@ashlr/hub 3.4.0 → 3.5.1

package/dist/core/verse/github-types.js

@@ -0,0 +1,31 @@
+/**
+ * core/verse/github-types.ts — the GitHub wire contract for Ashlr Verse
+ * (docs/VERSE-WORKSPACES.md §2).
+ *
+ * `src/core/integrations/github.ts` already does the hard part; none of it was
+ * reachable from Verse. These are the shapes that carry it across the wire,
+ * plus the one shape the hub never had: a DISCLOSURE of what an approved
+ * proposal of kind `pr` is about to do, computed BEFORE the operator clicks.
+ *
+ * TWO RULES ENCODED HERE RATHER THAN LEFT TO THE UI
+ *
+ * 1. NO REMOTE URL EVER APPEARS IN THESE SHAPES. A git remote URL may carry
+ *    credentials in its userinfo (`https://x-access-token:<token>@github.com/…`
+ *    is a supported GitHub transport, and core/git.ts's canonicaliser accepts
+ *    it). Repository identity therefore travels ONLY as `nameWithOwner`, which
+ *    is derived from the URL and cannot contain one. `pushUrl`/`fetchUrls` from
+ *    `resolveGitHubOriginAuthorityDetails()` are deliberately dropped on the
+ *    floor; see test/verse-github-repo.test.ts for the guard that keeps it so.
+ *
+ * 2. THE PR PLAN IS A PREDICTION, AND SAYS SO. Before apply, `branch` and
+ *    `base` are what `core/inbox/apply.ts` WOULD use; after apply they are what
+ *    it DID use, read back off `proposal.remoteHandoff`. `baseSource` and
+ *    `branchSource` name which of the two an operator is looking at, because a
+ *    disclosure that cannot distinguish a prediction from a record is not a
+ *    disclosure.
+ *
+ * Nothing here is a new source of truth — every field is a projection of state
+ * the hub already computes.
+ */
+export {};
+//# sourceMappingURL=github-types.js.map

package/dist/core/verse/github-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-types.js","sourceRoot":"","sources":["../../../src/core/verse/github-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG"}

package/dist/core/verse/mcp-cli-health.d.ts

@@ -0,0 +1,149 @@
+/**
+ * core/verse/mcp-cli-health.ts — per-account CLI health, and version drift.
+ *
+ * docs/VERSE-WORKSPACES.md §3: "Per-account CLI health is nearly free: the
+ * probes already report auth state, plan and CLI version per account. A
+ * version drift is worth surfacing loudly, because the Claude usage probe is
+ * pinned to an exact CLI version and fails closed when it moves."
+ *
+ * ── One correction to that premise, found in the source ─────────────────────
+ *
+ * Auth state and plan ARE already reported per account, on
+ * `VerseAccountRecord` (`state` / `authentication` / `planType`). The CLI
+ * VERSION is not. Nothing caches it:
+ *
+ *   - `probeClaudeAccountUsage` runs `--version`, COMPARES it to an inline
+ *     literal, and throws the string away — it keeps only the verdict, as the
+ *     verbatim reason `usage-version-unsupported`
+ *     (src/core/resources/claude-account-usage.ts:99).
+ *   - `checkResourceLauncherCompatibility` DOES return a recognised numeric
+ *     `version` (src/core/resources/launcher-compatibility.ts:163-165), but it
+ *     is only ever reached from the `ashlr resources launcher check` CLI
+ *     command. No route, collector or snapshot calls it.
+ *
+ * So this module splits the two honestly:
+ *
+ *   1. {@link buildVerseCliHealth} is PURE and free. It derives drift from
+ *      what the collector already has: the verbatim probe reason plus the
+ *      pinned-version constant. When the probe is failing closed on the pin,
+ *      that is stated as a FACT, loudly, with the pin quoted — not as a
+ *      generic "unknown".
+ *   2. {@link probeVerseAccountCliVersions} gets the actual installed version
+ *      number, and it SPAWNS the provider CLI to do it. It is therefore not
+ *      wired to a GET. A read route that silently launches four vendor
+ *      binaries is a side effect wearing a read's clothes.
+ *
+ * ── What may leave this module ──────────────────────────────────────────────
+ *
+ * Never a launcher argv, never a private absolute path. The probe result
+ * shape carries id / provider / version / status / reason and nothing else;
+ * `ResourceLauncherCompatibilityResult` itself never echoes the command.
