@wascartech/devbot 0.0.0-stage → 2.1.0

package/dist/path-sandbox.js

@@ -0,0 +1,200 @@
+// Project-scope path policy (work item #46). One forge-free source of truth for
+// "which paths may the agent (and the tools acting on its behalf) touch?".
+//
+// The policy is intentionally lexical here: the host process never has the run
+// volume mounted, so canonicalisation (realpath) happens where the filesystem
+// actually lives — the container shell in volume-files.ts. This module owns the
+// *rules*; the host validator, the container shell deny cases, the opencode
+// permission globs, and the in-container guard plugin are all derived from it,
+// so they can never drift.
+//
+// Denied by design: hidden/system state that can hold credentials or forge
+// access — `.xdg-*` (legacy in-repo xdg dirs plus the mount name), `.git`
+// (config can carry tokens), `.ssh`, and `.env`/`.env.*` (except `.env.example`).
+// Allowed by design: `.devbot-out/` and `.devbot-peers/` (agent staging dirs,
+// git-excluded) and `.devbot/` (repo init scripts) — the agent is meant to use
+// them.
+export const PROJECT_ROOT = "/workspace";
+export const PATH_POLICY_ENV = "DEVBOT_PATH_POLICY";
+export const PATH_POLICY = {
+    root: PROJECT_ROOT,
+    denied: [".git", ".ssh"],
+    deniedPrefixes: [".xdg"],
+    deniedFiles: [".env"],
+    allowedFiles: [".env.example"],
+    masked: [
+        "/home/devbot/.xdg",
+        "/home/devbot/.config",
+        "$XDG_DATA_HOME",
+        "$XDG_CONFIG_HOME",
+        "$XDG_STATE_HOME",
+        "$XDG_CACHE_HOME",
+        "~/.xdg",
+        "~/.config",
+    ],
+};
+/** A path that the policy refuses to operate on. Carries a user-readable reason. */
+export class PathDeniedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "PathDeniedError";
+    }
+}
+/** JSON form of the policy, injected into the run container as
+ *  `--env DEVBOT_PATH_POLICY=...` for the guard plugin to read. */
+export function pathPolicyJson(policy = PATH_POLICY) {
+    return JSON.stringify(policy);
+}
+// ---- Matching --------------------------------------------------------------
+/** True when a single path segment is denied by the policy. */
+export function isDeniedSegment(seg, policy = PATH_POLICY) {
+    if (seg === "")
+        return false;
+    if (policy.allowedFiles.includes(seg))
+        return false;
+    if (policy.denied.includes(seg))
+        return true;
+    if (policy.deniedPrefixes.some((p) => seg === p || seg.startsWith(`${p}-`)))
+        return true;
+    if (policy.deniedFiles.includes(seg))
+        return true;
+    if (seg.startsWith(".env.") && !policy.allowedFiles.includes(seg))
+        return true;
+    return false;
+}
+/** True when any segment of an absolute (or `/`-rooted) path is denied. */
+export function isDeniedPath(absPath, policy = PATH_POLICY) {
+    return absPath.split("/").some((seg) => isDeniedSegment(seg, policy));
+}
+// ---- Host-side resolution --------------------------------------------------
+/** Resolve a tool-supplied path to an absolute path under the project root and
+ *  reject traversal, escapes, and denied segments. Pure; no IO (the container
+ *  shell re-checks the real path to catch symlink escapes). */
+export function resolveProjectPath(raw, policy = PATH_POLICY) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        throw new PathDeniedError("path is required");
+    if (trimmed.includes("\0"))
+        throw new PathDeniedError("path contains a NUL byte");
+    const joined = trimmed.startsWith("/") ? trimmed : `${policy.root}/${trimmed}`;
+    const parts = [];
+    for (const seg of joined.split("/")) {
+        if (seg === "" || seg === ".")
+            continue;
+        if (seg === "..")
