youmd 0.8.15 → 0.8.17

package/dist/lib/remote-command.js

@@ -0,0 +1,279 @@
+"use strict";
+/**
+ * Cross-machine remote command bus convention (CROSS-MACHINE-AGENTS.md §3).
+ *
+ * Phase 1 is bus-only: commands and results travel as ordinary agent-bus
+ * messages distinguished by `channel` + `kind` + `metadata`. This module owns
+ * the envelope schema, the daemon-side handler, and a shared dispatch/poll
+ * helper so the CLI and MCP tool do not duplicate the wire format.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SeenRequestSet = exports.DEFAULT_COMMAND_TTL_MS = exports.REMOTE_RESULT_CHANNEL = exports.REMOTE_COMMAND_CHANNEL = void 0;
+exports.buildCommandMetadata = buildCommandMetadata;
+exports.dispatchRemoteCommand = dispatchRemoteCommand;
+exports.pollForResult = pollForResult;
+exports.shouldHandleCommand = shouldHandleCommand;
+exports.handleRemoteCommand = handleRemoteCommand;
+exports.describeWhitelist = describeWhitelist;
+const os = __importStar(require("os"));
+const api_1 = require("./api");
+const request_id_1 = require("./request-id");
+const remote_executor_1 = require("./remote-executor");
+exports.REMOTE_COMMAND_CHANNEL = "remote-command";
+exports.REMOTE_RESULT_CHANNEL = "remote-command-result";
+/** Default validity window for a dispatched command (ms). */
+exports.DEFAULT_COMMAND_TTL_MS = 5 * 60 * 1000;
+function asMetadata(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : {};
+}
+/** Build the command metadata (pure — for tests + dispatch). */
+function buildCommandMetadata(opts, now = Date.now()) {
+    const ttl = opts.ttlMs && opts.ttlMs > 0 ? opts.ttlMs : exports.DEFAULT_COMMAND_TTL_MS;
+    return {
+        requestId: (0, request_id_1.generateRequestId)(),
+        action: opts.action,
+        args: opts.args,
+        issuedBy: opts.issuedBy ?? os.userInfo().username,
+        issuedAt: now,
+        expiresAt: now + ttl,
+        secretValuesExposed: false,
+    };
+}
+/** Dispatch a whitelisted command to a target machine over the agent bus. */
+async function dispatchRemoteCommand(opts) {
+    if (!(0, remote_executor_1.isAllowedRemoteAction)(opts.action)) {
+        return { ok: false, error: `action not in whitelist: ${opts.action}` };
+    }
+    const meta = buildCommandMetadata({
+        action: opts.action,
+        args: opts.args,
+        ttlMs: opts.ttlMs,
+    });
+    const body = opts.message?.trim() ||
+        `${opts.action}${opts.args?.project ? ` ${opts.args.project}` : ""}`;
+    const res = await (0, api_1.sendAgentBusMessage)({
+        channel: exports.REMOTE_COMMAND_CHANNEL,
+        kind: "command",
+        body,
+        sourceHost: os.hostname(),
+        sourceAgent: opts.sourceAgent ?? "youmd remote",
+        sourceRuntime: process.version,
+        targetHost: opts.machine,
+        metadata: meta,
+    });
+    if (!res.ok) {
+        const errBody = res.data;
+        const message = errBody?.error?.message || `dispatch failed (HTTP ${res.status})`;
+        return { ok: false, error: message };
+    }
+    return {
+        ok: true,
+        data: { requestId: meta.requestId, expiresAt: meta.expiresAt, targetHost: opts.machine },
+    };
+}
+/** Bounded poll of the result channel for a matching requestId. */
+async function pollForResult(opts) {
+    const interval = opts.intervalMs ?? 2000;
+    const timeout = opts.timeoutMs ?? 60000;
+    const deadline = Date.now() + timeout;
+    while (Date.now() < deadline) {
+        const res = await (0, api_1.listAgentBusMessages)({
+            channel: exports.REMOTE_RESULT_CHANNEL,
+            limit: 50,
+        });
+        if (res.ok) {
+            const match = (res.data?.messages || []).find((m) => {
+                const meta = asMetadata(m.metadata);
+                return meta.requestId === opts.requestId;
+            });
+            if (match) {
+                const meta = asMetadata(match.metadata);
+                return meta;
+            }
+        }
+        await new Promise((r) => setTimeout(r, interval));
+    }
+    return null;
+}
+// ─── Daemon handler (target side) ──────────────────────────────────────────────
+/** Local idempotency set so a replayed command is a no-op. Daemon-process scoped. */
+class SeenRequestSet {
+    constructor() {
+        this.seen = new Set();
+    }
+    has(id) {
+        return this.seen.has(id);
+    }
+    add(id) {
+        this.seen.add(id);
+        // Bound memory: keep the most recent ~1000 ids.
