@tiphareth/dsh-hardssh 0.1.2 → 0.2.2

package/lib/types/client/locales.d.ts

@@ -11,7 +11,14 @@ export declare const zh: {
     'manager.label': string;
     'manager.tooltip': string;
     'manager.title': string;
+    'panel.workspaces': string;
+    'ops.tab': string;
+    'ops.guide': string;
     'manager.empty': string;
+    'manager.connected': string;
+    'manager.disconnected': string;
+    'manager.connectionUnknown': string;
+    'manager.connectionError': string;
     'manager.delete': string;
     'manager.editServer': string;
     'manager.deleteServer': string;
@@ -60,7 +67,14 @@ export declare const dictionaries: {
         'manager.label': string;
         'manager.tooltip': string;
         'manager.title': string;
+        'panel.workspaces': string;
+        'ops.tab': string;
+        'ops.guide': string;
         'manager.empty': string;
+        'manager.connected': string;
+        'manager.disconnected': string;
+        'manager.connectionUnknown': string;
+        'manager.connectionError': string;
         'manager.delete': string;
         'manager.editServer': string;
         'manager.deleteServer': string;
@@ -99,6 +113,6 @@ export declare const dictionaries: {
         'gate.failed': string;
         'gate.retryLimit': string;
     };
-    readonly en: Record<"manager.label" | "manager.tooltip" | "manager.title" | "manager.empty" | "manager.delete" | "manager.editServer" | "manager.deleteServer" | "manager.newHost" | "manager.hostInUse" | "create.host" | "create.hostEmpty" | "create.dir" | "create.dirPlaceholder" | "create.browse" | "create.up" | "create.current" | "create.titleLabel" | "create.titlePlaceholder" | "create.submit" | "create.cancel" | "create.connecting" | "create.needHost" | "create.needDir" | "create.needTitle" | "create.needConnect" | "host.add" | "host.save" | "host.needFields" | "host.needPassword" | "dialog.alias" | "dialog.host" | "dialog.port" | "dialog.user" | "dialog.password" | "dialog.passwordHint" | "flow.local" | "flow.ssh" | "flow.useThisDir" | "panel.loading" | "gate.failed" | "gate.retryLimit", string>;
+    readonly en: Record<"manager.label" | "manager.tooltip" | "manager.title" | "panel.workspaces" | "ops.tab" | "ops.guide" | "manager.empty" | "manager.connected" | "manager.disconnected" | "manager.connectionUnknown" | "manager.connectionError" | "manager.delete" | "manager.editServer" | "manager.deleteServer" | "manager.newHost" | "manager.hostInUse" | "create.host" | "create.hostEmpty" | "create.dir" | "create.dirPlaceholder" | "create.browse" | "create.up" | "create.current" | "create.titleLabel" | "create.titlePlaceholder" | "create.submit" | "create.cancel" | "create.connecting" | "create.needHost" | "create.needDir" | "create.needTitle" | "create.needConnect" | "host.add" | "host.save" | "host.needFields" | "host.needPassword" | "dialog.alias" | "dialog.host" | "dialog.port" | "dialog.user" | "dialog.password" | "dialog.passwordHint" | "flow.local" | "flow.ssh" | "flow.useThisDir" | "panel.loading" | "gate.failed" | "gate.retryLimit", string>;
 };
 //# sourceMappingURL=locales.d.ts.map

