mindwire 0.1.15 → 0.1.19

package/dist/run.d.ts

@@ -57,7 +57,9 @@ export declare class Run {
      * after completion; the daemon steers or resumes the conversation. Read the chat's latest
      * run after replying to a completed run. Requires the agent's `respond` capability.
      */
-    respond(input?: RespondInput): Promise<void>;
+    respond(input?: RespondInput & {
+        gitAuth?: import("./workspace.js").ProjectAuth;
+    }): Promise<void>;
     /**
      * Steer a follow-up message into the running turn without cancelling it. Requires the agent's
      * `input` capability.

package/dist/service.d.ts

@@ -0,0 +1,24 @@
+import type { Mindwire } from "./client.js";
+export interface ServiceUpdateState {
+    idle: boolean;
+    updating: boolean;
+    activeOperations: number;
+}
+export interface ServiceUpdateLease {
+    id: string;
+    /** Terminate only this leased process, not every mindwired process on the host. */
+    pid: number;
+    expiresAt: string;
+}
+/** Installer coordination; requires health.serviceUpdateVersion >= 1. */
+export declare class ServiceApi {
+    private readonly client;
+    constructor(client: Mindwire);
+    updateStatus(): Promise<ServiceUpdateState>;
+    /** Download first. Acquire immediately before replacement; busy work returns 409.
+     * Admission stays closed until release, process exit, or the one-minute expiry. */
+    acquireUpdate(): Promise<ServiceUpdateLease>;
+    releaseUpdate(id: string): Promise<{
+        ok: boolean;
+    }>;
+}

package/dist/surfaces.d.ts

@@ -103,7 +103,7 @@ export interface SurfaceAction {
     deltaY?: number;
     keys?: string[];
     text?: string;
-    /** Physical US keyboard text (printable ASCII, <=4096 bytes), preserving the clipboard. */
+    /** Physical US keyboard text (printable ASCII, up to 4096 bytes), preserving the clipboard. */
     textMode?: "keyboard";
 }
 export interface SurfaceActionRequest {

package/dist/target/docker.d.ts

@@ -52,7 +52,7 @@ export interface DockerConfig {
     agentCwd?: string;
     /** Explicit path to a Linux `mindwired` to deploy (else resolved from the platform package). */
     daemonBin?: string;
-    /** Redeploy when the running daemon's version differs from the SDK's bundled binary. */
+    /** Upgrade an older daemon when idle; requires its service update capability. */
     autoUpdate?: boolean;
     /** On `close()`, stop + remove a container we created (attached containers are left running). */
     stopOnExit?: boolean;

package/dist/target/host.d.ts

@@ -35,7 +35,7 @@ export interface EnsureDaemonConfig {
      * development launcher to build artifacts without guessing the sandbox platform in advance.
      */
     daemonBin?: string;
-    /** Redeploy when the running daemon's version differs from `desiredVersion`. Off by default. */
+    /** Upgrade an older service when idle. Requires serviceUpdateVersion >= 1. Off by default. */
     autoUpdate?: boolean;
     /** Redeploy even when the reported version matches. Intended only for a locally built development daemon. */
     forceDeploy?: boolean;

package/dist/target/oblien.d.ts

@@ -21,9 +21,9 @@ export interface OblienConfig {
     port?: number;
     /** Explicit local `mindwired` to deploy. `{os}`/`{arch}` expand to the workspace platform. */
     daemonBin?: string;
-    /** Redeploy the daemon when the running version differs from the SDK's bundled binary. Off by default. */
+    /** Upgrade an older daemon when idle; requires its service update capability. Off by default. */
     autoUpdate?: boolean;
-    /** Replace even a healthy version match. Use only with a locally built development daemon. */
+    /** Replace even a healthy version match while idle. Use only with a local development binary. */
     forceDeploy?: boolean;
     /** On `close()`, tear the workspace down (delete one we created / stop one we reused). */
     stopOnExit?: boolean;

