@jive-sh/skill-sync 0.1.2-latest-linux-arm64 → 0.1.2

package/dist/entrypoints/skill-sync.js

@@ -0,0 +1,135 @@
+import { createServer } from "node:http";
+import { spawn } from "node:child_process";
+import { existsSync, rmSync, writeFileSync } from "node:fs";
+import { Command } from "commander";
+import { CONFIG_PATH, TOKEN_PATH, loadConfig, loadSettings, loadState, saveState } from "../internal/config";
+import { syncOnce } from "../internal/sync";
+/**
+ * The CLI that accompanies the daemon.
+ *
+ * The daemon never authenticates anyone — it reads a token the CLI left behind and nothing more. Signing
+ * in needs a browser and a person, which a process started at login has neither of, and a daemon that
+ * could prompt for credentials would be a daemon that prompts you at every login.
+ */
+const program = new Command("skill-sync")
+    .description("keep one skills directory identical across every machine you work on");
+program
+    .command("login")
+    .description("verify with your passkey in the browser and store this machine's sync token")
+    .action(async () => {
+    // A missing token is exactly what we are here to fix, so only the settings have to be usable.
+    const settings = loadSettings();
+    if (settings === undefined) {
+        console.error(`Fill in ${CONFIG_PATH} with an endpoint, a machine name and a skillsDir first.`);
+        process.exit(1);
+    }
+    const token = await captureToken(settings.endpoint, settings.machine);
+    writeFileSync(TOKEN_PATH, `${JSON.stringify({ token }, null, 2)}\n`, { mode: 0o600 });
+    console.log(`Signed in. Token saved to ${TOKEN_PATH}`);
+});
+program
+    .command("logout")
+    .description("forget this machine's sync token")
+    .action(async () => {
+    const loaded = loadConfig();
+    if (loaded.ok) {
+        // Revoke first: if this fails, the token is still on disk and you can try again. Deleting it first
+        // would leave a live token on the server that nobody can revoke any more.
+        const response = await fetch(`${loaded.config.endpoint}/cli/token`, {
+            method: "DELETE",
+            headers: { authorization: `Bearer ${loaded.config.token}` },
+        });
+        console.log(response.ok ? "Revoked on the server." : `Server revoke failed (${response.status}).`);
+    }
+    rmSync(TOKEN_PATH, { force: true });
+    console.log(`Removed ${TOKEN_PATH}`);
+});
+program
+    .command("status")
+    .description("show what this machine is configured to sync, and whether it can")
+    .action(async () => {
+    const loaded = loadConfig();
+    if (!loaded.ok) {
+        console.log(`Not ready: ${loaded.reason}`);
+        return;
+    }
+    const { endpoint, skillsDir, machine } = loaded.config;
+    console.log(`machine     ${machine}`);
+    console.log(`skills      ${skillsDir}${existsSync(skillsDir) ? "" : "  (does not exist)"}`);
+    console.log(`endpoint    ${endpoint}`);
+    console.log(`settings    ${CONFIG_PATH}`);
+    console.log(`cursor      ${loadState().cursor}`);
+    const response = await fetch(`${endpoint}/files?since=0`, {
+        headers: { authorization: `Bearer ${loaded.config.token}` },
+    });
+    console.log(response.ok
+        ? `server      reachable, ${(await response.json()).files.length} file(s)`
+        : `server      ${response.status} ${response.statusText} — try \`skill-sync login\``);
+});
+program
+    .command("sync")
+    .description("run one sync cycle now instead of waiting for the daemon")
+    .action(async () => {
+    const loaded = loadConfig();
+    if (!loaded.ok) {
+        console.error(`Not ready: ${loaded.reason}`);
+        process.exit(1);
+    }
+    const state = loadState();
+    const report = await syncOnce(loaded.config, state);
+    saveState(state);
+    for (const path of report.pulled)
+        console.log(`pulled  ${path}`);
+    for (const path of report.pushed)
+        console.log(`pushed  ${path}`);
+    for (const path of report.deletedLocally)
+        console.log(`deleted ${path}`);
+    for (const path of report.conflicts)
+        console.log(`CONFLICT ${path} — your copy is at ${path}.local`);
+    for (const path of report.rejected)
+        console.log(`REJECTED ${path}`);
+    if (Object.values(report).every((list) => list.length === 0))
+        console.log("already in sync");
+});
+program.parse();
+if (process.argv.length <= 2)
+    program.help();
+/**
+ * Opens the browser at the service's login endpoint and waits for it to come back with a token.
+ *
+ * The browser does the authenticating, with a passkey for the service's domain; this only has to be
+ * listening when it finishes. The listener is bound to 127.0.0.1 so nothing off this machine can receive
+ * the redirect, and the port is whatever the OS hands out so two machines — or two attempts — never
+ * contend for one.
+ */
+async function captureToken(endpoint, machine) {
+    return await new Promise((resolve, reject) => {
+        const server = createServer((request, response) => {
+            const token = new URL(request.url ?? "/", "http://127.0.0.1").searchParams.get("token");
+            response.writeHead(200, { "content-type": "text/html" });
+            response.end(token
+                ? "<p>Signed in. You can close this tab.</p>"
+                : "<p>No token in the redirect. Check the service logs.</p>");
+            server.close();
+            token ? resolve(token) : reject(new Error("the redirect carried no token"));
+        });
+        server.listen(0, "127.0.0.1", () => {
+            const port = server.address().port;
+            const url = `${endpoint}/cli/login?port=${port}&machine=${encodeURIComponent(machine)}`;
+            console.log(`Opening ${url}`);
+            openBrowser(url);
+        });
+        setTimeout(() => {
+            server.close();
+            reject(new Error("timed out waiting for the browser"));
+        }, 180_000).unref();
+    });
+}
+function openBrowser(url) {
+    const command = process.platform === "darwin" ? "open"
+        : process.platform === "win32" ? "cmd"
+            : "xdg-open";
+    const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+    spawn(command, args, { stdio: "ignore", detached: true }).unref();
+}
+//# sourceMappingURL=skill-sync.js.map

