trellis 2.1.7 → 3.0.2

package/dist/server/index.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Trellis Server — Public API Surface
+ *
+ * HTTP+WebSocket server, auth, permissions, multi-tenancy, and deployment.
+ * Import from `trellis/server`:
+ *
+ *   import { startServer } from 'trellis/server';
+ *
+ * @module trellis/server
+ */
+export { startServer } from './server.js';
+export type { ServerConfig } from './server.js';
+export { resolveAuth, signJwt, verifyJwt, buildOAuthUrl, exchangeOAuthCode, GOOGLE_PROVIDER, GITHUB_PROVIDER, ANONYMOUS, } from './auth.js';
+export type { AuthContext, AuthConfig, OAuthProvider } from './auth.js';
+export { PermissionRegistry, PermissionError, PUBLIC_READ, FULLY_PUBLIC, OWNER_ONLY, ADMIN_ONLY, } from './permissions.js';
+export type { PermissionRule, PermissionsDef, CrudOp } from './permissions.js';
+export { TenantPool, DEFAULT_TENANT } from './tenancy.js';
+export { SubscriptionManager } from './realtime.js';
+export type { Subscription as RealtimeSubscription, WsClient, } from './realtime.js';
+export { importFile, importRecords } from './import.js';
+export type { ImportOptions, ImportResult } from './import.js';
+export { deploy } from './deploy.js';
+export type { DeployOptions, DeployResult } from './deploy.js';
+export { runSpriteCmd, runSpriteCopy, runSpriteInteractive, assertSpriteCli, resolveSprite, } from './sprites.js';
+export { loadVmConfig, saveVmConfig, getActiveSprite, setActiveSprite, trackSprite, untrackSprite, isSpriteTracked, getSprite, VmConfig, } from './vm-config.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,OAAO,EACL,WAAW,EACX,OAAO,EACP,SAAS,EACT,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,SAAS,GACV,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAGxE,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,WAAW,EACX,YAAY,EACZ,UAAU,EACV,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG/E,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EACV,YAAY,IAAI,oBAAoB,EACpC,QAAQ,GACT,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACxD,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG/D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG/D,OAAO,EACL,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,aAAa,GACd,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,WAAW,EACX,aAAa,EACb,eAAe,EACf,SAAS,EACT,QAAQ,GACT,MAAM,gBAAgB,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,90 @@
+// @bun
+import"../index-c9h37r6h.js";
+import {
+  importFile,
+  importRecords
+} from "../index-skhn0agf.js";
+import {
+  deploy
+} from "../index-wt8rz4gn.js";
+import {
+  getActiveSprite,
+  getSprite,
+  isSpriteTracked,
+  loadVmConfig,
+  saveVmConfig,
+  setActiveSprite,
+  trackSprite,
+  untrackSprite
+} from "../index-bmyt7k8n.js";
+import {
+  assertSpriteCli,
+  resolveSprite,
+  runSpriteCmd,
+  runSpriteCopy,
+  runSpriteInteractive
+} from "../index-y6a4kj0p.js";
+import {
+  ADMIN_ONLY,
+  ANONYMOUS,
+  FULLY_PUBLIC,
+  GITHUB_PROVIDER,
+  GOOGLE_PROVIDER,
+  OWNER_ONLY,
+  PUBLIC_READ,
+  PermissionError,
+  PermissionRegistry,
+  SubscriptionManager,
+  buildOAuthUrl,
+  exchangeOAuthCode,
+  resolveAuth,
+  signJwt,
+  startServer,
+  verifyJwt
+} from "../index-6n5dcebj.js";
+import"../index-n9f2qyh5.js";
+import"../index-xzym9w0m.js";
+import {
+  DEFAULT_TENANT,
+  TenantPool
+} from "../index-y3d71wzd.js";
+import"../index-0zk3fx2s.js";
+import"../index-yhwjgfvj.js";
+import"../index-yp88he8n.js";
+import"../index-a76rekgs.js";
+export {
+  verifyJwt,
+  untrackSprite,
+  trackSprite,
+  startServer,
+  signJwt,
+  setActiveSprite,
+  saveVmConfig,
+  runSpriteInteractive,
+  runSpriteCopy,
+  runSpriteCmd,
+  resolveSprite,
+  resolveAuth,
+  loadVmConfig,
+  isSpriteTracked,
+  importRecords,
+  importFile,
+  getSprite,
+  getActiveSprite,
+  exchangeOAuthCode,
+  deploy,
+  buildOAuthUrl,
+  assertSpriteCli,
+  TenantPool,
+  SubscriptionManager,
+  PermissionRegistry,
+  PermissionError,
+  PUBLIC_READ,
+  OWNER_ONLY,
+  GOOGLE_PROVIDER,
+  GITHUB_PROVIDER,
+  FULLY_PUBLIC,
+  DEFAULT_TENANT,
+  ANONYMOUS,
+  ADMIN_ONLY
+};

