dsh-super-code 0.3.7 → 0.3.9

package/docs/en/UsageGuide.md

@@ -0,0 +1,304 @@
+# Usage Guide
+
+[中文](../UsageGuide.md) · English
+
+New here? Read the Install and Use sections of the [README](../../README.en.md) first. This page covers the details.
+
+- [Model](#model)
+- [Can't find the preset](#cant-find-the-preset)
+- [Settings](#settings)
+- [Preset version and reinstall](#preset-version-and-reinstall)
+- [Sidebar](#sidebar)
+- [Batched tool calls](#batched-tool-calls)
+- [Runtime budgets](#runtime-budgets)
+- [Deletion protection](#deletion-protection)
+- [MCP connection](#mcp-connection)
+- [Frontend Skill](#frontend-skill)
+
+## Model
+
+The plugin has no model settings of its own. If you already have a working model, just use it. Otherwise add a provider under Harness **Settings → Models**, then pick a model and reasoning effort below the message input.
+
+Child Agents use the parent's model by default. Harness manages permissions and tools.
+
+## Can't find the preset
+
+First make sure the plugin is enabled, then check your host version against [Compatibility](Compatibility.md). Then:
+
+**Harness 0.1.7 and later (declarative presets)**: the plugin declares the preset and the host loads it. Go to **Settings → Super Code** and click **Install preset**. If the host doesn't expose management APIs, the page says so.
+
+**Harness 0.1.5 / 0.1.6 (directory presets)**: the plugin installs a user copy on first load. If it's missing, install it manually from **Settings → Super Code**.
+
+- If the default identifier `super-code` is taken, pick another one. Existing presets are never overwritten.
+- If you delete this copy yourself, a restart won't bring it back. Install it again manually.
+
+Before plugin 0.2.0, the settings page lives under **Plugins → Plugin configuration**.
+
+## Settings
+
+**Settings → Super Code** has five tabs:
+
+| Tab | Contents |
+|---|---|
+| Home | Preset status and versions, deletion-protection level, MCP switch, connected/past conversation counts |
+| Preset configuration | Install, reinstall, rename |
+| Context settings | [Runtime budgets](#runtime-budgets) |
+| Deletion protection | [Deletion protection](#deletion-protection) |
+| Connection | [MCP connection](#mcp-connection) |
+
+Switching tabs keeps unsaved input.
+
+### Names and language
+
+- The identifier selects the preset; the display name can be changed separately. Chinese characters and spaces are fine, up to 120 characters.
+- Default names and descriptions follow Harness's Chinese/English setting. Fields you've edited are left alone.
+- Changing the language only updates display fields, not preset content or version.
+- Older Harness versions cache the preset list, so the page reloads once when the wording changes.
+- Preset files on one host share one language; different clients can't show different languages at the same time.
+- A read-only install directory or YAML the plugin can't safely parse may block syncing. Refresh and retry from Settings.
+
+## Preset version and reinstall
+
+Settings shows the **plugin version** and the **preset version** separately.
+
+- Same version: the preset matches the installed plugin. It doesn't mean there's no newer release on npm.
+- Old preset without a version: shows "Version not recorded" and isn't treated as current.
+- Updating the plugin doesn't update an installed preset. To get the new preset, reinstall.
+
+**Reinstall**: click **Reinstall preset** → the dialog lists the presets to be replaced plus the new name and identifier → check and confirm.
+
+- You can remove entries, but not confirm an empty list. Cancel or Esc changes nothing.
+- Reinstalling overwrites the old preset. Save your customizations first.
+- Existing sessions keep the old preset; new sessions use the new one.
+
+**Safety**:
+
+- Only presets verifiably installed by this plugin are replaced (directory: install record, UUID, path, directory identity; declarative: source marker or install record). Unmarked old copies and same-name declarations are left alone.
+- The old content is backed up in `.super-code-backup-*`: under the user preset root for directory hosts, under the current profile for declarative hosts (ownership records in `.super-code-presets.json`).
+- A failed install restores automatically. After an unexpected crash, restore manually from the backup.
+
+## Sidebar
+
+In the right sidebar choose **Super Code**. Three sections, at most one open at a time, Tasks by default. Click the open heading to collapse all sections. Switching keeps reading position, filters, and drafts. The UI follows Harness's Chinese/English setting.
+
+### Tasks
+
+Read-only. Shows what's already recorded in the session:
+
+- **Goal**: the recorded task goal, or the user's original message if there is none.
+- **Steps**: todos the model wrote down, shown as done/total. No steps means no invented plan or progress.
+- **Tool calls**: success, failure, and running counts grouped by tool.
+- **Files**: successful file changes that can be confirmed from tool arguments or diffs, including nested PTC calls.
+
+Notes:
+
+- A stopped run doesn't mean the task is done.
+- The file list isn't a full Git diff: indirect changes from the terminal or external scripts may be missing, and a past change doesn't mean the file still differs. Failed, pending, read-only, and inherited child-Agent operations don't count.
