@openagt/dashboard 0.0.0-stage → 0.8.0

package/dist/loopback-host.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Loopback-address helpers, shared by the daemon (deciding whether a bind gates behind the
+ * token, #1051) and the RPC mount (rejecting a rebound `Host`). A leaf module on purpose:
+ * `daemon.ts` imports the dashboard, so the mount cannot import these back out of it.
+ */
+/**
+ * True when `host` is a loopback address the browser reaches without leaving the machine (#1051).
+ * A bind-all (`0.0.0.0`, `::`) or a routable address is not, and gates behind the shared token.
+ *
+ * The IPv4 check matches the whole `127.0.0.0/8` range but only as an address: a bare
+ * `startsWith('127.')` also accepts a *registrable name* like `127.evil.com`, which is exactly the
+ * rebound `Host` the DNS-rebinding guard exists to reject (it can resolve to `127.0.0.1`).
+ */
+export declare function isLoopbackHost(host: string): boolean;
+/**
+ * The hostname a `Host` header names, with the port dropped. Keeps the bracketed IPv6 form
+ * (`[::1]:4200` → `[::1]`), which splitting on the first colon would mangle.
+ */
+export declare function hostnameFromHostHeader(header: string): string;
+//# sourceMappingURL=loopback-host.d.ts.map

package/dist/loopback-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-host.d.ts","sourceRoot":"","sources":["../src/loopback-host.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAO7D"}

package/dist/loopback-host.js

@@ -0,0 +1,31 @@
+/**
+ * Loopback-address helpers, shared by the daemon (deciding whether a bind gates behind the
+ * token, #1051) and the RPC mount (rejecting a rebound `Host`). A leaf module on purpose:
+ * `daemon.ts` imports the dashboard, so the mount cannot import these back out of it.
+ */
+/** The `127.0.0.0/8` loopback range, in dotted-quad form. */
+const LOOPBACK_V4 = /^127(?:\.(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)){3}$/;
+/**
+ * True when `host` is a loopback address the browser reaches without leaving the machine (#1051).
+ * A bind-all (`0.0.0.0`, `::`) or a routable address is not, and gates behind the shared token.
+ *
+ * The IPv4 check matches the whole `127.0.0.0/8` range but only as an address: a bare
+ * `startsWith('127.')` also accepts a *registrable name* like `127.evil.com`, which is exactly the
+ * rebound `Host` the DNS-rebinding guard exists to reject (it can resolve to `127.0.0.1`).
+ */
+export function isLoopbackHost(host) {
+    return host === 'localhost' || host === '::1' || host === '[::1]' || LOOPBACK_V4.test(host);
+}
+/**
+ * The hostname a `Host` header names, with the port dropped. Keeps the bracketed IPv6 form
+ * (`[::1]:4200` → `[::1]`), which splitting on the first colon would mangle.
+ */
+export function hostnameFromHostHeader(header) {
+    if (header.startsWith('[')) {
+        const close = header.indexOf(']');
+        return close === -1 ? header : header.slice(0, close + 1);
+    }
+    const colon = header.indexOf(':');
+    return colon === -1 ? header : header.slice(0, colon);
+}
+//# sourceMappingURL=loopback-host.js.map

package/dist/loopback-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-host.js","sourceRoot":"","sources":["../src/loopback-host.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,6DAA6D;AAC7D,MAAM,WAAW,GAAG,mDAAmD,CAAA;AAEvE;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAC7F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACjC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACjC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AACvD,CAAC"}

