@minionry/minion 0.7.36

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (476) hide show
  1. package/LICENSE +14 -0
  2. package/PRIVACY.md +357 -0
  3. package/README.md +57 -0
  4. package/THIRD_PARTY_NOTICES.md +245 -0
  5. package/bin/branding.js +4 -0
  6. package/bin/commands/browser-install.js +483 -0
  7. package/bin/commands/create-sandbox.js +542 -0
  8. package/bin/commands/fingerprint.js +101 -0
  9. package/bin/commands/login.js +400 -0
  10. package/bin/commands/logout.js +93 -0
  11. package/bin/commands/minions.js +211 -0
  12. package/bin/commands/sandboxes.js +309 -0
  13. package/bin/commands/status.js +298 -0
  14. package/bin/commands/whoami.js +153 -0
  15. package/bin/launch-env.js +35 -0
  16. package/bin/machine-identity.js +221 -0
  17. package/bin/machine-layout.js +200 -0
  18. package/bin/minion.js +839 -0
  19. package/bin/platform-endpoints.js +8 -0
  20. package/bin/postinstall.js +52 -0
  21. package/bin/pty-doctor.js +326 -0
  22. package/bin/pty-locator.js +110 -0
  23. package/bin/pty-provision.js +186 -0
  24. package/bin/sandbox/Dockerfile +78 -0
  25. package/bin/sandbox/entrypoint.sh +14 -0
  26. package/bin/sandbox/install-repo.sh +53 -0
  27. package/bin/sandbox/seccomp-userns.json +883 -0
  28. package/bin/sandbox-config.js +306 -0
  29. package/dist/bin/machine-identity.js +221 -0
  30. package/dist/bin/machine-layout.js +200 -0
  31. package/dist/electron-host/agent-lease.js +141 -0
  32. package/dist/electron-host/dom-driver.js +642 -0
  33. package/dist/electron-host/ipc-protocol.js +89 -0
  34. package/dist/electron-host/js-driver.js +216 -0
  35. package/dist/electron-host/view-manager.js +254 -0
  36. package/dist/server/cli/engine-resume.js +49 -0
  37. package/dist/server/cli/eta-estimator.js +278 -0
  38. package/dist/server/cli/headless/background-activity.js +109 -0
  39. package/dist/server/cli/headless/claude-invoker-process.js +614 -0
  40. package/dist/server/cli/headless/claude-invoker-stall.js +150 -0
  41. package/dist/server/cli/headless/claude-invoker-stream.js +555 -0
  42. package/dist/server/cli/headless/claude-invoker-tools.js +148 -0
  43. package/dist/server/cli/headless/claude-invoker.js +151 -0
  44. package/dist/server/cli/headless/engine-availability.js +92 -0
  45. package/dist/server/cli/headless/engine-notice.js +185 -0
  46. package/dist/server/cli/headless/haiku-assessments.js +293 -0
  47. package/dist/server/cli/headless/headless-logger.js +75 -0
  48. package/dist/server/cli/headless/index.js +9 -0
  49. package/dist/server/cli/headless/mcp-config.js +314 -0
  50. package/dist/server/cli/headless/native-timeout-detector.js +72 -0
  51. package/dist/server/cli/headless/output-utils.js +71 -0
  52. package/dist/server/cli/headless/prompt-utils.js +82 -0
  53. package/dist/server/cli/headless/resilient-runner.js +326 -0
  54. package/dist/server/cli/headless/retry-strategies.js +292 -0
  55. package/dist/server/cli/headless/runner.js +245 -0
  56. package/dist/server/cli/headless/stall-assessor.js +295 -0
  57. package/dist/server/cli/headless/tool-watchdog.js +447 -0
  58. package/dist/server/cli/headless/types.js +18 -0
  59. package/dist/server/cli/history-portability.js +85 -0
  60. package/dist/server/cli/improvisation-attachments.js +99 -0
  61. package/dist/server/cli/improvisation-history-store.js +121 -0
  62. package/dist/server/cli/improvisation-movements.js +137 -0
  63. package/dist/server/cli/improvisation-output-queue.js +34 -0
  64. package/dist/server/cli/improvisation-retry.js +8 -0
  65. package/dist/server/cli/improvisation-session-manager.js +1016 -0
  66. package/dist/server/cli/improvisation-types.js +31 -0
  67. package/dist/server/cli/plan-lifecycle.js +72 -0
  68. package/dist/server/cli/prompt-builders.js +371 -0
  69. package/dist/server/cli/retry/retry-best-result.js +28 -0
  70. package/dist/server/cli/retry/retry-context-loss.js +75 -0
  71. package/dist/server/cli/retry/retry-recovery-strategies.js +213 -0
  72. package/dist/server/cli/retry/retry-resume-strategy.js +20 -0
  73. package/dist/server/cli/retry/retry-runner-factory.js +92 -0
  74. package/dist/server/cli/retry/retry-tool-results.js +22 -0
  75. package/dist/server/cli/retry/retry-types.js +3 -0
  76. package/dist/server/engines/EngineEvent.js +57 -0
  77. package/dist/server/engines/claude/ClaudeCodeEngine.js +316 -0
  78. package/dist/server/engines/claude/claude-command.js +32 -0
  79. package/dist/server/engines/codex/CodexEngine.js +469 -0
  80. package/dist/server/engines/codex/codex-auth.js +203 -0
  81. package/dist/server/engines/codex/codex-invoker.js +205 -0
  82. package/dist/server/engines/codex/codex-provision.js +215 -0
  83. package/dist/server/engines/credentials/credential-probe.js +88 -0
  84. package/dist/server/engines/credentials/model-profiles.js +249 -0
  85. package/dist/server/engines/credentials/provider-credentials.js +146 -0
  86. package/dist/server/engines/engine-event-stream.js +52 -0
  87. package/dist/server/engines/execution/engine-session.js +380 -0
  88. package/dist/server/engines/factory.js +42 -0
  89. package/dist/server/engines/hermes/HermesEngine.js +628 -0
  90. package/dist/server/engines/hermes/hermes-auth.js +159 -0
  91. package/dist/server/engines/hermes/hermes-gateway-home.js +271 -0
  92. package/dist/server/engines/hermes/hermes-invoker.js +350 -0
  93. package/dist/server/engines/hermes/hermes-provision.js +318 -0
  94. package/dist/server/engines/read-only.js +20 -0
  95. package/dist/server/engines/types.js +27 -0
  96. package/dist/server/handlers/company-execution-registry.js +67 -0
  97. package/dist/server/handlers/company-handlers.js +514 -0
  98. package/dist/server/handlers/company-triggers.js +189 -0
  99. package/dist/server/handlers/company-types.js +3 -0
  100. package/dist/server/index.js +244 -0
  101. package/dist/server/mcp/app-tools-bridge.js +110 -0
  102. package/dist/server/mcp/app-tools-mcp-server.js +99 -0
  103. package/dist/server/mcp/bouncer-integration.js +744 -0
  104. package/dist/server/mcp/browser-mcp-server.js +915 -0
  105. package/dist/server/mcp/browser-redaction.js +103 -0
  106. package/dist/server/mcp/classifier/BouncerClassifier.js +3 -0
  107. package/dist/server/mcp/classifier/ClaudeBouncerClassifier.js +212 -0
  108. package/dist/server/mcp/classifier/factory.js +124 -0
  109. package/dist/server/mcp/classifier/health.js +54 -0
  110. package/dist/server/mcp/classifier/telemetry.js +0 -0
  111. package/dist/server/mcp/company-patterns.js +104 -0
  112. package/dist/server/mcp/department-profiles.js +133 -0
  113. package/dist/server/mcp/quality-bridge.js +153 -0
  114. package/dist/server/mcp/quality-mcp-server.js +105 -0
  115. package/dist/server/mcp/security-analysis.js +384 -0
  116. package/dist/server/mcp/security-audit.js +152 -0
  117. package/dist/server/mcp/security-patterns.js +314 -0
  118. package/dist/server/mcp/server.js +194 -0
  119. package/dist/server/mcp/test-utils/agent-simulator.js +301 -0
  120. package/dist/server/mcp/test-utils/e2e-agent.js +103 -0
  121. package/dist/server/mcp/test-utils/e2e-capture.js +92 -0
  122. package/dist/server/mcp/test-utils/e2e-client.js +116 -0
  123. package/dist/server/mcp/test-utils/e2e-fixtures.js +87 -0
  124. package/dist/server/mcp/test-utils/e2e-gating.js +8 -0
  125. package/dist/server/mcp/test-utils/e2e-harness.js +8 -0
  126. package/dist/server/mcp/test-utils/e2e-scenarios.js +105 -0
  127. package/dist/server/routes/files.js +18 -0
  128. package/dist/server/routes/improvise.js +64 -0
  129. package/dist/server/routes/index.js +7 -0
  130. package/dist/server/routes/instances.js +41 -0
