@mattstack/rt-client 0.4.1 → 0.5.0

package/dist/client.d.ts

@@ -1,5 +1,5 @@
 import type { RtResponse, RtClientOptions } from "./transport.ts";
-import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData, ForgeSlug, ForgeTokenData, RunSummary, RunDetail, WakeMode, ChatMember, ChatMessage, RoomSummary } from "./commands.ts";
+import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData, BranchEnrichment, ForgeSlug, ForgeTokenData, RunSummary, RunDetail, WakeMode, ChatMember, ChatMessage, RoomSummary } from "./commands.ts";
 /**
  * One repo's project open-MR store. A cold repo forces a full paginated sync
  * on the daemon side when maxAgeMs demands it, which can run tens of seconds
@@ -13,6 +13,12 @@ import type { DemandDecl, ProjectMRsData, DiscussionsData, MrByBranchData, Forge
 export declare function readProjectMRs(repoName: string, maxAgeMs?: number, opts?: RtClientOptions, demand?: DemandDecl): Promise<RtResponse<ProjectMRsData>>;
 export declare function readDiscussions(repoName: string, iid: number, opts?: RtClientOptions): Promise<RtResponse<DiscussionsData>>;
 export declare function readMrsByBranch(repoName: string, branches: string[], opts?: RtClientOptions): Promise<RtResponse<MrByBranchData>>;
+/**
+ * Cached ticket/MR enrichment for a set of branches, keyed by branch name
+ * (the cache's own primary key -- see lib/state/branch-cache.ts). Serves
+ * whatever the daemon already has; it does not trigger a fetch.
+ */
+export declare function readBranchCache(branches: string[], opts?: RtClientOptions): Promise<RtResponse<Record<string, BranchEnrichment>>>;
 /**
  * The forge token for one tracked repo (MAT-33). Grant-gated on the daemon
  * side: an untracked repo comes back `ok: false` with the `rt daemon track`

package/dist/commands.d.ts

@@ -10,17 +10,24 @@ export type Discussion = MRDetail["discussions"][number];
 export interface DemandDecl {
     client: string;
     authors: string[];
+    /** Codeowner sections this client needs covered (spec: second demand axis). */
+    codeownerSections?: string[];
     declaredAt: number;
 }
 export interface ProjectMRsScope {
     authors: string[];
     windowDays: number;
     uncovered: string[];
+    /** Effective synced section union; absent from a pre-sections daemon. */
+    sections?: string[];
+    /** Demanded sections not yet swept for this client. */
+    uncoveredSections?: string[];
 }
 export interface ProjectMRsData {
     mrs: Record<string, {
         pr: PullRequest;
         fetchedAt: number;
+        codeownerSections?: string[];
     }>;
     listSyncedAt: number;
     source: "poll" | "events" | "mutation";
@@ -40,6 +47,31 @@ export interface MrByBranchData {
     byBranch: Record<string, MrByBranchEntry | null>;
     syncedAt: number;
 }
+/**
+ * Trimmed, structural view of the daemon's `CacheEntry` (lib/state/branch-cache.ts) --
+ * rt-client cannot import daemon/lib internals, so this names only the fields
+ * console's run-view rows read, spelled exactly as they land on the wire
+ * (`mr` is `toMRInfo(pr)`, i.e. `getMRDashboardProps` -- camelCase `webUrl`,
+ * nested `pipeline.status`, no `ciStatus`). Extra wire fields (including the
+ * rest of `pipeline`) are fine; anything this shape doesn't name is simply
+ * not surfaced.
+ */
+export interface BranchEnrichment {
+    ticket: {
+        identifier: string;
+        title: string;
+        url: string;
+    } | null;
+    mr: {
+        iid: number;
+        webUrl: string | null;
+        state: string;
+        pipeline: {
+            status: string;
+        } | null;
+    } | null;
+    fetchedAt: number;
+}
 /** Forges the daemon can hold a token for. */
 export type ForgeSlug = "gitlab" | "github";
 export interface ForgeTokenData {
@@ -90,7 +122,7 @@ export interface RoomSummary {
 }
 export type Attention = {
     needs: boolean;
-    reason: "failed" | "stale" | "stranded" | null;
+    reason: "failed" | "stale" | "stranded" | "blocked" | null;
     evidence: string;
 };
 export interface RunSummary {
@@ -115,6 +147,20 @@ export interface RunSummary {
         the run has not produced that field yet. */
     ticket: string | null;
     branch: string | null;
+    /** The herdr agent attributed to this run (matched by recorded claude
+        session, else by worktree), mirrored live from `herdr agent list`.
+        Null when no agent matches or herdr is unavailable; absent on
+        pre-mirror daemons. */
+    agent?: RunAgent | null;
+    /** Executed stages only, in run order — the pipeline may define more that have not started. */
+    stages?: {
+        name: string;
+        status: string;
+    }[];
+}
+export interface RunAgent {
+    status: "working" | "idle" | "blocked" | "done" | "unknown";
+    pane: string;
 }
 export interface RunStageRow {
     name: string;

