@sentropic/h2a-runtime 0.81.0

package/dist/run.js

@@ -0,0 +1,206 @@
+import { serve } from "@hono/node-server";
+import { createNodeWebSocket } from "@hono/node-ws";
+import { REMOTE_PROTOCOL_VERSION, REMOTE_SCHEMA_VERSION, } from "./protocol-local.js";
+import { Hono } from "hono";
+import { streamSSE } from "hono/streaming";
+import { resolveProfile, withResume } from "./profiles.js";
+import { nodePtySpawner } from "./pty.js";
+function defaultRandomId(prefix) {
+    const random = Math.floor(Math.random() * 1e12)
+        .toString(36)
+        .padStart(8, "0");
+    return `${prefix}-${random}`;
+}
+const CONTROL_PLANE_ACTOR = {
+    id: "remote-cli",
+    kind: "control-plane",
+    displayName: "Remote CLI",
+};
+const AGENT_ACTOR = {
+    id: "remote-cli-agent",
+    kind: "session-agent",
+    displayName: "Remote CLI Agent",
+};
+function buildEnvelope(runtime, type, payload, randomId, clock, actor = AGENT_ACTOR) {
+    return {
+        protocolVersion: REMOTE_PROTOCOL_VERSION,
+        schemaVersion: REMOTE_SCHEMA_VERSION,
+        eventId: randomId("evt"),
+        sessionId: runtime.sessionId,
+        sequence: runtime.sequence++,
+        type,
+        occurredAt: clock().toISOString(),
+        correlationId: `cli-${runtime.sessionId}`,
+        actor,
+        payload,
+    };
+}
+export async function run(options) {
+    const profile = withResume(resolveProfile(options.profile), options.resume);
+    const randomId = options.randomId ?? defaultRandomId;
+    const clock = options.clock ?? (() => new Date());
+    const spawner = options.spawner ?? nodePtySpawner;
+    const stdin = options.stdin ?? process.stdin;
+    const stdout = options.stdout ?? process.stdout;
+    const cwd = options.cwd ?? process.cwd();
+    const initialCols = options.initialSize?.cols ?? stdout.columns ?? 80;
+    const initialRows = options.initialSize?.rows ?? stdout.rows ?? 24;
+    const startupArgs = options.startupArgs ?? [];
+    const handle = spawner({
+        command: profile.command,
+        args: [...profile.args, ...startupArgs],
+        cwd,
+        env: { ...(options.env ?? process.env) },
+        cols: initialCols,
+        rows: initialRows,
+    });
+    const sessionId = randomId("sess");
+    const terminalId = randomId("term");
+    const subscribers = new Set();
+    const runtime = {
+        sessionId,
+        profile,
+        handle,
+        sequence: 0,
+        exited: false,
+    };
+    const broadcast = (envelope) => {
+        for (const subscriber of subscribers)
+            subscriber(envelope);
+    };
+    // Forward PTY output to host stdout AND broadcast as terminal.output.
+    handle.onData((chunk) => {
+        stdout.write(chunk);
+        broadcast(buildEnvelope(runtime, "terminal.output", {
+            terminalId,
+            stream: "stdout",
+            data: chunk,
+            encoding: "utf8",
+        }, randomId, clock));
+    });
+    // Forward host stdin to the PTY.
+    if (stdin.isTTY) {
+        stdin.setRawMode?.(true);
+    }
+    stdin.resume();
+    stdin.on("data", (data) => {
+        const text = typeof data === "string" ? data : data.toString("utf8");
+        handle.write(text);
+    });
+    // Resize PTY when the host terminal resizes.
+    const onResize = () => {
+        handle.resize(stdout.columns ?? initialCols, stdout.rows ?? initialRows);
+    };
+    stdout.on?.("resize", onResize);
+    // Open control-plane in-process for remote attach.
