@caplets/core 0.26.0 → 0.27.0

package/dist/native/remote.d.ts

@@ -1,11 +1,12 @@
 import type { AttachCodeModeCaplet } from "../attach/api";
+import type { CapletShadowingPolicy } from "../config";
 import type { ResolvedNativeCapletsServiceOptions } from "./options";
 import type { NativeCapletsService, NativeCapletsToolsChangedListener, NativeCapletTool } from "./service";
 export type RemoteCapletsTool = {
     name: string;
     capletId?: string | undefined;
     sourceCapletId?: string | undefined;
-    shadowing?: "forbid" | "allow" | undefined;
+    shadowing?: CapletShadowingPolicy | undefined;
     title?: string | undefined;
     description?: string | undefined;
     inputSchema?: unknown;

package/dist/native/service.d.ts

@@ -2,7 +2,7 @@ import type { NativeCapletsServiceResolutionInput } from "./options";
 import { resolveNativeCapletsServiceOptions } from "./options";
 import { type RemoteCapletsClient } from "./remote";
 import type { CodeModeCallableCaplet } from "../code-mode/types";
-import { type CapletsConfig } from "../config";
+import { type CapletShadowingPolicy, type CapletsConfig } from "../config";
 import { generatedToolInputJsonSchemaForCaplet } from "../generated-tool-input-schema";
 export type NativeCapletsServiceOptions = NativeCapletsServiceResolutionInput & {
     configPath?: string;
@@ -18,7 +18,7 @@ export type NativeCapletsServiceOptions = NativeCapletsServiceResolutionInput &
 export type NativeCapletTool = {
     caplet: string;
     sourceCaplet?: string;
-    shadowing?: "forbid" | "allow";
+    shadowing?: CapletShadowingPolicy;
     toolName: string;
     title: string;
     description: string;

package/dist/native.js

@@ -1,4 +1,4 @@
-import { A as nativeCapletPromptGuidance, F as nativeCodeModeToolName, M as nativeCapletToolName, N as nativeCapletsSystemGuidance, P as nativeCodeModeToolId, h as createSdkRemoteCapletsClient, j as nativeCapletToolDescription, m as RemoteNativeCapletsService, t as createNativeCapletsService, v as resolveNativeCapletsServiceOptions } from "./service-rvZ7z6FI.js";
+import { A as nativeCapletPromptGuidance, F as nativeCodeModeToolName, M as nativeCapletToolName, N as nativeCapletsSystemGuidance, P as nativeCodeModeToolId, h as createSdkRemoteCapletsClient, j as nativeCapletToolDescription, m as RemoteNativeCapletsService, t as createNativeCapletsService, v as resolveNativeCapletsServiceOptions } from "./service-BGGiZLHa.js";
 import { generatedToolInputJsonSchema, generatedToolInputSchema } from "./generated-tool-input-schema.js";
 //#region src/native/process-cleanup.ts
 function registerNativeCapletsProcessCleanup(service, options = {}) {

package/dist/project-binding/errors.d.ts

@@ -1,5 +1,5 @@
 import { CapletsError } from "../errors";
-export declare const PROJECT_BINDING_ERROR_CODES: readonly ["cloud_auth_required", "cloud_auth_expired", "cloud_auth_revoked", "workspace_selection_required", "workspace_switch_required", "workspace_forbidden", "project_binding_forbidden", "endpoint_unavailable", "websocket_upgrade_required", "sync_required", "sync_failed", "sync_size_limit_exceeded", "lease_conflict", "lease_expired", "policy_denied", "usage_limit_reached", "billing_required", "subscription_past_due", "email_verification_required", "remote_credentials_required", "remote_auth_failed"];
+export declare const PROJECT_BINDING_ERROR_CODES: readonly ["cloud_auth_required", "cloud_auth_expired", "cloud_auth_revoked", "workspace_selection_required", "workspace_switch_required", "workspace_forbidden", "project_binding_forbidden", "endpoint_unavailable", "websocket_upgrade_required", "sync_required", "sync_failed", "sync_size_limit_exceeded", "lease_conflict", "lease_expired", "policy_denied", "usage_limit_reached", "billing_required", "subscription_past_due", "email_verification_required", "remote_credentials_required", "remote_credentials_revoked", "remote_auth_failed"];
 export type ProjectBindingErrorCode = (typeof PROJECT_BINDING_ERROR_CODES)[number];
 export type ProjectBindingRecovery = {
     code: ProjectBindingErrorCode;

