waterplane 0.0.1 → 0.1.6

package/node_modules/@waterplane/shared/dist/hosturl.js

@@ -0,0 +1,129 @@
+/**
+ * Where "the host" is, when the app is not being served BY the host.
+ *
+ * In the browser the PWA is served by the daemon itself, so every `/api/...`
+ * and `/ws` is same-origin and there is nothing to resolve — that is why the
+ * whole web client is written with root-relative URLs and why it must stay that
+ * way (the service worker, the CORS guard in `host/origin.ts` and the auth
+ * cookie all assume one origin).
+ *
+ * In the **Android app** (`packages/app`, a Capacitor shell) the app shell is
+ * loaded out of the APK at `http://localhost`, precisely so that a dead tunnel
+ * can no longer take the whole UI away — there is no navigation left that can
+ * land on the browser's error page. The cost of that is that the page origin is
+ * no longer the daemon: the same root-relative URLs now point at the APK's own
+ * asset server. This module is the one place that knows how to aim them at the
+ * real host instead.
+ *
+ * It lives in `shared` rather than in `web` for the same reason `queue.ts` does:
+ * `shared/dist` is node-runnable, so the rules below are pinned by an e2e script
+ * instead of by a comment. They are security-relevant — a base address typed in
+ * by a human on a phone keyboard ends up as the target of every API call the app
+ * makes, and a rewrite that is too eager can point a request somewhere the user
+ * never named.
+ */
+/**
+ * The only path prefixes that are ever re-aimed at the host.
+ *
+ * Deliberately a short allowlist rather than "everything root-relative". The
+ * whole point of the native shell is that `/`, `/assets/*`, `/sw.js`, icons and
+ * every other shell asset are served from the APK and keep working with no
+ * network at all; rewriting them onto the host would put the app straight back
+ * into the failure it exists to fix. `/api` and `/ws` are the only two things
+ * that genuinely cannot be answered locally.
+ */
+export const HOST_PATH_PREFIXES = ["/api", "/ws"];
+/** Default daemon port — matches `WATERPLANE_PORT`'s default in the host. */
+export const DEFAULT_HOST_PORT = 8770;
+/**
+ * Turn whatever a human typed into a canonical `scheme://host[:port]` base, or
+ * `null` if it cannot be one.
+ *
+ * Accepts the forms someone actually types on a phone: a bare Tailscale IP
+ * (`100.64.0.5`), an IP with a port, a MagicDNS name, or a full URL. A bare
+ * host gets `http://` and the daemon's default port, because that is the
+ * address the daemon prints at boot; an explicitly `https` URL keeps its own
+ * (implicit 443) port, since that form is the `tailscale serve` front door and
+ * appending 8770 to it would aim at a port nothing listens on.
+ *
+ * Everything after the authority is dropped — a base is an origin, and letting a
+ * path survive would silently prefix every API call with it.
+ *
+ * The scheme allowlist is the security-relevant part: this string is fed to
+ * `fetch`, and without it `javascript:` / `data:` typed (or pasted) into the
+ * setup field would become the base of every request the app makes.
+ */
+export function normalizeHostBase(raw) {
+    const s = (raw || "").trim();
+    if (!s)
+        return null;
+    // No scheme? Assume the daemon's own plain-HTTP address. `//host` is treated
+    // the same way rather than as protocol-relative: there is no page protocol to
+    // inherit that would mean anything here.
+    const withScheme = /^[a-zA-Z][a-zA-Z0-9+.-]*:\/\//.test(s)
+        ? s
+        : `http://${s.replace(/^\/+/, "")}`;
+    let u;
+    try {
+        u = new URL(withScheme);
+    }
+    catch {
+        return null;
+    }
+    if (u.protocol !== "http:" && u.protocol !== "https:")
+        return null;
+    if (!u.hostname)
+        return null;
+    // `URL.hostname` STRIPS the brackets off an IPv6 literal, so they have to go
+    // back on: `http://fd7a::1:8770` re-parses with `:1:8770` as garbage, and a
+    // Tailscale address can perfectly well be IPv6.
+    const bare = u.hostname.toLowerCase();
+    const host = bare.includes(":") ? `[${bare.replace(/^\[|\]$/g, "")}]` : bare;
+    // One rule, so the field is predictable: over plain HTTP a missing port means
+    // the daemon's own port (nothing of ours listens on 80 — a reverse proxy there
+    // is the exception, and its operator can type `:80`). Over HTTPS a missing
+    // port means 443 and is left implicit, because that form is the
+    // `tailscale serve` front door.