package/dist/server/permissions.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Trellis Server — Permission Middleware
+ *
+ * Entity-level access control declared in ontology schemas.
+ *
+ * Permission rules are defined per entity type in `EntityDef.permissions`.
+ * Rules are evaluated at the middleware layer before any mutation or query
+ * reaches the kernel.
+ *
+ * @module trellis/server
+ */
+import type { AuthContext } from './auth.js';
+import type { EntityRecord } from '../core/kernel/trellis-kernel.js';
+/** A permission rule for a CRUD operation on an entity type. */
+export type PermissionRule = 'public' | 'authenticated' | 'own' | {
+    role: string;
+} | {
+    roles: string[];
+} | {
+    fn: (auth: AuthContext, entity: EntityRecord | null) => boolean;
+};
+/** Per-operation permission rules for an entity type. */
+export interface PermissionsDef {
+    read?: PermissionRule;
+    create?: PermissionRule;
+    update?: PermissionRule;
+    delete?: PermissionRule;
+}
+/** Extended EntityDef that includes optional permissions. */
+export interface EntityDefWithPermissions {
+    name: string;
+    permissions?: PermissionsDef;
+}
+/** Operation types checked against permissions. */
+export type CrudOp = 'read' | 'create' | 'update' | 'delete';
+/**
+ * Registry mapping entity type names to their permission definitions.
+ * Populated at server startup from ontology schemas.
+ */
+export declare class PermissionRegistry {
+    private rules;
+    private defaultRule;
+    /**
+     * Register permissions for an entity type.
+     */
+    register(entityType: string, permissions: PermissionsDef): void;
+    /**
+     * Set the fallback rule used when an entity type has no declared permissions.
+     */
+    setDefault(rule: PermissionRule): void;
+    /**
+     * Get the permission rule for a specific operation on an entity type.
+     * Falls back to the default rule if not declared.
+     */
+    getRule(entityType: string, op: CrudOp): PermissionRule;
+    /**
+     * Check whether an auth context is allowed to perform an operation.
+     */
+    check(auth: AuthContext, entityType: string, op: CrudOp, entity?: EntityRecord | null): boolean;
+    /**
+     * Assert access — throws a PermissionError if denied.
+     */
+    assert(auth: AuthContext, entityType: string, op: CrudOp, entity?: EntityRecord | null): void;
+}
+export declare class PermissionError extends Error {
+    auth: AuthContext;
+    entityType: string;
+    op: CrudOp;
+    constructor(auth: AuthContext, entityType: string, op: CrudOp);
+    toResponse(): {
+        error: string;
+        message: string;
+        code: number;
+    };
+}
+/** Common preset: read-public, write-authenticated */
+export declare const PUBLIC_READ: PermissionsDef;
+/** Common preset: full public access */
+export declare const FULLY_PUBLIC: PermissionsDef;
+/** Common preset: owner-only CRUD */
+export declare const OWNER_ONLY: PermissionsDef;
+/** Common preset: admin-only */
+export declare const ADMIN_ONLY: PermissionsDef;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/server/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/server/permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAMrE,gEAAgE;AAChE,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,eAAe,GACf,KAAK,GACL;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GACnB;IAAE,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,GAAG,IAAI,KAAK,OAAO,CAAA;CAAE,CAAC;AAExE,yDAAyD;AACzD,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,6DAA6D;AAC7D,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,cAAc,CAAC;CAC9B;AAED,mDAAmD;AACnD,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAM7D;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,KAAK,CAA0C;IACvD,OAAO,CAAC,WAAW,CAAmC;IAEtD;;OAEG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,GAAG,IAAI;IAI/D;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAItC;;;OAGG;IACH,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,cAAc;IAKvD;;OAEG;IACH,KAAK,CACH,IAAI,EAAE,WAAW,EACjB,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,MAAM,GAAE,YAAY,GAAG,IAAW,GACjC,OAAO;IAKV;;OAEG;IACH,MAAM,CACJ,IAAI,EAAE,WAAW,EACjB,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM,EACV,MAAM,GAAE,YAAY,GAAG,IAAW,GACjC,IAAI;CAKR;AAkDD,qBAAa,eAAgB,SAAQ,KAAK;IAE/B,IAAI,EAAE,WAAW;IACjB,UAAU,EAAE,MAAM;IAClB,EAAE,EAAE,MAAM;gBAFV,IAAI,EAAE,WAAW,EACjB,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,MAAM;IAOnB,UAAU;;;;;CAOX;AAMD,sDAAsD;AACtD,eAAO,MAAM,WAAW,EAAE,cAKzB,CAAC;AAEF,wCAAwC;AACxC,eAAO,MAAM,YAAY,EAAE,cAK1B,CAAC;AAEF,qCAAqC;AACrC,eAAO,MAAM,UAAU,EAAE,cAKxB,CAAC;AAEF,gCAAgC;AAChC,eAAO,MAAM,UAAU,EAAE,cAKxB,CAAC"}

