crewx-bridge 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CrewX
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,102 @@
+# crewx-bridge
+
+CrewX Bridge securely enrolls a macOS or Linux machine with a CrewX workspace
+and lets workspace administrators launch local Codex, Claude Code, Pi, Hermes,
+or OpenClaw agent profiles in folders approved by that machine's owner.
+
+Bridge is not a remote shell. It accepts only signed-in, server-authorized,
+structured `start_agent` and `stop_agent` commands. It uses an outbound HTTPS
+connection, per-machine credentials, expiring per-run agent tokens, command
+leases, an idempotency journal, strict folder identities, fixed `shell: false`
+process templates, and a local policy that the server cannot loosen.
+
+## Requirements
+
+- Node.js 22 or later
+- macOS or Linux
+- the coding runtimes you intend to use already authenticated for the OS user
+- a one-time enrollment command from a CrewX workspace owner/admin
+
+Do not install or run Bridge as root. On a shared or production host, use a
+dedicated OS user.
+
+## Install and enroll
+
+Install Bridge into a stable location before installing its user service:
+
+```sh
+npm install --global crewx-bridge
+crewx-bridge enroll \
+  --url https://crewx.example \
+  --code crwb_enroll_… \
+  --name "Build Mac"
+```
+
+Register each project locally. The CrewX web application sees only the name,
+opaque ID, and filesystem identity—not the path.
+
+```sh
+crewx-bridge folder add ~/Development/product --name Product
+crewx-bridge folder list
+```
+
+Inspect the connection and runtimes:
+
+```sh
+crewx-bridge doctor
+crewx-bridge status
+```
+
+Install the user service:
+
+```sh
+crewx-bridge service install
+crewx-bridge service status
+```
+
+On Linux, unattended operation after logout may require an administrator to
+enable systemd user lingering. Bridge reports this but never runs a privileged
+command itself.
+
+## Local policy
+
+Bridge allows `read_only` and `standard` by default and permits at most two
+concurrent runs. Full access requires an explicit local opt-in:
+
+```sh
+crewx-bridge policy \
+  --adapters codex,claude,pi \
+  --permissions read_only,standard,full_access \
+  --max-runs 2 \
+  --allow-full-access
+```
+
+Treat full access as equivalent to giving that agent the OS user's filesystem
+and command privileges. Prefer a dedicated host or OS account.
+Disable that opt-in again with `crewx-bridge policy --deny-full-access`.
+
+## Foreground operation
+
+For development or diagnostics:
+
+```sh
+crewx-bridge serve
+crewx-bridge serve --once
+```
+
+`Ctrl+C` stops supervised child agents before exiting.
+
+## Protected state
+
+Credential files are written atomically with mode `0600` below a mode `0700`
+directory. Bridge refuses symlinks, unsafe ownership, and group/world-readable
+state.
+
+- macOS: `~/Library/Application Support/CrewX Bridge/config.json`
+- Linux: `${XDG_CONFIG_HOME:-~/.config}/crewx/bridge/config.json`
+
+The local journal contains command/run IDs and PIDs, never run tokens.
+
+See [`docs/BRIDGE_ARCHITECTURE.md`](../../docs/BRIDGE_ARCHITECTURE.md) in the
+CrewX monorepo for the threat model, protocol, leasing lifecycle, and security
+invariants.