+ */
+import { checkResourceLauncherCompatibility, type ResourceLauncherCompatibilityResult } from '../resources/launcher-compatibility.js';
+import { type VerseAccountProvider, type VerseAccountRecord } from './accounts.js';
+export type VerseCliVersionState = 
+/** A probe ran and the installed version is the pinned one. */
+'matches-pin'
+/** The usage probe is failing closed because the installed CLI is not the pin. */
+ | 'drift'
+/** A probe ran and reported a version, but nothing pins this provider. */
+ | 'reported'
+/** No version has been read. This is the default, and it is not a fault. */
+ | 'unverified';
+export interface VerseAccountCliHealth {
+    accountId: string;
+    label: string;
+    provider: VerseAccountProvider;
+    /** Straight off the collector's record — already surfaced, just not here. */
+    authentication: VerseAccountRecord['authentication'];
+    state: VerseAccountRecord['state'];
+    health: VerseAccountRecord['health'];
+    planType: string | null;
+    observedAt: string | null;
+    /** Verbatim probe reason. Never rewritten into prose. */
+    reason: string;
+    /** The installed CLI version, when something actually read it. Never guessed. */
+    version: string | null;
+    /** The version this hub's usage probe requires. Null when nothing is pinned. */
+    pinnedVersion: string | null;
+    versionState: VerseCliVersionState;
+    /**
+     * TRUE when the usage probe is refusing to read this account's quota
+     * BECAUSE of the version pin. This is the loud bit: it is a one-line
+     * constant bump, not an outage, and a silent "unknown" would hide it.
+     */
+    usageBlockedByPin: boolean;
+    notes: string[];
+}
+export interface VerseCliHealthSnapshot {
+    sampledAt: string;
+    accounts: VerseAccountCliHealth[];
+    /** TRUE when any account is blocked by the pin. Drives the loud banner. */
+    driftDetected: boolean;
+    notes: string[];
+}
+export declare function verseCliPinNote(pinned: string): string;
+export declare const VERSE_CLI_VERSION_UNREAD_NOTE: string;
+/**
+ * The pinned version is stored TWICE, and the two copies are never compared:
+ * the enforcing check is an inline literal in the usage probe, and
+ * `VERSE_CLAUDE_USAGE_PINNED_VERSION` is a mirror kept for display. They can
+ * drift silently. `test/verse-mcp-cli-health.test.ts` compares them.
+ */
+export declare const VERSE_CLI_PIN_SOURCE = "src/core/resources/claude-account-usage.ts";
+/** One measured version reading. The only shape the probe is allowed to emit. */
+export interface VerseCliVersionReading {
+    /** Recognised numeric version, or null when the output was not recognised. */
+    version: string | null;
+    status: ResourceLauncherCompatibilityResult['status'];
+    reason: ResourceLauncherCompatibilityResult['reason'];
+}
+/**
+ * Per-account CLI health from what the collector already knows.
+ *
+ * PURE. No filesystem, no subprocess. `readings` is optional and only present
+ * after an operator has explicitly run the version probe.
+ */
+export declare function buildVerseCliHealth(options: {
+    accounts: readonly VerseAccountRecord[];
+    readings?: ReadonlyMap<string, VerseCliVersionReading>;
+    now?: () => Date;
+}): VerseCliHealthSnapshot;
+/**
+ * Per-account launcher argv + private cwd. NEVER serialized, never logged.
+ *
+ * Exported only so the injection seam below can be typed by a caller (and so
+ * declaration emit does not have to name a private type). Producing one of
+ * these is reading an account's identity; publishing one is a leak.
+ */
+export interface VerseCliAccountLaunch {
+    id: string;
+    provider: VerseAccountProvider;
+    command: string[];
+    cwd: string;
+}
+/** Injection seam so tests never spawn a provider CLI. */
+export type VerseCliCompatibilityCheck = typeof checkResourceLauncherCompatibility;
+export interface VerseCliProbeOptions {
+    accountsRoot: string;
+    /** Per-account deadline. The underlying check makes up to four invocations. */
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    /** Injected compatibility check (tests). Defaults to the real one. */
+    check?: VerseCliCompatibilityCheck;
+    /** Injected launch reader (tests). Defaults to reading connections.json. */
+    readLaunches?: (accountsRoot: string) => VerseCliAccountLaunch[];
+}
+export declare const VERSE_CLI_PROBE_DEFAULT_TIMEOUT_MS = 10000;
+/**
+ * Run the real `--version` / `--help` compatibility check per account.
