@getpaseo/protocol 0.6.1 → 0.7.0-beta.2

package/dist/messages.js

@@ -847,6 +847,9 @@ export const SetVoiceModeMessageSchema = z.object({
     agentId: z.string().optional(),
     requestId: z.string().optional(),
 });
+// COMPAT(githubAttachmentKinds): legacy wire attachment retained when
+// forge-neutral attachments shipped in v0.2.0-beta.1. Stop emitting it after
+// 2027-01-17 once supported client and daemon floors are >= v0.2.0.
 export const GitHubPrAttachmentSchema = z.object({
     type: z.literal("github_pr"),
     mimeType: z.literal("application/github-pr"),
@@ -869,6 +872,9 @@ export const ForgeChangeRequestAttachmentSchema = z.object({
     baseRefName: z.string().nullable().optional(),
     headRefName: z.string().nullable().optional(),
 });
+// COMPAT(githubAttachmentKinds): legacy wire attachment retained when
+// forge-neutral attachments shipped in v0.2.0-beta.1. Stop emitting it after
+// 2027-01-17 once supported client and daemon floors are >= v0.2.0.
 export const GitHubIssueAttachmentSchema = z.object({
     type: z.literal("github_issue"),
     mimeType: z.literal("application/github-issue"),
@@ -1182,6 +1188,24 @@ export const PluginDirectoryInspectRequestSchema = z.object({
     requestId: z.string(),
     path: z.string().min(1),
 });
+export const PluginSourceInstallRequestSchema = z.object({
+    type: z.literal("plugin.source.install.request"),
+    requestId: z.string(),
+    source: z.string().min(1),
+    id: PluginIdSchema.optional(),
+    ref: z.string().min(1).optional(),
+    pluginPath: z.string().min(1).optional(),
+});
+export const PluginSourceStatusRequestSchema = z.object({
+    type: z.literal("plugin.source.status.request"),
+    requestId: z.string(),
+    pluginId: PluginIdSchema.optional(),
+});
+export const PluginSourceUpdateRequestSchema = z.object({
+    type: z.literal("plugin.source.update.request"),
+    requestId: z.string(),
+    pluginId: PluginIdSchema.optional(),
+});
 function pluginIdRequest(type) {
     return z.object({ type: z.literal(type), requestId: z.string(), pluginId: PluginIdSchema });
 }
@@ -1287,8 +1311,9 @@ const GitSetupOptionsSchema = z.object({
     refName: z.string().min(1).optional(),
     action: z.enum(["branch-off", "checkout"]).optional(),
     checkoutSource: ChangeRequestCheckoutSourceSchema.optional(),
-    // COMPAT(githubPrNumber): added in v0.1.106, remove after 2026-12-28 once
-    // clients send checkoutSource.
+    // COMPAT(githubPrNumber): legacy GitHub checkout input retained when
+    // checkoutSource shipped in v0.2.0-beta.1. Remove after 2027-01-17 once the
+    // supported client floor is >= v0.2.0.
     githubPrNumber: z.number().int().positive().optional(),
 });
 export const CreateAgentWorktreeTargetSchema = z.discriminatedUnion("mode", [
@@ -1755,8 +1780,9 @@ export const CheckoutForgeSetAutoMergeRequestSchema = z.object({
     mergeMethod: z.enum(["merge", "squash", "rebase"]).optional(),
     requestId: z.string(),
 });
-// COMPAT(githubAutoMergeRpc): added in v0.1.106, remove after 2026-12-28 once
-// all supported clients use checkout.forge.set_auto_merge.*.
+// COMPAT(githubAutoMergeRpc): legacy RPC retained when
+// checkout.forge.set_auto_merge.* shipped in v0.2.0-beta.1. Stop serving and
+// consuming it after 2027-01-17 once client and daemon floors are >= v0.2.0.
 export const CheckoutGithubSetAutoMergeRequestSchema = z.object({
     type: z.literal("checkout.github.set_auto_merge.request"),
     cwd: z.string(),
@@ -1816,8 +1842,9 @@ const CheckoutCheckDetailsRequestPayloadSchema = z.object({
 export const CheckoutForgeGetCheckDetailsRequestSchema = CheckoutCheckDetailsRequestPayloadSchema.extend({
     type: z.literal("checkout.forge.get_check_details.request"),
 });
-// COMPAT(githubCheckDetailsRpc): added in v0.1.106, remove after 2026-12-28 once
-// all supported clients use checkout.forge.get_check_details.*.
