@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/core/remote/iroh/workspace.js

@@ -0,0 +1,104 @@
+import { stat } from "node:fs/promises";
+import { basename, resolve } from "node:path";
+import { isIrohRemoteWorkspaceName } from "./handshake.js";
+import { normalizeIrohRemoteAllowTools } from "./protocol.js";
+export function parseIrohRemoteWorkspaceSpec(value, cwd = process.cwd()) {
+    if (!value) {
+        const name = basename(cwd) || "workspace";
+        assertIrohRemoteWorkspaceName(name);
+        return { name, path: cwd };
+    }
+    const separatorIndex = value.indexOf("=");
+    if (separatorIndex === -1) {
+        const path = resolve(cwd, value);
+        const name = basename(path) || "workspace";
+        assertIrohRemoteWorkspaceName(name);
+        return { name, path };
+    }
+    const name = value.slice(0, separatorIndex).trim();
+    const path = resolve(cwd, value.slice(separatorIndex + 1));
+    if (!name) {
+        throw new Error("Workspace name cannot be empty");
+    }
+    assertIrohRemoteWorkspaceName(name);
+    return { name, path };
+}
+export async function getIrohRemoteWorkspaceAvailabilityStatus(workspace) {
+    try {
+        const workspaceStat = await stat(workspace.path);
+        return workspaceStat.isDirectory() ? "available" : "unavailable";
+    }
+    catch (error) {
+        return error instanceof Error && "code" in error && error.code === "ENOENT" ? "missing" : "unavailable";
+    }
+}
+export function upsertIrohRemoteWorkspace(state, workspace, allowTools) {
+    assertIrohRemoteWorkspaceName(workspace.name);
+    const nameAlias = getIrohRemoteWorkspaceNameAlias(workspace.name);
+    const aliasConflict = state.workspaces.find((entry) => entry.name !== workspace.name && getIrohRemoteWorkspaceNameAlias(entry.name) === nameAlias);
+    if (aliasConflict) {
+        throw new Error(`Workspace name collides with existing registered workspace: ${aliasConflict.name}`);
+    }
+    const savedAllowedTools = allowTools ?? workspace.allowedTools;
+    const savedWorkspace = {
+        name: workspace.name,
+        path: workspace.path,
+        ...(savedAllowedTools === undefined ? {} : { allowedTools: normalizeIrohRemoteAllowTools(savedAllowedTools) }),
+    };
+    const existing = state.workspaces.find((entry) => entry.name === workspace.name);
+    if (!existing) {
+        state.workspaces.push(savedWorkspace);
+        return savedWorkspace;
+    }
+    existing.path = savedWorkspace.path;
+    if (savedAllowedTools !== undefined) {
+        existing.allowedTools = savedAllowedTools;
+    }
+    return existing;
+}
+export function getIrohRemoteWorkspaceNameAlias(name) {
+    return name.normalize("NFC").toLowerCase();
+}
+function assertIrohRemoteWorkspaceName(name) {
+    if (!isIrohRemoteWorkspaceName(name)) {
+        throw new Error("Workspace name is invalid");
+    }
+}
+export async function getIrohRemoteWorkspaceStatuses(state, classifier) {
+    return await Promise.all(state.workspaces.map(async (workspace) => ({
+        name: workspace.name,
+        status: await getIrohRemoteWorkspaceStatus(workspace, classifier),
+    })));
+}
+export function getAvailableIrohRemoteWorkspaceNames(workspaces) {
+    return workspaces.filter((entry) => entry.status === "available").map((entry) => entry.name);
+}
+async function getIrohRemoteWorkspaceStatus(workspace, classifier) {
+    if (classifier === undefined) {
+        return "available";
+    }
+    try {
+        return await classifier(workspace);
+    }
+    catch {
+        return "unavailable";
+    }
+}
+export function findIrohRemoteWorkspace(state, workspaceName) {
+    return state.workspaces.find((entry) => entry.name === workspaceName);
+}
+export function selectIrohRemoteWorkspace(state, workspaceSpec, allowTools, cwd = process.cwd()) {
+    if (workspaceSpec) {
+        return upsertIrohRemoteWorkspace(state, parseIrohRemoteWorkspaceSpec(workspaceSpec, cwd), allowTools);
+    }
+    const cwdWorkspace = parseIrohRemoteWorkspaceSpec(undefined, cwd);
+    const workspace = state.workspaces.find((entry) => entry.path === cwdWorkspace.path);
+    if (workspace) {
+        if (allowTools !== undefined) {
+            workspace.allowedTools = allowTools;
+        }
+        return workspace;
+    }
+    return upsertIrohRemoteWorkspace(state, cwdWorkspace, allowTools);
+}
+//# sourceMappingURL=workspace.js.map

package/dist/core/remote/iroh/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../../../src/core/remote/iroh/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAc9D,MAAM,UAAU,4BAA4B,CAAC,KAAc,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAuB;IACtG,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;QAC1C,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,cAAc,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC;QAC3C,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACnD,CAAC;IACD,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAAA,CACtB;AAED,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAC7D,SAA8B,EACmB;IACjD,IAAI,CAAC;QACJ,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;IACzG,CAAC;AAAA,CACD;AAED,MAAM,UAAU,yBAAyB,CACxC,KAA0B,EAC1B,SAA8B,EAC9B,UAAmB,EACG;IACtB,6BAA6B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,+BAA+B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,IAAI,+BAA+B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CACrG,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,+DAA+D,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,iBAAiB,GAAG,UAAU,IAAI,SAAS,CAAC,YAAY,CAAC;IAC/D,MAAM,cAAc,GAAwB;QAC3C,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,6BAA6B,CAAC,iBAAiB,CAAC,EAAE,CAAC;KAC9G,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;IACjF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACtC,OAAO,cAAc,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC;IACpC,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACrC,QAAQ,CAAC,YAAY,GAAG,iBAAiB,CAAC;IAC3C,CAAC;IACD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,MAAM,UAAU,+BAA+B,CAAC,IAAY,EAAU;IACrE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAAA,CAC3C;AAED,SAAS,6BAA6B,CAAC,IAAY,EAAQ;IAC1D,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9C,CAAC;AAAA,CACD;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,KAA0B,EAC1B,UAAsD,EACf;IACvC,OAAO,MAAM,OAAO,CAAC,GAAG,CACvB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,MAAM,EAAE,MAAM,4BAA4B,CAAC,SAAS,EAAE,UAAU,CAAC;KACjE,CAAC,CAAC,CACH,CAAC;AAAA,CACF;AAED,MAAM,UAAU,oCAAoC,CAAC,UAAgD,EAAY;IAChH,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAAA,CAC7F;AAED,KAAK,UAAU,4BAA4B,CAC1C,SAA8B,EAC9B,UAAiE,EAChB;IACjD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC;IACpB,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,aAAa,CAAC;IACtB,CAAC;AAAA,CACD;AAED,MAAM,UAAU,uBAAuB,CACtC,KAA0B,EAC1B,aAAqB,EACa;IAClC,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;AAAA,CACtE;AAED,MAAM,UAAU,yBAAyB,CACxC,KAA0B,EAC1B,aAAiC,EACjC,UAAmB,EACnB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EACG;IACtB,IAAI,aAAa,EAAE,CAAC;QACnB,OAAO,yBAAyB,CAAC,KAAK,EAAE,4BAA4B,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,YAAY,GAAG,4BAA4B,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC;IACrF,IAAI,SAAS,EAAE,CAAC;QACf,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC9B,SAAS,CAAC,YAAY,GAAG,UAAU,CAAC;QACrC,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,yBAAyB,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;AAAA,CAClE","sourcesContent":["import { stat } from \"node:fs/promises\";\nimport { basename, resolve } from \"node:path\";\nimport { isIrohRemoteWorkspaceName } from \"./handshake.ts\";\nimport { normalizeIrohRemoteAllowTools } from \"./protocol.ts\";\nimport type { IrohRemoteHostState, IrohRemoteWorkspace } from \"./state.ts\";\n\nexport type IrohRemoteWorkspaceAvailabilityStatus = \"available\" | \"missing\" | \"unavailable\";\n\nexport interface IrohRemoteWorkspaceStatus {\n\tname: string;\n\tstatus: IrohRemoteWorkspaceAvailabilityStatus;\n}\n\nexport type IrohRemoteWorkspaceAvailabilityClassifier = (\n\tworkspace: IrohRemoteWorkspace,\n) => IrohRemoteWorkspaceAvailabilityStatus | Promise<IrohRemoteWorkspaceAvailabilityStatus>;\n\nexport function parseIrohRemoteWorkspaceSpec(value?: string, cwd = process.cwd()): IrohRemoteWorkspace {\n\tif (!value) {\n\t\tconst name = basename(cwd) || \"workspace\";\n\t\tassertIrohRemoteWorkspaceName(name);\n\t\treturn { name, path: cwd };\n\t}\n\n\tconst separatorIndex = value.indexOf(\"=\");\n\tif (separatorIndex === -1) {\n\t\tconst path = resolve(cwd, value);\n\t\tconst name = basename(path) || \"workspace\";\n\t\tassertIrohRemoteWorkspaceName(name);\n\t\treturn { name, path };\n\t}\n\n\tconst name = value.slice(0, separatorIndex).trim();\n\tconst path = resolve(cwd, value.slice(separatorIndex + 1));\n\tif (!name) {\n\t\tthrow new Error(\"Workspace name cannot be empty\");\n\t}\n\tassertIrohRemoteWorkspaceName(name);\n\treturn { name, path };\n}\n\nexport async function getIrohRemoteWorkspaceAvailabilityStatus(\n\tworkspace: IrohRemoteWorkspace,\n): Promise<IrohRemoteWorkspaceAvailabilityStatus> {\n\ttry {\n\t\tconst workspaceStat = await stat(workspace.path);\n\t\treturn workspaceStat.isDirectory() ? \"available\" : \"unavailable\";\n\t} catch (error) {\n\t\treturn error instanceof Error && \"code\" in error && error.code === \"ENOENT\" ? \"missing\" : \"unavailable\";\n\t}\n}\n\nexport function upsertIrohRemoteWorkspace(\n\tstate: IrohRemoteHostState,\n\tworkspace: IrohRemoteWorkspace,\n\tallowTools?: string,\n): IrohRemoteWorkspace {\n\tassertIrohRemoteWorkspaceName(workspace.name);\n\tconst nameAlias = getIrohRemoteWorkspaceNameAlias(workspace.name);\n\tconst aliasConflict = state.workspaces.find(\n\t\t(entry) => entry.name !== workspace.name && getIrohRemoteWorkspaceNameAlias(entry.name) === nameAlias,\n\t);\n\tif (aliasConflict) {\n\t\tthrow new Error(`Workspace name collides with existing registered workspace: ${aliasConflict.name}`);\n\t}\n\tconst savedAllowedTools = allowTools ?? workspace.allowedTools;\n\tconst savedWorkspace: IrohRemoteWorkspace = {\n\t\tname: workspace.name,\n\t\tpath: workspace.path,\n\t\t...(savedAllowedTools === undefined ? {} : { allowedTools: normalizeIrohRemoteAllowTools(savedAllowedTools) }),\n\t};\n\tconst existing = state.workspaces.find((entry) => entry.name === workspace.name);\n\tif (!existing) {\n\t\tstate.workspaces.push(savedWorkspace);\n\t\treturn savedWorkspace;\n\t}\n\n\texisting.path = savedWorkspace.path;\n\tif (savedAllowedTools !== undefined) {\n\t\texisting.allowedTools = savedAllowedTools;\n\t}\n\treturn existing;\n}\n\nexport function getIrohRemoteWorkspaceNameAlias(name: string): string {\n\treturn name.normalize(\"NFC\").toLowerCase();\n}\n\nfunction assertIrohRemoteWorkspaceName(name: string): void {\n\tif (!isIrohRemoteWorkspaceName(name)) {\n\t\tthrow new Error(\"Workspace name is invalid\");\n\t}\n}\n\nexport async function getIrohRemoteWorkspaceStatuses(\n\tstate: IrohRemoteHostState,\n\tclassifier?: IrohRemoteWorkspaceAvailabilityClassifier,\n): Promise<IrohRemoteWorkspaceStatus[]> {\n\treturn await Promise.all(\n\t\tstate.workspaces.map(async (workspace) => ({\n\t\t\tname: workspace.name,\n\t\t\tstatus: await getIrohRemoteWorkspaceStatus(workspace, classifier),\n\t\t})),\n\t);\n}\n\nexport function getAvailableIrohRemoteWorkspaceNames(workspaces: readonly IrohRemoteWorkspaceStatus[]): string[] {\n\treturn workspaces.filter((entry) => entry.status === \"available\").map((entry) => entry.name);\n}\n\nasync function getIrohRemoteWorkspaceStatus(\n\tworkspace: IrohRemoteWorkspace,\n\tclassifier: IrohRemoteWorkspaceAvailabilityClassifier | undefined,\n): Promise<IrohRemoteWorkspaceAvailabilityStatus> {\n\tif (classifier === undefined) {\n\t\treturn \"available\";\n\t}\n\ttry {\n\t\treturn await classifier(workspace);\n\t} catch {\n\t\treturn \"unavailable\";\n\t}\n}\n\nexport function findIrohRemoteWorkspace(\n\tstate: IrohRemoteHostState,\n\tworkspaceName: string,\n): IrohRemoteWorkspace | undefined {\n\treturn state.workspaces.find((entry) => entry.name === workspaceName);\n}\n\nexport function selectIrohRemoteWorkspace(\n\tstate: IrohRemoteHostState,\n\tworkspaceSpec: string | undefined,\n\tallowTools?: string,\n\tcwd = process.cwd(),\n): IrohRemoteWorkspace {\n\tif (workspaceSpec) {\n\t\treturn upsertIrohRemoteWorkspace(state, parseIrohRemoteWorkspaceSpec(workspaceSpec, cwd), allowTools);\n\t}\n\tconst cwdWorkspace = parseIrohRemoteWorkspaceSpec(undefined, cwd);\n\tconst workspace = state.workspaces.find((entry) => entry.path === cwdWorkspace.path);\n\tif (workspace) {\n\t\tif (allowTools !== undefined) {\n\t\t\tworkspace.allowedTools = allowTools;\n\t\t}\n\t\treturn workspace;\n\t}\n\treturn upsertIrohRemoteWorkspace(state, cwdWorkspace, allowTools);\n}\n"]}

package/dist/core/remote/iroh/worktree-rpc.d.ts

@@ -0,0 +1,83 @@
+import { type IrohRemoteRpcErrorResponse } from "./rpc-command-filter.ts";
+export declare const IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE = "create_worktree";
+export declare const IROH_REMOTE_LIST_WORKTREES_RPC_TYPE = "list_worktrees";
+export declare const IROH_REMOTE_REMOVE_WORKTREE_RPC_TYPE = "remove_worktree";
+export declare const IROH_REMOTE_WORKTREE_RPC_TYPES: ReadonlySet<string>;
+/**
+ * Wire shape for a worktree on the iroh remote protocol. NOTE: no filesystem
+ * paths ever cross the wire; checkout paths stay host-local.