+- Everything is expanded in a virtual list, so long histories stay smooth. There is a display limit; you'll see a notice when it's hit, and full content is in the details.
+- It doesn't change prompts, model requests, or tool definitions, and writes nothing into model context.
+
+### Agent execution
+
+The Agent tree, with status, usage, and cache rate for each Agent.
+
+- Drag empty space to pan; zoom with the wheel or buttons.
+- Click a node to open its details in a new sidebar tab. The main conversation stays put.
+- Details are shown as a chat: user task, Agent replies, expandable tool calls and results. The header shows status, tokens, and cache; open **Details** for more usage, task records, and memory activity.
+- Running animations respect the system's reduced-motion setting.
+
+The [task](../images/task-status.png) and [tree screenshots](../images/agent-tree.png) render the current plugin with official frontend components and sample data. They illustrate the UI, not model quality.
+
+### Memory library
+
+Pick **This project** or **Global preferences**, then browse by topic or search (topic, summary, identifier). Click an entry for details and source. You can add, edit, and delete (with confirmation). Manually edited entries are marked as manual, with current content only and no version history.
+
+Memory has three layers:
+
+| Layer | What it keeps | Scope |
+|---|---|---|
+| Task state | Current goal, constraints, progress, checks | Current conversation |
+| Project memory | Sourced project facts, lessons, agreements | Same workspace path, by topic |
+| Global preferences | Preferences you explicitly want across projects | Same Harness storage root |
+
+- To keep an agreement long-term, just tell the Agent. It's saved when the tool reports success and it shows up in the library.
+- Project memory saved by an Agent must link to a real tool result; global preferences need your own words and a clear cross-project intent.
+- Projects at different paths, including Git worktrees, don't share project memory.
+- Memory lives in local host storage, not in project files, and the whole library is never sent to the model. At most 4 summaries from the current topic (≤2 KiB) and 4 from global preferences (≤1 KiB) are included automatically; details require an explicit read.
+- Memory can't override the current request, grant permissions, or prove code is unchanged since it was recorded.
+- You can browse memory from past sessions without resuming an Agent or calling the model.
+
+### Which memory each Agent used
+
+Click a node in the tree → open **Details** → expand **Memory activity**. It distinguishes context inclusion, summary reads, detail reads, saves, and deletions. Click a record to jump to that entry in the library.
+
+- These are actions recorded by the host, not proof that the model understood or followed them.
+- History a child Agent inherits from its parent doesn't count as its own read; failed calls don't count as reads.
+- Up to the latest 100 are shown; the full record is in the session log.
+- If an entry is later edited or deleted, the record stays, but the library only shows current content.
+
+## Batched tool calls
+
+Super Code uses Harness-native PTC: one model call can combine several tool operations, such as reading a few unrelated files at once, then decide what to do next. No separate mode needed.
+
+- Independent reads run in parallel; writes, tests, state changes, and dependent steps run in order.
+- On partial failure, successful results are kept and only failed or stale reads are retried.
+- The plugin declares which of its task and memory actions can run in parallel; unknown actions run alone. Other tools follow their own Harness declarations.
+- The host handles permissions, cancellation, and result storage.
+
+Batching cuts round trips between the model and tools. It doesn't make every operation faster.
+
+## Runtime budgets
+
+Under the **Context settings** tab. The plugin already uses the better-performing legacy budgets, so you usually don't need to touch this. Values in parentheses are the host's own defaults, for comparison.
+
+| Type | Includes | Applies to |
+|---|---|---|
+| Common budgets | Compression ratios, summary cap, PTC deadlines, retries | Super Code by default; also Standard, PTC, Minimal, and Create when "Also apply to official presets" is on |
+| Super Code only | Active task record limit, task-memory capacity | Super Code only |
+
+- "Also apply to official presets" is off by default. It only changes budgets, not official tools or prompts, and never touches custom presets.
+- Saved changes apply to new Agents. Running Agents keep their settings and aren't restarted.
+- Leave a field blank to use the plugin default; **Reset to defaults** clears UI overrides.
+- A failed save keeps your input. If it says budgets were changed elsewhere, reload first.
+- On older hosts without `ptcRuntime`, PTC deadline fields are disabled; other budgets still work.
+
+Plugin defaults (no need to add them to your config; only write the fields you want to change):
+
+```yaml
+budgets:
+  pressureBasis: window      # use the full context window; "host" follows the host policy
