@schoolai/shipyard 3.7.0 → 3.8.0-rc.20260529.0

package/dist/{chunk-LW2MS4T5.js → chunk-LMJFHKRD.js}

@@ -1,27 +1,27 @@
 #!/usr/bin/env node
-import {
-  DeviceExchangeCodeResponseSchema,
-  DevicePollPendingSchema,
-  DevicePollResponseSchema,
-  DeviceStartResponseSchema,
-  ROUTES
-} from "./chunk-7AHRFPAL.js";
 import {
   print,
   printError
-} from "./chunk-IISLTKYY.js";
+} from "./chunk-TU63KZFW.js";
 import {
   getConfigPath,
   loadAuthToken,
   readConfig,
   writeConfig
-} from "./chunk-2J3WSIAF.js";
+} from "./chunk-EF2DAODF.js";
+import {
+  DeviceExchangeCodeResponseSchema,
+  DevicePollPendingSchema,
+  DevicePollResponseSchema,
+  DeviceStartResponseSchema,
+  ROUTES
+} from "./chunk-7YOU7MBN.js";
 import {
   isDevMode
-} from "./chunk-PI77CUEP.js";
+} from "./chunk-KITSAHTX.js";
 import {
   external_exports
-} from "./chunk-VPMN47TL.js";
+} from "./chunk-CNR7O5YH.js";
 
 // src/shared/commands/login.ts
 var DEFAULT_SIGNALING_URL = "https://shipyard-session-server.jacob-191.workers.dev";
@@ -36,6 +36,7 @@ async function ensureAuthenticated(opts) {
       token: existing.token,
       userId: existing.userId,
       displayName: existing.displayName,
+      avatarUrl: existing.avatarUrl,
       signalingUrl: existing.signalingUrl ?? opts.signalingUrl,
       deviceFlowRan: false
     };
@@ -168,6 +169,7 @@ async function handleSuccessfulPoll(pollRes, signalingUrl) {
       token: pollData.token,
       userId: pollData.user.id,
       displayName: pollData.user.displayName,
+      avatarUrl: pollData.user.avatarUrl,
       providers: pollData.user.providers,
       expiresAt,
       signalingUrl
@@ -181,6 +183,7 @@ async function handleSuccessfulPoll(pollRes, signalingUrl) {
     token: pollData.token,
     userId: pollData.user.id,
     displayName: pollData.user.displayName,
+    avatarUrl: pollData.user.avatarUrl,
     signalingUrl,
     deviceFlowRan: true
   };
@@ -219,4 +222,4 @@ export {
   ensureAuthenticated,
   loginCommand
 };
-//# sourceMappingURL=chunk-LW2MS4T5.js.map
+//# sourceMappingURL=chunk-LMJFHKRD.js.map

