@nexrall/code-core 1.4.76 → 1.4.78

package/dist/share/sessionShare.js

@@ -0,0 +1,336 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionShare = exports.MAX_REMOTE_INPUT_CHARS = exports.RECONNECT_FILL = exports.PULL_LIMIT = void 0;
+exports.shareServerUrl = shareServerUrl;
+exports.webLiveUrl = webLiveUrl;
+exports.startSessionShare = startSessionShare;
+exports.activeSessionShare = activeSessionShare;
+exports.publishSharedEvent = publishSharedEvent;
+exports.rebindSessionShare = rebindSessionShare;
+exports.stopSessionShare = stopSessionShare;
+// Lives in core (moved from the CLI's ui/sessionShare.ts, 2026-10-05) so the
+// VS Code panel can share a session with the same relay client and the same
+// S12b drive rules; the CLI module is a re-export shim. The singleton helpers
+// at the bottom are for the one-REPL CLI; the panel instantiates SessionShare
+// directly, one per chat tab.
+// Spec §93 — terminal-to-web continuity. S12a made the stream READ-ONLY
+// (watch); S12b adds the DRIVE half, behind an explicit terminal-side switch.
+//
+// While sharing is on, every §92 event this session writes to its local JSONL is ALSO
+// published over an authenticated Socket.IO connection to the platform
+// (ws-server/handlers/cliSessions.js), which relays it to the same account's other
+// clients — the live viewer at app.nexrall.com/live/<id>, another machine, later a
+// VS Code window. Nothing is stored server-side: the relay rebroadcasts within the
+// publisher's own user room, so only the account that owns the session can watch it.
+//
+// S12b: the same room can send `cli:session-input` / `cli:session-answer` frames
+// back. They are accepted ONLY while `/share drive on` is in effect (default:
+// watch-only), only for THIS session id, and always re-validated here — the relay
+// is a pipe, the terminal is the authority. Input goes to the chat loop's own
+// injection points; answers go to the permission gate's race (see
+// permissions/remoteAnswer.ts for the safety rule), never to the tools directly.
+//
+// Invariants, mirroring sessionEvents.ts's "telemetry must never fail a turn":
+//   · publish / publishSharedEvent never throw, and are no-ops when sharing is off.
+//   · An event produced while the socket is down is DROPPED, never buffered — the
+//     local JSONL is the source of truth, and the socket heals its own holes by
+//     re-pushing the tail (after a reconnect blip, and whenever a viewer attaches),
+//     so a dropped frame is exactly one replay away.
+//   · The connection is opt-in per session and dies with the process; the server
+//     cleans the live registry on disconnect, so a kill -9 needs no goodbye.
+const socket_io_client_1 = require("socket.io-client");
+const sessionEvents_1 = require("../events/sessionEvents");
+/** Frames pushed when a viewer attaches — enough context to see what the session has been doing. */
+exports.PULL_LIMIT = 200;
+/** Frames re-pushed after a reconnect, to fill the hole the outage left in watching clients. */
+exports.RECONNECT_FILL = 50;
+/** Bound on a remote input line; matches the relay's own cap (defense in depth). */
+exports.MAX_REMOTE_INPUT_CHARS = 8192;
+/** Shape of a permission request id — what the permission mirror can mint. */
+const REQUEST_ID_RE = /^[A-Za-z0-9_-]{1,64}$/;
+function clipText(text, max) {
+    return text.length > max ? text.slice(0, max - 1) + '…' : text;
+}
+/** Where the relay lives. Overridable so a dev stack never needs production. */
+function shareServerUrl(env = process.env) {
+    const raw = (env.NEXRALL_WS_URL ?? '').trim().replace(/\/+$/, '');
+    return raw || 'https://api.nexrall.com';
+}
+/** The link a human opens to watch — the CLI prints this, nothing else constructs it. */
+function webLiveUrl(id, env = process.env) {
+    const base = (env.NEXRALL_WEB_URL ?? '').trim().replace(/\/+$/, '') || 'https://app.nexrall.com';
+    return `${base}/live/${encodeURIComponent(id)}`;
+}
+const defaultFactory = (url, opts) => (0, socket_io_client_1.io)(url, opts);
+class SessionShare {
+    constructor(deps) {
+        this.deps = deps;
+        this.socket = null;
+        this.status = { state: 'connecting' };
+        /** A second connect means the first one dropped: heal the hole for watchers. */
+        this.everConnected = false;
+        this.refreshing = false;
+        this.stopped = false;
+        /** §93 S12b: remote driving — the terminal's switch, off until /share drive on. */
+        this.drive = false;
+        /** §93 S12b: the permission prompt currently open in this terminal (null: none). */
+        this.pendingPermission = null;
+        this.id = deps.sessionId;
+    }
+    get sessionId() {
+        return this.id;
+    }
+    get state() {
+        return this.status;
+    }
+    start() {
+        const factory = this.deps.ioFactory ?? defaultFactory;
+        const socket = factory(this.deps.url, {
+            path: '/socket.io',
+            // websocket-only: Engine.IO's polling fallback needs cookie-pinned session
+            // affinity, which a CLI has no reason to participate in.