+// COMPAT(githubCheckDetailsRpc): legacy RPC retained when
+// checkout.forge.get_check_details.* shipped in v0.2.0-beta.1. Stop serving
+// and consuming it after 2027-01-17 once client and daemon floors are >= v0.2.0.
 export const CheckoutGithubGetCheckDetailsRequestSchema = CheckoutCheckDetailsRequestPayloadSchema.extend({
     type: z.literal("checkout.github.get_check_details.request"),
 });
@@ -1897,8 +1924,9 @@ export const GitHubSearchItemSchema = z.object({
 export const ForgeSearchItemSchema = GitHubSearchItemSchema.extend({
     kind: z.enum(["issue", "change_request"]),
 });
-// COMPAT(githubSearchKind): added in v0.1.106, remove with the legacy
-// github_search_request RPC after 2026-12-28.
+// COMPAT(githubSearchKind): legacy GitHub kind aliases retained when neutral
+// forge search shipped in v0.2.0-beta.1. Remove after 2027-01-17 together with
+// the legacy github_search_request RPC.
 export const ForgeSearchKindSchema = z.enum([
     "issue",
     "change_request",
@@ -1915,8 +1943,9 @@ export const ForgeSearchRequestSchema = z.object({
     kinds: z.array(ForgeSearchKindSchema).optional(),
     requestId: z.string(),
 });
-// COMPAT(githubSearchRpc): added in v0.1.106, remove after 2026-12-28 once
-// clients use forge.search.*.
+// COMPAT(githubSearchRpc): legacy RPC retained when forge.search.* shipped in
+// v0.2.0-beta.1. Stop serving and consuming it after 2027-01-17 once client
+// and daemon floors are >= v0.2.0.
 export const GitHubSearchRequestSchema = z.object({
     type: z.literal("github_search_request"),
     cwd: z.string(),
@@ -1979,8 +2008,9 @@ export const CreatePaseoWorktreeRequestSchema = z.object({
     refName: z.string().min(1).optional(),
     action: z.enum(["branch-off", "checkout"]).optional(),
     checkoutSource: ChangeRequestCheckoutSourceSchema.optional(),
-    // COMPAT(githubPrNumber): added in v0.1.106, remove after 2026-12-28 once
-    // clients send checkoutSource: { kind: "change_request", forge, number }.
+    // COMPAT(githubPrNumber): legacy GitHub checkout input retained when
+    // checkoutSource shipped in v0.2.0-beta.1. Remove after 2027-01-17 once the
+    // supported client floor is >= v0.2.0.
     githubPrNumber: z.number().int().positive().optional(),
     requestId: z.string(),
 });
@@ -2078,8 +2108,9 @@ export const WorkspaceCreateRequestSchema = z.object({
             // New branch name for branch-off. The worktree path may use a different slug.
             branchName: z.string().min(1).optional(),
             checkoutSource: ChangeRequestCheckoutSourceSchema.optional(),
-            // COMPAT(githubPrNumber): added in v0.1.106, remove after 2026-12-28 once
-            // clients send checkoutSource.
