waterplane 0.1.6 → 0.1.14

package/node_modules/@waterplane/shared/dist/desktopfiles.js

@@ -0,0 +1,192 @@
+/**
+ * What THIS desktop adds to every Claude Code session, whatever the repo: the user CLAUDE.md, the
+ * auto-memory file of the repo's project slug, user skills, plugin skills (minus the plugins
+ * `enabledPlugins` turns off, which get a row saying so), user and local-scope MCP servers, and ONE
+ * unsized row for the managed/synced plugin packs no file here names — the static list is what
+ * disk shows; a session's measured skill listing is the truth (`SessionCarried`).
+ * The per-repo half is `agentfiles.ts` `instructionInventory()`; these rows carry `scope: "desktop"`
+ * so a list can hold both and say which is which.
+ *
+ * Pure: the caller hands in a reader rooted at the CLI config dir (`~/.claude`, or
+ * `CLAUDE_CONFIG_DIR`) and whatever it could resolve outside it (the slug, the plugin install
+ * dirs, `~/.claude.json`'s server names — `desktopSources` reads those files the one way both readers
+ * share). Paths are config-dir-relative and worded by `desktopPathWords` (alwaysonwords.ts); the
+ * `~/.claude.json` rows carry their own `~`, an outside plugin its absolute path, the managed row none. An input the caller could not read becomes a row that SAYS so, never a silent
+ * nothing and never a 0.
+ */
+import { classifySkill, MCP_UNSIZED } from "./agentfiles.js";
+import { skillDescChars } from "./contextweight.js";
+/** Every kind word `desktopInventory` writes (plugin skills carry their plugin in brackets after it). */
+export const DESKTOP_KINDS = {
+    userClaudeMd: "user CLAUDE.md",
+    memory: "auto-memory",
+    userSkill: "user skill",
+    pluginSkill: "plugin skill",
+    pluginSkills: "plugin skills",
+    userMcp: "user MCP server",
+    userMcpServers: "user MCP servers",
+    localMcp: "local MCP server",
+    plugin: "plugin",
+    managedSkills: "managed plugin skills",
+};
+/** Why a plugin row has no skills listed: `enabledPlugins` turned it off. */
+export const PLUGIN_DISABLED = "disabled in settings.json enabledPlugins — its skills are not carried";
+/** Why a plugin enabled in settings has no number: nothing under the config dir to read. */
+export const PLUGIN_UNREAD = "enabled in settings, but not installed under the config dir — its skills are not sized here";
+/** The one row for plugin packs no file on this desktop names (claude.ai-managed, synced). */
+export const MANAGED_SKILLS = "skills from claude.ai-managed or synced plugins are not on disk here; the session view's skill listing (what a session's first request carried) is the measured count";
+/** `~/.claude.json` sits in the home dir, BESIDE the config dir, so its rows name it whole (a `~` path is already words). */
+export const USER_CLAUDE_JSON = "~/.claude.json";
+const D = { scope: "desktop" };
+function skillsUnder(fs, dir) {
+    const out = [];
+    for (const e of [...fs.list(dir)].sort((a, b) => a.name.localeCompare(b.name))) {
+        if (!e.dir)
+            continue;
+        const path = `${dir}/${e.name}/SKILL.md`;
+        const text = fs.read(path);
+        if (text != null)
+            out.push({ path, text });
+    }
+    return out;