package/dist/entrypoints/skill-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-sync.js","sourceRoot":"","sources":["../../../../src/entrypoints/skill-sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC7G,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C;;;;;;GAMG;AAEH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,YAAY,CAAC;KACtC,WAAW,CAAC,sEAAsE,CAAC,CAAC;AAEvF,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,6EAA6E,CAAC;KAC1F,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,8FAA8F;IAC9F,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,WAAW,WAAW,0DAA0D,CAAC,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtE,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;AACzD,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,kCAAkC,CAAC;KAC/C,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,mGAAmG;QACnG,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,YAAY,EAAE;YAClE,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;SAC5D,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,EAAE,CAAC,CAAC;AACvC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,kEAAkE,CAAC;KAC/E,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,gBAAgB,EAAE;QACxD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE;KAC5D,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QACrB,CAAC,CAAC,0BAA2B,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC,KAAK,CAAC,MAAM,UAAU;QACpG,CAAC,CAAC,eAAe,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,6BAA6B,CAAC,CAAC;AAC1F,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,0DAA0D,CAAC;KACvE,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpD,SAAS,CAAC,KAAK,CAAC,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACjE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACjE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,cAAc;QAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACzE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,sBAAsB,IAAI,QAAQ,CAAC,CAAC;IACrG,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AAC/F,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC;AAChB,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC;IAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AAE7C;;;;;;;GAOG;AACH,KAAK,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAe;IAC3D,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxF,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACzD,QAAQ,CAAC,GAAG,CAAC,KAAK;gBAChB,CAAC,CAAC,2CAA2C;gBAC7C,CAAC,CAAC,0DAA0D,CAAC,CAAC;YAChE,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;YACzD,MAAM,GAAG,GAAG,GAAG,QAAQ,mBAAmB,IAAI,YAAY,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YACxF,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;YAC9B,WAAW,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;QACzD,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM;QACpD,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK;YACtC,CAAC,CAAC,UAAU,CAAC;IACf,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7E,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACpE,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+/**
+ * What the service needs from this package.
+ *
+ * The daemon and CLI are the product; this entrypoint exists so the service can share the path rules
+ * and wire types rather than restate them. A rule restated is a rule that drifts, and these two are
+ * exactly the pair that must not: one validates what the other writes to disk.
+ */
+export { invalidPathReason, isValidPath } from "./internal/path";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/internal/config.js

