waterplane 0.0.1 → 0.1.6

package/packages/host/dist/sidecar.d.ts

@@ -0,0 +1,82 @@
+/**
+ * The one place an UNATTENDED completion is bought.
+ *
+ * Four things in this daemon spend tokens with nobody watching: the per-turn
+ * tab name (`sessions/record.ts`), the assessment (`assess.ts`), the two
+ * reviewers (`review.ts`) and the naming pass (`runNameTask`, and `naming.ts`
+ * for what it is for; the commit message shares its argv). Two of the four
+ * are TOOLLESS by contract and may take the local engine; the two that
+ * read a repo refuse it in words. Each grew its own `execFile(claude, ["-p", …])`, and
+ * the most expensive one by far was the per-turn session summary (one call per
+ * turn-end per session, retired — the tab name, once per session off the first
+ * prompt, is the only call of its kind left and the precedent for the rest).
+ *
+ * This module is the engine axis for those calls, and nothing else. It does not
+ * decide WHEN anything runs, it does not decide what a result MEANS, and it
+ * never writes anything — the callers keep their own contracts (`assess.ts`'s
+ * file-both-ways, `review.ts`'s verdict JSON, `nameTab`'s once-ever gate and
+ * persistence). All that moves here is HOW the completion is obtained.
+ *
+ * ── Two engines ─────────────────────────────────────────────────────────────
+ *
+ *  • `claude-p` — today's behaviour, MOVED, not rewritten. Same argv, same
+ *    timeouts, same `--output-format json` envelope, same headless usage-limit
+ *    read. It is the default for every task, so a host with no new environment
+ *    variables set behaves exactly as it did before this file existed.
+ *  • `openai-compat` — one `POST {baseURL}/chat/completions` against a local
+ *    OpenAI-compatible server (ollama, llama.cpp, vLLM …), **with no tools**.
+ *
+ * ── Why `openai-compat` is not offered to everything ────────────────────────
+ *
+ * A completion with no tools can only answer from what is in its prompt. That
+ * is a perfect fit for the summary, whose contract ALREADY forbids tools — it
+ * runs `--tools ""` today and carries the transcript in the prompt, precisely
+ * because there is nothing for it to go and read. It is a category error for
+ * the assessment and the reviewers, which exist to read a repo and write two
+ * files. So a task that needs tools REFUSES the local engine in words
+ * (`sidecarPlan()`), rather than running it and reporting a judgement made
+ * without looking at the code. Nothing quietly falls back to claude either: a
+ * person who routed a task at a local model to stop spending Anthropic tokens
+ * is not served by silently spending them.
+ *
+ * ── What a failure is allowed to be ─────────────────────────────────────────
+ *
+ * The same thing it is today: NOTHING. Every failure path here — a refused
+ * route, a dead server, a non-2xx, unparseable JSON, an empty completion —
+ * returns the empty result the existing callers already treat as "no summary /
+ * no verdict". This app's standing rule is that a heuristic degrades to null or
+ * absent and never to a wrong number, and a summary is a sentence a person
+ * reads about a session they are not looking at: a made-up one is worse than
+ * none, and there is no way to tell them apart afterwards.
+ *
+ * ── The reasoning-model trap (measured) ─────────────────────────────────────
+ *
+ * A local reasoning model asked for a one-sentence summary spent 421 of 451
+ * tokens on `reasoning_content` and returned an EMPTY `content`. Two
+ * consequences, both load-bearing:
+ *   • `max_tokens` is generous (`SIDECAR_MAX_TOKENS`) — a tight budget is spent
+ *     entirely on thinking and produces nothing at all.
+ *   • The thinking is never read. `reasoning_content` / `reasoning` / `thinking`
+ *     are not looked at, and an inline `<think>…</think>` block is stripped out
+ *     of `content`. An empty `content` after that is "no summary", never a
+ *     paragraph of a model reasoning about a terminal screen persisted onto a
+ *     session's row.
