waterplane 0.0.1 → 0.1.6

package/packages/host/dist/setupprefs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupprefs.js","sourceRoot":"","sources":["../src/setupprefs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,OAAO,EAAE,uBAAuB,EAAoB,MAAM,oBAAoB,CAAC;AACjI,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AASlE,SAAS,GAAG,CAAC,QAAgB;IAC3B,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;AACnE,CAAC;AAED,MAAM,OAAO,eAAe;IAClB,IAAI,CAAS;IACb,GAAG,GAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAE/C,YAAY,IAAY;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,GAAG,GAAG,eAAe,CAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAA0E,CAAC;gBAC3H,oEAAoE;gBACpE,4DAA4D;gBAC5D,IAAI,GAAG,EAAE,kBAAkB,IAAI,IAAI,EAAE,CAAC;oBACpC,MAAM,CAAC,GAAG,uBAAuB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;oBAC1D,IAAI,CAAC,CAAC,EAAE;wBAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;gBAClD,CAAC;gBACD,IAAI,GAAG,EAAE,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACnF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAkC,CAAC,EAAE,CAAC;wBAC5E,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/F,IAAI,GAAG,CAAC,MAAM;4BAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC1D,CAAC;gBACH,CAAC;gBACD,IAAI,GAAG,EAAE,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAiC,CAAC,EAAE,CAAC;wBAC3E,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;4BAAE,SAAS;wBAC9D,MAAM,CAAC,GAAgC,EAAE,CAAC;wBAC1C,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;4BACnE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,MAAM,CAAC;gCAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;wBACxF,CAAC;wBACD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;4BAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;IAChF,CAAC;IAED,+EAA+E;IAC/E,kBAAkB;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB;YAChC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE;YACtD,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IAED;qEACiE;IACjE,qBAAqB,CAAC,GAAY;QAChC,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACnC,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,CAAC,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;QACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,OAAO,CAAC,QAAgB;QACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,UAAU,CAAC,QAAgB,EAAE,EAAU,EAAE,MAAe;QACtD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,+CAA+C,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACjH,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM;YAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;;YAAM,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,GAAG,CAAC,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;;YAAM,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,YAAY,CAAC,QAAgB;QAC3B,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IACvD,CAAC;IAED,uEAAuE;IACvE,cAAc,CAAC,QAAgB,EAAE,EAAU,EAAE,MAA0B;QACrE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC;QAClH,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,+DAA+D,EAAE,CAAC;QACjH,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9C,IAAI,MAAM;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;;YAAM,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;;YAAM,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC,CAAC,mEAAmE,CAAC,CAAC;IACjF,CAAC;CACF;AAED,mEAAmE;AACnE,IAAI,OAAO,GAA2B,IAAI,CAAC;AAE3C,MAAM,UAAU,kBAAkB,CAAC,KAA6B;IAC9D,OAAO,GAAG,KAAK,CAAC;AAClB,CAAC;AAED;iFACiF;AACjF,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,qBAAqB,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,kBAAkB,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,kBAAkB;IAChC,OAAO,OAAO,EAAE,kBAAkB,EAAE,CAAC,KAAK,IAAI,sBAAsB,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,EAAU,EAAE,MAA0B;IACrF,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;IAC3F,OAAO,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC"}

package/packages/host/dist/setupwatch.d.ts

@@ -0,0 +1,39 @@
+import type { RepoSetupState } from "@waterplane/shared";
+import { summarize } from "./compliance.js";
+export declare class SetupWatcher {
+    private root;
+    private entries;
+    private path;
+    private timer;
+    private sweeping;
+    /** A `checkedAt` moved without the verdict changing, not yet written. */
+    private unsaved;
+    constructor(root: string);
+    /** Start sweeping. Safe to call twice. `WATERPLANE_SETUP_WATCH=0` keeps the store
+     *  (and the session-start re-check) but never scans on its own. */
+    start(): void;
+    stop(): void;
+    /** What we last concluded about this worktree, or undefined if never checked. */
+    stateFor(worktreePath: string): RepoSetupState | undefined;
+    /**
+     * Inspect one worktree now and remember the verdict. Used by the sweep, by the
+     * session-start re-check, and by the checklist endpoints — so the badge always
+     * reflects the last thing anyone actually learned, including a fix applied a
+     * second ago.
+     */
+    check(worktreePath: string, repoName?: string): RepoSetupState | undefined;
+    /** `check` with its git run in the background (`inspectRepoAsync`) — the sweep's, which nobody
+     *  waits on: a blocking git per path held the loop for minutes on WSL over a Windows drive. */
+    private checkInBackground;
+    /** Remember a checklist someone else already produced (the sheet's GET, a fix's
+     *  refreshed report) without paying for a second inspection. */
+    record(worktreePath: string, checks: Parameters<typeof summarize>[0], repoName?: string): RepoSetupState;
+    /**
+     * One pass: check every primary worktree we have never checked (newest problem
+     * first — those are the ones nobody has seen), then any whose verdict has gone
+     * stale, capped per pass. Worktrees that no longer exist are dropped so the
+     * store stays the size of the root, not of its history.