package/dist/api.d.ts

@@ -0,0 +1,16 @@
+import { type BridgeCommandCompletion, type BridgeCommandFailure, type BridgeCommandClaimResponse, type BridgeEnrollmentRequest, type BridgeEnrollmentResponse, type BridgeFoldersSyncRequest, type BridgeHeartbeatRequest, type BridgeLeaseRequest } from "crewx-agent-protocol";
+import { type BridgeConfig } from "./config.js";
+export declare function enrollMachine(url: string, input: BridgeEnrollmentRequest): Promise<BridgeEnrollmentResponse>;
+export declare class BridgeApi {
+    readonly baseUrl: string;
+    readonly token: string;
+    constructor(config: Pick<BridgeConfig, "url" | "token">);
+    heartbeat(input: BridgeHeartbeatRequest): Promise<void>;
+    syncFolders(input: BridgeFoldersSyncRequest): Promise<void>;
+    claim(): Promise<BridgeCommandClaimResponse>;
+    acknowledge(commandId: string, input: BridgeLeaseRequest): Promise<void>;
+    renew(commandId: string, input: BridgeLeaseRequest): Promise<void>;
+    complete(commandId: string, input: BridgeCommandCompletion): Promise<void>;
+    fail(commandId: string, input: BridgeCommandFailure): Promise<void>;
+}
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAML,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACxB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,aAAa,CAAC;AAgIpE,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,wBAAwB,CAAC,CAWnC;AAED,qBAAa,SAAS;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEX,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,GAAG,OAAO,CAAC;IAKjD,SAAS,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvD,WAAW,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3D,KAAK,IAAI,OAAO,CAAC,0BAA0B,CAAC;IAe5C,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAYxE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IAYlE,QAAQ,CACZ,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,IAAI,CAAC;IAYV,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;CAW1E"}

package/dist/api.js

@@ -0,0 +1,157 @@
+import * as tls from "node:tls";
+import { BridgeCommandClaimResponseSchema, BridgeEnrollmentRequestSchema, BridgeEnrollmentResponseSchema, BridgeFoldersSyncRequestSchema, BridgeHeartbeatRequestSchema, } from "crewx-agent-protocol";
+import { z } from "zod";
+import { REQUEST_TIMEOUT_MS } from "./constants.js";
+import { normalizeServerUrl } from "./config.js";
+import { BridgeError, errorMessage, redactSecrets } from "./errors.js";
+const OkSchema = z.object({ ok: z.boolean().optional() }).passthrough();
+const StatusSchema = z
+    .object({ status: z.string(), leased_until: z.string().optional() })
+    .passthrough();
+function trustSystemCertificateAuthorities() {
+    if (typeof tls.getCACertificates !== "function" ||
+        typeof tls.setDefaultCACertificates !== "function") {
+        return;
+    }
+    try {
+        tls.setDefaultCACertificates([
+            ...new Set([
+                ...tls.getCACertificates("default"),
+                ...tls.getCACertificates("system"),
+            ]),
+        ]);
+    }
+    catch {
+        // Not every supported Node 22 build exposes both stores.
+    }
+}
+trustSystemCertificateAuthorities();
+function apiBase(url) {
+    return `${normalizeServerUrl(url)}/api/bridge/v1`;
+}
+async function parseResponseBody(response) {
+    const maximumBytes = 256 * 1024;
+    const length = Number(response.headers.get("content-length") ?? "0");
+    if (Number.isFinite(length) && length > maximumBytes) {
+        throw new BridgeError("response_too_large", "CrewX returned an oversized response.");
+    }
+    if (!response.body)
+        return {};
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            const item = await reader.read();
+            if (item.done)
+                break;
+            total += item.value.byteLength;
+            if (total > maximumBytes) {
+                await reader.cancel();
