@jive-sh/skill-sync 0.3.0-latest-darwin-arm64 → 0.3.0

package/dist/internal/config.js

@@ -0,0 +1,134 @@
+import { createHash } from "node:crypto";
+import { mkdirSync, readFileSync, writeFileSync, existsSync, readdirSync, statSync } from "node:fs";
+import { homedir, hostname, userInfo } from "node:os";
+import { join, relative, sep } from "node:path";
+/**
+ * Per-machine settings and sync state, both under `~/.jive/`. The sync token is not here: it lives only in
+ * the running daemon's memory.
+ *
+ * A file rather than environment variables: the endpoint and which machine this is differ per computer
+ * and have to survive a login, which is exactly what a config file is for and exactly what an environment
+ * variable is not. Which folders to sync is not in here: they are detected, and the choice to leave one
+ * out is kept on the server so the dashboard can change it and a reinstalled daemon still remembers it.
+ */
+const JIVE_HOME = join(homedir(), ".jive");
+export const CONFIG_PATH = join(JIVE_HOME, "skill-sync.json");
+const STATE_PATH = join(JIVE_HOME, "skill-sync-state.json");
+/**
+ * Where versions before 0.3 kept the sync token. The token now lives only in the running daemon's memory,
+ * so the daemon deletes this file whenever it finds one: a credential left on disk is one anything that
+ * can read the home directory can copy.
+ */
+export const LEGACY_TOKEN_PATH = join(homedir(), ".skill-sync-token.json");
+/**
+ * How the CLI reaches the running daemon: a Unix socket in `~/.jive/`, or a named pipe on Windows. Only
+ * this user can open either, which is what lets the CLI hand the daemon work that involves the token.
+ */
+export const CONTROL_SOCKET = process.platform === "win32"
+    ? `\\\\.\\pipe\\jive-skill-sync-${userInfo().username}`
+    : join(JIVE_HOME, "skill-sync.sock");
+/** Managed by Claude's own cloud sync; see `Settings.exclude`. */
+const DEFAULT_EXCLUDE = ["synced"];
+/**
+ * The settings, writing a template on first run. Undefined when the file lacks an endpoint or a machine
+ * name, which only happens if someone edited it.
+ */
+export function loadSettings() {
+    if (!existsSync(CONFIG_PATH)) {
+        mkdirSync(JIVE_HOME, { recursive: true });
+        writeFileSync(CONFIG_PATH, `${JSON.stringify({
+            endpoint: "https://skill-sync.jive.sh",
+            machine: machineName(),
+            exclude: DEFAULT_EXCLUDE,
+        }, null, 2)}\n`);
+    }
+    const settings = readJson(CONFIG_PATH);
+    if (!settings.endpoint || !settings.machine)
+        return undefined;
+    return { endpoint: settings.endpoint, machine: settings.machine, exclude: settings.exclude ?? DEFAULT_EXCLUDE };
+}
+function readJson(path) {
+    try {
+        return JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Every folder's sync state.
+ *
+ * Before folders were detected the file held one folder's `{ cursor, known }`, for the folder then named
+ * by `skillsDir` in the settings. That state is carried over to that folder: dropping it would make the
+ * folder look never-synced, and every file in it that differs from the server would become a conflict.
+ */
+export function loadStates() {
+    const stored = readJson(STATE_PATH);
+    if (stored.folders !== undefined)
+        return stored.folders;
+    const legacyFolder = readJson(CONFIG_PATH).skillsDir;
+    if (legacyFolder !== undefined && stored.cursor !== undefined && stored.known !== undefined) {
+        return { [legacyFolder]: { cursor: stored.cursor, known: stored.known } };
+    }
+    return {};
+}
+export function stateFor(states, folder) {
+    states[folder] ??= { cursor: 0, known: {} };
+    return states[folder];
+}
+export function saveStates(states) {
+    mkdirSync(JIVE_HOME, { recursive: true });
+    writeFileSync(STATE_PATH, `${JSON.stringify({ folders: states }, null, 2)}\n`);
+}
+/** `HOSTNAME` is not set on macOS, so the template was writing "unknown" on exactly this machine. */
+function machineName() {
+    return hostname().replace(/\.local$/, "").replace(/[^A-Za-z0-9-]+/g, "-") || "unknown";
+}
+/**
+ * The `skills` folder of every Claude home on this machine: `~/.claude` and each `~/.claude-<name>`.
+ *
+ * Every home is a candidate, whether or not it has a `skills` folder yet, so a Claude account added
+ * later joins without anyone listing it. Which of them actually sync is the user's choice on the
+ * dashboard; a folder that is synced and missing is created.
+ */
+export function detectFolders() {
+    return readdirSync(homedir())
+        .filter((entry) => entry === ".claude" || entry.startsWith(".claude-"))
+        .filter((entry) => statSync(join(homedir(), entry)).isDirectory())
+        .map((entry) => join(homedir(), entry, "skills"))
+        .sort();
+}
+export function hashBytes(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+/** Suffix for the copy kept when an incoming change would have overwritten a local edit. */
+export const CONFLICT_SUFFIX = ".local";
+/**
+ * Every file under a synced folder, as paths relative to it with forward slashes.
+ *
+ * Normalised because the same skill synced from Windows and macOS must be one row, not two.
+ *
+ * Conflict copies are skipped. They are this machine's evidence of a collision, not content anyone else
+ * asked for, and syncing them spreads one machine's mess to every other machine.
+ */
+export function listLocalFiles(folder, exclude = DEFAULT_EXCLUDE) {
+    if (!existsSync(folder))
+        return [];
+    const found = [];
+    const walk = (dir, top) => {
+        for (const entry of readdirSync(dir)) {
+            if (entry.startsWith("."))
+                continue;
+            if (top && exclude.includes(entry))
+                continue;
+            const full = join(dir, entry);
+            if (statSync(full).isDirectory())
+                walk(full, false);
+            else if (!entry.endsWith(CONFLICT_SUFFIX))
+                found.push(relative(folder, full).split(sep).join("/"));
+        }
+    };
+    walk(folder, true);
+    return found.sort();
+}
+//# sourceMappingURL=config.js.map

