synomem 0.8.0 → 0.9.1

package/dist/profiles.d.ts

@@ -0,0 +1,243 @@
+import { z } from 'zod';
+import { type CredentialStore, type CredentialStores } from './credentials.js';
+import { SynomemError } from './errors.js';
+import { createLocalResolver, createRemoteResolver, type ContextResolver, type RemoteCredentialSource } from './resolvers.js';
+import type { ActorIdentity, ContextSummary } from './types.js';
+export declare const PROFILES_FILE = "profiles.json";
+declare const credentialEntrySchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        oauth: "oauth";
+        "access-key": "access-key";
+    }>;
+    apiUrl: z.ZodString;
+    store: z.ZodEnum<{
+        file: "file";
+        keychain: "keychain";
+        environment: "environment";
+    }>;
+    secretRef: z.ZodOptional<z.ZodString>;
+    issuer: z.ZodOptional<z.ZodString>;
+    resource: z.ZodOptional<z.ZodString>;
+    clientId: z.ZodOptional<z.ZodString>;
+    connectionId: z.ZodOptional<z.ZodString>;
+    label: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+}, z.core.$strict>;
+declare const localProfileSchema: z.ZodObject<{
+    backend: z.ZodLiteral<"local">;
+    home: z.ZodOptional<z.ZodString>;
+    actorId: z.ZodString;
+    actorName: z.ZodOptional<z.ZodString>;
+    contextId: z.ZodString;
+}, z.core.$strict>;
+declare const remoteProfileSchema: z.ZodObject<{
+    backend: z.ZodOptional<z.ZodLiteral<"remote">>;
+    credentialRef: z.ZodString;
+    contextId: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    workspaceName: z.ZodOptional<z.ZodString>;
+    actor: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            human: "human";
+            agent: "agent";
+            system: "system";
+        }>;
+        id: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const profileSchema: z.ZodUnion<readonly [z.ZodObject<{
+    backend: z.ZodLiteral<"local">;
+    home: z.ZodOptional<z.ZodString>;
+    actorId: z.ZodString;
+    actorName: z.ZodOptional<z.ZodString>;
+    contextId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    backend: z.ZodOptional<z.ZodLiteral<"remote">>;
+    credentialRef: z.ZodString;
+    contextId: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+    workspaceName: z.ZodOptional<z.ZodString>;
+    actor: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            human: "human";
+            agent: "agent";
+            system: "system";
+        }>;
+        id: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>]>;
+export declare const profilesConfigSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    credentials: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        kind: z.ZodEnum<{
+            oauth: "oauth";
+            "access-key": "access-key";
+        }>;
+        apiUrl: z.ZodString;
+        store: z.ZodEnum<{
+            file: "file";
+            keychain: "keychain";
+            environment: "environment";
+        }>;
+        secretRef: z.ZodOptional<z.ZodString>;
+        issuer: z.ZodOptional<z.ZodString>;
+        resource: z.ZodOptional<z.ZodString>;
+        clientId: z.ZodOptional<z.ZodString>;
+        connectionId: z.ZodOptional<z.ZodString>;
+        label: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodString;
+    }, z.core.$strict>>>;
+    profiles: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodObject<{
+        backend: z.ZodLiteral<"local">;
+        home: z.ZodOptional<z.ZodString>;
+        actorId: z.ZodString;
+        actorName: z.ZodOptional<z.ZodString>;
+        contextId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        backend: z.ZodOptional<z.ZodLiteral<"remote">>;
+        credentialRef: z.ZodString;
+        contextId: z.ZodString;
+        workspaceId: z.ZodOptional<z.ZodString>;
+        workspaceName: z.ZodOptional<z.ZodString>;
+        actor: z.ZodOptional<z.ZodObject<{
+            kind: z.ZodEnum<{
+                human: "human";
+                agent: "agent";
+                system: "system";
+            }>;
+            id: z.ZodString;
+            displayName: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>]>>>;
+    harnessPresets: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
+    defaultProfile: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type CredentialEntry = z.infer<typeof credentialEntrySchema>;
+export type LocalProfile = z.infer<typeof localProfileSchema>;
+export type RemoteProfile = z.infer<typeof remoteProfileSchema>;
+export type Profile = z.infer<typeof profileSchema>;
+export type ProfilesConfig = z.infer<typeof profilesConfigSchema>;
+export declare function isLocalProfile(profile: Profile): profile is LocalProfile;
+export declare function emptyProfilesConfig(): ProfilesConfig;
+export declare function assertName(name: string, what: string): string;
+/** Reads and writes `<home>/profiles.json`. Injected in tests. */
+export declare class ProfileStore {
+    readonly home: string;
+    constructor(explicitHome?: string);
+    get path(): string;
+    read(): ProfilesConfig;
+    write(config: ProfilesConfig): void;
+}
+export type Selection = {
+    kind: 'profile';
+    name: string;
+    source: string;
+} | {
+    kind: 'preset';
+    name: string;
+    source: string;
+};
+export interface SelectionInput {
+    profile?: string;
+    preset?: string;
+    env?: NodeJS.ProcessEnv;
+    cwd?: string;
+    /** The Synomem home, so it is never mistaken for a project directory. */
+    home?: string;
+}
+/**
+ * Which profile or preset a process acts through. One implementation, used by
+ * the CLI and both stdio entrypoints:
+ *
+ *   1. `--profile` / `--preset` on this invocation
+ *   2. `SYNOMEM_PROFILE` / `SYNOMEM_PRESET` for this process
+ *   3. the nearest project `.synomem/project.json` (names a profile/preset only)
+ *   4. `defaultProfile` in profiles.json
+ *
+ * Returns undefined when nothing selects anything. Naming something that does
+ * not exist is an error, never a fall-through to the next source.
+ */
+export declare function resolveSelection(config: ProfilesConfig, input: SelectionInput): Selection | undefined;
+export declare function noSelectionError(): SynomemError;
+export interface CredentialSourceOptions {
+    home: string;
+    name: string;
+    entry: CredentialEntry;
+    stores: CredentialStores;
+    env?: NodeJS.ProcessEnv;
+    fetch?: typeof fetch;
+}
+export declare function storeFor(stores: CredentialStores, entry: CredentialEntry): CredentialStore;
+/**
+ * A connection's current bearer: an access key as stored, or an OAuth access
+ * token, refreshed under the cross-process lock when it has expired.
+ *
+ * After taking the lock the stored credential is re-read: if another process
+ * already refreshed it (a newer generation), that token is used and the
+ * refresh token is not spent again. A refused refresh is never retried — the
+ * connection must be logged in again.
+ */
+export declare class ConnectionCredentialSource implements RemoteCredentialSource {
+    private readonly options;
+    private cached?;
+    private cachedExpiry;
+    private pending?;
+    constructor(options: CredentialSourceOptions);
+    bearer(): Promise<string>;
+    private reauthorize;
+    private load;
+    private remember;
+}
+export interface ResolverDependencies {
+    stores: CredentialStores;
+    env?: NodeJS.ProcessEnv;
+    fetch?: typeof fetch;
+    createRemoteResolver?: typeof createRemoteResolver;
+    createLocalResolver?: typeof createLocalResolver;
+}
+export declare function credentialSourceFor(home: string, config: ProfilesConfig, name: string, deps: ResolverDependencies): ConnectionCredentialSource;
+/** The canonical local actor for a local profile, after checking its store. */
+export declare function localProfileTarget(rootHome: string, profile: LocalProfile): {
+    home: string;
+    actor: ActorIdentity;
+};
+/** A fixed-mode resolver for one profile. */
+export declare function profileResolver(rootHome: string, config: ProfilesConfig, name: string, deps: ResolverDependencies): ContextResolver;
+interface Route {
+    profile: string;
+    contextId: string;
+    resolver: ContextResolver;
+}
+/**
+ * An explicit-context resolver over a preset's profiles.
+ *
+ * Remote profiles sharing a connection share one remote resolver, restricted
+ * to exactly the contexts the preset names (the server still authorizes each).
+ * Every operation must name its context; there is no default and no switch.
+ */
+export declare class PresetResolver implements ContextResolver {
+    private readonly name;
+    private readonly routes;
+    constructor(name: string, routes: Route[]);
+    mode(): 'explicit';
+    resolve(contextId?: string): Promise<import("./resolvers.js").ResolvedContext>;
+    list(): Promise<{
+        mode: "explicit";
+        fixedContextId: null;
+        contexts: ContextSummary[];
+    }>;
+    close(): Promise<void>;
+}
+export declare function presetResolver(rootHome: string, config: ProfilesConfig, name: string, deps: ResolverDependencies): PresetResolver;
+/**
+ * The single entry point for the CLI and both stdio servers: selection flags
+ * and environment in, one resolver out.
+ */
+export declare function resolverForSelection(rootHome: string, config: ProfilesConfig, selection: Selection, deps: ResolverDependencies): ContextResolver;
+export declare function describeContext(context: ContextSummary): string;
+/** One line describing a profile, for list/show. Never a secret. */
+export declare function describeProfile(name: string, profile: Profile): string;
+export {};
+//# sourceMappingURL=profiles.d.ts.map

