@halyard/cli 0.1.1 → 0.2.0

package/dist/lib/hook-runner.d.ts

@@ -0,0 +1,48 @@
+import { type HookClient, type HookEvent } from './hook-input.js';
+import { type TargetOrg } from './preflight.js';
+/**
+ * `halyard hook`: the uploader every client's lifecycle hook calls.
+ *
+ *  - `end`   uploads the transcript that just finished (Claude: plus its
+ *            subagent transcripts; Codex: the rollout matched by thread id).
+ *  - `sweep` uploads this repo's earlier transcripts that never made it up
+ *            (run detached from a `start` event by the command layer).
+ *
+ * Org binding: a repo's `.halyard.json` decides which org its sessions
+ * belong to. The hook resolves credentials the same way `sync` and `push`
+ * do (HALYARD_TOKEN → per-org login for the bound org → default login) and
+ * refuses login credentials for another org.
+ *
+ * Why session end and not every turn: the ingest endpoint keeps the FIRST
+ * upload it sees for a session id, so a growing transcript uploaded per turn
+ * would freeze at turn one.
+ *
+ * Never throws for expected conditions — every skip reason goes to
+ * ~/.halyard/hooks.log — and never writes to stdout (clients parse it).
+ */
+export interface HookRunOptions {
+    /** Raw JSON the client piped to the hook; may be empty. */
+    input: string;
+    client?: HookClient;
+    event?: HookEvent;
+    root?: string;
+    transcript?: string;
+    dryRun: boolean;
+    apiUrl: string;
+    halyardDir: string;
+    homeDir: string;
+    /** Should be process.env in production: HALYARD_TOKEN found in the repo .env is exported into it. */
+    env: NodeJS.ProcessEnv;
+    cwd: string;
+    /** Injectable for tests (defaults to the shared upload preflight). */
+    resolveTarget?: (apiUrl: string) => Promise<TargetOrg>;
+}
+export declare class HookLogger {
+    private readonly file;
+    private readonly tag;
+    constructor(file: string, tag: string);
+    log(message: string): void;
+    private rotate;
+}
+export declare function runHook(opts: HookRunOptions): Promise<void>;
+//# sourceMappingURL=hook-runner.d.ts.map

package/dist/lib/hook-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-runner.d.ts","sourceRoot":"","sources":["../../src/lib/hook-runner.ts"],"names":[],"mappings":"AAsBA,OAAO,EAQL,KAAK,UAAU,EACf,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAYjE;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,cAAc;IAC7B,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB,KAAK,CAAC,EAAE,SAAS,CAAA;IACjB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,OAAO,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,qGAAqG;IACrG,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,GAAG,EAAE,MAAM,CAAA;IACX,sEAAsE;IACtE,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAA;CACvD;AAMD,qBAAa,UAAU;IAEnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM;IAG9B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAW1B,OAAO,CAAC,MAAM;CAWf;AAeD,wBAAsB,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAuDjE"}

