@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/workspace-streams.js

@@ -0,0 +1,289 @@
+import { Buffer } from "node:buffer";
+import { getIrohRemoteRpcCommandCapabilities, getMissingIrohRemoteRpcCapability, parseIrohRemoteRpcGrant, } from "../core/remote/iroh/access-grant.js";
+import { isIrohRemoteWorkspaceName } from "../core/remote/iroh/handshake.js";
+import { sanitizeIrohRemoteOutbound } from "../core/remote/iroh/outbound-filter.js";
+import { isIrohRemoteWorkingDirectory } from "../core/remote/iroh/protocol.js";
+import { createIrohRemoteRpcCapabilityDeniedResponse, createIrohRemoteRpcErrorResponse, } from "../core/remote/iroh/rpc-command-filter.js";
+import { handleIrohRemoteWorktreeRpcCommand, IROH_REMOTE_WORKTREE_RPC_TYPES, } from "../core/remote/iroh/worktree-rpc.js";
+import { readIrohJsonlLine, } from "../core/rpc/iroh-transport.js";
+import { serializeJsonLine } from "../core/rpc/jsonl.js";
+import { createRemoteListSessionsRpcResponse, createRpcSuccessResponse, getRpcResponseId, } from "./conversation-commands.js";
+import { listWorkspaceDirectories } from "./workspace-directory.js";
+const DEFAULT_READ_LIMIT = 64 * 1024;
+export const DEFAULT_IROH_UTILITY_RPC_MAX_LINE_BYTES = 64 * 1024;
+export const WORKSPACE_UNREGISTERED_CLOSE_REASON = "workspace_unregistered";
+const LIST_WORKSPACE_DIRECTORIES_RPC_TYPE = "list_workspace_directories";
+export async function readLineFromIroh(recv, initial = Buffer.alloc(0), options = {}) {
+    return await readIrohJsonlLine(recv, initial, {
+        readLimit: DEFAULT_READ_LIMIT,
+        maxLineBytes: options.maxLineBytes ?? DEFAULT_IROH_UTILITY_RPC_MAX_LINE_BYTES,
+    });
+}
+export function getRemoteSanitizerOptions(authorization, overrides = {}) {
+    return {
+        remoteWorkspacePath: overrides.remoteWorkspacePath ?? "/workspace",
+        workspacePath: overrides.workspacePath ?? authorization.workspace.path,
+        ...(overrides.additionalRedactedPaths === undefined
+            ? {}
+            : { additionalRedactedPaths: overrides.additionalRedactedPaths }),
+    };
+}
+export async function writeIrohRemoteJsonLine(send, value, authorization, sanitizerOverrides = {}) {
+    const sanitized = sanitizeIrohRemoteOutbound(value, getRemoteSanitizerOptions(authorization, sanitizerOverrides));
+    await send.writeAll(Array.from(Buffer.from(serializeJsonLine(sanitized), "utf8")));
+}
+export function parseRemoteRpcCommandLine(line) {
+    let parsed;
+    try {
+        parsed = JSON.parse(line);
+    }
+    catch {
+        return {
+            ok: false,
+            response: createIrohRemoteRpcErrorResponse(undefined, "parse", "invalid_request"),
+        };
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        return {
+            ok: false,
+            response: createIrohRemoteRpcErrorResponse(undefined, "unknown", "invalid_request"),
+        };
+    }
+    const record = parsed;
+    if (typeof record.type !== "string") {
+        return {
+            ok: false,
+            response: createIrohRemoteRpcErrorResponse(getRpcResponseId(record), "unknown", "invalid_request"),
+        };
+    }
+    return { ok: true, command: record };
+}
+function getUtilityCapabilityDenial(command, authorization) {
+    const required = getIrohRemoteRpcCommandCapabilities(command);
+    if (required === undefined)
+        return undefined;
+    const missing = getMissingIrohRemoteRpcCapability(parseIrohRemoteRpcGrant(authorization.client.rpcGrant, "client rpcGrant"), required);
+    return missing === undefined
+        ? undefined
+        : createIrohRemoteRpcCapabilityDeniedResponse(getRpcResponseId(command), command.type, missing);
+}
+async function runWorkspaceUtilityRpcLoop(stream, initialInput, handleCommand) {
+    let buffer = Buffer.from(initialInput);
+    while (true) {
+        const result = await readLineFromIroh(stream.recv, buffer);
+        if (result.line === undefined) {
+            if (result.rest.length > 0) {
+                const shouldClose = await handleCommand(result.rest.toString("utf8"));
+                if (shouldClose) {
+                    return;
+                }
+            }
+            return;
+        }
+        const shouldClose = await handleCommand(result.line);
+        if (shouldClose) {
+            return;
+        }
+        buffer = result.rest;
+    }
+}
+/** Serve a workspaceDiscovery stream: list_sessions only. */
+export async function runWorkspaceDiscoveryStream(context, hooks) {
+    const { stream, authorization } = context;
+    await runWorkspaceUtilityRpcLoop(stream, context.initialInput, async (line) => {
+        if (!(await context.isRpcGrantCurrent())) {
+            context.closeStream("access_updated");
+            return true;
+        }
+        const parsed = parseRemoteRpcCommandLine(line);
+        if (!parsed.ok) {
+            await writeIrohRemoteJsonLine(stream.send, parsed.response, authorization);
+            return false;
+        }
+        if (parsed.command.type !== "list_sessions") {
+            await writeIrohRemoteJsonLine(stream.send, createIrohRemoteRpcErrorResponse(getRpcResponseId(parsed.command), parsed.command.type, "unsupported_on_workspace_discovery_stream"), authorization);
+            return false;
+        }
+        const denied = getUtilityCapabilityDenial(parsed.command, authorization);
+        if (denied) {
+            await writeIrohRemoteJsonLine(stream.send, denied, authorization);
+            return false;
+        }
+        await writeIrohRemoteJsonLine(stream.send, await createRemoteListSessionsRpcResponse(parsed.command, authorization, hooks.commandContext), authorization);
+        return false;
+    });
+}
+function parseWorkspaceManagementWorkspaceRequest(command, authorization, allowedFields) {
+    if (typeof command.workspaceName !== "string" || !isIrohRemoteWorkspaceName(command.workspaceName)) {
+        return { ok: false, error: "invalid_workspace_payload" };
+    }
+    if (command.workspaceName !== authorization.workspace.name) {
+        return { ok: false, error: "session_mismatch" };
+    }
+    const allowed = new Set(allowedFields);
+    for (const field of Object.keys(command)) {
+        if (!allowed.has(field)) {
+            return { ok: false, error: "invalid_request" };
+        }
+    }
+    return { ok: true, workspaceName: command.workspaceName };
+}
+function parseWorkspaceDirectoryPath(command) {
+    if (command.path === undefined) {
+        return undefined;
+    }
+    if (typeof command.path !== "string" || !isIrohRemoteWorkingDirectory(command.path)) {
+        return { error: "invalid_working_directory" };
+    }
+    return command.path;
+}
+/** Serve a workspaceManagement stream: workspace management RPCs. */
