@openagt/dashboard 0.0.0-stage → 0.8.0

package/dist/project-modules.js

@@ -0,0 +1,110 @@
+import { realpath, stat } from 'node:fs/promises';
+import { dirname, join, normalize, sep } from 'node:path';
+import { packageBins, projectPackages, runPackageCommand } from '@openagt/agent-data';
+import { builtInPackages } from './built-in.js';
+/** The file an `exports[key]` entry names: a plain path, or the first of `conditions` it has. */
+function exportedFile(exports, key, conditions) {
+    if (!exports || typeof exports !== 'object' || Array.isArray(exports))
+        return undefined;
+    const entry = exports[key];
+    if (typeof entry === 'string')
+        return entry;
+    if (!entry || typeof entry !== 'object' || Array.isArray(entry))
+        return undefined;
+    for (const condition of conditions) {
+        const target = entry[condition];
+        if (typeof target === 'string')
+            return target;
+    }
+    return undefined;
+}
+/** Whether `path` is `dir` itself or inside it; both already normalized. */
+function within(dir, path) {
+    return path === dir || path.startsWith(dir + sep);
+}
+/** The file `target` names inside the package at `pkgDir`, symlinks resolved; undefined when it is no file there. */
+async function fileInside(pkgDir, target) {
+    if (!target)
+        return undefined;
+    const file = await realpath(join(pkgDir, target)).catch(() => undefined);
+    if (!file || !within(pkgDir, file) || !(await stat(file).then(s => s.isFile()).catch(() => false)))
+        return undefined;
+    return file;
+}
+/**
+ * The modules a project has: each of its dependencies whose package.json exports `./dashboard` to
+ * a file that exists inside the package, plus the modules among the framework's built-in packages (`built-in.ts`). A project that
+ * depends on a built-in module's package itself gets its own copy. Sorted by name.
+ */
+export async function readProjectModules(root) {
+    const modules = [];
+    for (const pkg of await projectPackages(root)) {
+        const module = await readModule(pkg);
+        if (module)
+            modules.push(module);
+    }
+    for (const pkg of await builtInPackages()) {
+        if (modules.some(module => module.package === pkg.name))
+            continue;
+        const module = await readModule(pkg);
+        if (module)
+            modules.push(module);
+    }
+    return modules.sort((a, b) => a.package.localeCompare(b.package));
+}
+async function readModule({ name, dir: pkgDir, manifest: pkg }) {
+    const file = await fileInside(pkgDir, exportedFile(pkg.exports, './dashboard', ['browser', 'import', 'default']));
+    if (!file)
+        return undefined;
+    const server = await fileInside(pkgDir, exportedFile(pkg.exports, './server', ['node', 'import', 'default']));
+    return {
+        package: name,
+        ...(typeof pkg.version === 'string' ? { version: pkg.version } : {}),
+        dir: dirname(file),
+        entry: file.slice(dirname(file).length + 1),
+        bins: packageBins(name, pkg.bin, pkgDir),
+        ...(server ? { server } : {}),
+    };
+}
+/** The one module of this project that `name` names, or undefined. */
+export async function findProjectModule(root, name) {
+    return (await readProjectModules(root)).find(module => module.package === name);
+}
+/**
+ * The file a module serves at `rel`, a path relative to its module's directory: its module, its
+ * stylesheet, a chunk. `undefined` for a path that leaves that directory (symlinks resolved) or
+ * names no file, so nothing else of the package, and nothing of the project, is ever served.
+ */
+export async function moduleFile(module, rel) {
+    if (!rel)
+        return undefined;
+    const candidate = await realpath(normalize(join(module.dir, rel))).catch(() => undefined);
+    if (!candidate || !within(module.dir, candidate))
+        return undefined;
+    return (await stat(candidate).then(s => s.isFile()).catch(() => false)) ? candidate : undefined;
+}
+/** How many arguments, and how long each, a module may pass: a command line, not a payload. */
+const MAX_ARGS = 32;
+const MAX_ARG_LENGTH = 4096;
+/**
+ * Run one of a module package's own commands in the project, with the given arguments, and read
+ * its standard output as JSON. This is how a module reads its data: the same command an agent runs
+ * (`npx logs`), so the module and the agent see the same thing and the framework knows neither.
+ *
+ * `command` picks one of the package's commands; a package with exactly one needs none. The
+ * command runs with Node (a package's commands are Node scripts), in the project root, never
+ * through a shell, bounded in time and output. Refused: a command the package does not have, too
+ * many or too long arguments. A command that exits non-zero answers its last stderr line; one that
+ * prints no JSON says so.
+ */
+export async function runModuleCommand(root, module, args, command) {
+    const names = Object.keys(module.bins);
+    const name = command ?? (names.length === 1 ? names[0] : undefined);
+    const bin = name !== undefined ? module.bins[name] : undefined;
+    if (bin === undefined)
+        return { ok: false, error: command !== undefined ? `${module.package} has no command ${command}` : `${module.package} has ${names.length === 0 ? 'no command' : 'several commands; name one'}` };
+    if (args.length > MAX_ARGS || args.some(arg => typeof arg !== 'string' || arg.length > MAX_ARG_LENGTH))
+        return { ok: false, error: 'too many or too long arguments' };
+    return runPackageCommand(root, { name: name, bin }, args);
+}
+//# sourceMappingURL=project-modules.js.map