package/dist/chunk-LMJFHKRD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/commands/login.ts"],"sourcesContent":["import {\n  DeviceExchangeCodeResponseSchema,\n  DevicePollPendingSchema,\n  DevicePollResponseSchema,\n  DeviceStartResponseSchema,\n  ROUTES,\n} from '@shipyard/session';\nimport { z } from 'zod';\nimport {\n  getConfigPath,\n  loadAuthToken,\n  readConfig,\n  type ShipyardConfig,\n  writeConfig,\n} from '../../services/bootstrap/auth.js';\nimport { isDevMode } from '../env.js';\nimport { print, printError } from './output.js';\n\nconst DEFAULT_SIGNALING_URL = 'https://shipyard-session-server.jacob-191.workers.dev';\nconst DEFAULT_DEV_SIGNALING_URL = 'http://localhost:4444';\n\nexport function getSignalingUrl(): string {\n  return (\n    process.env.SHIPYARD_SIGNALING_URL ??\n    (isDevMode() ? DEFAULT_DEV_SIGNALING_URL : DEFAULT_SIGNALING_URL)\n  );\n}\n\nexport interface AuthConfig {\n  token: string;\n  userId: string;\n  displayName: string;\n  avatarUrl: string | null;\n  signalingUrl: string;\n}\n\nexport interface AuthResult extends AuthConfig {\n  deviceFlowRan: boolean;\n}\n\n/**\n * Ensure the user is authenticated, running the device flow interactively if needed.\n * Returns the auth config on success, or calls process.exit(1) on failure.\n */\nexport async function ensureAuthenticated(opts: {\n  signalingUrl: string;\n  webCode?: string;\n}): Promise<AuthResult> {\n  const existing = await loadAuthToken();\n\n  if (existing.status === 'ok') {\n    return {\n      token: existing.token,\n      userId: existing.userId,\n      displayName: existing.displayName,\n      avatarUrl: existing.avatarUrl,\n      signalingUrl: existing.signalingUrl ?? opts.signalingUrl,\n      deviceFlowRan: false,\n    };\n  }\n\n  if (existing.status === 'expired') {\n    print('  Token expired. Starting re-authentication...\\n');\n  }\n\n  if (opts.webCode) {\n    try {\n      return await runWebCodeFlow(opts.signalingUrl, opts.webCode);\n    } catch {\n      print('  Web code expired or invalid. Starting standard login...\\n');\n    }\n  }\n\n  return runDeviceFlow(opts.signalingUrl);\n}\n\nasync function runDeviceFlow(signalingUrl: string): Promise<AuthResult> {\n  const startData = await startDeviceFlow(signalingUrl);\n\n  print(`  Open this URL in your browser:\\n`);\n  print(`    ${startData.verificationUri}\\n`);\n  print(`  Your code: ${startData.userCode}\\n`);\n  print('  Waiting for authorization...');\n\n  if (!process.env.SHIPYARD_NO_OPEN) {\n    import('open').then(({ default: open }) => open(startData.verificationUri)).catch(() => {});\n  }\n\n  const interval = (startData.interval ?? 5) * 1000;\n  const deadline = Date.now() + startData.expiresIn * 1000;\n\n  while (Date.now() < deadline) {\n    await new Promise((resolve) => setTimeout(resolve, interval));\n\n    try {\n      const pollRes = await fetch(`${signalingUrl}${ROUTES.AUTH_DEVICE_POLL}`, {\n        method: 'POST',\n        headers: { 'Content-Type': 'application/json' },\n        body: JSON.stringify({ deviceCode: startData.deviceCode }),\n      });\n\n      if (pollRes.ok) {\n        const result = await handleSuccessfulPoll(pollRes, signalingUrl);\n        return result;\n      }\n\n      await handlePollError(pollRes, interval);\n    } catch (err: unknown) {\n      printError('Device flow poll failed', err instanceof Error ? err : undefined);\n    }\n  }\n\n  printError('\\n  Authorization timed out. Run `shipyard login` again.');\n  process.exit(1);\n}\n\nasync function runWebCodeFlow(signalingUrl: string, userCode: string): Promise<AuthResult> {\n  print('  Authenticating via web app code...\\n');\n\n  let deviceCode: string | undefined;\n  for (let attempt = 0; attempt < 3; attempt++) {\n    if (attempt > 0) await new Promise((r) => setTimeout(r, 1000));\n\n    const exchangeRes = await fetch(`${signalingUrl}${ROUTES.AUTH_DEVICE_EXCHANGE_CODE}`, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({ userCode }),\n    });\n\n    if (exchangeRes.ok) {\n      const parsed = DeviceExchangeCodeResponseSchema.parse(await exchangeRes.json());\n      deviceCode = parsed.deviceCode;\n      break;\n    }\n\n    if (attempt === 2) {\n      throw new Error(`Exchange failed after 3 attempts: ${exchangeRes.status}`);\n    }\n  }\n\n  if (!deviceCode) throw new Error('Exchange failed: no device code');\n\n  const pollRes = await fetch(`${signalingUrl}${ROUTES.AUTH_DEVICE_POLL}`, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json' },\n    body: JSON.stringify({ deviceCode }),\n  });\n\n  if (!pollRes.ok) {\n    throw new Error(`Poll failed: ${pollRes.status}`);\n  }\n\n  const result = await handleSuccessfulPoll(pollRes, signalingUrl);\n  print('  Authenticated via web app\\n');\n  return result;\n}\n\nexport async function loginCommand(options: { check?: boolean }): Promise<void> {\n  if (options.check) {\n    return checkLogin();\n  }\n\n  const signalingUrl = getSignalingUrl();\n  await runDeviceFlow(signalingUrl);\n}\n\nasync function startDeviceFlow(signalingUrl: string) {\n  print('Starting device authorization...\\n');\n\n  let startRes: Response;\n  try {\n    startRes = await fetch(`${signalingUrl}${ROUTES.AUTH_DEVICE_START}`, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n    });\n  } catch (err) {\n    printError(\n      `Could not reach signaling server at ${signalingUrl}`,\n      err instanceof Error ? err : undefined\n    );\n    printError('Check your internet connection or set SHIPYARD_SIGNALING_URL.');\n    process.exit(1);\n  }\n\n  if (!startRes.ok) {\n    printError(`Failed to start device flow: ${startRes.status}`);\n    process.exit(1);\n  }\n\n  return DeviceStartResponseSchema.parse(await startRes.json());\n}\n\nfunction extractTokenExpiry(token: string): number {\n  const fallback = Date.now() + 30 * 24 * 60 * 60 * 1000;\n  try {\n    const payloadB64 = token.split('.')