package/dist/server/realtime.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Trellis Server — Realtime Subscription Engine
+ *
+ * InstantDB-style reactive queries over WebSocket.
+ *
+ * Clients subscribe to an EQL-S query string. When any op lands that touches
+ * an entity type in that query's result set, the server re-runs the query
+ * and pushes the full updated result (plus a diff) to subscribed clients.
+ *
+ * Protocol (JSON over WebSocket):
+ *
+ *   Client → Server:
+ *     { type: "subscribe",   id: "sub_1", query: "find Post where ...", tenantId?: "t1" }
+ *     { type: "unsubscribe", id: "sub_1" }
+ *     { type: "ping" }
+ *
+ *   Server → Client:
+ *     { type: "subscribed",  id: "sub_1" }
+ *     { type: "data",        id: "sub_1", result: [...], diff: { added, updated, removed } }
+ *     { type: "error",       id: "sub_1", message: "..." }
+ *     { type: "pong" }
+ *
+ * @module trellis/server
+ */
+import type { TenantPool } from './tenancy.js';
+import type { AuthContext } from './auth.js';
+import type { PermissionRegistry } from './permissions.js';
+export interface Subscription {
+    id: string;
+    query: string;
+    tenantId: string | null;
+    auth: AuthContext;
+    lastResult: Record<string, unknown>[];
+}
+export interface WsClient {
+    id: string;
+    ws: {
+        send(data: string): void;
+        readyState: number;
+    };
+    subscriptions: Map<string, Subscription>;
+    auth: AuthContext;
+    tenantId: string | null;
+}
+export type RealtimeMessage = {
+    type: 'subscribe';
+    id: string;
+    query: string;
+    tenantId?: string;
+} | {
+    type: 'unsubscribe';
+    id: string;
+} | {
+    type: 'ping';
+};
+/**
+ * Manages WebSocket clients and their query subscriptions.
+ * Call `notify(tenantId)` after any mutation to fan out updates.
+ */
+export declare class SubscriptionManager {
+    private clients;
+    private pool;
+    private permissions;
+    constructor(pool: TenantPool, permissions?: PermissionRegistry | null);
+    addClient(clientId: string, ws: WsClient['ws'], auth: AuthContext, tenantId: string | null): void;
+    removeClient(clientId: string): void;
+    handleMessage(clientId: string, raw: string): Promise<void>;
+    /**
+     * Re-evaluate all subscriptions for a given tenant and push diffs.
+     * Called after every write op lands.
+     */
+    notify(tenantId: string | null): Promise<void>;
+    get clientCount(): number;
+    private _handleSubscribe;
+    private _pushUpdate;
+    private _send;
+}
+//# sourceMappingURL=realtime.d.ts.map