+    const app = new Hono();
+    const nodeWs = createNodeWebSocket({ app });
+    app.get("/healthz", (c) => c.json({ ok: true, sessionId, profile: profile.profile }));
+    app.get(`/sessions/${sessionId}`, (c) => c.json({
+        session: {
+            id: sessionId,
+            profile: profile.profile,
+            target: "k3s",
+            workspacePath: cwd,
+            createdAt: clock().toISOString(),
+            createdBy: CONTROL_PLANE_ACTOR,
+        },
+    }));
+    app.get(`/sessions/${sessionId}/events`, (c) => {
+        return streamSSE(c, async (stream) => {
+            const queue = [];
+            let notify = null;
+            const subscriber = (envelope) => {
+                queue.push(envelope);
+                const wake = notify;
+                notify = null;
+                wake?.();
+            };
+            subscribers.add(subscriber);
+            stream.onAbort(() => {
+                subscribers.delete(subscriber);
+            });
+            try {
+                while (!stream.aborted) {
+                    while (queue.length > 0 && !stream.aborted) {
+                        const envelope = queue.shift();
+                        if (!envelope)
+                            break;
+                        await stream.writeSSE({
+                            event: envelope.type,
+                            data: JSON.stringify(envelope),
+                            id: envelope.eventId,
+                        });
+                    }
+                    if (stream.aborted)
+                        break;
+                    await new Promise((resolve) => {
+                        notify = resolve;
+                    });
+                }
+            }
+            finally {
+                subscribers.delete(subscriber);
+            }
+        });
+    });
+    app.post(`/sessions/${sessionId}/terminal/input`, async (c) => {
+        const body = (await c.req.json());
+        if (typeof body.data === "string")
+            handle.write(body.data);
+        return c.json({ accepted: true }, 202);
+    });
+    const port = options.port ?? 0;
+    const server = serve({ fetch: app.fetch, port, hostname: "127.0.0.1" });
+    nodeWs.injectWebSocket(server);
+    let actualPort = port;
+    const address = server.address();
+    if (address && typeof address === "object") {
+        actualPort = address.port;
+    }
+    else {
+        await new Promise((resolve, reject) => {
+            server.once("listening", () => {
+                const addr = server.address();
+                if (addr && typeof addr === "object")
+                    actualPort = addr.port;
+                resolve();
+            });
+            server.once("error", reject);
+        });
+    }
+    // Emit terminal.opened announcement.
+    broadcast(buildEnvelope(runtime, "terminal.opened", { terminalId, shell: profile.command }, randomId, clock));
+    // Wire exit.
+    let resolveExit;
+    const exit = new Promise((resolve) => {
+        resolveExit = resolve;
+    });
+    handle.onExit((event) => {
+        if (runtime.exited)
+            return;
+        runtime.exited = true;
+        broadcast(buildEnvelope(runtime, "terminal.exited", {
+            terminalId,
+            exitCode: event.exitCode,
+            ...(event.signal !== undefined
+                ? { signal: String(event.signal) }
+                : {}),
+        }, randomId, clock));
+        if (stdin.isTTY) {
+            stdin.setRawMode?.(false);
+        }
+        server.close();
+        resolveExit(event);
+    });
+    return {
+        sessionId,
+        port: actualPort,
+        exit,
+        async stop() {
+            handle.kill();
+            await exit;
+        },
+    };
+}
+//# sourceMappingURL=run.js.map

package/dist/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAsB,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAmC,MAAM,UAAU,CAAC;AAiB3E,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;SAC5C,QAAQ,CAAC,EAAE,CAAC;SACZ,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpB,OAAO,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,mBAAmB,GAAG;IAC1B,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,eAAwB;IAC9B,WAAW,EAAE,YAAY;CAC1B,CAAC;AAEF,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,eAAwB;IAC9B,WAAW,EAAE,kBAAkB;CAChC,CAAC;AAUF,SAAS,aAAa,CACpB,OAAuB,EACvB,IAAiC,EACjC,OAAgC,EAChC,QAAoC,EACpC,KAAiB,EACjB,KAAK,GAAG,WAAW;IAEnB,OAAO;QACL,eAAe,EAAE,uBAAuB;QACxC,aAAa,EAAE,qBAAqB;QACpC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;QAC5B,IAAI;QACJ,UAAU,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE;QACjC