@blulotus/trellis 0.7.0

package/dist/commands/channel/context-loader.js

@@ -0,0 +1,311 @@
+/**
+ * Resolve a list of `--file` / `--jsonl` specs into the concatenated context
+ * string to be embedded in the worker's system prompt.
+ *
+ * --file <path-or-glob>     direct file inclusion (glob expanded via fs.globSync)
+ * --jsonl <path>            parse a Trellis jsonl manifest where each line is
+ *                           {"file": "<path>", "reason": "<why>"} and include
+ *                           each referenced file (reason becomes part of header)
+ *
+ * All paths are resolved relative to `cwd` (the spawn caller's cwd).
+ * Missing files are skipped with a stderr warning, not fatal.
+ * Each block is delimited with a header so the model can attribute content
+ * to its source file.
+ */
+import fs from "node:fs";
+import path from "node:path";
+const MAX_PER_FILE_BYTES = 1_000_000; // 1MB hard cap per file
+const WARN_PER_FILE_BYTES = 200_000; // stderr warn at 200KB
+const WARN_TOTAL_BYTES = 500_000; // stderr warn when assembled context > 500KB
+/**
+ * True when `real` is `root` itself or a descendant of `root`.
+ */
+function isUnderRoot(real, root) {
+    return real === root || real.startsWith(root + path.sep);
+}
+/**
+ * Path-traversal guard: resolve `target` and `cwd` to realpaths and
+ * verify `target` is `cwd` or a descendant, OR under one of `trustedRoots`
+ * (see `context-trust.ts`). Refuses absolute paths outside cwd/trusted
+ * roots, `..`-escapes, and symlinks pointing outside.
+ *
+ * Returns the resolved realpath, or null if blocked (with stderr warning).
+ */
+function jailedRealpath(target, cwd, trustedRoots = []) {
+    const cwdReal = fs.realpathSync(cwd);
+    let real;
+    try {
+        real = fs.realpathSync(target);
+    }
+    catch {
+        // Target doesn't exist — fall back to the lexical resolution. The
+        // existence check happens later; we just need to ensure the lexical
+        // form is inside the jail.
+        real = path.resolve(target);
+    }
+    if (!isUnderRoot(real, cwdReal) &&
+        !trustedRoots.some((root) => isUnderRoot(real, root))) {
+        process.stderr.write(`[channel spawn] context path escapes cwd, refusing: ${path.relative(cwd, target) || target} ` +
+            `(add its real directory to channel.trusted_context_dirs in .trellis/config.yaml to allow)\n`);
+        return null;
+    }
+    return real;
+}
+/** Strip control characters that would break header lines in the system prompt. */
+function safeHeader(s) {
+    // eslint-disable-next-line no-control-regex
+    return s.replace(/[\r\n\x00-\x08\x0b-\x1f\x7f]/g, " ");
+}
+export function assembleContext(cwd, files = [], jsonls = [], trustedRoots = []) {
+    const blocks = [];
+    const manifestPaths = [];
+    for (const spec of files) {
+        for (const resolved of expandGlob(cwd, spec)) {
+            const jailed = jailedRealpath(resolved, cwd, trustedRoots);
+            if (!jailed)
+                continue;
+            const block = readFileBlock(jailed, cwd, "file", undefined, trustedRoots);
+            if (block)
+                blocks.push(block);
+        }
+    }
+    for (const jsonlPath of jsonls) {
+        const jailedJsonl = jailedRealpath(path.resolve(cwd, jsonlPath), cwd, trustedRoots);
+        if (!jailedJsonl)
+            continue;
+        if (!fs.existsSync(jailedJsonl)) {
+            process.stderr.write(`[channel spawn] --jsonl: file not found, skipping: ${jsonlPath}\n`);
+            continue;
+        }
+        // Record the manifest path BEFORE consuming entries, so the spawned
+        // event reflects "user passed this manifest" even if it's empty.
+        manifestPaths.push(path.relative(cwd, jailedJsonl) || jsonlPath);
+        // Stream the manifest line-by-line instead of `readFileSync + split`,
+        // so a giant jsonl file doesn't double-allocate the string into memory.
