throwing if the synced file is missing. */
     allowMissing?: boolean;
+    /** Override the synced filename. Defaults to `workspace.json`. */
+    syncedFilename?: string;
 }
 interface SaveToFileOptions {
     /** Lock timeout (ms). Defaults to 30000. */
     lockTimeoutMs?: number;
+    /** Override the synced filename. Defaults to `workspace.json`. */
+    syncedFilename?: string;
 }
 /**
  * Load both workspace documents from `dir`. The synced file is required;

package/dist/workspace/file-backed.js

@@ -2,7 +2,7 @@ import {
   loadFromFile,
   saveToFile,
   withWorkspace
-} from "../chunk-L5DQT7V6.js";
+} from "../chunk-T6A4ICRL.js";
 export {
   loadFromFile,
   saveToFile,

package/dist/workspace/registry.cjs

@@ -31,12 +31,13 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var workspaceRegistry_exports = {};
 __export(workspaceRegistry_exports, {
   REGISTRY_FILE: () => REGISTRY_FILE,
+  WORKSPACE_DIR_PREFIX: () => WORKSPACE_DIR_PREFIX,
+  defaultApicircleRoot: () => defaultApicircleRoot,
   deleteWorkspaceById: () => deleteWorkspaceById,
   emptyRegistry: () => emptyRegistry,
   findWorkspaceEntry: () => findWorkspaceEntry,
   loadRegistry: () => loadRegistry,
   loadWorkspaceById: () => loadWorkspaceById,
-  migrateLegacyWorkspace: () => migrateLegacyWorkspace,
   registerWorkspace: () => registerWorkspace,
   saveRegistry: () => saveRegistry,
   saveWorkspaceById: () => saveWorkspaceById,
@@ -45,6 +46,7 @@ __export(workspaceRegistry_exports, {
 });
 module.exports = __toCommonJS(workspaceRegistry_exports);
 var import_node_fs2 = require("fs");
+var os = __toESM(require("os"), 1);
 var path2 = __toESM(require("path"), 1);
 var import_proper_lockfile2 = __toESM(require("proper-lockfile"), 1);
 
@@ -53,10 +55,10 @@ var import_node_fs = require("fs");
 var path = __toESM(require("path"), 1);
 var import_shared = require("@apicircle/shared");
 var import_proper_lockfile = __toESM(require("proper-lockfile"), 1);
-var SYNCED_FILE = "workspace.synced.json";
+var SYNCED_FILE = "workspace.json";
 var LOCAL_FILE = "workspace.local.json";
 async function loadFromFile(dir, options = {}) {
-  const syncedPath = path.join(dir, SYNCED_FILE);
+  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);
   const localPath = path.join(dir, LOCAL_FILE);
   let syncedRaw;
   try {
@@ -78,7 +80,7 @@ async function loadFromFile(dir, options = {}) {
 }
 async function saveToFile(dir, state, options = {}) {
   await import_node_fs.promises.mkdir(dir, { recursive: true });
-  const syncedPath = path.join(dir, SYNCED_FILE);
+  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);
   const localPath = path.join(dir, LOCAL_FILE);
   await ensureFile(syncedPath);
   const release = await import_proper_lockfile.default.lock(syncedPath, {
@@ -148,11 +150,15 @@ function createEmptyLocalForSynced(synced) {
 
 // src/workspace/workspaceRegistry.ts
 var REGISTRY_FILE = "registry.json";
+var WORKSPACE_DIR_PREFIX = "workspace-";
+function defaultApicircleRoot() {
+  return path2.join(os.homedir(), ".apicircle");
+}
 function emptyRegistry() {
   return { schemaVersion: 1, activeWorkspaceId: null, workspaces: [] };
 }
 function workspaceDirFor(root, workspaceId) {
-  return path2.join(root, workspaceId);
+  return path2.join(root, `${WORKSPACE_DIR_PREFIX}${workspaceId}`);
 }
 async function loadRegistry(root) {
   const filePath = path2.join(root, REGISTRY_FILE);
@@ -240,33 +246,6 @@ function findWorkspaceEntry(registry, idOrName) {
   const byName = registry.workspaces.find((w) => w.name.toLowerCase() === lower);
   return byName ?? null;
 }
-async function migrateLegacyWorkspace(args) {
-  const { legacyDir, registryRoot, defaultName = "Workspace" } = args;
-  const existing = await loadRegistry(registryRoot);
-  if (existing) return { migrated: false, registry: existing };
-  const legacyState = await loadFromFile(legacyDir, { allowMissing: true });
-  if (!legacyState) {
-    return { migrated: false, registry: emptyRegistry() };
-  }
-  const id = legacyState.synced.workspaceId;
-  await saveToFile(workspaceDirFor(registryRoot, id), legacyState);
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const entry = {
-    id,
-    name: defaultName,
-    createdAt: legacyState.synced.meta.createdAt ?? now,
-    lastOpenedAt: now
-  };
-  const registry = {
-    schemaVersion: 1,
-    activeWorkspaceId: id,
-    workspaces: [entry]
-  };
-  await saveRegistry(registryRoot, registry);
-  await import_node_fs2.promises.rm(path2.join(legacyDir, "workspace.synced.json"), { force: true });
-  await import_node_fs2.promises.rm(path2.join(legacyDir, "workspace.local.json"), { force: true });
-  return { migrated: true, registry };
-}
 function normalizeRegistry(raw) {
   return {
     schemaVersion: 1,
@@ -288,12 +267,13 @@ function isENOENT2(err) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   REGISTRY_FILE,
+  WORKSPACE_DIR_PREFIX,
+  defaultApicircleRoot,
   deleteWorkspaceById,
   emptyRegistry,
   findWorkspaceEntry,
   loadRegistry,
   loadWorkspaceById,
-  migrateLegacyWorkspace,
   registerWorkspace,
   saveRegistry,
   saveWorkspaceById,

package/dist/workspace/registry.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/workspace/workspaceRegistry.ts","../../src/workspace/fileBackedWorkspace.ts"],"sourcesContent":["import { promises as fs } from 'node:fs';\nimport * as path from 'node:path';\nimport lockfile from 'proper-lockfile';\nimport type { WorkspaceLocal, WorkspaceSynced } from '@apicircle/shared';\nimport { loadFromFile, saveToFile } from './fileBackedWorkspace';\nimport type { WorkspaceState } from './patches';\n\n// =============================================================================\n// On-disk multi-workspace registry. Mirrors the IDB-side `WorkspaceRegistry`\n// shape (`packages/ui-components/src/persistence/db.ts`) so the desktop app,\n// the CLI, and the MCP server all read the same JSON file format.\n//\n// Layout under `<root>/`:\n//\n//   registry.json                       ← this module's source of truth\n//   <workspace-id-1>/\n//     workspace.synced.json\n//     workspace.local.json\n//   <workspace-id-2>/\n//     ...\n//\n// Each workspace lives in its own subdirectory so concurrent writers (the\n// desktop's mirror + a CLI invocation against a different workspace) can't\n// step on each other. `proper-lockfile` still guards the registry file\n// itself when readers / writers race.