+    const port = u.port || (u.protocol === "http:" ? String(DEFAULT_HOST_PORT) : "");
+    return `${u.protocol}//${host}${port ? `:${port}` : ""}`;
+}
+/** Does this URL name something only the daemon can answer? */
+export function isHostPath(url) {
+    // Path-absolute only. A protocol-relative `//evil.example/api` is an ABSOLUTE
+    // url that happens to start with a slash; treating it as a path would splice
+    // the attacker's authority in behind ours.
+    if (!url.startsWith("/") || url.startsWith("//"))
+        return false;
+    return HOST_PATH_PREFIXES.some((p) => url === p || url.startsWith(`${p}/`) || url.startsWith(`${p}?`));
+}
+/**
+ * Aim a root-relative app URL at `base`. Anything else is returned untouched —
+ * absolute URLs (the app already built them), relative ones (ambiguous, and no
+ * call site produces them), and every shell path that must stay local.
+ *
+ * `base` may be empty, which is the browser case: nothing is rewritten and the
+ * client behaves exactly as it did before this module existed.
+ */
+export function resolveHostUrl(base, url) {
+    if (!base)
+        return url;
+    if (!isHostPath(url))
+        return url;
+    return `${base.replace(/\/+$/, "")}${url}`;
+}
+/**
+ * The WebSocket URL for a base. `ws` is the one thing a fetch shim cannot cover
+ * (a WebSocket handshake does not go through `fetch`), so `web/ws.ts` calls this
+ * directly.
+ */
+export function wsUrlFor(base, path = "/ws") {
+    if (!base)
+        return null;
+    const b = base.replace(/\/+$/, "");
+    if (b.startsWith("https://"))
+        return `wss://${b.slice("https://".length)}${path}`;
+    if (b.startsWith("http://"))
+        return `ws://${b.slice("http://".length)}${path}`;
+    return null;
+}
+//# sourceMappingURL=hosturl.js.map

package/node_modules/@waterplane/shared/dist/hosturl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosturl.js","sourceRoot":"","sources":["../src/hosturl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,KAAK,CAAU,CAAC;AAE3D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,6EAA6E;IAC7E,8EAA8E;IAC9E,yCAAyC;IACzC,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IACtC,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7B,6EAA6E;IAC7E,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,2EAA2E;IAC3E,gEAAgE;IAChE,gCAAgC;IAChC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,8EAA8E;IAC9E,6EAA6E;IAC7E,2CAA2C;IAC3C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACzG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAA+B,EAAE,GAAW;IACzE,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC;IACtB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,IAA+B,EAAE,IAAI,GAAG,KAAK;IACpE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IAClF,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@waterplane/shared/dist/index.d.ts

@@ -0,0 +1,283 @@
+/**
+ * waterplane wire protocol — shared between host daemon and web client.
+ *
+ * Transport: one WebSocket per browser tab. Messages are JSON, except
+ * raw PTY bytes which are framed as { t: "pty", ... } with base64 to keep
+ * everything on the single JSON channel (simplicity over micro-perf).
+ *
+ * This file is the INDEX, not the protocol. Every name below is re-exported, so
+ * `import { SessionInfo } from "@waterplane/shared"` keeps working and no call site
+ * anywhere needs to know which file a type moved to — which is the whole reason
+ * the split is safe to make. What it buys is that the protocol is now legible
+ * by subsystem, and that a feature touching one area stops rewriting the file
+ * every other feature also edits. It was 1,768 lines and 20 commits deep, which
+ * made it, with `App.tsx` and `main.ts`, one of the three permanent
+ * merge-conflict surfaces in the project.
+ *
+ * The DTOs are grouped by what a field is ABOUT; the two message unions are
+ * kept apart from them, because a union changes when a MESSAGE is added and a
+ * DTO changes when a FIELD is.
