diffs-pane 0.1.0

package/dist/cli/index.js

@@ -0,0 +1,245 @@
+import { resolve } from 'node:path';
+import { controlRequest } from '../control/client.js';
+import { isDiffFilter, } from '../shared/protocol.js';
+import { readReviews, ReviewStore } from '../store/reviews.js';
+import { detectBackend } from '../vcs/detect.js';
+import { parseArgs, stringFlag } from './args.js';
+import { ensureDaemon, healthyDaemon } from './daemon.js';
+const VALUE_FLAGS = new Set(['filter', 'root', 'base', 'owner', 'session', 'turn', 'agent']);
+const USAGE = `Usage:
+  dp <command> [options]
+
+Commands:
+  watch [branch|unstaged|turn]  Start or reuse a diff session (defaults to branch).
+  reviews [--json]              Export review comments for the working tree.
+  resolve <id>... | --all       Delete addressed review comments.
+  turn start|end                Start or finish an agent-turn diff baseline.
+  status [--json]               Show daemon and session status.
+  stop [--all]                  Release session leases and stop unused sessions.
+
+Watch options:
+  --no-watch                    Disable live filesystem updates.
+  --root <path>                 Use another working tree (defaults to cwd).
+  --base <rev>                  Override the branch comparison base.
+  --owner <name>                Hold a named session lease.
+
+Bare dp is equivalent to dp watch branch. Run dp <command> --help for this help.
+`;
+async function main() {
+    const args = parseArgs(process.argv.slice(2), VALUE_FLAGS);
+    if (args.flags.has('help')) {
+        process.stdout.write(USAGE);
+        return;
+    }
+    const command = args.positional[0] ?? 'watch';
+    switch (command) {
+        case 'watch':
+            return watch(args);
+        case 'reviews':
+            return reviews(args);
+        case 'resolve':
+            return resolveComments(args);
+        case 'turn':
+            return turn(args);
+        case 'status':
+            return status(args);
+        case 'stop':
+            return stop(args);
+        default:
+            process.stderr.write(USAGE);
+            process.exitCode = 2;
+    }
+}
+function rootArg(args) {
+    return resolve(stringFlag(args, 'root') ?? process.cwd());
+}
+async function watch(args) {
+    if (args.positional.length > 2)
+        throw new Error(`too many arguments for dp watch\n${USAGE}`);
+    const positionalFilter = args.positional[0] === 'watch' ? args.positional[1] : undefined;
+    const flagFilter = stringFlag(args, 'filter');
+    if (positionalFilter !== undefined && flagFilter !== undefined) {
+        throw new Error('choose a positional filter or --filter, not both');
+    }
+    const filter = positionalFilter ?? flagFilter ?? 'branch';
+    if (!isDiffFilter(filter)) {
+        throw new Error(`invalid --filter: ${filter} (expected turn|unstaged|branch)`);
+    }
+    const info = await ensureDaemon();
+    const result = await controlRequest(info, 'POST', '/control/sessions/ensure', {
+        root: rootArg(args),
+        owner: stringFlag(args, 'owner'),
+        filter,
+        base: stringFlag(args, 'base'),
+        watch: !args.flags.has('no-watch'),
+    });
+    // Contract: print only the live URL to stdout.
+    process.stdout.write(`${result.url}\n`);
+}
+async function reviews(args) {
+    const root = rootArg(args);
+    // Canonicalize like the daemon does so both read the same store.
+    let canonical = root;
+    try {
+        canonical = (await detectBackend(root)).root;
+    }
+    catch {
+        // Not a working tree: fall back to the resolved path.