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 export { rtCommand, DEFAULT_SOCK } from "./transport.ts";
 export type { RtResponse, RtClientOptions } from "./transport.ts";
-export { readProjectMRs, readDiscussions, readMrsByBranch, resolveForgeToken, listRuns, getRun, abandonRun, chatJoin, chatLeave, chatPost, chatRead, chatRooms, chatWho, chatMark, chatMessages, chatArm, chatTouch, chatDisarm, chatUnreadWaking, eventsHead, } from "./client.ts";
+export { readProjectMRs, readDiscussions, readMrsByBranch, readBranchCache, resolveForgeToken, listRuns, getRun, abandonRun, chatJoin, chatLeave, chatPost, chatRead, chatRooms, chatWho, chatMark, chatMessages, chatArm, chatTouch, chatDisarm, chatUnreadWaking, eventsHead, } from "./client.ts";
 export { COMMAND_NAMES } from "./commands.ts";
-export type { Discussion, DemandDecl, ProjectMRsScope, ProjectMRsData, DiscussionsData, MrByBranchEntry, MrByBranchData, Commands, CommandName, ForgeSlug, ForgeTokenData, Attention, RunSummary, RunStageRow, RunFieldRow, RunDecisionRow, RunDetail, WakeMode, ChatMember, ChatMessage, RoomSummary, } from "./commands.ts";
+export type { Discussion, DemandDecl, ProjectMRsScope, ProjectMRsData, DiscussionsData, MrByBranchEntry, MrByBranchData, BranchEnrichment, Commands, CommandName, ForgeSlug, ForgeTokenData, Attention, RunSummary, RunStageRow, RunFieldRow, RunDecisionRow, RunDetail, WakeMode, ChatMember, ChatMessage, RoomSummary, } from "./commands.ts";
 export { subscribe, DEFAULT_WS_URL } from "./relay.ts";
 export type { RelayEventType } from "./relay.ts";
 export { repoNameForPath } from "./repos.ts";

package/dist/index.js

@@ -39,6 +39,9 @@ function readDiscussions(repoName, iid, opts = {}) {
 function readMrsByBranch(repoName, branches, opts = {}) {
   return rtCommand("mr:by-branch", { repoName, branches }, { sockPath: opts.sockPath, timeoutMs: 60000 });
 }
+function readBranchCache(branches, opts = {}) {
+  return rtCommand("cache:read", { branches }, { sockPath: opts.sockPath, timeoutMs: 1e4 });
+}
 function resolveForgeToken(repoName, forge, opts = {}) {
   return rtCommand("secrets:forge-token", { repoName, forge }, { sockPath: opts.sockPath, timeoutMs: 1e4 });
 }
@@ -612,6 +615,13 @@ var REGISTRY = [
     merge: "replace",
     description: "Doctor skill the board's own API-tier triage sweep runs on your MRs; deliberately never resolved through a repo's skills.jsonc manifest. A sibling flat key of board.triage, not a field inside it — the board reader assembles the two independently."
   },
+  {
+    key: "board.tabs",
+    type: "array",
+    scopes: ["team"],
+    merge: "replace",
+    description: "Board tab definitions ({id, label, source, slackChannel?, reviewSkill?}); source.kind 'authors' is the classic roster board, 'codeowners' lists MRs blocked on an unapproved CODEOWNERS section. Absent = one implicit authors tab (fallback lives in the board reader, never here)."
+  },
   {
     key: "board.staleAfterDays",
     type: "number",
@@ -1395,7 +1405,7 @@ async function runCapture(argv, opts = {}) {
   }
 }
 
