@granica/myelin-beam-client 0.1.0-alpha.0

package/dist/beamUp.js

@@ -0,0 +1,252 @@
+import { request } from "undici";
+import { spawn } from "node:child_process";
+import { readRolloutBytes, findCurrentClaudeRollout, findCurrentCodexRollout, trimIncompleteTail, } from "./rollout.js";
+import { syncHarness } from "./harnessSync.js";
+/// Orchestrate the full beam-up flow.
+///
+/// Steps:
+///   1. Locate the current session's rollout (mtime heuristic).
+///   2. Rsync-diff the harness allowlist against router state; PUT
+///      changed files, finalize the manifest.
+///   3. Mint three signed PUT URLs from the router (workspace,
+///      transcript, artifacts).
+///   4. PUT: empty workspace tar (users clone repos inside the beam via
+///      the GitLab/GitHub connectors already wired in /integrations —
+///      we intentionally do NOT ship the user's cwd), the rollout
+///      bytes, and an empty artifacts tar (deferred: "import to
+///      running session" flow later).
+///   5. Finalize the mint → router creates BeamMeta + launches the VM.
+///   6. Return `{beam_id, beam_url, session_uuid, harness}`.
+export async function beamUp(cfg, opts = {}) {
+    if (!cfg.silo_audit_url) {
+        throw new Error("No silo assigned to your account yet. Finish onboarding at https://myelin.granica.ai then re-run authenticate.");
+    }
+    const silo = cfg.silo_audit_url.replace(/\/+$/, "");
+    // 1. Locate rollout. Kind determines the search root and filename
+    // shape; both locators return the same RolloutHit envelope.
+    const agentKind = opts.agentKind ?? "claude";
+    const hit = agentKind === "codex"
+        ? await findCurrentCodexRollout()
+        : await findCurrentClaudeRollout();
+    if (!hit) {
+        const where = agentKind === "codex"
+            ? "~/.codex/sessions/"
+            : "~/.claude/projects/";
+        throw new Error(`Couldn't locate the current ${agentKind === "codex" ? "Codex" : "Claude"} session's transcript under ${where}. ` +
+            `Bridge process.cwd()=${process.cwd()}. ` +
+            `Have you sent at least one turn in ${agentKind === "codex" ? "Codex" : "Claude Code"} from this working directory before invoking beam_up?`);
+    }
+    // 2. Harness rsync — do this first so the beam boot picks up the new
+    //    manifest. On the router side, sandbox_launcher checks for a
+    //    manifest existence before stamping the harness-prefix key; we
+    //    want that check to see the FRESH manifest, not yesterday's.
+    //    agentKind selects both the local root (~/.claude vs ~/.codex)
+    //    AND the router-side GCS prefix (harness/claude/ vs harness/codex/).
+    const harness = await syncHarness(cfg, agentKind);
+    // 3. Mint the three signed PUTs.
+    const mintRes = await request(`${silo}/api/mcp/beam/from-local/mint`, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${cfg.token}`,
+        },
+        body: "{}",
+    });
+    if (mintRes.statusCode >= 400) {
+        const detail = await mintRes.body.text().catch(() => "");
+        throw new Error(`beam mint failed: ${mintRes.statusCode} ${detail || ""}`);
+    }
+    const mint = (await mintRes.body.json());
+    // 4. PUT the three objects in parallel:
+    //    - workspace: empty gzip tar (router expects application/gzip)
+    //    - transcript: raw jsonl bytes from the rollout
+    //    - artifacts: empty gzip tar
+    const rawRolloutBytes = await readRolloutBytes(hit);
+    // Beam-up runs inside a turn: the tail of the rollout is the `beam_up`
+    // tool call itself, whose matching tool-result can't exist yet. Trim
+    // that dangling call before upload so the resumed session ends on a
+    // clean turn — avoids codex's "Conversation interrupted" banner and
+    // matches the between-turn snapshot semantics that fork gets for free.