@@ -0,0 +1,135 @@
+import { createHash } from "node:crypto";
+import { mkdirSync, readFileSync, writeFileSync, existsSync, readdirSync, statSync } from "node:fs";
+import { homedir, hostname } from "node:os";
+import { join, relative, sep } from "node:path";
+/**
+ * Per-machine settings and sync state, both under `~/.jive/`.
+ *
+ * A file rather than environment variables: which directory holds this machine's skills, and which
+ * machine this is, differ per computer and have to survive a login, which is exactly what a config file
+ * is for and exactly what an environment variable is not.
+ */
+const JIVE_HOME = join(homedir(), ".jive");
+export const CONFIG_PATH = join(JIVE_HOME, "skill-sync.json");
+/**
+ * The token lives on its own, outside `~/.jive/`, because it is the one part that must not travel with
+ * the rest. Endpoint, machine name and skills directory are settings you could paste into a gist; this
+ * is a credential, and keeping it in a separate file makes "do not copy this one" a property of the
+ * filesystem rather than a thing you have to remember.
+ */
+export const TOKEN_PATH = join(homedir(), ".skill-sync-token.json");
+const STATE_PATH = join(JIVE_HOME, "skill-sync-state.json");
+/** Managed by Claude's own cloud sync; see `Config.exclude`. */
+const DEFAULT_EXCLUDE = ["synced"];
+/**
+ * The settings alone, with no token required.
+ *
+ * `login` needs these precisely when the token is missing, so it cannot go through `loadConfig` — that
+ * reports "not configured" for a missing token and would refuse to run the command that supplies one.
+ */
+export function loadSettings() {
+    loadConfig();
+    const settings = readJson(CONFIG_PATH);
+    if (!settings.endpoint || !settings.machine || !settings.skillsDir)
+        return undefined;
+    return { endpoint: settings.endpoint, machine: settings.machine, skillsDir: settings.skillsDir };
+}
+/** Reads both files, writing a template for whichever is missing, and says what is still needed. */
+export function loadConfig() {
+    if (!existsSync(CONFIG_PATH)) {
+        mkdirSync(JIVE_HOME, { recursive: true });
+        writeFileSync(CONFIG_PATH, `${JSON.stringify({
+            endpoint: "https://skill-sync.jive.sh",
+            skillsDir: detectSkillsDir(),
+            machine: machineName(),
+            exclude: DEFAULT_EXCLUDE,
+        }, null, 2)}\n`);
+    }
+    if (!existsSync(TOKEN_PATH)) {
+        // 0600 from the moment it exists, rather than written open and tightened afterwards — there is no
+        // window in between for anything else on the machine to read it.
+        writeFileSync(TOKEN_PATH, `${JSON.stringify({ token: "" }, null, 2)}\n`, { mode: 0o600 });
+    }
+    const settings = readJson(CONFIG_PATH);
+    const token = readJson(TOKEN_PATH).token;
+    if (!settings.endpoint || !settings.skillsDir || !settings.machine) {
+        return { ok: false, reason: `${CONFIG_PATH} needs an endpoint, a skillsDir and a machine name` };
+    }
+    if (!token) {
+        return { ok: false, reason: `${TOKEN_PATH} needs the sync token` };
+    }
+    return { ok: true, config: { exclude: DEFAULT_EXCLUDE, ...settings, token } };
+}
+function readJson(path) {
+    try {
+        return JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch {
+        return {};
+    }
+}
+export function loadState() {
+    try {
+        return JSON.parse(readFileSync(STATE_PATH, "utf-8"));
+    }
+    catch {
+        return { cursor: 0, known: {} };
+    }
+}
+export function saveState(state) {
+    mkdirSync(JIVE_HOME, { recursive: true });
+    writeFileSync(STATE_PATH, `${JSON.stringify(state, null, 2)}\n`);
+}
+/** `HOSTNAME` is not set on macOS, so the template was writing "unknown" on exactly this machine. */
+function machineName() {
+    return hostname().replace(/\.local$/, "").replace(/[^A-Za-z0-9-]+/g, "-") || "unknown";
+}
+/**
+ * The skills directory this machine actually has, rather than the one it ought to have.
+ *
+ * Claude's home is not always `~/.claude` — an account with a suffixed home (`~/.claude-alex`) keeps its
+ * skills there, and writing the conventional path into the template just hands the user a wrong value to
+ * notice and correct. Pick the one that exists; fall back to the conventional path only if none does.
+ */
+function detectSkillsDir() {
+    const candidates = readdirSync(homedir())
+        .filter((entry) => entry === ".claude" || entry.startsWith(".claude-"))
+        .map((entry) => join(homedir(), entry, "skills"))
+        .filter((dir) => existsSync(dir))
+        .sort();
+    return candidates[0] ?? join(homedir(), ".claude", "skills");
+}
+export function hashBytes(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+/** Suffix for the copy kept when an incoming change would have overwritten a local edit. */
+export const CONFLICT_SUFFIX = ".local";
+/**
+ * Every file under the skills directory, as paths relative to it with forward slashes.
+ *
+ * Normalised because the same skill synced from Windows and macOS must be one row, not two.
+ *
+ * Conflict copies are skipped. They are this machine's evidence of a collision, not content anyone else
+ * asked for, and syncing them spreads one machine's mess to every other machine.
+ */
+export function listLocalFiles(skillsDir, exclude = DEFAULT_EXCLUDE) {
+    if (!existsSync(skillsDir))
+        return [];
+    const found = [];
+    const walk = (dir, top) => {
+        for (const entry of readdirSync(dir)) {
+            if (entry.startsWith("."))
+                continue;
+            if (top && exclude.includes(entry))
+                continue;
+            const full = join(dir, entry);
+            if (statSync(full).isDirectory())
+                walk(full, false);
+            else if (!entry.endsWith(CONFLICT_SUFFIX))
+                found.push(relative(skillsDir, full).split(sep).join("/"));
+        }
+    };
+    walk(skillsDir, true);
+    return found.sort();
+}
+//# sourceMappingURL=config.js.map