+  thresholdRatio: 0.8        # start compressing at 80%
+  retainRatio: 0.16          # keep the latest 16% verbatim; must be below thresholdRatio
+  summaryMaxTokens: 8192     # summary cap
+  compactionRetries: 1       # extra compression attempts
+  maxOverflowRetries: 1      # overflow retries
+  ptcTimeoutMs: 600000       # default PTC deadline (ms, including tool waits)
+  ptcMaxTimeoutMs: 600000    # PTC deadline cap, never above the host cap
+applyToOfficialPresets: false
+maxTasks: 32                 # Super Code: active task records
+maxContextBytes: 32768       # Super Code: task-memory context bytes
+```
+
+- A shorter deadline set explicitly on a call still applies.
+- Older hosts time PTC by busy CPU time; newer hosts by elapsed time. The two aren't comparable.
+- Raising `maxTasks` or `maxContextBytes` uses more context. The defaults are usually fine.
+
+## Deletion protection
+
+Under the **Deletion protection** tab. Default is **Relaxed**.
+
+| Mode | Behavior |
+|---|---|
+| Off | No instructions, no blocking |
+| Relaxed (default) | Tells Agents to delete with recoverable `trash`, in scripts too. If you explicitly ask for `rm`, it's used without extra plugin confirmation |
+| Strict | No direct `rm`, even in scripts. Recognized permanent deletions need your approval each time, and only temp-file or build-artifact cleanup is allowed |
+
+The exact Relaxed instruction: **Delete files or directories with `trash <path>` (recoverable) by default; use `rm` only for temp files or build artifacts after I've confirmed.**
+
+- Only Super Code is protected by default. "Also apply to official presets" is off by default (independent of the budget switch with the same name).
+- Saved changes apply to later commands.
+- Legacy `true` means Strict, `false` means Off.
+
+Strict mode checks terminal commands before they run for `rm`, common wrappers, inline shell scripts, and PowerShell deletion commands such as `Remove-Item`, including terminal calls inside PTC.
+
+- Only a one-time host approval that you accept lets it through; rejection, cancellation, and errors all block. Each approval covers that one call.
+- If `trash` isn't available, the Agent should use another recoverable method or stop.
+- It isn't an OS sandbox: it doesn't inspect external script files, obfuscated programs, or every language's delete API. Use the host sandbox for process-level isolation.
+
+Relaxed mode relies on instructions only and blocks nothing. Host permission checks still apply.
+
+## MCP connection
+
+Lets external MCP clients (such as other AI coding tools) hand tasks to DSH. Off by default, listens on `127.0.0.1` only, uses Streamable HTTP with token auth.
+
+### Turn it on
+
+Under the **Connection** tab:
+
+1. Check the working directories to allow (subdirectories included).
+2. Adjust the port and maximum connections if needed.
+3. Turn the switch on. Changes save automatically.
+
+**Allow MCP to create conversations** is on by default. Turning it off requires explicit reuse. New conversations join the existing workspace; an unregistered directory gets a workspace with the same name and no suffix. New titles start with `[MCP]`.
+
+**Allow caller approval** is off by default. When enabled, an exact one-time tool approval for a delegated task can be sent to the caller through an interactive form or `dsh_approve`. Host policy remains authoritative, and directory consent always stays in DSH.
+
+Directories:
+
+- The DSH workspace list is reread every time you open the tab. On first setup, existing workspaces are preselected; workspaces added later are **not** granted access automatically.
+- Add directories with the directory picker. Uncheck to revoke; unchecking the last one also turns MCP off.
+
+Connections:
+
+- Maximum connections defaults to 3, up to 32, and is also the task concurrency limit.
+- Disconnect clients from the Connection tab; idle connections drop after 10 minutes. Disconnecting doesn't cancel accepted tasks.
+- "Connected conversations" on Home means the linked MCP connection is still online, regardless of whether the task finished. After disconnect they count as past conversations.
+
+Port conflicts are reported directly. Use the URL shown on the page.
+
+### Configure the client
+
+1. Copy **Connection Prompt** from the Connection tab and give it to a client that supports Streamable HTTP MCP. It includes the URL, auth method, and tool notes, but **not** the real token.
+2. Copy the token separately and configure it in the client as `Authorization: Bearer <token>`. Don't put the token in a repository or a shared prompt.
+3. Keep DSH running. Rotating the token invalidates the old one immediately; update the client.
+
+Whether a client can set up MCP from the prompt by itself depends on the client. You can also enter the URL and auth manually. The token is shown by default on the Connection tab and hidden when you leave.
+
+### Tools
+
+| Tool | Purpose |
+|---|---|
+| `dsh_status` | Inspect directories, policies, capacity, blocking tasks, and recovery guidance |
+| `dsh_models` | List exact model/effort IDs for `dsh_run` and `dsh_send`; omission retains the current/default selection |
+| `dsh_read` | Page through owned conversations and managed children, including public messages, tool results, and failure details; excludes reasoning and private configuration |