+        if (this.seen.size > 1000) {
+            const first = this.seen.values().next().value;
+            if (first !== undefined)
+                this.seen.delete(first);
+        }
+    }
+}
+exports.SeenRequestSet = SeenRequestSet;
+/**
+ * Pure decision: should the daemon act on this message? Filters channel,
+ * targetHost, idempotency, and expiry. No side effects — testable.
+ */
+function shouldHandleCommand(message, seen, hostname = os.hostname(), now = Date.now()) {
+    if (message.channel !== exports.REMOTE_COMMAND_CHANNEL) {
+        return { process: false, reason: "not a remote-command" };
+    }
+    const target = String(message.targetHost || "").toLowerCase();
+    if (!target || target !== hostname.toLowerCase()) {
+        return { process: false, reason: "not addressed to this host" };
+    }
+    const meta = asMetadata(message.metadata);
+    const requestId = typeof meta.requestId === "string" ? meta.requestId : "";
+    if (!requestId) {
+        return { process: false, reason: "missing requestId" };
+    }
+    if (seen.has(requestId)) {
+        return { process: false, reason: "already processed" };
+    }
+    const expiresAt = Number(meta.expiresAt);
+    if (Number.isFinite(expiresAt) && now > expiresAt) {
+        return { process: false, reason: "command expired" };
+    }
+    return { process: true };
+}
+/**
+ * Process one inbound command message end-to-end: validate, execute via the
+ * whitelisted executor, post a result message, and write a brainActivity audit
+ * row. Marks the requestId seen BEFORE execution so a concurrent replay is a
+ * no-op. Never throws.
+ */
+async function handleRemoteCommand(message, seen, log) {
+    const decision = shouldHandleCommand(message, seen);
+    if (!decision.process)
+        return;
+    const meta = asMetadata(message.metadata);
+    const requestId = String(meta.requestId);
+    const action = typeof meta.action === "string" ? meta.action : "(unknown)";
+    const args = meta.args && typeof meta.args === "object" && !Array.isArray(meta.args)
+        ? meta.args
+        : undefined;
+    const issuerHost = message.sourceHost || undefined;
+    // Mark seen up-front for idempotency (a replay won't re-execute).
+    seen.add(requestId);
+    log?.(`remote-command ${action} (${requestId}) from ${issuerHost ?? "?"}`);
+    let result;
+    try {
+        result = await (0, remote_executor_1.executeRemoteAction)({ action, args });
+    }
+    catch (err) {
+        result = {
+            ok: false,
+            action,
+            exitCode: null,
+            output: "",
+            error: err instanceof Error ? err.message : String(err),
+            status: "error",
+            secretValuesExposed: false,
+        };
+    }
+    const resultMeta = {
+        requestId,
+        ok: result.ok,
+        action: result.action,
+        exitCode: result.exitCode,
+        output: result.output,
+        gitState: result.gitState,
+        status: result.status,
+        error: result.error,
+        completedAt: Date.now(),
+        secretValuesExposed: false,
+    };
+    const summary = result.ok
+        ? `${result.action} ok`
+        : `${result.action} ${result.status}: ${result.error ?? "failed"}`;
+    // Post the result back to the issuer.
