@tea-agent/loop-agent 0.43.0-next.4 → 0.43.0-next.5

package/dist/worker/console/chat/routes.js

@@ -16,6 +16,7 @@ import { randomUUID } from "node:crypto";
 import { access } from "node:fs/promises";
 import { parseAssistantContent } from "./assistant-content.js";
 import { OPERATOR_CHAT_ALLOWED_TOOLS, OPERATOR_CHAT_DENIED_TOOLS, OPERATOR_CHAT_DENIED_OPERATOR_ACTIONS, } from "./tools.js";
+import { InvalidChatSessionModeError, SESSION_MODE_ACTION_DENIED_CODE, SESSION_MODE_ACTION_DENIED_MESSAGE, SESSION_MODE_IMMUTABLE_CODE, UnknownChatSessionModeError, isWorkflowSessionMode, parseCreateSessionMode, readStoredSessionMode, shouldAcceptOperatorSnapshot, } from "./session-mode.js";
 import { buildModelCallableToolSchemas } from "./tool-adapter.js";
 import { cleanChatTitle, acceptedOperationIdFromResult, isBlankChatSession } from "./session-store.js";
 import { hashChatTurnPayload, projectChatToolEventPayload, projectCompactSnapshot, } from "./chat-event-store.js";
@@ -46,11 +47,77 @@ import { isTerminalOperationState } from "../../../infrastructure/console/operat
 import { SddDataAlignmentError, } from "./sdd-data-alignment.js";
 import { TerminalSessionRegistry } from "./terminal-sessions.js";
 import { handleTerminalRequest } from "./terminal-routes.js";
+import { handleScmRequest } from "./scm-routes.js";
 function projectBrowserChatSession(record) {
     const { telemetrySessionId, ...projected } = record;
     void telemetrySessionId;
     return projected;
 }
+function reopenInitFromRecord(record) {
+    return {
+        sessionId: record.sessionId,
+        sessionFile: record.sessionFile,
+        ...(record.modelProvider && record.modelId
+            ? { model: { provider: record.modelProvider, modelId: record.modelId } }
+            : {}),
+        sessionMode: record.sessionMode,
+    };
+}
+async function readChatSessionMode(deps, sessionId) {
+    let record;
+    try {
+        record = await deps.store.get(sessionId);
+    }
+    catch (error) {
+        if (error instanceof UnknownChatSessionModeError) {
+            return {
+                ok: false,
+                status: 409,
+                code: error.code,
+                message: error.message,
+            };
+        }
+        throw error;
+    }
+    if (!record) {
+        return {
+            ok: false,
+            status: 404,
+            code: "NOT_FOUND",
+            message: `chat session not found: ${sessionId}`,
+        };
+    }
+    // Normalize: the store contract always fills sessionMode, but handler-level
+    // fakes / partial records may omit it — treat missing as workflow (the
+    // stock-record read rule), while a present-but-unknown value still fails
+    // closed in the store layer.
+    return {
+        ok: true,
+        record,
+        sessionMode: readStoredSessionMode(record.sessionMode),
+    };
+}
+async function requireWorkflowSession(res, deps, sessionId) {
+    const resolved = await readChatSessionMode(deps, sessionId);
+    if (!resolved.ok) {
+        sendJson(res, resolved.status, {
+            ok: false,
+            error: { code: resolved.code, message: resolved.message },
+        });
+        return undefined;
+    }
+    if (!isWorkflowSessionMode(resolved.sessionMode)) {
+        sendJson(res, 409, {
+            ok: false,
+            error: {
+                code: SESSION_MODE_ACTION_DENIED_CODE,
+                message: SESSION_MODE_ACTION_DENIED_MESSAGE,
+            },
+        });
+        return undefined;
+    }
+    return resolved.record;
+}
 /**
  * Reattach the durable event-ring order to session-store rows. The session
  * store remains the content authority; the ring only supplies chronology.
