@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/agent-runtime-api.js

@@ -0,0 +1,59 @@
+import { readBoundedWebBody } from "./web-body.js";
+import { nativeCliAuthorization } from "./windows-cli-api.js";
+function json(res, status, value) { if (!res.destroyed && !res.writableEnded) {
+    res.writeHead(status, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(value));
+} }
+/** Explicit dashboard-only runtime moves. Agent tool schemas do not offer this endpoint. */
+export function handleAgentRuntimeChange(req, res, url, ctx) {
+    const match = /^\/ui\/instances\/([^/]+)\/runtime$/.exec(url.pathname);
+    if (!match)
+        return false;
+    const allowed = () => nativeCliAuthorization(req, url, ctx);
+    if (!allowed()) {
+        json(res, 403, { error: "Runtime changes require a dashboard administrator" });
+        return true;
+    }
+    let name;
+    try {
+        name = decodeURIComponent(match[1]);
+    }
+    catch {
+        json(res, 400, { error: "Invalid Agent name" });
+        return true;
+    }
+    if (!Object.hasOwn(ctx.fleetConfig?.instances ?? {}, name)) {
+        json(res, 404, { error: "Agent not found" });
+        return true;
+    }
+    if (!ctx.agentRuntimeChanges) {
+        json(res, 503, { error: "Runtime changes are unavailable on this host" });
+        return true;
+    }
+    if (req.method === "GET") {
+        json(res, 200, ctx.agentRuntimeChanges().describe(name));
+        return true;
+    }
+    if (req.method !== "POST") {
+        json(res, 405, { error: "Method not allowed" });
+        return true;
+    }
+    void (async () => {
+        try {
+            const raw = await readBoundedWebBody(req, 4096);
+            if (!allowed()) {
+                json(res, 403, { error: "Authorization expired" });
+                return;
+            }
+            if (req.aborted || res.destroyed)
+                return;
+            const input = JSON.parse(raw.toString("utf8")), result = await ctx.agentRuntimeChanges().change(name, input, allowed);
+            json(res, 200, result);
+        }
+        catch (error) {
+            json(res, allowed() ? 409 : 403, { error: allowed() ? (error instanceof Error ? error.message : "Could not change Runtime") : "Authorization expired" });
+        }
+    })();
+    return true;
+}
+//# sourceMappingURL=agent-runtime-api.js.map

package/dist/agent-runtime-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runtime-api.js","sourceRoot":"","sources":["../src/agent-runtime-api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,kBAAkB,EAAC,MAAM,eAAe,CAAC;AACjD,OAAO,EAAC,sBAAsB,EAAC,MAAM,sBAAsB,CAAC;AAC5D,SAAS,IAAI,CAAC,GAAkB,EAAC,MAAa,EAAC,KAAa,IAAE,IAAG,CAAC,GAAG,CAAC,SAAS,IAAE,CAAC,GAAG,CAAC,aAAa,EAAC,CAAC;IAAA,GAAG,CAAC,SAAS,CAAC,MAAM,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC,eAAe,EAAC,UAAU,EAAC,CAAC,CAAC;IAAA,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAAC,CAAA,CAAC;AAC3N,4FAA4F;AAC5F,MAAM,UAAU,wBAAwB,CAAC,GAAmB,EAAC,GAAkB,EAAC,GAAO,EAAC,GAAiB;IACxG,MAAM,KAAK,GAAC,qCAAqC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAAA,IAAG,CAAC,KAAK;QAAC,OAAO,KAAK,CAAC;IAC5F,MAAM,OAAO,GAAC,GAAE,EAAE,CAAA,sBAAsB,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,CAAC,CAAC;IAAA,IAAG,CAAC,OAAO,EAAE,EAAC,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,mDAAmD,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC5J,IAAI,IAAW,CAAC;IAAA,IAAG,CAAC;QAAA,IAAI,GAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,oBAAoB,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IACrH,IAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,IAAE,EAAE,EAAC,IAAI,CAAC,EAAC,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,iBAAiB,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC7G,IAAG,CAAC,GAAG,CAAC,mBAAmB,EAAC,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,8CAA8C,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC/G,IAAG,GAAG,CAAC,MAAM,KAAG,KAAK,EAAC,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAC3F,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM,EAAC,CAAC;QAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,oBAAoB,EAAC,CAAC,CAAC;QAAA,OAAO,IAAI,CAAC;IAAA,CAAC;IAChF,KAAI,CAAC,KAAK,IAAE,EAAE;QACb,IAAG,CAAC;YACH,MAAM,GAAG,GAAC,MAAM,kBAAkB,CAAC,GAAG,EAAC,IAAI,CAAC,CAAC;YAAA,IAAG,CAAC,OAAO,EAAE,EAAC,CAAC;gBAAA,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,EAAC,KAAK,EAAC,uBAAuB,EAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAClH,IAAG,GAAG,CAAC,OAAO,IAAE,GAAG,CAAC,SAAS;gBAAC,OAAO;YACrC,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAC,MAAM,GAAC,MAAM,GAAG,CAAC,mBAAoB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAC,KAAK,EAAC,OAAO,CAAC,CAAC;YAChH,IAAI,CAAC,GAAG,EAAC,GAAG,EAAC,MAAM,CAAC,CAAC;QACtB,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAI,CAAC,GAAG,EAAC,OAAO,EAAE,CAAA,CAAC,CAAA,GAAG,CAAA,CAAC,CAAA,GAAG,EAAC,EAAC,KAAK,EAAC,OAAO,EAAE,CAAA,CAAC,CAAA,CAAC,KAAK,YAAY,KAAK,CAAA,CAAC,CAAA,KAAK,CAAC,OAAO,CAAA,CAAC,CAAA,0BAA0B,CAAC,CAAA,CAAC,CAAA,uBAAuB,EAAC,CAAC,CAAC;QAAA,CAAC;IACxJ,CAAC,CAAC,EAAE,CAAC;IAAA,OAAO,IAAI,CAAC;AAClB,CAAC"}

package/dist/agent-runtime-change.d.ts

@@ -0,0 +1,76 @@
+/** Administrator-only moves of one Fleet identity. Provider sessions never cross machines or providers. */
+import { z } from "zod";
+import type { InstanceConfig } from "./types.js";
+export declare const AgentRuntimeChangeInput: z.ZodObject<{
+    requestId: z.ZodString;
+    expectedRevision: z.ZodString;
+    runtime: z.ZodEnum<{
+        windows: "windows";
+        wsl: "wsl";
+    }>;
+    machineId: z.ZodOptional<z.ZodString>;
+    backend: z.ZodEnum<{
+        antigravity: "antigravity";
+        "claude-code": "claude-code";
+        codex: "codex";
+        grok: "grok";
+        "kiro-cli": "kiro-cli";
+        muse: "muse";
+        opencode: "opencode";
+    }>;
+    model: z.ZodDefault<z.ZodString>;
+    directory: z.ZodDefault<z.ZodString>;
+    sandbox: z.ZodDefault<z.ZodEnum<{
+        "read-only": "read-only";
+        "workspace-write": "workspace-write";
+    }>>;
+    adapter: z.ZodDefault<z.ZodEnum<{
+        exec: "exec";
+        pane: "pane";
+    }>>;
+    startNewConversation: z.ZodLiteral<true>;
+    credentialProfile: z.ZodOptional<z.ZodString & z.ZodType<string, string, z.core.$ZodTypeInternals<string, string>>>;
+}, z.core.$strict>;
+export declare const GENERAL_USES_LOCATION_SWITCH = "General is moved from Settings \u2192 Shared agent settings \u2192 General location, not from Runtime settings";
+export type AgentRuntimeTarget = z.infer<typeof AgentRuntimeChangeInput>;
+export interface PreparedAgentRuntime {
+    config: InstanceConfig;
+    discard(): void;
+    current?(): boolean;
+}
+export interface AgentRuntimeChangeHost {
+    config(name: string): InstanceConfig | undefined;
+    defaults(): unknown;
+    generation(name: string): unknown;
+    epoch(name: string): number;
+    backendState?(name: string, backend: string): string | undefined;
+    transition<T>(name: string, run: (stop: () => Promise<void>) => Promise<T>): Promise<T>;
+    /** Must reject busy, queued and unknown source work, including retained native owners. */
+    idle(name: string): boolean;
+    prepare(name: string, before: InstanceConfig, target: AgentRuntimeTarget, current: () => boolean): Promise<PreparedAgentRuntime>;
+    closed(name: string, before: InstanceConfig): Promise<boolean>;
+    /** Prepare fresh-session pointers without erasing provider history; returns a rollback for an unsaved change. */
+    fresh(name: string, requestId: string): () => void;
+    save(name: string, before: InstanceConfig, next: InstanceConfig): void;
+    changed(name: string): void;
+}
+export declare class AgentRuntimeChanges {
+    private readonly host;
+    private attempts;
+    constructor(host: AgentRuntimeChangeHost);
+    private isGeneral;
+    describe(name: string): {
+        revision: string;
+        runtime: string;
+        machineId: string | undefined;
+        backend: string;
+        backendState: string | undefined;
+        directory: string;
+        model: string;
+        general: boolean;
+        adapter: "exec" | "pane";