+}
+const skillKind = (base, text) => (skillDescChars(text) > 0 ? base : `${base} — no description found in its frontmatter`);
+/** This desktop's always-on rows, user files first, then skills, then the unsized MCP rows. */
+export function desktopInventory(i) {
+    const out = [];
+    const claudeMd = i.fs.read("CLAUDE.md");
+    if (claudeMd != null)
+        out.push({ path: "CLAUDE.md", kind: DESKTOP_KINDS.userClaudeMd, parts: [{ readers: ["claude"], when: { kind: "always" }, chars: claudeMd.length }], ...D });
+    if (i.memoryRel) {
+        const mem = i.fs.read(i.memoryRel);
+        if (mem != null)
+            out.push({ path: i.memoryRel, kind: DESKTOP_KINDS.memory, parts: [{ readers: ["claude"], when: { kind: "always" }, chars: mem.length }], ...D });
+    }
+    for (const s of skillsUnder(i.fs, "skills")) {
+        out.push({ path: s.path, kind: skillKind(DESKTOP_KINDS.userSkill, s.text), parts: classifySkill(s.text, ["claude"]), ...D });
+    }
+    if (i.plugins == null) {
+        out.push({ path: "plugins/installed_plugins.json", kind: DESKTOP_KINDS.pluginSkills, parts: [], unsized: "installed_plugins.json could not be read", ...D });
+    }
+    else {
+        for (const p of i.plugins) {
+            for (const s of skillsUnder(i.fs, `${p.rel.replace(/\/+$/, "")}/skills`)) {
+                out.push({ path: s.path, kind: skillKind(`${DESKTOP_KINDS.pluginSkill} (${p.name})`, s.text), parts: classifySkill(s.text, ["claude"]), ...D });
+            }
+        }
+    }
+    for (const name of i.disabledPlugins ?? []) {
+        out.push({ path: "settings.json", kind: `${DESKTOP_KINDS.plugin} ${name}`, parts: [], unsized: PLUGIN_DISABLED, ...D });
+    }
+    for (const key of i.userOnlyPlugins ?? []) {
+        out.push({ path: "settings.json", kind: `${DESKTOP_KINDS.plugin} ${key}`, parts: [], unsized: PLUGIN_UNREAD, ...D });
+    }
+    if (i.userMcp == null) {
+        out.push({ path: USER_CLAUDE_JSON, kind: DESKTOP_KINDS.userMcpServers, parts: [], unsized: "~/.claude.json could not be read", ...D });
+    }
+    else {
+        for (const name of i.userMcp) {
+            out.push({ path: USER_CLAUDE_JSON, kind: `${DESKTOP_KINDS.userMcp} ${name}`, parts: [], unsized: MCP_UNSIZED, ...D });
+        }
+    }
+    for (const name of i.localMcp ?? []) {
+        out.push({ path: USER_CLAUDE_JSON, kind: `${DESKTOP_KINDS.localMcp} ${name}`, parts: [], unsized: MCP_UNSIZED, ...D });
+    }
+    // No file names a managed pack, so this row is always there: the static list cannot see them.
+    out.push({ path: "", kind: DESKTOP_KINDS.managedSkills, parts: [], unsized: MANAGED_SKILLS, ...D });
+    return out;
+}
+const isObj = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+const strs = (v) => (Array.isArray(v) ? v.filter((x) => typeof x === "string") : []);
+/**
+ * Which plugins and MCP servers a session started in this repo on this desktop gets, out of the
+ * files that decide it: `enabledPlugins` (user < project < local; `false` turns a plugin off),
+ * `installed_plugins.json` (user scope only — those are the ones with skills to read), and
+ * `.claude.json`'s user and local-scope `mcpServers` plus the `.mcp.json` servers declined here.
