codekin 0.2.2 → 0.3.0

package/server/dist/crypto-utils.js

@@ -1,7 +1,27 @@
 /**
- * Shared cryptographic utilities for webhook signature verification.
+ * Shared cryptographic utilities for webhook signature verification,
+ * session-scoped token derivation, and secret redaction.
  */
 import crypto from 'crypto';
+/**
+ * Redact potential secrets from a string before logging.
+ * Matches common patterns: Bearer tokens, Authorization headers,
+ * URL-embedded passwords, and common API key formats.
+ */
+const SECRET_PATTERNS = [
+    [/Bearer\s+\S+/gi, 'Bearer [REDACTED]'],
+    [/Authorization:\s*\S+/gi, 'Authorization: [REDACTED]'],
+    [/(https?:\/\/[^:]+):([^@]+)@/gi, '$1:[REDACTED]@'],
+    [/\b(sk-|pk-|api[_-]?key[=:]\s*)\S+/gi, '$1[REDACTED]'],
+    [/(password|passwd|pwd|secret|token)[=:]\s*\S+/gi, '$1=[REDACTED]'],
+];
+export function redactSecrets(input) {
+    let result = input;
+    for (const [pattern, replacement] of SECRET_PATTERNS) {
+        result = result.replace(pattern, replacement);
+    }
+    return result;
+}
 /**
  * Verify an HMAC-SHA256 signature over a payload.
  * Comparison uses timingSafeEqual to resist timing oracle attacks.
@@ -19,4 +39,27 @@ export function verifyHmacSignature(payload, signature, secret) {
         return false;
     return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));
 }
+/**
+ * Derive a session-scoped token from the master auth token.
+ * Uses HMAC-SHA256(masterToken, "session:" + sessionId) so that:
+ * - Each session gets a unique, unpredictable token
+ * - The token cannot be used to recover the master token
+ * - The server can verify it without storing extra state
+ */
+export function deriveSessionToken(masterToken, sessionId) {
+    return crypto
+        .createHmac('sha256', masterToken)
+        .update(`session:${sessionId}`)
+        .digest('hex');
+}
+/**
+ * Verify a session-scoped token against the master token and session ID.
+ * Uses timing-safe comparison.
+ */
+export function verifySessionToken(masterToken, sessionId, candidateToken) {
+    const expected = deriveSessionToken(masterToken, sessionId);
+    if (candidateToken.length !== expected.length)
+        return false;
+    return crypto.timingSafeEqual(Buffer.from(candidateToken), Buffer.from(expected));
+}
 //# sourceMappingURL=crypto-utils.js.map

package/server/dist/crypto-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto-utils.js","sourceRoot":"","sources":["../crypto-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc;IACpF,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM;SAChC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACtD,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC9E,CAAC"}
+{"version":3,"file":"crypto-utils.js","sourceRoot":"","sources":["../crypto-utils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAA;AAE3B;;;;GAIG;AACH,MAAM,eAAe,GAA4B;IAC/C,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;IACvC,CAAC,wBAAwB,EAAE,2BAA2B,CAAC;IACvD,CAAC,+BAA+B,EAAE,gBAAgB,CAAC;IACnD,CAAC,qCAAqC,EAAE,cAAc,CAAC;IACvD,CAAC,gDAAgD,EAAE,eAAe,CAAC;CACpE,CAAA;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,eAAe,EAAE,CAAC;QACrD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc;IACpF,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM;SAChC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACtD,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,SAAiB;IACvE,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC;SACjC,MAAM,CAAC,WAAW,SAAS,EAAE,CAAC;SAC9B,MAAM,CAAC,KAAK,CAAC,CAAA;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB,EAAE,SAAiB,EAAE,cAAsB;IAC/F,MAAM,QAAQ,GAAG,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAA;IAC3D,IAAI,cAAc,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC3D,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAA;AACnF,CAAC"}