  131. package/dist/server/routes/internal.js +900 -0
  132. package/dist/server/routes/notifications.js +110 -0
  133. package/dist/server/server-setup.js +282 -0
  134. package/dist/server/services/agent-push.js +148 -0
  135. package/dist/server/services/analytics.js +197 -0
  136. package/dist/server/services/apps/build.js +249 -0
  137. package/dist/server/services/apps/greenlight.js +199 -0
  138. package/dist/server/services/apps/install.js +101 -0
  139. package/dist/server/services/apps/layout.js +35 -0
  140. package/dist/server/services/apps/serve.js +665 -0
  141. package/dist/server/services/apps/space-apps.js +248 -0
  142. package/dist/server/services/auth.js +48 -0
  143. package/dist/server/services/browser/chrome-sandbox.js +245 -0
  144. package/dist/server/services/browser/chromium-launch-spec.js +51 -0
  145. package/dist/server/services/browser/claude-reasoner.js +669 -0
  146. package/dist/server/services/browser/debug-log.js +3 -0
  147. package/dist/server/services/browser/driver-state.js +546 -0
  148. package/dist/server/services/browser/electron-provision.js +256 -0
  149. package/dist/server/services/browser/host-internal.js +245 -0
  150. package/dist/server/services/browser/host-mock.js +334 -0
  151. package/dist/server/services/browser/host-types.js +3 -0
  152. package/dist/server/services/browser/host.js +1067 -0
  153. package/dist/server/services/browser/index.js +4 -0
  154. package/dist/server/services/browser/ipc-client.js +354 -0
  155. package/dist/server/services/browser/pipewire-sink.js +199 -0
  156. package/dist/server/services/browser/preflight.js +590 -0
  157. package/dist/server/services/browser/reasoning-agent.js +659 -0
  158. package/dist/server/services/browser/sandbox-policy.js +169 -0
  159. package/dist/server/services/browser/stderr-noise-filter.js +26 -0
  160. package/dist/server/services/browser/telemetry.js +107 -0
  161. package/dist/server/services/browser/xvfb-supervisor.js +139 -0
  162. package/dist/server/services/browser-frame-policy.js +56 -0
  163. package/dist/server/services/client-id.js +32 -0
  164. package/dist/server/services/collab/registry.js +408 -0
  165. package/dist/server/services/collab/session.js +489 -0
  166. package/dist/server/services/collab/text-diff.js +28 -0
  167. package/dist/server/services/collab/types.js +19 -0
  168. package/dist/server/services/e2ee-group-key.js +197 -0
  169. package/dist/server/services/e2ee-identity.js +203 -0
  170. package/dist/server/services/file-explorer-ops.js +328 -0
  171. package/dist/server/services/file-transfer-zip.js +188 -0
  172. package/dist/server/services/files.js +111 -0
  173. package/dist/server/services/git/branch-ops.js +62 -0
  174. package/dist/server/services/git/command.js +68 -0
  175. package/dist/server/services/git/commit-message.js +74 -0
  176. package/dist/server/services/git/diff-ops.js +56 -0
  177. package/dist/server/services/git/haiku.js +76 -0
  178. package/dist/server/services/git/head-watcher.js +226 -0
  179. package/dist/server/services/git/index.js +17 -0
  180. package/dist/server/services/git/log-ops.js +98 -0
  181. package/dist/server/services/git/merge-ops.js +314 -0
  182. package/dist/server/services/git/parsers.js +401 -0
  183. package/dist/server/services/git/remote-ops.js +192 -0
  184. package/dist/server/services/git/status-ops.js +105 -0
  185. package/dist/server/services/git/suggestion-ops.js +80 -0
  186. package/dist/server/services/git/tag-ops.js +36 -0
  187. package/dist/server/services/git/types.js +4 -0
  188. package/dist/server/services/git/worktree-ops.js +114 -0
  189. package/dist/server/services/instances.js +337 -0
  190. package/dist/server/services/model-catalog.js +247 -0
  191. package/dist/server/services/observability/posthog.js +153 -0
  192. package/dist/server/services/pathUtils.js +114 -0
  193. package/dist/server/services/plan/agent-loader.js +97 -0
  194. package/dist/server/services/plan/agent-manager.js +363 -0
  195. package/dist/server/services/plan/agent-resolver.js +74 -0
  196. package/dist/server/services/plan/agents/assess-stall.md +33 -0
  197. package/dist/server/services/plan/agents/browser-planner.md +53 -0
  198. package/dist/server/services/plan/agents/browser-reasoner.md +114 -0
  199. package/dist/server/services/plan/agents/check-injection.md +95 -0
  200. package/dist/server/services/plan/agents/classify-error.md +30 -0
  201. package/dist/server/services/plan/agents/code-review.md +142 -0
  202. package/dist/server/services/plan/agents/commit-message.md +28 -0
  203. package/dist/server/services/plan/agents/detect-context-loss.md +30 -0
  204. package/dist/server/services/plan/agents/execute-issue.md +58 -0
  205. package/dist/server/services/plan/agents/fix-quality.md +25 -0
  206. package/dist/server/services/plan/agents/plan-coordinator.md +72 -0
  207. package/dist/server/services/plan/agents/pr-description.md +29 -0
  208. package/dist/server/services/plan/agents/retry-task.md +27 -0
  209. package/dist/server/services/plan/agents/review-code.md +38 -0
  210. package/dist/server/services/plan/agents/review-quality.md +45 -0
  211. package/dist/server/services/plan/agents/triage-findings.md +78 -0
  212. package/dist/server/services/plan/agents/verify-review.md +57 -0
  213. package/dist/server/services/plan/approval-evaluator.js +143 -0
  214. package/dist/server/services/plan/board-archive.js +102 -0
  215. package/dist/server/services/plan/board-config.js +108 -0
  216. package/dist/server/services/plan/board-export.js +214 -0
  217. package/dist/server/services/plan/composer-prompt.js +115 -0
  218. package/dist/server/services/plan/composer.js +664 -0
  219. package/dist/server/services/plan/config-installer.js +103 -0
  220. package/dist/server/services/plan/dependency-resolver.js +137 -0
  221. package/dist/server/services/plan/executor.js +696 -0
  222. package/dist/server/services/plan/front-matter.js +43 -0
  223. package/dist/server/services/plan/issue-classification.js +10 -0
  224. package/dist/server/services/plan/issue-effort.js +182 -0
  225. package/dist/server/services/plan/issue-loader.js +35 -0
  226. package/dist/server/services/plan/issue-prompt-builder.js +152 -0
  227. package/dist/server/services/plan/issue-retry.js +42 -0
  228. package/dist/server/services/plan/issue-writer.js +102 -0
  229. package/dist/server/services/plan/metrics-collector.js +272 -0
  230. package/dist/server/services/plan/output-manager.js +77 -0
  231. package/dist/server/services/plan/parser-core.js +435 -0
  232. package/dist/server/services/plan/parser-migration.js +108 -0
  233. package/dist/server/services/plan/parser.js +258 -0
  234. package/dist/server/services/plan/plan-runner-factory.js +68 -0
  235. package/dist/server/services/plan/pm-timeline.js +320 -0
  236. package/dist/server/services/plan/progress-log.js +101 -0
  237. package/dist/server/services/plan/prompt-builder.js +142 -0
  238. package/dist/server/services/plan/quality-delta.js +274 -0
  239. package/dist/server/services/plan/readiness-planner.js +34 -0
  240. package/dist/server/services/plan/review-gate.js +409 -0
  241. package/dist/server/services/plan/review-report.js +134 -0
  242. package/dist/server/services/plan/review-verdict-stream.js +161 -0
  243. package/dist/server/services/plan/state-reconciler.js +238 -0
  244. package/dist/server/services/plan/template-diff.js +175 -0
  245. package/dist/server/services/plan/template-instantiator.js +516 -0
  246. package/dist/server/services/plan/template-manifest.js +56 -0
  247. package/dist/server/services/plan/template-types.js +3 -0
  248. package/dist/server/services/plan/trigger-evaluator.js +211 -0