+ */
+/** A drivable session, and everything that describes one of them. */
+export * from "./wire/session.js";
+/** What a *Recently closed* row may say — clipped, optional, never guessed. */
+export * from "./closed.js";
+/** The follow-up flag: who set it, what it may say, its one wording. */
+export * from "./followup.js";
+/** What a conversation bookmark may say (R-conversations-007). */
+export * from "./bookmark.js";
+/** The emergency halt latch: its state, its receipt and the one refusal sentence. */
+export * from "./halt.js";
+/** The wire subset of a host-side backend descriptor — what a picker or a
+ *  capability check is allowed to know about a backend other than claude. */
+export * from "./wire/backend.js";
+/** The opt-in second opinion, and the audit of everything typed into a session. */
+export * from "./wire/sent.js";
+export * from "./plugin.js";
+export * from "./pluginfile.js";
+export * from "./pluginmaturity.js";
+export * from "./wire/updates.js";
+export * from "./stream.js";
+/** Metering, feature usage, scraped CLI usage, and the desktop's own load. */
+export * from "./wire/telemetry.js";
+/** Usage readings per source: claude's adapter, the chip's one cut, the long-press words. */
+export * from "./usagesources.js";
+/** What an arbitrary span cost, by hour, repo and conversation — `GET /api/costwindow`. */
+export * from "./wire/costwindow.js";
+/** Which notification kinds may fire at all — checked on BOTH ends. */
+export * from "./wire/notify.js";
+/** The Android background link: which frames a notify-only socket is sent. */
+export * from "./wire/notifylink.js";
+/** Work the host does on the user's behalf: backlog, builds, fan-out, downloads. */
+export * from "./wire/work.js";
+/** What got installed on which phone. One desktop, many devices — so the log of
+ *  what a build actually landed on lives with the desktop that produced it. */
+export * from "./wire/install.js";
+/** A picture of a running screen, and the claim the run is ALLOWED to make
+ *  about it — "verified" is reserved for an oracle reading, and everything that
+ *  was not measured is absent rather than zero. */
+export * from "./wire/capture.js";
+/** A repo or worktree: its git state, its setup verdict, the CLI install behind it. */
+export * from "./wire/repo.js";
+/** The reader view's document — the CLI's own conversation log, parsed. */
+export * from "./wire/transcript.js";
+/** The first-app onboarding job: plan, consent lines, persisted steps. */
+export * from "./wire/onboard.js";
+/** The two unions on the wire, `PROTOCOL_VERSION`, and the JSON codec. */
+export * from "./wire/messages.js";
+/** The shape check on a decoded client frame, ahead of the host's dispatch. */
+export * from "./clientframe.js";
+export * from "./sessionbudget.js";
+export * from "./spendwarn.js";
+export * from "./queue.js";
+export * from "./sendstamp.js";
+export * from "./hosturl.js";
+export * from "./hosts.js";
+export * from "./lanroute.js";
+export * from "./pairing.js";
+export * from "./devices.js";
+export * from "./passive.js";
+export * from "./askrules.js";
+export * from "./promptid.js";
+export * from "./settings.js";
+export * from "./repocolor.js";
+export * from "./hints.js";
+/** The HTTP fuse (see netfuse.ts) — here, not in `web`, so a node e2e can point
+ *  it at a server that never answers and prove the client gives up. */
+export * from "./netfuse.js";
+/** What the phone records when an HTTP request stalls (see netstall.ts). */
+export * from "./netstall.js";
+/** Scheduled prompts — a wall-clock rule, its zone, and the lead time before an
+ *  anchor (the weekly usage reset) that the rule is actually tracking. */
+export * from "./schedule.js";
+/** Reconstructed alt-screen scrollback — the only history a phone has when the
+ *  scroll it would otherwise send to the TUI can't reach it. */
+export * from "./screenlog.js";
+/** Gallery listings the phone can still answer with the tunnel down — what a
+ *  cached listing is allowed to be re-filtered into, and what it is not. */
+export * from "./gallery.js";
+/** Clearing OUT a transport directory: the age ladder, the cut, and the
+ *  sentences. Plans and describes — it deletes nothing and schedules nothing. */
+export * from "./sweep.js";
+/** The same clearing-out, cut by BUILD FAMILY rather than by age — the by-hand
+ *  half of `artifacts.ts`' automatic prune, over the same `familyKey`. */
+export * from "./sweepfamilies.js";
+/** What the DESKTOP is holding, as the phone reads it: the cross-repo
+ *  transport survey, and the daemon's own store by owner and by bound. */
+export * from "./deskstorage.js";
+/** What the LOCAL model runner is holding — the wire shapes, and the pure
+ *  "will a second model fit" sentence the phone says under the picker. */
+export * from "./wire/localrt.js";
+export * from "./wire/sysstat.js";
+export * from "./localrt.js";
+export * from "./wire/localusage.js";
+export * from "./localusage.js";
+/** A backend's own token ledger (`GET /api/tokenstats/<id>`) — never summed with claude's. */