+    const rolloutBytes = trimIncompleteTail(rawRolloutBytes, hit.agent);
+    const emptyTgz = await emptyGzipTar();
+    await Promise.all([
+        putBytes(mint.workspace_put_url, emptyTgz, "application/gzip"),
+        putBytes(mint.transcript_put_url, rolloutBytes, "application/x-ndjson"),
+        putBytes(mint.artifacts_put_url, emptyTgz, "application/gzip"),
+    ]);
+    // 5. Finalize the upload session. Router marks it complete and hands
+    //    back an `upload_token` — this DOES NOT launch the beam yet. The
+    //    `mint.beam_id` from step 3 was a pre-mint placeholder; the real
+    //    beam_id + pod are created by the launch step below.
+    // Normalize the laptop cwd to /<basename> before sending. The pod's
+    // resolve_workspace_dir() takes the first '/' segment as the workspace
+    // slug: raw '/Users/jvalluru/aladdin-v2' → 'Users' (wrong repo name,
+    // '~/workspace/Users' on the pod). Sending '/aladdin-v2' instead
+    // makes the pod resolve to '~/workspace/aladdin-v2' as expected.
+    // Router stores the cwd verbatim in BeamMeta; no other consumer parses
+    // the full laptop path structurally.
+    const normalizedCwd = `/${shortNameHint(hit.project_cwd)}`;
+    const finalizeBody = {
+        finalize_token: mint.finalize_token,
+        project_cwd: normalizedCwd,
+        // The verbatim laptop cwd the rollout was recorded under.
+        // Codex embeds this in session_meta + per-turn environment
+        // context; router uses it to stamp a hydration-plan sed rewrite
+        // (laptop cwd → pod workspace dir) so `codex resume --last`'s
+        // cwd filter matches. Claude is path-indexed and ignores this
+        // field. Sent for both kinds for wire uniformity.
+        original_cwd: hit.project_cwd,
+        name_hint: shortNameHint(hit.project_cwd),
+        agent_kind: hit.agent, // "claude" | "codex"
+        session_uuid: hit.session_uuid,
+    };
+    const finRes = await request(`${silo}/api/mcp/beam/from-local/mint/finalize`, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${cfg.token}`,
+        },
+        body: JSON.stringify(finalizeBody),
+    });
+    if (finRes.statusCode >= 400) {
+        const detail = await finRes.body.text().catch(() => "");
+        throw new Error(`beam finalize failed: ${finRes.statusCode} ${detail || ""}`);
+    }
+    const fin = (await finRes.body.json());
+    if (!fin.upload_token) {
+        throw new Error("beam finalize returned no upload_token");
+    }
+    // 6. Launch. Atomically creates the BeamMeta + boots the pod. Returns
+    //    the AUTHORITATIVE beam_id (the mint-time id was a pre-reservation
+    //    that this call may or may not honor — always trust the launch
+    //    response). Same shape audit-web's composer uses when a user
+    //    clicks "Beam" after a terminal upload.
+    const launchBody = {};
+    if (opts.model && opts.model.trim()) {
+        launchBody.model = opts.model.trim();
+    }
+    const launchRes = await request(`${silo}/api/mcp/beam/from-local/upload/${encodeURIComponent(fin.upload_token)}/launch`, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${cfg.token}`,
+        },
+        body: JSON.stringify(launchBody),
+    });
+    if (launchRes.statusCode >= 400) {
+        const detail = await launchRes.body.text().catch(() => "");
+        throw new Error(prettyLaunchError(launchRes.statusCode, detail, silo, agentKind));
+    }
+    const launch = (await launchRes.body.json());
+    if (!launch.beam_id) {
+        throw new Error("beam launch returned no beam_id");
+    }
+    const beam_id = launch.beam_id;
+    const session_uuid = launch.session_uuid || hit.session_uuid;
+    // Beam URL must use session_uuid (not beam_id) + ?view=sandbox —
+    // matches how audit-web's own composer builds URLs
+    // (NewBeamLanding.tsx:3510). A `/sessions/<beam_id>` URL half-loads
+    // but shows the wrong session view; the session_uuid form is the
+    // authoritative shape.