  249. package/dist/server/services/plan/types.js +3 -0
  250. package/dist/server/services/plan/watcher.js +73 -0
  251. package/dist/server/services/platform-credentials.js +56 -0
  252. package/dist/server/services/platform-e2ee.js +421 -0
  253. package/dist/server/services/platform-envelope.js +102 -0
  254. package/dist/server/services/platform-heartbeat.js +88 -0
  255. package/dist/server/services/platform-reconnect.js +60 -0
  256. package/dist/server/services/platform-token-lifecycle.js +95 -0
  257. package/dist/server/services/platform-url.js +17 -0
  258. package/dist/server/services/platform.js +656 -0
  259. package/dist/server/services/runtime-info.js +9 -0
  260. package/dist/server/services/schedule/agent-schedule-store.js +232 -0
  261. package/dist/server/services/schedule/agent-scheduler.js +323 -0
  262. package/dist/server/services/schedule/daily-timing.js +105 -0
  263. package/dist/server/services/schedule/quality-schedule-launch.js +11 -0
  264. package/dist/server/services/schedule/quality-schedule-store.js +211 -0
  265. package/dist/server/services/schedule/quality-scheduler.js +215 -0
  266. package/dist/server/services/schedule/run-bootstrap.js +329 -0
  267. package/dist/server/services/schedule/schedule-store.js +238 -0
  268. package/dist/server/services/schedule/schedule-wire.js +77 -0
  269. package/dist/server/services/schedule/scheduler.js +310 -0
  270. package/dist/server/services/schedule/template-source.js +97 -0
  271. package/dist/server/services/sdk/agent-sessions.js +264 -0
  272. package/dist/server/services/sdk/agents.js +557 -0
  273. package/dist/server/services/sdk/app-endpoints.js +48 -0
  274. package/dist/server/services/sdk/app-tools.js +303 -0
  275. package/dist/server/services/sdk/audit.js +48 -0
  276. package/dist/server/services/sdk/browser-transport.js +188 -0
  277. package/dist/server/services/sdk/browser.js +605 -0
  278. package/dist/server/services/sdk/composer.js +129 -0
  279. package/dist/server/services/sdk/connect.js +273 -0
  280. package/dist/server/services/sdk/consent-cooldown.js +31 -0
  281. package/dist/server/services/sdk/endpoint-url.js +141 -0
  282. package/dist/server/services/sdk/endpoints.js +314 -0
  283. package/dist/server/services/sdk/file-change-notify.js +36 -0
  284. package/dist/server/services/sdk/files-app.js +163 -0
  285. package/dist/server/services/sdk/files-search.js +131 -0
  286. package/dist/server/services/sdk/files-transfer.js +279 -0
  287. package/dist/server/services/sdk/files-workspace.js +233 -0
  288. package/dist/server/services/sdk/git.js +520 -0
  289. package/dist/server/services/sdk/grant-store.js +318 -0
  290. package/dist/server/services/sdk/host-ops.js +84 -0
  291. package/dist/server/services/sdk/inference-claude.js +214 -0
  292. package/dist/server/services/sdk/inference.js +247 -0
  293. package/dist/server/services/sdk/live-registry.js +42 -0
  294. package/dist/server/services/sdk/local-app-bindings.js +71 -0
  295. package/dist/server/services/sdk/pipeline.js +190 -0
  296. package/dist/server/services/sdk/pm-execute.js +228 -0
  297. package/dist/server/services/sdk/pm-planning-tap.js +29 -0
  298. package/dist/server/services/sdk/pm-schedule.js +165 -0
  299. package/dist/server/services/sdk/pm.js +634 -0
  300. package/dist/server/services/sdk/quality-change-notify.js +20 -0
  301. package/dist/server/services/sdk/quality-schedule.js +165 -0
  302. package/dist/server/services/sdk/quality.js +602 -0
  303. package/dist/server/services/sdk/rate-limits.js +198 -0
  304. package/dist/server/services/sdk/registry.js +597 -0
  305. package/dist/server/services/sdk/revoke.js +86 -0
  306. package/dist/server/services/sdk/run-profile.js +41 -0
  307. package/dist/server/services/sdk/sandbox.js +89 -0
  308. package/dist/server/services/sdk/storage.js +110 -0
  309. package/dist/server/services/sdk/streams.js +147 -0
  310. package/dist/server/services/sdk/terminal.js +201 -0
  311. package/dist/server/services/sdk/test-utils/workshop-browser-app.js +466 -0
  312. package/dist/server/services/sentry.js +99 -0
  313. package/dist/server/services/settings.js +374 -0
  314. package/dist/server/services/snippets/expander.js +87 -0
  315. package/dist/server/services/snippets/index.js +6 -0
  316. package/dist/server/services/snippets/loader.js +119 -0
  317. package/dist/server/services/snippets/parser.js +52 -0
  318. package/dist/server/services/snippets/types.js +3 -0
  319. package/dist/server/services/snippets/watcher.js +60 -0
  320. package/dist/server/services/space-layout.js +80 -0
  321. package/dist/server/services/system-prompts.js +219 -0
  322. package/dist/server/services/terminal/pty-manager.js +206 -0
  323. package/dist/server/services/terminal/pty-utils.js +150 -0
  324. package/dist/server/services/timeline/assembler.js +890 -0
  325. package/dist/server/services/timeline/contract.js +196 -0
  326. package/dist/server/services/timeline/index.js +4 -0
  327. package/dist/server/services/websocket/agent-schedule-handlers.js +217 -0
  328. package/dist/server/services/websocket/apps-handlers.js +399 -0
  329. package/dist/server/services/websocket/ask-user-question-bridge.js +112 -0
  330. package/dist/server/services/websocket/autocomplete-index.js +415 -0
  331. package/dist/server/services/websocket/autocomplete-match.js +243 -0
  332. package/dist/server/services/websocket/autocomplete.js +407 -0
  333. package/dist/server/services/websocket/browser-agent-runtime.js +208 -0
  334. package/dist/server/services/websocket/browser-device-profile.js +46 -0
  335. package/dist/server/services/websocket/browser-handlers.js +377 -0
  336. package/dist/server/services/websocket/browser-host-broadcast.js +179 -0
  337. package/dist/server/services/websocket/browser-ice-config.js +121 -0
  338. package/dist/server/services/websocket/browser-payloads.js +222 -0
  339. package/dist/server/services/websocket/browser-viewer-lifecycle.js +84 -0
  340. package/dist/server/services/websocket/browser-viewer-registry.js +118 -0
  341. package/dist/server/services/websocket/collab-broadcast.js +11 -0
  342. package/dist/server/services/websocket/collab-handlers.js +116 -0
  343. package/dist/server/services/websocket/commit-suggestion-service.js +132 -0
  344. package/dist/server/services/websocket/debug-log.js +38 -0
  345. package/dist/server/services/websocket/dispatch-util.js +10 -0
  346. package/dist/server/services/websocket/engine-auth-handlers.js +323 -0
  347. package/dist/server/services/websocket/engine-credential-watcher.js +83 -0
  348. package/dist/server/services/websocket/engine-profile-handlers.js +92 -0
  349. package/dist/server/services/websocket/file-definition-handlers.js +180 -0
  350. package/dist/server/services/websocket/file-download-handler.js +291 -0
  351. package/dist/server/services/websocket/file-explorer-handlers.js +291 -0
  352. package/dist/server/services/websocket/file-search-handlers.js +267 -0
  353. package/dist/server/services/websocket/file-share-handlers.js +328 -0
  354. package/dist/server/services/websocket/file-transfer-http.js +361 -0
  355. package/dist/server/services/websocket/file-upload-handler.js +267 -0
  356. package/dist/server/services/websocket/file-utils.js +346 -0
  357. package/dist/server/services/websocket/git-branch-handlers.js +90 -0
  358. package/dist/server/services/websocket/git-diff-handlers.js +59 -0
  359. package/dist/server/services/websocket/git-handlers.js +212 -0
  360. package/dist/server/services/websocket/git-head-watcher.js +85 -0
  361. package/dist/server/services/websocket/git-log-handlers.js +104 -0
  362. package/dist/server/services/websocket/git-pr-handlers.js +56 -0