+export async function runWorkspaceManagementStream(context, hooks) {
+    const { stream, authorization } = context;
+    await runWorkspaceUtilityRpcLoop(stream, context.initialInput, async (line) => {
+        if (!(await context.isRpcGrantCurrent())) {
+            context.closeStream("access_updated");
+            return true;
+        }
+        const parsed = parseRemoteRpcCommandLine(line);
+        if (!parsed.ok) {
+            await writeIrohRemoteJsonLine(stream.send, parsed.response, authorization);
+            return false;
+        }
+        if (parsed.command.type !== "unregister_workspace" &&
+            parsed.command.type !== LIST_WORKSPACE_DIRECTORIES_RPC_TYPE) {
+            await writeIrohRemoteJsonLine(stream.send, createIrohRemoteRpcErrorResponse(getRpcResponseId(parsed.command), parsed.command.type, "unsupported_on_workspace_management_stream"), authorization);
+            return false;
+        }
+        const denied = getUtilityCapabilityDenial(parsed.command, authorization);
+        if (denied) {
+            await writeIrohRemoteJsonLine(stream.send, denied, authorization);
+            return false;
+        }
+        const id = getRpcResponseId(parsed.command);
+        if (parsed.command.type === LIST_WORKSPACE_DIRECTORIES_RPC_TYPE) {
+            const request = parseWorkspaceManagementWorkspaceRequest(parsed.command, authorization, [
+                "id",
+                "type",
+                "workspaceName",
+                "path",
+            ]);
+            if (!request.ok) {
+                await writeIrohRemoteJsonLine(stream.send, createIrohRemoteRpcErrorResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, request.error), authorization);
+                return false;
+            }
+            const path = parseWorkspaceDirectoryPath(parsed.command);
+            if (typeof path === "object") {
+                await writeIrohRemoteJsonLine(stream.send, createIrohRemoteRpcErrorResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, path.error), authorization);
+                return false;
+            }
+            const listed = await listWorkspaceDirectories(authorization.workspace.path, path);
+            if (!listed.ok) {
+                await writeIrohRemoteJsonLine(stream.send, createIrohRemoteRpcErrorResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, listed.error), authorization);
+                return false;
+            }
+            await writeIrohRemoteJsonLine(stream.send, createRpcSuccessResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, {
+                workspaceName: request.workspaceName,
+                ...(listed.currentPath === undefined ? {} : { path: listed.currentPath }),
+                directories: listed.directories,
+            }), authorization);
+            return false;
+        }
+        const request = parseWorkspaceManagementWorkspaceRequest(parsed.command, authorization, [
+            "id",
+            "type",
+            "workspaceName",
+        ]);
+        if (!request.ok) {
+            await writeIrohRemoteJsonLine(stream.send, createIrohRemoteRpcErrorResponse(id, "unregister_workspace", request.error), authorization);
+            return false;
+        }
+        let excludedClosed = false;
+        const result = await hooks.unregisterWorkspace(request.workspaceName, () => {
+            excludedClosed = true;
+        });
+        if (!result.ok) {
+            await hooks.auditLogger
+                .log({
+                type: "workspace_unregistered",
+                clientNodeId: authorization.client.nodeId,
+                workspace: request.workspaceName,
+                success: false,
+                error: result.error,
+                details: { source: "remote_workspace_management_stream", ...(result.details ?? {}) },
+            })
+                .catch(() => { });
+            await writeIrohRemoteJsonLine(stream.send, createIrohRemoteRpcErrorResponse(id, "unregister_workspace", result.error), authorization);
+            return false;
+        }
+        await hooks.auditLogger
+            .log({
+            type: "workspace_unregistered",
+            clientNodeId: authorization.client.nodeId,
+            workspace: request.workspaceName,
+            success: true,
+            details: {
+                closedStreamCount: result.closedStreamCount,
+                source: "remote_workspace_management_stream",
+                stoppedRuntimeCount: result.stoppedRuntimeCount,
+            },
+        })
+            .catch(() => { });
+        await writeIrohRemoteJsonLine(stream.send, createRpcSuccessResponse(id, "unregister_workspace", {
+            workspaceName: request.workspaceName,
+            unregistered: true,
+        }), authorization);
+        if (!excludedClosed) {
+            context.closeStream(WORKSPACE_UNREGISTERED_CLOSE_REASON);
+        }
+        return true;
+    });
+}
+/** Serve a manage_worktrees workspaceManagement stream: create/list/remove worktrees only. */
+export async function runWorktreeManagementStream(context, hooks) {
+    const { stream, authorization } = context;
+    const sanitizerOverrides = { additionalRedactedPaths: hooks.additionalRedactedPaths };
+    await runWorkspaceUtilityRpcLoop(stream, context.initialInput, async (line) => {
+        if (!(await context.isRpcGrantCurrent())) {
+            context.closeStream("access_updated");
+            return true;
+        }
+        const parsed = parseRemoteRpcCommandLine(line);
+        if (!parsed.ok) {
+            await writeIrohRemoteJsonLine(stream.send, parsed.response, authorization, sanitizerOverrides);
+            return false;
+        }
+        if (!IROH_REMOTE_WORKTREE_RPC_TYPES.has(parsed.command.type)) {
+            await writeIrohRemoteJsonLine(stream.send, createIrohRemoteRpcErrorResponse(getRpcResponseId(parsed.command), parsed.command.type, "unsupported_on_workspace_management_stream"), authorization, sanitizerOverrides);
+            return false;
+        }
+        const denied = getUtilityCapabilityDenial(parsed.command, authorization);
+        if (denied) {
+            await writeIrohRemoteJsonLine(stream.send, denied, authorization, sanitizerOverrides);
+            return false;
+        }
+        const result = await handleIrohRemoteWorktreeRpcCommand(parsed.command, {
+            authorizedWorkspaceName: authorization.workspace.name,
+            backend: hooks.worktrees,
+        });
+        if (!result.handled) {
+            return false;
+        }
+        if (parsed.command.type !== "list_worktrees") {
+            await hooks.auditLogger
+                .log({
+                type: result.audit?.type ??
