@cats-inc/cats-platform 0.1.0

package/build/server/shared/runtimeIngressPaths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeIngressPaths.js","sourceRoot":"","sources":["../../../src/shared/runtimeIngressPaths.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,0BAA0B,GAAG,UAAU,CAAC;AAErD,MAAM,8BAA8B,GAAG;IACrC,KAAK,EAAE,gBAAgB;IACvB,SAAS,EAAE,oBAAoB;IAC/B,UAAU,EAAE,qBAAqB;CACwB,CAAC;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAAG,8BAA8B,CAAC,KAAK,CAAC;AAChF,MAAM,CAAC,MAAM,+BAA+B,GAAG,8BAA8B,CAAC,SAAS,CAAC;AACxF,MAAM,CAAC,MAAM,gCAAgC,GAAG,8BAA8B,CAAC,UAAU,CAAC;AAE1F,MAAM,UAAU,iCAAiC,CAC/C,OAA+B;IAE/B,OAAO,8BAA8B,CAAC,OAAO,CAAC,CAAC;AACjD,CAAC"}

package/build/server/shared/runtimeRecovery.d.ts

@@ -0,0 +1,6 @@
+export interface RuntimeDispatchRecoveryPolicy {
+    staleSessionRetryLimit: number;
+}
+export declare const DEFAULT_RUNTIME_STALE_SESSION_RETRY_LIMIT = 1;
+export declare function normalizeRuntimeDispatchRecoveryPolicy(input?: Partial<RuntimeDispatchRecoveryPolicy> | null): RuntimeDispatchRecoveryPolicy;
+//# sourceMappingURL=runtimeRecovery.d.ts.map

package/build/server/shared/runtimeRecovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeRecovery.d.ts","sourceRoot":"","sources":["../../../src/shared/runtimeRecovery.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,6BAA6B;IAC5C,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,eAAO,MAAM,yCAAyC,IAAI,CAAC;AAE3D,wBAAgB,sCAAsC,CACpD,KAAK,CAAC,EAAE,OAAO,CAAC,6BAA6B,CAAC,GAAG,IAAI,GACpD,6BAA6B,CAU/B"}

package/build/server/shared/runtimeRecovery.js

@@ -0,0 +1,11 @@
+export const DEFAULT_RUNTIME_STALE_SESSION_RETRY_LIMIT = 1;
+export function normalizeRuntimeDispatchRecoveryPolicy(input) {
+    const rawLimit = input?.staleSessionRetryLimit;
+    const staleSessionRetryLimit = typeof rawLimit === 'number' && Number.isFinite(rawLimit)
+        ? Math.max(0, Math.trunc(rawLimit))
+        : DEFAULT_RUNTIME_STALE_SESSION_RETRY_LIMIT;
+    return {
+        staleSessionRetryLimit,
+    };
+}
+//# sourceMappingURL=runtimeRecovery.js.map

package/build/server/shared/runtimeRecovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeRecovery.js","sourceRoot":"","sources":["../../../src/shared/runtimeRecovery.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC;AAE3D,MAAM,UAAU,sCAAsC,CACpD,KAAqD;IAErD,MAAM,QAAQ,GAAG,KAAK,EAAE,sBAAsB,CAAC;IAC/C,MAAM,sBAAsB,GAC1B,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC,CAAC,yCAAyC,CAAC;IAEhD,OAAO;QACL,sBAAsB;KACvB,CAAC;AACJ,CAAC"}