+     */
+    sweep(): Promise<void>;
+    private persist;
+}

package/packages/host/dist/setupwatch.js

@@ -0,0 +1,249 @@
+/**
+ * The setup checklist, asked WITHOUT being asked.
+ *
+ * `compliance.ts` knows whether a repo is wired the way waterplane expects; until now
+ * nothing ever ran it on its own. You found out a repo was missing its
+ * gitignore/outbox wiring only by opening the Repo setup sheet and picking that
+ * repo from a dropdown — i.e. exactly for the repos you already suspected. The
+ * repos that matter are the other ones: a clone you made on the desktop and then
+ * drove from the phone, where the first sign of trouble is an inbox photo turning
+ * up in `git status`, or an agent that never drops anything in the outbox because
+ * its CLAUDE.md never mentioned one.
+ *
+ * So the host sweeps for itself: every discovered primary worktree is inspected
+ * once when first seen, re-inspected when the answer is stale, and inspected
+ * again the moment a session opens in it. The verdict is a small rollup hung on
+ * `RepoTarget.setup`, which the launcher's repo row badges — one tap into the
+ * checklist that already exists.
+ *
+ * Deliberate boundaries:
+ *
+ *  - **It never writes into a repo.** Only `inspectRepo()` runs here (pure read);
+ *    the fixes stay behind the button they have always been behind. A daemon that
+ *    edits the CLAUDE.md of a repo you have not opened yet is a worse surprise
+ *    than the misconfiguration it fixes.
+ *  - **Absent ≠ clean.** A worktree with no entry has not been checked (fresh
+ *    discovery, watcher disabled, git missing); the rollup is simply omitted so
+ *    the UI can't read silence as a pass.
+ *  - **Host-scope rows don't count** (`summarize()`): one unset GEMINI_API_KEY
+ *    would otherwise chip every repo on the machine, and a badge that is always
+ *    on is a badge nobody reads.
+ *
+ * Persisted in `<STATE_DIR>/setup.json` (tmp+rename, like the ack ledger and the
+ * schedule store) for two reasons: `/api/repos` must be able to answer from the
+ * store instead of shelling out to git per repo per request, and `firstSeenAt`
+ * only means anything if it survives the restart that `npm run restart` makes
+ * routine.
+ */
+import { existsSync, mkdirSync, realpathSync } from "node:fs";
+import { join } from "node:path";
+import { inspectRepo, inspectRepoAsync, summarize } from "./compliance.js";
+import { discoverTargets } from "./repos.js";
+import { env } from "./env.js";
+import { logTag } from "@waterplane/shared";
+import { hostStateDir } from "./branddirs.js";
+import { readJsonGuarded, writeJsonAtomic } from "./jsonstore.js";
+/** How often the sweep looks for repos it has never checked. */
+const SWEEP_MS = Math.max(5_000, Number(env("SETUP_SWEEP_MS") || 10 * 60_000));
+/** How stale a verdict may get before the sweep re-asks. A repo's wiring changes
+ *  about never, and each check is a handful of git subprocesses. */
+const RECHECK_MS = Math.max(60_000, Number(env("SETUP_RECHECK_MS") || 6 * 60 * 60_000));
+/** Checks per sweep pass, so a root with a hundred repos doesn't hold the event
+ *  loop hostage on boot. The rest are picked up by the next tick. */
+const MAX_PER_SWEEP = Math.max(1, Number(env("SETUP_SWEEP_BATCH") || 12));
+/**
+ * The version of what COUNTS as an issue (`summarize()` / `isSetupFinding`).
+ * Bump it whenever that rule changes: a stored verdict is a count, not the
+ * checks behind it, so it cannot be re-summarised — a file written under the
+ * old rule is dropped on boot and the sweep re-counts, rather than every badge
+ * showing the old number for up to RECHECK_MS. Absent beats wrong.
+ * 2 = advisory rows (`context-weight`, `auto-compact`) stopped counting.
+ */
+const SETUP_RULES = 2;
+/**
+ * Store key. A worktree reaches us by two routes that spell the same directory
+ * differently — `git worktree list` resolves symlinks (macOS `/var` →
+ * `/private/var`), a session's `cwd` does not — and two spellings would mean the
+ * badge never clears for the repo you just fixed. Realpath is the one spelling.
