@openagt/dashboard 0.0.0-stage → 0.9.0

package/dist/registry.js

@@ -0,0 +1,364 @@
+import { basename, dirname, join, resolve } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { isDriverName } from './driver-names.js';
+import { isPublishPick } from './publish-levels.js';
+import { nodeFs } from './node-fs.js';
+/** The cap on saved custom presets, and the per-field lengths — enough for real prompts, bounded
+ * so a hand-edited or hostile registry can't bloat the home file. */
+const CUSTOM_PRESET_LIMITS = { count: 30, label: 80, prompt: 20_000 };
+/** The cap on the projects `startFrom` lists, for the same reason. */
+const START_FROM_LIMIT = 200;
+/** The registry file name: a single file under `$XDG_CONFIG_HOME` (dotted under `$HOME`). */
+export const REGISTRY_FILE = 'openagent.json';
+/** Owner read/write only: the file holds the daemon token (#1051). */
+export const REGISTRY_FILE_MODE = 0o600;
+/**
+ * Deterministic, URL-safe id for a project path: the sanitized basename plus a
+ * short hash of the full path, so two repos named alike still get distinct ids.
+ * Pure; same path always yields the same id.
+ */
+export function projectId(path) {
+    // djb2, rendered as base36: short, stable, URL-safe. Not cryptographic.
+    let hash = 5381;
+    for (let i = 0; i < path.length; i++) {
+        hash = ((hash * 33) ^ path.charCodeAt(i)) >>> 0;
+    }
+    const name = basename(path)
+        .toLowerCase()
+        .replace(/[^a-z0-9-]/g, '-');
+    return `${name}-${hash.toString(36)}`;
+}
+/**
+ * The registry file path, resolved from `env` (injectable so tests never touch
+ * the real home): `$XDG_CONFIG_HOME/openagent.json` when set, else the
+ * dotted `$HOME/.openagent.json`. A single file, not a directory (#390).
+ */
+export function registryPath(env) {
+    if (env.XDG_CONFIG_HOME)
+        return join(env.XDG_CONFIG_HOME, REGISTRY_FILE);
+    return join(env.HOME ?? '', '.' + REGISTRY_FILE);
+}
+/** A {@link RegistryFs} backed by `node:fs/promises`. See {@link nodeFs}. */
+export function nodeRegistryFs() {
+    const { read, write, mkdir, rename, chmod } = nodeFs();
+    return { read, write, mkdir, rename, chmod };
+}
+/** True when `value` is a well-formed {@link ProjectRecord}. */
+function isRecord(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const record = value;
+    return typeof record.id === 'string' && typeof record.path === 'string' && typeof record.addedAt === 'string';
+}
+/** Keep well-formed records, deduped by resolved path (first wins). */
+function dedupeProjects(values) {
+    const seen = new Set();
+    const projects = [];
+    for (const value of values) {
+        if (!isRecord(value))
+            continue;
+        const key = resolve(value.path);
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        projects.push(value);
+    }
+    return projects;
+}
+/**
+ * Every boolean preference, as a `Record` over {@link BooleanPreferenceKey} so the compiler
+ * enforces completeness in both directions (#944): a typo fails as an unknown property, and
+ * omitting a newly added boolean preference fails as a missing one. A plain `as const` array
+ * only caught the first — an omission made {@link sanitizePreferences} silently drop the new
+ * preference on every save, the write-then-vanish failure shape for a settings file.
+ */
+const BOOLEAN_PREFERENCES = {
+    notifyBrowser: true,
+    notifyNewActivity: true,
+    notifyHumanIntervention: true,
+    bridge: true,
+    bridgeBrowser: true,
+    onboardingDismissed: true,
+    postMergeCleanup: true,
+};
+const PREFERENCE_KEYS = Object.keys(BOOLEAN_PREFERENCES);
+/** Keep only the known preference fields, so a hand-edited or browser-supplied
+ * object never lands junk (or the wrong type) in the user's home file. */
+/** The color themes the dashboard offers (#725); anything else means the default `system`. */
+const KNOWN_THEMES = ['system', 'light', 'dark'];
+function sanitizePreferences(value) {
+    if (typeof value !== 'object' || value === null)
+        return {};
+    const input = value;
+    const preferences = {};
+    for (const key of PREFERENCE_KEYS) {
+        if (typeof input[key] === 'boolean')
+            preferences[key] = input[key];
+    }
+    // `model` (#628) is a free-form string preference; the rest are booleans. A blank string is "no
+    // choice", same as absent, so it is dropped rather than persisted. So is the literal word
+    // "Default": that was a picker *label* whose stored value was empty (#1143), and a file carrying
+    // it as the value — hand-edited, or written by a build that mistook the two — would otherwise be
+    // handed to the CLI as `--model Default` and fail the turn on a word nobody chose.
+    const model = typeof input['model'] === 'string' ? input['model'].trim() : '';
+    if (model && model.toLowerCase() !== 'default')
+        preferences.model = model;
+    // `driver` (#650) is constrained to the known set so junk never reaches the agent; the set is the
+    // shared node-free vocabulary (driver-names.ts).
+    if (isDriverName(input['driver']))
+        preferences.driver = input['driver'];
+    // `publish` is constrained to the picks the launcher's menu lists.
+    if (isPublishPick(input['publish']))
