uxnan-bridge 0.0.1-alpha.20260621

package/dist/src/handlers/thread-context-handler.js

@@ -0,0 +1,211 @@
+/**
+ * Thread/turn JSON-RPC handlers — conversation CRUD backed by the
+ * {@link ThreadStore}, with `turn/send` driving the {@link AgentManager}.
+ * Streaming output reaches the phone via `stream/*` notifications.
+ *
+ * Source: architecture/02a-system-architecture.md §5.8.8.
+ */
+import { RpcError } from '@uxnan/shared';
+import { optionalBoolean, optionalNumber, optionalString, requireString } from './params.js';
+export function registerThreadHandlers(router) {
+    router.register('thread/list', (p, ctx) => ctx.threadStore.listThreads(optionalString(p, 'projectId')));
+    router.register('thread/read', (p, ctx) => ctx.threadStore.getThread(requireString(p, 'threadId')));
+    router.register('thread/start', (p, ctx) => {
+        const projectId = requireString(p, 'projectId');
+        // The phone provides the cwd (e.g. a folder-browser directory, which
+        // `project/resolve` SYNTHESIZES into a project that is NOT in
+        // workspaceRoots). Use that cwd directly; only resolve the project by id to
+        // get a cwd fallback when none is given — otherwise a browsed folder failed
+        // `byId` with "unknown project", and the thread was never created.
+        const cwd = optionalString(p, 'cwd') ?? ctx.projects.byId(projectId).cwd;
+        // Per-project pin: when the phone omits agent/model, fall back to the
+        // project's configured agent (then the bridge's global default). The pinned
+        // model only applies when the resolved agent IS the pinned one, so we never
+        // force one agent's model onto a thread the phone steered to another agent.
+        const pin = ctx.projects.agentConfigFor(cwd);
+        const explicitAgent = optionalString(p, 'agentId');
+        const agentId = explicitAgent ?? pin?.agentId ?? ctx.agentManager.defaultAgent;
+        const explicitModel = optionalString(p, 'model');
+        const model = explicitModel ?? (pin && agentId === pin.agentId ? pin.model : undefined);
+        return ctx.threadStore.startThread({
+            projectId,
+            ...(optionalString(p, 'title') !== undefined ? { title: optionalString(p, 'title') } : {}),
+            agentId,
+            ...(model !== undefined ? { model } : {}),
+            cwd,
+        }, ctx.now());
+    });
+    router.register('thread/resume', (p, ctx) => ctx.threadStore.resumeThread(requireString(p, 'threadId'), ctx.now()));
+    router.register('thread/fork', (p, ctx) => ctx.threadStore.forkThread(requireString(p, 'threadId'), ctx.now()));
+    router.register('thread/setModel', async (p, ctx) => {
+        await ctx.threadStore.setModel(requireString(p, 'threadId'), requireString(p, 'model'), ctx.now());
+        return null;
+    });
+    router.register('thread/rename', (p, ctx) => ctx.threadStore.renameThread(requireString(p, 'threadId'), requireString(p, 'title'), ctx.now()));
+    router.register('thread/setAccessMode', (p, ctx) => ctx.threadStore.setAccessMode(requireString(p, 'threadId'), parseAccessMode(requireString(p, 'mode')), ctx.now()));
+    router.register('thread/archive', (p, ctx) => ctx.threadStore.archiveThread(requireString(p, 'threadId'), ctx.now()));
+    router.register('thread/unarchive', (p, ctx) => ctx.threadStore.unarchiveThread(requireString(p, 'threadId'), ctx.now()));
+    router.register('thread/delete', async (p, ctx) => {
+        await ctx.threadStore.deleteThread(requireString(p, 'threadId'));
+        return null;
+    });
+    router.register('turn/list', async (p, ctx) => {
+        const threadId = requireString(p, 'threadId');
+        const cursor = optionalString(p, 'cursor');
+        const limit = optionalNumber(p, 'limit');
+        const fromEnd = optionalBoolean(p, 'fromEnd') ?? false;
+        const stored = await ctx.threadStore.listTurns(threadId, cursor, limit, fromEnd);
+        // Fallback (§5.8.8): when the store has nothing for this thread, read the
+        // agent's own on-disk session log so the phone can still show history (e.g.
+        // after the bridge missed the turns, or threads.json was lost).
+        if (stored.turns.length > 0 || stored.nextCursor)
+            return stored;
+        const source = await ctx.threadStore.getHistorySource(threadId);
+        const turns = await ctx.sessionHistory.readTurns(source, threadId);
+        if (!turns || turns.length === 0)
+            return stored;
+        return paginateTurns(turns, cursor, limit, fromEnd);
+    });
+    router.register('turn/read', (p, ctx) => ctx.threadStore.getTurn(requireString(p, 'turnId')));
+    router.register('turn/send', async (p, ctx) => {
+        const threadId = requireString(p, 'threadId');
+        // A `turn/send` may instead be a control-only reply to a pending approval:
+        // no new turn is created — the decision is routed to the agent adapter.
+        const approval = optionalApprovalResponse(p);
+        if (approval) {
+            return ctx.agentManager.respondApproval(threadId, approval.approvalId, approval.decision);
+        }
+        // `text` is OPTIONAL: an image-only message (empty text + attachments) is
+        // valid, so we no longer hard-require a non-empty string. Reject only when
+        // there is neither text nor an attachment to act on.
+        const text = optionalString(p, 'text') ?? '';
+        const attachments = optionalAttachments(p);
+        if (text.length === 0 && attachments.length === 0) {
+            throw RpcError.invalidParams('turn/send requires non-empty text or attachments');
+        }
