@ref0/sdk 0.7.0 → 0.9.0

package/dist/{browse-CLwrVDwR.d.mts → browse-DS1tiHAR.d.mts}

@@ -1,4 +1,4 @@
-import { $t as WorkflowAskClosed, A as ConnectionCallAnswer, B as EventRunInput, Cn as WorkflowOwn, Ct as SandboxExec, Dn as WorkflowPasskeyRead, Dt as SandboxPush, En as WorkflowPasskeyEnded, Et as SandboxOpenAnswer, Fn as WorkflowStartState, G as GetIssueInput, H as ForkAnswer$1, Ht as ThreadStage, In as WorkflowText, Ln as WorkflowThreadStart, Mn as WorkflowPullRequestOpen, On as WorkflowPasskeyState, Ot as SandboxPushAnswer, Pn as WorkflowStartEnded, Rn as WorkflowTrigger, Rt as StartActor$1, Sn as WorkflowFilters, Tn as WorkflowPasskeyAsked, Tt as SandboxOpen, U as ForkCreate, Xt as WorkflowActionAnswer, Yt as WorkflowAction, _ as CheckOwn, _n as WorkflowCheckStatesAnswer, an as WorkflowCallRefused, b as CheckTreeEntry, bn as WorkflowConnections, cn as WorkflowCheckRefusal, dn as WorkflowCheckResultsAnswer, en as WorkflowCall, fn as WorkflowCheckRun, g as CheckOn, gn as WorkflowCheckStates, hn as WorkflowCheckStartAnswer, in as WorkflowCallRefusal, jn as WorkflowPullRequestAnswer, k as ConnectionCall, kn as WorkflowPermissions, ln as WorkflowCheckRefused, mn as WorkflowCheckStart, nn as WorkflowCallEnded, on as WorkflowCalledState, pn as WorkflowCheckRunEnded, rn as WorkflowCallInput, sn as WorkflowCalledStateAnswer, tn as WorkflowCallAnswer, un as WorkflowCheckResults, v as CheckRunError, vn as WorkflowCheckWhere, vt as Ref0Owned, wn as WorkflowPasskeyAsk, wt as SandboxExecAnswer, xn as WorkflowEvent, y as CheckRunParams, yn as WorkflowComment, zt as StartRun$1 } from "./index-Vb8-1Zk-.mjs";
+import { $t as WorkflowAskClosed, A as ConnectionCallAnswer, B as EventRunInput, Cn as WorkflowOwn, Ct as SandboxExec, Dn as WorkflowPasskeyRead, Dt as SandboxPush, En as WorkflowPasskeyEnded, Et as SandboxOpenAnswer, Fn as WorkflowStartState, G as GetIssueInput, H as ForkAnswer$1, Ht as ThreadStage, In as WorkflowText, Ln as WorkflowThreadStart, Mn as WorkflowPullRequestOpen, On as WorkflowPasskeyState, Ot as SandboxPushAnswer, Pn as WorkflowStartEnded, Rn as WorkflowTrigger, Rt as StartActor$1, Sn as WorkflowFilters, Tn as WorkflowPasskeyAsked, Tt as SandboxOpen, U as ForkCreate, Xt as WorkflowActionAnswer, Yt as WorkflowAction, _ as CheckOwn, _n as WorkflowCheckStatesAnswer, an as WorkflowCallRefused, b as CheckTreeEntry, bn as WorkflowConnections, cn as WorkflowCheckRefusal, dn as WorkflowCheckResultsAnswer, en as WorkflowCall, fn as WorkflowCheckRun, g as CheckOn, gn as WorkflowCheckStates, hn as WorkflowCheckStartAnswer, in as WorkflowCallRefusal, jn as WorkflowPullRequestAnswer, k as ConnectionCall, kn as WorkflowPermissions, ln as WorkflowCheckRefused, mn as WorkflowCheckStart, nn as WorkflowCallEnded, on as WorkflowCalledState, pn as WorkflowCheckRunEnded, rn as WorkflowCallInput, sn as WorkflowCalledStateAnswer, tn as WorkflowCallAnswer, un as WorkflowCheckResults, v as CheckRunError, vn as WorkflowCheckWhere, vt as Ref0Owned, wn as WorkflowPasskeyAsk, wt as SandboxExecAnswer, xn as WorkflowEvent, y as CheckRunParams, yn as WorkflowComment, zt as StartRun$1 } from "./index-Db86z11q.mjs";