\n// =============================================================================\n\nexport const REGISTRY_FILE = 'registry.json';\n\nexport interface WorkspaceRegistryEntry {\n  /** Matches the in-workspace `synced.workspaceId`. */\n  id: string;\n  /** Human-readable label. Local to this device — never pushed to git. */\n  name: string;\n  /** ISO timestamp; bumped every time this workspace is opened or written. */\n  lastOpenedAt: string;\n  /** ISO timestamp; set when the workspace was first registered. */\n  createdAt: string;\n}\n\nexport interface WorkspaceRegistry {\n  schemaVersion: 1;\n  /** id of the workspace the desktop UI should boot into. `null` only on\n   *  an empty registry (no workspaces have been seeded yet). */\n  activeWorkspaceId: string | null;\n  workspaces: WorkspaceRegistryEntry[];\n}\n\n/** Default empty registry. */\nexport function emptyRegistry(): WorkspaceRegistry {\n  return { schemaVersion: 1, activeWorkspaceId: null, workspaces: [] };\n}\n\n/** Compute the directory inside `<root>/` that holds a workspace's JSON pair. */\nexport function workspaceDirFor(root: string, workspaceId: string): string {\n  return path.join(root, workspaceId);\n}\n\n/** Load the registry from disk; returns `null` if the file is missing. */\nexport async function loadRegistry(root: string): Promise<WorkspaceRegistry | null> {\n  const filePath = path.join(root, REGISTRY_FILE);\n  try {\n    const raw = await fs.readFile(filePath, 'utf-8');\n    const parsed = JSON.parse(raw) as WorkspaceRegistry;\n    return normalizeRegistry(parsed);\n  } catch (err) {\n    if (isENOENT(err)) return null;\n    throw err;\n  }\n}\n\n/** Save the registry atomically (`<file>.tmp` + rename). */\nexport async function saveRegistry(root: string, registry: WorkspaceRegistry): Promise<void> {\n  await fs.mkdir(root, { recursive: true });\n  const filePath = path.join(root, REGISTRY_FILE);\n  const tmp = `${filePath}.tmp`;\n  await ensureFile(filePath);\n  // Lock the registry file itself so two writers can't tear-write the JSON.\n  const release = await lockfile.lock(filePath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: 30000,\n  });\n  try {\n    await fs.writeFile(tmp, JSON.stringify(registry, null, 2) + '\\n', {\n      encoding: 'utf-8',\n      mode: 0o600,\n    });\n    await fs.rename(tmp, filePath);\n  } finally {\n    await release();\n  }\n}\n\n/**\n * Read a workspace's `{synced, local}` pair by id. Returns `null` if the\n * workspace subdirectory is missing OR its `workspace.synced.json` is\n * missing. Used by the CLI / MCP / desktop reader.\n */\nexport async function loadWorkspaceById(\n  root: string,\n  workspaceId: string,\n): Promise<WorkspaceState | null> {\n  return loadFromFile(workspaceDirFor(root, workspaceId), { allowMissing: true });\n}\n\n/**\n * Write a workspace's pair under `<root>/<id>/`. Idempotent; the directory\n * is created on first write. Bumps the registry entry's `lastOpenedAt`\n * and writes the registry back if the entry exists.\n */\nexport async function saveWorkspaceById(\n  root: string,\n  workspaceId: string,\n  state: WorkspaceState,\n): Promise<void> {\n  await saveToFile(workspaceDirFor(root, workspaceId), state);\n}\n\n/**\n * Remove a workspace from disk: deletes its directory, drops it from the\n * registry. If it was the active workspace, the next-most-recent remaining\n * workspace becomes active. If no workspaces remain, `activeWorkspaceId`\n * goes to `null` and the caller should seed a fresh workspace.\n */\nexport async function deleteWorkspaceById(\n  root: string,\n  workspaceId: string,\n): Promise<WorkspaceRegistry> {\n  const registry = (await loadRegistry(root)) ?? emptyRegistry();\n  const remaining = registry.workspaces.filter((w) => w.id !== workspaceId);\n  await fs.rm(workspaceDirFor(root, workspaceId), { recursive: true, force: true });\n  let nextActive = registry.activeWorkspaceId;\n  if (nextActive === workspaceId) {\n    nextActive =\n      [...remaining].sort((a, b) => b.lastOpenedAt.localeCompare(a.lastOpenedAt))[0]?.id ?? null;\n  }\n  const next: WorkspaceRegistry = {\n    ...registry,\n    activeWorkspaceId: nextActive,\n    workspaces: remaining,\n  };\n  await saveRegistry(root, next);\n  return next;\n}\n\n/**\n * Add a workspace to the registry. Caller is responsible for having\n * written `workspace.synced.json` first. Existing entry with the same id\n * is replaced (idempotent update). Newly-registered workspaces become\n * the active one when there is no prior active.\n */\nexport async function registerWorkspace(\n  root: string,\n  entry: WorkspaceRegistryEntry,\n): Promise<WorkspaceRegistry> {\n  const registry = (await loadRegistry(root)) ?? emptyRegistry();\n  const otherEntries = registry.workspaces.filter((w) => w.id !== entry.id);\n  const next: WorkspaceRegistry = {\n    schemaVersion: 1,\n    activeWorkspaceId: registry.activeWorkspaceId ?? entry.id,\n    workspaces: [...otherEntries, entry],\n  };\n  await saveRegistry(root, next);\n  return next;\n}\n\n/** Set the active workspace id. Throws if the id isn't in the registry. */\nexport async function setActiveWorkspace(\n  root: string,\n  workspaceId: string,\n): Promise<WorkspaceRegistry> {\n  const registry = (await loadRegistry(root)) ?? emptyRegistry();\n  if (!registry.workspaces.some((w) => w.id === workspaceId)) {\n    throw new Error(`workspace ${workspaceId} is not in the registry at ${root}`);\n  }\n  const now = new Date().toISOString();\n  const next: WorkspaceRegistry = {\n    ...registry,\n    activeWorkspaceId: workspaceId,\n    workspaces: registry.workspaces.map((w) =>\n      w.id === workspaceId ? { ...w, lastOpenedAt: now } : w,\n    ),\n  };\n  await saveRegistry(root, next);\n  return next;\n}\n\n/**\n * Look up a workspace registry entry by id OR by name (case-insensitive).\n * Used by the CLI's `--workspace <selector>` resolver — accepts both forms.\n * Returns `null` if no entry matches.\n */\nexport function findWorkspaceEntry(\n  registry: WorkspaceRegistry,\n  idOrName: string,\n): WorkspaceRegistryEntry | null {\n  const exactId = registry.workspaces.find((w) => w.id === idOrName);\n  if (exactId) return exactId;\n  const lower = idOrName.toLowerCase();\n  const byName = registry.workspaces.find((w) => w.name.toLowerCase() === lower);\n  return byName ?? null;\n}\n\n/**\n * One-time migration from the legacy single-workspace layout\n * (`<root>/workspace.synced.json` written next to the registry root) into\n * per-workspace subdirectories. Runs on first boot after the multi-workspace\n * rollout. No-op when the registry already exists.\n *\n * The legacy layout was: the desktop's userData/workspace/ directly held\n * `workspace.synced.json` + `workspace.local.json`. The new layout puts\n * those under `userData/workspaces/<id>/`. We read the legacy pair, write\n * it under the new layout keyed on its `synced.workspaceId`, then unlink\n * the legacy files so re-migration is impossible.