+    }
+    const comments = await readReviews(canonical);
+    if (args.flags.has('json')) {
+        const sessionUrl = await liveSessionUrl(canonical);
+        const out = {
+            version: 1,
+            root: canonical,
+            ...(sessionUrl !== undefined ? { sessionUrl } : {}),
+            comments: comments.map((c) => exportComment(c, sessionUrl)),
+        };
+        process.stdout.write(`${JSON.stringify(out, null, 2)}\n`);
+        return;
+    }
+    process.stdout.write(formatTaggedReviews(comments));
+}
+/** URL of the live session for a root, when the daemon currently serves it. */
+async function liveSessionUrl(root) {
+    const info = await healthyDaemon();
+    if (!info)
+        return undefined;
+    try {
+        const daemonStatus = await controlRequest(info, 'GET', '/control/status');
+        return daemonStatus.sessions.find((s) => s.root === root)?.url;
+    }
+    catch {
+        return undefined;
+    }
+}
+function exportComment(comment, sessionUrl) {
+    if (sessionUrl === undefined || comment.outdated)
+        return comment;
+    return { ...comment, url: commentUrl(sessionUrl, comment) };
+}
+/** Deep link matching the UI's line-hash format (#target=f:<path>&start=A12). */
+function commentUrl(sessionUrl, comment) {
+    const sigil = comment.side === 'deletions' ? 'D' : 'A';
+    const target = encodeURIComponent(`f:${comment.path}`).replaceAll('%2F', '/');
+    const params = [`target=${target}`, `start=${sigil}${comment.startLine}`];
+    if (comment.endLine !== comment.startLine)
+        params.push(`end=${sigil}${comment.endLine}`);
+    return `${sessionUrl}#${params.join('&')}`;
+}
+function formatTaggedReviews(comments) {
+    if (comments.length === 0)
+        return 'No review comments.\n';
+    const blocks = comments.map((c) => {
+        const range = c.startLine === c.endLine ? `${c.startLine}` : `${c.startLine}-${c.endLine}`;
+        const outdated = c.outdated ? ', outdated' : '';
+        return [
+            `<File>${c.path}:${range} (${c.side}, ${c.filter}${outdated})</File>`,
+            `<Comment>\n${c.body}\n</Comment>`,
+            `<Diff>\n${c.hunkExcerpt}\n</Diff>`,
+        ].join('\n');
+    });
+    return `${blocks.join('\n\n')}\n`;
+}
+/** Delete addressed review comments so the next `dp reviews` run is clean. */
+async function resolveComments(args) {
+    const ids = args.positional.slice(1);
+    const all = args.flags.has('all');
+    if (ids.length === 0 && !all) {
+        throw new Error(`dp resolve requires comment ids or --all\n${USAGE}`);
+    }
+    const root = rootArg(args);
+    let canonical = root;
+    try {
+        canonical = (await detectBackend(root)).root;
+    }
+    catch {
+        // Not a working tree: fall back to the resolved path.
+    }
+    // Prefer the daemon so open viewers update live; fall back to the store.
+    const info = await healthyDaemon();
+    if (info) {
+        try {
+            const result = await controlRequest(info, 'POST', '/control/comments/resolve', {
+                root: canonical,
+                ids: all ? undefined : ids,
+                all,
+            });
+            process.stdout.write(`resolved ${result.removed} comment${result.removed === 1 ? '' : 's'}\n`);
+            return;
+        }
+        catch {
+            // No live session for this root; fall through to the on-disk store.
+        }
+    }
+    const store = await ReviewStore.load(canonical);
+    const targets = all ? store.list().map((comment) => comment.id) : ids;
+    const removed = store.deleteMany(targets);
+    process.stdout.write(`resolved ${removed} comment${removed === 1 ? '' : 's'}\n`);
+}
+async function turn(args) {
+    const action = args.positional[1];
+    if (action !== 'start' && action !== 'end') {
+        throw new Error(`dp turn requires start|end\n${USAGE}`);
+    }
+    const sessionId = stringFlag(args, 'session');
+    const turnId = stringFlag(args, 'turn');
+    if (!sessionId || !turnId)
+        throw new Error('--session and --turn are required');
+    // Turn end without a daemon is a no-op: there is nothing to update.