package/dist/lib/hook-runner.js

@@ -0,0 +1,306 @@
+import { createHash } from 'node:crypto';
+import { appendFileSync, mkdirSync, readFileSync, rmdirSync, statSync, writeFileSync, } from 'node:fs';
+import { basename, dirname, extname, join } from 'node:path';
+import { uploadSession } from './api-client.js';
+import { getAuthHeaders, getCredentials } from './auth.js';
+import { formatError } from './config-files.js';
+import { claudeSessionFiles, findCodexRollout, sweepForClient, } from './hook-discovery.js';
+import { detectClient, isNonEmptyFile, normalizeEvent, parseHookInput, providerForClient, readDotenvVar, resolveProjectRoot, } from './hook-input.js';
+import { resolveTargetOrg } from './preflight.js';
+import { findRepoBinding, gitToplevel } from './repo-binding.js';
+import { runSkillsSync } from './skills-sync.js';
+import { runSync } from './sync-runner.js';
+import { hashFileContents, isUploaded, markUploaded, readSyncState, writeSyncState, } from './sync-state.js';
+const LOG_MAX_BYTES = 1_048_576;
+const LOG_KEEP_BYTES = 262_144;
+const LOCK_STALE_MS = 10 * 60 * 1000;
+export class HookLogger {
+    file;
+    tag;
+    constructor(file, tag) {
+        this.file = file;
+        this.tag = tag;
+    }
+    log(message) {
+        try {
+            mkdirSync(dirname(this.file), { recursive: true });
+            this.rotate();
+            const stamp = new Date().toISOString().replace(/\.\d{3}Z$/, 'Z');
+            appendFileSync(this.file, `${stamp} [${this.tag}] ${message}\n`);
+        }
+        catch {
+            // Logging must never fail the hook.
+        }
+    }
+    rotate() {
+        let size = 0;
+        try {
+            size = statSync(this.file).size;
+        }
+        catch {
+            return;
+        }
+        if (size <= LOG_MAX_BYTES)
+            return;
+        const content = readFileSync(this.file);
+        writeFileSync(this.file, content.subarray(content.length - LOG_KEEP_BYTES));
+    }
+}
+export async function runHook(opts) {
+    if (opts.env['HALYARD_SESSION_UPLOAD'] === '0')
+        return;
+    const parsed = parseHookInput(opts.input);
+    const event = opts.event ?? normalizeEvent(parsed.event);
+    if (!event)
+        return;
+    const transcript = opts.transcript || parsed.transcriptPath || opts.env['CURSOR_TRANSCRIPT_PATH'] || '';
+    const client = opts.client ?? detectClient(transcript, opts.env);
+    const logger = new HookLogger(join(opts.halyardDir, 'hooks.log'), `${client}/${event}`);
+    const projectRoot = resolveProjectRoot([
+        opts.root,
+        opts.env['HALYARD_PROJECT_ROOT'],
+        opts.env['CLAUDE_PROJECT_DIR'],
+        opts.env['CURSOR_PROJECT_DIR'],
+        opts.env['GEMINI_PROJECT_DIR'],
+        opts.env['CODEX_CWD'],
+        parsed.cwd,
+        opts.cwd,
+    ], opts.cwd);
+    const ctx = {
+        opts,
+        client,
+        event,
+        projectRoot,
+        binding: findRepoBinding(projectRoot),
+        sessionId: parsed.sessionId,
+        transcript,
+        logger,
+    };
+    if (!ensureToken(ctx))
+        return;
+    const target = await resolveTarget(ctx);
+    if (!target)
+        return;
+    let authHeaders;
+    try {
+        authHeaders = await getAuthHeaders(opts.apiUrl, ctx.binding);
+    }
+    catch (err) {
+        logger.log(`skip: ${formatError(err)}`);
+        return;
+    }
+    const upload = { ...ctx, authHeaders, stateKey: target.stateKey };
+    logger.log(`root=${projectRoot} org=${target.label} transcript=${transcript || '<none>'} session=${parsed.sessionId || '<none>'}`);
+    const plan = event === 'end' ? endPlan(upload) : sweepForClient(client, sweepContext(upload));
+    await executePlan(upload, plan);
+    if (event === 'sweep')
+        await sweepSkills(upload);
+    logger.log(`${event} finished`);
+}
+/**
+ * Session start also lifts this repo's committed skills (`.claude/skills`,
+ * `.agents/skills`, ...) into the bound org. Project scope only: personal
+ * `~/.claude/skills` are synced by `halyard skills sync`, never by a hook