+                throw new BridgeError("response_too_large", "CrewX returned an oversized response.");
+            }
+            chunks.push(item.value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    let text;
+    try {
+        text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    }
+    catch {
+        throw new BridgeError("invalid_response", "CrewX returned invalid UTF-8.");
+    }
+    if (!text)
+        return {};
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new BridgeError("invalid_response", "CrewX returned invalid JSON.");
+    }
+}
+async function request(baseUrl, token, method, path, body) {
+    let response;
+    try {
+        response = await fetch(`${baseUrl}${path}`, {
+            method,
+            headers: {
+                Accept: "application/json",
+                "Content-Type": "application/json",
+                "User-Agent": "crewx-bridge",
+                ...(token ? { Authorization: `Bearer ${token}` } : {}),
+            },
+            body: JSON.stringify(body),
+            redirect: "error",
+            signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+        });
+    }
+    catch (error) {
+        throw new BridgeError("network_error", redactSecrets(`Unable to reach CrewX: ${errorMessage(error)}`, token ? [token] : []), 1, { cause: error });
+    }
+    const payload = await parseResponseBody(response);
+    if (!response.ok) {
+        const possibleMessage = typeof payload === "object" &&
+            payload !== null &&
+            typeof payload.message === "string"
+            ? payload.message
+            : undefined;
+        const serverMessage = possibleMessage ?? `CrewX returned HTTP ${response.status}.`;
+        throw new BridgeError(response.status === 401 ? "unauthorized" : "api_error", redactSecrets(serverMessage, token ? [token] : []));
+    }
+    return payload;
+}
+export async function enrollMachine(url, input) {
+    const requestBody = BridgeEnrollmentRequestSchema.parse(input);
+    const payload = await request(apiBase(url), undefined, "POST", "/enroll", requestBody);
+    const parsed = BridgeEnrollmentResponseSchema.safeParse(payload);
+    if (!parsed.success) {
+        throw new BridgeError("invalid_response", "CrewX returned an invalid enrollment response.");
+    }
+    return parsed.data;
+}
+export class BridgeApi {
+    baseUrl;
+    token;
+    constructor(config) {
+        this.baseUrl = apiBase(config.url);
+        this.token = config.token;
+    }
+    async heartbeat(input) {
+        const body = BridgeHeartbeatRequestSchema.parse(input);
+        OkSchema.parse(await request(this.baseUrl, this.token, "POST", "/heartbeat", body));
+    }
+    async syncFolders(input) {
+        const body = BridgeFoldersSyncRequestSchema.parse(input);
+        await request(this.baseUrl, this.token, "PUT", "/folders", body);
+    }
+    async claim() {
+        const payload = await request(this.baseUrl, this.token, "POST", "/commands/claim", {});
+        const parsed = BridgeCommandClaimResponseSchema.safeParse(payload);
+        if (!parsed.success) {
+            throw new BridgeError("invalid_response", "CrewX returned an invalid command.");
+        }
+        return parsed.data;
+    }
+    async acknowledge(commandId, input) {
+        StatusSchema.parse(await request(this.baseUrl, this.token, "POST", `/commands/${encodeURIComponent(commandId)}/ack`, input));
+    }
+    async renew(commandId, input) {
+        StatusSchema.parse(await request(this.baseUrl, this.token, "POST", `/commands/${encodeURIComponent(commandId)}/renew`, input));
+    }
+    async complete(commandId, input) {
+        StatusSchema.parse(await request(this.baseUrl, this.token, "POST", `/commands/${encodeURIComponent(commandId)}/complete`, input));
+    }
+    async fail(commandId, input) {
+        StatusSchema.parse(await request(this.baseUrl, this.token, "POST", `/commands/${encodeURIComponent(commandId)}/fail`, input));