+ *
+ * ── No phrase matching for the local engine ─────────────────────────────────
+ *
+ * `detectHeadlessLimit` reads an ACCOUNT-level block out of a `claude -p`
+ * envelope. A local model has no account and no such block; running the
+ * detector over its prose could only ever produce a false positive on a model
+ * that happened to paraphrase one. It runs on the claude engine only.
+ */
+export { SIDECAR_ENV, parseSidecarSpec, resetSidecarWarnings, sidecarPlan } from "./sidecar/sidecarroute.js";
+export type { ClaudeRoute, OpenAIRoute, RefusedRoute, SidecarEngine, SidecarPlan, SidecarTask } from "./sidecar/sidecarroute.js";
+export { envelopeUsage, runHeadlessClaude, runToolTask } from "./sidecar/sidecarclaude.js";
+export type { EnvelopeUsage, HeadlessRequest, HeadlessRun, ToolTaskRun } from "./sidecar/sidecarclaude.js";
+export { claudeConfigPath, trustRefusal, workspaceTrust } from "./sidecar/sidecartrust.js";
+export { chatCompletion, completionText } from "./sidecar/sidecaropenai.js";
+export type { ChatRequest } from "./sidecar/sidecaropenai.js";
+export { runSummaryTask } from "./sidecar/sidecartasks.js";
+export type { SummaryRequest } from "./sidecar/sidecartasks.js";
+export { runCommitTask, runNameTask } from "./sidecar/sidecarname.js";
+export type { NameRequest, NameRun } from "./sidecar/sidecarname.js";

package/packages/host/dist/sidecar.js

@@ -0,0 +1,78 @@
+/**
+ * The one place an UNATTENDED completion is bought.
+ *
+ * Four things in this daemon spend tokens with nobody watching: the per-turn
+ * tab name (`sessions/record.ts`), the assessment (`assess.ts`), the two
+ * reviewers (`review.ts`) and the naming pass (`runNameTask`, and `naming.ts`
+ * for what it is for; the commit message shares its argv). Two of the four
+ * are TOOLLESS by contract and may take the local engine; the two that
+ * read a repo refuse it in words. Each grew its own `execFile(claude, ["-p", …])`, and
+ * the most expensive one by far was the per-turn session summary (one call per
+ * turn-end per session, retired — the tab name, once per session off the first
+ * prompt, is the only call of its kind left and the precedent for the rest).
+ *
+ * This module is the engine axis for those calls, and nothing else. It does not
+ * decide WHEN anything runs, it does not decide what a result MEANS, and it
+ * never writes anything — the callers keep their own contracts (`assess.ts`'s
+ * file-both-ways, `review.ts`'s verdict JSON, `nameTab`'s once-ever gate and
+ * persistence). All that moves here is HOW the completion is obtained.
+ *
+ * ── Two engines ─────────────────────────────────────────────────────────────
+ *
+ *  • `claude-p` — today's behaviour, MOVED, not rewritten. Same argv, same
+ *    timeouts, same `--output-format json` envelope, same headless usage-limit
+ *    read. It is the default for every task, so a host with no new environment
+ *    variables set behaves exactly as it did before this file existed.
+ *  • `openai-compat` — one `POST {baseURL}/chat/completions` against a local
+ *    OpenAI-compatible server (ollama, llama.cpp, vLLM …), **with no tools**.
+ *
+ * ── Why `openai-compat` is not offered to everything ────────────────────────
+ *
+ * A completion with no tools can only answer from what is in its prompt. That
+ * is a perfect fit for the summary, whose contract ALREADY forbids tools — it
+ * runs `--tools ""` today and carries the transcript in the prompt, precisely
+ * because there is nothing for it to go and read. It is a category error for
+ * the assessment and the reviewers, which exist to read a repo and write two
+ * files. So a task that needs tools REFUSES the local engine in words
+ * (`sidecarPlan()`), rather than running it and reporting a judgement made
+ * without looking at the code. Nothing quietly falls back to claude either: a
+ * person who routed a task at a local model to stop spending Anthropic tokens
+ * is not served by silently spending them.