+        preferences.publish = input['publish'];
+    const startFrom = sanitizeStartFrom(input['startFrom']);
+    if (Object.keys(startFrom).length)
+        preferences.startFrom = startFrom;
+    // `editor` (#727) is a free-form CLI name, trimmed and length-capped so junk / a huge string
+    // never lands in the file. A blank string is "no choice" (fall back to env / `code`), so dropped.
+    if (typeof input['editor'] === 'string' && input['editor'].trim())
+        preferences.editor = input['editor'].trim().slice(0, 100);
+    // `theme` (#725) is constrained to the known set; anything else (incl. absent) means the default
+    // `system`, so it is simply dropped rather than persisted.
+    if (typeof input['theme'] === 'string' && KNOWN_THEMES.includes(input['theme']))
+        preferences.theme = input['theme'];
+    const customPresets = sanitizeCustomPresets(input['customPresets']);
+    if (customPresets.length)
+        preferences.customPresets = customPresets;
+    return preferences;
+}
+/**
+ * Keep only the projects set to start from the local branch: a map from a project's id to the one
+ * word `local`. Any other value is dropped (the main branch is the absent entry), and the map is
+ * capped at {@link START_FROM_LIMIT} projects. An id is not checked against the project list: a
+ * project removed and added again has the same id, and its pick with it.
+ */
+function sanitizeStartFrom(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return {};
+    const ids = Object.entries(value).filter(([id, from]) => id !== '' && from === 'local').map(([id]) => id);
+    return Object.fromEntries(ids.slice(0, START_FROM_LIMIT).map(id => [id, 'local']));
+}
+/**
+ * Keep only well-formed custom presets (#626): each needs a non-empty id, label, and prompt;
+ * label/prompt are trimmed and length-capped, the list capped at {@link CUSTOM_PRESET_LIMITS.count},
+ * and duplicate ids dropped. A malformed entry is skipped, not thrown — a bad registry never breaks the read.
+ */
+export function sanitizeCustomPresets(value) {
+    if (!Array.isArray(value))
+        return [];
+    const out = [];
+    const seen = new Set();
+    for (const raw of value) {
+        if (out.length >= CUSTOM_PRESET_LIMITS.count)
+            break;
+        if (typeof raw !== 'object' || raw === null)
+            continue;
+        const { id, label, prompt } = raw;
+        if (typeof id !== 'string' || typeof label !== 'string' || typeof prompt !== 'string')
+            continue;
+        const trimmedId = id.trim();
+        const trimmedLabel = label.trim().slice(0, CUSTOM_PRESET_LIMITS.label);
+        const trimmedPrompt = prompt.trim().slice(0, CUSTOM_PRESET_LIMITS.prompt);
+        if (!trimmedId || !trimmedLabel || !trimmedPrompt || seen.has(trimmedId))
+            continue;
+        seen.add(trimmedId);
+        out.push({ id: trimmedId, label: trimmedLabel, prompt: trimmedPrompt });
+    }
+    return out;
+}
+/**
+ * Read the whole registry. Forgiving: a missing / unreadable / malformed file — or one in a shape
+ * this no longer writes — yields an empty registry, never throws. Projects are deduped by resolved
+ * path and unknown preference fields are dropped.
+ */
+export async function readRegistry(fs = nodeRegistryFs(), env = process.env) {
+    const empty = { projects: [], preferences: {} };
+    let parsed;
+    try {
+        parsed = JSON.parse(await fs.read(registryPath(env)));
+    }
+    catch {
+        return empty;
+    }
+    if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed))
+        return empty;
+    const obj = parsed;
+    const projects = Array.isArray(obj.projects) ? dedupeProjects(obj.projects) : [];
+    return {
+        projects,
+        preferences: sanitizePreferences(obj.preferences),
+        // #1051: kept only as a non-empty string, so a hand-edited registry can't smuggle a junk token.
+        ...(typeof obj.daemonToken === 'string' && obj.daemonToken ? { daemonToken: obj.daemonToken } : {}),
+    };
+}
+/**
+ * Write the registry back as pretty object-form JSON, creating the parent dir.
+ *
+ * Atomic (#991): the JSON goes to a temp file beside the real one and is then renamed over it,
+ * the same shape #922 gave the daemon state file. A direct write truncates first, so a crash, a
+ * kill or a full disk mid-write left a half file — and {@link readRegistry} reports a malformed
+ * file as an empty registry, so every project and preference vanished silently. A failed write
+ * now only ever damages the temp file. The temp is left behind on failure rather than swept up:
+ * one stray file is the cheaper half of that trade.
+ *
+ * Written owner-only (#1095): the file carries the daemon token, so a default-umask 0644 in a
+ * shared home would hand it to every other account on the machine.
+ * The mode is set on the temp file, before the rename — narrowing after it would leave a window
+ * where the real path is readable. Best-effort: a filesystem with no permission bits still writes.
+ */
+async function writeRegistry(registry, fs, env) {
+    const file = registryPath(env);
+    const { projects, preferences, daemonToken } = registry;
+    const contents = {
+        projects,
+        preferences,