@@ -567,6 +634,22 @@ workspaceId) {
         });
         return;
     }
+    let sessionMode;
+    try {
+        sessionMode = parseCreateSessionMode(body.sessionMode);
+    }
+    catch (error) {
+        sendJson(res, 400, {
+            ok: false,
+            error: {
+                code: error instanceof InvalidChatSessionModeError
+                    ? error.code
+                    : "INVALID_SESSION_MODE",
+                message: error instanceof Error ? error.message : String(error),
+            },
+        });
+        return;
+    }
     const provider = typeof body.modelProvider === "string" ? body.modelProvider : undefined;
     const modelId = typeof body.modelId === "string" ? body.modelId : undefined;
     const snapshotInput = body.snapshot;
@@ -588,6 +671,16 @@ workspaceId) {
     let createdSessionId;
     let persisted = false;
     try {
+        if (snapshotInput !== undefined && !shouldAcceptOperatorSnapshot(sessionMode)) {
+            sendJson(res, 409, {
+                ok: false,
+                error: {
+                    code: SESSION_MODE_ACTION_DENIED_CODE,
+                    message: "Operator snapshots cannot be imported into Pi sessions",
+                },
+            });
+            return;
+        }
         const snapshot = snapshotInput === undefined ? undefined : projectCompactSnapshot(snapshotInput);
         // A Console record promises that its Pi JSONL can be reopened after a
         // Console restart. Do not make that promise until Pi has finished
@@ -595,6 +688,7 @@ workspaceId) {
         // future JSONL path, leaving an unrecoverable orphan when init failed or
         // the process restarted in that window.
         const handle = await deps.runtime.createSession({
+            sessionMode,
             ...(provider && modelId ? { model: { provider, modelId } } : {}),
             ...(snapshot
                 ? {
@@ -621,6 +715,7 @@ workspaceId) {
             sessionFile: handle.sessionFile,
             modelProvider: selection.model?.provider ?? handle.model?.provider,
             modelId: selection.model?.modelId ?? handle.model?.modelId,
+            sessionMode,
             // AC-R7-002: explicit parameter from the dispatcher — the runtime
             // store.create wrapper is gone; body workspaceId (if any) only acts as
             // a fallback for direct (non-dispatcher) handler tests.
@@ -691,6 +786,7 @@ export async function handleForkChatSession(req, res, deps, sourceSessionId) {
     try {
         const handle = await deps.runtime.forkSession({
             sourceSessionFile: source.sessionFile ?? "",
+            sessionMode: source.sessionMode,
             ...(source.modelProvider && source.modelId
                 ? { model: { provider: source.modelProvider, modelId: source.modelId } }
                 : {}),
@@ -757,10 +853,7 @@ export async function handleBranchChatSession(req, res, deps, sessionId) {
     }
     try {
         if (!deps.runtime.hasSession(sessionId)) {
-            const reopened = await deps.runtime.reopenSession({
-                sessionId,
-                sessionFile: record.sessionFile,
-            });
+            const reopened = await deps.runtime.reopenSession(reopenInitFromRecord(record));
             if (!reopened.ok) {
                 const mapped = await mapFailedReopen(deps, sessionId, reopened);
                 sendJson(res, mapped.status, {
@@ -1233,13 +1326,8 @@ export async function handleChatGoal(req, res, deps, sessionId) {
         });
         return;
     }
-    if (!(await deps.store.get(sessionId))) {
-        sendJson(res, 404, {
-            ok: false,
-            error: { code: "NOT_FOUND", message: `chat session not found: ${sessionId}` },
-        });
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
-    }
     if (req.method === "GET") {
         sendJson(res, 200, { ok: true, goal: registry.get(sessionId) });
         return;
@@ -1453,6 +1541,7 @@ export async function listChatSessionSummaries(deps, ownerWorkspaceId) {
             ...(session.thinkingLevel !== undefined
                 ? { thinkingLevel: session.thinkingLevel }
                 : {}),
+            sessionMode: session.sessionMode,
             activeTurnId: active?.turnId,