 import { z } from "zod";
 //#region src/needs.d.ts
 /**
@@ -671,4 +671,4 @@ interface Browser {
 }
 //#endregion
 export { StartActor as $, ForkOptions as A, WorkflowContext as B, Comment as C, EventWorkflow as D, EventOf as E, StepConfig as F, CalledWorkflow as G, text as H, StepContext as I, TreeEntry as J, JsonValue as K, ThreadStart as L, PullRequestAnswer as M, PullRequestOptions as N, EventWorkflowSpec as O, Ref0Actions as P, Refusal as Q, WaitType as R, CheckRunEnded as S, Duration as T, workflow as U, WorkflowStep as V, CalledRunFailed as W, Allow as X, TreeRead as Y, CalledRun as Z, ActionAnswer as _, CheckRunOptions as a, allow as at, CalledContext as b, CheckRunResult as c, Need as ct, OneOfValues as d, StartContext as et, OutputResult as f, oneOf as g, check as h, CheckResult as i, StartRun as it, NeedAddOptions as j, ForkAnswer as k, CheckSpec as l, Step as m, Check as n, StartOutput as nt, CheckRunReference as o, refuse as ot, OutputSchema as p, Tree as q, CheckContext as r, StartRule as rt, CheckRunRefused as s, CheckNeed as st, Browser as t, StartItem as tt, DurationText as u, CallAnswer as v, ConnectionsOf as w, CalledWorkflowSpec as x, CallEnded as y, WaitedEvent as z };
-//# sourceMappingURL=browse-CLwrVDwR.d.mts.map
+//# sourceMappingURL=browse-DS1tiHAR.d.mts.map

package/dist/browser.d.mts

@@ -1,4 +1,4 @@
-import { t as Browser } from "./browse-CLwrVDwR.mjs";
+import { t as Browser } from "./browse-DS1tiHAR.mjs";
 import { BrowserContext, BrowserContext as BrowserContext$1, BrowserContextOptions, Locator, Page, Page as Page$1, Request, Response } from "@cloudflare/playwright";
 import { expect as expect$1 } from "@cloudflare/playwright/test";
 //#region src/browser-stub.d.ts

package/dist/client.d.mts

@@ -1,4 +1,4 @@
-import { $ as MirrorEntry, An as WorkflowPreview, At as ScopeAction, Bn as commandLine, Bt as StatementView, C as ConnectAgent, D as ConnectOptions, E as ConnectFolderOption, F as ConsentAsked, Ft as SignInDestination, Gn as isRef0Path, Gt as TrackThread, Hn as encodeSecret, Ht as ThreadStage, I as ConsentClient, It as SignedIn, J as LiveTicket, Jn as repoNameKey, Jt as Welcome, K as Harness, Kn as liveSocketUrl, Kt as TypedApprovalCode, L as ConsentProject, Lt as SocketUrl, M as ConnectionKind, Mt as SentryOrg, N as ConnectionName, Nt as SentryRegion, O as ConnectableAgent, P as ConnectionView, Pt as SentryToken, Q as MirrorChoice, R as CredentialView, S as ClientGranted, St as RequestFolder, T as ConnectFolderChoices, Un as hookTokenPrefix, Ut as TrackClosed, V as FoldersConnected, Vn as connectEndpoint, Vt as ThreadId, Wn as hookUrl, Wt as TrackSession, X as LiveTrackName, Y as LiveTicketRequest, Yn as surfaceOf, Z as MachineConnected, _t as ReadEvent, a as Api, at as OwnerTrackMessage, bt as RepoUrl, c as ApprovalId, ct as PasskeyCreationOptions, d as ApprovalView, dt as PasskeyRequestOptions, et as MirrorView, f as AttachmentFailed, ft as PreviewEcho, gt as RanOf, ht as ProjectTrackMessage, i as AgentView, it as OwnerThreadView, j