package/dist/server/realtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../../src/server/realtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAM3D,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE;QAAE,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAMrB;;;GAGG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,IAAI,CAAa;IACzB,OAAO,CAAC,WAAW,CAA4B;gBAEnC,IAAI,EAAE,UAAU,EAAE,WAAW,GAAE,kBAAkB,GAAG,IAAW;IAS3E,SAAS,CACP,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,EAClB,IAAI,EAAE,WAAW,EACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,IAAI;IAUP,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQ9B,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgCjE;;;OAGG;IACG,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBpD,IAAI,WAAW,IAAI,MAAM,CAExB;YAMa,gBAAgB;YAqDhB,WAAW;IAsBzB,OAAO,CAAC,KAAK;CAOd"}

package/dist/server/server.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Trellis Server — HTTP + WebSocket Server
+ *
+ * Bun-native server (no Express) exposing REST + realtime endpoints.
+ *
+ * REST:
+ *   POST   /entities                   Create entity
+ *   GET    /entities/:id               Read entity
+ *   PUT    /entities/:id               Update entity attributes
+ *   DELETE /entities/:id               Delete entity
+ *   GET    /entities?type=&limit=&offset=  List entities
+ *   POST   /query                      EQL-S query
+ *   POST   /upload                     File upload → blob hash
+ *   GET    /files/:hash                Download blob
+ *   GET    /health                     Health check
+ *
+ * Auth:
+ *   POST   /auth/login                 Email+password → JWT
+ *   POST   /auth/register              Create user → JWT
+ *   GET    /auth/oauth/:provider       OAuth redirect
+ *   GET    /auth/oauth/:provider/callback  OAuth callback → JWT
+ *
+ * WebSocket:
+ *   GET    /realtime                   Upgrade to WebSocket for subscriptions
+ *
+ * @module trellis/server
+ */
+import type { TrellisDbConfig } from '../client/config.js';
+import type { TenantPool } from './tenancy.js';
+import type { PermissionRegistry } from './permissions.js';
+export interface ServerConfig {
+    port?: number;
+    config: TrellisDbConfig;
+    pool: TenantPool;
+    permissions?: PermissionRegistry;
+    oauthProviders?: Record<string, import('./auth.js').OAuthProvider>;
+}
+/**
+ * Start the Trellis DB HTTP + WebSocket server.
+ * Returns the Bun server instance.
+ */
+export declare function startServer(opts: ServerConfig): ReturnType<typeof Bun.serve>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAOH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAU/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAQ3D,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,WAAW,EAAE,aAAa,CAAC,CAAC;CACpE;AAMD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,UAAU,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,CAqF5E"}

package/dist/server/sprites.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Sprites CLI helpers
+ *
+ * Wrapper functions for interacting with the Sprites VM platform CLI.
+ */
+/**
+ * Run a sprite command and capture output.
+ */
+export declare function runSpriteCmd(args: string[]): Promise<string>;
+/**
+ * Copy a file to/from a sprite using sprite cp.
+ */
+export declare function runSpriteCopy(localPath: string, spriteName: string, remotePath: string): Promise<void>;
+/**
+ * Run a sprite command with inherited stdio (for interactive commands).
+ */
+export declare function runSpriteInteractive(args: string[]): Promise<void>;
+/**
+ * Assert that the sprite CLI is available and authenticated.
+ */
+export declare function assertSpriteCli(): Promise<void>;
+/**
+ * Resolve a sprite name from explicit flag, active VM config, or error.
+ */
+export declare function resolveSprite(explicitName?: string): string;
+//# sourceMappingURL=sprites.d.ts.map