+        const runtime = await ctx.threadStore.getThreadRuntime(threadId);
+        // A turn runs with the thread's agent/model/cwd; explicit params override.
+        const service = optionalString(p, 'service') ?? runtime.model;
+        const options = {
+            ...(runtime.agentId !== undefined ? { agentId: runtime.agentId } : {}),
+            ...(service !== undefined ? { service } : {}),
+            ...optionalEffort(p),
+            ...optionalRunOptions(p),
+            ...(attachments.length > 0 ? { attachments } : {}),
+            ...(runtime.cwd !== undefined ? { cwd: runtime.cwd } : {}),
+            // Apply the thread's persisted access mode to this turn (adapters map it
+            // to their permission flag; absent → the adapter's configured posture).
+            ...(runtime.accessMode !== undefined ? { accessMode: runtime.accessMode } : {}),
+        };
+        return ctx.agentManager.sendTurn(threadId, text, options);
+    });
+    router.register('turn/cancel', async (p, ctx) => {
+        await ctx.agentManager.cancelTurn(requireString(p, 'threadId'), requireString(p, 'turnId'));
+        return null;
+    });
+}
+/**
+ * Page a full turn list (from the on-disk history fallback) the same way the
+ * store does: numeric cursor offset + limit, with a `nextCursor` when more remain.
+ */
+const ACCESS_MODES = ['requestApproval', 'approveForMe', 'fullAccess'];
+/** Validates a wire `mode` string against the {@link AccessMode} union. */
+function parseAccessMode(mode) {
+    if (ACCESS_MODES.includes(mode))
+        return mode;
+    throw RpcError.invalidParams(`mode must be one of ${ACCESS_MODES.join(' | ')}`);
+}
+function paginateTurns(turns, cursor, limit, fromEnd = false) {
+    const total = turns.length;
+    const size = limit && limit > 0 ? limit : 20;
+    const start = fromEnd ? Math.max(0, total - size) : cursor ? Number.parseInt(cursor, 10) || 0 : 0;
+    const result = { turns: turns.slice(start, start + size), total };
+    if (start + size < total)
+        result.nextCursor = String(start + size);
+    return result;
+}
+function optionalEffort(params) {
+    const value = optionalString(params, 'effort');
+    return value === undefined ? {} : { effort: value };
+}
+const APPROVAL_DECISIONS = new Set(['approve', 'reject', 'approveSession']);
+/**
+ * Extracts the `approvalResponse` from `turn/send` params, or `undefined` when
+ * absent. Validates the shape (`approvalId` non-empty + a known `decision`) and
+ * throws `invalidParams` on a malformed one — an approval reply is control data,
+ * so a garbled one should surface rather than silently start a turn.
+ */
+function optionalApprovalResponse(params) {
+    if (!params || typeof params !== 'object')
+        return undefined;
+    const raw = params['approvalResponse'];
+    if (raw === undefined || raw === null)
+        return undefined;
+    if (typeof raw !== 'object') {
+        throw RpcError.invalidParams('approvalResponse must be an object');
+    }
+    const obj = raw;
+    const approvalId = obj['approvalId'];
+    const decision = obj['decision'];
+    if (typeof approvalId !== 'string' || approvalId.length === 0) {
+        throw RpcError.invalidParams('approvalResponse.approvalId must be a non-empty string');
+    }
+    if (typeof decision !== 'string' || !APPROVAL_DECISIONS.has(decision)) {
+        throw RpcError.invalidParams('approvalResponse.decision must be approve | reject | approveSession');
+    }
+    return { approvalId, decision: decision };
+}
+/**
+ * Extracts the inline `attachments` from `turn/send` params, keeping only
+ * well-formed image entries (a `mimeType` plus at least one of
+ * `base64Data`/`path`). Tolerant — malformed entries are dropped, never thrown,
+ * so an older/garbled client degrades to a text turn instead of an error.
+ */
+function optionalAttachments(params) {
+    if (!params || typeof params !== 'object')
+        return [];
+    const raw = params['attachments'];
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const item of raw) {
+        if (!item || typeof item !== 'object')
+            continue;
+        const obj = item;
+        const mimeType = typeof obj['mimeType'] === 'string' ? obj['mimeType'] : 'application/octet-stream';
+        const base64Data = typeof obj['base64Data'] === 'string' ? obj['base64Data'] : undefined;
+        const path = typeof obj['path'] === 'string' ? obj['path'] : undefined;
+        if (base64Data === undefined && path === undefined)
+            continue;
+        const att = { type: 'image', mimeType };
+        if (base64Data !== undefined)
+            att.base64Data = base64Data;
+        if (path !== undefined)
+            att.path = path;
+        if (typeof obj['width'] === 'number')
+            att.width = obj['width'];
+        if (typeof obj['height'] === 'number')
+            att.height = obj['height'];
+        out.push(att);
+    }
+    return out;
+}
+/**
+ * Extracts the per-model run-option values (`{ options: { key: value } }`) from
+ * `turn/send` params, keeping only string/boolean values (tolerant — unknown
+ * shapes are dropped, never thrown).
+ */
+function optionalRunOptions(params) {
+    if (!params || typeof params !== 'object')
+        return {};
+    const raw = params['options'];
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return {};
+    const out = {};
+    for (const [key, value] of Object.entries(raw)) {
+        if (typeof value === 'string' || typeof value === 'boolean')
+            out[key] = value;
+    }
+    return Object.keys(out).length > 0 ? { options: out } : {};
+}
+//# sourceMappingURL=thread-context-handler.js.map