+            throw new PathDeniedError(`path must stay inside ${policy.root}`);
+        if (isDeniedSegment(seg, policy))
+            throw new PathDeniedError(`path is restricted: ${seg}`);
+        parts.push(seg);
+    }
+    const abs = `/${parts.join("/")}`;
+    if (abs !== policy.root && !abs.startsWith(`${policy.root}/`)) {
+        throw new PathDeniedError(`path must stay inside ${policy.root}`);
+    }
+    if (abs === policy.root)
+        throw new PathDeniedError("path must point at a file, not the project root");
+    return abs;
+}
+/** Validate a slash-separated *relative* path used to build a path under the
+ *  root (e.g. a peer project's namespace). Rejects absolute paths, `..`,
+ *  empty/denied segments. Returns the normalized relative path. */
+export function validateProjectRelativePath(raw, policy = PATH_POLICY) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        throw new PathDeniedError("path is required");
+    if (trimmed.startsWith("/"))
+        throw new PathDeniedError("path must be relative");
+    const parts = [];
+    for (const seg of trimmed.split("/")) {
+        if (seg === "" || seg === ".")
+            continue;
+        if (seg === "..")
+            throw new PathDeniedError("path must stay inside the project root");
+        if (isDeniedSegment(seg, policy))
+            throw new PathDeniedError(`path is restricted: ${seg}`);
+        parts.push(seg);
+    }
+    if (parts.length === 0)
+        throw new PathDeniedError("path is required");
+    return parts.join("/");
+}
+// ---- Derived views ---------------------------------------------------------
+/** Relative globs for opencode's `read`/`edit`/`glob`/`grep`/`list` permission
+ *  objects. Put these after a `"*": "allow"` and before the allow globs so the
+ *  last matching rule wins. */
+export function denyGlobs(policy = PATH_POLICY) {
+    const globs = [];
+    for (const p of policy.deniedPrefixes) {
+        globs.push(`**/${p}`, `**/${p}/**`, `**/${p}-*`, `**/${p}-*/**`);
+    }
+    for (const d of policy.denied) {
+        globs.push(`**/${d}`, `**/${d}/**`);
+    }
+    for (const f of policy.deniedFiles) {
+        globs.push(`**/${f}`, `**/${f}.*`);
+    }
+    return globs;
+}
+/** Allow globs that must be evaluated *after* denyGlobs (last match wins). */
+export function allowGlobs(policy = PATH_POLICY) {
+    return policy.allowedFiles.map((f) => `**/${f}`);
+}
+/** Permission object used by the generated and static opencode configs. */
+export function permissionGlobRule(policy = PATH_POLICY) {
+    const rule = { "*": "allow" };
+    for (const g of denyGlobs(policy))
+        rule[g] = "deny";
+    for (const g of allowGlobs(policy))
+        rule[g] = "allow";
+    return rule;
+}
+/** `case` glob patterns for the container shell. The allow patterns must be
+ *  tried first (`.env.example` also matches the `.env.*` deny pattern). */
+export function denyShellCasePatterns(policy = PATH_POLICY) {
+    const pats = [];
+    for (const p of policy.deniedPrefixes) {
+        pats.push(`*/${p}`, `*/${p}/*`, `*/${p}-*`, `*/${p}-*/*`);
+    }
+    for (const d of policy.denied) {
+        pats.push(`*/${d}`, `*/${d}/*`);
+    }
+    for (const f of policy.deniedFiles) {
+        pats.push(`*/${f}`, `*/${f}.*`);
+    }
+    return pats;
+}
+export function allowShellCasePatterns(policy = PATH_POLICY) {
+    return policy.allowedFiles.map((f) => `*/${f}`);
+}
+/** Best-effort bash guard: a command string that references a masked root or a
+ *  `..` escape is refused by the plugin. Shell cannot be fully parsed; this
+ *  catches the obvious literal exfiltration commands.