+        ...(daemonToken ? { daemonToken } : {}),
+    };
+    const json = JSON.stringify(contents, null, 2);
+    await fs.mkdir(dirname(file));
+    const restrict = (path) => fs.chmod?.(path, REGISTRY_FILE_MODE).catch(() => { });
+    if (!fs.rename) {
+        await fs.write(file, json);
+        await restrict(file);
+        return;
+    }
+    const temp = `${file}.${process.pid}.tmp`;
+    await fs.write(temp, json);
+    await restrict(temp);
+    await fs.rename(temp, file);
+}
+/**
+ * Serializes the read-modify-write mutators below (#991). Each reads the whole registry, edits it
+ * and writes it back, and one daemon runs several concurrently: `daemon.ts` and `daemon-runtime.ts`
+ * both call {@link addProject} while the dashboard's savePreferences RPC writes through
+ * {@link registryPreferencesStore}. Interleaved, the later write was computed from a read taken
+ * before the earlier one landed, so it silently dropped it. One tail promise for the module, not
+ * one per file: the writes are small, and the registry is a single file per machine anyway.
+ */
+let mutations = Promise.resolve();
+function serialize(mutate) {
+    const result = mutations.then(mutate);
+    // A rejected mutation must not poison the queue, and must not surface as an unhandled rejection
+    // here — the caller still gets `result`, which carries the error.
+    mutations = result.then(() => { }, () => { });
+    return result;
+}
+/**
+ * Read the registry's project list. Forgiving: a missing / unreadable / malformed
+ * file yields `[]`, never throws. Deduped by resolved path, first wins.
+ */
+export async function listProjects(fs = nodeRegistryFs(), env = process.env) {
+    return (await readRegistry(fs, env)).projects;
+}
+/**
+ * Register a project. Idempotent by resolved path: when the path is already
+ * registered, the existing record is returned untouched (addedAt survives);
+ * otherwise the new record is appended and the file written back (preferences preserved).
+ */
+export async function addProject(path, addedAt, fs = nodeRegistryFs(), env = process.env) {
+    return serialize(async () => {
+        const absolute = resolve(path);
+        const registry = await readRegistry(fs, env);
+        const existing = registry.projects.find(project => resolve(project.path) === absolute);
+        if (existing)
+            return existing;
+        const record = { id: projectId(absolute), path: absolute, addedAt };
+        registry.projects.push(record);
+        await writeRegistry(registry, fs, env);
+        return record;
+    });
+}
+/**
+ * Take a project off the list, by id. Answers the record that was removed, or `undefined` when
+ * no project has that id. Only the list changes: nothing in the project's folder is touched, so
+ * a project whose folder is gone is removed like any other.
+ */
+export async function removeProject(id, fs = nodeRegistryFs(), env = process.env) {
+    return serialize(async () => {
+        const registry = await readRegistry(fs, env);
+        const removed = registry.projects.find(project => project.id === id);
+        if (!removed)
+            return undefined;
+        registry.projects = registry.projects.filter(project => project.id !== id);
+        await writeRegistry(registry, fs, env);
+        return removed;
+    });
+}
+/** The user's dashboard preferences (#410), or `{}` when none are stored. */
+export async function readPreferences(fs = nodeRegistryFs(), env = process.env) {
+    return (await readRegistry(fs, env)).preferences;
+}
+/** Persist the dashboard preferences (#410), sanitized, preserving the project list. */
+export async function writePreferences(preferences, fs = nodeRegistryFs(), env = process.env) {
+    return serialize(async () => {
+        const registry = await readRegistry(fs, env);
+        await writeRegistry({ ...registry, preferences: sanitizePreferences(preferences) }, fs, env);
+    });
+}
+/**
+ * Merge `patch` over the stored preferences (#1148) and return the result.
+ *
+ * The counterpart to {@link writePreferences}, which replaces the whole block: a client that
+ * sends its entire snapshot replays every value it happens to hold, so a dashboard tab opened
+ * before someone else's change silently reverted it on the tab's next write, whatever key that
+ * write was actually about. Sending only the changed keys makes a write touch only what it names.
+ *
+ * Clearing needs no sentinel: {@link sanitizePreferences} already drops blank strings and empty
+ * lists, so `{ editor: '' }` merges in as blank and comes out absent, which is how the dashboard
+ * clears the editor today.
+ */
+export async function patchPreferences(patch, fs = nodeRegistryFs(), env = process.env) {
+    return serialize(async () => {
+        const registry = await readRegistry(fs, env);
+        const preferences = sanitizePreferences({ ...registry.preferences, ...patch });
+        await writeRegistry({ ...registry, preferences }, fs, env);
+        return preferences;
+    });
+}
+/**
+ * The shared daemon token (#1051): read the persisted one, or generate + persist it now. Called
+ * only on a non-loopback bind, so a loopback-only machine never grows one. Serialized with the
