@inkeep/open-knowledge 0.59.0-beta.40 → 0.59.0-beta.42

package/dist/constants-C8qimQe2.mjs

@@ -0,0 +1,2 @@
+import"./src-BD1wHyiU.mjs";var e=`0.59.0-beta.42`;const t=`config.yml`,n=e;export{n,t};
+//# sourceMappingURL=constants-C8qimQe2.mjs.map

package/dist/index.d.mts

@@ -13077,6 +13077,17 @@ interface BundleExtraFile {
   zipName?: string;
 }
 //#endregion
+//#region ../core/src/acp/thread-protocol.d.ts
+/**
+ * What provisioning did to OK's managed Pi bridge extension file. Mirrors the
+ * action union the CLI provisioning primitive returns; the boot wiring that
+ * hands that primitive to the thread manager is where the two are checked
+ * against each other, so a rename on either side fails there.
+ */
+type PiBridgeWriteAction = 'unchanged' | 'written' | 'refreshed' | 'refused-foreign' | 'refused-unreadable' | 'failed';
+/** What provisioning did to Pi's folder-trust store (same mirroring). */
+type PiTrustWriteAction = 'already-trusted' | 'added' | 'skipped' | 'refused-unreadable' | 'failed';
+//#endregion
 //#region ../server/src/config/schema.d.ts
 type Config = Config$1;
 //#endregion
@@ -13634,6 +13645,97 @@ declare function classifyExistingMcpEntry(target: EditorMcpTarget, cwd: string,
  */
 declare function detectInstalledEditors(cwd: string, home?: string): EditorId[];
 //#endregion
+//#region src/commands/pi-acp-bridge.d.ts
+/**
+ * State of the managed bridge file at `<cwd>/.pi/extensions/open-knowledge.ts`.
+ *
+ * `own-stale` covers both an older published version and a dev-mode drop —
+ * everything OK recognizes as its own but would rewrite. `foreign` is a file
+ * OK did not write; `unreadable` is a present file OK could not inspect
+ * (oversize, unreadable bytes). Both are refusal states, never overwrite
+ * targets.
+ */
+type PiBridgeFileState = 'absent' | 'own-current' | 'own-stale' | 'foreign' | 'unreadable';
+/**
+ * Whether Pi will load project extensions for this cwd. `unreadable` means
+ * `trust.json` exists but is corrupt or not a JSON object — OK can neither
+ * confirm trust nor safely rewrite the file.
+ */
+type PiTrustState = 'trusted' | 'untrusted' | 'unreadable';
+interface PiBridgeState {
+  /** Absolute, normalized cwd — the exact key used in Pi's trust store. */
+  cwd: string;
+  /** Absolute path of OK's managed Pi bridge extension for this project. */
+  bridgePath: string;
+  /** Absolute path of Pi's folder-trust store. */
+  trustPath: string;
+  bridge: PiBridgeFileState;
+  trust: PiTrustState;
+  /**
+   * True when Pi would load OK's bridge for this cwd as things stand: an
+   * own-* bridge file (a stale one still registers OK's tools) in a trusted
+   * folder. Deliberately narrower than "nothing to do" — a stale bridge is
+   * loadable AND worth refreshing.
+   */
+  bridgeLoadable: boolean;
+  /**
+   * Extension filenames already in `<cwd>/.pi/extensions/` that OK did not
+   * write, so a consent prompt can name what else trusting this folder turns
+   * on. Trust is folder-scoped, and "approve" reads very differently against
+   * an empty folder than against one already holding somebody else's code.
+   * Empty when the folder is absent or unreadable — absence of evidence, so
+   * callers must not present it as "nothing else here".
+   */
+  otherExtensions: readonly string[];
+}
+/**
+ * What {@link removePiTrustEntry} did. `kept-shared` is the deliberate no-op:
+ * another extension still lives in the folder, and the trust entry that keeps
+ * it loading is not OK's to revoke on the way out.
+ */
+type PiTrustRemoveAction = 'removed' | 'not-present' | 'kept-shared'
+/**
+ * Kept because OK could not read the extensions folder to find out whether
+ * anything else depends on the grant. Distinct from `kept-shared`: that one
+ * is a verified "yes, something needs it", this one is "unknown" — and an
+ * inconclusive check has to take the conservative branch.