+ */
+export interface IrohRemoteWorktreeSummary {
+    id: string;
+    branch: string;
+    baseRef?: string;
+    createdAt: number;
+    sessionIds: string[];
+    available?: boolean;
+    /** Uncommitted work in the checkout (`git status --porcelain` non-empty). */
+    dirty?: boolean;
+    /** Branch commits vs the base ref (merge-back guidance, design §5.3). */
+    aheadBehind?: {
+        ahead: number;
+        behind: number;
+    };
+}
+/** Host-side backend the RPC helpers delegate to (the daemon's WorktreeManager). */
+export interface IrohRemoteWorktreeRpcBackend {
+    createWorktree(workspaceName: string, options: {
+        id?: string;
+        branch?: string;
+        baseRef?: string;
+        workingDirectory?: string;
+    }): Promise<{
+        ok: true;
+        worktree: IrohRemoteWorktreeSummary;
+    } | {
+        ok: false;
+        error: string;
+        detail?: string;
+    }>;
+    listWorktrees(workspaceName: string): Promise<{
+        ok: true;
+        worktrees: IrohRemoteWorktreeSummary[];
+    } | {
+        ok: false;
+        error: string;
+        detail?: string;
+    }>;
+    removeWorktree(workspaceName: string, worktreeId: string, force: boolean): Promise<{
+        ok: true;
+        stoppedRuntimeCount: number;
+        closedStreamCount: number;
+    } | {
+        ok: false;
+        error: string;
+        detail?: string;
+    }>;
+}
+export interface HandleIrohRemoteWorktreeRpcCommandOptions {
+    /** The stream-authorized workspace name; cross-workspace requests are session_mismatch. */
+    authorizedWorkspaceName: string;
+    backend: IrohRemoteWorktreeRpcBackend;
+}
+export interface IrohRemoteWorktreeRpcSuccessResponse {
+    id?: string;
+    type: "response";
+    command: string;
+    success: true;
+    data: Record<string, unknown>;
+}
+export type IrohRemoteWorktreeRpcResponse = IrohRemoteWorktreeRpcSuccessResponse | IrohRemoteRpcErrorResponse;
+export type IrohRemoteWorktreeRpcResult = {
+    handled: false;
+} | {
+    handled: true;
+    response: IrohRemoteWorktreeRpcResponse;
+    /** Present on success for audit hooks. */
+    audit?: {
+        type: string;
+        details: Record<string, unknown>;
+    };
+};
+export declare function handleIrohRemoteWorktreeRpcCommand(command: Record<string, unknown>, options: HandleIrohRemoteWorktreeRpcCommandOptions): Promise<IrohRemoteWorktreeRpcResult>;
+//# sourceMappingURL=worktree-rpc.d.ts.map

package/dist/core/remote/iroh/worktree-rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-rpc.d.ts","sourceRoot":"","sources":["../../../../src/core/remote/iroh/worktree-rpc.ts"],"names":[],"mappings":"AACA,OAAO,EAAoC,KAAK,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAE5G,eAAO,MAAM,oCAAoC,oBAAoB,CAAC;AACtE,eAAO,MAAM,mCAAmC,mBAAmB,CAAC;AACpE,eAAO,MAAM,oCAAoC,oBAAoB,CAAC;AAEtE,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,MAAM,CAI7D,CAAC;AAEH;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,0EAAyE;IACzE,WAAW,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED,oFAAoF;AACpF,MAAM,WAAW,4BAA4B;IAC5C,cAAc,CACb,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,GACpF,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,yBAAyB,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9G,aAAa,CACZ,aAAa,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,yBAAyB,EAAE,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjH,cAAc,CACb,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,OAAO,GACZ,OAAO,CACP;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,GACpE;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAC/C,CAAC;CACF;AAED,MAAM,WAAW,yCAAyC;IACzD,2FAA2F;IAC3F,uBAAuB,EAAE,MAAM,CAAC;IAChC,OAAO,EAAE,4BAA4B,CAAC;CACtC;AAED,MAAM,WAAW,oCAAoC;IACpD,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,MAAM,6BAA6B,GAAG,oCAAoC,GAAG,0BAA0B,CAAC;AAE9G,MAAM,MAAM,2BAA2B,GACpC;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,GAClB;IACA,OAAO,EAAE,IAAI,CAAC;IACd,QAAQ,EAAE,6BAA6B,CAAC;IACxC,0CAA0C;IAC1C,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CAC1D,CAAC;AAcL,wBAAsB,kCAAkC,CACvD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,EAAE,yCAAyC,GAChD,OAAO,CAAC,2BAA2B,CAAC,CAmHtC","sourcesContent":["import { isIrohRemoteWorkingDirectory, isIrohRemoteWorktreeId } from \"./protocol.ts\";\nimport { createIrohRemoteRpcErrorResponse, type IrohRemoteRpcErrorResponse } from \"./rpc-command-filter.ts\";\n\nexport const IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE = \"create_worktree\";\nexport const IROH_REMOTE_LIST_WORKTREES_RPC_TYPE = \"list_worktrees\";\nexport const IROH_REMOTE_REMOVE_WORKTREE_RPC_TYPE = \"remove_worktree\";\n\nexport const IROH_REMOTE_WORKTREE_RPC_TYPES: ReadonlySet<string> = new Set([\n\tIROH_REMOTE_CREATE_WORKTREE_RPC_TYPE,\n\tIROH_REMOTE_LIST_WORKTREES_RPC_TYPE,\n\tIROH_REMOTE_REMOVE_WORKTREE_RPC_TYPE,\n]);\n\n/**\n * Wire shape for a worktree on the iroh remote protocol. NOTE: no filesystem\n * paths ever cross the wire; checkout paths stay host-local.\n */\nexport interface IrohRemoteWorktreeSummary {\n\tid: string;\n\tbranch: string;\n\tbaseRef?: string;\n\tcreatedAt: number;\n\tsessionIds: string[];\n\tavailable?: boolean;\n\t/** Uncommitted work in the checkout (`git status --porcelain` non-empty). */\n\tdirty?: boolean;\n\t/** Branch commits vs the base ref (merge-back guidance, design §5.3). */\n\taheadBehind?: { ahead: number; behind: number };\n}\n\n/** Host-side backend the RPC helpers delegate to (the daemon's WorktreeManager). */\nexport interface IrohRemoteWorktreeRpcBackend {\n\tcreateWorktree(\n\t\tworkspaceName: string,\n\t\toptions: { id?: string; branch?: string; baseRef?: string; workingDirectory?: string },\n\t): Promise<{ ok: true; worktree: IrohRemoteWorktreeSummary } | { ok: false; error: string; detail?: string }>;\n\tlistWorktrees(\n\t\tworkspaceName: string,\n\t): Promise<{ ok: true; worktrees: IrohRemoteWorktreeSummary[] } | { ok: false; error: string; detail?: string }>;\n\tremoveWorktree(\n\t\tworkspaceName: string,\n\t\tworktreeId: string,\n\t\tforce: boolean,\n\t): Promise<\n\t\t| { ok: true; stoppedRuntimeCount: number; closedStreamCount: number }\n\t\t| { ok: false; error: string; detail?: string }\n\t>;\n}\n\nexport interface HandleIrohRemoteWorktreeRpcCommandOptions {\n\t/** The stream-authorized workspace name; cross-workspace requests are session_mismatch. */\n\tauthorizedWorkspaceName: string;\n\tbackend: IrohRemoteWorktreeRpcBackend;\n}\n\nexport interface IrohRemoteWorktreeRpcSuccessResponse {\n\tid?: string;\n\ttype: \"response\";\n\tcommand: string;\n\tsuccess: true;\n\tdata: Record<string, unknown>;\n}\n\nexport type IrohRemoteWorktreeRpcResponse = IrohRemoteWorktreeRpcSuccessResponse | IrohRemoteRpcErrorResponse;\n\nexport type IrohRemoteWorktreeRpcResult =\n\t| { handled: false }\n\t| {\n\t\t\thandled: true;\n\t\t\tresponse: IrohRemoteWorktreeRpcResponse;\n\t\t\t/** Present on success for audit hooks. */\n\t\t\taudit?: { type: string; details: Record<string, unknown> };\n\t  };\n\nconst CREATE_WORKTREE_ALLOWED_FIELDS = new Set([\n\t\"id\",\n\t\"type\",\n\t\"workspaceName\",\n\t\"worktreeName\",\n\t\"branch\",\n\t\"baseRef\",\n\t\"workingDirectory\",\n]);\nconst LIST_WORKTREES_ALLOWED_FIELDS = new Set([\"id\", \"type\", \"workspaceName\"]);\nconst REMOVE_WORKTREE_ALLOWED_FIELDS = new Set([\"id\", \"type\", \"workspaceName\", \"worktreeId\", \"force\"]);\n\nexport async function handleIrohRemoteWorktreeRpcCommand(\n\tcommand: Record<string, unknown>,\n\toptions: HandleIrohRemoteWorktreeRpcCommandOptions,\n): Promise<IrohRemoteWorktreeRpcResult> {\n\tif (typeof command.type !