+        sandbox: "read-only" | "workspace-write";
+        credentialProfile: string | undefined;
+    };
+    change(name: string, raw: unknown, authorized: () => boolean): Promise<unknown>;
+}

package/dist/agent-runtime-change.js

@@ -0,0 +1,114 @@
+/** Administrator-only moves of one Fleet identity. Provider sessions never cross machines or providers. */
+import { z } from "zod";
+import { settingsFingerprint } from "./settings-transaction.js";
+import { validCredentialProfileName } from "./runtime-credential-profiles.js";
+import { isWindowsInstance, nativeCredentialProfile } from "./native-instance-registry.js";
+export const AgentRuntimeChangeInput = z.object({
+    requestId: z.string().uuid(), expectedRevision: z.string().regex(/^[a-f0-9]{64}$/),
+    runtime: z.enum(["wsl", "windows"]), machineId: z.string().uuid().optional(),
+    backend: z.enum(["claude-code", "codex", "opencode", "kiro-cli", "antigravity", "grok", "muse"]),
+    model: z.string().max(160).default(""), directory: z.string().max(1024).default(""),
+    sandbox: z.enum(["read-only", "workspace-write"]).default("read-only"),
+    adapter: z.enum(["exec", "pane"]).default("exec"), startNewConversation: z.literal(true),
+    /** A NAME only (a Claude sign-in kept on the chosen Runtime computer). Never a path: the Runtime maps it to its own folder. */
+    credentialProfile: z.string().max(64).refine(validCredentialProfileName, "Invalid credential profile name").optional(),
+}).strict().superRefine((value, ctx) => {
+    if (value.credentialProfile && (value.runtime !== "windows" || !value.machineId || value.backend !== "claude-code"))
+        ctx.addIssue({ code: "custom", message: "A credential profile is a Claude Code sign-in kept on a paired Runtime computer" });
+    if (value.runtime === "wsl" && (value.machineId || value.adapter !== "exec"))
+        ctx.addIssue({ code: "custom", message: "Choose the Fleet host for a WSL/Linux agent" });
+    if (value.runtime === "windows" && value.adapter === "pane" && !['codex', 'claude-code'].includes(value.backend))
+        ctx.addIssue({ code: "custom", message: "Persistent Windows terminals support Codex and Claude Code" });
+});
+export const GENERAL_USES_LOCATION_SWITCH = "General is moved from Settings → Shared agent settings → General location, not from Runtime settings";
+export class AgentRuntimeChanges {
+    host;
+    attempts = new Map();
+    constructor(host) {
+        this.host = host;
+    }
+    isGeneral(name, config) { return config?.general_topic === true || name === "general"; }
+    describe(name) {
+        const config = this.host.config(name);
+        if (!config)
+            throw Error("Agent not found");
+        const backend = config.backend || this.host.defaults()?.backend || "claude-code";
+        return { revision: settingsFingerprint([config, this.host.defaults(), this.host.generation(name), this.host.epoch(name)]),
+            runtime: config.runtime === "windows" ? "windows" : "wsl", machineId: config.machine_id, backend, backendState: this.host.backendState?.(name, backend),
+            directory: config.working_directory, model: config.model ?? "", general: this.isGeneral(name, config), adapter: config.native_adapter ?? "exec", sandbox: config.native_sandbox ?? "read-only",
+            credentialProfile: (() => { try {
+                return isWindowsInstance(config) ? nativeCredentialProfile(config) : undefined;
+            }
+            catch {
+                return undefined;
+            } })() };
+    }
+    change(name, raw, authorized) {
+        const target = AgentRuntimeChangeInput.parse(raw), digest = settingsFingerprint(target), old = this.attempts.get(name);
+        if (!authorized())
+            throw Error("Runtime change requires a current dashboard administrator");
+        // General's location has its own journalled switch (Shared agent settings → General location, #3036): it holds deliveries,
+        // confirms the old host exited and clears the Linux-only fields. This path does none of that, so it is not offered.
