@synap-core/cli 1.8.0 → 1.11.0

package/dist/lib/project-ref.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Project-ref resolution — the ONE door (P4-lite W3).
+ *
+ * A project ref can name a project on ANY pod the user can see, resolved via
+ * the Control Plane directory (`GET /projects/resolve?ref=`). Every command
+ * that accepts a project ref parses + resolves it HERE — no second ref parser
+ * anywhere.
+ *
+ * Ref forms (ratified):
+ *   - uuid                      → local: today's behavior, pinned against the active pod
+ *   - `<pod-subdomain>/<slug>`  → canonical cross-pod form (e.g. perso/synap)
+ *   - bare `<slug>`             → resolved when unique across visible pods; 300-ambiguous otherwise
+ *
+ * The directory is an ACCELERATOR, not a dependency: CP unreachable, not
+ * logged in, or 404 all degrade to a graceful message — the uuid path never
+ * touches the CP and keeps working.
+ */
+export type ParsedProjectRef = {
+    kind: "uuid";
+    id: string;
+} | {
+    kind: "fq";
+    pod: string;
+    slug: string;
+} | {
+    kind: "slug";
+    slug: string;
+} | {
+    kind: "invalid";
+    reason: string;
+};
+export declare function parseProjectRef(raw: string): ParsedProjectRef;
+/** One resolved project, as the CP directory returns it (200). */
+export interface CpProjectResolution {
+    projectId: string;
+    /** Nullable in the CP mirror (pre-slug rows); render with a fallback. */
+    slug: string | null;
+    name: string;
+    podId: string;
+    podUrl: string;
+    grant?: unknown;
+}
+/** A 300-ambiguous candidate — same shape, rendered as `pod/slug` hints. */
+export type CpProjectCandidate = Partial<CpProjectResolution>;
+export type ProjectRefResolution = 
+/** uuid ref — no CP involved; caller keeps today's active-pod behavior. */
+{
+    kind: "local";
+    projectId: string;
+} | {
+    kind: "resolved";
+    project: CpProjectResolution;
+    refPod?: string;
+} | {
+    kind: "ambiguous";
+    candidates: CpProjectCandidate[];
+} | {
+    kind: "not-found";
+    ref: string;
+} | {
+    kind: "not-active";
+    ref: string;
+    status: string;
+} | {
+    kind: "not-logged-in";
+} | {
+    kind: "cp-error";
+    message: string;
+} | {
+    kind: "invalid";
+    reason: string;
+};
+/** Injectable seams for tests — production callers pass nothing. */
+export interface ResolveDeps {
+    fetchImpl?: typeof fetch;
+    getToken?: () => {
+        token: string;
+    } | null;
+    cpUrl?: string;
+}
+/**
+ * Resolve a project ref. uuid short-circuits to `local` (today's behavior);
+ * everything else goes through the CP directory with the CLI's CP credentials.
+ */
+export declare function resolveProjectRef(raw: string, deps?: ResolveDeps): Promise<ProjectRefResolution>;
+/** True when two pod URLs name the same origin (scheme+host+port). */
+export declare function samePodOrigin(a: string | undefined, b: string | undefined): boolean;
+/**
+ * Session-lens guard: the per-Claude-session lens has NO pod field, so a
+ * `--session` pin can only target a project on the ACTIVE pod. Returns the
+ * refusal message for a cross-pod ref, or null when the pin is allowed.
+ */
+export declare function sessionScopeRefusal(project: CpProjectResolution, activePodUrl: string | undefined): string | null;
+/** `pod/slug` label for a candidate row, degrading to whatever fields exist. */
+export declare function candidateLabel(c: CpProjectCandidate): string;

