dsh-env-manager-plugin 0.0.0-stage → 0.1.0

package/lib/router/router.js

@@ -0,0 +1,204 @@
+import { WRITE_OPERATIONS } from '../domain/constants.js';
+import { EnvManagerError } from '../domain/errors.js';
+import { matchShape } from '../domain/schemas.js';
+import { resolveParameters } from './params.js';
+const RANK = {
+    deployment: 1,
+    'environment-service': 2,
+    service: 3,
+    'category-mode': 4,
+    global: 5,
+};
+function matches(binding, context) {
+    const match = binding.match;
+    if (match.environmentId && match.environmentId !== context.environmentId)
+        return false;
+    if (match.serviceId && match.serviceId !== context.serviceId)
+        return false;
+    if (match.deploymentId && match.deploymentId !== context.deploymentId)
+        return false;
+    if (match.deploymentMode && match.deploymentMode !== context.runtimeMode)
+        return false;
+    if (match.serviceCategory && match.serviceCategory !== context.serviceCategory)
+        return false;
+    return true;
+}
+function levelOf(binding) {
+    const shape = matchShape(binding.match);
+    return shape ?? null;
+}
+function skillDiagnostic(code, message, severity, details) {
+    return { code, severity, message, details };
+}
+async function checkSkill(binding, context, skills, signal) {
+    const ref = binding.skill;
+    if (!skills) {
+        return {
+            skill: { name: ref.name, available: 'unknown' },
+            diagnostics: [
+                skillDiagnostic('SKILL_REGISTRY_UNAVAILABLE', 'Skill catalog is unavailable; availability could not be verified', 'warning', { skill: ref.name }),
+            ],
+            ok: true,
+        };
+    }
+    let snapshot;
+    try {
+        snapshot = await skills.snapshot({ signal });
+    }
+    catch (error) {
+        return {
+            skill: { name: ref.name, available: 'unknown' },
+            diagnostics: [
+                skillDiagnostic('SKILL_REGISTRY_UNAVAILABLE', `Skill catalog could not be read: ${error instanceof Error ? error.message : String(error)}`, 'warning', { skill: ref.name }),
+            ],
+            ok: true,
+        };
+    }
+    if (!snapshot.complete) {
+        return {
+            skill: { name: ref.name, available: 'unknown' },
+            diagnostics: [
+                skillDiagnostic('SKILL_REGISTRY_UNAVAILABLE', 'Skill discovery did not complete; availability could not be verified', 'warning', { skill: ref.name }),
+            ],
+            ok: true,
+        };
+    }
+    const found = snapshot.skills.find((item) => item.name === ref.name);
+    if (!found) {
+        return {
+            skill: { name: ref.name, available: false },
+            diagnostics: [
+                skillDiagnostic('SKILL_UNAVAILABLE', `Skill "${ref.name}" is not installed`, 'error', {
+                    skill: ref.name,
+                    operation: binding.operation,
+                }),
+            ],
+            ok: false,
+        };
+    }
+    if (ref.expectedSource && found.source !== ref.expectedSource) {
+        return {
+            skill: { name: ref.name, source: found.source, provider: found.provider, available: false },
+            diagnostics: [
+                skillDiagnostic('SKILL_UNAVAILABLE', `Skill "${ref.name}" has source "${found.source}"; expected "${ref.expectedSource}"`, 'error', { skill: ref.name, expectedSource: ref.expectedSource, actualSource: found.source }),
+            ],
+            ok: false,
+        };
+    }
+    if (ref.expectedProvider && found.provider !== ref.expectedProvider) {
+        return {
+            skill: { name: ref.name, source: found.source, provider: found.provider, available: false },
+            diagnostics: [
+                skillDiagnostic('SKILL_UNAVAILABLE', `Skill "${ref.name}" has provider "${found.provider}"; expected "${ref.expectedProvider}"`, 'error', {
+                    skill: ref.name,
+                    expectedProvider: ref.expectedProvider,