  363. package/dist/server/services/websocket/git-tag-handlers.js +53 -0
  364. package/dist/server/services/websocket/git-utils.js +11 -0
  365. package/dist/server/services/websocket/git-worktree-handlers.js +521 -0
  366. package/dist/server/services/websocket/handler-context.js +113 -0
  367. package/dist/server/services/websocket/handler.js +1197 -0
  368. package/dist/server/services/websocket/index.js +5 -0
  369. package/dist/server/services/websocket/movement-written-files.js +26 -0
  370. package/dist/server/services/websocket/msg-id-tracker.js +48 -0
  371. package/dist/server/services/websocket/plan-board-handlers.js +410 -0
  372. package/dist/server/services/websocket/plan-execution-handlers.js +244 -0
  373. package/dist/server/services/websocket/plan-handlers.js +67 -0
  374. package/dist/server/services/websocket/plan-helpers.js +161 -0
  375. package/dist/server/services/websocket/plan-issue-handlers.js +168 -0
  376. package/dist/server/services/websocket/plan-sprint-handlers.js +190 -0
  377. package/dist/server/services/websocket/plan-transfer-handlers.js +310 -0
  378. package/dist/server/services/websocket/pm-timeline-broadcast.js +28 -0
  379. package/dist/server/services/websocket/post-session-scan.js +132 -0
  380. package/dist/server/services/websocket/prompt-queue-handlers.js +96 -0
  381. package/dist/server/services/websocket/quality-agent-cost.js +229 -0
  382. package/dist/server/services/websocket/quality-agent-notes.js +113 -0
  383. package/dist/server/services/websocket/quality-change-activity.js +187 -0
  384. package/dist/server/services/websocket/quality-complexity.js +345 -0
  385. package/dist/server/services/websocket/quality-dependencies.js +445 -0
  386. package/dist/server/services/websocket/quality-duplication.js +162 -0
  387. package/dist/server/services/websocket/quality-eta.js +65 -0
  388. package/dist/server/services/websocket/quality-fingerprint.js +104 -0
  389. package/dist/server/services/websocket/quality-grading.js +575 -0
  390. package/dist/server/services/websocket/quality-handlers.js +48 -0
  391. package/dist/server/services/websocket/quality-linting.js +270 -0
  392. package/dist/server/services/websocket/quality-operations.js +54 -0
  393. package/dist/server/services/websocket/quality-persistence.js +410 -0
  394. package/dist/server/services/websocket/quality-review-agent.js +526 -0
  395. package/dist/server/services/websocket/quality-run.js +220 -0
  396. package/dist/server/services/websocket/quality-secrets.js +0 -0
  397. package/dist/server/services/websocket/quality-service.js +775 -0
  398. package/dist/server/services/websocket/quality-tools.js +383 -0
  399. package/dist/server/services/websocket/quality-triage-agent.js +101 -0
  400. package/dist/server/services/websocket/quality-types.js +149 -0
  401. package/dist/server/services/websocket/recommended-answers.js +28 -0
  402. package/dist/server/services/websocket/schedule-handlers.js +197 -0
  403. package/dist/server/services/websocket/sdk-agent-host.js +569 -0
  404. package/dist/server/services/websocket/sdk-browser-host.js +459 -0
  405. package/dist/server/services/websocket/sdk-composer-host.js +10 -0
  406. package/dist/server/services/websocket/sdk-git-host.js +115 -0
  407. package/dist/server/services/websocket/sdk-handlers.js +242 -0
  408. package/dist/server/services/websocket/sdk-pm-execution-host.js +63 -0
  409. package/dist/server/services/websocket/sdk-pm-schedule-host.js +21 -0
  410. package/dist/server/services/websocket/sdk-quality-schedule-host.js +34 -0
  411. package/dist/server/services/websocket/sdk-terminal-host.js +140 -0
  412. package/dist/server/services/websocket/session-handlers.js +565 -0
  413. package/dist/server/services/websocket/session-history.js +335 -0
  414. package/dist/server/services/websocket/session-initialization.js +315 -0
  415. package/dist/server/services/websocket/session-registry.js +340 -0
  416. package/dist/server/services/websocket/session-role-directory.js +39 -0
  417. package/dist/server/services/websocket/settings-handlers.js +276 -0
  418. package/dist/server/services/websocket/skill-handlers.js +324 -0
  419. package/dist/server/services/websocket/skill-watcher.js +83 -0
  420. package/dist/server/services/websocket/snippet-handlers.js +261 -0
  421. package/dist/server/services/websocket/tab-broadcast.js +35 -0
  422. package/dist/server/services/websocket/tab-event-buffer.js +110 -0
  423. package/dist/server/services/websocket/tab-event-replay.js +47 -0
  424. package/dist/server/services/websocket/tab-handlers.js +211 -0
  425. package/dist/server/services/websocket/terminal-handlers.js +268 -0
  426. package/dist/server/services/websocket/types.js +96 -0
  427. package/dist/server/types/company-messages.js +102 -0
  428. package/dist/server/utils/agent-manager.js +202 -0
  429. package/dist/server/utils/console-timestamps.js +24 -0
  430. package/dist/server/utils/file-store.js +112 -0
  431. package/dist/server/utils/paths.js +28 -0
  432. package/dist/server/utils/port-manager.js +43 -0
  433. package/dist/server/utils/port.js +204 -0
  434. package/electron-host/dist/agent-lease.js +141 -0
  435. package/electron-host/dist/capture-recovery.js +77 -0
  436. package/electron-host/dist/codec-policy.js +37 -0
  437. package/electron-host/dist/controller-channel.js +60 -0
  438. package/electron-host/dist/controller-handlers.js +153 -0
  439. package/electron-host/dist/device-emulator.js +106 -0
  440. package/electron-host/dist/dom-driver.js +642 -0
  441. package/electron-host/dist/domain-registry.js +159 -0
  442. package/electron-host/dist/domain-validators.js +308 -0
  443. package/electron-host/dist/editable-focus-reporter.js +143 -0
  444. package/electron-host/dist/fake-peer.test-util.js +105 -0
  445. package/electron-host/dist/host-log.js +31 -0
  446. package/electron-host/dist/host-wire.js +11 -0
  447. package/electron-host/dist/input-router.js +421 -0
  448. package/electron-host/dist/ipc-protocol.js +89 -0
  449. package/electron-host/dist/ipc-server.js +193 -0
  450. package/electron-host/dist/js-driver.js +216 -0
  451. package/electron-host/dist/main-guards.js +70 -0
  452. package/electron-host/dist/main.js +716 -0
  453. package/electron-host/dist/roster-sync.js +87 -0
  454. package/electron-host/dist/rpc-context.js +1 -0
  455. package/electron-host/dist/rpc-tab-methods.js +138 -0
  456. package/electron-host/dist/rpc-webrtc-methods.js +121 -0
  457. package/electron-host/dist/screen-capture-cache.js +147 -0
  458. package/electron-host/dist/sdk-injector.js +166 -0
  459. package/electron-host/dist/sdp.js +102 -0
  460. package/electron-host/dist/session-surface.js +78 -0
  461. package/electron-host/dist/surface-sizing.js +59 -0
  462. package/electron-host/dist/view-manager.js +254 -0
  463. package/electron-host/dist/viewer-registry.js +46 -0
  464. package/electron-host/dist/viewer-session.js +288 -0
  465. package/electron-host/dist/webrtc-channels.js +14 -0
  466. package/electron-host/dist/webrtc-controller.js +57 -0
  467. package/electron-host/dist/webrtc-ice-filter.js +13 -0
  468. package/electron-host/dist/webrtc-peer.js +45 -0
  469. package/electron-host/package.json +12 -0
  470. package/electron-host/tsconfig.json +23 -0
  471. package/electron-host/webrtc-controller-preload.cjs +3 -0
  472. package/electron-host/webrtc-controller.html +14 -0
  473. package/package.json +85 -0
  474. package/vendor/e2ee/LICENSE +14 -0
  475. package/vendor/e2ee/package.json +14 -0
  476. package/vendor/e2ee/src/index.js +310 -0
@@ -0,0 +1,665 @@
1
+ // Copyright (c) 2025-present Minionry, Inc.