[1];\n    if (!payloadB64) return fallback;\n    const payload: unknown = JSON.parse(Buffer.from(payloadB64, 'base64url').toString());\n    const exp = z.object({ exp: z.number() }).safeParse(payload);\n    return exp.success ? exp.data.exp * 1000 : fallback;\n  } catch {\n    return fallback;\n  }\n}\n\nasync function handleSuccessfulPoll(pollRes: Response, signalingUrl: string): Promise<AuthResult> {\n  const pollData = DevicePollResponseSchema.parse(await pollRes.json());\n  const expiresAt = extractTokenExpiry(pollData.token);\n\n  const config: ShipyardConfig = {\n    auth: {\n      token: pollData.token,\n      userId: pollData.user.id,\n      displayName: pollData.user.displayName,\n      avatarUrl: pollData.user.avatarUrl,\n      providers: pollData.user.providers,\n      expiresAt,\n      signalingUrl,\n    },\n  };\n\n  await writeConfig(config);\n\n  print(`\\n  Logged in as ${pollData.user.displayName} (${pollData.user.providers.join(', ')})`);\n  print(`  Token saved to ${getConfigPath()}`);\n\n  return {\n    token: pollData.token,\n    userId: pollData.user.id,\n    displayName: pollData.user.displayName,\n    avatarUrl: pollData.user.avatarUrl,\n    signalingUrl,\n    deviceFlowRan: true,\n  };\n}\n\nasync function handlePollError(pollRes: Response, interval: number): Promise<void> {\n  try {\n    const errorData = DevicePollPendingSchema.parse(await pollRes.json());\n\n    if (errorData.error === 'expired_token') {\n      printError('\\n  Authorization expired. Run `shipyard login` again.');\n      process.exit(1);\n    }\n\n    if (errorData.error === 'slow_down') {\n      await new Promise((resolve) => setTimeout(resolve, interval));\n    }\n  } catch (err: unknown) {\n    printError('Failed to parse poll error response', err instanceof Error ? err : undefined);\n  }\n}\n\nasync function checkLogin(): Promise<void> {\n  const config = await readConfig();\n\n  if (!config?.auth?.token) {\n    print('Not logged in. Run `shipyard login` to authenticate.');\n    process.exit(1);\n  }\n\n  if (config.auth.expiresAt < Date.now()) {\n    print('Token expired. Run `shipyard login` to re-authenticate.');\n    process.exit(1);\n  }\n\n  const daysLeft = Math.ceil((config.auth.expiresAt - Date.now()) / (24 * 60 * 60 * 1000));\n  print(`Logged in as ${config.auth.displayName} (${config.auth.providers.join(', ')})`);\n  print(`Token expires in ${daysLeft} days`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,IAAM,wBAAwB;AAC9B,IAAM,4BAA4B;AAE3B,SAAS,kBAA0B;AACxC,SACE,QAAQ,IAAI,2BACX,UAAU,IAAI,4BAA4B;AAE/C;AAkBA,eAAsB,oBAAoB,MAGlB;AACtB,QAAM,WAAW,MAAM,cAAc;AAErC,MAAI,SAAS,WAAW,MAAM;AAC5B,WAAO;AAAA,MACL,OAAO,SAAS;AAAA,MAChB,QAAQ,SAAS;AAAA,MACjB,aAAa,SAAS;AAAA,MACtB,WAAW,SAAS;AAAA,MACpB,cAAc,SAAS,gBAAgB,KAAK;AAAA,MAC5C,eAAe;AAAA,IACjB;AAAA,EACF;AAEA,MAAI,SAAS,WAAW,WAAW;AACjC,UAAM,kDAAkD;AAAA,EAC1D;AAEA,MAAI,KAAK,SAAS;AAChB,QAAI;AACF,aAAO,MAAM,eAAe,KAAK,cAAc,KAAK,OAAO;AAAA,IAC7D,QAAQ;AACN,YAAM,6DAA6D;AAAA,IACrE;AAAA,EACF;AAEA,SAAO,cAAc,KAAK,YAAY;AACxC;AAEA,eAAe,cAAc,cAA2C;AACtE,QAAM,YAAY,MAAM,gBAAgB,YAAY;AAEpD,QAAM;AAAA,CAAoC;AAC1C,QAAM,OAAO,UAAU,eAAe;AAAA,CAAI;AAC1C,QAAM,gBAAgB,UAAU,QAAQ;AAAA,CAAI;AAC5C,QAAM,gCAAgC;AAEtC,MAAI,CAAC,QAAQ,IAAI,kBAAkB;AACjC,WAAO,oBAAM,EAAE,KAAK,CAAC,EAAE,SAAS,KAAK,MAAM,KAAK,UAAU,eAAe,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC5F;AAEA,QAAM,YAAY,UAAU,YAAY,KAAK;AAC7C,QAAM,WAAW,KAAK,IAAI,IAAI,UAAU,YAAY;AAEpD,SAAO,KAAK,IAAI,IAAI,UAAU;AAC5B,UAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,QAAQ,CAAC;AAE5D,QAAI;AACF,YAAM,UAAU,MAAM,MAAM,GAAG,YAAY,GAAG,OAAO,gBAAgB,IAAI;AAAA,QACvE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,YAAY,UAAU,WAAW,CAAC;AAAA,MAC3D,CAAC;AAED,UAAI,QAAQ,IAAI;AACd,cAAM,SAAS,MAAM,qBAAqB,SAAS,YAAY;AAC/D,eAAO;AAAA,MACT;AAEA,YAAM,gBAAgB,SAAS,QAAQ;AAAA,IACzC,SAAS,KAAc;AACrB,iBAAW,2BAA2B,eAAe,QAAQ,MAAM,MAAS;AAAA,IAC9E;AAAA,EACF;AAEA,aAAW,0DAA0D;AACrE,UAAQ,KAAK,CAAC;AAChB;AAEA,eAAe,eAAe,cAAsB,UAAuC;AACzF,QAAM,wCAAwC;AAE9C,MAAI;AACJ,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW;AAC5C,QAAI,UAAU,EAAG,OAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAI,CAAC;AAE7D,UAAM,cAAc,MAAM,MAAM,GAAG,YAAY,GAAG,OAAO,yBAAyB,IAAI;AAAA,MACpF,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,MAAM,KAAK,UAAU,EAAE,SAAS,CAAC;AAAA,IACnC,CAAC;AAED,QAAI,YAAY,IAAI;AAClB,YAAM,SAAS,iCAAiC,MAAM,MAAM,YAAY,KAAK,CAAC;AAC9E,mBAAa,OAAO;AACpB;AAAA,IACF;AAEA,QAAI,YAAY,GAAG;AACjB,YAAM,IAAI,MAAM,qCAAqC,YAAY,MAAM,EAAE;AAAA,IAC3E;AAAA,EACF;AAEA,MAAI,CAAC,WAAY,OAAM,IAAI,MAAM,iCAAiC;AAElE,QAAM,UAAU,MAAM,MAAM,GAAG,YAAY,GAAG,OAAO,gBAAgB,IAAI;AAAA,IACvE,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAC9C,MAAM,KAAK,UAAU,EAAE,WAAW,CAAC;AAAA,EACrC,CAAC;AAED,MAAI,CAAC,QAAQ,IAAI;AACf,UAAM,IAAI,MAAM,gBAAgB,QAAQ,MAAM,EAAE;AAAA,EAClD;AAEA,QAAM,SAAS,MAAM,qBAAqB,SAAS,YAAY;AAC/D,QAAM,+BAA+B;AACrC,SAAO;AACT;AAEA,eAAsB,aAAa,SAA6C;AAC9E,MAAI,QAAQ,OAAO;AACjB,WAAO,WAAW;AAAA,EACpB;AAEA,QAAM,eAAe,gBAAgB;AACrC,QAAM,cAAc,YAAY;AAClC;AAEA,eAAe,gBAAgB,cAAsB;AACnD,QAAM,oCAAoC;AAE1C,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,MAAM,GAAG,YAAY,GAAG,OAAO,iBAAiB,IAAI;AAAA,MACnE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAAA,EACH,SAAS,KAAK;AACZ;AAAA,MACE,uCAAuC,YAAY;AAAA,MACnD,eAAe,QAAQ,MAAM;AAAA,IAC/B;AACA,eAAW,+DAA+D;AAC1E,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,CAAC,SAAS,IAAI;AAChB,eAAW,gCAAgC,SAAS,MAAM,EAAE;AAC5D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,SAAO,0BAA0B,MAAM,MAAM,SAAS,KAAK,CAAC;AAC9D;AAEA,SAAS,mBAAmB,OAAuB;AACjD,QAAM,WAAW,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,KAAK;AAClD,MAAI;AACF,UAAM,aAAa,MAAM,MAAM,GAAG,EAAE,CAAC;AACrC,QAAI,CAAC,WAAY,QAAO;AACxB,UAAM,UAAmB,KAAK,MAAM,OAAO,KAAK,YAAY,WAAW,EAAE,SAAS,CAAC;AACnF,UAAM,MAAM,iBAAE,OAAO,EAAE,KAAK,iBAAE,OAAO,EAAE,CAAC,EAAE,UAAU,OAAO;AAC3D,WAAO,IAAI,UAAU,IAAI,KAAK,MAAM,MAAO;AAAA,EAC7C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,eAAe,qBAAqB,SAAmB,cAA2C;AAChG,QAAM,WAAW,yBAAyB,MAAM,MAAM,QAAQ,KAAK,CAAC;AACpE,QAAM,YAAY,mBAAmB,SAAS,KAAK;AAEnD,QAAM,SAAyB;AAAA,IAC7B,MAAM;AAAA,MACJ,OAAO,SAAS;AAAA,MAChB,QAAQ,SAAS,KAAK;AAAA,MACtB,aAAa,SAAS,KAAK;AAAA,MAC3B,WAAW,SAAS,KAAK;AAAA,MACzB,WAAW,SAAS,KAAK;AAAA,MACzB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,MAAM;AAExB,QAAM;AAAA,iBAAoB,SAAS,KAAK,WAAW,KAAK,SAAS,KAAK,UAAU,KAAK,IAAI,CAAC,GAAG;AAC7F,QAAM,oBAAoB,cAAc,CAAC,EAAE;AAE3C,SAAO;AAAA,IACL,OAAO,SAAS;AAAA,IAChB,QAAQ,SAAS,KAAK;AAAA,IACtB,aAAa,SAAS,KAAK;AAAA,IAC3B,WAAW,SAAS,KAAK;AAAA,IACzB;AAAA,IACA,eAAe;AAAA,EACjB;AACF;AAEA,eAAe,gBAAgB,SAAmB,UAAiC;AACjF,MAAI;AACF,UAAM,YAAY,wBAAwB,MAAM,MAAM,QAAQ,KAAK,CAAC;AAEpE,QAAI,UAAU,UAAU,iBAAiB;AACvC,iBAAW,wDAAwD;AACnE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,QAAI,UAAU,UAAU,aAAa;AACnC,YAAM,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,QAAQ,CAAC;AAAA,IAC9D;AAAA,EACF,SAAS,KAAc;AACrB,eAAW,uCAAuC,eAAe,QAAQ,MAAM,MAAS;AAAA,EAC1F;AACF;AAEA,eAAe,aAA4B;AACzC,QAAM,SAAS,MAAM,WAAW;AAEhC,MAAI,CAAC,QAAQ,MAAM,OAAO;AACxB,UAAM,sDAAsD;AAC5D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,OAAO,KAAK,YAAY,KAAK,IAAI,GAAG;AACtC,UAAM,yDAAyD;AAC/D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,WAAW,KAAK,MAAM,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,KAAK,KAAK,KAAK,IAAK;AACvF,QAAM,gBAAgB,OAAO,KAAK,WAAW,KAAK,OAAO,KAAK,UAAU,KAAK,IAAI,CAAC,GAAG;AACrF,QAAM,oBAAoB,QAAQ,OAAO;AAC3C;","names":[]}