package/dist/target/ssh.d.ts

@@ -28,7 +28,7 @@ export interface SshOptions {
     agentCwd?: string;
     /** Explicit local `mindwired` to deploy; `{os}`/`{arch}` expand to the destination platform. Otherwise downloaded from GitHub Releases. */
     daemonBin?: string;
-    /** Redeploy when the running daemon's version differs from the SDK's bundled binary. */
+    /** Upgrade an older daemon when idle; requires its service update capability. */
     autoUpdate?: boolean;
     /** On `close()`, tear the tunnel down and end the SSH connection. Defaults to `true`. */
     stopOnExit?: boolean;

package/dist/types.d.ts

@@ -275,6 +275,7 @@ export interface Capabilities {
     cancel: boolean;
     persistent: boolean;
     models: boolean;
+    authLogout?: boolean;
     /**
      * Client hint: image attachments are delivered as true vision content (the model sees the image),
      * not just a path it must open with a Read tool. Attachments themselves are ungated.
@@ -382,6 +383,8 @@ export interface Field {
     presentation?: "segmented" | "menu" | (string & {});
     /** Text keyboard hint. */
     inputMode?: "url" | (string & {});
+    minimum?: number;
+    maximum?: number;
 }
 export interface Section {
     title: string;
@@ -431,6 +434,10 @@ export interface ModelInfo {
     outputModalities?: string[];
     /** Capability flags from the catalog. */
     reasoning?: boolean;
+    /** Reasoning levels reported by the installed harness for this exact model. */
+    reasoningEfforts?: Option[];
+    defaultReasoningEffort?: string;
+    default?: boolean;
     toolCall?: boolean;
     attachment?: boolean;
     /** Per-million-token pricing when known. */
@@ -591,6 +598,8 @@ export interface AuthMethod {
 export interface AuthState {
     method: string;
     status: "needs_input" | "pending" | "complete" | "error" | (string & {});
+    /** Echo as `_flowId` in step inputs, or use auth.poll/auth.cancel. */
+    flowId?: string;
     url?: string;
     code?: string;
     message?: string;
@@ -600,6 +609,8 @@ export interface AuthState {
 }
 /** The resting state: is the agent authenticated, and via which method. */
 export interface AuthStatus {
+    /** Explicit workspace sign-out, persisted until a connection completes. */
+    signedOut?: boolean;
     configured: boolean;
     method?: string;
     detail?: string;
@@ -787,6 +798,47 @@ export interface DeleteResult {
 export interface Catalog {
     version: string;
     agents: CatalogEntry[];
+    harnessPolicyVersion?: number;
+    harnessCompatibility?: HarnessCatalog;
+}
+/** Published independently of daemon releases. Entries approve exact CLI/daemon combinations. */
+export interface HarnessCatalog {
+    schemaVersion: number;
+    revision: number;
+    harnesses: Record<string, {
+        releases: Array<{
+            version: string;
+            daemon: HarnessDaemonRange[];
+        }>;
+        excluded?: Array<{
+            min: string;
+            maxExclusive: string;
+            daemon: HarnessDaemonRange[];
+            reason: string;
+        }>;
+    }>;
+}
+export interface HarnessDaemonRange {
+    min: string;
+    maxExclusive?: string;
+}
+/** GET /agent/software. Version selection is enforced by the daemon, never by a client. */
+export interface HarnessSoftware {
+    policyVersion: number;
+    installedVersion: string;
+    recommendedVersion?: string;
+    latestVersion?: string;
+    compatibility: "supported" | "untested" | "incompatible" | "not_installed" | (string & {});
+    managed: boolean;
+    updateAvailable: boolean;
+    requiresDaemonUpdate: boolean;
+    requiredDaemonVersion?: string;
+    message?: string;
+    catalogRevision: number;
+    catalogSource: "bundled" | "cached" | "remote" | (string & {});
+    catalogStale: boolean;
+    /** Missing shared tools; run setup even if the CLI itself is already installed. */
+    missingDependencies?: string[];
 }
 /** `GET /agent` — everything the client needs to render one agent's screen. */
 export interface AgentInfo {
@@ -798,6 +850,7 @@ export interface AgentInfo {
     authMethods: AuthMethod[];
     authStatus: AuthStatus;
     installedVersion: string;
+    software?: HarnessSoftware;
     configured: boolean;
     configPath: string;
     /**
@@ -836,7 +889,11 @@ export interface SetupStatus {
     /** The shared job's operation, including when another client started it. Older daemons omit it. */
     operation?: "setup" | "update";
     /** Current step phase, reported by the daemon rather than inferred from elapsed time. */
-    stage?: "checking" | "waiting" | "installing" | "verifying" | (string & {});
+    stage?: "checking" | "waiting" | "installing" | "resolving" | "downloading" | "configuring" | "verifying" | (string & {});
+    /** Ordered tool names in this job. Count successful steps for step progress, not download percent. */
+    plan?: string[];
+    /** ISO 8601 start time of the shared job, preserved when clients reconnect. */
+    startedAt?: string;
 }
 /** `GET /notify/config` — the token is never returned. */
 export interface NotifyConfigStatus {
@@ -925,11 +982,21 @@ export interface Health {
     workspaceMetadataVersion?: number;
     /** Durable project creation/clone operations; absent on older daemons. */
     projectOperationsVersion?: number;
+    /** Workspace/project GitHub bindings and operation/run credential forwarding. */
+    gitAccessVersion?: number;
+    /** Durable Git writes: v2 adds branches; v3 adds repository-scoped commit author setup. */
+    gitOperationsVersion?: number;
     /** Persistent profile/chat mutes enforced before every notification delivery. */
     notificationPreferencesVersion?: number;
+    harnessPolicyVersion?: number;
     ok: boolean;
     agent: string;
     version: string;
+    /** Atomic idle admission for service replacement. */
+    serviceUpdateVersion?: number;
+    /** Container placement supplies the sandbox boundary; approval policy is independent. */
+    workspaceIsolationVersion?: number;
+    workspaceIsolation?: "direct" | "container";
 }
 /**
  * `GET /stats` — the daemon **process's** own resource snapshot, straight from the Go runtime. It is

