dodo-mcp 1.0.0

package/dist/evaluation/contracts.js

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+export const DODO_BENCH_REPORT_VERSION = 1;
+export const DodoBenchDomain = z.enum([
+    'code_retrieval',
+    'bug_diagnosis_refactor',
+    'runtime_browser_visual',
+    'resource_multimodal',
+    'recovery_memory_cache',
+    'security_authorization',
+]);
+export const DodoBenchCase = z.object({
+    id: z.string().min(1).max(128),
+    domain: DodoBenchDomain,
+    status: z.enum(['PASS', 'FAIL', 'SKIPPED']),
+    eligible: z.boolean(),
+    latencyMs: z.number().int().nonnegative(),
+    toolCalls: z.number().int().nonnegative(),
+    serializedRequestBytes: z.number().int().nonnegative(),
+    serializedResponseBytes: z.number().int().nonnegative(),
+    humanInterventions: z.number().int().nonnegative(),
+    securityViolations: z.number().int().nonnegative(),
+    metrics: z.object({
+        relevantRetrieved: z.number().int().nonnegative().optional(),
+        retrieved: z.number().int().nonnegative().optional(),
+        expectedRelevant: z.number().int().nonnegative().optional(),
+        edits: z.number().int().nonnegative().optional(),
+        wrongFileEdits: z.number().int().nonnegative().optional(),
+        cacheHits: z.number().int().nonnegative().optional(),
+        cacheLookups: z.number().int().nonnegative().optional(),
+    }).strict(),
+    notes: z.array(z.string().max(500)).max(16),
+}).strict();
+export const DodoBenchThresholds = z.object({
+    successRateMin: z.number().min(0).max(1),
+    wrongFileEditRateMax: z.number().min(0).max(1),
+    contextPrecisionMin: z.number().min(0).max(1),
+    contextRecallMin: z.number().min(0).max(1),
+    cacheHitRateMin: z.number().min(0).max(1),
+    securityViolationsMax: z.number().int().nonnegative(),
+    toolCallsMax: z.number().int().positive(),
+    p95LatencyMsMax: z.number().int().positive(),
+    humanInterventionsMax: z.number().int().nonnegative(),
+}).strict();
+export const DodoBenchBaseline = z.object({
+    schemaVersion: z.literal(DODO_BENCH_REPORT_VERSION),
+    dataset: z.object({ name: z.string(), version: z.string() }).strict(),
+    requiredCases: z.array(z.string()).min(1),
+    optionalCases: z.array(z.string()),
+    thresholds: DodoBenchThresholds,
+}).strict();
+export const DodoBenchAggregate = z.object({
+    eligibleCases: z.number().int().nonnegative(),
+    passedCases: z.number().int().nonnegative(),
+    skippedCases: z.number().int().nonnegative(),
+    successRate: z.number().min(0).max(1),
+    wrongFileEditRate: z.number().min(0).max(1),
+    contextPrecision: z.number().min(0).max(1),
+    contextRecall: z.number().min(0).max(1),
+    cacheHitRate: z.number().min(0).max(1),
+    toolCalls: z.number().int().nonnegative(),
+    serializedRequestBytes: z.number().int().nonnegative(),
+    serializedResponseBytes: z.number().int().nonnegative(),
+    modelTokens: z.null(),
+    latencyMs: z.object({ total: z.number().int().nonnegative(), p50: z.number().int().nonnegative(), p95: z.number().int().nonnegative() }).strict(),
+    humanInterventions: z.number().int().nonnegative(),
+    securityViolations: z.number().int().nonnegative(),
+    regressions: z.array(z.string()),
+}).strict();
+export const DodoBenchReport = z.object({
+    schemaVersion: z.literal(DODO_BENCH_REPORT_VERSION),
+    status: z.enum(['PASS', 'FAIL']),
+    generatedAt: z.string().datetime(),
+    source: z.object({ revision: z.string(), dirty: z.boolean() }).strict(),
+    dataset: z.object({ name: z.string(), version: z.string(), digest: z.string().regex(/^sha256:[a-f0-9]{64}$/) }).strict(),
+    environment: z.object({
+        platform: z.string(), arch: z.string(), release: z.string(), node: z.string(),
+        dependencyLockSha256: z.string().regex(/^sha256:[a-f0-9]{64}$/),
+        configurationSha256: z.string().regex(/^sha256:[a-f0-9]{64}$/),
+    }).strict(),
+    client: z.object({ name: z.string(), version: z.string() }).strict(),
+    model: z.object({ name: z.null(), version: z.null(), note: z.string() }).strict(),
+    cases: z.array(DodoBenchCase),
+    aggregate: DodoBenchAggregate,
+    limitations: z.array(z.string()),
+}).strict();
+//# sourceMappingURL=contracts.js.map