+            transports: ['websocket'],
+            // Never keep the CLI process alive: sharing must cost nothing at exit.
+            autoUnref: true,
+            reconnection: true,
+            reconnectionDelay: 1000,
+            reconnectionDelayMax: 15000,
+            timeout: 10000,
+            // Function form: invoked before every connect attempt, so a token refreshed
+            // mid-session (or rotated by another command) is used by the next attempt.
+            auth: (cb) => {
+                cb({ token: this.deps.tokenProvider() ?? '' });
+            },
+        });
+        this.socket = socket;
+        socket.on('connect', () => {
+            this.setStatus({ state: 'live' });
+            this.emitHello();
+            if (this.everConnected)
+                this.pushTail(exports.RECONNECT_FILL);
+            this.everConnected = true;
+        });
+        socket.on('disconnect', (reason) => {
+            if (!this.stopped)
+                this.setStatus({ state: 'offline', detail: String(reason ?? 'disconnected') });
+        });
+        socket.on('connect_error', (err) => {
+            const detail = err?.message ?? 'connect error';
+            this.setStatus({ state: 'offline', detail });
+            // An expired access token is the one error the client itself can fix: the
+            // next automatic retry re-runs the auth callback, which then sees the new token.
+            if (this.deps.refreshToken && !this.refreshing && /invalid|expired/i.test(detail)) {
+                this.refreshing = true;
+                void this.deps
+                    .refreshToken()
+                    .catch(() => { })
+                    .finally(() => {
+                    this.refreshing = false;
+                });
+            }
+        });
+        // A viewer attached: give it the tail of this session's log.
+        socket.on('cli:session-pull', (payload) => {
+            const wanted = payload?.id;
+            if (typeof wanted === 'string' && wanted === this.id) {
+                // The hello went out when this share connected — long before a viewer
+                // that opens the link later arrives, and nothing replays it on its own.
+                // Without it that viewer renders "waiting" forever and cannot know the
+                // meta or that driving is allowed, so re-announce alongside the tail.
+                this.emitHello();
+                this.pushTail(exports.PULL_LIMIT);
+            }
+        });
+        // §93 S12b — the DRIVE half. Frames from the account's other clients are
+        // considered only while THIS terminal has drive on; each is re-validated
+        // here rather than trusted from the relay (the relay is a pipe — it cannot
+        // know this session's switch, and must not decide it either).
+        socket.on('cli:session-input', (payload) => {
+            const p = payload;
+            if (!p || typeof p !== 'object' || p.id !== this.id)
+                return;
+            const text = typeof p.text === 'string' ? p.text : '';
+            if (!text.trim() || text.length > exports.MAX_REMOTE_INPUT_CHARS)
+                return;
+            if (!this.isDriveOn()) {
+                // A silently dropped line reads as a bug on the web — say why instead.