+        for (const line of iterFileLines(jailedJsonl)) {
+            const t = line.trim();
+            if (!t)
+                continue;
+            let obj;
+            try {
+                obj = JSON.parse(t);
+            }
+            catch {
+                process.stderr.write(`[channel spawn] --jsonl: skipping unparseable line in ${jsonlPath}\n`);
+                continue;
+            }
+            if (obj._example !== undefined)
+                continue;
+            if (!obj.file)
+                continue;
+            const jailed = jailedRealpath(path.resolve(cwd, obj.file), cwd, trustedRoots);
+            if (!jailed)
+                continue;
+            const block = readFileBlock(jailed, cwd, "jsonl", obj.reason, trustedRoots);
+            if (block)
+                blocks.push(block);
+        }
+    }
+    if (blocks.length === 0) {
+        return { prompt: "", paths: [], manifests: manifestPaths };
+    }
+    // Use Buffer.byteLength so multi-byte (CJK / emoji etc.) content isn't
+    // undercounted vs. its on-the-wire size. The user is paying tokens by
+    // bytes, not characters.
+    const totalBytes = blocks.reduce((n, b) => n + Buffer.byteLength(b.content, "utf-8"), 0);
+    if (totalBytes > WARN_TOTAL_BYTES) {
+        process.stderr.write(`[channel spawn] warning: context is ${Math.round(totalBytes / 1024)}KB across ${blocks.length} files — large system prompt may exceed model context\n`);
+    }
+    return {
+        prompt: blocks.map(formatBlock).join("\n\n---\n\n"),
+        paths: blocks.map((b) => b.path),
+        manifests: manifestPaths,
+    };
+}
+/**
+ * Stream a UTF-8 file line by line without loading the whole file as one
+ * giant string. Yields each line (without trailing `\n`). Crashes /
+ * non-UTF8 content fall back gracefully.
+ */
+function* iterFileLines(filePath) {
+    const fd = fs.openSync(filePath, "r");
+    try {
+        const buf = Buffer.allocUnsafe(64 * 1024);
+        let carry = "";
+        while (true) {
+            const n = fs.readSync(fd, buf, 0, buf.length, null);
+            if (n <= 0)
+                break;
+            const chunk = carry + buf.subarray(0, n).toString("utf-8");
+            const lines = chunk.split("\n");
+            carry = lines.pop() ?? "";
+            for (const line of lines)
+                yield line;
+        }
+        if (carry.length > 0)
+            yield carry;
+    }
+    finally {
+        try {
+            fs.closeSync(fd);
+        }
+        catch {
+            // ignore
+        }
+    }
+}
+/**
+ * Minimal glob matcher. Supports:
+ *   foo/bar.md         — literal path
+ *   foo/* .md          — single segment wildcard within a directory
+ *   foo/** /*.md       — recursive subtree
+ *   foo/** /*.md       — recursive subtree
+ *
+ * Doesn't aim for full POSIX semantics — `?`, `{a,b}`, character classes etc.
+ * are out of scope for MVP. Quoting passes the literal pattern from shell.
+ */
+function expandGlob(cwd, spec) {
+    if (!/[*?[]/.test(spec)) {
+        return [path.resolve(cwd, spec)];
+    }
+    // Split into static prefix + glob segments
+    const segments = spec.split(/[\\/]/).filter(Boolean);
+    let baseDir = cwd;
+    let i = 0;
+    while (i < segments.length && !/[*?[]/.test(segments[i])) {
+        baseDir = path.resolve(baseDir, segments[i]);
+        i++;
+    }
+    const globSegs = segments.slice(i);
+    if (globSegs.length === 0)
+        return [path.resolve(cwd, spec)];
+    if (!fs.existsSync(baseDir)) {
+        process.stderr.write(`[channel spawn] --file: glob base not found: ${path.relative(cwd, baseDir)}\n`);
+        return [];
+    }
+    const matches = [];
+    walkGlob(baseDir, globSegs, matches);
+    if (matches.length === 0) {
+        process.stderr.write(`[channel spawn] --file: glob matched no files: ${spec}\n`);
+    }
+    return matches;
+}
+function walkGlob(dir, segs, out) {