+ * other mutators so two concurrent binds can't each write a different token. `base64url` of 32
+ * random bytes: URL-safe, so it drops straight into a `?token=` without encoding.
+ */
+export async function ensureDaemonToken(fs = nodeRegistryFs(), env = process.env) {
+    return serialize(async () => {
+        const registry = await readRegistry(fs, env);
+        if (registry.daemonToken)
+            return registry.daemonToken;
+        const daemonToken = randomBytes(32).toString('base64url');
+        await writeRegistry({ ...registry, daemonToken }, fs, env);
+        return daemonToken;
+    });
+}
+/** The persisted daemon token (#1051), or `undefined` when none exists. A pure read, so a process
+ * that only prints the reachable URL never generates one. */
+export async function readDaemonToken(fs = nodeRegistryFs(), env = process.env) {
+    return (await readRegistry(fs, env)).daemonToken;
+}
+/** A {@link PreferencesStore} bound to the real registry file, wired by the daemon so the
+ * dashboard's preferences RPCs read/write the user's home file.
+ *
+ * `onChange` is handed **the keys the caller wrote**, not the merged result, so a listener can
+ * tell "this write switched the setting on" from "it was already on and something else changed"
+ * (#1161). It runs after the write has landed, and its failure is swallowed: the save succeeded,
+ * and a listener must not be able to report otherwise: a setting saved in the browser has to
+ * reach the daemon's own services without a restart.
+ */
+export function registryPreferencesStore(fs = nodeRegistryFs(), env = process.env, onChange) {
+    const changed = (written, result) => {
+        try {
+            onChange?.(written);
+        }
+        catch {
+            // The write landed; a listener that throws is not the writer's problem.
+        }
+        return result;
+    };
+    return {
+        read: () => readPreferences(fs, env),
+        save: async (preferences) => changed(preferences, await writePreferences(preferences, fs, env)),
+        patch: async (patch) => changed(patch, await patchPreferences(patch, fs, env)),
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAoB,MAAM,qBAAqB,CAAA;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAwCrC;qEACqE;AACrE,MAAM,oBAAoB,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAW,CAAA;AAE9E,sEAAsE;AACtE,MAAM,gBAAgB,GAAG,GAAG,CAAA;AA4F5B,6FAA6F;AAC7F,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAA;AAE7C,sEAAsE;AACtE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAEvC;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,wEAAwE;IACxE,IAAI,IAAI,GAAG,IAAI,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;SACxB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAA;IAC9B,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAA;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,GAAsB;IACjD,IAAI,GAAG,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;IACxE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,GAAG,aAAa,CAAC,CAAA;AAClD,CAAC;AAuBD,6EAA6E;AAC7E,MAAM,UAAU,cAAc;IAC5B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAA;IACtD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAC9C,CAAC;AAED,gEAAgE;AAChE,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,OAAO,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAA;AAC/G,CAAC;AAED,uEAAuE;AACvE,SAAS,cAAc,CAAC,MAAiB;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,QAAQ,GAAoB,EAAE,CAAA;IACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAQ;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,mBAAmB,GAAuC;IAC9D,aAAa,EAAE,IAAI;IACnB,iBAAiB,EAAE,IAAI;IACvB,uBAAuB,EAAE,IAAI;IAC7B,MAAM,EAAE,IAAI;IACZ,aAAa,EAAE,IAAI;IACnB,mBAAmB,EAAE,IAAI;IACzB,gBAAgB,EAAE,IAAI;CACvB,CAAA;AAED,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAA2B,CAAA;AAElF;0EAC0E;AAC1E,8FAA8F;AAC9F,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAU,CAAA;AAEzD,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC1D,MAAM,KAAK,GAAG,KAAgC,CAAA;IAC9C,MAAM,WAAW,GAAgB,EAAE,CAAA;IACnC,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,WAAW,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAY,CAAA;IAC/E,CAAC;IACD,gGAAgG;IAChG,0FAA0F;IAC1F,iGAAiG;IACjG,iGAAiG;IACjG,mFAAmF;IACnF,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7E,IAAI,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,SAAS;QAAE,WAAW,CAAC,KAAK,GAAG,KAAK,CAAA;IACzE,kGAAkG;IAClG,iDAAiD;IACjD,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAuB,CAAC;QAAE,WAAW,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAW,CAAA;IACvG,mEAAmE;IACnE,IAAI,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAE,WAAW,CAAC,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAA;IAC3E,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAA;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM;QAAE,WAAW,CAAC,SAAS,GAAG,SAAS,CAAA;IACpE,6FAA6F;IAC7F,kGAAkG;IAClG,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;QAC/D,WAAW,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC3D,iGAAiG;IACjG,2DAA2D;IAC3D,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAK,YAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACpG,WAAW,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAkC,CAAA;IACrE,MAAM,aAAa,GAAG,qBAAqB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAA;IACnE,IAAI,aAAa,CAAC,MAAM;QAAE,WAAW,CAAC,aAAa,GAAG,aAAa,CAAA;IACnE,OAAO,WAAW,CAAA;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAClF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;IACzG,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,OAAgB,CAAC,CAAC,CAAC,CAAA;AAC7F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACpC,MAAM,GAAG,GAAmB,EAAE,CAAA;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,MAAM,IAAI,oBAAoB,CAAC,KAAK;YAAE,MAAK;QACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,SAAQ;QACrD,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAA8B,CAAA;QAC5D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,SAAQ;QAC/F,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,EAAE,CAAA;QAC3B,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,KAAK,CAAC,CAAA;QACtE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAA;QACzE,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAQ;QAClF,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACnB,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAE,GAAe,cAAc,EAAE,EACjC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAA;IACzD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IACxF,MAAM,GAAG,GAAG,MAAiC,CAAA;IAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAChF,OAAO;QACL,QAAQ;QACR,WAAW,EAAE,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC;QACjD,gGAAgG;QAChG,GAAG,CAAC,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpG,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,aAAa,CAAC,QAAkB,EAAE,EAAc,EAAE,GAAsB;IACrF,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,QAAQ,CAAA;IACvD,MAAM,QAAQ,GAAG;QACf,QAAQ;QACR,WAAW;QACX,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC9C,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7B,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACvF,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC1B,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;QACpB,OAAM;IACR,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAA;IACzC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC1B,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IACpB,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,IAAI,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;AAEhD,SAAS,SAAS,CAAI,MAAwB;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACrC,gGAAgG;IAChG,kEAAkE;IAClE,SAAS,GAAG,MAAM,CAAC,IAAI,CACrB,GAAG,EAAE,GAAE,CAAC,EACR,GAAG,EAAE,GAAE,CAAC,CACT,CAAA;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAE,GAAe,cAAc,EAAE,EACjC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,OAAe,EACf,EAAE,GAAe,cAAc,EAAE,EACjC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAA;QACtF,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAE7B,MAAM,MAAM,GAAkB,EAAE,EAAE,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;QAClF,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACtC,OAAO,MAAM,CAAA;IACf,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAU,EACV,EAAE,GAAe,cAAc,EAAE,EACjC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;QAC1B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QACpE,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAA;QAC9B,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QAC1E,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACtC,OAAO,OAAO,CAAA;IAChB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAE,GAAe,cAAc,EAAE,EACjC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAA;AAClD,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAwB,EACxB,EAAE,GAAe,cAAc,EAAE,EACjC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;QAC1B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5C,MAAM,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,mBAAmB,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAkB,EAClB,EAAE,GAAe,cAAc,EAAE,EACjC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;QAC1B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5C,MAAM,WAAW,GAAG,mBAAmB,CAAC,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;QAC9E,MAAM,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1D,OAAO,WAAW,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAE,GAAe,cAAc,EAAE,EACjC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;QAC1B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5C,IAAI,QAAQ,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC,WAAW,CAAA;QACrD,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACzD,MAAM,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAC1D,OAAO,WAAW,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;6DAC6D;AAC7D,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAE,GAAe,cAAc,EAAE,EACjC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAA;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,EAAE,GAAe,cAAc,EAAE,EACjC,GAAG,GAAsB,OAAO,CAAC,GAAG,EACpC,QAAyC;IAEzC,MAAM,OAAO,GAAG,CAAI,OAAoB,EAAE,MAAS,EAAK,EAAE;QACxD,IAAI,CAAC;YACH,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAA;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;IACD,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC;QACpC,IAAI,EAAE,KAAK,EAAC,WAAW,EAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,gBAAgB,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7F,KAAK,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;KAC7E,CAAA;AACH,CAAC"}