package/dist/lib/project-ref.js

@@ -0,0 +1,144 @@
+/**
+ * Project-ref resolution — the ONE door (P4-lite W3).
+ *
+ * A project ref can name a project on ANY pod the user can see, resolved via
+ * the Control Plane directory (`GET /projects/resolve?ref=`). Every command
+ * that accepts a project ref parses + resolves it HERE — no second ref parser
+ * anywhere.
+ *
+ * Ref forms (ratified):
+ *   - uuid                      → local: today's behavior, pinned against the active pod
+ *   - `<pod-subdomain>/<slug>`  → canonical cross-pod form (e.g. perso/synap)
+ *   - bare `<slug>`             → resolved when unique across visible pods; 300-ambiguous otherwise
+ *
+ * The directory is an ACCELERATOR, not a dependency: CP unreachable, not
+ * logged in, or 404 all degrade to a graceful message — the uuid path never
+ * touches the CP and keeps working.
+ */
+import { getStoredToken, getCpUrl } from "./auth.js";
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Pod subdomains and project slugs: alphanum with internal `-`/`_`/`.`. */
+const PART_RE = /^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$/i;
+export function parseProjectRef(raw) {
+    const ref = raw.trim();
+    if (!ref)
+        return { kind: "invalid", reason: "empty project ref" };
+    if (UUID_RE.test(ref))
+        return { kind: "uuid", id: ref.toLowerCase() };
+    const parts = ref.split("/");
+    if (parts.length === 2) {
+        const [pod, slug] = parts;
+        if (!PART_RE.test(pod) || !PART_RE.test(slug)) {
+            return {
+                kind: "invalid",
+                reason: `"${ref}" is not a valid <pod>/<slug> ref (letters, digits, - _ . only)`,
+            };
+        }
+        return { kind: "fq", pod: pod.toLowerCase(), slug: slug.toLowerCase() };
+    }
+    if (parts.length > 2) {
+        return { kind: "invalid", reason: `"${ref}" has too many '/' — use <pod-subdomain>/<slug>` };
+    }
+    if (!PART_RE.test(ref)) {
+        return {
+            kind: "invalid",
+            reason: `"${ref}" is not a project uuid, slug, or <pod>/<slug> ref`,
+        };
+    }
+    return { kind: "slug", slug: ref.toLowerCase() };
+}
+/**
+ * Resolve a project ref. uuid short-circuits to `local` (today's behavior);
+ * everything else goes through the CP directory with the CLI's CP credentials.
+ */
+export async function resolveProjectRef(raw, deps = {}) {
+    const parsed = parseProjectRef(raw);
+    if (parsed.kind === "invalid")
+        return { kind: "invalid", reason: parsed.reason };
+    if (parsed.kind === "uuid")
+        return { kind: "local", projectId: parsed.id };
+    const creds = (deps.getToken ?? getStoredToken)();
+    if (!creds?.token)
+        return { kind: "not-logged-in" };
+    const cpUrl = deps.cpUrl ?? getCpUrl();
+    const fetchImpl = deps.fetchImpl ?? fetch;
+    const ref = parsed.kind === "fq" ? `${parsed.pod}/${parsed.slug}` : parsed.slug;
+    let res;
+    try {
+        res = await fetchImpl(`${cpUrl}/projects/resolve?ref=${encodeURIComponent(ref)}`, {
+            headers: { Authorization: `Bearer ${creds.token}` },
+            signal: AbortSignal.timeout(10_000),
+        });
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        return {
+            kind: "cp-error",
+            message: `could not reach the project directory at ${cpUrl} (${detail})`,
+        };
+    }
+    if (res.status === 300) {
+        const body = (await res.json().catch(() => null));
+        return { kind: "ambiguous", candidates: body?.candidates ?? [] };
+    }
+    if (res.status === 404) {
+        // The CP distinguishes "exists but archived/completed" from truly absent.
+        const body = (await res.json().catch(() => null));
+        if (body?.status)
+            return { kind: "not-active", ref, status: body.status };
+        return { kind: "not-found", ref };
+    }
+    if (res.status === 401 || res.status === 403)
+        return { kind: "not-logged-in" };
+    if (!res.ok) {
+        return { kind: "cp-error", message: `the project directory returned HTTP ${res.status}` };
+    }
+    const body = (await res.json().catch(() => null));
+    if (!body?.projectId || !body?.podUrl) {
+        return { kind: "cp-error", message: "the project directory returned an incomplete resolution" };
+    }
+    return {
+        kind: "resolved",
+        project: body,
+        refPod: parsed.kind === "fq" ? parsed.pod : undefined,
+    };
+}
+// ─── Helpers shared by callers ────────────────────────────────────────────────
+/** True when two pod URLs name the same origin (scheme+host+port). */
+export function samePodOrigin(a, b) {
+    if (!a || !b)
+        return false;
+    try {
+        return new URL(a).origin === new URL(b).origin;
+    }
+    catch {
+        return a === b;
+    }
+}
+/**
+ * Session-lens guard: the per-Claude-session lens has NO pod field, so a
+ * `--session` pin can only target a project on the ACTIVE pod. Returns the
+ * refusal message for a cross-pod ref, or null when the pin is allowed.
+ */
+export function sessionScopeRefusal(project, activePodUrl) {
+    if (samePodOrigin(activePodUrl, project.podUrl))
+        return null;
+    return (`--session scopes only this Claude session, and the session lens has no pod field — ` +
+        `it cannot bind a project on another pod (${project.podUrl}). ` +
+        `Re-run without --session to switch the active pod, or pick a project on the active pod.`);
+}
+/** `pod/slug` label for a candidate row, degrading to whatever fields exist. */
+export function candidateLabel(c) {
+    // The CP emits podUrl (never a subdomain field); derive the label from it.
+    let pod;
+    if (c.podUrl) {
+        try {
+            pod = new URL(c.podUrl).hostname;
+        }
+        catch {
+            pod = c.podUrl;
+        }
+    }
+    return `${pod ?? "?"}/${c.slug ?? c.projectId ?? "?"}`;
+}
+//# sourceMappingURL=project-ref.js.map