+    const beam_url = `${silo}/sessions/${encodeURIComponent(session_uuid)}?view=sandbox`;
+    return {
+        beam_id,
+        beam_url,
+        session_uuid,
+        harness,
+    };
+}
+async function putBytes(url, bytes, contentType) {
+    const res = await request(url, {
+        method: "PUT",
+        headers: { "content-type": contentType },
+        body: bytes,
+    });
+    if (res.statusCode >= 400) {
+        const detail = await res.body.text().catch(() => "");
+        throw new Error(`PUT failed: ${res.statusCode} ${detail || ""}`);
+    }
+    await res.body.dump().catch(() => { });
+}
+/// Deterministic empty gzipped tar. Uses `tar czf` via the system tar
+/// so we don't add a heavy tar dep just for two ~1KB payloads. Falls
+/// back to a precomputed 45-byte gzip-of-empty-tar if the tar binary
+/// isn't available (Windows dev, no-tar containers).
+let cachedEmptyTgz = null;
+async function emptyGzipTar() {
+    if (cachedEmptyTgz)
+        return cachedEmptyTgz;
+    try {
+        const buf = await new Promise((resolve, reject) => {
+            const proc = spawn("tar", ["-cz", "-T", "/dev/null"], {
+                stdio: ["ignore", "pipe", "ignore"],
+            });
+            const chunks = [];
+            proc.stdout.on("data", (c) => chunks.push(c));
+            proc.on("error", reject);
+            proc.on("close", (code) => {
+                if (code === 0)
+                    resolve(Buffer.concat(chunks));
+                else
+                    reject(new Error(`tar exited ${code}`));
+            });
+        });
+        cachedEmptyTgz = buf;
+        return buf;
+    }
+    catch {
+        // Pre-baked empty gzipped tar (from `tar cz -T /dev/null | xxd`).
+        // 45 bytes; deterministic across systems.
+        cachedEmptyTgz = Buffer.from([
+            0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x03, 0xed, 0xc1,
+            0x01, 0x0d, 0x00, 0x00, 0x00, 0xc2, 0xa0, 0xf7, 0x4f, 0x6d, 0x0e, 0x37,
+            0xa0, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xbe, 0x0d,
+            0xd1, 0x83, 0x30, 0x00, 0x28, 0x00, 0x00,
+        ]);
+        return cachedEmptyTgz;
+    }
+}
+/// Format a router launch failure into a message the user can act on
+/// without knowing the router's error taxonomy. The two common
+/// preconditions (missing agent OAuth, missing GitLab) already surface
+/// as recognizable JSON bodies — we recognize those and point at the
+/// connector page directly. Anything else falls back to the raw status
+/// + body so a debug session still has the wire detail.
+function prettyLaunchError(status, bodyText, silo, agentKind) {
+    let parsed = null;
+    try {
+        parsed = JSON.parse(bodyText);
+    }
+    catch {
+        // Non-JSON body → fall through to the raw path.
+    }
+    const err = parsed?.error;
+    const connectorsUrl = `${silo}/connectors`;
+    if (status === 428 && err === "no_coding_agent") {
+        const kind = parsed?.agent_kind || agentKind;
+        const label = kind === "codex" ? "Codex" : "Claude";
+        return (`Beam blocked: your ${label} account is not connected to Myelin yet. ` +
+            `Open ${connectorsUrl} and click "Connect ${label}" (one-time OAuth). ` +
+            `Then retry beam_up.`);
+    }
+    if (status === 428 && err === "gitlab_not_connected") {
+        return (`Beam blocked: GitLab is not connected on this silo. ` +
+            `Open ${connectorsUrl} and connect GitLab, then retry beam_up. ` +
+            `(This only kicks in when you pass a repo — if you didn't, this is a router bug.)`);
+    }
+    if (status === 401) {
+        return (`Beam blocked: your Myelin bridge token is invalid or expired. ` +
+            `Run \`npx @granica/myelin-beam-mcp logout\` then re-run the \`authenticate\` tool.`);
+    }
+    // Fallback: keep the raw wire response so we can diagnose later.
+    return `beam launch failed: ${status} ${bodyText || ""}`;
+}
+/// Short human-readable label for the beam pill in the UI — just the
+/// basename of the user's cwd. Matches how the audit-web composer
+/// names beams so an MCP beam-up is visually indistinguishable in the
+/// nav from a browser-composed beam.