package/dist/internal/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../../src/internal/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhD;;;;;;;;GAQG;AAEH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;AAC5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAC3E;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;IACxD,CAAC,CAAC,gCAAgC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAEvC,kEAAkE;AAClE,MAAM,eAAe,GAAG,CAAC,QAAQ,CAAU,CAAC;AAkC5C;;;GAGG;AACH,MAAM,UAAU,YAAY;IAC1B,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,aAAa,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3C,QAAQ,EAAE,4BAA4B;YACtC,OAAO,EAAE,WAAW,EAAE;YACtB,OAAO,EAAE,eAAe;SACzB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAoB,WAAW,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC9D,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;AAClH,CAAC;AAED,SAAS,QAAQ,CAAI,IAAY;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAM,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,QAAQ,CAAwC,UAAU,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IACxD,MAAM,YAAY,GAAG,QAAQ,CAAyB,WAAW,CAAC,CAAC,SAAS,CAAC;IAC7E,IAAI,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5F,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAc;IACrD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,aAAa,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,qGAAqG;AACrG,SAAS,WAAW;IAClB,OAAO,QAAQ,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC;AACzF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,OAAO,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;SACtE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SACjE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;SAChD,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,UAAiC,eAAe;IAC7F,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,GAAY,EAAQ,EAAE;QAC/C,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpC,IAAI,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;iBAC/C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrG,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/internal/control.js