+ */
+function key(worktreePath) {
+    try {
+        return realpathSync(worktreePath);
+    }
+    catch {
+        return worktreePath;
+    }
+}
+export class SetupWatcher {
+    root;
+    entries = new Map();
+    path;
+    timer = null;
+    sweeping = false;
+    /** A `checkedAt` moved without the verdict changing, not yet written. */
+    unsaved = false;
+    constructor(root) {
+        this.root = root;
+        this.path = join(hostStateDir(root), "setup.json");
+        try {
+            const raw = readJsonGuarded(this.path, null);
+            if (raw?.rules !== SETUP_RULES)
+                throw new Error("counted under another rule");
+            // Every field of `RepoSetupState` is re-read by hand here, because the
+            // file is untrusted JSON. The cost is that a field ADDED to the wire type
+            // and forgotten here is silently dropped on every boot, and the verdict
+            // then says something different from what the sweep concluded until
+            // RECHECK_MS (6h) elapses — which is what happened to a short-lived
+            // `failing` twin of `ok`: restarts are routine, so a genuinely broken repo
+            // wore the "thing to look at" style for a working day. Add a field ⇒ add
+            // it here, or don't add the field.
+            for (const [wt, v] of Object.entries(raw?.repos ?? {})) {
+                if (!v || typeof v !== "object")
+                    continue;
+                this.entries.set(wt, {
+                    repoName: String(v.repoName || ""),
+                    ok: !!v.ok,
+                    issues: Number(v.issues) || 0,
+                    fixable: Number(v.fixable) || 0,
+                    checkedAt: Number(v.checkedAt) || 0,
+                    firstSeenAt: Number(v.firstSeenAt) || Number(v.checkedAt) || 0,
+                });
+            }
+        }
+        catch { /* no file / bad json → everything is simply unchecked */ }
+    }
+    /** Start sweeping. Safe to call twice. `WATERPLANE_SETUP_WATCH=0` keeps the store
+     *  (and the session-start re-check) but never scans on its own. */
+    start() {
+        if (this.timer || env("SETUP_WATCH") === "0")
+            return;
+        this.timer = setInterval(() => void this.sweep(), SWEEP_MS);
+        if (typeof this.timer.unref === "function")
+            this.timer.unref();
+        void this.sweep();
+    }
+    stop() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+    }
+    /** What we last concluded about this worktree, or undefined if never checked. */
+    stateFor(worktreePath) {
+        const e = this.entries.get(key(worktreePath));
+        if (!e)
+            return undefined;
+        const { repoName, ...state } = e;
+        return state;
+    }
+    /**
+     * Inspect one worktree now and remember the verdict. Used by the sweep, by the
+     * session-start re-check, and by the checklist endpoints — so the badge always
+     * reflects the last thing anyone actually learned, including a fix applied a
+     * second ago.
+     */
+    check(worktreePath, repoName = "") {
+        try {
+            return this.record(worktreePath, inspectRepo(worktreePath), repoName);
+        }
+        catch {
+            // A repo that vanished mid-check, or a machine with no git: leave the last
+            // verdict alone rather than inventing a clean one.
+            return this.stateFor(worktreePath);
+        }
+    }
+    /** `check` with its git run in the background (`inspectRepoAsync`) — the sweep's, which nobody
+     *  waits on: a blocking git per path held the loop for minutes on WSL over a Windows drive. */
+    async checkInBackground(worktreePath, repoName) {
+        try {
+            this.record(worktreePath, await inspectRepoAsync(worktreePath), repoName);
+        }
+        catch { /* as in `check`: the last verdict stands */ }
+    }
+    /** Remember a checklist someone else already produced (the sheet's GET, a fix's
+     *  refreshed report) without paying for a second inspection. */
+    record(worktreePath, checks, repoName = "") {
+        const now = Date.now();
+        const k = key(worktreePath);
+        const prev = this.entries.get(k);
+        const entry = {
+            repoName: repoName || prev?.repoName || "",
+            ...summarize(checks),
+            checkedAt: now,
+            firstSeenAt: prev?.firstSeenAt || now,
+        };
+        const changed = !prev || prev.ok !== entry.ok || prev.issues !== entry.issues;
+        this.entries.set(k, entry);
+        // An unchanged verdict still moved `checkedAt`; the sweep saves those once per pass. Unsaved,
+        // every restart found every repo stale and re-inspected the whole root.
+        if (changed)
+            this.persist();
+        else
+            this.unsaved = true;
+        if (!prev && !entry.ok) {
+            // The whole point of the sweep, in one line of the host log: this repo was
+            // never opened in the checklist and is not wired up.
+            console.log(`${logTag} setup · ${entry.repoName || worktreePath}: ${entry.issues} issue${entry.issues === 1 ? "" : "s"}` +
+                `${entry.fixable ? `, ${entry.fixable} fixable` : ""} — open Repo setup`);
+        }
+        const { repoName: _n, ...state } = entry;
+        return state;
+    }
+    /**
+     * One pass: check every primary worktree we have never checked (newest problem
+     * first — those are the ones nobody has seen), then any whose verdict has gone
+     * stale, capped per pass. Worktrees that no longer exist are dropped so the
+     * store stays the size of the root, not of its history.