package/lib/types/client/session-connect-gate.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Session-open connection gate: whenever the shell opens a session whose cwd
+ * belongs to an SSH-bound workspace, probe the owning server FIRST so the
+ * interactive connection dialogs appear (host-key TOFU confirm / VSCode-style
+ * session password) instead of the workspace silently failing underneath.
+ *
+ * This replaces the old sidebar row-click gate. The shell exposes no row slot
+ * for workspace rows, and the previous `[class*="projectRow"]` DOM listener was
+ * never a contract — the session list, by contrast, IS a public client surface
+ * (`ctx.sessions.list`), so the trigger is now "a session became current" (open)
+ * plus "a session appeared while we were watching" (New Session in an SSH
+ * workspace) rather than a click on a DOM node we do not own.
+ *
+ * Probing is delegated to `connectHost`, which owns the TTL pass cache and the
+ * in-flight coalescing: re-selecting the same workspace inside the TTL, or
+ * creating several sessions in it, prompts at most once.
+ *
+ * @module dsh-hardssh/client/session-connect-gate
+ */
+/** The narrow slice of `ctx.sessions.list` this gate reads. Structural on
+ *  purpose: the shell's `SessionId`/`SessionSummary` types stay out of the
+ *  plugin's public surface, and the adapter at the call site does the one
+ *  unavoidable cast. */
+export interface SessionGateList {
+    subscribe(listener: () => void): () => void;
+    /** Initial host list arrival; pending means an empty list is not authoritative. */
+    phase(): 'pending' | 'ready';
+    /** Currently selected session, undefined on the empty state. */
+    currentSessionId(): string | undefined;
+    /** Listed session ids, in host order. */
+    sessionIds(): readonly string[];
+    /** The session's workspace cwd (the anchor path for SSH workspaces). */
+    sessionCwd(sessionId: string): string | undefined;
+}
+/** Gate dependencies. */
+export interface SessionConnectGateDeps {
+    sessions: SessionGateList;
+    /** Alias owning the SSH workspace that CONTAINS this cwd, when bound. */
+    aliasForCwd(cwd: string | undefined): string | undefined;
+    /** Probe + prompt; resolves true once the server may be used. */
+    ensureConnected(alias: string): Promise<boolean>;
+}
+/**
+ * Build the cwd → workspace resolver over a live workspace list. The LONGEST
+ * matching anchor wins, so a workspace nested under another one still routes to
+ * its own server.
+ * @param workspaces - live records carrying an anchor path.
+ * @returns resolver returning the owning record, or undefined when unbound.
+ */
+export declare function makeAnchorWorkspaceResolver<T extends {
+    anchorPath: string;
+}>(workspaces: () => ReadonlyArray<T>): (cwd: string | undefined) => T | undefined;
+/** Alias-only compatibility face used by the connection gate. */
+export declare function makeAnchorAliasResolver(workspaces: () => ReadonlyArray<{
+    alias: string;
+    anchorPath: string;
+}>): (cwd: string | undefined) => string | undefined;
+/**
+ * Watch the session list and probe the server behind every SSH-bound session
+ * the operator opens or creates.
+ *
+ * The first pass ADOPTS the existing list without probing: a GUI restore must
+ * not fire one connection dialog per remembered session. Only the session the
+ * shell actually selects (including the restored current one) and sessions
+ * created after that pass trigger a probe.
+ *
+ * @param deps - session list view, anchor resolver and probe.
+ * @returns disposer removing the subscription.
+ */
+export declare function mountSessionConnectGate(deps: SessionConnectGateDeps): () => void;
+//# sourceMappingURL=session-connect-gate.d.ts.map