-// src/settings/identity.ts
+// src/settings/identity-codec.ts
 var URL_RE = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\/(?:[^@/]+@)?([^/]+)\/(.+)$/;
 var SCP_RE = /^(?:[^@/\s]+@)?([^:/\s]+):(.+)$/;
 function serializeIdentity(id) {
@@ -1443,6 +1453,8 @@ function normalizeRemote(remote) {
     return null;
   return `${host.toLowerCase()}/${normalizedPath}`;
 }
+
+// src/settings/identity.ts
 function identityFromRemote(remote) {
   const store = readStore(machineSettingsPath());
   const overrides = store.global["rt.repoIdentityOverrides"];
@@ -1522,6 +1534,7 @@ export {
   readProjectMRs,
   readMrsByBranch,
   readDiscussions,
+  readBranchCache,
   parseIdentity,
   normalizeRemote,
   listTeams,

package/dist/settings/identity-codec.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The pure half of the repo-identity contract: the wire codec and the
+ * remote-URL normalizer. Split from identity.ts so browser bundles can key
+ * and label repos without dragging in fs/child_process — this module must
+ * never import node builtins or anything that does (the `./identity`
+ * subpath export points here, and a browser consumer evaluates it at module
+ * scope). Override-aware and derivation entry points stay in identity.ts.
+ */
+export type RepoIdentity = {
+    kind: "remote";
+    id: string;
+} | {
+    kind: "path";
+    id: string;
+};
+/**
+ * The wire form crosses the daemon socket, sits in board config, and lands in
+ * console's `/runs/:repo/...` URL — all of which need one slash-free segment.
+ * `encodeURIComponent` guarantees that and is exactly reversible.
+ */
+export declare function serializeIdentity(id: RepoIdentity): string;
+export declare function parseIdentity(wire: string): RepoIdentity | null;
+/**
+ * Pure normalization: `remote` → `host/path` (lowercase host, `.git` and
+ * embedded credentials stripped) or null when the remote doesn't match a
+ * recognized host form (local paths, garbage input).
+ */
+export declare function normalizeRemote(remote: string): string | null;

package/dist/settings/identity-codec.js

@@ -0,0 +1,53 @@
+// src/settings/identity-codec.ts
+var URL_RE = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\/(?:[^@/]+@)?([^/]+)\/(.+)$/;
+var SCP_RE = /^(?:[^@/\s]+@)?([^:/\s]+):(.+)$/;
+function serializeIdentity(id) {
+  return `${id.kind}:${encodeURIComponent(id.id)}`;
+}
+function parseIdentity(wire) {
+  const colon = wire.indexOf(":");
+  if (colon === -1)
+    return null;
+  const kind = wire.slice(0, colon);
+  if (kind !== "remote" && kind !== "path")
+    return null;
+  const encoded = wire.slice(colon + 1);
+  let id;
+  try {
+    id = decodeURIComponent(encoded);
+  } catch {
+    return null;
+  }
+  if (encodeURIComponent(id) !== encoded)
+    return null;
+  return { kind, id };
+}
+function normalizeRemote(remote) {
+  const trimmed = remote.trim();
+  if (!trimmed)
+    return null;
+  let host;
+  let path;
+  const urlMatch = URL_RE.exec(trimmed);
+  if (urlMatch) {
+    host = urlMatch[1];
+    path = urlMatch[2];
+  } else if (!trimmed.startsWith("/") && !trimmed.startsWith("~")) {
+    const scpMatch = SCP_RE.exec(trimmed);
+    if (scpMatch) {
+      host = scpMatch[1];
+      path = scpMatch[2];
+    }
+  }
+  if (!host || !path)
+    return null;
+  const normalizedPath = path.replace(/\.git$/, "").replace(/^\/+/, "").replace(/\/+$/, "");
+  if (!normalizedPath)
+    return null;
+  return `${host.toLowerCase()}/${normalizedPath}`;
+}
+export {
+  serializeIdentity,
+  parseIdentity,
+  normalizeRemote
+};