package/server/dist/docs-routes.d.ts

@@ -0,0 +1,16 @@
+/**
+ * REST routes for the docs browser feature.
+ *
+ * Provides two endpoints:
+ * - GET /api/docs?repo=<path> — list markdown files in a repo
+ * - GET /api/docs/file?repo=<path>&file=<relPath> — get raw content of a markdown file
+ *
+ * Repo path and file path are passed as query parameters to avoid
+ * Express routing issues with encoded slashes in path segments.
+ */
+import { Router } from 'express';
+import type { Request } from 'express';
+type VerifyFn = (token: string | undefined) => boolean;
+type ExtractFn = (req: Request) => string | undefined;
+export declare function createDocsRouter(verifyToken: VerifyFn, extractToken: ExtractFn): Router;
+export {};

package/server/dist/docs-routes.js

@@ -0,0 +1,141 @@
+/**
+ * REST routes for the docs browser feature.
+ *
+ * Provides two endpoints:
+ * - GET /api/docs?repo=<path> — list markdown files in a repo
+ * - GET /api/docs/file?repo=<path>&file=<relPath> — get raw content of a markdown file
+ *
+ * Repo path and file path are passed as query parameters to avoid
+ * Express routing issues with encoded slashes in path segments.
+ */
+import { Router } from 'express';
+import { readFileSync, readdirSync, statSync } from 'fs';
+import { join, resolve, relative, extname } from 'path';
+/** Directories to exclude from the file listing. */
+const EXCLUDED_DIRS = new Set([
+    'node_modules', '.git', '.github', '.codekin', '.vscode',
+    '.idea', 'dist', 'build', 'coverage', '__pycache__', '.next',
+    '.nuxt', '.svelte-kit', 'vendor', '.cache',
+]);
+/** Files pinned to the top of the list, in display order. */
+const PINNED_FILES = ['CLAUDE.md', 'README.md'];
+/**
+ * Recursively find all .md files in a directory, up to maxDepth levels deep.
+ * Excludes hidden directories and common non-source directories.
+ */
+function findMarkdownFiles(root, maxDepth) {
+    const results = [];
+    function walk(dir, depth) {
+        if (depth > maxDepth)
+            return;
+        let entries;
+        try {
+            entries = readdirSync(dir);
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (entry.startsWith('.') && entry !== '.')
+                continue;
+            const fullPath = join(dir, entry);
+            let stat;
+            try {
+                stat = statSync(fullPath);
+            }
+            catch {
+                continue;
+            }
+            if (stat.isDirectory()) {
+                if (!EXCLUDED_DIRS.has(entry)) {
+                    walk(fullPath, depth + 1);
+                }
+            }
+            else if (stat.isFile() && extname(entry).toLowerCase() === '.md') {
+                results.push(relative(root, fullPath));
+            }
+        }
+    }
+    walk(root, 0);
+    return results;
+}
+export function createDocsRouter(verifyToken, extractToken) {
+    const router = Router();
+    // Auth middleware for all docs routes
+    router.use('/api/docs', (req, res, next) => {
+        if (!verifyToken(extractToken(req))) {
+            return res.status(401).json({ error: 'Unauthorized' });
+        }
+        next();
+    });
+    /**
+     * GET /api/docs?repo=<path>
+     * List markdown files in the repo. Pinned files appear first.
+     */
+    router.get('/api/docs', (req, res) => {
+        const repoPath = req.query.repo;
+        if (!repoPath) {
+            return res.status(400).json({ error: 'Missing repo query parameter' });
+        }
+        // Validate the repo path exists and is a directory
+        try {
+            const stat = statSync(repoPath);
+            if (!stat.isDirectory()) {
+                return res.status(400).json({ error: 'Not a directory' });
+            }
+        }
+        catch {
+            return res.status(404).json({ error: 'Repo not found' });
+        }
+        const mdFiles = findMarkdownFiles(repoPath, 3);
+        const pinnedSet = new Set(PINNED_FILES.map(f => f.toLowerCase()));
+        const pinned = [];
+        const rest = [];
+        for (const filePath of mdFiles) {
+            if (pinnedSet.has(filePath.toLowerCase())) {
+                pinned.push({ path: filePath, pinned: true });
+            }
+            else {
+                rest.push({ path: filePath, pinned: false });
+            }
+        }
+        // Sort pinned in the defined order, rest alphabetically
+        pinned.sort((a, b) => {
+            const ai = PINNED_FILES.findIndex(p => p.toLowerCase() === a.path.toLowerCase());
+            const bi = PINNED_FILES.findIndex(p => p.toLowerCase() === b.path.toLowerCase());
+            return ai - bi;
+        });
+        rest.sort((a, b) => a.path.localeCompare(b.path));
+        res.json({ files: [...pinned, ...rest] });
+    });
+    /**
+     * GET /api/docs/file?repo=<path>&file=<relPath>
+     * Get the raw content of a single markdown file.
+     */
+    router.get('/api/docs/file', (req, res) => {
+        const repoPath = req.query.repo;
+        const filePath = req.query.file;
+        if (!repoPath || !filePath) {
+            return res.status(400).json({ error: 'Missing repo or file query parameter' });
+        }
+        // Validate file extension
+        if (extname(filePath).toLowerCase() !== '.md') {
+            return res.status(400).json({ error: 'Only .md files are supported' });
+        }
+        // Path traversal guard
+        const resolved = resolve(repoPath, filePath);
+        const repoResolved = resolve(repoPath);
+        if (!resolved.startsWith(repoResolved + '/') && resolved !== repoResolved) {
+            return res.status(404).json({ error: 'File not found' });
+        }
+        try {
+            const content = readFileSync(resolved, 'utf-8');
+            res.json({ path: filePath, content });
+        }
+        catch {
+            res.status(404).json({ error: 'File not found' });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=docs-routes.js.map