+function shortNameHint(cwd) {
+    const parts = cwd.split(/[\/\\]/).filter(Boolean);
+    return parts[parts.length - 1] || "beam";
+}
+//# sourceMappingURL=beamUp.js.map

package/dist/beamUp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"beamUp.js","sourceRoot":"","sources":["../src/beamUp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,GAEnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,WAAW,EAA0B,MAAM,kBAAkB,CAAC;AAyBvE,sCAAsC;AACtC,GAAG;AACH,UAAU;AACV,gEAAgE;AAChE,mEAAmE;AACnE,8CAA8C;AAC9C,+DAA+D;AAC/D,gCAAgC;AAChC,wEAAwE;AACxE,sEAAsE;AACtE,kEAAkE;AAClE,gEAAgE;AAChE,sCAAsC;AACtC,uEAAuE;AACvE,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,GAAc,EACd,OAAsB,EAAE;IAExB,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,gHAAgH,CACjH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEpD,kEAAkE;IAClE,4DAA4D;IAC5D,MAAM,SAAS,GAAc,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC;IACxD,MAAM,GAAG,GACP,SAAS,KAAK,OAAO;QACnB,CAAC,CAAC,MAAM,uBAAuB,EAAE;QACjC,CAAC,CAAC,MAAM,wBAAwB,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,KAAK,GACT,SAAS,KAAK,OAAO;YACnB,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,qBAAqB,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+BAA+B,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,+BAA+B,KAAK,IAAI;YAC/G,wBAAwB,OAAO,CAAC,GAAG,EAAE,IAAI;YACzC,sCAAsC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,uDAAuD,CAC/I,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,iEAAiE;IACjE,mEAAmE;IACnE,iEAAiE;IACjE,mEAAmE;IACnE,yEAAyE;IACzE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAElD,iCAAiC;IACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,+BAA+B,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;SACrC;QACD,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,qBAAqB,OAAO,CAAC,UAAU,IAAI,MAAM,IAAI,EAAE,EAAE,CAC1D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAOtC,CAAC;IAEF,wCAAwC;IACxC,mEAAmE;IACnE,oDAAoD;IACpD,iCAAiC;IACjC,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACpD,uEAAuE;IACvE,qEAAqE;IACrE,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,MAAM,YAAY,GAAG,kBAAkB,CAAC,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,EAAE,kBAAkB,CAAC;QAC9D,QAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,YAAY,EAAE,sBAAsB,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,QAAQ,EAAE,kBAAkB,CAAC;KAC/D,CAAC,CAAC;IAEH,qEAAqE;IACrE,qEAAqE;IACrE,qEAAqE;IACrE,yDAAyD;IACzD,oEAAoE;IACpE,uEAAuE;IACvE,qEAAqE;IACrE,iEAAiE;IACjE,iEAAiE;IACjE,uEAAuE;IACvE,qCAAqC;IACrC,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;IAC3D,MAAM,YAAY,GAA4B;QAC5C,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,WAAW,EAAE,aAAa;QAC1B,0DAA0D;QAC1D,2DAA2D;QAC3D,gEAAgE;QAChE,8DAA8D;QAC9D,8DAA8D;QAC9D,kDAAkD;QAClD,YAAY,EAAE,GAAG,CAAC,WAAW;QAC7B,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC;QACzC,UAAU,EAAE,GAAG,CAAC,KAAK,EAAE,qBAAqB;QAC5C,YAAY,EAAE,GAAG,CAAC,YAAY;KAC/B,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,GAAG,IAAI,wCAAwC,EAC/C;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;KACnC,CACF,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,yBAAyB,MAAM,CAAC,UAAU,IAAI,MAAM,IAAI,EAAE,EAAE,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAA8B,CAAC;IACpE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,sEAAsE;IACtE,uEAAuE;IACvE,mEAAmE;IACnE,iEAAiE;IACjE,4CAA4C;IAC5C,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAC7B,GAAG,IAAI,mCAAmC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,EACvF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;KACjC,CACF,CAAC;IACF,IAAI,SAAS,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAK1C,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,GAAG,CAAC,YAAY,CAAC;IAC7D,iEAAiE;IACjE,mDAAmD;IACnD,oEAAoE;IACpE,iEAAiE;IACjE,uBAAuB;IACvB,MAAM,QAAQ,GAAG,GAAG,IAAI,aAAa,kBAAkB,CAAC,YAAY,CAAC,eAAe,CAAC;IAErF,OAAO;QACL,OAAO;QACP,QAAQ;QACR,YAAY;QACZ,OAAO;KACR,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,GAAW,EACX,KAAa,EACb,WAAmB;IAEnB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAC7B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;QACxC,