@sentropic/h2a-runtime 0.81.0

package/dist/soft-refresh.js

@@ -0,0 +1,426 @@
+/**
+ * Soft credential refresh: push fresh local creds INTO a running session Pod and
+ * relaunch the CLI in place — WITHOUT recreating the Pod (keeps HOME parity, the
+ * conversation, the node, no image pull). Fixes the recurring ~8h token logout
+ * (the CLI can't self-refresh OAuth in a headless Pod). Also patches the auth
+ * Secret so the fresh token survives a future Pod restart.
+ *
+ * Steps (all via kubectl against the configured tunnel):
+ *  1. materialize each bundled cred file into $HOME/<rel> in the Pod,
+ *  2. patch session-<id>-auth Secret keys (durability),
+ *  3. respawn the Pod's tmux `main` pane: `<cli> --resume <newestConv>` with a
+ *     UTF-8 locale, dropping to a shell on exit (never kills the session).
+ *
+ * Unchanged-creds gating (`skipIfUnchanged`, used by `refresh --all/--watch`):
+ * the respawn INTERRUPTS the Pod's CLI, so it must only happen when the pushed
+ * creds actually differ. We sha256 the bundle and compare it with the previous
+ * pass (`previousHash`, in-memory --watch state) and with the hash recorded in
+ * the Pod ($HOME/.remote-creds.sha256, written after every push). Identical
+ * creds = silent no-op: nothing pushed, no Secret patch, NO respawn.
+ */
+import { spawnSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { collectProfileAuth } from "./auth-bundle.js";
+import { collectToolAuth, localCredsExistFor } from "./auth-tools.js";
+import { getTunnel } from "./config.js";
+import { buildHealthProbeCommand, isProbeableTool, parseHealthResult, } from "./cred-health.js";
+/** Secret data key for a HOME-relative cred path (matches the orchestrator). */
+function credentialSecretKey(rel) {
+    return rel.replace(/^\.+/, "").replace(/\//g, "_");
+}
+function expandHome(p) {
+    return p.startsWith("~") ? join(homedir(), p.slice(1)) : p;
+}
+function kubeEnv(tunnel) {
+    const env = { ...process.env };
+    if (tunnel.kubeconfig)
+        env.KUBECONFIG = expandHome(tunnel.kubeconfig);
+    return env;
+}
+/** Run kubectl, optionally piping `input` to stdin. Throws on non-zero. */
+function kubectl(tunnel, args, input) {
+    const r = spawnSync("kubectl", ["-n", tunnel.namespace, ...args], {
+        encoding: "utf8",
+        env: kubeEnv(tunnel),
+        ...(input !== undefined ? { input } : {}),
+    });
+    if (r.status !== 0) {
+        throw new Error(`kubectl ${args.join(" ")} failed: ${(r.stderr || r.stdout || "").trim()}`);
+    }
+    return r.stdout;
+}
+/** Exec a bash -lc script in the session-agent container. */
+function execPod(tunnel, pod, script, input) {
+    const base = ["exec"];
+    if (input !== undefined)
+        base.push("-i");
+    return kubectl(tunnel, [...base, pod, "-c", "session-agent", "--", "bash", "-lc", script], input);
+}
+/**
+ * Exec a tool's argv DIRECTLY in the session-agent container — NO `bash -lc`
+ * string-concat (the argv comes from `buildHealthProbeCommand`, static tokens
+ * only). Returns the exit code + stdout; NEVER throws (a non-zero exit IS the
+ * 401 signal we want to read). Used by the additive pod-side health probe.
+ */
+function execPodArgv(tunnel, pod, argv) {
+    const r = spawnSync("kubectl", ["-n", tunnel.namespace, "exec", pod, "-c", "session-agent", "--", ...argv], { encoding: "utf8", env: kubeEnv(tunnel) });
+    return { status: r.status ?? 1, stdout: r.stdout ?? "" };
+}
+/** `<cli> --resume <id>` per profile, when the profile has a verified resume form. */
+function resumeCommand(profile, convId) {
+    const q = (s) => `'${s.replace(/'/g, "'\\''")}'`;
+    switch (profile) {
+        case "codex":
+            return `codex resume ${q(convId)}`;
+        case "agy":
+        case "antigravity":
+            return `agy --resume ${q(convId)}`;
+        case "claude":
+        case "claude-code":
+            return `claude --resume ${q(convId)}`;
+        default:
+            return undefined;
+    }
+}
+/** HOME-relative file in the Pod recording the sha256 of the last pushed bundle. */
+export const CREDS_HASH_FILE = ".remote-creds.sha256";
+/**
+ * Bundle rels that are CONFIG, not credentials. They ride along on a push but
+ * must NOT gate it: `.claude.json` is rewritten constantly by every running
+ * local claude session (statsig/lastUsed churn), so hashing it would make
+ * `--watch` respawn the Pod CLI on nearly every pass. Only the actual
+ * credential files decide "changed".