+ */
+| 'kept-unverified' | 'refused-unreadable' | 'failed';
+interface EnsurePiBridgeResult {
+  /** True only when BOTH halves hold: bridge is OK's own and cwd is trusted. */
+  ok: boolean;
+  cwd: string;
+  bridgePath: string;
+  trustPath: string;
+  bridge: PiBridgeWriteAction;
+  trust: PiTrustWriteAction;
+  /** Present on the `failed` and `refused-unreadable` outcomes only. */
+  error?: string;
+}
+/**
+ * Read-only report of both halves of the Pi bridge for `cwd`. Never throws;
+ * every unreadable surface resolves to its own state so a caller can tell
+ * "not provisioned" from "cannot inspect".
+ *
+ * `home` overrides the user home used to locate Pi's agent dir (test hook).
+ */
+declare function probePiBridgeState(cwd: string, home?: string): PiBridgeState;
+/**
+ * Idempotently provision both halves: drop (or refresh) OK's managed bridge
+ * extension for `cwd`, then add `cwd -> true` to Pi's trust store.
+ *
+ * Ordering is load-bearing — the trust write only runs once the bridge file is
+ * OK's own, because trusting the folder enables EVERY extension in it. A
+ * foreign or unreadable file at the managed path stops the whole call with a
+ * structured refusal; it is never overwritten.
+ *
+ * `options` defaults to the published launcher shape that `ok init` writes;
+ * pass `{ mode: 'dev' }` to match a dev-server install. The generated source
+ * is byte-deterministic per `options`, so a re-run with the same value is a
+ * no-op on disk.
+ */
+declare function ensurePiBridge(cwd: string, options?: McpInstallOptions, home?: string): Promise<EnsurePiBridgeResult>;
+//#endregion
 //#region src/commands/mcp-config-removal.d.ts
 /**
  * Outcome of a surgical MCP-entry removal.
@@ -13651,6 +13753,15 @@ declare function detectInstalledEditors(cwd: string, home?: string): EditorId[];
  */
 type McpRemoveOutcome = {
   kind: 'removed';
+  /**
+   * Pi only: what removing the bridge did to Pi's folder-trust entry, the
+   * other half OK wrote. Absent for every editor whose integration is a
+   * config entry and nothing else. Callers must report anything but
+   * `removed`/`not-present` — the bridge file going away while the grant
+   * stays is a half-finished removal, and silence there reads as clean.
+   */
+  trust?: PiTrustRemoveAction; /** Diagnostic detail for a trust outcome that failed or was refused. */
+  trustError?: string;
 } | {
   kind: 'not-present';
 } | {
@@ -14331,5 +14442,5 @@ interface ReportBundleResult {
  */
 declare function collectReportBundle(opts: CollectReportBundleOptions): Promise<ReportBundleResult>;
 //#endregion
-export { ALL_EDITOR_IDS, type BundleExtraFile, type BundleLogger, type CollectReportBundleOptions, EDITOR_LABELS, EDITOR_TARGETS, type EditorId, type EditorMcpResult, type EditorMcpTarget, type ExcludeWriteResult, type ExpectedShareRepo, type GhDetectResult, HOSTS_WITH_USER_SKILL_DIR, type IntegrationWriteOutcome, LAUNCH_CONFIG_NAME, type LanguageMetadata, type LoadConfigResult, type McpConfigDeclineEvent, type McpConfigDeclineScope, type McpConfigMigrateEvent, type McpConfigMigrateScope, type McpDeclineReason, type McpEntryClassification, type McpInstallOptions, type McpRemoveOutcome, type OwnManagedMcpEntryHit, PATH_SHIM_BEGIN, PATH_SHIM_BLOCK_RE, PATH_SHIM_END, type ParsedGitHubBlobUrl, type ParsedGitHubShareTarget, type ParsedGitHubTreeUrl, type PathDiscovery, type PathInstallConsent, type PathInstallMarker, type PreviewResult, type ProjectAiIntegrationsResult, type ProjectSkillRemoveResult, type ProjectSkillResult, type ReportBundleLevel, type ReportBundleResult, type ReportBundleSummary, type ResolveProjectRootOptions, type ResolveProjectRootResult, type