+ * firing inside whichever org's repo happens to be open. The ledger makes
+ * this a no-op when nothing changed. HALYARD_SKILLS_SYNC=0 disables it.
+ */
+async function sweepSkills(ctx) {
+    if (ctx.opts.env['HALYARD_SKILLS_SYNC'] === '0')
+        return;
+    const tag = 'skills[project]';
+    // Only a real repository is a project root. The hook's project dir falls
+    // back to the raw cwd, and scanning `~` as a "project" would upload the
+    // user's personal skill directories as repo skills.
+    const projectRoot = ctx.binding?.rootDir ?? gitToplevel(ctx.projectRoot);
+    if (!projectRoot) {
+        ctx.logger.log(`${tag} skip: ${ctx.projectRoot} is not a git repository`);
+        return;
+    }
+    try {
+        const summary = await runSkillsSync({
+            homeDir: ctx.opts.homeDir,
+            projectRoot,
+            scope: 'project',
+            stateKey: ctx.stateKey,
+            authHeaders: ctx.authHeaders,
+            apiUrl: ctx.opts.apiUrl,
+            dryRun: ctx.opts.dryRun,
+            force: false,
+            log: (line) => ctx.logger.log(`${tag} ${line.trim()}`),
+        });
+        ctx.logger.log(`${tag} found=${summary.found} created=${summary.created} updated=${summary.updated} unchanged=${summary.unchanged} skipped=${summary.skipped} failed=${summary.failed}`);
+    }
+    catch (err) {
+        ctx.logger.log(`${tag} failed: ${formatError(err)}`);
+    }
+}
+/** Token resolution: environment → repo .env → `halyard login` credentials. */
+function ensureToken(ctx) {
+    const env = ctx.opts.env;
+    if (!env['HALYARD_TOKEN']) {
+        const fromRepo = readDotenvVar(join(ctx.projectRoot, '.env'), 'HALYARD_TOKEN');
+        if (fromRepo)
+            env['HALYARD_TOKEN'] = fromRepo;
+    }
+    if (env['HALYARD_TOKEN'] || getCredentials(ctx.binding))
+        return true;
+    ctx.logger.log(`skip: not authenticated (run \`halyard login\` in ${ctx.projectRoot}, or set HALYARD_TOKEN in the environment or ${ctx.projectRoot}/.env)`);
+    return false;
+}
+/**
+ * Where uploads will land, and whether that agrees with the repo binding.
+ * Mirrors `runPreflight` for sync/push, except that a mismatch skips instead
+ * of failing: a hook must never break the agent.
+ */
+async function resolveTarget(ctx) {
+    let target;
+    try {
+        target = await (ctx.opts.resolveTarget ?? resolveTargetOrg)(ctx.opts.apiUrl);
+    }
+    catch (err) {
+        ctx.logger.log(`skip: could not resolve the destination org (${formatError(err)})`);
+        return null;
+    }
+    if (!ctx.binding)
+        return target;
+    if (target.slug === null) {
+        ctx.logger.log(`note: repo is bound to '${ctx.binding.org}' but an API key's org cannot be verified; uploading to the key's org`);
+        return target;
+    }
+    if (target.slug === ctx.binding.org)
+        return target;
+    ctx.logger.log(`skip: credentials are for org '${target.slug}' but this repo is bound to '${ctx.binding.org}' (${ctx.binding.rootDir}/.halyard.json). Run \`halyard login\` inside the repo, or set HALYARD_TOKEN to a ${ctx.binding.org} API key in ${ctx.projectRoot}/.env`);
+    return null;
+}
+function sweepContext(ctx) {
+    return {
+        homeDir: ctx.opts.homeDir,
+        projectRoot: ctx.projectRoot,
+        sessionId: ctx.sessionId,
+        transcriptPath: ctx.transcript,
+        event: ctx.event,
+        env: ctx.opts.env,
+    };
+}
+function endPlan(ctx) {
+    if (ctx.transcript && isNonEmptyFile(ctx.transcript)) {
+        const files = ctx.client === 'claude' ? claudeSessionFiles(ctx.transcript) : [ctx.transcript];
+        const provider = providerForClient(ctx.client);
+        return { kind: 'files', targets: files.map((file) => ({ file, provider })) };
+    }
+    if (ctx.client === 'codex') {
+        const rollout = findCodexRollout(ctx.opts.homeDir, ctx.sessionId);
+        if (rollout)
+            return { kind: 'files', targets: [{ file: rollout, provider: 'codex' }] };
+    }