package/dist/server/sprites.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sprites.d.ts","sourceRoot":"","sources":["../../src/server/sprites.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;GAEG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAYlE;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;GAEG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxE;AAED;;GAEG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAMrD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAS3D"}

package/dist/server/tenancy.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Trellis Server — Multi-Tenant Kernel Pool
+ *
+ * Manages a pool of `TrellisKernel` instances, one per tenant.
+ * Each tenant gets an isolated SQLite database file in `<dbPath>/tenants/<tenantId>.sqlite`.
+ *
+ * The default tenant uses `<dbPath>/default.sqlite`.
+ *
+ * @module trellis/server
+ */
+import { TrellisKernel } from '../core/kernel/trellis-kernel.js';
+export declare const DEFAULT_TENANT = "default";
+/**
+ * A pool of `TrellisKernel` instances keyed by tenant ID.
+ *
+ * - Kernels are lazily created on first access.
+ * - Each tenant's data lives in `<dbPath>/tenants/<tenantId>.sqlite`.
+ * - The default tenant lives at `<dbPath>/default.sqlite`.
+ */
+export declare class TenantPool {
+    private pool;
+    private dbPath;
+    private agentId;
+    constructor(dbPath: string, agentId?: string);
+    /**
+     * Get (or create) the kernel for a tenant.
+     * Pass `null` or `undefined` to get the default tenant.
+     */
+    get(tenantId?: string | null): TrellisKernel;
+    /**
+     * Check whether a tenant has been initialized (kernel created).
+     */
+    has(tenantId: string): boolean;
+    /**
+     * List all active tenant IDs (those with open kernels).
+     */
+    activeTenants(): string[];
+    /**
+     * Close a specific tenant's kernel and remove it from the pool.
+     */
+    close(tenantId: string): void;
+    /**
+     * Close all kernels and clear the pool.
+     */
+    closeAll(): void;
+    /**
+     * Return the SQLite file path for a given tenant.
+     */
+    dbFilePath(tenantId?: string | null): string;
+    private _createKernel;
+    private _ensureDirs;
+}
+//# sourceMappingURL=tenancy.d.ts.map

package/dist/server/tenancy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenancy.d.ts","sourceRoot":"","sources":["../../src/server/tenancy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAOjE,eAAO,MAAM,cAAc,YAAY,CAAC;AAOxC;;;;;;GAMG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,IAAI,CAAyC;IACrD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;gBAEZ,MAAM,EAAE,MAAM,EAAE,OAAO,SAAe;IAUlD;;;OAGG;IACH,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa;IAQ5C;;OAEG;IACH,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI9B;;OAEG;IACH,aAAa,IAAI,MAAM,EAAE;IAIzB;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQ7B;;OAEG;IACH,QAAQ,IAAI,IAAI;IAOhB;;OAEG;IACH,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM;IAY5C,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,WAAW;CASpB"}