+                    (parsed.command.type === "create_worktree" ? "worktree_created" : "worktree_removed"),
+                clientNodeId: authorization.client.nodeId,
+                workspace: authorization.workspace.name,
+                success: result.response.success,
+                ...(result.response.success ? {} : { error: result.response.error }),
+                details: { source: "remote_worktree_management_stream", ...(result.audit?.details ?? {}) },
+            })
+                .catch(() => { });
+        }
+        await writeIrohRemoteJsonLine(stream.send, result.response, authorization, sanitizerOverrides);
+        return false;
+    });
+}
+//# sourceMappingURL=workspace-streams.js.map

package/dist/daemon/workspace-streams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-streams.js","sourceRoot":"","sources":["../../src/daemon/workspace-streams.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACN,mCAAmC,EACnC,iCAAiC,EACjC,uBAAuB,GACvB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AACpF,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACN,2CAA2C,EAC3C,gCAAgC,GAChC,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACN,kCAAkC,EAClC,8BAA8B,GAE9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAIN,iBAAiB,GACjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAEN,mCAAmC,EACnC,wBAAwB,EACxB,gBAAgB,GAEhB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,uCAAuC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjE,MAAM,CAAC,MAAM,mCAAmC,GAAG,wBAAwB,CAAC;AAC5E,MAAM,mCAAmC,GAAG,4BAA4B,CAAC;AAEzE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,IAAwB,EACxB,OAAO,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EACjC,OAAO,GAA8B,EAAE,EACe;IACtD,OAAO,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE;QAC7C,SAAS,EAAE,kBAAkB;QAC7B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,uCAAuC;KAC7E,CAAC,CAAC;AAAA,CACH;AAWD,MAAM,UAAU,yBAAyB,CACxC,aAAmD,EACnD,SAAS,GAA6B,EAAE,EAKvC;IACD,OAAO;QACN,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,IAAI,YAAY;QAClE,aAAa,EAAE,SAAS,CAAC,aAAa,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI;QACtE,GAAG,CAAC,SAAS,CAAC,uBAAuB,KAAK,SAAS;YAClD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,uBAAuB,EAAE,SAAS,CAAC,uBAAuB,EAAE,CAAC;KAClE,CAAC;AAAA,CACF;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,IAA8B,EAC9B,KAAa,EACb,aAAmD,EACnD,kBAAkB,GAA6B,EAAE,EACjC;IAChB,MAAM,SAAS,GAAG,0BAA0B,CAAC,KAAK,EAAE,yBAAyB,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAClH,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAAA,CACnF;AAED,MAAM,UAAU,yBAAyB,CACxC,IAAY,EACgE;IAC5E,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,gCAAgC,CAAC,SAAS,EAAE,OAAO,EAAE,iBAAiB,CAAC;SACjF,CAAC;IACH,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,gCAAgC,CAAC,SAAS,EAAE,SAAS,EAAE,iBAAiB,CAAC;SACnF,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,gCAAgC,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,iBAAiB,CAAC;SAClG,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAA0B,EAAE,CAAC;AAAA,CACzD;AAED,SAAS,0BAA0B,CAClC,OAAyB,EACzB,aAAmD,EAC9B;IACrB,MAAM,QAAQ,GAAG,mCAAmC,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,OAAO,GAAG,iCAAiC,CAChD,uBAAuB,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,EACzE,QAAQ,CACR,CAAC;IACF,OAAO,OAAO,KAAK,SAAS;QAC3B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,2CAA2C,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAAA,CACjG;AAED,KAAK,UAAU,0BAA0B,CACxC,MAAwB,EACxB,YAAuB,EACvB,aAAiD,EACjC;IAChB,IAAI,MAAM,GAAW,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtE,IAAI,WAAW,EAAE,CAAC;oBACjB,OAAO;gBACR,CAAC;YACF,CAAC;YACD,OAAO;QACR,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,WAAW,EAAE,CAAC;YACjB,OAAO;QACR,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IACtB,CAAC;AAAA,CACD;AAwBD,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,OAA+B,EAC/B,KAAmD,EACnC;IAChB,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QAC9E,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7C,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,gCAAgC,CAC/B,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAChC,MAAM,CAAC,OAAO,CAAC,IAAI,EACnB,2CAA2C,CAC3C,EACD,aAAa,CACb,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACzE,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,MAAM,mCAAmC,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,cAAc,CAAC,EAC9F,aAAa,CACb,CAAC;QACF,OAAO,KAAK,CAAC;IAAA,CACb,CAAC,CAAC;AAAA,CACH;AAED,SAAS,wCAAwC,CAChD,OAAyB,EACzB,aAAmD,EACnD,aAAgC,EACqC;IACrE,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACpG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QAChD,CAAC;IACF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;AAAA,CAC1D;AAED,SAAS,2BAA2B,CAAC,OAAyB,EAA0C;IACvG,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC;AAAA,CACpB;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,OAA+B,EAC/B,KAA2B,EACX;IAChB,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QAC9E,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IACC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,sBAAsB;YAC9C,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,mCAAmC,EAC1D,CAAC;YACF,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,gCAAgC,CAC/B,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAChC,MAAM,CAAC,OAAO,CAAC,IAAI,EACnB,4CAA4C,CAC5C,EACD,aAAa,CACb,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACzE,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;YAClE,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,mCAAmC,EAAE,CAAC;YACjE,MAAM,OAAO,GAAG,wCAAwC,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE;gBACvF,IAAI;gBACJ,MAAM;gBACN,eAAe;gBACf,MAAM;aACN,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,gCAAgC,CAAC,EAAE,EAAE,mCAAmC,EAAE,OAAO,CAAC,KAAK,CAAC,EACxF,aAAa,CACb,CAAC;gBACF,OAAO,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,2BAA2B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,gCAAgC,CAAC,EAAE,EAAE,mCAAmC,EAAE,IAAI,CAAC,KAAK,CAAC,EACrF,aAAa,CACb,CAAC;gBACF,OAAO,KAAK,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,gCAAgC,CAAC,EAAE,EAAE,mCAAmC,EAAE,MAAM,CAAC,KAAK,CAAC,EACvF,aAAa,CACb,CAAC;gBACF,OAAO,KAAK,CAAC;YACd,CAAC;YACD,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,wBAAwB,CAAC,EAAE,EAAE,mCAAmC,EAAE;gBACjE,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;gBACzE,WAAW,EAAE,MAAM,CAAC,WAAW;aAC/B,CAAC,EACF,aAAa,CACb,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,wCAAwC,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE;YACvF,IAAI;YACJ,MAAM;YACN,eAAe;SACf,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,gCAAgC,CAAC,EAAE,EAAE,sBAAsB,EAAE,OAAO,CAAC,KAAK,CAAC,EAC3E,aAAa,CACb,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC;YAC3E,cAAc,GAAG,IAAI,CAAC;QAAA,CACtB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,KAAK,CAAC,WAAW;iBACrB,GAAG,CAAC;gBACJ,IAAI,EAAE,wBAAwB;gBAC9B,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;gBACzC,SAAS,EAAE,OAAO,CAAC,aAAa;gBAChC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,EAAE,MAAM,EAAE,oCAAoC,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;aACpF,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;YAClB,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,gCAAgC,CAAC,EAAE,EAAE,sBAAsB,EAAE,MAAM,CAAC,KAAK,CAAC,EAC1E,aAAa,CACb,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC,WAAW;aACrB,GAAG,CAAC;YACJ,IAAI,EAAE,wBAAwB;YAC9B,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;YACzC,SAAS,EAAE,OAAO,CAAC,aAAa;YAChC,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACR,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;gBAC3C,MAAM,EAAE,oCAAoC;gBAC5C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;aAC/C;SACD,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAClB,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,wBAAwB,CAAC,EAAE,EAAE,sBAAsB,EAAE;YACpD,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,YAAY,EAAE,IAAI;SAClB,CAAC,EACF,aAAa,CACb,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,CAAC,WAAW,CAAC,mCAAmC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IAAA,CACZ,CAAC,CAAC;AAAA,CACH;AASD,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,OAA+B,EAC/B,KAA0B,EACV;IAChB,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,kBAAkB,GAAG,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE,CAAC;IACtF,MAAM,0BAA0B,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QAC9E,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;YAC/F,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,uBAAuB,CAC5B,MAAM,CAAC,IAAI,EACX,gCAAgC,CAC/B,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAChC,MAAM,CAAC,OAAO,CAAC,IAAI,EACnB,4CAA4C,CAC5C,EACD,aAAa,EACb,kBAAkB,CAClB,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACzE,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;YACtF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC,MAAM,CAAC,OAAO,EAAE;YACvE,uBAAuB,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;YACrD,OAAO,EAAE,KAAK,CAAC,SAAS;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9C,MAAM,KAAK,CAAC,WAAW;iBACrB,GAAG,CAAC;gBACJ,IAAI,EACH,MAAM,CAAC,KAAK,EAAE,IAAI;oBAClB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBACtF,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;gBACzC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;gBACvC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;gBAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpE,OAAO,EAAE,EAAE,MAAM,EAAE,mCAAmC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE;aAC1F,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,MAAM,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC;QAC/F,OAAO,KAAK,CAAC;IAAA,CACb,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport {\n\tgetIrohRemoteRpcCommandCapabilities,\n\tgetMissingIrohRemoteRpcCapability,\n\tparseIrohRemoteRpcGrant,\n} from \"../core/remote/iroh/access-grant.ts\";\nimport type { IrohRemoteAuditLogger } from \"../core/remote/iroh/audit.ts\";\nimport type { IrohRemoteClientAuthorizationSuccess } from \"../core/remote/iroh/authorization.ts\";\nimport { isIrohRemoteWorkspaceName } from \"../core/remote/iroh/handshake.ts\";\nimport { sanitizeIrohRemoteOutbound } from \"../core/remote/iroh/outbound-filter.ts\";\nimport { isIrohRemoteWorkingDirectory } from \"../core/remote/iroh/protocol.ts\";\nimport {\n\tcreateIrohRemoteRpcCapabilityDeniedResponse,\n\tcreateIrohRemoteRpcErrorResponse,\n} from \"../core/remote/iroh/rpc-command-filter.ts\";\nimport {\n\thandleIrohRemoteWorktreeRpcCommand,\n\tIROH_REMOTE_WORKTREE_RPC_TYPES,\n\ttype IrohRemoteWorktreeRpcBackend,\n} from \"../core/remote/iroh/worktree-rpc.ts\";\nimport {\n\ttype IrohBiStreamLike,\n\ttype IrohBytes,\n\ttype IrohRecvStreamLike,\n\treadIrohJsonlLine,\n} from \"../core/rpc/iroh-transport.ts\";\nimport { serializeJsonLine } from \"../core/rpc/jsonl.ts\";\nimport {\n\ttype ConversationCommandContext,\n\tcreateRemoteListSessionsRpcResponse,\n\tcreateRpcSuccessResponse,\n\tgetRpcResponseId,\n\ttype RemoteRpcCommand,\n} from \"./conversation-commands.ts\";\nimport { listWorkspaceDirectories } from \"./workspace-directory.ts\";\n\nconst DEFAULT_READ_LIMIT = 64 * 1024;\nexport const DEFAULT_IROH_UTILITY_RPC_MAX_LINE_BYTES = 64 * 1024;\n\nexport const WORKSPACE_UNREGISTERED_CLOSE_REASON = \"workspace_unregistered\";\nconst LIST_WORKSPACE_DIRECTORIES_RPC_TYPE = \"list_workspace_directories\";\n\nexport async function readLineFromIroh(\n\trecv: IrohRecvStreamLike,\n\tinitial: Buffer = Buffer.alloc(0),\n\toptions: { maxLineBytes?: number } = {},\n): Promise<{ line: string | undefined; rest: Buffer }> {\n\treturn await readIrohJsonlLine(recv, initial, {\n\t\treadLimit: DEFAULT_READ_LIMIT,\n\t\tmaxLineBytes: options.maxLineBytes ?? DEFAULT_IROH_UTILITY_RPC_MAX_LINE_BYTES,\n\t});\n}\n\nexport interface RemoteSanitizerOverrides {\n\t/** Remote root for the sanitizer. Nested-repo worktrees map to /workspace/<source-root>. */\n\tremoteWorkspacePath?: string;\n\t/** Sanitizer root override (worktree-bound streams use the worktree path). */\n\tworkspacePath?: string;\n\t/** Extra roots (parent checkout, worktrees root) redacted to remoteWorkspacePath. */\n\tadditionalRedactedPaths?: string[];\n}\n\nexport function getRemoteSanitizerOptions(\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\toverrides: RemoteSanitizerOverrides = {},\n): {\n\tremoteWorkspacePath: string;\n\tworkspacePath: string;\n\tadditionalRedactedPaths?: string[];\n} {\n\treturn {\n\t\tremoteWorkspacePath: overrides.remoteWorkspacePath ?? \"/workspace\",\n\t\tworkspacePath: overrides.workspacePath ?? authorization.workspace.path,\n\t\t...