,aAAa,EAAE,OAAO,OAAO,CAAC,SAAS,EAAE;QACzC,KAAK;QACL,OAAO;KACR,CAAC;AACJ,CAAC;AASD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,OAAmB;IAC3C,MAAM,OAAO,GAAG,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACtE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IACnE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAE9C,MAAM,MAAM,GAAG,OAAO,CAAC;QACrB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,WAAW,CAAC;QACvC,GAAG;QACH,GAAG,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAK,OAAO,CAAC,GAA8B,CAAC,EAAE;QACpE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,WAAW;KAClB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA2C,CAAC;IACvE,MAAM,OAAO,GAAmB;QAC9B,SAAS;QACT,OAAO;QACP,MAAM;QACN,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,KAAK;KACd,CAAC;IAEF,MAAM,SAAS,GAAG,CAAC,QAA6B,EAAE,EAAE;QAClD,KAAK,MAAM,UAAU,IAAI,WAAW;YAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,sEAAsE;IACtE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACtB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpB,SAAS,CACP,aAAa,CACX,OAAO,EACP,iBAAiB,EACjB;YACE,UAAU;YACV,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,MAAM;SACjB,EACD,QAAQ,EACR,KAAK,CACN,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,iCAAiC;IACjC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,MAAM,EAAE,CAAC;IACf,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAqB,EAAE,EAAE;QACzC,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,WAAW,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC;IAC3E,CAAC,CAAC;IACF,MAAM,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEhC,mDAAmD;IACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAE5C,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CACxB,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAC1D,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,aAAa,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,IAAI,CAAC;QACL,OAAO,EAAE;YACP,EAAE,EAAE,SAAS;YACb,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,KAAK;YACb,aAAa,EAAE,GAAG;YAClB,SAAS,EAAE,KAAK,EAAE,CAAC,WAAW,EAAE;YAChC,SAAS,EAAE,mBAAmB;SAC/B;KACF,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,aAAa,SAAS,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7C,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,KAAK,GAA0B,EAAE,CAAC;YACxC,IAAI,MAAM,GAAwB,IAAI,CAAC;YACvC,MAAM,UAAU,GAAG,CAAC,QAA6B,EAAE,EAAE;gBACnD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrB,MAAM,IAAI,GAAG,MAAM,CAAC;gBACpB,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,EAAE,EAAE,CAAC;YACX,CAAC,CAAC;YACF,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC5B,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;gBAClB,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACvB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;wBAC/B,IAAI,CAAC,QAAQ;4BAAE,MAAM;wBACrB,MAAM,MAAM,CAAC,QAAQ,CAAC;4BACpB,KAAK,EAAE,QAAQ,CAAC,IAAI;4BACpB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;4BAC9B,EAAE,EAAE,QAAQ,CAAC,OAAO;yBACrB,CAAC,CAAC;oBACL,CAAC;oBACD,IAAI,MAAM,CAAC,OAAO;wBAAE,MAAM;oBAC1B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;wBAClC,MAAM,GAAG,OAAO,CAAC;oBACnB,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,aAAa,SAAS,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5D,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAsB,CAAC;QACvD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IACxE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAE/B,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC3C,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE;gBAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;gBAC7D,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,SAAS,CACP,aAAa,CACX,OAAO,EACP,iBAAiB,EACjB,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,EACtC,QAAQ,EACR,KAAK,CACN,CACF,CAAC;IAEF,aAAa;IACb,IAAI,WAAqE,CAAC;IAC1E,MAAM,IAAI,GAAG,IAAI,OAAO,CAAwC,CAAC,OAAO,EAAE,EAAE;QAC1E,WAAW,GAAG,OAAO,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACtB,IAAI,OAAO,CAAC,MAAM;YAAE,OAAO;QAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QACtB,SAAS,CACP,aAAa,CACX,OAAO,EACP,iBAAiB,EACjB;YACE,UAAU;YACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;gBAC5B,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;gBAClC,CAAC,CAAC,EAAE,CAAC;SACR,EACD,QAAQ,EACR,KAAK,CACN,CACF,CAAC;QACF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,SAAS;QACT,IAAI,EAAE,UAAU;QAChB,IAAI;QACJ,KAAK,CAAC,IAAI;YACR,MAAM,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,CAAC;QACb,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/secrets.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Secret audit — what auth/credentials were actually transmitted to a session.