package/build/server/shared/runtimeSessionPolicy.d.ts

@@ -0,0 +1,101 @@
+export declare const RUNTIME_WORKSPACE_KINDS: readonly ["source", "sandbox", "worktree"];
+export declare const RUNTIME_WORKSPACE_ACCESS_VALUES: readonly ["read_write", "read_only"];
+export declare const RUNTIME_PERMISSION_MODES: readonly ["skip", "default", "whitelist"];
+export type RuntimeWorkspaceKind = typeof RUNTIME_WORKSPACE_KINDS[number];
+export type RuntimeWorkspaceAccess = typeof RUNTIME_WORKSPACE_ACCESS_VALUES[number];
+export type RuntimePermissionMode = typeof RUNTIME_PERMISSION_MODES[number];
+export type RuntimeSessionPermissionBoundaryInput = {
+    workspaceAccess?: null | undefined;
+    permissionMode?: null | undefined;
+} | {
+    workspaceAccess: 'read_only';
+    permissionMode?: 'default' | null;
+} | {
+    workspaceAccess: 'read_write';
+    permissionMode?: 'skip' | 'whitelist' | null;
+};
+export type RuntimeSessionTransportInput = {
+    workspaceKind?: RuntimeWorkspaceKind | null;
+} & RuntimeSessionPermissionBoundaryInput;
+export type RuntimeSessionCreateContractInput = {
+    runtimeWorkspaceKind?: RuntimeWorkspaceKind | null;
+} & ({
+    runtimeWorkspaceAccess?: null | undefined;
+    runtimePermissionMode?: null | undefined;
+} | {
+    runtimeWorkspaceAccess: 'read_only';
+    runtimePermissionMode?: 'default' | null;
+} | {
+    runtimeWorkspaceAccess: 'read_write';
+    runtimePermissionMode?: 'skip' | 'whitelist' | null;
+});
+export interface RuntimeSessionPolicyValidationIssue {
+    code: 'invalid_runtime_workspace_kind' | 'invalid_runtime_workspace_access' | 'invalid_runtime_permission_mode' | 'invalid_runtime_policy_combination';
+    message: string;
+    details?: Record<string, unknown>;
+}
+export declare class RuntimeSessionPolicyError extends Error {
+    readonly issue: RuntimeSessionPolicyValidationIssue;
+    constructor(issue: RuntimeSessionPolicyValidationIssue);
+}
+export type RuntimeSessionPolicy = {
+    workspaceKind: RuntimeWorkspaceKind;
+    workspaceAccess: 'read_write';
+    permissionMode: 'skip' | 'whitelist';
+} | {
+    workspaceKind: RuntimeWorkspaceKind;
+    workspaceAccess: 'read_only';
+    permissionMode: 'default';
+};
+export interface RuntimeSessionPolicyInput {
+    workspaceKind?: RuntimeWorkspaceKind;
+    workspaceAccess?: RuntimeWorkspaceAccess;
+    permissionMode?: RuntimePermissionMode;
+}
+export type DraftWorkspaceMode = 'current' | 'worktree';
+export type DraftPermissionMode = 'full' | 'read_only';
+export declare const DEFAULT_DRAFT_WORKSPACE_MODE: DraftWorkspaceMode;
+export declare const DEFAULT_DRAFT_PERMISSION_MODE: DraftPermissionMode;
+export declare const VALID_PERMISSION_MODES_BY_ACCESS: {
+    readonly read_only: readonly ["default"];
+    readonly read_write: readonly ["skip", "whitelist"];
+};
+export declare function validateRuntimeSessionPolicyInput(policy: {
+    workspaceKind?: unknown | null;
+    workspaceAccess?: unknown | null;
+    permissionMode?: unknown | null;
+}): RuntimeSessionPolicyValidationIssue | null;
+export declare function createDefaultRuntimeSessionPolicy(): RuntimeSessionPolicy;
+export declare function createRuntimeSessionContractInput(policy: RuntimeSessionPolicy): RuntimeSessionCreateContractInput;
+export declare function completeRuntimeSessionPolicy(policy?: RuntimeSessionPolicyInput | null): RuntimeSessionPolicy;
+export declare function resolveCreateRuntimeSessionPolicy(options: {
+    repoPath?: string | null;
+    policy?: RuntimeSessionPolicyInput | null;
+}): RuntimeSessionPolicy;
+export type ParseRuntimeSessionPolicyResult = {
+    ok: true;
+    policy: RuntimeSessionPolicy;
+} | {
+    ok: false;
+    issue: RuntimeSessionPolicyValidationIssue;
+};
+export declare function parseRuntimeSessionPolicyCreateInput(options: {
+    repoPath?: string | null;
+    policy: {
+        workspaceKind?: unknown | null;
+        workspaceAccess?: unknown | null;
+        permissionMode?: unknown | null;
+    };
+}): ParseRuntimeSessionPolicyResult;
+export declare function isRuntimeWorkspaceKind(value: unknown): value is RuntimeWorkspaceKind;
+export declare function isRuntimeWorkspaceAccess(value: unknown): value is RuntimeWorkspaceAccess;
+export declare function isRuntimePermissionMode(value: unknown): value is RuntimePermissionMode;
+export declare function resolveDraftWorkspaceModeFromRuntimeKind(workspaceKind: RuntimeWorkspaceKind | null | undefined): DraftWorkspaceMode;