2
+ // SPDX-License-Identifier: LicenseRef-Minionry-Software
3
+ import { createReadStream, lstatSync, readdirSync, readFileSync, realpathSync, rmSync } from 'node:fs';
4
+ import { createServer } from 'node:http';
5
+ import { dirname, extname, join, resolve } from 'node:path';
6
+ import { writeFileAtomic } from '../../utils/file-store.js';
7
+ import { findAvailablePort } from '../../utils/port.js';
8
+ import { registerLocalAppBinding, unregisterLocalAppBinding, } from '../sdk/local-app-bindings.js';
9
+ import { isValidAppId, resolveWithinRoot } from '../sdk/sandbox.js';
10
+ import { spacePath } from '../space-layout.js';
11
+ import { executeGitCommand } from '../websocket/git-utils.js';
12
+ import { errorText, getAppStatePaths, isRealDirectory } from './layout.js';
13
+ const APP_SERVE_PORT_START = 4310;
14
+ const MAX_BIND_ATTEMPTS = 3;
15
+ const FULL_SHA_PATTERN = /^[0-9a-f]{40}$/;
16
+ const NETWORK_GIT_TIMEOUT_MS = 10 * 60 * 1000;
17
+ const LOCAL_GIT_TIMEOUT_MS = 2 * 60 * 1000;
18
+ const UNATTENDED_GIT_ENV = { GIT_TERMINAL_PROMPT: '0', GIT_ASKPASS: '' };
19
+ const HARDENED_GIT_CONFIG = ['-c', 'protocol.ext.allow=never', '-c', 'credential.helper='];
20
+ const CONTENT_TYPES = {
21
+ '.html': 'text/html; charset=utf-8',
22
+ '.js': 'text/javascript; charset=utf-8',
23
+ '.mjs': 'text/javascript; charset=utf-8',
24
+ '.css': 'text/css; charset=utf-8',
25
+ '.json': 'application/json; charset=utf-8',
26
+ '.map': 'application/json; charset=utf-8',
27
+ '.svg': 'image/svg+xml',
28
+ '.png': 'image/png',
29
+ '.jpg': 'image/jpeg',
30
+ '.jpeg': 'image/jpeg',
31
+ '.gif': 'image/gif',
32
+ '.webp': 'image/webp',
33
+ '.ico': 'image/x-icon',
34
+ '.txt': 'text/plain; charset=utf-8',
35
+ '.wasm': 'application/wasm',
36
+ '.woff': 'font/woff',
37
+ '.woff2': 'font/woff2',
38
+ '.ttf': 'font/ttf',
39
+ };
40
+ const records = new Map();
41
+ const resumedSpaces = new Set();
42
+ const resumeInFlight = new Map();
43
+ function resolveSpace(workingDir) {
44
+ try {
45
+ return realpathSync(resolve(workingDir));
46
+ }
47
+ catch {
48
+ return null;
49
+ }
50
+ }
51
+ function originForPort(port) {
52
+ return `http://127.0.0.1:${port}`;
53
+ }
54
+ function gitTail(result) {
55
+ const text = (result.stderr || result.stdout).trim();
56
+ return text.length > 400 ? `…${text.slice(-400)}` : text;
57
+ }
58
+ function sanitizeManifest(raw) {
59
+ if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
60
+ return undefined;
61
+ const m = raw;
62
+ if (typeof m.hash !== 'string' || m.hash === '')
63
+ return undefined;
64
+ if (!Array.isArray(m.scopes) || !m.scopes.every((s) => typeof s === 'string'))
65
+ return undefined;
66
+ if (!Array.isArray(m.optionalScopes) || !m.optionalScopes.every((s) => typeof s === 'string'))
67
+ return undefined;
68
+ return { hash: m.hash, scopes: [...m.scopes], optionalScopes: [...m.optionalScopes] };
69
+ }
70
+ function readServeFile(serveFile) {
71
+ let parsed;
72
+ try {
73
+ parsed = JSON.parse(readFileSync(serveFile, 'utf8'));
74
+ }
75
+ catch {
76
+ return {};
77
+ }
78
+ if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
79
+ return {};
80
+ const raw = parsed;
81
+ const shape = {};
82
+ if (typeof raw.port === 'number' && Number.isInteger(raw.port) && raw.port >= 1 && raw.port <= 65535) {
83
+ shape.port = raw.port;
84
+ }
85
+ if (typeof raw.stopped === 'boolean')
86
+ shape.stopped = raw.stopped;
87
+ if (typeof raw.commitSha === 'string' && FULL_SHA_PATTERN.test(raw.commitSha))
88
+ shape.commitSha = raw.commitSha;
89
+ if (typeof raw.repoUrl === 'string' && raw.repoUrl !== '')
90
+ shape.repoUrl = raw.repoUrl;
91
+ const manifest = sanitizeManifest(raw.manifest);
92
+ if (manifest)
93
+ shape.manifest = manifest;
94
+ return shape;
95
+ }
96
+ function writeServeFile(serveFile, shape) {
97
+ writeFileAtomic(serveFile, `${JSON.stringify(shape, null, 2)}\n`, { mode: 0o600 });
98
+ }
99
+ function refuse(res, status, message) {
100
+ res.writeHead(status, { 'Content-Type': 'text/plain; charset=utf-8', 'Cache-Control': 'no-store' });
101
+ res.end(message);
102
+ }
103
+ function handleAppRequest(port, buildDir, req, res) {
104
+ const host = (req.headers.host ?? '').trim().toLowerCase();
105
+ if (host !== `127.0.0.1:${port}`) {
106
+ refuse(res, 403, 'Forbidden: unrecognized Host header');
107
+ return;
108
+ }
109
+ if (req.method !== 'GET' && req.method !== 'HEAD') {
110
+ res.writeHead(405, { Allow: 'GET, HEAD', 'Content-Type': 'text/plain; charset=utf-8' });
111
+ res.end('Method not allowed');
112
+ return;
113
+ }
114
+ let pathname;
115
+ try {
116
+ pathname = decodeURIComponent(new URL(req.url ?? '/', originForPort(port)).pathname);
117
+ }
118
+ catch {
119
+ refuse(res, 400, 'Bad request');
120
+ return;
121
+ }
122
+ if (pathname.includes('\0')) {
123
+ refuse(res, 400, 'Bad request');
124
+ return;
125
+ }
126
+ const relative = pathname.replace(/^\/+/, '');
127
+ const guard = resolveWithinRoot(buildDir, relative === '' ? '.' : relative);
128
+ if (!guard.valid) {
129
+ refuse(res, 404, 'Not found');
130
+ return;
131
+ }
132
+ let filePath = guard.resolvedPath;
133
+ try {
134
+ if (lstatSync(filePath).isDirectory()) {
135
+ filePath = join(filePath, 'index.html');
136
+ }
137
+ const stat = lstatSync(filePath);
138
+ if (!stat.isFile()) {
139
+ refuse(res, 404, 'Not found');
140
+ return;
141
+ }
142
+ res.writeHead(200, {
143
+ 'Content-Type': CONTENT_TYPES[extname(filePath).toLowerCase()] ?? 'application/octet-stream',
144
+ 'Content-Length': stat.size,
145
+ 'Cache-Control': 'no-store',
146
+ 'X-Content-Type-Options': 'nosniff',
147
+ });
148
+ if (req.method === 'HEAD') {
149
+ res.end();
150
+ return;
151
+ }
152
+ const stream = createReadStream(filePath);
153
+ stream.on('error', () => res.destroy());
154
+ stream.pipe(res);
155
+ }
156
+ catch {
157
+ refuse(res, 404, 'Not found');