+ *
+ * SPAWNS the provider CLI (help/version arguments only — no login, no prompt,
+ * no quota read; see launcher-compatibility.ts's own contract). Sequential on
+ * purpose: four concurrent native CLIs is exactly the burst that starves other
+ * probes on this machine.
+ *
+ * Returns ONLY the reading. The launcher argv and the private cwd that were
+ * needed to produce it are dropped here and never reach a caller.
+ */
+export declare function probeVerseAccountCliVersions(options: VerseCliProbeOptions): Promise<Map<string, VerseCliVersionReading>>;

package/dist/core/verse/mcp-cli-health.js

@@ -0,0 +1,227 @@
+/**
+ * core/verse/mcp-cli-health.ts — per-account CLI health, and version drift.
+ *
+ * docs/VERSE-WORKSPACES.md §3: "Per-account CLI health is nearly free: the
+ * probes already report auth state, plan and CLI version per account. A
+ * version drift is worth surfacing loudly, because the Claude usage probe is
+ * pinned to an exact CLI version and fails closed when it moves."
+ *
+ * ── One correction to that premise, found in the source ─────────────────────
+ *
+ * Auth state and plan ARE already reported per account, on
+ * `VerseAccountRecord` (`state` / `authentication` / `planType`). The CLI
+ * VERSION is not. Nothing caches it:
+ *
+ *   - `probeClaudeAccountUsage` runs `--version`, COMPARES it to an inline
+ *     literal, and throws the string away — it keeps only the verdict, as the
+ *     verbatim reason `usage-version-unsupported`
+ *     (src/core/resources/claude-account-usage.ts:99).
+ *   - `checkResourceLauncherCompatibility` DOES return a recognised numeric
+ *     `version` (src/core/resources/launcher-compatibility.ts:163-165), but it
+ *     is only ever reached from the `ashlr resources launcher check` CLI
+ *     command. No route, collector or snapshot calls it.
+ *
+ * So this module splits the two honestly:
+ *
+ *   1. {@link buildVerseCliHealth} is PURE and free. It derives drift from
+ *      what the collector already has: the verbatim probe reason plus the
+ *      pinned-version constant. When the probe is failing closed on the pin,
+ *      that is stated as a FACT, loudly, with the pin quoted — not as a
+ *      generic "unknown".
+ *   2. {@link probeVerseAccountCliVersions} gets the actual installed version
+ *      number, and it SPAWNS the provider CLI to do it. It is therefore not
+ *      wired to a GET. A read route that silently launches four vendor
+ *      binaries is a side effect wearing a read's clothes.
+ *
+ * ── What may leave this module ──────────────────────────────────────────────
+ *
+ * Never a launcher argv, never a private absolute path. The probe result
+ * shape carries id / provider / version / status / reason and nothing else;
+ * `ResourceLauncherCompatibilityResult` itself never echoes the command.
+ */
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { checkResourceLauncherCompatibility, } from '../resources/launcher-compatibility.js';
+import { VERSE_CLAUDE_USAGE_PINNED_VERSION, VERSE_CLAUDE_VERSION_REASON, } from './accounts.js';
+// ---------------------------------------------------------------------------
+// Notes
+// ---------------------------------------------------------------------------
+export function verseCliPinNote(pinned) {
+    return (`The Claude usage probe only runs against Claude Code ${pinned} and fails closed on any ` +
+        'other build, so this account has no quota reading until the installed CLI matches the ' +
+        'pin or the pin is moved. This is a version pin, not an outage.');
+}
+export const VERSE_CLI_VERSION_UNREAD_NOTE = 'No CLI version has been read for this account. Nothing in the collector records one; ' +
+    'the version check is an explicit action because it launches the provider CLI.';
+/**
+ * The pinned version is stored TWICE, and the two copies are never compared:
+ * the enforcing check is an inline literal in the usage probe, and
+ * `VERSE_CLAUDE_USAGE_PINNED_VERSION` is a mirror kept for display. They can
+ * drift silently. `test/verse-mcp-cli-health.test.ts` compares them.