+ *
+ * ── What a failure is allowed to be ─────────────────────────────────────────
+ *
+ * The same thing it is today: NOTHING. Every failure path here — a refused
+ * route, a dead server, a non-2xx, unparseable JSON, an empty completion —
+ * returns the empty result the existing callers already treat as "no summary /
+ * no verdict". This app's standing rule is that a heuristic degrades to null or
+ * absent and never to a wrong number, and a summary is a sentence a person
+ * reads about a session they are not looking at: a made-up one is worse than
+ * none, and there is no way to tell them apart afterwards.
+ *
+ * ── The reasoning-model trap (measured) ─────────────────────────────────────
+ *
+ * A local reasoning model asked for a one-sentence summary spent 421 of 451
+ * tokens on `reasoning_content` and returned an EMPTY `content`. Two
+ * consequences, both load-bearing:
+ *   • `max_tokens` is generous (`SIDECAR_MAX_TOKENS`) — a tight budget is spent
+ *     entirely on thinking and produces nothing at all.
+ *   • The thinking is never read. `reasoning_content` / `reasoning` / `thinking`
+ *     are not looked at, and an inline `<think>…</think>` block is stripped out
+ *     of `content`. An empty `content` after that is "no summary", never a
+ *     paragraph of a model reasoning about a terminal screen persisted onto a
+ *     session's row.
+ *
+ * ── No phrase matching for the local engine ─────────────────────────────────
+ *
+ * `detectHeadlessLimit` reads an ACCOUNT-level block out of a `claude -p`
+ * envelope. A local model has no account and no such block; running the
+ * detector over its prose could only ever produce a false positive on a model
+ * that happened to paraphrase one. It runs on the claude engine only.
+ */
+export { SIDECAR_ENV, parseSidecarSpec, resetSidecarWarnings, sidecarPlan } from "./sidecar/sidecarroute.js";
+export { envelopeUsage, runHeadlessClaude, runToolTask } from "./sidecar/sidecarclaude.js";
+export { claudeConfigPath, trustRefusal, workspaceTrust } from "./sidecar/sidecartrust.js";
+export { chatCompletion, completionText } from "./sidecar/sidecaropenai.js";
+export { runSummaryTask } from "./sidecar/sidecartasks.js";
+export { runCommitTask, runNameTask } from "./sidecar/sidecarname.js";
+//# sourceMappingURL=sidecar.js.map

package/packages/host/dist/sidecar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidecar.js","sourceRoot":"","sources":["../src/sidecar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsEG;AAEH,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAE7G,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE3F,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5E,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC"}

package/packages/host/dist/signkey.d.ts

@@ -0,0 +1,57 @@
+export declare const KEY_ALIAS = "sideload";
+export type KeyKind = "desktop" | "debug";
+export interface FoundKey {
+    /** The desktop key's files (whether or not they exist yet). `broken` = jks present, properties gone. */
+    desktop: {
+        jks: string;
+        props: string;
+        exists: boolean;
+        broken: boolean;
+    };
+    /** `~/.android/debug.keystore`, when present. */
+    debug: string | null;
+    /** The default link target: the desktop key or nothing — the debug key is only ever CHOSEN. */
+    best: KeyKind | "none";
+    /** Every key a repo could be linked to. */
+    available: KeyKind[];
+}
+export interface KeyProps {
+    storeFile: string;
+    storePassword: string;
+    keyAlias: string;
+    keyPassword: string;
+}
+export declare const keysDir: () => string;
+export declare const debugKeystore: () => string;
+export declare function parseProps(text: string): Record<string, string>;
+export declare function findKey(): FoundKey;
+export interface SignKeyOpts {
+    keytool?: string;
+}
+export type EnsureResult = {
+    ok: true;
+    created: boolean;
+    jks: string;
+    note: string;
+} | {
+    ok: false;
+    error: string;
+};
+/** keytool argv for a new key. The password travels in the env (`:env`), never argv (visible in `ps`). */
+export declare function keytoolArgv(tmp: string): string[];
+/** Make the desktop key if it does not exist. Idempotent: a second call touches nothing. */
+export declare function ensureDesktopKey(opts?: SignKeyOpts): EnsureResult;
+export type LinkResult = {
+    ok: true;
+    kind: KeyKind;
+    file: string;
+    gitignore: string[];
+    note: string;
+} | {
+    ok: false;
+    error: string;
+};
+/** Point the repo's gitignored `keystore.properties` at the desktop key (or, chosen, the debug key). */
+export declare function linkKey(repo: string, kind?: KeyKind): LinkResult;
+/** Which key a repo's `keystore.properties` names — for `apkcheck.ts`. `null` when absent/unreadable. */
+export declare function readLink(repo: string): KeyKind | "other" | null;

package/packages/host/dist/signkey.js

@@ -0,0 +1,159 @@
+/**
+ * The signing key an Android build installs with — one per DESKTOP, made once.