package/dist/lib/project-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-ref.js","sourceRoot":"","sources":["../../src/lib/project-ref.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAUrD,MAAM,OAAO,GACX,iEAAiE,CAAC;AAEpE,4EAA4E;AAC5E,MAAM,OAAO,GAAG,sCAAsC,CAAC;AAEvD,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAClE,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;IACtE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,IAAI,GAAG,iEAAiE;aACjF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,GAAG,iDAAiD,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,IAAI,GAAG,oDAAoD;SACpE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;AACnD,CAAC;AAoCD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAW,EACX,OAAoB,EAAE;IAEtB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACjF,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IAE3E,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,cAAc,CAAC,EAAE,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAEpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAEhF,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CACnB,GAAG,KAAK,yBAAyB,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAC1D;YACE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE;YACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,4CAA4C,KAAK,KAAK,MAAM,GAAG;SACzE,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAExC,CAAC;QACT,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,0EAA0E;QAC1E,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAExC,CAAC;QACT,IAAI,IAAI,EAAE,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1E,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IAC/E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,uCAAuC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA+B,CAAC;IAChF,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;IAClG,CAAC;IACD,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;KACtD,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,sEAAsE;AACtE,MAAM,UAAU,aAAa,CAAC,CAAqB,EAAE,CAAqB;IACxE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA4B,EAC5B,YAAgC;IAEhC,IAAI,aAAa,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,CACL,qFAAqF;QACrF,4CAA4C,OAAO,CAAC,MAAM,KAAK;QAC/D,yFAAyF,CAC1F,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,CAAqB;IAClD,2EAA2E;IAC3E,IAAI,GAAuB,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;AACzD,CAAC"}

package/dist/lib/project.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Project doors shared by `synap launch` and `synap market install`.
+ *
+ * The project is the cross-cutting lens both commands link installs to: launch
+ * stands up a NEW company under a project, market install ADDS a package into an
+ * existing (or the active) project. Both need the same two primitives — list the
+ * pod's projects, and create one — so they live here instead of being duplicated.
+ * The INTERACTIVE picking differs per command (launch weaves it into its guided
+ * flow; market offers a standalone "Add to which project?" with a pod-wide
+ * escape), so that stays in each command; only the data doors are shared.
+ */
+import { type HubConfig } from "./hub-client.js";
+export interface ProjectRef {
+    id: string;
+    name: string;
+}
+/**
+ * The pod's existing projects (`GET /projects`), normalized to `{id, name}`.
+ * Best-effort: an unreachable/erroring pod yields `[]` rather than throwing, so
+ * callers degrade to create-new / pod-wide instead of failing.
+ */
+export declare function fetchProjects(cfg: HubConfig): Promise<ProjectRef[]>;
+/**
+ * Create a project (`POST /projects`). Governance may answer with a proposal
+ * instead of creating directly — the caller distinguishes `id` (live) from
+ * `proposalId` (queued for review) and messages accordingly.
+ */
+export declare function createProject(cfg: HubConfig, input: {
+    name: string;
+    description?: string;
+}): Promise<{
+    id?: string;
+    proposalId?: string;
+    status?: string;
+}>;