package/dist/project-modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-modules.js","sourceRoot":"","sources":["../src/project-modules.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAgB,iBAAiB,EAAkD,MAAM,qBAAqB,CAAA;AACnJ,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAuB/C,iGAAiG;AACjG,SAAS,YAAY,CAAC,OAAgB,EAAE,GAAW,EAAE,UAA6B;IAChF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IACvF,MAAM,KAAK,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAA;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACjF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAAI,KAAiC,CAAC,SAAS,CAAC,CAAA;QAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAA;IAC/C,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,4EAA4E;AAC5E,SAAS,MAAM,CAAC,GAAW,EAAE,IAAY;IACvC,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAA;AACnD,CAAC;AAED,qHAAqH;AACrH,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,MAA0B;IAClE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACxE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACpH,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,MAAM,OAAO,GAAoB,EAAE,CAAA;IACnC,KAAK,MAAM,GAAG,IAAI,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,eAAe,EAAE,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC;YAAE,SAAQ;QACjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;AACnE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAkB;IAC5E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;IACjH,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAA;IAC3B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;IAC7G,OAAO;QACL,OAAO,EAAE,IAAI;QACb,GAAG,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3C,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC;QACxC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAA;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY;IAChE,OAAO,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAA;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAqB,EAAE,GAAW;IACjE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACzF,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IAClE,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;AACjG,CAAC;AAKD,+FAA+F;AAC/F,MAAM,QAAQ,GAAG,EAAE,CAAA;AACnB,MAAM,cAAc,GAAG,IAAI,CAAA;AAE3B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,MAAqB,EACrB,IAAuB,EACvB,OAAgB;IAEhB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACnE,MAAM,GAAG,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,IAAI,GAAG,KAAK,SAAS;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,mBAAmB,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,CAAA;IAClM,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC;QACpG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAA;IAC/D,OAAO,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAK,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAA;AAC5D,CAAC"}

package/dist/project-pass.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The shape every one of the daemon's background passes over the registered projects has (E4):
+ * no timer of its own, one turn per `tick()` call from the daemon's single clock, and a `stop()`
+ * that takes effect between projects.
+ *
+ * Two services walk the projects this way — the cloud scratch-ref sweep (#1547) and cloud work
+ * adoption (#1601). They differ only in what they do to one project; the walking, the overlap
+ * rule and the stop flag are written out once here.
+ */
+/** A running background pass, in the shape the daemon's services are wired as. */
+export interface ProjectPass {
+    /** Run one pass now, awaiting it. Exposed for tests and for a caller that wants it on demand. */
+    tick: () => Promise<void>;
+    stop: () => void;
+}
+/** The registered projects a pass walks, as the daemon hands them over. */
+export type ProjectsSource = () => Promise<readonly {
+    path: string;
+}[]>;
+/**
+ * Walk every registered project once per `tick()`, calling `visit` with each project's path.
+ *
+ * Overlapping ticks join the pass already running rather than being dropped: awaiting `tick()`
+ * has to mean the pass finished, or an on-demand caller (and a test) gets a silent no-op whenever
+ * the clock's turn happens to be mid-flight. A stopped pass ticks as a no-op, and a `stop()`
+ * during a pass takes effect before the next project rather than mid-project.
+ *
+ * A `projects()` that rejects yields nothing to walk: a registry that cannot be read is this
+ * turn's problem, not the daemon's, and the next tick tries again.
+ */
+export declare function startProjectPass(projects: ProjectsSource, visit: (cwd: string) => Promise<void>): ProjectPass;
+//# sourceMappingURL=project-pass.d.ts.map