== \"string\" || !IROH_REMOTE_WORKTREE_RPC_TYPES.has(command.type)) {\n\t\treturn { handled: false };\n\t}\n\tconst commandType = command.type;\n\tconst id = typeof command.id === \"string\" ? command.id : undefined;\n\tconst fail = (error: string): IrohRemoteWorktreeRpcResult => ({\n\t\thandled: true,\n\t\tresponse: createIrohRemoteRpcErrorResponse(id, commandType, error),\n\t});\n\n\tconst allowedFields =\n\t\tcommandType === IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE\n\t\t\t? CREATE_WORKTREE_ALLOWED_FIELDS\n\t\t\t: commandType === IROH_REMOTE_LIST_WORKTREES_RPC_TYPE\n\t\t\t\t? LIST_WORKTREES_ALLOWED_FIELDS\n\t\t\t\t: REMOVE_WORKTREE_ALLOWED_FIELDS;\n\t// No filesystem paths inbound, ever; anything outside the allowlist is invalid.\n\tfor (const field of Object.keys(command)) {\n\t\tif (!allowedFields.has(field)) {\n\t\t\treturn fail(\"invalid_request\");\n\t\t}\n\t}\n\tif (typeof command.workspaceName !== \"string\" || command.workspaceName.length === 0) {\n\t\treturn fail(\"invalid_request\");\n\t}\n\tif (command.workspaceName !== options.authorizedWorkspaceName) {\n\t\treturn fail(\"session_mismatch\");\n\t}\n\n\tif (commandType === IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE) {\n\t\tif (command.worktreeName !== undefined && !isIrohRemoteWorktreeId(command.worktreeName)) {\n\t\t\treturn fail(\"invalid_request\");\n\t\t}\n\t\tif (command.branch !== undefined && typeof command.branch !== \"string\") {\n\t\t\treturn fail(\"invalid_request\");\n\t\t}\n\t\tif (command.baseRef !== undefined && typeof command.baseRef !== \"string\") {\n\t\t\treturn fail(\"invalid_request\");\n\t\t}\n\t\tif (command.workingDirectory !== undefined && !isIrohRemoteWorkingDirectory(command.workingDirectory)) {\n\t\t\treturn fail(\"invalid_request\");\n\t\t}\n\t\tconst created = await options.backend.createWorktree(command.workspaceName, {\n\t\t\t...(command.worktreeName === undefined ? {} : { id: command.worktreeName }),\n\t\t\t...(command.branch === undefined ? {} : { branch: command.branch }),\n\t\t\t...(command.baseRef === undefined ? {} : { baseRef: command.baseRef }),\n\t\t\t...(command.workingDirectory === undefined ? {} : { workingDirectory: command.workingDirectory }),\n\t\t});\n\t\tif (!created.ok) {\n\t\t\treturn fail(created.error);\n\t\t}\n\t\treturn {\n\t\t\thandled: true,\n\t\t\tresponse: {\n\t\t\t\t...(id === undefined ? {} : { id }),\n\t\t\t\ttype: \"response\",\n\t\t\t\tcommand: commandType,\n\t\t\t\tsuccess: true,\n\t\t\t\tdata: { worktree: toWorktreeSummary(created.worktree) },\n\t\t\t},\n\t\t\taudit: {\n\t\t\t\ttype: \"worktree_created\",\n\t\t\t\tdetails: { worktreeId: created.worktree.id, branch: created.worktree.branch },\n\t\t\t},\n\t\t};\n\t}\n\n\tif (commandType === IROH_REMOTE_LIST_WORKTREES_RPC_TYPE) {\n\t\tconst listed = await options.backend.listWorktrees(command.workspaceName);\n\t\tif (!listed.ok) {\n\t\t\treturn fail(listed.error);\n\t\t}\n\t\treturn {\n\t\t\thandled: true,\n\t\t\tresponse: {\n\t\t\t\t...(id === undefined ? {} : { id }),\n\t\t\t\ttype: \"response\",\n\t\t\t\tcommand: commandType,\n\t\t\t\tsuccess: true,\n\t\t\t\tdata: { worktrees: listed.worktrees.map((worktree) => toWorktreeSummary(worktree)) },\n\t\t\t},\n\t\t};\n\t}\n\n\tif (!isIrohRemoteWorktreeId(command.worktreeId)) {\n\t\treturn fail(\"invalid_request\");\n\t}\n\tif (command.force !== undefined && typeof command.force !== \"boolean\") {\n\t\treturn fail(\"invalid_request\");\n\t}\n\tconst force = command.force === true;\n\tconst removed = await options.backend.removeWorktree(command.workspaceName, command.worktreeId, force);\n\tif (!removed.ok) {\n\t\treturn fail(removed.error);\n\t}\n\treturn {\n\t\thandled: true,\n\t\tresponse: {\n\t\t\t...(id === undefined ? {} : { id }),\n\t\t\ttype: \"response\",\n\t\t\tcommand: commandType,\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\tworktreeId: command.worktreeId,\n\t\t\t\tremoved: true,\n\t\t\t\tstoppedRuntimeCount: removed.stoppedRuntimeCount,\n\t\t\t\tclosedStreamCount: removed.closedStreamCount,\n\t\t\t},\n\t\t},\n\t\taudit: {\n\t\t\ttype: \"worktree_removed\",\n\t\t\tdetails: { worktreeId: command.worktreeId, force, stoppedRuntimeCount: removed.stoppedRuntimeCount },\n\t\t},\n\t};\n}\n\n/** Field allowlist for the wire summary: never leak a `path` or workspaceName. */\nfunction toWorktreeSummary(worktree: IrohRemoteWorktreeSummary): IrohRemoteWorktreeSummary {\n\treturn {\n\t\tid: worktree.id,\n\t\tbranch: worktree.branch,\n\t\t...(worktree.baseRef === undefined ? {} : { baseRef: worktree.baseRef }),\n\t\tcreatedAt: worktree.createdAt,\n\t\tsessionIds: [...worktree.sessionIds],\n\t\t...(worktree.available === undefined ? {} : { available: worktree.available }),\n\t\t...(worktree.dirty === undefined ? {} : { dirty: worktree.dirty }),\n\t\t...(worktree.aheadBehind === undefined\n\t\t\t? {}\n\t\t\t: { aheadBehind: { ahead: worktree.aheadBehind.ahead, behind: worktree.aheadBehind.behind } }),\n\t};\n}\n"]}

package/dist/core/remote/iroh/worktree-rpc.js

@@ -0,0 +1,148 @@
+import { isIrohRemoteWorkingDirectory, isIrohRemoteWorktreeId } from "./protocol.js";
+import { createIrohRemoteRpcErrorResponse } from "./rpc-command-filter.js";
+export const IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE = "create_worktree";
+export const IROH_REMOTE_LIST_WORKTREES_RPC_TYPE = "list_worktrees";
+export const IROH_REMOTE_REMOVE_WORKTREE_RPC_TYPE = "remove_worktree";
+export const IROH_REMOTE_WORKTREE_RPC_TYPES = new Set([
+    IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE,
+    IROH_REMOTE_LIST_WORKTREES_RPC_TYPE,
+    IROH_REMOTE_REMOVE_WORKTREE_RPC_TYPE,
+]);
+const CREATE_WORKTREE_ALLOWED_FIELDS = new Set([
+    "id",
+    "type",
+    "workspaceName",
+    "worktreeName",
+    "branch",
+    "baseRef",
+    "workingDirectory",
+]);
+const LIST_WORKTREES_ALLOWED_FIELDS = new Set(["id", "type", "workspaceName"]);
+const REMOVE_WORKTREE_ALLOWED_FIELDS = new Set(["id", "type", "workspaceName", "worktreeId", "force"]);
+export async function handleIrohRemoteWorktreeRpcCommand(command, options) {
+    if (typeof command.type !== "string" || !IROH_REMOTE_WORKTREE_RPC_TYPES.has(command.type)) {
+        return { handled: false };
+    }
+    const commandType = command.type;
+    const id = typeof command.id === "string" ? command.id : undefined;
+    const fail = (error) => ({
+        handled: true,
+        response: createIrohRemoteRpcErrorResponse(id, commandType, error),
+    });
+    const allowedFields = commandType === IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE
+        ? CREATE_WORKTREE_ALLOWED_FIELDS
+        : commandType === IROH_REMOTE_LIST_WORKTREES_RPC_TYPE
+            ? LIST_WORKTREES_ALLOWED_FIELDS
+            : REMOVE_WORKTREE_ALLOWED_FIELDS;
+    // No filesystem paths inbound, ever; anything outside the allowlist is invalid.