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,CAAC,UAAU,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AACrE,qDAAqD;AACrD,IAAI,cAAc,GAAkB,IAAI,CAAC;AACzC,KAAK,UAAU,YAAY;IACzB,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE;gBACpD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,IAAI,IAAI,KAAK,CAAC;oBAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;;oBAC1C,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,cAAc,GAAG,GAAG,CAAC;QACrB,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,0CAA0C;QAC1C,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC;YAC3B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YACtE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YACtE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YACtE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;SACzC,CAAC,CAAC;QACH,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,+DAA+D;AAC/D,uEAAuE;AACvE,qEAAqE;AACrE,uEAAuE;AACvE,wDAAwD;AACxD,SAAS,iBAAiB,CACxB,MAAc,EACd,QAAgB,EAChB,IAAY,EACZ,SAAoB;IAEpB,IAAI,MAAM,GAAmD,IAAI,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAQ,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,EAAE,KAAK,CAAC;IAC1B,MAAM,aAAa,GAAG,GAAG,IAAI,aAAa,CAAC;IAE3C,IAAI,MAAM,KAAK,GAAG,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,EAAE,UAAU,IAAI,SAAS,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpD,OAAO,CACL,sBAAsB,KAAK,2CAA2C;YACtE,QAAQ,aAAa,uBAAuB,KAAK,sBAAsB;YACvE,qBAAqB,CACtB,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;QACrD,OAAO,CACL,sDAAsD;YACtD,QAAQ,aAAa,2CAA2C;YAChE,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,CACL,gEAAgE;YAChE,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,iEAAiE;IACjE,OAAO,uBAAuB,MAAM,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED,qEAAqE;AACrE,kEAAkE;AAClE,sEAAsE;AACtE,qCAAqC;AACrC,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC;AAC3C,CAAC"}

package/dist/harnessSync.d.ts

@@ -0,0 +1,22 @@
+import type { AgentKind, McpConfig } from "./types.js";
+export interface HarnessFile {
+    path: string;
+    sha256: string;
+    size: number;
+}
+export interface HarnessDiffResp {
+    signed_puts: Array<{
+        path: string;
+        url: string;
+    }>;
+    deletes: string[];
+}
+export interface HarnessSyncResult {
+    uploaded: number;
+    deleted: number;
+    unchanged: number;
+    total_files: number;
+}
+export declare function buildLocalManifest(agentKind?: AgentKind): Promise<HarnessFile[]>;
+export declare function syncHarness(cfg: McpConfig, agentKind?: AgentKind): Promise<HarnessSyncResult>;
+//# sourceMappingURL=harnessSync.d.ts.map

package/dist/harnessSync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessSync.d.ts","sourceRoot":"","sources":["../src/harnessSync.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA+BvD,MAAM,WAAW,WAAW;IAE1B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAMD,wBAAsB,kBAAkB,CACtC,SAAS,GAAE,SAAoB,GAC9B,OAAO,CAAC,WAAW,EAAE,CAAC,CAkCxB;AAWD,wBAAsB,WAAW,CAC/B,GAAG,EAAE,SAAS,EACd,SAAS,GAAE,SAAoB,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAsD5B"}

package/dist/harnessSync.js

@@ -0,0 +1,199 @@
+import { promises as fs } from "node:fs";
+import { homedir } from "node:os";
+import { join, relative, sep } from "node:path";
+import { request } from "undici";
+import { sha256File } from "./rollout.js";
+/// Harness allowlist — matches the router-side enforcer in
+/// services/router/src/handlers/mcp_harness.rs::ALLOWED_PREFIXES.
+/// Bridge and router agree on the same allowlist so a compromised
+/// bridge can't stuff arbitrary paths, and a well-behaved bridge
+/// doesn't waste manifest slots on files the router would reject.
+///
+/// Portable-user-content only — no env-specific config, no secrets.
+/// See router-side comment for the exclusion rationale.
+const ALLOWED_DIRS = ["skills", "agents", "commands"];
+/// Per-agent top-level allowlist. Claude uses CLAUDE.md, Codex uses
+/// AGENTS.md — same shape, different filename. Both agents' auxiliary
+/// config files (settings.local.json, config.toml, auth.json) are
+/// deliberately excluded.
