@nuvin/session 0.1.0-rc.6 → 0.1.0-rc.7

package/dist/client/data-client.d.ts

@@ -0,0 +1,53 @@
+import type { DaemonDirectoryRow, HistoryPage, SessionSnapshot, WorkspaceSummary } from "../protocol/index.ts";
+import type { TransportCredential } from "./endpoint.ts";
+/** Discovery payload: the daemon directory (account-scoped cloud, machine-scoped local). */
+export type DaemonDirectory = {
+    daemons: DaemonDirectoryRow[];
+    defaultSessionId?: string;
+};
+/**
+ * Live-attach endpoint for one daemon: ws URL + credential for the session
+ * socket. `credential` is exactly the transport's `TransportCredential`
+ * ({token} local / {grant} cloud), so a directory `getEndpoint` is a trivial
+ * wrapper over `acquireEndpoint`.
+ */
+export type DaemonEndpoint = {
+    url: string;
+    credential: TransportCredential;
+};
+/**
+ * Everything the web UI needs to READ and MANAGE daemon data, independent of
+ * how it travels (spec §4.2). No HTTP status codes, URL shapes, or fetch types
+ * appear here. Terminal conditions throw `TerminalEndpointError` with a code
+ * (`transcript-not-found`, `session-not-found`, `daemon-revoked`); auth expiry
+ * surfaces via the implementation's `onUnauthorized` hook, never through this
+ * interface; `createWorkspace` failures carry the server's message; everything
+ * else is a plain `Error`.
+ */
+export interface DataClient {
+    listDaemons(): Promise<DaemonDirectory>;
+    acquireEndpoint(daemonId: string): Promise<DaemonEndpoint>;
+    fetchTranscript(daemonId: string, historyId: string, opts?: {
+        workspace?: string;
+        profile?: string;
+    }): Promise<SessionSnapshot>;
+    fetchHistory(daemonId: string, opts?: {
+        profile?: string;
+        cwd?: string;
+        limit?: number;
+        cursor?: string;
+    }): Promise<HistoryPage>;
+    listWorkspaces(daemonId: string, opts?: {
+        profile?: string;
+    }): Promise<WorkspaceSummary[]>;
+    createWorkspace(daemonId: string, opts: {
+        name: string;
+        root?: string;
+        profile?: string;
+    }): Promise<WorkspaceSummary>;
+    deleteSession(daemonId: string, historyId: string, opts?: {
+        workspace?: string;
+        profile?: string;
+    }): Promise<void>;
+}
+//# sourceMappingURL=data-client.d.ts.map

package/dist/client/data-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-client.d.ts","sourceRoot":"","sources":["../../src/client/data-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,gBAAgB,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEzD,4FAA4F;AAC5F,MAAM,MAAM,eAAe,GAAG;IAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3F;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAE9E;;;;;;;;GAQG;AACH,MAAM,WAAW,UAAU;IACzB,WAAW,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACxC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3D,eAAe,CACb,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9C,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACzE,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC3F,eAAe,CACb,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACtD,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,aAAa,CACX,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9C,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}

package/dist/client/http-data-client.d.ts

@@ -0,0 +1,19 @@
+import type { DataClient } from "./data-client.ts";
+export type HttpDataClientOptions = {
+    /** "" / absent ⇒ same-origin (local). Absolute relay origin ⇒ cloud. */
+    baseUrl?: string;
+    /** Cloud: fresh Clerk JWT per request. Absent ⇒ no bearer on discovery. */
+    getToken?: () => Promise<string | null>;
+    /** Cloud: 401 anywhere ⇒ route to /sign-in with return-to. */
+    onUnauthorized?: () => void;
+    fetchImpl?: typeof fetch;
+};
+/**
+ * The single HTTP DataClient for BOTH web modes (spec §4.3). Local: same-origin
+ * discovery, per-row daemon base + static bearer for data methods, static
+ * endpoints. Cloud: relay base, Clerk bearer, POST /connect for endpoints.
+ * Mode is entirely captured in `options` + the row shapes returned by
+ * GET /api/daemons; there is one code path.
+ */
+export declare function createHttpDataClient(options?: HttpDataClientOptions): DataClient;
+//# sourceMappingURL=http-data-client.d.ts.map

package/dist/client/http-data-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-data-client.d.ts","sourceRoot":"","sources":["../../src/client/http-data-client.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAmC,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGpF,MAAM,MAAM,qBAAqB,GAAG;IAClC,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxC,8DAA8D;IAC9D,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AAkBF;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B,GAAG,UAAU,CA+KpF"}

package/dist/client/index.d.ts

@@ -1,5 +1,7 @@
+export * from "./data-client.ts";
 export * from "./directory.ts";
 export * from "./endpoint.ts";
+export * from "./http-data-client.ts";
 export * from "./session-client.ts";
 export * from "./socket.ts";
 export * from "./transport.ts";

package/dist/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC"}

package/dist/client/index.js

@@ -611,6 +611,178 @@ var TerminalEndpointError = class extends Error {
   }
 };
 