+    for (const field of Object.keys(command)) {
+        if (!allowedFields.has(field)) {
+            return fail("invalid_request");
+        }
+    }
+    if (typeof command.workspaceName !== "string" || command.workspaceName.length === 0) {
+        return fail("invalid_request");
+    }
+    if (command.workspaceName !== options.authorizedWorkspaceName) {
+        return fail("session_mismatch");
+    }
+    if (commandType === IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE) {
+        if (command.worktreeName !== undefined && !isIrohRemoteWorktreeId(command.worktreeName)) {
+            return fail("invalid_request");
+        }
+        if (command.branch !== undefined && typeof command.branch !== "string") {
+            return fail("invalid_request");
+        }
+        if (command.baseRef !== undefined && typeof command.baseRef !== "string") {
+            return fail("invalid_request");
+        }
+        if (command.workingDirectory !== undefined && !isIrohRemoteWorkingDirectory(command.workingDirectory)) {
+            return fail("invalid_request");
+        }
+        const created = await options.backend.createWorktree(command.workspaceName, {
+            ...(command.worktreeName === undefined ? {} : { id: command.worktreeName }),
+            ...(command.branch === undefined ? {} : { branch: command.branch }),
+            ...(command.baseRef === undefined ? {} : { baseRef: command.baseRef }),
+            ...(command.workingDirectory === undefined ? {} : { workingDirectory: command.workingDirectory }),
+        });
+        if (!created.ok) {
+            return fail(created.error);
+        }
+        return {
+            handled: true,
+            response: {
+                ...(id === undefined ? {} : { id }),
+                type: "response",
+                command: commandType,
+                success: true,
+                data: { worktree: toWorktreeSummary(created.worktree) },
+            },
+            audit: {
+                type: "worktree_created",
+                details: { worktreeId: created.worktree.id, branch: created.worktree.branch },
+            },
+        };
+    }
+    if (commandType === IROH_REMOTE_LIST_WORKTREES_RPC_TYPE) {
+        const listed = await options.backend.listWorktrees(command.workspaceName);
+        if (!listed.ok) {
+            return fail(listed.error);
+        }
+        return {
+            handled: true,
+            response: {
+                ...(id === undefined ? {} : { id }),
+                type: "response",
+                command: commandType,
+                success: true,
+                data: { worktrees: listed.worktrees.map((worktree) => toWorktreeSummary(worktree)) },
+            },
+        };
+    }
+    if (!isIrohRemoteWorktreeId(command.worktreeId)) {
+        return fail("invalid_request");
+    }
+    if (command.force !== undefined && typeof command.force !== "boolean") {
+        return fail("invalid_request");
+    }
+    const force = command.force === true;
+    const removed = await options.backend.removeWorktree(command.workspaceName, command.worktreeId, force);
+    if (!removed.ok) {
+        return fail(removed.error);
+    }
+    return {
+        handled: true,
+        response: {
+            ...(id === undefined ? {} : { id }),
+            type: "response",
+            command: commandType,
+            success: true,
+            data: {
+                worktreeId: command.worktreeId,
+                removed: true,
+                stoppedRuntimeCount: removed.stoppedRuntimeCount,
+                closedStreamCount: removed.closedStreamCount,
+            },
+        },
+        audit: {
+            type: "worktree_removed",
+            details: { worktreeId: command.worktreeId, force, stoppedRuntimeCount: removed.stoppedRuntimeCount },
+        },
+    };
+}
+/** Field allowlist for the wire summary: never leak a `path` or workspaceName. */
+function toWorktreeSummary(worktree) {
+    return {
+        id: worktree.id,
+        branch: worktree.branch,
+        ...(worktree.baseRef === undefined ? {} : { baseRef: worktree.baseRef }),
+        createdAt: worktree.createdAt,
+        sessionIds: [...worktree.sessionIds],
+        ...(worktree.available === undefined ? {} : { available: worktree.available }),
+        ...(worktree.dirty === undefined ? {} : { dirty: worktree.dirty }),
+        ...(worktree.aheadBehind === undefined
+            ? {}
+            : { aheadBehind: { ahead: worktree.aheadBehind.ahead, behind: worktree.aheadBehind.behind } }),
+    };
+}
+//# sourceMappingURL=worktree-rpc.js.map

package/dist/core/remote/iroh/worktree-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-rpc.js","sourceRoot":"","sources":["../../../../src/core/remote/iroh/worktree-rpc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,gCAAgC,EAAmC,MAAM,yBAAyB,CAAC;AAE5G,MAAM,CAAC,MAAM,oCAAoC,GAAG,iBAAiB,CAAC;AACtE,MAAM,CAAC,MAAM,mCAAmC,GAAG,gBAAgB,CAAC;AACpE,MAAM,CAAC,MAAM,oCAAoC,GAAG,iBAAiB,CAAC;AAEtE,MAAM,CAAC,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IAC1E,oCAAoC;IACpC,mCAAmC;IACnC,oCAAoC;CACpC,CAAC,CAAC;AA+DH,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC;IAC9C,IAAI;IACJ,MAAM;IACN,eAAe;IACf,cAAc;IACd,QAAQ;IACR,SAAS;IACT,kBAAkB;CAClB,CAAC,CAAC;AACH,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;AAC/E,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvG,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACvD,OAAgC,EAChC,OAAkD,EACX;IACvC,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,8BAA8B,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IACjC,MAAM,EAAE,GAAG,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,IAAI,GAAG,CAAC,KAAa,EAA+B,EAAE,CAAC,CAAC;QAC7D,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,gCAAgC,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC;KAClE,CAAC,CAAC;IAEH,MAAM,aAAa,GAClB,WAAW,KAAK,oCAAoC;QACnD,CAAC,CAAC,8BAA8B;QAChC,CAAC,CAAC,WAAW,KAAK,mCAAmC;YACpD,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,8BAA8B,CAAC;IACpC,gFAAgF;IAChF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,OAAO,CAAC,uBAAuB,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,WAAW,KAAK,oCAAoC,EAAE,CAAC;QAC1D,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACzF,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvG,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE;YAC3E,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YAC3E,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACtE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;SACjG,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE;gBACT,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;gBACnC,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;aACvD;YACD,KAAK,EAAE;gBACN,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE;aAC7E;SACD,CAAC;IACH,CAAC;IAED,IAAI,WAAW,KAAK,mCAAmC,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO;YACN,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE;gBACT,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;gBACnC,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,EAAE;aACpF;SACD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACvG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO;QACN,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE;YACT,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;YACnC,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,IAAI;YACb,IAAI,EAAE;gBACL,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,OAAO,EAAE,IAAI;gBACb,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;gBAChD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;aAC5C;SACD;QACD,KAAK,EAAE;YACN,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE;SACpG;KACD,CAAC;AAAA,CACF;AAED,kFAAkF;AAClF,SAAS,iBAAiB,CAAC,QAAmC,EAA6B;IAC1F,OAAO;QACN,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxE,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC;QACpC,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC9E,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClE,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;KAC/F,CAAC;AAAA,CACF","sourcesContent":["import { isIrohRemoteWorkingDirectory, isIrohRemoteWorktreeId } from \"./protocol.ts\";\nimport { createIrohRemoteRpcErrorResponse, type IrohRemoteRpcErrorResponse } from \"./rpc-command-filter.ts\";\n\nexport const IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE = \"create_worktree\";\nexport const IROH_REMOTE_LIST_WORKTREES_RPC_TYPE = \"list_worktrees\";\nexport const IROH_REMOTE_REMOVE_WORKTREE_RPC_TYPE = \"remove_worktree\";\n\nexport const IROH_REMOTE_WORKTREE_RPC_TYPES: ReadonlySet<string> = new Set([\n\tIROH_REMOTE_CREATE_WORKTREE_RPC_TYPE,\n\tIROH_REMOTE_LIST_WORKTREES_RPC_TYPE,\n\tIROH_REMOTE_REMOVE_WORKTREE_RPC_TYPE,\n]);\n\n/**\n * Wire shape for a worktree on the iroh remote protocol. NOTE: no filesystem\n * paths ever cross the wire; checkout paths stay host-local.\n */\nexport interface IrohRemoteWorktreeSummary {\n\tid: string;\n\tbranch: string;\n\tbaseRef?: string;\n\tcreatedAt: number;\n\tsessionIds: string[];\n\tavailable?: boolean;\n\t/** Uncommitted work in the checkout (`git status --porcelain` non-empty). */\n\tdirty?: boolean;\n\t/** Branch commits vs the base ref (merge-back guidance, design §5.3). */\n\taheadBehind?: { ahead: number; behind: number };\n}\n\n/** Host-side backend the RPC helpers delegate to (the daemon's WorktreeManager). */\nexport interface IrohRemoteWorktreeRpcBackend {\n\tcreateWorktree(\n\t\tworkspaceName: string,\n\t\toptions: { id?: string; branch?: string; baseRef?: string; workingDirectory?: string },\n\t): Promise<{ ok: true; worktree: IrohRemoteWorktreeSummary } | { ok: false; error: string; detail?: string }>;\n\tlistWorktrees(\n\t\tworkspaceName: string,\n\t): Promise<{ ok: true; worktrees: IrohRemoteWorktreeSummary[] } | { ok: false; error: string; detail?: string }>;\n\tremoveWorktree(\n\t\tworkspaceName: string,\n\t\tworktreeId: string,\n\t\tforce: boolean,\n\t): Promise<\n\t\t| { ok: true; stoppedRuntimeCount: number; closedStreamCount: number }\n\t\t| { ok: false; error: string; detail?: string }\n\t>;\n}\n\nexport interface HandleIrohRemoteWorktreeRpcCommandOptions {\n\t/** The stream-authorized workspace name; cross-workspace requests are session_mismatch. */\n\tauthorizedWorkspaceName: string;\n\tbackend: IrohRemoteWorktreeRpcBackend;\n}\n\nexport interface IrohRemoteWorktreeRpcSuccessResponse {\n\tid?: string;\n\ttype: \"response\";\n\tcommand: string;\n\tsuccess: true;\n\tdata: Record<string, unknown>;\n}\n\nexport type IrohRemoteWorktreeRpcResponse = IrohRemoteWorktreeRpcSuccessResponse | IrohRemoteRpcErrorResponse;\n\nexport type IrohRemoteWorktreeRpcResult =\n\t| { handled: false }\n\t| {\n\t\t\thandled: true;\n\t\t\tresponse: IrohRemoteWorktreeRpcResponse;\n\t\t\t/** Present on success for audit hooks. */\n\t\t\taudit?: { type: string; details: Record<string, unknown> };\n\t  };\n\nconst CREATE_WORKTREE_ALLOWED_FIELDS = new Set([\n\t\"id\",\n\t\"type\",\n\t\"workspaceName\",\n\t\"worktreeName\",\n\t\"branch\",\n\t\"baseRef\",\n\t\"workingDirectory\",\n]);\nconst LIST_WORKTREES_ALLOWED_FIELDS = new Set([\"id\", \"type\", \"workspaceName\"]);\nconst REMOVE_WORKTREE_ALLOWED_FIELDS = new Set([\"id\", \"type\", \"workspaceName\", \"worktreeId\", \"force\"]);\n\nexport async function handleIrohRemoteWorktreeRpcCommand(\n\tcommand: Record<string, unknown>,\n\toptions: HandleIrohRemoteWorktreeRpcCommandOptions,\n): Promise<IrohRemoteWorktreeRpcResult> {\n\tif (typeof command.type !== \"string\" || !IROH_REMOTE_WORKTREE_RPC_TYPES.has(command.type)) {\n\t\treturn { handled: false };\n\t}\n\tconst commandType = command.type;\n\tconst id = typeof command.id === \"string\" ? command.id : undefined;\n\tconst fail = (error: string): IrohRemoteWorktreeRpcResult => ({\n\t\thandled: true,\n\t\tresponse: createIrohRemoteRpcErrorResponse(id, commandType, error),\n\t});\n\n\tconst allowedFields =\n\t\tcommandType === IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE\n\t\t\t? CREATE_WORKTREE_ALLOWED_FIELDS\n\t\t\t: commandType === IROH_REMOTE_LIST_WORKTREES_RPC_TYPE\n\t\t\t\t? LIST_WORKTREES_ALLOWED_FIELDS\n\t\t\t\t: REMOVE_WORKTREE_ALLOWED_FIELDS;\n\t// No filesystem paths inbound, ever; anything outside the allowlist is invalid.\n\tfor (const field of Object.keys(command)) {\n\t\tif (!allowedFields.has(field)) {\n\t\t\treturn fail(\"invalid_request\");\n\t\t}\n\t}\n\tif (typeof command.workspaceName !== \"string\" || command.workspaceName.length === 0) {\n\t\treturn fail(\"invalid_request\");\n\t}\n\tif (command.workspaceName !== options.authorizedWorkspaceName) {\n\t\treturn fail(\"session_mismatch\");\n\t}\n\n\tif (commandType === IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE) {\n\t\tif (command.worktreeName !== undefined && !isIrohRemoteWorktreeId(command.worktreeName)) {\n\t\t\treturn fail(\"invalid_request\");\n\t\t}\n\t\tif (command.branch !== undefined && typeof command.branch !== \"string\") {\n\t\t\treturn fail(\"invalid_request\");\n\t\t}\n\t\tif (command.baseRef !== undefined && typeof command.baseRef !== \"string\") {\n\t\t\treturn fail(\"invalid_request\");\n\t\t}\n\t\tif (command.workingDirectory !== undefined && !isIrohRemoteWorkingDirectory(command.workingDirectory)) {\n\t\t\treturn fail(\"invalid_request\");\n\t\t}\n\t\tconst created = await options.backend.createWorktree(command.workspaceName, {\n\t\t\t...(command.worktreeName === undefined ? {} : { id: command.worktreeName }),\n\t\t\t...(command.branch === undefined ? {} : { branch: command.branch }),\n\t\t\t...(command.baseRef === undefined ? {} : { baseRef: command.baseRef }),\n\t\t\t...(command.workingDirectory === undefined ? {} : { workingDirectory: command.workingDirectory }),\n\t\t});\n\t\tif (!created.ok) {\n\t\t\treturn fail(created.error);\n\t\t}\n\t\treturn {\n\t\t\thandled: true,\n\t\t\tresponse: {\n\t\t\t\t...(id === undefined ? {} : { id }),\n\t\t\t\ttype: \"response\",\n\t\t\t\tcommand: commandType,\n\t\t\t\tsuccess: true,\n\t\t\t\tdata: { worktree: toWorktreeSummary(created.worktree) },\n\t\t\t},\n\t\t\taudit: {\n\t\t\t\ttype: \"worktree_created\",\n\t\t\t\tdetails: { worktreeId: created.worktree.id, branch: created.worktree.branch },\n\t\t\t},\n\t\t};\n\t}\n\n\tif (commandType === IROH_REMOTE_LIST_WORKTREES_RPC_TYPE) {\n\t\tconst listed = await options.backend.listWorktrees(command.workspaceName);\n\t\tif (!listed.ok) {\n\t\t\treturn fail(listed.error);\n\t\t}\n\t\treturn {\n\t\t\thandled: true,\n\t\t\tresponse: {\n\t\t\t\t...(id === undefined ? {} : { id }),\n\t\t\t\ttype: \"response\",\n\t\t\t\tcommand: commandType,\n\t\t\t\tsuccess: true,\n\t\t\t\tdata: { worktrees: listed.worktrees.map((worktree) => toWorktreeSummary(worktree)) },\n\t\t\t},\n\t\t};\n\t}\n\n\tif (!isIrohRemoteWorktreeId(command.worktreeId)) {\n\t\treturn fail(\"invalid_request\");\n\t}\n\tif (command.force !