package/dist/{chunk-SNYEQHUK.js → chunk-NACJENDW.js}

@@ -1,12 +1,10 @@
 #!/usr/bin/env node
+import {
+  createJsonLineCodec
+} from "./chunk-ZFKJAYAN.js";
 import {
   external_exports
-} from "./chunk-VPMN47TL.js";
-
-// src/shared/assert-never.ts
-function assertNever(value) {
-  throw new Error(`Unexpected value: ${JSON.stringify(value)}`);
-}
+} from "./chunk-CNR7O5YH.js";
 
 // src/services/watcher-worker/worker-protocol.ts
 var SubscribeOptionsSchema = external_exports.object({
@@ -28,6 +26,7 @@ var CommandSchema = external_exports.discriminatedUnion("cmd", [
   external_exports.object({ cmd: external_exports.literal("unsubscribe"), id: external_exports.string() }),
   external_exports.object({ cmd: external_exports.literal("shutdown") })
 ]);
+var WorkerCommandCodec = createJsonLineCodec(CommandSchema);
 var ParcelEventSchema = external_exports.object({
   type: external_exports.enum(["create", "update", "delete"]),
   path: external_exports.string()
@@ -38,27 +37,21 @@ var ReplySchema = external_exports.discriminatedUnion("type", [
   external_exports.object({ type: external_exports.literal("unsubscribed"), id: external_exports.string() }),
   external_exports.object({ type: external_exports.literal("events"), id: external_exports.string(), events: external_exports.array(ParcelEventSchema) })
 ]);
+var WorkerReplyCodec = createJsonLineCodec(ReplySchema);
+var WorkerMessageSchema = external_exports.union([CommandSchema, ReplySchema]);
+var WorkerMessageCodec = createJsonLineCodec(WorkerMessageSchema);
 function encodeLine(msg) {
-  return JSON.stringify(msg);
+  return WorkerMessageCodec.encode(msg);
 }
 function decodeLine(line) {
-  let parsed;
-  try {
-    parsed = JSON.parse(line);
-  } catch {
-    return null;
-  }
-  if (parsed === null || typeof parsed !== "object") return null;
-  const asCmd = CommandSchema.safeParse(parsed);
-  if (asCmd.success) return asCmd.data;
-  const asReply = ReplySchema.safeParse(parsed);
-  if (asReply.success) return asReply.data;
-  return null;
+  const decoded = WorkerMessageCodec.decode(line);
+  return decoded.ok ? decoded.message : null;
 }
 
 export {
-  assertNever,
+  WorkerCommandCodec,
+  WorkerReplyCodec,
   encodeLine,
   decodeLine
 };
-//# sourceMappingURL=chunk-SNYEQHUK.js.map
+//# sourceMappingURL=chunk-NACJENDW.js.map

package/dist/chunk-NACJENDW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/watcher-worker/worker-protocol.ts"],"sourcesContent":["import { createJsonLineCodec } from '@shipyard/local-runtime';\nimport { z } from 'zod';\n\n/**\n * IPC protocol between the daemon (parent) and the watcher worker subprocess.\n *\n * Wire format: line-delimited JSON over the worker's stdio. Each line is\n * exactly one Command (parent → worker) or one Reply (worker → parent), with\n * no embedded literal newlines — JSON encoding escapes newlines inside string\n * values (e.g. a path containing `\\n`) so the line protocol stays intact.\n *\n * Stdout is the IPC channel; structured worker logs go to stderr only.\n */\n\nexport const SubscribeOptionsSchema = z.object({\n  ignore: z.array(z.string()).optional(),\n  /**\n   * Constrained to the subset the daemon actually uses. `@parcel/watcher`\n   * supports more backends but they are platform-specific and we never set\n   * them — accepting the wider union here would just invite bugs.\n   */\n  backend: z.enum(['default', 'brute-force', 'watchman']).optional(),\n});\nexport type WorkerSubscribeOptions = z.infer<typeof SubscribeOptionsSchema>;\n\nexport const CommandSchema = z.discriminatedUnion('cmd', [\n  z.object({\n    cmd: z.literal('subscribe'),\n    id: z.string(),\n    path: z.string(),\n    opts: SubscribeOptionsSchema,\n  }),\n  z.object({ cmd: z.literal('unsubscribe'), id: z.string() }),\n  z.object({ cmd: z.literal('shutdown') }),\n]);\nexport type WorkerCommand = z.infer<typeof CommandSchema>;\nexport const WorkerCommandCodec = createJsonLineCodec(CommandSchema);\n\nconst ParcelEventSchema = z.object({\n  type: z.enum(['create', 'update', 'delete']),\n  path: z.string(),\n});\nexport type WorkerParcelEvent = z.infer<typeof ParcelEventSchema>;\n\nexport const ReplySchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('subscribed'), id: z.string() }),\n  z.object({ type: z.literal('subscribe_failed'), id: z.string(), error: z.string() }),\n  z.object({ type: z.literal('unsubscribed'), id: z.string() }),\n  z.object({ type: z.literal('events'), id: z.string(), events: z.array(ParcelEventSchema) }),\n]);\nexport type WorkerReply = z.infer<typeof ReplySchema>;\nexport const WorkerReplyCodec = createJsonLineCodec(ReplySchema);\n\nconst WorkerMessageSchema = z.union([CommandSchema, ReplySchema]);\nconst WorkerMessageCodec = createJsonLineCodec(WorkerMessageSchema);\n\nexport function encodeLine(msg: WorkerCommand | WorkerReply): string {\n  return WorkerMessageCodec.encode(msg);\n}\n\n/**\n * Decode a single line. Returns `null` for any malformed or\n * schema-rejected input — the worker logs and continues, the supervisor\n * drops the bad line. Throwing here would let one corrupt line crash an\n * otherwise-healthy peer, which is the opposite of what process supervision\n * is for.\n */\nexport function decodeLine(line: string): WorkerCommand | WorkerReply | null {\n  const decoded = WorkerMessageCodec.decode(line);\n  return decoded.ok ? decoded.message : null;\n}\n"],"mappings":";;;;;;;;;AAcO,IAAM,yBAAyB,iBAAE,OAAO;AAAA,EAC7C,QAAQ,iBAAE,MAAM,iBAAE,OAAO,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrC,SAAS,iBAAE,KAAK,CAAC,WAAW,eAAe,UAAU,CAAC,EAAE,SAAS;AACnE,CAAC;AAGM,IAAM,gBAAgB,iBAAE,mBAAmB,OAAO;AAAA,EACvD,iBAAE,OAAO;AAAA,IACP,KAAK,iBAAE,QAAQ,WAAW;AAAA,IAC1B,IAAI,iBAAE,OAAO;AAAA,IACb,MAAM,iBAAE,OAAO;AAAA,IACf,MAAM;AAAA,EACR,CAAC;AAAA,EACD,iBAAE,OAAO,EAAE,KAAK,iBAAE,QAAQ,aAAa,GAAG,IAAI,iBAAE,OAAO,EAAE,CAAC;AAAA,EAC1D,iBAAE,OAAO,EAAE,KAAK,iBAAE,QAAQ,UAAU,EAAE,CAAC;AACzC,CAAC;AAEM,IAAM,qBAAqB,oBAAoB,aAAa;AAEnE,IAAM,oBAAoB,iBAAE,OAAO;AAAA,EACjC,MAAM,iBAAE,KAAK,CAAC,UAAU,UAAU,QAAQ,CAAC;AAAA,EAC3C,MAAM,iBAAE,OAAO;AACjB,CAAC;AAGM,IAAM,cAAc,iBAAE,mBAAmB,QAAQ;AAAA,EACtD,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,YAAY,GAAG,IAAI,iBAAE,OAAO,EAAE,CAAC;AAAA,EAC1D,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,kBAAkB,GAAG,IAAI,iBAAE,OAAO,GAAG,OAAO,iBAAE,OAAO,EAAE,CAAC;AAAA,EACnF,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,cAAc,GAAG,IAAI,iBAAE,OAAO,EAAE,CAAC;AAAA,EAC5D,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,QAAQ,GAAG,IAAI,iBAAE,OAAO,GAAG,QAAQ,iBAAE,MAAM,iBAAiB,EAAE,CAAC;AAC5F,CAAC;AAEM,IAAM,mBAAmB,oBAAoB,WAAW;AAE/D,IAAM,sBAAsB,iBAAE,MAAM,CAAC,eAAe,WAAW,CAAC;AAChE,IAAM,qBAAqB,oBAAoB,mBAAmB;AAE3D,SAAS,WAAW,KAA0C;AACnE,SAAO,mBAAmB,OAAO,GAAG;AACtC;AASO,SAAS,WAAW,MAAkD;AAC3E,QAAM,UAAU,mBAAmB,OAAO,IAAI;AAC9C,SAAO,QAAQ,KAAK,QAAQ,UAAU;AACxC;","names":[]}

package/dist/{chunk-IISLTKYY.js → chunk-TU63KZFW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   getLogFilePath
-} from "./chunk-2UN5AR7V.js";
+} from "./chunk-ZAOPND5G.js";
 