package/dist/maintenance.d.ts

@@ -0,0 +1,90 @@
+import { type GitRunner } from '@gemstack/agent-data';
+/** What a repo's last maintenance review recorded. */
+export interface MaintenanceState {
+    /** The HEAD commit the maintenance loop last reviewed (a full SHA). */
+    reviewedSha?: string;
+    /** ISO timestamp of that review. */
+    reviewedAt?: string;
+}
+/** Minimal fs seam so the state IO is unit-testable without touching disk. */
+export interface MaintenanceFs {
+    read(path: string): Promise<string>;
+    write(path: string, contents: string): Promise<void>;
+    mkdir(path: string): Promise<void>;
+}
+/** The review-state file path for a repo. */
+export declare function maintenanceStatePath(cwd: string): string;
+/** Read a repo's review state. Forgiving: a missing/unreadable/malformed file yields `{}`. */
+export declare function readMaintenanceState(cwd: string, fs?: MaintenanceFs): Promise<MaintenanceState>;
+/** Record a repo's review state, creating `.the-framework/` as needed. */
+export declare function writeMaintenanceState(cwd: string, state: MaintenanceState, fs?: MaintenanceFs): Promise<void>;
+/**
+ * Record part of a repo's state, leaving the keys not mentioned alone: {@link writeMaintenanceState}
+ * replaces the file wholesale, and a caller that knows only the part it changed must not erase the
+ * rest.
+ */
+export declare function mergeMaintenanceState(cwd: string, patch: MaintenanceState, fs?: MaintenanceFs): Promise<void>;
+/** What the sweep decided for one repo. */
+export type MaintenanceAction = 'baseline' | 'review' | 'skip' | 'error';
+/** A repo's assessed maintenance status. */
+export interface RepoReview {
+    /** Registry id, when assessed from the registry. */
+    id?: string;
+    /** Absolute repo path. */
+    path: string;
+    /** Current HEAD SHA, when resolvable. */
+    headSha?: string;
+    /** The last-reviewed SHA, when the repo has been reviewed before. */
+    reviewedSha?: string;
+    /** Commits in `reviewedSha..HEAD` (0 for a first-seen or up-to-date repo). */
+    newCommits: number;
+    /** What to do: baseline a first-seen repo, review new commits, skip an up-to-date one, or an error. */
+    action: MaintenanceAction;
+    /** Context for an `error` or an unusual `review` (e.g. rewritten history). */
+    note?: string;
+}
+/**
+ * Assess one repo: resolve HEAD, read its review state, and count the commits since
+ * the last review. A never-reviewed repo is `baseline` (we record HEAD without
+ * reviewing history retroactively); an unchanged repo is `skip`; new commits are
+ * `review`. A non-repo / missing git is `error` (skipped, never throws). A reviewed
+ * SHA git no longer knows (rebased away) falls back to `review`.
+ */
+export declare function assessRepo(path: string, git?: GitRunner, fs?: MaintenanceFs): Promise<RepoReview>;
+/** Assess every registered repo, tagging each review with its registry id. */
+export declare function planMaintenanceSweep(repos: readonly {
+    id?: string;
+    path: string;
+}[], git?: GitRunner, fs?: MaintenanceFs): Promise<RepoReview[]>;
+/** The tally a sweep returns. */
+export interface SweepSummary {
+    reviewed: number;
+    baselined: number;
+    skipped: number;
+    failed: number;
+    /** Repos not reached because `maxRepos` was hit. */
+    pending: number;
+}
+/** Injected effects for {@link maintainSweep}, so the orchestration is testable off disk/process. */
+export interface SweepDeps {
+    /** Run the maintenance loop on a repo; resolves true on success. */
+    agent(review: RepoReview): Promise<boolean>;
+    /** Persist a repo's review state (called after a baseline or a successful review). */
+    record(path: string, state: MaintenanceState): Promise<void>;
+    /** Progress line. */
+    log(message: string): void;
+    /** ISO timestamp for a recorded review (injected so runs are deterministic in tests). */
+    now(): string;
+    /** Stop after reviewing this many repos in one sweep (baselines/skips don't count). */
+    maxRepos?: number;
+}
+/**
+ * Orchestrate a sweep over pre-assessed reviews: baseline first-seen repos (record
+ * HEAD, no run), skip up-to-date ones, and run the maintenance loop on the rest —
+ * recording the reviewed SHA only when the agent succeeds, so a failure is retried next
+ * sweep. Honors `maxRepos`; the remainder is reported as `pending`.
+ */
+export declare function maintainSweep(reviews: readonly RepoReview[], deps: SweepDeps): Promise<SweepSummary>;
+/** Short SHA for logs. */
+export declare function short(sha: string | undefined): string;
+//# sourceMappingURL=maintenance.d.ts.map

package/dist/maintenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"maintenance.d.ts","sourceRoot":"","sources":["../src/maintenance.ts"],"names":[],"mappings":"AACA,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAiBpE,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACnC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACpD,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnC;AAQD,6CAA6C;AAC7C,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,8FAA8F;AAC9F,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAE,aAAmC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAc1H;AAED,0EAA0E;AAC1E,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,gBAAgB,EACvB,EAAE,GAAE,aAAmC,GACtC,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,gBAAgB,EACvB,EAAE,GAAE,aAAmC,GACtC,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,2CAA2C;AAC3C,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAA;AAExE,4CAA4C;AAC5C,MAAM,WAAW,UAAU;IACzB,oDAAoD;IACpD,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAA;IAClB,uGAAuG;IACvG,MAAM,EAAE,iBAAiB,CAAA;IACzB,8EAA8E;IAC9E,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,SAA2B,EAChC,EAAE,GAAE,aAAmC,GACtC,OAAO,CAAC,UAAU,CAAC,CAoBrB;AAED,8EAA8E;AAC9E,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,SAAS;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,EAC/C,GAAG,GAAE,SAA2B,EAChC,EAAE,GAAE,aAAmC,GACtC,OAAO,CAAC,UAAU,EAAE,CAAC,CAEvB;AAED,iCAAiC;AACjC,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,qGAAqG;AACrG,MAAM,WAAW,SAAS;IACxB,oEAAoE;IACpE,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3C,sFAAsF;IACtF,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,qBAAqB;IACrB,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,yFAAyF;IACzF,GAAG,IAAI,MAAM,CAAA;IACb,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,CAoC1G;AAED,0BAA0B;AAC1B,wBAAgB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAErD"}

