@nac3/forge-cli 0.2.0-alpha.1

package/dist/commands/voice.js

@@ -0,0 +1,69 @@
+import { readVoiceConfig, writeVoiceConfig, matchConfiguredWakeWord } from '../voice/config.js';
+import { DEFAULT_WAKE_ALIASES, mergeAliases } from '../voice/wake.js';
+function splitCsv(s) {
+    return s.split(',').map((x) => x.trim()).filter((x) => x.length > 0);
+}
+export function registerVoiceCommand(program) {
+    const voice = program.command('voice').description('Voice + wake-word configuration.');
+    const config = voice
+        .command('config')
+        .description('Read or update the wake-word config (aliases, distance).')
+        .option('--show', 'Print the active config.')
+        .option('--aliases <list>', 'Comma-separated user extra aliases (replaces).')
+        .option('--add <list>', 'Comma-separated aliases to append.')
+        .option('--max-distance <n>', 'Levenshtein cap (0..2).')
+        .option('--reset', 'Reset extras + max-distance to defaults.')
+        .action(async (opts) => {
+        let cfg = await readVoiceConfig();
+        if (opts.reset) {
+            cfg = { version: 1, wake_aliases_extra: [], wake_max_distance: 2 };
+            await writeVoiceConfig(cfg);
+            console.log('voice config reset to defaults.');
+            return;
+        }
+        let mutated = false;
+        if (opts.aliases !== undefined) {
+            cfg.wake_aliases_extra = splitCsv(opts.aliases);
+            mutated = true;
+        }
+        if (opts.add !== undefined) {
+            const extras = splitCsv(opts.add);
+            const set = new Set([...cfg.wake_aliases_extra, ...extras]);
+            cfg.wake_aliases_extra = [...set];
+            mutated = true;
+        }
+        if (opts.maxDistance !== undefined) {
+            const n = Number.parseInt(opts.maxDistance, 10);
+            if (!Number.isFinite(n) || n < 0 || n > 4) {
+                throw new Error('--max-distance must be an integer in [0,4]');
+            }
+            cfg.wake_max_distance = n;
+            mutated = true;
+        }
+        if (mutated)
+            await writeVoiceConfig(cfg);
+        if (opts.show || !mutated) {
+            const merged = mergeAliases(cfg.wake_aliases_extra);
+            console.log(JSON.stringify({
+                builtin_aliases: DEFAULT_WAKE_ALIASES,
+                user_extra: cfg.wake_aliases_extra,
+                merged,
+                max_distance: cfg.wake_max_distance,
+            }, null, 2));
+        }
+        else {
+            console.log('voice config updated.');
+        }
+    });
+    voice
+        .command('test <phrase>')
+        .description('Test the wake-word matcher against a phrase.')
+        .action(async (phrase) => {
+        const r = await matchConfiguredWakeWord(phrase);
+        console.log(JSON.stringify(r, null, 2));
+        if (!r.hit)
+            process.exitCode = 1;
+    });
+    void config;
+}
+//# sourceMappingURL=voice.js.map

package/dist/commands/voice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"voice.js","sourceRoot":"","sources":["../../src/commands/voice.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAChG,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEtE,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,kCAAkC,CAAC,CAAC;IAEvF,MAAM,MAAM,GAAG,KAAK;SACjB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,0DAA0D,CAAC;SACvE,MAAM,CAAC,QAAQ,EAAE,0BAA0B,CAAC;SAC5C,MAAM,CAAC,kBAAkB,EAAE,gDAAgD,CAAC;SAC5E,MAAM,CAAC,cAAc,EAAE,oCAAoC,CAAC;SAC5D,MAAM,CAAC,oBAAoB,EAAE,yBAAyB,CAAC;SACvD,MAAM,CAAC,SAAS,EAAE,0CAA0C,CAAC;SAC7D,MAAM,CAAC,KAAK,EAAE,IAGd,EAAE,EAAE;QACH,IAAI,GAAG,GAAG,MAAM,eAAe,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;YACnE,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,GAAG,CAAC,kBAAkB,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,kBAAkB,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;YAC5D,GAAG,CAAC,kBAAkB,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAChE,CAAC;YACD,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC;YAC1B,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,OAAO;YAAE,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAEzC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,eAAe,EAAE,oBAAoB;gBACrC,UAAU,EAAE,GAAG,CAAC,kBAAkB;gBAClC,MAAM;gBACN,YAAY,EAAE,GAAG,CAAC,iBAAiB;aACpC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;QAC/B,MAAM,CAAC,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,CAAC,GAAG;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEL,KAAK,MAAM,CAAC;AACd,CAAC"}