package/dist/project-pass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-pass.d.ts","sourceRoot":"","sources":["../src/project-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,iGAAiG;IACjG,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,IAAI,EAAE,MAAM,IAAI,CAAA;CACjB;AAED,2EAA2E;AAC3E,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAAA;AAEvE;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAuB7G"}

package/dist/project-pass.js

@@ -0,0 +1,45 @@
+/**
+ * The shape every one of the daemon's background passes over the registered projects has (E4):
+ * no timer of its own, one turn per `tick()` call from the daemon's single clock, and a `stop()`
+ * that takes effect between projects.
+ *
+ * Two services walk the projects this way — the cloud scratch-ref sweep (#1547) and cloud work
+ * adoption (#1601). They differ only in what they do to one project; the walking, the overlap
+ * rule and the stop flag are written out once here.
+ */
+/**
+ * Walk every registered project once per `tick()`, calling `visit` with each project's path.
+ *
+ * Overlapping ticks join the pass already running rather than being dropped: awaiting `tick()`
+ * has to mean the pass finished, or an on-demand caller (and a test) gets a silent no-op whenever
+ * the clock's turn happens to be mid-flight. A stopped pass ticks as a no-op, and a `stop()`
+ * during a pass takes effect before the next project rather than mid-project.
+ *
+ * A `projects()` that rejects yields nothing to walk: a registry that cannot be read is this
+ * turn's problem, not the daemon's, and the next tick tries again.
+ */
+export function startProjectPass(projects, visit) {
+    let stopped = false;
+    let inflight;
+    const passAll = async () => {
+        for (const project of await projects().catch(() => [])) {
+            if (stopped)
+                break;
+            await visit(project.path);
+        }
+    };
+    return {
+        tick: () => {
+            if (stopped)
+                return Promise.resolve();
+            inflight ??= passAll().finally(() => {
+                inflight = undefined;
+            });
+            return inflight;
+        },
+        stop: () => {
+            stopped = true;
+        },
+    };
+}
+//# sourceMappingURL=project-pass.js.map

package/dist/project-pass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-pass.js","sourceRoot":"","sources":["../src/project-pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAYH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAwB,EAAE,KAAqC;IAC9F,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,QAAmC,CAAA;IAEvC,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,KAAK,MAAM,OAAO,IAAI,MAAM,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;YACvD,IAAI,OAAO;gBAAE,MAAK;YAClB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,IAAI,EAAE,GAAG,EAAE;YACT,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;YACrC,QAAQ,KAAK,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAClC,QAAQ,GAAG,SAAS,CAAA;YACtB,CAAC,CAAC,CAAA;YACF,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,IAAI,EAAE,GAAG,EAAE;YACT,OAAO,GAAG,IAAI,CAAA;QAChB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/project-presets.d.ts