package/dist/remove-files.d.ts

@@ -0,0 +1,24 @@
+import { type GitRunner } from '@openagt/agent-data';
+import type { CleanupReport } from './dashboard/types.js';
+/**
+ * What OpenAgent left in a project's folder, removed: what a person asks for with the box in the
+ * "Remove project" dialog. Three owners, each removing its own:
+ *
+ * - every tool that declares a `cleanup` command: asked to run it, and its answer passed on. One
+ *   that refuses or fails ends the pass there: the records and the dashboard's directory stay.
+ *   The runner refuses while a run is alive, the scheduler while one set to keep running is.
+ * - the agents' records: the `agent-data` checkout and local branch, and the person's answer to
+ *   "share the records". Left alone when another project on the list is a checkout of the same
+ *   repository, since the branch is the repository's and that project still reads it.
+ * - the dashboard's own directory, `.openagent/`: every file git does not track.
+ *
+ * Never the remote, a commit, a branch with work on it or a file git tracks. Nothing here throws:
+ * what could not be done is a line in `failed`.
+ */
+export interface RemoveFilesOptions {
+    /** Another project on the list that is a checkout of the same repository, by its folder. */
+    recordsUsedBy?: string | undefined;
+    git?: GitRunner;
+}
+export declare function removeProjectFiles(root: string, opts?: RemoveFilesOptions): Promise<CleanupReport>;
+//# sourceMappingURL=remove-files.d.ts.map

package/dist/remove-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-files.d.ts","sourceRoot":"","sources":["../src/remove-files.ts"],"names":[],"mappings":"AAEA,OAAO,EAA6E,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAI/H,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAEzD;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,kBAAkB;IACjC,4FAA4F;IAC5F,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAClC,GAAG,CAAC,EAAE,SAAS,CAAA;CAChB;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,aAAa,CAAC,CAiC5G"}

package/dist/remove-files.js

@@ -0,0 +1,98 @@
+import { lstat, readdir, rm, rmdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { DATA_BRANCH, clearSharing, nodeGitRunner, removeFileBranch, SHARE_SETTING } from '@openagt/agent-data';
+import { OPENAGENT_DIR } from './openagent-dir.js';
+import { runCleanups } from './built-in.js';
+import { errorMessage } from './error-message.js';
+export async function removeProjectFiles(root, opts = {}) {
+    const git = opts.git ?? nodeGitRunner();
+    const report = { removed: [], kept: [], failed: [] };
+    // The tools first: the runner refuses while a run of this machine is alive, and then nothing
+    // of the records or the dashboard's directory may go from under that run.
+    const tools = await runCleanups(root);
+    report.removed.push(...tools.removed);
+    report.kept.push(...tools.kept);
+    report.failed.push(...tools.failed);
+    if (tools.failed.length > 0) {
+        const reason = 'a clean-up before it did not finish';
+        report.kept.push({ path: `branch ${DATA_BRANCH}`, reason }, { path: OPENAGENT_DIR, reason });
+        return report;
+    }
+    if (opts.recordsUsedBy !== undefined) {
+        report.kept.push({ path: `branch ${DATA_BRANCH}`, reason: `another project on the list uses it: ${opts.recordsUsedBy}` });
+    }
+    else {
+        const records = await removeFileBranch(root, DATA_BRANCH, { git });
+        if (!records.ok)
+            report.failed.push(`the agents' records: ${records.error}`);
+        else {
+            report.removed.push(...records.removed);
+            // The records' checkout was another tool's "not mine" a moment ago; now it is gone.
+            report.kept = report.kept.filter(kept => !records.removed.includes(kept.path));
+            report.kept.push(...records.kept);
+            // The answer goes with the records it was about; while anything of them stays, so does it.
+            if (records.kept.length === 0 && (await clearSharing(root, git)))
+                report.removed.push(`setting ${SHARE_SETTING}`);
+        }
+    }
+    await removeOwnDirectory(root, git, report);
+    return report;
+}
+/** The dashboard's directory: every file in it that git does not track, then each directory left empty. */
+async function removeOwnDirectory(root, git, report) {
+    const dir = join(root, OPENAGENT_DIR);
+    const entry = await lstat(dir).catch(() => undefined);
+    if (!entry)
+        return;
+    // A link is followed nowhere: what it points at may lie outside the project.
+    if (!entry.isDirectory()) {
+        report.kept.push({ path: OPENAGENT_DIR, reason: 'not made by OpenAgent' });
+        return;
+    }
+    let tracked;
+    try {
+        tracked = new Set((await git(['ls-files', '-z', '--', OPENAGENT_DIR], root)).split('\0').filter(Boolean).map(folded));
+    }
+    catch (err) {
+        // Without git's word on what it tracks, nothing is removed.
+        report.failed.push(`${OPENAGENT_DIR}: ${errorMessage(err)}`);
+        return;
+    }
+    try {
+        const files = [];
+        // The whole directory in one line when it went; else the files that did.
+        if (await emptyOut(root, OPENAGENT_DIR, tracked, report, files))
+            report.removed.push(OPENAGENT_DIR);
+        else
+            report.removed.push(...files);
+    }
+    catch (err) {
+        report.failed.push(`${OPENAGENT_DIR}: ${errorMessage(err)}`);
+    }
+}
+/**
+ * Remove what git does not track under `rel` (a directory, from the project's root) and then the
+ * directory itself when nothing is left in it. Answers whether the directory went. A tracked file
+ * is named in the report's `kept`, a removed one in `files`; a link is removed as a link, never
+ * followed.
+ */
+async function emptyOut(root, rel, tracked, report, files) {
+    for (const name of await readdir(join(root, rel))) {
+        const path = `${rel}/${name}`;
+        if ((await lstat(join(root, path))).isDirectory())
+            await emptyOut(root, path, tracked, report, files);
+        else if (tracked.has(folded(path)))
+            report.kept.push({ path, reason: 'git tracks it' });
+        else {
+            await rm(join(root, path), { force: true });
+            files.push(path);
+        }
+    }
+    // rmdir, never a recursive remove: whatever is left in it keeps it.
+    return rmdir(join(root, rel)).then(() => true, () => false);
+}
+/** A path as a file system that ignores case and Unicode form names it: two spellings of one tracked file are the same file here. */
+function folded(path) {
+    return path.normalize('NFC').toLowerCase();
+}
+//# sourceMappingURL=remove-files.js.map