package/dist/evaluation/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/evaluation/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,gBAAgB;IAChB,wBAAwB;IACxB,wBAAwB;IACxB,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9B,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAC3D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QAChD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KACxD,CAAC,CAAC,MAAM,EAAE;IACX,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACzC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CACtD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IACnD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACrE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAClC,UAAU,EAAE,mBAAmB;CAChC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvD,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACjJ,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACvE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACxH,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAC7E,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;QAC/D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;KAC/D,CAAC,CAAC,MAAM,EAAE;IACX,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACpE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACjF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAC7B,SAAS,EAAE,kBAAkB;IAC7B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/evaluation/dodoBench.js

@@ -0,0 +1,69 @@
+import { DodoBenchAggregate, DodoBenchBaseline, DodoBenchCase } from './contracts.js';
+function ratio(numerator, denominator, empty = 1) {
+    return denominator === 0 ? empty : numerator / denominator;
+}
+function percentile(values, p) {
+    if (values.length === 0)
+        return 0;
+    const sorted = [...values].sort((a, b) => a - b);
+    return sorted[Math.min(sorted.length - 1, Math.max(0, Math.ceil(sorted.length * p) - 1))];
+}
+/** Deterministic aggregate/threshold evaluator. Timing is observed locally; no model token estimate is fabricated. */
+export function evaluateDodoBench(rawCases, rawBaseline) {
+    const cases = rawCases.map((item) => DodoBenchCase.parse(item));
+    const baseline = DodoBenchBaseline.parse(rawBaseline);
+    const byId = new Map(cases.map((item) => [item.id, item]));
+    const eligible = cases.filter((item) => item.eligible);
+    const passed = eligible.filter((item) => item.status === 'PASS');
+    const skipped = cases.filter((item) => item.status === 'SKIPPED');
+    const sum = (pick) => eligible.reduce((total, item) => total + pick(item), 0);
+    const relevant = sum((item) => item.metrics.relevantRetrieved ?? 0);
+    const retrieved = sum((item) => item.metrics.retrieved ?? 0);
+    const expected = sum((item) => item.metrics.expectedRelevant ?? 0);
+    const edits = sum((item) => item.metrics.edits ?? 0);
+    const wrongEdits = sum((item) => item.metrics.wrongFileEdits ?? 0);
+    const cacheHits = sum((item) => item.metrics.cacheHits ?? 0);
+    const cacheLookups = sum((item) => item.metrics.cacheLookups ?? 0);
+    const aggregate = {
+        eligibleCases: eligible.length,
+        passedCases: passed.length,
+        skippedCases: skipped.length,
+        successRate: ratio(passed.length, eligible.length, 0),
+        wrongFileEditRate: ratio(wrongEdits, edits, 0),
+        contextPrecision: ratio(relevant, retrieved),
+        contextRecall: ratio(relevant, expected),
+        cacheHitRate: ratio(cacheHits, cacheLookups),
+        toolCalls: sum((item) => item.toolCalls),
+        serializedRequestBytes: sum((item) => item.serializedRequestBytes),
+        serializedResponseBytes: sum((item) => item.serializedResponseBytes),
+        modelTokens: null,
+        latencyMs: { total: sum((item) => item.latencyMs), p50: percentile(eligible.map((item) => item.latencyMs), 0.5), p95: percentile(eligible.map((item) => item.latencyMs), 0.95) },
+        humanInterventions: sum((item) => item.humanInterventions),
+        securityViolations: sum((item) => item.securityViolations),
+        regressions: [],
+    };
+    for (const id of baseline.requiredCases) {
+        const item = byId.get(id);
+        if (!item)
+            aggregate.regressions.push(`required case missing: ${id}`);
+        else if (!item.eligible || item.status !== 'PASS')
+            aggregate.regressions.push(`required case did not pass: ${id} (${item.status})`);
+    }
+    const t = baseline.thresholds;
+    const checks = [
+        [aggregate.successRate >= t.successRateMin, `successRate ${aggregate.successRate} < ${t.successRateMin}`],
+        [aggregate.wrongFileEditRate <= t.wrongFileEditRateMax, `wrongFileEditRate ${aggregate.wrongFileEditRate} > ${t.wrongFileEditRateMax}`],
+        [aggregate.contextPrecision >= t.contextPrecisionMin, `contextPrecision ${aggregate.contextPrecision} < ${t.contextPrecisionMin}`],
+        [aggregate.contextRecall >= t.contextRecallMin, `contextRecall ${aggregate.contextRecall} < ${t.contextRecallMin}`],
+        [aggregate.cacheHitRate >= t.cacheHitRateMin, `cacheHitRate ${aggregate.cacheHitRate} < ${t.cacheHitRateMin}`],
+        [aggregate.securityViolations <= t.securityViolationsMax, `securityViolations ${aggregate.securityViolations} > ${t.securityViolationsMax}`],
+        [aggregate.toolCalls <= t.toolCallsMax, `toolCalls ${aggregate.toolCalls} > ${t.toolCallsMax}`],
+        [aggregate.latencyMs.p95 <= t.p95LatencyMsMax, `p95 latency ${aggregate.latencyMs.p95}ms > ${t.p95LatencyMsMax}ms`],
+        [aggregate.humanInterventions <= t.humanInterventionsMax, `humanInterventions ${aggregate.humanInterventions} > ${t.humanInterventionsMax}`],
+    ];
+    for (const [ok, message] of checks)
+        if (!ok)
+            aggregate.regressions.push(message);
+    return DodoBenchAggregate.parse(aggregate);
+}
+//# sourceMappingURL=dodoBench.js.map