+    if (segs.length === 0)
+        return;
+    const [head, ...rest] = segs;
+    let entries;
+    try {
+        entries = fs.readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    if (head === "**") {
+        // ** matches zero or more directories.
+        // Zero case: try matching `rest` from current dir.
+        if (rest.length > 0)
+            walkGlob(dir, rest, out);
+        // Recurse into subdirs with ** still in front.
+        for (const e of entries) {
+            if (e.isDirectory()) {
+                walkGlob(path.join(dir, e.name), segs, out);
+            }
+        }
+        return;
+    }
+    const re = segmentToRegex(head);
+    for (const e of entries) {
+        if (!re.test(e.name))
+            continue;
+        const child = path.join(dir, e.name);
+        if (rest.length === 0) {
+            if (e.isFile())
+                out.push(child);
+        }
+        else if (e.isDirectory()) {
+            walkGlob(child, rest, out);
+        }
+    }
+}
+function segmentToRegex(seg) {
+    let re = "^";
+    for (const ch of seg) {
+        if (ch === "*")
+            re += "[^/]*";
+        else if (ch === "?")
+            re += "[^/]";
+        else if (".+()|^$\\{}[]".includes(ch))
+            re += "\\" + ch;
+        else
+            re += ch;
+    }
+    return new RegExp(re + "$");
+}
+function readFileBlock(absPath, cwd, source, reason, trustedRoots = []) {
+    if (!fs.existsSync(absPath)) {
+        process.stderr.write(`[channel spawn] --${source}: file not found, skipping: ${path.relative(cwd, absPath)}\n`);
+        return null;
+    }
+    // lstat first: if it's a symlink, the realpath inside jailedRealpath
+    // has already verified the target stays inside cwd. Defense-in-depth:
+    // explicitly note symlinks so we never read through one we didn't
+    // realpath-check.
+    let lstat;
+    try {
+        lstat = fs.lstatSync(absPath);
+    }
+    catch {
+        return null;
+    }
+    if (lstat.isSymbolicLink()) {
+        // Should be impossible — jailedRealpath replaced absPath with the
+        // resolved realpath. Defense-in-depth against a TOCTOU race: re-verify
+        // containment (cwd or a trusted root) rather than trusting blindly.
+        let real;
+        try {
+            real = fs.realpathSync(absPath);
+        }
+        catch {
+            real = absPath;
+        }
+        const cwdReal = fs.realpathSync(cwd);
+        if (!isUnderRoot(real, cwdReal) &&
+            !trustedRoots.some((root) => isUnderRoot(real, root))) {
+            process.stderr.write(`[channel spawn] --${source}: refusing unresolved symlink: ${path.relative(cwd, absPath)}\n`);
+            return null;
+        }
+    }
+    let stat;
+    try {
+        stat = fs.statSync(absPath);
+    }
+    catch {
+        return null;
+    }
+    if (!stat.isFile())
+        return null;
+    if (stat.size > MAX_PER_FILE_BYTES) {
+        process.stderr.write(`[channel spawn] --${source}: file too large (${Math.round(stat.size / 1024)}KB > ${MAX_PER_FILE_BYTES / 1024}KB cap), skipping: ${path.relative(cwd, absPath)}\n`);
+        return null;
+    }
+    if (stat.size > WARN_PER_FILE_BYTES) {
+        process.stderr.write(`[channel spawn] warning: large file (${Math.round(stat.size / 1024)}KB) included: ${path.relative(cwd, absPath)}\n`);
+    }
+    const content = fs.readFileSync(absPath, "utf-8");
+    return {
+        path: path.relative(cwd, absPath),
+        source,
+        reason,
+        content,
+    };
+}
+function formatBlock(b) {
+    const safePath = safeHeader(b.path);
+    const safeReason = b.reason ? safeHeader(b.reason) : undefined;
+    const header = b.source === "jsonl" && safeReason
+        ? `# Context: ${safePath}\n# Reason: ${safeReason}`
+        : `# Context: ${safePath}`;
+    return `${header}\n\n${b.content.trimEnd()}`;
+}
+//# sourceMappingURL=context-loader.js.map