+ */
+const CONFIG_ONLY_RELS = new Set([
+    ".claude.json",
+    ".claude/settings.json",
+    ".codex/config.toml",
+    ".gemini/antigravity-cli/settings.json",
+]);
+/**
+ * Deterministic sha256 of an auth bundle (profile + sorted rel -> base64 value),
+ * SKIPPING config-only rels (see CONFIG_ONLY_RELS). Values stay opaque: the
+ * hash never leaks any secret material.
+ */
+export function hashAuthBundle(profile, bundle) {
+    const h = createHash("sha256");
+    h.update(profile);
+    h.update("\0");
+    for (const rel of Object.keys(bundle).sort()) {
+        if (CONFIG_ONLY_RELS.has(rel))
+            continue;
+        h.update(rel);
+        h.update("\0");
+        h.update(bundle[rel]);
+        h.update("\0");
+    }
+    return h.digest("hex");
+}
+/**
+ * Push the profile's fresh creds into the Pod, patch the Secret, and relaunch
+ * the CLI in place. `bundle` is the already-collected creds (rel -> content).
+ */
+export async function softRefreshSession(sessionId, profile, options = {}) {
+    const stderr = options.stderr ?? process.stderr;
+    const tunnel = getTunnel();
+    if (!tunnel) {
+        throw new Error("soft refresh needs a tunnel configured (remote config tunnel …)");
+    }
+    const pod = `session-${sessionId}`;
+    const secret = `${pod}-auth`;
+    const bundle = await collectProfileAuth(profile);
+    const rels = Object.keys(bundle);
+    if (rels.length === 0) {
+        throw new Error(`no local credentials found for profile "${profile}"`);
+    }
+    // 0. unchanged-creds gating: identical bundle = silent no-op WITHOUT respawn
+    // (the respawn interrupts the Pod's CLI session — only worth it for new creds).
+    const hash = hashAuthBundle(profile, bundle);
+    if (options.skipIfUnchanged) {
+        let podHash;
+        if (options.previousHash === hash) {
+            podHash = hash; // in-memory state matches: skip even the Pod read
+        }
+        else {
+            try {
+                podHash = execPod(tunnel, pod, `cat "$HOME/${CREDS_HASH_FILE}" 2>/dev/null || true`).trim();
+            }
+            catch {
+                // Pod state unreadable — fall through; the push will surface the real error.
+            }
+        }
+        if (podHash === hash) {
+            // Creds unchanged — but if the Pod's CLI DIED (pane dropped to the
+            // wrapper shell, e.g. it exited on a 401 before fresh creds landed),
+            // "unchanged" must still bring the session back: respawn with the creds
+            // already in place. Probe ONLY when we already read the Pod this pass
+            // (previousHash mismatch): the in-memory watch match stays zero-I/O.
+            let paneDead = false;
+            let paneCmd = "";
+            if (options.previousHash !== hash) {
+                try {
+                    // The relaunch wrapper keeps the CLI as a CHILD of a bash script, so
+                    // pane_current_command alone reads "bash" even when claude is alive.
+                    // Dead = pane at bash/sh AND no child process (idle drop-to-shell).
+                    // /proc PPid scan because the runtime image has no ps/pgrep.
+                    const probe = execPod(tunnel, pod, `pp=$(tmux display -p -t main "#{pane_pid}" 2>/dev/null); ` +
+                        `cmd=$(tmux display -p -t main "#{pane_current_command}" 2>/dev/null); ` +
+                        `kids=$(awk -v p="$pp" '$1=="PPid:" && $2==p {c++} END{print c+0}' /proc/[0-9]*/status 2>/dev/null); ` +
+                        `echo "$cmd $kids"`)
+                        .trim()
+                        .split(/\s+/);
+                    paneCmd = probe[0] ?? "";
+                    const kids = Number(probe[1] ?? "1") || 0;
+                    paneDead = (paneCmd === "bash" || paneCmd === "sh") && kids === 0;
+                }
+                catch {
+                    // tmux unreadable — treat as alive; the next changed-creds pass heals it.