package/dist/evaluation/dodoBench.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dodoBench.js","sourceRoot":"","sources":["../../src/evaluation/dodoBench.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,aAAa,EAAmF,MAAM,gBAAgB,CAAC;AAEvK,SAAS,KAAK,CAAC,SAAiB,EAAE,WAAmB,EAAE,KAAK,GAAG,CAAC;IAC9D,OAAO,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,WAAW,CAAC;AAC7D,CAAC;AAED,SAAS,UAAU,CAAC,MAAgB,EAAE,CAAS;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;AAC7F,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,iBAAiB,CAAC,QAA6B,EAAE,WAAkC;IACjG,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,CAAC,IAAyC,EAAU,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3H,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG;QAChB,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,WAAW,EAAE,MAAM,CAAC,MAAM;QAC1B,YAAY,EAAE,OAAO,CAAC,MAAM;QAC5B,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,iBAAiB,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,gBAAgB,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC5C,aAAa,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACxC,YAAY,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,CAAC;QAC5C,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;QACxC,sBAAsB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC;QAClE,uBAAuB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC;QACpE,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,EAAE;QAChL,kBAAkB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAC1D,kBAAkB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC;QAC1D,WAAW,EAAE,EAAc;KAC5B,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI;YAAE,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;aACjE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,+BAA+B,EAAE,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACtI,CAAC;IACD,MAAM,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC;IAC9B,MAAM,MAAM,GAA6B;QACvC,CAAC,SAAS,CAAC,WAAW,IAAI,CAAC,CAAC,cAAc,EAAE,eAAe,SAAS,CAAC,WAAW,MAAM,CAAC,CAAC,cAAc,EAAE,CAAC;QACzG,CAAC,SAAS,CAAC,iBAAiB,IAAI,CAAC,CAAC,oBAAoB,EAAE,qBAAqB,SAAS,CAAC,iBAAiB,MAAM,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACvI,CAAC,SAAS,CAAC,gBAAgB,IAAI,CAAC,CAAC,mBAAmB,EAAE,oBAAoB,SAAS,CAAC,gBAAgB,MAAM,CAAC,CAAC,mBAAmB,EAAE,CAAC;QAClI,CAAC,SAAS,CAAC,aAAa,IAAI,CAAC,CAAC,gBAAgB,EAAE,iBAAiB,SAAS,CAAC,aAAa,MAAM,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACnH,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,SAAS,CAAC,YAAY,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC;QAC9G,CAAC,SAAS,CAAC,kBAAkB,IAAI,CAAC,CAAC,qBAAqB,EAAE,sBAAsB,SAAS,CAAC,kBAAkB,MAAM,CAAC,CAAC,qBAAqB,EAAE,CAAC;QAC5I,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,SAAS,CAAC,SAAS,MAAM,CAAC,CAAC,YAAY,EAAE,CAAC;QAC/F,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,eAAe,EAAE,eAAe,SAAS,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,CAAC,eAAe,IAAI,CAAC;QACnH,CAAC,SAAS,CAAC,kBAAkB,IAAI,CAAC,CAAC,qBAAqB,EAAE,sBAAsB,SAAS,CAAC,kBAAkB,MAAM,CAAC,CAAC,qBAAqB,EAAE,CAAC;KAC7I,CAAC;IACF,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,MAAM;QAAE,IAAI,CAAC,EAAE;YAAE,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjF,OAAO,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC"}