package/dist/core/cascade_router.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Cascade router (PLAN soft #4 + soft #10).
+ *
+ * Pablo 2026-05-26: "si laptop online procesamiento preferido
+ * en laptop, si laptop offline encola para cuando vuelve online.
+ * Automatico a GitHub Actions" -- this module decides WHICH
+ * target the next task runs on.
+ *
+ * Three targets, ranked in preference order:
+ *   1. Local laptop reachable on the LAN (mDNS + HTTP probe).
+ *   2. Cloudflare Tunnel exposing the laptop (HTTPS probe).
+ *   3. GitHub Actions fallback (dispatch a workflow run).
+ *
+ * Three compute classes drive how strict we are:
+ *   class_1_local_only        -- must hit laptop or CF tunnel; never Actions.
+ *                                Examples: open user docs, read local FS.
+ *   class_2_local_preferred   -- laptop -> CF -> Actions, in that order.
+ *                                Examples: generic agentic tasks.
+ *   class_3_cloud_ok          -- any reachable target wins. We still try
+ *                                local first when it's near, but Actions
+ *                                is fine if it's already warm.
+ *
+ * The router does NOT execute tasks itself -- it returns a
+ * RouteDecision the caller can act on (call the laptop HTTP
+ * brain, the CF URL, or dispatch a GHA workflow). This keeps
+ * the routing pure + testable.
+ *
+ * ASCII-only.
+ */
+export type ComputeClass = 'class_1_local_only' | 'class_2_local_preferred' | 'class_3_cloud_ok';
+export type Target = 'laptop_lan' | 'cf_tunnel' | 'github_actions';
+export interface RouteDecision {
+    /** Chosen target. null when no target is reachable AND the
+     *  compute class refuses to fall through to Actions. */
+    target: Target | null;
+    /** Endpoint URL the caller should hit (or the GHA workflow
+     *  ref for class actions). */
+    endpoint: string | null;
+    /** Human-readable explanation; surfaced to the user in chat
+     *  or status output. */
+    reason: string;
+    /** Targets we tried and skipped (with the why) so the user
+     *  can debug "why didn't my laptop pick this up?". */
+    attempts: Array<{
+        target: Target;
+        ok: boolean;
+        reason: string;
+    }>;
+}
+export interface ProbeResult {
+    ok: boolean;
+    latencyMs?: number;
+    reason?: string;
+}
+export interface CascadeProbes {
+    /** Check the laptop on the LAN -- usually an HTTP GET to
+     *  http://<discovered-host>:<port>/healthz. */
+    probeLaptopLan?: () => Promise<ProbeResult>;
+    /** Check the laptop via CF tunnel -- HTTPS GET to
+     *  https://<slug>.mcp.rpaforce.com/healthz. */
+    probeCfTunnel?: () => Promise<ProbeResult>;
+    /** Check GitHub Actions reachability -- usually a GET on the
+     *  user's repo (200 means GHA can dispatch). */
+    probeGithubActions?: () => Promise<ProbeResult>;
+}
+export interface CascadeEndpoints {
+    laptop_lan?: string;
+    cf_tunnel?: string;
+    github_actions?: string;
+}
+export interface CascadeOptions {
+    /** Maximum wall-clock per probe before we treat it as a miss.
+     *  Default 2000 ms. */
+    probeTimeoutMs?: number;
+}
+/** Decide which target to dispatch a task to.
+ *
+ *  Order: laptop_lan -> cf_tunnel -> github_actions. The
+ *  computeClass gates whether the last step is allowed.
+ *
+ *  Note: probes run sequentially so a reachable nearer target
+ *  short-circuits without paying for cloud probes. */
+export declare function decideRoute(computeClass: ComputeClass, endpoints: CascadeEndpoints, probes: CascadeProbes, opts?: CascadeOptions): Promise<RouteDecision>;
+/** HTTP-based probe factory. Returns a probe that does
+ *  `fetch(url, { method:'GET' })` + reports the latency. */
+export declare function makeHttpProbe(url: string, fetchImpl?: typeof fetch): () => Promise<ProbeResult>;
+/** Convenience: given an HTTP endpoint, run a healthcheck
+ *  against `<endpoint>/healthz`. Used by both LAN + CF probes. */
+export declare function makeHealthzProbe(baseUrl: string, fetchImpl?: typeof fetch): () => Promise<ProbeResult>;
+//# sourceMappingURL=cascade_router.d.ts.map