             turnPhase: active?.abortRequestedAt
                 ? "stopping"
@@ -1476,6 +1565,16 @@ export async function handlePatchChatSession(req, res, deps, sessionId) {
     }
     try {
         const body = await readJsonBody(req);
+        if ("sessionMode" in body) {
+            sendJson(res, 409, {
+                ok: false,
+                error: {
+                    code: SESSION_MODE_IMMUTABLE_CODE,
+                    message: "sessionMode cannot be changed after create",
+                },
+            });
+            return;
+        }
         let record;
         if (typeof body.title === "string")
             record = await deps.store.rename(sessionId, body.title);
@@ -1534,13 +1633,7 @@ export async function handleReopenChatSession(req, res, deps, sessionId) {
         });
         return;
     }
-    const result = await deps.runtime.reopenSession({
-        sessionId,
-        sessionFile: record.sessionFile,
-        ...(record.modelProvider && record.modelId
-            ? { model: { provider: record.modelProvider, modelId: record.modelId } }
-            : {}),
-    });
+    const result = await deps.runtime.reopenSession(reopenInitFromRecord(record));
     if (!result.ok) {
         const mapped = await mapFailedReopen(deps, sessionId, result);
         sendJson(res, mapped.status, {
@@ -1620,13 +1713,7 @@ export async function handleChatPrompt(req, res, deps, sessionId) {
             });
             return;
         }
-        const reopen = await deps.runtime.reopenSession({
-            sessionId,
-            sessionFile: record.sessionFile,
-            ...(record.modelProvider && record.modelId
-                ? { model: { provider: record.modelProvider, modelId: record.modelId } }
-                : {}),
-        });
+        const reopen = await deps.runtime.reopenSession(reopenInitFromRecord(record));
         if (!reopen.ok) {
             const mapped = await mapFailedReopen(deps, sessionId, reopen);
             sendJson(res, mapped.status, {
@@ -1890,13 +1977,7 @@ export async function handleCreateChatTurn(req, res, deps, sessionId, trustedPay
             });
             return;
         }
-        const reopen = await deps.runtime.reopenSession({
-            sessionId,
-            sessionFile: record.sessionFile,
-            ...(record.modelProvider && record.modelId
-                ? { model: { provider: record.modelProvider, modelId: record.modelId } }
-                : {}),
-        });
+        const reopen = await deps.runtime.reopenSession(reopenInitFromRecord(record));
         if (!reopen.ok) {
             const mapped = await mapFailedReopen(deps, sessionId, reopen);
             sendJson(res, mapped.status, {
@@ -2174,6 +2255,10 @@ export async function driveGoalRound(deps, sessionId) {
         registry.disarm(sessionId);
         return "idle";
     }
+    if (!isWorkflowSessionMode(readStoredSessionMode(record.sessionMode))) {
+        registry.disarm(sessionId);
+        return "idle";
+    }
     const runtimeFacts = deps.runtime.getSessionBusyFacts(sessionId);
     const operationStore = deps.runtime.actionContext?.operations;
     const linkedOperationIds = linkedOperationIdsForGoal(deps.events.snapshot(sessionId));
@@ -2822,6 +2907,7 @@ export async function handleChatCommands(res, deps, sessionId) {
         const warning = typeof listed.warning === "string" && listed.warning.trim()
             ? listed.warning.trim().slice(0, 160)
             : undefined;
+        const resolvedMode = await readChatSessionMode(deps, sessionId);
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.end(JSON.stringify({
@@ -2829,18 +2915,25 @@ export async function handleChatCommands(res, deps, sessionId) {
             commands,
             capabilities: {
                 sddBingo: Boolean(await deps.sddDataAlignment?.isEligible()),
+                ...(resolvedMode.ok ? { sessionMode: resolvedMode.sessionMode } : {}),
             },
             ...(warning ? { warning } : {}),
         }));
     }
     catch (error) {
         // Whole-list / readiness failures stay fail-soft with empty commands + warning.
+        // Keep the two capability shapes symmetric: the fallback mode mirrors the
+        // client-side prop fallback in useComposer.
