glimmervoid 0.29.1 → 0.30.0

package/dist/chunks/{pair-cli-BQQnhkkc.js → pair-cli-w-gCAF-1.js}

@@ -1,5 +1,5 @@
-import { l as resolveConfigPath } from "./config-store-DtPUFVaO.js";
-import { c as defaultPairingsPath, i as REVOCATION_PROPAGATION_SECONDS, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, s as createSeenStore } from "./remote-config-BHoDFCpo.js";
+import { l as resolveConfigPath } from "./config-store-mm7MgzoL.js";
+import { c as defaultPairingsPath, i as REVOCATION_PROPAGATION_SECONDS, l as defaultSeenPath, n as normalizeRemoteConfig, o as createPairingsStore, s as createSeenStore } from "./remote-config-C2ytQwrs.js";
 import fs from "node:fs";
 //#region server/text-format.ts
 function trimIso(iso) {

package/dist/chunks/{remote-config-BHoDFCpo.js → remote-config-C2ytQwrs.js}

@@ -1,4 +1,4 @@
-import { X as equalsIgnoringCaseOnWindows, g as writeJsonAtomicSync, h as writeJsonAtomic, q as canonicalizePath, s as glimmervoidHomeDir } from "./config-store-DtPUFVaO.js";
+import { X as equalsIgnoringCaseOnWindows, g as writeJsonAtomicSync, h as writeJsonAtomic, q as canonicalizePath, s as glimmervoidHomeDir } from "./config-store-mm7MgzoL.js";
 import fs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
@@ -445,24 +445,28 @@ function normalizeRemoteConfig(raw) {
 	const enabled = src.enabled === true;
 	const port = toPort(src.port);
 	const publicHost = typeof src.publicHost === "string" ? src.publicHost.trim() : "";
+	const ownerLogin = typeof src.ownerLogin === "string" ? src.ownerLogin.trim().toLowerCase() : "";
 	if (!enabled) return {
 		enabled,
 		port,
 		publicHost,
-		allowedOrigins: []
+		allowedOrigins: [],
+		ownerLogin
 	};
 	const listed = Array.isArray(src.allowedOrigins) ? src.allowedOrigins.filter((o) => typeof o === "string" && o.trim() !== "").map((o) => o.trim()) : [];
 	if (listed.length === 0 && publicHost !== "") return {
 		enabled,
 		port,
 		publicHost,
-		allowedOrigins: [`https://${publicHost}`]
+		allowedOrigins: [`https://${publicHost}`],
+		ownerLogin
 	};
 	return {
 		enabled,
 		port,
 		publicHost,
-		allowedOrigins: listed
+		allowedOrigins: listed,
+		ownerLogin
 	};
 }
 function validateRemoteConfig(remote, localPort) {