package/dist/maintenance.js

@@ -0,0 +1,141 @@
+import { join } from 'node:path';
+import { nodeGitRunner } from '@gemstack/agent-data';
+import { THE_FRAMEWORK_DIR } from './framework-dir.js';
+import { nodeFs } from './node-fs.js';
+/**
+ * The maintenance sweep (#298): a background job that walks the registered repos,
+ * finds the commits each repo has grown since its last maintenance review, and runs
+ * the maintainability loop on them. Per-repo review state is a small local file
+ * (`.the-framework/maintenance.json`, gitignored) recording the last-reviewed commit,
+ * so a sweep only ever acts on new work. The capacity gate is the quota boundary, which
+ * decides whether unattended work may start. #298's "check the limit" half is reachable — the agent
+ * reports the account's quota per turn (#517) and on demand (#521) — but this sweep
+ * does not gate on it yet; that is #519's consumption limits.
+ */
+/** The per-repo review-state filename under `.the-framework/`. */
+const MAINTENANCE_FILE = 'maintenance.json';
+/** A {@link MaintenanceFs} backed by `node:fs/promises`. See {@link nodeFs}. */
+function nodeMaintenanceFs() {
+    const { read, write, mkdir } = nodeFs();
+    return { read, write, mkdir };
+}
+/** The review-state file path for a repo. */
+export function maintenanceStatePath(cwd) {
+    return join(cwd, THE_FRAMEWORK_DIR, MAINTENANCE_FILE);
+}
+/** Read a repo's review state. Forgiving: a missing/unreadable/malformed file yields `{}`. */
+export async function readMaintenanceState(cwd, fs = nodeMaintenanceFs()) {
+    try {
+        const parsed = JSON.parse(await fs.read(maintenanceStatePath(cwd)));
+        if (parsed && typeof parsed === 'object') {
+            const record = parsed;
+            const state = {};
+            if (typeof record['reviewedSha'] === 'string')
+                state.reviewedSha = record['reviewedSha'];
+            if (typeof record['reviewedAt'] === 'string')
+                state.reviewedAt = record['reviewedAt'];
+            return state;
+        }
+    }
+    catch {
+        // absent / unreadable / malformed -> no prior review
+    }
+    return {};
+}
+/** Record a repo's review state, creating `.the-framework/` as needed. */
+export async function writeMaintenanceState(cwd, state, fs = nodeMaintenanceFs()) {
+    await fs.mkdir(join(cwd, THE_FRAMEWORK_DIR));
+    await fs.write(maintenanceStatePath(cwd), JSON.stringify(state, null, 2));
+}
+/**
+ * Record part of a repo's state, leaving the keys not mentioned alone: {@link writeMaintenanceState}
+ * replaces the file wholesale, and a caller that knows only the part it changed must not erase the
+ * rest.
+ */
+export async function mergeMaintenanceState(cwd, patch, fs = nodeMaintenanceFs()) {
+    await writeMaintenanceState(cwd, { ...(await readMaintenanceState(cwd, fs)), ...patch }, fs);
+}
+/**
+ * Assess one repo: resolve HEAD, read its review state, and count the commits since
+ * the last review. A never-reviewed repo is `baseline` (we record HEAD without
+ * reviewing history retroactively); an unchanged repo is `skip`; new commits are
+ * `review`. A non-repo / missing git is `error` (skipped, never throws). A reviewed
+ * SHA git no longer knows (rebased away) falls back to `review`.
+ */
+export async function assessRepo(path, git = nodeGitRunner(), fs = nodeMaintenanceFs()) {
+    let headSha;
+    try {
+        headSha = (await git(['rev-parse', 'HEAD'], path)).trim();
+    }
+    catch {
+        return { path, newCommits: 0, action: 'error', note: 'not a git repo, or it has no commits' };
+    }
+    const { reviewedSha } = await readMaintenanceState(path, fs);
+    if (!reviewedSha)
+        return { path, headSha, newCommits: 0, action: 'baseline' };
+    if (reviewedSha === headSha)
+        return { path, headSha, reviewedSha, newCommits: 0, action: 'skip' };
+    try {
+        const count = Number.parseInt((await git(['rev-list', '--count', `${reviewedSha}..HEAD`], path)).trim(), 10);
+        const newCommits = Number.isFinite(count) ? count : 0;
+        return { path, headSha, reviewedSha, newCommits, action: newCommits > 0 ? 'review' : 'skip' };
+    }
+    catch {
+        // The reviewed commit is unknown to git (history was rewritten): re-review to be safe.
+        return { path, headSha, reviewedSha, newCommits: 0, action: 'review', note: 'reviewed commit not found (history changed); re-reviewing' };
+    }
+}
+/** Assess every registered repo, tagging each review with its registry id. */
+export async function planMaintenanceSweep(repos, git = nodeGitRunner(), fs = nodeMaintenanceFs()) {
+    return Promise.all(repos.map(async (repo) => ({ ...(await assessRepo(repo.path, git, fs)), ...(repo.id ? { id: repo.id } : {}) })));
+}
+/**
+ * Orchestrate a sweep over pre-assessed reviews: baseline first-seen repos (record
+ * HEAD, no run), skip up-to-date ones, and run the maintenance loop on the rest —
+ * recording the reviewed SHA only when the agent succeeds, so a failure is retried next
+ * sweep. Honors `maxRepos`; the remainder is reported as `pending`.
+ */
+export async function maintainSweep(reviews, deps) {
+    const summary = { reviewed: 0, baselined: 0, skipped: 0, failed: 0, pending: 0 };
+    const limit = deps.maxRepos ?? Infinity;
+    for (const review of reviews) {
+        if (review.action === 'skip') {
+            summary.skipped++;
+            continue;
+        }
+        if (review.action === 'error') {
+            summary.failed++;
+            deps.log(`✗ ${review.path}: ${review.note ?? 'could not assess'}`);
+            continue;
+        }
+        if (review.action === 'baseline') {
+            if (review.headSha)
+                await deps.record(review.path, { reviewedSha: review.headSha, reviewedAt: deps.now() });
+            summary.baselined++;
+            deps.log(`◆ baselined ${review.path} at ${short(review.headSha)}`);
+            continue;
+        }
+        // action === 'review'
+        if (summary.reviewed >= limit) {
+            summary.pending++;
+            continue;
+        }
+        deps.log(`▶ maintaining ${review.path} (${review.newCommits} new commit${review.newCommits === 1 ? '' : 's'})…`);
+        const ok = await deps.agent(review);
+        if (ok && review.headSha) {
+            await deps.record(review.path, { reviewedSha: review.headSha, reviewedAt: deps.now() });
+            summary.reviewed++;
+            deps.log(`✓ ${review.path} reviewed`);
+        }
+        else {
+            summary.failed++;
+            deps.log(`✗ ${review.path} maintenance session failed; will retry next sweep`);
+        }
+    }
+    return summary;
+}
+/** Short SHA for logs. */
+export function short(sha) {
+    return sha ? sha.slice(0, 7) : '(unknown)';
+}
+//# sourceMappingURL=maintenance.js.map