+                }
+            }
+            if (!paneDead) {
+                return {
+                    changed: false,
+                    hash,
+                    filesPushed: [],
+                    secretKeysPatched: [],
+                    convId: undefined,
+                    respawned: false,
+                };
+            }
+            stderr.write(`[remote] ${pod}: creds unchanged but the CLI is down (pane at ${paneCmd || "?"}) — respawning\n`);
+            const convId = detectNewestConversation(tunnel, pod);
+            const respawned = convId
+                ? respawnPane(tunnel, pod, profile, convId, stderr)
+                : false;
+            if (!convId) {
+                stderr.write(`[remote] no conversation found to resume in ${pod}\n`);
+            }
+            return {
+                changed: false,
+                hash,
+                filesPushed: [],
+                secretKeysPatched: [],
+                convId,
+                respawned,
+            };
+        }
+    }
+    // 1. materialize each cred file into the Pod's HOME.
+    const filesPushed = [];
+    for (const rel of rels) {
+        // collectProfileAuth already returns base64 — decode it ONCE into the file
+        // (do NOT re-encode, or the file ends up containing base64 text).
+        execPod(tunnel, pod, `mkdir -p "$(dirname "$HOME/${rel}")" && base64 -d > "$HOME/${rel}" && chmod 600 "$HOME/${rel}"`, bundle[rel]);
+        filesPushed.push(rel);
+    }
+    stderr.write(`[remote] pushed ${filesPushed.length} cred file(s) into ${pod}\n`);
+    // Record the pushed bundle's hash in the Pod so future --all/--watch passes
+    // can no-op (and NOT respawn) when the local creds haven't changed.
+    try {
+        execPod(tunnel, pod, `printf %s '${hash}' > "$HOME/${CREDS_HASH_FILE}"`);
+    }
+    catch (error) {
+        stderr.write(`[remote] warn: could not record creds hash in Pod: ${String(error).slice(0, 120)}\n`);
+    }
+    // 2. patch the Secret so the fresh creds survive a Pod restart.
+    const secretKeysPatched = [];
+    const runDir = join(process.env.XDG_RUNTIME_DIR ??
+        join(homedir(), ".config", "sentropic", "remote-cli"), "sentropic-remote-run");
+    mkdirSync(runDir, { recursive: true });
+    let patchN = 0;
+    for (const rel of rels) {
+        const key = credentialSecretKey(rel);
+        // Secret data values ARE base64, and collectProfileAuth already returns
+        // base64 — use it as-is (do NOT re-encode).
+        // Patch via a temp --patch-file so large creds (the full account file) don't
+        // blow the command-line length limit (inline -p) nor hit the spawn stdin
+        // /dev/stdin quirk.
+        const patchFile = join(runDir, `patch-${process.pid}-${patchN++}.json`);
+        try {
+            writeFileSync(patchFile, JSON.stringify({ data: { [key]: bundle[rel] } }), "utf8");
+            kubectl(tunnel, [
+                "patch",
+                "secret",
+                secret,
+                "--type",
+                "merge",
+                "--patch-file",
+                patchFile,
+            ]);
+            secretKeysPatched.push(key);
+        }
+        catch (error) {
+            stderr.write(`[remote] warn: could not patch Secret key ${key}: ${String(error).slice(0, 120)}\n`);
+        }
+        finally {
+            rmSync(patchFile, { force: true });
+        }
+    }
+    stderr.write(`[remote] patched ${secretKeysPatched.length} Secret key(s) (durable across restart)\n`);
+    // 3. detect the newest conversation in the Pod and respawn the CLI in tmux.
+    const convId = detectNewestConversation(tunnel, pod);
+    let respawned = false;
+    if (convId) {
+        respawned = respawnPane(tunnel, pod, profile, convId, stderr);
+    }
+    else {
+        stderr.write(`[remote] creds pushed; no conversation found to resume\n`);
+    }
+    return {
+        changed: true,
+        hash,
+        filesPushed,
+        secretKeysPatched,
+        convId,
+        respawned,
+    };
+}
+/** Newest conversation id present in the Pod (claude projects / codex rollouts). */
+function detectNewestConversation(tunnel, pod) {
+    return execPod(tunnel, pod, `ls -t "$HOME"/.claude/projects/*/*.jsonl "$HOME"/.codex/sessions/**/*.jsonl 2>/dev/null | head -1 | xargs -r basename | sed 's/\\.jsonl$//; s/^rollout-//'`)
+        .trim()
+        .split("\n")
+        .filter(Boolean)[0];
+}
+/**
+ * Write a relaunch script + respawn the durable tmux pane (drop-to-shell on
+ * exit so the session is never killed). Single-quoted heredoc keeps it intact.