package/dist/index.js

@@ -0,0 +1,26 @@
+/** Library surface for tests and embedding. The CLI (`dodo`) is the product. */
+export { startServer, DODO_VERSION } from './server/appServer.js';
+export { startStdioServer, STDIO_PRINCIPAL } from './server/stdioServer.js';
+export { bootstrapWorkspace } from './server/bootstrap.js';
+export { DodoError, ERROR_CODES } from './errors.js';
+export { GlobalConfigSchema, loadGlobalConfig, saveGlobalConfig, validatePublicUrl } from './config/globalConfig.js';
+export { TunnelConfigSchema, TunnelCredentialRefSchema } from './config/tunnelConfig.js';
+export { ProjectConfigSchema, loadProjectConfig } from './config/projectConfig.js';
+export { LimitsSchema, DEFAULT_LIMITS } from './config/limits.js';
+export { resolveConfigDir, existingConfigDirs, statePaths, ipcSocketPath } from './config/paths.js';
+export { planStateImport, importState, STATE_IMPORT_CONFIG_FIELDS } from './config/stateImport.js';
+export { WorkspaceFS } from './workspace/fs.js';
+export { IgnoreEngine } from './workspace/ignores.js';
+export { resolveWorkspaceRoot } from './workspace/root.js';
+export { mintWorkspaceId, mintEpoch } from './workspace/identity.js';
+export { openDatabase } from './store/db.js';
+export { Store } from './store/store.js';
+export { ipcCall, IpcError } from './ipc/client.js';
+export { TOOL_CATALOG } from './tools/catalog.js';
+export { envelopeSchema } from './tools/envelope.js';
+export { addStaticClient, listStaticClients } from './auth/clients.js';
+export { sha256Bytes, digestOf, canonicalJson, phraseFor } from './util/hash.js';
+export { buildChildEnv, trustedPath } from './security/env.js';
+export { redact } from './security/redact.js';
+export { decide, TRUST_MODE_DESCRIPTIONS, ALL_SCOPES } from './security/policy.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAyC,MAAM,uBAAuB,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAA8C,MAAM,yBAAyB,CAAC;AACxH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACrH,OAAO,EAAE,kBAAkB,EAAE,yBAAyB,EAA+C,MAAM,0BAA0B,CAAC;AACtI,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,0BAA0B,EAAgD,MAAM,yBAAyB,CAAC;AACjJ,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/ipc/authentication.js

