gitspace 0.2.0-rc.20 → 0.2.0-rc.21

package/src/types/errors.ts

@@ -1,292 +0,0 @@
-/**
- * Custom error types for GitSpace CLI
- */
-
-export type ErrorCode = 'USER_ERROR' | 'SYSTEM_ERROR' | 'SERVICE_ERROR';
-
-/**
- * Base error class for GitSpace CLI
- */
-export class SpacesError extends Error {
-  public readonly code: ErrorCode;
-  public readonly exitCode: number;
-
-  constructor(message: string, code: ErrorCode = 'USER_ERROR', exitCode?: number) {
-    super(message);
-    this.name = 'SpacesError';
-    this.code = code;
-
-    // Set exit code based on error type if not provided
-    if (exitCode !== undefined) {
-      this.exitCode = exitCode;
-    } else {
-      switch (code) {
-        case 'USER_ERROR':
-          this.exitCode = 1;
-          break;
-        case 'SYSTEM_ERROR':
-          this.exitCode = 2;
-          break;
-        case 'SERVICE_ERROR':
-          this.exitCode = 3;
-          break;
-      }
-    }
-
-    // Maintains proper stack trace for where error was thrown (Node/V8).
-    if (typeof Error.captureStackTrace === 'function') {
-      Error.captureStackTrace(this, this.constructor);
-    }
-  }
-}
-
-export function toSpacesError(error: unknown, fallbackMessage: string): SpacesError {
-  if (error instanceof SpacesError) {
-    return error;
-  }
-  if (error instanceof Error) {
-    return new SpacesError(error.message, 'SYSTEM_ERROR', 2);
-  }
-  return new SpacesError(fallbackMessage, 'SYSTEM_ERROR', 2);
-}
-
-/**
- * Error thrown when a dependency is missing
- */
-export class DependencyError extends SpacesError {
-  constructor(message: string) {
-    super(message, 'SYSTEM_ERROR', 2);
-    this.name = 'DependencyError';
-  }
-}
-
-/**
- * Error thrown when GitHub CLI is not authenticated
- */
-export class GitHubAuthError extends SpacesError {
-  constructor() {
-    super(
-      '✗ Error: GitHub CLI is not authenticated\n\nPlease run: gh auth login\n\nThen try again.',
-      'SYSTEM_ERROR',
-      2
-    );
-    this.name = 'GitHubAuthError';
-  }
-}
-
-/**
- * Error thrown when a project already exists
- */
-export class ProjectExistsError extends SpacesError {
-  constructor(projectName: string, projectPath: string) {
-    super(
-      `✗ Error: Project "${projectName}" already exists\n\nThe directory ${projectPath} already contains a project.\n\nTo use this project:\n  gssh switch project ${projectName}\n\nTo remove and recreate:\n  gssh remove project ${projectName}\n  gssh add project`,
-      'USER_ERROR',
-      1
-    );
-    this.name = 'ProjectExistsError';
-  }
-}
-
-/**
- * Error thrown when a workspace already exists
- */
-export class WorkspaceExistsError extends SpacesError {
-  constructor(workspaceName: string) {
-    super(
-      `✗ Error: Workspace "${workspaceName}" already exists\n\nTo switch to this workspace:\n  gssh switch ${workspaceName}`,
-      'USER_ERROR',
-      1
-    );
-    this.name = 'WorkspaceExistsError';
-  }
-}
-
-/**
- * Error thrown when no project is selected
- */
-export class NoProjectError extends SpacesError {
-  constructor() {
-    super(
-      '✗ Error: No project selected\n\nPlease add a project first:\n  gssh add project\n\nOr switch to an existing project:\n  gssh switch project',
-      'USER_ERROR',
-      1
-    );
-    this.name = 'NoProjectError';
-  }
-}
-
-// ============================================================================
-// Identity & Access Control Errors
-// ============================================================================
-
-/**
- * Error thrown when identity is not initialized
- */
-export class NoIdentityError extends SpacesError {
-  constructor() {
-    super(
-      '✗ Error: No identity found\n\nInitialize your identity first:\n  gssh identity init',
-      'USER_ERROR',
-      1
-    );