+ */
+function respawnPane(tunnel, pod, profile, convId, stderr) {
+    const resume = resumeCommand(profile, convId);
+    if (!resume) {
+        stderr.write(`[remote] creds pushed but ${profile} has no verified resume command for ${convId}; restart the CLI in the Pod manually\n`);
+        return false;
+    }
+    const script = [
+        `cat > "$HOME/.remote-relaunch.sh" <<'RL'`,
+        `#!/bin/bash`,
+        `export LANG=C.UTF-8 LC_ALL=C.UTF-8`,
+        `cd "$WORKSPACE_PATH" 2>/dev/null || true`,
+        resume,
+        `printf '\\n[remote] %s exited — shell.\\n' "$0"`,
+        `exec bash -l`,
+        `RL`,
+        `chmod +x "$HOME/.remote-relaunch.sh"`,
+        `tmux respawn-pane -t main -k "$HOME/.remote-relaunch.sh" 2>/dev/null && echo respawned || echo no-tmux`,
+    ].join("\n");
+    const out = execPod(tunnel, pod, script).trim();
+    const respawned = out.endsWith("respawned");
+    stderr.write(respawned
+        ? `[remote] relaunched ${profile} (--resume ${convId}) in the Pod's tmux\n`
+        : `[remote] creds pushed but no tmux 'main' to respawn — restart the CLI in the Pod manually\n`);
+    return respawned;
+}
+/**
+ * Probe ONE covered tool in a live Pod and, if it's unauthenticated, push the
+ * tool's LOCAL creds (re-bundle + materialize + Secret patch — the same
+ * mechanism as today, an extra trigger). Pure-ish: all IO is injected via
+ * `deps`. Returns what happened (probe result + whether/what was pushed).
+ * Exported for tests.
+ */
+export async function probeAndPushToolHealth(tool, deps) {
+    const stderr = deps.stderr ?? { write: () => true };
+    const probe = deps.exec(buildHealthProbeCommand(tool));
+    const health = parseHealthResult(tool, probe.status, probe.stdout);
+    if (health.ok) {
+        return {
+            tool,
+            health,
+            pushed: false,
+            filesPushed: [],
+            secretKeysPatched: [],
+        };
+    }
+    // ok:false → re-bundle + push this tool's LOCAL creds (same path as today).
+    // Tool/status only — NEVER a secret value.
+    stderr.write(`[remote] pod 401: ${health.reason} — pushing fresh ${tool} creds\n`);
+    const { bundle } = await deps.collect([tool]);
+    const rels = Object.keys(bundle);
+    const filesPushed = [];
+    const secretKeysPatched = [];
+    for (const rel of rels) {
+        deps.materialize(rel, bundle[rel]);
+        filesPushed.push(rel);
+        const key = credentialSecretKey(rel);
+        deps.patchSecretKey(key, bundle[rel]);
+        secretKeysPatched.push(key);
+    }
+    if (filesPushed.length === 0) {
+        stderr.write(`[remote] no local ${tool} creds to push — run \`${tool} login\` locally\n`);
+    }
+    return {
+        tool,
+        health,
+        pushed: filesPushed.length > 0,
+        filesPushed,
+        secretKeysPatched,
+    };
+}
+/**
+ * Production wiring for `probeAndPushToolHealth` against a configured tunnel +
+ * live pod. Builds the default `ToolHealthDeps` (real kubectl exec / patch /
+ * collectToolAuth) and probes EACH covered tool, pushing on a 401. Best-effort:
+ * a probe/push error for one tool is logged and the others continue. Returns the
+ * per-tool actions. NOT pure (does IO); the pure decision lives in
+ * `probeAndPushToolHealth` + cred-health. Used by the watch loop.
+ */
+export async function probePodCredHealth(sessionId, tools = ["gh", "npm", "docker"], options = {}) {
+    const stderr = options.stderr ?? process.stderr;
+    const tunnel = getTunnel();
+    if (!tunnel)
+        throw new Error("pod cred health probe needs a tunnel configured");
+    const pod = `session-${sessionId}`;
+    const secret = `${pod}-auth`;
+    const runDir = join(process.env.XDG_RUNTIME_DIR ??