@@ -0,0 +1,117 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createHash, createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
+import { assertPrivatePath } from '../platform/privateFs.js';
+import { renameWithRetry } from '../platform/fsRetry.js';
+export const IPC_FRAME_BYTES = 1024 * 1024;
+export function credentialPath(locator) { return `${locator}.auth`; }
+/** Public APIs keep a filesystem locator, not a named-pipe pseudo-file.
+ * Windows uses a fresh pipe per listener, so another stdio client's root alias
+ * can replace the descriptor without taking over the old instance endpoint. */
+export function ipcTransportPath(locator, nonce, platform = process.platform, stable = false) {
+    if (platform !== 'win32')
+        return locator;
+    const digest = createHash('sha256').update(path.win32.resolve(locator).toLowerCase()).digest('hex').slice(0, 24);
+    return stable ? `\\\\.\\pipe\\dodo-${digest}-singleton` : `\\\\.\\pipe\\dodo-${digest}-${nonce}`;
+}
+export function newIpcCredential(locator, options = {}) {
+    const nonce = randomBytes(16).toString('hex');
+    const stable = options.stableWindowsEndpoint === true;
+    return { version: 1, nonce, token: randomBytes(32).toString('hex'), endpoint: ipcTransportPath(locator, nonce, process.platform, stable), ...(stable ? { transport: 'stable' } : {}) };
+}
+export function loadIpcCredential(locator) {
+    assertPrivatePath(path.dirname(locator), true);
+    const file = credentialPath(locator);
+    const stat = assertPrivatePath(file);
+    if (stat.size > 2048)
+        throw new Error('invalid IPC authentication descriptor');
+    const value = JSON.parse(fs.readFileSync(file, 'utf8'));
+    if (!value || typeof value !== 'object')
+        throw new Error('invalid IPC authentication descriptor');
+    const c = value;
+    if (c.version !== 1 || !/^[a-f0-9]{32}$/.test(c.nonce ?? '') || !/^[a-f0-9]{64}$/.test(c.token ?? '') || (c.transport !== undefined && c.transport !== 'stable') || c.endpoint !== ipcTransportPath(locator, c.nonce, process.platform, c.transport === 'stable'))
+        throw new Error('invalid IPC authentication descriptor');
+    return c;
+}
+export function publishIpcCredential(locator, credential) {
+    const target = credentialPath(locator), temporary = `${target}.${credential.nonce}.tmp`;
+    const fd = fs.openSync(temporary, 'wx', 0o600);
+    try {
+        fs.writeFileSync(fd, JSON.stringify(credential));
+        fs.fsyncSync(fd);
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    try {
+        renameWithRetry(temporary, target);
+    }
+    catch (error) {
+        try {
+            fs.unlinkSync(temporary);
+        }
+        catch { /* owned temporary file */ }
+        throw error;
+    }
+}
+export function removeIpcCredential(locator, credential) {
+    try {
+        const current = loadIpcCredential(locator);
+        if (current.nonce === credential.nonce && current.token === credential.token)
+            fs.unlinkSync(credentialPath(locator));
+    }
+    catch { /* absent or replaced: never remove another server's descriptor */ }
+}
+export function ipcEndpointPresent(locator) { return fs.existsSync(credentialPath(locator)) || fs.existsSync(locator); }
+export function ipcIdentity(locator) {
+    if (!ipcEndpointPresent(locator))
+        return undefined;
+    // Keep Unix socket ownership checks, in addition to the new authentication.
+    let socketIdentity = '';
+    if (process.platform !== 'win32') {
+        let st;
+        try {
+            st = fs.lstatSync(locator);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return undefined;
+            throw error;
+        }
+        if (!st.isSocket() || st.isSymbolicLink() || st.uid !== process.getuid?.() || (st.mode & 0o077) !== 0)
+            throw new Error('refusing non-private or unexpected IPC path');
+        socketIdentity = `${st.dev}:${st.ino}:${st.ctimeMs}:`;
+    }
+    let c;
+    try {
+        c = loadIpcCredential(locator);
+    }
+    catch (error) {
+        // The owner may finish closing while this process validates the private
+        // descriptor (Windows ACL probes can take longer than shutdown). Treat it
+        // as absent only after rechecking both paths; malformed or non-private
+        // endpoints that still exist must continue to fail closed.
+        // existsSync also returns false for access errors. Only actual ENOENT on
+        // both paths proves disappearance; denied/unreadable paths are not success.
+        const gone = [credentialPath(locator), locator].every(file => {
+            try {
+                fs.lstatSync(file);
+                return false;
+            }
+            catch (missing) {
+                return missing.code === 'ENOENT';
+            }
+        });
+        if (gone)
+            return undefined;
+        throw error;
+    }
+    return socketIdentity + createHash('sha256').update(c.token + c.nonce).digest('hex');
+}
+export function ipcMac(token, domain, ...parts) {
+    return createHmac('sha256', Buffer.from(token, 'hex')).update(JSON.stringify([domain, ...parts])).digest('hex');
+}
+export function validMac(actual, expected) {
+    return typeof actual === 'string' && /^[a-f0-9]{64}$/.test(actual) && timingSafeEqual(Buffer.from(actual, 'hex'), Buffer.from(expected, 'hex'));
+}
+//# sourceMappingURL=authentication.js.map

package/dist/ipc/authentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.js","sourceRoot":"","sources":["../../src/ipc/authentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAGzD,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,UAAU,cAAc,CAAC,OAAe,IAAY,OAAO,GAAG,OAAO,OAAO,CAAC,CAAC,CAAC;AAErF;;+EAE+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAa,EAAE,WAA4B,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK;IAC3H,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjH,OAAO,MAAM,CAAC,CAAC,CAAC,qBAAqB,MAAM,YAAY,CAAC,CAAC,CAAC,qBAAqB,MAAM,IAAI,KAAK,EAAE,CAAC;AACnG,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,UAA+C,EAAE;IACjG,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,qBAAqB,KAAK,IAAI,CAAC;IACtD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClM,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAClG,MAAM,CAAC,GAAG,KAAsB,CAAC;IACjC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC5T,OAAO,CAAC,CAAC;AACX,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,UAAyB;IAC7E,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG,MAAM,IAAI,UAAU,CAAC,KAAK,MAAM,CAAC;IACxF,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC;QAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;YACnE,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAC7B,IAAI,CAAC;QAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAC3C,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACvG,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,UAAyB;IAC5E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK;YAAE,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACvH,CAAC;IAAC,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;AAChF,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,OAAe,IAAa,OAAO,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACzI,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,4EAA4E;IAC5E,IAAI,cAAc,GAAG,EAAE,CAAC;IACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,EAAY,CAAC;QACjB,IAAI,CAAC;YAAC,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACnC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QACxG,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACtK,cAAc,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,OAAO,GAAG,CAAC;IACxD,CAAC;IACD,IAAI,CAAgB,CAAC;IACrB,IAAI,CAAC;QAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACvC,OAAO,KAAK,EAAE,CAAC;QACb,wEAAwE;QACxE,0EAA0E;QAC1E,uEAAuE;QACvE,2DAA2D;QAC3D,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,IAAI,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;YAC3D,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YACzC,OAAO,OAAO,EAAE,CAAC;gBAAC,OAAQ,OAAiC,CAAC,IAAI,KAAK,QAAQ,CAAC;YAAC,CAAC;QAClF,CAAC,CAAC,CAAC;QACH,IAAI,IAAI;YAAE,OAAO,SAAS,CAAC;QAC3B,MAAM,KAAK,CAAC;IACd,CAAC;IACD,OAAO,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,MAAc,EAAE,GAAG,KAAe;IACtE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClH,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,MAAe,EAAE,QAAgB;IACxD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAClJ,CAAC"}