+    return sweepForClient(ctx.client, sweepContext(ctx));
+}
+/** The live session is uploaded at its own end (first upload wins server-side). */
+function isLiveSession(ctx, session) {
+    if (!ctx.sessionId)
+        return false;
+    if (ctx.client === 'codex')
+        return session.filePath.endsWith(`-${ctx.sessionId}.jsonl`);
+    return session.sessionId === ctx.sessionId || session.filePath.includes(`/${ctx.sessionId}/`);
+}
+async function executePlan(ctx, plan) {
+    if (plan.kind === 'sync') {
+        const tag = `sync[${plan.provider}${plan.scoped ? ', repo-scoped' : ''}]`;
+        const summary = await runSync({
+            providerFilter: plan.provider,
+            scopeRootDir: plan.scoped ? (ctx.binding?.rootDir ?? ctx.projectRoot) : undefined,
+            exclude: (session) => isLiveSession(ctx, session),
+            stateKey: ctx.stateKey,
+            apiUrl: ctx.opts.apiUrl,
+            authHeaders: ctx.authHeaders,
+            dryRun: ctx.opts.dryRun,
+            log: (line) => ctx.logger.log(`${tag} ${line.trim()}`),
+        });
+        ctx.logger.log(`${tag} found=${summary.found} matched=${summary.matched} unresolved=${summary.unresolved} uploaded=${summary.uploaded} skipped=${summary.skipped} failed=${summary.failed}`);
+        return;
+    }
+    if (plan.targets.length === 0) {
+        ctx.logger.log('nothing to upload');
+        return;
+    }
+    for (const target of plan.targets) {
+        await pushFile(ctx, target);
+    }
+}
+function lockPath(halyardDir, file) {
+    const key = createHash('sha1').update(file).digest('hex').slice(0, 16);
+    return join(halyardDir, 'locks', key);
+}
+/** A per-file directory lock: safe for two hooks (repo + plugin) to race. A
+ *  stale lock (crashed hook) is reclaimed after ten minutes. */
+function acquireLock(halyardDir, file) {
+    const lock = lockPath(halyardDir, file);
+    mkdirSync(dirname(lock), { recursive: true });
+    try {
+        mkdirSync(lock);
+        return lock;
+    }
+    catch {
+        // fall through to the stale check
+    }
+    try {
+        if (Date.now() - statSync(lock).mtimeMs < LOCK_STALE_MS)
+            return null;
+        rmdirSync(lock);
+        mkdirSync(lock);
+        return lock;
+    }
+    catch {
+        return null;
+    }
+}
+function releaseLock(lock) {
+    try {
+        rmdirSync(lock);
+    }
+    catch {
+        // already gone
+    }
+}
+/** The session id is the file name without extension — the same rule
+ *  `halyard sync` uses, so hook uploads and later manual syncs dedupe together. */
+async function pushFile(ctx, target) {
+    const { file, provider } = target;
+    if (!isNonEmptyFile(file))
+        return;
+    const content = readFileSync(file);
+    const hash = hashFileContents(content);
+    const state = readSyncState();
+    if (isUploaded(state, ctx.stateKey, file, hash)) {
+        ctx.logger.log(`skip (already uploaded): ${file}`);
+        return;
+    }
+    const lock = acquireLock(ctx.opts.halyardDir, file);
+    if (!lock) {
+        ctx.logger.log(`skip (another hook is uploading): ${file}`);
+        return;
+    }
+    try {
+        if (ctx.opts.dryRun) {
+            ctx.logger.log(`dry-run: would push [${provider}] ${file} (${content.length} bytes)`);
+            return;
+        }
+        const sessionId = basename(file, extname(file));
+        const result = await uploadSession(content, basename(file), provider, sessionId, ctx.authHeaders, ctx.opts.apiUrl);
+        markUploaded(state, ctx.stateKey, file, {
+            sessionId: result.sessionId,
+            uploadedAt: new Date().toISOString(),
+            size: content.length,
+            hash,
+        });
+        writeSyncState(state);
+        ctx.logger.log(`push[${provider}] ${result.status}: ${file} (${content.length} bytes)`);
+    }
+    catch (err) {
+        ctx.logger.log(`push[${provider}] failed: ${file} :: ${formatError(err)}`);
+    }
+    finally {
+        releaseLock(lock);
+    }
+}
+//# sourceMappingURL=hook-runner.js.map