+const CLAUDE_ALLOWED_FILES = ["CLAUDE.md"];
+const CODEX_ALLOWED_FILES = ["AGENTS.md"];
+/// Root directory + top-level allowlist per agent kind. Both agents
+/// share the ALLOWED_DIRS shape (skills/, agents/, commands/) — only
+/// the root path and the exact-match top-level files differ.
+function harnessRoot(agentKind) {
+    if (agentKind === "codex") {
+        return { root: join(homedir(), ".codex"), allowedFiles: CODEX_ALLOWED_FILES };
+    }
+    return { root: join(homedir(), ".claude"), allowedFiles: CLAUDE_ALLOWED_FILES };
+}
+/// File-size cap in bytes. Matches router-side MAX_FILE_BYTES.
+const MAX_FILE_BYTES = 5 * 1024 * 1024;
+/// Walk the local harness root (`~/.claude/` for claude, `~/.codex/`
+/// for codex), hash each file in the per-agent allowlist, return
+/// the manifest. Silently skips oversize files (documented cap) —
+/// better to sync partial than reject the whole batch.
+export async function buildLocalManifest(agentKind = "claude") {
+    const { root, allowedFiles } = harnessRoot(agentKind);
+    const files = [];
+    // Exact-match top-level files.
+    for (const name of allowedFiles) {
+        const p = join(root, name);
+        const meta = await tryStat(p);
+        if (meta && meta.size <= MAX_FILE_BYTES) {
+            files.push({
+                path: name,
+                sha256: await sha256File(p),
+                size: meta.size,
+            });
+        }
+    }
+    // Recursive directories.
+    for (const dir of ALLOWED_DIRS) {
+        const dirRoot = join(root, dir);
+        const listing = await tryReadDirRecursive(dirRoot);
+        for (const absPath of listing) {
+            const meta = await tryStat(absPath);
+            if (!meta || meta.size > MAX_FILE_BYTES)
+                continue;
+            const rel = relative(root, absPath).split(sep).join("/");
+            files.push({
+                path: rel,
+                sha256: await sha256File(absPath),
+                size: meta.size,
+            });
+        }
+    }
+    return files;
+}
+/// Diff manifest against router, upload changed files, finalize.
+/// Returns a summary with counts for the tool result.
+///
+/// `agentKind` selects the local harness root AND the per-agent
+/// GCS prefix (`harness/<kind>/`) the router uploads land under.
+/// Claude and Codex have separate manifests, separate toggle maps,
+/// and separate storage — a single user with both agents installed
+/// keeps two independent harness sets, mirroring the two tabs the
+/// /skills UI renders.
+export async function syncHarness(cfg, agentKind = "claude") {
+    const local = await buildLocalManifest(agentKind);
+    const silo = cfg.silo_audit_url.replace(/\/+$/, "");
+    const kindQuery = `?agent_kind=${encodeURIComponent(agentKind)}`;
+    // Diff.
+    const diffRes = await request(`${silo}/api/mcp/harness/manifest${kindQuery}`, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${cfg.token}`,
+        },
+        body: JSON.stringify({ files: local }),
+    });
+    if (diffRes.statusCode >= 400) {
+        const detail = await diffRes.body.text().catch(() => "");
+        throw new Error(`harness manifest diff failed: ${diffRes.statusCode} ${detail || ""}`);
+    }
+    const diff = (await diffRes.body.json());
+    // PUT changed files in parallel (small pool — laptop uploads).
+    const puts = diff.signed_puts.map((entry) => uploadOne(entry, agentKind));
+    await runPool(puts, 8);
+    // Finalize.
+    const finRes = await request(`${silo}/api/mcp/harness/manifest/finalize${kindQuery}`, {
+        method: "POST",
+        headers: {
+            "content-type": "application/json",
+            authorization: `Bearer ${cfg.token}`,
+        },
+        body: JSON.stringify({ files: local }),
+    });
+    if (finRes.statusCode >= 400) {
+        const detail = await finRes.body.text().catch(() => "");
+        throw new Error(`harness manifest finalize failed: ${finRes.statusCode} ${detail || ""}`);
+    }
+    return {
+        uploaded: diff.signed_puts.length,
+        deleted: diff.deletes.length,
+        unchanged: local.length - diff.signed_puts.length,
+        total_files: local.length,
+    };
+}
+/// Wrap a single file upload into a thunk (deferred so the pool can
+/// throttle concurrency without every fetch firing at once).