package/dist/ipc/client.js

@@ -0,0 +1,86 @@
+import net from 'node:net';
+import { randomBytes } from 'node:crypto';
+import { IPC_FRAME_BYTES, loadIpcCredential, ipcMac, validMac } from './authentication.js';
+export class IpcError extends Error {
+}
+const NOT_RUNNING = 'no running DODO server for this workspace (start it with `dodo start`)';
+/** No unauthenticated fallback, including status/stop. A process using an
+ * incompatible IPC contract must be stopped with its matching CLI first. */
+export async function ipcCall(socketPath, cmd, args = {}, timeoutMs = 10000) {
+    let credential;
+    try {
+        credential = loadIpcCredential(socketPath);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            throw new IpcError(NOT_RUNNING);
+        throw new IpcError('IPC authentication descriptor is invalid or not private');
+    }
+    const req = { id: 1, cmd, args };
+    const payload = JSON.stringify(req);
+    if (Buffer.byteLength(payload, 'utf8') > IPC_FRAME_BYTES / 2)
+        throw new IpcError('IPC request exceeds size limit');
+    const clientNonce = randomBytes(32).toString('hex');
+    return new Promise((resolve, reject) => {
+        const conn = net.createConnection(credential.endpoint);
+        let buffer = '', serverNonce = '', phase = 'hello', done = false;
+        const finish = (error, data) => {
+            if (done)
+                return;
+            done = true;
+            clearTimeout(timer);
+            conn.destroy();
+            if (error)
+                reject(error);
+            else
+                resolve(data);
+        };
+        const timer = setTimeout(() => finish(new IpcError('IPC timeout')), timeoutMs);
+        conn.setEncoding('utf8');
+        conn.on('connect', () => conn.write(JSON.stringify({ version: 1, nonce: clientNonce }) + '\n'));
+        conn.on('data', (chunk) => {
+            buffer += chunk;
+            if (Buffer.byteLength(buffer, 'utf8') > IPC_FRAME_BYTES) {
+                finish(new IpcError('IPC response exceeds size limit'));
+                return;
+            }
+            const index = buffer.indexOf('\n');
+            if (index === -1)
+                return;
+            const line = buffer.slice(0, index);
+            buffer = buffer.slice(index + 1);
+            try {
+                const frame = JSON.parse(line);
+                if (buffer.length)
+                    throw new Error('extra IPC data');
+                if (phase === 'hello') {
+                    if (frame['version'] !== 1 || typeof frame['nonce'] !== 'string' || !/^[a-f0-9]{64}$/.test(frame['nonce']))
+                        throw new Error('invalid hello');
+                    serverNonce = frame['nonce'];
+                    if (!validMac(frame['mac'], ipcMac(credential.token, 'hello', clientNonce, serverNonce)))
+                        throw new Error('server authentication failed');
+                    phase = 'response';
+                    conn.write(JSON.stringify({ payload, mac: ipcMac(credential.token, 'request', clientNonce, serverNonce, payload) }) + '\n');
+                    return;
+                }
+                const text = frame['payload'];
+                if (typeof text !== 'string' || !validMac(frame['mac'], ipcMac(credential.token, 'response', clientNonce, serverNonce, text)))
+                    throw new Error('response authentication failed');
+                const response = JSON.parse(text);
+                if (!response || response.id !== 1 || typeof response.ok !== 'boolean')
+                    throw new Error('bad IPC response');
+                if (response.ok)
+                    finish(undefined, response.data);
+                else
+                    finish(new IpcError(typeof response.error === 'string' ? response.error : 'owner request failed'));
+            }
+            catch {
+                finish(new IpcError('bad or unauthenticated IPC response'));
+            }
+        });
+        conn.on('error', (error) => finish(new IpcError(['ENOENT', 'ECONNREFUSED', 'EPIPE'].includes(error.code ?? '') ? NOT_RUNNING : error.message)));
+        conn.on('close', () => { if (!done)
+            finish(new IpcError('IPC closed before an authenticated response')); });
+    });
+}
+//# sourceMappingURL=client.js.map