+        join(homedir(), ".config", "sentropic", "remote-cli"), "sentropic-remote-run");
+    const deps = {
+        exec: (argv) => execPodArgv(tunnel, pod, argv),
+        collect: (t) => collectToolAuth(t),
+        materialize: (rel, base64) => {
+            execPod(tunnel, pod, `mkdir -p "$(dirname "$HOME/${rel}")" && base64 -d > "$HOME/${rel}" && chmod 600 "$HOME/${rel}"`, base64);
+        },
+        patchSecretKey: (key, base64) => {
+            mkdirSync(runDir, { recursive: true });
+            const patchFile = join(runDir, `tool-patch-${process.pid}-${key}.json`);
+            try {
+                writeFileSync(patchFile, JSON.stringify({ data: { [key]: base64 } }), "utf8");
+                kubectl(tunnel, [
+                    "patch",
+                    "secret",
+                    secret,
+                    "--type",
+                    "merge",
+                    "--patch-file",
+                    patchFile,
+                ]);
+            }
+            finally {
+                rmSync(patchFile, { force: true });
+            }
+        },
+        stderr,
+    };
+    const actions = [];
+    for (const tool of tools) {
+        if (!isProbeableTool(tool))
+            continue;
+        // GUARD (slice-2 regression fix): only probe/push a tool when the LOCAL
+        // machine actually has non-empty creds for it. With no local creds, pushing
+        // is pointless — the Pod's probe stays 401 and the next pass repeats the same
+        // useless push forever. No local creds → skip ENTIRELY (no probe, no push, no
+        // log). Tools WITH valid local creds are byte-identical to before.
+        if (!localCredsExistFor(tool))
+            continue;
+        try {
+            actions.push(await probeAndPushToolHealth(tool, deps));
+        }
+        catch (error) {
+            stderr.write(`[remote] ${pod}: ${tool} health probe/push errored: ${String(error).slice(0, 120)}\n`);
+        }
+    }
+    return actions;
+}
+//# sourceMappingURL=soft-refresh.js.map

package/dist/soft-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"soft-refresh.js","sourceRoot":"","sources":["../src/soft-refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAqB,MAAM,aAAa,CAAC;AAC3D,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,iBAAiB,GAGlB,MAAM,kBAAkB,CAAC;AAE1B,gFAAgF;AAChF,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,OAAO,CAAC,MAAoB;IACnC,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,SAAS,OAAO,CACd,MAAoB,EACpB,IAA2B,EAC3B,KAAc;IAEd,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,EAAE;QAChE,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC;QACpB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,WAAW,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AAED,6DAA6D;AAC7D,SAAS,OAAO,CACd,MAAoB,EACpB,GAAW,EACX,MAAc,EACd,KAAc;IAEd,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,OAAO,CACZ,MAAM,EACN,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,EAClE,KAAK,CACN,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,MAAoB,EACpB,GAAW,EACX,IAA2B;IAE3B,MAAM,CAAC,GAAG,SAAS,CACjB,SAAS,EACT,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAC3E,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAC3C,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED,sFAAsF;AACtF,SAAS,aAAa,CAAC,OAAe,EAAE,MAAc;IACpD,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IACzD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,KAAK,KAAK,CAAC;QACX,KAAK,aAAa;YAChB,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,KAAK,QAAQ,CAAC;QACd,KAAK,aAAa;YAChB,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,cAAc;IACd,uBAAuB;IACvB,oBAAoB;IACpB,uCAAuC;CACxC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,MAAwC;IAExC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACxC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAE,CAAC,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAwBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,OAAe,EACf,UAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,SAAS,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC;IAE7B,MAAM,MAAM,GAAG,MAAM,kBAAkB,CACrC,OAAmD,CACpD,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,GAAG,CAAC,CAAC;IACzE,CAAC;IAED,6EAA6E;IAC7E,gFAAgF;IAChF,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,IAAI,OAA2B,CAAC;QAChC,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAClC,OAAO,GAAG,IAAI,CAAC,CAAC,kDAAkD;QACpE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,OAAO,GAAG,OAAO,CACf,MAAM,EACN,GAAG,EACH,cAAc,eAAe,uBAAuB,CACrD,CAAC,IAAI,EAAE,CAAC;YACX,CAAC;YAAC,MAAM,CAAC;gBACP,6EAA6E;YAC/E,CAAC;QACH,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,mEAAmE;YACnE,qEAAqE;YACrE,wEAAwE;YACxE,sEAAsE;YACtE,qEAAqE;YACrE,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,qEAAqE;oBACrE,qEAAqE;oBACrE,oEAAoE;oBACpE,6DAA6D;oBAC7D,MAAM,KAAK,GAAG,OAAO,CACnB,MAAM,EACN,GAAG,EACH,2DAA2D;wBACzD,wEAAwE;wBACxE,sGAAsG;wBACtG,mBAAmB,CACtB;yBACE,IAAI,EAAE;yBACN,KAAK,CAAC,KAAK,CAAC,CAAC;oBAChB,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;oBACzB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC1C,QAAQ,GAAG,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;gBACpE,CAAC;gBAAC,MAAM,CAAC;oBACP,0EAA0E;gBAC5E,CAAC;YACH,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,IAAI;oBACJ,WAAW,EAAE,EAAE;oBACf,iBAAiB,EAAE,EAAE;oBACrB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,KAAK,CACV,YAAY,GAAG,kDAAkD,OAAO,IAAI,GAAG,kBAAkB,CAClG,CAAC;YACF,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,MAAM;gBACtB,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;gBACnD,CAAC,CAAC,KAAK,CAAC;YACV,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,KAAK,CAAC,+CAA+C,GAAG,IAAI,CAAC,CAAC;YACvE,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,IAAI;gBACJ,WAAW,EAAE,EAAE;gBACf,iBAAiB,EAAE,EAAE;gBACrB,MAAM;gBACN,SAAS;aACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,2EAA2E;QAC3E,kEAAkE;QAClE,OAAO,CACL,MAAM,EACN,GAAG,EACH,8BAA8B,GAAG,6BAA6B,GAAG,yBAAyB,GAAG,GAAG,EAChG,MAAM,CAAC,GAAG,CAAE,CACb,CAAC;QACF,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,CAAC,KAAK,CACV,mBAAmB,WAAW,CAAC,MAAM,sBAAsB,GAAG,IAAI,CACnE,CAAC;IAEF,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,IAAI,cAAc,eAAe,GAAG,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CACV,sDAAsD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CACtF,CAAC;IACJ,CAAC;IAED,gEAAgE;IAChE,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CACjB,OAAO,CAAC,GAAG,CAAC,eAAe;QACzB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,EACvD,sBAAsB,CACvB,CAAC;IACF,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACrC,wEAAwE;QACxE,4CAA4C;QAC5C,6EAA6E;QAC7E,yEAAyE;QACzE,oBAAoB;QACpB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,OAAO,CAAC,GAAG,IAAI,MAAM,EAAE,OAAO,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,aAAa,CACX,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAE,EAAE,EAAE,CAAC,EACjD,MAAM,CACP,CAAC;YACF,OAAO,CAAC,MAAM,EAAE;gBACd,OAAO;gBACP,QAAQ;gBACR,MAAM;gBACN,QAAQ;gBACR,OAAO;gBACP,cAAc;gBACd,SAAS;aACV,CAAC,CAAC;YACH,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,6CAA6C,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CACrF,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,MAAM,CAAC,KAAK,CACV,oBAAoB,iBAAiB,CAAC,MAAM,2CAA2C,CACxF,CAAC;IAEF,4EAA4E;IAC5E,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAErD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,MAAM,EAAE,CAAC;QACX,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC3E,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,WAAW;QACX,iBAAiB;QACjB,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,wBAAwB,CAC/B,MAAoB,EACpB,GAAW;IAEX,OAAO,OAAO,CACZ,MAAM,EACN,GAAG,EACH,4JAA4J,CAC7J;SACE,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,MAAoB,EACpB,GAAW,EACX,OAAe,EACf,MAAc,EACd,MAA0B;IAE1B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CACV,6BAA6B,OAAO,uCAAuC,MAAM,yCAAyC,CAC3H,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG;QACb,0CAA0C;QAC1C,aAAa;QACb,oCAAoC;QACpC,0CAA0C;QAC1C,MAAM;QACN,iDAAiD;QACjD,cAAc;QACd,IAAI;QACJ,sCAAsC;QACtC,wGAAwG;KACzG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CACV,SAAS;QACP,CAAC,CAAC,uBAAuB,OAAO,cAAc,MAAM,uBAAuB;QAC3E,CAAC,CAAC,6FAA6F,CAClG,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC;AA6CD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAmB,EACnB,IAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO;YACL,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,EAAE;SACtB,CAAC;IACJ,CAAC;IACD,4EAA4E;IAC5E,2CAA2C;IAC3C,MAAM,CAAC,KAAK,CACV,qBAAqB,MAAM,CAAC,MAAM,oBAAoB,IAAI,UAAU,CACrE,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAE,CAAC,CAAC;QACpC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAE,CAAC,CAAC;QACvC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,KAAK,CACV,qBAAqB,IAAI,0BAA0B,IAAI,oBAAoB,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI;QACJ,MAAM;QACN,MAAM,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC;QAC9B,WAAW;QACX,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,QAA+B,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,EACtD,UAA2C,EAAE;IAE7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM;QACT,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,WAAW,SAAS,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC;IAE7B,MAAM,MAAM,GAAG,IAAI,CACjB,OAAO,CAAC,GAAG,CAAC,eAAe;QACzB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,EACvD,sBAAsB,CACvB,CAAC;IAEF,MAAM,IAAI,GAAmB;QAC3B,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC9C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAClC,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YAC3B,OAAO,CACL,MAAM,EACN,GAAG,EACH,8BAA8B,GAAG,6BAA6B,GAAG,yBAAyB,GAAG,GAAG,EAChG,MAAM,CACP,CAAC;QACJ,CAAC;QACD,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YAC9B,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,OAAO,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC;YACxE,IAAI,CAAC;gBACH,aAAa,CACX,SAAS,EACT,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,EAC3C,MAAM,CACP,CAAC;gBACF,OAAO,CAAC,MAAM,EAAE;oBACd,OAAO;oBACP,QAAQ;oBACR,MAAM;oBACN,QAAQ;oBACR,OAAO;oBACP,cAAc;oBACd,SAAS;iBACV,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,MAAM;KACP,CAAC;IAEF,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,wEAAwE;QACxE,4EAA4E;QAC5E,8EAA8E;QAC9E,8EAA8E;QAC9E,mEAAmE;QACnE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,YAAY,GAAG,KAAK,IAAI,+BAA+B,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/sync-status.d.ts

@@ -0,0 +1,22 @@
+export type SyncState = "synced" | "pending" | "degraded" | "blocked";
+export type ClassMetrics = {
+    pendingBytes: number;
+    pendingCount: number;
+    oldestPendingAge: number;
+    lastAckedAt: string | null;
+    estimatedCatchup: number;
+};
+export type SyncStatus = {
+    state: SyncState;
+    safeToClose: boolean;
+    updatedAt: string;
+    conv: ClassMetrics;
+    hot: ClassMetrics;
+    cold: ClassMetrics;
+};
+export declare function syncStatusPath(sessionId: string): string;
+export declare function readSyncStatus(sessionId: string): SyncStatus | null;
+export declare function writeSyncStatus(sessionId: string, status: SyncStatus): void;
+export declare function emptyMetrics(): ClassMetrics;
+export declare function mergedState(classes: SyncState[]): SyncState;
+//# sourceMappingURL=sync-status.d.ts.map

package/dist/sync-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-status.d.ts","sourceRoot":"","sources":["../src/sync-status.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAEtE,MAAM,MAAM,YAAY,GAAG;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,SAAS,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,YAAY,CAAC;IAClB,IAAI,EAAE,YAAY,CAAC;CACpB,CAAC;AAEF,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAOnE;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAM3E;AAED,wBAAgB,YAAY,IAAI,YAAY,CAQ3C;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,SAAS,CAK3D"}

package/dist/sync-status.js

@@ -0,0 +1,41 @@
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+export function syncStatusPath(sessionId) {
+    return join(homedir(), ".remote", "sync-status", `${sessionId}.json`);
+}
+export function readSyncStatus(sessionId) {
+    const p = syncStatusPath(sessionId);
+    try {
+        return JSON.parse(readFileSync(p, "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+export function writeSyncStatus(sessionId, status) {
+    const p = syncStatusPath(sessionId);
+    mkdirSync(join(homedir(), ".remote", "sync-status"), { recursive: true });
+    const tmp = `${p}.tmp`;
+    writeFileSync(tmp, JSON.stringify(status, null, 2), "utf8");
+    renameSync(tmp, p);
+}
+export function emptyMetrics() {
+    return {
+        pendingBytes: 0,
+        pendingCount: 0,
+        oldestPendingAge: 0,
+        lastAckedAt: null,
+        estimatedCatchup: 0,
+    };
+}
+export function mergedState(classes) {
+    if (classes.includes("blocked"))
+        return "blocked";
+    if (classes.includes("degraded"))
+        return "degraded";
+    if (classes.includes("pending"))
+        return "pending";
+    return "synced";
+}
+//# sourceMappingURL=sync-status.js.map

package/dist/sync-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-status.js","sourceRoot":"","sources":["../src/sync-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAqBjC,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,CAAC,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAe,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,MAAkB;IACnE,MAAM,CAAC,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACpC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACvB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5D,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO;QACL,YAAY,EAAE,CAAC;QACf,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,CAAC;QACnB,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,CAAC;KACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IACpD,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/sync.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Conversation sync between local and a session Pod (`remote sync`): copy the
+ * conversation .jsonl in either direction over `kubectl exec`, base64 on the
+ * wire (encoded exactly ONCE — never double-encode, that was a real bug), with
+ * an ahead-GUARD so the side that has MORE of the conversation is never
+ * silently overwritten (--force to override), and a `.bak-<epoch>` backup of
+ * whatever gets overwritten, taken BEFORE writing. Conversation content is
+ * transferred verbatim but never printed.