package/dist/commands/channel/context-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-loader.js","sourceRoot":"","sources":["../../../src/commands/channel/context-loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,MAAM,kBAAkB,GAAG,SAAS,CAAC,CAAC,wBAAwB;AAC9D,MAAM,mBAAmB,GAAG,OAAO,CAAC,CAAC,uBAAuB;AAC5D,MAAM,gBAAgB,GAAG,OAAO,CAAC,CAAC,6CAA6C;AAE/E;;GAEG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,MAAc,EACd,GAAW,EACX,eAAyB,EAAE;IAE3B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,oEAAoE;QACpE,2BAA2B;QAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,IACE,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;QAC3B,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uDAAuD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,GAAG;YAC5F,6FAA6F,CAChG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mFAAmF;AACnF,SAAS,UAAU,CAAC,CAAS;IAC3B,4CAA4C;IAC5C,OAAO,CAAC,CAAC,OAAO,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAaD,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,QAAkB,EAAE,EACpB,SAAmB,EAAE,EACrB,eAAyB,EAAE;IAE3B,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAC1E,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,cAAc,CAChC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAC5B,GAAG,EACH,YAAY,CACb,CAAC;QACF,IAAI,CAAC,WAAW;YAAE,SAAS;QAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDAAsD,SAAS,IAAI,CACpE,CAAC;YACF,SAAS;QACX,CAAC;QACD,oEAAoE;QACpE,iEAAiE;QACjE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,SAAS,CAAC,CAAC;QACjE,sEAAsE;QACtE,wEAAwE;QACxE,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,IAAI,GAA2D,CAAC;YAChE,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,SAAS,IAAI,CACvE,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;gBAAE,SAAS;YACzC,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,SAAS;YACxB,MAAM,MAAM,GAAG,cAAc,CAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,EAC3B,GAAG,EACH,YAAY,CACb,CAAC;YACF,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,KAAK,GAAG,aAAa,CACzB,MAAM,EACN,GAAG,EACH,OAAO,EACP,GAAG,CAAC,MAAM,EACV,YAAY,CACb,CAAC;YACF,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;IAC7D,CAAC;IAED,uEAAuE;IACvE,sEAAsE;IACtE,yBAAyB;IACzB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,EACnD,CAAC,CACF,CAAC;IACF,IAAI,UAAU,GAAG,gBAAgB,EAAE,CAAC;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uCAAuC,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,yDAAyD,CACxJ,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;QACnD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChC,SAAS,EAAE,aAAa;KACzB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,QAAQ,CAAC,CAAC,aAAa,CAAC,QAAgB;IACtC,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM;YAClB,MAAM,KAAK,GAAG,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAC1B,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,MAAM,IAAI,CAAC;QACvC,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,IAAY;IAC3C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC,EAAE,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAE5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gDAAgD,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAChF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,kDAAkD,IAAI,IAAI,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,IAAc,EAAE,GAAa;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC9B,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC7B,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,uCAAuC;QACvC,mDAAmD;QACnD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9C,+CAA+C;QAC/C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,EAAE,GAAG,GAAG,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,EAAE,KAAK,GAAG;YAAE,EAAE,IAAI,OAAO,CAAC;aACzB,IAAI,EAAE,KAAK,GAAG;YAAE,EAAE,IAAI,MAAM,CAAC;aAC7B,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,EAAE,IAAI,IAAI,GAAG,EAAE,CAAC;;YAClD,EAAE,IAAI,EAAE,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,aAAa,CACpB,OAAe,EACf,GAAW,EACX,MAAwB,EACxB,MAAe,EACf,eAAyB,EAAE;IAE3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,MAAM,+BAA+B,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAC1F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,qEAAqE;IACrE,sEAAsE;IACtE,kEAAkE;IAClE,kBAAkB;IAClB,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QAC3B,kEAAkE;QAClE,uEAAuE;QACvE,oEAAoE;QACpE,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACrC,IACE,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;YAC3B,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EACrD,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,MAAM,kCAAkC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAC7F,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,MAAM,qBAAqB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,kBAAkB,GAAG,IAAI,sBAAsB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CACnK,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wCAAwC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CACrH,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;QACjC,MAAM;QACN,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,CAAe;IAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,MAAM,GACV,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,UAAU;QAChC,CAAC,CAAC,cAAc,QAAQ,eAAe,UAAU,EAAE;QACnD,CAAC,CAAC,cAAc,QAAQ,EAAE,CAAC;IAC/B,OAAO,GAAG,MAAM,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;AAC/C,CAAC"}