package/dist/src/handlers/thread-context-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-context-handler.js","sourceRoot":"","sources":["../../../src/handlers/thread-context-handler.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAazC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE7F,MAAM,UAAU,sBAAsB,CAAC,MAAqB;IAC1D,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CACvD,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAC5D,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CACvD,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CACxD,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE;QACxD,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAChD,qEAAqE;QACrE,8DAA8D;QAC9D,4EAA4E;QAC5E,4EAA4E;QAC5E,mEAAmE;QACnE,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC;QACzE,sEAAsE;QACtE,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,aAAa,GAAG,cAAc,CAAC,CAAC,EAAE,SAAS,CAAwB,CAAC;QAC1E,MAAM,OAAO,GAAG,aAAa,IAAI,GAAG,EAAE,OAAO,IAAI,GAAG,CAAC,YAAY,CAAC,YAAY,CAAC;QAC/E,MAAM,aAAa,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,aAAa,IAAI,CAAC,GAAG,IAAI,OAAO,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxF,OAAO,GAAG,CAAC,WAAW,CAAC,WAAW,CAChC;YACE,SAAS;YACT,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,OAAO;YACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG;SACJ,EACD,GAAG,CAAC,GAAG,EAAE,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CACzD,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CACtE,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CACvD,GAAG,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CACpE,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,GAAkB,EAAE,EAAE;QACjE,MAAM,GAAG,CAAC,WAAW,CAAC,QAAQ,CAC5B,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,EAC5B,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,EACzB,GAAG,CAAC,GAAG,EAAE,CACV,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CACzD,GAAG,CAAC,WAAW,CAAC,YAAY,CAC1B,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,EAC5B,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,EACzB,GAAG,CAAC,GAAG,EAAE,CACV,CACF,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CAChE,GAAG,CAAC,WAAW,CAAC,aAAa,CAC3B,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,EAC5B,eAAe,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EACzC,GAAG,CAAC,GAAG,EAAE,CACV,CACF,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CAC1D,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CACvE,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CAC5D,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CACzE,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,GAAkB,EAAE,EAAE;QAC/D,MAAM,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,GAAkB,EAAE,EAAE;QAC3D,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QACjF,0EAA0E;QAC1E,4EAA4E;QAC5E,gEAAgE;QAChE,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAChD,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CACrD,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CACpD,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,GAAkB,EAAE,EAAE;QAC3D,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9C,2EAA2E;QAC3E,wEAAwE;QACxE,MAAM,QAAQ,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5F,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,qDAAqD;QACrD,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,QAAQ,CAAC,aAAa,CAAC,kDAAkD,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACjE,2EAA2E;QAC3E,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC;QAC9D,MAAM,OAAO,GAAoB;YAC/B,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,cAAc,CAAC,CAAC,CAAC;YACpB,GAAG,kBAAkB,CAAC,CAAC,CAAC;YACxB,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,yEAAyE;YACzE,wEAAwE;YACxE,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF,CAAC;QACF,OAAO,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,GAAkB,EAAE,EAAE;QAC7D,MAAM,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5F,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,YAAY,GAA0B,CAAC,iBAAiB,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;AAE9F,2EAA2E;AAC3E,SAAS,eAAe,CAAC,IAAY;IACnC,IAAK,YAAkC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAkB,CAAC;IAClF,MAAM,QAAQ,CAAC,aAAa,CAAC,uBAAuB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CACpB,KAAa,EACb,MAA0B,EAC1B,KAAyB,EACzB,OAAO,GAAG,KAAK;IAEf,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,MAAM,MAAM,GAAa,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;IAC5E,IAAI,KAAK,GAAG,IAAI,GAAG,KAAK;QAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,MAAe;IACrC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAE9F;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,MAAe;IAC/C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,GAAG,GAAI,MAAkC,CAAC,kBAAkB,CAAC,CAAC;IACpE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,QAAQ,CAAC,aAAa,CAAC,oCAAoC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IACjC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,QAAQ,CAAC,aAAa,CAAC,wDAAwD,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAA4B,CAAC,EAAE,CAAC;QAC1F,MAAM,QAAQ,CAAC,aAAa,CAC1B,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAA4B,EAAE,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,MAAe;IAC1C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,GAAG,GAAI,MAAkC,CAAC,aAAa,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,MAAM,QAAQ,GACZ,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;QACrF,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,IAAI,UAAU,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QAC7D,MAAM,GAAG,GAAmB,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;QACxD,IAAI,UAAU,KAAK,SAAS;YAAE,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;QAC1D,IAAI,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QACxC,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,MAAe;IAGzC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,GAAG,GAAI,MAAkC,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACrE,MAAM,GAAG,GAAqC,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC"}