+| `dsh_approve` | Approve or reject one exact pending operation only when caller approval is enabled |
+| `dsh_sessions` | Call first after connecting: lists recent conversations per directory with status, whether they can be reused, connection capacity, and task concurrency |
+| `dsh_run` | Start a task. Pass `taskId` to reuse a specific conversation, or `newConversation: true` for a new one (passing neither also creates new). It **never** picks the latest conversation on its own. Same `requestId` + same input won't dispatch twice; different input is a conflict |
+| `dsh_wait` | Read task status, output, workspace changes, and new events, waiting up to 30 seconds. Without a task ID, lists all tasks page by page |
+| `dsh_send` | Add a follow-up or continue in the same conversation, with a new `requestId`. Never approves permissions for you |
+| `dsh_request_directory` | Ask for a new working directory; you approve it in DSH |
+| `dsh_cancel` | Request cancellation of the conversation and its child tasks. Keep checking status to confirm it actually stopped |
+
+### Requesting a new directory
+
+The client calls `dsh_request_directory` with a `requestId`, an existing absolute `path`, and a `reason`. DSH shows a global dialog (Settings doesn't need to be open) with the client name, directory, and reason.
+
+- Access is granted only when you click **Allow access**. A model's auto-approval can't do it for you.
+- Repeat the same call to check status: `pending` / `approved` / `rejected` / `expired`.
+- Tasks can't run in that directory until it's approved.
+- At most 8 pending requests, expiring after 5 minutes. Rejection, stopping the service, or restarting never grants access.
+- Client name and reason are filled in by the client; treat them as hints only.
+
+### Task status and recovery
+
+- Tasks use the conversation's current or explicitly selected model, the Super Code preset, and your permissions. Model/effort choices persist in that conversation. Permissions are never auto-approved.
+- The client's sandbox doesn't carry over to DSH. Allowed directories only control where tasks can start; they aren't a file sandbox.
+- Tasks in the same workspace don't run in parallel. For parallel work, prepare separate worktrees yourself; the plugin doesn't create, delete, or merge worktrees.
+- `waiting_confirmation`: the caller can decide only when caller approval is enabled and an exact pending request exists; otherwise the user handles it in DSH.
+- `finished`: execution ended, but `acceptance` is always `not-verified`. The caller must check the result.
+- Returned file info is an observation of the Git workspace, including changes that existed before the task, so it doesn't prove the task made them. Non-Git directories or exceeded limits are marked unavailable.
+- Wait timeouts and client disconnects don't cancel tasks. Turning off the connection just stops new requests.
+- After a restart, prompts are never resent automatically. Find the ID via `dsh_sessions` or the task list, check the state, then continue explicitly. If the state can't be confirmed, it shows `interrupted` or `unavailable`; tasks not confirmed as stopped keep their concurrency slot.
+
+On capacity refusal, retain the same `requestId` and input and wait through `dsh_status` and `dsh_wait`. Do not cancel other clients' tasks or reconfigure the serving app. Release SDK sessions with `transport.terminateSession()` before `client.close()`; closing alone does not release server capacity. The packaged `super-code-mcp` CLI accepts JSON on stdin and reads its token from the private `DSH_MCP_TOKEN` environment variable.
+
+### Storage and limits
+
+- Task records, settings, and the token are stored in the profile's `super-code-connection` directory (directory 0700, files 0600). One service instance per profile.
+- Limits: 200 task records, 128 follow-ups per task, the latest 200 events, the last 12,000 output characters. Directory-request history keeps up to 100 entries, in memory only.
+- When task records are full, new tasks are rejected explicitly; old records are never dropped silently.
+
+## Frontend Skill
+
+The plugin ships `super-code-frontend`, used for pages, components, visual tweaks, responsive layout, interaction states, and browser checks. It focuses on:
+
+- whether elements line up on the same edges
+- whether what you see matches what you can click
+- whether controls stay put, are easy to reach, and need little input
+
+It keeps the project's own visual style, needs no particular framework, and adds no tools. Normally only its name and short description go to the model; the body and relevant references load when a task matches. You can also ask for it directly: "use super-code-frontend".
+
+- Only presets installed or reinstalled from 0.3.3 onward include it. For existing presets, back up your customizations, then reinstall.
+- A project or user skill with the same name overrides the bundled one, following host precedence.
+- The browser-check part is guidance only: no enforced loop detection, no automatic long-term memory writes.
+- Whether it improves frontend quality needs a separate real-task evaluation; install tests and SWE scores can't show that.