@@ -0,0 +1,101 @@
+import { createConnection, createServer } from "node:net";
+import { chmodSync, rmSync } from "node:fs";
+import { CONTROL_SOCKET } from "./config";
+const isFinal = (event) => event.type !== "open";
+/** The daemon is not running, as opposed to running and refusing the request. */
+export class DaemonUnreachable extends Error {
+}
+/** Sends one request and calls `onEvent` for each event until the final one, which it resolves with. */
+export function request(message, onEvent) {
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const socket = createConnection(CONTROL_SOCKET);
+        socket.on("connect", () => socket.write(`${JSON.stringify(message)}\n`));
+        socket.on("error", (cause) => {
+            if (settled)
+                return;
+            settled = true;
+            reject(cause.code === "ENOENT" || cause.code === "ECONNREFUSED"
+                ? new DaemonUnreachable(`the skill-sync daemon is not running (${cause.code} on ${CONTROL_SOCKET})`)
+                : cause);
+        });
+        readLines(socket, (line) => {
+            const event = JSON.parse(line);
+            onEvent(event);
+            if (isFinal(event) && !settled) {
+                settled = true;
+                socket.end();
+                resolve(event);
+            }
+        });
+        socket.on("close", () => {
+            if (!settled) {
+                settled = true;
+                reject(new Error("the daemon closed the connection without answering"));
+            }
+        });
+    });
+}
+/**
+ * Listens on the control socket. Resolves false, without listening, when another live daemon already
+ * holds it: two installs of skill-sync mean two daemons, and the second stands down rather than fight.
+ */
+export async function serve(handle) {
+    if (await answers())
+        return false;
+    // Nothing answered, so a socket file left here is from a daemon that died; it would block the listen.
+    if (process.platform !== "win32")
+        rmSync(CONTROL_SOCKET, { force: true });
+    const server = createServer((socket) => {
+        const reply = {
+            send: (event) => {
+                if (socket.writable)
+                    socket.write(`${JSON.stringify(event)}\n`);
+                if (isFinal(event))
+                    socket.end();
+            },
+        };
+        readLines(socket, (line) => {
+            try {
+                handle(JSON.parse(line), reply);
+            }
+            catch (cause) {
+                reply.send({ type: "error", message: cause instanceof Error ? cause.message : String(cause) });
+            }
+        });
+        socket.on("error", () => undefined); // A CLI that went away mid-request; nothing to tell it.
+    });
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(CONTROL_SOCKET, () => resolve());
+    });
+    // Only this user may talk to the daemon that holds their token.
+    if (process.platform !== "win32")
+        chmodSync(CONTROL_SOCKET, 0o600);
+    return server;
+}
+/** Whether a live daemon is listening on the control socket. */
+function answers() {
+    return new Promise((resolve) => {
+        const socket = createConnection(CONTROL_SOCKET);
+        socket.on("connect", () => {
+            socket.end();
+            resolve(true);
+        });
+        socket.on("error", () => resolve(false));
+    });
+}
+function readLines(socket, onLine) {
+    let buffer = "";
+    socket.on("data", (chunk) => {
+        buffer += chunk.toString();
+        let newline;
+        while ((newline = buffer.indexOf("\n")) >= 0) {
+            const line = buffer.slice(0, newline).trim();
+            buffer = buffer.slice(newline + 1);
+            if (line !== "")
+                onLine(line);
+        }
+    });
+}
+//# sourceMappingURL=control.js.map

package/dist/internal/control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../../../../src/internal/control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAsB1C,MAAM,OAAO,GAAG,CAAC,KAAmB,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;AAExE,iFAAiF;AACjF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C,wGAAwG;AACxG,MAAM,UAAU,OAAO,CAAC,OAAuB,EAAE,OAAsC;IACrF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YAClD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAC7D,CAAC,CAAC,IAAI,iBAAiB,CAAC,yCAAyC,KAAK,CAAC,IAAI,OAAO,cAAc,GAAG,CAAC;gBACpG,CAAC,CAAC,KAAK,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;QACH,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;YAC/C,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/B,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,MAAuD;IACjF,IAAI,MAAM,OAAO,EAAE;QAAE,OAAO,KAAK,CAAC;IAClC,sGAAsG;IACtG,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAU;YACnB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;gBACd,IAAI,MAAM,CAAC,QAAQ;oBAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChE,IAAI,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,CAAC,GAAG,EAAE,CAAC;YACnC,CAAC;SACF,CAAC;QACF,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,EAAE,KAAK,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjG,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,wDAAwD;IAC/F,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,gEAAgE;IAChE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gEAAgE;AAChE,SAAS,OAAO;IACd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACxB,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,MAA8B;IAC/D,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,IAAI,OAAe,CAAC;QACpB,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YACnC,IAAI,IAAI,KAAK,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/internal/folders.js