+            // COMPAT(githubPrNumber): legacy GitHub checkout input retained when
+            // checkoutSource shipped in v0.2.0-beta.1. Remove after 2027-01-17 once
+            // the supported client floor is >= v0.2.0.
             githubPrNumber: z.number().int().positive().optional(),
             worktreeSlug: z.string().optional(),
         }),
@@ -2519,6 +2550,9 @@ export const SessionInboundMessageSchema = z.discriminatedUnion("type", [
     PluginLogsGetRequestSchema,
     PluginDirectoryInstallRequestSchema,
     PluginDirectoryInspectRequestSchema,
+    PluginSourceInstallRequestSchema,
+    PluginSourceStatusRequestSchema,
+    PluginSourceUpdateRequestSchema,
     PluginReloadRequestSchema,
     PluginEnableRequestSchema,
     PluginDisableRequestSchema,
@@ -2816,15 +2850,25 @@ export const ServerInfoStatusPayloadSchema = z
         directorySync: z.boolean().optional(),
         // COMPAT(workspaceLabels): added in v0.5.0, remove after 2027-08-14.
         workspaceLabels: z.boolean().optional(),
-        // COMPAT(checkoutForgeSetAutoMerge): added in v0.1.106, remove old
-        // checkoutGithubSetAutoMerge fallback after 2026-12-28.
+        // COMPAT(checkoutForgeSetAutoMerge): added in v0.2.0-beta.1. Remove the
+        // feature gate and checkoutGithubSetAutoMerge fallback after 2027-01-17
+        // once the supported daemon floor is >= v0.2.0.
         checkoutForgeSetAutoMerge: z.boolean().optional(),
+        // COMPAT(checkoutGithubSetAutoMerge): added in v0.1.75 and retained as
+        // the fallback for checkoutForgeSetAutoMerge. Stop advertising and
+        // consuming it after 2027-01-17 once supported floors are >= v0.2.0.
         checkoutGithubSetAutoMerge: z.boolean().optional(),
-        // COMPAT(githubCheckDetails): added in v0.1.92, remove gate after 2026-12-08.
+        // COMPAT(githubCheckDetails): added in v0.1.92 and retained as the
+        // fallback for forgeCheckDetails. Stop advertising and consuming it
+        // after 2027-01-17 once supported floors are >= v0.2.0.
         githubCheckDetails: z.boolean().optional(),
-        // COMPAT(forgeCheckDetails): added in v0.1.106, remove githubCheckDetails fallback after 2026-12-28.
+        // COMPAT(forgeCheckDetails): added in v0.2.0-beta.1. Remove the feature
+        // gate and githubCheckDetails fallback after 2027-01-17 once the
+        // supported daemon floor is >= v0.2.0.
         forgeCheckDetails: z.boolean().optional(),
-        // COMPAT(forgeSearch): added in v0.1.106, remove github_search fallback after 2026-12-28.
+        // COMPAT(forgeSearch): added in v0.2.0-beta.1. Remove the feature gate
+        // and github_search fallback after 2027-01-17 once the supported daemon
+        // floor is >= v0.2.0.
         forgeSearch: z.boolean().optional(),
         // COMPAT(daemonStatusRpc): added in v0.1.76, remove gate after 2026-11-18.
         daemonStatusRpc: z.boolean().optional(),
@@ -2840,6 +2884,8 @@ export const ServerInfoStatusPayloadSchema = z
         pluginManagement: z.boolean().optional(),
         // COMPAT(pluginLogs): added in v0.4.0, remove gate after 2027-08-16.
         pluginLogs: z.boolean().optional(),
+        // COMPAT(pluginGitManagement): added in v0.7.0, remove gate after 2027-08-26.
+        pluginGitManagement: z.boolean().optional(),
         // COMPAT(pluginThemes): added in v0.5.0, remove gate after 2027-08-20.
         // A daemon that predates this flag keeps `addTheme` in the server bundle it compiles,
         // so a theme plugin cannot start there at all.
@@ -2908,7 +2954,8 @@ export const ServerInfoStatusPayloadSchema = z
         providerRemoval: z.boolean().optional(),
         // COMPAT(importSessionWorkspaceTarget): added in v0.1.110, remove gate after 2027-01-16.
         importSessionWorkspaceTarget: z.boolean().optional(),
-        // COMPAT(forgeProviders): added in v0.1.106, drop the gate when daemon floor >= v0.1.106.
+        // COMPAT(forgeProviders): added in v0.2.0-beta.1. Drop the gate after
+        // 2027-01-17 once the supported daemon floor is >= v0.2.0.