package/lib/connection/approvals.d.ts

@@ -0,0 +1,21 @@
+import type { CallerApproval, CallerApprovalDecision } from './types.js';
+export type ApprovalOutcome = 'allowed-once' | 'rejected' | 'cancelled' | 'unavailable';
+export type ApprovalAnswer = ApprovalOutcome | 'host';
+export declare class CallerApprovals {
+    private readonly now;
+    private readonly requests;
+    private readonly settled;
+    private readonly presenting;
+    constructor(now?: () => number);
+    request(input: Omit<CallerApproval, 'id' | 'createdAt' | 'expiresAt'>, signal?: AbortSignal): Promise<ApprovalAnswer>;
+    private expire;
+    pending(taskId: string): CallerApproval[];
+    present(taskId: string, id: string): boolean;
+    defer(taskId: string, id: string): void;
+    decide(taskId: string, id: string, decision: CallerApprovalDecision): {
+        outcome: ApprovalOutcome;
+        repeated: boolean;
+    };
+    withdraw(taskId?: string, answer?: ApprovalAnswer): void;
+}
+//# sourceMappingURL=approvals.d.ts.map

package/lib/connection/approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../../src/connection/approvals.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAExE,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;AACxF,MAAM,MAAM,cAAc,GAAG,eAAe,GAAG,MAAM,CAAC;AAEtD,qBAAa,eAAe;IAId,OAAO,CAAC,QAAQ,CAAC,GAAG;IAHhC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0E;IAClG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;gBAClB,GAAG,GAAE,MAAM,MAAiB;IACnD,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;IAkB3H,OAAO,CAAC,MAAM;IAGd,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO;IAM5C,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI;IAIvC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,GAAG;QAAE,OAAO,EAAE,eAAe,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE;IAgBrH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,GAAE,cAAuB,GAAG,IAAI;CAGjE"}

package/lib/connection/approvals.js

@@ -0,0 +1,83 @@
+/** Ephemeral, exact-call decisions. The host approval service owns the durable audit. */
+import { randomUUID } from 'node:crypto';
+import { ConnectionError } from './types.js';
+export class CallerApprovals {
+    now;
+    requests = new Map();
+    settled = new Map();
+    presenting = new Set();
+    constructor(now = Date.now) {
+        this.now = now;
+    }
+    async request(input, signal) {
+        if (signal?.aborted)
+            return 'cancelled';
+        if (this.requests.size >= 32 || input.arguments.length > 16000 || input.reason.length > 8000 || input.toolName.length > 256)
+            return 'host';
+        const createdAt = this.now(), view = { ...input, id: randomUUID(), createdAt, expiresAt: createdAt + 5 * 60 * 1000 };
+        return new Promise(resolve => {
+            const timer = setTimeout(() => settle('host'), 5 * 60 * 1000);
+            timer.unref();
+            const abort = () => settle('cancelled');
+            const settle = (answer) => {
+                if (!this.requests.delete(view.id))
+                    return;
+                this.presenting.delete(view.id);
+                clearTimeout(timer);
+                signal?.removeEventListener('abort', abort);
+                resolve(answer);
+            };
+            this.requests.set(view.id, { view, settle });
+            signal?.addEventListener('abort', abort, { once: true });
+            if (signal?.aborted)
+                abort();
+        });
+    }
+    expire() {
+        for (const row of this.requests.values())
+            if (row.view.expiresAt <= this.now())
+                row.settle('host');
+    }
+    pending(taskId) {
+        this.expire();
+        return [...this.requests.values()].filter(row => row.view.taskId === taskId).map(row => ({ ...row.view }));
+    }
+    present(taskId, id) {
+        this.expire();
+        if (this.requests.get(id)?.view.taskId !== taskId || this.presenting.has(id))
+            return false;
+        this.presenting.add(id);
+        return true;
+    }
+    defer(taskId, id) {
+        const row = this.requests.get(id);
+        if (row?.view.taskId === taskId)
+            row.settle('host');
+    }
+    decide(taskId, id, decision) {
+        this.expire();
+        const prior = this.settled.get(id);
+        if (prior) {
+            if (prior.taskId !== taskId)
+                throw new ConnectionError('approval-not-found');
+            if (prior.decision !== decision)
+                throw new ConnectionError('approval-conflict');
+            return { outcome: decision === 'approve' ? 'allowed-once' : 'rejected', repeated: true };
+        }
+        const row = this.requests.get(id);
+        if (!row || row.view.taskId !== taskId)
+            throw new ConnectionError('approval-not-found');
+        this.settled.set(id, { taskId, decision });
+        if (this.settled.size > 200)
+            this.settled.delete(this.settled.keys().next().value);
+        const outcome = decision === 'approve' ? 'allowed-once' : 'rejected';
+        row.settle(outcome);
+        return { outcome, repeated: false };
+    }
+    withdraw(taskId, answer = 'host') {
+        for (const row of this.requests.values())
+            if (!taskId || row.view.taskId === taskId)
+                row.settle(answer);
+    }
+}
+//# sourceMappingURL=approvals.js.map