+                this.publishRemoteNote({ kind: 'input', status: 'refused', reason: 'remote drive is off', text });
+                return;
+            }
+            try {
+                this.deps.onRemoteText?.(text);
+            }
+            catch {
+                /* the REPL survives any frame */
+            }
+        });
+        socket.on('cli:session-answer', (payload) => {
+            const p = payload;
+            if (!p || typeof p !== 'object' || p.id !== this.id)
+                return;
+            const requestId = typeof p.requestId === 'string' ? p.requestId : '';
+            const answer = p.answer === 'y' || p.answer === 'n' ? p.answer : null;
+            if (!answer || !REQUEST_ID_RE.test(requestId))
+                return;
+            if (!this.isDriveOn()) {
+                this.publishRemoteNote({ kind: 'answer', status: 'refused', reason: 'remote drive is off', requestId });
+                return;
+            }
+            try {
+                this.deps.onRemoteAnswer?.(requestId, answer);
+            }
+            catch {
+                /* same */
+            }
+        });
+        return this;
+    }
+    /**
+     * §93 S12b — turn remote driving on/off (returning the state now in effect).
+     * Off by default: a watch link is read-only until the person AT the terminal
+     * says otherwise, and the value is re-announced by every hello so a viewer
+     * that missed the toggle frame sees the truth after any reconnect. The
+     * terminal keeps every gate — drive can be revoked at any moment with
+     * /share drive off, and the destructive confirm stays terminal-only regardless.
+     */
+    setDrive(on) {
+        if (this.stopped)
+            return false;
+        const next = Boolean(on);
+        if (next !== this.drive) {
+            this.drive = next;
+            this.emitTo('cli:session-drive', { id: this.id, on: this.drive });
+        }
+        return this.drive;
+    }
+    isDriveOn() {
+        return this.drive && !this.stopped;
+    }
+    /**
+     * §93 S12b — the permission prompt currently open here, or null when none is.
+     * Kept so a viewer attaching MID-prompt is handed it again by the pull (the
+     * same healing rule the event tail follows); cleared by the gate when the
+     * prompt is done. Like every publish, a frame while disconnected is dropped
+     * rather than buffered — the pull replays the current one.
+     */
+    publishPermission(frame) {
+        this.pendingPermission = frame ?? null;
+        if (this.stopped || !this.socket?.connected)
+            return;
+        this.emitTo('cli:session-permission', { id: this.id, frame: this.pendingPermission });
+    }
+    /** §93 S12b — tell the web what this terminal did with a remote frame. */
+    publishRemoteNote(note) {
+        if (this.stopped || !this.socket?.connected)
+            return;
+        this.emitTo('cli:session-remote', {
+            id: this.id,
+            kind: note.kind,
+            status: note.status,
+            ...(note.reason ? { reason: clipText(note.reason, 160) } : {}),
+            ...(note.text ? { text: clipText(note.text, 240) } : {}),
+            ...(note.requestId ? { requestId: note.requestId } : {}),
+        });
+    }
+    publish(ev) {
+        if (this.stopped || !this.socket?.connected)
+            return; // dropped, not buffered — see header
+        this.emitTo('cli:session-event', { id: this.id, ev });
+    }
+    /** /clear and /fork move the session to a new id; watching follows it. */
+    rebind(id) {
+        if (this.stopped || !id || id === this.id)
+            return;
+        if (this.socket?.connected)
+            this.emitTo('cli:session-bye', { id: this.id, reason: 'rebound' });
+        this.id = id;
+        // A prompt (and its card) belonged to the OLD id; the new one starts clean.
+        this.pendingPermission = null;
+        if (this.socket?.connected)
+            this.emitHello();
+    }
+    stop(reason = 'closed') {
+        if (this.stopped)
+            return;
+        this.stopped = true;
+        // A dead share drives nothing and shows nothing: the drive switch and the
+        // prompt card die with the connection (a later /share starts watch-only).