as ConnectionChanged, jt as SecretHash, l as ApprovalPreview, m as Authorization, mt as ProjectName, n as AgentPermissionChoice, nt as OwnerName, o as ApiOrigin, ot as PasskeyAsserted, p as AttachmentRequestView, pt as PreviewUnavailable, q as ImportFailure, qn as projectParts, r as AgentPermissionSetting, rt as OwnerThreadPage, s as ApprovalAnswer, st as PasskeyCreated, t as AgentHandle, tt as OwnerId, u as ApprovalState, w as ConnectChosen, x as ClientAccess, xt as RepoView, yt as RepoName, z as EndpointName, zn as WrittenProject } from "./index-Vb8-1Zk-.mjs";
+import { $ as MirrorEntry, An as WorkflowPreview, At as ScopeAction, Bn as commandLine, Bt as StatementView, C as ConnectAgent, D as ConnectOptions, E as ConnectFolderOption, F as ConsentAsked, Ft as SignInDestination, Gn as isRef0Path, Gt as TrackThread, Hn as encodeSecret, Ht as ThreadStage, I as ConsentClient, It as SignedIn, J as LiveTicket, Jn as repoNameKey, Jt as Welcome, K as Harness, Kn as liveSocketUrl, Kt as TypedApprovalCode, L as ConsentProject, Lt as SocketUrl, M as ConnectionKind, Mt as SentryOrg, N as ConnectionName, Nt as SentryRegion, O as ConnectableAgent, P as ConnectionView, Pt as SentryToken, Q as MirrorChoice, R as CredentialView, S as ClientGranted, St as RequestFolder, T as ConnectFolderChoices, Un as hookTokenPrefix, Ut as TrackClosed, V as FoldersConnected, Vn as connectEndpoint, Vt as ThreadId, Wn as hookUrl, Wt as TrackSession, X as LiveTrackName, Y as LiveTicketRequest, Yn as surfaceOf, Z as MachineConnected, _t as ReadEvent, a as Api, at as OwnerTrackMessage, bt as RepoUrl, c as ApprovalId, ct as PasskeyCreationOptions, d as ApprovalView, dt as PasskeyRequestOptions, et as MirrorView, f as AttachmentFailed, ft as PreviewEcho, gt as RanOf, ht as ProjectTrackMessage, i as AgentView, it as OwnerThreadView, j as ConnectionChanged, jt as SecretHash, l as ApprovalPreview, m as Authorization, mt as ProjectName, n as AgentPermissionChoice, nt as OwnerName, o as ApiOrigin, ot as PasskeyAsserted, p as AttachmentRequestView, pt as PreviewUnavailable, q as ImportFailure, qn as projectParts, r as AgentPermissionSetting, rt as OwnerThreadPage, s as ApprovalAnswer, st as PasskeyCreated, t as AgentHandle, tt as OwnerId, u as ApprovalState, w as ConnectChosen, x as ClientAccess, xt as RepoView, yt as RepoName, z as EndpointName, zn as WrittenProject } from "./index-Db86z11q.mjs";
 import { Effect, Layer, Option, Redacted, Schema, Stream } from "effect";
 import { HttpApi, HttpApiClient, HttpApiGroup, HttpApiMiddleware } from "effect/http-api";
 import { HttpBody, HttpClient } from "effect/http";

package/dist/client.mjs

@@ -6419,8 +6419,15 @@ var PasskeyRefused = class extends Schema.TaggedError()("PasskeyRefused", { next
 //#endregion
 //#region ../contracts/src/attachments.ts
 /** A machine asks, a signed-in person claims and approves, and the answer returns to its terminal. */
+/**
+* What could reorder or hide the text around it, such as U+202E: a control, format, surrogate,
+* private-use or unassigned character, or a line or paragraph separator.