+export declare function resolveRuntimeWorkspaceKindFromDraft(options: {
+    hasCwd: boolean;
+    isRepo: boolean;
+    workspaceMode: DraftWorkspaceMode;
+}): RuntimeWorkspaceKind;
+export declare function resolveDraftPermissionModeFromRuntimeAccess(workspaceAccess: RuntimeWorkspaceAccess | null | undefined): DraftPermissionMode;
+export declare function resolveRuntimePermissionPolicyFromDraft(permissionMode: DraftPermissionMode): Pick<RuntimeSessionPolicy, 'workspaceAccess' | 'permissionMode'>;
+//# sourceMappingURL=runtimeSessionPolicy.d.ts.map

package/build/server/shared/runtimeSessionPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeSessionPolicy.d.ts","sourceRoot":"","sources":["../../../src/shared/runtimeSessionPolicy.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,uBAAuB,4CAA6C,CAAC;AAClF,eAAO,MAAM,+BAA+B,sCAAuC,CAAC;AACpF,eAAO,MAAM,wBAAwB,2CAA4C,CAAC;AAElF,MAAM,MAAM,oBAAoB,GAAG,OAAO,uBAAuB,CAAC,MAAM,CAAC,CAAC;AAC1E,MAAM,MAAM,sBAAsB,GAAG,OAAO,+BAA+B,CAAC,MAAM,CAAC,CAAC;AACpF,MAAM,MAAM,qBAAqB,GAAG,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,MAAM,qCAAqC,GAC7C;IACE,eAAe,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACnC,cAAc,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CACnC,GACD;IACE,eAAe,EAAE,WAAW,CAAC;IAC7B,cAAc,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CACnC,GACD;IACE,eAAe,EAAE,YAAY,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;CAC9C,CAAC;AAEN,MAAM,MAAM,4BAA4B,GAAG;IACzC,aAAa,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC7C,GAAG,qCAAqC,CAAC;AAE1C,MAAM,MAAM,iCAAiC,GAAG;IAC9C,oBAAoB,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACpD,GAAG,CACA;IACE,sBAAsB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC1C,qBAAqB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CAC1C,GACD;IACE,sBAAsB,EAAE,WAAW,CAAC;IACpC,qBAAqB,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;CAC1C,GACD;IACE,sBAAsB,EAAE,YAAY,CAAC;IACrC,qBAAqB,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;CACrD,CACJ,CAAC;AAEF,MAAM,WAAW,mCAAmC;IAClD,IAAI,EACA,gCAAgC,GAChC,kCAAkC,GAClC,iCAAiC,GACjC,oCAAoC,CAAC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,KAAK,EAAE,mCAAmC;gBAA1C,KAAK,EAAE,mCAAmC;CAOhE;AAOD,MAAM,MAAM,oBAAoB,GAC5B;IACE,aAAa,EAAE,oBAAoB,CAAC;IACpC,eAAe,EAAE,YAAY,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,WAAW,CAAC;CACtC,GACD;IACE,aAAa,EAAE,oBAAoB,CAAC;IACpC,eAAe,EAAE,WAAW,CAAC;IAC7B,cAAc,EAAE,SAAS,CAAC;CAC3B,CAAC;AAKN,MAAM,WAAW,yBAAyB;IACxC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,cAAc,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAED,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,CAAC;AACxD,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,WAAW,CAAC;AAEvD,eAAO,MAAM,4BAA4B,EAAE,kBAA8B,CAAC;AAC1E,eAAO,MAAM,6BAA6B,EAAE,mBAA4B,CAAC;AAazE,eAAO,MAAM,gCAAgC;;;CAGwC,CAAC;AA4DtF,wBAAgB,iCAAiC,CAAC,MAAM,EAAE;IACxD,aAAa,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACjC,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CACjC,GAAG,mCAAmC,GAAG,IAAI,CAwD7C;AAyBD,wBAAgB,iCAAiC,IAAI,oBAAoB,CAExE;AAED,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,oBAAoB,GAC3B,iCAAiC,CAgBnC;AAKD,wBAAgB,4BAA4B,CAC1C,MAAM,CAAC,EAAE,yBAAyB,GAAG,IAAI,GACxC,oBAAoB,CAItB;AAKD,wBAAgB,iCAAiC,CAAC,OAAO,EAAE;IACzD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;CAC3C,GAAG,oBAAoB,CAQvB;AAED,MAAM,MAAM,+BAA+B,GACvC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,mCAAmC,CAAA;CAAE,CAAC;AAM9D,wBAAgB,oCAAoC,CAAC,OAAO,EAAE;IAC5D,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE;QACN,aAAa,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QAC/B,eAAe,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACjC,cAAc,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;KACjC,CAAC;CACH,GAAG,+BAA+B,CAuBlC;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,oBAAoB,CAEpF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAGxF;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAGtF;AAED,wBAAgB,wCAAwC,CACtD,aAAa,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,GACrD,kBAAkB,CAEpB;AAED,wBAAgB,oCAAoC,CAAC,OAAO,EAAE;IAC5D,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,aAAa,EAAE,kBAAkB,CAAC;CACnC,GAAG,oBAAoB,CAQvB;AAED,wBAAgB,2CAA2C,CACzD,eAAe,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GACzD,mBAAmB,CAErB;AAED,wBAAgB,uCAAuC,CACrD,cAAc,EAAE,mBAAmB,GAClC,IAAI,CAAC,oBAAoB,EAAE,iBAAiB,GAAG,gBAAgB,CAAC,CAYlE"}