+function uploadOne(entry, agentKind) {
+    return async () => {
+        const { root } = harnessRoot(agentKind);
+        const abs = join(root, entry.path);
+        const bytes = await fs.readFile(abs);
+        const res = await request(entry.url, {
+            method: "PUT",
+            headers: { "content-type": "application/octet-stream" },
+            body: bytes,
+        });
+        if (res.statusCode >= 400) {
+            const detail = await res.body.text().catch(() => "");
+            throw new Error(`PUT ${entry.path} failed: ${res.statusCode} ${detail || ""}`);
+        }
+        // Discard body to release the socket.
+        await res.body.dump().catch(() => { });
+    };
+}
+async function runPool(thunks, concurrency) {
+    const iterator = thunks[Symbol.iterator]();
+    const workers = Array.from({ length: Math.min(concurrency, thunks.length) })
+        .map(async () => {
+        while (true) {
+            const next = iterator.next();
+            if (next.done)
+                return;
+            await next.value();
+        }
+    });
+    await Promise.all(workers);
+}
+async function tryStat(path) {
+    try {
+        const st = await fs.stat(path);
+        if (!st.isFile())
+            return null;
+        return { size: st.size };
+    }
+    catch {
+        return null;
+    }
+}
+async function tryReadDirRecursive(root) {
+    const out = [];
+    async function walk(dir) {
+        let entries;
+        try {
+            entries = await fs.readdir(dir);
+        }
+        catch {
+            return;
+        }
+        for (const name of entries) {
+            // Skip hidden files/directories (dot-files) — never intended for
+            // harness sync. This also silently drops .git, .DS_Store, and any
+            // secret files (`.credentials.json` etc.) as a defense-in-depth
+            // layer alongside the router's allowlist.
+            if (name.startsWith("."))
+                continue;
+            const p = join(dir, name);
+            let stat;
+            try {
+                stat = await fs.stat(p);
+            }
+            catch {
+                continue;
+            }
+            if (stat.isDirectory()) {
+                await walk(p);
+            }
+            else if (stat.isFile()) {
+                out.push(p);
+            }
+        }
+    }
+    await walk(root);
+    return out;
+}
+//# sourceMappingURL=harnessSync.js.map

package/dist/harnessSync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harnessSync.js","sourceRoot":"","sources":["../src/harnessSync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG1C,2DAA2D;AAC3D,kEAAkE;AAClE,kEAAkE;AAClE,iEAAiE;AACjE,kEAAkE;AAClE,GAAG;AACH,oEAAoE;AACpE,wDAAwD;AACxD,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACtD,oEAAoE;AACpE,sEAAsE;AACtE,kEAAkE;AAClE,0BAA0B;AAC1B,MAAM,oBAAoB,GAAG,CAAC,WAAW,CAAC,CAAC;AAC3C,MAAM,mBAAmB,GAAG,CAAC,WAAW,CAAC,CAAC;AAE1C,oEAAoE;AACpE,qEAAqE;AACrE,6DAA6D;AAC7D,SAAS,WAAW,CAAC,SAAoB;IACvC,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAClF,CAAC;AAED,+DAA+D;AAC/D,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAqBvC,qEAAqE;AACrE,iEAAiE;AACjE,kEAAkE;AAClE,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAuB,QAAQ;IAE/B,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,KAAK,GAAkB,EAAE,CAAC;IAEhC,+BAA+B;IAC/B,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,MAAM,UAAU,CAAC,CAAC,CAAC;gBAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACnD,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;gBAAE,SAAS;YAClD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,MAAM,UAAU,CAAC,OAAO,CAAC;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,sDAAsD;AACtD,GAAG;AACH,gEAAgE;AAChE,iEAAiE;AACjE,mEAAmE;AACnE,mEAAmE;AACnE,kEAAkE;AAClE,uBAAuB;AACvB,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAc,EACd,YAAuB,QAAQ;IAE/B,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,eAAe,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;IAEjE,QAAQ;IACR,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,GAAG,IAAI,4BAA4B,SAAS,EAAE,EAC9C;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;KACvC,CACF,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,CAAC,UAAU,IAAI,MAAM,IAAI,EAAE,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAoB,CAAC;IAE5D,+DAA+D;