package/dist/settings/identity.d.ts

@@ -25,26 +25,9 @@
  *    through `identityFromRemote`, memoized per path so repeated callers in
  *    one process don't re-spawn git.
  */
-export type RepoIdentity = {
-    kind: "remote";
-    id: string;
-} | {
-    kind: "path";
-    id: string;
-};
-/**
- * The wire form crosses the daemon socket, sits in board config, and lands in
- * console's `/runs/:repo/...` URL — all of which need one slash-free segment.
- * `encodeURIComponent` guarantees that and is exactly reversible.
- */
-export declare function serializeIdentity(id: RepoIdentity): string;
-export declare function parseIdentity(wire: string): RepoIdentity | null;
-/**
- * Pure normalization: `remote` → `host/path` (lowercase host, `.git` and
- * embedded credentials stripped) or null when the remote doesn't match a
- * recognized host form (local paths, garbage input).
- */
-export declare function normalizeRemote(remote: string): string | null;
+import { type RepoIdentity } from "./identity-codec.ts";
+export { serializeIdentity, parseIdentity, normalizeRemote } from "./identity-codec.ts";
+export type { RepoIdentity } from "./identity-codec.ts";
 /**
  * The sync helper every non-derivation call site uses: machine-store
  * fork/multi-remote overrides (exact remote-URL match) then normalizeRemote.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mattstack/rt-client",
-  "version": "0.4.1",
+  "version": "0.5.0",
   "type": "module",
   "exports": {
     ".": {
@@ -9,6 +9,12 @@
       "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
+    "./identity": {
+      "types": "./dist/settings/identity-codec.d.ts",
+      "bun": "./src/settings/identity-codec.ts",
+      "import": "./dist/settings/identity-codec.js",
+      "default": "./dist/settings/identity-codec.js"
+    },
     "./test/fake-daemon.ts": "./test/fake-daemon.ts"
   },
   "peerDependencies": {
@@ -39,7 +45,7 @@
     "bun": ">=1.0.0"
   },
   "scripts": {
-    "build": "bun build src/index.ts --outdir dist --target node --format esm --packages external && tsc -p tsconfig.json",
+    "build": "bun build src/index.ts --outdir dist --target node --format esm --packages external && bun build src/settings/identity-codec.ts --outfile dist/settings/identity-codec.js --target browser --format esm && tsc -p tsconfig.json",
     "check-types": "tsc --noEmit -p tsconfig.json",
     "prepack": "bun run build"
   },

package/src/client.ts

@@ -10,6 +10,7 @@ import type {
   ProjectMRsData,
   DiscussionsData,
   MrByBranchData,
+  BranchEnrichment,
   ForgeSlug,
   ForgeTokenData,
   RunSummary,
@@ -66,6 +67,22 @@ export function readMrsByBranch(
   );
 }
 