\n */\nexport async function migrateLegacyWorkspace(args: {\n  legacyDir: string;\n  registryRoot: string;\n  defaultName?: string;\n}): Promise<{ migrated: boolean; registry: WorkspaceRegistry }> {\n  const { legacyDir, registryRoot, defaultName = 'Workspace' } = args;\n  const existing = await loadRegistry(registryRoot);\n  if (existing) return { migrated: false, registry: existing };\n  const legacyState = await loadFromFile(legacyDir, { allowMissing: true });\n  if (!legacyState) {\n    return { migrated: false, registry: emptyRegistry() };\n  }\n  const id = legacyState.synced.workspaceId;\n  await saveToFile(workspaceDirFor(registryRoot, id), legacyState);\n  const now = new Date().toISOString();\n  const entry: WorkspaceRegistryEntry = {\n    id,\n    name: defaultName,\n    createdAt: legacyState.synced.meta.createdAt ?? now,\n    lastOpenedAt: now,\n  };\n  const registry: WorkspaceRegistry = {\n    schemaVersion: 1,\n    activeWorkspaceId: id,\n    workspaces: [entry],\n  };\n  await saveRegistry(registryRoot, registry);\n  // Remove the legacy files so subsequent boots don't re-migrate (and so\n  // the CLI / MCP don't accidentally read the stale copy).\n  await fs.rm(path.join(legacyDir, 'workspace.synced.json'), { force: true });\n  await fs.rm(path.join(legacyDir, 'workspace.local.json'), { force: true });\n  return { migrated: true, registry };\n}\n\n/** Normalize a parsed registry so downstream code can rely on its shape. */\nfunction normalizeRegistry(raw: WorkspaceRegistry): WorkspaceRegistry {\n  return {\n    schemaVersion: 1,\n    activeWorkspaceId: raw.activeWorkspaceId ?? null,\n    workspaces: Array.isArray(raw.workspaces) ? raw.workspaces : [],\n  };\n}\n\nasync function ensureFile(filePath: string): Promise<void> {\n  try {\n    await fs.access(filePath);\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    await fs.writeFile(filePath, '{}', { encoding: 'utf-8', mode: 0o600 });\n  }\n}\n\nfunction isENOENT(err: unknown): boolean {\n  return typeof err === 'object' && err !== null && 'code' in err && err.code === 'ENOENT';\n}\n\n// Re-export commonly-used helpers so consumers can import from one place.\nexport type { WorkspaceLocal, WorkspaceSynced };\n","import { promises as fs } from 'node:fs';\nimport * as path from 'node:path';\nimport { FONT_SIZE_PERCENT_DEFAULT } from '@apicircle/shared';\nimport type { WorkspaceLocal, WorkspaceSynced } from '@apicircle/shared';\nimport lockfile from 'proper-lockfile';\nimport type { WorkspaceState } from './patches';\n\n// =============================================================================\n// fileBackedWorkspace — load/save a `{ synced, local }` pair as two JSON\n// files on disk, with a `proper-lockfile` advisory lock so concurrent CLI /\n// MCP writers can't corrupt the document.\n//\n// Layout (relative to the directory passed in):\n//   workspace.synced.json   ← matches WorkspaceSynced exactly, push-to-git target\n//   workspace.local.json    ← WorkspaceLocal, host-private (CLI/MCP doesn't push)\n//\n// The lock is held on `workspace.synced.json` because that's the file the\n// editor races against. Stale locks are released after 30s.\n// =============================================================================\n\nconst SYNCED_FILE = 'workspace.synced.json';\nconst LOCAL_FILE = 'workspace.local.json';\n\nexport interface LoadFromFileOptions {\n  /** When true, return `null` instead of throwing if the synced file is missing. */\n  allowMissing?: boolean;\n}\n\nexport interface SaveToFileOptions {\n  /** Lock timeout (ms). Defaults to 30000. */\n  lockTimeoutMs?: number;\n}\n\n/**\n * Load both workspace documents from `dir`. The synced file is required;\n * the local file is optional and falls back to a minimal empty shape so a\n * CLI on a fresh machine can still operate (it just won't have history /\n * overrides until the desktop app runs once).\n */\nexport async function loadFromFile(\n  dir: string,\n  options: LoadFromFileOptions = {},\n): Promise<WorkspaceState | null> {\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  let syncedRaw: string;\n  try {\n    syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n  } catch (err) {\n    if (options.allowMissing && isENOENT(err)) return null;\n    throw err;\n  }\n  const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n\n  let local: WorkspaceLocal;\n  try {\n    local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n    local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    local = createEmptyLocalForSynced(synced);\n  }\n\n  return { synced, local };\n}\n\n/**\n * Atomically write both documents back to disk. Acquires an advisory lock\n * on the synced file for the duration of the write so a parallel CLI /\n * MCP / desktop save can't interleave.\n *\n * Both files are written via `<file>.tmp` + rename so a crash mid-write\n * never leaves a partial JSON document on disk.\n */\nexport async function saveToFile(\n  dir: string,\n  state: WorkspaceState,\n  options: SaveToFileOptions = {},\n): Promise<void> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  // proper-lockfile requires the target file to exist. Touch it on first save.\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    await writeJsonAtomic(syncedPath, state.synced);\n    await writeJsonAtomic(localPath, state.local);\n  } finally {\n    await release();\n  }\n}\n\n/**\n * Run a load → mutate → save cycle under one lock so a single mutation\n * can't be clobbered by a racing reader-then-writer.\n */\nexport async function withWorkspace<T>(\n  dir: string,\n  fn: (state: WorkspaceState) => Promise<{ next: WorkspaceState; result?: T }>,\n  options: SaveToFileOptions = {},\n): Promise<T | undefined> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    const syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n    const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n    let local: WorkspaceLocal;\n    try {\n      local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n      local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n    } catch (err) {\n      if (!isENOENT(err)) throw err;\n      local = createEmptyLocalForSynced(synced);\n    }\n    const out = await fn({ synced, local });\n    await writeJsonAtomic(syncedPath, out.next.synced);\n    await writeJsonAtomic(localPath, out.next.local);\n    return out.result;\n  } finally {\n    await release();\n  }\n}\n\n// ---------------------------------------------------------------------------\n// internals\n// ---------------------------------------------------------------------------\n\n// File mode for workspace JSON: owner read/write only. Default `fs.writeFile`\n// uses 0o666 minus umask (typically 0o644 — world-readable). The workspace\n// docs carry the synced state (which after redaction is mostly safe to read\n// but still includes per-workspace metadata) and the local state (which\n// holds the encrypted Secret Vault payload table, session metadata, and the\n// vault entries themselves). On multi-user POSIX hosts (CI runners,\n// classroom VMs, shared dev servers) the default would leak both. 0o600\n// keeps the file owner-only. Windows ignores POSIX modes — the inherited\n// per-user ACL under %USERPROFILE% is what protects it there.