package/server/dist/docs-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs-routes.js","sourceRoot":"","sources":["../docs-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAEhC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAA;AACxD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAKvD,oDAAoD;AACpD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS;IACxD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO;IAC5D,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ;CAC3C,CAAC,CAAA;AAEF,6DAA6D;AAC7D,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;AAO/C;;;GAGG;AACH,SAAS,iBAAiB,CAAC,IAAY,EAAE,QAAgB;IACvD,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,SAAS,IAAI,CAAC,GAAW,EAAE,KAAa;QACtC,IAAI,KAAK,GAAG,QAAQ;YAAE,OAAM;QAC5B,IAAI,OAAiB,CAAA;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,GAAG;gBAAE,SAAQ;YACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACjC,IAAI,IAAI,CAAA;YACR,IAAI,CAAC;gBACH,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAQ;YACV,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;gBAC3B,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;gBACnE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACb,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,WAAqB,EACrB,YAAuB;IAEvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAA;IAEvB,sCAAsC;IACtC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACzC,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;QACxD,CAAC;QACD,IAAI,EAAE,CAAA;IACR,CAAC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAA;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAA;QACxE,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;YAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAA;YAC3D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAC1D,CAAC;QAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC9C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;QAEjE,MAAM,MAAM,GAAc,EAAE,CAAA;QAC5B,MAAM,IAAI,GAAc,EAAE,CAAA;QAE1B,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/C,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;YAC9C,CAAC;QACH,CAAC;QAED,wDAAwD;QACxD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YAChF,MAAM,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YAChF,OAAO,EAAE,GAAG,EAAE,CAAA;QAChB,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QAEjD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF;;;OAGG;IACH,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACxC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAA;QACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAA0B,CAAA;QAErD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAA;QAChF,CAAC;QAED,0BAA0B;QAC1B,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YAC9C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAA;QACxE,CAAC;QAED,uBAAuB;QACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;QACtC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC1E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAC1D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAA;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACnD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC"}