package/dist/chunks/rtk-hook-core-Bl6gYHPN.js

@@ -0,0 +1,133 @@
+//#region session/core/sane-yolo.ts
+var SANE_YOLO_PATH_ENV = "GLIMMERVOID_SANE_YOLO_PATH";
+var SANE_YOLO_POLICY = {
+	version: 1,
+	destructive_command_protection: {
+		enabled: true,
+		overrides: {
+			"git.branch-force-delete": "off",
+			"git.merge-abort": "off",
+			"git.rebase-abort": "off",
+			"rm.recursive-force-dynamic-target": "on"
+		}
+	},
+	secret_protection: { enabled: false }
+};
+var SANE_YOLO_RULES = {
+	version: 1,
+	rules: ["infra"],
+	overrides: {},
+	transparent_wrappers: ["rtk", "npx"]
+};
+var INFRA_REASON = "Sane YOLO blocks infrastructure teardown; run this command by hand.";
+var TERRAFORM_DESTROY_FLAGS = [
+	"-destroy",
+	"--destroy",
+	"-destroy=true",
+	"--destroy=true"
+];
+var SANE_YOLO_FILES = {
+	"policy.json": SANE_YOLO_POLICY,
+	"rules/rule.json": SANE_YOLO_RULES,
+	"rules/infra/rulebook.json": {
+		rulebook_version: 1,
+		name: "infra",
+		version: "1.1.0",
+		allowed_commands: [
+			"terraform",
+			"tofu",
+			"pulumi",
+			"kubectl"
+		],
+		rules: [
+			{
+				name: "terraform-destroy",
+				command: "terraform",
+				subcommand: "destroy",
+				block_args: ["destroy"],
+				reason: INFRA_REASON
+			},
+			{
+				name: "terraform-apply-destroy",
+				command: "terraform",
+				subcommand: "apply",
+				block_args: TERRAFORM_DESTROY_FLAGS,
+				reason: INFRA_REASON
+			},
+			{
+				name: "tofu-destroy",
+				command: "tofu",
+				subcommand: "destroy",
+				block_args: ["destroy"],
+				reason: INFRA_REASON
+			},
+			{
+				name: "tofu-apply-destroy",
+				command: "tofu",
+				subcommand: "apply",
+				block_args: TERRAFORM_DESTROY_FLAGS,
+				reason: INFRA_REASON
+			},
+			{
+				name: "pulumi-destroy",
+				command: "pulumi",
+				subcommand: "destroy",
+				block_args: ["destroy"],
+				reason: INFRA_REASON
+			},
+			{
+				name: "pulumi-down",
+				command: "pulumi",
+				subcommand: "down",
+				block_args: ["down"],
+				reason: INFRA_REASON
+			},
+			{
+				name: "kubectl-delete-namespace",
+				command: "kubectl",
+				subcommand: "delete",
+				block_args: [
+					"ns",
+					"namespace",
+					"namespaces"
+				],
+				reason: INFRA_REASON
+			}
+		]
+	}
+};
+function saneYoloEnv(homeDir) {
+	return {
+		CC_SAFETY_NET_HOME: homeDir,
+		CC_SAFETY_NET_PROJECT_TIGHTEN_ONLY: "1",
+		CC_SAFETY_NET_AUDIT_HOME: homeDir,
+		CC_SAFETY_NET_AUDIT_SCOPE: "blocked"
+	};
+}
+//#endregion
+//#region session/core/rtk-hook-core.ts
+var RTK_PATH_ENV = "GLIMMERVOID_RTK_PATH";
+var MAX_RTK_STDOUT_BYTES = 65536;
+function isPlainObject(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeRtkHookResponse(stdoutText) {
+	if (typeof stdoutText !== "string") return "";
+	const trimmed = stdoutText.trim();
+	if (!trimmed) return "";
+	if (Buffer.byteLength(trimmed) > 65536) return "";
+	let parsed = null;
+	try {
+		parsed = JSON.parse(trimmed);
+	} catch {
+		return "";
+	}
+	if (!isPlainObject(parsed)) return "";
+	const hookSpecificOutput = parsed.hookSpecificOutput;
+	if (isPlainObject(hookSpecificOutput) && isPlainObject(hookSpecificOutput.updatedInput)) {
+		if (typeof hookSpecificOutput.permissionDecision !== "string") hookSpecificOutput.permissionDecision = "allow";
+	}
+	return JSON.stringify(parsed);
+}
+//#endregion
+export { SANE_YOLO_PATH_ENV as a, SANE_YOLO_FILES as i, RTK_PATH_ENV as n, saneYoloEnv as o, normalizeRtkHookResponse as r, MAX_RTK_STDOUT_BYTES as t };

package/dist/chunks/rtk-resolver-CLo-gZzw.js

@@ -0,0 +1,21 @@
+import { i as execSync } from "./child-process-safe-DRGsp0TE.js";
+import { n as glimmervoidHomeDir } from "./config-path-core-DFt-TemS.js";
+import { r as resolveRtkPath } from "./hook-tools-pSJia7ks.js";
+import fs from "node:fs";
+import os from "node:os";
+//#region server/rtk-resolver.ts
+function resolveRtkPathFromSystem() {
+	return resolveRtkPath({
+		glimmervoidHome: glimmervoidHomeDir(os.homedir(), process.env),
+		platform: process.platform,
+		exec: execSync,
+		fsApi: fs
+	});
+}
+var cachedRtkPath = null;
+function getRtkPath(resolve = resolveRtkPathFromSystem) {
+	if (!cachedRtkPath) cachedRtkPath = resolve();
+	return cachedRtkPath;
+}
+//#endregion
+export { getRtkPath as t };