+                    actualProvider: found.provider,
+                }),
+            ],
+            ok: false,
+        };
+    }
+    return {
+        skill: {
+            name: ref.name,
+            source: found.source,
+            provider: found.provider,
+            available: true,
+        },
+        diagnostics: [],
+        ok: true,
+    };
+}
+export async function resolveOperation(input) {
+    const { operation, context, bindings, skills, signal } = input;
+    const requested = {
+        environmentId: context.environmentId,
+        serviceId: context.serviceId,
+        deploymentId: context.deploymentId,
+    };
+    const base = {
+        ok: false,
+        operation,
+        requested,
+        diagnostics: [],
+    };
+    const candidates = bindings.filter((binding) => binding.enabled && binding.operation === operation && matches(binding, context));
+    if (candidates.length === 0) {
+        return {
+            ...base,
+            diagnostics: [
+                skillDiagnostic('BINDING_NOT_FOUND', `No enabled operation binding matches "${operation}" for ${context.environmentId}/${context.serviceId}`, 'error', { operation }),
+            ],
+        };
+    }
+    const ranked = candidates
+        .map((binding) => ({ binding, level: levelOf(binding) }))
+        .filter((item) => item.level !== null);
+    if (ranked.length === 0) {
+        return {
+            ...base,
+            diagnostics: [
+                skillDiagnostic('RECORD_INVALID', 'Matching bindings do not have a valid match shape', 'error'),
+            ],
+        };
+    }
+    ranked.sort((a, b) => RANK[a.level] - RANK[b.level]);
+    const topRank = RANK[ranked[0].level];
+    const winners = ranked.filter((item) => RANK[item.level] === topRank);
+    if (winners.length > 1) {
+        return {
+            ...base,
+            diagnostics: [
+                skillDiagnostic('BINDING_CONFLICT', `Operation "${operation}" has ${winners.length} bindings at the same priority (${winners[0].level})`, 'error', {
+                    candidates: winners.map((item) => item.binding.id),
+                    level: winners[0].level,
+                }),
+            ],
+        };
+    }
+    const selected = winners[0];
+    const selectedBinding = selected.binding;
+    const skillResult = await checkSkill(selectedBinding, context, skills, signal);
+    const policy = {
+        requiresApproval: selectedBinding.policy?.requiresApproval ?? WRITE_OPERATIONS.has(operation),
+        allowProduction: selectedBinding.policy?.allowProduction ?? false,
+    };
+    const diagnostics = [...skillResult.diagnostics];
+    let ok = skillResult.ok;
+    if (context.environmentCategory === 'production' && policy.allowProduction !== true) {
+        ok = false;
+        diagnostics.push(skillDiagnostic('POLICY_DENIED', `Operation "${operation}" is not allowed in production by binding ${selectedBinding.id}`, 'error', { binding: selectedBinding.id, environmentId: context.environmentId }));
+    }
+    let parameters;
+    try {
+        parameters = resolveParameters(selectedBinding.parameters, context);
+    }
+    catch (error) {
+        ok = false;
+        diagnostics.push(error instanceof EnvManagerError
+            ? {
+                code: error.code,
+                severity: 'error',
+                message: error.message,
+                details: error.details,
+            }
+            : {
+                code: 'PARAMETER_RESOLUTION_FAILED',
+                severity: 'error',
+                message: error instanceof Error ? error.message : String(error),
+            });
+    }
+    return {
+        ok,
+        operation,
+        requested,
+        matchedBindingId: selectedBinding.id,
+        matchLevel: selected.level,
+        skill: skillResult.skill,
+        parameters,
+        policy,
+        diagnostics,
+    };
+}
+export { RANK };
+//# sourceMappingURL=router.js.map