@@ -0,0 +1,30 @@
+import { type CustomPreset } from './registry.js';
+import { type StoreFs } from './store/index.js';
+/**
+ * Project-scoped custom presets (#1025).
+ *
+ * The user tier (#626) saves a custom preset to the user's home file, so it follows the person
+ * across every project and stays private. The project tier saves it into the repo instead, so it
+ * travels with the code and everyone who clones the repo gets it — the "share your presets" half
+ * of the issue.
+ *
+ * The store is a plain JSON array of {@link CustomPreset}, the exact shape the user tier uses, so
+ * the dashboard renders both from one type and the same sanitizer guards both files.
+ */
+/** The committed file holding a project's shared custom presets, under `.the-framework/`. */
+export declare const PROJECT_PRESETS_FILE = ".the-framework/custom-presets.json";
+/**
+ * Read a project's shared custom presets. Forgiving like every other read here: a missing,
+ * unreadable or malformed file yields `[]`, never throws, and the same sanitizer that guards
+ * the home file drops any hand-edited or hostile entry.
+ */
+export declare function readProjectPresets(cwd: string, fs?: StoreFs): Promise<CustomPreset[]>;
+/**
+ * Write a project's shared custom presets, sanitizing first so the committed file is always
+ * well-formed. Also ensures `.the-framework/.gitignore` un-ignores the file: the dir's ignore is
+ * `*` + `!.gitignore` (nothing else is tracked by default), so without a negation git would
+ * never see the presets and they could not be shared. Removing every preset writes an empty array
+ * rather than deleting the file, so the negation stays in place for the next save.
+ */
+export declare function writeProjectPresets(cwd: string, presets: CustomPreset[], fs?: StoreFs): Promise<void>;
+//# sourceMappingURL=project-presets.d.ts.map

package/dist/project-presets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-presets.d.ts","sourceRoot":"","sources":["../src/project-presets.ts"],"names":[],"mappings":"AAEA,OAAO,EAAyB,KAAK,YAAY,EAAE,MAAM,eAAe,CAAA;AACxE,OAAO,EAAe,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAE5D;;;;;;;;;;GAUG;AAEH,6FAA6F;AAC7F,eAAO,MAAM,oBAAoB,uCAA6C,CAAA;AAS9E;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,EAAE,GAAE,OAAuB,GAC1B,OAAO,CAAC,YAAY,EAAE,CAAC,CAczB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,YAAY,EAAE,EACvB,EAAE,GAAE,OAAuB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/dist/project-presets.js

@@ -0,0 +1,74 @@
+import { join } from 'node:path';
+import { THE_FRAMEWORK_DIR } from './framework-dir.js';
+import { sanitizeCustomPresets } from './registry.js';
+import { nodeStoreFs } from './store/index.js';
+/**
+ * Project-scoped custom presets (#1025).
+ *
+ * The user tier (#626) saves a custom preset to the user's home file, so it follows the person
+ * across every project and stays private. The project tier saves it into the repo instead, so it
+ * travels with the code and everyone who clones the repo gets it — the "share your presets" half
+ * of the issue.
+ *
+ * The store is a plain JSON array of {@link CustomPreset}, the exact shape the user tier uses, so
+ * the dashboard renders both from one type and the same sanitizer guards both files.
+ */
+/** The committed file holding a project's shared custom presets, under `.the-framework/`. */
+export const PROJECT_PRESETS_FILE = `${THE_FRAMEWORK_DIR}/custom-presets.json`;
+/** The `.the-framework/.gitignore` line that un-ignores the presets file so git tracks it. */
+const GITIGNORE_NEGATION = '!custom-presets.json';
+function gitignorePath(cwd) {
+    return join(cwd, THE_FRAMEWORK_DIR, '.gitignore');
+}
+/**
+ * Read a project's shared custom presets. Forgiving like every other read here: a missing,
+ * unreadable or malformed file yields `[]`, never throws, and the same sanitizer that guards
+ * the home file drops any hand-edited or hostile entry.
+ */
+export async function readProjectPresets(cwd, fs = nodeStoreFs()) {
+    let raw;
+    try {
+        raw = await fs.read(join(cwd, PROJECT_PRESETS_FILE));
+    }
+    catch {
+        return [];
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return [];
+    }
+    return sanitizeCustomPresets(parsed);
+}
+/**
+ * Write a project's shared custom presets, sanitizing first so the committed file is always
+ * well-formed. Also ensures `.the-framework/.gitignore` un-ignores the file: the dir's ignore is
+ * `*` + `!.gitignore` (nothing else is tracked by default), so without a negation git would
+ * never see the presets and they could not be shared. Removing every preset writes an empty array
+ * rather than deleting the file, so the negation stays in place for the next save.
+ */
+export async function writeProjectPresets(cwd, presets, fs = nodeStoreFs()) {
+    await fs.mkdir(join(cwd, THE_FRAMEWORK_DIR));
+    await ensureGitignoreNegation(cwd, fs);
+    const sanitized = sanitizeCustomPresets(presets);
+    await fs.write(join(cwd, PROJECT_PRESETS_FILE), `${JSON.stringify(sanitized, null, 2)}\n`);
+}
+/** Append the un-ignore line to `.the-framework/.gitignore` unless it is already there. */
+async function ensureGitignoreNegation(cwd, fs) {
+    const path = gitignorePath(cwd);
+    let current = '';
+    try {
+        current = await fs.read(path);
+    }
+    catch {
+        // No .gitignore yet (a pre-install dir): the negation only bites once the `*` ignore exists,
+        // so writing a bare negation is harmless and self-heals when install adds the rest.
+    }
+    if (current.split('\n').some(line => line.trim() === GITIGNORE_NEGATION))
+        return;
+    const prefix = current && !current.endsWith('\n') ? `${current}\n` : current;
+    await fs.write(path, `${prefix}${GITIGNORE_NEGATION}\n`);
+}
+//# sourceMappingURL=project-presets.js.map