+    const info = action === 'start' ? await ensureDaemon() : await healthyDaemon();
+    if (!info)
+        return;
+    await controlRequest(info, 'POST', '/control/turn', {
+        root: rootArg(args),
+        action,
+        session: sessionId,
+        turn: turnId,
+        agent: stringFlag(args, 'agent'),
+        owner: stringFlag(args, 'owner'),
+    });
+}
+async function status(args) {
+    const info = await healthyDaemon();
+    if (!info) {
+        if (args.flags.has('json')) {
+            const out = { version: 1, running: false, sessions: [] };
+            process.stdout.write(`${JSON.stringify(out, null, 2)}\n`);
+        }
+        else {
+            process.stdout.write('daemon: not running\n');
+        }
+        return;
+    }
+    const result = await controlRequest(info, 'GET', '/control/status');
+    if (args.flags.has('json')) {
+        process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+        return;
+    }
+    process.stdout.write(`daemon: running (pid ${result.pid}, port ${result.port})\n`);
+    for (const s of result.sessions) {
+        process.stdout.write(`  ${s.root}\n    url: ${s.url}\n    vcs: ${s.vcs}  owners: ${s.owners.join(', ') || '-'}  clients: ${s.clients}\n`);
+        if (s.turn) {
+            process.stdout.write(`    turn: ${s.turn.turnId}${s.turn.active ? ' (active)' : ''}\n`);
+        }
+    }
+}
+async function stop(args) {
+    const info = await healthyDaemon();
+    if (!info) {
+        process.stdout.write('daemon: not running\n');
+        return;
+    }
+    const body = {
+        owner: stringFlag(args, 'owner'),
+        all: args.flags.has('all'),
+    };
+    if (!args.flags.has('all') || args.flags.has('root'))
+        body['root'] = rootArg(args);
+    await controlRequest(info, 'POST', '/control/stop', body);
+}
+main().catch((error) => {
+    process.stderr.write(`dp: ${error instanceof Error ? error.message : String(error)}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EACL,YAAY,GAKb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAmB,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE7F,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;CAkBb,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IAE9C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,SAAS;YACZ,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAgB;IAC/B,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,IAAgB;IACnC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAC;IAC7F,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,gBAAgB,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,IAAI,UAAU,IAAI,QAAQ,CAAC;IAC1D,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,kCAAkC,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,YAAY,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAkB,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE;QAC7F,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;QAChC,MAAM;QACN,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;QAC9B,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KACnC,CAAC,CAAC;IACH,+CAA+C;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAgB;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,iEAAiE;IACjE,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC;QACH,SAAS,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;IAE9C,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,GAAG,GAAkB;YACzB,OAAO,EAAE,CAAC;YACV,IAAI,EAAE,SAAS;YACf,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;SAC5D,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,cAAc,CAAe,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;QACxF,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,GAAG,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,OAAsB,EAAE,UAA8B;IAC3E,IAAI,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IACjE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,iFAAiF;AACjF,SAAS,UAAU,CAAC,UAAkB,EAAE,OAAsB;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,CAAC,UAAU,MAAM,EAAE,EAAE,SAAS,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,OAAO,GAAG,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAyB;IACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC3F,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,SAAS,CAAC,CAAC,IAAI,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,QAAQ,UAAU;YACrE,cAAc,CAAC,CAAC,IAAI,cAAc;YAClC,WAAW,CAAC,CAAC,WAAW,WAAW;SACpC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AACpC,CAAC;AAED,8EAA8E;AAC9E,KAAK,UAAU,eAAe,CAAC,IAAgB;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,6CAA6C,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC;QACH,SAAS,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;IAED,yEAAyE;IACzE,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IACnC,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,IAAI,EACJ,MAAM,EACN,2BAA2B,EAC3B;gBACE,IAAI,EAAE,SAAS;gBACf,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG;gBAC1B,GAAG;aACJ,CACF,CAAC;YACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CACzE,CAAC;YACF,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACtE,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,WAAW,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAgB;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAEhF,oEAAoE;IACpE,MAAM,IAAI,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC;IAC/E,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE;QAClD,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM;QACN,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;QAChC,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;KACjC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAgB;IACpC,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAChD,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAe,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAClF,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,GAAG,UAAU,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;IACnF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC,CAAC,OAAO,IAAI,CACpH,CAAC;QACF,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAgB;IAClC,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAA4B;QACpC,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;QAChC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;KAC3B,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/control/client.js

@@ -0,0 +1,74 @@
+import { request } from 'node:http';
+import { readJson } from '../store/fsutil.js';
+import { daemonInfoPath } from '../store/paths.js';
+export async function readDaemonInfo(stateDir) {