package/lib/types/client/ssh/api.d.ts

@@ -2,14 +2,16 @@
  * Browser-side API client for the /api/dsh-ssh route family. The only data
  * access path the panel components use — plain fetch/WebSocket, same origin.
  */
+import { HttpApiError } from '../../client-http.ts';
 import { type ClusterResult, type ExecResult, type HostPayload, type ImportResult, type KnownHostAction, type KnownHostView, type RemoteDirEntry, type SshHostSummary, type TestResult, type TransferProgress, type TunnelInfo } from '../../ssh/protocol.ts';
-/** Error carrying the route's JSON error message. */
-export declare class SshApiError extends Error {
-    /** Stable machine code from the route error body (HOST_KEY_*, HOST_IN_USE, …). */
-    readonly code: string | undefined;
-    readonly hostKeyFingerprint: string | undefined;
-    constructor(message: string, code?: string, hostKeyFingerprint?: string);
-}
+/**
+ * This family's error name for the ONE shared transport error
+ * (`HttpApiError`): same class at runtime, so it carries the HTTP status and
+ * the parsed body (code / secret / hostKeyFingerprint / hostKeyMismatch /
+ * remaining / retryAfterMs) and existing `instanceof SshApiError` checks keep
+ * working. Parsing lives in ./client-http.ts — never re-implemented here.
+ */
+export { HttpApiError as SshApiError };
 /** One open terminal connection (WebSocket JSON frames). */
 export interface TerminalConnection {
     /** Fired on the ready frame (shell is up). */
@@ -56,7 +58,7 @@ export declare class SshApi {
      * Upload one file (raw bytes) to a remote path. Progress arrives through
      * the NDJSON response stream; resolves when the result frame lands.
      */
-    uploadFile(file: File, alias: string, remotePath: string, onProgress?: (progress: TransferProgress) => void): Promise<{
+    uploadFile(file: File, alias: string, remotePath: string, onProgress?: (progress: TransferProgress) => void, signal?: AbortSignal): Promise<{
         transferredBytes: number;
     }>;
     /**
@@ -64,7 +66,7 @@ export declare class SshApi {
      * disk when the File System Access API is available (no full-file RAM
      * copy); otherwise falls back to an in-memory Blob.
      */
-    downloadFile(alias: string, remotePath: string, onProgress?: (progress: TransferProgress) => void): Promise<{
+    downloadFile(alias: string, remotePath: string, onProgress?: (progress: TransferProgress) => void, signal?: AbortSignal): Promise<{
         blob?: Blob;
         filename: string;
         streamed: boolean;

package/lib/types/client/ssh/apply.d.ts

@@ -1,12 +1,16 @@
 /**
  * SSH operations browser surfaces, hosted inside dsh-hardssh's client bundle
- * (migrated from the legacy dsh-ssh package): the 'dsh-ssh'
- * locale dictionaries, the sidebar entry row, and the SSH operations panel
- * in the center column. Mounted from src/client/index.ts alongside the
- * workspace surfaces; a DOM failure here degrades the SSH panel only, never
- * the GUI.
+ * (migrated from the legacy dsh-ssh package): the 'dsh-ssh' locale
+ * dictionaries and the SSH operations console mounted as a RIGHT-Sidebar page
+ * tab.
+ *
+ * Nothing here touches the DOM. The old build injected a sidebar row and a
+ * panel container by selector, which the 0.1.5 shell no longer renders — the
+ * surfaces are standard plugin extension points now (see ./ops-tab.tsx).
  */
 import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
+import type { SshApi } from './api.ts';
+import type { SessionSshTargetSource } from './session-target.ts';
 /** Locale namespace this capability owns (kept as 'dsh-ssh'). */
 export declare const NS = "dsh-ssh";
 declare module '@deepseek-ai/dsh-client-ui-slots' {
@@ -16,8 +20,10 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
     }
 }
 /**
- * Mount the SSH operations surfaces (sidebar entry + operations panel).
- * @param ctx - client root context (locale service).
+ * Mount the SSH operations surfaces (locale dictionaries + the right-Sidebar tab).
+ * @param ctx - client root context (locale service, slot registry, tab registry).
+ * @param api - shared SSH API client.
+ * @param target - selected Session's fixed SSH target, or null for local Sessions.
  */
-export declare function mountSshOperations(ctx: ClientContext): void;
+export declare function mountSshOperations(ctx: ClientContext, api: SshApi, target: SessionSshTargetSource): void;
 //# sourceMappingURL=apply.d.ts.map