+ *
+ *  A masked root is a violation when it is used *as a path*: a literal path
+ *  (`/home/devbot/.xdg`, `~/.config`) anywhere, or an environment-variable
+ *  expansion followed by `/` (`$XDG_DATA_HOME/...`, `${XDG_CONFIG_HOME}/...`).
+ *  A bare mention of a variable name — `echo $XDG_DATA_HOME`, a `grep` pattern,
+ *  a heredoc — is not an access and must not be blocked, or an agent merely
+ *  inspecting the repo's own docs loops on false positives (work item #96). */
+export function bashGuardReason(command, policy = PATH_POLICY) {
+    for (const m of policy.masked) {
+        if (m.startsWith("$")) {
+            const name = m.slice(1).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+            if (new RegExp(`\\$\\{?${name}\\}?(?=/)`).test(command)) {
+                return `command references restricted path ${m}`;
+            }
+            continue;
+        }
+        if (command.includes(m))
+            return `command references restricted path ${m}`;
+    }
+    // A `..` path segment anywhere is almost always an attempt to leave the root.
+    if (/(^|[\s'"=])\.\.(\/|[\s'"]|$)/.test(command))
+        return "command references a parent path (..)";
+    return null;
+}
+/** Convenience for the runner: `--env DEVBOT_PATH_POLICY=<json>`. */
+export function pathPolicyEnvArgs(policy = PATH_POLICY) {
+    return ["--env", `${PATH_POLICY_ENV}=${pathPolicyJson(policy)}`];
+}
+//# sourceMappingURL=path-sandbox.js.map

package/dist/path-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-sandbox.js","sourceRoot":"","sources":["../src/path-sandbox.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,2EAA2E;AAC3E,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,2BAA2B;AAC3B,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,kFAAkF;AAClF,8EAA8E;AAC9E,+EAA+E;AAC/E,QAAQ;AAER,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAkBpD,MAAM,CAAC,MAAM,WAAW,GAAe;IACrC,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,CAAC,MAAM,CAAC;IACxB,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,YAAY,EAAE,CAAC,cAAc,CAAC;IAC9B,MAAM,EAAE;QACN,mBAAmB;QACnB,sBAAsB;QACtB,gBAAgB;QAChB,kBAAkB;QAClB,iBAAiB;QACjB,iBAAiB;QACjB,QAAQ;QACR,WAAW;KACZ;CACF,CAAC;AAEF,oFAAoF;AACpF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;mEACmE;AACnE,MAAM,UAAU,cAAc,CAAC,SAAqB,WAAW;IAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,+EAA+E;AAE/E,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,SAAqB,WAAW;IAC3E,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACzF,IAAI,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,SAAqB,WAAW;IAC5E,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,+EAA+E;AAE/E;;+DAE+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,SAAqB,WAAW;IAC9E,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,0BAA0B,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IAC/E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QACxC,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,yBAAyB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,IAAI,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,IAAI,GAAG,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,eAAe,CAAC,yBAAyB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,iDAAiD,CAAC,CAAC;IACtG,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;mEAEmE;AACnE,MAAM,UAAU,2BAA2B,CAAC,GAAW,EAAE,SAAqB,WAAW;IACvF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;IAChF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QACxC,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,wCAAwC,CAAC,CAAC;QACtF,IAAI,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,+EAA+E;AAE/E;;+BAE+B;AAC/B,MAAM,UAAU,SAAS,CAAC,SAAqB,WAAW;IACxD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,SAAqB,WAAW;IACzD,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,SAAqB,WAAW;IACjE,MAAM,IAAI,GAA2B,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,SAAqB,WAAW;IACpE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAqB,WAAW;IACrE,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;;;+EAS+E;AAC/E,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,SAAqB,WAAW;IAC/E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;YAC/D,IAAI,IAAI,MAAM,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,OAAO,sCAAsC,CAAC,EAAE,CAAC;YACnD,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,sCAAsC,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,8EAA8E;IAC9E,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,uCAAuC,CAAC;IACjG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,SAAqB,WAAW;IAChE,OAAO,CAAC,OAAO,EAAE,GAAG,eAAe,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/dist/platform/git-auth.js

@@ -0,0 +1,34 @@
+// Git auth helper shared by drivers. GitLab's smart-HTTP endpoint requires HTTP
+// Basic (`oauth2:<token>`); Gitea/ForgeJo accept Basic with any username, with
+// the token as password (common convention: the bot username); GitHub accepts
+// any username with the token as password but conventionally uses
+// `x-access-token` for installation/PAT auth.