package/dist/core/cascade_router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cascade_router.d.ts","sourceRoot":"","sources":["../../src/core/cascade_router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,MAAM,YAAY,GAAG,oBAAoB,GAAG,yBAAyB,GAAG,kBAAkB,CAAC;AAEjG,MAAM,MAAM,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,gBAAgB,CAAC;AAEnE,MAAM,WAAW,aAAa;IAC5B;4DACwD;IACxD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;kCAC8B;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;4BACwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf;0DACsD;IACtD,QAAQ,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,WAAW;IAAG,EAAE,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAEjF,MAAM,WAAW,aAAa;IAC5B;mDAC+C;IAC/C,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5C;mDAC+C;IAC/C,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3C;oDACgD;IAChD,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,CAAC;CACjD;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B;2BACuB;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA8BD;;;;;;sDAMsD;AACtD,wBAAsB,WAAW,CAC/B,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,gBAAgB,EAC3B,MAAM,EAAE,aAAa,EACrB,IAAI,GAAE,cAAmB,GACxB,OAAO,CAAC,aAAa,CAAC,CAoDxB;AAED;4DAC4D;AAC5D,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,OAAO,KAA2D,GAC5E,MAAM,OAAO,CAAC,WAAW,CAAC,CAY5B;AAED;kEACkE;AAClE,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,OAAO,KAAK,GACvB,MAAM,OAAO,CAAC,WAAW,CAAC,CAG5B"}