package/lib/types/client/ssh/locales.d.ts

@@ -10,6 +10,13 @@ export declare const zh: {
     readonly 'tab.transfer': "传输";
     readonly 'tab.tunnels': "隧道";
     readonly 'tab.cluster': "集群";
+    readonly 'session.server': "当前服务器";
+    readonly 'session.target': "跟随当前会话：{alias} · {remoteRoot}";
+    readonly 'session.localTitle': "当前会话位于本地工作区";
+    readonly 'session.localUnavailable': "SSH 操作台仅适用于 SSH 工作区会话。请切换到远程会话后使用。";
+    readonly 'connectionError.title': "无法连接服务器 {alias}";
+    readonly 'connectionError.intro': "SSH 连接未建立，请检查服务器地址、网络和认证配置。";
+    readonly 'connectionError.close': "知道了";
     readonly 'hosts.empty': "尚未配置主机。点击「新增主机」添加，或从 ~/.ssh/config 导入。";
     readonly 'hosts.add': "新增主机";
     readonly 'hosts.import': "导入 ~/.ssh/config";
@@ -64,7 +71,7 @@ export declare const zh: {
     readonly 'terminal.selectHost': "选择主机";
     readonly 'terminal.connect': "连接";
     readonly 'terminal.disconnect': "断开";
-    readonly 'terminal.placeholder': "选择主机后点击「连接」打开远程终端。";
+    readonly 'terminal.placeholder': "点击「连接」打开当前会话服务器的远程终端。";
     readonly 'terminal.connecting': "正在连接…";
     readonly 'terminal.ready': "终端已连接（{alias}）";
     readonly 'terminal.exited': "终端已退出（{alias}）";

package/lib/types/client/ssh/ops-tab.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The SSH operations surface as a RIGHT-Sidebar page tab.
+ *
+ * Registration follows the same public two-stage path any shipped tab type
+ * uses:
+ * 1. `ctx.sidebarRightTabs.register(...)` declares the type — its `id` is the
+ *    key its body and chip title register under, its `kind` is what
+ *    `ctx.sidebarRight.openTab(kind)` names.
+ * 2. the body goes into the keyed `sidebar.right.pane.tab` seat, the chip title
+ *    into `sidebar.right.pane.tab.title`, both under that `id`.
+ *
+ * It is a PAGE type (no `patterns`): it recognizes no resource address, so it is
+ * opened by kind from the right sidebar's own add control or from its guide
+ * entry — the plugin never forces the column open.
+ *
+ * The left sidebar's workspace manager is a separate, GLOBAL surface; host
+ * CRUD lives there, so this console keeps only the per-session operations:
+ * terminal, transfer, tunnels, cluster.
+ */
+import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
+import type { SshApi } from './api.ts';
+import type { SessionSshTargetSource } from './session-target.ts';
+/** This implementation's identity in the tab system; also the body/title key. */
+export declare const OPS_TAB_ID = "@tiphareth/dsh-hardssh/operations";
+/** The page kind `ctx.sidebarRight.openTab(kind)` names. */
+export declare const OPS_TAB_KIND = "hardssh-operations";
+/**
+ * Register the regression type, its body, and its chip title.
+ * @param ctx - client root context carrying the tab registry and slot registry.
+ * @param api - the SSH API client the panel's tabs operate through.
+ * @param target - live target inherited from the selected Session.
+ */
+export declare function registerOperationsTab(ctx: ClientContext, api: SshApi, target: SessionSshTargetSource): void;
+//# sourceMappingURL=ops-tab.d.ts.map

package/lib/types/client/ssh/panel/ClusterTab.d.ts

@@ -2,7 +2,9 @@ import type { SshApi } from '../api.ts';
 /** Cluster tab props. */
 export interface ClusterTabProps {
     api: SshApi;
+    /** Fixed alias inherited from the selected Session. */
+    alias: string;
 }
 /** The cluster execution tab. */
-export declare function ClusterTab({ api }: ClusterTabProps): import("react").JSX.Element;
+export declare function ClusterTab({ api, alias }: ClusterTabProps): import("react").JSX.Element;
 //# sourceMappingURL=ClusterTab.d.ts.map

package/lib/types/client/ssh/panel/ConnectionErrorDialog.d.ts

@@ -0,0 +1,8 @@
+export interface ConnectionErrorDialogProps {
+    alias: string;
+    detail: string;
+    onClose: () => void;
+}
+/** A small acknowledgement dialog for non-interactive SSH connection failures. */
+export declare function ConnectionErrorDialog({ alias, detail, onClose }: ConnectionErrorDialogProps): import("react").JSX.Element;
+//# sourceMappingURL=ConnectionErrorDialog.d.ts.map