+export * from "./wire/backendtokens.js";
+/** The seam a backend hands a fact over through, beside its screen reader. */
+export * from "./backendsources.js";
+/** One rule for what a 2.2 source slot may answer — the host's consumers and the plugin testkit both ask it. */
+export * from "./sourceshape.js";
+/** `caps.launchModes` (2.2): the modes a session can START in, one rule for host and phone. */
+export * from "./launchmodes.js";
+/** The conversation-binding ladder a backend plugin calls (plugin contract 2.0). */
+export * from "./bindconv.js";
+/** What became of the FILES a queued prompt names — the difference between a
+ *  prompt that is sendable as written and one that points at nothing. */
+export * from "./attach.js";
+/** A session the HOST is holding until the files its first prompt names have
+ *  landed — the handover that stops a bad tunnel from killing a whole plan. */
+export * from "./launch.js";
+/** Several pictures as ONE picture — the arrangement, so a mark can span the
+ *  screens it is about. Pure geometry; the canvas half lives in web. */
+export * from "./collage.js";
+/** The pad's per-note merge and its tombstones — what stops a synced pad from
+ *  deleting notes behind your back — plus the words the sheet says. */
+export * from "./pad.js";
+/** The usage BUDGET — the ceiling that stops automatic work BEFORE the CLI's
+ *  own limit banner, and lets it start again when the window resets. */
+export * from "./budget.js";
+/** Budget PERIODS (rolling, calendar month/week/day, span), the one `periodBounds`
+ *  that decides their edges, and the pacing maths over a period's spend. */
+export * from "./period.js";
+/** The billing profile (subscription / api / cloud / unknown) and the pure
+ *  classifier the host's probe feeds. */
+export * from "./billing.js";
+/** The health of every point where this app reads a CLI it does not own — the
+ *  rule that makes degrading to null stop being quiet. */
+export * from "./clihealth.js";
+/** How big a model's context window is — the one number that makes every
+ *  session's context graph share a y axis instead of each inventing its own. */
+export * from "./ctxwindow.js";
+/** How much of a small model's window Claude Code's own prompt takes — the
+ *  picker's sentence, from two measured numbers or none. */
+export * from "./windowadvice.js";
+/** What one more turn in a session costs against a fresh one — the reminder
+ *  behind the cost chip, the context sheet's top panel and the one toast. Pure,
+ *  and deliberately produces sentences and never a refusal. */
+export * from "./sessioncost.js";
+/** What a repo costs to have open before anyone types — CLAUDE.md plus the
+ *  skill descriptions, which are the always-loaded half. Behind the repo-setup
+ *  checklist's context-weight row. */
+export * from "./contextweight.js";
+/** Every agent-instruction file in a folder, who reads it (Claude Code, Copilot) and when; the repeats between them. */
+export * from "./agentfiles.js";
+/** Which `autoCompactWindow` a spawned session would see, and from where —
+ *  env > repo local > repo > user. Behind the checklist's auto-compact row. */
+export * from "./autocompact.js";
+/** Opt-ins: the advanced things a repo can turn on — one catalog, a probe per
+ *  offer on the host, three states the person controls, counted in nothing. */
+export * from "./optins.js";
+/** What a pile of token counts MEANS — the derived figures and the words for
+ *  them, including why a single "tokens used" number is 96% cache reads. */
+export * from "./tokens.js";
+/** What those tokens WOULD have cost at Anthropic's published list prices — a
+ *  counterfactual, not a bill, and the module says so at length. */
+export * from "./pricing.js";
+/** The durable Intent — one "do this, there, when that is true", owned by the
+ *  HOST, and the one ladder that decides whether it may run yet. */
+export * from "./intent.js";
+export * from "./fanoutruns.js";
+/** The cost window read both ways: the hour bucket, launches, ranked repos,
+ *  dollars-per-weekly-point (a refusal when it cannot be calibrated), and the
+ *  burn rate's reset-cut stretch and push words. */
+export * from "./costwindow.js";
+export * from "./burn.js";
+/** "Of the work still standing, what is actually still worth doing?" — the
+ *  rules that stop a confident-sounding assessment from retiring real work. */
+export * from "./assess.js";
+/** What a machine may CALL somebody else's words — the four kinds, the author
+ *  stamp that says whether a title may be overwritten, and the one display rule
+ *  deciding whose name is on a row. */
+export * from "./naming.js";
+/** The files an item's words name — images anywhere and the inbox/outbox
+ *  transport by full path (the row's thumbnails; anything folding two items
+ *  into one must keep every one). */
+export * from "./itempaths.js";
+export * from "./urls.js";
+export * from "./slash.js";
+/** The slash sheet's answer (`GET /api/slash`), a backend's own list included (2.2 `commands`). */