package/dist/commands/channel/context-trust.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Trusted-root resolution for the context-loading containment checks
+ * (`context-loader.ts` `jailedRealpath`, `agent-loader.ts` `findAgentFile`).
+ *
+ * Users who persist `.trellis/tasks` / `.trellis/workspace` as symlinks to
+ * an external directory get legitimate context files rejected by the
+ * cwd-only jail. This module resolves an additional set of trusted realpath
+ * roots — from `.trellis/config.yaml` `channel.trusted_context_dirs`, plus a
+ * narrow auto-trust of `.trellis/tasks` / `.trellis/workspace` when either is
+ * itself a top-level symlink — so those roots can be accepted alongside cwd
+ * without weakening the containment check to lexical matching (see
+ * spec/cli/backend/filesystem-safety.md §2).
+ */
+interface ChannelTrustConfig {
+    trustedDirs: string[];
+    autoTrustSymlinks?: boolean;
+}
+/**
+ * Parse the `channel.trusted_context_dirs` (list) and
+ * `channel.auto_trust_trellis_symlinks` (bool) keys out of
+ * `.trellis/config.yaml`. Mirrors the lightweight line-scanner used by
+ * `loadWorkerGuardConfig` in guard.ts — no YAML dependency.
+ */
+export declare function parseChannelTrustSection(content: string): ChannelTrustConfig;
+/**
+ * Resolve the full set of trusted realpath roots for context/agent
+ * containment checks, in addition to `cwd` itself. Called once per spawn.
+ */
+export declare function resolveTrustedRoots(cwd: string): string[];
+export {};
+//# sourceMappingURL=context-trust.d.ts.map