+    }
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAEhC,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,8BAA8B,EAC9B,8BAA8B,EAC9B,4BAA4B,GAS7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAqB,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEvE,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACxE,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;KACnE,WAAW,EAAE,CAAC;AAEjB,SAAS,iCAAiC;IACxC,IACE,OAAO,GAAG,CAAC,iBAAiB,KAAK,UAAU;QAC3C,OAAO,GAAG,CAAC,wBAAwB,KAAK,UAAU,EAClD,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,GAAG,CAAC,wBAAwB,CAAC;YAC3B,GAAG,IAAI,GAAG,CAAC;gBACT,GAAG,GAAG,CAAC,iBAAiB,CAAC,SAAS,CAAC;gBACnC,GAAG,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC;aACnC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;AACH,CAAC;AAED,iCAAiC,EAAE,CAAC;AAEpC,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IACjD,MAAM,YAAY,GAAG,GAAG,GAAG,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,YAAY,EAAE,CAAC;QACrD,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,uCAAuC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAE9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;gBACzB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,WAAW,CACnB,oBAAoB,EACpB,uCAAuC,CACxC,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,8BAA8B,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,OAAe,EACf,KAAyB,EACzB,MAAsB,EACtB,IAAY,EACZ,IAAa;IAEb,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;YAC1C,MAAM;YACN,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,cAAc;gBAC5B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CACnB,eAAe,EACf,aAAa,CAAC,0BAA0B,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EACpF,CAAC,EACD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,eAAe,GACnB,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,KAAK,IAAI;YAChB,OAAQ,OAAmC,CAAC,OAAO,KAAK,QAAQ;YAC9D,CAAC,CAAE,OAAkC,CAAC,OAAO;YAC7C,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,aAAa,GACjB,eAAe,IAAI,uBAAuB,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC/D,MAAM,IAAI,WAAW,CACnB,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,EACtD,aAAa,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CACnD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,KAA8B;IAE9B,MAAM,WAAW,GAAG,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,WAAW,CACnB,kBAAkB,EAClB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,OAAO,SAAS;IACX,OAAO,CAAS;IAChB,KAAK,CAAS;IAEvB,YAAY,MAA2C;QACrD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAA6B;QAC3C,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvD,QAAQ,CAAC,KAAK,CACZ,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA+B;QAC/C,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,OAAO,GAAG,MAAM,OAAO,CAC3B,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,EACV,MAAM,EACN,iBAAiB,EACjB,EAAE,CACH,CAAC;QACF,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,KAAyB;QAC5D,YAAY,CAAC,KAAK,CAChB,MAAM,OAAO,CACX,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,EACV,MAAM,EACN,aAAa,kBAAkB,CAAC,SAAS,CAAC,MAAM,EAChD,KAAK,CACN,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,KAAyB;QACtD,YAAY,CAAC,KAAK,CAChB,MAAM,OAAO,CACX,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,EACV,MAAM,EACN,aAAa,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EAClD,KAAK,CACN,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,KAA8B;QAE9B,YAAY,CAAC,KAAK,CAChB,MAAM,OAAO,CACX,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,EACV,MAAM,EACN,aAAa,kBAAkB,CAAC,SAAS,CAAC,WAAW,EACrD,KAAK,CACN,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,KAA2B;QACvD,YAAY,CAAC,KAAK,CAChB,MAAM,OAAO,CACX,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,KAAK,EACV,MAAM,EACN,aAAa,kBAAkB,CAAC,SAAS,CAAC,OAAO,EACjD,KAAK,CACN,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/config.d.ts

@@ -0,0 +1,83 @@