-    this.name = 'NoIdentityError';
-  }
-}
-
-/**
- * Error thrown when password is incorrect for keypair decryption
- */
-export class InvalidPasswordError extends SpacesError {
-  constructor() {
-    super(
-      '✗ Error: Invalid password\n\nThe password you entered is incorrect.',
-      'USER_ERROR',
-      1
-    );
-    this.name = 'InvalidPasswordError';
-  }
-}
-
-/**
- * Error thrown when client is not in access list
- */
-export class AccessDeniedError extends SpacesError {
-  constructor(identityId?: string) {
-    const msg = identityId
-      ? `✗ Error: Access denied for identity ${identityId}\n\nThis identity is not in the access list.`
-      : '✗ Error: Access denied\n\nYou are not authorized to connect to this machine.';
-    super(msg, 'USER_ERROR', 1);
-    this.name = 'AccessDeniedError';
-  }
-}
-
-/**
- * Error thrown when invite token is invalid or expired
- */
-export class InvalidInviteError extends SpacesError {
-  constructor(reason: string = 'Invalid or expired invite') {
-    super(
-      `✗ Error: ${reason}\n\nThe invite link may have expired or been revoked.`,
-      'USER_ERROR',
-      1
-    );
-    this.name = 'InvalidInviteError';
-  }
-}
-
-/**
- * Error thrown when handshake protocol fails
- */
-export class HandshakeFailedError extends SpacesError {
-  constructor(reason: string = 'Handshake failed') {
-    super(
-      `✗ Error: ${reason}\n\nCould not establish secure connection.`,
-      'SERVICE_ERROR',
-      3
-    );
-    this.name = 'HandshakeFailedError';
-  }
-}
-
-/**
- * Error thrown when identity already exists
- */
-export class IdentityExistsError extends SpacesError {
-  constructor() {
-    super(
-      '✗ Error: Identity already exists\n\nTo overwrite, use:\n  gssh identity init --force',
-      'USER_ERROR',
-      1
-    );
-    this.name = 'IdentityExistsError';
-  }
-}
-
-/**
- * Error thrown when public key format is invalid
- */
-export class InvalidPublicKeyError extends SpacesError {
-  constructor(reason: string = 'Invalid public key format') {
-    super(
-      `✗ Error: ${reason}\n\nPublic keys should be base64-encoded Ed25519 or X25519 keys.`,
-      'USER_ERROR',
-      1
-    );
-    this.name = 'InvalidPublicKeyError';
-  }
-}
-
-export type WorkspaceDeleteErrorCode =
-  | 'REMOVE_SCRIPT_FAILED'
-  | 'WORKSPACE_NOT_FOUND'
-  | 'WORKTREE_REMOVE_FAILED'
-  | 'DELETE_FAILED'
-  | 'NOT_FOUND'
-  | 'RESOURCE_NOT_FOUND'
-  | 'PERMISSION_DENIED'
-  | 'DELETE_TIMEOUT';
-
-/**
- * Error thrown when workspace deletion fails in session backends.
- * Keeps machine-parseable delete codes for retry/UX handling.
- */
-export class WorkspaceDeleteError extends Error {
-  public readonly code: WorkspaceDeleteErrorCode;
-
-  constructor(message: string, code: WorkspaceDeleteErrorCode) {
-    super(message);
-    this.name = 'WorkspaceDeleteError';
-    this.code = code;
-
-    if (typeof Error.captureStackTrace === 'function') {
-      Error.captureStackTrace(this, this.constructor);
-    }
-  }
-}
-
-export type ReviewRequestErrorCode =
-  | 'REVIEW_TIMEOUT'
-  | 'REVIEW_FAILED'
-  | 'REVIEW_MISSING_RESULT'
-  | (string & {});
-
-/**
- * Error thrown when remote review requests fail or time out.
- */
-export class ReviewRequestError extends Error {
-  public readonly code: ReviewRequestErrorCode;
-  public readonly metadata?: { op?: string; requestId?: string };
-
-  constructor(
-    message: string,
-    code: ReviewRequestErrorCode,
-    metadata?: { op?: string; requestId?: string }
-  ) {
-    super(message);
-    this.name = 'ReviewRequestError';
-    this.code = code;
-    this.metadata = metadata;
-
-    if (typeof Error.captureStackTrace === 'function') {
-      Error.captureStackTrace(this, this.constructor);
-    }
-  }
-}
-
-/**
- * Error thrown when a requested session name already exists.
