@mattstack/rt-client 0.1.1 → 0.3.0

package/README.md

@@ -17,8 +17,11 @@ const repos = await rtCommand(['repos', 'list']);
 const mrs = await readProjectMRs('group/repo');
 ```
 
-Requires a running rt daemon. Install rt with `brew install m4ttheweric/tap/rt`,
-then `rt verify`.
+Requires a running rt daemon. Install rt from the latest GitHub Release
+(`./rt --post-install`), then `rt verify`.
+
+Bun-only: the settings exec path (`src/settings/exec.ts`) shells out via
+`Bun.spawn`, so this package does not run under Node.
 
 `@mattstack/glance` is a peer dependency: rt-client returns glance's forge types
 so merge request shapes stay identical across rt, gitq, and mr-board.

package/dist/client.d.ts

@@ -1,5 +1,5 @@
 import type { RtResponse, RtClientOptions } from "./transport.ts";
-import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData } from "./commands.ts";
+import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData, ForgeSlug, ForgeTokenData, RunSummary, RunDetail } from "./commands.ts";
 /**
  * One repo's project open-MR store. A cold repo forces a full paginated sync
  * on the daemon side when maxAgeMs demands it, which can run tens of seconds
@@ -13,3 +13,15 @@ import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData } from
 export declare function readProjectMRs(repoName: string, maxAgeMs?: number, opts?: RtClientOptions, demand?: DemandDecl): Promise<RtResponse<ProjectMRsData>>;
 export declare function readDiscussions(repoName: string, iid: number, opts?: RtClientOptions): Promise<RtResponse<DiscussionsData>>;
 export declare function readMrsByBranch(repoName: string, branches: string[], opts?: RtClientOptions): Promise<RtResponse<MrByBranchData>>;
+/**
+ * The forge token for one tracked repo (MAT-33). Grant-gated on the daemon
+ * side: an untracked repo comes back `ok: false` with the `rt daemon track`
+ * command to run, which is the fail-closed shape callers should surface
+ * verbatim. Callers keep env-var precedence on their own side; this is the
+ * fallback that replaces reading ~/.mattstack/rt/secrets.json directly.
+ */
+export declare function resolveForgeToken(repoName: string, forge: ForgeSlug, opts?: RtClientOptions): Promise<RtResponse<ForgeTokenData>>;
+export declare function listRuns(repo?: string, opts?: RtClientOptions): Promise<RtResponse<{
+    runs: RunSummary[];
+}>>;
+export declare function getRun(runId: string, repo?: string, opts?: RtClientOptions): Promise<RtResponse<RunDetail>>;

package/dist/commands.d.ts

@@ -40,6 +40,59 @@ export interface MrByBranchData {
     byBranch: Record<string, MrByBranchEntry | null>;
     syncedAt: number;
 }
+/** Forges the daemon can hold a token for. */
+export type ForgeSlug = "gitlab" | "github";
+export interface ForgeTokenData {
+    token: string;
+}
+/**
+ * Duplicated shape on purpose (RT-44): rt-client cannot import daemon
+ * internals, so this mirrors lib/daemon/events-bus.ts's BusEvent.
+ */
+export interface EventsBusEvent {
+    id: number;
+    topic: string;
+    payload: unknown;
+    emittedAt: number;
+}
+export interface RunSummary {
+    id: string;
+    repo: string;
+    work_type: string;
+    pipeline: string;
+    status: string;
+    current_stage: string | null;
+    spawned_by: string | null;
+    started_at: number;
+    ended_at: number | null;
+}
+export interface RunStageRow {
+    name: string;
+    status: string;
+    attempt: number;
+    started_at: number | null;
+    ended_at: number | null;
+}
+export interface RunFieldRow {
+    key: string;
+    value: string;
+    produced_by: string;
+    at: number;
+}
+export interface RunDecisionRow {
+    contract: string;
+    scope: string;
+    selection: string;
+    decided_by: string;
+    decided_at: number;
+}
+export interface RunDetail {
+    run: RunSummary;
+    stages: RunStageRow[];
+    fields: RunFieldRow[];
+    decisions: RunDecisionRow[];
+    schemaAhead: boolean;
+}
 export interface Commands {
     "project-mrs:read": {
         payload: {
@@ -63,6 +116,109 @@ export interface Commands {
         };
         data: MrByBranchData;
     };
+    /**
+     * The forge token for one tracked repo (MAT-33). Repo-scoped on purpose:
+     * rt gates access per repo through repo-tracking.json, and this verb is
+     * what lets consumers stop reading ~/.mattstack/rt/secrets.json directly, which
+     * walked around that grant model entirely. An untracked repo is refused;
+     * the caller's env vars keep precedence on the caller's side.