+// src/client/http-data-client.ts
+function httpBaseFromWsUrl(wsUrl) {
+  const u = new URL(wsUrl);
+  const scheme = u.protocol === "wss:" ? "https:" : "http:";
+  return `${scheme}//${u.host}`;
+}
+function queryString(params) {
+  const q = new URLSearchParams();
+  for (const [key, value] of Object.entries(params)) {
+    if (value !== void 0) q.set(key, String(value));
+  }
+  const s = q.toString();
+  return s ? `?${s}` : "";
+}
+function createHttpDataClient(options = {}) {
+  const fetchImpl = options.fetchImpl ?? ((...args) => fetch(...args));
+  const baseUrl = (options.baseUrl ?? "").replace(/\/+$/, "");
+  const rows = /* @__PURE__ */ new Map();
+  const resolveToken = async (id) => {
+    const endpoint = rows.get(id)?.endpoint;
+    if (endpoint) return endpoint.token;
+    return options.getToken ? await options.getToken() : null;
+  };
+  const resolveBase = (id) => {
+    const endpoint = rows.get(id)?.endpoint;
+    return endpoint ? httpBaseFromWsUrl(endpoint.wsUrl) : baseUrl;
+  };
+  const daemonFetch = async (id, suffix, init = {}) => {
+    const token = await resolveToken(id);
+    const response = await fetchImpl(
+      `${resolveBase(id)}/api/daemons/${encodeURIComponent(id)}${suffix}`,
+      {
+        ...init,
+        cache: "no-store",
+        headers: {
+          ...init.headers ?? {},
+          ...token !== null ? { Authorization: `Bearer ${token}` } : {}
+        }
+      }
+    );
+    if (response.status === 401) {
+      options.onUnauthorized?.();
+      throw new Error("Signed out \u2014 authentication required.");
+    }
+    return response;
+  };
+  return {
+    async listDaemons() {
+      const token = options.getToken ? await options.getToken() : null;
+      const response = await fetchImpl(`${baseUrl}/api/daemons`, {
+        cache: "no-store",
+        headers: token !== null ? { Authorization: `Bearer ${token}` } : {}
+      });
+      if (response.status === 401) {
+        options.onUnauthorized?.();
+        throw new Error("Signed out \u2014 authentication required.");
+      }
+      if (!response.ok) {
+        throw new Error(`Failed to fetch the daemon list (HTTP ${response.status}).`);
+      }
+      const body = await response.json();
+      rows.clear();
+      for (const row of body.daemons) rows.set(row.id, row);
+      return {
+        daemons: body.daemons,
+        ...body.defaultSessionId !== void 0 ? { defaultSessionId: body.defaultSessionId } : {}
+      };
+    },
+    async acquireEndpoint(daemonId) {
+      const endpoint = rows.get(daemonId)?.endpoint;
+      if (endpoint) {
+        return { url: endpoint.wsUrl, credential: { token: endpoint.token } };
+      }
+      const token = options.getToken ? await options.getToken() : null;
+      const response = await fetchImpl(
+        `${baseUrl}/api/daemons/${encodeURIComponent(daemonId)}/connect`,
+        {
+          method: "POST",
+          cache: "no-store",
+          headers: token !== null ? { Authorization: `Bearer ${token}` } : {}
+        }
+      );
+      if (response.status === 401) {
+        options.onUnauthorized?.();
+        throw new Error("Signed out \u2014 authentication required.");
+      }
+      if (response.status === 404) {
+        throw new TerminalEndpointError(
+          "daemon-revoked",
+          `Daemon "${daemonId}" is no longer registered.`
+        );
+      }
+      if (!response.ok) {
+        throw new Error(
+          response.status === 409 ? `Daemon "${daemonId}" is offline.` : `Connect failed for "${daemonId}" (HTTP ${response.status}).`
+        );
+      }
+      const body = await response.json();
+      return { url: body.wsUrl, credential: { grant: body.grant } };
+    },
+    async fetchTranscript(daemonId, historyId, opts) {
+      const suffix = `/transcript/${encodeURIComponent(historyId)}${queryString({
+        workspace: opts?.workspace,
+        profile: opts?.profile
+      })}`;
+      const response = await daemonFetch(daemonId, suffix);
+      if (response.status === 404) {
+        throw new TerminalEndpointError(
+          "transcript-not-found",
+          "This session's transcript is no longer available."
+        );
+      }
+      if (!response.ok) {
+        throw new Error(`Failed to load the transcript (HTTP ${response.status}).`);
+      }
+      return await response.json();
+    },
+    async fetchHistory(daemonId, opts) {
+      const suffix = `/history${queryString({
+        profile: opts?.profile,
+        cwd: opts?.cwd,
+        limit: opts?.limit,
+        cursor: opts?.cursor
+      })}`;
+      const response = await daemonFetch(daemonId, suffix);
+      if (!response.ok) {
+        throw new Error(`Failed to load history (HTTP ${response.status}).`);
+      }
+      return await response.json();
+    },
+    async listWorkspaces(daemonId, opts) {
+      const suffix = `/workspaces${queryString({ profile: opts?.profile })}`;
+      const response = await daemonFetch(daemonId, suffix);
+      if (!response.ok) {
+        throw new Error(`Failed to load workspaces (HTTP ${response.status}).`);
+      }
+      return await response.json();
+    },
+    async createWorkspace(daemonId, opts) {
+      const response = await daemonFetch(daemonId, "/workspaces", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          name: opts.name,
+          ...opts.root !== void 0 ? { root: opts.root } : {},
+          ...opts.profile !== void 0 ? { profile: opts.profile } : {}
+        })
+      });
+      if (!response.ok) {
+        const body = await response.json().catch(() => null);
+        throw new Error(
+          body?.message ?? `Failed to create the workspace (HTTP ${response.status}).`
+        );
+      }
+      return await response.json();
+    },
+    async deleteSession(daemonId, historyId, opts) {
+      const suffix = `/sessions/${encodeURIComponent(historyId)}${queryString({
+        workspace: opts?.workspace,
+        profile: opts?.profile
+      })}`;
+      const response = await daemonFetch(daemonId, suffix, { method: "DELETE" });
+      if (response.status === 404) {
+        throw new TerminalEndpointError("session-not-found", "This session no longer exists.");
+      }
+      if (!response.ok) {
+        throw new Error(`Failed to delete the session (HTTP ${response.status}).`);
+      }
+    }
+  };
+}
+
 // src/client/session-client.ts
 var EMPTY_MODEL_COMPLETION = {
   providers: [],
@@ -1051,6 +1223,7 @@ function createWebSocketTransport(options) {
 export {
   TerminalEndpointError,
   adaptWhatwgSocket,
+  createHttpDataClient,
   createServerDirectory,
   createSessionClient,
   createWebSocketTransport,