+    try {
+        await (0, api_1.sendAgentBusMessage)({
+            channel: exports.REMOTE_RESULT_CHANNEL,
+            kind: "result",
+            body: summary,
+            sourceHost: os.hostname(),
+            sourceAgent: "youmd remote daemon",
+            sourceRuntime: process.version,
+            targetHost: issuerHost,
+            metadata: resultMeta,
+        });
+    }
+    catch (err) {
+        log?.(`failed to post remote-command-result: ${err instanceof Error ? err.message : err}`);
+    }
+    // Audit row — every dispatch outcome is recorded.
+    try {
+        await (0, api_1.recordBrainActivity)({
+            activityId: `remote-command:${requestId}`,
+            source: "daemon",
+            channel: exports.REMOTE_RESULT_CHANNEL,
+            kind: "result",
+            status: result.ok ? "ok" : result.status === "rejected" ? "warn" : "error",
+            title: `remote command ${result.action}`,
+            detail: summary,
+            sourceHost: os.hostname(),
+            sourceAgent: "youmd remote daemon",
+            sourceRuntime: process.version,
+            metadata: {
+                requestId,
+                action: result.action,
+                ok: result.ok,
+                status: result.status,
+                exitCode: result.exitCode,
+                issuerHost: issuerHost ?? null,
+                project: args?.project ?? null,
+                secretValuesExposed: false,
+            },
+        });
+    }
+    catch (err) {
+        log?.(`failed to write remote-command audit: ${err instanceof Error ? err.message : err}`);
+    }
+    log?.(summary);
+}
+/** Human-readable list of whitelisted actions for help/usage text. */
+function describeWhitelist() {
+    return Object.entries(remote_executor_1.ACTION_SPECS).map(([id, spec]) => `${id} — ${spec.description}${spec.mutating === "reversible" ? " (mutating, reversible)" : ""}`);
+}
+//# sourceMappingURL=remote-command.js.map

package/dist/lib/remote-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-command.js","sourceRoot":"","sources":["../../src/lib/remote-command.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsEH,oDAcC;AAGD,sDAoCC;AAWD,sCAyBC;AA8BD,kDA0BC;AAQD,kDAmGC;AAGD,8CAIC;AAvUD,uCAAyB;AACzB,+BAKe;AACf,6CAAiD;AACjD,uDAK2B;AAEd,QAAA,sBAAsB,GAAG,gBAAgB,CAAC;AAC1C,QAAA,qBAAqB,GAAG,uBAAuB,CAAC;AAE7D,6DAA6D;AAChD,QAAA,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAyBpD,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAmBD,gEAAgE;AAChE,SAAgB,oBAAoB,CAClC,IAA2F,EAC3F,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,8BAAsB,CAAC;IAC/E,OAAO;QACL,SAAS,EAAE,IAAA,8BAAiB,GAAE;QAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ;QACjD,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,GAAG,GAAG,GAAG;QACpB,mBAAmB,EAAE,KAAK;KAC3B,CAAC;AACJ,CAAC;AAED,6EAA6E;AACtE,KAAK,UAAU,qBAAqB,CACzC,IAAqB;IAErB,IAAI,CAAC,IAAA,uCAAqB,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAAG,oBAAoB,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,MAAM,IAAI,GACR,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE;QACpB,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAEvE,MAAM,GAAG,GAAG,MAAM,IAAA,yBAAmB,EAAC;QACpC,OAAO,EAAE,8BAAsB;QAC/B,IAAI,EAAE,SAAS;QACf,IAAI;QACJ,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,cAAc;QAC/C,aAAa,EAAE,OAAO,CAAC,OAAO;QAC9B,UAAU,EAAE,IAAI,CAAC,OAAO;QACxB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,GAAG,CAAC,IAA+D,CAAC;QACpF,MAAM,OAAO,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,yBAAyB,GAAG,CAAC,MAAM,GAAG,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE;KACzF,CAAC;AACJ,CAAC;AAUD,mEAAmE;AAC5D,KAAK,UAAU,aAAa,CACjC,IAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAM,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAEtC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAoB,EAAC;YACrC,OAAO,EAAE,6BAAqB;YAC9B,KAAK,EAAE,EAAE;SACV,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAClD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBACpC,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,CAAC;YACH,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACxC,OAAO,IAAuC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAElF,qFAAqF;AACrF,MAAa,cAAc;IAA3B;QACU,SAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAYnC,CAAC;IAXC,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,GAAG,CAAC,EAAU;QACZ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,gDAAgD;QAChD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC9C,IAAI,KAAK,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;CACF;AAbD,wCAaC;AAQD;;;GAGG;AACH,SAAgB,mBAAmB,CACjC,OAAqE,EACrE,IAAoB,EACpB,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,EACxB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,IAAI,OAAO,CAAC,OAAO,KAAK,8BAAsB,EAAE,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QACjD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,GAAG,GAAG,SAAS,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,mBAAmB,CACvC,OAAwB,EACxB,IAAoB,EACpB,GAA4B;IAE5B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO;IAE9B,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC;IAC3E,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACrE,CAAC,CAAE,IAAI,CAAC,IAAgC;QACxC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC;IAEnD,kEAAkE;IAClE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEpB,GAAG,EAAE,CAAC,kBAAkB,MAAM,KAAK,SAAS,UAAU,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC;IAE3E,IAAI,MAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAA,qCAAmB,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG;YACP,EAAE,EAAE,KAAK;YACT,MAAM;YACN,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACvD,MAAM,EAAE,OAAO;YACf,mBAAmB,EAAE,KAAK;SAC3B,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAyB;QACvC,SAAS;QACT,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;QACvB,mBAAmB,EAAE,KAAK;KAC3B,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE;QACvB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK;QACvB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;IAErE,sCAAsC;IACtC,IAAI,CAAC;QACH,MAAM,IAAA,yBAAmB,EAAC;YACxB,OAAO,EAAE,6BAAqB;YAC9B,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,OAAO;YACb,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE;YACzB,WAAW,EAAE,qBAAqB;YAClC,aAAa,EAAE,OAAO,CAAC,OAAO;YAC9B,UAAU,EAAE,UAAU;YACtB,QAAQ,EAAE,UAAgD;SAC3D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,EAAE,CAAC,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,kDAAkD;IAClD,IAAI,CAAC;QACH,MAAM,IAAA,yBAAmB,EAAC;YACxB,UAAU,EAAE,kBAAkB,SAAS,EAAE;YACzC,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,6BAAqB;YAC9B,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YAC1E,KAAK,EAAE,kBAAkB,MAAM,CAAC,MAAM,EAAE;YACxC,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE;YACzB,WAAW,EAAE,qBAAqB;YAClC,aAAa,EAAE,OAAO,CAAC,OAAO;YAC9B,QAAQ,EAAE;gBACR,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,UAAU,IAAI,IAAI;gBAC9B,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,IAAI;gBAC9B,mBAAmB,EAAE,KAAK;aAC3B;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,EAAE,CAAC,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;AACjB,CAAC;AAED,sEAAsE;AACtE,SAAgB,iBAAiB;IAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,8BAAY,CAAC,CAAC,GAAG,CACrC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,EAAE,CAChH,CAAC;AACJ,CAAC"}

package/dist/lib/remote-executor.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Cross-machine remote command executor (CROSS-MACHINE-AGENTS.md §5 + §7).
+ *
+ * This is the HARD security boundary for Phase 1. A remote agent can only ever
+ * trigger the fixed, typed action table below — never arbitrary shell, never an
+ * interpolated command string, never a path outside a known You.md project root.
+ *
+ * Security guarantees implemented here:
+ *   1. WHITELIST ONLY — `action` must be a key of ACTION_SPECS. Anything else is
+ *      rejected before any process is spawned.
+ *   2. NO SHELL, NO EVAL — every action runs `git`/process via execFile with an
+ *      explicit argv ARRAY and `shell: false`. Arguments are never concatenated
+ *      into a command string, so shell metacharacters in args are inert.
+ *   3. PATH CONTAINMENT — the project directory is resolved ONLY against the
+ *      caller's known You.md workspace/project roots (lib/project.ts). Any
+ *      resolved path that escapes those roots (`..`, symlinks, absolute paths)
+ *      is rejected.
+ *   4. BOUNDED TIMEOUT — every spawn has a per-action timeout; runaway commands
+ *      are killed.