package/lib/types/client/ssh/panel/SessionSecretDialog.d.ts

@@ -7,10 +7,13 @@ export interface SessionSecretDialogProps {
     user?: string;
     /** Which secret the connection needs. */
     secret: 'password' | 'passphrase';
+    /** A previous attempt's failure to show at the top (re-prompt with a
+     *  reason — wrong password, unreachable host, …), VSCode-style. */
+    reason?: string;
     onClose: () => void;
     /** Called after the secret was provided (retry the operation). */
     onProvided: () => void;
 }
 /** Prompt for a session-only credential. */
-export declare function SessionSecretDialog({ api, alias, user, secret, onClose, onProvided }: SessionSecretDialogProps): import("react").JSX.Element;
+export declare function SessionSecretDialog({ api, alias, user, secret, reason, onClose, onProvided }: SessionSecretDialogProps): import("react").JSX.Element;
 //# sourceMappingURL=SessionSecretDialog.d.ts.map

package/lib/types/client/ssh/panel/SshPanel.d.ts

@@ -1,14 +1,14 @@
 import type { SshApi } from '../api.ts';
-import type { PanelController } from './controller.ts';
-/** The panel's tab identifiers. */
-export type SshTab = 'hosts' | 'terminal' | 'transfer' | 'tunnels' | 'cluster';
-/** Panel shell props. */
+import type { SessionSshTargetSource } from '../session-target.ts';
+/** The console's tab identifiers. */
+export type SshTab = 'terminal' | 'transfer' | 'tunnels' | 'cluster';
+/** Console props. */
 export interface SshPanelProps {
-    /** The panel state owner (open/close/toggle). */
-    controller: PanelController;
     /** The SSH API client every tab operates through. */
     api: SshApi;
+    /** Selected Session's fixed SSH target; null means a local Session. */
+    target: SessionSshTargetSource;
 }
-/** The tabbed SSH panel. */
-export declare function SshPanel({ controller, api }: SshPanelProps): import("react").JSX.Element;
+/** The tabbed SSH operations console. */
+export declare function SshPanel({ api, target }: SshPanelProps): import("react").JSX.Element;
 //# sourceMappingURL=SshPanel.d.ts.map

package/lib/types/client/ssh/panel/TerminalTab.d.ts

@@ -2,11 +2,9 @@ import type { SshApi } from '../api.ts';
 /** Terminal tab props. */
 export interface TerminalTabProps {
     api: SshApi;
-    /** Alias preselected by a "connect" action from the hosts tab. */
-    presetAlias?: string;
-    /** Monotonic id of the connect request (re-applies presetAlias). */
-    requestId?: number;
+    /** Fixed alias inherited from the selected Session's SSH workspace. */
+    alias: string;
 }
 /** The xterm terminal view. */
-export declare function TerminalTab({ api, presetAlias, requestId }: TerminalTabProps): import("react").JSX.Element;
+export declare function TerminalTab({ api, alias }: TerminalTabProps): import("react").JSX.Element;
 //# sourceMappingURL=TerminalTab.d.ts.map

package/lib/types/client/ssh/panel/TransferTab.d.ts

@@ -2,7 +2,11 @@ import type { SshApi } from '../api.ts';
 /** Transfer tab props. */
 export interface TransferTabProps {
     api: SshApi;
+    /** Fixed alias inherited from the selected Session. */
+    alias: string;
+    /** Initial browser/path root inherited from the Session's SSH workspace. */
+    remoteRoot: string;
 }
 /** The upload/download tab. */
-export declare function TransferTab({ api }: TransferTabProps): import("react").JSX.Element;
+export declare function TransferTab({ api, alias, remoteRoot }: TransferTabProps): import("react").JSX.Element;
 //# sourceMappingURL=TransferTab.d.ts.map