package/dist/core/cascade_router.js

@@ -0,0 +1,131 @@
+/**
+ * Cascade router (PLAN soft #4 + soft #10).
+ *
+ * Pablo 2026-05-26: "si laptop online procesamiento preferido
+ * en laptop, si laptop offline encola para cuando vuelve online.
+ * Automatico a GitHub Actions" -- this module decides WHICH
+ * target the next task runs on.
+ *
+ * Three targets, ranked in preference order:
+ *   1. Local laptop reachable on the LAN (mDNS + HTTP probe).
+ *   2. Cloudflare Tunnel exposing the laptop (HTTPS probe).
+ *   3. GitHub Actions fallback (dispatch a workflow run).
+ *
+ * Three compute classes drive how strict we are:
+ *   class_1_local_only        -- must hit laptop or CF tunnel; never Actions.
+ *                                Examples: open user docs, read local FS.
+ *   class_2_local_preferred   -- laptop -> CF -> Actions, in that order.
+ *                                Examples: generic agentic tasks.
+ *   class_3_cloud_ok          -- any reachable target wins. We still try
+ *                                local first when it's near, but Actions
+ *                                is fine if it's already warm.
+ *
+ * The router does NOT execute tasks itself -- it returns a
+ * RouteDecision the caller can act on (call the laptop HTTP
+ * brain, the CF URL, or dispatch a GHA workflow). This keeps
+ * the routing pure + testable.
+ *
+ * ASCII-only.
+ */
+/** Race a promise against a timeout. */
+async function withTimeout(p, ms, label) {
+    return new Promise((resolve, reject) => {
+        const t = setTimeout(() => reject(new Error('timeout: ' + label)), ms);
+        p.then((v) => { clearTimeout(t); resolve(v); }, (e) => { clearTimeout(t); reject(e); });
+    });
+}
+async function safeProbe(label, fn, endpoint, timeoutMs) {
+    if (!fn)
+        return { ok: false, reason: 'no probe registered for ' + label };
+    if (!endpoint)
+        return { ok: false, reason: 'no endpoint configured for ' + label };
+    try {
+        const r = await withTimeout(fn(), timeoutMs, label);
+        if (r.ok)
+            return { ok: true, reason: 'ok' + (r.latencyMs !== undefined ? ' (' + r.latencyMs + 'ms)' : '') };
+        return { ok: false, reason: r.reason ?? 'probe returned ok=false' };
+    }
+    catch (err) {
+        return { ok: false, reason: err instanceof Error ? err.message : String(err) };
+    }
+}
+/** Decide which target to dispatch a task to.
+ *
+ *  Order: laptop_lan -> cf_tunnel -> github_actions. The
+ *  computeClass gates whether the last step is allowed.
+ *
+ *  Note: probes run sequentially so a reachable nearer target
+ *  short-circuits without paying for cloud probes. */
+export async function decideRoute(computeClass, endpoints, probes, opts = {}) {
+    const timeoutMs = opts.probeTimeoutMs ?? 2000;
+    const attempts = [];
+    /* Step 1: laptop_lan. */
+    const lan = await safeProbe('laptop_lan', probes.probeLaptopLan, endpoints.laptop_lan, timeoutMs);
+    attempts.push({ target: 'laptop_lan', ok: lan.ok, reason: lan.reason });
+    if (lan.ok) {
+        return {
+            target: 'laptop_lan',
+            endpoint: endpoints.laptop_lan ?? null,
+            reason: 'laptop reachable on the LAN',
+            attempts,
+        };
+    }
+    /* Step 2: cf_tunnel. */
+    const cf = await safeProbe('cf_tunnel', probes.probeCfTunnel, endpoints.cf_tunnel, timeoutMs);
+    attempts.push({ target: 'cf_tunnel', ok: cf.ok, reason: cf.reason });
+    if (cf.ok) {
+        return {
+            target: 'cf_tunnel',
+            endpoint: endpoints.cf_tunnel ?? null,
+            reason: 'laptop reachable via Cloudflare Tunnel',
+            attempts,
+        };
+    }
+    /* Step 3: github_actions -- gated by compute class. */
+    if (computeClass === 'class_1_local_only') {
+        return {
+            target: null, endpoint: null,
+            reason: 'class_1_local_only forbids Actions fallback and both local targets are unreachable',
+            attempts,
+        };
+    }
+    const gha = await safeProbe('github_actions', probes.probeGithubActions, endpoints.github_actions, timeoutMs);
+    attempts.push({ target: 'github_actions', ok: gha.ok, reason: gha.reason });
+    if (gha.ok) {
+        return {
+            target: 'github_actions',
+            endpoint: endpoints.github_actions ?? null,
+            reason: 'falling back to GitHub Actions dispatcher',
+            attempts,
+        };
+    }
+    return {
+        target: null, endpoint: null,
+        reason: 'no target is reachable',
+        attempts,
+    };
+}
+/** HTTP-based probe factory. Returns a probe that does
+ *  `fetch(url, { method:'GET' })` + reports the latency. */
+export function makeHttpProbe(url, fetchImpl = ((u, init) => globalThis.fetch(u, init))) {
+    return async () => {
+        const t0 = Date.now();
+        try {
+            const r = await fetchImpl(url, { method: 'GET' });
+            const latencyMs = Date.now() - t0;
+            if (r.ok)
+                return { ok: true, latencyMs };
+            return { ok: false, reason: 'HTTP ' + r.status, latencyMs };
+        }
+        catch (err) {
+            return { ok: false, reason: err instanceof Error ? err.message : String(err) };
+        }
+    };
+}
+/** Convenience: given an HTTP endpoint, run a healthcheck
+ *  against `<endpoint>/healthz`. Used by both LAN + CF probes. */
+export function makeHealthzProbe(baseUrl, fetchImpl) {
+    const url = baseUrl.replace(/\/+$/, '') + '/healthz';
+    return makeHttpProbe(url, fetchImpl);
+}
+//# sourceMappingURL=cascade_router.js.map