         // Daemon advertises pluggable non-GitHub forge support (the forge registry);
         // the client gates non-GitHub setup UI on it.
         forgeProviders: z.boolean().optional(),
@@ -3150,6 +3197,8 @@ export const WorkspaceGitHubRuntimePayloadSchema = z
             url: z.string().nullable(),
             workflow: z.string().optional(),
             duration: z.string().optional(),
+            // Open so future forge-neutral refinements remain parse-compatible.
+            traits: z.array(z.string()).optional(),
         }))
             .optional(),
         checksStatus: z.enum(["none", "pending", "success", "failure"]).optional(),
@@ -3222,10 +3271,14 @@ export const WorkspaceDescriptorPayloadSchema = z
         .optional(),
     scripts: z.array(WorkspaceScriptPayloadSchema).default([]),
     gitRuntime: WorkspaceGitRuntimePayloadSchema,
+    // COMPAT(githubRuntimeName): legacy wire-field name now carries
+    // forge-neutral runtime data. Introduce and migrate to a neutral
+    // forgeRuntime field before consumers stop using this name. Target cleanup
+    // after 2027-01-17 once the supported client floor is >= v0.2.0.
     githubRuntime: WorkspaceGitHubRuntimePayloadSchema,
-    // COMPAT(forge): added in v0.1.106, remove after 2026-12-27. The forge resolved
-    // for this workspace, so the sidebar/hover-card render the right brand mark.
-    // Old daemons omit it; absent means the client falls back to GitHub.
+    // COMPAT(forge): added in v0.2.0-beta.1. Treat an absent forge as GitHub
+    // until 2027-01-17; remove the consumer fallback once the supported daemon
+    // floor is >= v0.2.0.
     forge: z.string().optional(),
     project: ProjectPlacementPayloadSchema.optional(),
     // COMPAT(directorySync): sequence of this latest directory projection.
@@ -3707,6 +3760,13 @@ export const FetchAgentTimelineResponseMessageSchema = z.object({
         error: z.string().nullable(),
     }),
 });
+export const AgentTimelineReplacementMessageSchema = z.object({
+    type: z.literal("agent.timeline.replacement"),
+    payload: z.object({
+        agentId: z.string(),
+        epoch: z.string(),
+    }),
+});
 export const AgentTimelineListPromptsResponseMessageSchema = z.object({
     type: z.literal("agent.timeline.list_prompts.response"),
     payload: z.object({
@@ -4209,7 +4269,8 @@ const CheckoutPrGithubStatusSchema = CheckoutPrGithubStatusObjectSchema.optional
 // in the consumer that knows that forge family.
 const CheckoutPrForgeSpecificSchema = z.unknown().optional();
 export const CheckoutPrStatusSchema = z.object({
-    // COMPAT(forge): added in v0.1.106, remove the default after 2026-12-27 once daemon floor >= v0.1.106.
+    // COMPAT(forge): added in v0.2.0-beta.1. Remove the GitHub default after
+    // 2027-01-17 once the supported daemon floor is >= v0.2.0.
     forge: z.string().optional().default("github"),
     projectPath: z.string().optional(),
     number: z.number().optional(),
@@ -4238,6 +4299,8 @@ export const CheckoutPrStatusSchema = z.object({
         duration: z.string().optional(),
         checkRunId: z.number().optional(),
         workflowRunId: z.number().optional(),
+        // Open so future forge-neutral refinements remain parse-compatible.
+        traits: z.array(z.string()).optional(),
     }))
         .optional()
         .default([]),
@@ -4253,12 +4316,12 @@ const CheckoutPrStatusPayloadSchema = z.object({
     cwd: z.string(),
     status: CheckoutPrStatusSchema.nullable(),
     githubFeaturesEnabled: z.boolean(),
-    // COMPAT(forgeAuthState): added in v0.1.106, remove after 2026-12-27. Optional richer
-    // signal that supersedes githubFeaturesEnabled. The legacy boolean stays for old clients
-    // and may remain true for non-auth error payloads so old clients still show the error.