@@ -0,0 +1,65 @@
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { detectFolders, hashBytes, listLocalFiles } from "./config";
+import { skillOf, } from "./wire";
+/**
+ * What this machine tells the service about its folders, and what it hears back.
+ *
+ * The daemon and the CLI both register, so this lives in one place: they must describe a folder the same
+ * way, or the dashboard would show whichever of them spoke last.
+ */
+/**
+ * The skills on disk in one folder, with each file's hash. Hashing every file on each check is cheap at
+ * skills' size, and it is what lets the dashboard show whether this folder's copy is the synced one.
+ */
+export function localSkills(folder, config, states) {
+    const known = Object.keys(states[folder]?.known ?? {});
+    const byName = new Map();
+    for (const path of listLocalFiles(folder, config.exclude)) {
+        const name = skillOf(path);
+        let hash;
+        try {
+            hash = hashBytes(readFileSync(join(folder, path)));
+        }
+        catch {
+            continue; // Deleted between listing and reading; the next check reports the folder as it is.
+        }
+        byName.set(name, [...(byName.get(name) ?? []), { path, hash }]);
+    }
+    return [...byName].map(([name, files]) => ({
+        name,
+        files,
+        tracked: known.some((path) => skillOf(path) === name),
+    }));
+}
+/** Everything registration sends, so a caller can tell when it has changed and is worth re-sending. */
+export function describe(config, states) {
+    return { folders: detectFolders().map((path) => ({ path, skills: localSkills(path, config, states) })) };
+}
+/** Registers this machine's folders and skills; returns the folders to sync and the skills in each. */
+export async function register(config, request) {
+    const response = await fetch(`${config.endpoint}/folders`, {
+        method: "POST",
+        headers: authHeaders(config, { "content-type": "application/json" }),
+        body: JSON.stringify(request),
+    });
+    if (!response.ok)
+        throw new Error(`POST /folders: ${response.status} ${await response.text()}`);
+    return (await response.json()).folders;
+}
+/** Sends merges to the audit log. A failure here is logged by the caller, never fatal to a sync. */
+export async function logReconciliations(config, entries) {
+    for (const entry of entries) {
+        const response = await fetch(`${config.endpoint}/reconciliations`, {
+            method: "POST",
+            headers: authHeaders(config, { "content-type": "application/json" }),
+            body: JSON.stringify(entry),
+        });
+        if (!response.ok)
+            throw new Error(`POST /reconciliations: ${response.status} ${await response.text()}`);
+    }
+}
+export function authHeaders(config, extra) {
+    return { authorization: `Bearer ${config.token}`, "x-skill-sync-machine": config.machine, ...extra };
+}
+//# sourceMappingURL=folders.js.map

package/dist/internal/folders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folders.js","sourceRoot":"","sources":["../../../../src/internal/folders.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,cAAc,EAA4B,MAAM,UAAU,CAAC;AAC9F,OAAO,EACL,OAAO,GACR,MAAM,QAAQ,CAAC;AAEhB;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,MAAc,EAAE,MAAc;IACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,mFAAmF;QAC/F,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI;QACJ,KAAK;QACL,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;KACtD,CAAC,CAAC,CAAC;AACN,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAc;IACrD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC3G,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,OAAuB;IACpE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,UAAU,EAAE;QACzD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QACpE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChG,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAsB,CAAA,CAAC,OAAO,CAAC;AAC5D,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAA6C;IACpG,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,kBAAkB,EAAE;YACjE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YACpE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,KAA6B;IACvE,OAAO,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,sBAAsB,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;AACvG,CAAC"}

package/dist/internal/notify.js

@@ -0,0 +1,50 @@
+import { spawn } from "node:child_process";
+/**
+ * A desktop notification, best effort.
+ *
+ * Best effort is the whole contract: a daemon that cannot tell you about a conflict is worse than one
+ * that cannot sync, but a daemon that *dies* because a notification helper is missing is worse than
+ * both. Every failure here is swallowed.
+ *
+ * This works because these daemons are registered per-user and run inside the logged-in session — a
+ * LaunchAgent, a `systemctl --user` unit, a scheduled task. A system-wide service would have no desktop
+ * to post to.
+ */
+/** No shell anywhere below: the arguments carry file paths, and a path is not a safe thing to interpolate. */
+function run(command, args) {
+    try {
+        spawn(command, [...args], { stdio: "ignore", detached: true }).unref();
+    }
+    catch {
+        // Swallowed on purpose; see above.
+    }
+}
+export function notify(title, body) {
+    switch (process.platform) {
+        case "darwin":
+            // AppleScript string literals take double quotes and backslashes as escapes, and nothing else.
+            return run("osascript", [
+                "-e",
+                `display notification "${escapeAppleScript(body)}" with title "${escapeAppleScript(title)}"`,
+            ]);
+        case "linux":
+            return run("notify-send", [title, body]);
+        case "win32":
+            return run("powershell", [
+                "-NoProfile", "-NonInteractive", "-Command",
+                "[reflection.assembly]::LoadWithPartialName('System.Windows.Forms') > $null;"
+                    + "$n = New-Object System.Windows.Forms.NotifyIcon;"
+                    + "$n.Icon = [System.Drawing.SystemIcons]::Warning; $n.Visible = $true;"
+                    + `$n.ShowBalloonTip(10000, '${escapeSingleQuotes(title)}', '${escapeSingleQuotes(body)}', 'Warning')`,
+            ]);
+        default:
+            return;
+    }
+}
+function escapeAppleScript(value) {
+    return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+}
+function escapeSingleQuotes(value) {
+    return value.replace(/'/g, "''");
+}
+//# sourceMappingURL=notify.js.map