== undefined && typeof command.force !== \"boolean\") {\n\t\treturn fail(\"invalid_request\");\n\t}\n\tconst force = command.force === true;\n\tconst removed = await options.backend.removeWorktree(command.workspaceName, command.worktreeId, force);\n\tif (!removed.ok) {\n\t\treturn fail(removed.error);\n\t}\n\treturn {\n\t\thandled: true,\n\t\tresponse: {\n\t\t\t...(id === undefined ? {} : { id }),\n\t\t\ttype: \"response\",\n\t\t\tcommand: commandType,\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\tworktreeId: command.worktreeId,\n\t\t\t\tremoved: true,\n\t\t\t\tstoppedRuntimeCount: removed.stoppedRuntimeCount,\n\t\t\t\tclosedStreamCount: removed.closedStreamCount,\n\t\t\t},\n\t\t},\n\t\taudit: {\n\t\t\ttype: \"worktree_removed\",\n\t\t\tdetails: { worktreeId: command.worktreeId, force, stoppedRuntimeCount: removed.stoppedRuntimeCount },\n\t\t},\n\t};\n}\n\n/** Field allowlist for the wire summary: never leak a `path` or workspaceName. */\nfunction toWorktreeSummary(worktree: IrohRemoteWorktreeSummary): IrohRemoteWorktreeSummary {\n\treturn {\n\t\tid: worktree.id,\n\t\tbranch: worktree.branch,\n\t\t...(worktree.baseRef === undefined ? {} : { baseRef: worktree.baseRef }),\n\t\tcreatedAt: worktree.createdAt,\n\t\tsessionIds: [...worktree.sessionIds],\n\t\t...(worktree.available === undefined ? {} : { available: worktree.available }),\n\t\t...(worktree.dirty === undefined ? {} : { dirty: worktree.dirty }),\n\t\t...(worktree.aheadBehind === undefined\n\t\t\t? {}\n\t\t\t: { aheadBehind: { ahead: worktree.aheadBehind.ahead, behind: worktree.aheadBehind.behind } }),\n\t};\n}\n"]}

package/dist/core/resolve-config-value.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Resolve configuration values that may be shell commands, environment variables, or literals.
+ * Used by auth-storage.ts and model-registry.ts.
+ */
+export declare function getConfigValueEnvVarName(config: string): string | undefined;
+export declare function getConfigValueEnvVarNames(config: string): string[];
+export declare function getMissingConfigValueEnvVarNames(config: string, env?: Record<string, string>): string[];
+export declare function isCommandConfigValue(config: string): boolean;
+export declare function isConfigValueConfigured(config: string, env?: Record<string, string>): boolean;
+/**
+ * Resolve a config value (API key, header value, etc.) to an actual value.
+ * - If starts with "!", executes the rest as a shell command and uses stdout (cached)
+ * - Interpolates "$ENV_VAR" or "${ENV_VAR}" references with the named environment variable
+ * - In non-command values, "$$" escapes a literal "$" and "$!" escapes a literal "!"
+ * - Otherwise treats the value as a literal
+ */
+export declare function resolveConfigValue(config: string, env?: Record<string, string>): string | undefined;
+/**
+ * Resolve all header values using the same resolution logic as API keys.
+ */
+export declare function resolveConfigValueUncached(config: string, env?: Record<string, string>): string | undefined;
+export declare function resolveConfigValueOrThrow(config: string, description: string, env?: Record<string, string>): string;
+/**
+ * Resolve all header values using the same resolution logic as API keys.
+ */
+export declare function resolveHeaders(headers: Record<string, string> | undefined, env?: Record<string, string>): Record<string, string> | undefined;
+export declare function resolveHeadersOrThrow(headers: Record<string, string> | undefined, description: string, env?: Record<string, string>): Record<string, string> | undefined;
+/** Clear the config value command cache. Exported for testing. */
+export declare function clearConfigValueCache(): void;
+//# sourceMappingURL=resolve-config-value.d.ts.map

package/dist/core/resolve-config-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-config-value.d.ts","sourceRoot":"","sources":["../../src/core/resolve-config-value.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA+GH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI3E;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAGlE;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAEvG;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE5D;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAE7F;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAMnG;AAiED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAM3G;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAsBnH;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC3C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAUpC;AAED,wBAAgB,qBAAqB,CACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC3C,WAAW,EAAE,MAAM,EACnB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAOpC;AAED,kEAAkE;AAClE,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C","sourcesContent":["/**\n * Resolve configuration values that may be shell commands, environment variables, or literals.\n * Used by auth-storage.ts and model-registry.ts.\n */\n\nimport { execSync, spawnSync } from \"child_process\";\nimport { getShellConfig } from \"../utils/shell.ts\";\n\n// Cache for shell command results (persists for process lifetime)\nconst commandResultCache = new Map<string, string | undefined>();\nconst ENV_VAR_NAME_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;\nconst ENV_VAR_NAME_PREFIX_RE = /^[A-Za-z_][A-Za-z0-9_]*/;\n\ntype TemplatePart = { type: \"literal\"; value: string } | { type: \"env\"; name: string };\n\ntype ConfigValueReference = { type: \"command\"; config: string } | { type: \"template\"; parts: TemplatePart[] };\n\nfunction appendLiteral(parts: TemplatePart[], value: string): void {\n\tif (!value) return;\n\tconst previousPart = parts[parts.length - 1];\n\tif (previousPart?.type === \"literal\") {\n\t\tpreviousPart.value += value;\n\t\treturn;\n\t}\n\tparts.push({ type: \"literal\", value });\n}\n\nfunction parseConfigValueTemplate(config: string): TemplatePart[] {\n\tconst parts: TemplatePart[] = [];\n\tlet index = 0;\n\n\twhile (index < config.length) {\n\t\tconst dollarIndex = config.indexOf(\"$\", index);\n\t\tif (dollarIndex < 0) {\n\t\t\tappendLiteral(parts, config.slice(index));\n\t\t\tbreak;\n\t\t}\n\n\t\tappendLiteral(parts, config.slice(index, dollarIndex));\n\t\tconst nextChar = config[dollarIndex + 1];\n\n\t\tif (nextChar === \"$\" || nextChar === \"!\") {\n\t\t\tappendLiteral(parts, nextChar);\n\t\t\tindex = dollarIndex + 2;\n\t\t\tcontinue;\n\t\t}\n\n\t\tif (nextChar === \"{\") {\n\t\t\tconst endIndex = config.indexOf(\"}\", dollarIndex + 2);\n\t\t\tif (endIndex < 0) {\n\t\t\t\tappendLiteral(parts, \"$\");\n\t\t\t\tindex = dollarIndex + 1;\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\tconst name = config.slice(dollarIndex + 2, endIndex);\n\t\t\tif (ENV_VAR_NAME_RE.test(name)) {\n\t\t\t\tparts.push({ type: \"env\", name });\n\t\t\t} else {\n\t\t\t\tappendLiteral(parts, config.slice(dollarIndex, endIndex + 1));\n\t\t\t}\n\t\t\tindex = endIndex + 1;\n\t\t\tcontinue;\n\t\t}\n\n\t\tconst match = config.slice(dollarIndex + 1).match(ENV_VAR_NAME_PREFIX_RE);\n\t\tif (match) {\n\t\t\tparts.push({ type: \"env\", name: match[0] });\n\t\t\tindex = dollarIndex + 1 + match[0].length;\n\t\t\tcontinue;\n\t\t}\n\n\t\tappendLiteral(parts, \"$\");\n\t\tindex = dollarIndex + 1;\n\t}\n\n\treturn parts;\n}\n\nfunction parseConfigValueReference(config: string): ConfigValueReference {\n\tif (config.startsWith(\"!