- */
-export class SessionNameExistsError extends Error {
-  public readonly code: 'SESSION_ALREADY_EXISTS';
-
-  constructor(message: string) {
-    super(message);
-    this.name = 'SessionNameExistsError';
-    this.code = 'SESSION_ALREADY_EXISTS';
-
-    if (typeof Error.captureStackTrace === 'function') {
-      Error.captureStackTrace(this, this.constructor);
-    }
-  }
-}

package/src/types/events.ts

@@ -1,91 +0,0 @@
-/**
- * Types for wide event logging
- */
-
-export interface WideEventTimelineItem {
-  eventName: string;
-  level: string;
-  timestamp: string;
-  timestampMs: number;
-  message: string;
-  raw: Record<string, unknown>;
-}
-
-export interface WideSnapshotTimelineEntry extends WideEventTimelineItem {
-  key: string;
-  eventId: string;
-  processName?: string;
-  processInstance?: number;
-}
-
-export interface WideSnapshotTimelineMap {
-  [key: string]: WideSnapshotTimelineEntry;
-}
-
-export interface WideSnapshot {
-  correlationId: string;
-  updatedAt: number;
-  processName?: string;
-  processInstance?: number;
-  level: string;
-  message: string;
-  eventName: string;
-  lastEventId: string;
-  timelineMap: WideSnapshotTimelineMap;
-  timelineOrder: string[];
-  raw?: Record<string, unknown>;
-}
-
-export interface WideEvent {
-  eventId: string;
-  eventName: string;
-  level: string;
-  timestamp: string;
-  timestampMs: number;
-  message: string;
-  sessionId: string;
-  workspaceId: string;
-  projectName: string;
-  processName?: string;
-  processInstance?: number;
-  raw: Record<string, unknown>;
-  kind?: 'source' | 'wide';
-  correlationId?: string;
-  timeline?: WideEventTimelineItem[];
-  timelineMap?: WideSnapshotTimelineMap;
-  timelineOrder?: string[];
-}
-
-export interface WideEventFilter {
-  eventName?: string;
-  eventId?: string;
-  level?: string;
-  message?: string;
-  processName?: string;
-  kind?: 'source' | 'wide';
-  correlationId?: string;
-}
-
-export interface SavedEventFilter {
-  name: string;
-  filter: WideEventFilter;
-  sinceMinutes?: number;
-}
-
-export interface EventsConfigFile {
-  savedFilters?: SavedEventFilter[];
-}
-
-export interface WideEventIndex {
-  file: string;
-  minTs: number;
-  maxTs: number;
-  levels: string[];
-  eventNames: string[];
-  count: number;
-}
-
-export interface WideEventQueryResult {
-  events: WideEvent[];
-  liveEventIds: string[];
-}

package/src/types/identity.ts

@@ -1,284 +0,0 @@
-/**
- * Type definitions for identity and access control
- */
-
-// ============================================================================
-// Keypair Types
-// ============================================================================
-
-/** Ed25519 signing keypair */
-export interface SigningKeypair {
-  /** 32-byte public key */
-  publicKey: Uint8Array;
-  /** 64-byte secret key (includes public key suffix per Ed25519 convention) */
-  secretKey: Uint8Array;
-}
-
-/** X25519 key exchange keypair */
-export interface KeyExchangeKeypair {
-  /** 32-byte public key */
-  publicKey: Uint8Array;
-  /** 32-byte private key */
-  privateKey: Uint8Array;
-}
-
-// ============================================================================
-// Identity Types
-// ============================================================================
-
-/** Complete identity (signing + key exchange) */
-export interface Identity {
-  /** Unique identifier derived from signing public key (first 16 chars of base64url) */
-  id: string;
-  /** Ed25519 keypair for signing */
-  signing: SigningKeypair;
-  /** X25519 keypair for key exchange */
-  keyExchange: KeyExchangeKeypair;
-  /** Human-readable label */
-  label?: string;
-  /** Creation timestamp (Unix ms) */
-  createdAt: number;
-}
-
-/** Serializable identity for JSON storage (base64 encoded keys) */
-export interface StoredIdentity {
-  id: string;
-  signingPublicKey: string;
-  /** Encrypted with password-derived key */
-  signingSecretKey: string;
-  keyExchangePublicKey: string;
-  /** Encrypted with password-derived key */
-  keyExchangePrivateKey: string;
-  label?: string;
-  createdAt: number;
-}
-
-/** Public identity info (safe to share) */
-export interface PublicIdentity {
-  id: string;
-  signingPublicKey: string;
-  keyExchangePublicKey: string;
-  label?: string;
-}
-
-// ============================================================================
-// Access Control Types
-// ============================================================================
-
-/**
- * Access type for a client
- * - 'full': Complete machine access (browse, create sessions, etc.)