package/dist/internal/notify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.js","sourceRoot":"","sources":["../../../../src/internal/notify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C;;;;;;;;;;GAUG;AAEH,8GAA8G;AAC9G,SAAS,GAAG,CAAC,OAAe,EAAE,IAA2B;IACvD,IAAI,CAAC;QACH,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,IAAY;IAChD,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,+FAA+F;YAC/F,OAAO,GAAG,CAAC,WAAW,EAAE;gBACtB,IAAI;gBACJ,yBAAyB,iBAAiB,CAAC,IAAI,CAAC,iBAAiB,iBAAiB,CAAC,KAAK,CAAC,GAAG;aAC7F,CAAC,CAAC;QACL,KAAK,OAAO;YACV,OAAO,GAAG,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3C,KAAK,OAAO;YACV,OAAO,GAAG,CAAC,YAAY,EAAE;gBACvB,YAAY,EAAE,iBAAiB,EAAE,UAAU;gBAC3C,6EAA6E;sBAC3E,kDAAkD;sBAClD,sEAAsE;sBACtE,6BAA6B,kBAAkB,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,IAAI,CAAC,eAAe;aACvG,CAAC,CAAC;QACL;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC"}

package/dist/internal/path.js

@@ -0,0 +1,36 @@
+/**
+ * Validation for the one piece of untrusted input that becomes a filesystem path.
+ *
+ * Shared by the Worker and the daemon on purpose, and deliberately free of any Node import so the Worker
+ * can bundle it. Both ends check: the server so one compromised client cannot poison what every machine
+ * pulls, and the daemon because a server it does not control is not a thing to take paths from either.
+ *
+ * Without this, a pushed path of `../../.ssh/authorized_keys` is joined to the skills directory and
+ * written wherever the daemon's user can write.
+ */
+/** Long enough for any real nesting, short enough that nothing can be used to exhaust anything. */
+const MAX_LENGTH = 512;
+export function invalidPathReason(path) {
+    if (path.length === 0 || path.length > MAX_LENGTH)
+        return "path is empty or too long";
+    if (path.includes("\0"))
+        return "path contains a null byte";
+    if (path.includes("\\"))
+        return "path must use forward slashes";
+    if (path.startsWith("/"))
+        return "path must be relative";
+    // A Windows drive letter is absolute on the machine that matters even though it has no leading slash.
+    if (/^[A-Za-z]:/.test(path))
+        return "path must be relative";
+    for (const segment of path.split("/")) {
+        if (segment === "")
+            return "path has an empty segment";
+        if (segment === "." || segment === "..")
+            return "path must not contain . or .. segments";
+    }
+    return undefined;
+}
+export function isValidPath(path) {
+    return invalidPathReason(path) === undefined;
+}
+//# sourceMappingURL=path.js.map

package/dist/internal/path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../../../../src/internal/path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,mGAAmG;AACnG,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU;QAAE,OAAO,2BAA2B,CAAC;IACtF,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,2BAA2B,CAAC;IAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,+BAA+B,CAAC;IAChE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACzD,sGAAsG;IACtG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAE5D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,2BAA2B,CAAC;QACvD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,wCAAwC,CAAC;IAC3F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;AAC/C,CAAC"}