package/dist/src/handlers/workspace-handler.d.ts

@@ -0,0 +1,2 @@
+import type { HandlerRouter } from '../handler-router.js';
+export declare function registerWorkspaceHandlers(router: HandlerRouter): void;

package/dist/src/handlers/workspace-handler.js

@@ -0,0 +1,101 @@
+/**
+ * Workspace JSON-RPC handlers — file reads, listing and patch application,
+ * confined to the project root with sensitive files excluded.
+ *
+ * Checkpoints (capture/diff/apply) are backed by {@link CheckpointService};
+ * `capture` prunes old checkpoints per the configured retention.
+ *
+ * Source: architecture/02a-system-architecture.md §5.8.7 / §5.8.9.
+ */
+import { JsonRpcErrorCode, RpcError, } from '@uxnan/shared';
+import { access, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+import { WorkspaceService } from '../workspace/workspace-service.js';
+import { CheckpointService } from '../workspace/checkpoint-service.js';
+import { GitCommandError } from '../git/git-runner.js';
+import { asObject, optionalString, requireArray, requireString } from './params.js';
+/** Map a git failure inside a checkpoint op to -32003 (RpcErrors pass through). */
+function checkpointOp(fn) {
+    return fn().catch((err) => {
+        if (err instanceof GitCommandError) {
+            throw new RpcError(JsonRpcErrorCode.GitOperationFailed, err.message, { stderr: err.stderr });
+        }
+        throw err;
+    });
+}
+/** A checkpoint service wired with the daemon's configured retention bounds. */
+function checkpoints(ctx) {
+    return new CheckpointService(ctx.state, {
+        maxPerProject: ctx.config.checkpointMaxPerProject,
+        ttlDays: ctx.config.checkpointTtlDays,
+    });
+}
+export function registerWorkspaceHandlers(router) {
+    const ws = new WorkspaceService();
+    router.register('workspace/readFile', (p) => ws.readFile(requireString(p, 'cwd'), requireString(p, 'path')));
+    router.register('workspace/readImage', (p) => ws.readImage(requireString(p, 'cwd'), requireString(p, 'path')));
+    router.register('workspace/list', (p) => ws.list(requireString(p, 'cwd')));
+    router.register('workspace/browseDirs', (p, ctx) => {
+        const params = p ?? {};
+        return ctx.browse.browse(optionalString(params, 'rootId'), optionalString(params, 'path'));
+    });
+    router.register('workspace/applyPatch', (p) => ws.applyPatch(requireString(p, 'cwd'), parseChanges(p)));
+    // Probe whether a thread's cwd still exists (folders/worktrees can be removed
+    // outside the app), so the phone can mark the thread unavailable. Never throws.
+    router.register('workspace/exists', (p) => workspaceExists(requireString(p, 'cwd')));
+    router.register('workspace/checkpoint', (p, ctx) => {
+        const cwd = requireString(p, 'cwd');
+        const options = {
+            now: ctx.now(),
+            ...optionalField(p, 'label'),
+            ...optionalThreadId(p),
+        };
+        return checkpointOp(() => checkpoints(ctx).capture(cwd, options));
+    });
+    router.register('workspace/diffCheckpoint', (p, ctx) => checkpointOp(() => checkpoints(ctx).diff(requireString(p, 'id'))));
+    router.register('workspace/applyCheckpoint', (p, ctx) => checkpointOp(() => checkpoints(ctx).apply(requireString(p, 'id'))));
+}
+/** Whether [cwd] is an existing directory, and (if so) whether it's a git repo/worktree. */
+async function workspaceExists(cwd) {
+    try {
+        const info = await stat(cwd);
+        if (!info.isDirectory())
+            return { exists: false };
+    }
+    catch {
+        return { exists: false };
+    }
+    // A regular repo has a `.git` directory; a worktree has a `.git` FILE — both
+    // are accessible, so this is true for either.
+    try {
+        await access(join(cwd, '.git'));
+        return { exists: true, isGitRepo: true };
+    }
+    catch {
+        return { exists: true, isGitRepo: false };
+    }
+}
+function optionalField(params, key) {
+    const value = optionalString(params, key);
+    return value === undefined ? {} : { label: value };
+}
+function optionalThreadId(params) {
+    const value = optionalString(params, 'threadId');
+    return value === undefined ? {} : { threadId: value };
+}
+function parseChanges(params) {
+    return requireArray(params, 'changes').map((raw, index) => {
+        const item = asObject(raw);
+        const op = item['op'];
+        if (op !== 'add' && op !== 'modify' && op !== 'delete') {
+            throw RpcError.invalidParams(`changes[${index}].op must be add|modify|delete`);
+        }
+        const path = requireString(item, 'path');
+        const content = optionalString(item, 'content');
+        const change = { op, path };
+        if (content !== undefined)
+            change.content = content;
+        return change;
+    });
+}
+//# sourceMappingURL=workspace-handler.js.map