package/build/server/shared/runtimeSessionPolicy.js

@@ -0,0 +1,239 @@
+export const RUNTIME_WORKSPACE_KINDS = ['source', 'sandbox', 'worktree'];
+export const RUNTIME_WORKSPACE_ACCESS_VALUES = ['read_write', 'read_only'];
+export const RUNTIME_PERMISSION_MODES = ['skip', 'default', 'whitelist'];
+export class RuntimeSessionPolicyError extends Error {
+    issue;
+    constructor(issue) {
+        // Keep the issue code in .message so plain logs / uncaught-exception dumps
+        // do not strip the structured signal. HTTP handlers still read .issue
+        // directly to return a typed envelope.
+        super(`[${issue.code}] ${issue.message}`);
+        this.issue = issue;
+        this.name = 'RuntimeSessionPolicyError';
+    }
+}
+export const DEFAULT_DRAFT_WORKSPACE_MODE = 'current';
+export const DEFAULT_DRAFT_PERMISSION_MODE = 'full';
+// Single runtime source of truth for valid (access, permission) pairings.
+// The discriminated type unions above restate this same invariant at the type
+// layer; they must stay in sync with this table. Shared by the validator, the
+// read-only invariant normaliser, and the create-contract input helper so they
+// cannot drift independently.
+export const VALID_PERMISSION_MODES_BY_ACCESS = {
+    read_only: ['default'],
+    read_write: ['skip', 'whitelist'],
+};
+function isValidPermissionModeFor(access, mode) {
+    return VALID_PERMISSION_MODES_BY_ACCESS[access].includes(mode);
+}
+function defaultPermissionModeFor(access) {
+    return VALID_PERMISSION_MODES_BY_ACCESS[access][0];
+}
+function hasRepoPath(repoPath) {
+    return typeof repoPath === 'string' && repoPath.trim().length > 0;
+}
+function mergeDefinedPolicyFields(defaults, policy) {
+    if (!policy) {
+        return { ...defaults };
+    }
+    const merged = { ...defaults };
+    for (const key of Object.keys(defaults)) {
+        const nextValue = policy[key];
+        if (nextValue !== undefined) {
+            merged[key] = nextValue;
+        }
+    }
+    return merged;
+}
+function createDefaultPolicyFields() {
+    // Default access is a policy choice (most permissive wins); the matching
+    // permissionMode is derived from VALID_PERMISSION_MODES_BY_ACCESS so the
+    // default tracks the invariant table instead of carrying its own literal.
+    const workspaceAccess = 'read_write';
+    return {
+        workspaceKind: 'sandbox',
+        workspaceAccess,
+        permissionMode: defaultPermissionModeFor(workspaceAccess),
+    };
+}
+function describeAllowedPermissionModes(access) {
+    const allowed = VALID_PERMISSION_MODES_BY_ACCESS[access];
+    if (allowed.length === 1) {
+        return `the ${allowed[0]} permission gate`;
+    }
+    return `${allowed.slice(0, -1).join(', ')} or ${allowed[allowed.length - 1]} permission modes`;
+}
+export function validateRuntimeSessionPolicyInput(policy) {
+    if (policy.workspaceKind != null && !isRuntimeWorkspaceKind(policy.workspaceKind)) {
+        return {
+            code: 'invalid_runtime_workspace_kind',
+            message: 'runtimeWorkspaceKind must be one of: source, sandbox, worktree.',
+            details: { received: policy.workspaceKind },
+        };
+    }
+    if (policy.workspaceAccess != null && !isRuntimeWorkspaceAccess(policy.workspaceAccess)) {
+        return {
+            code: 'invalid_runtime_workspace_access',
+            message: 'runtimeWorkspaceAccess must be one of: read_write, read_only.',
+            details: { received: policy.workspaceAccess },
+        };
+    }
+    if (policy.permissionMode != null && !isRuntimePermissionMode(policy.permissionMode)) {
+        return {
+            code: 'invalid_runtime_permission_mode',
+            message: 'runtimePermissionMode must be one of: skip, default, whitelist.',
+            details: { received: policy.permissionMode },
+        };
+    }
+    if (policy.permissionMode != null && policy.workspaceAccess == null) {
+        return {
+            code: 'invalid_runtime_policy_combination',
+            message: 'runtimePermissionMode requires runtimeWorkspaceAccess.',
+            details: {
+                permissionMode: policy.permissionMode,
+            },
+        };
+    }
+    // Combination check derived from VALID_PERMISSION_MODES_BY_ACCESS — one
+    // source of truth for which (access, mode) pairs are allowed.
+    if (isRuntimeWorkspaceAccess(policy.workspaceAccess)
+        && isRuntimePermissionMode(policy.permissionMode)
+        && !isValidPermissionModeFor(policy.workspaceAccess, policy.permissionMode)) {
+        const allowedDescription = describeAllowedPermissionModes(policy.workspaceAccess);
+        return {
+            code: 'invalid_runtime_policy_combination',
+            message: policy.workspaceAccess === 'read_only'
+                ? `read_only sessions may only use ${allowedDescription}.`
+                : `read_write sessions may only use ${allowedDescription}.`,
+            details: {
+                workspaceAccess: policy.workspaceAccess,
+                permissionMode: policy.permissionMode,
+            },
+        };
+    }
+    return null;
+}
+// Both create-time and session-start paths end with this normaliser so stored /
+// runtime-facing policies can only ever be one of the valid discriminated
+// variants declared in VALID_PERMISSION_MODES_BY_ACCESS.
+function applyReadOnlyInvariant(raw) {
+    const { workspaceKind, workspaceAccess } = raw;
+    const mode = isValidPermissionModeFor(workspaceAccess, raw.permissionMode)
+        ? raw.permissionMode
+        : defaultPermissionModeFor(workspaceAccess);
+    if (workspaceAccess === 'read_only') {
+        return {
+            workspaceKind,
+            workspaceAccess,
+            permissionMode: mode,
+        };
+    }
+    return {
+        workspaceKind,
+        workspaceAccess,
+        permissionMode: mode,
+    };
+}
+export function createDefaultRuntimeSessionPolicy() {
+    return applyReadOnlyInvariant(createDefaultPolicyFields());
+}
+export function createRuntimeSessionContractInput(policy) {
+    // Both branches exist because TypeScript cannot preserve the workspaceAccess
+    // discriminator across a single spread; the fields themselves come straight
+    // from policy so they stay in sync with VALID_PERMISSION_MODES_BY_ACCESS.
+    if (policy.workspaceAccess === 'read_only') {
+        return {
+            runtimeWorkspaceKind: policy.workspaceKind,
+            runtimeWorkspaceAccess: policy.workspaceAccess,
+            runtimePermissionMode: policy.permissionMode,
+        };
+    }
+    return {
+        runtimeWorkspaceKind: policy.workspaceKind,
+        runtimeWorkspaceAccess: policy.workspaceAccess,
+        runtimePermissionMode: policy.permissionMode,
+    };
+}
+// Stored/runtime-facing policies are completed from explicit fields plus global
+// defaults only. Repo-backed "source" inference belongs to create-time; trusted
+// at session-start.
+export function completeRuntimeSessionPolicy(policy) {
+    return applyReadOnlyInvariant(mergeDefinedPolicyFields(createDefaultPolicyFields(), policy));
+}
+// Create-time may lift a cwd-backed draft into the "source" workspace mode
+// before the completed policy is persisted. Later session-start paths should
+// trust that stored policy instead of re-deriving from repoPath.
+export function resolveCreateRuntimeSessionPolicy(options) {
+    const withRepoHint = mergeDefinedPolicyFields(createDefaultPolicyFields(), {
+        // "source" means "cwd-backed workspace" and does not imply git is available.
+        workspaceKind: hasRepoPath(options.repoPath) ? 'source' : undefined,
+    });
+    return applyReadOnlyInvariant(mergeDefinedPolicyFields(withRepoHint, options.policy));
+}
+// Parses a raw create-boundary payload: validates the (access, mode) pairing,
+// then — if valid — resolves the full RuntimeSessionPolicy (including the
+// repoPath-driven `source` hint). Boundary callers should use this in place of
+// the validate-then-resolve two-step so the two stages cannot drift.
+export function parseRuntimeSessionPolicyCreateInput(options) {
+    const issue = validateRuntimeSessionPolicyInput(options.policy);
+    if (issue) {
+        return { ok: false, issue };
+    }
+    const narrowed = {
+        workspaceKind: isRuntimeWorkspaceKind(options.policy.workspaceKind)
+            ? options.policy.workspaceKind
+            : undefined,
+        workspaceAccess: isRuntimeWorkspaceAccess(options.policy.workspaceAccess)
+            ? options.policy.workspaceAccess
+            : undefined,
+        permissionMode: isRuntimePermissionMode(options.policy.permissionMode)
+            ? options.policy.permissionMode
+            : undefined,
+    };
+    return {
+        ok: true,
+        policy: resolveCreateRuntimeSessionPolicy({
+            repoPath: options.repoPath,
+            policy: narrowed,
+        }),
+    };
+}
+export function isRuntimeWorkspaceKind(value) {
+    return typeof value === 'string' && RUNTIME_WORKSPACE_KINDS.includes(value);
+}
+export function isRuntimeWorkspaceAccess(value) {
+    return typeof value === 'string'
+        && RUNTIME_WORKSPACE_ACCESS_VALUES.includes(value);
+}
+export function isRuntimePermissionMode(value) {
+    return typeof value === 'string'
+        && RUNTIME_PERMISSION_MODES.includes(value);
+}
+export function resolveDraftWorkspaceModeFromRuntimeKind(workspaceKind) {
+    return workspaceKind === 'worktree' ? 'worktree' : 'current';
+}
+export function resolveRuntimeWorkspaceKindFromDraft(options) {
+    if (!options.hasCwd) {
+        return 'sandbox';
+    }
+    if (options.isRepo && options.workspaceMode === 'worktree') {
+        return 'worktree';
+    }
+    return 'source';
+}
+export function resolveDraftPermissionModeFromRuntimeAccess(workspaceAccess) {
+    return workspaceAccess === 'read_only' ? 'read_only' : 'full';
+}
+export function resolveRuntimePermissionPolicyFromDraft(permissionMode) {
+    if (permissionMode === 'read_only') {
+        return {
+            workspaceAccess: 'read_only',
+            permissionMode: 'default',
+        };
+    }
+    return {
+        workspaceAccess: 'read_write',
+        permissionMode: 'skip',
+    };
+}
+//# sourceMappingURL=runtimeSessionPolicy.js.map