package/dist/project-presets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-presets.js","sourceRoot":"","sources":["../src/project-presets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,EAAE,qBAAqB,EAAqB,MAAM,eAAe,CAAA;AACxE,OAAO,EAAE,WAAW,EAAgB,MAAM,kBAAkB,CAAA;AAE5D;;;;;;;;;;GAUG;AAEH,6FAA6F;AAC7F,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,iBAAiB,sBAAsB,CAAA;AAE9E,8FAA8F;AAC9F,MAAM,kBAAkB,GAAG,sBAAsB,CAAA;AAEjD,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,IAAI,CAAC,GAAG,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAA;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,EAAE,GAAY,WAAW,EAAE;IAE3B,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAA;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAW,EACX,OAAuB,EACvB,EAAE,GAAY,WAAW,EAAE;IAE3B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAA;IAC5C,MAAM,uBAAuB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACtC,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;AAC5F,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,uBAAuB,CAAC,GAAW,EAAE,EAAW;IAC7D,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,6FAA6F;QAC7F,oFAAoF;IACtF,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,kBAAkB,CAAC;QAAE,OAAM;IAChF,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAA;IAC5E,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,MAAM,GAAG,kBAAkB,IAAI,CAAC,CAAA;AAC1D,CAAC"}

package/dist/project-widgets.d.ts

@@ -0,0 +1,46 @@
+import { type PackageCommandResult } from '@gemstack/agent-data';
+/**
+ * A dashboard widget one of a project's packages brings (#1774): the package's own browser module,
+ * named by its `exports["./dashboard"]`. The framework names no package: any dependency of the
+ * project that exports `./dashboard` is a widget, whoever wrote it.
+ */
+export interface ProjectWidget {
+    /** The package's name, as the project's package.json lists it. */
+    package: string;
+    /** The package's version, when its package.json says one. */
+    version?: string;
+    /** The directory the widget's module sits in, symlinks resolved: the only directory served for it. */
+    dir: string;
+    /** The widget module's file name inside {@link dir}. */
+    entry: string;
+    /** The package's commands, by name, as absolute paths: what the widget may run in this project. */
+    bins: Record<string, string>;
+}
+/**
+ * The widgets a project's packages bring: each of the project's dependencies whose package.json
+ * exports `./dashboard` to a file that exists inside the package. Sorted by name.
+ */
+export declare function readProjectWidgets(root: string): Promise<ProjectWidget[]>;
+/** The one widget of this project that `name` names, or undefined. */
+export declare function findProjectWidget(root: string, name: string): Promise<ProjectWidget | undefined>;
+/**
+ * The file a widget serves at `rel`, a path relative to its module's directory: its module, its
+ * stylesheet, a chunk. `undefined` for a path that leaves that directory (symlinks resolved) or
+ * names no file, so nothing else of the package, and nothing of the project, is ever served.
+ */
+export declare function widgetFile(widget: ProjectWidget, rel: string): Promise<string | undefined>;
+/** What a widget's command answered: its JSON output, or why there is none. */
+export type WidgetCommandResult = PackageCommandResult;
+/**
+ * Run one of a widget package's own commands in the project, with the given arguments, and read
+ * its standard output as JSON. This is how a widget reads its data: the same command an agent runs
+ * (`npx logs`), so the widget and the agent see the same thing and the framework knows neither.
+ *
+ * `command` picks one of the package's commands; a package with exactly one needs none. The
+ * command runs with Node (a package's commands are Node scripts), in the project root, never
+ * through a shell, bounded in time and output. Refused: a command the package does not have, too
+ * many or too long arguments. A command that exits non-zero answers its last stderr line; one that
+ * prints no JSON says so.
+ */
+export declare function runWidgetCommand(root: string, widget: ProjectWidget, args: readonly string[], command?: string): Promise<WidgetCommandResult>;
+//# sourceMappingURL=project-widgets.d.ts.map