+import { z } from "zod";
+export declare const BridgeFolderConfigSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    name: z.ZodString;
+    path: z.ZodString;
+    fingerprint: z.ZodString;
+}, z.core.$strict>;
+export type BridgeFolderConfig = z.infer<typeof BridgeFolderConfigSchema>;
+export declare const BridgeLocalPolicySchema: z.ZodObject<{
+    allowedAdapters: z.ZodArray<z.ZodEnum<{
+        codex: "codex";
+        claude: "claude";
+        pi: "pi";
+        hermes: "hermes";
+        openclaw: "openclaw";
+    }>>;
+    allowedPermissions: z.ZodArray<z.ZodEnum<{
+        read_only: "read_only";
+        standard: "standard";
+        full_access: "full_access";
+    }>>;
+    allowFullAccess: z.ZodBoolean;
+    maxConcurrentRuns: z.ZodNumber;
+    shutdownGraceMs: z.ZodNumber;
+}, z.core.$strict>;
+export type BridgeLocalPolicy = z.infer<typeof BridgeLocalPolicySchema>;
+export declare const BridgeConfigSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    url: z.ZodURL;
+    token: z.ZodString;
+    machineId: z.ZodUUID;
+    machineName: z.ZodString;
+    workspace: z.ZodObject<{
+        id: z.ZodString;
+        slug: z.ZodString;
+    }, z.core.$strict>;
+    heartbeatInterval: z.ZodNumber;
+    policy: z.ZodObject<{
+        allowedAdapters: z.ZodArray<z.ZodEnum<{
+            codex: "codex";
+            claude: "claude";
+            pi: "pi";
+            hermes: "hermes";
+            openclaw: "openclaw";
+        }>>;
+        allowedPermissions: z.ZodArray<z.ZodEnum<{
+            read_only: "read_only";
+            standard: "standard";
+            full_access: "full_access";
+        }>>;
+        allowFullAccess: z.ZodBoolean;
+        maxConcurrentRuns: z.ZodNumber;
+        shutdownGraceMs: z.ZodNumber;
+    }, z.core.$strict>;
+    folders: z.ZodArray<z.ZodObject<{
+        id: z.ZodUUID;
+        name: z.ZodString;
+        path: z.ZodString;
+        fingerprint: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type BridgeConfig = z.infer<typeof BridgeConfigSchema>;
+export interface BridgePathEnvironment {
+    CREWX_BRIDGE_CONFIG_HOME?: string | undefined;
+    CREWX_BRIDGE_STATE_HOME?: string | undefined;
+    XDG_CONFIG_HOME?: string | undefined;
+    XDG_STATE_HOME?: string | undefined;
+}
+export declare function normalizeServerUrl(input: string): string;
+export declare function bridgeConfigDirectory(environment?: BridgePathEnvironment, platform?: NodeJS.Platform): string;
+export declare function bridgeStateDirectory(environment?: BridgePathEnvironment, platform?: NodeJS.Platform): string;
+export declare function bridgeConfigPath(environment?: BridgePathEnvironment, platform?: NodeJS.Platform): string;
+export declare function bridgeJournalPath(environment?: BridgePathEnvironment, platform?: NodeJS.Platform): string;
+export declare function ensureSecureDirectory(path: string): Promise<void>;
+export declare function readSecureText(path: string): Promise<string | undefined>;
+export declare function writeSecureText(path: string, contents: string): Promise<void>;
+export declare function readBridgeConfig(environment?: BridgePathEnvironment, platform?: NodeJS.Platform): Promise<BridgeConfig>;
+export declare function saveBridgeConfig(config: BridgeConfig, environment?: BridgePathEnvironment, platform?: NodeJS.Platform): Promise<string>;
+export declare function canonicalFolder(input: string): Promise<{
+    path: string;
+    fingerprint: string;