package/build/server/shared/runtimeSessionPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeSessionPolicy.js","sourceRoot":"","sources":["../../../src/shared/runtimeSessionPolicy.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAClF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,YAAY,EAAE,WAAW,CAAU,CAAC;AACpF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAU,CAAC;AAmDlF,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAC7B;IAArB,YAAqB,KAA0C;QAC7D,2EAA2E;QAC3E,sEAAsE;QACtE,uCAAuC;QACvC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAJvB,UAAK,GAAL,KAAK,CAAqC;QAK7D,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AA+BD,MAAM,CAAC,MAAM,4BAA4B,GAAuB,SAAS,CAAC;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAAwB,MAAM,CAAC;AAQzE,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8BAA8B;AAC9B,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,SAAS,EAAE,CAAC,SAAS,CAAC;IACtB,UAAU,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;CACkD,CAAC;AAKtF,SAAS,wBAAwB,CAC/B,MAA8B,EAC9B,IAA2B;IAE3B,OAAQ,gCAAgC,CAAC,MAAM,CAAsC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvG,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAc;IAEd,OAAO,gCAAgC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,QAAmC;IACtD,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAAW,EACX,MAA0B;IAE1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAmB,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,SAA0B,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,yBAAyB;IAChC,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,eAAe,GAA2B,YAAY,CAAC;IAC7D,OAAO;QACL,aAAa,EAAE,SAAS;QACxB,eAAe;QACf,cAAc,EAAE,wBAAwB,CAAC,eAAe,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B,CAAC,MAA8B;IACpE,MAAM,OAAO,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,mBAAmB,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,MAIjD;IACC,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAClF,OAAO;YACL,IAAI,EAAE,gCAAgC;YACtC,OAAO,EAAE,iEAAiE;YAC1E,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;QACxF,OAAO;YACL,IAAI,EAAE,kCAAkC;YACxC,OAAO,EAAE,+DAA+D;YACxE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,eAAe,EAAE;SAC9C,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QACrF,OAAO;YACL,IAAI,EAAE,iCAAiC;YACvC,OAAO,EAAE,iEAAiE;YAC1E,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE;SAC7C,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,IAAI,IAAI,IAAI,MAAM,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,oCAAoC;YAC1C,OAAO,EAAE,wDAAwD;YACjE,OAAO,EAAE;gBACP,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC;SACF,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,8DAA8D;IAC9D,IACE,wBAAwB,CAAC,MAAM,CAAC,eAAe,CAAC;WAC7C,uBAAuB,CAAC,MAAM,CAAC,cAAc,CAAC;WAC9C,CAAC,wBAAwB,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,cAAc,CAAC,EAC3E,CAAC;QACD,MAAM,kBAAkB,GAAG,8BAA8B,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAClF,OAAO;YACL,IAAI,EAAE,oCAAoC;YAC1C,OAAO,EAAE,MAAM,CAAC,eAAe,KAAK,WAAW;gBAC7C,CAAC,CAAC,mCAAmC,kBAAkB,GAAG;gBAC1D,CAAC,CAAC,oCAAoC,kBAAkB,GAAG;YAC7D,OAAO,EAAE;gBACP,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC;SACF,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,0EAA0E;AAC1E,yDAAyD;AACzD,SAAS,sBAAsB,CAAC,GAA+B;IAC7D,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC;IAC/C,MAAM,IAAI,GAAG,wBAAwB,CAAC,eAAe,EAAE,GAAG,CAAC,cAAc,CAAC;QACxE,CAAC,CAAC,GAAG,CAAC,cAAc;QACpB,CAAC,CAAC,wBAAwB,CAAC,eAAe,CAAC,CAAC;IAE9C,IAAI,eAAe,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO;YACL,aAAa;YACb,eAAe;YACf,cAAc,EAAE,IAA2C;SAC5D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,aAAa;QACb,eAAe;QACf,cAAc,EAAE,IAA4C;KAC7D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC;IAC/C,OAAO,sBAAsB,CAAC,yBAAyB,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,MAA4B;IAE5B,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,MAAM,CAAC,eAAe,KAAK,WAAW,EAAE,CAAC;QAC3C,OAAO;YACL,oBAAoB,EAAE,MAAM,CAAC,aAAa;YAC1C,sBAAsB,EAAE,MAAM,CAAC,eAAe;YAC9C,qBAAqB,EAAE,MAAM,CAAC,cAAc;SAC7C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,oBAAoB,EAAE,MAAM,CAAC,aAAa;QAC1C,sBAAsB,EAAE,MAAM,CAAC,eAAe;QAC9C,qBAAqB,EAAE,MAAM,CAAC,cAAc;KAC7C,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,gFAAgF;AAChF,oBAAoB;AACpB,MAAM,UAAU,4BAA4B,CAC1C,MAAyC;IAEzC,OAAO,sBAAsB,CAC3B,wBAAwB,CAAC,yBAAyB,EAAE,EAAE,MAAM,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,iEAAiE;AACjE,MAAM,UAAU,iCAAiC,CAAC,OAGjD;IACC,MAAM,YAAY,GAAG,wBAAwB,CAAC,yBAAyB,EAAE,EAAE;QACzE,6EAA6E;QAC7E,aAAa,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KACpE,CAAC,CAAC;IACH,OAAO,sBAAsB,CAC3B,wBAAwB,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CACvD,CAAC;AACJ,CAAC;AAMD,8EAA8E;AAC9E,0EAA0E;AAC1E,+EAA+E;AAC/E,qEAAqE;AACrE,MAAM,UAAU,oCAAoC,CAAC,OAOpD;IACC,MAAM,KAAK,GAAG,iCAAiC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,QAAQ,GAA8B;QAC1C,aAAa,EAAE,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;YACjE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa;YAC9B,CAAC,CAAC,SAAS;QACb,eAAe,EAAE,wBAAwB,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YACvE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe;YAChC,CAAC,CAAC,SAAS;QACb,cAAc,EAAE,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;YACpE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc;YAC/B,CAAC,CAAC,SAAS;KACd,CAAC;IACF,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,iCAAiC,CAAC;YACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,QAAQ;SACjB,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,QAAQ,CAAC,KAA6B,CAAC,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,OAAO,OAAO,KAAK,KAAK,QAAQ;WAC3B,+BAA+B,CAAC,QAAQ,CAAC,KAA+B,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,OAAO,KAAK,KAAK,QAAQ;WAC3B,wBAAwB,CAAC,QAAQ,CAAC,KAA8B,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,wCAAwC,CACtD,aAAsD;IAEtD,OAAO,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,OAIpD;IACC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QAC3D,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,2CAA2C,CACzD,eAA0D;IAE1D,OAAO,eAAe,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,uCAAuC,CACrD,cAAmC;IAEnC,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO;YACL,eAAe,EAAE,WAAW;YAC5B,cAAc,EAAE,SAAS;SAC1B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,eAAe,EAAE,YAAY;QAC7B,cAAc,EAAE,MAAM;KACvB,CAAC;AACJ,CAAC"}