+        const fallbackMode = await readChatSessionMode(deps, sessionId).catch(() => undefined);
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.end(JSON.stringify({
             ok: true,
             commands: [],
-            capabilities: { sddBingo: false },
+            capabilities: {
+                sddBingo: false,
+                ...(fallbackMode?.ok ? { sessionMode: fallbackMode.sessionMode } : {}),
+            },
             warning: error instanceof Error ? error.message : "commands unavailable",
         }));
     }
@@ -3085,13 +3178,7 @@ export async function ensureActiveSession(deps, sessionId) {
             message: `chat session not found: ${sessionId}`,
         };
     }
-    const reopened = await deps.runtime.reopenSession({
-        sessionId,
-        sessionFile: record.sessionFile,
-        ...(record.modelProvider && record.modelId
-            ? { model: { provider: record.modelProvider, modelId: record.modelId } }
-            : {}),
-    });
+    const reopened = await deps.runtime.reopenSession(reopenInitFromRecord(record));
     if (!reopened.ok) {
         return { ok: false, ...(await mapFailedReopen(deps, sessionId, reopened)) };
     }
@@ -3420,7 +3507,7 @@ async function handleStartInterview(req, res, deps, sessionId) {
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     try {
         const body = await readJsonBody(req);
@@ -3462,7 +3549,7 @@ async function handleAnswerInterview(req, res, deps, sessionId, interviewSession
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     try {
         const body = await readJsonBody(req);
@@ -3498,7 +3585,7 @@ async function handleAnswerInterview(req, res, deps, sessionId, interviewSession
     }
 }
 async function handleGetInterviewFact(res, deps, sessionId, interviewSessionId, fact) {
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     const state = await new ChatInterviewAdapter(deps.appData, deps.events).get(interviewSessionId);
     if (!state || state.interview.operatorSessionId !== sessionId) {
@@ -3596,7 +3683,7 @@ async function handleContractApplyHumanGate(req, res, deps, sessionId, step) {
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     const ctx = deps.runtime.actionContext;
     if (!ctx) {
@@ -3778,7 +3865,7 @@ async function handleDagHumanGate(req, res, deps, sessionId, step) {
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     const ctx = deps.runtime.actionContext;
     if (!ctx) {
@@ -3887,7 +3974,7 @@ async function handleMutationHumanGate(req, res, deps, sessionId) {
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     const ctx = deps.runtime.actionContext;
     if (!ctx) {
@@ -3976,7 +4063,7 @@ async function handleConfirmTaskKind(req, res, deps, sessionId, interviewSession
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     try {
         const body = await readJsonBody(req);
@@ -4032,13 +4119,7 @@ export async function handleChatCompact(req, res, deps, sessionId) {
         return;
     }
     if (!deps.runtime.hasSession(sessionId)) {
-        const reopened = await deps.runtime.reopenSession({
-            sessionId,
-            sessionFile: record.sessionFile,
-            ...(record.modelProvider && record.modelId
-                ? { model: { provider: record.modelProvider, modelId: record.modelId } }
-                : {}),
-        });
+        const reopened = await deps.runtime.reopenSession(reopenInitFromRecord(record));
         if (!reopened.ok) {
             const mapped = await mapFailedReopen(deps, sessionId, reopened);
             sendJson(res, mapped.status, {
@@ -4062,7 +4143,9 @@ export async function handleChatCompact(req, res, deps, sessionId) {
     const rawInstructions = typeof body.instructions === "string" ? body.instructions : undefined;
     const currentTodos = projectCurrentTodos(deps.events.snapshot(sessionId));
     const todoInstructions = buildTodoCompactionInstructions(rawInstructions, currentTodos);
-    const customInstructions = buildGoalCompactionInstructions(todoInstructions, deps.goalRegistry?.get(sessionId) ?? null);
+    const customInstructions = isWorkflowSessionMode(record.sessionMode)
+        ? buildGoalCompactionInstructions(todoInstructions, deps.goalRegistry?.get(sessionId) ?? null)
+        : todoInstructions;
     const turnId = deps.events.latestTurnId(sessionId) ?? `${sessionId}:compact`;
     const compactionId = `${sessionId}:compaction:${randomUUID()}`;
     deps.events.append(sessionId, turnId, {
@@ -4148,6 +4231,24 @@ export async function handleChatMessages(res, deps, sessionId, url) {
 export async function handleChatRequest(req, res, deps, pathname, workspaceScope) {
     if (!deps)
         return false;
+    try {
+        return await dispatchChatRequest(req, res, deps, pathname, workspaceScope);
+    }
+    catch (error) {
+        // Store-level fail-closed for corrupt sessionMode: bounded 409 instead of
+        // a generic 500, for any handler that reads the record without its own
+        // UnknownChatSessionModeError mapping (readChatSessionMode covers the rest).