+ *
+ * Android updates an installed app only when the new build is signed with the same key, so the
+ * key must outlive every repo and must never sit inside one: it lives in
+ * `<config dir>/keys/sideload.jks` (dir 700, files 600), next to `sideload.properties` holding the
+ * random password `keytool` was given. A repo only ever gets `keystore.properties`, a gitignored
+ * pointer (`storeFile`, `storePassword`, `keyAlias`, `keyPassword` — the format the Gradle
+ * templates read), and a `.gitignore` that names `keystore.properties` and `*.jks`.
+ *
+ * **Never loses a key**: an existing `.jks` is never overwritten, and a `.jks` whose properties
+ * file is gone is reported, not regenerated — a new key silently replacing it would orphan every
+ * app signed with the old one. `apkcheck.ts` reads the pointer through `readLink` so its sentence
+ * about which key a repo signs with cannot disagree with what was written here.
+ */
+import { execFileSync } from "node:child_process";
+import { randomBytes } from "node:crypto";
+import { chmodSync, existsSync, mkdirSync, readFileSync, realpathSync, renameSync, rmSync } from "node:fs";
+import { homedir } from "node:os";
+import { join, resolve, sep } from "node:path";
+import { BRAND } from "@waterplane/shared";
+import { configDir } from "./branddirs.js";
+import { writeTextAtomic, writeTextAtomicKeepMode } from "./jsonstore.js";
+export const KEY_ALIAS = "sideload";
+const VALIDITY_DAYS = 36500;
+export const keysDir = () => join(configDir(), "keys");
+const jksPath = () => join(keysDir(), "sideload.jks");
+const propsPath = () => join(keysDir(), "sideload.properties");
+export const debugKeystore = () => join(homedir(), ".android", "debug.keystore");
+export function parseProps(text) {
+    const out = {};
+    for (const line of text.split("\n")) {
+        if (line.trimStart().startsWith("#"))
+            continue;
+        const m = /^\s*([A-Za-z.]+)\s*=\s*(.*?)\s*$/.exec(line);
+        if (m)
+            out[m[1]] = m[2];
+    }
+    return out;
+}
+const fmtProps = (p) => `storeFile=${p.storeFile}\nstorePassword=${p.storePassword}\nkeyAlias=${p.keyAlias}\nkeyPassword=${p.keyPassword}\n`;
+export function findKey() {
+    const jks = jksPath(), props = propsPath();
+    const hasJks = existsSync(jks), hasProps = existsSync(props);
+    const dbg = existsSync(debugKeystore()) ? debugKeystore() : null;
+    const exists = hasJks && hasProps;
+    const available = [];
+    if (exists)
+        available.push("desktop");
+    if (dbg)
+        available.push("debug");
+    return { desktop: { jks, props, exists, broken: hasJks && !hasProps }, debug: dbg, best: exists ? "desktop" : "none", available };
+}
+/** keytool argv for a new key. The password travels in the env (`:env`), never argv (visible in `ps`). */
+export function keytoolArgv(tmp) {
+    return [
+        "-genkeypair", "-keystore", tmp, "-storetype", "PKCS12", "-alias", KEY_ALIAS,
+        "-keyalg", "RSA", "-keysize", "2048", "-validity", String(VALIDITY_DAYS),
+        "-storepass:env", "WP_KEYPASS", "-keypass:env", "WP_KEYPASS",
+        "-dname", `CN=${BRAND.displayName} sideload, O=${BRAND.displayName}`,
+    ];
+}
+/** Make the desktop key if it does not exist. Idempotent: a second call touches nothing. */
+export function ensureDesktopKey(opts = {}) {