package/lib/router/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/router/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAYrD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAE/C,MAAM,IAAI,GAA+B;IACvC,UAAU,EAAE,CAAC;IACb,qBAAqB,EAAE,CAAC;IACxB,OAAO,EAAE,CAAC;IACV,eAAe,EAAE,CAAC;IAClB,MAAM,EAAE,CAAC;CACV,CAAA;AAUD,SAAS,OAAO,CAAC,OAAyB,EAAE,OAAuB;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IAC3B,IAAI,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;QAAE,OAAO,KAAK,CAAA;IACtF,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QAAE,OAAO,KAAK,CAAA;IAC1E,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;QAAE,OAAO,KAAK,CAAA;IACnF,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,WAAW;QAAE,OAAO,KAAK,CAAA;IACtF,IAAI,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe;QAAE,OAAO,KAAK,CAAA;IAC5F,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,OAAO,CAAC,OAAyB;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAA;IAClE,OAAQ,KAA2B,IAAI,IAAI,CAAA;AAC7C,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,OAAe,EACf,QAA6B,EAC7B,OAAiC;IAEjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AAC7C,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,OAAyB,EACzB,OAAuB,EACvB,MAA6B,EAC7B,MAAoB;IAMpB,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAA;IACzB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;YAC/C,WAAW,EAAE;gBACX,eAAe,CACb,4BAA4B,EAC5B,kEAAkE,EAClE,SAAS,EACT,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CACpB;aACF;YACD,EAAE,EAAE,IAAI;SACT,CAAA;IACH,CAAC;IACD,IAAI,QAAQ,CAAA;IACZ,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;YAC/C,WAAW,EAAE;gBACX,eAAe,CACb,4BAA4B,EAC5B,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC5F,SAAS,EACT,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CACpB;aACF;YACD,EAAE,EAAE,IAAI;SACT,CAAA;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO;YACL,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;YAC/C,WAAW,EAAE;gBACX,eAAe,CACb,4BAA4B,EAC5B,sEAAsE,EACtE,SAAS,EACT,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CACpB;aACF;YACD,EAAE,EAAE,IAAI;SACT,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAA6B,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAA;IAC9F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;YAC3C,WAAW,EAAE;gBACX,eAAe,CAAC,mBAAmB,EAAE,UAAU,GAAG,CAAC,IAAI,oBAAoB,EAAE,OAAO,EAAE;oBACpF,KAAK,EAAE,GAAG,CAAC,IAAI;oBACf,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC;aACH;YACD,EAAE,EAAE,KAAK;SACV,CAAA;IACH,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,CAAC;QAC9D,OAAO;YACL,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;YAC3F,WAAW,EAAE;gBACX,eAAe,CACb,mBAAmB,EACnB,UAAU,GAAG,CAAC,IAAI,iBAAiB,KAAK,CAAC,MAAM,gBAAgB,GAAG,CAAC,cAAc,GAAG,EACpF,OAAO,EACP,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,CACpF;aACF;YACD,EAAE,EAAE,KAAK;SACV,CAAA;IACH,CAAC;IACD,IAAI,GAAG,CAAC,gBAAgB,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACpE,OAAO;YACL,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;YAC3F,WAAW,EAAE;gBACX,eAAe,CACb,mBAAmB,EACnB,UAAU,GAAG,CAAC,IAAI,mBAAmB,KAAK,CAAC,QAAQ,gBAAgB,GAAG,CAAC,gBAAgB,GAAG,EAC1F,OAAO,EACP;oBACE,KAAK,EAAE,GAAG,CAAC,IAAI;oBACf,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;oBACtC,cAAc,EAAE,KAAK,CAAC,QAAQ;iBAC/B,CACF;aACF;YACD,EAAE,EAAE,KAAK;SACV,CAAA;IACH,CAAC;IACD,OAAO;QACL,KAAK,EAAE;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,IAAI;SAChB;QACD,WAAW,EAAE,EAAE;QACf,EAAE,EAAE,IAAI;KACT,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAkB;IACvD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IAC9D,MAAM,SAAS,GAAG;QAChB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAA;IACD,MAAM,IAAI,GAAwB;QAChC,EAAE,EAAE,KAAK;QACT,SAAS;QACT,SAAS;QACT,WAAW,EAAE,EAAE;KAChB,CAAA;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAChC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAC7F,CAAA;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO;YACL,GAAG,IAAI;YACP,WAAW,EAAE;gBACX,eAAe,CACb,mBAAmB,EACnB,yCAAyC,SAAS,SAAS,OAAO,CAAC,aAAa,IAAI,OAAO,CAAC,SAAS,EAAE,EACvG,OAAO,EACP,EAAE,SAAS,EAAE,CACd;aACF;SACF,CAAA;IACH,CAAC;IAED,MAAM,MAAM,GAAG,UAAU;SACtB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;SACxD,MAAM,CAAC,CAAC,IAAI,EAA4D,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAA;IAClG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,GAAG,IAAI;YACP,WAAW,EAAE;gBACX,eAAe,CAAC,gBAAgB,EAAE,mDAAmD,EAAE,OAAO,CAAC;aAChG;SACF,CAAA;IACH,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,CAAA;IACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,GAAG,IAAI;YACP,WAAW,EAAE;gBACX,eAAe,CACb,kBAAkB,EAClB,cAAc,SAAS,SAAS,OAAO,CAAC,MAAM,mCAAmC,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,GAAG,EACrG,OAAO,EACP;oBACE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAClD,KAAK,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK;iBACzB,CACF;aACF;SACF,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;IAC5B,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAA;IACxC,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IAE9E,MAAM,MAAM,GAAoB;QAC9B,gBAAgB,EACd,eAAe,CAAC,MAAM,EAAE,gBAAgB,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC;QAC7E,eAAe,EAAE,eAAe,CAAC,MAAM,EAAE,eAAe,IAAI,KAAK;KAClE,CAAA;IACD,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;IAChD,IAAI,EAAE,GAAG,WAAW,CAAC,EAAE,CAAA;IACvB,IAAI,OAAO,CAAC,mBAAmB,KAAK,YAAY,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACpF,EAAE,GAAG,KAAK,CAAA;QACV,WAAW,CAAC,IAAI,CACd,eAAe,CACb,eAAe,EACf,cAAc,SAAS,6CAA6C,eAAe,CAAC,EAAE,EAAE,EACxF,OAAO,EACP,EAAE,OAAO,EAAE,eAAe,CAAC,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CACtE,CACF,CAAA;IACH,CAAC;IAED,IAAI,UAA8C,CAAA;IAClD,IAAI,CAAC;QACH,UAAU,GAAG,iBAAiB,CAAC,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,EAAE,GAAG,KAAK,CAAA;QACV,WAAW,CAAC,IAAI,CACd,KAAK,YAAY,eAAe;YAC9B,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB;YACH,CAAC,CAAC;gBACE,IAAI,EAAE,6BAA6B;gBACnC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CACN,CAAA;IACH,CAAC;IAED,OAAO;QACL,EAAE;QACF,SAAS;QACT,SAAS;QACT,gBAAgB,EAAE,eAAe,CAAC,EAAE;QACpC,UAAU,EAAE,QAAQ,CAAC,KAAK;QAC1B,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,UAAU;QACV,MAAM;QACN,WAAW;KACZ,CAAA;AACH,CAAC;AAED,OAAO,EAAE,IAAI,EAAE,CAAA"}