package/server/dist/session-manager.d.ts

@@ -10,9 +10,10 @@
  * on server startup. Active sessions are automatically restarted after a
  * server restart with staggered delays.
  *
- * Auto-approval rules (tools and Bash commands) are stored per-repo (keyed by
- * workingDir) in ~/.codekin/repo-approvals.json, so they persist across
- * sessions sharing the same repo.
+ * Delegates to focused modules:
+ * - ApprovalManager: repo-level auto-approval rules for tools/commands
+ * - SessionNaming: AI-powered session name generation with retry logic
+ * - SessionPersistence: disk I/O for session state
  */
 import type { WebSocket } from 'ws';
 import { SessionArchive } from './session-archive.js';
@@ -25,10 +26,6 @@ export interface CreateSessionOptions {
 }
 export declare class SessionManager {
     private sessions;
-    /** Repo-level auto-approval store, keyed by workingDir (repo path). */
-    private repoApprovals;
-    private _persistTimer;
-    private _approvalPersistTimer;
     /** SQLite archive for closed sessions. */
     readonly archive: SessionArchive;
     /** Exposed so ws-server can pass its port to child Claude processes. */
@@ -39,42 +36,40 @@ export declare class SessionManager {
     _globalBroadcast: ((msg: WsServerMessage) => void) | null;
     /** Registered listeners notified when a session's Claude process exits. */
     private _exitListeners;
+    /** Delegated approval logic. */
+    private approvalManager;
+    /** Delegated naming logic. */
+    private sessionNaming;
+    /** Delegated persistence logic. */
+    private sessionPersistence;
     constructor();
-    /** Get or create the approval entry for a repo (workingDir). */
-    private getRepoApprovalEntry;
-    /** Add an auto-approval rule for a repo and persist. */
-    private addRepoApproval;
-    /**
-     * Command prefixes where prefix-based auto-approval is safe.
-     * Only commands whose behavior is determined by later arguments (not by target)
-     * should be listed here. Dangerous commands like rm, sudo, curl, etc. require
-     * exact match to prevent escalation (e.g. approving `rm -rf /tmp/x` should NOT
-     * also approve `rm -rf /`).
-     */
-    private static readonly SAFE_PREFIX_COMMANDS;
-    /**
-     * Check if a tool/command is auto-approved for a repo.
-     * For Bash commands, uses prefix matching only for safe commands;
-     * dangerous commands require exact match to prevent escalation.
-     */
+    /** Check if a tool/command is auto-approved for a repo. */
     checkAutoApproval(workingDir: string, toolName: string, toolInput: Record<string, unknown>): boolean;
-    /** Extract the command prefix (first two tokens) for prefix-based matching. */
-    private commandPrefix;
-    /**
-     * Derive a glob pattern from a tool invocation for "Approve Pattern".
-     * Returns a string like "cat *" or "git diff *", or null if no safe pattern applies.
-     * Patterns use the format "<prefix> *" meaning "this prefix followed by anything".
-     */
+    /** Derive a glob pattern from a tool invocation for "Approve Pattern". */
     derivePattern(toolName: string, toolInput: Record<string, unknown>): string | null;
-    /**
-     * Check if a bash command matches a stored pattern.
-     * Patterns of the form "<prefix> *" match any command starting with <prefix>.
-     */
-    private matchesPattern;
-    /** Save an "Always Allow" approval for a tool/command. */
-    private saveAlwaysAllow;
-    /** Save a pattern-based approval (e.g. "cat *") for a tool/command. */
-    private savePatternApproval;
+    /** Return the auto-approved tools, commands, and patterns for a repo (workingDir). */
+    getApprovals(workingDir: string): {
+        tools: string[];
+        commands: string[];
+        patterns: string[];
+    };
+    /** Remove an auto-approval rule for a repo (workingDir) and persist to disk. */
+    removeApproval(workingDir: string, opts: {
+        tool?: string;
+        command?: string;
+        pattern?: string;
+    }, skipPersist?: boolean): 'invalid' | boolean;
+    /** Add an auto-approval rule for a repo and persist (used by tests via `as any`). */
+    private addRepoApproval;
+    /** Write repo-level approvals to disk. Exposed for shutdown. */
+    persistRepoApprovals(): void;
+    /** Schedule session naming via AI provider. */
+    scheduleSessionNaming(sessionId: string): void;
+    /** Re-trigger session naming on user interaction. */
