@synap-core/cli 1.8.0 → 1.11.0

package/node_modules/@synap/hub-rest-client/src/index.ts

@@ -48,6 +48,8 @@ export type {
   // Core entity types
   HubEntity,
   HubDocument,
+  HubDocumentChange,
+  HubDocumentProposalResult,
   HubChannel,
   HubWorkspace,
   HubWorkspacesListResponse,
@@ -68,6 +70,15 @@ export type {
   HubDiscoverResult,
   HubDiscoverProfile,
   HubDiscoverProperty,
+  HubDiscoverOptions,
+  HubOrientScope,
+  HubOrientDetail,
+  HubOrientProfile,
+  HubOrientWorkspace,
+  HubOrientProject,
+  HubOrientTeamRoster,
+  HubOrientResult,
+  HubOrientOptions,
   // Threads & Channels
   HubThread,
   HubMessage,
@@ -76,6 +87,7 @@ export type {
   HubProposal,
   // Views
   HubView,
+  HubBentoArrangementResult,
   // Search
   HubSearchResult,
   // Commands & Agents
@@ -85,11 +97,30 @@ export type {
   HubUserContext,
   // Governance
   HubGovernanceResult,
+  HubAttachFacetResult,
+  HubWriteReceipt,
+  HubWriteSource,
+  // Capabilities & teaching substrate
+  HubCapabilityVerb,
+  HubCapability,
+  HubCapabilityCatalogConnection,
+  HubCapabilityCatalogCard,
+  HubCapabilityCatalogResult,
+  HubRunnableCapabilityAction,
+  HubRunnableCapabilityActionsResult,
+  ExecuteCapabilityResult,
+  HubAgentSkill,
+  ListAgentSkillsOptions,
+  HubAgentSkillsResult,
+  GetCapabilityBriefsInput,
+  HubCapabilityBriefsResult,
   // Input types — Entity
   CreateEntityInput,
   UpdateEntityInput,
   // Input types — Documents
   CreateDocumentInput,
+  UpdateDocumentInput,
+  CreateDocumentProposalInput,
   // Input types — Memory
   StoreMemoryInput,
   // Input types — Channels
@@ -98,6 +129,9 @@ export type {
   CreateRelationInput,
   CreateThreadInput,
   CreateViewInput,
+  UpdateViewInput,
+  BentoWidgetInput,
+  ArrangeBentoViewInput,
   ExecuteCommandInput,
   // Setup
   AgentSetupResult,
@@ -108,4 +142,12 @@ export type {
   CaptureStructureResponse,
   CaptureExecuteInput,
   CaptureExecuteResponse,
+  CaptureGraphEntity,
+  CaptureGraphRelation,
+  CaptureGraphBinding,
+  CaptureGraphRawSource,
+  SubmitCaptureGraphInput,
+  SubmitCaptureGraphResult,
+  AskResponse,
+  AskAnswerBlock,
 } from "./types.js";

package/node_modules/@synap/hub-rest-client/src/setup.ts

@@ -4,6 +4,11 @@
  * These functions are the canonical implementations shared between
  * the Synap CLI and the Raycast extension. They use the native fetch API
  * and have zero Node.js-specific dependencies.
+ *
+ * ⚠️ `assertValidPodUrl` below is a DUPLICATE of the guard in
+ * `@synap-core/auth-bootstrap` (`src/url.ts`). It is copied, not imported,
+ * because this package is deliberately zero-dependency. The two copies must
+ * be kept in sync — change one, change the other.
  */
 
 import { HubApiError } from "./errors.js";
@@ -13,6 +18,52 @@ function normalizeUrl(url: string): string {
   return url.replace(/\/$/, "");
 }
 
+/** Shared per-request knobs for the credential-bearing bootstrap calls. */
+export interface BootstrapRequestOptions {
+  /** Allow `http://` pod URLs (localhost / local-mode dev only). */
+  allowHttp?: boolean;
+}
+
+/**
+ * Throws `HubApiError(status:0)` if `url` is not a valid http(s) pod origin:
+ * must parse, be `https:` (or `http:` when `allowHttp`), and carry no embedded
+ * credentials.
+ *
+ * `podUrl` is attacker-influenceable in multi-tenant / portal contexts, and the
+ * bootstrap helpers POST bearer tokens to it — so every credential-bearing call
+ * validates the URL first. Without this a caller could be coaxed into sending an
+ * issuer assertion or provisioning token to an arbitrary host.
+ *
+ * Kept in sync with `@synap-core/auth-bootstrap`'s `assertValidPodUrl`.
+ */
+function assertValidPodUrl(
+  url: string,
+  opts: BootstrapRequestOptions = {}
+): void {
+  let parsed: URL;
+  try {
+    parsed = new URL(url);
+  } catch {
+    throw new HubApiError(`Invalid pod URL: ${url}`, 0, {
+      code: "INVALID_POD_URL",
+    });
+  }
+  if (parsed.username || parsed.password) {
+    throw new HubApiError("Pod URL must not contain embedded credentials", 0, {
+      code: "INVALID_POD_URL",
+    });
+  }
+  const isHttps = parsed.protocol === "https:";
+  const isHttp = parsed.protocol === "http:";
+  if (!isHttps && !(isHttp && opts.allowHttp)) {
+    throw new HubApiError(
+      `Pod URL must use https:// (got ${parsed.protocol}//)`,
+      0,
+      { code: "INSECURE_POD_URL" }
+    );
+  }
+}
+
 /**
  * Check whether a Synap pod is healthy.
  * Hits `GET {podUrl}/health` with a 5s timeout.
@@ -50,8 +101,13 @@ export async function checkPodHealth(podUrl: string): Promise<PodStatus> {
 export async function setupAgent(
   podUrl: string,
   provisioningToken: string,
-  agentType = "openclaw"
+  // REQUIRED (was defaulted to "openclaw"). See auth-bootstrap/setup.ts — the
+  // default silently minted bare callers onto the pod-wide `openclaw` singleton
+  // (0037); required makes any omitter a compile error, never a silent shift.
+  agentType: string,
+  opts: BootstrapRequestOptions = {}
 ): Promise<AgentSetupResult> {
+  assertValidPodUrl(podUrl, { allowHttp: opts.allowHttp });
   const url = normalizeUrl(podUrl);
 
   const res = await fetch(`${url}/api/hub/setup/agent`, {