package/dist/remote/profile-store.d.ts

@@ -16,6 +16,7 @@ export type CloudProfileLookup = {
 };
 export type SaveSelfHostedProfileInput = {
     hostUrl: string;
+    hostIdentity?: string | undefined;
     clientId: string;
     clientLabel?: string | undefined;
     credentials: RemoteProfileCredential;
@@ -23,6 +24,7 @@ export type SaveSelfHostedProfileInput = {
 };
 export type SelfHostedProfileLookup = {
     hostUrl: string;
+    hostIdentity?: string | undefined;
 };
 export type RefreshSelfHostedProfileInput = SelfHostedProfileLookup & {
     needsRefresh: (credential: RemoteProfileCredential) => boolean;

package/dist/remote/profiles.d.ts

@@ -16,6 +16,7 @@ export type RemoteProfileCredential = {
 export type RemoteProfileStatusInput = {
     kind: RemoteProfileKind;
     hostUrl: string;
+    hostIdentity?: string | undefined;
     key?: string | undefined;
     workspaceId?: string | undefined;
     workspaceSlug?: string | undefined;
@@ -31,6 +32,7 @@ export type RemoteProfileStatus = {
     kind: RemoteProfileKind;
     key: string;
     hostUrl: string;
+    hostIdentity?: string | undefined;
     workspaceId?: string | undefined;
     workspaceSlug?: string | undefined;
     clientId?: string | undefined;