+     */
+    "secrets:forge-token": {
+        payload: {
+            repoName: string;
+            forge: ForgeSlug;
+        };
+        data: ForgeTokenData;
+    };
+    /**
+     * A per-`scope` whitelisted subset of secrets, each scope reading its own
+     * encrypted domain(s): "extension" (default, so the VS Code extension
+     * needs no change) is linearApiKey/gitlabToken from the `rt` domain;
+     * "deck" is cfApiToken/cfZoneId from the `deck` domain; "board" is
+     * cross-domain — slackToken/slackClientSecret/slackSigningSecret from the
+     * `board` domain plus gitlabToken/switchboardToken/switchboardAdminToken
+     * from the `rt` domain. `data` is a union of the per-scope shapes, not a
+     * merged bag of every key — that makes a caller narrowing on the wrong
+     * scope's fields a compile error instead of a silent `undefined`. Every
+     * key optional (present only when set). Not a general secrets export —
+     * extend a whitelist here, in lockstep with
+     * lib/daemon/handlers/secrets.ts and (for "extension")
+     * extensions/vscode/rt-context/src/secrets.ts, if a consumer needs another
+     * key.
+     *
+     * `token` is required and checked in the HANDLER (not a transport-layer
+     * gate alone), since this verb is reachable over the unauthenticated unix
+     * socket too — see lib/daemon/handlers/secrets.ts's doc comment. HTTP
+     * callers get it forwarded automatically from their X-RT-Token header;
+     * socket callers must read ~/.mattstack/rt/api-token themselves. The gate
+     * applies identically to every scope.
+     */
+    "secrets:read": {
+        payload: {
+            token?: string;
+            scope?: "extension" | "deck" | "board";
+        };
+        data: {
+            linearApiKey?: string;
+            gitlabToken?: string;
+        } | {
+            cfApiToken?: string;
+            cfZoneId?: string;
+        } | {
+            slackToken?: string;
+            slackClientSecret?: string;
+            slackSigningSecret?: string;
+            gitlabToken?: string;
+            switchboardToken?: string;
+            switchboardAdminToken?: string;
+        };
+    };
+    "events:emit": {
+        payload: {
+            topic: string;
+            payload?: unknown;
+        };
+        data: {
+            id: number;
+        };
+    };
+    "events:wait": {
+        payload: {
+            pattern: string;
+            after?: number;
+            waitMs?: number;
+        };
+        data: {
+            events: EventsBusEvent[];
+            cursor: number;
+        };
+    };
+    "events:list": {
+        payload: {
+            pattern: string;
+            after?: number;
+            limit?: number;
+        };
+        data: {
+            events: EventsBusEvent[];
+            cursor: number;
+        };
+    };
+    "runs:list": {
+        payload: {
+            repo?: string;
+        };
+        data: {
+            runs: RunSummary[];
+        };
+    };
+    "runs:get": {
+        payload: {
+            runId: string;
+            repo?: string;
+        };
+        data: RunDetail;
+    };
 }
 export type CommandName = keyof Commands;
 export declare const COMMAND_NAMES: readonly CommandName[];

package/dist/index.d.ts

@@ -1,8 +1,18 @@
 export { rtCommand, DEFAULT_SOCK } from "./transport.ts";
 export type { RtResponse, RtClientOptions } from "./transport.ts";
-export { readProjectMRs, readDiscussions, readMrsByBranch } from "./client.ts";
+export { readProjectMRs, readDiscussions, readMrsByBranch, resolveForgeToken } from "./client.ts";
 export { COMMAND_NAMES } from "./commands.ts";
-export type { Discussion, DemandDecl, ProjectMRsScope, ProjectMRsData, DiscussionsData, MrByBranchEntry, MrByBranchData, Commands, CommandName, } from "./commands.ts";
+export type { Discussion, DemandDecl, ProjectMRsScope, ProjectMRsData, DiscussionsData, MrByBranchEntry, MrByBranchData, Commands, CommandName, ForgeSlug, ForgeTokenData, } from "./commands.ts";
 export { subscribe, DEFAULT_WS_URL } from "./relay.ts";
 export type { RelayEventType } from "./relay.ts";
 export { repoNameForPath } from "./repos.ts";
+export { getSetting, listSettings, explainSetting, expandVariables, SCOPE_ORDER } from "./settings/resolve.ts";
+export type { Scope, Provenance, ResolveOpts, Resolved, InvalidScope, ListedSetting, ExplainRow, ExpandCtx, } from "./settings/resolve.ts";
+export { setSetting } from "./settings/write.ts";
+export type { SetSettingOpts } from "./settings/write.ts";
+export { getDef, allDefs, validateValue, isMigrated } from "./settings/registry-machinery.ts";
+export type { SettingDef, SettingScope } from "./settings/registry-machinery.ts";
+export { REGISTRY } from "./settings/registry-defs.ts";
+export { readStore, listTeams } from "./settings/stores.ts";
+export type { StoreFile } from "./settings/stores.ts";
+export { normalizeRemote, identityFromRemote, deriveRepoIdentity, clearIdentityMemo } from "./settings/identity.ts";