+    const info = await readJson(daemonInfoPath(stateDir));
+    if (!info || typeof info.port !== 'number' || typeof info.controlToken !== 'string')
+        return null;
+    return info;
+}
+export class ControlError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'ControlError';
+    }
+}
+/** Issue a control-plane request to the daemon. */
+export function controlRequest(info, method, path, body) {
+    return new Promise((resolve, reject) => {
+        const payload = body === undefined ? undefined : JSON.stringify(body);
+        const req = request({
+            host: '127.0.0.1',
+            port: info.port,
+            method,
+            path,
+            headers: {
+                'x-dp-control-token': info.controlToken,
+                ...(payload !== undefined
+                    ? { 'content-type': 'application/json', 'content-length': Buffer.byteLength(payload) }
+                    : {}),
+            },
+            timeout: 15_000,
+        }, (res) => {
+            const chunks = [];
+            res.on('data', (c) => chunks.push(c));
+            res.on('end', () => {
+                const text = Buffer.concat(chunks).toString('utf8');
+                let parsed = null;
+                try {
+                    parsed = text === '' ? null : JSON.parse(text);
+                }
+                catch {
+                    // fall through with null
+                }
+                const status = res.statusCode ?? 0;
+                if (status >= 200 && status < 300) {
+                    resolve(parsed);
+                }
+                else {
+                    const message = parsed !== null && typeof parsed === 'object' && 'error' in parsed
+                        ? String(parsed.error)
+                        : `daemon returned ${status}`;
+                    reject(new ControlError(message, status));
+                }
+            });
+        });
+        req.on('timeout', () => req.destroy(new Error('daemon request timed out')));
+        req.on('error', reject);
+        if (payload !== undefined)
+            req.write(payload);
+        req.end();
+    });
+}
+export async function isDaemonHealthy(info) {
+    try {
+        const result = await controlRequest(info, 'GET', '/control/health');
+        return result.ok === true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/control/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/control/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAQnD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAiB;IACpD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAa,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,YAAa,SAAQ,KAAK;IAG1B;IAFX,YACE,OAAe,EACN,MAAc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,WAAM,GAAN,MAAM,CAAQ;QAGvB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,mDAAmD;AACnD,MAAM,UAAU,cAAc,CAC5B,IAAgB,EAChB,MAAsB,EACtB,IAAY,EACZ,IAAc;IAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,OAAO,CACjB;YACE,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM;YACN,IAAI;YACJ,OAAO,EAAE;gBACP,oBAAoB,EAAE,IAAI,CAAC,YAAY;gBACvC,GAAG,CAAC,OAAO,KAAK,SAAS;oBACvB,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;oBACtF,CAAC,CAAC,EAAE,CAAC;aACR;YACD,OAAO,EAAE,MAAM;SAChB,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpD,IAAI,MAAM,GAAY,IAAI,CAAC;gBAC3B,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjD,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;gBACD,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;gBACnC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;oBAClC,OAAO,CAAC,MAAW,CAAC,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,MAAM,OAAO,GACX,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM;wBAChE,CAAC,CAAC,MAAM,CAAE,MAA6B,CAAC,KAAK,CAAC;wBAC9C,CAAC,CAAC,mBAAmB,MAAM,EAAE,CAAC;oBAClC,MAAM,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;QAC5E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,IAAI,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAgB;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,IAAI,EACJ,KAAK,EACL,iBAAiB,CAClB,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/daemon/main.js

@@ -0,0 +1,71 @@
+import { randomBytes } from 'node:crypto';
+import { rmSync } from 'node:fs';
+import { isDaemonHealthy, readDaemonInfo } from '../control/client.js';
+import { writeJsonAtomic } from '../store/fsutil.js';
+import { daemonInfoPath, stateDir } from '../store/paths.js';
+import { startServer } from './server.js';
+import { SessionManager } from './sessions.js';
+const SHUTDOWN_GRACE_MS = 750;
+const PING_INTERVAL_MS = 25_000;
+/** Per-user singleton daemon serving all working trees over loopback HTTP. */
+async function main() {
+    const dir = stateDir();
+    // Singleton guard: refuse to start when a healthy daemon already exists.
+    const existing = await readDaemonInfo(dir);
+    if (existing && existing.pid !== process.pid && (await isDaemonHealthy(existing))) {
+        process.exit(3);
+    }
+    let shuttingDown = false;
+    const shutdown = (code) => {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        void (async () => {
+            clearInterval(pingTimer);
+            try {
+                await manager.stopAll();
+            }
+            finally {
+                try {
+                    rmSync(daemonInfoPath(dir), { force: true });
+                }
+                catch {
+                    // ignore
+                }
+                daemon.server.close(() => process.exit(code));
+                setTimeout(() => process.exit(code), SHUTDOWN_GRACE_MS).unref();
+            }
+        })();
+    };
+    const manager = new SessionManager(dir, () => {
+        // The daemon exits when no sessions remain. A short delay lets the final
+        // control response flush before the process goes away.
+        setTimeout(() => {
+            if (manager.list().length === 0)
+                shutdown(0);
+        }, SHUTDOWN_GRACE_MS);
+    });
+    const controlToken = randomBytes(24).toString('base64url');
+    const daemon = await startServer({ controlToken, manager });
+    writeJsonAtomic(daemonInfoPath(dir), {
+        pid: process.pid,
+        port: daemon.port,
+        controlToken,
+    });
+    await manager.restore();
+    const pingTimer = setInterval(() => manager.pingAll(), PING_INTERVAL_MS);
+    process.on('SIGTERM', () => shutdown(0));
+    process.on('SIGINT', () => shutdown(0));
+    // If everything restored to nothing, still exit once idle.