+        this.drive = false;
+        this.pendingPermission = null;
+        if (this.socket?.connected)
+            this.emitTo('cli:session-bye', { id: this.id, reason });
+        try {
+            this.socket?.disconnect();
+        }
+        catch {
+            /* closing anyway */
+        }
+        this.setStatus({ state: 'stopped' });
+    }
+    emitTo(event, payload) {
+        try {
+            this.socket?.emit(event, payload);
+        }
+        catch {
+            /* the stream must never break the REPL */
+        }
+    }
+    /** One shape for every hello, so the two call sites cannot drift. */
+    emitHello() {
+        this.emitTo('cli:session-hello', { id: this.id, meta: this.deps.meta(), v: 1, drive: this.drive });
+    }
+    pushTail(limit) {
+        if (!this.socket?.connected)
+            return;
+        let events;
+        try {
+            events = (this.deps.recent ?? ((id) => (0, sessionEvents_1.readEvents)(id, { last: exports.PULL_LIMIT })))(this.id).slice(-limit);
+        }
+        catch {
+            return;
+        }
+        for (const ev of events)
+            this.emitTo('cli:session-event', { id: this.id, ev, replay: true });
+        // S12b: a viewer attaching mid-prompt needs the prompt, not just the log.
+        if (this.pendingPermission) {
+            this.emitTo('cli:session-permission', { id: this.id, frame: this.pendingPermission, replay: true });
+        }
+    }
+    setStatus(next) {
+        const same = next.state === this.status.state && next.detail === this.status.detail;
+        this.status = next;
+        if (!same) {
+            try {
+                this.deps.onStatus?.(next);
+            }
+            catch {
+                /* status is cosmetic */
+            }
+        }
+    }
+}
+exports.SessionShare = SessionShare;
+// ─── The one share a REPL can have ────────────────────────────────────────────
+let current = null;
+function startSessionShare(deps) {
+    current?.stop('replaced');
+    current = new SessionShare(deps).start();
+    return current;
+}
+function activeSessionShare() {
+    return current;
+}
+/** Called from the event funnel; free when sharing is off. */
+function publishSharedEvent(ev) {
+    if (!ev)
+        return;
+    current?.publish(ev);
+}
+function rebindSessionShare(id) {
+    current?.rebind(id);
+}
+function stopSessionShare(reason = 'closed') {
+    current?.stop(reason);
+    current = null;
+}
+//# sourceMappingURL=sessionShare.js.map

package/dist/ui/configCmd.d.ts

@@ -0,0 +1,48 @@
+/** The `promptSuggestions` setting key — shared so the panel and the CLI's
+ *  suggestion engine can never disagree on the spelling. */
+export declare const SUGGESTIONS_SETTING = "promptSuggestions";
+export interface ConfigKey {
+    key: string;
+    description: string;
+    /** Legal values, in the order shown. */
+    values: readonly string[];
+    /** What the value is when the settings file does not mention the key. */
+    defaultValue: string;
+    /** Turns a raw settings.json value into one of `values` (or the default). */
+    read: (raw: unknown) => string;
+    /** The slash command (without the value) that applies a change live and saves it. */
+    command: string;
+}
+export declare const CONFIG_KEYS: readonly ConfigKey[];
+export type ConfigArgs = {
+    kind: 'list';
+} | {
+    kind: 'show';
+    key: ConfigKey;
+} | {
+    kind: 'set';
+    key: ConfigKey;
+    value: string;
+    scope: 'user' | 'project';
+} | {
+    kind: 'error';
+    message: string;
+};
+/** Case-insensitive key lookup — people type `livediff` for `liveDiff`. */
+export declare function findConfigKey(name: string): ConfigKey | undefined;
+/**
+ * `/config`                       → list
+ * `/config key`                   → show one
+ * `/config key=value` | `key value` → set (add `--project` to save it for this project only)
+ */
+export declare function parseConfigArgs(arg: string): ConfigArgs;
+/** The slash line chat.ts runs to apply the change live and persist it. */
+export declare function applyLine(a: {
+    key: ConfigKey;
+    value: string;
+    scope: 'user' | 'project';
+}): string;
+export declare function currentValue(key: ConfigKey, raw: Record<string, unknown> | undefined | null): string;
+export declare function formatConfigList(raw: Record<string, unknown> | undefined | null): string[];
+export declare function formatConfigKey(key: ConfigKey, raw: Record<string, unknown> | undefined | null): string[];
+//# sourceMappingURL=configCmd.d.ts.map

package/dist/ui/configCmd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configCmd.d.ts","sourceRoot":"","sources":["../../src/ui/configCmd.ts"],"names":[],"mappings":"AAWA;4DAC4D;AAC5D,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AAEvD,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,wCAAwC;IACxC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,yEAAyE;IACzE,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,IAAI,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/B,qFAAqF;IACrF,OAAO,EAAE,MAAM,CAAC;CACjB;AAOD,eAAO,MAAM,WAAW,EAAE,SAAS,SAAS,EAoD3C,CAAC;AAEF,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,SAAS,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAGjE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CA6BvD;AAED,2EAA2E;AAC3E,wBAAgB,SAAS,CAAC,CAAC,EAAE;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,MAAM,CAEjG;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAEpG;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,EAAE,CAU1F;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,EAAE,CAOzG"}

package/dist/ui/configCmd.js

@@ -0,0 +1,146 @@
+"use strict";
+// Lives in core (moved from the CLI's ui/configCmd.ts, 2026-10-04) so the VS
+// Code panel offers the same /config front door; the CLI module is a re-export shim.