- * - 'session-invite': View-only access to a specific session
- */
-export type AccessType = 'full' | 'session-invite';
-
-/**
- * @deprecated Use AccessType instead. Kept for backwards compatibility during migration.
- */
-export interface AccessPermissions {
-  /** Can read terminal output */
-  read: boolean;
-  /** Can send terminal input */
-  write: boolean;
-  /** Can manage sessions (create/kill) */
-  manage: boolean;
-}
-
-/** Helper to convert AccessType to legacy AccessPermissions */
-export function accessTypeToPermissions(accessType: AccessType): AccessPermissions {
-  if (accessType === 'full') {
-    return { read: true, write: true, manage: true };
-  }
-  // session-invite is read-only
-  return { read: true, write: false, manage: false };
-}
-
-/** Helper to convert legacy AccessPermissions to AccessType */
-export function permissionsToAccessType(permissions: AccessPermissions): AccessType {
-  if (permissions.write || permissions.manage) {
-    return 'full';
-  }
-  return 'session-invite';
-}
-
-/** Access list entry for authorized public keys */
-export interface AccessEntry {
-  /** Identity ID (derived from signing public key) */
-  identityId: string;
-  /** Public signing key (base64) */
-  signingPublicKey: string;
-  /** Public key exchange key (base64) */
-  keyExchangePublicKey: string;
-  /** Human-readable label */
-  label?: string;
-  /** When access was granted (Unix ms) */
-  grantedAt: number;
-  /** Access type granted */
-  accessType: AccessType;
-  /** Optional expiry time (Unix ms) */
-  expiresAt?: number;
-  /** For session-invite: the specific session ID this grants access to */
-  sessionId?: string;
-}
-
-// ============================================================================
-// Invite Token Types
-// ============================================================================
-
-/** Signed invite token for sharing access */
-export interface InviteToken {
-  /** Token version */
-  version: 1;
-  /** Machine's identity ID */
-  machineId: string;
-  /** Machine's public signing key (base64) */
-  machineSigningKey: string;
-  /** Machine's public key exchange key (base64) */
-  machineKeyExchangeKey: string;
-  /** Relay URL to connect */
-  relayUrl: string;
-  /** Access type being granted */
-  accessType: AccessType;
-  /** For session-invite: the specific session ID */
-  sessionId?: string;
-  /** Expiry timestamp (Unix ms) */
-  expiresAt: number;
-  /** Single use? */
-  singleUse: boolean;
-  /** Signature over token data (base64) */
-  signature: string;
-}
-
-/** Options for creating an invite token */
-export interface CreateInviteOptions {
-  /** Access type to grant (default: 'session-invite') */
-  accessType?: AccessType;
-  /** For session-invite: the specific session ID */
-  sessionId?: string;
-  /** Validity duration in milliseconds */
-  validityMs?: number;
-  /** Whether invite can only be used once */
-  singleUse?: boolean;
-}
-
-// ============================================================================
-// Session Key Types
-// ============================================================================
-
-/** Derived session keys from handshake */
-export interface SessionKeys {
-  /** Key for encrypting data we send (32 bytes) */
-  sendKey: Uint8Array;
-  /** Key for decrypting data we receive (32 bytes) */
-  receiveKey: Uint8Array;
-  /** Session ID (for key rotation tracking) */
-  sessionId: string;
-}
-
-// ============================================================================
-// Handshake Message Types
-// ============================================================================
-
-/** X3DH handshake initiation message from client */
-export interface X3DHInitMessage {
-  /** Protocol version */
-  version: 1;
-  /** Client's ephemeral X25519 public key (base64) */
-  ephemeralKey: string;
-  /** Timestamp for replay protection (Unix ms) */
-  timestamp: number;
-  /** Client nonce (base64, 32 bytes random) */
-  clientNonce: string;
-  /** Optional: Machine ID hint for routing */