\nconst WORKSPACE_FILE_MODE = 0o600;\n\nasync function ensureFile(filePath: string): Promise<void> {\n  try {\n    await fs.access(filePath);\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    await fs.writeFile(filePath, '{}', { encoding: 'utf-8', mode: WORKSPACE_FILE_MODE });\n  }\n}\n\nasync function writeJsonAtomic(filePath: string, value: unknown): Promise<void> {\n  const tmp = `${filePath}.tmp`;\n  await fs.writeFile(tmp, JSON.stringify(value, null, 2) + '\\n', {\n    encoding: 'utf-8',\n    mode: WORKSPACE_FILE_MODE,\n  });\n  await fs.rename(tmp, filePath);\n}\n\nfunction isENOENT(err: unknown): boolean {\n  return typeof err === 'object' && err !== null && 'code' in err && err.code === 'ENOENT';\n}\n\nfunction createEmptyLocalForSynced(synced: WorkspaceSynced): WorkspaceLocal {\n  return {\n    schemaVersion: 1,\n    workspaceId: synced.workspaceId,\n    executionPlans: {},\n    history: { requestRuns: [], planRuns: [] },\n    secretIndex: { entries: {} },\n    sessions: { github: { workspace: null, links: {} } },\n    connectedRepo: null,\n    workingBranch: null,\n    seededWorkspaceSha: null,\n    retiredBranch: null,\n    sync: {\n      lastPulledSnapshot: null,\n      lastPulledSha: null,\n      lastPulledAt: null,\n      dirtyKeys: [],\n    },\n    linkedCollections: {},\n    attachmentCache: {},\n    globalContext: {},\n    mockRuntime: { active: {} },\n    ui: {\n      activeRequestId: null,\n      sidebarExpandedSections: [],\n      themeId: 'one-dark-pro',\n      fontId: 'system-sans',\n      fontSizePercent: FONT_SIZE_PERCENT_DEFAULT,\n    },\n    settings: { validateOnSend: true, monacoConsumesWheel: false },\n    snapshots: { entries: [], maxBytes: 50 * 1024 * 1024 },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAAA,kBAA+B;AAC/B,IAAAC,QAAsB;AACtB,IAAAC,0BAAqB;;;ACFrB,qBAA+B;AAC/B,WAAsB;AACtB,oBAA0C;AAE1C,6BAAqB;AAgBrB,IAAM,cAAc;AACpB,IAAM,aAAa;AAkBnB,eAAsB,aACpB,KACA,UAA+B,CAAC,GACA;AAChC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAE3C,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,eAAAC,SAAG,SAAS,YAAY,OAAO;AAAA,EACnD,SAAS,KAAK;AACZ,QAAI,QAAQ,gBAAgB,SAAS,GAAG,EAAG,QAAO;AAClD,UAAM;AAAA,EACR;AACA,QAAM,SAAS,KAAK,MAAM,SAAS;AAEnC,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,MAAM,eAAAA,SAAG,SAAS,WAAW,OAAO,CAAC;AACxD,YAAQ,EAAE,GAAG,OAAO,iBAAiB,MAAM,mBAAmB,CAAC,EAAE;AAAA,EACnE,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,YAAQ,0BAA0B,MAAM;AAAA,EAC1C;AAEA,SAAO,EAAE,QAAQ,MAAM;AACzB;AAUA,eAAsB,WACpB,KACA,OACA,UAA6B,CAAC,GACf;AACf,QAAM,eAAAA,SAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAkB,UAAK,KAAK,WAAW;AAC7C,QAAM,YAAiB,UAAK,KAAK,UAAU;AAG3C,QAAM,WAAW,UAAU;AAE3B,QAAM,UAAU,MAAM,uBAAAC,QAAS,KAAK,YAAY;AAAA,IAC9C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO,QAAQ,iBAAiB;AAAA,EAClC,CAAC;AACD,MAAI;AACF,UAAM,gBAAgB,YAAY,MAAM,MAAM;AAC9C,UAAM,gBAAgB,WAAW,MAAM,KAAK;AAAA,EAC9C,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAqDA,IAAM,sBAAsB;AAE5B,eAAe,WAAW,UAAiC;AACzD,MAAI;AACF,UAAM,eAAAC,SAAG,OAAO,QAAQ;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,UAAM,eAAAA,SAAG,UAAU,UAAU,MAAM,EAAE,UAAU,SAAS,MAAM,oBAAoB,CAAC;AAAA,EACrF;AACF;AAEA,eAAe,gBAAgB,UAAkB,OAA+B;AAC9E,QAAM,MAAM,GAAG,QAAQ;AACvB,QAAM,eAAAA,SAAG,UAAU,KAAK,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI,MAAM;AAAA,IAC7D,UAAU;AAAA,IACV,MAAM;AAAA,EACR,CAAC;AACD,QAAM,eAAAA,SAAG,OAAO,KAAK,QAAQ;AAC/B;AAEA,SAAS,SAAS,KAAuB;AACvC,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,OAAO,IAAI,SAAS;AAClF;AAEA,SAAS,0BAA0B,QAAyC;AAC1E,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,OAAO;AAAA,IACpB,gBAAgB,CAAC;AAAA,IACjB,SAAS,EAAE,aAAa,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,IACzC,aAAa,EAAE,SAAS,CAAC,EAAE;AAAA,IAC3B,UAAU,EAAE,QAAQ,EAAE,WAAW,MAAM,OAAO,CAAC,EAAE,EAAE;AAAA,IACnD,eAAe;AAAA,IACf,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,eAAe;AAAA,IACf,MAAM;AAAA,MACJ,oBAAoB;AAAA,MACpB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,WAAW,CAAC;AAAA,IACd;AAAA,IACA,mBAAmB,CAAC;AAAA,IACpB,iBAAiB,CAAC;AAAA,IAClB,eAAe,CAAC;AAAA,IAChB,aAAa,EAAE,QAAQ,CAAC,EAAE;AAAA,IAC1B,IAAI;AAAA,MACF,iBAAiB;AAAA,MACjB,yBAAyB,CAAC;AAAA,MAC1B,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,iBAAiB;AAAA,IACnB;AAAA,IACA,UAAU,EAAE,gBAAgB,MAAM,qBAAqB,MAAM;AAAA,IAC7D,WAAW,EAAE,SAAS,CAAC,GAAG,UAAU,KAAK,OAAO,KAAK;AAAA,EACvD;AACF;;;ADnLO,IAAM,gBAAgB;AAsBtB,SAAS,gBAAmC;AACjD,SAAO,EAAE,eAAe,GAAG,mBAAmB,MAAM,YAAY,CAAC,EAAE;AACrE;AAGO,SAAS,gBAAgB,MAAc,aAA6B;AACzE,SAAY,WAAK,MAAM,WAAW;AACpC;AAGA,eAAsB,aAAa,MAAiD;AAClF,QAAM,WAAgB,WAAK,MAAM,aAAa;AAC9C,MAAI;AACF,UAAM,MAAM,MAAM,gBAAAC,SAAG,SAAS,UAAU,OAAO;AAC/C,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO,kBAAkB,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,QAAIC,UAAS,GAAG,EAAG,QAAO;AAC1B,UAAM;AAAA,EACR;AACF;AAGA,eAAsB,aAAa,MAAc,UAA4C;AAC3F,QAAM,gBAAAD,SAAG,MAAM,MAAM,EAAE,WAAW,KAAK,CAAC;AACxC,QAAM,WAAgB,WAAK,MAAM,aAAa;AAC9C,QAAM,MAAM,GAAG,QAAQ;AACvB,QAAME,YAAW,QAAQ;AAEzB,QAAM,UAAU,MAAM,wBAAAC,QAAS,KAAK,UAAU;AAAA,IAC5C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO;AAAA,EACT,CAAC;AACD,MAAI;AACF,UAAM,gBAAAH,SAAG,UAAU,KAAK,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,MAAM;AAAA,MAChE,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AACD,UAAM,gBAAAA,SAAG,OAAO,KAAK,QAAQ;AAAA,EAC/B,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAOA,eAAsB,kBACpB,MACA,aACgC;AAChC,SAAO,aAAa,gBAAgB,MAAM,WAAW,GAAG,EAAE,cAAc,KAAK,CAAC;AAChF;AAOA,eAAsB,kBACpB,MACA,aACA,OACe;AACf,QAAM,WAAW,gBAAgB,MAAM,WAAW,GAAG,KAAK;AAC5D;AAQA,eAAsB,oBACpB,MACA,aAC4B;AAC5B,QAAM,WAAY,MAAM,aAAa,IAAI,KAAM,cAAc;AAC7D,QAAM,YAAY,SAAS,WAAW,OAAO,CAAC,MAAM,EAAE,OAAO,WAAW;AACxE,QAAM,gBAAAA,SAAG,GAAG,gBAAgB,MAAM,WAAW,GAAG,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChF,MAAI,aAAa,SAAS;AAC1B,MAAI,eAAe,aAAa;AAC9B,iBACE,CAAC,GAAG,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC,GAAG,MAAM;AAAA,EAC1F;AACA,QAAM,OAA0B;AAAA,IAC9B,GAAG;AAAA,IACH,mBAAmB;AAAA,IACnB,YAAY;AAAA,EACd;AACA,QAAM,aAAa,MAAM,IAAI;AAC7B,SAAO;AACT;AAQA,eAAsB,kBACpB,MACA,OAC4B;AAC5B,QAAM,WAAY,MAAM,aAAa,IAAI,KAAM,cAAc;AAC7D,QAAM,eAAe,SAAS,WAAW,OAAO,CAAC,MAAM,EAAE,OAAO,MAAM,EAAE;AACxE,QAAM,OAA0B;AAAA,IAC9B,eAAe;AAAA,IACf,mBAAmB,SAAS,qBAAqB,MAAM;AAAA,IACvD,YAAY,CAAC,GAAG,cAAc,KAAK;AAAA,EACrC;AACA,QAAM,aAAa,MAAM,IAAI;AAC7B,SAAO;AACT;AAGA,eAAsB,mBACpB,MACA,aAC4B;AAC5B,QAAM,WAAY,MAAM,aAAa,IAAI,KAAM,cAAc;AAC7D,MAAI,CAAC,SAAS,WAAW,KAAK,CAAC,MAAM,EAAE,OAAO,WAAW,GAAG;AAC1D,UAAM,IAAI,MAAM,aAAa,WAAW,8BAA8B,IAAI,EAAE;AAAA,EAC9E;AACA,QAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,QAAM,OAA0B;AAAA,IAC9B,GAAG;AAAA,IACH,mBAAmB;AAAA,IACnB,YAAY,SAAS,WAAW;AAAA,MAAI,CAAC,MACnC,EAAE,OAAO,cAAc,EAAE,GAAG,GAAG,cAAc,IAAI,IAAI;AAAA,IACvD;AAAA,EACF;AACA,QAAM,aAAa,MAAM,IAAI;AAC7B,SAAO;AACT;AAOO,SAAS,mBACd,UACA,UAC+B;AAC/B,QAAM,UAAU,SAAS,WAAW,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ;AACjE,MAAI,QAAS,QAAO;AACpB,QAAM,QAAQ,SAAS,YAAY;AACnC,QAAM,SAAS,SAAS,WAAW,KAAK,CAAC,MAAM,EAAE,KAAK,YAAY,MAAM,KAAK;AAC7E,SAAO,UAAU;AACnB;AAcA,eAAsB,uBAAuB,MAImB;AAC9D,QAAM,EAAE,WAAW,cAAc,cAAc,YAAY,IAAI;AAC/D,QAAM,WAAW,MAAM,aAAa,YAAY;AAChD,MAAI,SAAU,QAAO,EAAE,UAAU,OAAO,UAAU,SAAS;AAC3D,QAAM,cAAc,MAAM,aAAa,WAAW,EAAE,cAAc,KAAK,CAAC;AACxE,MAAI,CAAC,aAAa;AAChB,WAAO,EAAE,UAAU,OAAO,UAAU,cAAc,EAAE;AAAA,EACtD;AACA,QAAM,KAAK,YAAY,OAAO;AAC9B,QAAM,WAAW,gBAAgB,cAAc,EAAE,GAAG,WAAW;AAC/D,QAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,QAAM,QAAgC;AAAA,IACpC;AAAA,IACA,MAAM;AAAA,IACN,WAAW,YAAY,OAAO,KAAK,aAAa;AAAA,IAChD,cAAc;AAAA,EAChB;AACA,QAAM,WAA8B;AAAA,IAClC,eAAe;AAAA,IACf,mBAAmB;AAAA,IACnB,YAAY,CAAC,KAAK;AAAA,EACpB;AACA,QAAM,aAAa,cAAc,QAAQ;AAGzC,QAAM,gBAAAA,SAAG,GAAQ,WAAK,WAAW,uBAAuB,GAAG,EAAE,OAAO,KAAK,CAAC;AAC1E,QAAM,gBAAAA,SAAG,GAAQ,WAAK,WAAW,sBAAsB,GAAG,EAAE,OAAO,KAAK,CAAC;AACzE,SAAO,EAAE,UAAU,MAAM,SAAS;AACpC;AAGA,SAAS,kBAAkB,KAA2C;AACpE,SAAO;AAAA,IACL,eAAe;AAAA,IACf,mBAAmB,IAAI,qBAAqB;AAAA,IAC5C,YAAY,MAAM,QAAQ,IAAI,UAAU,IAAI,IAAI,aAAa,CAAC;AAAA,EAChE;AACF;AAEA,eAAeE,YAAW,UAAiC;AACzD,MAAI;AACF,UAAM,gBAAAF,SAAG,OAAO,QAAQ;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,CAACC,UAAS,GAAG,EAAG,OAAM;AAC1B,UAAM,gBAAAD,SAAG,UAAU,UAAU,MAAM,EAAE,UAAU,SAAS,MAAM,IAAM,CAAC;AAAA,EACvE;AACF;AAEA,SAASC,UAAS,KAAuB;AACvC,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,OAAO,IAAI,SAAS;AAClF;","names":["import_node_fs","path","import_proper_lockfile","fs","lockfile","fs","fs","isENOENT","ensureFile","lockfile"]}
+{"version":3,"sources":["../../src/workspace/workspaceRegistry.ts","../../src/workspace/fileBackedWorkspace.ts"],"sourcesContent":["import { promises as fs } from 'node:fs';\nimport * as os from 'node:os';\nimport * as path from 'node:path';\nimport lockfile from 'proper-lockfile';\nimport type { WorkspaceLocal, WorkspaceSynced } from '@apicircle/shared';\nimport { loadFromFile, saveToFile } from './fileBackedWorkspace';\nimport type { WorkspaceState } from './patches';\n\n// =============================================================================\n// On-disk multi-workspace registry. All surfaces (desktop, CLI, MCP server,\n// VS Code extension) read the same `~/.apicircle/` root.\n//\n// Layout under `<root>/` (= ~/.apicircle or <repo>/.apicircle):\n//\n//   registry.json                       ← this module's source of truth\n//   workspace-<id-1>/\n//     workspace.json\n//     workspace.local.json\n//     attachments/\n//   workspace-<id-2>/\n//     ...\n//\n// Each workspace lives in its own `workspace-<id>` directory so concurrent\n// writers (the desktop's mirror + a CLI invocation against a different\n// workspace) can't step on each other. The flat naming keeps the structure\n// identical whether there's one workspace or ten — no surprise layout\n// changes when multi-workspace is introduced. `proper-lockfile` still\n// guards the registry file itself when readers / writers race.\n// =============================================================================\n\nexport const REGISTRY_FILE = 'registry.json';\nexport const WORKSPACE_DIR_PREFIX = 'workspace-';\n\n/**\n * The universal root for all API Circle workspace data: `~/.apicircle/`.\n * Every consumer (desktop, CLI, MCP, VS Code) uses this as the default.\n */\nexport function defaultApicircleRoot(): string {\n  return path.join(os.homedir(), '.apicircle');\n}\n\nexport interface WorkspaceRegistryEntry {\n  /** Matches the in-workspace `synced.workspaceId`. */\n  id: string;\n  /** Human-readable label. Local to this device — never pushed to git. */\n  name: string;\n  /** ISO timestamp; bumped every time this workspace is opened or written. */\n  lastOpenedAt: string;\n  /** ISO timestamp; set when the workspace was first registered. */\n  createdAt: string;\n}\n\nexport interface WorkspaceRegistry {\n  schemaVersion: 1;\n  /** id of the workspace the desktop UI should boot into. `null` only on\n   *  an empty registry (no workspaces have been seeded yet). */\n  activeWorkspaceId: string | null;\n  workspaces: WorkspaceRegistryEntry[];\n}\n\n/** Default empty registry. */\nexport function emptyRegistry(): WorkspaceRegistry {\n  return { schemaVersion: 1, activeWorkspaceId: null, workspaces: [] };\n}\n\n/** Compute the directory inside `<root>/` that holds a workspace's files.\n *  Layout: `<root>/workspace-<id>/`. */\nexport function workspaceDirFor(root: string, workspaceId: string): string {\n  return path.join(root, `${WORKSPACE_DIR_PREFIX}${workspaceId}`);\n}\n\n/** Load the registry from disk; returns `null` if the file is missing. */\nexport async function loadRegistry(root: string): Promise<WorkspaceRegistry | null> {\n  const filePath = path.join(root, REGISTRY_FILE);\n  try {\n    const raw = await fs.readFile(filePath, 'utf-8');\n    const parsed = JSON.parse(raw) as WorkspaceRegistry;\n    return normalizeRegistry(parsed);\n  } catch (err) {\n    if (isENOENT(err)) return null;\n    throw err;\n  }\n}\n\n/** Save the registry atomically (`<file>.tmp` + rename). */\nexport async function saveRegistry(root: string, registry: WorkspaceRegistry): Promise<void> {\n  await fs.mkdir(root, { recursive: true });\n  const filePath = path.join(root, REGISTRY_FILE);\n  const tmp = `${filePath}.tmp`;\n  await ensureFile(filePath);\n  // Lock the registry file itself so two writers can't tear-write the JSON.\n  const release = await lockfile.lock(filePath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: 30000,\n  });\n  try {\n    await fs.writeFile(tmp, JSON.stringify(registry, null, 2) + '\\n', {\n      encoding: 'utf-8',\n      mode: 0o600,\n    });\n    await fs.rename(tmp, filePath);\n  } finally {\n    await release();\n  }\n}\n\n/**\n * Read a workspace's `{synced, local}` pair by id. Returns `null` if the\n * workspace subdirectory is missing OR its `workspace.json` is missing.\n * Used by the CLI / MCP / desktop reader.\n */\nexport async function loadWorkspaceById(\n  root: string,\n  workspaceId: string,\n): Promise<WorkspaceState | null> {\n  return loadFromFile(workspaceDirFor(root, workspaceId), { allowMissing: true });\n}\n\n/**\n * Write a workspace's pair under `<root>/<id>/`. Idempotent; the directory\n * is created on first write. Bumps the registry entry's `lastOpenedAt`\n * and writes the registry back if the entry exists.\n */\nexport async function saveWorkspaceById(\n  root: string,\n  workspaceId: string,\n  state: WorkspaceState,\n): Promise<void> {\n  await saveToFile(workspaceDirFor(root, workspaceId), state);\n}\n\n/**\n * Remove a workspace from disk: deletes its directory, drops it from the\n * registry. If it was the active workspace, the next-most-recent remaining\n * workspace becomes active. If no workspaces remain, `activeWorkspaceId`\n * goes to `null` and the caller should seed a fresh workspace.\n */\nexport async function deleteWorkspaceById(\n  root: string,\n  workspaceId: string,\n): Promise<WorkspaceRegistry> {\n  const registry = (await loadRegistry(root)) ?? emptyRegistry();\n  const remaining = registry.workspaces.filter((w) => w.id !