package/lib/types/client/ssh/panel/TunnelsTab.d.ts

@@ -2,7 +2,9 @@ import type { SshApi } from '../api.ts';
 /** Tunnels tab props. */
 export interface TunnelsTabProps {
     api: SshApi;
+    /** Fixed alias inherited from the selected Session. */
+    alias: string;
 }
 /** The tunnels tab. */
-export declare function TunnelsTab({ api }: TunnelsTabProps): import("react").JSX.Element;
+export declare function TunnelsTab({ api, alias }: TunnelsTabProps): import("react").JSX.Element;
 //# sourceMappingURL=TunnelsTab.d.ts.map

package/lib/types/client/ssh/session-target.d.ts

@@ -0,0 +1,17 @@
+import type { SessionGateList } from '../session-connect-gate.ts';
+import type { WorkspaceManager } from '../state.ts';
+/** Fixed SSH identity inherited from the currently selected Session. */
+export interface SessionSshTarget {
+    sessionId: string;
+    workspaceId: string;
+    alias: string;
+    remoteRoot: string;
+}
+/** React-compatible external store; null means the Session is local/unbound. */
+export interface SessionSshTargetSource {
+    subscribe(listener: () => void): () => void;
+    getSnapshot(): SessionSshTarget | null;
+}
+/** Build one stable Session → SSH target source over the public session list and workspace manager. */
+export declare function createSessionSshTargetSource(sessions: SessionGateList, manager: Pick<WorkspaceManager, 'getSnapshot' | 'subscribe'>): SessionSshTargetSource;
+//# sourceMappingURL=session-target.d.ts.map

package/lib/types/client/state.d.ts

@@ -5,7 +5,8 @@
  * between polls. There is NO global local/remote mode anymore — a session's
  * execution world is decided host-side by its cwd (an anchor path of an SSH
  * workspace routes remote); this client state only drives the management UI
- * (list / create / delete) and the sidebar title annotations.
+ * (list / create / delete) and the sidebar row decoration (remote badge + the
+ * shell's hover card path rewrite).
  */
 import type { SshWorkspaceRecord } from '../protocol.ts';
 import type { WorkspaceApi } from './api.ts';
@@ -20,6 +21,8 @@ export declare class WorkspaceManager {
     private state;
     private readonly listeners;
     private timer;
+    /** Monotonic list-workspaces request id; only the newest request may commit. */
+    private refreshSequence;
     constructor(api: WorkspaceApi);
     getSnapshot(): WorkspaceManagerState;
     subscribe(listener: () => void): () => void;

package/lib/types/client/workspace-panel-entry.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The SSH workspace manager's LEFT-sidebar global entry and its CENTER panel.
+ *
+ * Both are standard plugin extension points, not DOM injection:
+ * - `sidebar.panellist` declares the row between "New session" and the
+ *   workspace browser. Its `id` IS the main-panel key the row selects, and the
+ *   shell owns the button, the label, and the active highlight.
+ * - `main` hosts the panel body under that same key.
+ *
+ * The id is deliberately our own rather than a shipped one: a fresh id is
+ * added beside the shipped rows, while reusing one would replace that row.
+ */
+import type { ClientContext } from '@deepseek-ai/dsh-client-runtime/client';
+import type { WorkspaceManager } from './state.ts';
+import type { SshApi } from './ssh/api.ts';
+/** The main-panel key AND the sidebar row id: one identity addresses both. */
+export declare const WORKSPACE_PANEL_ID = "dsh-hardssh-workspaces";
+/** Dependencies the panel body needs at render time. */
+export interface WorkspacePanelDeps {
+    manager: WorkspaceManager;
+    /** Absent when the plugin is mounted without the SSH operations half. */
+    sshApi?: SshApi;
+}
+/**
+ * Register the left-sidebar row and the center panel body.
+ * @param ctx - client root context carrying the slot registry.
+ * @param deps - the workspace manager and the host API the panel uses.
+ */
+export declare function registerWorkspacePanel(ctx: ClientContext, deps: WorkspacePanelDeps): void;
+//# sourceMappingURL=workspace-panel-entry.d.ts.map