+        if (error instanceof UnknownChatSessionModeError) {
+            sendJson(res, 409, {
+                ok: false,
+                error: { code: error.code, message: error.message },
+            });
+            return true;
+        }
+        throw error;
+    }
+}
+async function dispatchChatRequest(req, res, deps, pathname, workspaceScope) {
     // Terminal management API (model + Console UI shared PTY registry).
     if (await handleTerminalRequest(req, res, {
         terminals: deps.terminals ?? new TerminalSessionRegistry(),
@@ -4157,6 +4258,15 @@ export async function handleChatRequest(req, res, deps, pathname, workspaceScope
     }, pathname)) {
         return true;
     }
+    // Source control API (model + Console UI shared workspace ScmService).
+    if (deps.scm) {
+        if (await handleScmRequest(req, res, {
+            scm: deps.scm,
+            gateMutation: (r) => gateMutation(r, deps),
+        }, pathname)) {
+            return true;
+        }
+    }
     if (!pathname.startsWith("/api/operator/v1/chat/") &&
         !pathname.startsWith("/api/operator/v1/pi/"))
         return false;

package/dist/worker/console/chat/scm-routes.js

@@ -0,0 +1,193 @@
+/**
+ * Operator Chat — source control HTTP API (Console UI side).
+ *
+ * Endpoints (all under /api/operator/v1/chat):
+ *   GET  /scm/status                    branch + changes + counts
+ *   GET  /scm/diff?path=&staged=       unified diff (one path or --stat)
+ *   POST /scm/stage                     { paths: string[] } | { all: true }
+ *   POST /scm/unstage                   { paths: string[] }
+ *   POST /scm/discard                   { paths: string[] }  [dangerous]
+ *   POST /scm/commit                    { message }
+ *   GET  /scm/log?limit=                recent commits
+ *   GET  /scm/branches                  branch list + current
+ *   POST /scm/branches                  { name, create? }  switch or create
+ *   POST /scm/push                      push to upstream
+ *   POST /scm/pull                      pull from upstream
+ *
+ * Reads are open (same-origin console); every mutation passes gateMutation.
+ * The ScmService is workspace-scoped (repoRoot fixed at construction).
+ */
+function sendJson(res, status, body) {
+    res.writeHead(status, {
+        "content-type": "application/json; charset=utf-8",
+        "cache-control": "no-store",
+    });
+    res.end(JSON.stringify(body));
+}
+function mapScmError(res, error) {
+    const status = error.code === "NO_PATHS" || error.code === "EMPTY_MESSAGE" || error.code === "INVALID_NAME"
+        ? 400
+        : error.code === "GIT_TIMEOUT"
+            ? 504
+            : 500;
+    sendJson(res, status, {
+        ok: false,
+        error: { code: error.code, message: error.message, ...(error.stderr ? { stderr: error.stderr } : {}) },
+    });
+}
+async function readJsonBody(req, maxBytes = 256 * 1024) {
+    const chunks = [];
+    let total = 0;
+    for await (const chunk of req) {
+        const buf = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        total += buf.length;
+        if (total > maxBytes)
+            throw new Error("request body too large");
+        chunks.push(buf);
+    }
+    if (chunks.length === 0)
+        return {};
+    const raw = Buffer.concat(chunks).toString("utf8");
+    if (!raw.trim())
+        return {};
+    return JSON.parse(raw);
+}
+function parsePaths(body) {
+    if (!Array.isArray(body.paths))
+        return [];
+    return body.paths
+        .filter((p) => typeof p === "string" && p.length > 0 && !p.includes("\0"))
+        .slice(0, 500);
+}
+/** Route dispatcher; returns true when the request was handled. */
+export async function handleScmRequest(req, res, deps, pathname) {
+    if (!pathname.startsWith("/api/operator/v1/chat/scm"))
+        return false;
+    const method = (req.method ?? "GET").toUpperCase();
+    const rest = pathname.slice("/api/operator/v1/chat/scm".length);
+    const parts = rest.split("/").filter(Boolean);
+    const sub = parts[0] ?? "";
+    const url = new URL(req.url ?? "/", "http://localhost");
+    const gateFailed = (gate) => {
+        sendJson(res, gate.status, { ok: false, error: { code: gate.code, message: gate.message } });
+        return true;
+    };
+    try {