package/lib/session/session.d.ts

@@ -0,0 +1,16 @@
+import type { Diagnostic, SessionContext } from '../domain/types.js';
+export interface SessionResult {
+    context: SessionContext;
+    diagnostics: Diagnostic[];
+}
+/**
+ * Per-session default environment. The file is authoritative; a process-local
+ * cache keeps the current process consistent when a write fails.
+ */
+export declare class SessionStore {
+    private readonly dataDir;
+    private readonly cache;
+    constructor(dataDir: string);
+    get(sessionId: string): Promise<SessionResult>;
+    set(sessionId: string, environmentId: string | null): Promise<SessionResult>;
+}

package/lib/session/session.js

@@ -0,0 +1,64 @@
+import { readSessionFile, writeSessionFile } from '../storage/sessions.js';
+/**
+ * Per-session default environment. The file is authoritative; a process-local
+ * cache keeps the current process consistent when a write fails.
+ */
+export class SessionStore {
+    dataDir;
+    cache = new Map();
+    constructor(dataDir) {
+        this.dataDir = dataDir;
+    }
+    async get(sessionId) {
+        const read = await readSessionFile(this.dataDir, sessionId);
+        if (read.status === 'ok') {
+            this.cache.set(sessionId, read.value.defaultEnvironmentId);
+            return {
+                context: {
+                    sessionId,
+                    defaultEnvironmentId: read.value.defaultEnvironmentId,
+                    persisted: true,
+                },
+                diagnostics: [],
+            };
+        }
+        const cached = this.cache.get(sessionId);
+        const fallback = cached ?? null;
+        const diagnostics = read.status === 'corrupt'
+            ? [
+                {
+                    code: 'SESSION_CONTEXT_UNPERSISTED',
+                    severity: 'warning',
+                    message: `Session context file for ${sessionId} is unreadable (${read.reason}); using no default`,
+                },
+            ]
+            : [];
+        return {
+            context: { sessionId, defaultEnvironmentId: fallback, persisted: false },
+            diagnostics,
+        };
+    }
+    async set(sessionId, environmentId) {
+        this.cache.set(sessionId, environmentId);
+        try {
+            await writeSessionFile(this.dataDir, sessionId, environmentId);
+            return {
+                context: { sessionId, defaultEnvironmentId: environmentId, persisted: true },
+                diagnostics: [],
+            };
+        }
+        catch (error) {
+            return {
+                context: { sessionId, defaultEnvironmentId: environmentId, persisted: false },
+                diagnostics: [
+                    {
+                        code: 'SESSION_CONTEXT_UNPERSISTED',
+                        severity: 'warning',
+                        message: `Session default was updated in memory but not persisted: ${error instanceof Error ? error.message : String(error)}`,
+                    },
+                ],
+            };
+        }
+    }
+}
+//# sourceMappingURL=session.js.map