package/dist/chunks/rtk-resolver-CMQAidlI.js

@@ -0,0 +1,2 @@
+import { t as getRtkPath } from "./rtk-resolver-CLo-gZzw.js";
+export { getRtkPath };

package/dist/chunks/{runtime-paths-CVvq20A4.js → runtime-paths-Ci_ksSkj.js}

@@ -1,3 +1,4 @@
+import { createRequire } from "node:module";
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -43,9 +44,32 @@ function hasPackageManifest(directory) {
 		return false;
 	}
 }
-var { assetRoot, bundled, cliPath, clientDir, extensionDir, packageRoot, relayPath } = computeRuntimePaths({
+var runtimePaths = computeRuntimePaths({
 	moduleFile: fileURLToPath(import.meta.url),
 	hasPackageJson: hasPackageManifest
 });
+var { assetRoot, bundled, cliPath, clientDir, extensionDir, packageRoot, relayPath } = runtimePaths;
+var packageBins = /* @__PURE__ */ new Map();
+function resolvePackageBin(packageName, binName) {
+	const cacheKey = `${packageName}:${binName}`;
+	if (packageBins.has(cacheKey)) return packageBins.get(cacheKey) ?? null;
+	const resolvedBin = readPackageBin(packageName, binName);
+	packageBins.set(cacheKey, resolvedBin);
+	return resolvedBin;
+}
+function readPackageBin(packageName, binName) {
+	try {
+		const manifestPath = createRequire(path.join(packageRoot, "package.json")).resolve(`${packageName}/package.json`);
+		const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+		if (!manifest || typeof manifest !== "object" || !("bin" in manifest)) return null;
+		const bins = manifest.bin;
+		const relativeBin = typeof bins === "string" ? bins : bins && typeof bins === "object" ? Reflect.get(bins, binName) : null;
+		if (typeof relativeBin !== "string") return null;
+		const binPath = path.join(path.dirname(manifestPath), relativeBin);
+		return fs.statSync(binPath).isFile() ? binPath : null;
+	} catch {
+		return null;
+	}
+}
 //#endregion
-export { packageRoot as a, extensionDir as i, cliPath as n, relayPath as o, clientDir as r, bundled as t };
+export { packageRoot as a, runtimePaths as c, extensionDir as i, cliPath as n, relayPath as o, clientDir as r, resolvePackageBin as s, bundled as t };

package/dist/chunks/runtime-paths-JLrZ3wyi.js

@@ -0,0 +1,2 @@
+import { s as resolvePackageBin } from "./runtime-paths-Ci_ksSkj.js";
+export { resolvePackageBin };

package/dist/chunks/{sandbox-deps-BwvbDBDl.js → sandbox-deps-Dd5-kZnf.js}

@@ -1,4 +1,4 @@
-import { i as execSync } from "./child-process-safe-Cz22RwlG.js";
+import { i as execSync } from "./child-process-safe-DRGsp0TE.js";
 import { r as resolvePathCommandMatches } from "./spawn-command-Cc40FiZI.js";
 //#region server/core/sandbox-deps-core.ts
 var LINUX_SANDBOX_BINARIES = Object.freeze(["bwrap", "socat"]);