+ */
+export function desktopSources(i) {
+    const enabled = new Map();
+    const takeEnabled = (json, path) => {
+        if (!isObj(json) || !isObj(json.enabledPlugins))
+            return;
+        for (const [k, v] of Object.entries(json.enabledPlugins))
+            if (typeof v === "boolean")
+                enabled.set(k, { on: v, path });
+    };
+    takeEnabled(i.userSettings, null);
+    for (const p of i.projectSettings)
+        takeEnabled(p.json, p.path);
+    const out = { plugins: [], outside: [], disabledPlugins: [], userOnlyPlugins: [], projectPlugins: [], userMcp: [], localMcp: [], mcpjsonDeclined: [] };
+    const userKeys = new Set();
+    if (i.installed !== "missing") {
+        if (!isObj(i.installed) || !isObj(i.installed.plugins))
+            out.plugins = null;
+        else {
+            for (const [key, installs] of Object.entries(i.installed.plugins)) {
+                if (!Array.isArray(installs))
+                    continue;
+                const name = key.split("@")[0] || key;
+                for (const inst of installs) {
+                    if (!isObj(inst) || inst.scope !== "user" || typeof inst.installPath !== "string")
+                        continue;
+                    userKeys.add(key);
+                    if (enabled.get(key)?.on === false) {
+                        if (!out.disabledPlugins.includes(name))
+                            out.disabledPlugins.push(name);
+                        continue;
+                    }
+                    const rel = i.relToConfig(inst.installPath);
+                    if (rel)
+                        out.plugins.push({ name, rel });
+                    else
+                        out.outside.push({ name, path: inst.installPath });
+                }
+            }
+        }
+    }
+    for (const [key, e] of enabled) {
+        if (!e.on || userKeys.has(key))
+            continue;
+        if (e.path)
+            out.projectPlugins.push({ key, path: e.path });
+        else
+            out.userOnlyPlugins.push(key);
+    }
+    const declined = new Set();
+    for (const p of i.projectSettings)
+        if (isObj(p.json))
+            strs(p.json.disabledMcpjsonServers).forEach((n) => declined.add(n));
+    if (isObj(i.userSettings))
+        strs(i.userSettings.disabledMcpjsonServers).forEach((n) => declined.add(n));
+    if (i.claudeJson !== "missing") {
+        if (!isObj(i.claudeJson))
+            out.userMcp = null;
+        else {
+            out.userMcp = isObj(i.claudeJson.mcpServers) ? Object.keys(i.claudeJson.mcpServers).sort() : [];
+            const proj = i.projectKey && isObj(i.claudeJson.projects) ? i.claudeJson.projects[i.projectKey] : undefined;
+            if (isObj(proj)) {
+                out.localMcp = isObj(proj.mcpServers) ? Object.keys(proj.mcpServers).sort() : [];
+                strs(proj.disabledMcpjsonServers).forEach((n) => declined.add(n));
+            }
+        }
+    }
+    out.mcpjsonDeclined = [...declined].sort();
+    return out;
+}
+/** Why a `.mcp.json` server row will not load here. */
+export const MCP_DECLINED = "declined on this desktop (disabledMcpjsonServers) — not loaded";
+/**
+ * The repo rows as THIS desktop loads them: a `.mcp.json` server it declined says so instead of
+ * claiming tool schemas, and the plugins the repo's settings turn on are listed, unsized.
+ */
+export function repoRowsOnThisDesktop(files, s) {
+    const declined = new Set(s.mcpjsonDeclined);
+    const rows = files.map((f) => (f.path === ".mcp.json" && f.kind.startsWith("MCP server ") && declined.has(f.kind.slice("MCP server ".length))
+        ? { ...f, unsized: MCP_DECLINED }
+        : f));
+    for (const p of s.projectPlugins) {
+        rows.push({ path: p.path, kind: `project ${DESKTOP_KINDS.plugin} ${p.key}`, parts: [], unsized: "enabled in this repo's settings — its skills load from the plugin cache and are not sized here" });
+    }
+    return rows;
+}
+//# sourceMappingURL=desktopfiles.js.map

