@skaile/workspaces 5.1.3 → 5.2.0

package/dist/factory-assets/connectors/git/checkout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkout.d.ts","sourceRoot":"","sources":["../../../../factory-assets/connectors/git/checkout.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAEL,KAAK,aAAa,EAOnB,MAAM,WAAW,CAAC;AAcnB;;;;;;;;;;;;GAYG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,aAAa,EACnB,OAAO,SAAS,GACf,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2ElF;AASD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqCvF;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGxD;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM7E;AAMD,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBjG;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAS9E;AAED,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYtF;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAapF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGnF;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG9D;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOjG;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBtE"}

package/dist/factory-assets/connectors/git/config.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Git connector config - the session, sync and lifecycle blocks a mount
+ * declaration resolves to. `mode` seeds per-block defaults, explicit
+ * `options.{session,sync,lifecycle}` keys override them, and a read-only mount
+ * is forced onto the reference-checkout profile. Pure functions: no I/O, no
+ * per-mount state.
+ */
+import type { ConnectorDeclaration } from "@skaile/workspaces/connectors";
+export interface GitSessionConfig {
+    enabled: boolean;
+    slug?: string;
+    isMain: boolean;
+    branchPrefix: string;
+    /**
+     * Starting point for a freshly-created session branch. When set and the
+     * session branch does not already exist on origin, the driver fetches this
+     * ref and branches from it instead of from the base branch tip. Used by
+     * the platform's fork flow so a forked session branches off the source
+     * session's tip rather than off `main`. May be a branch name (e.g.
+     * `skaile/session-source-slug`) or a commit SHA. Ignored when the session
+     * branch already exists on origin (existing branch wins). No-op when
+     * `enabled = false` or `isMain = true` (only branch sessions cut new
+     * branches). The value is validated against `isValidGitRefOrSha` before
+     * use; refs with shell metacharacters are rejected and the driver falls
+     * back to branching off base.
+     */
+    fromRef?: string;
+}
+export interface GitSyncConfig {
+    fetchIntervalSec: number;
+    autoRebase: boolean;
+    autoPull: boolean;
+}
+export interface GitLifecycleConfig {
+    commitOnHibernate: boolean;
+    pushOnHibernate: boolean;
+    mergeOnClose: boolean;
+    pushOnClose: boolean;
+    /** Auto-commit after N ms of no file changes. 0 = disabled. Default: 30000 (30s). */
+    autoCommitIdleMs: number;
+    /** Push to remote after each auto-commit. */
+    pushAfterCommit: boolean;
+    /** Push freshly-created session branch to origin on connect. Best-effort — push
+     *  failures are swallowed; lifecycle push hooks remain the backstop. */
+    publishOnCreate: boolean;
+}
+/**
+ * True when at least one lifecycle hook may push to origin. With none on, the
+ * driver itself never writes to origin; the agent's explicit `push` op still can.
+ */
+export declare function lifecyclePushesEnabled(lc: GitLifecycleConfig): boolean;
+/** The session, sync and lifecycle blocks a git mount runs with. */
+export interface GitConfigBlocks {
+    session: GitSessionConfig;
+    sync: GitSyncConfig;
+    lifecycle: GitLifecycleConfig;
+}
+/**
+ * Resolve the session/sync/lifecycle config blocks for a git connector. `mode`
+ * seeds per-block defaults (`agent` / `sync`); explicit `options.{session,sync,
+ * lifecycle}` keys still override those defaults. Absent `mode` reproduces the
+ * legacy literals exactly, so behavior is unchanged for declarations that set none.
+ */
+export declare function resolveGitConfig(args: {
+    mode?: "agent" | "sync";
+    options?: Record<string, unknown>;
+}): GitConfigBlocks;
+/** The blocks a mount runs with, and whether it is a read-only reference checkout. */
+export interface GitMountConfig extends GitConfigBlocks {
+    readOnly: boolean;
+}
+/**
+ * Resolve the config a declaration mounts with. Only an explicit `read-only`
+ * counts: a mount that declared no `access` got the default from the parser and
+ * keeps the behaviour it had before the mode existed.
+ */
+export declare function resolveMountConfig(declaration: ConnectorDeclaration): GitMountConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/factory-assets/connectors/git/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../../factory-assets/connectors/git/config.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,OAAO,CAAC;IACtB,WAAW,EAAE,OAAO,CAAC;IACrB,qFAAqF;IACrF,gBAAgB,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,eAAe,EAAE,OAAO,CAAC;IACzB;4EACwE;IACxE,eAAe,EAAE,OAAO,CAAC;CAC1B;AAqGD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,kBAAkB,GAAG,OAAO,CAQtE;AAED,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,kBAAkB,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,GAAG,eAAe,CAclB;AAoCD,sFAAsF;AACtF,MAAM,WAAW,cAAe,SAAQ,eAAe;IACrD,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,oBAAoB,GAAG,cAAc,CAKpF"}