+ *
+ * Source of truth is the LIVE per-session Kubernetes Secret (`session-<id>-auth`)
+ * read via kubectl over the configured tunnel — NEVER a local "what I sent"
+ * record (which drifts on refresh / a second machine / a control-plane restart).
+ * Only KEY NAMES are read (go-template emits keys, never values); values are
+ * never decoded or printed. Sanitized Secret keys are mapped back to their
+ * original home-relative paths via the known auth registries, and classified by
+ * tool with a "broad" flag for account-wide cloud creds.
+ */
+export type SecretEntry = {
+    /** Original home-relative path (or the raw Secret key if unrecognized). */
+    readonly path: string;
+    readonly tool: string;
+    readonly broad: boolean;
+};
+/**
+ * Read the auth-Secret KEY NAMES transmitted to a session (values never read).
+ * Returns undefined if there is no configured tunnel / the secret can't be read.
+ */
+export declare function transmittedSecrets(sessionId: string): SecretEntry[] | undefined;
+/** One-line summary for `remote status` (e.g. "claude +scw +aws⚠", or "—"). */
+export declare function secretsSummary(sessionId: string): string;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA+BH,MAAM,MAAM,WAAW,GAAG;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB,CAAC;AAcF;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,EAAE,GAAG,SAAS,CA+B/E;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAYxD"}

package/dist/secrets.js

@@ -0,0 +1,98 @@
+/**
+ * Secret audit — what auth/credentials were actually transmitted to a session.
+ *
+ * Source of truth is the LIVE per-session Kubernetes Secret (`session-<id>-auth`)
+ * read via kubectl over the configured tunnel — NEVER a local "what I sent"
+ * record (which drifts on refresh / a second machine / a control-plane restart).
+ * Only KEY NAMES are read (go-template emits keys, never values); values are
+ * never decoded or printed. Sanitized Secret keys are mapped back to their
+ * original home-relative paths via the known auth registries, and classified by
+ * tool with a "broad" flag for account-wide cloud creds.
+ */
+import { spawnSync } from "node:child_process";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { getTunnel } from "./config.js";
+import { PROFILE_AUTH_FILES } from "./auth-bundle.js";
+import { TOOL_AUTH_INFO } from "./auth-tools.js";
+/** Same sanitization the orchestrator applies to Secret keys (spec.ts). */
+function credentialSecretKey(relativePath) {
+    return relativePath.replace(/^\.+/, "").replace(/\//g, "_");
+}
+/** sanitizedSecretKey → {relpath, tool, broad} for every auth file we ever bundle. */
+function knownKeyMap() {
+    const m = new Map();
+    for (const [profile, files] of Object.entries(PROFILE_AUTH_FILES)) {
+        for (const rel of files) {
+            m.set(credentialSecretKey(rel), { relpath: rel, tool: profile, broad: false });
+        }
+    }
+    for (const info of TOOL_AUTH_INFO) {
+        m.set(credentialSecretKey(info.relpath), { ...info });
+    }
+    return m;
+}
+function kubeEnv() {
+    const tunnel = getTunnel();
+    if (!tunnel)
+        return undefined;
+    const env = { ...process.env };
+    if (tunnel.kubeconfig) {
+        env.KUBECONFIG = tunnel.kubeconfig.startsWith("~")
+            ? join(homedir(), tunnel.kubeconfig.slice(1))
+            : tunnel.kubeconfig;
+    }
+    return env;
+}
+/**
+ * Read the auth-Secret KEY NAMES transmitted to a session (values never read).
+ * Returns undefined if there is no configured tunnel / the secret can't be read.