 // src/shared/commands/output.ts
 import { appendFileSync } from "fs";
@@ -40,4 +40,4 @@ export {
   print,
   printError
 };
-//# sourceMappingURL=chunk-IISLTKYY.js.map
+//# sourceMappingURL=chunk-TU63KZFW.js.map

package/dist/chunk-TX6DK4PK.js

@@ -0,0 +1,186 @@
+#!/usr/bin/env node
+import {
+  external_exports
+} from "./chunk-CNR7O5YH.js";
+
+// src/services/session/cursor-runner-protocol.ts
+var McpServersSchema = external_exports.record(external_exports.string(), external_exports.unknown());
+var DaemonToRunnerSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("init"),
+    taskId: external_exports.string(),
+    cwd: external_exports.string(),
+    apiKey: external_exports.string(),
+    modelId: external_exports.string(),
+    mcpServers: McpServersSchema,
+    harnessUrl: external_exports.string(),
+    harnessToken: external_exports.string(),
+    /**
+     * Absolute filesystem path where skill files for this task are
+     * written (see plan v2 E#V7). The runner does not enumerate the
+     * directory — it just forwards the path to the SDK so any future
+     * skills-loading code has the location. May be empty string if
+     * skills are disabled for this run.
+     */
+    skillsDir: external_exports.string(),
+    sessionId: external_exports.string(),
+    generation: external_exports.number().int().nonnegative(),
+    /**
+     * Initial Fast Mode flag from `composerSettings.fastMode`. When true
+     * AND `fastModeParam` is non-null, the runner attaches the param to
+     * every `agent.send()` via `SendOptions.model.params`. When false
+     * (or `fastModeParam` is null), the runner sends the plain
+     * `agent.send(message)` shape. Optional/additive — pre-Fast-Mode
+     * daemons omit the field and the runner treats it as false.
+     */
+    fastMode: external_exports.boolean().optional(),
+    /**
+     * Resolved Fast Mode binding for `modelId`, sourced from the
+     * daemon's `cursor-models-cache`. `null` means "the cache has no
+     * Fast-Mode binding for this model right now" (unknown id, refresh
+     * failed, or the model declares no Fast-Mode-shaped parameter).
+     * The runner treats both `null` and `undefined` as "no binding,
+     * never attach params" — gating Fast Mode the same way regardless
+     * of why it's missing.
+     */
+    fastModeParam: external_exports.object({ id: external_exports.string(), value: external_exports.string() }).nullable().optional()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("push_message"),
+    generation: external_exports.number().int().nonnegative(),
+    /**
+     * Content blocks the daemon wants to send as a user turn. Shape is
+     * Shipyard's internal `ContentBlock[]` — the runner translates to
+     * Cursor's `SDKUserMessage` at the boundary (see cursor-content-builder.ts).
+     *
+     * Image attachments ride as `resource` blocks with `BlobResourceContents`
+     * (mime + base64 blob). The runner extracts these into `SDKImage[]` and
+     * attaches them to the `SDKUserMessage` it sends to `Agent.send()`.
+     */
+    content: external_exports.array(external_exports.unknown())
+  }),
+  external_exports.object({
+    kind: external_exports.literal("interrupt"),
+    generation: external_exports.number().int().nonnegative()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("set_model"),
+    generation: external_exports.number().int().nonnegative(),
+    modelId: external_exports.string()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("set_mcp_servers"),
+    generation: external_exports.number().int().nonnegative(),
+    servers: McpServersSchema
+  }),
+  external_exports.object({
+    kind: external_exports.literal("set_harness_task_id"),
+    generation: external_exports.number().int().nonnegative(),
+    taskId: external_exports.string(),
+    token: external_exports.string()
+  }),
+  /**
+   * Daemon→runner notification that the permission mode changed. The runner
+   * logs this for diagnostic observability; it takes no action (mode-file
+   * is the authoritative source the hook script reads on each tool call).
+   */
+  external_exports.object({
+    kind: external_exports.literal("set_permission_mode"),
+    generation: external_exports.number().int().nonnegative(),
+    mode: external_exports.enum(["default", "accept-edits", "plan", "bypass", "auto"])
+  }),
+  /**
+   * Daemon→runner notification that Fast Mode was toggled mid-session.
+   * Carries the current generation (not bumped — this is per-state, not
+   * per-turn) so the runner can correlate the update. Effective on the
+   * NEXT `push_message`: the runner records the flag and rebuilds
+   * `SendOptions` on each `agent.send()`.
+   */
+  external_exports.object({
+    kind: external_exports.literal("set_fast_mode"),
+    generation: external_exports.number().int().nonnegative(),
+    fastMode: external_exports.boolean()
+  }),
+  external_exports.object({ kind: external_exports.literal("close") })
+]);
+var RunnerToDaemonSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("init_ok"),
+    sessionId: external_exports.string(),
+    tools: external_exports.array(external_exports.string()),
+    model: external_exports.string(),
+    mcpStatus: external_exports.array(external_exports.object({ name: external_exports.string(), status: external_exports.string() }))
+  }),
+  external_exports.object({
+    kind: external_exports.literal("init_error"),
+    error: external_exports.string(),
+    /**
+     * `true` for transient failures (network, rate limit) where the
+     * daemon should consider a retry; `false` for configuration errors
+     * (bad API key, unknown model) where retry will not help.
+     */
+    retryable: external_exports.boolean()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("sdk_message"),
+    generation: external_exports.number().int().nonnegative(),
+    payload: external_exports.unknown()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("run_complete"),
+    generation: external_exports.number().int().nonnegative(),
+    /**
+     * Cursor's `RunResult` — kept as `unknown` on the wire (see
+     * `sdk_message.payload` rationale). The daemon-side adapter
+     * narrows this against `RunResult` from `@cursor/sdk` at the
+     * call site.
+     */
+    result: external_exports.unknown()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("run_error"),
+    generation: external_exports.number().int().nonnegative(),
+    error: external_exports.string(),
+    errorCode: external_exports.string().optional(),
+    statusCode: external_exports.number().int().optional(),
+    isRetryable: external_exports.boolean()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("log"),
+    level: external_exports.enum(["info", "warn", "error"]),
+    message: external_exports.string(),
+    data: external_exports.unknown().optional()
+  }),
+  /**
+   * Runner→daemon notification that the agent proposed a plan via the
+   * `createPlan` hook interception path. The daemon routes this to
+   * `plan-handler.ts` which writes `~/.shipyard/plans/{taskId}.md` and
+   * broadcasts `plan_detected`.
+   *
+   * Note: In v1 this message is reserved for future hook-socket capture.
+   * The primary plan capture path is the `createPlan` tool_use interception
+   * in `cursor-event-translator.ts` (turn-complete fallback). The protocol
+   * variant is defined now so the wire schema is stable when hook-socket
+   * plan capture ships.
+   */
+  external_exports.object({
+    kind: external_exports.literal("plan_proposed"),
+    generation: external_exports.number().int().nonnegative(),
+    /** Markdown plan content emitted by the agent via createPlan. */
+    plan: external_exports.string()
+  })
+]);
+function parseDaemonToRunner(raw) {
+  const result = DaemonToRunnerSchema.safeParse(raw);
+  return result.success ? result.data : null;
+}
+function parseRunnerToDaemon(raw) {
+  const result = RunnerToDaemonSchema.safeParse(raw);
+  return result.success ? result.data : null;
+}
+
+export {
+  parseDaemonToRunner,
+  parseRunnerToDaemon
+};
+//# sourceMappingURL=chunk-TX6DK4PK.js.map