+        if (this.isGeneral(name, this.host.config(name)))
+            throw Error(GENERAL_USES_LOCATION_SWITCH);
+        if (old?.id === target.requestId) {
+            if (old.digest !== digest)
+                throw Error("Runtime request ID belongs to another change");
+            return old.result;
+        }
+        if (old?.pending)
+            throw Error("A Runtime change is already in progress for this Agent");
+        if (this.describe(name).revision !== target.expectedRevision)
+            throw Error("Agent settings changed; reopen Runtime settings before switching");
+        // One synchronous claim per Agent before preparation, transition queueing or workspace allocation.
+        const attempt = { id: target.requestId, digest, pending: true, result: null };
+        this.attempts.set(name, attempt);
+        attempt.result = Promise.resolve().then(() => this.host.transition(name, async (stop) => {
+            if (this.describe(name).revision !== target.expectedRevision)
+                throw Error("Agent settings changed while waiting to switch Runtime");
+            const before = this.host.config(name), baseline = settingsFingerprint([this.host.defaults(), this.host.generation(name)]);
+            let epoch = this.host.epoch(name), revoked = false, prepared;
+            const current = () => {
+                if (revoked)
+                    return false;
+                if (!authorized() || this.host.config(name) !== before || this.host.epoch(name) !== epoch || settingsFingerprint([this.host.defaults(), this.host.generation(name)]) !== baseline || !this.host.idle(name) || prepared?.current?.() === false)
+                    revoked = true;
+                return !revoked;
+            };
+            if (!current())
+                throw Error("Wait for this Agent and its queued work to finish before switching Runtime");
+            let undoSession, saved = false;
+            try {
+                prepared = await this.host.prepare(name, before, target, current);
+                if (!current())
+                    throw Error("Runtime change was revoked or the Agent became busy during preparation");
+                // stop() owns exactly one epoch advance, even for the exec adapter. Any other advance permanently revokes us.