+export * from "./wire/slash.js";
+/** What a repo can already build, read out of its own manifests — the free half
+ *  of the Build sheet's "set up", for adding one more command without spending
+ *  a turn on it. */
+export * from "./buildscan.js";
+/** Cleaning, merging and wording the install log — the half that must not lose
+ *  or duplicate a history when a phone re-reports everything on every connect. */
+export * from "./installlog.js";
+/** What a build leaves behind and what it is called: the collect-into-the-outbox
+ *  policy, the versioned name, `familyKey` ("which artifact IS this"), the fold
+ *  that stops one APK arriving twice, and what a prune may remove. */
+export * from "./artifacts.js";
+/** What a build button ASKS before it runs — one command against one member of
+ *  a monorepo, instead of forty near-identical buttons. Substitution, the env
+ *  copy, and the refusal that stops an unattended run guessing a value. */
+export * from "./buildparams.js";
+/** The geometry a PTY may be given, and the floor under it — a grid too small
+ *  for the CLI to draw its composer in is a grid no delivery can be confirmed
+ *  against, so neither end accepts one. */
+export * from "./ptysize.js";
+/** The CLI's own working line, read off raw PTY bytes — what the agent is doing
+ *  right now. One matcher for the phone's reader and the host's turn-end
+ *  verification, because they are one question. */
+export * from "./working.js";
+/** The keys the CLI's footer and pickers tell a person to press, and the
+ *  bytes each one is — the host reads the hints, the phone offers the keys. */
+export * from "./keyhint.js";
+/** A key with Ctrl / Alt / Shift held, as xterm's bytes — the phone's sticky
+ *  modifiers and its Keys sheet send through this one encoding. */
+export * from "./chord.js";
+/** Dictation's wire shape: the audio format the phone writes and the host
+ *  reads, the caps in seconds, and the one wording for a clip that is refused
+ *  — so a person is told the same thing whichever end noticed. */
+export * from "./dictate.js";
+export * from "./dictateterms.js";
+/** The zero-token repo-health series: where the tool and its artifacts live,
+ *  the shapes a status and a plot arrive as, and the sentence for every state
+ *  that has nothing to draw. */
+export * from "./repohealth.js";
+/** The other half of the same subject: the parsers that stop the host and the
+ *  phone reading one line of the engine's output two different ways. Split out
+ *  because a dropped field and a wrong sentence fail differently — and because
+ *  the one file was at the lint cap. */
+export * from "./repohealthread.js";
+/** The health index: the one layer over the repo-health series that takes a
+ *  side (an absolute 0–100 score per week), with its move test and wording. */
+export * from "./healthindex.js";
+/** The whole index answer from a series file, for the host route and the VS Code view alike. */
+export * from "./healthindexresponse.js";
+/** The context one request carried, per week, for the line beside the score. */
+export * from "./healthspend.js";
+/** A repo's requirements list: the prompt filter, the item format, the preset. */
+export * from "./requirements.js";
+/** Where the claude CLI keeps its private dir (CLAUDE_CONFIG_DIR) and its project-folder slug rule. */
+export * from "./claudeconfig.js";
+export * from "./statedir.js";
+/** A live session running an older `claude` than the installed one, and the
+ *  words for restarting it onto the new binary in the SAME conversation. */
+export * from "./clirestart.js";
+/** What a background shell under a session is DOING, in words: the bucket a
+ *  reading falls into, the sentence for it, the chip and the close-confirm
+ *  line — pure, over the raw facts `host/shells.ts` reads off the process
+ *  table. */
+export * from "./shells.js";
+/** Which product this is — every brand-bearing identifier, current and past —
+ *  and the pure readers that fall back through the past ones. */
+export * from "./brand.js";
+export * from "./envresolve.js";
+export * from "./brandmigrate.js";
+/** Peer desktops: delegate a job to another host and take its report back —
+ *  the wire DTOs, the address and remote-identity rules, the report prompt. */
+export * from "./peer.js";
+export * from "./claudeversion.js";
+/** The oldest Node the host runs on (engines, doctor, the early refusal). */
+export * from "./nodemin.js";
+/** The terminal background/foreground per theme: the phone grid and the
+ *  host answer to the tmux client colour queries. */
+export * from "./termpalette.js";
+/** The caps and pure folds every conversation reader shares (claude's jsonl and a plugin's store reader). */
+export * from "./transcriptfold.js";
+/** A fork's `<config dir>/theme.json`: colour tokens, terminal palette, display name. */
+export * from "./themeoverlay.js";
+/** The code folder: `GET/POST /api/host/root` and whether the first-start dialog asks. */
+export * from "./rootchoice.js";