package/dist/chunk-TX6DK4PK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/session/cursor-runner-protocol.ts"],"sourcesContent":["import { z } from 'zod';\n\n/**\n * IPC protocol between the daemon (parent) and the `cursor-runner` forked\n * child subprocess.\n *\n * Wire format: structured-clone over the Node IPC channel\n * (`child.send(msg)` / `process.on('message', msg => ...)`). The schemas\n * below are Zod-parsed on receive so a corrupt or version-skewed peer\n * cannot drive the recipient into an undefined state.\n *\n * Stdout/stderr of the runner are inherited from the daemon (see S2b's\n * `child_process.fork({ stdio: 'inherit', silent: false })`) — those are\n * NOT carrying IPC traffic, they are for human-readable logs and native\n * panic stack traces.\n *\n * `generation` is a per-turn monotonic counter minted by the daemon-side\n * adapter. Every per-turn message in either direction is stamped with the\n * value live at the time of mint; the daemon drops inbound events whose\n * generation does not match the current run (closes Invariant #16 — the\n * transport discriminator must be present at every layer). The runner\n * does NOT drop on its own — it echoes whatever generation the daemon\n * stamped, so the daemon can correlate.\n *\n * Lifecycle events that are not per-turn (`init`, `init_ok`,\n * `init_error`, `log`, `close`) carry no generation.\n *\n * MCP server config shape: `Record<string, unknown>` here is intentional.\n * We keep the wire schema decoupled from `@cursor/sdk`'s `McpServerConfig`\n * to avoid coupling the daemon and runner to the same exact SDK version\n * at the type level. The runner re-validates against the SDK shape at\n * the call site.\n */\n\nconst McpServersSchema = z.record(z.string(), z.unknown());\n\n/**\n * DaemonToRunner — outbound from the daemon-side `CursorAgentSubprocess`\n * adapter to the forked runner child.\n */\nexport const DaemonToRunnerSchema = z.discriminatedUnion('kind', [\n  z.object({\n    kind: z.literal('init'),\n    taskId: z.string(),\n    cwd: z.string(),\n    apiKey: z.string(),\n    modelId: z.string(),\n    mcpServers: McpServersSchema,\n    harnessUrl: z.string(),\n    harnessToken: z.string(),\n    /**\n     * Absolute filesystem path where skill files for this task are\n     * written (see plan v2 E#V7). The runner does not enumerate the\n     * directory — it just forwards the path to the SDK so any future\n     * skills-loading code has the location. May be empty string if\n     * skills are disabled for this run.\n     */\n    skillsDir: z.string(),\n    sessionId: z.string(),\n    generation: z.number().int().nonnegative(),\n    /**\n     * Initial Fast Mode flag from `composerSettings.fastMode`. When true\n     * AND `fastModeParam` is non-null, the runner attaches the param to\n     * every `agent.send()` via `SendOptions.model.params`. When false\n     * (or `fastModeParam` is null), the runner sends the plain\n     * `agent.send(message)` shape. Optional/additive — pre-Fast-Mode\n     * daemons omit the field and the runner treats it as false.\n     */\n    fastMode: z.boolean().optional(),\n    /**\n     * Resolved Fast Mode binding for `modelId`, sourced from the\n     * daemon's `cursor-models-cache`. `null` means \"the cache has no\n     * Fast-Mode binding for this model right now\" (unknown id, refresh\n     * failed, or the model declares no Fast-Mode-shaped parameter).\n     * The runner treats both `null` and `undefined` as \"no binding,\n     * never attach params\" — gating Fast Mode the same way regardless\n     * of why it's missing.\n     */\n    fastModeParam: z.object({ id: z.string(), value: z.string() }).nullable().optional(),\n  }),\n  z.object({\n    kind: z.literal('push_message'),\n    generation: z.number().int().nonnegative(),\n    /**\n     * Content blocks the daemon wants to send as a user turn. Shape is\n     * Shipyard's internal `ContentBlock[]` — the runner translates to\n     * Cursor's `SDKUserMessage` at the boundary (see cursor-content-builder.ts).\n     *\n     * Image attachments ride as `resource` blocks with `BlobResourceContents`\n     * (mime + base64 blob). The runner extracts these into `SDKImage[]` and\n     * attaches them to the `SDKUserMessage` it sends to `Agent.send()`.\n     */\n    content: z.array(z.unknown()),\n  }),\n  z.object({\n    kind: z.literal('interrupt'),\n    generation: z.number().int().nonnegative(),\n  }),\n  z.object({\n    kind: z.literal('set_model'),\n    generation: z.number().int().nonnegative(),\n    modelId: z.string(),\n  }),\n  z.object({\n    kind: z.literal('set_mcp_servers'),\n    generation: z.number().int().nonnegative(),\n    servers: McpServersSchema,\n  }),\n  z.object({\n    kind: z.literal('set_harness_task_id'),\n    generation: z.number().int().nonnegative(),\n    taskId: z.string(),\n    token: z.string(),\n  }),\n  /**\n   * Daemon→runner notification that the permission mode changed. The runner\n   * logs this for diagnostic observability; it takes no action (mode-file\n   * is the authoritative source the hook script reads on each tool call).\n   */\n  z.object({\n    kind: z.literal('set_permission_mode'),\n    generation: z.number().int().nonnegative(),\n    mode: z.enum(['default', 'accept-edits', 'plan', 'bypass', 'auto']),\n  }),\n  /**\n   * Daemon→runner notification that Fast Mode was toggled mid-session.\n   * Carries the current generation (not bumped — this is per-state, not\n   * per-turn) so the runner can correlate the update. Effective on the\n   * NEXT `push_message`: the runner records the flag and rebuilds\n   * `SendOptions` on each `agent.send()`.\n   */\n  z.object({\n    kind: z.literal('set_fast_mode'),\n    generation: z.number().int().nonnegative(),\n    fastMode: z.boolean(),\n  }),\n  z.object({ kind: z.literal('close') }),\n]);\nexport type DaemonToRunner = z.infer<typeof DaemonToRunnerSchema>;\n\n/**\n * RunnerToDaemon — inbound to the daemon-side adapter from the runner.\n *\n * `sdk_message.payload` is typed as `unknown` on the wire and narrowed\n * to `SDKMessage` (from `@cursor/sdk`) by the daemon-side translator\n * (`cursor-event-translator.ts`, S2b). Keeping it `unknown` at the\n * protocol boundary insulates the daemon from new SDK message variants\n * — the translator decides what to drop versus translate.