package/lib/connection/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../../src/connection/approvals.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAM5C,MAAM,OAAO,eAAe;IAIG;IAHZ,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAA;IACrC,OAAO,GAAG,IAAI,GAAG,EAAgE,CAAA;IACjF,UAAU,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/C,YAA6B,MAAoB,IAAI,CAAC,GAAG;QAA5B,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAC7D,KAAK,CAAC,OAAO,CAAC,KAA6D,EAAE,MAAoB;QAC/F,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,WAAW,CAAA;QACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,MAAM,CAAA;QAC1I,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,GAAmB,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAA;QACpI,OAAO,IAAI,OAAO,CAAiB,OAAO,CAAC,EAAE;YAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;YAC7D,KAAK,CAAC,KAAK,EAAE,CAAA;YACb,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;YAC7C,MAAM,MAAM,GAAG,CAAC,MAAsB,EAAQ,EAAE;gBAC9C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,OAAM;gBAC1C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBAC/B,YAAY,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACnF,CAAC,CAAA;YACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YAC5C,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACxD,IAAI,MAAM,EAAE,OAAO;gBAAE,KAAK,EAAE,CAAA;QAC9B,CAAC,CAAC,CAAA;IACJ,CAAC;IACO,MAAM;QACZ,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACpG,CAAC;IACD,OAAO,CAAC,MAAc;QACpB,IAAI,CAAC,MAAM,EAAE,CAAA;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAC5G,CAAC;IACD,OAAO,CAAC,MAAc,EAAE,EAAU;QAChC,IAAI,CAAC,MAAM,EAAE,CAAA;QACb,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAA;QAC1F,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACvB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,KAAK,CAAC,MAAc,EAAE,EAAU;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjC,IAAI,GAAG,EAAE,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrD,CAAC;IACD,MAAM,CAAC,MAAc,EAAE,EAAU,EAAE,QAAgC;QACjE,IAAI,CAAC,MAAM,EAAE,CAAA;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;gBAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAA;YAC5E,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAA;YAC/E,OAAO,EAAE,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAC1F,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACjC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAA;QACvF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAA;QACnF,MAAM,OAAO,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAA;QACpE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACnB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IACrC,CAAC;IACD,QAAQ,CAAC,MAAe,EAAE,SAAyB,MAAM;QACvD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACzG,CAAC;CACF"}

package/lib/connection/client.d.ts

@@ -0,0 +1,8 @@
+export interface ConnectionRequest {
+    url: string;
+    token: string;
+    tool: string;
+    arguments: Record<string, unknown>;
+}
+export declare function invokeConnectionTool(request: ConnectionRequest, signal?: AbortSignal): Promise<Record<string, unknown>>;
+//# sourceMappingURL=client.d.ts.map

package/lib/connection/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/connection/client.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,iBAAiB;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE;AACnH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAoB7H"}