+}>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,wBAAwB;;;;;kBAO1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;kBAoBhC,CAAC;AACL,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYpB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,wBAAwB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,uBAAuB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CA2BxD;AAED,wBAAgB,qBAAqB,CACnC,WAAW,GAAE,qBAAmC,EAChD,QAAQ,kBAAmB,GAC1B,MAAM,CASR;AAED,wBAAgB,oBAAoB,CAClC,WAAW,GAAE,qBAAmC,EAChD,QAAQ,kBAAmB,GAC1B,MAAM,CAUR;AAED,wBAAgB,gBAAgB,CAC9B,WAAW,GAAE,qBAAmC,EAChD,QAAQ,kBAAmB,GAC1B,MAAM,CAER;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,GAAE,qBAAmC,EAChD,QAAQ,kBAAmB,GAC1B,MAAM,CAER;AA6BD,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIvE;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA8B9E;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA8BnF;AAED,wBAAsB,gBAAgB,CACpC,WAAW,GAAE,qBAAmC,EAChD,QAAQ,kBAAmB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAyBvB;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,YAAY,EACpB,WAAW,GAAE,qBAAmC,EAChD,QAAQ,kBAAmB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC,CAahD"}

package/dist/config.js

@@ -0,0 +1,233 @@
+import { constants as fsConstants } from "node:fs";
+import { chmod, lstat, mkdir, open, realpath, rename, stat, unlink, } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { AgentAdapterSchema, BridgePermissionSchema, } from "crewx-agent-protocol";
+import { z } from "zod";
+import { CONFIG_VERSION } from "./constants.js";
+import { BridgeError } from "./errors.js";
+const FingerprintSchema = z
+    .string()
+    .min(16)
+    .max(128)
+    .regex(/^[A-Za-z0-9:_-]+$/);
+export const BridgeFolderConfigSchema = z
+    .object({
+    id: z.uuid(),
+    name: z.string().trim().min(1).max(100),
+    path: z.string().min(1).max(4096),
+    fingerprint: FingerprintSchema,
+})
+    .strict();
+export const BridgeLocalPolicySchema = z
+    .object({
+    allowedAdapters: z.array(AgentAdapterSchema).min(1).max(5),
+    allowedPermissions: z.array(BridgePermissionSchema).min(1).max(3),
+    allowFullAccess: z.boolean(),
+    maxConcurrentRuns: z.number().int().min(1).max(32),
+    shutdownGraceMs: z.number().int().min(500).max(60_000),
+})
+    .strict()
+    .superRefine((policy, context) => {
+    if (policy.allowedPermissions.includes("full_access") &&
+        !policy.allowFullAccess) {
+        context.addIssue({
+            code: "custom",
+            path: ["allowFullAccess"],
+            message: "full_access requires explicit local opt-in",
+        });
+    }
+});
+export const BridgeConfigSchema = z
+    .object({
+    version: z.literal(CONFIG_VERSION),
+    url: z.url(),
+    token: z.string().min(48).max(160).regex(/^crwb_[A-Za-z0-9_-]+$/),
+    machineId: z.uuid(),
+    machineName: z.string().trim().min(1).max(100),
+    workspace: z.object({ id: z.string().min(1), slug: z.string().min(1) }).strict(),
+    heartbeatInterval: z.number().int().min(5).max(300),
+    policy: BridgeLocalPolicySchema,
+    folders: z.array(BridgeFolderConfigSchema).max(100),
+})
+    .strict();
+export function normalizeServerUrl(input) {
+    let url;
+    try {
+        url = new URL(input);
+    }
+    catch {
+        throw new BridgeError("invalid_url", `Invalid CrewX URL: ${input}`);
+    }
+    if (!["http:", "https:"].includes(url.protocol)) {
+        throw new BridgeError("invalid_url", "CrewX URL must use https://.");
+    }
+    const local = ["localhost", "127.0.0.1", "[::1]", "::1"].includes(url.hostname);
+    if (url.protocol !== "https:" && !local) {
+        throw new BridgeError("insecure_url", "CrewX Bridge requires HTTPS unless CrewX runs on localhost.");
+    }
+    if (url.username || url.password) {
+        throw new BridgeError("embedded_credentials", "CrewX URL must not contain embedded credentials.");
+    }
+    url.search = "";
+    url.hash = "";
+    url.pathname = url.pathname.replace(/\/+$/, "") || "/";
+    return url.toString().replace(/\/$/, "");
+}
+export function bridgeConfigDirectory(environment = process.env, platform = process.platform) {
+    if (environment.CREWX_BRIDGE_CONFIG_HOME?.trim()) {
+        return resolve(environment.CREWX_BRIDGE_CONFIG_HOME.trim());
+    }
+    if (platform === "darwin") {