package/build/server/shared/runtimeSetup.d.ts

@@ -0,0 +1,26 @@
+export type RuntimeSetupStatus = 'ready' | 'ready_to_apply' | 'scan_required' | 'attention_required' | 'unavailable';
+export type RuntimeSetupStateStatus = 'pending' | 'scanning' | 'ready' | 'applied' | 'error' | 'unavailable';
+export interface RuntimeSetupProviderSummary {
+    provider: string;
+    family: string;
+    remediationCount?: number;
+}
+export interface RuntimeSetupSummary {
+    source: 'runtime' | 'assumed_ready' | 'unavailable';
+    bootstrapRequired: boolean;
+    status: RuntimeSetupStatus;
+    stateStatus: RuntimeSetupStateStatus;
+    summary: string;
+    scannedAt: string | null;
+    lastManualScanAt: string | null;
+    appliedAt: string | null;
+    providerCount: number;
+    availableCount: number;
+    providersReadyToApply: RuntimeSetupProviderSummary[];
+    providersNeedingAttention: RuntimeSetupProviderSummary[];
+    suggestedProviders: string[];
+    canRunManualScan: boolean;
+    canApply: boolean;
+    error: string | null;
+}
+//# sourceMappingURL=runtimeSetup.d.ts.map

package/build/server/shared/runtimeSetup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeSetup.d.ts","sourceRoot":"","sources":["../../../src/shared/runtimeSetup.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAC1B,OAAO,GACP,gBAAgB,GAChB,eAAe,GACf,oBAAoB,GACpB,aAAa,CAAC;AAElB,MAAM,MAAM,uBAAuB,GAC/B,SAAS,GACT,UAAU,GACV,OAAO,GACP,SAAS,GACT,OAAO,GACP,aAAa,CAAC;AAElB,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,SAAS,GAAG,eAAe,GAAG,aAAa,CAAC;IACpD,iBAAiB,EAAE,OAAO,CAAC;IAC3B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,uBAAuB,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,2BAA2B,EAAE,CAAC;IACrD,yBAAyB,EAAE,2BAA2B,EAAE,CAAC;IACzD,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB"}

package/build/server/shared/runtimeSetup.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runtimeSetup.js.map

package/build/server/shared/runtimeSetup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeSetup.js","sourceRoot":"","sources":["../../../src/shared/runtimeSetup.ts"],"names":[],"mappings":""}

package/build/server/shared/runtimeStatusPresentation.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Shared runtime status presentation model.
+ *
+ * Centralises status resolution, tooltip copy, and CSS class mapping
+ * so Lobby, product sidebars, and any future consumer stay consistent.
+ */
+import type { RuntimeSetupStatus } from './runtimeSetup.js';
+import type { MessageKey } from './i18n/messageKeys.js';
+export type RuntimePresentationStatus = 'ready' | 'degraded' | 'unavailable' | 'unknown';
+export type RuntimeTooltipTranslator = (key: MessageKey) => string;
+export interface RuntimePresentationInput {
+    reachable?: boolean;
+    status?: string | null;
+}
+export declare function resolveRuntimePresentationStatus(runtime: RuntimePresentationInput | null | undefined): RuntimePresentationStatus;
+export declare function resolveRuntimeTooltipKey(status: RuntimePresentationStatus): MessageKey;
+export declare function resolveRuntimeTooltip(status: RuntimePresentationStatus, t?: RuntimeTooltipTranslator): string;
+export declare function resolveRuntimeDotClassName(status: RuntimePresentationStatus): string;
+export type RuntimeRecoveryTarget = 'desktop-setup' | 'runtime-setup' | 'runtime-root';
+export declare function needsRuntimeSetupRecovery(runtimeSetupStatus?: RuntimeSetupStatus | null): boolean;
+export declare function resolveRuntimeRecoveryTarget(status: RuntimePresentationStatus, options?: {
+    desktopSetupRelevant?: boolean;
+    runtimeSetupStatus?: RuntimeSetupStatus | null;
+}): RuntimeRecoveryTarget;
+export declare function resolveRuntimeRecoveryUrl(target: RuntimeRecoveryTarget): string;
+export declare function resolveRuntimeLobbyDotClassName(status: RuntimePresentationStatus): string;
+//# sourceMappingURL=runtimeStatusPresentation.d.ts.map