package/dist/lib/hook-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-runner.js","sourceRoot":"","sources":["../../src/lib/hook-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EACL,cAAc,EACd,SAAS,EACT,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAE/C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,GAIf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,cAAc,EACd,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,kBAAkB,GAGnB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,gBAAgB,EAAkB,MAAM,gBAAgB,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAoB,MAAM,mBAAmB,CAAA;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,YAAY,EACZ,aAAa,EACb,cAAc,GACf,MAAM,iBAAiB,CAAA;AAyCxB,MAAM,aAAa,GAAG,SAAS,CAAA;AAC/B,MAAM,cAAc,GAAG,OAAO,CAAA;AAC9B,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEpC,MAAM,OAAO,UAAU;IAEF;IACA;IAFnB,YACmB,IAAY,EACZ,GAAW;QADX,SAAI,GAAJ,IAAI,CAAQ;QACZ,QAAG,GAAH,GAAG,CAAQ;IAC3B,CAAC;IAEJ,GAAG,CAAC,OAAe;QACjB,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YAClD,IAAI,CAAC,MAAM,EAAE,CAAA;YACb,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;YAChE,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,KAAK,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,CAAA;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;IACH,CAAC;IAEO,MAAM;QACZ,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAA;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,IAAI,IAAI,IAAI,aAAa;YAAE,OAAM;QACjC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACvC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAA;IAC7E,CAAC;CACF;AAeD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAoB;IAChD,IAAI,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,GAAG;QAAE,OAAM;IAEtD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACxD,IAAI,CAAC,KAAK;QAAE,OAAM;IAElB,MAAM,UAAU,GACd,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAA;IACtF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAA;IAChE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAA;IACvF,MAAM,WAAW,GAAG,kBAAkB,CACpC;QACE,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;QACrB,MAAM,CAAC,GAAG;QACV,IAAI,CAAC,GAAG;KACT,EACD,IAAI,CAAC,GAAG,CACT,CAAA;IACD,MAAM,GAAG,GAAe;QACtB,IAAI;QACJ,MAAM;QACN,KAAK;QACL,WAAW;QACX,OAAO,EAAE,eAAe,CAAC,WAAW,CAAC;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU;QACV,MAAM;KACP,CAAA;IAED,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAM;IAC7B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,CAAC,MAAM;QAAE,OAAM;IAEnB,IAAI,WAAmC,CAAA;IACvC,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,CAAC,SAAS,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACvC,OAAM;IACR,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;IAChF,MAAM,CAAC,GAAG,CACR,QAAQ,WAAW,QAAQ,MAAM,CAAC,KAAK,eAAe,UAAU,IAAI,QAAQ,YAAY,MAAM,CAAC,SAAS,IAAI,QAAQ,EAAE,CACvH,CAAA;IACD,MAAM,IAAI,GAAG,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7F,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/B,IAAI,KAAK,KAAK,OAAO;QAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;IAChD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,WAAW,CAAC,CAAA;AACjC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,WAAW,CAAC,GAAkB;IAC3C,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,GAAG;QAAE,OAAM;IACvD,MAAM,GAAG,GAAG,iBAAiB,CAAA;IAC7B,yEAAyE;IACzE,wEAAwE;IACxE,oDAAoD;IACpD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IACxE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,UAAU,GAAG,CAAC,WAAW,0BAA0B,CAAC,CAAA;QACzE,OAAM;IACR,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC;YAClC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;YACzB,WAAW;YACX,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;YACvB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;YACvB,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;SACvD,CAAC,CAAA;QACF,GAAG,CAAC,MAAM,CAAC,GAAG,CACZ,GAAG,GAAG,UAAU,OAAO,CAAC,KAAK,YAAY,OAAO,CAAC,OAAO,YAAY,OAAO,CAAC,OAAO,cAAc,OAAO,CAAC,SAAS,YAAY,OAAO,CAAC,OAAO,WAAW,OAAO,CAAC,MAAM,EAAE,CACzK,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,YAAY,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACtD,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,GAAe;IAClC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAA;IACxB,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,eAAe,CAAC,CAAA;QAC9E,IAAI,QAAQ;YAAE,GAAG,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAA;IAC/C,CAAC;IACD,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CACZ,qDAAqD,GAAG,CAAC,WAAW,gDAAgD,GAAG,CAAC,WAAW,QAAQ,CAC5I,CAAA;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,GAAe;IAC1C,IAAI,MAAiB,CAAA;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,gBAAgB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,gDAAgD,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACnF,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,MAAM,CAAA;IAC/B,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,GAAG,CAAC,MAAM,CAAC,GAAG,CACZ,2BAA2B,GAAG,CAAC,OAAO,CAAC,GAAG,uEAAuE,CAClH,CAAA;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG;QAAE,OAAO,MAAM,CAAA;IAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CACZ,kCAAkC,MAAM,CAAC,IAAI,gCAAgC,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,qFAAqF,GAAG,CAAC,OAAO,CAAC,GAAG,eAAe,GAAG,CAAC,WAAW,OAAO,CAC/P,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,YAAY,CAAC,GAAe;IACnC,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;QACzB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,cAAc,EAAE,GAAG,CAAC,UAAU;QAC9B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG;KAClB,CAAA;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAkB;IACjC,IAAI,GAAG,CAAC,UAAU,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC7F,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAA;IAC9E,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;QACjE,IAAI,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;IACxF,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CAAC,GAAkB,EAAE,OAA0B;IACnE,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IAChC,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,SAAS,QAAQ,CAAC,CAAA;IACvF,OAAO,OAAO,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC,CAAA;AAC/F,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAkB,EAAE,IAAe;IAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,QAAQ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,CAAA;QACzE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;YAC5B,cAAc,EAAE,IAAI,CAAC,QAAQ;YAC7B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC;YACjD,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;YACvB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;YACvB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;SACvD,CAAC,CAAA;QACF,GAAG,CAAC,MAAM,CAAC,GAAG,CACZ,GAAG,GAAG,UAAU,OAAO,CAAC,KAAK,YAAY,OAAO,CAAC,OAAO,eAAe,OAAO,CAAC,UAAU,aAAa,OAAO,CAAC,QAAQ,YAAY,OAAO,CAAC,OAAO,WAAW,OAAO,CAAC,MAAM,EAAE,CAC7K,CAAA;QACD,OAAM;IACR,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QACnC,OAAM;IACR,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,UAAkB,EAAE,IAAY;IAChD,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtE,OAAO,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;AACvC,CAAC;AAED;gEACgE;AAChE,SAAS,WAAW,CAAC,UAAkB,EAAE,IAAY;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IACvC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAA;QACf,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;IACD,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,aAAa;YAAE,OAAO,IAAI,CAAA;QACpE,SAAS,CAAC,IAAI,CAAC,CAAA;QACf,SAAS,CAAC,IAAI,CAAC,CAAA;QACf,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,CAAC,CAAA;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC;AAED;mFACmF;AACnF,KAAK,UAAU,QAAQ,CAAC,GAAkB,EAAE,MAAmB;IAC7D,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAA;IACjC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;QAAE,OAAM;IACjC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,aAAa,EAAE,CAAA;IAC7B,IAAI,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAA;QAClD,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;IACnD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,qCAAqC,IAAI,EAAE,CAAC,CAAA;QAC3D,OAAM;IACR,CAAC;IACD,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,QAAQ,KAAK,IAAI,KAAK,OAAO,CAAC,MAAM,SAAS,CAAC,CAAA;YACrF,OAAM;QACR,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QAC/C,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,OAAO,EACP,QAAQ,CAAC,IAAI,CAAC,EACd,QAAQ,EACR,SAAS,EACT,GAAG,CAAC,WAAW,EACf,GAAG,CAAC,IAAI,CAAC,MAAM,CAChB,CAAA;QACD,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE;YACtC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,IAAI,EAAE,OAAO,CAAC,MAAM;YACpB,IAAI;SACL,CAAC,CAAA;QACF,cAAc,CAAC,KAAK,CAAC,CAAA;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,QAAQ,KAAK,MAAM,CAAC,MAAM,KAAK,IAAI,KAAK,OAAO,CAAC,MAAM,SAAS,CAAC,CAAA;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,QAAQ,aAAa,IAAI,OAAO,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC5E,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,IAAI,CAAC,CAAA;IACnB,CAAC;AACH,CAAC"}