package/dist/commands/channel/context-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-trust.d.ts","sourceRoot":"","sources":["../../../src/commands/channel/context-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,UAAU,kBAAkB;IAC1B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CA+D5E;AAsBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAkCzD"}

package/dist/commands/channel/context-trust.js

@@ -0,0 +1,139 @@
+/**
+ * Trusted-root resolution for the context-loading containment checks
+ * (`context-loader.ts` `jailedRealpath`, `agent-loader.ts` `findAgentFile`).
+ *
+ * Users who persist `.trellis/tasks` / `.trellis/workspace` as symlinks to
+ * an external directory get legitimate context files rejected by the
+ * cwd-only jail. This module resolves an additional set of trusted realpath
+ * roots — from `.trellis/config.yaml` `channel.trusted_context_dirs`, plus a
+ * narrow auto-trust of `.trellis/tasks` / `.trellis/workspace` when either is
+ * itself a top-level symlink — so those roots can be accepted alongside cwd
+ * without weakening the containment check to lexical matching (see
+ * spec/cli/backend/filesystem-safety.md §2).
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { DIR_NAMES } from "../../constants/paths.js";
+/** Top-level `.trellis/*` entries eligible for symlink auto-trust. */
+const AUTO_TRUST_ENTRIES = ["tasks", "workspace"];
+/**
+ * Parse the `channel.trusted_context_dirs` (list) and
+ * `channel.auto_trust_trellis_symlinks` (bool) keys out of
+ * `.trellis/config.yaml`. Mirrors the lightweight line-scanner used by
+ * `loadWorkerGuardConfig` in guard.ts — no YAML dependency.
+ */
+export function parseChannelTrustSection(content) {
+    const lines = content.split("\n");
+    const trustedDirs = [];
+    let autoTrustSymlinks;
+    let inChannel = false;
+    let inList = false;
+    for (const raw of lines) {
+        const line = raw.replace(/\r$/, "");
+        const trimmed = line.trimEnd();
+        if (trimmed.trim().startsWith("#"))
+            continue;
+        if (/^channel:\s*$/.test(trimmed)) {
+            inChannel = true;
+            inList = false;
+            continue;
+        }
+        if (!inChannel)
+            continue;
+        // Anything at column 0 (non-blank) ends the `channel:` section.
+        if (trimmed.trim() !== "" && /^\S/.test(line)) {
+            inChannel = false;
+            inList = false;
+            continue;
+        }
+        if (trimmed.trim() === "")
+            continue;
+        if (inList) {
+            const item = trimmed.match(/^ {4}-\s*(.+)$/);
+            if (item) {
+                const val = stripTrustValue(item[1]);
+                if (val)
+                    trustedDirs.push(val);
+                continue;
+            }
+            // Anything else at <= list-header indent ends the list.
+            inList = false;
+        }
+        if (/^ {2}trusted_context_dirs:\s*$/.test(trimmed)) {
+            inList = true;
+            continue;
+        }
+        const boolMatch = trimmed.match(/^ {2}auto_trust_trellis_symlinks:\s*(.+)$/);
+        if (boolMatch) {
+            const val = stripTrustValue(boolMatch[1]).toLowerCase();
+            if (val === "false")
+                autoTrustSymlinks = false;
+            else if (val === "true")
+                autoTrustSymlinks = true;
+            else {
+                process.stderr.write(`[channel] channel.auto_trust_trellis_symlinks: invalid value '${val}', ignoring\n`);
+            }
+            continue;
+        }
+    }
+    return { trustedDirs, autoTrustSymlinks };
+}
+function stripTrustValue(s) {
+    return s
+        .trim()
+        .replace(/\s*#.*$/, "")
+        .trim()
+        .replace(/^['"]|['"]$/g, "");
+}
+function loadChannelTrustConfig(cwd) {
+    const configPath = path.join(cwd, DIR_NAMES.WORKFLOW, "config.yaml");
+    if (!fs.existsSync(configPath))
+        return { trustedDirs: [] };
+    let content;
+    try {
+        content = fs.readFileSync(configPath, "utf-8");
+    }
+    catch {
+        return { trustedDirs: [] };
+    }
+    return parseChannelTrustSection(content);
+}
+/**
+ * Resolve the full set of trusted realpath roots for context/agent
+ * containment checks, in addition to `cwd` itself. Called once per spawn.
+ */
+export function resolveTrustedRoots(cwd) {
+    const config = loadChannelTrustConfig(cwd);
+    const roots = [];
+    for (const entry of config.trustedDirs) {
+        const resolved = path.resolve(cwd, entry);
+        try {
+            roots.push(fs.realpathSync(resolved));
+        }
+        catch {
+            process.stderr.write(`[channel] channel.trusted_context_dirs: entry not found or invalid, skipping: ${entry}\n`);
+        }
+    }
+    if (config.autoTrustSymlinks !== false) {
+        for (const entryName of AUTO_TRUST_ENTRIES) {
+            const entryPath = path.join(cwd, DIR_NAMES.WORKFLOW, entryName);
+            let lstat;
+            try {
+                lstat = fs.lstatSync(entryPath);
+            }
+            catch {
+                continue;
+            }
+            if (!lstat.isSymbolicLink())
+                continue;
+            try {
+                roots.push(fs.realpathSync(entryPath));
+            }
+            catch {
+                // Broken symlink — nothing to trust.
+            }
+        }
+    }
+    return [...new Set(roots)];
+}
+//# sourceMappingURL=context-trust.js.map