package/build/server/shared/runtimeStatusPresentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeStatusPresentation.d.ts","sourceRoot":"","sources":["../../../src/shared/runtimeStatusPresentation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAK5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,MAAM,yBAAyB,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAC;AACzF,MAAM,MAAM,wBAAwB,GAAG,CAAC,GAAG,EAAE,UAAU,KAAK,MAAM,CAAC;AAEnE,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAMD,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GACnD,yBAAyB,CAc3B;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,yBAAyB,GAChC,UAAU,CAOZ;AASD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,yBAAyB,EACjC,CAAC,CAAC,EAAE,wBAAwB,GAC3B,MAAM,CAER;AAID,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,yBAAyB,GAChC,MAAM,CAOR;AAID,MAAM,MAAM,qBAAqB,GAAG,eAAe,GAAG,eAAe,GAAG,cAAc,CAAC;AAEvF,wBAAgB,yBAAyB,CACvC,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,IAAI,GAC7C,OAAO,CAKT;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,yBAAyB,EACjC,OAAO,CAAC,EAAE;IACR,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,kBAAkB,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CAChD,GACA,qBAAqB,CAWvB;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,qBAAqB,GAC5B,MAAM,CAQR;AAID,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,yBAAyB,GAChC,MAAM,CAOR"}

package/build/server/shared/runtimeStatusPresentation.js

@@ -0,0 +1,89 @@
+/**
+ * Shared runtime status presentation model.
+ *
+ * Centralises status resolution, tooltip copy, and CSS class mapping
+ * so Lobby, product sidebars, and any future consumer stay consistent.
+ */
+import { PLATFORM_RUNTIME_ROOT_PATH, PLATFORM_RUNTIME_SETUP_PATH, } from './runtimeIngressPaths.js';
+const READY_STATUSES = new Set(['ok', 'healthy', 'ready']);
+const DEGRADED_STATUSES = new Set(['degraded', 'warming', 'starting']);
+const UNAVAILABLE_STATUSES = new Set(['error', 'unavailable', 'failed']);
+export function resolveRuntimePresentationStatus(runtime) {
+    if (!runtime || typeof runtime.reachable !== 'boolean') {
+        return 'unknown';
+    }
+    if (!runtime.reachable) {
+        return 'unavailable';
+    }
+    const raw = typeof runtime.status === 'string' ? runtime.status.toLowerCase() : '';
+    if (READY_STATUSES.has(raw))
+        return 'ready';
+    if (DEGRADED_STATUSES.has(raw))
+        return 'degraded';
+    if (UNAVAILABLE_STATUSES.has(raw))
+        return 'unavailable';
+    return runtime.reachable ? 'ready' : 'unknown';
+}
+export function resolveRuntimeTooltipKey(status) {
+    switch (status) {
+        case 'ready': return 'sharedRuntimeStatusTooltipReady';
+        case 'degraded': return 'sharedRuntimeStatusTooltipDegraded';
+        case 'unavailable': return 'sharedRuntimeStatusTooltipUnavailable';
+        default: return 'sharedRuntimeStatusTooltipUnknown';
+    }
+}
+const DEFAULT_RUNTIME_TOOLTIP_COPY = {
+    ready: 'Cats Runtime is connected',
+    degraded: 'Cats Runtime is starting up',
+    unavailable: 'Cats Runtime is offline',
+    unknown: 'Checking Cats Runtime status\u2026',
+};
+export function resolveRuntimeTooltip(status, t) {
+    return t ? t(resolveRuntimeTooltipKey(status)) : DEFAULT_RUNTIME_TOOLTIP_COPY[status];
+}
+// -- Sidebar runtime-status dot (product sidebars) --
+export function resolveRuntimeDotClassName(status) {
+    switch (status) {
+        case 'ready': return 'runtimeStatusDot isConnected';
+        case 'degraded': return 'runtimeStatusDot isDegraded';
+        case 'unavailable': return 'runtimeStatusDot isUnavailable';
+        default: return 'runtimeStatusDot isUnknown';
+    }
+}
+export function needsRuntimeSetupRecovery(runtimeSetupStatus) {
+    return runtimeSetupStatus === 'ready_to_apply'
+        || runtimeSetupStatus === 'scan_required'
+        || runtimeSetupStatus === 'attention_required'
+        || runtimeSetupStatus === 'unavailable';
+}
+export function resolveRuntimeRecoveryTarget(status, options) {
+    if (options?.desktopSetupRelevant) {
+        return 'desktop-setup';
+    }
+    if (needsRuntimeSetupRecovery(options?.runtimeSetupStatus)) {
+        return 'runtime-setup';
+    }
+    if (status === 'unavailable' || status === 'degraded') {
+        return 'runtime-setup';
+    }
+    return 'runtime-root';
+}
+export function resolveRuntimeRecoveryUrl(target) {
+    if (target === 'desktop-setup') {
+        throw new Error('Desktop setup targets must be handled before resolving a runtime URL.');
+    }
+    if (target === 'runtime-setup') {
+        return PLATFORM_RUNTIME_SETUP_PATH;
+    }
+    return PLATFORM_RUNTIME_ROOT_PATH;
+}
+// -- Lobby identity dot (PlatformLobby) --
+export function resolveRuntimeLobbyDotClassName(status) {
+    switch (status) {
+        case 'ready': return 'lobbyIdentityDot lobbyIdentityDot--ok';
+        case 'unavailable':
+        case 'degraded': return 'lobbyIdentityDot lobbyIdentityDot--warn';
+        default: return 'lobbyIdentityDot lobbyIdentityDot--warn';
+    }
+}
+//# sourceMappingURL=runtimeStatusPresentation.js.map