package/dist/lib/http.d.ts

@@ -0,0 +1,18 @@
+export declare class ApiError extends Error {
+    status: number;
+    body: string;
+    constructor(message: string, status: number, body: string);
+}
+export interface ApiFetchOptions {
+    method?: string;
+    body?: unknown;
+    /** Injectable fetch for tests */
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Authenticated JSON request against the Halyard API.
+ * Wraps getAuthHeaders (token refresh + HALYARD_TOKEN handling) and maps
+ * error responses to actionable messages in one place.
+ */
+export declare function apiFetch<T>(apiUrl: string, path: string, options?: ApiFetchOptions): Promise<T>;
+//# sourceMappingURL=http.d.ts.map

package/dist/lib/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/lib/http.ts"],"names":[],"mappings":"AAEA,qBAAa,QAAS,SAAQ,KAAK;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;gBAEA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;CAM1D;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,iCAAiC;IACjC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB;AAeD;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,CAAC,CAAC,CAmCZ"}

package/dist/lib/http.js

@@ -0,0 +1,54 @@
+import { getAuthHeaders } from './auth.js';
+export class ApiError extends Error {
+    status;
+    body;
+    constructor(message, status, body) {
+        super(message);
+        this.name = 'ApiError';
+        this.status = status;
+        this.body = body;
+    }
+}
+/** Extract the `{ error }` field every API route uses, falling back to raw text. */
+function extractErrorMessage(body) {
+    try {
+        const parsed = JSON.parse(body);
+        if (typeof parsed.error === 'string' && parsed.error.length > 0) {
+            return parsed.error;
+        }
+    }
+    catch {
+        // not JSON
+    }
+    return body;
+}
+/**
+ * Authenticated JSON request against the Halyard API.
+ * Wraps getAuthHeaders (token refresh + HALYARD_TOKEN handling) and maps
+ * error responses to actionable messages in one place.
+ */
+export async function apiFetch(apiUrl, path, options = {}) {
+    const { method = 'GET', body, fetchImpl = fetch } = options;
+    const authHeaders = await getAuthHeaders(apiUrl);
+    const headers = { ...authHeaders };
+    if (body !== undefined) {
+        headers['Content-Type'] = 'application/json';
+    }
+    const res = await fetchImpl(`${apiUrl}${path}`, {
+        method,
+        headers,
+        body: body !== undefined ? JSON.stringify(body) : undefined,
+    });
+    if (!res.ok) {
+        const rawBody = await res.text();
+        if (res.status === 401) {
+            throw new ApiError('Authentication failed or token revoked. Run `halyard login` (or check HALYARD_TOKEN).', res.status, rawBody);
+        }
+        if (res.status === 403) {
+            throw new ApiError(`Permission denied: ${extractErrorMessage(rawBody)}`, res.status, rawBody);
+        }
+        throw new ApiError(`Request failed (${res.status}): ${extractErrorMessage(rawBody)}`, res.status, rawBody);
+    }
+    return (await res.json());
+}
+//# sourceMappingURL=http.js.map