package/dist/internal/reconcile.js

@@ -0,0 +1,124 @@
+import { spawn } from "node:child_process";
+import { existsSync, mkdirSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { basename, delimiter, dirname, join } from "node:path";
+const BACKUP_ROOT = join(homedir(), ".jive", "skill-sync", "reconciled");
+/** A long skill is tens of thousands of tokens to write back out. */
+const TIMEOUT_MS = 15 * 60 * 1000;
+/**
+ * A merge shorter than this fraction of the longer input is refused as probably truncated: a model that
+ * stops early produces a file that looks fine and silently drops half the rules.
+ */
+const MIN_LENGTH_RATIO = 0.6;
+const SYSTEM_PROMPT = `You merge two versions of one file from a user's Claude skills folder into one.
+Answer in exactly this form and nothing else:
+<conflict>One or two plain sentences: what differs between the versions.</conflict>
+<resolution>One or two plain sentences: what the merge kept from each, and anything dropped or reworded.</resolution>
+<merged>
+The complete merged file, exactly as it should be saved. No code fences.
+</merged>
+Rules for the merge:
+- Keep every rule, example and fact that either version has, unless the other version clearly replaces it.
+- Where the two disagree, prefer the newer version's wording, and keep anything only the older one has.
+- If a base version is given, it is what both started from: use it to tell additions from deletions, and
+  honour a deletion made on one side when the other side did not edit that part.
+- Keep the file's frontmatter and structure.
+In <conflict> and <resolution>, call the two versions by the names they are given (for example "the copy in
+~/.claude-chaine/skills on MacBookPro" and "the synced copy"), never "Version A" or "Version B": these are
+read later by a person auditing the merge, who never saw this prompt.`;
+/**
+ * Both versions are copied out of the synced folder before anything is written, so a bad merge costs a
+ * file copy, not the user's work. Outside the folder so the copies are never synced or read as skills.
+ */
+export function backUp(conflict) {
+    const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+    const dir = join(BACKUP_ROOT, stamp, basename(dirname(conflict.folder)), conflict.path);
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(join(dir, "local"), conflict.local.content);
+    writeFileSync(join(dir, "remote"), conflict.remote.content);
+    if (conflict.base !== null)
+        writeFileSync(join(dir, "base"), conflict.base);
+    return dir;
+}
+export async function reconcile(conflict) {
+    const sections = [
+        `File: ${conflict.path}`,
+        conflict.base === null ? "No base version: these two have never been in sync." : `=== the base version both started from:\n${conflict.base}`,
+        `=== ${conflict.local.label}:\n${conflict.local.content}`,
+        `=== ${conflict.remote.label}:\n${conflict.remote.content}`,
+        "Write the merged file now.",
+    ];
+    const answer = await runClaude(sections.join("\n\n-----\n\n"), dirname(conflict.folder));
+    const start = answer.indexOf("<merged>");
+    const end = answer.lastIndexOf("</merged>");
+    if (start === -1 || end <= start)
+        throw new Error("Claude's answer had no <merged> section");
+    // The file is everything between the tags, minus the newline that follows the opening one.
+    const merged = answer.slice(start + "<merged>".length, end).replace(/^\r?\n/, "");
+    const conflictText = /<conflict>([\s\S]*?)<\/conflict>/.exec(answer)?.[1]?.trim() ?? "";
+    const resolutionText = /<resolution>([\s\S]*?)<\/resolution>/.exec(answer)?.[1]?.trim() ?? "";
+    const longest = Math.max(conflict.local.content.length, conflict.remote.content.length);
+    if (merged.trim().length === 0)
+        throw new Error("Claude returned an empty merge");
+    if (merged.length < longest * MIN_LENGTH_RATIO) {
+        throw new Error(`the merge is ${merged.length} characters against ${longest}; refusing it as probably truncated`);
+    }
+    return {
+        merged: merged.endsWith("\n") ? merged : `${merged}\n`,
+        conflict: conflictText || "Claude did not describe the conflict.",
+        resolution: resolutionText || "Claude did not describe the resolution.",
+    };
+}
+/** `configDir` is the Claude home that owns the folder, e.g. `~/.claude-chaine` for `~/.claude-chaine/skills`. */
+function runClaude(input, configDir) {
+    const claude = findClaude();
+    if (claude === undefined)
+        return Promise.reject(new Error("the claude CLI is not installed"));
+    // Always set, never inherited or left unset: unset, `claude` falls back to `~/.claude` and writes its
+    // session files, backups and caches there, recreating that home every time it is deleted.
+    const env = { ...process.env, CLAUDE_CONFIG_DIR: configDir };
+    return new Promise((resolve, reject) => {
+        const child = spawn(claude, [
+            "-p", "--output-format", "json", "--tools", "", "--strict-mcp-config", "--setting-sources", "",
+            "--no-session-persistence", "--system-prompt", SYSTEM_PROMPT,
+        ], { env, cwd: homedir(), stdio: ["pipe", "pipe", "pipe"] });
+        let stdout = "";
+        let stderr = "";
+        child.stdout.on("data", (chunk) => { stdout += chunk.toString(); });
+        child.stderr.on("data", (chunk) => { stderr += chunk.toString(); });
+        const timer = setTimeout(() => child.kill("SIGTERM"), TIMEOUT_MS);
+        child.on("error", (cause) => { clearTimeout(timer); reject(cause); });
+        child.on("close", (code) => {
+            clearTimeout(timer);
+            try {
+                const result = JSON.parse(stdout);
+                if (code !== 0 || result.is_error || typeof result.result !== "string") {
+                    reject(new Error(`claude failed (exit ${code}): ${result.result ?? stderr.trim()}`));
+                }
+                else {
+                    resolve(result.result);
+                }
+            }
+            catch {
+                reject(new Error(`claude failed (exit ${code}): ${stderr.trim() || stdout.slice(0, 300)}`));
+            }
+        });
+        child.stdin.end(input);
+    });
+}
+/**
+ * The daemon starts at login with the service manager's minimal PATH, which rarely includes where the
+ * Claude installer puts `claude`, so the usual install locations are checked too.
+ */
+function findClaude() {
+    const name = process.platform === "win32" ? "claude.exe" : "claude";
+    const fromPath = (process.env["PATH"] ?? "").split(delimiter).filter(Boolean).map((dir) => join(dir, name));
+    const known = [
+        join(homedir(), ".local", "bin", name),
+        join(homedir(), ".claude", "local", "claude"),
+        "/opt/homebrew/bin/claude",
+        "/usr/local/bin/claude",
+    ];
+    return [...fromPath, ...known].find((candidate) => existsSync(candidate));
+}
+//# sourceMappingURL=reconcile.js.map