package/lib/types/client/workspace-panel.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The SSH workspace manager as a CENTER panel (left sidebar global entry →
+ * `main` slot). Content is unchanged from the old session-header dropdown:
+ * server rows with their SSH-bound workspaces underneath, server edit/delete
+ * (delete is refused while the server still backs a workspace), and a
+ * "new server" action at the bottom.
+ *
+ * This is a plain panel body: no portal, no anchoring, no click-outside
+ * dismissal. The left sidebar owns the entry row and the center column owns
+ * the frame; closing the panel is the shell's business (select the
+ * Conversation row back), not ours.
+ */
+import { type ReactElement } from 'react';
+import type { WorkspaceManager } from './state.ts';
+import type { SshApi } from './ssh/api.ts';
+/** Panel props: the workspace snapshot owner and the host API. */
+export interface WorkspaceManagerPanelProps {
+    manager: WorkspaceManager;
+    /** Full SSH host API (list/create/update/delete) for server management. */
+    sshApi?: SshApi;
+}
+/** The workspace manager panel body. */
+export declare function WorkspaceManagerPanel({ manager, sshApi }: WorkspaceManagerPanelProps): ReactElement;
+//# sourceMappingURL=workspace-panel.d.ts.map

package/lib/types/client-http.d.ts

@@ -1,15 +1,86 @@
 /**
- * Browser-side HTTP helpers for the dsh-hardssh route clients.
- * Plain fetch / same-origin — bundled inline into the client bundle.
+ * Browser-side HTTP transport for the dsh-hardssh route clients — the ONE
+ * fetch / JSON-error layer shared by the workspace client (./client/api.ts)
+ * and the SSH client (./client/ssh/api.ts). Plain fetch / same-origin —
+ * bundled inline into the client bundle.
+ *
+ * Business layers may translate the error (named subclasses/aliases), but they
+ * must not re-parse a response: every route error is decoded here, once, into
+ * {@link HttpApiError} with the HTTP status AND the parsed body.
+ */
+/**
+ * Every route's JSON error body (superset of the SSH `ApiErrorBody`): the
+ * stable machine code plus the interactive-gate fields the UI reads.
+ */
+export interface HttpErrorBody {
+    /** Human-readable message (`error` is the wire field name). */
+    error?: string;
+    /** Stable machine code (HOST_KEY_UNKNOWN / NEEDS_PASSWORD / VAULT_* / …). */
+    code?: string;
+    /** Which secret a connection needs when code === 'NEEDS_PASSWORD'. */
+    secret?: 'password' | 'passphrase';
+    /** The fingerprint when a host key was refused. */
+    hostKeyFingerprint?: string;
+    /** Mismatch detail (expected vs actual) when the host key changed. */
+    hostKeyMismatch?: {
+        expected: string;
+        actual: string;
+    };
+    /** Workspace titles referencing a host that cannot be deleted (HOST_IN_USE). */
+    workspaces?: Array<{
+        id: string;
+        title: string;
+    }>;
+    /** Vault lockout: attempts left before the next lockout window. */
+    remaining?: number;
+    /** Vault lockout: milliseconds until the next attempt is allowed. */
+    retryAfterMs?: number;
+    /** Forward-compatible: unlisted fields stay reachable through `body`. */
+    [key: string]: unknown;
+}
+/**
+ * The single transport error: HTTP status plus the PARSED response body, so
+ * no caller re-parses a response and no field is flattened away. The SSH
+ * client re-exports it as `SshApiError`; the workspace client subclasses it as
+ * `WorkspaceApiError`. Both are this class at runtime, so the UI's
+ * `instanceof` / `.code` / `.hostKeyFingerprint` checks keep working.
  */
-/** Error carrying the route's JSON error message and stable code/status. */
 export declare class HttpApiError extends Error {
-    readonly code?: string | undefined;
+    /** HTTP status, when the error came from a response. */
     readonly status?: number | undefined;
-    constructor(message: string, code?: string | undefined, status?: number | undefined);
+    /** Parsed JSON error body, when the route sent one. */
+    readonly body?: HttpErrorBody | undefined;
+    constructor(message: string, 
+    /** HTTP status, when the error came from a response. */
+    status?: number | undefined, 
+    /** Parsed JSON error body, when the route sent one. */
+    body?: HttpErrorBody | undefined);
+    /** Stable machine code from the route error body. */
+    get code(): string | undefined;
+    /** Which secret a connection needs when {@link code} === 'NEEDS_PASSWORD'. */
+    get secret(): 'password' | 'passphrase' | undefined;
+    /** The fingerprint when a host key was refused. */
+    get hostKeyFingerprint(): string | undefined;
+    /** Mismatch detail (expected vs actual) when the host key changed. */
+    get hostKeyMismatch(): {
+        expected: string;
+        actual: string;
+    } | undefined;
+    /** Vault lockout: attempts left. */
+    get remaining(): number | undefined;
+    /** Vault lockout: milliseconds until the next attempt is allowed. */
+    get retryAfterMs(): number | undefined;
 }
 /** Query-string helper (skips undefined and empty values). */
 export declare function buildQuery(params: Record<string, string | number | undefined>): string;
-/** Parse a JSON response or throw an HttpApiError (code/status preserved). */
+/** Parse a JSON response or throw {@link HttpApiError} (status + body kept). */
 export declare function readJson<T>(response: Response): Promise<T>;
+/**
+ * Throw {@link HttpApiError} for a response that does NOT carry a JSON
+ * success body (streamed upload/download): a JSON error body is still parsed
+ * and preserved, so the caller sees the route's code instead of raw text.
+ * @param response - the non-ok response (or a stream that could not start).
+ * @param fallback - message prefix used when the route sent no `error` field.
+ */
+export declare function throwHttpError(response: Response, fallback: string): Promise<never>;
 //# sourceMappingURL=client-http.d.ts.map