package/dist/server/vm-config.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Global VM Configuration
+ *
+ * Manages persistent VM configuration stored at ~/.trellis/vm.json.
+ * Tracks active sprite and sprite metadata for the trellis vm commands.
+ */
+/**
+ * VM configuration interface.
+ */
+export interface VmConfig {
+    activeSprite: string | null;
+    sprites: Record<string, {
+        name: string;
+        createdAt: string;
+        url: string;
+        hasTrellis: boolean;
+        apiKey?: string;
+        lastCheckpoint?: string;
+        linkedMilestone?: string;
+    }>;
+}
+/**
+ * Load the VM configuration, or return default if not yet created.
+ */
+export declare function loadVmConfig(): VmConfig;
+/**
+ * Save (or overwrite) the VM configuration.
+ */
+export declare function saveVmConfig(config: VmConfig): void;
+/**
+ * Get the currently active sprite name.
+ */
+export declare function getActiveSprite(): string | null;
+/**
+ * Set the active sprite name.
+ */
+export declare function setActiveSprite(spriteName: string): void;
+/**
+ * Track a sprite in the VM config (called after creation/deploy).
+ */
+export declare function trackSprite(spriteName: string, opts?: {
+    url?: string;
+    hasTrellis?: boolean;
+    apiKey?: string;
+    lastCheckpoint?: string;
+    linkedMilestone?: string;
+}): void;
+/**
+ * Untrack a sprite (called after destruction).
+ */
+export declare function untrackSprite(spriteName: string): void;
+/**
+ * Check if a sprite is being tracked.
+ */
+export declare function isSpriteTracked(spriteName: string): boolean;
+/**
+ * Get sprite metadata by name.
+ */
+export declare function getSprite(spriteName: string): VmConfig['sprites'][string] | null;
+//# sourceMappingURL=vm-config.d.ts.map

package/dist/server/vm-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-config.d.ts","sourceRoot":"","sources":["../../src/server/vm-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,CACb,MAAM,EACN;QACE,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CACF,CAAC;CACH;AAgBD;;GAEG;AACH,wBAAgB,YAAY,IAAI,QAAQ,CAkBvC;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,CAMnD;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,GAAG,IAAI,CAG/C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAaxD;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IACJ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;CACrB,GACL,IAAI,CAsBN;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAUtD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAG3D;AAED;;GAEG;AACH,wBAAgB,SAAS,CACvB,UAAU,EAAE,MAAM,GACjB,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAGpC"}

package/dist/server-mrctdwzr.js

@@ -0,0 +1,11 @@
+// @bun
+import {
+  startServer
+} from "./index-6n5dcebj.js";
+import"./index-n9f2qyh5.js";
+import"./index-yhwjgfvj.js";
+import"./index-yp88he8n.js";
+import"./index-a76rekgs.js";
+export {
+  startServer
+};

package/dist/sprites-vc4qbrp1.js

@@ -0,0 +1,16 @@
+// @bun
+import {
+  assertSpriteCli,
+  resolveSprite,
+  runSpriteCmd,
+  runSpriteCopy,
+  runSpriteInteractive
+} from "./index-y6a4kj0p.js";
+import"./index-a76rekgs.js";
+export {
+  runSpriteInteractive,
+  runSpriteCopy,
+  runSpriteCmd,
+  resolveSprite,
+  assertSpriteCli
+};

package/dist/streaming/types.d.ts

@@ -0,0 +1,43 @@
+/**
+ * AI Agent Streaming Types
+ *
+ * SSE-friendly event structures for streaming thoughts, tool calls, and final responses.
+ */
+export type AgentEventKind = 'thought' | 'tool_call' | 'tool_output' | 'final_response' | 'error';
+export interface AgentEvent {
+    kind: AgentEventKind;
+    payload: unknown;
+    timestamp: string;
+}
+export interface ThoughtEvent extends AgentEvent {
+    kind: 'thought';
+    payload: {
+        content: string;
+    };
+}
+export interface ToolCallEvent extends AgentEvent {
+    kind: 'tool_call';
+    payload: {
+        toolId: string;
+        input: Record<string, unknown>;
+    };
+}
+export interface ToolOutputEvent extends AgentEvent {
+    kind: 'tool_output';
+    payload: {
+        toolId: string;
+        output: unknown;
+        success: boolean;
+    };
+}
+export interface FinalResponseEvent extends AgentEvent {
+    kind: 'final_response';
+    payload: {
+        content: string;
+    };
+}
+export interface AgentStreamer {
+    emit(runId: string, event: AgentEvent): void;
+    subscribe(runId: string, callback: (event: AgentEvent) => void): void;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/streaming/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/streaming/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,aAAa,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAElG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAa,SAAQ,UAAU;IAC9C,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,CAAC;CACH;AAED,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,kBAAmB,SAAQ,UAAU;IACpD,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE;QACP,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,aAAa;IAE5B,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAE7C,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,IAAI,CAAC;CACvE"}