package/dist/src/handlers/workspace-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-handler.js","sourceRoot":"","sources":["../../../src/handlers/workspace-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,gBAAgB,EAChB,QAAQ,GAGT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAuB,MAAM,oCAAoC,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEpF,mFAAmF;AACnF,SAAS,YAAY,CAAI,EAAoB;IAC3C,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACjC,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,SAAS,WAAW,CAAC,GAAkB;IACrC,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE;QACtC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,uBAAuB;QACjD,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,iBAAiB;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAqB;IAC7D,MAAM,EAAE,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAElC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC1C,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAC/D,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3C,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAChE,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE;QAChE,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,EAAE,CAC5C,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CACxD,CAAC;IACF,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAErF,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE;QAChE,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,OAAO,GAAmB;YAC9B,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;YACd,GAAG,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC;YAC5B,GAAG,gBAAgB,CAAC,CAAC,CAAC;SACvB,CAAC;QACF,OAAO,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CACpE,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAClE,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,CAAC,CAAC,EAAE,GAAkB,EAAE,EAAE,CACrE,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IACD,6EAA6E;IAC7E,8CAA8C;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAChC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAe,EAAE,GAAY;IAClD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC1C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAe;IACvC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACnC,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,QAAQ,CAAC,aAAa,CAAC,WAAW,KAAK,gCAAgC,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAChD,MAAM,MAAM,GAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACpD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/hooks/claude-approval-hook.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Writes the hook script to [scriptPath] (creating its directory) and returns
+ * the path. Idempotent — overwrites each call so an updated bridge ships a fresh
+ * hook. Best-effort caller should handle write failures.
+ */
+export declare function writeClaudeApprovalHook(scriptPath: string): Promise<string>;
+export declare const CLAUDE_APPROVAL_HOOK_SCRIPT: string;

package/dist/src/hooks/claude-approval-hook.js

@@ -0,0 +1,95 @@
+/**
+ * Claude Code PreToolUse approval hook.
+ *
+ * Headless `claude -p` has no interactive-approval channel (validated against
+ * claude 2.1.177), but a **PreToolUse hook** injected via `--settings` DOES gate
+ * every tool in print mode. This module ships that hook as a standalone CommonJS
+ * script: the Claude adapter writes it to `~/.uxnan/hooks/` and references its
+ * path in the `--settings` it passes per turn.
+ *
+ * The hook reads the PreToolUse payload (`{ tool_name, tool_input, ... }`) on
+ * stdin, POSTs it to the bridge's `POST /agent-hook/approval` endpoint (URL +
+ * token + threadId from env the adapter injects), and the bridge HOLDS the
+ * response until the phone answers (`turn/send { approvalResponse }`). The hook
+ * then prints the permission decision Claude consumes:
+ *   { hookSpecificOutput: { hookEventName, permissionDecision: 'allow'|'deny', … } }
+ *
+ * Fail-safe: any error (bad URL, unreachable bridge, malformed response) → deny.
+ * The script is dependency-free (only `node:http`/`node:url`).
+ */
+import { mkdir, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+/**
+ * Writes the hook script to [scriptPath] (creating its directory) and returns
+ * the path. Idempotent — overwrites each call so an updated bridge ships a fresh
+ * hook. Best-effort caller should handle write failures.
+ */
+export async function writeClaudeApprovalHook(scriptPath) {
+    await mkdir(dirname(scriptPath), { recursive: true });
+    await writeFile(scriptPath, CLAUDE_APPROVAL_HOOK_SCRIPT, 'utf-8');
+    return scriptPath;
+}
+export const CLAUDE_APPROVAL_HOOK_SCRIPT = String.raw `'use strict';
+const http = require('node:http');
+let data = '';
+process.stdin.on('data', (c) => (data += c));
+process.stdin.on('end', () => {
+  let payload = {};
+  try { payload = JSON.parse(data || '{}'); } catch (e) {}
+  const url = process.env.UXNAN_HOOK_URL;
+  const token = process.env.UXNAN_HOOK_TOKEN || '';
+  const threadId = process.env.UXNAN_HOOK_THREAD_ID || '';
+  const finish = (decision, reason) => {
+    process.stdout.write(JSON.stringify({
+      hookSpecificOutput: {
+        hookEventName: 'PreToolUse',
+        permissionDecision: decision,
+        permissionDecisionReason: reason,
+      },
+    }));
+    process.exit(0);
+  };
+  // Not in approval mode (hook present but no endpoint): don't block the agent.
+  if (!url) return finish('allow', 'no bridge approval endpoint');
+  let u;
+  try { u = new URL(url); } catch (e) { return finish('deny', 'bad bridge hook url'); }
+  const body = JSON.stringify({
+    threadId,
+    toolName: payload.tool_name,
+    input: payload.tool_input,
+    toolUseId: payload.tool_use_id,
+  });
+  const req = http.request(
+    {
+      hostname: u.hostname,
+      port: u.port,
+      path: u.pathname,
+      method: 'POST',
+      headers: {
+        'content-type': 'application/json',
+        'content-length': Buffer.byteLength(body),
+        'x-uxnan-hook-token': token,
+      },
+    },
+    (res) => {
+      let out = '';
+      res.on('data', (c) => (out += c));
+      res.on('end', () => {
+        try {
+          const j = JSON.parse(out);
+          if (j && j.decision === 'allow') return finish('allow', 'approved on your phone');
+          return finish('deny', (j && j.reason) || 'rejected on your phone');
+        } catch (e) {
+          return finish('deny', 'bridge approval error');
+        }
+      });
+    },
+  );
+  req.on('error', () => finish('deny', 'bridge unreachable'));
+  // No client timeout: the bridge holds the response until the user answers or
+  // its own timeout fires (returning deny).
+  req.write(body);
+  req.end();
+});
+`;
+//# sourceMappingURL=claude-approval-hook.js.map