package/dist/chunks/{session-CJtOveHl.js → session-Cez8aIWg.js}

@@ -81,6 +81,7 @@ function toolDetailLine(toolName, toolInput) {
 var TASK_TITLE_CONTROL_CHARACTERS = /[\x00-\x1f\x7f-\x9f]/;
 var PROMPT_DETAIL_HIDDEN_CHARACTERS = new RegExp(`${TASK_TITLE_CONTROL_CHARACTERS.source}|[\\p{Cf}\\u2028\\u2029]`, "u");
 var TaskTitle = z.string().refine((title) => !TASK_TITLE_CONTROL_CHARACTERS.test(title)).trim().max(120);
+var RefinedTaskTitle = z.object({ title: z.string().nullable() }).strict();
 var SessionState = z.enum(STATES);
 var PendingWakeup = z.object({
 	at: z.number().finite().nullable(),
@@ -111,6 +112,7 @@ var SessionSnapshot = z.object({
 	stateSince: z.number(),
 	sleeping: z.boolean(),
 	dangerouslySkipPermissions: z.boolean(),
+	saneYolo: z.boolean().default(false),
 	ephemeral: z.boolean(),
 	isWorktree: z.boolean(),
 	isWorkspace: z.boolean().default(false),
@@ -159,4 +161,4 @@ z.object({
 	ephemeral: SessionSnapshot.shape.ephemeral
 }).strict();
 //#endregion
-export { toolDetailLine as _, AgentSpawnRequest as a, RESTARTABLE_STATES as b, PendingPromptQuestion as c, SessionState as d, TASK_TITLE_CONTROL_CHARACTERS as f, toolDetailFieldValue as g, firstDetailLine as h, AgentAttentionRequest as i, PendingWakeup as l, isSamePromptQuestion as m, AGENT_URL_ENV as n, PROMPT_DETAIL_HIDDEN_CHARACTERS as o, TaskTitle as p, ASK_USER_QUESTION_TOOL_NAME as r, PendingPromptDetail as s, AGENT_API_VERBS as t, SessionSnapshot as u, KILLABLE_STATES as v, STATES as x, MERGEABLE_LIVE_STATES as y };
+export { STATES as S, toolDetailFieldValue as _, AgentSpawnRequest as a, MERGEABLE_LIVE_STATES as b, PendingPromptQuestion as c, SessionSnapshot as d, SessionState as f, firstDetailLine as g, isSamePromptQuestion as h, AgentAttentionRequest as i, PendingWakeup as l, TaskTitle as m, AGENT_URL_ENV as n, PROMPT_DETAIL_HIDDEN_CHARACTERS as o, TASK_TITLE_CONTROL_CHARACTERS as p, ASK_USER_QUESTION_TOOL_NAME as r, PendingPromptDetail as s, AGENT_API_VERBS as t, RefinedTaskTitle as u, toolDetailLine as v, RESTARTABLE_STATES as x, KILLABLE_STATES as y };

package/dist/chunks/{visions-cli-DUZnopGY.js → visions-cli-BXQFIBCX.js}

@@ -1,5 +1,5 @@
 import { t as renderTable } from "./ascii-figure-core-pDAwtlKO.js";
-import { a as relayInvocationOptions, c as unwireEverything, d as extensionIdOf, f as buildSetupGuide, h as isExtensionInstalled, i as packVsix, l as wireEverything, m as recipeIds, o as resolveRelayInvocation, p as commandLine, r as editorExtensions, s as resolvedEditorPaths, t as RELAY_PATH, u as editorTargets } from "./visions-setup-C_kJobsy.js";
+import { a as relayInvocationOptions, c as unwireEverything, d as extensionIdOf, f as buildSetupGuide, h as isExtensionInstalled, i as packVsix, l as wireEverything, m as recipeIds, o as resolveRelayInvocation, p as commandLine, r as editorExtensions, s as resolvedEditorPaths, t as RELAY_PATH, u as editorTargets } from "./visions-setup-CvVnOe1r.js";
 import fs from "node:fs";
 //#region server/visions-cli.ts
 function fileOutcomeRows(files) {

package/dist/chunks/{visions-setup-C_kJobsy.js → visions-setup-CvVnOe1r.js}

@@ -1,5 +1,5 @@
-import { a as packageRoot, i as extensionDir, n as cliPath, o as relayPath, t as bundled } from "./runtime-paths-CVvq20A4.js";
-import { i as execSync, n as execFileAsync } from "./child-process-safe-Cz22RwlG.js";
+import { a as packageRoot, i as extensionDir, n as cliPath, o as relayPath, t as bundled } from "./runtime-paths-Ci_ksSkj.js";
+import { i as execSync, n as execFileAsync } from "./child-process-safe-DRGsp0TE.js";
 import { r as resolvePathCommandMatches } from "./spawn-command-Cc40FiZI.js";
 import { d as scrubText, n as SOURCE_DEFAULTS } from "./ingest-core-DWI1Mbu4.js";
 import { stripTypeScriptTypes } from "node:module";