+    retrySessionNamingOnInteraction(sessionId: string): void;
+    /** Write all sessions to disk as JSON (atomic rename to prevent corruption). */
+    persistToDisk(): void;
+    private persistToDiskDebounced;
     /** Create a new session and persist to disk. */
     create(name: string, workingDir: string, options?: CreateSessionOptions): Session;
     /** Register a listener called when any session's Claude process exits.
@@ -83,26 +78,6 @@ export declare class SessionManager {
     get(id: string): Session | undefined;
     list(): SessionInfo[];
     rename(sessionId: string, newName: string): boolean;
-    /** Max naming retry attempts before giving up. */
-    private static readonly MAX_NAMING_ATTEMPTS;
-    /** Back-off delays for naming retries: 20s, 60s, 120s, 240s, 240s */
-    private static readonly NAMING_DELAYS;
-    /** Schedule session naming via the Anthropic API.
-     *  Used as a 20s fallback for long responses — fires immediately via result handler
-     *  for responses that finish sooner.
-     *  Automatically retries on failure with increasing delays. */
-    scheduleSessionNaming(sessionId: string): void;
-    /** Resolve the AI model to use for session naming based on available API keys.
-     *  Respects the user's preferred support provider setting.
-     *  Fallback priority: Groq (free/fast) → OpenAI → Gemini → Anthropic. */
-    private getNamingModel;
-    /** Execute the actual naming call. Called by the timer set in scheduleSessionNaming.
-     *  Uses the first available API provider for minimal cost and latency. */
-    private executeSessionNaming;
-    /** Re-trigger session naming when user interacts, if the session is still unnamed
-     *  and no naming timer is already pending. Uses a short delay (5s) since we already
-     *  have conversation context at this point. */
-    retrySessionNamingOnInteraction(sessionId: string): void;
     /** Add a WebSocket client to a session. Returns the session or undefined if not found.
      *  Re-broadcasts any pending approval/control prompts so the joining client sees them. */
     join(sessionId: string, ws: WebSocket): Session | undefined;
@@ -171,14 +146,14 @@ export declare class SessionManager {
     /** Update the model for a session and restart Claude with the new model. */
     setModel(sessionId: string, model: string): boolean;
     stopClaude(sessionId: string): void;
+    /** Check if an error result text matches a transient API error worth retrying. */
+    private isRetryableApiError;
     /**
      * Build a condensed text summary of a session's conversation history.
      * Used as context when auto-starting Claude for sessions without a saved
      * Claude session ID (so the CLI can't resume from its own storage).
      * Caps output at ~4000 chars, keeping the most recent exchanges.
      */
-    /** Check if an error result text matches a transient API error worth retrying. */
-    private isRetryableApiError;
     private buildSessionContext;
     private resetStallTimer;
     private clearStallTimer;
@@ -199,28 +174,6 @@ export declare class SessionManager {
      * in-progress state after session restore.
      */
     private completeInProgressTasks;
-    /** Return the auto-approved tools, commands, and patterns for a repo (workingDir). */
-    getApprovals(workingDir: string): {
-        tools: string[];
-        commands: string[];
-        patterns: string[];
-    };
-    /** Remove an auto-approval rule for a repo (workingDir) and persist to disk.
-     *  Returns 'invalid' if no tool/command provided, or boolean indicating if something was deleted.
-     *  Pass skipPersist=true for bulk operations (caller must call persistRepoApprovals after). */
-    removeApproval(workingDir: string, opts: {
-        tool?: string;
-        command?: string;
-        pattern?: string;
-    }, skipPersist?: boolean): 'invalid' | boolean;
-    /** Write all sessions to disk as JSON (atomic rename to prevent corruption). */
-    persistToDisk(): void;
-    private persistToDiskDebounced;
-    /** Write repo-level approvals to disk (atomic rename). */
-    persistRepoApprovals(): void;
-    private persistRepoApprovalsDebounced;
-    private restoreFromDisk;
-    private restoreRepoApprovalsFromDisk;
     /**
      * Auto-restart Claude processes for sessions that were active before a server
      * restart. Each session is started with a staggered delay to avoid flooding.