package/lib/connection/client.js

@@ -0,0 +1,34 @@
+/** A one-shot fallback for clients without native MCP tools; always release its own session. */
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js';
+import { pluginVersion } from '../dsh/preset-version.js';
+export async function invokeConnectionTool(request, signal) {
+    const url = new URL(request.url);
+    if (url.protocol !== 'http:' || !['127.0.0.1', 'localhost'].includes(url.hostname) || url.pathname !== '/mcp' || url.username || url.password || url.search || url.hash || !/^[a-f0-9]{64}$/.test(request.token))
+        throw new Error('invalid-connection-configuration');
+    if (request.tool !== 'tools' && !/^dsh_[a-z_]+$/.test(request.tool))
+        throw new Error('invalid-tool-name');
+    const client = new Client({ name: 'super-code-mcp-cli', version: pluginVersion });
+    const transport = new StreamableHTTPClientTransport(url, {
+        requestInit: { headers: { authorization: `Bearer ${request.token}` } },
+        fetch: (input, init) => fetch(input, init?.method === 'DELETE'
+            ? { ...init, signal: init.signal ? AbortSignal.any([init.signal, AbortSignal.timeout(5000)]) : AbortSignal.timeout(5000) }
+            : init),
+    });
+    try {
+        signal?.throwIfAborted();
+        await client.connect(transport, { ...(signal ? { signal } : {}), timeout: 15000 });
+        return request.tool === 'tools' ? await client.listTools({}, { ...(signal ? { signal } : {}), timeout: 15000 })
+            : await client.callTool({ name: request.tool, arguments: request.arguments }, undefined, { ...(signal ? { signal } : {}), timeout: 45000 });
+    }
+    finally {
+        // SDK close() only aborts local connections; it does not DELETE the remote session.
+        try {
+            await transport.terminateSession();
+        }
+        finally {
+            await client.close();
+        }
+    }
+}
+//# sourceMappingURL=client.js.map

package/lib/connection/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/connection/client.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAA;AAClE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAA;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAGxD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA0B,EAAE,MAAoB;IACzF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrQ,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACzG,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;IACjF,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC,GAAG,EAAE;QACvD,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE;QACtE,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,KAAK,QAAQ;YAC5D,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YAC1H,CAAC,CAAC,IAAI,CAAC;KACV,CAAC,CAAA;IACF,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;QAClF,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC7G,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/I,CAAC;YAAS,CAAC;QACT,oFAAoF;QACpF,IAAI,CAAC;YAAC,MAAM,SAAS,CAAC,gBAAgB,EAAE,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IAC7E,CAAC;AACH,CAAC"}

package/lib/connection/directories.d.ts

@@ -0,0 +1,30 @@
+export interface DirectoryApplication {
+    requestId: string;
+    path: string;
+    reason: string;
+}
+export interface DirectoryRequest {
+    id: string;
+    requestId: string;
+    path: string;
+    reason: string;
+    client: string;
+    createdAt: number;
+    status: 'pending' | 'approved' | 'rejected' | 'expired';
+}
+/** Pending consent is deliberately ephemeral; only an approved allowlist is persisted. */
+export declare class DirectoryRequests {
+    private readonly allowed;
+    private readonly now;
+    private readonly requests;
+    private readonly sources;
+    constructor(allowed: () => string[], now?: () => number);
+    private expire;
+    request(input: DirectoryApplication, client: string): Promise<DirectoryRequest>;
+    pending(): DirectoryRequest[];
+    resolve(id: string, decision: 'approved' | 'rejected', grant: (path: string) => Promise<void>): Promise<{
+        status: DirectoryRequest['status'];
+    }>;
+    rejectPending(): void;
+}
+//# sourceMappingURL=directories.d.ts.map

package/lib/connection/directories.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directories.d.ts","sourceRoot":"","sources":["../../src/connection/directories.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,oBAAoB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACzF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAC/F,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;CACzD;AACD,0FAA0F;AAC1F,qBAAa,iBAAiB;IAGhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAkB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAF1E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAsC;IAC/D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;gBACvB,OAAO,EAAE,MAAM,MAAM,EAAE,EAAmB,GAAG,GAAE,MAAM,MAAiB;IACnG,OAAO,CAAC,MAAM;IAKR,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAsBrF,OAAO,IAAI,gBAAgB,EAAE;IACvB,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAA;KAAE,CAAC;IAarJ,aAAa,IAAI,IAAI;CACtB"}