+                epoch++;
+                await stop();
+                if (!current())
+                    throw Error("Runtime change lost its source owner while stopping the old CLI");
+                if (!await this.host.closed(name, before))
+                    throw Error("The old CLI exit is unconfirmed; Runtime settings were not changed");
+                if (!current())
+                    throw Error("Runtime change was revoked while checking the old CLI exit");
+                if (target.runtime === "wsl")
+                    undoSession = this.host.fresh(name, target.requestId);
+                if (!current())
+                    throw Error("Runtime change authority expired before saving");
+                this.host.save(name, before, prepared.config);
+                saved = true;
+                this.host.changed(name);
+                return { ok: true, name, runtime: target.runtime, machineId: target.machineId, backend: target.backend, started: false, historyPreserved: true };
+            }
+            catch (error) {
+                if (!saved) {
+                    undoSession?.();
+                    prepared?.discard();
+                }
+                throw error;
+            }
+        })).finally(() => { attempt.pending = false; });
+        return attempt.result;
+    }
+}
+//# sourceMappingURL=agent-runtime-change.js.map

package/dist/agent-runtime-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-runtime-change.js","sourceRoot":"","sources":["../src/agent-runtime-change.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAE3F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,gBAAgB,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChF,OAAO,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAC,SAAS,CAAC,CAAC,EAAE,SAAS,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACzE,OAAO,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAC,OAAO,EAAC,UAAU,EAAC,UAAU,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IACzF,KAAK,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,SAAS,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjF,OAAO,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACpE,OAAO,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACrF,+HAA+H;IAC/H,iBAAiB,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,0BAA0B,EAAC,iCAAiC,CAAC,CAAC,QAAQ,EAAE;CACrH,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE;IACnC,IAAG,KAAK,CAAC,iBAAiB,IAAE,CAAC,KAAK,CAAC,OAAO,KAAG,SAAS,IAAE,CAAC,KAAK,CAAC,SAAS,IAAE,KAAK,CAAC,OAAO,KAAG,aAAa,CAAC;QAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,iFAAiF,EAAC,CAAC,CAAC;IACjO,IAAG,KAAK,CAAC,OAAO,KAAG,KAAK,IAAE,CAAC,KAAK,CAAC,SAAS,IAAE,KAAK,CAAC,OAAO,KAAG,MAAM,CAAC;QAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,6CAA6C,EAAC,CAAC,CAAC;IACxJ,IAAG,KAAK,CAAC,OAAO,KAAG,SAAS,IAAE,KAAK,CAAC,OAAO,KAAG,MAAM,IAAE,CAAC,CAAC,OAAO,EAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAC,GAAG,CAAC,QAAQ,CAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,4DAA4D,EAAC,CAAC,CAAC;AAC5M,CAAC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAC,sGAAsG,CAAC;AAmBjJ,MAAM,OAAO,mBAAmB;IAED,IAAI;IADzB,QAAQ,GAAC,IAAI,GAAG,EAA4E,CAAC;IACrG,YAA6B,IAA2B;oBAA3B,IAAI;IAAyB,CAAC;IACnD,SAAS,CAAC,IAAW,EAAC,MAA+B,IAAE,OAAO,MAAM,EAAE,aAAa,KAAG,IAAI,IAAE,IAAI,KAAG,SAAS,CAAC,CAAA,CAAC;IACtH,QAAQ,CAAC,IAAW;QAClB,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAA,IAAG,CAAC,MAAM;YAAC,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAC,MAAM,CAAC,OAAO,IAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAkC,EAAE,OAAO,IAAE,aAAa,CAAC;QAC5G,OAAO,EAAC,QAAQ,EAAC,mBAAmB,CAAC,CAAC,MAAM,EAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAClH,OAAO,EAAC,MAAM,CAAC,OAAO,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