package/dist/commands/channel/context-trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-trust.js","sourceRoot":"","sources":["../../../src/commands/channel/context-trust.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAErD,sEAAsE;AACtE,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,WAAW,CAAU,CAAC;AAO3D;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,iBAAsC,CAAC;IAE3C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE7C,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,CAAC,SAAS;YAAE,SAAS;QAEzB,gEAAgE;QAChE,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,SAAS,GAAG,KAAK,CAAC;YAClB,MAAM,GAAG,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QAEpC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC7C,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrC,IAAI,GAAG;oBAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,wDAAwD;YACxD,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAC7B,2CAA2C,CAC5C,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACxD,IAAI,GAAG,KAAK,OAAO;gBAAE,iBAAiB,GAAG,KAAK,CAAC;iBAC1C,IAAI,GAAG,KAAK,MAAM;gBAAE,iBAAiB,GAAG,IAAI,CAAC;iBAC7C,CAAC;gBACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iEAAiE,GAAG,eAAe,CACpF,CAAC;YACJ,CAAC;YACD,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC;SACL,IAAI,EAAE;SACN,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,IAAI,EAAE;SACN,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC3D,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iFAAiF,KAAK,IAAI,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACvC,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAChE,IAAI,KAAe,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YACtC,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC"}

package/dist/commands/channel/context.d.ts

@@ -0,0 +1,16 @@
+export interface ContextMutateCliOptions {
+    as?: string;
+    scope?: string;
+    thread?: string;
+    file?: string[];
+    raw?: string[];
+}
+export interface ContextListCliOptions {
+    scope?: string;
+    thread?: string;
+    raw?: boolean;
+}
+export declare function channelContextAdd(channelName: string, opts: ContextMutateCliOptions): Promise<void>;
+export declare function channelContextDelete(channelName: string, opts: ContextMutateCliOptions): Promise<void>;
+export declare function channelContextList(channelName: string, opts: ContextListCliOptions): Promise<void>;
+//# sourceMappingURL=context.d.ts.map

package/dist/commands/channel/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/commands/channel/context.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,uBAAuB;IACtC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,IAAI,CAAC,CA8Bf"}

package/dist/commands/channel/context.js

@@ -0,0 +1,83 @@
+import { addChannelContext, addThreadContext, buildContextEntries, deleteChannelContext, deleteThreadContext, listChannelContext, listThreadContext, } from "@blulotus/trellis-core/channel";
+import { parseChannelScope } from "./store/schema.js";
+export async function channelContextAdd(channelName, opts) {
+    const context = buildContextEntries(opts.file, opts.raw);
+    if (!context) {
+        throw new Error("Provide at least one --file <abs-path> or --raw <text>");
+    }
+    const scope = parseChannelScope(opts.scope);
+    const event = opts.thread
+        ? await addThreadContext({
+            channel: channelName,
+            by: opts.as ?? "main",
+            thread: opts.thread,
+            context,
+            ...(scope !== undefined ? { scope } : {}),
+            origin: "cli",
+        })
+        : await addChannelContext({
+            channel: channelName,
+            by: opts.as ?? "main",
+            context,
+            ...(scope !== undefined ? { scope } : {}),
+            origin: "cli",
+        });
+    console.log(JSON.stringify(event));
+}
+export async function channelContextDelete(channelName, opts) {
+    const context = buildContextEntries(opts.file, opts.raw);
+    if (!context) {
+        throw new Error("Provide at least one --file <abs-path> or --raw <text>");
+    }
+    const scope = parseChannelScope(opts.scope);
+    const event = opts.thread
+        ? await deleteThreadContext({
+            channel: channelName,
+            by: opts.as ?? "main",
+            thread: opts.thread,
+            context,
+            ...(scope !== undefined ? { scope } : {}),
+            origin: "cli",
+        })
+        : await deleteChannelContext({
+            channel: channelName,
+            by: opts.as ?? "main",
+            context,
+            ...(scope !== undefined ? { scope } : {}),
+            origin: "cli",
+        });
+    console.log(JSON.stringify(event));
+}
+export async function channelContextList(channelName, opts) {
+    const scope = parseChannelScope(opts.scope);
+    const entries = opts.thread
+        ? await listThreadContext({
+            channel: channelName,
+            thread: opts.thread,
+            ...(scope !== undefined ? { scope } : {}),
+        })
+        : await listChannelContext({
+            channel: channelName,
+            ...(scope !== undefined ? { scope } : {}),
+        });
+    if (opts.raw) {
+        for (const entry of entries)
+            console.log(JSON.stringify(entry));
+        return;
+    }
+    if (entries.length === 0) {
+        console.log("(no context)");
+        return;
+    }
+    for (const entry of entries) {
+        if (entry.type === "file") {
+            console.log(`file ${entry.path}`);
+        }
+        else {
+            const oneLine = entry.text.replace(/\s+/g, " ").trim();
+            const display = oneLine.length > 200 ? `${oneLine.slice(0, 200)}…` : oneLine;
+            console.log(`raw  ${display}`);
+        }
+    }
+}
+//# sourceMappingURL=context.js.map