+/**
+ * Cached ticket/MR enrichment for a set of branches, keyed by branch name
+ * (the cache's own primary key -- see lib/state/branch-cache.ts). Serves
+ * whatever the daemon already has; it does not trigger a fetch.
+ */
+export function readBranchCache(
+  branches: string[],
+  opts: RtClientOptions = {},
+): Promise<RtResponse<Record<string, BranchEnrichment>>> {
+  return rtCommand<Record<string, BranchEnrichment>>(
+    "cache:read",
+    { branches },
+    { sockPath: opts.sockPath, timeoutMs: 10_000 },
+  );
+}
+
 /**
  * The forge token for one tracked repo (MAT-33). Grant-gated on the daemon
  * side: an untracked repo comes back `ok: false` with the `rt daemon track`

package/src/commands.ts

@@ -12,6 +12,8 @@ export type Discussion = MRDetail["discussions"][number];
 export interface DemandDecl {
   client: string;
   authors: string[];
+  /** Codeowner sections this client needs covered (spec: second demand axis). */
+  codeownerSections?: string[];
   declaredAt: number;
 }
 
@@ -19,10 +21,14 @@ export interface ProjectMRsScope {
   authors: string[];
   windowDays: number;
   uncovered: string[];
+  /** Effective synced section union; absent from a pre-sections daemon. */
+  sections?: string[];
+  /** Demanded sections not yet swept for this client. */
+  uncoveredSections?: string[];
 }
 
 export interface ProjectMRsData {
-  mrs: Record<string, { pr: PullRequest; fetchedAt: number }>;
+  mrs: Record<string, { pr: PullRequest; fetchedAt: number; codeownerSections?: string[] }>;
   listSyncedAt: number;
   source: "poll" | "events" | "mutation";
   syncedAt: number;
@@ -45,6 +51,21 @@ export interface MrByBranchData {
   syncedAt: number;
 }
 
+/**
+ * Trimmed, structural view of the daemon's `CacheEntry` (lib/state/branch-cache.ts) --
+ * rt-client cannot import daemon/lib internals, so this names only the fields
+ * console's run-view rows read, spelled exactly as they land on the wire
+ * (`mr` is `toMRInfo(pr)`, i.e. `getMRDashboardProps` -- camelCase `webUrl`,
+ * nested `pipeline.status`, no `ciStatus`). Extra wire fields (including the
+ * rest of `pipeline`) are fine; anything this shape doesn't name is simply
+ * not surfaced.
+ */
+export interface BranchEnrichment {
+  ticket: { identifier: string; title: string; url: string } | null;
+  mr: { iid: number; webUrl: string | null; state: string; pipeline: { status: string } | null } | null;
+  fetchedAt: number;
+}
+
 /** Forges the daemon can hold a token for. */
 export type ForgeSlug = "gitlab" | "github";
 
@@ -99,7 +120,7 @@ export interface RoomSummary {
 // never derive two verdicts that can disagree.
 export type Attention = {
   needs: boolean;
-  reason: "failed" | "stale" | "stranded" | null;
+  reason: "failed" | "stale" | "stranded" | "blocked" | null;
   evidence: string;
 };
 
@@ -120,6 +141,17 @@ export interface RunSummary {
       the run has not produced that field yet. */
   ticket: string | null;
   branch: string | null;
+  /** The herdr agent attributed to this run (matched by recorded claude
+      session, else by worktree), mirrored live from `herdr agent list`.
+      Null when no agent matches or herdr is unavailable; absent on
+      pre-mirror daemons. */
+  agent?: RunAgent | null;
+  /** Executed stages only, in run order — the pipeline may define more that have not started. */
+  stages?: { name: string; status: string }[];
+}
+export interface RunAgent {
+  status: "working" | "idle" | "blocked" | "done" | "unknown";
+  pane: string;
 }
 export interface RunStageRow {
   name: string; status: string; attempt: number;

package/src/index.ts

@@ -5,6 +5,7 @@ export {
   readProjectMRs,
   readDiscussions,
   readMrsByBranch,
+  readBranchCache,
   resolveForgeToken,
   listRuns,
   getRun,
@@ -33,6 +34,7 @@ export type {
   DiscussionsData,
   MrByBranchEntry,
   MrByBranchData,
+  BranchEnrichment,
   Commands,
   CommandName,
   ForgeSlug,