,KAAK,EAAC,SAAS,EAAC,MAAM,CAAC,UAAU,EAAC,OAAO,EAAC,YAAY,EAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,EAAC,OAAO,CAAC;YAC1I,SAAS,EAAC,MAAM,CAAC,iBAAiB,EAAC,KAAK,EAAC,MAAM,CAAC,KAAK,IAAE,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAC,MAAM,CAAC,EAAC,OAAO,EAAC,MAAM,CAAC,cAAc,IAAE,MAAM,EAAC,OAAO,EAAC,MAAM,CAAC,cAAc,IAAE,WAAW;YAC9K,iBAAiB,EAAC,CAAC,GAAE,EAAE,GAAC,IAAG,CAAC;gBAAA,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,uBAAuB,CAAC,MAAM,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC;YAAA,CAAC;YAAA,MAAK,CAAC;gBAAA,OAAO,SAAS,CAAC;YAAA,CAAC,CAAA,CAAC,CAAC,EAAE,EAAC,CAAC;IAC1I,CAAC;IACD,MAAM,CAAC,IAAW,EAAC,GAAW,EAAC,UAAsB;QACnD,MAAM,MAAM,GAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAC,MAAM,GAAC,mBAAmB,CAAC,MAAM,CAAC,EAAC,GAAG,GAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/G,IAAG,CAAC,UAAU,EAAE;YAAC,MAAM,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC1F,2HAA2H;QAC3H,oHAAoH;QACpH,IAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACzF,IAAG,GAAG,EAAE,EAAE,KAAG,MAAM,CAAC,SAAS,EAAC,CAAC;YAAA,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM;gBAAC,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAAA,OAAO,GAAG,CAAC,MAAM,CAAC;QAAA,CAAC;QACrI,IAAG,GAAG,EAAE,OAAO;YAAC,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACtF,IAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAG,MAAM,CAAC,gBAAgB;YAAC,MAAM,KAAK,CAAC,kEAAkE,CAAC,CAAC;QAC1I,mGAAmG;QACnG,MAAM,OAAO,GAAC,EAAC,EAAE,EAAC,MAAM,CAAC,SAAS,EAAC,MAAM,EAAC,OAAO,EAAC,IAAI,EAAC,MAAM,EAAC,IAAmC,EAAC,CAAC;QACnG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAC,OAAO,CAAC,CAAC;QAChC,OAAO,CAAC,MAAM,GAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAC,KAAK,EAAC,IAAI,EAAA,EAAE;YAC9E,IAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAG,MAAM,CAAC,gBAAgB;gBAAC,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAChI,MAAM,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAE,EAAC,QAAQ,GAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,IAAI,KAAK,GAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAC,OAAO,GAAC,KAAK,EAAC,QAAuC,CAAC;YAC3M,MAAM,OAAO,GAAC,GAAE,EAAE;gBAChB,IAAG,OAAO;oBAAC,OAAO,KAAK,CAAC;gBACxB,IAAG,CAAC,UAAU,EAAE,IAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAG,MAAM,IAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAG,KAAK,IAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAG,QAAQ,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAG,KAAK;oBAAC,OAAO,GAAC,IAAI,CAAC;gBACvO,OAAO,CAAC,OAAO,CAAC;YAClB,CAAC,CAAC;YACF,IAAG,CAAC,OAAO,EAAE;gBAAC,MAAM,KAAK,CAAC,4EAA4E,CAAC,CAAC;YACxG,IAAI,WAAgC,EAAC,KAAK,GAAC,KAAK,CAAC;YACjD,IAAG,CAAC;gBACF,QAAQ,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,CAAC,CAAC;gBAC7D,IAAG,CAAC,OAAO,EAAE;oBAAC,MAAM,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBACpG,8GAA8G;gBAC9G,KAAK,EAAE,CAAC;gBAAA,MAAM,IAAI,EAAE,CAAC;gBACrB,IAAG,CAAC,OAAO,EAAE;oBAAC,MAAM,KAAK,CAAC,iEAAiE,CAAC,CAAC;gBAC7F,IAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAC,MAAM,CAAC;oBAAC,MAAM,KAAK,CAAC,oEAAoE,CAAC,CAAC;gBAC1H,IAAG,CAAC,OAAO,EAAE;oBAAC,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBACxF,IAAG,MAAM,CAAC,OAAO,KAAG,KAAK;oBAAC,WAAW,GAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC7E,IAAG,CAAC,OAAO,EAAE;oBAAC,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAC;gBAC5E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAAA,KAAK,GAAC,IAAI,CAAC;gBACvD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACxB,OAAO,EAAC,EAAE,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,SAAS,EAAC,MAAM,CAAC,SAAS,EAAC,OAAO,EAAC,MAAM,CAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,gBAAgB,EAAC,IAAI,EAAC,CAAC;YACrI,CAAC;YAAA,OAAM,KAAK,EAAC,CAAC;gBACZ,IAAG,CAAC,KAAK,EAAC,CAAC;oBAAA,WAAW,EAAE,EAAE,CAAC;oBAAA,QAAQ,EAAE,OAAO,EAAE,CAAC;gBAAA,CAAC;gBAChD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAE,EAAE,GAAC,OAAO,CAAC,OAAO,GAAC,KAAK,CAAC,CAAA,CAAC,CAAC,CAAC;QAC1C,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;CACF"}