+     */
+    async sweep() {
+        if (this.sweeping)
+            return;
+        this.sweeping = true;
+        try {
+            const targets = (await discoverTargets(this.root)).filter((t) => t.isPrimary);
+            const live = new Set(targets.map((t) => key(t.worktreePath)));
+            let pruned = false;
+            for (const wt of [...this.entries.keys()]) {
+                if (live.has(wt) || existsSync(wt))
+                    continue;
+                this.entries.delete(wt);
+                pruned = true;
+            }
+            if (pruned)
+                this.persist();
+            const now = Date.now();
+            const fresh = targets.filter((t) => !this.entries.has(t.worktreePath));
+            const stale = targets.filter((t) => {
+                // `key()`, like every other access to this map. The raw path happens to
+                // match today only because `git worktree list --porcelain` already emits
+                // realpaths; a discovery path that did not would make every repo read
+                // `fresh` on every tick and re-inspect for ever, silently.
+                const e = this.entries.get(key(t.worktreePath));
+                return e && now - e.checkedAt > RECHECK_MS;
+            });
+            for (const t of [...fresh, ...stale].slice(0, MAX_PER_SWEEP)) {
+                // One repo at a time, its git in the background; the file reads that remain are
+                // synchronous, so the loop is handed back between repos too.
+                await this.checkInBackground(t.worktreePath, t.repoName);
+                await new Promise((r) => setImmediate(r));
+            }
+        }
+        catch { /* discovery failed (root gone?) — next tick tries again */ }
+        finally {
+            if (this.unsaved)
+                this.persist();
+            this.sweeping = false;
+        }
+    }
+    persist() {
+        this.unsaved = false;
+        try {
+            mkdirSync(hostStateDir(this.root), { recursive: true });
+            const repos = {};
+            for (const [wt, e] of this.entries)
+                repos[wt] = e;
+            writeJsonAtomic(this.path, { version: 1, rules: SETUP_RULES, repos }, { space: 2 });
+        }
+        catch { /* a store we can't write just means we re-check after a restart */ }
+    }
+}
+//# sourceMappingURL=setupwatch.js.map

package/packages/host/dist/setupwatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupwatch.js","sourceRoot":"","sources":["../src/setupwatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAElE,gEAAgE;AAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AAC/E;oEACoE;AACpE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AACxF;qEACqE;AACrE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1E;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB;;;;;GAKG;AACH,SAAS,GAAG,CAAC,YAAoB;IAC/B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;AACH,CAAC;AAOD,MAAM,OAAO,YAAY;IAQH;IAPZ,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,IAAI,CAAS;IACb,KAAK,GAA0B,IAAI,CAAC;IACpC,QAAQ,GAAG,KAAK,CAAC;IACzB,yEAAyE;IACjE,OAAO,GAAG,KAAK,CAAC;IAExB,YAAoB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,eAAe,CAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,GAAG,EAAE,KAAK,KAAK,WAAW;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC9E,uEAAuE;YACvE,0EAA0E;YAC1E,wEAAwE;YACxE,oEAAoE;YACpE,oEAAoE;YACpE,2EAA2E;YAC3E,yEAAyE;YACzE,mCAAmC;YACnC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAM,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;oBAAE,SAAS;gBAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;oBACnB,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;oBAClC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;oBACV,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC7B,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC/B,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;oBACnC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;iBAC/D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,yDAAyD,CAAC,CAAC;IACvE,CAAC;IAED;uEACmE;IACnE,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG;YAAE,OAAO;QACrD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC5D,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU;YAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/D,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,iFAAiF;IACjF,QAAQ,CAAC,YAAoB;QAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC;QACjC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAoB,EAAE,QAAQ,GAAG,EAAE;QACvC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;YAC3E,mDAAmD;YACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED;mGAC+F;IACvF,KAAK,CAAC,iBAAiB,CAAC,YAAoB,EAAE,QAAgB;QACpE,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,gBAAgB,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC;IAED;oEACgE;IAChE,MAAM,CAAC,YAAoB,EAAE,MAAuC,EAAE,QAAQ,GAAG,EAAE;QACjF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,KAAK,GAAgB;YACzB,QAAQ,EAAE,QAAQ,IAAI,IAAI,EAAE,QAAQ,IAAI,EAAE;YAC1C,GAAG,SAAS,CAAC,MAAM,CAAC;YACpB,SAAS,EAAE