(overrides.additionalRedactedPaths === undefined\n\t\t\t? {}\n\t\t\t: { additionalRedactedPaths: overrides.additionalRedactedPaths }),\n\t};\n}\n\nexport async function writeIrohRemoteJsonLine(\n\tsend: IrohBiStreamLike[\"send\"],\n\tvalue: object,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tsanitizerOverrides: RemoteSanitizerOverrides = {},\n): Promise<void> {\n\tconst sanitized = sanitizeIrohRemoteOutbound(value, getRemoteSanitizerOptions(authorization, sanitizerOverrides));\n\tawait send.writeAll(Array.from(Buffer.from(serializeJsonLine(sanitized), \"utf8\")));\n}\n\nexport function parseRemoteRpcCommandLine(\n\tline: string,\n): { ok: true; command: RemoteRpcCommand } | { ok: false; response: object } {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(line);\n\t} catch {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(undefined, \"parse\", \"invalid_request\"),\n\t\t};\n\t}\n\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(undefined, \"unknown\", \"invalid_request\"),\n\t\t};\n\t}\n\tconst record = parsed as Record<string, unknown>;\n\tif (typeof record.type !== \"string\") {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(getRpcResponseId(record), \"unknown\", \"invalid_request\"),\n\t\t};\n\t}\n\treturn { ok: true, command: record as RemoteRpcCommand };\n}\n\nfunction getUtilityCapabilityDenial(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): object | undefined {\n\tconst required = getIrohRemoteRpcCommandCapabilities(command);\n\tif (required === undefined) return undefined;\n\tconst missing = getMissingIrohRemoteRpcCapability(\n\t\tparseIrohRemoteRpcGrant(authorization.client.rpcGrant, \"client rpcGrant\"),\n\t\trequired,\n\t);\n\treturn missing === undefined\n\t\t? undefined\n\t\t: createIrohRemoteRpcCapabilityDeniedResponse(getRpcResponseId(command), command.type, missing);\n}\n\nasync function runWorkspaceUtilityRpcLoop(\n\tstream: IrohBiStreamLike,\n\tinitialInput: IrohBytes,\n\thandleCommand: (line: string) => Promise<boolean>,\n): Promise<void> {\n\tlet buffer: Buffer = Buffer.from(initialInput);\n\twhile (true) {\n\t\tconst result = await readLineFromIroh(stream.recv, buffer);\n\t\tif (result.line === undefined) {\n\t\t\tif (result.rest.length > 0) {\n\t\t\t\tconst shouldClose = await handleCommand(result.rest.toString(\"utf8\"));\n\t\t\t\tif (shouldClose) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\tconst shouldClose = await handleCommand(result.line);\n\t\tif (shouldClose) {\n\t\t\treturn;\n\t\t}\n\t\tbuffer = result.rest;\n\t}\n}\n\nexport interface WorkspaceStreamHooks {\n\tauditLogger: IrohRemoteAuditLogger;\n\tcommandContext: ConversationCommandContext;\n\t/** Unregister the workspace and tear down its streams/runtimes. Returns close counts. */\n\tunregisterWorkspace(\n\t\tworkspaceName: string,\n\t\texcludedStreamClose: () => void,\n\t): Promise<\n\t\t| { ok: true; closedStreamCount: number; stoppedRuntimeCount: number }\n\t\t| { ok: false; error: string; details?: Record<string, unknown> }\n\t>;\n}\n\nexport interface WorkspaceStreamContext {\n\tstream: IrohBiStreamLike;\n\tinitialInput: IrohBytes;\n\tauthorization: IrohRemoteClientAuthorizationSuccess;\n\t/** Recheck the persisted grant revision before every utility command. */\n\tisRpcGrantCurrent(): boolean | Promise<boolean>;\n\tcloseStream(reason?: string): void;\n}\n\n/** Serve a workspaceDiscovery stream: list_sessions only. */\nexport async function runWorkspaceDiscoveryStream(\n\tcontext: WorkspaceStreamContext,\n\thooks: Pick<WorkspaceStreamHooks, \"commandContext\">,\n): Promise<void> {\n\tconst { stream, authorization } = context;\n\tawait runWorkspaceUtilityRpcLoop(stream, context.initialInput, async (line) => {\n\t\tif (!(await context.isRpcGrantCurrent())) {\n\t\t\tcontext.closeStream(\"access_updated\");\n\t\t\treturn true;\n\t\t}\n\t\tconst parsed = parseRemoteRpcCommandLine(line);\n\t\tif (!parsed.ok) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, parsed.response, authorization);\n\t\t\treturn false;\n\t\t}\n\t\tif (parsed.command.type !== \"list_sessions\") {\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteRpcErrorResponse(\n\t\t\t\t\tgetRpcResponseId(parsed.command),\n\t\t\t\t\tparsed.command.type,\n\t\t\t\t\t\"unsupported_on_workspace_discovery_stream\",\n\t\t\t\t),\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t\tconst denied = getUtilityCapabilityDenial(parsed.command, authorization);\n\t\tif (denied) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, denied, authorization);\n\t\t\treturn false;\n\t\t}\n\t\tawait writeIrohRemoteJsonLine(\n\t\t\tstream.send,\n\t\t\tawait createRemoteListSessionsRpcResponse(parsed.command, authorization, hooks.commandContext),\n\t\t\tauthorization,\n\t\t);\n\t\treturn false;\n\t});\n}\n\nfunction parseWorkspaceManagementWorkspaceRequest(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tallowedFields: readonly string[],\n): { ok: true; workspaceName: string } | { ok: false; error: string } {\n\tif (typeof command.workspaceName !== \"string\" || !isIrohRemoteWorkspaceName(command.workspaceName)) {\n\t\treturn { ok: false, error: \"invalid_workspace_payload\" };\n\t}\n\tif (command.workspaceName !== authorization.workspace.name) {\n\t\treturn { ok: false, error: \"session_mismatch\" };\n\t}\n\tconst allowed = new Set(allowedFields);\n\tfor (const field of Object.keys(command)) {\n\t\tif (!allowed.has(field)) {\n\t\t\treturn { ok: false, error: \"invalid_request\" };\n\t\t}\n\t}\n\treturn { ok: true, workspaceName: command.workspaceName };\n}\n\nfunction parseWorkspaceDirectoryPath(command: RemoteRpcCommand): string | undefined | { error: string } {\n\tif (command.path === undefined) {\n\t\treturn undefined;\n\t}\n\tif (typeof command.path !== \"string\" || !isIrohRemoteWorkingDirectory(command.path)) {\n\t\treturn { error: \"invalid_working_directory\" };\n\t}\n\treturn command.path;\n}\n\n/** Serve a workspaceManagement stream: workspace management RPCs. */\nexport async function runWorkspaceManagementStream(\n\tcontext: WorkspaceStreamContext,\n\thooks: WorkspaceStreamHooks,\n): Promise<void> {\n\tconst { stream, authorization } = context;\n\tawait runWorkspaceUtilityRpcLoop(stream, context.initialInput, async (line) => {\n\t\tif (!