+ */
+export const VERSE_CLI_PIN_SOURCE = 'src/core/resources/claude-account-usage.ts';
+// ---------------------------------------------------------------------------
+// Pure derivation — free, and the default
+// ---------------------------------------------------------------------------
+/** Providers whose usage probe is pinned to an exact CLI build. */
+const PINNED_VERSION = {
+    claude: VERSE_CLAUDE_USAGE_PINNED_VERSION,
+};
+function deriveOne(record, reading) {
+    const pinnedVersion = PINNED_VERSION[record.provider] ?? null;
+    // The collector's verbatim reason is the free drift signal: the usage probe
+    // emits exactly this code when `--version` did not match the pin.
+    const usageBlockedByPin = pinnedVersion !== null && record.reason === VERSE_CLAUDE_VERSION_REASON;
+    const version = reading?.version ?? null;
+    const versionState = usageBlockedByPin ? 'drift'
+        : version === null ? 'unverified'
+            : pinnedVersion === null ? 'reported'
+                : version === pinnedVersion ? 'matches-pin'
+                    : 'drift';
+    const notes = [];
+    if (usageBlockedByPin || (pinnedVersion !== null && version !== null && version !== pinnedVersion)) {
+        notes.push(verseCliPinNote(pinnedVersion));
+    }
+    if (version === null)
+        notes.push(VERSE_CLI_VERSION_UNREAD_NOTE);
+    return {
+        accountId: record.id,
+        label: record.label,
+        provider: record.provider,
+        authentication: record.authentication,
+        state: record.state,
+        health: record.health,
+        planType: record.planType,
+        observedAt: record.observedAt,
+        reason: record.reason,
+        version,
+        pinnedVersion,
+        versionState,
+        usageBlockedByPin,
+        notes,
+    };
+}
+/**
+ * Per-account CLI health from what the collector already knows.
+ *
+ * PURE. No filesystem, no subprocess. `readings` is optional and only present
+ * after an operator has explicitly run the version probe.
+ */
+export function buildVerseCliHealth(options) {
+    const readings = options.readings;
+    const accounts = options.accounts.map((record) => deriveOne(record, readings?.get(record.id)));
+    const drifted = accounts.filter((account) => account.versionState === 'drift');
+    const notes = [];
+    if (drifted.length > 0) {
+        notes.push(`${drifted.length} account${drifted.length === 1 ? '' : 's'} ` +
+            `${drifted.length === 1 ? 'is' : 'are'} running a CLI the usage probe does not accept. ` +
+            `The pin lives in ${VERSE_CLI_PIN_SOURCE}.`);
+    }
+    return {
+        sampledAt: (options.now ?? (() => new Date()))().toISOString(),
+        accounts,
+        driftDetected: drifted.length > 0,
+        notes,
+    };
+}
+/**
+ * Read the launcher argv and private state directory for each account.
+ *
+ * Both are the account's identity and stay inside this process. The returned
+ * value is consumed by {@link probeVerseAccountCliVersions} and never leaves.
+ */
+function readAccountLaunches(accountsRoot) {
+    let parsed;
+    try {
+        const raw = readFileSync(join(accountsRoot, 'connections.json'), 'utf8');
+        if (raw.length > 1024 * 1024)
+            return [];
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return [];
+    }
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed))
+        return [];
+    const accounts = parsed['accounts'];
+    if (!Array.isArray(accounts))
+        return [];
+    const out = [];
+    for (const entry of accounts) {
+        if (entry === null || typeof entry !== 'object' || Array.isArray(entry))
+            continue;
+        const row = entry;
+        const id = row['id'];
+        const provider = row['provider'];
+        const command = row['command'];
+        if (typeof id !== 'string' || id.length === 0)
+            continue;
+        if (provider !== 'codex' && provider !== 'claude' && provider !== 'grok')
+            continue;
+        if (!Array.isArray(command) || !command.every((part) => typeof part === 'string'))
+            continue;
+        const launcher = command.find((part) => part.endsWith('launcher.mjs'));
+        if (launcher === undefined)
+            continue;
+        let cwd = null;
+        try {
+            const manifest = JSON.parse(readFileSync(join(dirname(launcher), 'profile.json'), 'utf8'));
+            if (manifest !== null && typeof manifest === 'object' && !Array.isArray(manifest)) {
+                const value = manifest['nativeStatePath'];
+                if (typeof value === 'string' && value.length > 0)
+                    cwd = value;
+            }
+        }
+        catch {
+            cwd = null;
+        }
+        if (cwd === null)
+            continue;
+        out.push({ id, provider, command: command, cwd });
+        if (out.length >= 8)
+            break;
+    }
+    return out;
+}
+export const VERSE_CLI_PROBE_DEFAULT_TIMEOUT_MS = 10_000;
+/**
+ * Run the real `--version` / `--help` compatibility check per account.