package/dist/remove-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-files.js","sourceRoot":"","sources":["../src/remove-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAA;AAC/H,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAwBjD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,IAAI,GAAuB,EAAE;IAClF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,aAAa,EAAE,CAAA;IACvC,MAAM,MAAM,GAAkB,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IAEnE,6FAA6F;IAC7F,0EAA0E;IAC1E,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAA;IACrC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;IACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;IACnC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,qCAAqC,CAAA;QACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;QAC5F,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,WAAW,EAAE,EAAE,MAAM,EAAE,wCAAwC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAC3H,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;aACvE,CAAC;YACJ,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;YACvC,oFAAoF;YACpF,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;YAC9E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;YACjC,2FAA2F;YAC3F,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,aAAa,EAAE,CAAC,CAAA;QACnH,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;IAC3C,OAAO,MAAM,CAAA;AACf,CAAC;AAED,2GAA2G;AAC3G,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,GAAc,EAAE,MAAqB;IACnF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACrD,IAAI,CAAC,KAAK;QAAE,OAAM;IAClB,6EAA6E;IAC7E,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAA;QAC1E,OAAM;IACR,CAAC;IACD,IAAI,OAAoB,CAAA;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IACvH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4DAA4D;QAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC5D,OAAM;IACR,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAa,EAAE,CAAA;QAC1B,yEAAyE;QACzE,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC;YAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;;YAC9F,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,KAAK,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC9D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,GAAW,EAAE,OAA4B,EAAE,MAAqB,EAAE,KAAe;IACrH,KAAK,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;QAC7B,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;aAChG,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;aAClF,CAAC;YACJ,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC3C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClB,CAAC;IACH,CAAC;IACD,oEAAoE;IACpE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;AAC7D,CAAC;AAED,qIAAqI;AACrI,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;AAC5C,CAAC"}

package/dist/request-path.d.ts

@@ -0,0 +1,10 @@
+import type { IncomingMessage } from 'node:http';
+/**
+ * A request's pathname, parsed defensively (#938). Node hands the request target through
+ * verbatim, including absolute-form targets a proxy client may send (`GET http://[ ...`),
+ * and `new URL` throws on those synchronously inside the request handler — an uncaught
+ * exception that takes the whole daemon down. `undefined` means "no parseable path":
+ * answer 400 (or serve the fallback), never throw.
+ */
+export declare function requestPathname(req: IncomingMessage): string | undefined;
+//# sourceMappingURL=request-path.d.ts.map