,GAAG;YACd,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,GAAG;SACtC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3B,8FAA8F;QAC9F,wEAAwE;QACxE,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;;YACvB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACvB,2EAA2E;YAC3E,qDAAqD;YACrD,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,YAAY,KAAK,CAAC,QAAQ,IAAI,YAAY,KAAK,KAAK,CAAC,MAAM,SAAS,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;gBACtH,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC9D,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;YACD,IAAI,MAAM;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YACvE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACjC,wEAAwE;gBACxE,yEAAyE;gBACzE,sEAAsE;gBACtE,2DAA2D;gBAC3D,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;gBAChD,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,UAAU,CAAC;YAC7C,CAAC,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC7D,gFAAgF;gBAChF,6DAA6D;gBAC7D,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACzD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;gBAAS,CAAC;YAC/E,IAAI,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,OAAO;QACb,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,KAAK,GAAgC,EAAE,CAAC;YAC9C,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;gBAAE,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YAClD,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC,CAAC,mEAAmE,CAAC,CAAC;IACjF,CAAC;CACF"}

package/packages/host/dist/shelllinks.d.ts

@@ -0,0 +1,39 @@
+import type { ShellLink } from "@waterplane/shared";
+/** Most screen links published at once; the newest win. */
+export declare const MAX_SCREEN_LINKS = 3;
+/** How far (in grid rows, either side of the URL's rows) a code may sit from its link. */
+export declare const CODE_ROWS = 6;
+/** What the screen says about one link. `source`/`at` are the publisher's (`sessions/links.ts`). */
+export type ScreenLink = Omit<ShellLink, "source" | "at">;
+export interface ShellLinksRead {
+    links: ScreenLink[];
+    /** The last line on screen is a prompt for an authorization code. */
+    awaitingCode: boolean;
+}
+/**
+ * The program in front of a shell is asking a yes/no question on its LAST
+ * non-blank row — `deliver/deliverrun.ts` lets a one-line send through to it
+ * the way it does to a code prompt. A question above the last row is history.
+ */
+export declare function asksYesNo(screen: string): boolean;
+/**
+ * The PTY's bytes as proof text: every cursor move a line break (a repaint
+ * that positions row by row never proves two rows are one string), then every
+ * other escape and CR dropped. A program's own wrapped line arrives as one
+ * unbroken run — tmux passes it through, and repaints a wrapped row the same
+ * way — while two printed lines always have a newline between them.
+ */
+export declare function proofText(raw: string): string;
+/** `url` occurs in `text` and ENDS there: what follows (past a sentence's closing punctuation) is not a URL character. */
+export declare function endsIn(text: string, url: string): boolean;
+/**
+ * Read a RENDERED screen (headless VT replay, rows joined by `\n`) for links,
+ * their codes, and whether the CLI is waiting for a code. `cols` (the pane's
+ * width) lets a URL the terminal itself hard-wrapped be rejoined
+ * (`hardWrapped`). `raw` is the PTY's recent byte tail: a link joined across
+ * rows is kept only when those bytes hold it as one string (`provenJoin`);
+ * unproven, the first row's URL stands only when that row is SHORTER than the
+ * pane — the URL visibly ended there — and otherwise the link is dropped. No
+ * `raw` = nothing proven. Null when the read throws.
+ */
+export declare function detectShellLinks(screen: string, cols?: number, raw?: string): ShellLinksRead | null;

package/packages/host/dist/shelllinks.js

@@ -0,0 +1,292 @@
+/**
+ * A SHELL session's links and one-time codes, read off the rendered screen.
+ *
+ * `login.ts`'s sibling for the sessions that are not claude: a plain login
+ * shell (`backends/shell.ts`, `caps.turns === false`) in which somebody runs
+ * `gh auth login`, `gcloud auth login --no-launch-browser`, `npm login` … Each
+ * prints a URL to open and, often, a short code to type into the page it opens
+ * — and on a phone the URL is a dozen wrapped grid rows nobody can tap. So the
+ * host lifts them off the grid (`@waterplane/shared`'s `findUrls`, which
+ * rejoins a hard-wrapped link) and `sessions/links.ts` publishes them as
+ * `SessionInfo.links`, which is what turns them into buttons.
+ *
+ * The rules, and why each is shaped the way it is:
+ *
+ *  - Every `https://` URL counts — a shell is not one CLI's flow, so there is
+ *    no authorize-shaped path to insist on. A URL the TUI painted over
+ *    (`truncated`) is dropped: half a link is a wrong answer, not a partial one.
+ *    `http://` only for this desktop (`localhost`, 127.0.0.1, [::1]), flagged
+ *    `local` so the phone says in words that it points at the desk. Newest
+ *    last, one entry per URL, at most `MAX_SCREEN_LINKS`.