+    const dir = keysDir(), jks = jksPath(), props = propsPath();
+    const found = findKey();
+    if (found.desktop.exists)
+        return { ok: true, created: false, jks, note: `desktop signing key already at ${jks}` };
+    if (found.desktop.broken) {
+        return { ok: false, error: `${jks} exists but ${props} does not — its password is lost. Not generating a new key over it; restore the properties file or move the .jks aside.` };
+    }
+    try {
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+        chmodSync(dir, 0o700);
+        const password = randomBytes(24).toString("base64url");
+        const tmp = `${jks}.${process.pid}.tmp`;
+        rmSync(tmp, { force: true });
+        execFileSync(opts.keytool ?? "keytool", keytoolArgv(tmp), {
+            stdio: ["ignore", "pipe", "pipe"], timeout: 60_000, env: { ...process.env, WP_KEYPASS: password },
+        });
+        chmodSync(tmp, 0o600);
+        // Properties first (a jks without them is the "broken" state), jks last.
+        writeTextAtomic(props, fmtProps({ storeFile: jks, storePassword: password, keyAlias: KEY_ALIAS, keyPassword: password }), { mode: 0o600 });
+        chmodSync(props, 0o600);
+        renameSync(tmp, jks);
+        return { ok: true, created: true, jks, note: `created the desktop signing key ${jks} (mode 600)` };
+    }
+    catch (e) {
+        rmSync(props, { force: true });
+        const err = e;
+        const why = (err.stderr?.toString().trim() || err.message || String(e)).split("\n")[0];
+        return { ok: false, error: `keytool could not create the signing key: ${why}` };
+    }
+}
+const IGNORES = ["keystore.properties", "*.jks"];
+function ensureIgnores(repo) {
+    const gi = join(repo, ".gitignore");
+    const cur = existsSync(gi) ? readFileSync(gi, "utf8") : "";
+    const have = new Set(cur.split("\n").map((l) => l.trim().replace(/^\//, "")));
+    const missing = IGNORES.filter((e) => !have.has(e));
+    if (!missing.length)
+        return [];
+    // `repo`: a committed `.gitignore -> ~/.gitconfig` is refused, not written through.
+    writeTextAtomicKeepMode(gi, (cur && !cur.endsWith("\n") ? cur + "\n" : cur) + "\n# signing key pointer — never commit\n" + missing.join("\n") + "\n", repo);
+    return missing;
+}
+/** Point the repo's gitignored `keystore.properties` at the desktop key (or, chosen, the debug key). */
+export function linkKey(repo, kind = "desktop") {
+    let p;
+    if (kind === "desktop") {
+        const f = findKey();
+        if (!f.desktop.exists)
+            return { ok: false, error: "no desktop signing key yet — create it first" };
+        const r = parseProps(readFileSync(f.desktop.props, "utf8"));
+        if (!r.storePassword)
+            return { ok: false, error: `${f.desktop.props} has no storePassword` };
+        p = { storeFile: f.desktop.jks, storePassword: r.storePassword, keyAlias: r.keyAlias || KEY_ALIAS, keyPassword: r.keyPassword || r.storePassword };
+    }
+    else {
+        const dbg = debugKeystore();
+        if (!existsSync(dbg))
+            return { ok: false, error: `${dbg} does not exist` };
+        p = { storeFile: dbg, storePassword: "android", keyAlias: "androiddebugkey", keyPassword: "android" };
+    }
+    try {
+        // The key never goes inside the repo, whatever the config dir is set to.