package/dist/internal/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../src/internal/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhD;;;;;;GAMG;AAEH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAC9D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,wBAAwB,CAAC,CAAC;AACpE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;AAE5D,gEAAgE;AAChE,MAAM,eAAe,GAAG,CAAC,QAAQ,CAAU,CAAC;AA6B5C;;;;;GAKG;AACH,MAAM,UAAU,YAAY;IAC1B,UAAU,EAAE,CAAC;IACb,MAAM,QAAQ,GAAG,QAAQ,CAAkB,WAAW,CAAC,CAAC;IACxD,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACrF,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;AACnG,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,aAAa,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3C,QAAQ,EAAE,4BAA4B;YACtC,SAAS,EAAE,eAAe,EAAE;YAC5B,OAAO,EAAE,WAAW,EAAE;YACtB,OAAO,EAAE,eAAe;SACzB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,kGAAkG;QAClG,iEAAiE;QACjE,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAkB,WAAW,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,QAAQ,CAAqB,UAAU,CAAC,CAAC,KAAK,CAAC;IAE7D,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,oDAAoD,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,UAAU,uBAAuB,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAY,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,QAAQ,CAAI,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAM,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAU,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAClC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAY;IACpC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,qGAAqG;AACrG,SAAS,WAAW;IAClB,OAAO,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC;AACzF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe;IACtB,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;SACtC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;SACtE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;SAChD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SAChC,IAAI,EAAE,CAAC;IACV,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,UAAiC,eAAe;IAChG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,GAAY,EAAQ,EAAE;QAC/C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,IAAI,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;iBAC/C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACxG,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACtB,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/internal/notify.js