+ */
+export function transmittedSecrets(sessionId) {
+    const tunnel = getTunnel();
+    const env = kubeEnv();
+    if (!tunnel || !env)
+        return undefined;
+    const r = spawnSync("kubectl", [
+        "-n",
+        tunnel.namespace,
+        "get",
+        "secret",
+        `session-${sessionId}-auth`,
+        // emit ONLY the keys — the value ($v) is never referenced/printed
+        "-o",
+        'go-template={{range $k, $v := .data}}{{$k}}{{"\\n"}}{{end}}',
+    ], { encoding: "utf8", env });
+    if (r.status !== 0)
+        return undefined;
+    const map = knownKeyMap();
+    return r.stdout
+        .split("\n")
+        .map((s) => s.trim())
+        .filter(Boolean)
+        .map((raw) => {
+        const info = map.get(raw);
+        return info
+            ? { path: info.relpath, tool: info.tool, broad: info.broad }
+            : { path: raw, tool: "?", broad: false };
+    })
+        .sort((a, b) => a.path.localeCompare(b.path));
+}
+/** One-line summary for `remote status` (e.g. "claude +scw +aws⚠", or "—"). */
+export function secretsSummary(sessionId) {
+    const entries = transmittedSecrets(sessionId);
+    if (entries === undefined)
+        return "?";
+    if (entries.length === 0)
+        return "—";
+    const seen = new Set();
+    const parts = [];
+    for (const e of entries) {
+        if (seen.has(e.tool))
+            continue;
+        seen.add(e.tool);
+        parts.push(`${e.tool}${e.broad ? "⚠" : ""}`);
+    }
+    return parts.join(" ");
+}
+//# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,2EAA2E;AAC3E,SAAS,mBAAmB,CAAC,YAAoB;IAC/C,OAAO,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC9D,CAAC;AAID,sFAAsF;AACtF,SAAS,WAAW;IAClB,MAAM,CAAC,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAClE,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AASD,SAAS,OAAO;IACd,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7C,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,CAAC,GAAG,SAAS,CACjB,SAAS,EACT;QACE,IAAI;QACJ,MAAM,CAAC,SAAS;QAChB,KAAK;QACL,QAAQ;QACR,WAAW,SAAS,OAAO;QAC3B,kEAAkE;QAClE,IAAI;QACJ,6DAA6D;KAC9D,EACD,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,CAC1B,CAAC;IACF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;IAC1B,OAAO,CAAC,CAAC,MAAM;SACZ,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,IAAI;YACT,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAC5D,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,SAAS;QAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/session-restore.d.ts

@@ -0,0 +1,26 @@
+export type OnConflict = "backup" | "keep-local" | "block";
+export type RestoreResult = {
+    readonly restored: string[];
+    readonly keptLocal: string[];
+    readonly backedUp: string[];
+    readonly conflicts: string[];
+};
+/**
+ * Restore persisted conversation state from a workspace export archive into the
+ * local HOME. Per file:
+ *  - local absent → write remote (new conversation).
+ *  - local == remote → skip.
+ *  - local is a prefix of remote (remote is a continuation) → overwrite.
+ *  - remote is a prefix of local (local is ahead) → keep local.
+ *  - diverged → conflict, resolved by `onConflict`:
+ *      backup    → duplicate local under a fresh id, then write remote.
+ *      keep-local→ skip remote.
+ *      block     → leave untouched, report.
+ */
+export declare function restoreSessionsToLocal(args: {
+    home: string;
+    profile: string;
+    remoteArchive: Buffer;
+    onConflict: OnConflict;
+}): RestoreResult;
+//# sourceMappingURL=session-restore.d.ts.map

package/dist/session-restore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-restore.d.ts","sourceRoot":"","sources":["../src/session-restore.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC;AAE3D,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;CAC9B,CAAC;AA+CF;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;CACxB,GAAG,aAAa,CAqDhB"}

package/dist/session-restore.js

@@ -0,0 +1,122 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync, } from "node:fs";
+import { dirname, extname, join, relative } from "node:path";
+import { randomUUID } from "node:crypto";
+const STATE_SUBDIR = ".remote/sessions";
+function extractInto(archive, dest) {
+    mkdirSync(dest, { recursive: true });
+    const res = spawnSync("tar", ["-xzf", "-", "-C", dest], { input: archive });
+    if (res.status !== 0) {
+        throw new Error(`tar extract failed: ${res.stderr?.toString() ?? res.status}`);
+    }
+}
+function walk(root) {
+    const out = [];
+    if (!existsSync(root))
+        return out;
+    const stack = [root];
+    while (stack.length > 0) {
+        const dir = stack.pop();
+        for (const e of readdirSync(dir, { withFileTypes: true })) {
+            const abs = join(dir, e.name);
+            if (e.isDirectory())
+                stack.push(abs);
+            else if (e.isFile())
+                out.push(relative(root, abs));
+        }
+    }
+    return out;
+}
+function isPrefix(short, long) {
+    return short.length <= long.length && long.subarray(0, short.length).equals(short);
+}
+function backupWithNewId(home, rel, local) {
+    // Heuristic: the conversation id is the filename stem (uuid-like). Duplicate
+    // the local conversation under a fresh id so the CLI lists it separately.