package/dist/maintenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"maintenance.js","sourceRoot":"","sources":["../src/maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAkB,MAAM,sBAAsB,CAAA;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC;;;;;;;;;GASG;AAEH,kEAAkE;AAClE,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAiB3C,gFAAgF;AAChF,SAAS,iBAAiB;IACxB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAA;IACvC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;AAC/B,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAA;AACvD,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,EAAE,GAAkB,iBAAiB,EAAE;IAC7F,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAY,CAAA;QAC9E,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,MAAiC,CAAA;YAChD,MAAM,KAAK,GAAqB,EAAE,CAAA;YAClC,IAAI,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,QAAQ;gBAAE,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC,aAAa,CAAC,CAAA;YACxF,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ;gBAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAA;YACrF,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAW,EACX,KAAuB,EACvB,EAAE,GAAkB,iBAAiB,EAAE;IAEvC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC5C,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,GAAW,EACX,KAAuB,EACvB,EAAE,GAAkB,iBAAiB,EAAE;IAEvC,MAAM,qBAAqB,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;AAC9F,CAAC;AAuBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,GAAG,GAAc,aAAa,EAAE,EAChC,EAAE,GAAkB,iBAAiB,EAAE;IAEvC,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAA;IAC/F,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAC5D,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IAC7E,IAAI,WAAW,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAEjG,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,WAAW,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QAC5G,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QACrD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,uFAAuF;QACvF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,2DAA2D,EAAE,CAAA;IAC3I,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAA+C,EAC/C,GAAG,GAAc,aAAa,EAAE,EAChC,EAAE,GAAkB,iBAAiB,EAAE;IAEvC,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AACnI,CAAC;AA0BD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA8B,EAAE,IAAe;IACjF,MAAM,OAAO,GAAiB,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;IAC9F,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAA;IACvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,CAAC,OAAO,EAAE,CAAA;YACjB,SAAQ;QACV,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,EAAE,CAAA;YAChB,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,kBAAkB,EAAE,CAAC,CAAA;YAClE,SAAQ;QACV,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YAC3G,OAAO,CAAC,SAAS,EAAE,CAAA;YACnB,IAAI,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAClE,SAAQ;QACV,CAAC;QACD,sBAAsB;QACtB,IAAI,OAAO,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC9B,OAAO,CAAC,OAAO,EAAE,CAAA;YACjB,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,cAAc,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;QAChH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACnC,IAAI,EAAE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YACvF,OAAO,CAAC,QAAQ,EAAE,CAAA;YAClB,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,CAAA;QACvC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,EAAE,CAAA;YAChB,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,oDAAoD,CAAC,CAAA;QAChF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,KAAK,CAAC,GAAuB;IAC3C,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAA;AAC5C,CAAC"}