+        return join(homedir(), "Library", "Application Support", "CrewX Bridge");
+    }
+    const base = environment.XDG_CONFIG_HOME?.trim() || join(homedir(), ".config");
+    return join(base, "crewx", "bridge");
+}
+export function bridgeStateDirectory(environment = process.env, platform = process.platform) {
+    if (environment.CREWX_BRIDGE_STATE_HOME?.trim()) {
+        return resolve(environment.CREWX_BRIDGE_STATE_HOME.trim());
+    }
+    if (platform === "darwin") {
+        return join(homedir(), "Library", "Logs", "CrewX Bridge");
+    }
+    const base = environment.XDG_STATE_HOME?.trim() || join(homedir(), ".local", "state");
+    return join(base, "crewx", "bridge");
+}
+export function bridgeConfigPath(environment = process.env, platform = process.platform) {
+    return join(bridgeConfigDirectory(environment, platform), "config.json");
+}
+export function bridgeJournalPath(environment = process.env, platform = process.platform) {
+    return join(bridgeStateDirectory(environment, platform), "journal.json");
+}
+function currentUid() {
+    return typeof process.getuid === "function" ? process.getuid() : undefined;
+}
+async function verifySecureNode(path, kind) {
+    const info = await lstat(path);
+    if (info.isSymbolicLink()) {
+        throw new BridgeError("unsafe_symlink", `${path} must not be a symbolic link.`);
+    }
+    if (kind === "file" ? !info.isFile() : !info.isDirectory()) {
+        throw new BridgeError("unsafe_type", `${path} is not a ${kind}.`);
+    }
+    const uid = currentUid();
+    if (uid !== undefined && info.uid !== uid) {
+        throw new BridgeError("unsafe_owner", `${path} is not owned by the current user.`);
+    }
+    if ((info.mode & 0o077) !== 0) {
+        throw new BridgeError("unsafe_mode", `${path} is accessible by another user; expected mode ${kind === "file" ? "0600" : "0700"}.`);
+    }
+}
+export async function ensureSecureDirectory(path) {
+    await mkdir(path, { recursive: true, mode: 0o700 });
+    await chmod(path, 0o700);
+    await verifySecureNode(path, "directory");
+}
+export async function readSecureText(path) {
+    try {
+        await verifySecureNode(dirname(path), "directory");
+        await verifySecureNode(path, "file");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+    const noFollow = fsConstants.O_NOFOLLOW ?? 0;
+    const handle = await open(path, fsConstants.O_RDONLY | noFollow);
+    try {
+        const info = await handle.stat();
+        if (!info.isFile() || (info.mode & 0o077) !== 0) {
+            throw new BridgeError("unsafe_config", `${path} changed during secure open.`);
+        }
+        const uid = currentUid();
+        if (uid !== undefined && info.uid !== uid) {
+            throw new BridgeError("unsafe_owner", `${path} changed ownership.`);
+        }
+        if (info.size > 2 * 1024 * 1024) {
+            throw new BridgeError("unsafe_state_size", `${path} exceeds the maximum protected state size.`);
+        }
+        return await handle.readFile("utf8");
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function writeSecureText(path, contents) {
+    const directory = dirname(path);
+    await ensureSecureDirectory(directory);
+    const temporary = join(directory, `.${path.split("/").at(-1) ?? "state"}.${process.pid}.${Date.now()}.tmp`);
+    try {
+        const handle = await open(temporary, "wx", 0o600);
+        try {
+            await handle.writeFile(contents, "utf8");
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
+        }
+        await chmod(temporary, 0o600);
+        await rename(temporary, path);
+        await chmod(path, 0o600);
+    }
+    catch (error) {
+        await unlink(temporary).catch(() => undefined);
+        throw error;
+    }
+    const directoryHandle = await open(directory, "r");
+    try {
+        await directoryHandle.sync();
+    }
+    catch {
+        // Some filesystems do not allow directory fsync.