package/dist/sync/http-transport.d.ts

@@ -0,0 +1,47 @@
+/**
+ * HTTP Sync Transport
+ *
+ * Implements SyncTransport over HTTP for network-based peer sync.
+ * Uses a simple JSON REST protocol:
+ *   POST /sync/message — send a sync message
+ *   GET  /sync/peers   — list connected peers
+ *
+ * The server side is a lightweight Bun HTTP server.
+ * The client side uses fetch() for outbound messages.
+ *
+ * @module trellis/sync
+ */
+import type { SyncTransport, SyncMessage, PeerId } from './types.js';
+export declare class HttpSyncTransport implements SyncTransport {
+    private localPeerId;
+    private peerUrls;
+    private messageHandler;
+    private knownPeers;
+    constructor(localPeerId: string);
+    /**
+     * Add a remote peer by URL (e.g. "http://192.168.1.10:4200").
+     */
+    addPeer(peerId: string, url: string, name?: string): void;
+    /**
+     * Remove a remote peer.
+     */
+    removePeer(peerId: string): void;
+    send(peerId: string, message: SyncMessage): Promise<void>;
+    onMessage(handler: (message: SyncMessage) => void): void;
+    /**
+     * Receive a message (called by the HTTP server handler).
+     */
+    receiveMessage(message: SyncMessage): void;
+    peers(): PeerId[];
+    getLocalPeerId(): string;
+}
+export interface HttpSyncServerConfig {
+    port: number;
+    transport: HttpSyncTransport;
+}
+/**
+ * Create a Bun-compatible HTTP request handler for sync messages.
+ * Can be used with Bun.serve() or as middleware.
+ */
+export declare function createSyncHandler(transport: HttpSyncTransport): (req: Request) => Response | null;
+//# sourceMappingURL=http-transport.d.ts.map

package/dist/sync/http-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-transport.d.ts","sourceRoot":"","sources":["../../src/sync/http-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAMrE,qBAAa,iBAAkB,YAAW,aAAa;IACrD,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,cAAc,CAA6C;IACnE,OAAO,CAAC,UAAU,CAAkC;gBAExC,WAAW,EAAE,MAAM;IAI/B;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI;IASzD;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAK1B,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAwB/D,SAAS,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI;IAIxD;;OAEG;IACH,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI;IAa1C,KAAK,IAAI,MAAM,EAAE;IAIjB,cAAc,IAAI,MAAM;CAGzB;AAMD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,iBAAiB,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,iBAAiB,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CA2BjG"}

package/dist/sync/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Sync Module — Public Surface
+ *
+ * @module sync
+ *
+ * Re-exports the CRDT {@link reconcile|reconciler}, {@link SyncEngine} for
+ * the have→want→ops→ack protocol, and {@link MemoryTransport} for testing.
+ * Branch policies control whether sync uses linear (fast-forward) or
+ * CRDT (concurrent append) mode.
+ *
+ * @see DESIGN.md §3.5 for the branch concurrency model.
+ */
+export type { PeerId, SyncMessage, SyncHaveMessage, SyncWantMessage, SyncOpsMessage, SyncAckMessage, SyncState, BranchPolicy, SyncTransport, } from './types.js';
+export { reconcile, findForkPoint } from './reconciler.js';
+export type { ReconcileResult, ReconcileConflict } from './reconciler.js';
+export { SyncEngine } from './sync-engine.js';
+export { MemoryTransport } from './memory-transport.js';
+export { HttpSyncTransport, createSyncHandler } from './http-transport.js';
+export { WebSocketSyncTransport } from './ws-transport.js';
+export { MultiRepoManager, parseCrossRepoRef, formatCrossRepoRef, } from './multi-repo.js';
+export type { LinkedRepo, CrossRepoRef } from './multi-repo.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/sync/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sync/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,YAAY,EACV,MAAM,EACN,WAAW,EACX,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,EACd,SAAS,EACT,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3D,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC"}