package/lib/session/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/session/session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAO1E;;;GAGG;AACH,MAAM,OAAO,YAAY;IAGM;IAFZ,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAA;IAEzD,YAA6B,OAAe;QAAf,YAAO,GAAP,OAAO,CAAQ;IAAG,CAAC;IAEhD,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;YAC1D,OAAO;gBACL,OAAO,EAAE;oBACP,SAAS;oBACT,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,oBAAoB;oBACrD,SAAS,EAAE,IAAI;iBAChB;gBACD,WAAW,EAAE,EAAE;aAChB,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,IAAI,CAAA;QAC/B,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,KAAK,SAAS;YACvB,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,6BAA6B;oBACnC,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,4BAA4B,SAAS,mBAAmB,IAAI,CAAC,MAAM,qBAAqB;iBAClG;aACF;YACH,CAAC,CAAC,EAAE,CAAA;QACR,OAAO;YACL,OAAO,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;YACxE,WAAW;SACZ,CAAA;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,aAA4B;QACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;QACxC,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;YAC9D,OAAO;gBACL,OAAO,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;gBAC5E,WAAW,EAAE,EAAE;aAChB,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,EAAE,SAAS,EAAE,oBAAoB,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE;gBAC7E,WAAW,EAAE;oBACX;wBACE,IAAI,EAAE,6BAA6B;wBACnC,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,4DACP,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;qBACH;iBACF;aACF,CAAA;QACH,CAAC;IACH,CAAC;CACF"}

package/lib/skill.d.ts

@@ -0,0 +1,17 @@
+export declare const ENV_MANAGER_SKILL_NAME = "dsh-env-manager";
+export declare const ENV_MANAGER_SKILL_DESCRIPTION = "Use when the user mentions DSH Environment Manager, a registered environment, host, service, deployment, log collection, restart or deploy, or asks where a registered service runs.";
+export declare const ENV_MANAGER_SKILL_WHEN_TO_USE = "The user asks which environment to use, where a registered service or host runs, how to find its paths or logs, or wants an operation on a registered environment.";
+export declare const ENV_MANAGER_SKILL_CONTENT = "# DSH Environment Manager\n\nUse the environment registry as the source of truth for registered environments, hosts,\nservices, deployments and operation routes. This is not the operating-system or Python\n\"environment\"; it is the DSH Environment Manager registry.\n\n## Workflow\n\n1. Discover before guessing.\n   - Use `env_list` for an inventory.\n   - Use `env_find` with an id, name, alias or category fragment.\n   - If more than one candidate matches, ask which one the user means; do not pick one.\n\n2. Pin the session when the user commits to one environment.\n   - Call `env_set_context` with the environment id.\n   - Use `env_get_context` to confirm it.\n   - Once pinned, later calls may omit `environmentId`.\n\n3. Resolve concrete context.\n   - Use `env_get` when the raw record or YAML is needed.\n   - Use `env_resolve` for the service context, paths, logs, variables and provenance.\n   - Prefer the resolver over reconstructing paths from templates.\n\n4. Route an operation before acting.\n   - Before deploy, redeploy, restart, rollback, collect-logs or a similar action, call\n     `env_resolve_operation` with the environment and service or deployment.\n   - A missing, ambiguous or conflicting binding is an error; do not invent a skill or\n     fall back to a different environment.\n   - `env_resolve_operation` returns a route; it does not execute the skill.\n\n## Boundaries\n\n- Do not assume the current workspace's files are the registry.\n- Do not print credential values; report only whether a credential is configured.\n- Respect approval and policy results; never bypass them because a route looks obvious.\n- If the user says \"not this environment\", clear or replace the session default with\n  `env_set_context`; do not silently keep the old one.\n";
+export interface EnvironmentManagerSkill {
+    name: string;
+    description: string;
+    whenToUse: string;
+    content: string;
+    source: 'runtime';
+    provider: string;
+    invocation: {
+        modelInvocable: boolean;
+        userInvocable: boolean;
+    };
+}
+export declare function createEnvironmentManagerSkill(): EnvironmentManagerSkill;