+    const ext = extname(rel);
+    const dir = dirname(rel);
+    const stem = rel.slice(dir === "." ? 0 : dir.length + 1, rel.length - ext.length);
+    const newId = randomUUID();
+    const newRel = join(dir === "." ? "" : dir, `${newId}${ext}`);
+    const replaced = stem.length >= 8
+        ? Buffer.from(local.toString("utf8").split(stem).join(newId), "utf8")
+        : local;
+    const dst = join(home, newRel);
+    mkdirSync(dirname(dst), { recursive: true });
+    writeFileSync(dst, replaced);
+    return newRel;
+}
+/**
+ * Restore persisted conversation state from a workspace export archive into the
+ * local HOME. Per file:
+ *  - local absent → write remote (new conversation).
+ *  - local == remote → skip.
+ *  - local is a prefix of remote (remote is a continuation) → overwrite.
+ *  - remote is a prefix of local (local is ahead) → keep local.
+ *  - diverged → conflict, resolved by `onConflict`:
+ *      backup    → duplicate local under a fresh id, then write remote.
+ *      keep-local→ skip remote.
+ *      block     → leave untouched, report.
+ */
+export function restoreSessionsToLocal(args) {
+    // Use HOME/.remote/tmp/ as staging area — project policy forbids /tmp.
+    const stagingBase = join(args.home, ".remote", "tmp");
+    mkdirSync(stagingBase, { recursive: true });
+    const tmp = mkdtempSync(join(stagingBase, "restore-"));
+    const result = {
+        restored: [],
+        keptLocal: [],
+        backedUp: [],
+        conflicts: [],
+    };
+    try {
+        extractInto(args.remoteArchive, tmp);
+        const stateRoot = join(tmp, STATE_SUBDIR, args.profile);
+        for (const rel of walk(stateRoot)) {
+            const remote = readFileSync(join(stateRoot, rel));
+            const localPath = join(args.home, rel);
+            let local = null;
+            try {
+                if (statSync(localPath).isFile())
+                    local = readFileSync(localPath);
+            }
+            catch {
+                local = null;
+            }
+            const write = () => {
+                mkdirSync(dirname(localPath), { recursive: true });
+                writeFileSync(localPath, remote);
+            };
+            if (local === null) {
+                write();
+                result.restored.push(rel);
+            }
+            else if (local.equals(remote)) {
+                // identical, nothing to do
+            }
+            else if (isPrefix(local, remote)) {
+                write();
+                result.restored.push(rel);
+            }
+            else if (isPrefix(remote, local)) {
+                result.keptLocal.push(rel);
+            }
+            else if (args.onConflict === "backup") {
+                const bak = backupWithNewId(args.home, rel, local);
+                write();
+                result.backedUp.push(`${rel} -> ${bak}`);
+            }
+            else if (args.onConflict === "keep-local") {
+                result.keptLocal.push(rel);
+            }
+            else {
+                result.conflicts.push(rel);
+            }
+        }
+        return result;
+    }
+    finally {
+        rmSync(tmp, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=session-restore.js.map

package/dist/session-restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-restore.js","sourceRoot":"","sources":["../src/session-restore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,WAAW,EACX,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAWxC,SAAS,WAAW,CAAC,OAAe,EAAE,IAAY;IAChD,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;iBAChC,IAAI,CAAC,CAAC,MAAM,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,OAAO,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,GAAW,EAAE,KAAa;IAC/D,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC;IAC9D,MAAM,QAAQ,GACZ,IAAI,CAAC,MAAM,IAAI,CAAC;QACd,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QACrE,CAAC,CAAC,KAAK,CAAC;IACZ,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAKtC;IACC,uEAAuE;IACvE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACtD,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAkB;QAC5B,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,EAAE;KACd,CAAC;IACF,IAAI,CAAC;QACH,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,GAAkB,IAAI,CAAC;YAChC,IAAI,CAAC;gBACH,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YAED,MAAM,KAAK,GAAG,GAAG,EAAE;gBACjB,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACnD,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC,CAAC;YAEF,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,KAAK,EAAE,CAAC;gBACR,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,2BAA2B;YAC7B,CAAC;iBAAM,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnC,KAAK,EAAE,CAAC;gBACR,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBACnD,KAAK,EAAE,CAAC;gBACR,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,OAAO,GAAG,EAAE,CAAC,CAAC;YAC3C,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;gBAC5C,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/skills-sync.d.ts

@@ -0,0 +1,126 @@
+/**
+ * `remote plugin sync-skills` — propagate the LOCAL user's Claude Code skills
+ * and plugin state into each live session Pod's `$HOME/.claude/`, so delegated /
+ * remote claude sessions get the same capabilities (superpowers, track, h2a,
+ * graphify, sent-tech-design, …) the operator has locally.