+// /config — one place to see and change the settings that already exist.
+//
+// The registry below is the single list of keys /config knows. Each entry says what
+// values are legal and which slash command APPLIES it to the running session — /config
+// never writes a file on its own for a key whose command would also change live state,
+// because a saved setting that does nothing until the next launch looks like a bug.
+// Pure: parsing, validation, formatting. chat.ts reads the merged settings and runs the
+// command this module hands back.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONFIG_KEYS = exports.SUGGESTIONS_SETTING = void 0;
+exports.findConfigKey = findConfigKey;
+exports.parseConfigArgs = parseConfigArgs;
+exports.applyLine = applyLine;
+exports.currentValue = currentValue;
+exports.formatConfigList = formatConfigList;
+exports.formatConfigKey = formatConfigKey;
+/** The `promptSuggestions` setting key — shared so the panel and the CLI's
+ *  suggestion engine can never disagree on the spelling. */
+exports.SUGGESTIONS_SETTING = 'promptSuggestions';
+const onOff = (raw, dflt) => {
+    if (raw === undefined)
+        return dflt;
+    return raw === false || raw === 'off' ? 'off' : 'on';
+};
+exports.CONFIG_KEYS = [
+    {
+        key: 'liveDiff',
+        description: 'Show the lines each edit changes as it happens',
+        values: ['on', 'off'],
+        defaultValue: 'on',
+        read: (r) => onOff(r, 'on'),
+        command: '/livediff',
+    },
+    {
+        key: 'mouse',
+        description: 'Wheel scrolling in fullscreen',
+        values: ['on', 'off'],
+        defaultValue: 'on',
+        read: (r) => onOff(r, 'on'),
+        command: '/mouse',
+    },
+    {
+        key: 'notifications',
+        description: 'Terminal notifications for background jobs and long turns',
+        values: ['auto', 'bell', 'osc', 'off'],
+        defaultValue: 'auto',
+        read: (r) => r === false ? 'off' : typeof r === 'string' && ['auto', 'bell', 'osc', 'off'].includes(r) ? r : 'auto',
+        command: '/notify',
+    },
+    {
+        key: 'editorMode',
+        description: 'Vim-style editing in the input box',
+        values: ['on', 'off'],
+        defaultValue: 'off',
+        read: (r) => (r === 'vim' ? 'on' : 'off'),
+        command: '/vim',
+    },
+    {
+        // Names are open-ended (custom files), so the registry can't enumerate them: any
+        // lower-case style name is accepted here and /output-style rejects an unknown one.