package/dist/agent-workspace.d.ts

@@ -0,0 +1,93 @@
+export declare const WORKSPACE_LIMITS: Readonly<{
+    fileBytes: number;
+    diffBytes: number;
+    diffFiles: 500;
+    /** One file's share of the diff: a bigger one is listed as "too large to show" (the others still fit). */
+    fileDiffBytes: number;
+    dirEntries: 1000;
+    untrackedDiffFiles: 50;
+    gitTimeoutMs: 10000;
+}>;
+/** Whether a path (relative, `/`-separated) is hidden: any part a hidden directory, or its name a secret-looking file. */
+export declare function isHiddenPath(rel: string): boolean;
+export type WorkspaceRefusal = "not_found" | "not_a_directory" | "outside" | "hidden" | "symlink" | "not_a_file" | "invalid";
+export declare class WorkspaceError extends Error {
+    readonly code: WorkspaceRefusal;
+    constructor(code: WorkspaceRefusal);
+}
+export interface WorkspaceRoot {
+    root: string;
+    state: string | null;
+}
+/** The agent's folder (realpath) and AgEnD's state directory, when it is inside the folder. */
+export declare function workspaceRoot(workingDirectory: string, agendHome: string): Promise<WorkspaceRoot>;
+/**
+ * A request's relative path → its place under the root, refused when it is not plainly inside: no absolute path, no
+ * `..`, no NUL or control characters; and no part of it (or the place itself, via realpath) outside the root or in
+ * AgEnD's state. `allowRoot`: the empty path is the root itself (a directory listing).
+ */
+export declare function placeOf(ws: WorkspaceRoot, rel: unknown, allowRoot?: boolean): Promise<{
+    abs: string;
+    rel: string;
+}>;
+export interface WorkspaceChange {
+    path: string;
+    status: string;
+    adds: number | null;
+    dels: number | null;
+    binary: boolean;
+    hidden: boolean;
+    untracked: boolean;
+    tooLarge?: boolean;
+}
+export interface WorkspaceChanges {
+    repo: boolean;
+    branch: string | null;
+    files: WorkspaceChange[];
+    patch: string;
+    cut: {
+        files: boolean;
+        bytes: boolean;
+    };
+    hiddenCount: number;
+}
+/**
+ * Changes: git status plus the diff of everything uncommitted against HEAD (staged and unstaged together, P1), and the
+ * untracked files git does not ignore, as additions. Hidden files are listed without their diff.
+ */
+export declare function workspaceChanges(ws: WorkspaceRoot): Promise<WorkspaceChanges>;
+export interface WorkspaceEntry {
+    name: string;
+    type: "dir" | "file" | "symlink" | "other";
+    size: number | null;
+    hidden: boolean;
+}
+/** One directory's entries (directories first, then names), gitignored ones left out in a repository. */
+export declare function workspaceList(ws: WorkspaceRoot, rel: unknown): Promise<{
+    path: string;
+    entries: WorkspaceEntry[];
+    cut: boolean;
+}>;
+export type WorkspaceFile = {
+    kind: "text";
+    path: string;
+    size: number;
+    text: string;
+} | {
+    kind: "image";
+    path: string;
+    size: number;
+    mime: string;
+} | {
+    kind: "binary" | "too_large";
+    path: string;
+    size: number;
+};
+/** A file as the viewer shows it: text (UTF-8, up to 1 MiB), an image (served raw by `workspaceImage`), or why not. */
+export declare function workspaceFile(ws: WorkspaceRoot, rel: unknown): Promise<WorkspaceFile>;
+/** An image's bytes for the viewer's <img> (a known image extension only, at most 8 MiB). */
+export declare function workspaceImage(ws: WorkspaceRoot, rel: unknown): Promise<{
+    mime: string;
+    bytes: Buffer;
+}>;
+export declare const workspaceName: (rel: string) => string;