+ *
+ * APPROACH — "copy the resolved cache" (the chosen DEFAULT). We tar a short,
+ * explicit WHITELIST of skill+plugin paths and untar it into the Pod. This is
+ * deterministic: the Pod gets byte-for-byte the same resolved plugin cache the
+ * operator already vetted locally, with no network/marketplace fetch in-Pod.
+ *   Reversible fork (NOT implemented — documented for the conductor): instead of
+ *   shipping the cache, re-install marketplaces in-Pod (`claude plugin
+ *   marketplace add … && claude plugin install …`). That re-resolves remotely
+ *   (non-deterministic, needs network + auth in the Pod) and is therefore the
+ *   non-default. If we ever want it, it slots in as an alternate plan builder
+ *   here; the CLI surface stays the same.
+ *
+ * CRITICAL SAFETY — we NEVER tar the whole `~/.claude` (it holds settings.json,
+ * .credentials.json, OAuth tokens, project transcripts under projects/, and
+ * ~/.claude.json). Only the four paths in SKILLS_SYNC_WHITELIST are archived,
+ * each a leaf path so no broader directory can sweep a secret in with it. The
+ * SAFETY tests assert no credential/transcript path is ever a tar member.
+ *
+ * Payloads are argv ARRAYS (tar argv, kubectl argv) — never a `bash -lc` string
+ * with interpolated paths — so a $HOME (or any path) with shell metacharacters
+ * is just a single argument, never a parsed shell word. The archive itself
+ * rides stdin (`kubectl exec -i … -- tar -x`), so no file content is ever
+ * interpolated either.
+ *
+ * Idempotent: re-running untars over the existing tree (`--overwrite`), so the
+ * Pod's skills/plugins converge to the local state on every run.
+ */
+import { type TunnelConfig } from "./config.js";
+/**
+ * The ONLY paths synced to Pods, relative to `$HOME`. Skills dir + the three
+ * plugin-state pieces that make the resolved plugin cache deterministic. Each
+ * is a leaf path: no entry is a parent of a secret file (so tarring it can
+ * never drag settings.json / .credentials.json / transcripts along). Anything
+ * outside this list — including the rest of ~/.claude/plugins (blocklist.json,
+ * known_marketplaces.json, plugin-catalog-cache.json, data/) — is excluded.
+ */
+export declare const SKILLS_SYNC_WHITELIST: readonly string[];
+/** The explicit whitelist as a fresh array (callers cannot mutate the source). */
+export declare function skillsSyncWhitelist(): string[];
+/**
+ * `tar` argv that archives ONLY the whitelisted paths, relative to `$HOME`, as
+ * a gzip stream on stdout (`-f -`). `-C <home>` keeps members relative so they
+ * untar cleanly into the Pod's `$HOME`. `--ignore-failed-read` lets a partial
+ * local install still sync (a missing member is skipped, not fatal). Members
+ * follow `--` so a leading-dash path can never be mistaken for a flag.
+ */
+export declare function buildSkillsTarArgs(home: string): string[];
+/**
+ * In-Pod `tar` argv: extract the gzip stream from stdin (`-f -`) into the Pod's
+ * `$HOME` (`-C <podHome>`), `--overwrite` so a re-run replaces the existing
+ * skills/plugins in place (idempotent). No member is named — extraction takes
+ * whatever the archive carries, and the archive only ever carries the
+ * whitelist (constrained on the tar side).