+        const root = realpathSync(resolve(repo));
+        const real = realpathSync(p.storeFile);
+        if (real === root || real.startsWith(root + sep))
+            return { ok: false, error: `${p.storeFile} is inside the repo — refusing to link a key that would live in it` };
+        const file = join(repo, "keystore.properties");
+        writeTextAtomic(file, fmtProps(p), { mode: 0o600 });
+        chmodSync(file, 0o600);
+        const gitignore = ensureIgnores(repo);
+        return { ok: true, kind, file, gitignore, note: `keystore.properties points at the ${kind} key${gitignore.length ? `; .gitignore += ${gitignore.join(", ")}` : ""}` };
+    }
+    catch (e) {
+        return { ok: false, error: `could not link the key: ${e.message}` };
+    }
+}
+/** Which key a repo's `keystore.properties` names — for `apkcheck.ts`. `null` when absent/unreadable. */
+export function readLink(repo) {
+    let text;
+    try {
+        text = readFileSync(join(repo, "keystore.properties"), "utf8");
+    }
+    catch {
+        return null;
+    }
+    const sf = parseProps(text).storeFile;
+    if (!sf)
+        return null;
+    if (sf === jksPath())
+        return "desktop";
+    if (sf === debugKeystore())
+        return "debug";
+    return "other";
+}
+//# sourceMappingURL=signkey.js.map

package/packages/host/dist/signkey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signkey.js","sourceRoot":"","sources":["../src/signkey.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3G,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAE1E,MAAM,CAAC,MAAM,SAAS,GAAG,UAAU,CAAC;AACpC,MAAM,aAAa,GAAG,KAAK,CAAC;AAiB5B,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACvD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;AACtD,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,CAAC,CAAC;AAC/D,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;AAEjF,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/C,MAAM,CAAC,GAAG,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAW,EAAE,EAAE,CAC/B,aAAa,CAAC,CAAC,SAAS,mBAAmB,CAAC,CAAC,aAAa,cAAc,CAAC,CAAC,QAAQ,iBAAiB,CAAC,CAAC,WAAW,IAAI,CAAC;AAEvH,MAAM,UAAU,OAAO;IACrB,MAAM,GAAG,GAAG,OAAO,EAAE,EAAE,KAAK,GAAG,SAAS,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,IAAI,QAAQ,CAAC;IAClC,MAAM,SAAS,GAAc,EAAE,CAAC;IAChC,IAAI,MAAM;QAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,GAAG;QAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;AACpI,CAAC;AAQD,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO;QACL,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS;QAC5E,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,aAAa,CAAC;QACxE,gBAAgB,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY;QAC5D,QAAQ,EAAE,MAAM,KAAK,CAAC,WAAW,gBAAgB,KAAK,CAAC,WAAW,EAAE;KACrE,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,OAAoB,EAAE;IACrD,MAAM,GAAG,GAAG,OAAO,EAAE,EAAE,GAAG,GAAG,OAAO,EAAE,EAAE,KAAK,GAAG,SAAS,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,kCAAkC,GAAG,EAAE,EAAE,CAAC;IAClH,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,GAAG,eAAe,KAAK,yHAAyH,EAAE,CAAC;IACnL,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACxC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7B,YAAY,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE;YACxD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE;SAClG,CAAC,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtB,yEAAyE;QACzE,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3I,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACxB,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,mCAAmC,GAAG,aAAa,EAAE,CAAC;IACrG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,CAA0C,CAAC;QACvD,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6CAA6C,GAAG,EAAE,EAAE,CAAC;IAClF,CAAC;AACH,CAAC;AAMD,MAAM,OAAO,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;AAEjD,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC/B,oFAAoF;IACpF,uBAAuB,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,0CAA0C,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5J,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,OAAgB,SAAS;IAC7D,IAAI,CAAW,CAAC;IAChB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC;QACnG,MAAM,CAAC,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC,CAAC,aAAa;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,uBAAuB,EAAE,CAAC;QAC7F,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;IACrJ,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,GAAG,iBAAiB,EAAE,CAAC;QAC3E,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,CAAC;QACH,yEAAyE;QACzE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,SAAS,oEAAoE,EAAE,CAAC;QAClK,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;QAC/C,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,qCAAqC,IAAI,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;IACxK,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA4B,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IACjF,CAAC;AACH,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC9F,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;IACtC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,IAAI,EAAE,KAAK,OAAO,EAAE;QAAE,OAAO,SAAS,CAAC;IACvC,IAAI,EAAE,KAAK,aAAa,EAAE;QAAE,OAAO,OAAO,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/packages/host/dist/slash.d.ts

@@ -0,0 +1,43 @@
+import type { SlashCommand, SlashListDoc } from "@waterplane/shared";
+import type { BackendDescriptor } from "./backends/types.js";
+/** The wire row (`shared/wire/slash.ts`); `name` includes the leading slash, e.g. "/context". */
+export type { SlashCommand, SlashListDoc } from "@waterplane/shared";
+export declare function listSlashCommands(cwd: string): SlashCommand[];
+/**
+ * The TUI-local command list lives in `@waterplane/shared` now: the PHONE needs the
+ * same answer this file used to keep to itself, so that a view is not delivered
+ * into a session mid-turn like an interjection. Re-exported here because
+ * `deliver.ts` has always asked this module.
+ */
+export { isLocalCommand, startsNoTurn, worksUnannounced } from "@waterplane/shared";
+type CommandsBackend = Pick<BackendDescriptor, "id" | "label" | "caps" | "facts" | "sources" | "forkVia">;
+/** The longest a phone's slash sheet waits on a backend's list before saying it did not answer. */
+export declare const COMMANDS_LIST_WAIT_MS = 5000;
+/** The longest a DELIVERY waits on it: past this the descriptor's own rule decides, unasked. */
+export declare const COMMANDS_DELIVERY_WAIT_MS = 1500;
+/** Test seam: forget every remembered list. */
+export declare function forgetBackendCommands(): void;
+/**
+ * The slash sheet's answer for ONE backend (`GET /api/slash?backend=<id>`). A backend whose
+ * `commands` fact a source answers: its own list, every row `source: "backend"`. One with none:
+ * claude's set where its slash vocabulary IS claude's (`caps.slash === "claude"` — claude-local,
+ * claude-endpoint), else an empty list WITH the sentence. A failing, null, late or malformed
+ * answer is an empty list with the sentence, never a partial list and never claude's.
+ */
+export declare function backendSlashCommands(b: CommandsBackend, cwd: string): Promise<SlashListDoc>;
+/**
+ * Does `text`, typed into a session of backend `backendId`, open a VIEW (`local`) and/or start no
+ * turn (`noTurn`)? The two facts `deliver/deliverrun.ts` hangs the sweep's Esc and the submit
+ * proof off — asked of THE SESSION'S OWN descriptor (`delivery.isLocalCommand`/`startsNoTurn`):
+ * claude's are `@waterplane/shared`'s, so claude is unchanged; a plugin's are its own (opencode
+ * answers false, Copilot and Codex their measured lists), never claude's list typed at another
+ * binary. Then, for a backend whose source lists its commands, the CLI's own word on that
+ * command beats the static rule: `local: true` ⇒ both true (the proof is the screen moving),
+ * `local: false` ⇒ both false; absent, unlisted, or no list in time ⇒ the descriptor's rule.
+ * A backend this host no longer knows ⇒ neither (an ordinary prompt: a slower proof, never a
+ * wrong one).
+ */
+export declare function deliveryCommandFacts(backendId: string | undefined, cwd: string | undefined, text: string): Promise<{
+    local: boolean;
+    noTurn: boolean;
+}>;