package/dist/lib/project.js

@@ -0,0 +1,39 @@
+/**
+ * Project doors shared by `synap launch` and `synap market install`.
+ *
+ * The project is the cross-cutting lens both commands link installs to: launch
+ * stands up a NEW company under a project, market install ADDS a package into an
+ * existing (or the active) project. Both need the same two primitives — list the
+ * pod's projects, and create one — so they live here instead of being duplicated.
+ * The INTERACTIVE picking differs per command (launch weaves it into its guided
+ * flow; market offers a standalone "Add to which project?" with a pod-wide
+ * escape), so that stays in each command; only the data doors are shared.
+ */
+import { hubGet, hubPost } from "./hub-client.js";
+import { unwrapList } from "./unwrapList.js";
+/**
+ * The pod's existing projects (`GET /projects`), normalized to `{id, name}`.
+ * Best-effort: an unreachable/erroring pod yields `[]` rather than throwing, so
+ * callers degrade to create-new / pod-wide instead of failing.
+ */
+export async function fetchProjects(cfg) {
+    try {
+        const res = (await hubGet("/projects", {}, cfg));
+        const list = unwrapList(res, ["projects"]);
+        return list
+            .filter((p) => p.id)
+            .map((p) => ({ id: String(p.id), name: String(p.name ?? p.id) }));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Create a project (`POST /projects`). Governance may answer with a proposal
+ * instead of creating directly — the caller distinguishes `id` (live) from
+ * `proposalId` (queued for review) and messages accordingly.
+ */
+export async function createProject(cfg, input) {
+    return (await hubPost("/projects", { name: input.name, description: input.description || undefined, status: "active" }, cfg));
+}
+//# sourceMappingURL=project.js.map

package/dist/lib/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/lib/project.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAkB,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAO7C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAc;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,GAAG,CAAC,CAAY,CAAC;QAC5D,MAAM,IAAI,GAAG,UAAU,CAA0B,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACpE,OAAO,IAAI;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAc,EACd,KAA6C;IAE7C,OAAO,CAAC,MAAM,OAAO,CACnB,WAAW,EACX,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EACnF,GAAG,CACJ,CAA0D,CAAC;AAC9D,CAAC"}

package/dist/lib/session-lens.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Per-Claude-session lens registry.
+ *
+ * Claude Code assigns each session (each tab / instance) a stable
+ * `CLAUDE_CODE_SESSION_ID` — present BOTH in the bash env of the agent's
+ * commands AND in the JSON the statusline receives on stdin. That shared id
+ * lets us bind a per-session "lens" (which workspace / project / focus session
+ * this session is working through) without any backend change: the pod stays
+ * agnostic, the CLI layers session-scoped state on top.
+ *
+ * This is what makes concurrent Claude Code sessions independent — tab A on
+ * workspace Builder + session X, tab B on workspace Marketing + session Y —
+ * instead of all sharing one global `~/.synap/config.json` workspace.
+ *
+ * Registry: ~/.synap/lenses/<session_id>.json
+ * Resolution precedence (highest first): explicit flag > session lens >
+ *   env SYNAP_WORKSPACE_ID > global config activeWorkspaceId.
+ */
+export interface SessionLens {
+    workspaceId?: string;
+    projectId?: string;
+    focusSessionId?: string;
+    updatedAt?: number;
+}
+/** The current Claude Code session id, if we're running inside one. */
+export declare function getClaudeSessionId(): string | undefined;
+export declare function readLens(sessionId: string): SessionLens | null;
+/** Merge-write the lens for a session (creates the registry dir on demand). */
+export declare function writeLens(sessionId: string, patch: Partial<SessionLens>): SessionLens;
+/** Clear one field (or the whole lens) for a session. */
+export declare function clearLensField(sessionId: string, field?: keyof SessionLens): void;
+/** The active session's lens, or null if not in a Claude session / none set. */
+export declare function resolveActiveLens(): SessionLens | null;