@@ -0,0 +1,50 @@
+import { spawn } from "node:child_process";
+/**
+ * A desktop notification, best effort.
+ *
+ * Best effort is the whole contract: a daemon that cannot tell you about a conflict is worse than one
+ * that cannot sync, but a daemon that *dies* because a notification helper is missing is worse than
+ * both. Every failure here is swallowed.
+ *
+ * This works because these daemons are registered per-user and run inside the logged-in session — a
+ * LaunchAgent, a `systemctl --user` unit, a scheduled task. A system-wide service would have no desktop
+ * to post to.
+ */
+/** No shell anywhere below: the arguments carry file paths, and a path is not a safe thing to interpolate. */
+function run(command, args) {
+    try {
+        spawn(command, [...args], { stdio: "ignore", detached: true }).unref();
+    }
+    catch {
+        // Swallowed on purpose; see above.
+    }
+}
+export function notify(title, body) {
+    switch (process.platform) {
+        case "darwin":
+            // AppleScript string literals take double quotes and backslashes as escapes, and nothing else.
+            return run("osascript", [
+                "-e",
+                `display notification "${escapeAppleScript(body)}" with title "${escapeAppleScript(title)}"`,
+            ]);
+        case "linux":
+            return run("notify-send", [title, body]);
+        case "win32":
+            return run("powershell", [
+                "-NoProfile", "-NonInteractive", "-Command",
+                "[reflection.assembly]::LoadWithPartialName('System.Windows.Forms') > $null;"
+                    + "$n = New-Object System.Windows.Forms.NotifyIcon;"
+                    + "$n.Icon = [System.Drawing.SystemIcons]::Warning; $n.Visible = $true;"
+                    + `$n.ShowBalloonTip(10000, '${escapeSingleQuotes(title)}', '${escapeSingleQuotes(body)}', 'Warning')`,
+            ]);
+        default:
+            return;
+    }
+}
+function escapeAppleScript(value) {
+    return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+}
+function escapeSingleQuotes(value) {
+    return value.replace(/'/g, "''");
+}
+//# sourceMappingURL=notify.js.map

package/dist/internal/notify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.js","sourceRoot":"","sources":["../../../../src/internal/notify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C;;;;;;;;;;GAUG;AAEH,8GAA8G;AAC9G,SAAS,GAAG,CAAC,OAAe,EAAE,IAA2B;IACvD,IAAI,CAAC;QACH,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,IAAY;IAChD,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,+FAA+F;YAC/F,OAAO,GAAG,CAAC,WAAW,EAAE;gBACtB,IAAI;gBACJ,yBAAyB,iBAAiB,CAAC,IAAI,CAAC,iBAAiB,iBAAiB,CAAC,KAAK,CAAC,GAAG;aAC7F,CAAC,CAAC;QACL,KAAK,OAAO;YACV,OAAO,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3C,KAAK,OAAO;YACV,OAAO,GAAG,CAAC,YAAY,EAAE;gBACvB,YAAY,EAAE,iBAAiB,EAAE,UAAU;gBAC3C,6EAA6E;sBAC3E,kDAAkD;sBAClD,sEAAsE;sBACtE,6BAA6B,kBAAkB,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,IAAI,CAAC,eAAe;aACvG,CAAC,CAAC;QACL;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC"}

package/dist/internal/path.js

@@ -0,0 +1,36 @@
+/**
+ * Validation for the one piece of untrusted input that becomes a filesystem path.
+ *
+ * Shared by the Worker and the daemon on purpose, and deliberately free of any Node import so the Worker
+ * can bundle it. Both ends check: the server so one compromised client cannot poison what every machine
+ * pulls, and the daemon because a server it does not control is not a thing to take paths from either.
+ *
+ * Without this, a pushed path of `../../.ssh/authorized_keys` is joined to the skills directory and
+ * written wherever the daemon's user can write.
+ */
+/** Long enough for any real nesting, short enough that nothing can be used to exhaust anything. */
+const MAX_LENGTH = 512;
+export function invalidPathReason(path) {
+    if (path.length === 0 || path.length > MAX_LENGTH)
+        return "path is empty or too long";
+    if (path.includes("\0"))
+        return "path contains a null byte";
+    if (path.includes("\\"))
+        return "path must use forward slashes";
+    if (path.startsWith("/"))
+        return "path must be relative";
+    // A Windows drive letter is absolute on the machine that matters even though it has no leading slash.
+    if (/^[A-Za-z]:/.test(path))
+        return "path must be relative";
+    for (const segment of path.split("/")) {
+        if (segment === "")
+            return "path has an empty segment";
+        if (segment === "." || segment === "..")
+            return "path must not contain . or .. segments";
+    }
+    return undefined;
+}
+export function isValidPath(path) {
+    return invalidPathReason(path) === undefined;
+}
+//# sourceMappingURL=path.js.map