\")) {\n\t\treturn { type: \"command\", config };\n\t}\n\n\treturn { type: \"template\", parts: parseConfigValueTemplate(config) };\n}\n\nfunction resolveEnvConfigValue(name: string, env?: Record<string, string>): string | undefined {\n\treturn env?.[name] || process.env[name] || undefined;\n}\n\nfunction getTemplateEnvVarNames(parts: TemplatePart[]): string[] {\n\tconst names: string[] = [];\n\tfor (const part of parts) {\n\t\tif (part.type !== \"env\" || names.includes(part.name)) continue;\n\t\tnames.push(part.name);\n\t}\n\treturn names;\n}\n\nfunction resolveTemplate(parts: TemplatePart[], env?: Record<string, string>): string | undefined {\n\tlet resolved = \"\";\n\tfor (const part of parts) {\n\t\tif (part.type === \"literal\") {\n\t\t\tresolved += part.value;\n\t\t\tcontinue;\n\t\t}\n\t\tconst envValue = resolveEnvConfigValue(part.name, env);\n\t\tif (envValue === undefined) return undefined;\n\t\tresolved += envValue;\n\t}\n\treturn resolved;\n}\n\nexport function getConfigValueEnvVarName(config: string): string | undefined {\n\tconst reference = parseConfigValueReference(config);\n\tif (reference.type !== \"template\") return undefined;\n\treturn reference.parts.length === 1 && reference.parts[0]?.type === \"env\" ? reference.parts[0].name : undefined;\n}\n\nexport function getConfigValueEnvVarNames(config: string): string[] {\n\tconst reference = parseConfigValueReference(config);\n\treturn reference.type === \"template\" ? getTemplateEnvVarNames(reference.parts) : [];\n}\n\nexport function getMissingConfigValueEnvVarNames(config: string, env?: Record<string, string>): string[] {\n\treturn getConfigValueEnvVarNames(config).filter((name) => resolveEnvConfigValue(name, env) === undefined);\n}\n\nexport function isCommandConfigValue(config: string): boolean {\n\treturn parseConfigValueReference(config).type === \"command\";\n}\n\nexport function isConfigValueConfigured(config: string, env?: Record<string, string>): boolean {\n\treturn getMissingConfigValueEnvVarNames(config, env).length === 0;\n}\n\n/**\n * Resolve a config value (API key, header value, etc.) to an actual value.\n * - If starts with \"!\", executes the rest as a shell command and uses stdout (cached)\n * - Interpolates \"$ENV_VAR\" or \"${ENV_VAR}\" references with the named environment variable\n * - In non-command values, \"$$\" escapes a literal \"$\" and \"$!\" escapes a literal \"!\"\n * - Otherwise treats the value as a literal\n */\nexport function resolveConfigValue(config: string, env?: Record<string, string>): string | undefined {\n\tconst reference = parseConfigValueReference(config);\n\tif (reference.type === \"command\") {\n\t\treturn executeCommand(reference.config);\n\t}\n\treturn resolveTemplate(reference.parts, env);\n}\n\nfunction executeWithConfiguredShell(command: string): { executed: boolean; value: string | undefined } {\n\ttry {\n\t\tconst { shell, args } = getShellConfig();\n\t\tconst result = spawnSync(shell, [...args, command], {\n\t\t\tencoding: \"utf-8\",\n\t\t\ttimeout: 10000,\n\t\t\tstdio: [\"ignore\", \"pipe\", \"ignore\"],\n\t\t\tshell: false,\n\t\t\twindowsHide: true,\n\t\t});\n\n\t\tif (result.error) {\n\t\t\tconst error = result.error as NodeJS.ErrnoException;\n\t\t\tif (error.code === \"ENOENT\") {\n\t\t\t\treturn { executed: false, value: undefined };\n\t\t\t}\n\t\t\treturn { executed: true, value: undefined };\n\t\t}\n\n\t\tif (result.status !== 0) {\n\t\t\treturn { executed: true, value: undefined };\n\t\t}\n\n\t\tconst value = (result.stdout ?? \"\").trim();\n\t\treturn { executed: true, value: value || undefined };\n\t} catch {\n\t\treturn { executed: false, value: undefined };\n\t}\n}\n\nfunction executeWithDefaultShell(command: string): string | undefined {\n\ttry {\n\t\tconst output = execSync(command, {\n\t\t\tencoding: \"utf-8\",\n\t\t\ttimeout: 10000,\n\t\t\tstdio: [\"ignore\", \"pipe\", \"ignore\"],\n\t\t});\n\t\treturn output.trim() || undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction executeCommandUncached(commandConfig: string): string | undefined {\n\tconst command = commandConfig.slice(1);\n\treturn process.platform === \"win32\"\n\t\t? (() => {\n\t\t\t\tconst configuredResult = executeWithConfiguredShell(command);\n\t\t\t\treturn configuredResult.executed ? configuredResult.value : executeWithDefaultShell(command);\n\t\t\t})()\n\t\t: executeWithDefaultShell(command);\n}\n\nfunction executeCommand(commandConfig: string): string | undefined {\n\tif (commandResultCache.has(commandConfig)) {\n\t\treturn commandResultCache.get(commandConfig);\n\t}\n\n\tconst result = executeCommandUncached(commandConfig);\n\tcommandResultCache.set(commandConfig, result);\n\treturn result;\n}\n\n/**\n * Resolve all header values using the same resolution logic as API keys.\n */\nexport function resolveConfigValueUncached(config: string, env?: Record<string, string>): string | undefined {\n\tconst reference = parseConfigValueReference(config);\n\tif (reference.type === \"command\") {\n\t\treturn executeCommandUncached(reference.config);\n\t}\n\treturn resolveTemplate(reference.parts, env);\n}\n\nexport function resolveConfigValueOrThrow(config: string, description: string, env?: Record<string, string>): string {\n\tconst resolvedValue = resolveConfigValueUncached(config, env);\n\tif (resolvedValue !== undefined) {\n\t\treturn resolvedValue;\n\t}\n\n\tconst reference = parseConfigValueReference(config);\n\tif (reference.type === \"command\") {\n\t\tthrow new Error(`Failed to resolve ${description} from shell command: ${reference.config.slice(1)}`);\n\t}\n\n\tif (reference.type === \"template\") {\n\t\tconst missingEnvVars = getMissingConfigValueEnvVarNames(config, env);\n\t\tif (missingEnvVars.length === 1) {\n\t\t\tthrow new Error(`Failed to resolve ${description} from environment variable: ${missingEnvVars[0]}`);\n\t\t}\n\t\tif (missingEnvVars.length > 1) {\n\t\t\tthrow new Error(`Failed to resolve ${description} from environment variables: ${missingEnvVars.join(\", \")}`);\n\t\t}\n\t}\n\n\tthrow new Error(`Failed to resolve ${description}`);\n}\n\n/**\n * Resolve all header values using the same resolution logic as API keys.\n */\nexport function resolveHeaders(\n\theaders: Record<string, string> | undefined,\n\tenv?: Record<string, string>,\n): Record<string, string> | undefined {\n\tif (!headers) return undefined;\n\tconst resolved: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries(headers)) {\n\t\tconst resolvedValue = resolveConfigValue(value, env);\n\t\tif (resolvedValue) {\n\t\t\tresolved[key] = resolvedValue;\n\t\t}\n\t}\n\treturn Object.keys(resolved).length > 0 ? resolved : undefined;\n}\n\nexport function resolveHeadersOrThrow(\n\theaders: Record<string, string> | undefined,\n\tdescription: string,\n\tenv?: Record<string, string>,\n): Record<string, string> | undefined {\n\tif (!headers) return undefined;\n\tconst resolved: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries(headers)) {\n\t\tresolved[key] = resolveConfigValueOrThrow(value, `${description} header \"${key}\"`, env);\n\t}\n\treturn Object.keys(resolved).length > 0 ? resolved : undefined;\n}\n\n/** Clear the config value command cache. Exported for testing. */\nexport function clearConfigValueCache(): void {\n\tcommandResultCache.clear();\n}\n"]}