+ *  - A code is ONLY ever a property of a link, within `CODE_ROWS` rows of it —
+ *    a code-shaped token with no link near it is nothing (a ticket id, a
+ *    branch). Device-flow shapes (`ABCD-1234`, `WDJB-MJHT`) count on their own;
+ *    anything else (6–12 of `[A-Z0-9-]`) only right after a code label. Never a
+ *    pure-hex run of 7+ (a commit SHA), never a token right after `$`, `pid` or
+ *    `port` (a variable, a process, a listener). Each code attaches to the
+ *    NEAREST link only.
+ *  - A link read across SEVERAL rows (a box's flush run, the terminal's own
+ *    hard wrap) is a guess about geometry until the PTY's bytes hold it as one
+ *    string (`provenJoin`) — git's `remote:` and a bare `$` prompt both pass
+ *    every geometric test. Unproven, the first row's URL stands only when that
+ *    row is shorter than the pane; otherwise nothing.
+ *  - Labelled codes are never an errno (`ECONNREFUSED`, `ENOENT-1`) and always
+ *    carry a digit or a dash; a device shape always carries a letter
+ *    (`0900-1700` is a time range).
+ *  - `awaitingCode`: the last line on screen is a prompt for an authorization
+ *    code ("…the authorization code:", "Paste … code …:"), i.e. the CLI is
+ *    sitting on its input.
+ *
+ * The label and prompt patterns are built from split halves, the precaution
+ * `login.ts` and `limit.ts` state: a detector that matches printed English
+ * fires on a session merely DISPLAYING that English — and this repo greps its
+ * own source often enough for that to be an event, not a hypothesis.
+ *
+ * Degrades to null on any throw: a reader that cannot read publishes no links,
+ * never a wrong one.
+ */
+import { findUrls } from "@waterplane/shared";
+import { stripAnsi } from "./prompt.js";
+/** Most screen links published at once; the newest win. */
+export const MAX_SCREEN_LINKS = 3;
+/** How far (in grid rows, either side of the URL's rows) a code may sit from its link. */
+export const CODE_ROWS = 6;
+const LOCAL_HTTP_RE = /^http:\/\/(?:localhost|127\.0\.0\.1|\[::1\])(?=[:/?#]|$)/i;
+/** `XXXX-XXXX` device codes (gh, Microsoft, Google's device flow). */
+const DEVICE_RE = /^[A-Z0-9]{4}-[A-Z0-9]{4}$/;
+/** `WDJB-MJHT`-style, letters only — subsumed by the above, named for the record. */
+const DEVICE_ALPHA_RE = /^[A-Z]{4}-[A-Z]{4}$/;
+/** A token a code LABEL vouches for. */
+const LABELLED_RE = /^(?=[A-Z0-9-]*[A-Z0-9])[A-Z0-9-]{6,12}$/;
+const HEX_RE = /^[0-9a-f]{7,}$/i;
+/** An errno name (`ECONNREFUSED`, `ENOENT-1`) — what `code:` labels in a Node or npm error dump. */
+const ERRNO_RE = /^E[A-Z]{3,}/;
+/** A device code has a letter in it; `0900-1700` is a time range. */
+const HAS_LETTER_RE = /[A-Z]/;
+const C = "co" + "de";
+/** "code:", "code is", "enter the code", "one-time code" — case-insensitive, built in halves. */
+const LABEL_RE = new RegExp(String.raw `(?:\b${C}\s*:|\b${C}\s+is\b|\benter\s+the\s+${C}\b|\bone[-\s]time\s+${C}\b)\s*:?\s*`, "gi");
+/** The code prompt at the end of the screen's last line: "…authorization code:", "paste … code …:". */
+const AWAIT_RE = new RegExp(String.raw `(?:\bauthori[sz]ation\s+${C}\b|\bpaste\b[^\n]{0,40}\b${C}\b|\benter\b[^\n]{0,40}\b${C}\b)[^\n]{0,40}[:>❯][ \t]*$`, "i");
+/** A yes/no question at the end of a row: `[y/N]`, `(Y/n)`, `(yes/no)`, ssh's `(yes/no/[fingerprint])`. */
+const YES_NO_RE = /[[(]\s*(?:y|yes)\s*\/\s*(?:n|no)\b[^\n]{0,24}?[\])]\s*[:?>]?\s*$/i;
+/**
+ * The program in front of a shell is asking a yes/no question on its LAST
+ * non-blank row — `deliver/deliverrun.ts` lets a one-line send through to it
+ * the way it does to a code prompt. A question above the last row is history.