package/dist/internal/path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../../../../src/internal/path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,mGAAmG;AACnG,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU;QAAE,OAAO,2BAA2B,CAAC;IACtF,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,2BAA2B,CAAC;IAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,+BAA+B,CAAC;IAChE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACzD,sGAAsG;IACtG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAE5D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,2BAA2B,CAAC;QACvD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,wCAAwC,CAAC;IAC3F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;AAC/C,CAAC"}

package/dist/internal/sync.js

@@ -0,0 +1,131 @@
+import { mkdirSync, readFileSync, rmSync, writeFileSync, existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { CONFLICT_SUFFIX, hashBytes, listLocalFiles } from "./config";
+import { invalidPathReason } from "./path";
+export async function syncOnce(config, state) {
+    const report = { pulled: [], pushed: [], deletedLocally: [], conflicts: [], rejected: [] };
+    const present = new Set(listLocalFiles(config.skillsDir, config.exclude));
+    /**
+     * Files deleted here since the last cycle, worked out before anything is fetched.
+     *
+     * A push does not advance this machine's cursor, so the next pull sees its own earlier write as news.
+     * With the file now gone from disk that looked like "remote has it, we do not" and the pull put it
+     * straight back, undoing the delete every time. Deciding what was deleted up front, and refusing to
+     * recreate those paths, is what lets the push below turn them into tombstones.
+     */
+    const pendingDeletes = new Set(Object.keys(state.known).filter((path) => !present.has(path)));
+    // `present` is passed through both passes and kept current: the pull removes tombstoned files and adds
+    // new ones, and a push that read a stale snapshot would try to open a file the pull had just deleted.
+    await pull(config, state, report, pendingDeletes, present);
+    await push(config, state, report, present);
+    return report;
+}
+async function pull(config, state, report, pendingDeletes, present) {
+    const response = await call(config, `/files?since=${state.cursor}`);
+    const body = await response.json();
+    for (const file of body.files) {
+        // The server is not trusted to supply a path either: one bad row would otherwise write outside the
+        // skills directory on every machine that syncs.
+        const badPath = invalidPathReason(file.path);
+        if (badPath) {
+            report.rejected.push(`${file.path} (${badPath})`);
+            continue;
+        }
+        const local = join(config.skillsDir, file.path);
+        // Deleted here and not yet reported; the push pass owns this path for the rest of the cycle.
+        if (pendingDeletes.has(file.path))
+            continue;
+        if (file.deleted) {
+            if (existsSync(local)) {
+                // Never destroy content this machine never agreed with the server on. A file written here that
+                // the server happens to have tombstoned — a fresh machine, or one that was offline through the
+                // delete — is not the same file, and deleting it silently would lose work nobody could recover.
+                const localHash = hashBytes(readFileSync(local));
+                if (localHash !== state.known[file.path]) {
+                    writeFileSync(`${local}${CONFLICT_SUFFIX}`, readFileSync(local));
+                    report.conflicts.push(file.path);
+                }
+                rmSync(local, { force: true });
+                report.deletedLocally.push(file.path);
+            }
+            present.delete(file.path);
+            delete state.known[file.path];
+            continue;
+        }
+        const localHash = existsSync(local) ? hashBytes(readFileSync(local)) : undefined;
+        if (localHash === file.hash) {
+            // Already identical — record agreement so the push pass does not treat it as a local edit.
+            state.known[file.path] = file.hash;
+            continue;
+        }
+        // A local edit we have not pushed yet would be destroyed by overwriting. Keep it beside the incoming
+        // copy and let the push pass raise the conflict rather than deciding which one wins here.
+        if (localHash !== undefined && localHash !== state.known[file.path]) {
+            writeFileSync(`${local}${CONFLICT_SUFFIX}`, readFileSync(local));
+            report.conflicts.push(file.path);
+        }
+        const content = new Uint8Array(await (await call(config, `/content/${file.hash}`)).arrayBuffer());
+        mkdirSync(dirname(local), { recursive: true });
+        writeFileSync(local, content);
+        state.known[file.path] = file.hash;
+        present.add(file.path);
+        report.pulled.push(file.path);
+    }
+    state.cursor = body.cursor;
+}
+async function push(config, state, report, present) {
+    for (const path of present) {
+        const bytes = readFileSync(join(config.skillsDir, path));
+        const hash = hashBytes(bytes);
+        if (state.known[path] === hash)
+            continue;
+        const accepted = await put(config, {
+            path,
+            baseHash: state.known[path] ?? null,
+            hash,
+            content: Buffer.from(bytes).toString("base64"),
+        });
+        if (accepted) {
+            state.known[path] = hash;
+            report.pushed.push(path);
+        }
+        else {
+            report.conflicts.push(path);
+        }
+    }
+    // A path we previously agreed on that is no longer on disk was deleted here, and the server needs the
+    // tombstone or the next machine to sync will upload it back.
+    for (const path of Object.keys(state.known)) {
+        if (present.has(path))
+            continue;
+        if (await put(config, { path, baseHash: state.known[path], hash: null, content: null })) {
+            delete state.known[path];
+            report.pushed.push(`${path} (deleted)`);
+        }
+        else {
+            report.conflicts.push(path);
+        }
+    }
+}
+/** True when the server accepted the write; false means another machine got there first. */
+async function put(config, body) {
+    const response = await fetch(`${config.endpoint}/files`, {
+        method: "PUT",
+        headers: { authorization: `Bearer ${config.token}`, "content-type": "application/json" },
+        body: JSON.stringify({ ...body, machine: config.machine }),
+    });
+    if (response.status === 409)
+        return false;
+    if (!response.ok)
+        throw new Error(`PUT /files ${body.path}: ${response.status} ${await response.text()}`);
+    return true;
+}
+async function call(config, path) {
+    const response = await fetch(`${config.endpoint}${path}`, {
+        headers: { authorization: `Bearer ${config.token}` },
+    });
+    if (!response.ok)
+        throw new Error(`GET ${path}: ${response.status} ${await response.text()}`);
+    return response;
+}
+//# sourceMappingURL=sync.js.map