+    if (manager.list().length === 0) {
+        setTimeout(() => {
+            if (manager.list().length === 0)
+                shutdown(0);
+        }, 30_000).unref();
+    }
+}
+main().catch((error) => {
+    console.error(error instanceof Error ? (error.stack ?? error.message) : String(error));
+    process.exit(1);
+});
+//# sourceMappingURL=main.js.map

package/dist/daemon/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/daemon/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,8EAA8E;AAC9E,KAAK,UAAU,IAAI;IACjB,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;IAEvB,yEAAyE;IACzE,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;QAChC,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,aAAa,CAAC,SAAS,CAAC,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC1B,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9C,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC,KAAK,EAAE,CAAC;YAClE,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE;QAC3C,yEAAyE;QACzE,uDAAuD;QACvD,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IAE5D,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE;QACnC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY;KACb,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAExB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAEzE,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,2DAA2D;IAC3D,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;gBAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/daemon/security.js

@@ -0,0 +1,66 @@
+const LOOPBACK_ADDRESSES = new Set(['127.0.0.1', '::1', '::ffff:127.0.0.1']);
+const ALLOWED_HOSTNAMES = new Set(['127.0.0.1', 'localhost', '[::1]']);
+export const MAX_BODY_BYTES = 1024 * 1024;
+/** Reject non-loopback peers and unexpected Host headers. */
+export function checkTransport(req, port) {
+    const remote = req.socket.remoteAddress ?? '';
+    if (!LOOPBACK_ADDRESSES.has(remote))
+        return 'non-loopback client rejected';
+    const host = req.headers.host;
+    if (!host)
+        return 'missing Host header';
+    const { hostname, portPart } = splitHost(host);
+    if (!ALLOWED_HOSTNAMES.has(hostname))
+        return `unexpected host: ${hostname}`;
+    if (portPart !== null && portPart !== String(port))
+        return `unexpected port: ${portPart}`;
+    return null;
+}
+/** Reject cross-origin mutations. Same-origin browser requests pass. */
+export function checkMutationOrigin(req, port) {
+    const origin = req.headers.origin;
+    if (origin === undefined || origin === 'null')
+        return origin === 'null' ? 'opaque origin rejected' : null;
+    try {
+        const url = new URL(origin);
+        const hostname = url.hostname === '::1' ? '[::1]' : url.hostname;
+        if (url.protocol !== 'http:' || !ALLOWED_HOSTNAMES.has(hostname) || url.port !== String(port)) {
+            return `cross-origin request rejected: ${origin}`;
+        }
+        return null;
+    }
+    catch {
+        return `malformed Origin: ${origin}`;
+    }
+}
+function splitHost(host) {
+    if (host.startsWith('[')) {
+        const end = host.indexOf(']');
+        const hostname = host.slice(0, end + 1);
+        const rest = host.slice(end + 1);
+        return { hostname, portPart: rest.startsWith(':') ? rest.slice(1) : null };
+    }
+    const idx = host.lastIndexOf(':');
+    if (idx < 0)
+        return { hostname: host, portPart: null };
+    return { hostname: host.slice(0, idx), portPart: host.slice(idx + 1) };
+}
+/** Read a request body with a hard size cap. */
+export function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let total = 0;
+        req.on('data', (chunk) => {
+            total += chunk.length;
+            if (total > MAX_BODY_BYTES) {
+                reject(new Error('request body too large'));
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => resolve(Buffer.concat(chunks)));
+        req.on('error', reject);
+    });
+}
+//# sourceMappingURL=security.js.map

package/dist/daemon/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/daemon/security.ts"],"names":[],"mappings":"AAEA,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAC7E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,GAAoB,EAAE,IAAY;IAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,8BAA8B,CAAC;IAE3E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,qBAAqB,CAAC;IACxC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,oBAAoB,QAAQ,EAAE,CAAC;IAC5E,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,oBAAoB,QAAQ,EAAE,CAAC;IAC1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,GAAoB,EAAE,IAAY;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM;QAC3C,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjE,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9F,OAAO,kCAAkC,MAAM,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qBAAqB,MAAM,EAAE,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvD,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,QAAQ,CAAC,GAAoB;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC5C,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC"}