158
+ return;
159
+ }
160
+ }
161
+ function bindLoopbackServer(port, buildDir) {
162
+ return new Promise((resolvePromise, rejectPromise) => {
163
+ const server = createServer((req, res) => {
164
+ try {
165
+ handleAppRequest(port, buildDir, req, res);
166
+ }
167
+ catch (err) {
168
+ console.error('[apps/serve] request handler failed:', err);
169
+ try {
170
+ refuse(res, 500, 'Internal error');
171
+ }
172
+ catch { }
173
+ }
174
+ });
175
+ const onError = (err) => {
176
+ server.close();
177
+ if (err.code === 'EADDRINUSE') {
178
+ resolvePromise('occupied');
179
+ }
180
+ else {
181
+ rejectPromise(err);
182
+ }
183
+ };
184
+ server.once('error', onError);
185
+ server.listen(port, '127.0.0.1', () => {
186
+ server.removeListener('error', onError);
187
+ server.unref();
188
+ resolvePromise(server);
189
+ });
190
+ });
191
+ }
192
+ function closeServer(server) {
193
+ try {
194
+ server.close();
195
+ server.closeAllConnections?.();
196
+ }
197
+ catch { }
198
+ }
199
+ function toEntry(record) {
200
+ const entry = { appId: record.appId, state: record.state };
201
+ if (record.port !== undefined)
202
+ entry.port = record.port;
203
+ if (record.server && record.port !== undefined)
204
+ entry.origin = originForPort(record.port);
205
+ if (record.commitSha !== undefined)
206
+ entry.commitSha = record.commitSha;
207
+ if (record.state === 'error' && record.error !== undefined)
208
+ entry.error = record.error;
209
+ return entry;
210
+ }
211
+ function isInstalledOnDisk(paths) {
212
+ return isRealDirectory(paths.srcDir) || isRealDirectory(paths.buildDir);
213
+ }
214
+ export async function startAppServe(request) {
215
+ let paths;
216
+ try {
217
+ paths = getAppStatePaths(request.workingDir, request.appId);
218
+ }
219
+ catch (err) {
220
+ return { ok: false, code: 'BAD_REQUEST', error: errorText(err) };
221
+ }
222
+ if (!isRealDirectory(paths.buildDir)) {
223
+ return { ok: false, code: 'BAD_REQUEST', error: `nothing to serve for '${request.appId}': no build/ output — the build step (IS-029) must land first` };
224
+ }
225
+ const existing = records.get(paths.root);
226
+ if (existing?.server && existing.port !== undefined) {
227
+ try {
228
+ registerLocalAppBinding({ port: existing.port, appId: request.appId, manifest: request.manifest, source: 'workshop' });
229
+ }
230
+ catch (err) {
231
+ return { ok: false, code: 'INTERNAL', error: `failed to refresh the port binding: ${errorText(err)}` };
232
+ }
233
+ existing.state = 'running';
234
+ existing.commitSha = request.commitSha;
235
+ existing.repoUrl = request.repoUrl;
236
+ existing.manifest = request.manifest;
237
+ existing.error = undefined;
238
+ writeServeFile(paths.serveFile, {
239
+ port: existing.port,
240
+ stopped: false,
241
+ commitSha: request.commitSha,
242
+ repoUrl: request.repoUrl,
243
+ manifest: request.manifest,
244
+ });
245
+ return { ok: true, entry: toEntry(existing) };
246
+ }
247
+ const record = {
248
+ appId: request.appId,
249
+ root: paths.root,
250
+ state: 'starting',
251
+ commitSha: request.commitSha,
252
+ repoUrl: request.repoUrl,
253
+ manifest: request.manifest,
254
+ };
255
+ records.set(paths.root, record);
256
+ const persisted = readServeFile(paths.serveFile);
257
+ try {
258
+ let server = 'occupied';
259
+ let port = persisted.port ?? (await findAvailablePort(APP_SERVE_PORT_START));
260
+ for (let attempt = 0; attempt < MAX_BIND_ATTEMPTS && server === 'occupied'; attempt++) {
261
+ if (attempt > 0) {
262
+ port = await findAvailablePort(APP_SERVE_PORT_START);
263
+ }
264
+ server = await bindLoopbackServer(port, paths.buildDir);
265
+ }
266
+ if (server === 'occupied') {
267
+ throw new Error(`could not bind a loopback port after ${MAX_BIND_ATTEMPTS} attempts`);
268
+ }
269
+ try {
270
+ registerLocalAppBinding({ port, appId: request.appId, manifest: request.manifest, source: 'workshop' });
271
+ }
272
+ catch (err) {
273
+ closeServer(server);
274
+ throw err;
275
+ }
276
+ record.server = server;
277
+ record.port = port;
278
+ record.state = 'running';
279
+ record.error = undefined;
280
+ writeServeFile(paths.serveFile, {
281
+ port,
282
+ stopped: false,
283
+ commitSha: request.commitSha,
284
+ repoUrl: request.repoUrl,
285
+ manifest: request.manifest,
286
+ });
287
+ return { ok: true, entry: toEntry(record) };
288
+ }
289
+ catch (err) {
290
+ record.state = 'error';
291
+ record.error = `failed to serve '${request.appId}': ${errorText(err)}`;
292
+ return { ok: false, code: 'INTERNAL', error: record.error };
293
+ }
294
+ }
295
+ export async function stopAppServe(workingDir, appId) {
296
+ let paths;
297
+ try {
298
+ paths = getAppStatePaths(workingDir, appId);
299
+ }
300
+ catch (err) {
301
+ return { ok: false, code: 'BAD_REQUEST', error: errorText(err) };
302
+ }
303
+ const record = records.get(paths.root);
304
+ if (!record && !isInstalledOnDisk(paths)) {
305
+ return { ok: false, code: 'BAD_REQUEST', error: `no installed app '${appId}' in this Space — nothing to stop` };
306
+ }
307
+ if (record?.server) {
308
+ closeServer(record.server);
309
+ record.server = undefined;
310
+ if (record.port !== undefined)
311
+ unregisterLocalAppBinding(record.port);
312
+ }
313
+ if (record) {
314
+ record.state = 'stopped';
315
+ record.error = undefined;
316
+ }
317
+ else {
318
+ records.set(paths.root, { appId, root: paths.root, state: 'stopped', ...readSteadyStateHints(paths) });
319
+ }
320
+ try {
321
+ const persisted = readServeFile(paths.serveFile);
322
+ writeServeFile(paths.serveFile, { ...persisted, stopped: true });
323
+ }
324
+ catch (err) {
325
+ return { ok: false, code: 'INTERNAL', error: `stopped, but failed to persist the stop: ${errorText(err)}` };
326
+ }
327
+ return { ok: true };
328
+ }
329
+ function readSteadyStateHints(paths) {
330
+ const persisted = readServeFile(paths.serveFile);
331
+ const hints = {};
332