package/dist/core/cascade_router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cascade_router.js","sourceRoot":"","sources":["../../src/core/cascade_router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AA+CH,wCAAwC;AACxC,KAAK,UAAU,WAAW,CAAI,CAAa,EAAE,EAAU,EAAE,KAAa;IACpE,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvE,CAAC,CAAC,IAAI,CACJ,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACvC,CAAC,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,KAAa,EACb,EAA4C,EAC5C,QAA4B,EAC5B,SAAiB;IAEjB,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,GAAG,KAAK,EAAE,CAAC;IAC1E,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,GAAG,KAAK,EAAE,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,yBAAyB,EAAE,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACjF,CAAC;AACH,CAAC;AAED;;;;;;sDAMsD;AACtD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,YAA0B,EAC1B,SAA2B,EAC3B,MAAqB,EACrB,OAAuB,EAAE;IAEzB,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;IAC9C,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAE/C,yBAAyB;IACzB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAClG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,QAAQ,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI;YACtC,MAAM,EAAE,6BAA6B;YACrC,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC9F,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,SAAS,CAAC,SAAS,IAAI,IAAI;YACrC,MAAM,EAAE,wCAAwC;YAChD,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,IAAI,YAAY,KAAK,oBAAoB,EAAE,CAAC;QAC1C,OAAO;YACL,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI;YAC5B,MAAM,EAAE,oFAAoF;YAC5F,QAAQ;SACT,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,kBAAkB,EAAE,SAAS,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAC9G,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,SAAS,CAAC,cAAc,IAAI,IAAI;YAC1C,MAAM,EAAE,2CAA2C;YACnD,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI;QAC5B,MAAM,EAAE,wBAAwB;QAChC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;4DAC4D;AAC5D,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,YAA0B,CAAC,CAAC,CAAM,EAAE,IAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAE7E,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACjF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,SAAwB;IAExB,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC;IACrD,OAAO,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC"}