== workspaceId);\n  await fs.rm(workspaceDirFor(root, workspaceId), { recursive: true, force: true });\n  let nextActive = registry.activeWorkspaceId;\n  if (nextActive === workspaceId) {\n    nextActive =\n      [...remaining].sort((a, b) => b.lastOpenedAt.localeCompare(a.lastOpenedAt))[0]?.id ?? null;\n  }\n  const next: WorkspaceRegistry = {\n    ...registry,\n    activeWorkspaceId: nextActive,\n    workspaces: remaining,\n  };\n  await saveRegistry(root, next);\n  return next;\n}\n\n/**\n * Add a workspace to the registry. Caller is responsible for having\n * written `workspace.json` first. Existing entry with the same id\n * is replaced (idempotent update). Newly-registered workspaces become\n * the active one when there is no prior active.\n */\nexport async function registerWorkspace(\n  root: string,\n  entry: WorkspaceRegistryEntry,\n): Promise<WorkspaceRegistry> {\n  const registry = (await loadRegistry(root)) ?? emptyRegistry();\n  const otherEntries = registry.workspaces.filter((w) => w.id !== entry.id);\n  const next: WorkspaceRegistry = {\n    schemaVersion: 1,\n    activeWorkspaceId: registry.activeWorkspaceId ?? entry.id,\n    workspaces: [...otherEntries, entry],\n  };\n  await saveRegistry(root, next);\n  return next;\n}\n\n/** Set the active workspace id. Throws if the id isn't in the registry. */\nexport async function setActiveWorkspace(\n  root: string,\n  workspaceId: string,\n): Promise<WorkspaceRegistry> {\n  const registry = (await loadRegistry(root)) ?? emptyRegistry();\n  if (!registry.workspaces.some((w) => w.id === workspaceId)) {\n    throw new Error(`workspace ${workspaceId} is not in the registry at ${root}`);\n  }\n  const now = new Date().toISOString();\n  const next: WorkspaceRegistry = {\n    ...registry,\n    activeWorkspaceId: workspaceId,\n    workspaces: registry.workspaces.map((w) =>\n      w.id === workspaceId ? { ...w, lastOpenedAt: now } : w,\n    ),\n  };\n  await saveRegistry(root, next);\n  return next;\n}\n\n/**\n * Look up a workspace registry entry by id OR by name (case-insensitive).\n * Used by the CLI's `--workspace <selector>` resolver — accepts both forms.\n * Returns `null` if no entry matches.\n */\nexport function findWorkspaceEntry(\n  registry: WorkspaceRegistry,\n  idOrName: string,\n): WorkspaceRegistryEntry | null {\n  const exactId = registry.workspaces.find((w) => w.id === idOrName);\n  if (exactId) return exactId;\n  const lower = idOrName.toLowerCase();\n  const byName = registry.workspaces.find((w) => w.name.toLowerCase() === lower);\n  return byName ?? null;\n}\n\n/** Normalize a parsed registry so downstream code can rely on its shape. */\nfunction normalizeRegistry(raw: WorkspaceRegistry): WorkspaceRegistry {\n  return {\n    schemaVersion: 1,\n    activeWorkspaceId: raw.activeWorkspaceId ?? null,\n    workspaces: Array.isArray(raw.workspaces) ? raw.workspaces : [],\n  };\n}\n\nasync function ensureFile(filePath: string): Promise<void> {\n  try {\n    await fs.access(filePath);\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    await fs.writeFile(filePath, '{}', { encoding: 'utf-8', mode: 0o600 });\n  }\n}\n\nfunction isENOENT(err: unknown): boolean {\n  return typeof err === 'object' && err !== null && 'code' in err && err.code === 'ENOENT';\n}\n\n// Re-export commonly-used helpers so consumers can import from one place.\nexport type { WorkspaceLocal, WorkspaceSynced };\n","import { promises as fs } from 'node:fs';\nimport * as path from 'node:path';\nimport { FONT_SIZE_PERCENT_DEFAULT } from '@apicircle/shared';\nimport type { WorkspaceLocal, WorkspaceSynced } from '@apicircle/shared';\nimport lockfile from 'proper-lockfile';\nimport type { WorkspaceState } from './patches';\n\n// =============================================================================\n// fileBackedWorkspace — load/save a `{ synced, local }` pair as two JSON\n// files on disk, with a `proper-lockfile` advisory lock so concurrent CLI /\n// MCP writers can't corrupt the document.\n//\n// Layout (relative to the directory passed in):\n//   workspace.json          ← matches WorkspaceSynced exactly\n//   workspace.local.json    ← WorkspaceLocal, host-private (CLI/MCP doesn't push)\n//\n// The lock is held on `workspace.json` because that's the file the\n// editor races against. Stale locks are released after 30s.\n// =============================================================================\n\nconst SYNCED_FILE = 'workspace.json';\nconst LOCAL_FILE = 'workspace.local.json';\n\nexport interface LoadFromFileOptions {\n  /** When true, return `null` instead of throwing if the synced file is missing. */\n  allowMissing?: boolean;\n  /** Override the synced filename. Defaults to `workspace.json`. */\n  syncedFilename?: string;\n}\n\nexport interface SaveToFileOptions {\n  /** Lock timeout (ms). Defaults to 30000. */\n  lockTimeoutMs?: number;\n  /** Override the synced filename. Defaults to `workspace.json`. */\n  syncedFilename?: string;\n}\n\n/**\n * Load both workspace documents from `dir`. The synced file is required;\n * the local file is optional and falls back to a minimal empty shape so a\n * CLI on a fresh machine can still operate (it just won't have history /\n * overrides until the desktop app runs once).\n */\nexport async function loadFromFile(\n  dir: string,\n  options: LoadFromFileOptions = {},\n): Promise<WorkspaceState | null> {\n  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  let syncedRaw: string;\n  try {\n    syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n  } catch (err) {\n    if (options.allowMissing && isENOENT(err)) return null;\n    throw err;\n  }\n  const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n\n  let local: WorkspaceLocal;\n  try {\n    local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n    local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    local = createEmptyLocalForSynced(synced);\n  }\n\n  return { synced, local };\n}\n\n/**\n * Atomically write both documents back to disk. Acquires an advisory lock\n * on the synced file for the duration of the write so a parallel CLI /\n * MCP / desktop save can't interleave.\n *\n * Both files are written via `<file>.tmp` + rename so a crash mid-write\n * never leaves a partial JSON document on disk.\n */\nexport async function saveToFile(\n  dir: string,\n  state: WorkspaceState,\n  options: SaveToFileOptions = {},\n): Promise<void> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n\n  // proper-lockfile requires the target file to exist. Touch it on first save.\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    await writeJsonAtomic(syncedPath, state.synced);\n    await writeJsonAtomic(localPath, state.local);\n  } finally {\n    await release();\n  }\n}\n\n/**\n * Run a load → mutate → save cycle under one lock so a single mutation\n * can't be clobbered by a racing reader-then-writer.