package/dist/lib/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/lib/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAE1C,MAAM,OAAO,QAAS,SAAQ,KAAK;IACjC,MAAM,CAAQ;IACd,IAAI,CAAQ;IAEZ,YAAY,OAAe,EAAE,MAAc,EAAE,IAAY;QACvD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,UAAU,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;CACF;AASD,oFAAoF;AACpF,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAA;QACtD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChE,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,WAAW;IACb,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAc,EACd,IAAY,EACZ,UAA2B,EAAE;IAE7B,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,IAAI,EAAE,SAAS,GAAG,KAAK,EAAE,GAAG,OAAO,CAAA;IAC3D,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAA;IAEhD,MAAM,OAAO,GAA2B,EAAE,GAAG,WAAW,EAAE,CAAA;IAC1D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;IAC9C,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,EAAE;QAC9C,MAAM;QACN,OAAO;QACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC5D,CAAC,CAAA;IAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAChC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAChB,uFAAuF,EACvF,GAAG,CAAC,MAAM,EACV,OAAO,CACR,CAAA;QACH,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,sBAAsB,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC/F,CAAC;QACD,MAAM,IAAI,QAAQ,CAChB,mBAAmB,GAAG,CAAC,MAAM,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAAE,EACjE,GAAG,CAAC,MAAM,EACV,OAAO,CACR,CAAA;IACH,CAAC;IAED,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAA;AAChC,CAAC"}

package/dist/lib/opencode-export.d.ts

@@ -0,0 +1,22 @@
+/**
+ * OpenCode (opencode.ai / sst) integration.
+ *
+ * OpenCode ≥1.x stores sessions in a SQLite database
+ * (`~/.local/share/opencode/opencode.db`) rather than per-session files.
+ * Instead of parsing their schema ourselves, we drive the `opencode` CLI:
+ * `opencode db "<sql>" --format json` for listing and `opencode export
+ * <sessionID>` for the full self-describing session document — both stable,
+ * first-class commands, and the export stays valid across their internal
+ * schema migrations.
+ *
+ * Everything here degrades to "no sessions" when opencode isn't installed
+ * or the commands fail — discovery must never break `halyard sync` for the
+ * other providers.
+ */
+export interface OpencodeSessionRef {
+    id: string;
+    timeUpdated: number;
+}
+export declare function listOpencodeSessions(): OpencodeSessionRef[];
+export declare function exportOpencodeSession(sessionId: string): Buffer;
+//# sourceMappingURL=opencode-export.d.ts.map

package/dist/lib/opencode-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-export.d.ts","sourceRoot":"","sources":["../../src/lib/opencode-export.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;CACpB;AAWD,wBAAgB,oBAAoB,IAAI,kBAAkB,EAAE,CA2B3D;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAU/D"}

package/dist/lib/opencode-export.js

@@ -0,0 +1,53 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { existsSync } from 'node:fs';
+import { execFileSync } from 'node:child_process';
+const LIST_QUERY = 'SELECT s.id AS id, s.time_updated AS time_updated FROM session s WHERE EXISTS (SELECT 1 FROM message m WHERE m.session_id = s.id)';
+function opencodeDataDir() {
+    if (process.env.OPENCODE_DATA_DIR)
+        return process.env.OPENCODE_DATA_DIR;
+    const xdg = process.env.XDG_DATA_HOME;
+    return xdg ? join(xdg, 'opencode') : join(homedir(), '.local', 'share', 'opencode');
+}
+export function listOpencodeSessions() {
+    // Cheap pre-check: no database file means opencode was never used here.
+    if (!existsSync(join(opencodeDataDir(), 'opencode.db')))
+        return [];
+    let stdout;
+    try {
+        stdout = execFileSync('opencode', ['db', LIST_QUERY, '--format', 'json'], {
+            encoding: 'utf-8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+            timeout: 30_000,
+        });
+    }
+    catch {
+        return [];
+    }
+    try {
+        const rows = JSON.parse(stdout);
+        if (!Array.isArray(rows))
+            return [];
+        return rows
+            .filter((r) => typeof r.id === 'string')
+            .map((r) => ({
+            id: r.id,
+            timeUpdated: typeof r.time_updated === 'number' ? r.time_updated : 0,
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+export function exportOpencodeSession(sessionId) {
+    const stdout = execFileSync('opencode', ['export', sessionId], {
+        stdio: ['ignore', 'pipe', 'ignore'],
+        timeout: 60_000,
+        maxBuffer: 64 * 1024 * 1024,
+    });
+    if (stdout.length === 0) {
+        throw new Error(`opencode export produced no output for session ${sessionId}`);
+    }
+    return stdout;
+}
+//# sourceMappingURL=opencode-export.js.map

package/dist/lib/opencode-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opencode-export.js","sourceRoot":"","sources":["../../src/lib/opencode-export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAuBjD,MAAM,UAAU,GACd,mIAAmI,CAAA;AAErI,SAAS,eAAe;IACtB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;IACvE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAA;IACrC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;AACrF,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,wEAAwE;IACxE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,aAAa,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAElE,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;YACxE,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,OAAO,EAAE,MAAM;SAChB,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA+C,CAAA;QAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAA;QACnC,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,CAAC,EAA6C,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;aAClF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,WAAW,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SACrE,CAAC,CAAC,CAAA;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE;QAC7D,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;QACnC,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,kDAAkD,SAAS,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/lib/output.d.ts