package/dist/core/cf_tunnel.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Cloudflare Tunnel orchestration (PLAN #2 connectivity).
+ *
+ * Yujin owns the `*.forge.yujin.app` subdomain via a CF
+ * account; each paid user gets a stable `<slug>.forge.yujin.app`
+ * URL that points to their laptop tunnel.
+ *
+ * This module:
+ *   - Resolves the cloudflared binary (download if missing).
+ *   - Starts/stops a tunnel session.
+ *   - Reads the tunnel URL (named + token from Yujin's CF
+ *     account, or `try.cloudflare.com` fallback for free
+ *     trial users).
+ *   - Persists current tunnel URL in registry per project.
+ *
+ * Note: real wiring to Yujin's CF API requires a server-
+ * side helper that mints tokens per user (HITO 4 era). This
+ * module ships the local side: it can run a try.cloudflare
+ * ephemeral tunnel out-of-the-box, and accepts a token when
+ * provided (from vault slot `cloudflare_tunnel_token`).
+ *
+ * ASCII-only.
+ */
+import { type ChildProcess } from 'node:child_process';
+export interface TunnelHandle {
+    /** Public URL the laptop is reachable at. */
+    publicUrl: string;
+    /** Underlying cloudflared process. */
+    process: ChildProcess;
+    /** Stop the tunnel + clean up. */
+    stop: () => Promise<void>;
+}
+export interface StartTunnelOptions {
+    /** Local port the panel runs on. */
+    port: number;
+    /** Force the ephemeral try.cloudflare flow (skip token). */
+    ephemeral?: boolean;
+    /** Override the cloudflared binary location. */
+    bin?: string;
+}
+/** Try to resolve cloudflared in PATH. Returns null if not
+ *  installed. The doctor command surfaces this so the user
+ *  knows to install before relying on tunnel features. */
+export declare function resolveCloudflared(): Promise<string | null>;
+/** Read the tunnel token from vault, if configured. The
+ *  expected slot name is `cloudflare_tunnel_token`. Returns
+ *  null when missing -- caller falls back to ephemeral. */
+export declare function readTunnelToken(): Promise<string | null>;
+/** Start a cloudflared tunnel for `port`. Returns a handle
+ *  with the public URL once cloudflared announces it. */
+export declare function startTunnel(opts: StartTunnelOptions): Promise<TunnelHandle>;
+//# sourceMappingURL=cf_tunnel.d.ts.map

package/dist/core/cf_tunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cf_tunnel.d.ts","sourceRoot":"","sources":["../../src/core/cf_tunnel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAO9D,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,OAAO,EAAE,YAAY,CAAC;IACtB,kCAAkC;IAClC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAQD;;0DAE0D;AAC1D,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoBjE;AAED;;2DAE2D;AAC3D,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ9D;AAED;yDACyD;AACzD,wBAAsB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CA4DjF"}