package/dist/request-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-path.d.ts","sourceRoot":"","sources":["../src/request-path.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAEhD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAMxE"}

package/dist/request-path.js

@@ -0,0 +1,16 @@
+/**
+ * A request's pathname, parsed defensively (#938). Node hands the request target through
+ * verbatim, including absolute-form targets a proxy client may send (`GET http://[ ...`),
+ * and `new URL` throws on those synchronously inside the request handler — an uncaught
+ * exception that takes the whole daemon down. `undefined` means "no parseable path":
+ * answer 400 (or serve the fallback), never throw.
+ */
+export function requestPathname(req) {
+    try {
+        return new URL(req.url ?? '/', 'http://localhost').pathname;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=request-path.js.map

package/dist/request-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-path.js","sourceRoot":"","sources":["../src/request-path.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAoB;IAClD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC"}

package/dist/store/agent-checkout.d.ts

@@ -0,0 +1,54 @@
+import { type BranchesFor, type Checkout } from './branches.js';
+import { type AnyDiaryLine, type RunsFor } from './runs.js';
+/**
+ * A run's checkout, as the project's branches provider lists it, or `undefined` when it lists
+ * none for the id. The provider's list is shared for a few seconds; a run that is not in it may
+ * have started a moment ago, so a miss asks once more, fresh (`branches.ts` bounds how fresh).
+ */
+export declare function findCheckout(projectCwd: string, agentId: string, branches: BranchesFor, opts?: {
+    cached?: boolean;
+}): Promise<Checkout | undefined>;
+/**
+ * The checkout an agent id resolves to (#738/#797): the agent's own checkout while the project's
+ * branches provider lists one for it, else the project root. The list is asked fresh on a miss:
+ * a run that just started has its checkout before its tool has written the card (#766), and the
+ * event stream resolves its path once, when the browser opens it.
+ *
+ * An unknown or finished `agentId` falls back to the project root rather than failing: the
+ * run's checkout may already be gone, and the project's own state is still the sane thing to
+ * act on. This is the one resolution every run-addressed surface shares — the daemon's serve
+ * targets and previews, and each dashboard RPC — so the fallback rules cannot drift apart.
+ */
+export declare function resolveAgentCheckout(projectCwd: string, agentId: string | undefined, branches?: BranchesFor): Promise<string>;
+/**
+ * Where a run's diary is, for a reader that follows it: a file while the run has a checkout, the
+ * finished run's lines once it has none, or nowhere yet (`pending`): the run was started a moment
+ * ago and its tool has not made the checkout, so the reader asks again shortly.
+ */
+export type AgentDiarySource = {
+    file: string;
+} | {
+    finished: AnyDiaryLine[];
+} | {
+    pending: true;
+};
+/**
+ * The diary a run-scoped subscribe should follow (#1472, #1774): the run's own `<id>.jsonl`.
+ * While the run has a checkout it is a file there, under the checkout's `.openagent/`,
+ * written by the run's tool as the agent works. Once the run is recorded and its checkout
+ * reclaimed, it is the finished run's diary, whole, from the project's runs provider. A run that
+ * has neither yet was started a moment ago: its tool has not made the checkout, so the diary is
+ * nowhere yet, and the tail asks again (`../dashboard-rpc/events-tail.ts`). A project with no
+ * runs provider answers the same for a finished run: nowhere, where nothing more comes.
+ *
+ * `cached` answers from the shared lists only, never asking the checkouts fresh on a miss: for a
+ * reader that asks about a finished run for as long as it is open, in case it is resumed.
+ *
+ * Only the events tails resolve here; every other run-addressed surface keeps
+ * {@link resolveAgentCheckout}'s root fallback, where the project's own state is the sane
+ * thing to act on.
+ */
+export declare function resolveAgentDiary(projectCwd: string, agentId: string | undefined, runs?: RunsFor, branches?: BranchesFor, opts?: {
+    cached?: boolean;
+}): Promise<AgentDiarySource | undefined>;
+//# sourceMappingURL=agent-checkout.d.ts.map

package/dist/store/agent-checkout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-checkout.d.ts","sourceRoot":"","sources":["../../src/store/agent-checkout.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmB,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,eAAe,CAAA;AAChF,OAAO,EAAwB,KAAK,YAAY,EAAE,KAAK,OAAO,EAAE,MAAM,WAAW,CAAA;AAGjF;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAM7J;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,GAAE,WAA6B,GAAG,OAAO,CAAC,MAAM,CAAC,CAGpJ;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAAA;AAElG;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iBAAiB,CACrC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,IAAI,GAAE,OAAqB,EAC3B,QAAQ,GAAE,WAA6B,EACvC,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9B,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAMvC"}