package/dist/workspace.d.ts

@@ -1,6 +1,6 @@
 import type { Mindwire } from "./client.js";
-/** Write-only credentials for one clone attempt. Never persisted in operation snapshots. */
-export type ProjectAuth = {
+/** Write-only credentials. Never persisted in operation snapshots or conversation state. */
+export type ProjectAuth = ({
     kind: "token";
     token: string;
     username?: string;
@@ -9,7 +9,65 @@ export type ProjectAuth = {
     privateKey: string;
 } | {
     kind: "gh";
+}) & {
+    connectionId?: string;
+    expiresAt?: string;
+    readOnly?: boolean;
 };
+export interface GitConnection {
+    id: string;
+    login: string;
+    mode: "token" | "oblienApp" | "sshKey" | "ghCli" | "native";
+    lifetime: "run" | "workspace";
+}
+export interface GitAccessState {
+    default?: GitConnection;
+    storedConnectionIds: string[];
+    storedConnections: GitConnection[];
+    activeOperations: number;
+}
+export interface ProjectGitState {
+    connection?: GitConnection;
+    inherited: boolean;
+    stored: boolean;
+    repoUrl?: string;
+}
+export type GitAction = "stage" | "unstage" | "discard" | "commit" | "fetch" | "pull" | "push" | "switch_branch" | "create_branch";
+export interface GitIdentity {
+    name: string;
+    email: string;
+}
+export interface GitOperationRequest {
+    /** Stable ID. Reuse this exact intent after a lost acknowledgement. */
+    id: string;
+    action: GitAction;
+    /** Literal repository-relative paths, required for stage/unstage/discard. */
+    paths?: string[];
+    /** Required for commit. Uses the existing author unless identity is explicitly supplied. */
+    message?: string;
+    /** Literal branch name for switch_branch/create_branch; requires gitOperationsVersion >= 2. */
+    branch?: string;
+    /** switch_branch only: branch is a remote tracking name, e.g. origin/feature. */
+    remote?: boolean;
+    /** Commit only; requires gitOperationsVersion >= 3. Saves attribution in this repository,
+     * then commits under the same durable lock. Never changes global Git configuration. */
+    identity?: GitIdentity;
+    /** Write-only, for network operations only. Never part of an operation snapshot. */
+    auth?: ProjectAuth;
+}
+export interface GitOperation extends Omit<GitOperationRequest, "auth"> {
+    projectId: string;
+    /** Canonical repository root resolved by the daemon. */
+    path: string;
+    status: "queued" | "running" | "cancelling" | "succeeded" | "failed" | "cancelled" | "interrupted";
+    output?: string;
+    error?: string;
+    /** git_identity_required asks the client to collect a name/email before a new commit intent. */
+    errorCode?: "git_identity_required" | (string & {});
+    createdAt: string;
+    updatedAt: string;
+    sequence: number;
+}
 export interface ProjectRequest {
     /** Stable idempotency key. Keep the same ID if the acknowledgement is lost. */
     id: string;
@@ -20,6 +78,7 @@ export interface ProjectRequest {
     repoUrl?: string;
     branch?: string;
     auth?: ProjectAuth;
+    gitConnection?: GitConnection;
 }
 export interface ProjectRemoveRequest {