+        key: 'outputStyle',
+        description: 'How the agent answers (see /output-style for the list)',
+        values: ['default', 'concise', 'explanatory', 'learning'],
+        defaultValue: 'default',
+        read: (r) => (typeof r === 'string' && r.trim() ? r.trim().toLowerCase() : 'default'),
+        command: '/output-style',
+    },
+    {
+        key: 'promptSuggestions',
+        description: 'A suggested next prompt after each turn (a small background request)',
+        values: ['on', 'off'],
+        defaultValue: 'on',
+        read: (r) => onOff(r, 'on'),
+        command: '/suggestions',
+    },
+];
+/** Case-insensitive key lookup — people type `livediff` for `liveDiff`. */
+function findConfigKey(name) {
+    const n = name.trim().toLowerCase();
+    return exports.CONFIG_KEYS.find((k) => k.key.toLowerCase() === n);
+}
+/**
+ * `/config`                       → list
+ * `/config key`                   → show one
+ * `/config key=value` | `key value` → set (add `--project` to save it for this project only)
+ */
+function parseConfigArgs(arg) {
+    const tokens = String(arg ?? '')
+        .trim()
+        .split(/\s+/)
+        .filter(Boolean);
+    const scope = tokens.includes('--project') ? 'project' : 'user';
+    const rest = tokens.filter((t) => t !== '--project' && t !== '--user');
+    if (rest.length === 0)
+        return { kind: 'list' };
+    let name = rest[0];
+    let value = rest[1];
+    const eq = name.indexOf('=');
+    if (eq >= 0) {
+        value = name.slice(eq + 1) || rest[1];
+        name = name.slice(0, eq);
+    }
+    const key = findConfigKey(name);
+    if (!key) {
+        return { kind: 'error', message: `Unknown setting "${name}". Known: ${exports.CONFIG_KEYS.map((k) => k.key).join(', ')}.` };
+    }
+    if (value === undefined || value === '')
+        return { kind: 'show', key };
+    if (rest.length > 2 && eq < 0)
+        return { kind: 'error', message: `Too many values. Use: /config ${key.key} <${key.values.join('|')}>` };
+    const v = value.toLowerCase();
+    if (!key.values.includes(v)) {
+        return { kind: 'error', message: `"${value}" is not valid for ${key.key}. Use one of: ${key.values.join(', ')}.` };
+    }
+    return { kind: 'set', key, value: v, scope };
+}
+/** The slash line chat.ts runs to apply the change live and persist it. */
+function applyLine(a) {
+    return `${a.key.command} ${a.value}${a.scope === 'project' ? ' --project' : ''}`;
+}
+function currentValue(key, raw) {
+    return key.read((raw ?? {})[key.key]);
+}
+function formatConfigList(raw) {
+    const width = Math.max(...exports.CONFIG_KEYS.map((k) => k.key.length));
+    const lines = ['Settings (merged from your user and project settings.json):', ''];
+    for (const k of exports.CONFIG_KEYS) {
+        const cur = currentValue(k, raw);
+        const mark = cur === k.defaultValue ? '' : '  (changed)';
+        lines.push(`  ${k.key.padEnd(width)}  ${cur.padEnd(5)} ${k.description}${mark}`);
+    }
+    lines.push('', 'Change one:  /config <key>=<value>   e.g. /config liveDiff=off', 'Only this project:  add --project');
+    return lines;
+}
+function formatConfigKey(key, raw) {
+    return [
+        `${key.key} = ${currentValue(key, raw)}`,
+        `  ${key.description}`,
+        `  values: ${key.values.join(' | ')} (default ${key.defaultValue})`,
+        `  change: /config ${key.key}=<value>`,
+    ];
+}
+//# sourceMappingURL=configCmd.js.map

package/dist/ui/deployPanel.d.ts

@@ -0,0 +1,91 @@
+export type DeployEnv = 'local' | 'staging' | 'production' | 'unknown';
+export interface DeployTarget {
+    /** What the user types: `/deploy <name>`. */
+    name: string;
+    command: string;
+    /** Where we learned about it (`package.json`, `vercel.json`, …). */
+    source: string;
+    env: DeployEnv;
+    /** Why that environment — printed so the user can disagree at a glance. */
+    why: string;
+}
+/** How strict a gate is. `unknown` sits WITH production, not below it. */
+export declare const ENV_RANK: Record<DeployEnv, number>;
+export declare const ENV_LABELS: Record<DeployEnv, string>;
+/** The strictest of two environments — the rule that stops an override lowering a gate. */
+export declare function strictestEnv(a: DeployEnv, b: DeployEnv): DeployEnv;
+export declare function envFromFlags(command: string): DeployEnv | undefined;
+/** The environment a target runs against, and the sentence that justifies it. */
+export declare function inferEnv(name: string, command: string): {
+    env: DeployEnv;
+    why: string;
+};
+/**
+ * Every deploy target this folder can offer, in a stable order: package.json scripts, then
+ * recipes, then tool configs, then infrastructure. Duplicate commands are collapsed (a
+ * `deploy` script that merely calls `vercel deploy` is also matched by the vercel config).