\n */\nexport const RunnerToDaemonSchema = z.discriminatedUnion('kind', [\n  z.object({\n    kind: z.literal('init_ok'),\n    sessionId: z.string(),\n    tools: z.array(z.string()),\n    model: z.string(),\n    mcpStatus: z.array(z.object({ name: z.string(), status: z.string() })),\n  }),\n  z.object({\n    kind: z.literal('init_error'),\n    error: z.string(),\n    /**\n     * `true` for transient failures (network, rate limit) where the\n     * daemon should consider a retry; `false` for configuration errors\n     * (bad API key, unknown model) where retry will not help.\n     */\n    retryable: z.boolean(),\n  }),\n  z.object({\n    kind: z.literal('sdk_message'),\n    generation: z.number().int().nonnegative(),\n    payload: z.unknown(),\n  }),\n  z.object({\n    kind: z.literal('run_complete'),\n    generation: z.number().int().nonnegative(),\n    /**\n     * Cursor's `RunResult` — kept as `unknown` on the wire (see\n     * `sdk_message.payload` rationale). The daemon-side adapter\n     * narrows this against `RunResult` from `@cursor/sdk` at the\n     * call site.\n     */\n    result: z.unknown(),\n  }),\n  z.object({\n    kind: z.literal('run_error'),\n    generation: z.number().int().nonnegative(),\n    error: z.string(),\n    errorCode: z.string().optional(),\n    statusCode: z.number().int().optional(),\n    isRetryable: z.boolean(),\n  }),\n  z.object({\n    kind: z.literal('log'),\n    level: z.enum(['info', 'warn', 'error']),\n    message: z.string(),\n    data: z.unknown().optional(),\n  }),\n  /**\n   * Runner→daemon notification that the agent proposed a plan via the\n   * `createPlan` hook interception path. The daemon routes this to\n   * `plan-handler.ts` which writes `~/.shipyard/plans/{taskId}.md` and\n   * broadcasts `plan_detected`.\n   *\n   * Note: In v1 this message is reserved for future hook-socket capture.\n   * The primary plan capture path is the `createPlan` tool_use interception\n   * in `cursor-event-translator.ts` (turn-complete fallback). The protocol\n   * variant is defined now so the wire schema is stable when hook-socket\n   * plan capture ships.\n   */\n  z.object({\n    kind: z.literal('plan_proposed'),\n    generation: z.number().int().nonnegative(),\n    /** Markdown plan content emitted by the agent via createPlan. */\n    plan: z.string(),\n  }),\n]);\nexport type RunnerToDaemon = z.infer<typeof RunnerToDaemonSchema>;\n\n/**\n * Parse an inbound IPC message. Returns the parsed message or `null`\n * if the payload does not match the expected schema (matching the\n * watcher-worker pattern: log and continue, never throw out of the\n * IPC handler).\n */\nexport function parseDaemonToRunner(raw: unknown): DaemonToRunner | null {\n  const result = DaemonToRunnerSchema.safeParse(raw);\n  return result.success ? result.data : null;\n}\n\nexport function parseRunnerToDaemon(raw: unknown): RunnerToDaemon | null {\n  const result = RunnerToDaemonSchema.safeParse(raw);\n  return result.success ? result.data : null;\n}\n"],"mappings":";;;;;;AAkCA,IAAM,mBAAmB,iBAAE,OAAO,iBAAE,OAAO,GAAG,iBAAE,QAAQ,CAAC;AAMlD,IAAM,uBAAuB,iBAAE,mBAAmB,QAAQ;AAAA,EAC/D,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,MAAM;AAAA,IACtB,QAAQ,iBAAE,OAAO;AAAA,IACjB,KAAK,iBAAE,OAAO;AAAA,IACd,QAAQ,iBAAE,OAAO;AAAA,IACjB,SAAS,iBAAE,OAAO;AAAA,IAClB,YAAY;AAAA,IACZ,YAAY,iBAAE,OAAO;AAAA,IACrB,cAAc,iBAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAQvB,WAAW,iBAAE,OAAO;AAAA,IACpB,WAAW,iBAAE,OAAO;AAAA,IACpB,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASzC,UAAU,iBAAE,QAAQ,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAU/B,eAAe,iBAAE,OAAO,EAAE,IAAI,iBAAE,OAAO,GAAG,OAAO,iBAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS;AAAA,EACrF,CAAC;AAAA,EACD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,cAAc;AAAA,IAC9B,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUzC,SAAS,iBAAE,MAAM,iBAAE,QAAQ,CAAC;AAAA,EAC9B,CAAC;AAAA,EACD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,WAAW;AAAA,IAC3B,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,EAC3C,CAAC;AAAA,EACD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,WAAW;AAAA,IAC3B,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACzC,SAAS,iBAAE,OAAO;AAAA,EACpB,CAAC;AAAA,EACD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,iBAAiB;AAAA,IACjC,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACzC,SAAS;AAAA,EACX,CAAC;AAAA,EACD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,qBAAqB;AAAA,IACrC,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACzC,QAAQ,iBAAE,OAAO;AAAA,IACjB,OAAO,iBAAE,OAAO;AAAA,EAClB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,qBAAqB;AAAA,IACrC,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACzC,MAAM,iBAAE,KAAK,CAAC,WAAW,gBAAgB,QAAQ,UAAU,MAAM,CAAC;AAAA,EACpE,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,eAAe;AAAA,IAC/B,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACzC,UAAU,iBAAE,QAAQ;AAAA,EACtB,CAAC;AAAA,EACD,iBAAE,OAAO,EAAE,MAAM,iBAAE,QAAQ,OAAO,EAAE,CAAC;AACvC,CAAC;AAYM,IAAM,uBAAuB,iBAAE,mBAAmB,QAAQ;AAAA,EAC/D,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,SAAS;AAAA,IACzB,WAAW,iBAAE,OAAO;AAAA,IACpB,OAAO,iBAAE,MAAM,iBAAE,OAAO,CAAC;AAAA,IACzB,OAAO,iBAAE,OAAO;AAAA,IAChB,WAAW,iBAAE,MAAM,iBAAE,OAAO,EAAE,MAAM,iBAAE,OAAO,GAAG,QAAQ,iBAAE,OAAO,EAAE,CAAC,CAAC;AAAA,EACvE,CAAC;AAAA,EACD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,YAAY;AAAA,IAC5B,OAAO,iBAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMhB,WAAW,iBAAE,QAAQ;AAAA,EACvB,CAAC;AAAA,EACD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,aAAa;AAAA,IAC7B,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACzC,SAAS,iBAAE,QAAQ;AAAA,EACrB,CAAC;AAAA,EACD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,cAAc;AAAA,IAC9B,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOzC,QAAQ,iBAAE,QAAQ;AAAA,EACpB,CAAC;AAAA,EACD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,WAAW;AAAA,IAC3B,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA,IACzC,OAAO,iBAAE,OAAO;AAAA,IAChB,WAAW,iBAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,IACtC,aAAa,iBAAE,QAAQ;AAAA,EACzB,CAAC;AAAA,EACD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,KAAK;AAAA,IACrB,OAAO,iBAAE,KAAK,CAAC,QAAQ,QAAQ,OAAO,CAAC;AAAA,IACvC,SAAS,iBAAE,OAAO;AAAA,IAClB,MAAM,iBAAE,QAAQ,EAAE,SAAS;AAAA,EAC7B,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaD,iBAAE,OAAO;AAAA,IACP,MAAM,iBAAE,QAAQ,eAAe;AAAA,IAC/B,YAAY,iBAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAAA;AAAA,IAEzC,MAAM,iBAAE,OAAO;AAAA,EACjB,CAAC;AACH,CAAC;AASM,SAAS,oBAAoB,KAAqC;AACvE,QAAM,SAAS,qBAAqB,UAAU,GAAG;AACjD,SAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEO,SAAS,oBAAoB,KAAqC;AACvE,QAAM,SAAS,qBAAqB,UAAU,GAAG;AACjD,SAAO,OAAO,UAAU,OAAO,OAAO;AACxC;","names":[]}