package/dist/core/cf_tunnel.js

@@ -0,0 +1,134 @@
+/**
+ * Cloudflare Tunnel orchestration (PLAN #2 connectivity).
+ *
+ * Yujin owns the `*.forge.yujin.app` subdomain via a CF
+ * account; each paid user gets a stable `<slug>.forge.yujin.app`
+ * URL that points to their laptop tunnel.
+ *
+ * This module:
+ *   - Resolves the cloudflared binary (download if missing).
+ *   - Starts/stops a tunnel session.
+ *   - Reads the tunnel URL (named + token from Yujin's CF
+ *     account, or `try.cloudflare.com` fallback for free
+ *     trial users).
+ *   - Persists current tunnel URL in registry per project.
+ *
+ * Note: real wiring to Yujin's CF API requires a server-
+ * side helper that mints tokens per user (HITO 4 era). This
+ * module ships the local side: it can run a try.cloudflare
+ * ephemeral tunnel out-of-the-box, and accepts a token when
+ * provided (from vault slot `cloudflare_tunnel_token`).
+ *
+ * ASCII-only.
+ */
+import { spawn } from 'node:child_process';
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { Vault } from '../vault/store.js';
+import { configDir } from '../license/index.js';
+const CLOUDFLARED_BIN_NAMES = {
+    win32: 'cloudflared.exe',
+    darwin: 'cloudflared',
+    linux: 'cloudflared',
+};
+/** Try to resolve cloudflared in PATH. Returns null if not
+ *  installed. The doctor command surfaces this so the user
+ *  knows to install before relying on tunnel features. */
+export async function resolveCloudflared() {
+    const name = CLOUDFLARED_BIN_NAMES[process.platform]
+        ?? 'cloudflared';
+    /* Check PATH. */
+    const envPath = process.env.PATH ?? '';
+    const separator = process.platform === 'win32' ? ';' : ':';
+    for (const dir of envPath.split(separator)) {
+        const candidate = path.join(dir, name);
+        try {
+            await fs.access(candidate);
+            return candidate;
+        }
+        catch { /* keep looking */ }
+    }
+    /* Check ~/.yujin-forge/bin where we drop the download. */
+    const local = path.join(os.homedir(), '.yujin-forge', 'bin', name);
+    try {
+        await fs.access(local);
+        return local;
+    }
+    catch { /* not present */ }
+    return null;
+}
+/** Read the tunnel token from vault, if configured. The
+ *  expected slot name is `cloudflare_tunnel_token`. Returns
+ *  null when missing -- caller falls back to ephemeral. */
+export async function readTunnelToken() {
+    try {
+        const vault = await Vault.open({ configDir: configDir() });
+        if (vault.has('cloudflare_tunnel_token')) {
+            return vault.get('cloudflare_tunnel_token');
+        }
+    }
+    catch { /* vault not initialised */ }
+    return null;
+}
+/** Start a cloudflared tunnel for `port`. Returns a handle
+ *  with the public URL once cloudflared announces it. */
+export async function startTunnel(opts) {
+    const bin = opts.bin ?? await resolveCloudflared();
+    if (!bin) {
+        throw new Error('cloudflared not found. Install from '
+            + 'https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/downloads/ '
+            + 'or set `bin` explicitly.');
+    }
+    const token = !opts.ephemeral ? await readTunnelToken() : null;
+    let args;
+    if (token) {
+        /* Named tunnel via Yujin's CF account. */
+        args = ['tunnel', 'run', '--token', token, '--url', 'http://127.0.0.1:' + opts.port];
+    }
+    else {
+        /* Ephemeral try.cloudflare flow -- gets a random
+           trycloudflare.com URL. */
+        args = ['tunnel', '--url', 'http://127.0.0.1:' + opts.port,
+            '--no-autoupdate'];
+    }
+    const proc = spawn(bin, args, {
+        stdio: ['ignore', 'pipe', 'pipe'],
+        env: { ...process.env },
+    });
+    /* Capture stdout/stderr until we see the public URL line.
+       try.cloudflare prints "https://<slug>.trycloudflare.com"
+       in stderr; named tunnels print the configured URL. */
+    const publicUrl = await new Promise((resolve, reject) => {
+        let buf = '';
+        const onData = (b) => {
+            buf += b.toString('utf-8');
+            const m = buf.match(/https:\/\/[a-z0-9-]+\.(?:trycloudflare\.com|forge\.yujin\.app|cfargotunnel\.com)/);
+            if (m) {
+                proc.stdout?.off('data', onData);
+                proc.stderr?.off('data', onData);
+                resolve(m[0]);
+            }
+        };
+        proc.stdout?.on('data', onData);
+        proc.stderr?.on('data', onData);
+        proc.on('error', reject);
+        /* Timeout: 30s for the tunnel to announce its URL. */
+        setTimeout(() => reject(new Error('cloudflared did not announce a URL within 30s. Output: ' + buf.slice(-500))), 30000);
+    });
+    const stop = () => new Promise((resolve) => {
+        if (proc.exitCode !== null) {
+            resolve();
+            return;
+        }
+        proc.once('exit', () => resolve());
+        proc.kill('SIGTERM');
+        setTimeout(() => {
+            if (proc.exitCode === null)
+                proc.kill('SIGKILL');
+            resolve();
+        }, 5000);
+    });
+    return { publicUrl, process: proc, stop };
+}
+//# sourceMappingURL=cf_tunnel.js.map