+ */
+export declare function detectDeployTargets(workDir: string): DeployTarget[];
+export interface ParsedDeployArgs {
+    name?: string;
+    /** `--env X`: a claim about the environment. Never lowers the gate (see strictestEnv). */
+    env?: DeployEnv;
+    yes: boolean;
+    dryRun: boolean;
+    list: boolean;
+}
+export declare const DEPLOY_USAGE = "/deploy [target] [--env local|staging|production] [--yes] [--dry-run]   \u00B7   /deploy list";
+export declare function parseDeployArgs(arg: string): ParsedDeployArgs | {
+    error: string;
+};
+export interface DeployGate {
+    ok: boolean;
+    /** Why it is refused — printed verbatim. */
+    reason?: string;
+    /**
+     * The word the user must TYPE to go ahead. Production (and unknown, which is gated the
+     * same way) always asks, even with --yes: a picker answer is too easy to give by reflex.
+     */
+    confirmWord?: string;
+    /**
+     * A plain [Deploy]/[Cancel] answer is enough — set for local/staging unless `--yes`
+     * skipped it, and never alongside `confirmWord` (typing the word is the answer then).
+     */
+    ask?: boolean;
+}
+export declare function deployGate(env: DeployEnv, opts?: {
+    readonly?: boolean;
+    yes?: boolean;
+}): DeployGate;
+export interface DeployCheck {
+    label: string;
+    /** true = ran and passed, false = ran and failed, null = not run this session. */
+    ok: boolean | null;
+}
+export interface DeployPanelInput {
+    /** The target picked, or null when none was (yet) — the panel still shows the choice. */
+    target: DeployTarget | null;
+    /** The environment the deploy will actually be gated on. */
+    env: DeployEnv;
+    /** Why that environment, printable. */
+    why: string;
+    /** Set when `--env` asked for something looser than the target's own answer. */
+    envOverrideIgnored?: string;
+    changes: string[];
+    /** Files changed beyond what fits — the caller counts, the panel only reports. */
+    changesHidden?: number;
+    /**
+     * `workDir` is not a git repository at all, so the changes count is unknowable — never
+     * print "nothing uncommitted", which would claim the deploy ships the last commit.
+     */
+    noGit?: boolean;
+    checks: DeployCheck[];
+    dryRun?: boolean;
+    /** Set once the gate has decided (production/unknown ask for a typed word). */
+    gateNote?: string;
+}
+/** The environment word the user must type, in one sentence they can act on. */
+export declare function confirmPrompt(env: DeployEnv): string;
+/** True when `typed` is the confirmation word `env` asked for. */
+export declare function confirmMatches(env: DeployEnv, typed: string): boolean;
+//# sourceMappingURL=deployPanel.d.ts.map

package/dist/ui/deployPanel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployPanel.d.ts","sourceRoot":"","sources":["../../src/ui/deployPanel.ts"],"names":[],"mappings":"AA2BA,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;AAEvE,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,SAAS,CAAC;IACf,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;CACb;AAED,0EAA0E;AAC1E,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAuD,CAAC;AAEvG,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAKhD,CAAC;AAEF,2FAA2F;AAC3F,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,SAAS,CAElE;AAmCD,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAQnE;AAED,iFAAiF;AACjF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAevF;AAiPD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CAWnE;AAID,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,eAAO,MAAM,YAAY,kGAA6F,CAAC;AAIvH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAuCjF;AAID,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,UAAU,CAWvG;AAID,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,yFAAyF;IACzF,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,4DAA4D;IAC5D,GAAG,EAAE,SAAS,CAAC;IACf,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAGpD;AAED,kEAAkE;AAClE,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAGrE"}