package/dist/src/hooks/claude-approval-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-approval-hook.js","sourceRoot":"","sources":["../../../src/hooks/claude-approval-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAAkB;IAC9D,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,2BAA2B,EAAE,OAAO,CAAC,CAAC;IAClE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8DpD,CAAC"}

package/dist/src/hooks/gemini-approval-hook.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Writes the Gemini hook script to [scriptPath] (creating its directory) and
+ * returns the path. Idempotent — overwrites each call so an updated bridge
+ * ships a fresh script. Best-effort caller should handle write failures.
+ */
+export declare function writeGeminiApprovalHook(scriptPath: string): Promise<string>;
+export declare const GEMINI_APPROVAL_HOOK_SCRIPT: string;

package/dist/src/hooks/gemini-approval-hook.js

@@ -0,0 +1,113 @@
+/**
+ * Gemini CLI `BeforeTool` approval hook.
+ *
+ * Gemini CLI uses the same hook contract as Claude Code (the CLI ships a
+ * `gemini hooks migrate` command that imports Claude hook settings). This
+ * module ships a hook script that the bridge writes to
+ * `~/.uxnan/hooks/gemini-approval-hook.cjs`, then the adapter injects a
+ * matching `BeforeTool` entry in `<cwd>/.gemini/settings.json` so EVERY tool
+ * Gemini wants to run is round-tripped to the bridge's local HTTP endpoint.
+ *
+ * The hook reads the BeforeTool payload (`{ tool_name, tool_input, ... }`) on
+ * stdin, POSTs it to `POST /agent-hook/approval` on the bridge (URL + token +
+ * threadId from env the adapter injects per turn), and prints the decision
+ * Gemini consumes:
+ *   { "decision": "deny", "reason": "..." }   — tool is denied
+ *   exit 2                                     — same as deny, stderr is the reason
+ *   exit 0 + (no output)                      — tool is allowed
+ *
+ * Fail-safe: any error (bad URL, unreachable bridge, malformed response) → deny
+ * with a clear reason. The script is dependency-free (only `node:http`/`node:url`).
+ *
+ * Source: bridge/CHANGELOG.md (2026-06 entry) + `architecture/02a` §6.2.
+ */
+import { mkdir, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+/**
+ * Writes the Gemini hook script to [scriptPath] (creating its directory) and
+ * returns the path. Idempotent — overwrites each call so an updated bridge
+ * ships a fresh script. Best-effort caller should handle write failures.
+ */
+export async function writeGeminiApprovalHook(scriptPath) {
+    await mkdir(dirname(scriptPath), { recursive: true });
+    await writeFile(scriptPath, GEMINI_APPROVAL_HOOK_SCRIPT, 'utf-8');
+    return scriptPath;
+}
+export const GEMINI_APPROVAL_HOOK_SCRIPT = String.raw `'use strict';
+// Gemini CLI BeforeTool approval hook — the bridge writes this script under
+// ~/.uxnan/hooks/ and references it from <cwd>/.gemini/settings.json when
+// the user enables interactive approvals (agents.gemini-cli.interactiveApprovals).
+// Fail-safe: any error → deny.
+const http = require('node:http');
+let data = '';
+process.stdin.setEncoding('utf-8');
+process.stdin.on('data', (c) => (data += c));
+process.stdin.on('end', () => {
+  let payload = {};
+  try { payload = JSON.parse(data || '{}'); } catch (e) { /* default {} */ }
+  const url = process.env.UXNAN_HOOK_URL;
+  const token = process.env.UXNAN_HOOK_TOKEN || '';
+  const threadId = process.env.UXNAN_HOOK_THREAD_ID || '';
+  const toolName = typeof payload.tool_name === 'string' ? payload.tool_name : 'tool';
+  const toolInput = (payload.tool_input && typeof payload.tool_input === 'object')
+    ? payload.tool_input
+    : {};
+  const toolCallId = typeof payload.tool_call_id === 'string' ? payload.tool_call_id : '';
+
+  // Allow the tool when the bridge has no approval endpoint wired (defensive —
+  // the bridge only injects the hook when the endpoint exists, but a misconfig
+  // shouldn't silently deny every tool).
+  const finish = (decision, reason) => {
+    if (decision === 'deny') {
+      // Gemini's documented shape: exit 0 with { decision, reason }.
+      process.stdout.write(JSON.stringify({ decision: 'deny', reason }));
+    } else if (decision === 'block') {
+      // Exit 2 = system block; stderr is the reason the agent sees as an error.
+      process.stderr.write(reason || 'blocked by bridge');
+      process.exit(2);
+    }
+    process.exit(0);
+  };
+  if (!url) return finish('allow', 'no bridge approval endpoint');
+  let u;
+  try { u = new URL(url); } catch (e) { return finish('deny', 'bad bridge hook url'); }
+  const body = JSON.stringify({
+    threadId,
+    toolName,
+    input: toolInput,
+    toolCallId,
+  });
+  const req = http.request(
+    {
+      hostname: u.hostname,
+      port: u.port,
+      path: u.pathname,
+      method: 'POST',
+      headers: {
+        'content-type': 'application/json',
+        'content-length': Buffer.byteLength(body),
+        'x-uxnan-hook-token': token,
+      },
+    },
+    (res) => {
+      let out = '';
+      res.on('data', (c) => (out += c));
+      res.on('end', () => {
+        try {
+          const j = JSON.parse(out);
+          if (j && j.decision === 'allow') return finish('allow', '');
+          return finish('deny', (j && j.reason) || 'rejected on your phone');
+        } catch (e) {
+          return finish('deny', 'bridge approval error');
+        }
+      });
+    },
+  );
+  req.on('error', () => finish('deny', 'bridge unreachable'));
+  // No client timeout: the bridge holds the response until the user answers
+  // (or its own 5-min timeout fires, returning deny).
+  req.write(body);
+  req.end();
+});
+`;
+//# sourceMappingURL=gemini-approval-hook.js.map

package/dist/src/hooks/gemini-approval-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini-approval-hook.js","sourceRoot":"","sources":["../../../src/hooks/gemini-approval-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,UAAkB;IAC9D,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,2BAA2B,EAAE,OAAO,CAAC,CAAC;IAClE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4EpD,CAAC"}