+ *   5. OUTPUT REDACTION + TRUNCATION — stdout/stderr are scrubbed of
+ *      secret-looking tokens and truncated before they leave the machine.
+ */
+/** A remote action's mutating classification, for audit + result reporting. */
+export type RemoteActionMutating = "no" | "reversible";
+/** The exact set of actions a remote machine may trigger. The keys ARE the
+ *  security boundary — extending it requires a code change + review. */
+export declare const ALLOWED_REMOTE_ACTIONS: readonly ["git.status", "git.last_activity", "git.commit_push", "git.pull", "agent.status"];
+export type RemoteAction = (typeof ALLOWED_REMOTE_ACTIONS)[number];
+export interface RemoteActionSpec {
+    /** Whether the action requires a resolved project directory. */
+    needsProject: boolean;
+    mutating: RemoteActionMutating;
+    /** Per-action wall-clock cap (ms). */
+    timeoutMs: number;
+    description: string;
+}
+export declare const ACTION_SPECS: Record<RemoteAction, RemoteActionSpec>;
+export declare function isAllowedRemoteAction(action: unknown): action is RemoteAction;
+export interface RemoteGitState {
+    branch: string | null;
+    dirty: boolean;
+    ahead: number;
+    behind: number;
+    lastCommit: string | null;
+}
+export interface RemoteExecResult {
+    ok: boolean;
+    action: string;
+    /** null when the action never spawned a process (validation/rejection). */
+    exitCode: number | null;
+    /** Redacted + truncated combined output. */
+    output: string;
+    gitState?: RemoteGitState;
+    /** Set when ok=false: machine-readable reason. */
+    error?: string;
+    /** "rejected" = failed validation/whitelist/path; "error" = ran but failed. */
+    status: "ok" | "rejected" | "error";
+    /** Always false — this executor never echoes secret values. */
+    secretValuesExposed: false;
+}
+export declare function redactSecrets(text: string): string;
+export declare function truncateOutput(text: string, max?: number): string;
+/**
+ * Resolve `project` to an absolute directory that is GUARANTEED to live inside
+ * one of the caller's known You.md workspace/project roots. Returns null on any
+ * rejection (escape attempt, missing project, no roots). Never throws.
+ *
+ * Rules:
+ *   - `project` must be a simple name token — no path separators, no `..`,
+ *     no leading `~` or `/`. (We resolve names to dirs ourselves.)
+ *   - The candidate must be a directory whose REAL path (symlinks resolved) is
+ *     inside a known root's REAL path.
+ *   - The candidate must look like a real project (git repo or project marker).
+ */
+export declare function resolveProjectDir(project: unknown, opts?: {
+    startDir?: string;
+}): {
+    ok: true;
+    dir: string;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface ExecuteRemoteOptions {
+    action: unknown;
+    args?: Record<string, unknown>;
+    /** Override cwd used for project-root discovery (tests). */
+    startDir?: string;
+}
+/**
+ * Validate + execute a single remote action. Always resolves (never throws) and
+ * always returns a structured result, so the daemon can post a clean
+ * remote-command-result for both success and every rejection path.
+ */
+export declare function executeRemoteAction(opts: ExecuteRemoteOptions): Promise<RemoteExecResult>;
+//# sourceMappingURL=remote-executor.d.ts.map

package/dist/lib/remote-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-executor.d.ts","sourceRoot":"","sources":["../../src/lib/remote-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAeH,+EAA+E;AAC/E,MAAM,MAAM,oBAAoB,GAAG,IAAI,GAAG,YAAY,CAAC;AAEvD;wEACwE;AACxE,eAAO,MAAM,sBAAsB,6FAMzB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,gBAAgB,CA+B/D,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,IAAI,YAAY,CAK7E;AAID,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,OAAO,CAAC;IACpC,+DAA+D;IAC/D,mBAAmB,EAAE,KAAK,CAAC;CAC5B;AAqBD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgBlD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAmB,GAAG,MAAM,CAG3E;AASD;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,OAAO,EAChB,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CA6E3D;AAmGD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAcD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CA6I3B"}