package/lib/skill.js

@@ -0,0 +1,56 @@
+export const ENV_MANAGER_SKILL_NAME = 'dsh-env-manager';
+export const ENV_MANAGER_SKILL_DESCRIPTION = 'Use when the user mentions DSH Environment Manager, a registered environment, host, service, deployment, log collection, restart or deploy, or asks where a registered service runs.';
+export const ENV_MANAGER_SKILL_WHEN_TO_USE = 'The user asks which environment to use, where a registered service or host runs, how to find its paths or logs, or wants an operation on a registered environment.';
+export const ENV_MANAGER_SKILL_CONTENT = `# DSH Environment Manager
+
+Use the environment registry as the source of truth for registered environments, hosts,
+services, deployments and operation routes. This is not the operating-system or Python
+"environment"; it is the DSH Environment Manager registry.
+
+## Workflow
+
+1. Discover before guessing.
+   - Use \`env_list\` for an inventory.
+   - Use \`env_find\` with an id, name, alias or category fragment.
+   - If more than one candidate matches, ask which one the user means; do not pick one.
+
+2. Pin the session when the user commits to one environment.
+   - Call \`env_set_context\` with the environment id.
+   - Use \`env_get_context\` to confirm it.
+   - Once pinned, later calls may omit \`environmentId\`.
+
+3. Resolve concrete context.
+   - Use \`env_get\` when the raw record or YAML is needed.
+   - Use \`env_resolve\` for the service context, paths, logs, variables and provenance.
+   - Prefer the resolver over reconstructing paths from templates.
+
+4. Route an operation before acting.
+   - Before deploy, redeploy, restart, rollback, collect-logs or a similar action, call
+     \`env_resolve_operation\` with the environment and service or deployment.
+   - A missing, ambiguous or conflicting binding is an error; do not invent a skill or
+     fall back to a different environment.
+   - \`env_resolve_operation\` returns a route; it does not execute the skill.
+
+## Boundaries
+
+- Do not assume the current workspace's files are the registry.
+- Do not print credential values; report only whether a credential is configured.
+- Respect approval and policy results; never bypass them because a route looks obvious.
+- If the user says "not this environment", clear or replace the session default with
+  \`env_set_context\`; do not silently keep the old one.
+`;
+export function createEnvironmentManagerSkill() {
+    return {
+        name: ENV_MANAGER_SKILL_NAME,
+        description: ENV_MANAGER_SKILL_DESCRIPTION,
+        whenToUse: ENV_MANAGER_SKILL_WHEN_TO_USE,
+        content: ENV_MANAGER_SKILL_CONTENT,
+        source: 'runtime',
+        provider: 'dsh-env-manager',
+        invocation: {
+            modelInvocable: true,
+            userInvocable: true,
+        },
+    };
+}
+//# sourceMappingURL=skill.js.map

package/lib/skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.js","sourceRoot":"","sources":["../src/skill.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAA;AAEvD,MAAM,CAAC,MAAM,6BAA6B,GACxC,sLAAsL,CAAA;AAExL,MAAM,CAAC,MAAM,6BAA6B,GACxC,oKAAoK,CAAA;AAEtK,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCxC,CAAA;AAeD,MAAM,UAAU,6BAA6B;IAC3C,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,6BAA6B;QAC1C,SAAS,EAAE,6BAA6B;QACxC,OAAO,EAAE,yBAAyB;QAClC,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,iBAAiB;QAC3B,UAAU,EAAE;YACV,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB;KACF,CAAA;AACH,CAAC"}

package/lib/storage/atomic.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Serialize writes to one absolute path within this process.
+ * No cross-process lock exists in V1.
+ */
+export declare function serialize<T>(key: string, work: () => Promise<T>): Promise<T>;
+export declare function writeTextAtomic(target: string, text: string): Promise<void>;
+export declare function rotateBackup(source: string, backupDirectory: string, extension: string): Promise<void>;
+/** Remove orphan `.tmp` files older than one hour. */
+export declare function cleanupTempFiles(dataDir: string): Promise<number>;
+export declare function ensureLayout(dataDir: string): Promise<void>;