+ */
+export function asksYesNo(screen) {
+    const last = screen.split("\n").reverse().find((r) => r.trim()) ?? "";
+    return YES_NO_RE.test(last);
+}
+/** The word before a token that makes it a variable, a process or a listener. */
+const NOT_A_CODE_BEFORE = /(?:\$|\b(?:pid|port)\s*[:=#]?)\s*$/i;
+/** Punctuation a sentence wraps a token in. */
+const strip = (w) => w.replace(/^[("'`[<]+|[)"'`\]>.,;:!?]+$/g, "");
+/** `ABCD-1234` / `WDJB-MJHT`, with at least one letter. */
+const isDeviceShape = (code) => (DEVICE_RE.test(code) || DEVICE_ALPHA_RE.test(code)) && HAS_LETTER_RE.test(code);
+/**
+ * What a label alone cannot vouch for. `code: 'ECONNREFUSED'` and `Error code:
+ * ENOENT-1` are an error dump's errno beside whatever URL the stack printed,
+ * and a one-time code always carries a digit or a dash — a labelled all-letter
+ * word (`code: PENDING`) is prose. A device shape stands on its own rule.
+ */
+function labelledOk(code) {
+    if (isDeviceShape(code))
+        return true;
+    if (ERRNO_RE.test(code))
+        return false;
+    return /[0-9-]/.test(code);
+}
+function okToken(code, before) {
+    if (HEX_RE.test(code))
+        return false;
+    if (NOT_A_CODE_BEFORE.test(before))
+        return false;
+    return true;
+}
+/** Every code-shaped token on screen, with the row it is on. */
+function candidates(rows) {
+    const out = [];
+    for (let r = 0; r < rows.length; r++) {
+        const row = rows[r];
+        // Labelled: the token right after a label — on the same row, or the first
+        // word of the next non-blank row when the label ends its own.
+        LABEL_RE.lastIndex = 0;
+        let m;
+        while ((m = LABEL_RE.exec(row))) {
+            const rest = row.slice(m.index + m[0].length);
+            let word = rest.trim().split(/\s+/)[0] ?? "";
+            let at = r;
+            if (!word || /^\(.*\)?$/.test(rest.trim())) {
+                for (let n = r + 1; n < rows.length && n <= r + 2; n++) {
+                    const next = rows[n].trim();
+                    if (!next)
+                        continue;
+                    word = next.split(/\s+/)[0];
+                    at = n;
+                    break;
+                }
+            }
+            const code = strip(word);
+            if (LABELLED_RE.test(code) && okToken(code, "") && labelledOk(code))
+                out.push({ row: at, code, labelled: true });
+            if (m[0].length === 0)
+                LABEL_RE.lastIndex++;
+        }
+        // Device-flow shapes stand on their own.
+        for (const w of row.matchAll(/\S+/g)) {
+            const code = strip(w[0]);
+            if (!isDeviceShape(code))
+                continue;
+            if (!okToken(code, row.slice(0, w.index)))
+                continue;
+            if (!out.some((c) => c.row === r && c.code === code))
+                out.push({ row: r, code, labelled: false });
+        }
+    }
+    return out;
+}
+/** A whole row of URL characters, no whitespace, no scheme of its own. */
+const URL_ROW_RE = /^[A-Za-z0-9\-._~:/?#[\]@!$&'()*+,;=%]+$/;
+/**
+ * The TERMINAL's own hard wrap of an indented URL. `findUrls` rejoins a run
+ * whose rows share the first row's inset — a box the CLI drew — but a shell
+ * prints `    https://…` and the terminal continues it at column 0, so the
+ * inset differs and the link came back cut (gcloud's, measured in
+ * `e2e-shell.mjs`). With the pane's width known that wrap is provable: the
+ * row the URL ends on is exactly `cols` wide, and the next one is URL
+ * characters only. Keep joining while each joined row is full too.
+ */
+function hardWrapped(rows, url, end, cols) {
+    while (rows[end]?.length === cols && url.endsWith(rows[end].slice(rows[end].lastIndexOf(" ") + 1))) {
+        const next = rows[end + 1];
+        if (!next || !URL_ROW_RE.test(next) || /https?:\/\//.test(next))
+            break;
+        url += next;
+        end++;
+    }
+    return { url, end };
+}
+/** One URL character — what a link that goes on is made of. */
+const URL_CHAR_RE = /[A-Za-z0-9\-._~:/?#[\]@!$&'()*+,;=%]/;
+/** Punctuation a sentence closes a link with — dropped by `findUrls` (`TRAILING`). */
+const TRAILING_RE = /[.,;:!?)\]}'"]+$/;
+const TRAIL_CH_RE = /[.,;:!?)\]}'"]/;
+/**
+ * The PTY's bytes as proof text: every cursor move a line break (a repaint
+ * that positions row by row never proves two rows are one string), then every
+ * other escape and CR dropped. A program's own wrapped line arrives as one
+ * unbroken run — tmux passes it through, and repaints a wrapped row the same
+ * way — while two printed lines always have a newline between them.