package/dist/ipc/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/ipc/client.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE3F,MAAM,OAAO,QAAS,SAAQ,KAAK;CAAG;AACtC,MAAM,WAAW,GAAG,wEAAwE,CAAC;AAE7F;4EAC4E;AAC5E,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,UAAkB,EAAE,GAAW,EAAE,OAAgC,EAAE,EAAE,SAAS,GAAG,KAAK;IAClH,IAAI,UAAU,CAAC;IACf,IAAI,CAAC;QAAC,UAAU,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IACnD,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxF,MAAM,IAAI,QAAQ,CAAC,yDAAyD,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,GAAG,GAAe,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,eAAe,GAAG,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IACnH,MAAM,WAAW,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,MAAM,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,EAAE,KAAK,GAAyB,OAAO,EAAE,IAAI,GAAG,KAAK,CAAC;QACvF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAc,EAAE,EAAE;YAC/C,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACjD,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAChC,MAAM,IAAI,KAAK,CAAC;YAChB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC7H,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,OAAO;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;gBAC1D,IAAI,MAAM,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACrD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;oBACtB,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;oBAC7I,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC7B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;oBAC1I,KAAK,GAAG,UAAU,CAAC;oBACnB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC5H,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACjL,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;gBACjD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,CAAC,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBAC5G,IAAI,QAAQ,CAAC,EAAE;oBAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;;oBAC7C,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAC1G,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,qCAAqC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvK,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,6CAA6C,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9G,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/ipc/installationClient.js

@@ -0,0 +1,83 @@
+import { z } from 'zod';
+import { ipcSocketPath, statePaths } from '../config/paths.js';
+import { openDatabaseReadonly } from '../store/db.js';
+import { Store } from '../store/store.js';
+import { mintWorkspaceId } from '../workspace/identity.js';
+import { ipcCall, IpcError } from './client.js';
+const Instance = z.object({
+    socketKey: z.string().regex(/^[a-f0-9]{32}$/),
+    workspaceId: z.string(),
+    root: z.string(),
+}).strict();
+const Status = z.object({
+    pid: z.number().int().positive(),
+    root: z.string(),
+    workspaceId: z.string(),
+    transport: z.enum(['http', 'stdio']),
+}).loose();
+/**
+ * Find the one live HTTP installation process from its authenticated,
+ * per-instance owner endpoints. This deliberately does not derive an IPC
+ * name from process.cwd(): OAuth registration and consent are installation
+ * operations. The final command is sent once, so an uncertain effectful
+ * result is never replayed against another endpoint.
+ */
+export async function installationIpcCall(configDir, cmd, args = {}) {
+    const db = openDatabaseReadonly(statePaths(configDir).dbFile);
+    if (!db)
+        throw new IpcError('no running DODO installation (start it with `dodo`)');
+    const candidates = [];
+    try {
+        const store = new Store(db);
+        const secret = store.readInstallSecret();
+        if (!secret)
+            throw new IpcError('DODO installation identity is unavailable');
+        const rows = db.prepare("SELECT value FROM meta WHERE key LIKE 'ipc-instance:%' ORDER BY key LIMIT 10001").all();
+        if (rows.length > 10000)
+            throw new IpcError('too many DODO owner endpoints to inspect safely');
+        for (const row of rows) {
+            const parsed = Instance.safeParse(safeJson(row.value));
+            if (!parsed.success || mintWorkspaceId(secret, parsed.data.root) !== parsed.data.workspaceId)
+                continue;
+            candidates.push({
+                socket: ipcSocketPath(configDir, parsed.data.socketKey, { createDirectory: false }),
+                workspaceId: parsed.data.workspaceId,
+                root: parsed.data.root,
+            });
+        }
+    }
+    finally {
+        db.close();
+    }
+    const byPid = new Map();
+    for (const candidate of candidates) {
+        try {
+            const status = Status.parse(await ipcCall(candidate.socket, 'status', {}, 1500));
+            if (status.transport !== 'http' || status.workspaceId !== candidate.workspaceId || status.root !== candidate.root)
+                continue;
+            if (!byPid.has(status.pid))
+                byPid.set(status.pid, { socket: candidate.socket });
+        }
+        catch (error) {
+            if (!(error instanceof IpcError && error.message.startsWith('no running DODO server')))
+                throw error;
+        }
+    }
+    if (byPid.size === 0)
+        throw new IpcError('no running DODO installation (start it with `dodo`)');
+    if (byPid.size > 1)
+        throw new IpcError('multiple DODO HTTP processes use this installation; close extras with `dodo kill` before reviewing OAuth consent');
+    const target = [...byPid.values()][0];
+    if (!target)
+        throw new IpcError('no running DODO installation (start it with `dodo`)');
+    return ipcCall(target.socket, cmd, args);
+}
+function safeJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=installationClient.js.map