package/lib/storage/atomic.js

@@ -0,0 +1,107 @@
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { LIMITS } from '../domain/constants.js';
+const queues = new Map();
+/**
+ * Serialize writes to one absolute path within this process.
+ * No cross-process lock exists in V1.
+ */
+export function serialize(key, work) {
+    const previous = queues.get(key) ?? Promise.resolve();
+    const run = previous.then(work, work);
+    const guard = run.then(() => undefined, () => undefined);
+    queues.set(key, guard);
+    return run.finally(() => {
+        if (queues.get(key) === guard)
+            queues.delete(key);
+    });
+}
+export async function writeTextAtomic(target, text) {
+    await fs.mkdir(path.dirname(target), { recursive: true });
+    const temp = path.join(path.dirname(target), `.${path.basename(target)}.${process.pid}.${randomUUID()}.tmp`);
+    const handle = await fs.open(temp, 'w');
+    try {
+        await handle.writeFile(text, 'utf8');
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    try {
+        await fs.rename(temp, target);
+    }
+    catch (error) {
+        await fs.rm(temp, { force: true }).catch(() => undefined);
+        throw error;
+    }
+}
+export async function rotateBackup(source, backupDirectory, extension) {
+    let text;
+    try {
+        text = await fs.readFile(source, 'utf8');
+    }
+    catch {
+        return;
+    }
+    await fs.mkdir(backupDirectory, { recursive: true });
+    const stamp = new Date().toISOString().replace(/[:.]/g, '-');
+    const target = path.join(backupDirectory, `${stamp}-${process.pid}-${randomUUID().slice(0, 8)}.${extension}`);
+    await fs.writeFile(target, text, { encoding: 'utf8', flag: 'wx' });
+    const entries = await fs.readdir(backupDirectory);
+    const backups = entries
+        .filter((entry) => entry.endsWith(`.${extension}`))
+        .sort()
+        .reverse();
+    for (const stale of backups.slice(LIMITS.backupCount)) {
+        await fs.rm(path.join(backupDirectory, stale), { force: true }).catch(() => undefined);
+    }
+}
+async function collectTempFiles(dir, cutoff) {
+    const found = [];
+    let entries;
+    try {
+        entries = await fs.readdir(dir, { withFileTypes: true });
+    }
+    catch {
+        return found;
+    }
+    for (const entry of entries) {
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (entry.name === '.backups' || entry.name === 'node_modules')
+                continue;
+            found.push(...(await collectTempFiles(full, cutoff)));
+        }
+        else if (entry.name.endsWith('.tmp')) {
+            try {
+                const stat = await fs.stat(full);
+                if (stat.mtimeMs < cutoff)
+                    found.push(full);
+            }
+            catch {
+                // Ignore a temp file that disappeared during the scan.
+            }
+        }
+    }
+    return found;
+}
+/** Remove orphan `.tmp` files older than one hour. */
+export async function cleanupTempFiles(dataDir) {
+    const files = await collectTempFiles(dataDir, Date.now() - 60 * 60 * 1000);
+    let removed = 0;
+    for (const file of files) {
+        try {
+            await fs.rm(file, { force: true });
+            removed += 1;
+        }
+        catch {
+            // Best effort; a locked temp file is retried on the next startup.
+        }
+    }
+    return removed;
+}
+export async function ensureLayout(dataDir) {
+    await fs.mkdir(dataDir, { recursive: true });
+}
+//# sourceMappingURL=atomic.js.map

package/lib/storage/atomic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.js","sourceRoot":"","sources":["../../src/storage/atomic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAA;AACxC,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAA;AAE/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAA;AAE/C;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAI,GAAW,EAAE,IAAsB;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAA;IACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CACpB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAA;IACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACtB,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE;QACtB,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,IAAY;IAChE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EACpB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAC/D,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACpC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;IACrB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzD,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,eAAuB,EACvB,SAAiB;IAEjB,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAM;IACR,CAAC;IACD,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CACtB,eAAe,EACf,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,EAAE,CACnE,CAAA;IACD,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IACjD,MAAM,OAAO,GAAG,OAAO;SACpB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC;SAClD,IAAI,EAAE;SACN,OAAO,EAAE,CAAA;IACZ,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACtD,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACxF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,MAAc;IACzD,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,OAAO,CAAA;IACX,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAQ;YACxE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QACvD,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAChC,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,uDAAuD;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAe;IACpD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAC1E,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAClC,OAAO,IAAI,CAAC,CAAA;QACd,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe;IAChD,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAC9C,CAAC"}