package/dist/internal/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../../../src/internal/sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAA2B,MAAM,UAAU,CAAC;AAC/F,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AA0B3C,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,KAAY;IACzD,MAAM,MAAM,GAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACnG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAE1E;;;;;;;OAOG;IACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE9F,uGAAuG;IACvG,sGAAsG;IACtG,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,MAAc,EAAE,KAAY,EAAE,MAAc,EAAE,cAA2B,EAAE,OAAoB;IAE/F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,gBAAgB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA6C,CAAC;IAE9E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,mGAAmG;QACnG,gDAAgD;QAChD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,GAAG,CAAC,CAAC;YAClD,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,6FAA6F;QAC7F,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAE5C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,+FAA+F;gBAC/F,+FAA+F;gBAC/F,gGAAgG;gBAChG,MAAM,SAAS,GAAG,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;gBACjD,IAAI,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzC,aAAa,CAAC,GAAG,KAAK,GAAG,eAAe,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;oBACjE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnC,CAAC;gBACD,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/B,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,SAAS,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,2FAA2F;YAC3F,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAK,CAAC;YACpC,SAAS;QACX,CAAC;QAED,qGAAqG;QACrG,0FAA0F;QAC1F,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,aAAa,CAAC,GAAG,KAAK,GAAG,eAAe,EAAE,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YACjE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAClG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9B,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAK,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,MAAc,EAAE,KAAY,EAAE,MAAc,EAAE,OAAoB;IACpF,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QAEzC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE;YACjC,IAAI;YACJ,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI;YACnC,IAAI;YACJ,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC/C,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,sGAAsG;IACtG,6DAA6D;IAC7D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,IAAI,MAAM,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACzF,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,KAAK,UAAU,GAAG,CAAC,MAAc,EAAE,IAElC;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,QAAQ,EAAE;QACvD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QACxF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;KAC3D,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,MAAc,EAAE,IAAY;IAC9C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,IAAI,EAAE,EAAE;QACxD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE;KACrD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9F,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/internal/wire.js

@@ -0,0 +1,7 @@
+/**
+ * The shapes the daemon and the service exchange.
+ *
+ * Declared in the library and imported by the service so there is one definition rather than two that
+ * drift. The service depends on the library; nothing goes the other way.
+ */
+//# sourceMappingURL=wire.js.map

package/dist/internal/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../../../src/internal/wire.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}