-    // Drop the boolean once the daemon floor >= v0.1.106.
+    // COMPAT(forgeAuthState): added in v0.2.0-beta.1. Remove the legacy
+    // githubFeaturesEnabled normalization after 2027-01-17 once the supported
+    // daemon floor is >= v0.2.0.
     authState: ForgeAuthStateSchema,
-    // COMPAT(forge): added in v0.1.106, remove the default after 2026-12-27 once daemon floor >= v0.1.106.
+    // COMPAT(forge): added in v0.2.0-beta.1. Remove the GitHub default after
+    // 2027-01-17 once the supported daemon floor is >= v0.2.0.
     forge: z.string().optional().default("github"),
     error: CheckoutErrorSchema.nullable(),
     requestId: z.string(),
@@ -4377,8 +4440,9 @@ export const CheckoutForgeSetAutoMergeResponseSchema = z.object({
         requestId: z.string(),
     }),
 });
-// COMPAT(githubAutoMergeRpc): added in v0.1.106, remove after 2026-12-28 once
-// all supported clients use checkout.forge.set_auto_merge.*.
+// COMPAT(githubAutoMergeRpc): legacy RPC retained when
+// checkout.forge.set_auto_merge.* shipped in v0.2.0-beta.1. Stop serving and
+// consuming it after 2027-01-17 once client and daemon floors are >= v0.2.0.
 export const CheckoutGithubSetAutoMergeResponseSchema = z.object({
     type: z.literal("checkout.github.set_auto_merge.response"),
     payload: z.object({
@@ -4445,7 +4509,11 @@ const CheckoutPipelineJobSchema = z.object({
     name: z.string(),
     stage: z.string(),
     status: z.string(),
-    rawStatus: z.string(),
+    // COMPAT(pipelineRawStatus): no client reads this, but peers <= v0.2.0-rc.1
+    // validate it as required, so daemons must keep emitting it. Optional since
+    // this schema so future daemons may omit it; delete the field and its
+    // emission after 2027-01-17 once the supported client floor is >= v0.2.0.
+    rawStatus: z.string().optional(),
     url: z.string().nullable().optional().default(null),
     allowFailure: z.boolean().optional().default(false),
     durationSeconds: z.number().nullable().optional().default(null),
@@ -4458,7 +4526,8 @@ const CheckoutPipelineStageSchema = z.object({
 const CheckoutPipelineSchema = z.object({
     id: z.number(),
     status: z.string(),
-    rawStatus: z.string(),
+    // COMPAT(pipelineRawStatus): see CheckoutPipelineJobSchema.rawStatus.
+    rawStatus: z.string().optional(),
     url: z.string().nullable().optional().default(null),
     ref: z.string().nullable().optional().default(null),
     sha: z.string().nullable().optional().default(null),
@@ -4497,8 +4566,9 @@ export const CheckoutForgeGetCheckDetailsResponseSchema = z.object({
         requestId: z.string(),
     }),
 });
-// COMPAT(githubCheckDetailsRpc): added in v0.1.106, remove after 2026-12-28 once
-// all supported clients use checkout.forge.get_check_details.*.
+// COMPAT(githubCheckDetailsRpc): legacy RPC retained when
+// checkout.forge.get_check_details.* shipped in v0.2.0-beta.1. Stop serving
+// and consuming it after 2027-01-17 once client and daemon floors are >= v0.2.0.
 export const CheckoutGithubGetCheckDetailsResponseSchema = z.object({
     type: z.literal("checkout.github.get_check_details.response"),
     payload: z.object({
@@ -4609,9 +4679,9 @@ export const PullRequestTimelineResponseSchema = z.object({
         error: PullRequestTimelineErrorSchema.nullable().optional().default(null),
         requestId: z.string().optional().default(""),
         githubFeaturesEnabled: z.boolean().optional().default(true),
-        // COMPAT(forgeAuthState): added in v0.1.106, remove after 2026-12-27. Optional richer
-        // signal that supersedes githubFeaturesEnabled, mirroring CheckoutPrStatusPayloadSchema.