\n */\nexport async function withWorkspace<T>(\n  dir: string,\n  fn: (state: WorkspaceState) => Promise<{ next: WorkspaceState; result?: T }>,\n  options: SaveToFileOptions = {},\n): Promise<T | undefined> {\n  await fs.mkdir(dir, { recursive: true });\n  const syncedPath = path.join(dir, options.syncedFilename ?? SYNCED_FILE);\n  const localPath = path.join(dir, LOCAL_FILE);\n  await ensureFile(syncedPath);\n\n  const release = await lockfile.lock(syncedPath, {\n    retries: { retries: 5, minTimeout: 50, maxTimeout: 500 },\n    stale: options.lockTimeoutMs ?? 30000,\n  });\n  try {\n    const syncedRaw = await fs.readFile(syncedPath, 'utf-8');\n    const synced = JSON.parse(syncedRaw) as WorkspaceSynced;\n    let local: WorkspaceLocal;\n    try {\n      local = JSON.parse(await fs.readFile(localPath, 'utf-8')) as WorkspaceLocal;\n      local = { ...local, attachmentCache: local.attachmentCache ?? {} };\n    } catch (err) {\n      if (!isENOENT(err)) throw err;\n      local = createEmptyLocalForSynced(synced);\n    }\n    const out = await fn({ synced, local });\n    await writeJsonAtomic(syncedPath, out.next.synced);\n    await writeJsonAtomic(localPath, out.next.local);\n    return out.result;\n  } finally {\n    await release();\n  }\n}\n\n// ---------------------------------------------------------------------------\n// internals\n// ---------------------------------------------------------------------------\n\n// File mode for workspace JSON: owner read/write only. Default `fs.writeFile`\n// uses 0o666 minus umask (typically 0o644 — world-readable). The workspace\n// docs carry the synced state (which after redaction is mostly safe to read\n// but still includes per-workspace metadata) and the local state (which\n// holds the encrypted Secret Vault payload table, session metadata, and the\n// vault entries themselves). On multi-user POSIX hosts (CI runners,\n// classroom VMs, shared dev servers) the default would leak both. 0o600\n// keeps the file owner-only. Windows ignores POSIX modes — the inherited\n// per-user ACL under %USERPROFILE% is what protects it there.\nconst WORKSPACE_FILE_MODE = 0o600;\n\nasync function ensureFile(filePath: string): Promise<void> {\n  try {\n    await fs.access(filePath);\n  } catch (err) {\n    if (!isENOENT(err)) throw err;\n    await fs.writeFile(filePath, '{}', { encoding: 'utf-8', mode: WORKSPACE_FILE_MODE });\n  }\n}\n\nasync function writeJsonAtomic(filePath: string, value: unknown): Promise<void> {\n  const tmp = `${filePath}.tmp`;\n  await fs.writeFile(tmp, JSON.stringify(value, null, 2) + '\\n', {\n    encoding: 'utf-8',\n    mode: WORKSPACE_FILE_MODE,\n  });\n  await fs.rename(tmp, filePath);\n}\n\nfunction isENOENT(err: unknown): boolean {\n  return typeof err === 'object' && err !== null && 'code' in err && err.code === 'ENOENT';\n}\n\nfunction createEmptyLocalForSynced(synced: WorkspaceSynced): WorkspaceLocal {\n  return {\n    schemaVersion: 1,\n    workspaceId: synced.workspaceId,\n    executionPlans: {},\n    history: { requestRuns: [], planRuns: [] },\n    secretIndex: { entries: {} },\n    sessions: { github: { workspace: null, links: {} } },\n    connectedRepo: null,\n    workingBranch: null,\n    seededWorkspaceSha: null,\n    retiredBranch: null,\n    sync: {\n      lastPulledSnapshot: null,\n      lastPulledSha: null,\n      lastPulledAt: null,\n      dirtyKeys: [],\n    },\n    linkedCollections: {},\n    attachmentCache: {},\n    globalContext: {},\n    mockRuntime: { active: {} },\n    ui: {\n      activeRequestId: null,\n      sidebarExpandedSections: [],\n      themeId: 'one-dark-pro',\n      fontId: 'system-sans',\n      fontSizePercent: FONT_SIZE_PERCENT_DEFAULT,\n    },\n    settings: { validateOnSend: true, monacoConsumesWheel: false },\n    snapshots: { entries: [], maxBytes: 50 * 1024 * 1024 },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAAA,kBAA+B;AAC/B,SAAoB;AACpB,IAAAC,QAAsB;AACtB,IAAAC,0BAAqB;;;ACHrB,qBAA+B;AAC/B,WAAsB;AACtB,oBAA0C;AAE1C,6BAAqB;AAgBrB,IAAM,cAAc;AACpB,IAAM,aAAa;AAsBnB,eAAsB,aACpB,KACA,UAA+B,CAAC,GACA;AAChC,QAAM,aAAkB,UAAK,KAAK,QAAQ,kBAAkB,WAAW;AACvE,QAAM,YAAiB,UAAK,KAAK,UAAU;AAE3C,MAAI;AACJ,MAAI;AACF,gBAAY,MAAM,eAAAC,SAAG,SAAS,YAAY,OAAO;AAAA,EACnD,SAAS,KAAK;AACZ,QAAI,QAAQ,gBAAgB,SAAS,GAAG,EAAG,QAAO;AAClD,UAAM;AAAA,EACR;AACA,QAAM,SAAS,KAAK,MAAM,SAAS;AAEnC,MAAI;AACJ,MAAI;AACF,YAAQ,KAAK,MAAM,MAAM,eAAAA,SAAG,SAAS,WAAW,OAAO,CAAC;AACxD,YAAQ,EAAE,GAAG,OAAO,iBAAiB,MAAM,mBAAmB,CAAC,EAAE;AAAA,EACnE,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,YAAQ,0BAA0B,MAAM;AAAA,EAC1C;AAEA,SAAO,EAAE,QAAQ,MAAM;AACzB;AAUA,eAAsB,WACpB,KACA,OACA,UAA6B,CAAC,GACf;AACf,QAAM,eAAAA,SAAG,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AACvC,QAAM,aAAkB,UAAK,KAAK,QAAQ,kBAAkB,WAAW;AACvE,QAAM,YAAiB,UAAK,KAAK,UAAU;AAG3C,QAAM,WAAW,UAAU;AAE3B,QAAM,UAAU,MAAM,uBAAAC,QAAS,KAAK,YAAY;AAAA,IAC9C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO,QAAQ,iBAAiB;AAAA,EAClC,CAAC;AACD,MAAI;AACF,UAAM,gBAAgB,YAAY,MAAM,MAAM;AAC9C,UAAM,gBAAgB,WAAW,MAAM,KAAK;AAAA,EAC9C,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAqDA,IAAM,sBAAsB;AAE5B,eAAe,WAAW,UAAiC;AACzD,MAAI;AACF,UAAM,eAAAC,SAAG,OAAO,QAAQ;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,CAAC,SAAS,GAAG,EAAG,OAAM;AAC1B,UAAM,eAAAA,SAAG,UAAU,UAAU,MAAM,EAAE,UAAU,SAAS,MAAM,oBAAoB,CAAC;AAAA,EACrF;AACF;AAEA,eAAe,gBAAgB,UAAkB,OAA+B;AAC9E,QAAM,MAAM,GAAG,QAAQ;AACvB,QAAM,eAAAA,SAAG,UAAU,KAAK,KAAK,UAAU,OAAO,MAAM,CAAC,IAAI,MAAM;AAAA,IAC7D,UAAU;AAAA,IACV,MAAM;AAAA,EACR,CAAC;AACD,QAAM,eAAAA,SAAG,OAAO,KAAK,QAAQ;AAC/B;AAEA,SAAS,SAAS,KAAuB;AACvC,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,OAAO,IAAI,SAAS;AAClF;AAEA,SAAS,0BAA0B,QAAyC;AAC1E,SAAO;AAAA,IACL,eAAe;AAAA,IACf,aAAa,OAAO;AAAA,IACpB,gBAAgB,CAAC;AAAA,IACjB,SAAS,EAAE,aAAa,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,IACzC,aAAa,EAAE,SAAS,CAAC,EAAE;AAAA,IAC3B,UAAU,EAAE,QAAQ,EAAE,WAAW,MAAM,OAAO,CAAC,EAAE,EAAE;AAAA,IACnD,eAAe;AAAA,IACf,eAAe;AAAA,IACf,oBAAoB;AAAA,IACpB,eAAe;AAAA,IACf,MAAM;AAAA,MACJ,oBAAoB;AAAA,MACpB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,WAAW,CAAC;AAAA,IACd;AAAA,IACA,mBAAmB,CAAC;AAAA,IACpB,iBAAiB,CAAC;AAAA,IAClB,eAAe,CAAC;AAAA,IAChB,aAAa,EAAE,QAAQ,CAAC,EAAE;AAAA,IAC1B,IAAI;AAAA,MACF,iBAAiB;AAAA,MACjB,yBAAyB,CAAC;AAAA,MAC1B,SAAS;AAAA,MACT,QAAQ;AAAA,MACR,iBAAiB;AAAA,IACnB;AAAA,IACA,UAAU,EAAE,gBAAgB,MAAM,qBAAqB,MAAM;AAAA,IAC7D,WAAW,EAAE,SAAS,CAAC,GAAG,UAAU,KAAK,OAAO,KAAK;AAAA,EACvD;AACF;;;ADpLO,IAAM,gBAAgB;AACtB,IAAM,uBAAuB;AAM7B,SAAS,uBAA+B;AAC7C,SAAY,WAAQ,WAAQ,GAAG,YAAY;AAC7C;AAsBO,SAAS,gBAAmC;AACjD,SAAO,EAAE,eAAe,GAAG,mBAAmB,MAAM,YAAY,CAAC,EAAE;AACrE;AAIO,SAAS,gBAAgB,MAAc,aAA6B;AACzE,SAAY,WAAK,MAAM,GAAG,oBAAoB,GAAG,WAAW,EAAE;AAChE;AAGA,eAAsB,aAAa,MAAiD;AAClF,QAAM,WAAgB,WAAK,MAAM,aAAa;AAC9C,MAAI;AACF,UAAM,MAAM,MAAM,gBAAAC,SAAG,SAAS,UAAU,OAAO;AAC/C,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO,kBAAkB,MAAM;AAAA,EACjC,SAAS,KAAK;AACZ,QAAIC,UAAS,GAAG,EAAG,QAAO;AAC1B,UAAM;AAAA,EACR;AACF;AAGA,eAAsB,aAAa,MAAc,UAA4C;AAC3F,QAAM,gBAAAD,SAAG,MAAM,MAAM,EAAE,WAAW,KAAK,CAAC;AACxC,QAAM,WAAgB,WAAK,MAAM,aAAa;AAC9C,QAAM,MAAM,GAAG,QAAQ;AACvB,QAAME,YAAW,QAAQ;AAEzB,QAAM,UAAU,MAAM,wBAAAC,QAAS,KAAK,UAAU;AAAA,IAC5C,SAAS,EAAE,SAAS,GAAG,YAAY,IAAI,YAAY,IAAI;AAAA,IACvD,OAAO;AAAA,EACT,CAAC;AACD,MAAI;AACF,UAAM,gBAAAH,SAAG,UAAU,KAAK,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,MAAM;AAAA,MAChE,UAAU;AAAA,MACV,MAAM;AAAA,IACR,CAAC;AACD,UAAM,gBAAAA,SAAG,OAAO,KAAK,QAAQ;AAAA,EAC/B,UAAE;AACA,UAAM,QAAQ;AAAA,EAChB;AACF;AAOA,eAAsB,kBACpB,MACA,aACgC;AAChC,SAAO,aAAa,gBAAgB,MAAM,WAAW,GAAG,EAAE,cAAc,KAAK,CAAC;AAChF;AAOA,eAAsB,kBACpB,MACA,aACA,OACe;AACf,QAAM,WAAW,gBAAgB,MAAM,WAAW,GAAG,KAAK;AAC5D;AAQA,eAAsB,oBACpB,MACA,aAC4B;AAC5B,QAAM,WAAY,MAAM,aAAa,IAAI,KAAM,cAAc;AAC7D,QAAM,YAAY,SAAS,WAAW,OAAO,CAAC,MAAM,EAAE,OAAO,WAAW;AACxE,QAAM,gBAAAA,SAAG,GAAG,gBAAgB,MAAM,WAAW,GAAG,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAChF,MAAI,aAAa,SAAS;AAC1B,MAAI,eAAe,aAAa;AAC9B,iBACE,CAAC,GAAG,SAAS,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,aAAa,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC,GAAG,MAAM;AAAA,EAC1F;AACA,QAAM,OAA0B;AAAA,IAC9B,GAAG;AAAA,IACH,mBAAmB;AAAA,IACnB,YAAY;AAAA,EACd;AACA,QAAM,aAAa,MAAM,IAAI;AAC7B,SAAO;AACT;AAQA,eAAsB,kBACpB,MACA,OAC4B;AAC5B,QAAM,WAAY,MAAM,aAAa,IAAI,KAAM,cAAc;AAC7D,QAAM,eAAe,SAAS,WAAW,OAAO,CAAC,MAAM,EAAE,OAAO,MAAM,EAAE;AACxE,QAAM,OAA0B;AAAA,IAC9B,eAAe;AAAA,IACf,mBAAmB,SAAS,qBAAqB,MAAM;AAAA,IACvD,YAAY,CAAC,GAAG,cAAc,KAAK;AAAA,EACrC;AACA,QAAM,aAAa,MAAM,IAAI;AAC7B,SAAO;AACT;AAGA,eAAsB,mBACpB,MACA,aAC4B;AAC5B,QAAM,WAAY,MAAM,aAAa,IAAI,KAAM,cAAc;AAC7D,MAAI,CAAC,SAAS,WAAW,KAAK,CAAC,MAAM,EAAE,OAAO,WAAW,GAAG;AAC1D,UAAM,IAAI,MAAM,aAAa,WAAW,8BAA8B,IAAI,EAAE;AAAA,EAC9E;AACA,QAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,QAAM,OAA0B;AAAA,IAC9B,GAAG;AAAA,IACH,mBAAmB;AAAA,IACnB,YAAY,SAAS,WAAW;AAAA,MAAI,CAAC,MACnC,EAAE,OAAO,cAAc,EAAE,GAAG,GAAG,cAAc,IAAI,IAAI;AAAA,IACvD;AAAA,EACF;AACA,QAAM,aAAa,MAAM,IAAI;AAC7B,SAAO;AACT;AAOO,SAAS,mBACd,UACA,UAC+B;AAC/B,QAAM,UAAU,SAAS,WAAW,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ;AACjE,MAAI,QAAS,QAAO;AACpB,QAAM,QAAQ,SAAS,YAAY;AACnC,QAAM,SAAS,SAAS,WAAW,KAAK,CAAC,MAAM,EAAE,KAAK,YAAY,MAAM,KAAK;AAC7E,SAAO,UAAU;AACnB;AAGA,SAAS,kBAAkB,KAA2C;AACpE,SAAO;AAAA,IACL,eAAe;AAAA,IACf,mBAAmB,IAAI,qBAAqB;AAAA,IAC5C,YAAY,MAAM,QAAQ,IAAI,UAAU,IAAI,IAAI,aAAa,CAAC;AAAA,EAChE;AACF;AAEA,eAAeE,YAAW,UAAiC;AACzD,MAAI;AACF,UAAM,gBAAAF,SAAG,OAAO,QAAQ;AAAA,EAC1B,SAAS,KAAK;AACZ,QAAI,CAACC,UAAS,GAAG,EAAG,OAAM;AAC1B,UAAM,gBAAAD,SAAG,UAAU,UAAU,MAAM,EAAE,UAAU,SAAS,MAAM,IAAM,CAAC;AAAA,EACvE;AACF;AAEA,SAASC,UAAS,KAAuB;AACvC,SAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,UAAU,OAAO,IAAI,SAAS;AAClF;","names":["import_node_fs","path","import_proper_lockfile","fs","lockfile","fs","fs","isENOENT","ensureFile","lockfile"]}

package/dist/workspace/registry.d.cts

@@ -1,7 +1,13 @@
 export { WorkspaceLocal, WorkspaceSynced } from '@apicircle/shared';
-import { W as WorkspaceState } from '../patches-h_K1VcZR.cjs';
+import { W as WorkspaceState } from '../patches-B3VGNVgf.cjs';
 
 declare const REGISTRY_FILE = "registry.json";
+declare const WORKSPACE_DIR_PREFIX = "workspace-";
+/**
+ * The universal root for all API Circle workspace data: `~/.apicircle/`.
+ * Every consumer (desktop, CLI, MCP, VS Code) uses this as the default.
+ */
+declare function defaultApicircleRoot(): string;
 interface WorkspaceRegistryEntry {
     /** Matches the in-workspace `synced.workspaceId`. */
     id: string;
@@ -21,7 +27,8 @@ interface WorkspaceRegistry {
 }
 /** Default empty registry. */
 declare function emptyRegistry(): WorkspaceRegistry;
-/** Compute the directory inside `<root>/` that holds a workspace's JSON pair. */
+/** Compute the directory inside `<root>/` that holds a workspace's files.
+ *  Layout: `<root>/workspace-<id>/`. */
 declare function workspaceDirFor(root: string, workspaceId: string): string;
 /** Load the registry from disk; returns `null` if the file is missing. */
 declare function loadRegistry(root: string): Promise<WorkspaceRegistry | null>;
@@ -29,8 +36,8 @@ declare function loadRegistry(root: string): Promise<WorkspaceRegistry | null>;
 declare function saveRegistry(root: string, registry: WorkspaceRegistry): Promise<void>;
 /**
  * Read a workspace's `{synced, local}` pair by id. Returns `null` if the
- * workspace subdirectory is missing OR its `workspace.synced.json` is
- * missing. Used by the CLI / MCP / desktop reader.
+ * workspace subdirectory is missing OR its `workspace.json` is missing.
+ * Used by the CLI / MCP / desktop reader.
  */
 declare function loadWorkspaceById(root: string, workspaceId: string): Promise<WorkspaceState | null>;
 /**
@@ -48,7 +55,7 @@ declare function saveWorkspaceById(root: string, workspaceId: string, state: Wor
 declare function deleteWorkspaceById(root: string, workspaceId: string): Promise<WorkspaceRegistry>;
 /**
  * Add a workspace to the registry. Caller is responsible for having
- * written `workspace.synced.json` first. Existing entry with the same id
+ * written `workspace.json` first. Existing entry with the same id
  * is replaced (idempotent update). Newly-registered workspaces become
  * the active one when there is no prior active.
  */
@@ -61,25 +68,5 @@ declare function setActiveWorkspace(root: string, workspaceId: string): Promise<
  * Returns `null` if no entry matches.
  */
 declare function findWorkspaceEntry(registry: WorkspaceRegistry, idOrName: string): WorkspaceRegistryEntry | null;
-/**
- * One-time migration from the legacy single-workspace layout
- * (`<root>/workspace.synced.json` written next to the registry root) into
- * per-workspace subdirectories. Runs on first boot after the multi-workspace
- * rollout. No-op when the registry already exists.
- *
- * The legacy layout was: the desktop's userData/workspace/ directly held
- * `workspace.synced.json` + `workspace.local.json`. The new layout puts
- * those under `userData/workspaces/<id>/`. We read the legacy pair, write
- * it under the new layout keyed on its `synced.workspaceId`, then unlink
- * the legacy files so re-migration is impossible.
- */
-declare function migrateLegacyWorkspace(args: {
-    legacyDir: string;
-    registryRoot: string;
-    defaultName?: string;
-}): Promise<{
-    migrated: boolean;
-    registry: WorkspaceRegistry;
-}>;
 
-export { REGISTRY_FILE, type WorkspaceRegistry, type WorkspaceRegistryEntry, deleteWorkspaceById, emptyRegistry, findWorkspaceEntry, loadRegistry, loadWorkspaceById, migrateLegacyWorkspace, registerWorkspace, saveRegistry, saveWorkspaceById, setActiveWorkspace, workspaceDirFor };
+export { REGISTRY_FILE, WORKSPACE_DIR_PREFIX, type WorkspaceRegistry, type WorkspaceRegistryEntry, defaultApicircleRoot, deleteWorkspaceById, emptyRegistry, findWorkspaceEntry, loadRegistry, loadWorkspaceById, registerWorkspace, saveRegistry, saveWorkspaceById, setActiveWorkspace, workspaceDirFor };