package/dist/project-widgets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-widgets.d.ts","sourceRoot":"","sources":["../src/project-widgets.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmD,KAAK,oBAAoB,EAAuB,MAAM,sBAAsB,CAAA;AAEtI;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAA;IACf,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,sGAAsG;IACtG,GAAG,EAAE,MAAM,CAAA;IACX,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAA;IACb,mGAAmG;IACnG,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC7B;AAoBD;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAO/E;AAgBD,sEAAsE;AACtE,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAEtG;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAKhG;AAED,+EAA+E;AAC/E,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,CAAA;AAMtD;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAS9B"}

package/dist/project-widgets.js

@@ -0,0 +1,93 @@
+import { realpath, stat } from 'node:fs/promises';
+import { dirname, join, normalize, sep } from 'node:path';
+import { packageBins, projectPackages, runPackageCommand } from '@gemstack/agent-data';
+/** The file an `exports["./dashboard"]` entry names: a plain path, or the `browser`/`import`/`default` condition. */
+function dashboardExport(exports) {
+    if (!exports || typeof exports !== 'object' || Array.isArray(exports))
+        return undefined;
+    const entry = exports['./dashboard'];
+    if (typeof entry === 'string')
+        return entry;
+    if (!entry || typeof entry !== 'object' || Array.isArray(entry))
+        return undefined;
+    for (const condition of ['browser', 'import', 'default']) {
+        const target = entry[condition];
+        if (typeof target === 'string')
+            return target;
+    }
+    return undefined;
+}
+/** Whether `path` is `dir` itself or inside it; both already normalized. */
+function within(dir, path) {
+    return path === dir || path.startsWith(dir + sep);
+}
+/**
+ * The widgets a project's packages bring: each of the project's dependencies whose package.json
+ * exports `./dashboard` to a file that exists inside the package. Sorted by name.
+ */
+export async function readProjectWidgets(root) {
+    const widgets = [];
+    for (const pkg of await projectPackages(root)) {
+        const widget = await readWidget(pkg);
+        if (widget)
+            widgets.push(widget);
+    }
+    return widgets.sort((a, b) => a.package.localeCompare(b.package));
+}
+async function readWidget({ name, dir: pkgDir, manifest: pkg }) {
+    const target = dashboardExport(pkg.exports);
+    if (!target)
+        return undefined;
+    const file = await realpath(join(pkgDir, target)).catch(() => undefined);
+    if (!file || !within(pkgDir, file) || !(await stat(file).then(s => s.isFile()).catch(() => false)))
+        return undefined;
+    return {
+        package: name,
+        ...(typeof pkg.version === 'string' ? { version: pkg.version } : {}),
+        dir: dirname(file),
+        entry: file.slice(dirname(file).length + 1),
+        bins: packageBins(name, pkg.bin, pkgDir),
+    };
+}
+/** The one widget of this project that `name` names, or undefined. */
+export async function findProjectWidget(root, name) {
+    return (await readProjectWidgets(root)).find(widget => widget.package === name);
+}
+/**
+ * The file a widget serves at `rel`, a path relative to its module's directory: its module, its
+ * stylesheet, a chunk. `undefined` for a path that leaves that directory (symlinks resolved) or
+ * names no file, so nothing else of the package, and nothing of the project, is ever served.
+ */
+export async function widgetFile(widget, rel) {
+    if (!rel)
+        return undefined;
+    const candidate = await realpath(normalize(join(widget.dir, rel))).catch(() => undefined);
+    if (!candidate || !within(widget.dir, candidate))
+        return undefined;
+    return (await stat(candidate).then(s => s.isFile()).catch(() => false)) ? candidate : undefined;
+}
+/** How many arguments, and how long each, a widget may pass: a command line, not a payload. */