     /** Stable idempotency key for this confirmed removal. */
@@ -76,6 +135,8 @@ export interface WorkspaceProject extends WorkspaceRecord {
     name: string;
     path: string;
     repoUrl?: string;
+    /** Omit on edits to preserve; explicitly null restores the workspace default. */
+    gitConnection?: GitConnection | null;
 }
 /** Chat membership; transcript content continues to come from /chats/:id/messages. */
 export interface WorkspaceChat extends WorkspaceRecord {
@@ -132,6 +193,7 @@ export declare class WorkspaceCollection<T extends WorkspaceRecord> {
 /** Workspace metadata is shared by all harnesses; withAgent() never scopes these requests. */
 export declare class WorkspaceApi {
     private readonly mw;
+    readonly git: GitAccessApi;
     readonly operations: ProjectOperationsApi;
     readonly agents: WorkspaceCollection<WorkspaceAgent>;
     readonly projects: WorkspaceCollection<WorkspaceProject>;
@@ -151,3 +213,28 @@ export declare class WorkspaceApi {
     /** Import legacy metadata before replacing a local cache. Safe to repeat after interruption. */
     import(records: WorkspaceImport): Promise<WorkspaceSnapshot>;
 }
+/** Account preferences and authenticated Git on the daemon hosting each repository. */
+export declare class GitAccessApi {
+    private readonly mw;
+    constructor(mw: Mindwire);
+    state(): Promise<GitAccessState>;
+    setDefault(connection: GitConnection | null, auth?: ProjectAuth): Promise<GitAccessState>;
+    forget(connectionId: string): Promise<GitAccessState>;
+    project(projectId: string): Promise<ProjectGitState>;
+    setProject(projectId: string, connection: GitConnection | null, expectedRevision: number, auth?: ProjectAuth): Promise<WorkspaceSnapshot>;
+    /** Compatibility call. Prefer start() and operation()/watch() for reconnectable writes. */
+    run(projectId: string, operation: "fetch" | "pull" | "push", auth?: ProjectAuth): Promise<{
+        output: string;
+    }>;
+    /** Requires health.gitOperationsVersion >= 1 (>= 2 for branch changes). Acceptance persists before Git runs;
+     * disconnecting only detaches the client. The same ID/intent never runs twice.
+     */
+    start(projectId: string, request: GitOperationRequest): Promise<GitOperation>;
+    operations(projectId: string, activeOnly?: boolean): Promise<GitOperation[]>;
+    operation(id: string): Promise<GitOperation>;
+    cancel(id: string): Promise<GitOperation>;
+    /** Current snapshot followed by state changes. Aborting observation never cancels the operation. */
+    watch(id: string, opts?: {
+        signal?: AbortSignal;
+    }): AsyncGenerator<GitOperation>;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mindwire",
-  "version": "0.1.15",
+  "version": "0.1.19",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "devDependencies": {
@@ -66,7 +66,7 @@
     "dev": "tsup --watch",
     "typecheck": "tsc --noEmit",
     "test": "bun test",
-    "test:e2e": "RUN_E2E=1 RUN_DOCKER_E2E=1 bun test test/e2e",
+    "test:e2e": "bun run build && RUN_E2E=1 RUN_DOCKER_E2E=1 bun test test/e2e",
     "clean": "rm -rf dist"
   },
   "sideEffects": false,