package/dist/protocol/daemon-directory.d.ts

@@ -0,0 +1,30 @@
+import type { SessionDescriptor } from "./types.ts";
+/** GET /api/daemons — served by BOTH the CLI local web server and the relay (spec §4.1). */
+export type DaemonDirectoryResponse = {
+    daemons: DaemonDirectoryRow[];
+    /** Pre-provisioned first-paint session — local mode only; relay omits. */
+    defaultSessionId?: string;
+};
+export type DaemonDirectoryRow = {
+    id: string;
+    /** Display label (local: entry name; cloud: registered name). */
+    name: string;
+    /** Local: always true (unreachable entries are dropped). Cloud: live presence. */
+    online: boolean;
+    lastSeenAt: string | null;
+    sessions?: SessionDescriptor[];
+    /**
+     * Static credentials (local mode): the browser dials wsUrl directly with the
+     * bearer token. Absent (cloud): acquire via POST /api/daemons/:id/connect.
+     */
+    endpoint?: {
+        wsUrl: string;
+        token: string;
+    };
+};
+/** POST /api/daemons/:id/connect — relay only (for now, spec §10). */
+export type DaemonConnectResponse = {
+    wsUrl: string;
+    grant: string;
+};
+//# sourceMappingURL=daemon-directory.d.ts.map

package/dist/protocol/daemon-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-directory.d.ts","sourceRoot":"","sources":["../../src/protocol/daemon-directory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,4FAA4F;AAC5F,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,qBAAqB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/protocol/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./daemon-directory.ts";
 export * from "./types.ts";
 export * from "./version.ts";
 //# sourceMappingURL=index.d.ts.map

package/dist/protocol/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/protocol/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/protocol/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC"}

package/dist/protocol/index.js

@@ -1,4 +1,4 @@
-import "../chunk-DGC7JSCG.js";
+import "../chunk-AXY5EQPY.js";
 import {
   PROTOCOL_VERSION
 } from "../chunk-7G3R25NS.js";

package/dist/test-utils/index.js

@@ -1,4 +1,4 @@
-import "../chunk-DGC7JSCG.js";
+import "../chunk-AXY5EQPY.js";
 import {
   PROTOCOL_VERSION
 } from "../chunk-7G3R25NS.js";
@@ -137,7 +137,7 @@ async function startFakeRelay(options = {}) {
           lastSeenAt: null,
           sessions: []
         }));
-        sendJson(res, 200, rows);
+        sendJson(res, 200, { daemons: rows });
         return;
       }
       const connectMatch = /^POST \/api\/daemons\/([A-Za-z0-9_-]+)\/connect$/.exec(route);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nuvin/session",
-  "version": "0.1.0-rc.6",
+  "version": "0.1.0-rc.7",
   "private": false,
   "description": "Headless session layer for Nuvin: state reducers, wire protocol, session controller",
   "license": "Apache-2.0",
@@ -50,7 +50,7 @@
   },
   "dependencies": {
     "ws": "^8.20.0",
-    "@nuvin/agent-core": "^0.1.0-rc.5"
+    "@nuvin/agent-core": "^0.1.0-rc.7"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",