(await context.isRpcGrantCurrent())) {\n\t\t\tcontext.closeStream(\"access_updated\");\n\t\t\treturn true;\n\t\t}\n\t\tconst parsed = parseRemoteRpcCommandLine(line);\n\t\tif (!parsed.ok) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, parsed.response, authorization);\n\t\t\treturn false;\n\t\t}\n\t\tif (\n\t\t\tparsed.command.type !== \"unregister_workspace\" &&\n\t\t\tparsed.command.type !== LIST_WORKSPACE_DIRECTORIES_RPC_TYPE\n\t\t) {\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteRpcErrorResponse(\n\t\t\t\t\tgetRpcResponseId(parsed.command),\n\t\t\t\t\tparsed.command.type,\n\t\t\t\t\t\"unsupported_on_workspace_management_stream\",\n\t\t\t\t),\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t\tconst denied = getUtilityCapabilityDenial(parsed.command, authorization);\n\t\tif (denied) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, denied, authorization);\n\t\t\treturn false;\n\t\t}\n\t\tconst id = getRpcResponseId(parsed.command);\n\t\tif (parsed.command.type === LIST_WORKSPACE_DIRECTORIES_RPC_TYPE) {\n\t\t\tconst request = parseWorkspaceManagementWorkspaceRequest(parsed.command, authorization, [\n\t\t\t\t\"id\",\n\t\t\t\t\"type\",\n\t\t\t\t\"workspaceName\",\n\t\t\t\t\"path\",\n\t\t\t]);\n\t\t\tif (!request.ok) {\n\t\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\t\tstream.send,\n\t\t\t\t\tcreateIrohRemoteRpcErrorResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, request.error),\n\t\t\t\t\tauthorization,\n\t\t\t\t);\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tconst path = parseWorkspaceDirectoryPath(parsed.command);\n\t\t\tif (typeof path === \"object\") {\n\t\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\t\tstream.send,\n\t\t\t\t\tcreateIrohRemoteRpcErrorResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, path.error),\n\t\t\t\t\tauthorization,\n\t\t\t\t);\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tconst listed = await listWorkspaceDirectories(authorization.workspace.path, path);\n\t\t\tif (!listed.ok) {\n\t\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\t\tstream.send,\n\t\t\t\t\tcreateIrohRemoteRpcErrorResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, listed.error),\n\t\t\t\t\tauthorization,\n\t\t\t\t);\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateRpcSuccessResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, {\n\t\t\t\t\tworkspaceName: request.workspaceName,\n\t\t\t\t\t...(listed.currentPath === undefined ? {} : { path: listed.currentPath }),\n\t\t\t\t\tdirectories: listed.directories,\n\t\t\t\t}),\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t\tconst request = parseWorkspaceManagementWorkspaceRequest(parsed.command, authorization, [\n\t\t\t\"id\",\n\t\t\t\"type\",\n\t\t\t\"workspaceName\",\n\t\t]);\n\t\tif (!request.ok) {\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteRpcErrorResponse(id, \"unregister_workspace\", request.error),\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\n\t\tlet excludedClosed = false;\n\t\tconst result = await hooks.unregisterWorkspace(request.workspaceName, () => {\n\t\t\texcludedClosed = true;\n\t\t});\n\t\tif (!result.ok) {\n\t\t\tawait hooks.auditLogger\n\t\t\t\t.log({\n\t\t\t\t\ttype: \"workspace_unregistered\",\n\t\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\t\tworkspace: request.workspaceName,\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: result.error,\n\t\t\t\t\tdetails: { source: \"remote_workspace_management_stream\", ...(result.details ?? {}) },\n\t\t\t\t})\n\t\t\t\t.catch(() => {});\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteRpcErrorResponse(id, \"unregister_workspace\", result.error),\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t\tawait hooks.auditLogger\n\t\t\t.log({\n\t\t\t\ttype: \"workspace_unregistered\",\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: request.workspaceName,\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: {\n\t\t\t\t\tclosedStreamCount: result.closedStreamCount,\n\t\t\t\t\tsource: \"remote_workspace_management_stream\",\n\t\t\t\t\tstoppedRuntimeCount: result.stoppedRuntimeCount,\n\t\t\t\t},\n\t\t\t})\n\t\t\t.catch(() => {});\n\t\tawait writeIrohRemoteJsonLine(\n\t\t\tstream.send,\n\t\t\tcreateRpcSuccessResponse(id, \"unregister_workspace\", {\n\t\t\t\tworkspaceName: request.workspaceName,\n\t\t\t\tunregistered: true,\n\t\t\t}),\n\t\t\tauthorization,\n\t\t);\n\t\tif (!excludedClosed) {\n\t\t\tcontext.closeStream(WORKSPACE_UNREGISTERED_CLOSE_REASON);\n\t\t}\n\t\treturn true;\n\t});\n}\n\nexport interface WorktreeStreamHooks {\n\tauditLogger: IrohRemoteAuditLogger;\n\tworktrees: IrohRemoteWorktreeRpcBackend;\n\t/** Extra roots redacted on every frame of this stream (worktrees root). */\n\tadditionalRedactedPaths?: string[];\n}\n\n/** Serve a manage_worktrees workspaceManagement stream: create/list/remove worktrees only. */\nexport async function runWorktreeManagementStream(\n\tcontext: WorkspaceStreamContext,\n\thooks: WorktreeStreamHooks,\n): Promise<void> {\n\tconst { stream, authorization } = context;\n\tconst sanitizerOverrides = { additionalRedactedPaths: hooks.additionalRedactedPaths };\n\tawait runWorkspaceUtilityRpcLoop(stream, context.initialInput, async (line) => {\n\t\tif (!(await context.isRpcGrantCurrent())) {\n\t\t\tcontext.closeStream(\"access_updated\");\n\t\t\treturn true;\n\t\t}\n\t\tconst parsed = parseRemoteRpcCommandLine(line);\n\t\tif (!parsed.ok) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, parsed.response, authorization, sanitizerOverrides);\n\t\t\treturn false;\n\t\t}\n\t\tif (!IROH_REMOTE_WORKTREE_RPC_TYPES.has(parsed.command.type)) {\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteRpcErrorResponse(\n\t\t\t\t\tgetRpcResponseId(parsed.command),\n\t\t\t\t\tparsed.command.type,\n\t\t\t\t\t\"unsupported_on_workspace_management_stream\",\n\t\t\t\t),\n\t\t\t\tauthorization,\n\t\t\t\tsanitizerOverrides,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t\tconst denied = getUtilityCapabilityDenial(parsed.command, authorization);\n\t\tif (denied) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, denied, authorization, sanitizerOverrides);\n\t\t\treturn false;\n\t\t}\n\t\tconst result = await handleIrohRemoteWorktreeRpcCommand(parsed.command, {\n\t\t\tauthorizedWorkspaceName: authorization.workspace.name,\n\t\t\tbackend: hooks.worktrees,\n\t\t});\n\t\tif (!result.handled) {\n\t\t\treturn false;\n\t\t}\n\t\tif (parsed.command.type !== \"list_worktrees\") {\n\t\t\tawait hooks.auditLogger\n\t\t\t\t.log({\n\t\t\t\t\ttype:\n\t\t\t\t\t\tresult.audit?.type ??\n\t\t\t\t\t\t(parsed.command.type === \"create_worktree\" ? \"worktree_created\" : \"worktree_removed\"),\n\t\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\t\tsuccess: result.response.success,\n\t\t\t\t\t...(result.response.success ? {} : { error: result.response.error }),\n\t\t\t\t\tdetails: { source: \"remote_worktree_management_stream\", ...(result.audit?.details ?? {}) },\n\t\t\t\t})\n\t\t\t\t.catch(() => {});\n\t\t}\n\t\tawait writeIrohRemoteJsonLine(stream.send, result.response, authorization, sanitizerOverrides);\n\t\treturn false;\n\t});\n}\n"]}