+ if (persisted.port !== undefined)
333
+ hints.port = persisted.port;
334
+ if (persisted.commitSha !== undefined)
335
+ hints.commitSha = persisted.commitSha;
336
+ return hints;
337
+ }
338
+ export function markAppPipelineState(workingDir, appId, state) {
339
+ let paths;
340
+ try {
341
+ paths = getAppStatePaths(workingDir, appId);
342
+ }
343
+ catch {
344
+ return;
345
+ }
346
+ const record = records.get(paths.root);
347
+ if (record) {
348
+ record.state = state;
349
+ record.error = undefined;
350
+ }
351
+ else {
352
+ records.set(paths.root, { appId, root: paths.root, state, ...readSteadyStateHints(paths) });
353
+ }
354
+ }
355
+ export function markAppErrorState(workingDir, appId, error) {
356
+ let paths;
357
+ try {
358
+ paths = getAppStatePaths(workingDir, appId);
359
+ }
360
+ catch {
361
+ return;
362
+ }
363
+ const record = records.get(paths.root);
364
+ if (!isInstalledOnDisk(paths) && !record?.server) {
365
+ records.delete(paths.root);
366
+ return;
367
+ }
368
+ if (record) {
369
+ record.state = 'error';
370
+ record.error = error;
371
+ }
372
+ else {
373
+ records.set(paths.root, { appId, root: paths.root, state: 'error', error, ...readSteadyStateHints(paths) });
374
+ }
375
+ }
376
+ export function settleAppSteadyState(workingDir, appId) {
377
+ let paths;
378
+ try {
379
+ paths = getAppStatePaths(workingDir, appId);
380
+ }
381
+ catch {
382
+ return;
383
+ }
384
+ const record = records.get(paths.root);
385
+ if (record?.server) {
386
+ record.state = 'running';
387
+ record.error = undefined;
388
+ return;
389
+ }
390
+ if (!isInstalledOnDisk(paths)) {
391
+ records.delete(paths.root);
392
+ return;
393
+ }
394
+ if (record) {
395
+ record.state = 'stopped';
396
+ record.error = undefined;
397
+ }
398
+ }
399
+ export function isAppServing(workingDir, appId) {
400
+ try {
401
+ return records.get(getAppStatePaths(workingDir, appId).root)?.server !== undefined;
402
+ }
403
+ catch {
404
+ return false;
405
+ }
406
+ }
407
+ export function getStoredBindingManifest(workingDir, appId) {
408
+ let paths;
409
+ try {
410
+ paths = getAppStatePaths(workingDir, appId);
411
+ }
412
+ catch {
413
+ return null;
414
+ }
415
+ return records.get(paths.root)?.manifest ?? readServeFile(paths.serveFile).manifest ?? null;
416
+ }
417
+ export function persistServedCommitSha(workingDir, appId, commitSha) {
418
+ let paths;
419
+ try {
420
+ paths = getAppStatePaths(workingDir, appId);
421
+ }
422
+ catch {
423
+ return;
424
+ }
425
+ const persisted = readServeFile(paths.serveFile);
426
+ writeServeFile(paths.serveFile, { ...persisted, commitSha });
427
+ const record = records.get(paths.root);
428
+ if (record)
429
+ record.commitSha = commitSha;
430
+ }
431
+ export function getServeRoster(workingDir) {
432
+ const space = resolveSpace(workingDir);
433
+ if (!space)
434
+ return { apps: [] };
435
+ const appsDir = spacePath(space, 'apps');
436
+ const entries = new Map();
437
+ let names = [];
438
+ try {
439
+ names = readdirSync(appsDir, { withFileTypes: true })
440
+ .filter((entry) => entry.isDirectory() && isValidAppId(entry.name))
441
+ .map((entry) => entry.name);
442
+ }
443
+ catch {
444
+ }
445
+ for (const appId of names) {
446
+ const root = join(appsDir, appId);
447
+ if (!isRealDirectory(join(root, 'src')) && !isRealDirectory(join(root, 'build')))
448
+ continue;
449
+ const persisted = readServeFile(join(root, 'serve.json'));
450
+ const entry = { appId, state: 'stopped' };
451
+ if (persisted.port !== undefined)
452
+ entry.port = persisted.port;
453
+ if (persisted.commitSha !== undefined)
454
+ entry.commitSha = persisted.commitSha;
455
+ entries.set(appId, entry);
456
+ }
457
+ for (const record of records.values()) {
458
+ if (dirname(record.root) !== appsDir)
459
+ continue;
460
+ entries.set(record.appId, toEntry(record));
461
+ }
462
+ return { apps: [...entries.values()].sort((a, b) => a.appId.localeCompare(b.appId)) };
463
+ }
464
+ export function resumeSpaceServes(workingDir) {
465
+ const space = resolveSpace(workingDir);
466
+ if (!space)
467
+ return Promise.resolve(false);
468
+ if (resumedSpaces.has(space))
469
+ return Promise.resolve(false);
470
+ const inflight = resumeInFlight.get(space);
471
+ if (inflight)
472
+ return inflight;
473
+ const pass = (async () => {
474
+ const appsDir = spacePath(space, 'apps');
475
+ let names = [];
476
+ try {
477
+ names = readdirSync(appsDir, { withFileTypes: true })
478
+ .filter((entry) => entry.isDirectory() && isValidAppId(entry.name))
479
+ .map((entry) => entry.name);
480
+ }
481
+ catch {
482
+ return false;
483
+ }
484
+ let resumedAny = false;
485
+ for (const appId of names) {
486
+ if (await resumeOneServe(appsDir, appId, space))
487
+ resumedAny = true;
488
+ }
489
+ return resumedAny;
490
+ })().finally(() => {
491
+ resumedSpaces.add(space);
492
+ resumeInFlight.delete(space);
493
+ });
494
+ resumeInFlight.set(space, pass);
495
+ return pass;
496
+ }
497
+ async function resumeOneServe(appsDir, appId, space) {
498
+ const root = join(appsDir, appId);
499
+ if (records.has(root))
500
+ return false;
501
+ const persisted = readServeFile(join(root, 'serve.json'));
502
+ if (persisted.stopped || !persisted.manifest || !persisted.commitSha || !persisted.repoUrl)
503
+ return false;
504
+ if (!isRealDirectory(join(root, 'build')))
505
+ return false;
506
+ const result = await startAppServe({
507
+ workingDir: space,
508
+ appId,
509
+ commitSha: persisted.commitSha,
510
+ repoUrl: persisted.repoUrl,
511
+ manifest: persisted.manifest,
512
+ });
513
+ if (!result.ok) {
514
+ console.error(`[apps/serve] failed to resume serve for '${appId}': ${result.error}`);
515
+ }
516
+ return result.ok;
517
+ }
518
+ export async function prepareAppUpdate(workingDir, appId) {
519
+ let paths;
520
+ try {
521
+ paths = getAppStatePaths(workingDir, appId);
522
+ }
523