+ */
+import { type TunnelConfig } from "./config.js";
+export type SyncDirection = "push" | "pull";
+export type SyncDecision = {
+    allow: true;
+} | {
+    allow: false;
+    reason: string;
+};
+/**
+ * Pure GUARD: never overwrite the side that has MORE of the conversation.
+ * `pull` overwrites local → refuse if local is ahead; `push` overwrites the
+ * Pod → refuse if remote is ahead. `--force` overrides (a backup is still
+ * taken either way).
+ */
+export declare function decideSyncAction(args: {
+    localLines: number;
+    remoteLines: number;
+    direction: SyncDirection;
+    force: boolean;
+}): SyncDecision;
+/** Local path of a conversation file for a workspace (claude cwd encoding). */
+export declare function localConvFile(workspacePath: string, convId: string, home?: string): string;
+/** Pod-side conversation path, relative to $HOME (used as "$HOME/<rel>"). */
+export declare function remoteConvRel(workspacePath: string, convId: string): string;
+/** Like execPod but never throws — returns {stdout, status}. */
+export declare function execPodRaw(tunnel: TunnelConfig, pod: string, script: string, input?: string): {
+    stdout: string;
+    status: number;
+};
+type ConvSyncState = {
+    offset: number;
+    prefixHash: string;
+    generation: number;
+    lastAckedToken?: number;
+    updatedAt: string;
+};
+export declare function readConvSyncState(convId: string, home?: string): ConvSyncState | undefined;
+export declare function writeConvSyncState(state: ConvSyncState, convId: string, home?: string): void;
+export type SyncResult = {
+    ok: true;
+    direction: SyncDirection;
+    convId: string;
+    lines: {
+        local: number;
+        remote: number;
+    };
+    /** Path of the .bak-<epoch> taken (undefined if nothing was overwritten). */
+    backup: string | undefined;
+    /** Destination written (local path, or "$HOME/<rel>" on the Pod). */
+    written: string;
+    incremental: boolean;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Copy the conversation .jsonl between local and the Pod. `pull`: Pod → local
+ * (guard: refuse if local is ahead). `push`: local → Pod (guard: refuse if
+ * remote is ahead). Both back up the overwritten file as `.bak-<epoch>` first.
+ */
+export declare function syncConversation(args: {
+    sessionId: string;
+    workspacePath: string;
+    direction: SyncDirection;
+    force: boolean;
+}): SyncResult;
+export {};
+//# sourceMappingURL=sync.d.ts.map

package/dist/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAeH,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5C,MAAM,MAAM,YAAY,GAAG;IAAE,KAAK,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9E;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,aAAa,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,YAAY,CAsBf;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAC3B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,MAAkB,GACvB,MAAM,CAER;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE3E;AA+BD,gEAAgE;AAChE,wBAAgB,UAAU,CACxB,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,MAAM,GACb;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAapC;AAYD,KAAK,aAAa,GAAG;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAUF,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,GACZ,aAAa,GAAG,SAAS,CAQ3B;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,GACZ,IAAI,CAON;AAED,MAAM,MAAM,UAAU,GAClB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,aAAa,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,6EAA6E;IAC7E,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;CACtB,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,aAAa,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,UAAU,CAuMb"}