-        // Drop the boolean once the daemon floor >= v0.1.106.
+        // COMPAT(forgeAuthState): added in v0.2.0-beta.1. Remove the legacy
+        // githubFeaturesEnabled normalization after 2027-01-17 once the supported
+        // daemon floor is >= v0.2.0.
         authState: ForgeAuthStateSchema,
     })
         .optional()
@@ -4717,8 +4787,9 @@ export const ForgeSearchResponseSchema = z.object({
     type: z.literal("forge.search.response"),
     payload: ForgeSearchResponsePayloadSchema,
 });
-// COMPAT(githubSearchRpc): added in v0.1.106, remove after 2026-12-28 once
-// clients use forge.search.*.
+// COMPAT(githubSearchRpc): legacy RPC retained when forge.search.* shipped in
+// v0.2.0-beta.1. Stop serving and consuming it after 2027-01-17 once client
+// and daemon floors are >= v0.2.0.
 export const GitHubSearchResponseSchema = z.object({
     type: z.literal("github_search_response"),
     payload: GitHubSearchResponsePayloadSchema,
@@ -5296,6 +5367,10 @@ export const PluginListItemSchema = z.object({
     path: z.string(),
     enabled: z.boolean(),
     status: PluginStatusSchema,
+    source: z.enum(["directory", "git"]).optional(),
+    remote: z.string().optional(),
+    ref: z.string().optional(),
+    commit: z.string().optional(),
     error: z.string().optional(),
 });
 export const PluginLogEntrySchema = z.object({
@@ -5324,6 +5399,36 @@ export const PluginDirectoryInspectResponseSchema = z.object({
     type: z.literal("plugin.directory.inspect.response"),
     payload: z.object({ requestId: z.string(), id: PluginIdSchema }),
 });
+export const PluginSourceInstallResponseSchema = z.object({
+    type: z.literal("plugin.source.install.response"),
+    payload: z.object({ requestId: z.string(), plugin: PluginListItemSchema }),
+});
+export const PluginSourceStatusItemSchema = z.object({
+    id: PluginIdSchema,
+    source: z.enum(["directory", "git"]),
+    path: z.string(),
+    remote: z.string().optional(),
+    ref: z.string().optional(),
+    currentCommit: z.string().optional(),
+    latestCommit: z.string().optional(),
+    commitsBehind: z.number().int().nonnegative().optional(),
+    updateAvailable: z.boolean().optional(),
+});
+export const PluginSourceStatusResponseSchema = z.object({
+    type: z.literal("plugin.source.status.response"),
+    payload: z.object({ requestId: z.string(), plugins: z.array(PluginSourceStatusItemSchema) }),
+});
+export const PluginSourceUpdateItemSchema = z.object({
+    id: PluginIdSchema,
+    previousCommit: z.string(),
+    currentCommit: z.string(),
+    commits: z.number().int().nonnegative(),
+    updated: z.boolean(),
+});
+export const PluginSourceUpdateResponseSchema = z.object({
+    type: z.literal("plugin.source.update.response"),
+    payload: z.object({ requestId: z.string(), plugins: z.array(PluginSourceUpdateItemSchema) }),
+});
 function pluginActionResponse(type) {
     return z.object({
         type: z.literal(type),
@@ -5377,6 +5482,9 @@ export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
     PluginLogsGetResponseSchema,
     PluginDirectoryInstallResponseSchema,
     PluginDirectoryInspectResponseSchema,
+    PluginSourceInstallResponseSchema,
+    PluginSourceStatusResponseSchema,
+    PluginSourceUpdateResponseSchema,
     PluginReloadResponseSchema,
     PluginEnableResponseSchema,
     PluginDisableResponseSchema,
@@ -5435,6 +5543,7 @@ export const SessionOutboundMessageSchema = z.discriminatedUnion("type", [
     ArchiveWorkspaceResponseMessageSchema,
     FetchAgentResponseMessageSchema,
     FetchAgentTimelineResponseMessageSchema,
+    AgentTimelineReplacementMessageSchema,
     AgentTimelineListPromptsResponseMessageSchema,