+    }
+    finally {
+        await directoryHandle.close();
+    }
+}
+export async function readBridgeConfig(environment = process.env, platform = process.platform) {
+    const path = bridgeConfigPath(environment, platform);
+    const raw = await readSecureText(path);
+    if (!raw) {
+        throw new BridgeError("not_enrolled", "This machine is not enrolled. Run `crewx-bridge enroll` first.");
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        throw new BridgeError("invalid_config", `Bridge config at ${path} is invalid JSON.`, 1, {
+            cause: error,
+        });
+    }
+    const result = BridgeConfigSchema.safeParse(parsed);
+    if (!result.success) {
+        throw new BridgeError("invalid_config", `Bridge config at ${path} has an unsupported or unsafe shape.`);
+    }
+    return { ...result.data, url: normalizeServerUrl(result.data.url) };
+}
+export async function saveBridgeConfig(config, environment = process.env, platform = process.platform) {
+    const parsed = BridgeConfigSchema.parse({
+        ...config,
+        url: normalizeServerUrl(config.url),
+    });
+    const path = bridgeConfigPath(environment, platform);
+    await writeSecureText(path, `${JSON.stringify(parsed, null, 2)}\n`);
+    return path;
+}
+export async function canonicalFolder(input) {
+    const resolved = await realpath(resolve(input));
+    const info = await stat(resolved);
+    if (!info.isDirectory()) {
+        throw new BridgeError("folder_not_directory", `${resolved} is not a directory.`);
+    }
+    if (resolved === "/") {
+        throw new BridgeError("folder_too_broad", "The filesystem root cannot be registered.");
+    }
+    return {
+        path: resolved,
+        fingerprint: `dev:${info.dev.toString(16)}:inode:${info.ino.toString(16)}`,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EACL,KAAK,EACL,KAAK,EACL,KAAK,EACL,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,IAAI,EACJ,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EACL,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,EAAE;KACR,GAAG,CAAC,EAAE,CAAC;KACP,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAE9B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACjC,WAAW,EAAE,iBAAiB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;CACvD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC/B,IACE,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC;QACjD,CAAC,MAAM,CAAC,eAAe,EACvB,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAGL,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAChF,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnD,MAAM,EAAE,uBAAuB;IAC/B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACpD,CAAC;KACD,MAAM,EAAE,CAAC;AAUZ,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,sBAAsB,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,WAAW,CACnB,cAAc,EACd,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,WAAW,CACnB,sBAAsB,EACtB,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACvD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,cAAqC,OAAO,CAAC,GAAG,EAChD,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,IAAI,WAAW,CAAC,wBAAwB,EAAE,IAAI,EAAE,EAAE,CAAC;QACjD,OAAO,OAAO,CAAC,WAAW,CAAC,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,cAAc,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,cAAqC,OAAO,CAAC,GAAG,EAChD,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,IAAI,WAAW,CAAC,uBAAuB,EAAE,IAAI,EAAE,EAAE,CAAC;QAChD,OAAO,OAAO,CAAC,WAAW,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GACR,WAAW,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3E,OAAO,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,cAAqC,OAAO,CAAC,GAAG,EAChD,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,OAAO,IAAI,CAAC,qBAAqB,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,cAAqC,OAAO,CAAC,GAAG,EAChD,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,OAAO,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,IAA0B;IAE1B,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,GAAG,IAAI,+BAA+B,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,GAAG,IAAI,aAAa,IAAI,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,GAAG,IAAI,oCAAoC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,WAAW,CACnB,aAAa,EACb,GAAG,IAAI,iDAAiD,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAC7F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,MAAM,gBAAgB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC;QACnD,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,GAAG,IAAI,8BAA8B,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;YAC1C,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,GAAG,IAAI,qBAAqB,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,GAAG,IAAI,4CAA4C,CACpD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,QAAgB;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CACpB,SAAS,EACT,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CACzE,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACzC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;YAAS,CAAC;QACT,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,cAAqC,OAAO,CAAC,GAAG,EAChD,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,WAAW,CACnB,cAAc,EACd,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,oBAAoB,IAAI,mBAAmB,EAAE,CAAC,EAAE;YACtF,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,WAAW,CACnB,gBAAgB,EAChB,oBAAoB,IAAI,sCAAsC,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAoB,EACpB,cAAqC,OAAO,CAAC,GAAG,EAChD,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAE3B,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;QACtC,GAAG,MAAM;QACT,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC;KACpC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa;IAEb,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,GAAG,QAAQ,sBAAsB,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;IACzF,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;KAC3E,CAAC;AACJ,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,7 @@
+export declare const BRIDGE_VERSION = "0.1.0";
+export declare const DEFAULT_HEARTBEAT_INTERVAL_SECONDS = 15;
+export declare const DEFAULT_POLL_INTERVAL_MS = 3000;
+export declare const REQUEST_TIMEOUT_MS = 15000;
+export declare const CONFIG_VERSION: 1;
+export declare const ADAPTERS: readonly ["codex", "claude", "pi", "hermes", "openclaw"];
+//# sourceMappingURL=constants.d.ts.map