package/dist/ipc/installationClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installationClient.js","sourceRoot":"","sources":["../../src/ipc/installationClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC,CAAC,CAAC,KAAK,EAAE,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,GAAW,EACX,OAAgC,EAAE;IAElC,MAAM,EAAE,GAAG,oBAAoB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IACnF,MAAM,UAAU,GAAiE,EAAE,CAAC;IACpF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,2CAA2C,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,iFAAiF,CAAC,CAAC,GAAG,EAA8B,CAAC;QAC7I,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,iDAAiD,CAAC,CAAC;QAC/F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW;gBAAE,SAAS;YACvG,UAAU,CAAC,IAAI,CAAC;gBACd,MAAM,EAAE,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;gBACnF,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;gBACpC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YACjF,IAAI,MAAM,CAAC,SAAS,KAAK,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;gBAAE,SAAS;YAC5H,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC;QACtG,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IAChG,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,kHAAkH,CAAC,CAAC;IAC3J,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,qDAAqD,CAAC,CAAC;IACvF,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC9D,CAAC"}

package/dist/ipc/ownerControl.js

@@ -0,0 +1,46 @@
+import { randomBytes } from 'node:crypto';
+import fs from 'node:fs';
+import { ipcSocketPath } from '../config/paths.js';
+import { startIpcServer } from './server.js';
+/** A private instance endpoint remains discoverable when the root alias is replaced. */
+export async function startOwnerControl(ws, handler) {
+    const socketKey = randomBytes(16).toString('hex');
+    const instancePath = ipcSocketPath(ws.configDir, socketKey);
+    const rootPath = ipcSocketPath(ws.configDir, ws.workspaceId);
+    const metaKey = `ipc-instance:${socketKey}`;
+    const instance = await startIpcServer(instancePath, handler);
+    let root;
+    try {
+        root = await startIpcServer(rootPath, handler);
+        ws.store.setMeta(metaKey, JSON.stringify({ socketKey, workspaceId: ws.workspaceId, root: ws.rootInfo.root }));
+    }
+    catch (error) {
+        root?.close();
+        instance.close();
+        throw error;
+    }
+    const inode = (file) => process.platform === 'win32' ? undefined : fs.lstatSync(file).ino;
+    const rootInode = inode(rootPath), instanceInode = inode(instancePath), rootServer = root;
+    let closing;
+    return {
+        close() {
+            if (!closing)
+                closing = (async () => {
+                    ws.store.db.prepare('DELETE FROM meta WHERE key = ?').run(metaKey);
+                    await Promise.all([closeSocket(rootServer, rootPath, rootInode), closeSocket(instance, instancePath, instanceInode)]);
+                })();
+            return closing;
+        },
+    };
+}
+async function closeSocket(server, socket, inode) {
+    await new Promise(resolve => { server.close(() => resolve()); setTimeout(resolve, 500).unref(); });
+    if (inode === undefined)
+        return; // named pipes disappear when their handles close
+    try {
+        if (fs.lstatSync(socket).ino === inode)
+            fs.unlinkSync(socket);
+    }
+    catch { /* absent/replaced */ }
+}
+//# sourceMappingURL=ownerControl.js.map

package/dist/ipc/ownerControl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownerControl.js","sourceRoot":"","sources":["../../src/ipc/ownerControl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAmB,MAAM,aAAa,CAAC;AAE9D,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAyB,EAAE,OAAmB;IACpF,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,gBAAgB,SAAS,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,IAA4B,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACjE,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;IAClG,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,aAAa,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAC1F,IAAI,OAAkC,CAAC;IACvC,OAAO;QACL,KAAK;YACH,IAAI,CAAC,OAAO;gBAAE,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;oBAClC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACnE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,WAAW,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;gBACxH,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AACD,KAAK,UAAU,WAAW,CAAC,MAAkB,EAAE,MAAc,EAAE,KAAyB;IACtF,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,CAAC,iDAAiD;IAClF,IAAI,CAAC;QAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,KAAK;YAAE,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC;AACxG,CAAC"}

package/dist/ipc/protocol.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=protocol.js.map

package/dist/ipc/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/ipc/protocol.ts"],"names":[],"mappings":""}