package/dist/core/cf_tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cf_tunnel.js","sourceRoot":"","sources":["../../src/core/cf_tunnel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAoBhD,MAAM,qBAAqB,GAAG;IAC5B,KAAK,EAAG,iBAAiB;IACzB,MAAM,EAAE,aAAa;IACrB,KAAK,EAAG,aAAa;CACtB,CAAC;AAEF;;0DAE0D;AAC1D,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,QAA8C,CAAC;WACrF,aAAa,CAAC;IACnB,iBAAiB;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3B,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;IACD,0DAA0D;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;2DAE2D;AAC3D,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;yDACyD;AACzD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAwB;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,MAAM,kBAAkB,EAAE,CAAC;IACnD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,sCAAsC;cACpC,2FAA2F;cAC3F,0BAA0B,CAC7B,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAE/D,IAAI,IAAc,CAAC;IACnB,IAAI,KAAK,EAAE,CAAC;QACV,0CAA0C;QAC1C,IAAI,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,CAAC;SAAM,CAAC;QACN;oCAC4B;QAC5B,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC,IAAI;YAClD,iBAAiB,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;QAC5B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;KACxB,CAAC,CAAC;IAEH;;4DAEwD;IACxD,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9D,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,CAAC,CAAS,EAAQ,EAAE;YACjC,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,kFAAkF,CAAC,CAAC;YACxG,IAAI,CAAC,EAAE,CAAC;gBACN,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACjC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACjC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzB,sDAAsD;QACtD,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yDAAyD,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1H,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,GAAkB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACxD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrB,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC"}

package/dist/core/gha_dispatcher.d.ts

@@ -0,0 +1,48 @@
+/**
+ * GitHub Actions fallback dispatcher (PLAN connectivity).
+ *
+ * Per Pablo's decision (#4): when laptop is offline, mobile
+ * (or web) clients dispatch `yf <command>` to the user's
+ * GitHub repo via a yf-remote.yml workflow. Outputs land in
+ * a branch `_yujin/runs/<run_id>.json` that mobile polls.
+ *
+ * The workflow file is auto-committed when `yf projects add`
+ * registers a repo for the first time (per Pablo's "OK
+ * autonomia" on confirmation #2).
+ *
+ * This module gives:
+ *   - `yfRemoteWorkflowYaml()` -> the canonical workflow.
+ *   - `dispatchWorkflow(repo, command, args, token)` -> POST
+ *     to the GH API.
+ *   - `pollRunStatus(repo, runId, token)` -> SSE-like poller.
+ *
+ * ASCII-only.
+ */
+export interface DispatchResult {
+    ok: boolean;
+    run_id?: string;
+    workflow_run_id?: number;
+    error?: string;
+}
+export interface RunStatus {
+    status: 'queued' | 'in_progress' | 'success' | 'failure' | 'cancelled' | 'timed_out';
+    url: string;
+    duration_seconds?: number;
+}
+/** The canonical workflow yaml that Forge commits to user
+ *  repos on first registration. Idempotent on re-write. */
+export declare function yfRemoteWorkflowYaml(): string;
+/** Generate a short, mostly-readable run_id. */
+export declare function generateRunId(): string;
+/** Dispatch yf-remote on a GitHub repo. `repo` is the
+ *  "owner/name" string. Returns run_id + the workflow_run_id
+ *  when GH assigns one. */
+export declare function dispatchWorkflow(repo: string, command: string, args: string, token: string): Promise<DispatchResult>;
+/** Poll the _yujin/runs branch for the result JSON. Returns
+ *  null while pending, or the parsed JSON when ready. */
+export declare function fetchRunResult(repo: string, runId: string, token: string): Promise<RunStatus & {
+    stdout?: string;
+    stderr?: string;
+    exit?: number;
+} | null>;
+//# sourceMappingURL=gha_dispatcher.d.ts.map

package/dist/core/gha_dispatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gha_dispatcher.d.ts","sourceRoot":"","sources":["../../src/core/gha_dispatcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,QAAQ,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,CAAC;IACrF,GAAG,EAAE,MAAM,CAAC;IACZ,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;2DAC2D;AAC3D,wBAAgB,oBAAoB,IAAI,MAAM,CAqF7C;AAED,gDAAgD;AAChD,wBAAgB,aAAa,IAAI,MAAM,CAItC;AAED;;2BAE2B;AAC3B,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,cAAc,CAAC,CA8BzB;AAED;yDACyD;AACzD,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA2CjF"}