package/dist/internal/reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile.js","sourceRoot":"","sources":["../../../../src/internal/reconcile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAwC/D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AACzE,qEAAqE;AACrE,MAAM,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAClC;;;GAGG;AACH,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;sEAegD,CAAC;AAEvE;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,QAAkB;IACvC,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxF,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAkB;IAChD,MAAM,QAAQ,GAAG;QACf,SAAS,QAAQ,CAAC,IAAI,EAAE;QACxB,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,qDAAqD,CAAC,CAAC,CAAC,4CAA4C,QAAQ,CAAC,IAAI,EAAE;QAC5I,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;QACzD,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE;QAC3D,4BAA4B;KAC7B,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7F,2FAA2F;IAC3F,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClF,MAAM,YAAY,GAAG,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxF,MAAM,cAAc,GAAG,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE9F,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxF,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,gBAAgB,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,MAAM,uBAAuB,OAAO,qCAAqC,CAAC,CAAC;IACpH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI;QACtD,QAAQ,EAAE,YAAY,IAAI,uCAAuC;QACjE,UAAU,EAAE,cAAc,IAAI,yCAAyC;KACxE,CAAC;AACJ,CAAC;AAED,kHAAkH;AAClH,SAAS,SAAS,CAAC,KAAa,EAAE,SAAiB;IACjD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAE9F,sGAAsG;IACtG,0FAA0F;IAC1F,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC;IAE7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE;YAC1B,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,EAAE;YAC9F,0BAA0B,EAAE,iBAAiB,EAAE,aAAa;SAC7D,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAE7D,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;QAElE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4C,CAAC;gBAC7E,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACvE,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,IAAI,MAAM,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;gBACvF,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,IAAI,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5G,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;QAC7C,0BAA0B;QAC1B,uBAAuB;KACxB,CAAC;IACF,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAC5E,CAAC"}