package/lib/connection/directories.js

@@ -0,0 +1,82 @@
+import { randomUUID } from 'node:crypto';
+import { realpath, stat } from 'node:fs/promises';
+import { isAbsolute } from 'node:path';
+import { ConnectionError } from './types.js';
+import { withinDirectory } from './tasks.js';
+/** Pending consent is deliberately ephemeral; only an approved allowlist is persisted. */
+export class DirectoryRequests {
+    allowed;
+    now;
+    requests = new Map();
+    sources = new Map();
+    constructor(allowed, now = Date.now) {
+        this.allowed = allowed;
+        this.now = now;
+    }
+    expire() {
+        for (const row of this.requests.values()) {
+            if (row.status === 'pending' && this.now() - row.createdAt >= 5 * 60 * 1000)
+                row.status = 'expired';
+        }
+    }
+    async request(input, client) {
+        this.expire();
+        const existing = this.requests.get(input.requestId);
+        if (existing) {
+            if (this.sources.get(input.requestId) !== input.path || existing.reason !== input.reason)
+                throw new ConnectionError('request-conflict');
+            return { ...existing };
+        }
+        if (!isAbsolute(input.path))
+            throw new ConnectionError('absolute-directory-required');
+        let path;
+        try {
+            path = await realpath(input.path);
+            if (!(await stat(path)).isDirectory())
+                throw new Error();
+        }
+        catch {
+            throw new ConnectionError('directory-unavailable');
+        }
+        if (this.pending().length >= 8)
+            throw new ConnectionError('directory-request-limit');
+        if (this.requests.size >= 100) {
+            const oldest = [...this.requests.entries()].find(([, row]) => row.status !== 'pending');
+            if (oldest) {
+                this.requests.delete(oldest[0]);
+                this.sources.delete(oldest[0]);
+            }
+        }
+        const row = { id: randomUUID(), ...input, path, client: client.slice(0, 80), createdAt: this.now(),
+            status: this.allowed().some(parent => withinDirectory(parent, path)) ? 'approved' : 'pending' };
+        this.requests.set(input.requestId, row);
+        this.sources.set(input.requestId, input.path);
+        return { ...row };
+    }
+    pending() { this.expire(); return [...this.requests.values()].filter(row => row.status === 'pending').map(row => ({ ...row })); }
+    async resolve(id, decision, grant) {
+        this.expire();
+        const row = [...this.requests.values()].find(row => row.id === id);
+        if (!row)
+            throw new ConnectionError('directory-request-not-found');
+        if (row.status !== 'pending')
+            return { status: row.status };
+        if (decision === 'approved') {
+            try {
+                if (await realpath(row.path) !== row.path || !(await stat(row.path)).isDirectory())
+                    throw new Error();
+            }
+            catch {
+                row.status = 'rejected';
+                throw new ConnectionError('directory-changed');
+            }
+            await grant(row.path);
+        }
+        row.status = decision;
+        return { status: row.status };
+    }
+    rejectPending() { for (const row of this.requests.values())
+        if (row.status === 'pending')
+            row.status = 'rejected'; }
+}
+//# sourceMappingURL=directories.js.map

package/lib/connection/directories.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directories.js","sourceRoot":"","sources":["../../src/connection/directories.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAO5C,0FAA0F;AAC1F,MAAM,OAAO,iBAAiB;IAGC;IAA0C;IAFtD,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAA;IAC9C,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;IACpD,YAA6B,OAAuB,EAAmB,MAAoB,IAAI,CAAC,GAAG;QAAtE,YAAO,GAAP,OAAO,CAAgB;QAAmB,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAC/F,MAAM;QACZ,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;gBAAE,GAAG,CAAC,MAAM,GAAG,SAAS,CAAA;QACrG,CAAC;IACH,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAA2B,EAAE,MAAc;QACvD,IAAI,CAAC,MAAM,EAAE,CAAA;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACnD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAA;YACvI,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAA;QACxB,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAA;QACrF,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAA;QAAC,CAAC;QACnG,MAAM,CAAC;YAAC,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAA;QAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,yBAAyB,CAAC,CAAA;QACpF,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAA;YACvF,IAAI,MAAM,EAAE,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;YAAC,CAAC;QACjF,CAAC;QACD,MAAM,GAAG,GAAqB,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YAClH,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;QACjG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC7C,OAAO,EAAE,GAAG,GAAG,EAAE,CAAA;IACnB,CAAC;IACD,OAAO,KAAyB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAA,CAAC,CAAC;IACpJ,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,QAAiC,EAAE,KAAsC;QACjG,IAAI,CAAC,MAAM,EAAE,CAAA;QACb,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAA;QAClE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAA;QAC3D,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC;gBAAC,IAAI,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAA;YAAC,CAAC;YAC7G,MAAM,CAAC;gBAAC,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC;gBAAC,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAA;YAAC,CAAC;YACjF,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACvB,CAAC;QACD,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAA;QACrB,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAA;IAC/B,CAAC;IACD,aAAa,KAAW,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;QAAE,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,GAAG,CAAC,MAAM,GAAG,UAAU,CAAA,CAAC,CAAC;CAC1H"}

package/lib/connection/git.d.ts

@@ -0,0 +1,5 @@
+import type { GitSnapshot, WorkspaceChanges } from './types.js';
+export declare function gitWorktreeRoot(cwd: string): Promise<string | false>;
+export declare function gitSnapshot(cwd: string): Promise<GitSnapshot>;
+export declare function workspaceChanges(cwd: string, baseline: GitSnapshot): Promise<WorkspaceChanges>;
+//# sourceMappingURL=git.d.ts.map

package/lib/connection/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/connection/git.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAkC/D,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,CAE1E;AACD,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAcnE;AACD,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAQpG"}