+//
+// The header is URL-SCOPED to the forge host (`http.<url>/.extraHeader`)
+// whenever a scope URL is supplied, so git only sends the bot token to the
+// configured forge — a submodule on an external host is fetched without the
+// token instead of leaking it. Scoping is the default for every driver.
+import { config } from "../config.js";
+import { shq } from "../redact.js";
+/** Strip trailing slashes so the URL-scoped config key stays well-formed. */
+export function normalizeScopeUrl(url) {
+    return url.replace(/\/+$/, "");
+}
+export function gitExtraHeaderFor(token, username = "git", scopeUrl) {
+    const basic = Buffer.from(`${username}:${token}`).toString("base64");
+    const key = scopeUrl ? `http.${normalizeScopeUrl(scopeUrl)}/.extraHeader` : "http.extraHeader";
+    return `git -c ${key}=${shq(`Authorization: Basic ${basic}`)}`;
+}
+/** GitLab convention (`oauth2` username), scoped to the forge host. */
+export function gitExtraHeaderGitlab(token, url = config.PLATFORM_URL) {
+    return gitExtraHeaderFor(token, "oauth2", url);
+}
+/** Gitea/ForgeJo convention (bot username, token as password), scoped. */
+export function gitExtraHeaderGitea(token, botUsername = config.BOT_USERNAME, url = config.PLATFORM_URL) {
+    return gitExtraHeaderFor(token, botUsername, url);
+}
+/** GitHub convention (`x-access-token` username for PAT/OAuth tokens), scoped. */
+export function gitExtraHeaderGithub(token, url = config.PLATFORM_URL) {
+    return gitExtraHeaderFor(token, "x-access-token", url);
+}
+//# sourceMappingURL=git-auth.js.map

package/dist/platform/git-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-auth.js","sourceRoot":"","sources":["../../src/platform/git-auth.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,kEAAkE;AAClE,8CAA8C;AAC9C,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,wEAAwE;AAExE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,QAAQ,GAAG,KAAK,EAAE,QAAiB;IAClF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,iBAAiB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAC/F,OAAO,UAAU,GAAG,IAAI,GAAG,CAAC,wBAAwB,KAAK,EAAE,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,GAAG,GAAG,MAAM,CAAC,YAAY;IAC3E,OAAO,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,WAAW,GAAG,MAAM,CAAC,YAAY,EAAE,GAAG,GAAG,MAAM,CAAC,YAAY;IAC7G,OAAO,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,GAAG,GAAG,MAAM,CAAC,YAAY;IAC3E,OAAO,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC"}

package/dist/platform/gitealike/attachments.js

@@ -0,0 +1,62 @@
+// Gitea/ForgeJo attachment discovery + fetch. Issue-comment attachments are
+// Markdown links to `/attachments/{uuid}` (with or without a filename suffix),
+// e.g. `[name](/attachments/aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee)` or
+// `![alt](https://host/attachments/<uuid>)`. The uuid is the stable id; the
+// download endpoint is the raw URL itself. Discovery is Gitea-specific; the
+// extraction engine lives in ../../attachments.ts.