package/node_modules/@waterplane/shared/dist/desktopfiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"desktopfiles.js","sourceRoot":"","sources":["../src/desktopfiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAmBpD,yGAAyG;AACzG,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,YAAY,EAAE,gBAAgB;IAC9B,MAAM,EAAE,aAAa;IACrB,SAAS,EAAE,YAAY;IACvB,WAAW,EAAE,cAAc;IAC3B,YAAY,EAAE,eAAe;IAC7B,OAAO,EAAE,iBAAiB;IAC1B,cAAc,EAAE,kBAAkB;IAClC,QAAQ,EAAE,kBAAkB;IAC5B,MAAM,EAAE,QAAQ;IAChB,aAAa,EAAE,uBAAuB;CAC9B,CAAC;AAEX,6EAA6E;AAC7E,MAAM,CAAC,MAAM,eAAe,GAAG,uEAAuE,CAAC;AACvG,4FAA4F;AAC5F,MAAM,CAAC,MAAM,aAAa,GAAG,6FAA6F,CAAC;AAC3H,8FAA8F;AAC9F,MAAM,CAAC,MAAM,cAAc,GACzB,uKAAuK,CAAC;AAE1K,6HAA6H;AAC7H,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAEjD,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,SAAkB,EAAE,CAAC;AAExC,SAAS,WAAW,CAAC,EAAgB,EAAE,GAAW;IAChD,MAAM,GAAG,GAAqC,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,CAAC,CAAC,GAAG;YAAE,SAAS;QACrB,MAAM,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,IAAI,WAAW,CAAC;QACzC,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;AAE1I,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAAC,CAAwB;IACvD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,QAAQ,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAClL,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,GAAG,IAAI,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACpK,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/H,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,aAAa,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/J,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,aAAa,CAAC,WAAW,KAAK,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAClJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,MAAM,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,CAAC,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACzI,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,OAAO,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,QAAQ,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,8FAA8F;IAC9F,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACpG,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC9G,MAAM,IAAI,GAAG,CAAC,CAAU,EAAY,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAgCrH;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,CAAsB;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgD,CAAC;IACxE,MAAM,WAAW,GAAG,CAAC,IAAc,EAAE,IAAmB,EAAE,EAAE;QAC1D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;YAAE,OAAO;QACxD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;YAAE,IAAI,OAAO,CAAC,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACxH,CAAC,CAAC;IACF,WAAW,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe;QAAE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAE/D,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;IACvK,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;aACtE,CAAC;YACJ,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBACvC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;gBACtC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;wBAAE,SAAS;oBAC5F,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAClB,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,KAAK,EAAE,CAAC;wBAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC;4BAAE,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBAC1H,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC5C,IAAI,GAAG;wBAAE,GAAG,CAAC,OAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;;wBACrC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACzC,IAAI,CAAC,CAAC,IAAI;YAAE,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;;YACtD,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe;QAAE,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,IAAI,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC;aACxC,CAAC;YACJ,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5G,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChB,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IACD,GAAG,CAAC,eAAe,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,MAAM,YAAY,GAAG,gEAAgE,CAAC;AAE7F;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAwB,EAAE,CAA6D;IAC3H,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3I,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE;QACjC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACR,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,aAAa,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,gGAAgG,EAAE,CAAC,CAAC;IACtM,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/node_modules/@waterplane/shared/dist/exposure.d.ts

@@ -0,0 +1,175 @@
+/**
+ * The exposure watch as the phone and the CLI both read it (`tools/exposure.mjs` writes the rows,
+ * the host serves them as setup-checklist rows, the phone draws them). What a person has accepted
+ * is decided HERE and nowhere else: if the CLI and the phone each carried a copy of "is this accept
+ * still live", one would call a finding accepted while the other pages about it.
+ *
+ * Pure, no clock (the caller passes `now`), no file reads. A source the CLI could not read is
+ * `absent` and stays visible as such: absent is never a pass and never a zero.