+ */
+export declare function buildPodUntarArgs(podHome: string): string[];
+/** A live session resolved to a Pod target for the skills sync. */
+export type SyncPod = {
+    sessionId: string;
+    profile: string;
+    /** Pod `$HOME` (extraction root); defaults to /root (session-agent runs as root). */
+    podHome?: string;
+};
+export type SkillsSyncPlan = {
+    /** The Pod name (`session-<id>`). */
+    pod: string;
+    sessionId: string;
+    profile: string;
+    /** Local archive command: `tar <args>` writing gzip to stdout. */
+    tar: {
+        cmd: "tar";
+        args: string[];
+    };
+    /** In-Pod extraction command: `tar <args>` reading gzip from stdin. */
+    untar: {
+        cmd: "tar";
+        args: string[];
+    };
+    /** The whitelist actually transferred (for the recap / dry-run). */
+    whitelist: string[];
+    /** One-line human-readable plan for `--dry-run` (transfers nothing). */
+    dryRun: string;
+};
+/**
+ * Compose the local-tar | pod-untar plan for one Pod. Pure: it builds the two
+ * argv arrays and a dry-run line, but spawns nothing — the actual transfer is
+ * behind the `runSkillsSync` seam so tests never shell out.
+ */
+export declare function buildSkillsSyncPlan(input: {
+    home: string;
+    pod: SyncPod;
+}): SkillsSyncPlan;
+/**
+ * Resolve which live sessions to sync. `--all` => every session; `--pod <ref>`
+ * => the single session whose id (or `session-<id>` Pod name) matches. Throws
+ * when neither is given, or when `--pod` matches nothing live.
+ */
+export declare function selectSyncPods(sessions: ReadonlyArray<{
+    id: string;
+    profile: string;
+}>, opts: {
+    pod?: string;
+    all?: boolean;
+}): SyncPod[];
+/**
+ * Pipe `tar <tarArgs>` (local) → `kubectl exec -i <pod> -- tar <untarArgs>`
+ * (Pod). Both ends are pure argv arrays; the gzip archive rides the pipe on
+ * stdin so no path/content is ever interpolated into a shell. Resolves on a
+ * clean (0/0) exit of both processes, rejects with the first non-zero status.
+ */
+export type SkillsSyncRunner = (plan: SkillsSyncPlan, tunnel: TunnelConfig) => Promise<void>;
+/**
+ * `remote plugin sync-skills [--pod <name>|--all] [--dry-run]` — copy the local
+ * Claude Code skills + plugin cache (whitelist only) into the selected live
+ * session Pod(s). `--dry-run` prints the tar/exec plan and transfers nothing.
+ */
+export declare function syncSkills(url: string, opts: {
+    pod?: string;
+    all?: boolean;
+    dryRun?: boolean;
+}, stderr?: NodeJS.WriteStream, run?: SkillsSyncRunner): Promise<void>;
+//# sourceMappingURL=skills-sync.d.ts.map

package/dist/skills-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-sync.d.ts","sourceRoot":"","sources":["../src/skills-sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAOH,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAM3D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAKlD,CAAC;AAEF,kFAAkF;AAClF,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAYzD;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3D;AAED,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAKF,MAAM,MAAM,cAAc,GAAG;IAC3B,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,GAAG,EAAE;QAAE,GAAG,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACpC,uEAAuE;IACvE,KAAK,EAAE;QAAE,GAAG,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACtC,oEAAoE;IACpE,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,OAAO,CAAC;CACd,GAAG,cAAc,CAmBjB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,EACxD,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACpC,OAAO,EAAE,CAeX;AAgBD;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,CAC7B,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,YAAY,KACjB,OAAO,CAAC,IAAI,CAAC,CAAC;AAoEnB;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,EACvD,MAAM,GAAE,MAAM,CAAC,WAA4B,EAC3C,GAAG,GAAE,gBAAkC,GACtC,OAAO,CAAC,IAAI,CAAC,CAiDf"}