package/dist/merged-worktrees.d.ts

@@ -0,0 +1,74 @@
+import { type RemoveResult, type WorktreeRow } from './worktrees.js';
+import { type ProjectPass, type ProjectsSource } from './project-pass.js';
+/** One worktree this sweep removed. */
+export interface RemovedWorktree {
+    /** The agent id, which is also the worktree's directory name. */
+    agentId: string;
+    /** Branches that went with it: one holding nothing the remote lacks (#1650), a run-id branch the kept branch contains (#1657). */
+    branchesDeleted?: string[];
+}
+/** A worktree the sweep tried to reclaim and could not, and why. */
+export interface FailedRemoval {
+    agentId: string;
+    error: string;
+}
+/** What {@link removeMergedWorktrees} did. */
+export interface MergedSweepResult {
+    removed: RemovedWorktree[];
+    /** Worktrees it tried and could not reclaim — most often a branch it could not push. */
+    failed: FailedRemoval[];
+}
+/** Injectable seams so the sweep is unit-testable off disk. */
+export interface MergedSweepDeps {
+    /** The worktrees on disk (default {@link listProjectWorktrees}). */
+    worktrees?: (cwd: string) => Promise<WorktreeRow[]>;
+    /** Removes one worktree (default {@link removeProjectWorktree}). */
+    remove?: (cwd: string, agentId: string) => Promise<RemoveResult>;
+    /** Whether the repo has a remote at all (default {@link repoHasRemote}). */
+    hasRemote?: (cwd: string) => Promise<boolean>;
+    /** Agent ids whose checkouts the daemon is still responsible for; see {@link MergedSweepOptions.busy}. */
+    busy?: ReadonlySet<string>;
+}
+/**
+ * Reclaim every retained worktree in `cwd` whose work can reach the remote (E5).
+ *
+ * The decision is entirely {@link removeProjectWorktree}'s — keep a dirty checkout, push the
+ * branch, remove only once the remote has it — so the automatic path and the manual one (the
+ * dashboard's Remove button) are one behaviour rather than two that can disagree. This adds the
+ * loop, the one thing it must never touch (a live agent's checkout, where its agent is working), and
+ * the agent lock.
+ *
+ * The lock is load-bearing: an agent's meta flips to `done` a beat before its teardown finishes
+ * archiving, so a sweep landing in that window would remove the checkout out from under the
+ * archive — which then recreates the directory it was reading from, and the removal silently
+ * un-happens. Every other actor on a checkout already takes this lock.
+ */
+export declare function removeMergedWorktrees(cwd: string, deps?: MergedSweepDeps): Promise<MergedSweepResult>;
+/** `its branch x` / `its branches x and y`, for the removal line. */
+export declare function describeDeleted(branches: readonly string[]): string;
+/** What {@link startMergedWorktreeSweep} needs from the daemon. */
+export interface MergedSweepOptions {
+    /** The registered projects to sweep. */
+    projects: ProjectsSource;
+    log: (message: string) => void;
+    /**
+     * The agents the daemon is still responsible for — spawning, running, or mid-retirement — whose
+     * checkouts this must not touch.
+     *
+     * "Not live" on disk is not "the daemon is finished with it": an agent's meta flips to `done` a
+     * beat before its teardown archives the history and reclaims the checkout, and a sweep landing
+     * in that window races the teardown for the same directory. Absent means nothing is busy, which
+     * is right for a caller that spawns no agents.
+     */
+    busy?: () => ReadonlySet<string>;
+    /** The per-project sweep (default {@link removeMergedWorktrees}). */
+    sweep?: (cwd: string) => Promise<MergedSweepResult>;
+}
+/**
+ * Sweep every registered project's reclaimable worktrees (#1036), one turn per call.
+ *
+ * Says what it removed rather than removing it silently: a checkout vanishing from under someone
+ * with no line explaining why reads as a bug, even when the work behind it is safe.
+ */
+export declare function startMergedWorktreeSweep(opts: MergedSweepOptions): ProjectPass;
+//# sourceMappingURL=merged-worktrees.d.ts.map