+ catch (err) {
524
+ return { ok: false, code: 'BAD_REQUEST', error: errorText(err) };
525
+ }
526
+ if (!isRealDirectory(paths.srcDir)) {
527
+ return { ok: false, code: 'BAD_REQUEST', error: `no installed app '${appId}' in this Space — nothing to update` };
528
+ }
529
+ const remote = await executeGitCommand(['remote', 'get-url', 'origin'], paths.srcDir, {
530
+ timeoutMs: LOCAL_GIT_TIMEOUT_MS,
531
+ env: UNATTENDED_GIT_ENV,
532
+ });
533
+ const repoUrl = remote.stdout.trim();
534
+ if (remote.exitCode !== 0 || repoUrl === '') {
535
+ return { ok: false, code: 'INTERNAL', error: `cannot resolve the clone's origin remote: ${gitTail(remote) || 'git remote get-url failed'}` };
536
+ }
537
+ const lsRemote = await executeGitCommand([...HARDENED_GIT_CONFIG, 'ls-remote', 'origin', 'HEAD'], paths.srcDir, {
538
+ timeoutMs: NETWORK_GIT_TIMEOUT_MS,
539
+ env: UNATTENDED_GIT_ENV,
540
+ });
541
+ const remoteSha = lsRemote.stdout.match(/^([0-9a-f]{40})\tHEAD$/m)?.[1]?.toLowerCase() ?? null;
542
+ if (lsRemote.exitCode !== 0 || !remoteSha) {
543
+ return { ok: false, code: 'INTERNAL', error: `could not resolve the remote HEAD of ${repoUrl}: ${gitTail(lsRemote) || 'git ls-remote failed'}` };
544
+ }
545
+ const currentSha = await resolveCurrentSha(paths);
546
+ if (!currentSha) {
547
+ return { ok: false, code: 'INTERNAL', error: `cannot resolve the installed SHA for '${appId}'` };
548
+ }
549
+ const missing = await ensureUpdateTargetPresent(paths.srcDir, currentSha, remoteSha, repoUrl);
550
+ if (missing) {
551
+ return { ok: false, code: 'INTERNAL', error: missing };
552
+ }
553
+ return { ok: true, repoUrl, currentSha, remoteSha };
554
+ }
555
+ async function resolveCurrentSha(paths) {
556
+ const persisted = readServeFile(paths.serveFile).commitSha;
557
+ if (persisted)
558
+ return persisted;
559
+ const head = await executeGitCommand(['rev-parse', 'HEAD'], paths.srcDir, { timeoutMs: LOCAL_GIT_TIMEOUT_MS, env: UNATTENDED_GIT_ENV });
560
+ const sha = head.stdout.trim();
561
+ return head.exitCode === 0 && FULL_SHA_PATTERN.test(sha) ? sha : null;
562
+ }
563
+ async function ensureUpdateTargetPresent(srcDir, currentSha, remoteSha, repoUrl) {
564
+ if (remoteSha === currentSha)
565
+ return null;
566
+ const have = await executeGitCommand(['cat-file', '-e', `${remoteSha}^{commit}`], srcDir, {
567
+ timeoutMs: LOCAL_GIT_TIMEOUT_MS,
568
+ env: UNATTENDED_GIT_ENV,
569
+ });
570
+ if (have.exitCode === 0)
571
+ return null;
572
+ const fetch = await executeGitCommand([...HARDENED_GIT_CONFIG, 'fetch', '--tags', 'origin'], srcDir, {
573
+ timeoutMs: NETWORK_GIT_TIMEOUT_MS,
574
+ env: UNATTENDED_GIT_ENV,
575
+ });
576
+ if (fetch.exitCode !== 0) {
577
+ return `failed to fetch ${repoUrl}: ${gitTail(fetch) || 'git fetch failed'}`;
578
+ }
579
+ const haveNow = await executeGitCommand(['cat-file', '-e', `${remoteSha}^{commit}`], srcDir, {
580
+ timeoutMs: LOCAL_GIT_TIMEOUT_MS,
581
+ env: UNATTENDED_GIT_ENV,
582
+ });
583
+ if (haveNow.exitCode !== 0) {
584
+ return `fetched ${repoUrl}, but its HEAD ${remoteSha} is still not present locally`;
585
+ }
586
+ return null;
587
+ }
588
+ export async function applyAppUpdate(workingDir, appId, commitSha) {
589
+ let paths;
590
+ try {
591
+ paths = getAppStatePaths(workingDir, appId);
592
+ }
593
+ catch (err) {
594
+ return errorText(err);
595
+ }
596
+ const sha = commitSha.trim().toLowerCase();
597
+ if (!FULL_SHA_PATTERN.test(sha)) {
598
+ return `update target must be a full 40-hex commit SHA, got '${commitSha}'`;
599
+ }
600
+ const checkout = await executeGitCommand(['-c', 'advice.detachedHead=false', 'checkout', '--detach', sha], paths.srcDir, { timeoutMs: LOCAL_GIT_TIMEOUT_MS, env: UNATTENDED_GIT_ENV });
601
+ if (checkout.exitCode !== 0) {
602
+ return `failed to check out ${sha}: ${gitTail(checkout) || 'git checkout failed'}`;
603
+ }
604
+ const head = await executeGitCommand(['rev-parse', 'HEAD'], paths.srcDir, { timeoutMs: LOCAL_GIT_TIMEOUT_MS, env: UNATTENDED_GIT_ENV });
605
+ if (head.exitCode !== 0 || head.stdout.trim() !== sha) {
606
+ return `post-checkout verification failed: HEAD is '${head.stdout.trim() || 'unknown'}', expected ${sha}`;
607
+ }
608
+ return null;
609
+ }
610
+ export async function uninstallLocalApp(workingDir, appId) {
611
+ let paths;
612
+ try {
613
+ paths = getAppStatePaths(workingDir, appId);
614
+ }
615
+ catch (err) {
616
+ return { ok: false, code: 'BAD_REQUEST', error: errorText(err) };
617
+ }
618
+ let resolvedRoot;
619
+ try {
620
+ resolvedRoot = realpathSync(paths.root);
621
+ }
622
+ catch {
623
+ resolvedRoot = null;
624
+ }
625
+ if (resolvedRoot !== null && resolvedRoot !== paths.root) {
626
+ return {
627
+ ok: false,
628
+ code: 'INTERNAL',
629
+ error: `refusing to delete ${paths.root}: it resolves through a symlink to ${resolvedRoot}`,
630
+ };
631
+ }
632
+ const record = records.get(paths.root);
633
+ if (record?.server) {
634
+ closeServer(record.server);
635
+ if (record.port !== undefined)
636
+ unregisterLocalAppBinding(record.port);
637
+ }
638
+ records.delete(paths.root);
639
+ if (resolvedRoot === null)
640
+ return { ok: true };
641
+ try {
642
+ rmSync(paths.root, { recursive: true, force: true });
643
+ }
644
+ catch (err) {
645
+ return { ok: false, code: 'INTERNAL', error: `failed to remove ${paths.root}: ${errorText(err)}` };
646
+ }
647
+ return { ok: true };
648
+ }
649
+ export function stopAllAppServes() {
650
+ for (const record of records.values()) {
651
+ if (record.server) {
652
+ closeServer(record.server);
653
+ record.server = undefined;
654
+ if (record.port !== undefined)
655
+ unregisterLocalAppBinding(record.port);
656
+ record.state = 'stopped';
657
+ }
658
+ }
659
+ }
660
+ export function resetAppServeRegistryForTests() {
661
+ stopAllAppServes();
662
+ records.clear();
663
+ resumedSpaces.clear();
664
+ resumeInFlight.clear();
665
+ }