package/src/settings/identity-codec.ts

@@ -0,0 +1,82 @@
+/**
+ * The pure half of the repo-identity contract: the wire codec and the
+ * remote-URL normalizer. Split from identity.ts so browser bundles can key
+ * and label repos without dragging in fs/child_process — this module must
+ * never import node builtins or anything that does (the `./identity`
+ * subpath export points here, and a browser consumer evaluates it at module
+ * scope). Override-aware and derivation entry points stay in identity.ts.
+ */
+
+// Full-URL forms: scheme://[user[:pass]@]host/path — https, ssh, git, http, ...
+const URL_RE = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\/(?:[^@/]+@)?([^/]+)\/(.+)$/;
+
+// scp-like scp syntax: [user@]host:path (git@gitlab.com:group/repo.git).
+// Deliberately excludes anything starting with "/" (absolute local paths)
+// so a Windows-drive-letter-free local remote never falsely matches.
+const SCP_RE = /^(?:[^@/\s]+@)?([^:/\s]+):(.+)$/;
+
+export type RepoIdentity =
+  | { kind: "remote"; id: string }
+  | { kind: "path"; id: string };
+
+/**
+ * The wire form crosses the daemon socket, sits in board config, and lands in
+ * console's `/runs/:repo/...` URL — all of which need one slash-free segment.
+ * `encodeURIComponent` guarantees that and is exactly reversible.
+ */
+export function serializeIdentity(id: RepoIdentity): string {
+  return `${id.kind}:${encodeURIComponent(id.id)}`;
+}
+
+export function parseIdentity(wire: string): RepoIdentity | null {
+  const colon = wire.indexOf(":");
+  if (colon === -1) return null;
+  const kind = wire.slice(0, colon);
+  if (kind !== "remote" && kind !== "path") return null;
+  const encoded = wire.slice(colon + 1);
+  let id: string;
+  try {
+    id = decodeURIComponent(encoded);
+  } catch {
+    return null;
+  }
+  // Canonical wires only: the id segment must be byte-for-byte what
+  // serializeIdentity emits. Guard sites validate with parseIdentity and then
+  // use the WIRE as a single path component (repoDataDir et al.) — a
+  // hand-built wire with a literal "/" ("path:../..") would otherwise parse
+  // and escape the state directory.
+  if (encodeURIComponent(id) !== encoded) return null;
+  return { kind, id };
+}
+
+/**
+ * Pure normalization: `remote` → `host/path` (lowercase host, `.git` and
+ * embedded credentials stripped) or null when the remote doesn't match a
+ * recognized host form (local paths, garbage input).
+ */
+export function normalizeRemote(remote: string): string | null {
+  const trimmed = remote.trim();
+  if (!trimmed) return null;
+
+  let host: string | undefined;
+  let path: string | undefined;
+
+  const urlMatch = URL_RE.exec(trimmed);
+  if (urlMatch) {
+    host = urlMatch[1];
+    path = urlMatch[2];
+  } else if (!trimmed.startsWith("/") && !trimmed.startsWith("~")) {
+    const scpMatch = SCP_RE.exec(trimmed);
+    if (scpMatch) {
+      host = scpMatch[1];
+      path = scpMatch[2];
+    }
+  }
+
+  if (!host || !path) return null;
+
+  const normalizedPath = path.replace(/\.git$/, "").replace(/^\/+/, "").replace(/\/+$/, "");
+  if (!normalizedPath) return null;
+
+  return `${host.toLowerCase()}/${normalizedPath}`;
+}

package/src/settings/identity.ts

@@ -32,79 +32,10 @@ import { runCapture } from "./exec.ts";
 import { machineSettingsPath } from "./paths.ts";
 import { readStore } from "./stores.ts";
 
-// Full-URL forms: scheme://[user[:pass]@]host/path — https, ssh, git, http, ...
-const URL_RE = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\/(?:[^@/]+@)?([^/]+)\/(.+)$/;
+import { normalizeRemote, type RepoIdentity } from "./identity-codec.ts";
 