package/dist/merged-worktrees.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merged-worktrees.d.ts","sourceRoot":"","sources":["../src/merged-worktrees.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+C,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAGjH,OAAO,EAAoB,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAmB3F,uCAAuC;AACvC,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAA;IACf,kIAAkI;IAClI,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;CACd;AAED,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,wFAAwF;IACxF,MAAM,EAAE,aAAa,EAAE,CAAA;CACxB;AAED,+DAA+D;AAC/D,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnD,oEAAoE;IACpE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;IAChE,4EAA4E;IAC5E,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC7C,0GAA0G;IAC1G,IAAI,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;CAC3B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAyB/G;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAEnE;AAED,mEAAmE;AACnE,MAAM,WAAW,kBAAkB;IACjC,wCAAwC;IACxC,QAAQ,EAAE,cAAc,CAAA;IACxB,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAC9B;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAA;IAChC,qEAAqE;IACrE,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;CACpD;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,kBAAkB,GAAG,WAAW,CA6B9E"}

package/dist/merged-worktrees.js

@@ -0,0 +1,84 @@
+import { listProjectWorktrees, removeProjectWorktree } from './worktrees.js';
+import { withAgentLock } from './agent-locks.js';
+import { repoHasRemote, worktreePath } from '@gemstack/skill-branches';
+import { startProjectPass } from './project-pass.js';
+/**
+ * Reclaim every retained worktree in `cwd` whose work can reach the remote (E5).
+ *
+ * The decision is entirely {@link removeProjectWorktree}'s — keep a dirty checkout, push the
+ * branch, remove only once the remote has it — so the automatic path and the manual one (the
+ * dashboard's Remove button) are one behaviour rather than two that can disagree. This adds the
+ * loop, the one thing it must never touch (a live agent's checkout, where its agent is working), and
+ * the agent lock.
+ *
+ * The lock is load-bearing: an agent's meta flips to `done` a beat before its teardown finishes
+ * archiving, so a sweep landing in that window would remove the checkout out from under the
+ * archive — which then recreates the directory it was reading from, and the removal silently
+ * un-happens. Every other actor on a checkout already takes this lock.
+ */
+export async function removeMergedWorktrees(cwd, deps = {}) {
+    // Sizes off: `du` over every retained checkout is the expensive part of the listing, and a sweep
+    // that only decides removal never reads the number.
+    const worktrees = deps.worktrees ?? ((path) => listProjectWorktrees(path, { sizes: false }));
+    const remove = deps.remove ?? removeProjectWorktree;
+    const hasRemote = deps.hasRemote ?? repoHasRemote;
+    const result = { removed: [], failed: [] };
+    const rows = (await worktrees(cwd).catch(() => [])).filter(row => !row.live && !deps.busy?.has(row.agentId));
+    if (!rows.length)
+        return result;
+    // Asked once per project, not once per checkout: with no remote the rule keeps everything, and
+    // that answer cannot change between two rows of the same sweep — so the doomed per-checkout
+    // probe-and-push cycle is skipped while each retained checkout is still accounted for.
+    if (!(await hasRemote(cwd))) {
+        for (const row of rows)
+            result.failed.push({ agentId: row.agentId, error: 'the repo has no remote; its worktree was kept' });
+        return result;
+    }
+    for (const row of rows) {
+        const outcome = await withAgentLock(worktreePath(cwd, row.agentId), () => remove(cwd, row.agentId));
+        if (outcome.ok)
+            result.removed.push({ agentId: row.agentId, ...(outcome.branchesDeleted ? { branchesDeleted: outcome.branchesDeleted } : {}) });
+        else
+            result.failed.push({ agentId: row.agentId, error: outcome.error });
+    }
+    return result;
+}
+/** `its branch x` / `its branches x and y`, for the removal line. */
+export function describeDeleted(branches) {
+    return branches.length === 1 ? `its branch ${branches[0]}` : `its branches ${branches.join(' and ')}`;
+}
+/**
+ * Sweep every registered project's reclaimable worktrees (#1036), one turn per call.
+ *
+ * Says what it removed rather than removing it silently: a checkout vanishing from under someone
+ * with no line explaining why reads as a bug, even when the work behind it is safe.
+ */
+export function startMergedWorktreeSweep(opts) {
+    const sweep = opts.sweep ?? ((cwd) => removeMergedWorktrees(cwd, { ...(opts.busy ? { busy: opts.busy() } : {}) }));
+    // Each checkout's last-announced keep reason, so a retained checkout is accounted for once per
+    // *state* rather than re-announced every ten minutes for the life of the daemon — a permanently
+    // unpushable one (no remote, a publish-nothing session) repeats forever. A changed reason is a
+    // changed state and is said again (a remote added, pushes now failing on auth); a removal
+    // clears the entry, so a same-id checkout that reappears is a new thing to account for; a
+    // daemon restart starts the accounting over, which is the boot-time announcement the retained
+    // state deserves.
+    const announced = new Map();
+    // No timer of its own (E4): the daemon's one clock calls `tick`, including once at start-up —
+    // the case this exists for is a machine that was off while the work could not be pushed.
+    return startProjectPass(opts.projects, async (cwd) => {
+        const { removed, failed } = await sweep(cwd).catch(() => ({ removed: [], failed: [] }));
+        for (const item of removed) {
+            announced.delete(item.agentId);
+            opts.log(item.branchesDeleted
+                ? `[framework] removed the worktree for session ${item.agentId} and ${describeDeleted(item.branchesDeleted)}: nothing on it is missing elsewhere. The session is kept.`
+                : `[framework] removed the worktree for session ${item.agentId}: its branch is on the remote. The branch and the session are kept.`);
+        }
+        for (const item of failed) {
+            if (announced.get(item.agentId) === item.error)
+                continue;
+            announced.set(item.agentId, item.error);
+            opts.log(`[framework] kept the worktree for session ${item.agentId}: ${item.error}`);
+        }
+    });
+}
+//# sourceMappingURL=merged-worktrees.js.map