package/lib/storage/paths.d.ts

@@ -0,0 +1,10 @@
+import type { RecordKind } from '../domain/types.js';
+export declare function resolveDataDir(configured: string, profileDir: string, cwd: string, home: string): string;
+export declare function kindDir(dataDir: string, kind: RecordKind): string;
+export declare function isValidId(id: string): boolean;
+export declare function resolveRecordPath(dataDir: string, kind: RecordKind, id: string): string;
+export declare function sessionFileName(sessionId: string): string;
+export declare function sessionPath(dataDir: string, sessionId: string): string;
+export declare function backupsDir(dataDir: string): string;
+export declare function backupDir(dataDir: string, kind: RecordKind, id: string): string;
+export declare function sessionBackupDir(dataDir: string, sessionId: string): string;

package/lib/storage/paths.js

@@ -0,0 +1,50 @@
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { ID_PATTERN, KIND_DIRECTORIES, SESSION_ID_PATTERN } from '../domain/constants.js';
+export function resolveDataDir(configured, profileDir, cwd, home) {
+    const value = configured.trim();
+    if (!value)
+        return path.join(profileDir, 'data');
+    if (value.startsWith('~'))
+        return path.join(home, value.slice(1));
+    return path.isAbsolute(value) ? value : path.resolve(profileDir || cwd, value);
+}
+export function kindDir(dataDir, kind) {
+    return path.join(dataDir, KIND_DIRECTORIES[kind]);
+}
+export function isValidId(id) {
+    return ID_PATTERN.test(id);
+}
+export function resolveRecordPath(dataDir, kind, id) {
+    if (!isValidId(id)) {
+        throw new Error(`Invalid record id: ${JSON.stringify(id)}`);
+    }
+    const dir = kindDir(dataDir, kind);
+    const target = path.resolve(dir, `${id}.yaml`);
+    const root = path.resolve(dir) + path.sep;
+    if (!target.startsWith(root))
+        throw new Error(`Record path escapes ${dir}`);
+    return target;
+}
+export function sessionFileName(sessionId) {
+    if (SESSION_ID_PATTERN.test(sessionId))
+        return `${sessionId}.json`;
+    const digest = createHash('sha256').update(sessionId).digest('hex');
+    return `s-${digest}.json`;
+}
+export function sessionPath(dataDir, sessionId) {
+    return path.join(dataDir, 'sessions', sessionFileName(sessionId));
+}
+export function backupsDir(dataDir) {
+    return path.join(dataDir, '.backups');
+}
+export function backupDir(dataDir, kind, id) {
+    return path.join(backupsDir(dataDir), KIND_DIRECTORIES[kind], id);
+}
+export function sessionBackupDir(dataDir, sessionId) {
+    const name = SESSION_ID_PATTERN.test(sessionId)
+        ? sessionId
+        : createHash('sha256').update(sessionId).digest('hex');
+    return path.join(backupsDir(dataDir), 'sessions', name);
+}
+//# sourceMappingURL=paths.js.map

package/lib/storage/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/storage/paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAGzF,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,UAAkB,EAAE,GAAW,EAAE,IAAY;IAC9F,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAA;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAChD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACjE,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,GAAG,EAAE,KAAK,CAAC,CAAA;AAChF,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAe,EAAE,IAAgB;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,OAAO,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,IAAgB,EAAE,EAAU;IAC7E,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC7D,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAA;IAC3E,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,GAAG,SAAS,OAAO,CAAA;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACnE,OAAO,KAAK,MAAM,OAAO,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,SAAiB;IAC5D,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,IAAgB,EAAE,EAAU;IACrE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;AACnE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,SAAiB;IACjE,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAC7C,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACxD,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;AACzD,CAAC"}

package/lib/storage/records.d.ts

@@ -0,0 +1,16 @@
+import type { AnyRecord, RecordKind } from '../domain/types.js';
+export interface RawRecord {
+    found: boolean;
+    text?: string;
+    raw?: unknown;
+    bytes?: number;
+}
+export declare function parseYamlText(text: string, file?: string): unknown;
+export declare function stringifyRecord(record: AnyRecord): string;
+export declare function readRecordRaw(dataDir: string, kind: RecordKind, id: string): Promise<RawRecord>;
+export declare function writeRecordFile(dataDir: string, kind: RecordKind, record: AnyRecord): Promise<void>;
+export declare function deleteRecordFile(dataDir: string, kind: RecordKind, id: string): Promise<void>;
+export declare function listRecordIds(dataDir: string, kind: RecordKind): Promise<string[]>;
+export declare function fileForRecord(dataDir: string, kind: RecordKind, id: string): string;
+export declare function recordExists(dataDir: string, kind: RecordKind, id: string): Promise<boolean>;
+export declare function relativeFile(dataDir: string, target: string): string;