+ *
+ * SPAWNS the provider CLI (help/version arguments only — no login, no prompt,
+ * no quota read; see launcher-compatibility.ts's own contract). Sequential on
+ * purpose: four concurrent native CLIs is exactly the burst that starves other
+ * probes on this machine.
+ *
+ * Returns ONLY the reading. The launcher argv and the private cwd that were
+ * needed to produce it are dropped here and never reach a caller.
+ */
+export async function probeVerseAccountCliVersions(options) {
+    const check = options.check ?? checkResourceLauncherCompatibility;
+    const read = options.readLaunches ?? readAccountLaunches;
+    const timeoutMs = options.timeoutMs ?? VERSE_CLI_PROBE_DEFAULT_TIMEOUT_MS;
+    const out = new Map();
+    for (const launch of read(options.accountsRoot)) {
+        if (options.signal?.aborted)
+            break;
+        try {
+            const result = await check({
+                provider: launch.provider,
+                command: launch.command,
+                cwd: launch.cwd,
+                timeoutMs,
+                ...(options.signal ? { signal: options.signal } : {}),
+            });
+            out.set(launch.id, {
+                version: result.version,
+                status: result.status,
+                reason: result.reason,
+            });
+        }
+        catch {
+            // A refused configuration is a reading of "unavailable", not a crash.
+            out.set(launch.id, { version: null, status: 'unavailable', reason: 'launcher-process-failed' });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=mcp-cli-health.js.map

package/dist/core/verse/mcp-cli-health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-cli-health.js","sourceRoot":"","sources":["../../../src/core/verse/mcp-cli-health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EACL,kCAAkC,GAEnC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,iCAAiC,EACjC,2BAA2B,GAG5B,MAAM,eAAe,CAAC;AAkDvB,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,CACL,wDAAwD,MAAM,2BAA2B;QACzF,wFAAwF;QACxF,gEAAgE,CACjE,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GACxC,uFAAuF;IACvF,+EAA+E,CAAC;AAElF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,4CAA4C,CAAC;AAEjF,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,mEAAmE;AACnE,MAAM,cAAc,GAAkD;IACpE,MAAM,EAAE,iCAAiC;CAC1C,CAAC;AAUF,SAAS,SAAS,CAChB,MAA0B,EAC1B,OAA2C;IAE3C,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IAE9D,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,iBAAiB,GACrB,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,2BAA2B,CAAC;IAE1E,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;IAEzC,MAAM,YAAY,GAChB,iBAAiB,CAAC,CAAC,CAAC,OAAO;QACzB,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY;YAC/B,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU;gBACnC,CAAC,CAAC,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa;oBACzC,CAAC,CAAC,OAAO,CAAC;IAEpB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,iBAAiB,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,aAAa,CAAC,EAAE,CAAC;QACnG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,aAAc,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAEhE,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO;QACP,aAAa;QACb,YAAY;QACZ,iBAAiB;QACjB,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAInC;IACC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,CAAC;IAE/E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CACR,GAAG,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;YAC9D,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,kDAAkD;YACxF,oBAAoB,oBAAoB,GAAG,CAC5C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;QAC9D,QAAQ;QACR,aAAa,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;QACjC,KAAK;KACN,CAAC;AACJ,CAAC;AAoBD;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,YAAoB;IAC/C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI;YAAE,OAAO,EAAE,CAAC;QACxC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtF,MAAM,QAAQ,GAAI,MAAkC,CAAC,UAAU,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IAExC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAClF,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,MAAM;YAAE,SAAS;QACnF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;YAAE,SAAS;QAE5F,MAAM,QAAQ,GAAI,OAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QACrF,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAS;QAErC,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAY,CAAC;YACtG,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClF,MAAM,KAAK,GAAI,QAAoC,CAAC,iBAAiB,CAAC,CAAC;gBACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,GAAG,KAAK,CAAC;YACjE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;QACD,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS;QAE3B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAgBD,MAAM,CAAC,MAAM,kCAAkC,GAAG,MAAM,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAA6B;IAE7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,kCAAkC,CAAC;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,mBAAmB,CAAC;IACzD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kCAAkC,CAAC;IAE1E,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkC,CAAC;IACtD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;gBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,SAAS;gBACT,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE;gBACjB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/verse/mcp-control-api.d.ts

@@ -0,0 +1,68 @@
+/**
+ * core/verse/mcp-control-api.ts — the HTTP surface for MCP and per-account
+ * CLI management.