     ProviderSubagentListResponseMessageSchema,
     ProviderSubagentTimelineResponseMessageSchema,
@@ -5597,6 +5706,7 @@ export const WSHelloMessageSchema = z.object({
         [CLIENT_CAPS.providerSubagents]: z.boolean().optional(),
         [CLIENT_CAPS.projectUpdates]: z.boolean().optional(),
         [CLIENT_CAPS.compactProviderSnapshots]: z.boolean().optional(),
+        [CLIENT_CAPS.timelineReplacementInvalidation]: z.boolean().optional(),
         [CLIENT_CAPS.browserHost]: BrowserAutomationHostCapabilitySchema.optional(),
     })
         .passthrough()

package/dist/ssh-transport.d.ts

@@ -0,0 +1,11 @@
+export declare const DEFAULT_SSH_DAEMON_PORT = 6767;
+export interface SshTransportTarget {
+    host: string;
+    sshPort?: number;
+    daemonPort: number;
+}
+export declare function validatePort(value: string | number, label: string): number;
+export declare function validateSshHost(host: string): string;
+export declare function parseSshTransportUri(value: string): SshTransportTarget;
+export declare function buildSshTunnelArgs(target: SshTransportTarget): string[];
+//# sourceMappingURL=ssh-transport.d.ts.map

package/dist/ssh-transport.js

@@ -0,0 +1,72 @@
+export const DEFAULT_SSH_DAEMON_PORT = 6767;
+export function validatePort(value, label) {
+    const port = Number(value);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new Error(`${label} must be between 1 and 65535`);
+    }
+    return port;
+}
+export function validateSshHost(host) {
+    const normalized = host.trim();
+    if (!normalized)
+        throw new Error("SSH host is required");
+    if (/\s/u.test(normalized) || normalized.startsWith("-")) {
+        throw new Error("SSH host is invalid");
+    }
+    return normalized;
+}
+export function parseSshTransportUri(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch (error) {
+        throw new Error("Invalid SSH host URI", { cause: error });
+    }
+    if (url.protocol !== "ssh:" || url.password || (url.pathname !== "" && url.pathname !== "/")) {
+        throw new Error("Invalid SSH host URI");
+    }
+    if (url.hash)
+        throw new Error("SSH host URI does not support fragments");
+    for (const key of url.searchParams.keys()) {
+        if (key !== "daemonPort")
+            throw new Error(`Unsupported SSH host option: ${key}`);
+    }
+    const daemonPorts = url.searchParams.getAll("daemonPort");
+    if (daemonPorts.length > 1)
+        throw new Error("daemonPort may only be specified once");
+    const urlHostname = url.hostname;
+    const hostname = validateSshHost(urlHostname.startsWith("[") && urlHostname.endsWith("]")
+        ? urlHostname.slice(1, -1)
+        : urlHostname);
+    const username = decodeURIComponent(url.username);
+    const host = validateSshHost(username ? `${username}@${hostname}` : hostname);
+    return {
+        host,
+        ...(url.port ? { sshPort: validatePort(url.port, "SSH port") } : {}),
+        daemonPort: daemonPorts[0] === undefined
+            ? DEFAULT_SSH_DAEMON_PORT
+            : validatePort(daemonPorts[0], "Daemon port"),
+    };
+}
+export function buildSshTunnelArgs(target) {
+    const host = validateSshHost(target.host);
+    const daemonPort = validatePort(target.daemonPort, "Daemon port");
+    const args = [
+        "-T",
+        "-o",
+        "BatchMode=yes",
+        "-o",
+        "ConnectTimeout=10",
+        "-o",
+        "ClearAllForwardings=yes",
+        "-o",
+        "ExitOnForwardFailure=yes",
+    ];
+    if (target.sshPort !== undefined) {
+        args.push("-p", String(validatePort(target.sshPort, "SSH port")));
+    }
+    args.push("-W", `127.0.0.1:${daemonPort}`, host);
+    return args;
+}
+//# sourceMappingURL=ssh-transport.js.map