@@ -0,0 +1,27 @@
+export interface Column {
+    key: string;
+    header: string;
+    format?: (value: unknown) => string;
+}
+/** Render rows as a plain-ASCII table (space-padded columns, no borders). */
+export declare function renderTable(rows: Record<string, unknown>[], columns: Column[]): string;
+export declare function printTable(rows: Record<string, unknown>[], columns: Column[]): void;
+export declare function printJson(data: unknown): void;
+/** Format an ISO date for table cells; `-` for null/undefined. */
+export declare function formatDate(value: unknown): string;
+export interface ConfirmOptions {
+    force?: boolean;
+    /** Injectable prompt for tests; returns the raw answer string. */
+    promptImpl?: (question: string) => Promise<string>;
+    /** Injectable TTY check for tests. */
+    isTty?: boolean;
+}
+/**
+ * Gate for destructive operations: prompt y/N by default, bypass with --force.
+ * When stdin is not a TTY, --force is required so scripts fail fast instead of
+ * hanging on an invisible prompt.
+ */
+export declare function confirm(message: string, options?: ConfirmOptions): Promise<boolean>;
+/** Print an error and exit non-zero. */
+export declare function fail(message: string): never;
+//# sourceMappingURL=output.d.ts.map

package/dist/lib/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,MAAM;IACrB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAA;CACpC;AASD,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAmBtF;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAEnF;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE7C;AAED,kEAAkE;AAClE,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAMjD;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,kEAAkE;IAClE,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAClD,sCAAsC;IACtC,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAED;;;;GAIG;AACH,wBAAsB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CAsB7F;AAED,wCAAwC;AACxC,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAG3C"}

package/dist/lib/output.js

@@ -0,0 +1,74 @@
+import { createInterface } from 'node:readline/promises';
+function cell(row, column) {
+    const value = row[column.key];
+    if (column.format)
+        return column.format(value);
+    if (value === null || value === undefined || value === '')
+        return '-';
+    return String(value);
+}
+/** Render rows as a plain-ASCII table (space-padded columns, no borders). */
+export function renderTable(rows, columns) {
+    const widths = columns.map((col) => Math.max(col.header.length, ...rows.map((row) => cell(row, col).length)));
+    const lines = [
+        columns
+            .map((col, i) => col.header.padEnd(widths[i]))
+            .join('  ')
+            .trimEnd(),
+    ];
+    for (const row of rows) {
+        lines.push(columns
+            .map((col, i) => cell(row, col).padEnd(widths[i]))
+            .join('  ')
+            .trimEnd());
+    }
+    return lines.join('\n');
+}
+export function printTable(rows, columns) {
+    console.log(renderTable(rows, columns));
+}
+export function printJson(data) {
+    console.log(JSON.stringify(data, null, 2));
+}
+/** Format an ISO date for table cells; `-` for null/undefined. */
+export function formatDate(value) {
+    if (!value)
+        return '-';
+    const date = new Date(String(value));
+    if (Number.isNaN(date.getTime()))
+        return '-';
+    const pad = (n) => String(n).padStart(2, '0');
+    return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())} ${pad(date.getHours())}:${pad(date.getMinutes())}`;
+}
+/**
+ * Gate for destructive operations: prompt y/N by default, bypass with --force.
+ * When stdin is not a TTY, --force is required so scripts fail fast instead of
+ * hanging on an invisible prompt.
+ */
+export async function confirm(message, options = {}) {
+    if (options.force)
+        return true;
+    const isTty = options.isTty ?? process.stdin.isTTY === true;
+    if (!isTty && !options.promptImpl) {
+        console.error(`${message}\nRefusing to prompt without a TTY. Pass --force to proceed.`);
+        return false;
+    }
+    const ask = options.promptImpl ??
+        (async (question) => {
+            const rl = createInterface({ input: process.stdin, output: process.stdout });
+            try {
+                return await rl.question(question);
+            }
+            finally {
+                rl.close();
+            }
+        });
+    const answer = await ask(`${message} [y/N] `);
+    return answer.trim().toLowerCase() === 'y' || answer.trim().toLowerCase() === 'yes';
+}
+/** Print an error and exit non-zero. */
+export function fail(message) {
+    console.error(message);
+    process.exit(1);
+}
+//# sourceMappingURL=output.js.map