package/dist/src/index.d.ts

@@ -0,0 +1,62 @@
+/**
+ * uxnan-bridge — public API.
+ *
+ * `startBridge()` boots the daemon core (state, identity, JSON-RPC router).
+ * The live transport and agent runtimes are added in later increments.
+ */
+export { startBridge, type Bridge, type StartBridgeOptions } from './bridge.js';
+export { BRIDGE_VERSION } from './version.js';
+export { HandlerRouter, type RpcHandler } from './handler-router.js';
+export type { BridgeContext } from './bridge-context.js';
+export { DaemonState, DAEMON_FILES } from './daemon-state.js';
+export { DEFAULT_DAEMON_CONFIG, resolveDaemonConfig, type DaemonConfig, type AgentSettings, type AgentModelSpec, } from './daemon-config.js';
+export { ProjectRegistry, projectIdFor } from './projects/project-registry.js';
+export { PushService, type PushServiceOptions, type RegisterPushParams, type TurnEndInfo as PushTurnEndInfo, } from './push/push-service.js';
+export { createBridgePushSender, defaultServiceAccountPath, type PushSender, type PushPayload, } from './push/push-sender.js';
+export { SessionHistoryReader, type HistorySource, type SessionHistoryOptions, } from './conversation/session-history.js';
+export { PairingCodeService, type PairingCodeServiceOptions, } from './pairing/pairing-code-service.js';
+export { MdnsAdvertiser, parseQuestions, buildMessage, encodeName, type MdnsAdvertiserOptions, type UdpSocketLike, } from './transport/mdns-advertiser.js';
+export { SecureDeviceState, type PublicIdentity } from './secure-device-state.js';
+export { InMemorySecretStore, type SecretStore } from './secret-store.js';
+export { KeyringSecretStore, createDefaultSecretStore, loadNativeKeyringBackend, type KeyringBackend, } from './keyring-secret-store.js';
+export { SessionState } from './session-state.js';
+export { LockFile, isProcessAlive, type LockInfo } from './lock-file.js';
+export { buildServicePlan, buildWindowsStartupPlan, installService, uninstallService, currentServiceEnv, isServicePlatformSupported, type ServiceEnv, type ServicePlan, type ServiceCommand, type ServicePlatform, } from './service-installer.js';
+export { buildBridgeStatus, type BridgeStatusInput } from './bridge-status.js';
+export { getAuthStatus, type AccountStatusDeps } from './account-status.js';
+export { generatePairingPayload, renderPairingQr, type GeneratePairingOptions } from './qr.js';
+export { createLogger, createFileLogger, redactSecrets, logFileFor, type Logger, type LogLevel, type FileLoggerOptions, } from './logger.js';
+export { BaseAgentAdapter } from './adapters/base-adapter.js';
+export { CodexAdapter, codexUsageTokens, parseCodexConfigModels, parseCodexModelList, parseCodexModelWindows, parseCodexReasoning, type CodexAdapterOptions, type CodexEvent, type SpawnedAppServer, type CodexPermissionMode, } from './adapters/codex-adapter.js';
+export { resolveCodexBinary, type ResolvedCodex } from './adapters/resolve-codex.js';
+export { PiAdapter, parsePiLine, parsePiModelList, parsePiUsageTokens, parsePiContextWindow, type PiAdapterOptions, type PiEvent, type PiPermissionMode, } from './adapters/pi-adapter.js';
+export { resolvePiBinary, type ResolvedPi } from './adapters/resolve-pi.js';