-  machineIdHint?: string;
-}
-
-/** X3DH response message from machine */
-export interface X3DHResponseMessage {
-  /** Protocol version */
-  version: 1;
-  /** Machine's identity public key - Ed25519 (base64) */
-  identityKey: string;
-  /** Machine's key exchange public key - X25519 (base64) */
-  keyExchangeKey: string;
-  /** Machine's ephemeral X25519 public key (base64) */
-  ephemeralKey: string;
-  /** Machine's signed pre-key - X25519 (base64) */
-  signedPreKey: string;
-  /** Signature over signedPreKey using identity key (base64) */
-  preKeySignature: string;
-  /** Server nonce (base64, 32 bytes random) */
-  serverNonce: string;
-  /** Timestamp (Unix ms) */
-  timestamp: number;
-}
-
-/** Client authentication message */
-export interface X3DHAuthMessage {
-  /** Protocol version */
-  version: 1;
-  /** Client's identity public key - Ed25519 (base64) */
-  identityKey: string;
-  /** Client's key exchange public key - X25519 (base64) */
-  keyExchangeKey: string;
-  /** HMAC proof binding client identity to session (base64) */
-  identityProof: string;
-  /**
-   * Ed25519 signature over handshake transcript proving key ownership (base64).
-   * Signs: clientEphemeral || serverEphemeral || clientNonce || serverNonce
-   * This proves the client possesses the private key for identityKey.
-   */
-  identitySignature: string;
-  /** Authorization type and data */
-  authorization:
-    | { type: "access_list" }
-    | { type: "invite"; inviteToken: string };
-}
-
-/** Server authentication/result message */
-export interface X3DHResultMessage {
-  /** Protocol version */
-  version: 1;
-  /** Machine's identity public key (base64) */
-  identityKey: string;
-  /** HMAC proof binding machine identity to session (base64) */
-  identityProof: string;
-  /** Authorization result */
-  result:
-    | { type: "accepted"; accessType: AccessType; sessionId?: string }
-    | { type: "rejected"; reason: string };
-}
-
-/** Handshake state phases */
-export type HandshakePhase =
-  | "idle"
-  | "awaiting_server_hello"
-  | "awaiting_client_auth"
-  | "awaiting_server_auth"
-  | "established"
-  | "failed";
-
-/** Handshake result on success */
-export interface X3DHHandshakeResult {
-  sessionKeys: SessionKeys;
-  peerIdentityId: string;
-  accessType: AccessType;
-  /** For session-invite: the specific session ID access was granted to */
-  sessionId?: string;
-}
-
-// ============================================================================
-// Machine Identity Types
-// ============================================================================
-
-/** Machine identity configuration stored locally */
-export interface MachineIdentity {
-  /** Unique machine ID (same as identity.id) */
-  machineId: string;
-  /** Human-readable machine name */
-  machineName: string;
-  /** Relay server URL this machine uses */
-  relayUrl: string;
-  /** ISO timestamp when registered */
-  registeredAt: string;
-}

package/src/types/processes.ts

@@ -1,45 +0,0 @@
-/**
- * Workspace process definitions
- */
-
-import type { EventsConfig } from './config.js';
-
-export type ProcessRestartPolicy = 'never' | 'on-failure' | 'always';
-
-export type ProcessPortProtocol = 'http' | 'tcp';
-
-export interface ProcessPortConfig {
-  port: number;
-  name?: string;
-  protocol?: ProcessPortProtocol;
-}
-
-export interface ProcessRestartConfig {
-  policy: ProcessRestartPolicy;
-  maxAttempts: number;
-  backoffMs: number;
-  maxBackoffMs: number;
-}
-
-export interface ProcessDefinition {
-  name: string;
-  command: string;
-  args?: string[];
-  cwd?: string;
-  env?: Record<string, string>;
-  instances?: number;
-  autostart?: boolean;
-  restart?: ProcessRestartConfig;
-  events?: Partial<EventsConfig> & { enabled?: boolean; keepRawOutput?: boolean };
-  ports?: ProcessPortConfig[];
-}
-
-export interface ProcessesConfig {
-  processes: ProcessDefinition[];
-}
-
-export interface ProcessInstanceSpec {
-  name: string;
-  instance: number;
-  definition: ProcessDefinition;
-}