package/lib/types/core.d.ts

@@ -1,13 +1,11 @@
 /**
- * The shared workspace core: the host store, the SSH engine, and the
- * workspace ledger, provided as `ctx.hardsshCore` by the main plugin row so
- * the two switch rows (fs / subprocess) resolve one instance each.
+ * The shared SSH operations core provided as `ctx.hardsshCore` by the main
+ * plugin row. Workspace routing is owned exclusively by `ctx.workspaceCore`;
+ * this service retains only the host store and shared SSH engine needed by
+ * SSH-specific integrations.
  */
 import type { SshEngine } from './ssh/engine.ts';
 import type { SshHostEntry, SshHostSummary } from './ssh/protocol.ts';
-import type { SshWorkspaceLedger } from './ledger.ts';
-import type { RemoteWorkspaceRunner } from './remote-runner.ts';
-import type { WorkspaceSeamState } from './seam-state.ts';
 /** Read-only host-store surface exposed on the core (the write paths live in
  *  the SSH routes, which get the full store). Avoids coupling the core type
  *  to either the plaintext HostStore or the vault-backed SecureHostStore. */
@@ -17,19 +15,10 @@ export interface HostStoreView {
     find(alias: string): SshHostEntry | undefined;
     summarize(entry: SshHostEntry): SshHostSummary;
 }
-/** One process-wide core shared by every dsh-hardssh row. */
+/** One process-wide SSH operations core. Workspace consumers use WorkspaceCore. */
 export interface HardsshCore {
     hosts: HostStoreView;
     engine: SshEngine;
-    /** The SSH-bound workspace ledger (anchor dir -> remote dir). */
-    ledger: SshWorkspaceLedger;
-    /** The shared seam state: ledger-derived routing snapshot + per-record
-     *  fs/subprocess instances, consumed by the fs/subprocess switch rows. */
-    seams: WorkspaceSeamState;
-    /** Remote-workspace runner: resolve local anchor paths to remote channels
-     *  (git / files / commands) so other plugins (dsh-workbench-tiphareth) can
-     *  operate SSH-bound workspaces transparently. Optional in older builds. */
-    resolveRemote?: RemoteWorkspaceRunner['resolveRemote'];
 }
 /**
  * @deprecated Use HardsshCore. Kept as a source-compatible migration alias.