package/dist/daemon/worktree-manager.d.ts

@@ -0,0 +1,219 @@
+import type { IrohRemoteAuditLogger } from "../core/remote/iroh/audit.ts";
+import type { IrohRemoteWorkspace, IrohRemoteWorkspaceWorktree } from "../core/remote/iroh/state.ts";
+import { type IrohRemoteHostStateManager } from "../core/remote/iroh/state-manager.ts";
+import type { ControlRequest } from "./control-protocol.ts";
+import type { ControlConnection } from "./control-server.ts";
+import { type WorkspaceDirectoryResolution } from "./workspace-directory.ts";
+/** join(agentDir, "worktrees") — sibling of sessions/, daemon/, trust.json. */
+export declare function getWorktreesRoot(agentDir: string): string;
+export declare const WORKTREE_ID_PATTERN: RegExp;
+/** Per-workspace directory holding that workspace's worktree checkouts. */
+export declare function getWorkspaceWorktreesDir(agentDir: string, workspacePath: string): string;
+/**
+ * Deterministic checkout path; the ONLY producer of checkout paths. Validates
+ * the id and asserts the resolved path stays under the worktrees root — never
+ * accepts a caller-supplied path.
+ */
+export declare function getWorktreeCheckoutPath(agentDir: string, workspacePath: string, worktreeId: string): string;
+/**
+ * Convert a path relative to a daemon-managed worktree checkout back into the
+ * registered-workspace-relative path used on the remote protocol. Nested repo
+ * worktrees store sourceRootRelativePath (e.g. `Volt`), so a worktree cwd of
+ * `packages/coding-agent` displays as `Volt/packages/coding-agent`.
+ */
+export declare function getRegisteredWorkingDirectoryForWorktree(worktree: Pick<IrohRemoteWorkspaceWorktree, "sourceRootRelativePath">, worktreeRelativePath?: string): string | undefined;
+/** True when path is inside the daemon's worktrees root (a daemon-managed checkout or below). */
+export declare function isPathUnderWorktreesRoot(agentDir: string, path: string): boolean;
+/**
+ * Resolve the PARENT checkout of a daemon-managed worktree from the checkout's
+ * `.git` gitdir pointer (`gitdir: <parent>/.git/worktrees/<id>`), without a
+ * daemon round-trip or a git subprocess. Returns undefined when the path is
+ * not under the worktrees root or the pointer cannot be parsed. Used by the
+ * TUI to pin trust decisions to the parent workspace path — trust entries are
+ * never prompted for or persisted on worktree paths (design §5.1.9/§5.2.1).
+ */
+export declare function resolveWorktreeParentCheckout(agentDir: string, path: string): string | undefined;
+export type WorktreeRelayGate = {
+    ok: true;
+} | {
+    ok: false;
+    reason: "checkout_missing" | "tui_not_capable";
+};
+/**
+ * Gate a worktree-bound conversation relay: the checkout must exist and the
+ * owning TUI must have advertised the worktrees control capability. Old TUIs
+ * (no capability) are never offered worktree-session relays (design §5.2.3).
+ */
+export declare function evaluateWorktreeRelayGate(worktree: {
+    path: string;
+} | undefined, tuiCapabilities: ReadonlySet<string> | undefined, worktreesCapability: string): WorktreeRelayGate;
+export type WorktreeError = "not_a_git_repository" | "worktree_exists" | "worktree_branch_conflict" | "worktree_not_found" | "worktree_dirty" | "worktree_busy" | "worktree_limit_reached" | "worktree_source_unregistered" | "invalid_worktree_id" | "invalid_working_directory" | "nested_git_repository_unsupported" | "git_failed";
+export type WorktreeGitRunner = (args: string[], cwd: string) => Promise<{
+    ok: boolean;
+    code: number | null;
+    stdout: string;
+    stderr: string;
+}>;
+export interface WorktreeManagerOptions {
+    agentDir: string;
+    stateManager: IrohRemoteHostStateManager;
+    auditLogger: IrohRemoteAuditLogger;
+    /** Injectable for tests; defaults to a spawnProcess/waitForChildProcess wrapper. */
+    runGit?: WorktreeGitRunner;
+    /** Max worktrees per workspace (default 16). */
+    maxWorktreesPerWorkspace?: number;
+    /** Seam for "is a runtime using this worktree" (wired to IntegratedRuntimeRegistry). */
+    hasActiveRuntimeForSession?: (workspaceName: string, sessionId: string) => boolean;
+    /** Durable-write seam (VoltdStateStore.flush); records must survive a crash the moment they exist. */
+    flushState?: () => Promise<void>;
+    now?: () => number;
+}
+export interface WorktreeStatus extends IrohRemoteWorkspaceWorktree {
+    /** Checkout directory exists and `git worktree list` still knows it. */
+    available: boolean;
+    /** `git status --porcelain` non-empty, i.e. has uncommitted work (best-effort; undefined when unavailable). */
+    dirty?: boolean;
+    /** Branch commits vs the base ref (`git rev-list --left-right --count`); undefined when unavailable. */
+    aheadBehind?: {
+        ahead: number;
+        behind: number;
+    };
+}
+export type WorktreeResult<T> = ({
+    ok: true;
+} & T) | {
+    ok: false;
+    error: WorktreeError;
+    detail?: string;
+};
+/** Default runner: no shell, argv only, captured stdio. */
+export declare function createDefaultWorktreeGitRunner(): WorktreeGitRunner;
+/**
+ * Basic `git check-ref-format`-equivalent syntax gate for branch/baseRef
+ * values. Rejects option injection (leading '-') and git-invalid ref
+ * sequences; values are always passed as separate argv entries.