package/dist/remote/server-credential-store.d.ts

@@ -1,4 +1,5 @@
-import type { IssuedRemoteClientCredentials, RemoteClientStatus, ValidatedRemoteClient } from "./server-credentials";
+import { type VaultEncryptedRecord } from "../vault/crypto";
+import type { IssuedRemoteClientCredentials, RemoteClientStatus, RemotePendingLoginStatus, RemotePendingLoginState, ValidatedRemoteClient } from "./server-credentials";
 export type RemoteServerCredentialStoreOptions = {
     dir: string;
 };
@@ -25,6 +26,29 @@ export type RefreshClientCredentialsInput = {
     refreshToken: string;
     now?: Date | undefined;
 };
+export type CreatePendingLoginInput = {
+    hostUrl: string;
+    hostIdentity?: string | undefined;
+    clientLabel?: string | undefined;
+    clientFingerprint?: string | undefined;
+    sourceHint?: string | undefined;
+    now?: Date | undefined;
+};
+export type PendingLoginPossessionInput = {
+    flowId: string;
+    pendingCompletionSecret: string;
+    now?: Date | undefined;
+};
+export type RefreshPendingLoginInput = PendingLoginPossessionInput & {
+    pendingRefreshSecret: string;
+};
+export type ApprovePendingLoginInput = {
+    operatorCode: string;
+    now?: Date | undefined;
+};
+export type CompletePendingLoginInput = PendingLoginPossessionInput & {
+    hostUrl: string;
+};
 type StoredPairingCode = {
     codeId: string;
     hostUrl: string;
@@ -49,18 +73,91 @@ type StoredRemoteClient = {
     lastUsedAt?: string | undefined;
     revokedAt?: string | undefined;
 };
+type PendingLoginStatus = RemotePendingLoginState;
+type StoredPendingLogin = {
+    flowId: string;
+    hostUrl: string;
+    hostIdentity?: string | undefined;
+    operatorCodeHash: string;
+    pendingRefreshHash: string;
+    supersededPendingRefreshHashes: SupersededRefreshToken[];
+    pendingRefreshReplay?: PendingRefreshReplay | undefined;
+    pendingCompletionHash: string;
+    completionReplay?: CompletionReplay | undefined;
+    clientLabel: string;
+    clientFingerprint?: string | undefined;
+    sourceHint?: string | undefined;
+    createdAt: string;
+    codeExpiresAt: string;
+    flowExpiresAt: string;
+    status: PendingLoginStatus;
+    operatorCodeFingerprint?: string | undefined;
+    approvedAt?: string | undefined;
+    deniedAt?: string | undefined;
+    cancelledAt?: string | undefined;
+    exchangedAt?: string | undefined;
+};
 type SupersededRefreshToken = {
     hash: string;
     supersededAt: string;
 };
+type PendingRefreshReplay = {
+    refreshHash: string;
+    expiresAt: string;
+    encryptedResponse: VaultEncryptedRecord;
+};
+type CompletionReplay = {
+    expiresAt: string;
+    encryptedCredentials: VaultEncryptedRecord;
+};
 type RemoteServerCredentialState = {
     version: 1;
     pairingCodes: StoredPairingCode[];
+    pendingLogins: StoredPendingLogin[];
     clients: StoredRemoteClient[];
 };
 export declare class RemoteServerCredentialStore {
     readonly dir: string;
     constructor(options: RemoteServerCredentialStoreOptions);
+    createPendingLogin(input: CreatePendingLoginInput): {
+        flowId: string;
+        operatorCode: string;
+        operatorCodeFingerprint: string;
+        pendingRefreshSecret: string;
+        pendingCompletionSecret: string;
+        codeExpiresAt: string;
+        flowExpiresAt: string;
+        intervalSeconds: number;
+    };
+    pollPendingLogin(input: PendingLoginPossessionInput): {
+        flowId: string;
+        status: PendingLoginStatus;
+    };
+    refreshPendingLogin(input: RefreshPendingLoginInput): {
+        flowId: string;
+        operatorCode: string;
+        operatorCodeFingerprint: string;
+        pendingRefreshSecret: string;
+        codeExpiresAt: string;
+        flowExpiresAt: string;
+        intervalSeconds: number;
+    };
+    denyPendingLogin(input: ApprovePendingLoginInput): {
+        flowId: string;
+        status: "denied";
+    };
+    cancelPendingLogin(input: PendingLoginPossessionInput): {
+        flowId: string;
+        status: "cancelled";
+    };
+    approvePendingLogin(input: ApprovePendingLoginInput): {
+        flowId: string;
+        status: "approved";
+        clientLabel: string;
+        clientFingerprint?: string | undefined;
+        sourceHint?: string | undefined;
+    };
+    completePendingLogin(input: CompletePendingLoginInput): IssuedRemoteClientCredentials;
     createPairingCode(input: CreatePairingCodeInput): {
         codeId: string;
         code: string;
@@ -68,6 +165,7 @@ export declare class RemoteServerCredentialStore {
     };
     exchangePairingCode(input: ExchangePairingCodeInput): IssuedRemoteClientCredentials;
     listClients(): RemoteClientStatus[];
+    listPendingLogins(now?: Date): RemotePendingLoginStatus[];
     revokeClient(clientId: string, now?: Date): boolean;
     validateAccessToken(input: ValidateAccessTokenInput): ValidatedRemoteClient;
     refreshClientCredentials(input: RefreshClientCredentialsInput): IssuedRemoteClientCredentials;
@@ -80,5 +178,6 @@ export declare class RemoteServerCredentialStore {
     private acquireLock;
     private releaseLock;
     private clearStaleLock;
+    private pendingLoginForCompletion;
 }
 export {};

package/dist/remote/server-credentials.d.ts

@@ -16,6 +16,24 @@ export type RemoteClientStatus = {
     lastUsedAt?: string | undefined;
     revokedAt?: string | undefined;
 };
+export type RemotePendingLoginState = "pending" | "approved" | "denied" | "cancelled" | "expired" | "exchanged";
+export type RemotePendingLoginStatus = {
+    flowId: string;
+    hostUrl: string;
+    hostIdentity?: string | undefined;
+    status: RemotePendingLoginState;
+    operatorCodeFingerprint?: string | undefined;
+    clientLabel: string;
+    clientFingerprint?: string | undefined;
+    sourceHint?: string | undefined;
+    createdAt: string;
+    codeExpiresAt: string;
+    flowExpiresAt: string;
+    approvedAt?: string | undefined;
+    deniedAt?: string | undefined;
+    cancelledAt?: string | undefined;
+    exchangedAt?: string | undefined;
+};
 export type ValidatedRemoteClient = RemoteClientStatus & {
     tokenType: "Bearer";
 };

package/dist/serve/http.d.ts

@@ -35,6 +35,11 @@ export declare function servicePaths(base: string): {
     attachInvoke: string;
     projectBindings: string;
     pairingExchange: string;
+    remoteLoginStart: string;
+    remoteLoginPoll: string;
+    remoteLoginRefresh: string;
+    remoteLoginComplete: string;
+    remoteLoginCancel: string;
     remoteRefresh: string;
     remoteClient: string;
     health: string;