package/dist/commands/channel/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../src/commands/channel/context.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAElB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAgBtD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,WAAmB,EACnB,IAA6B;IAE7B,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAA6B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM;QACvB,CAAC,CAAC,MAAM,gBAAgB,CAAC;YACrB,OAAO,EAAE,WAAW;YACpB,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,MAAM;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO;YACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,EAAE,KAAK;SACd,CAAC;QACJ,CAAC,CAAC,MAAM,iBAAiB,CAAC;YACtB,OAAO,EAAE,WAAW;YACpB,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,MAAM;YACrB,OAAO;YACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACP,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,IAA6B;IAE7B,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAA6B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM;QACvB,CAAC,CAAC,MAAM,mBAAmB,CAAC;YACxB,OAAO,EAAE,WAAW;YACpB,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,MAAM;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO;YACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,EAAE,KAAK;SACd,CAAC;QACJ,CAAC,CAAC,MAAM,oBAAoB,CAAC;YACzB,OAAO,EAAE,WAAW;YACpB,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,MAAM;YACrB,OAAO;YACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;IACP,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,IAA2B;IAE3B,MAAM,KAAK,GAA6B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM;QACzB,CAAC,CAAC,MAAM,iBAAiB,CAAC;YACtB,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC;QACJ,CAAC,CAAC,MAAM,kBAAkB,CAAC;YACvB,OAAO,EAAE,WAAW;YACpB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;IACP,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACvD,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/commands/channel/create.d.ts

@@ -0,0 +1,27 @@
+export interface CreateOptions {
+    task?: string;
+    project?: string;
+    labels?: string;
+    cwd?: string;
+    scope?: string;
+    type?: string;
+    description?: string;
+    /** New canonical flag list. */
+    contextFile?: string[];
+    contextRaw?: string[];
+    /** Legacy aliases accepted while users migrate scripts. */
+    linkedContextFile?: string[];
+    linkedContextRaw?: string[];
+    by?: string;
+    force?: boolean;
+    ephemeral?: boolean;
+    /**
+     * Optional mode marker for callers like `channel run` that produce
+     * one-shot channels. Stored as `meta.trellis.createMode` so the
+     * channel event keeps an `origin: "cli"` write entrypoint while still
+     * exposing the mode for downstream consumers.
+     */
+    origin?: string;
+}
+export declare function createChannel(name: string, opts: CreateOptions): Promise<void>;
+//# sourceMappingURL=create.d.ts.map

package/dist/commands/channel/create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../src/commands/channel/create.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+BAA+B;IAC/B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAoCf"}