+export { GeminiAdapter, parseGeminiLine, type GeminiAdapterOptions, type GeminiEvent, type GeminiPermissionMode, } from './adapters/gemini-adapter.js';
+export { resolveGeminiBinary, type ResolvedGemini } from './adapters/resolve-gemini.js';
+export { OpenCodeAdapter, parseOpenCodeLine, parseModelList, parseOpenCodeModelWindows, openCodeUsageTokens, type OpenCodeAdapterOptions, type OpenCodeEvent, } from './adapters/opencode-adapter.js';
+export { resolveOpenCodeBinary, type ResolvedOpenCode } from './adapters/resolve-opencode.js';
+export { defaultSpawn, type SpawnFn, type SpawnedProcess } from './adapters/spawn.js';
+export { ClaudeCodeAdapter, claudeContextWindow, claudeUsageTokens, parseClaudeLine, type ClaudeCodeAdapterOptions, type ClaudeEvent, type ClaudeModelSpec, type ClaudePermissionMode, } from './adapters/claude-adapter.js';
+export { resolveClaudeBinary, type ResolvedClaude } from './adapters/resolve-claude.js';
+export { EchoAgentAdapter } from './adapters/echo-agent-adapter.js';
+export { ProcessAgentAdapter, type ProcessAdapterOptions, } from './adapters/process-agent-adapter.js';
+export { ThreadStore, type StartTurnResult, type StartThreadInput, type ThreadRuntime, } from './conversation/thread-store.js';
+export { AgentManager, type AgentManagerOptions, type AgentMeta, type SendTurnOptions as AgentManagerSendTurnOptions, } from './agents/agent-manager.js';
+export { type MessageIO, MessageQueue, queueFor, createInMemoryIoPair, } from './transport/message-io.js';
+export { generateEphemeralKeyPair, deriveSessionKey, randomHex, verifyEd25519, aesGcmEncrypt, aesGcmDecrypt, type EphemeralKeyPair, type AesGcmParts, } from './transport/crypto.js';
+export { BridgeSecureChannel, ReplayError } from './transport/secure-channel.js';
+export { performServerHandshake, HandshakeError, type ServerHandshakeResult, type ServerHandshakeOptions, } from './transport/server-handshake.js';
+export { handleSecureConnection, type SecureConnectionOptions, } from './transport/session-handler.js';
+export { FileTrustStore, type TrustStore } from './transport/trust-store.js';
+export { connectRelayAsMac, type ConnectRelayOptions, type RelayConnection, } from './transport/relay-client.js';
+export { startLanServer, type LanServerOptions, type LanServerHandle, } from './transport/lan-server.js';
+export { wsToMessageIO, rawDataToBuffer } from './transport/ws-adapter.js';
+export { localHostPorts, type InterfaceMap } from './transport/local-hosts.js';
+export { OutboundLog, type OutboundLogEntry } from './transport/outbound-log.js';
+export { SessionRegistry, type SessionSink } from './transport/session-registry.js';
+export { GitService } from './git/git-service.js';
+export { runGit, GitCommandError, sanitizePaths, type RunGitResult } from './git/git-runner.js';
+export { WorkspaceService } from './workspace/workspace-service.js';
+export { BrowseService, browseRootIdFor } from './workspace/browse-service.js';
+export { CheckpointService, type CaptureOptions } from './workspace/checkpoint-service.js';
+export { resolveWithinRoot, isSensitiveName } from './workspace/path-guard.js';