package/dist/merged-worktrees.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merged-worktrees.js","sourceRoot":"","sources":["../src/merged-worktrees.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAuC,MAAM,gBAAgB,CAAA;AACjH,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AACtE,OAAO,EAAE,gBAAgB,EAAyC,MAAM,mBAAmB,CAAA;AAoD3F;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,IAAI,GAAoB,EAAE;IACjF,iGAAiG;IACjG,oDAAoD;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;IACpG,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,qBAAqB,CAAA;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,aAAa,CAAA;IAEjD,MAAM,MAAM,GAAsB,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IAC7D,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAkB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CACvE,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CACjD,CAAA;IACD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAA;IAC/B,+FAA+F;IAC/F,4FAA4F;IAC5F,uFAAuF;IACvF,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC,CAAA;QAC5H,OAAO,MAAM,CAAA;IACf,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;QACnG,IAAI,OAAO,CAAC,EAAE;YAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;;YAC1I,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,QAA2B;IACzD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAA;AACvG,CAAC;AAqBD;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAwB;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1H,+FAA+F;IAC/F,gGAAgG;IAChG,+FAA+F;IAC/F,0FAA0F;IAC1F,0FAA0F;IAC1F,8FAA8F;IAC9F,kBAAkB;IAClB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE3C,8FAA8F;IAC9F,yFAAyF;IACzF,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAC,GAAG,EAAC,EAAE;QACjD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAsB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1G,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC9B,IAAI,CAAC,GAAG,CACN,IAAI,CAAC,eAAe;gBAClB,CAAC,CAAC,gDAAgD,IAAI,CAAC,OAAO,QAAQ,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,4DAA4D;gBACvK,CAAC,CAAC,gDAAgD,IAAI,CAAC,OAAO,qEAAqE,CACtI,CAAA;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACxD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;YACvC,IAAI,CAAC,GAAG,CAAC,6CAA6C,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAA;QACtF,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/module-server.d.ts