ShareFolderValidationResult, type SharingMode, type SkillBundleTarget, type TokenStore, type TrackedRefusal, type UserMcpConfigsOptions, addOkPathsToGitExclude, assertProjectPathSafe, buildManagedServerEntry, buildMcpConfigDeclineEvent, buildMcpConfigMigrateEvent, classifyExistingMcpEntry, collectReportBundle, createTokenStore, defaultBugReportZipPath, detectGh, detectInstalledEditors, editorConfigPathDisplay, editorEntryLocator, formatTrackedRemediation, getExcludedOkPaths, getNativeTomlMcpEditor, getOkArtifactPaths, isEntryUpToDate, isOwnManagedEntry, loadConfig, makeLazyProbeTokenStore, okBugReportsDir, parseGitHubBlobUrl, parseGitHubShareUrl, parseGitHubTreeUrl, parseGitUrl, pathInstallMarkerPath, previewContent, probeOwnManagedEditorMcpEntry, probeTrackedOkPaths, readExistingMcpEntry, readSharingMode, readSkillsShared, redactSecrets as redactContent, removeOkPathsFromGitExclude, removeOwnMcpEntry, removeProjectSkill, removeUserGlobalSkillBundle, resolveProjectRoot, runStop, setSkillsShared, truncatePriorEntry, userGlobalSkillBundleTargets, validateLocalFolderForShare, writeEditorMcpConfig, writeProjectAiIntegrations, writeProjectSkill, writeUserMcpConfigs };
+export { ALL_EDITOR_IDS, type BundleExtraFile, type BundleLogger, type CollectReportBundleOptions, EDITOR_LABELS, EDITOR_TARGETS, type EditorId, type EditorMcpResult, type EditorMcpTarget, type EnsurePiBridgeResult, type ExcludeWriteResult, type ExpectedShareRepo, type GhDetectResult, HOSTS_WITH_USER_SKILL_DIR, type IntegrationWriteOutcome, LAUNCH_CONFIG_NAME, type LanguageMetadata, type LoadConfigResult, type McpConfigDeclineEvent, type McpConfigDeclineScope, type McpConfigMigrateEvent, type McpConfigMigrateScope, type McpDeclineReason, type McpEntryClassification, type McpInstallOptions, type McpRemoveOutcome, type OwnManagedMcpEntryHit, PATH_SHIM_BEGIN, PATH_SHIM_BLOCK_RE, PATH_SHIM_END, type ParsedGitHubBlobUrl, type ParsedGitHubShareTarget, type ParsedGitHubTreeUrl, type PathDiscovery, type PathInstallConsent, type PathInstallMarker, type PiBridgeFileState, type PiBridgeState, type PiBridgeWriteAction, type PiTrustState, type PiTrustWriteAction, type PreviewResult, type ProjectAiIntegrationsResult, type ProjectSkillRemoveResult, type ProjectSkillResult, type ReportBundleLevel, type ReportBundleResult, type ReportBundleSummary, type ResolveProjectRootOptions, type ResolveProjectRootResult, type ShareFolderValidationResult, type SharingMode, type SkillBundleTarget, type TokenStore, type TrackedRefusal, type UserMcpConfigsOptions, addOkPathsToGitExclude, assertProjectPathSafe, buildManagedServerEntry, buildMcpConfigDeclineEvent, buildMcpConfigMigrateEvent, classifyExistingMcpEntry, collectReportBundle, createTokenStore, defaultBugReportZipPath, detectGh, detectInstalledEditors, editorConfigPathDisplay, editorEntryLocator, ensurePiBridge, formatTrackedRemediation, getExcludedOkPaths, getNativeTomlMcpEditor, getOkArtifactPaths, isEntryUpToDate, isOwnManagedEntry, loadConfig, makeLazyProbeTokenStore, okBugReportsDir, parseGitHubBlobUrl, parseGitHubShareUrl, parseGitHubTreeUrl, parseGitUrl, pathInstallMarkerPath, previewContent, probeOwnManagedEditorMcpEntry, probePiBridgeState, probeTrackedOkPaths, readExistingMcpEntry, readSharingMode, readSkillsShared, redactSecrets as redactContent, removeOkPathsFromGitExclude, removeOwnMcpEntry, removeProjectSkill, removeUserGlobalSkillBundle, resolveProjectRoot, runStop, setSkillsShared, truncatePriorEntry, userGlobalSkillBundleTargets, validateLocalFolderForShare, writeEditorMcpConfig, writeProjectAiIntegrations, writeProjectSkill, writeUserMcpConfigs };
 //# sourceMappingURL=index.d.mts.map