+import { runtime } from "../../runtime-state.js";
+import { giteaFetchRaw, giteaUpload } from "./http.js";
+import { GiteaAttachmentSchema } from "./schemas.js";
+import { MD_LINK, safeDecode, stripCodeSpans, } from "../../attachments.js";
+const GITEA_ATTACHMENT = /\/attachments\/([0-9a-fA-F-]{8,})\/?([^)\s]*)/;
+export function findGiteaAttachmentRefs(body) {
+    const stripped = stripCodeSpans(body);
+    const refs = [];
+    const seen = new Set();
+    for (const m of stripped.matchAll(MD_LINK)) {
+        const url = m[2] ?? "";
+        const hit = GITEA_ATTACHMENT.exec(url);
+        if (!hit)
+            continue;
+        const uuid = hit[1] ?? "";
+        if (!uuid || seen.has(uuid))
+            continue;
+        seen.add(uuid);
+        const tail = safeDecode((hit[2] ?? "").replace(/^\//, ""));
+        refs.push({
+            raw: m[0] ?? "",
+            secret: uuid,
+            filename: tail || uuid,
+            absolute: /^https?:\/\//i.test(url),
+        });
+    }
+    for (const m of stripped.matchAll(new RegExp(GITEA_ATTACHMENT.source, "g"))) {
+        const uuid = m[1] ?? "";
+        if (!uuid || seen.has(uuid))
+            continue;
+        seen.add(uuid);
+        const tail = safeDecode((m[2] ?? "").replace(/^\//, ""));
+        refs.push({ raw: m[0] ?? "", secret: uuid, filename: tail || uuid, absolute: false });
+    }
+    return refs;
+}
+/** Fetch one Gitea/ForgeJo attachment's full bytes. */
+export async function downloadGiteaAttachment(ref) {
+    const { bytes, contentType } = await giteaFetchRaw(`/attachments/${ref.secret}`, { kind: "bot" }, runtime().attachmentMaxBytes);
+    return { bytes, contentType };
+}
+// Outbound upload via the issue/assets API. Gitea/ForgeJo accept multipart field
+// `attachment` at POST /repos/:owner/:repo/issues/:index/assets and return the
+// stored uuid + browser_download_url. The owner/repo split is done by the driver
+// (it already resolves the numeric repo id to a full_name).
+export async function uploadGiteaAttachment(owner, repo, number, file) {
+    const form = new FormData();
+    form.append("attachment", new Blob([file.bytes], { type: file.contentType }), file.filename);
+    const r = await giteaUpload(`/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/assets`, form, GiteaAttachmentSchema, { kind: "bot" });
+    return {
+        markdown: `![${r.name}](/attachments/${r.uuid})`,
+        url: r.browser_download_url,
+        filename: r.name,
+    };
+}
+//# sourceMappingURL=attachments.js.map

package/dist/platform/gitealike/attachments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.js","sourceRoot":"","sources":["../../../src/platform/gitealike/attachments.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+EAA+E;AAC/E,sEAAsE;AACtE,4EAA4E;AAC5E,4EAA4E;AAC5E,mDAAmD;AAEnD,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EACL,OAAO,EACP,UAAU,EACV,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAG9B,MAAM,gBAAgB,GAAG,+CAA+C,CAAC;AAEzE,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YACf,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI,IAAI,IAAI;YACtB,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAkB;IAC9D,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,MAAM,aAAa,CAChD,gBAAgB,GAAG,CAAC,MAAM,EAAE,EAC5B,EAAE,IAAI,EAAE,KAAK,EAAE,EACf,OAAO,EAAE,CAAC,kBAAkB,CAC7B,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,iFAAiF;AACjF,+EAA+E;AAC/E,iFAAiF;AACjF,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAa,EACb,IAAY,EACZ,MAAc,EACd,IAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7F,MAAM,CAAC,GAAG,MAAM,WAAW,CACzB,UAAU,kBAAkB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,MAAM,SAAS,EACzF,IAAI,EACJ,qBAAqB,EACrB,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,IAAI,GAAG;QAChD,GAAG,EAAE,CAAC,CAAC,oBAAoB;QAC3B,QAAQ,EAAE,CAAC,CAAC,IAAI;KACjB,CAAC;AACJ,CAAC"}