package/dist/lib/session-lens.js

@@ -0,0 +1,76 @@
+/**
+ * Per-Claude-session lens registry.
+ *
+ * Claude Code assigns each session (each tab / instance) a stable
+ * `CLAUDE_CODE_SESSION_ID` — present BOTH in the bash env of the agent's
+ * commands AND in the JSON the statusline receives on stdin. That shared id
+ * lets us bind a per-session "lens" (which workspace / project / focus session
+ * this session is working through) without any backend change: the pod stays
+ * agnostic, the CLI layers session-scoped state on top.
+ *
+ * This is what makes concurrent Claude Code sessions independent — tab A on
+ * workspace Builder + session X, tab B on workspace Marketing + session Y —
+ * instead of all sharing one global `~/.synap/config.json` workspace.
+ *
+ * Registry: ~/.synap/lenses/<session_id>.json
+ * Resolution precedence (highest first): explicit flag > session lens >
+ *   env SYNAP_WORKSPACE_ID > global config activeWorkspaceId.
+ */
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+const LENS_DIR = path.join(os.homedir(), ".synap", "lenses");
+/** The current Claude Code session id, if we're running inside one. */
+export function getClaudeSessionId() {
+    // Set in the bash env of the agent's commands. The statusline gets the same
+    // id from stdin and forwards it via SYNAP_LENS_SESSION when it spawns the
+    // detached refresh (which has no Claude env of its own).
+    return process.env.SYNAP_LENS_SESSION || process.env.CLAUDE_CODE_SESSION_ID || undefined;
+}
+function lensPath(sessionId) {
+    // session ids are UUIDs — safe as filenames, but sanitize defensively.
+    const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
+    return path.join(LENS_DIR, `${safe}.json`);
+}
+export function readLens(sessionId) {
+    try {
+        return JSON.parse(fs.readFileSync(lensPath(sessionId), "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+/** Merge-write the lens for a session (creates the registry dir on demand). */
+export function writeLens(sessionId, patch) {
+    const prev = readLens(sessionId) ?? {};
+    const next = { ...prev, ...patch, updatedAt: Date.now() };
+    try {
+        fs.mkdirSync(LENS_DIR, { recursive: true, mode: 0o700 });
+        fs.writeFileSync(lensPath(sessionId), JSON.stringify(next, null, 2), { mode: 0o600 });
+    }
+    catch {
+        /* best-effort */
+    }
+    return next;
+}
+/** Clear one field (or the whole lens) for a session. */
+export function clearLensField(sessionId, field) {
+    const prev = readLens(sessionId);
+    if (!prev)
+        return;
+    if (!field) {
+        try {
+            fs.unlinkSync(lensPath(sessionId));
+        }
+        catch { }
+        return;
+    }
+    delete prev[field];
+    writeLens(sessionId, prev);
+}
+/** The active session's lens, or null if not in a Claude session / none set. */
+export function resolveActiveLens() {
+    const id = getClaudeSessionId();
+    return id ? readLens(id) : null;
+}
+//# sourceMappingURL=session-lens.js.map

package/dist/lib/session-lens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-lens.js","sourceRoot":"","sources":["../../src/lib/session-lens.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAS7D,uEAAuE;AACvE,MAAM,UAAU,kBAAkB;IAChC,4EAA4E;IAC5E,0EAA0E;IAC1E,yDAAyD;IACzD,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB;IACjC,uEAAuE;IACvE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,SAAiB;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAgB,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,SAAS,CAAC,SAAiB,EAAE,KAA2B;IACtE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,IAAI,GAAgB,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACvE,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,KAAyB;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACpD,OAAO;IACT,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB;IAC/B,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC"}

package/dist/lib/skill-import.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Skill import — read standard SKILL.md skill directories and push them to the pod.
+ *
+ * Follows the Agent Skills open standard (agentskills.io): a skill is a DIRECTORY
+ * with a `SKILL.md` at its root (YAML frontmatter + markdown body) and optional
+ * nested files/subdirs for reference docs, examples, templates, and code. Every
+ * non-SKILL.md file becomes a linked document (the agent reads them on demand via
+ * get_document). This is the same format Claude Code, Codex, Gemini CLI, Copilot
+ * and others use.
+ *
+ * The pod stores them via POST /agent-skills/import: the SKILL.md body becomes
+ * the instruction skill, every other file becomes a linked document.
+ */
+import { type HubConfig } from "./hub-client.js";
+export interface ParsedSkill {
+    slug: string;
+    name: string;
+    description: string;
+    body: string;
+    /** auto_load=true → always-loaded core DNA; false → on-demand (catalog + load_skill). */
+    autoLoad: boolean;
+    documents: Array<{
+        title: string;
+        content: string;
+        type: string;
+        language?: string;
+    }>;
+}
+/** Parse a single SKILL.md skill directory into an import payload. */
+export declare function parseSkillDir(dir: string): ParsedSkill | null;
+/** Find every skill directory (one containing SKILL.md) under a root, one level deep. */
+export declare function discoverSkillDirs(root: string): string[];
+export interface ImportResult {
+    slug: string;
+    status: "imported" | "exists" | "error";
+    docs: number;
+    error?: string;
+}
+/** Import a parsed skill into the pod via POST /agent-skills/import. */
+export declare function importSkill(parsed: ParsedSkill, userId: string, cfg: HubConfig): Promise<ImportResult>;