+ */
+export function proofText(raw) {
+    return stripAnsi(raw.replace(/\x1b\[[0-9;]*[HfABEFdST]/g, "\n"));
+}
+/** `url` occurs in `text` and ENDS there: what follows (past a sentence's closing punctuation) is not a URL character. */
+export function endsIn(text, url) {
+    for (let i = text.indexOf(url); i >= 0; i = text.indexOf(url, i + 1)) {
+        let j = i + url.length;
+        while (j < text.length && TRAIL_CH_RE.test(text[j]))
+            j++;
+        if (j >= text.length || !URL_CHAR_RE.test(text[j]))
+            return true;
+    }
+    return false;
+}
+/**
+ * A link read across SEVERAL rows is only as good as the bytes behind it. Two
+ * geometric guesses glue a neighbour on: `findUrls`'s flush run takes git's
+ * `remote:` under `…/pull/new/x` (one short row, same inset), and `hardWrapped`
+ * takes a bare `$` prompt under a URL that happened to fill the row. So the
+ * longest join of rows `line..end` whose text the program actually printed as
+ * ONE string that ends there wins — the first row alone included — and none
+ * proven is none (the caller decides about the first row).
+ */
+function provenJoin(rows, line, end, full, proof) {
+    const first = /https?:\/\/\S*$/i.exec(rows[line] ?? "")?.[0];
+    if (!first)
+        return endsIn(proof, full) ? { url: full, end } : null;
+    const pieces = [first, ...rows.slice(line + 1, end + 1).map((r) => r.trimStart())];
+    for (let k = pieces.length; k >= 1; k--) {
+        const cand = k === pieces.length ? full : pieces.slice(0, k).join("").replace(TRAILING_RE, "");
+        if (cand.length > 8 && endsIn(proof, cand))
+            return { url: cand, end: line + k - 1 };
+    }
+    return null;
+}
+/**
+ * Read a RENDERED screen (headless VT replay, rows joined by `\n`) for links,
+ * their codes, and whether the CLI is waiting for a code. `cols` (the pane's
+ * width) lets a URL the terminal itself hard-wrapped be rejoined
+ * (`hardWrapped`). `raw` is the PTY's recent byte tail: a link joined across
+ * rows is kept only when those bytes hold it as one string (`provenJoin`);
+ * unproven, the first row's URL stands only when that row is SHORTER than the
+ * pane — the URL visibly ended there — and otherwise the link is dropped. No
+ * `raw` = nothing proven. Null when the read throws.
+ */
+export function detectShellLinks(screen, cols, raw) {
+    try {
+        const rows = screen.split("\n").map((r) => r.replace(/\s+$/, ""));
+        const found = [];
+        let proof = null;
+        for (const h of findUrls(rows)) {
+            if (h.truncated)
+                continue;
+            let { url, end } = cols ? hardWrapped(rows, h.url, h.line + h.lines - 1, cols) : { url: h.url, end: h.line + h.lines - 1 };
+            if (end > h.line) {
+                proof ??= proofText(raw ?? "");
+                const pick = provenJoin(rows, h.line, end, url, proof);
+                const first = /https?:\/\/\S*$/i.exec(rows[h.line] ?? "")?.[0]?.replace(TRAILING_RE, "");
+                if (pick)
+                    ({ url, end } = pick);
+                else if (cols && rows[h.line].length < cols && first) {
+                    url = first;
+                    end = h.line;
+                }
+                else
+                    continue;
+            }
+            const local = LOCAL_HTTP_RE.test(url);
+            if (!local && !/^https:\/\//i.test(url))
+                continue;
+            if (found.some((f) => f.url === url))
+                continue;
+            found.push({ url, line: h.line, end, ...(local ? { local: true } : {}) });
+        }
+        found.sort((a, b) => a.line - b.line);
+        const links = found.slice(-MAX_SCREEN_LINKS);
+        // Each code goes to its nearest link; each link keeps its nearest code,
+        // a labelled one winning a tie.
+        const best = new Map();
+        if (links.length) {
+            for (const c of candidates(rows)) {
+                let pick = -1, dist = Infinity;
+                links.forEach((l, i) => {
+                    const d = c.row < l.line ? l.line - c.row : c.row > l.end ? c.row - l.end : 0;
+                    if (d <= CODE_ROWS && d < dist) {
+                        dist = d;
+                        pick = i;
+                    }
+                });
+                if (pick < 0)
+                    continue;
+                const cur = best.get(pick);
+                if (!cur || dist < cur.dist || (dist === cur.dist && c.labelled && !cur.c.labelled))
+                    best.set(pick, { dist, c });
+            }
+        }
+        const last = [...rows].reverse().find((r) => r.trim()) ?? "";
+        return {
+            links: links.map((l, i) => {
+                const code = best.get(i)?.c.code;
+                return { url: l.url, line: l.line, ...(code ? { code } : {}), ...(l.local ? { local: true } : {}) };
+            }),
+            awaitingCode: AWAIT_RE.test(last),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=shelllinks.js.map