+*/
+const hiddenCharacters = String.raw`\p{C}\p{Zl}\p{Zp}`;
+/** Text with none of them, which reads as it's written wherever it's shown. */
+const shownAsWritten = Schema.isPattern(new RegExp(`^[^${hiddenCharacters}]+$`, "u"));
 /** A machine's own word for itself: shown to the person as what it says, never as fact. */
-const MachineName = Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(64));
+const MachineName = Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(64), shownAsWritten);
 /** The harness a machine says it connects for, never proof of what it runs. */
 const ConnectHarness = Schema.Literals(["claude-code", "codex"]);
 /** The machine's loopback listener; no caller may choose its host. */
@@ -6432,7 +6439,7 @@ const AttachmentCallback = Schema.Struct({
 	state: Schema.String.check(Schema.isPattern(/^[A-Za-z0-9_-]{22}$/))
 });
 /** A config folder's path, as the machine shows it, never proof of its location. */
-const ConfigFolderPath = Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(200), Schema.isPattern(/^[^\p{C}\p{Zl}\p{Zp}]+$/u));
+const ConfigFolderPath = Schema.String.check(Schema.isMinLength(1), Schema.isMaxLength(200), shownAsWritten);
 const uniqueFolderPaths = Schema.makeFilter((folders) => new Set(folders.map((folder) => folder.path)).size === folders.length, { expected: "unique config folder paths" });
 const RequestFolder = Schema.Struct({
 	path: ConfigFolderPath,
@@ -11693,10 +11700,12 @@ Schema.Union([
 	NotPermitted
 ]);
 /**
-* A session's fork's path on ref0's host. Its thread's, `/{owner}/{project}/threads/{n}/{repo}.git`
-* on a project's thread and `/{owner}/threads/{n}/{repo}.git` on an org thread, reaches the fork
-* of the session whose token asks, and takes its pushes. A session's,
-* `…/threads/{n}/sessions/{m}/{repo}.git`, reads that session's fork, and takes no push.
+* A fork's path on ref0's host. Its thread's, `/{owner}/{project}/threads/{n}/{repo}.git` on a
+* project's thread and `/{owner}/threads/{n}/{repo}.git` on an org thread, reaches the fork of the
+* session whose token asks, and takes its pushes. A session's,
+* `…/threads/{n}/sessions/{m}/{repo}.git`, reads that session's current fork, and a fork's,
+* `…/threads/{n}/forks/{fork}/{repo}.git`, reads that fork when it holds thread `n`'s work, a
+* session's on it or a run's whose pull request is on it. Neither takes a push.
 */
 const ForkPath = Schema.String.check(Schema.isPattern(/^\/[^\s]+\.git$/), Schema.isMaxLength(512)).pipe(Schema.brand("ForkPath"));
 /** A session's fork's URL on the app's one origin: the one a notice names, and a clone pushes to. */
@@ -11718,17 +11727,21 @@ const ForkView = Schema.Struct({
 	/** On the app's one origin, whichever host was asked. */
 	url: ForkUrl
 });
-Schema.Struct({
+/**
+* For a reader that sees only threads it holds a grant on, those threads: a fork of a thread
+* stacked, at any depth, on any other is refused, since it holds that thread's work. Unset for one
+* that reads the project as a whole.
+*/
+const readerSees = { only: Schema.optionalKey(Schema.Array(ThreadId)) };
+Schema.Union([Schema.Struct({
 	session: SessionId,
-	fork: Schema.optionalKey(ForkId),
-	/**
-	* For a reader that sees only threads it holds a grant on, those threads: a fork of a thread
-	* stacked, at any depth, on any other is refused, since it holds that thread's work. Unset for
-	* one that reads the project as a whole.