+ *
+ * Deliberately a SEPARATE handler from `control-api.ts` rather than new arms
+ * on its `if`-chain: that file is owned by another work stream, and this one
+ * carries a mutation that installs arbitrary code. Keeping them apart means
+ * the review surface for "can the hub run new code" is one file.
+ *
+ * ── Route shape ─────────────────────────────────────────────────────────────
+ *
+ *   GET  /api/verse/mcp              which servers each seat would load
+ *   GET  /api/verse/mcp/cli-health   per-account auth, plan and version drift
+ *   POST /api/verse/mcp/cli-probe    read the installed CLI versions (SPAWNS)
+ *   POST /api/verse/mcp/proposal     validate + disclose a write (writes nothing)
+ *   POST /api/verse/mcp/apply        perform the write the digest confirms
+ *
+ * The two GETs are free: no subprocess, no provider call, no write. Everything
+ * that costs something or changes something is a POST behind
+ * `passesMutationGate`, including `cli-probe` — it launches up to four vendor
+ * binaries, and a read route that does that is a side effect in disguise.
+ *
+ * `proposal` is a POST for the same reason, even though it writes nothing: it
+ * carries an operator-supplied command in its body, and it is the step that
+ * must be authenticated for the resulting digest to mean anything.
+ *
+ * ── Ordering requirement ────────────────────────────────────────────────────
+ *
+ * These paths live under `/api/verse/*`, which `isVerseApiPath()` matches
+ * wholesale and 404s when it does not recognise. So the dispatch call in
+ * `src/core/web/api.ts` MUST come before both `isVerseControlPath` and
+ * `isVerseApiPath`. See the comment at that call site.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { AshlrConfig } from '../types.js';
+import { type VerseMcpSeatInput } from './mcp-seat-view.js';
+/** True for exactly the five MCP-management routes. */
+export declare function isVerseMcpPath(path: string): boolean;
+export interface VerseMcpApiContext {
+    cfg: AshlrConfig;
+    token: string;
+    allowDispatch: boolean;
+    readSession?: {
+        id: string;
+        expiresAt: number;
+    };
+    /** Test seam: override the accounts root without touching config. */
+    accountsRoot?: string;
+}
+/**
+ * Seat inputs for the MCP view, WITHOUT running `discoverSeats()`.
+ *
+ * `discoverSeats` probes Ollama over HTTP and builds telemetry — none of which
+ * this view needs, and all of which would make a cheap read expensive. What
+ * the MCP question turns on is (engine, account), and that is exactly what
+ * `readVerseAccountIdentities` publishes. Seat ids for native seats ARE the
+ * account ids (see VerseSeat.id's own documentation).
+ *
+ * Local seats are collapsed into ONE row on purpose: every Ollama tag is
+ * launched through the same `buildClaudeLaunch` argv, so they are all isolated
+ * identically and listing twelve identical rows would be noise, not detail.
+ */
+export declare function verseMcpSeatInputs(accountsRoot: string): VerseMcpSeatInput[];
+/**
+ * Handle one MCP-management request. Returns true when a response was
+ * written (including errors); false when `path` is not one of these routes.
+ */
+export declare function handleVerseMcpApi(ctx: VerseMcpApiContext, req: IncomingMessage, res: ServerResponse, path: string, method: string): Promise<boolean>;