+const MAX_ARGS = 32;
+const MAX_ARG_LENGTH = 4096;
+/**
+ * Run one of a widget package's own commands in the project, with the given arguments, and read
+ * its standard output as JSON. This is how a widget reads its data: the same command an agent runs
+ * (`npx logs`), so the widget and the agent see the same thing and the framework knows neither.
+ *
+ * `command` picks one of the package's commands; a package with exactly one needs none. The
+ * command runs with Node (a package's commands are Node scripts), in the project root, never
+ * through a shell, bounded in time and output. Refused: a command the package does not have, too
+ * many or too long arguments. A command that exits non-zero answers its last stderr line; one that
+ * prints no JSON says so.
+ */
+export async function runWidgetCommand(root, widget, args, command) {
+    const names = Object.keys(widget.bins);
+    const name = command ?? (names.length === 1 ? names[0] : undefined);
+    const bin = name !== undefined ? widget.bins[name] : undefined;
+    if (bin === undefined)
+        return { ok: false, error: command !== undefined ? `${widget.package} has no command ${command}` : `${widget.package} has ${names.length === 0 ? 'no command' : 'several commands; name one'}` };
+    if (args.length > MAX_ARGS || args.some(arg => typeof arg !== 'string' || arg.length > MAX_ARG_LENGTH))
+        return { ok: false, error: 'too many or too long arguments' };
+    return runPackageCommand(root, { name: name, bin }, args);
+}
+//# sourceMappingURL=project-widgets.js.map

package/dist/project-widgets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-widgets.js","sourceRoot":"","sources":["../src/project-widgets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAkD,MAAM,sBAAsB,CAAA;AAoBtI,qHAAqH;AACrH,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IACvF,MAAM,KAAK,GAAI,OAAmC,CAAC,aAAa,CAAC,CAAA;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACjF,KAAK,MAAM,SAAS,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,MAAM,GAAI,KAAiC,CAAC,SAAS,CAAC,CAAA;QAC5D,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAA;IAC/C,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,4EAA4E;AAC5E,SAAS,MAAM,CAAC,GAAW,EAAE,IAAY;IACvC,OAAO,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC,CAAA;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,MAAM,OAAO,GAAoB,EAAE,CAAA;IACnC,KAAK,MAAM,GAAG,IAAI,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;AACnE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAkB;IAC5E,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC7B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACxE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IACpH,OAAO;QACL,OAAO,EAAE,IAAI;QACb,GAAG,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC;QAClB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3C,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC;KACzC,CAAA;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY;IAChE,OAAO,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAA;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAqB,EAAE,GAAW;IACjE,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACzF,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IAClE,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;AACjG,CAAC;AAKD,+FAA+F;AAC/F,MAAM,QAAQ,GAAG,EAAE,CAAA;AACnB,MAAM,cAAc,GAAG,IAAI,CAAA;AAE3B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,MAAqB,EACrB,IAAuB,EACvB,OAAgB;IAEhB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACnE,MAAM,GAAG,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9D,IAAI,GAAG,KAAK,SAAS;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,mBAAmB,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,QAAQ,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,4BAA4B,EAAE,EAAE,CAAA;IAClM,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC;QACpG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAA;IAC/D,OAAO,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAK,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAA;AAC5D,CAAC"}