+ */
+import type { ComplianceAcceptRequest, ComplianceCheck } from "./wire/repo.js";
+export type Severity = "critical" | "high" | "moderate" | "low" | "info";
+/** An accept lasts until a newer version / a date / the reading changes (`change` = the finding's
+ *  text at accept time). Every condition it names must hold; none means forever. */
+export type ExposureUntil = {
+    version?: string;
+} | {
+    date?: string;
+} | {
+    change?: string;
+};
+export interface ExposureAccept {
+    reason: string;
+    at: string;
+    until?: ExposureUntil;
+}
+export interface ExposureFinding {
+    key: string;
+    measure: string;
+    subject: string;
+    version?: string;
+    level: "alert" | "digest";
+    severity?: Severity;
+    direct?: boolean;
+    text: string;
+    sources: string[];
+    advisory?: string;
+    since?: string;
+    accepted?: ExposureAccept & {
+        byMark?: true;
+    };
+    /** D3: the crash group without version or growth bucket (`app/channel/type/location`): what a triage mark sticks to. */
+    group?: string;
+    /** D3: the app version the crashes were reported from. */
+    appVersion?: string;
+    /** Set by `applyTriage` when a mark applies to this finding. */
+    triage?: ExposureTriage;
+}
+export type ExposureTriageState = "seen" | "investigating" | "fixed";
+/** A mark on a finding (or crash group): who set it and when. Nothing is hidden by it; see `applyTriage`. */
+export interface ExposureTriage {
+    state: ExposureTriageState;
+    fixedIn?: string;
+    commit?: string;
+    note?: string;
+    at: string;
+    by: {
+        kind: "person";
+    } | {
+        kind: "agent";
+        session?: string;
+        repo?: string;
+    };
+    /** The finding's `appVersion` when the mark was set: a seen / investigating mark stops holding back the push once a different app version reports the group. */
+    markedVersion?: string;
+}
+/** The triage file: triage id (`exposureTriageId`) to its mark. */
+export type ExposureTriageFile = Record<string, ExposureTriage>;
+/** A measure the run could not read: never a pass, never a zero. */
+export interface ExposureAbsent {
+    measure: string;
+    why: string;
+    unreachable: boolean;
+}
+export interface ExposureRow {
+    v: 1;
+    at: string;
+    repo: string;
+    dir: string;
+    head?: string;
+    findings: ExposureFinding[];
+    absent: ExposureAbsent[];
+    readings: {
+        installScripts?: string[];
+        settings?: Record<string, string>;
+        licences?: string[];
+        stores?: Record<string, string>;
+    };
+    only?: string[];
+    firstRun?: true;
+}
+/**
+ * `POST /api/repos/:id/exposure/run`'s answer (host `exposurerun.ts`): the collector's exit code
+ * (`null` = never started, refused or killed) and the ONE sentence the phone shows for it. `ok` is a
+ * run that wrote a reading (exit 0 or 10). `refused` = nothing was run (not on the watch, no
+ * collector on this desktop); `joined` = this tap joined a run already in flight.
+ */
+export interface ExposureRunResult {
+    ok: boolean;
+    exit: number | null;
+    sentence: string;
+    refused?: true;
+    joined?: true;
+}
+/** Built-in accepts, merged UNDER the accepts file's (the file wins). Keys are what parse.mjs emits. */
+export declare const PRE_ACCEPTED: Record<string, ExposureAccept>;
+/** Semver-ish compare (-1/0/1); a pre-release sorts below its release, `v` and `+build` ignored. */
+export declare function semverCmp(a: string, b: string): number;
+/** What a triage mark sticks to: the crash group when there is one, else the finding key. */
+export declare const exposureTriageId: (f: Pick<ExposureFinding, "key" | "group">) => string;
+/** Is this accept still live for this finding? Every condition it names must hold; none => forever. */
+export declare function acceptLive(f: ExposureFinding, a: ExposureAccept, now: Date | string): boolean;
+/** Set `accepted` on every finding with a live accept; PRE_ACCEPTED sits under the file's (file wins). */
+export declare function applyAccepts(findings: ExposureFinding[], accepts: Record<string, ExposureAccept> | null | undefined, now: Date | string): ExposureFinding[];
+/**
+ * Clean a parsed triage file: keep the entries that are well-formed marks, drop the rest (a hand edit, a shape from
+ * another version). Never throws; a dropped entry reads as "no mark", never as a thrown checklist or sweep.