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEvB,YAAY;IACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,GAAG,IAAI,qCAAqC,SAAS,EAAE,EACvD;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;KACvC,CACF,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,qCAAqC,MAAM,CAAC,UAAU,IAAI,MAAM,IAAI,EAAE,EAAE,CACzE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;QAC5B,SAAS,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM;QACjD,WAAW,EAAE,KAAK,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,6DAA6D;AAC7D,SAAS,SAAS,CAChB,KAAoC,EACpC,SAAoB;IAEpB,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;YACnC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;YACvD,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,OAAO,KAAK,CAAC,IAAI,YAAY,GAAG,CAAC,UAAU,IAAI,MAAM,IAAI,EAAE,EAAE,CAC9D,CAAC;QACJ,CAAC;QACD,sCAAsC;QACtC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,MAAkC,EAClC,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SACzE,GAAG,CAAC,KAAK,IAAI,EAAE;QACd,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO;YACtB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IACL,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,iEAAiE;YACjE,kEAAkE;YAClE,gEAAgE;YAChE,0CAA0C;YAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACnC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { CONFIG_PATH, loadConfig, saveConfig, clearConfig, startAuth, type AuthStart, type AuthCallbackResult, } from "./auth.js";
+export type { McpConfig, AgentKind } from "./types.js";
+export { beamUp, type BeamUpResult, type BeamUpOptions } from "./beamUp.js";
+export { syncHarness, buildLocalManifest, type HarnessFile, type HarnessSyncResult, } from "./harnessSync.js";
+export { findCurrentClaudeRollout, findCurrentCodexRollout, encodeCwdForClaude, trimIncompleteTail, type RolloutHit, } from "./rollout.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,UAAU,EACV,UAAU,EACV,WAAW,EACX,SAAS,EACT,KAAK,SAAS,EACd,KAAK,kBAAkB,GACxB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,KAAK,YAAY,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EACL,WAAW,EACX,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,iBAAiB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,UAAU,GAChB,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export { CONFIG_PATH, loadConfig, saveConfig, clearConfig, startAuth, } from "./auth.js";
+export { beamUp } from "./beamUp.js";
+export { syncHarness, buildLocalManifest, } from "./harnessSync.js";
+export { findCurrentClaudeRollout, findCurrentCodexRollout, encodeCwdForClaude, trimIncompleteTail, } from "./rollout.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,UAAU,EACV,UAAU,EACV,WAAW,EACX,SAAS,GAGV,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,MAAM,EAAyC,MAAM,aAAa,CAAC;AAC5E,OAAO,EACL,WAAW,EACX,kBAAkB,GAGnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,cAAc,CAAC"}

package/dist/rollout.d.ts

@@ -0,0 +1,14 @@
+import type { AgentKind } from "./types.js";
+export interface RolloutHit {
+    agent: "claude" | "codex";
+    path: string;
+    session_uuid: string;
+    project_cwd: string;
+}
+export declare function encodeCwdForClaude(cwd: string): string;
+export declare function findCurrentClaudeRollout(cwd?: string): Promise<RolloutHit | null>;
+export declare function findCurrentCodexRollout(cwd?: string): Promise<RolloutHit | null>;
+export declare function readRolloutBytes(hit: RolloutHit): Promise<Buffer>;
+export declare function trimIncompleteTail(bytes: Buffer, agentKind: AgentKind): Buffer;
+export declare function sha256File(path: string): Promise<string>;
+//# sourceMappingURL=rollout.d.ts.map

package/dist/rollout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollout.d.ts","sourceRoot":"","sources":["../src/rollout.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAmB5C,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC;IAE1B,IAAI,EAAE,MAAM,CAAC;IAGb,YAAY,EAAE,MAAM,CAAC;IAErB,WAAW,EAAE,MAAM,CAAC;CACrB;AAID,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAItD;AAKD,wBAAsB,wBAAwB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAgCvF;AAiBD,wBAAsB,uBAAuB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAiCtF;AA+ED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAEvE;AAkBD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,CAK9E;AAuGD,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAK9D"}