+ */
+export declare function isValidGitRefSyntax(ref: string): boolean;
+export declare class WorktreeManager {
+    private readonly agentDir;
+    private readonly stateManager;
+    private readonly auditLogger;
+    private readonly runGit;
+    private readonly maxWorktreesPerWorkspace;
+    private readonly hasActiveRuntimeForSession;
+    private readonly flushState;
+    private readonly now;
+    constructor(options: WorktreeManagerOptions);
+    /** git worktree add; persists the record durably after git succeeds. */
+    create(workspace: IrohRemoteWorkspace, options?: {
+        id?: string;
+        branch?: string;
+        baseRef?: string;
+        workingDirectory?: string;
+    }): Promise<WorktreeResult<{
+        worktree: IrohRemoteWorkspaceWorktree;
+    }>>;
+    /** Adopt an existing git worktree checkout into daemon state; local control socket only. */
+    adopt(workspace: IrohRemoteWorkspace, options: {
+        path: string;
+        id?: string;
+        baseRef?: string;
+    }): Promise<WorktreeResult<{
+        worktree: IrohRemoteWorkspaceWorktree;
+    }>>;
+    validateWorkingDirectory(workspace: IrohRemoteWorkspace, workingDirectory?: string): Promise<WorktreeResult<{
+        directory: WorkspaceDirectoryResolution;
+    }>>;
+    resolveWorktreeWorkingDirectory(workspace: IrohRemoteWorkspace, worktree: IrohRemoteWorkspaceWorktree, workingDirectory?: string): Promise<WorktreeResult<{
+        directory: WorkspaceDirectoryResolution;
+    }>>;
+    private resolveCreateSource;
+    list(workspace: IrohRemoteWorkspace): Promise<WorktreeStatus[]>;
+    private getKnownWorktreeCheckouts;
+    private resolveRecordSourceRootPath;
+    private resolveDefaultBaseRef;
+    private computeAheadBehind;
+    /** Refuses dirty/busy unless force; `git worktree remove [--force]`, then drops the record. */
+    remove(workspace: IrohRemoteWorkspace, worktreeId: string, options?: {
+        force?: boolean;
+    }): Promise<WorktreeResult<Record<never, never>>>;
+    /**
+     * Reconcile persisted records vs filesystem vs `git worktree list`. Drops
+     * records without checkouts, quarantines unrecognized checkout directories
+     * (rename, never delete), and runs `git worktree prune` in each known source checkout.
+     */
+    prune(workspace: IrohRemoteWorkspace): Promise<{
+        removedRecords: string[];
+        orphanCheckouts: string[];
+    }>;
+    /**
+     * Retention removal (design §5.3): remove a worktree ONLY when it is not
+     * busy, has no uncommitted work, and its branch is fully merged into the
+     * base ref. Never forces; a skip returns the reason for the audit trail.
+     */
+    removeIfCleanAndMerged(workspace: IrohRemoteWorkspace, worktreeId: string): Promise<{
+        removed: true;
+    } | {
+        removed: false;
+        reason: string;
+    }>;
+    /** Lookup used by conversation open/resume and relay preamble resolution. */
+    resolveSessionWorktree(workspaceName: string, sessionId: string): Promise<IrohRemoteWorkspaceWorktree | undefined>;
+    bindSession(workspaceName: string, worktreeId: string, sessionId: string): Promise<void>;
+    findWorktree(workspaceName: string, worktreeId: string): Promise<IrohRemoteWorkspaceWorktree | undefined>;
+    /**
+     * Compatibility guard for post-unregister callers. Workspace unregister is
+     * deliberately non-destructive: persisted worktrees block the state mutation,
+     * and unknown checkout directories are preserved for manual reconciliation.
+     */
+    cleanupUnregisteredWorkspace(workspace: IrohRemoteWorkspace): Promise<void>;
+    private mapGitFailure;
+    private logAudit;
+}
+export interface WorktreeRetentionSweeperOptions {
+    manager: WorktreeManager;
+    stateManager: IrohRemoteHostStateManager;
+    auditLogger: IrohRemoteAuditLogger;
+    /** Resolved at sweep time so settings changes apply without a restart. */
+    getRetentionPolicy: () => {
+        enabled: boolean;
+        ttlMs: number;
+    } | undefined;
+    /** Injectable timers (tests). */
+    setTimer?: (callback: () => void, ttlMs: number) => NodeJS.Timeout;
+    clearTimer?: (timer: NodeJS.Timeout) => void;
+}
+/**
+ * Opt-in worktree retention (design §5.3): when a worktree-bound runtime is
+ * disposed, schedule a TTL sweep that removes the worktree ONLY when it is
+ * clean and fully merged into its base ref; otherwise the skip is audited as
+ * worktree_retention_skipped_dirty and the checkout stays put.
+ */
+export declare class WorktreeRetentionSweeper {
+    private readonly options;
+    private readonly timers;
+    private disposed;
+    constructor(options: WorktreeRetentionSweeperOptions);
+    /** Hooked to IntegratedRuntimeRegistry.onRuntimeDisposed for worktree-bound entries. */
+    onRuntimeDisposed(workspaceName: string, worktreeId: string): void;
+    private sweep;
+    dispose(): void;
+}
+export type WorktreeControlRequest = Extract<ControlRequest, {
+    type: "worktree_create" | "worktree_adopt" | "worktree_list" | "worktree_remove" | "worktree_prune" | "worktree_resolve" | "worktree_bind";
+}>;
+export interface WorktreeControlRequestHooks {
+    manager: WorktreeManager;
+    stateManager: IrohRemoteHostStateManager;
+    /** Force-remove hook that stops bound runtimes first (wired by the iroh service). */
+    removeWorktree?: (workspace: IrohRemoteWorkspace, worktreeId: string, force: boolean) => Promise<WorktreeResult<Record<never, never>>>;
+}
+export declare function isWorktreeControlRequest(request: ControlRequest): request is WorktreeControlRequest;
+/**
+ * Shared `worktree_*` control-socket handler: used by the daemon skeleton
+ * (main.ts fallback) and the iroh service (which layers runtime-aware remove
+ * on top via hooks.removeWorktree). Control responses MAY include checkout
+ * paths — the no-paths rule applies to the iroh wire, not the local socket.
+ */
+export declare function handleWorktreeControlRequest(connection: ControlConnection, request: WorktreeControlRequest, hooks: WorktreeControlRequestHooks): Promise<void>;
+//# sourceMappingURL=worktree-manager.d.ts.map