-// scp-like scp syntax: [user@]host:path (git@gitlab.com:group/repo.git).
-// Deliberately excludes anything starting with "/" (absolute local paths)
-// so a Windows-drive-letter-free local remote never falsely matches.
-const SCP_RE = /^(?:[^@/\s]+@)?([^:/\s]+):(.+)$/;
-
-export type RepoIdentity =
-  | { kind: "remote"; id: string }
-  | { kind: "path"; id: string };
-
-/**
- * The wire form crosses the daemon socket, sits in board config, and lands in
- * console's `/runs/:repo/...` URL — all of which need one slash-free segment.
- * `encodeURIComponent` guarantees that and is exactly reversible.
- */
-export function serializeIdentity(id: RepoIdentity): string {
-  return `${id.kind}:${encodeURIComponent(id.id)}`;
-}
-
-export function parseIdentity(wire: string): RepoIdentity | null {
-  const colon = wire.indexOf(":");
-  if (colon === -1) return null;
-  const kind = wire.slice(0, colon);
-  if (kind !== "remote" && kind !== "path") return null;
-  const encoded = wire.slice(colon + 1);
-  let id: string;
-  try {
-    id = decodeURIComponent(encoded);
-  } catch {
-    return null;
-  }
-  // Canonical wires only: the id segment must be byte-for-byte what
-  // serializeIdentity emits. Guard sites validate with parseIdentity and then
-  // use the WIRE as a single path component (repoDataDir et al.) — a
-  // hand-built wire with a literal "/" ("path:../..") would otherwise parse
-  // and escape the state directory.
-  if (encodeURIComponent(id) !== encoded) return null;
-  return { kind, id };
-}
-
-/**
- * Pure normalization: `remote` → `host/path` (lowercase host, `.git` and
- * embedded credentials stripped) or null when the remote doesn't match a
- * recognized host form (local paths, garbage input).
- */
-export function normalizeRemote(remote: string): string | null {
-  const trimmed = remote.trim();
-  if (!trimmed) return null;
-
-  let host: string | undefined;
-  let path: string | undefined;
-
-  const urlMatch = URL_RE.exec(trimmed);
-  if (urlMatch) {
-    host = urlMatch[1];
-    path = urlMatch[2];
-  } else if (!trimmed.startsWith("/") && !trimmed.startsWith("~")) {
-    const scpMatch = SCP_RE.exec(trimmed);
-    if (scpMatch) {
-      host = scpMatch[1];
-      path = scpMatch[2];
-    }
-  }
-
-  if (!host || !path) return null;
-
-  const normalizedPath = path.replace(/\.git$/, "").replace(/^\/+/, "").replace(/\/+$/, "");
-  if (!normalizedPath) return null;
-
-  return `${host.toLowerCase()}/${normalizedPath}`;
-}
+export { serializeIdentity, parseIdentity, normalizeRemote } from "./identity-codec.ts";
+export type { RepoIdentity } from "./identity-codec.ts";
 
 /**
  * The sync helper every non-derivation call site uses: machine-store

package/src/settings/registry-defs.ts

@@ -345,6 +345,13 @@ export const REGISTRY: readonly SettingDef[] = [
     merge: "replace",
     description: "Doctor skill the board's own API-tier triage sweep runs on your MRs; deliberately never resolved through a repo's skills.jsonc manifest. A sibling flat key of board.triage, not a field inside it — the board reader assembles the two independently.",
   },
+  {
+    key: "board.tabs",
+    type: "array",
+    scopes: ["team"],
+    merge: "replace",
+    description: "Board tab definitions ({id, label, source, slackChannel?, reviewSkill?}); source.kind 'authors' is the classic roster board, 'codeowners' lists MRs blocked on an unapproved CODEOWNERS section. Absent = one implicit authors tab (fallback lives in the board reader, never here).",
+  },
 
   // --- board (user) ----------------------------------------------------------
   {