package/dist/chunk-UQVXWOPT.js

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+import {
+  external_exports
+} from "./chunk-CNR7O5YH.js";
+
+// src/shared/daemon-version.ts
+import { readFileSync } from "fs";
+import { dirname, join } from "path";
+import { fileURLToPath } from "url";
+var PackageJsonSchema = external_exports.object({ version: external_exports.string().min(1) }).loose();
+var cached = null;
+function getDaemonVersion() {
+  if (cached !== null) return cached;
+  cached = readDaemonVersion();
+  return cached;
+}
+function readDaemonVersion() {
+  if ("3.8.0".length > 0) {
+    return "3.8.0";
+  }
+  try {
+    const here = dirname(fileURLToPath(import.meta.url));
+    for (let depth = 0; depth <= 5; depth++) {
+      const candidate = depth === 0 ? join(here, "package.json") : join(here, "../".repeat(depth), "package.json");
+      try {
+        const raw = readFileSync(candidate, "utf-8");
+        const parsed = JSON.parse(raw);
+        const result = PackageJsonSchema.safeParse(parsed);
+        if (result.success) {
+          return result.data.version;
+        }
+      } catch {
+      }
+    }
+  } catch {
+  }
+  if (process.env.SHIPYARD_ARTIFACT === "electron") {
+    throw new Error(
+      "getDaemonVersion: could not resolve daemon version in packaged Electron build. Ensure electron-builder.yml ships package-npm.json as daemon/package.json, and that __DAEMON_NPM_VERSION__ is defined in the tsup build."
+    );
+  }
+  return "0.0.0-dev";
+}
+
+export {
+  getDaemonVersion
+};
+//# sourceMappingURL=chunk-UQVXWOPT.js.map

package/dist/chunk-UQVXWOPT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/shared/daemon-version.ts"],"sourcesContent":["/**\n * Daemon version resolver.\n *\n * Resolution order:\n *   1. Build-time constant `__DAEMON_NPM_VERSION__` (injected by tsup — always\n *      present in compiled artefacts, both npm dist and Electron packaged build).\n *   2. Disk walk up from `import.meta.url` (depth 0 first = sibling of the\n *      running entrypoint, which is the correct layout inside packaged Electron's\n *      Resources/daemon/). Walks up to 5 levels as a fallback for the source\n *      tree which is typically 3 levels deep.\n *\n * If neither resolves and the binary is running in a packaged Electron context\n * (`SHIPYARD_ARTIFACT === 'electron'`), we throw rather than silently returning\n * '0.0.0-dev'. A daemon that doesn't know its own version inside Electron is a\n * misconfigured build — failing loudly is better than advertising a phantom version\n * that breaks the update-rotation guard and version-mismatch banner.\n *\n * In source-tree dev runs (no `SHIPYARD_ARTIFACT`), '0.0.0-dev' is acceptable.\n *\n * Caches after the first read.\n */\n\nimport { readFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { z } from 'zod';\n\n/**\n * Injected by tsup `define` at build time from `package-npm.json`. Absent in\n * source-tree runs where the file hasn't been compiled.\n */\ndeclare const __DAEMON_NPM_VERSION__: string | undefined;\n\nconst PackageJsonSchema = z.object({ version: z.string().min(1) }).loose();\n\nlet cached: string | null = null;\n\nexport function getDaemonVersion(): string {\n  if (cached !== null) return cached;\n  cached = readDaemonVersion();\n  return cached;\n}\n\nfunction readDaemonVersion(): string {\n  /*\n   * 1. Prefer the build-time constant injected by tsup — always correct in\n   *    compiled artefacts (both npm dist and packaged Electron).\n   */\n  if (typeof __DAEMON_NPM_VERSION__ !== 'undefined' && __DAEMON_NPM_VERSION__.length > 0) {\n    return __DAEMON_NPM_VERSION__;\n  }\n\n  /*\n   * 2. Fall back to disk walk. Start at depth=0 so we check the sibling\n   *    package.json first — which is the layout inside packaged Electron's\n   *    Resources/daemon/ directory (electron-utility.js and package.json are\n   *    siblings). Previously this loop started at depth=1, which skipped the\n   *    sibling and caused every packaged build to return '0.0.0-dev'.\n   */\n  try {\n    const here = dirname(fileURLToPath(import.meta.url));\n    for (let depth = 0; depth <= 5; depth++) {\n      const candidate =\n        depth === 0 ? join(here, 'package.json') : join(here, '../'.repeat(depth), 'package.json');\n      try {\n        const raw = readFileSync(candidate, 'utf-8');\n        const parsed: unknown = JSON.parse(raw);\n        const result = PackageJsonSchema.safeParse(parsed);\n        if (result.success) {\n          return result.data.version;\n        }\n      } catch {\n        /** Try next level. */\n      }\n    }\n  } catch {\n    /** Fall through to fallback logic. */\n  }\n\n  /*\n   * 3. Neither the build constant nor the disk walk resolved a version.\n   *    In a packaged Electron context this is a configuration error — throw so\n   *    the build pipeline catches it rather than silently advertising '0.0.0-dev'.\n   */\n  if (process.env.SHIPYARD_ARTIFACT === 'electron') {\n    throw new Error(\n      'getDaemonVersion: could not resolve daemon version in packaged Electron build. ' +\n        'Ensure electron-builder.yml ships package-npm.json as daemon/package.json, and that ' +\n        '__DAEMON_NPM_VERSION__ is defined in the tsup build.'\n    );\n  }\n\n  /**\n   * Reached only in source-tree dev runs where no package.json is discoverable.\n   * Return a non-\"unknown\" sentinel so the version-rotate guard still has a\n   * stable string to compare; rotation will then fire exactly once per boot\n   * with a different daemon, which is the safe direction.\n   */\n  return '0.0.0-dev';\n}\n\n/** Test-only helper to reset the cache. */\nexport function __resetDaemonVersionForTests(): void {\n  cached = null;\n}\n\n/**\n * Test-only helper to inject a specific version, bypassing all resolution\n * logic. Used to simulate the build-time constant being defined (T5) or a\n * specific filesystem layout (T6).\n */\nexport function __setDaemonVersionForTests(version: string): void {\n  cached = version;\n}\n"],"mappings":";;;;;;AAsBA,SAAS,oBAAoB;AAC7B,SAAS,SAAS,YAAY;AAC9B,SAAS,qBAAqB;AAS9B,IAAM,oBAAoB,iBAAE,OAAO,EAAE,SAAS,iBAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM;AAEzE,IAAI,SAAwB;AAErB,SAAS,mBAA2B;AACzC,MAAI,WAAW,KAAM,QAAO;AAC5B,WAAS,kBAAkB;AAC3B,SAAO;AACT;AAEA,SAAS,oBAA4B;AAKnC,MAAqD,QAAuB,SAAS,GAAG;AACtF,WAAO;AAAA,EACT;AASA,MAAI;AACF,UAAM,OAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AACnD,aAAS,QAAQ,GAAG,SAAS,GAAG,SAAS;AACvC,YAAM,YACJ,UAAU,IAAI,KAAK,MAAM,cAAc,IAAI,KAAK,MAAM,MAAM,OAAO,KAAK,GAAG,cAAc;AAC3F,UAAI;AACF,cAAM,MAAM,aAAa,WAAW,OAAO;AAC3C,cAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,cAAM,SAAS,kBAAkB,UAAU,MAAM;AACjD,YAAI,OAAO,SAAS;AAClB,iBAAO,OAAO,KAAK;AAAA,QACrB;AAAA,MACF,QAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AAOA,MAAI,QAAQ,IAAI,sBAAsB,YAAY;AAChD,UAAM,IAAI;AAAA,MACR;AAAA,IAGF;AAAA,EACF;AAQA,SAAO;AACT;","names":[]}