package/dist/project.d.ts

@@ -0,0 +1,29 @@
+import { type GitRunner } from '@openagt/agent-data';
+/**
+ * Project-level repo helpers (#380): the activation marker check and a
+ * `git ls-files` crawl. Read-only
+ * building blocks for the sidebars (#314); activation/install (writing the
+ * marker, the install commit) is a separate, deferred concern.
+ */
+/** Minimal fs seam so activation is unit-testable without touching disk. */
+export interface ProjectFs {
+    /** True when `path` exists AND is a file. */
+    exists(path: string): Promise<boolean>;
+}
+/**
+ * A repo is "activated"/installed for The Framework when it has the
+ * `.the-framework/.gitignore` install writes — the same marker install's own
+ * no-op check reads (#1600), so a `.the-framework/` directory something else
+ * created can never read as activated while the repo still lacks the ignore
+ * file that keeps framework state off its branches. Read-only check; writing
+ * the marker + the install commit is a separate, deferred concern.
+ */
+export declare function isActivated(cwd: string, fs?: ProjectFs): Promise<boolean>;
+/**
+ * List every file git sees in the repo at `cwd`: tracked + untracked, honoring
+ * .gitignore. Uses `git ls-files -z --cached --others --exclude-standard` (the
+ * same approach Vike uses). Returns repo-relative paths, deduped and sorted.
+ * Forgiving: a non-repo / missing git / any failure yields `[]`, never throws.
+ */
+export declare function crawlRepoFiles(cwd: string, agent?: GitRunner): Promise<string[]>;
+//# sourceMappingURL=project.d.ts.map

package/dist/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAInE;;;;;GAKG;AAEH,4EAA4E;AAC5E,MAAM,WAAW,SAAS;IACxB,6CAA6C;IAC7C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACvC;AAQD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,GAAE,SAA2B,GAAG,OAAO,CAAC,OAAO,CAAC,CAEhG;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,GAAE,SAA2B,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAYvG"}

package/dist/project.js

@@ -0,0 +1,41 @@
+import { nodeGitRunner } from '@openagt/agent-data';
+import { nodeFs } from './node-fs.js';
+import { gitignorePath } from './framework-gitignore.js';
+/** A {@link ProjectFs} backed by `node:fs/promises`. See {@link nodeFs}. */
+function nodeProjectFs() {
+    const { exists } = nodeFs();
+    return { exists };
+}
+/**
+ * A repo is "activated"/installed for The Framework when it has the
+ * `.the-framework/.gitignore` install writes — the same marker install's own
+ * no-op check reads (#1600), so a `.the-framework/` directory something else
+ * created can never read as activated while the repo still lacks the ignore
+ * file that keeps framework state off its branches. Read-only check; writing
+ * the marker + the install commit is a separate, deferred concern.
+ */
+export async function isActivated(cwd, fs = nodeProjectFs()) {
+    return fs.exists(gitignorePath(cwd));
+}
+/**
+ * List every file git sees in the repo at `cwd`: tracked + untracked, honoring
+ * .gitignore. Uses `git ls-files -z --cached --others --exclude-standard` (the
+ * same approach Vike uses). Returns repo-relative paths, deduped and sorted.
+ * Forgiving: a non-repo / missing git / any failure yields `[]`, never throws.
+ */
+export async function crawlRepoFiles(cwd, agent = nodeGitRunner()) {
+    try {
+        const out = await agent(['ls-files', '-z', '--cached', '--others', '--exclude-standard'], cwd);
+        const files = new Set();
+        for (const entry of out.split('\0')) {
+            const trimmed = entry.trim();
+            if (trimmed)
+                files.add(trimmed);
+        }
+        return [...files].sort();
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=project.js.map

package/dist/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAA;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAexD,4EAA4E;AAC5E,SAAS,aAAa;IACpB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAA;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAA;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,EAAE,GAAc,aAAa,EAAE;IAC5E,OAAO,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAA;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,KAAK,GAAc,aAAa,EAAE;IAClF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAA;QAC9F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;QAC/B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;YAC5B,IAAI,OAAO;gBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC"}