package/build/server/shared/runtimeStatusPresentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeStatusPresentation.js","sourceRoot":"","sources":["../../../src/shared/runtimeStatusPresentation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAWlC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AACvE,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEzE,MAAM,UAAU,gCAAgC,CAC9C,OAAoD;IAEpD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAC5C,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAClD,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IAExD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAAiC;IAEjC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO,CAAC,CAAC,OAAO,iCAAiC,CAAC;QACvD,KAAK,UAAU,CAAC,CAAC,OAAO,oCAAoC,CAAC;QAC7D,KAAK,aAAa,CAAC,CAAC,OAAO,uCAAuC,CAAC;QACnE,OAAO,CAAC,CAAC,OAAO,mCAAmC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,4BAA4B,GAA8C;IAC9E,KAAK,EAAE,2BAA2B;IAClC,QAAQ,EAAE,6BAA6B;IACvC,WAAW,EAAE,yBAAyB;IACtC,OAAO,EAAE,oCAAoC;CAC9C,CAAC;AAEF,MAAM,UAAU,qBAAqB,CACnC,MAAiC,EACjC,CAA4B;IAE5B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC;AAED,sDAAsD;AAEtD,MAAM,UAAU,0BAA0B,CACxC,MAAiC;IAEjC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO,CAAC,CAAC,OAAO,8BAA8B,CAAC;QACpD,KAAK,UAAU,CAAC,CAAC,OAAO,6BAA6B,CAAC;QACtD,KAAK,aAAa,CAAC,CAAC,OAAO,gCAAgC,CAAC;QAC5D,OAAO,CAAC,CAAC,OAAO,4BAA4B,CAAC;IAC/C,CAAC;AACH,CAAC;AAMD,MAAM,UAAU,yBAAyB,CACvC,kBAA8C;IAE9C,OAAO,kBAAkB,KAAK,gBAAgB;WACzC,kBAAkB,KAAK,eAAe;WACtC,kBAAkB,KAAK,oBAAoB;WAC3C,kBAAkB,KAAK,aAAa,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,MAAiC,EACjC,OAGC;IAED,IAAI,OAAO,EAAE,oBAAoB,EAAE,CAAC;QAClC,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,yBAAyB,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC;QAC3D,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QACtD,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAA6B;IAE7B,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;QAC/B,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED,2CAA2C;AAE3C,MAAM,UAAU,+BAA+B,CAC7C,MAAiC;IAEjC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO,CAAC,CAAC,OAAO,uCAAuC,CAAC;QAC7D,KAAK,aAAa,CAAC;QACnB,KAAK,UAAU,CAAC,CAAC,OAAO,yCAAyC,CAAC;QAClE,OAAO,CAAC,CAAC,OAAO,yCAAyC,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/build/server/shared/settingsRoute.d.ts

@@ -0,0 +1,3 @@
+export declare const SETTINGS_PATH = "/settings";
+export declare function isSettingsPath(pathname: string): boolean;
+//# sourceMappingURL=settingsRoute.d.ts.map

package/build/server/shared/settingsRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsRoute.d.ts","sourceRoot":"","sources":["../../../src/shared/settingsRoute.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,cAAc,CAAC;AAEzC,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAExD"}

package/build/server/shared/settingsRoute.js

@@ -0,0 +1,5 @@
+export const SETTINGS_PATH = '/settings';
+export function isSettingsPath(pathname) {
+    return pathname === SETTINGS_PATH || pathname.startsWith(`${SETTINGS_PATH}/`);
+}
+//# sourceMappingURL=settingsRoute.js.map

package/build/server/shared/settingsRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsRoute.js","sourceRoot":"","sources":["../../../src/shared/settingsRoute.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC;AAEzC,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,QAAQ,KAAK,aAAa,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,aAAa,GAAG,CAAC,CAAC;AAChF,CAAC"}

package/build/server/shared/sidebarPreference.d.ts

@@ -0,0 +1,10 @@
+export declare const SIDEBAR_OPEN_STORAGE_KEY = "cats.sidebar-open";
+interface SidebarPreferenceStorage {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+}
+export declare function parseStoredSidebarOpen(value: string | null | undefined): boolean;
+export declare function readSidebarOpenPreference(storage: SidebarPreferenceStorage | null | undefined): boolean;
+export declare function writeSidebarOpenPreference(storage: SidebarPreferenceStorage | null | undefined, isOpen: boolean): void;
+export {};
+//# sourceMappingURL=sidebarPreference.d.ts.map

package/build/server/shared/sidebarPreference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebarPreference.d.ts","sourceRoot":"","sources":["../../../src/shared/sidebarPreference.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAE5D,UAAU,wBAAwB;IAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAKhF;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GACnD,OAAO,CAUT;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,EACpD,MAAM,EAAE,OAAO,GACd,IAAI,CAUN"}

package/build/server/shared/sidebarPreference.js

@@ -0,0 +1,30 @@
+export const SIDEBAR_OPEN_STORAGE_KEY = 'cats.sidebar-open';
+export function parseStoredSidebarOpen(value) {
+    if (value === 'collapsed') {
+        return false;
+    }
+    return true;
+}
+export function readSidebarOpenPreference(storage) {
+    if (!storage) {
+        return true;
+    }
+    try {
+        return parseStoredSidebarOpen(storage.getItem(SIDEBAR_OPEN_STORAGE_KEY));
+    }
+    catch {
+        return true;
+    }
+}
+export function writeSidebarOpenPreference(storage, isOpen) {
+    if (!storage) {
+        return;
+    }
+    try {
+        storage.setItem(SIDEBAR_OPEN_STORAGE_KEY, isOpen ? 'open' : 'collapsed');
+    }
+    catch {
+        // Ignore storage failures and keep the in-memory toggle working.
+    }
+}
+//# sourceMappingURL=sidebarPreference.js.map

package/build/server/shared/sidebarPreference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebarPreference.js","sourceRoot":"","sources":["../../../src/shared/sidebarPreference.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AAO5D,MAAM,UAAU,sBAAsB,CAAC,KAAgC;IACrE,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAoD;IAEpD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,OAAO,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,OAAoD,EACpD,MAAe;IAEf,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC"}