@@ -0,0 +1,56 @@
+// `@openagt/dashboard/module-server`: what the daemon offers a module's server part.
+//
+// A module's server part is the file its package exports as `./server`. The daemon imports it once,
+// in its own process, and calls one of its reads when the module's browser part asks for it
+// (`host.read(name, input)` there). The server part imports nothing from the framework at run time:
+// these are types only, and its default export is a plain object that satisfies `ModuleServer`.
+
+/** What the core knows about one run: facts, never a verdict about what the run's files are. */
+export interface RunFacts {
+  /** The run's own checkout while it has one: an absolute path. */
+  checkout?: string
+  /** The run's record, when the project keeps one for it. */
+  record?: {
+    status?: string
+    /** The machine the run ran on. */
+    host?: string
+    /** The branch the run left its work on, by its last recorded name. */
+    branch?: string
+    pr?: { number: number }
+    /** The branch the run was told to start from, by its name; absent on a run that started from origin's default branch. */
+    base?: string
+    /** The commit the run's own work begins at, for a run that made its own branch: what its changes are measured from when the default branch cannot tell them. */
+    baseCommit?: string
+    /** The last commit of the run's work, once its main agent landed it: its branch is gone, and its work is read here. */
+    landed?: string
+  }
+  /** The run ended on this machine without a pull request and was not landed, so a branch it no longer has held nothing. */
+  changedNothing: boolean
+}
+
+/** Where a pull request stands on the git host: still being asked, or answered (with its merge commit when merged, and the last commit of the branch it merged, when the git host says it). */
+export type MergeLookup = { pending: true } | { pending: false; commit?: string; head?: string }
+
+/** What a read is given: the project it reads, and what the core knows about the project's runs. */
+export interface ModuleServerHost {
+  /** The project's folder: an absolute path. */
+  root: string
+  /** The facts about one run of the project, or undefined when the id names no run. */
+  run(agentId: string): Promise<RunFacts | undefined>
+  /** The commit pull request `number` of `branch` merged as, as the project's git host says. */
+  mergeCommit(branch: string, number: number): Promise<MergeLookup>
+}
+
+/**
+ * What a module's browser part sent with a read: JSON, bounded in size. `agentId`, when present,
+ * names the run the read is about; a run relayed to a connected device is read over there.
+ */
+export type ModuleReadInput = { agentId?: string } & Record<string, unknown>
+
+/** One read of a module's server part: its answer must be JSON. */
+export type ModuleRead = (host: ModuleServerHost, input: ModuleReadInput) => Promise<unknown>
+
+/** What a module's `./server` file default-exports. */
+export interface ModuleServer {
+  reads: Record<string, ModuleRead>
+}

package/dist/module-types/dashboard/components/DiffStat.d.ts

@@ -0,0 +1,6 @@
+/** Added/removed counts as the `+12 −3` pair. */
+export declare function DiffStat({ added, removed, className }: {
+    added: number;
+    removed: number;
+    className?: string;
+}): import("react").JSX.Element;

package/dist/module-types/dashboard/components/DriverModelMenu.d.ts

@@ -0,0 +1,23 @@
+import type { ReactNode } from 'react';
+export interface ModelOption {
+    value: string;
+    label: string;
+}
+export interface DriverOption {
+    value: string;
+    label: string;
+    /** The driver's logo, shown on the trigger and beside its name (#656). */
+    icon?: ReactNode;
+    /** The models this driver offers. Every entry is a real model id — none of them means "unset". */
+    models: ModelOption[];
+    /** Why {@link models} is empty, said in its place: the agent is still being asked, or could not say. */
+    modelsNote?: string;
+}
+export declare function DriverModelMenu({ drivers, driver, model, onChange, busy, }: {
+    drivers: DriverOption[];
+    driver: string;
+    model: string;
+    /** Set the driver and model together (a model is always picked within its driver). */
+    onChange: (driver: string, model: string) => void;
+    busy: boolean;
+}): import("react").JSX.Element;

package/dist/module-types/dashboard/components/LinkActions.d.ts

@@ -0,0 +1,26 @@
+import { type ReactNode } from 'react';
+import { type ModuleLink } from '../module/index.js';
+import { type MountedLinkAction } from '../lib/use-modules.js';
+import { type ButtonProps } from './ui/button.js';
+/** The links one project's worth of a click acts on. */
+export interface ProjectLinks {
+    projectId: string;
+    links: ModuleLink[];
+}
+/** The links a click acts on: known up front, or resolved at click time (a page that first reads what is already there). */
+export type LinkTargets = ProjectLinks[] | (() => Promise<ProjectLinks[]>);
+export declare function LinkActions({ projects, targets, resetKey, label, tooltip, disabled, size, variant, }: {
+    /** The projects the links belong to: an action shows when its package is in at least one of them. */
+    projects: readonly string[];
+    /** What a click acts on, grouped by project. */
+    targets: LinkTargets;
+    /** A done button rests until this changes: the identity of the set it acted on. Defaults to the projects. */
+    resetKey?: string;
+    /** The button's text for an action; the action's own label otherwise. */
+    label?: (action: MountedLinkAction) => string;
+    /** Shown on hover, the same for every action. */
+    tooltip?: ReactNode;
+    disabled?: boolean;
+    size?: ButtonProps['size'];
+    variant?: ButtonProps['variant'];
+}): import("react").JSX.Element | null;

package/dist/module-types/dashboard/components/Markdown.d.ts

@@ -0,0 +1,4 @@
+export declare function Markdown({ text, compact }: {
+    text: string;
+    compact?: boolean;
+}): import("react").JSX.Element;