package/dist/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../src/profiles.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAEtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EAEpB,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEhE,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAS7C,QAAA,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;kBAsBvB,CAAC;AAUL,QAAA,MAAM,kBAAkB;;;;;;kBASb,CAAC;AAEZ,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;kBAUd,CAAC;AAEZ,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;oBAAqD,CAAC;AAEhF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAQtB,CAAC;AAEZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AACpD,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,YAAY,CAExE;AAED,wBAAgB,mBAAmB,IAAI,cAAc,CAEpD;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAS7D;AAED,kEAAkE;AAClE,qBAAa,YAAY;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,YAAY,CAAC,EAAE,MAAM;IAIjC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,IAAI,cAAc;IA0BtB,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;CAIpC;AAID,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,cAAc,GACpB,SAAS,GAAG,SAAS,CAqCvB;AAiBD,wBAAgB,gBAAgB,IAAI,YAAY,CAK/C;AAID,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,GAAG,eAAe,CAK1F;AAED;;;;;;;;GAQG;AACH,qBAAa,0BAA2B,YAAW,sBAAsB;IAK3D,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,OAAO,CAAC,CAAkB;gBAEL,OAAO,EAAE,uBAAuB;IAEvD,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAQ/B,OAAO,CAAC,WAAW;YAOL,IAAI;IAyElB,OAAO,CAAC,QAAQ;CAKjB;AAID,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,oBAAoB,CAAC,EAAE,OAAO,oBAAoB,CAAC;IACnD,mBAAmB,CAAC,EAAE,OAAO,mBAAmB,CAAC;CAClD;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,oBAAoB,GACzB,0BAA0B,CAgB5B;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,CAexC;AAED,6CAA6C;AAC7C,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,oBAAoB,GACzB,eAAe,CAoBjB;AAED,UAAU,KAAK;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,qBAAa,cAAe,YAAW,eAAe;IAElD,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,KAAK,EAAE;IAGlC,IAAI,IAAI,UAAU;IAIZ,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM;IAgB1B,IAAI;;;;;IAgBJ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAO7B;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,oBAAoB,GACzB,cAAc,CA8DhB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,oBAAoB,GACzB,eAAe,CAIjB;AAID,wBAAgB,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAI/D;AAED,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAMtE"}