+ */
+export declare function cleanTriageFile(v: unknown): ExposureTriageFile;
+/** The sentence a seen / investigating / fixed mark adds to a finding's row. */
+export declare function triageWords(t: ExposureTriage): string;
+/**
+ * Apply triage marks (pure). seen / investigating: still open, carries `triage`. fixed + `appVersion` older than
+ * `fixedIn`: listed as `accepted` (not counted, never pushed) with words saying installs still report it. fixed with
+ * no `appVersion` or no `fixedIn`: not counted while the triage id matches (a finding whose key changes is a new one).
+ * fixed + `appVersion` >= `fixedIn`: a REGRESSION, stays an alert with its text prefixed. An existing accept is kept.
+ */
+export declare function applyTriage(findings: ExposureFinding[], triage: ExposureTriageFile | null | undefined): ExposureFinding[];
+/** `<measure>:<subject>@<version>` without its `@<version>`; null for `adv:` keys and keys with no version. */
+export declare function exposureVersionStem(key: string): string | null;
+/** The last parseable JSON line of a JSONL string; a torn last line (a crash mid-append) is skipped. */
+export declare function readLastRow(text: string | null | undefined): ExposureRow | null;
+/**
+ * The line each measure crosses, in words, for the row's detail. Code defaults, one phrase per
+ * measure id the collector emits; a measure not listed has NO threshold text (absent, never made up).
+ */
+export declare const EXPOSURE_THRESHOLD: Record<string, string>;
+export declare const EXPOSURE_SUMMARY_ID = "exposure";
+/**
+ * The fix the `B4:default-branch` finding (no ruleset, no protection) offers: the host creates the
+ * owner's two standard rulesets on GitHub (`protectmain.ts`). Confirm-gated — it changes the remote.
+ */
+export declare const PROTECT_MAIN_FIX = "protect-main";
+/**
+ * The fix every open D3 (Connect IQ crash group) finding offers: the host runs the daily runner's
+ * `era-seen`, which has the ERA checker record EVERY group it lists as seen (its own `--mark-seen`;
+ * a group that grows or recurs comes back) and then reads again. One button per row, one effect for
+ * all of them — the confirm words say "every". Confirm-gated: it marks findings handled in bulk.
+ */
+export declare const ERA_SEEN_FIX = "era-seen";
+/**
+ * Whether a checklist row belongs to the readings sheet's `watch` region (the daily outside view:
+ * advisories, stores, Scorecard) rather than the set-up conventions. The ONE spelling of the split —
+ * both regions, their counts and their bulk buttons cut on it.
+ */
+export declare const isWatchCheck: (c: ComplianceCheck) => boolean;
+/** The finding key inside a check id (inverse of `exposureCheckId`); null when the id is not one. */
+export declare const exposureKeyOf: (id: string) => string | null;
+/** The checklist row id of one finding: the prefix is how the host knows an accept request is ours. */
+export declare const exposureCheckId: (key: string) => string;
+/**
+ * One exposure row as setup-checklist rows: a summary first, then one per finding. Accepted
+ * findings are still sent (marked `accepted`); the phone draws them folded, so "stop accepting"
+ * never has to guess what the row would have said.
+ */
+export declare function exposureChecks(row: ExposureRow, name: string, accepts: Record<string, ExposureAccept> | null, now: Date | string, opts?: {
+    staleMs?: number;
+}, triage?: ExposureTriageFile | null): ComplianceCheck[];
+/** Validate one accept request body: ours, with words for why not. Nothing is stored here. */
+export declare function cleanAcceptRequest(body: unknown, now?: Date | string): {
+    ok: true;
+    value: ComplianceAcceptRequest;
+} | {
+    ok: false;
+    error: string;
+};