-	*/
-	only: Schema.optionalKey(Schema.Array(ThreadId))
-});
-/** A session's fork in Artifacts, as Git reaches it: where it is, and which Git repository. */
+	...readerSees
+}), Schema.Struct({
+	fork: ForkId,
+	thread: ThreadId,
+	...readerSees
+})]);
+/** A fork in Artifacts, as Git reaches it: where it is, and which Git repository. */
 const ForkPlace = Schema.Struct({
 	...CurrentBaseline.fields,
 	gitRepository: GitRepositoryId
@@ -11759,19 +11772,16 @@ const SessionBase = Schema.Struct({
 	commit: CommitOid,
 	/**
 	* Where to fetch it from, on ref0's origin: the repo's own path, as `ref0 clone` cloned it, for
-	* `main`; for a stack, the path of the fork that holds the pin.
+	* `main`; for a stack, the path of the fork that holds the pin, by its ID under the thread below.
 	*/
 	path: Schema.String.check(Schema.isPattern(/^\/[^\s]+\.git$/), Schema.isMaxLength(512)),
 	/** `path` on the app's one origin. A client checks it's a fork of its own repo there. */
 	url: Schema.String,
 	ref: Schema.Literal("refs/heads/main")
 });
-/**
-* No base to fetch: `main` has no commit yet, or the pin of the thread below is in a workflow
-* run's fork, which has no session's path to fetch from.
-*/
+/** No base to fetch: `main` has no commit yet. */
 var NoBase = class extends Schema.TaggedError()("NoBase", {
-	why: Schema.Literals(["main empty", "held by a run"]),
+	why: Schema.Literal("main empty"),
 	nextStep: Schema.String
 }, { httpApiStatus: 404 }) {};
 Schema.Struct({
@@ -11789,15 +11799,14 @@ const BaseOnMain = Schema.Struct({
 	commit: CommitOid
 });
 /**
-* The base on the thread below, `lower`: its pin's commit, the fork that holds it, and that
-* fork's session, or none for a workflow run's fork.
+* The base on the thread below, `lower`: its pin's commit, and the fork that holds it, a session's
+* on that thread or a run's whose pull request is on it.
 */
 const BaseOnStack = Schema.Struct({
 	on: Schema.Literal("stack"),
 	lower: ThreadId,
 	commit: CommitOid,
-	fork: ForkId,
-	session: Schema.NullOr(SessionId)
+	fork: ForkId
 });
 Schema.Union([
 	BaseOnMain,
@@ -14903,6 +14912,11 @@ var ApprovalSecret = class extends HttpApiMiddleware.Service()("ref0/contracts/A
 	security: { bearer: HttpApiSecurity.bearer },
 	error: [Unauthenticated]
 }) {};
+/**
+* A machine's request whose name its contract refuses, answered as `CommandRefused`, which says
+* what to change. Any other part that fails its contract is answered with Effect's empty 400.
+*/
+var MachineNameRefusal = class extends HttpApiMiddleware.Service()("ref0/contracts/MachineNameRefusal", { error: CommandRefused }) {};
 const idempotency = { "idempotency-key": RequestId };
 const inProject = {
 	owner: OwnerRef,
@@ -15026,7 +15040,7 @@ var MachineAttachmentsGroup = class extends HttpApiGroup.make("machineAttachment
 		SlowDown,
 		AuthorityUnavailable
 	]
-}), HttpApiEndpoint.post("collect", "/v1/attachments/requests/:approval/result", {
+}).middleware(MachineNameRefusal), HttpApiEndpoint.post("collect", "/v1/attachments/requests/:approval/result", {
 	params: { approval: ApprovalId },
 	payload: Schema.Struct({ answerCode: Schema.optionalKey(Schema.String.check(Schema.isMaxLength(64))) }),
 	success: RequestState,