+        if (method === "GET" && sub === "status" && parts.length === 1) {
+            const r = await deps.scm.status();
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true, data: r });
+            return true;
+        }
+        if (method === "GET" && sub === "diff" && parts.length === 1) {
+            const path = url.searchParams.get("path") ?? undefined;
+            const staged = url.searchParams.get("staged") === "1";
+            const r = await deps.scm.diff({ path, staged });
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true, data: r });
+            return true;
+        }
+        if (method === "GET" && sub === "log" && parts.length === 1) {
+            const limit = Number(url.searchParams.get("limit") ?? 30);
+            const r = await deps.scm.log(Number.isFinite(limit) ? Math.min(Math.max(limit, 1), 200) : 30);
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true, data: r });
+            return true;
+        }
+        if (method === "GET" && sub === "branches" && parts.length === 1) {
+            const r = await deps.scm.branchList();
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true, data: r });
+            return true;
+        }
+        // Everything below mutates → gate first.
+        const gate = deps.gateMutation(req);
+        if (!gate.ok)
+            return gateFailed(gate);
+        if (method === "POST" && sub === "stage" && parts.length === 1) {
+            const body = await readJsonBody(req);
+            const r = body.all === true
+                ? await deps.scm.stage([], true)
+                : await deps.scm.stage(parsePaths(body));
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true });
+            return true;
+        }
+        if (method === "POST" && sub === "unstage" && parts.length === 1) {
+            const body = await readJsonBody(req);
+            const r = await deps.scm.unstage(parsePaths(body));
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true });
+            return true;
+        }
+        if (method === "POST" && sub === "discard" && parts.length === 1) {
+            const body = await readJsonBody(req);
+            const r = await deps.scm.discard(parsePaths(body));
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true });
+            return true;
+        }
+        if (method === "POST" && sub === "commit" && parts.length === 1) {
+            const body = await readJsonBody(req);
+            const message = typeof body.message === "string" ? body.message : "";
+            const r = await deps.scm.commit(message);
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true, data: r });
+            return true;
+        }
+        if (method === "POST" && sub === "branches" && parts.length === 1) {
+            const body = await readJsonBody(req);
+            const name = typeof body.name === "string" ? body.name : "";
+            if (!name) {
+                sendJson(res, 400, { ok: false, error: { code: "INVALID_INPUT", message: "name is required" } });
+                return true;
+            }
+            const r = body.create === true
+                ? await deps.scm.branchCreate(name)
+                : await deps.scm.branchSwitch(name);
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true });
+            return true;
+        }
+        if (method === "POST" && sub === "push" && parts.length === 1) {
+            const r = await deps.scm.push();
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true, data: r });
+            return true;
+        }
+        if (method === "POST" && sub === "pull" && parts.length === 1) {
+            const r = await deps.scm.pull();
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true, data: r });
+            return true;
+        }
+        sendJson(res, 404, { ok: false, error: { code: "NOT_FOUND", message: `unknown scm route: ${method} ${pathname}` } });
+        return true;
+    }
+    catch (error) {
+        if (!res.headersSent) {
+            sendJson(res, 500, {
+                ok: false,
+                error: {
+                    code: "SCM_INTERNAL",
+                    message: error instanceof Error ? error.message : String(error),
+                },
+            });
+        }
+        else {
+            res.end();
+        }
+        return true;
+    }
+}