package/dist/factory-assets/connectors/git/credentials.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Git connector credentials — everything between a mount's `auth:` declaration
+ * and a token a git command can use.
+ *
+ * Owns token acquisition (platform mediator or PAT), the proactive refresh
+ * timer, the Tier-2 managed gitconfig and credential file the agent's own `git`
+ * reads, atomic writes to that file, and the teardown fence that stops a late
+ * refresh from writing back after the mount is gone. The rest of the connector
+ * only holds a {@link GitCredentials} handle: it reads `token` and calls
+ * `teardown`; it never writes a credential file itself.
+ */
+import type { ConnectContext, ConnectorDeclaration, SecretProvider } from "@skaile/workspaces/connectors";
+import type { Logger } from "@skaile/workspaces/types";
+type ConnectorTokenMediator = NonNullable<ConnectContext["tokenMediator"]>;
+/**
+ * Longest delay ever handed to `setTimeout`, a margin below its 2^31-1 ms
+ * ceiling (above which the delay silently collapses to 1 ms). Same cap the
+ * runner's AI-credential scheduler uses.
+ */
+export declare const MAX_REARM_MS: number;
+export interface GitCredentialsInit {
+    declaration: ConnectorDeclaration;
+    /** The declared remote (`mount.source`), used as the log scope of a driver-only credential. */
+    url: string;
+    secrets?: SecretProvider;
+    tokenMediator?: ConnectorTokenMediator;
+    log: Logger;
+}
+/** One mount's credential, as the rest of the git connector sees it. */
+export interface GitCredentials {
+    /** The current token. Read per git command, so a rotated token reaches the next spawn. */
+    readonly token: string | undefined;
+    /** True once the agent's gitconfig carries this mount's credential (Tier-2). */
+    readonly exposedToAgent: boolean;
+    /**
+     * Tier-2: write the managed gitconfig block, helper script and credential
+     * file for `url`, and arm the refresh timer. Writes nothing (and leaves
+     * {@link exposedToAgent} false) when there is no token, the remote is not
+     * http(s) or `GIT_CONFIG_GLOBAL` is unset. Throws when the files cannot be written.
+     */
+    exposeToAgent(url: string): void;
+    /**
+     * Tier-1: the credential stays inside the driver's own git. Reports the mint
+     * and arms the refresh timer, which keeps the token fresh in memory only.
+     */
+    serveDriverOnly(): void;
+    /**
+     * The agent's git hit a 401 and asked for a new token. No-op unless the
+     * credential is exposed and backend-minted; never writes after teardown.
+     */
+    refreshAfterRejection(): Promise<void>;
+    /**
+     * Stop refreshing and remove what was exposed to the agent. Idempotent.
+     * A refresh whose mint is still in flight finds the fence down and writes nothing.
+     */
+    teardown(): void;
+}
+/**
+ * The sanitized full repository URL a credential helper is scoped to.
+ * Userinfo, query, and fragment data must never enter the managed gitconfig.
+ */
+export declare function credentialScope(url: string): string;
+/**
+ * Register a credential helper that *reports* why there is no credential,
+ * after this connector failed to connect.
+ *
+ * Without it git finds no helper for the host and asks the terminal for a
+ * username, so the agent sees `fatal: could not read Username for
+ * 'https://github.com'` — which names neither the mount nor the cause, and
+ * which only ever appears on a write, since reads against a public remote
+ * keep succeeding. The helper written here makes git stop with the mediator's
+ * actual refusal text instead.
+ *
+ * Entirely best-effort: it runs on the failure path and must never mask the
+ * connect error that is already on its way up.
+ */
+export declare function registerUnavailableCredentialHelper(connectorId: string, url: string, err: unknown, log: Logger): void;
+/**
+ * Best-effort removal of the unavailable-mount blocks that would answer this
+ * connector's git operations: its own from a previous failed session, and any
+ * left under the same repository scope by a sibling mount that failed earlier
+ * in this `connectAll` (git matches helpers by URL, not by mount id).
+ */
+export declare function clearUnavailableCredentialHelper(connectorId: string, url: string, log: Logger): void;
+/**
+ * Resolve a mount's credential: ask the mediator (or secrets chain) for the
+ * initial token. Throws a classified connect error when the mount has no usable
+ * credential. Nothing is written or scheduled until `exposeToAgent` /
+ * `serveDriverOnly`.
+ */
+export declare function acquireGitCredentials(init: GitCredentialsInit): Promise<GitCredentials>;
+export {};
+//# sourceMappingURL=credentials.d.ts.map

package/dist/factory-assets/connectors/git/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../factory-assets/connectors/git/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EAGpB,cAAc,EAEf,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAsB,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAgB3E,KAAK,sBAAsB,GAAG,WAAW,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,CAAC;AAmB3E;;;;GAIG;AACH,eAAO,MAAM,YAAY,QAA2B,CAAC;AAgCrD,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,oBAAoB,CAAC;IAClC,+FAA+F;IAC/F,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wEAAwE;AACxE,MAAM,WAAW,cAAc;IAC7B,0FAA0F;IAC1F,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,gFAAgF;IAChF,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC;;;;;OAKG;IACH,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;OAGG;IACH,eAAe,IAAI,IAAI,CAAC;IACxB;;;OAGG;IACH,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC;;;OAGG;IACH,QAAQ,IAAI,IAAI,CAAC;CAClB;AAID;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGnD;AAkBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mCAAmC,CACjD,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,MAAM,GACV,IAAI,CA2CN;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC9C,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,IAAI,CAuBN;AA2ED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkS7F"}