@claudexor/cli 1.0.1 → 2.1.2

package/dist/setup-job-store.d.ts

@@ -0,0 +1,250 @@
+import { DurableJournal, type JournalRecoveryState } from "@claudexor/journal";
+import { type ControlSetupJob, type ControlSetupJobListFilter, type ControlSetupJobSnapshot } from "@claudexor/schema";
+export declare const ACTIVE_SETUP_STATES: Set<"succeeded" | "failed" | "running" | "queued" | "cancelled" | "interrupted_unknown" | "timed_out" | "waiting_for_input" | "not_supported">;
+export declare const TERMINAL_SETUP_STATES: Set<"succeeded" | "failed" | "running" | "queued" | "cancelled" | "interrupted_unknown" | "timed_out" | "waiting_for_input" | "not_supported">;
+export interface SetupJobPaths {
+    dir: string;
+    manifest: string;
+    runnerState: string;
+    runnerResult: string;
+    runnerPermit: string;
+    command: string;
+}
+export interface SetupJobStoreOptions {
+    now?: () => Date;
+    journal?: DurableJournal;
+}
+interface SetupCreateIdempotency {
+    key: string;
+    client: string;
+    request: unknown;
+}
+/**
+ * Setup lifecycle projection over the daemon's global durable journal.
+ *
+ * Per-job directories contain only operational artifacts (runner handshake
+ * and command launcher). They never contain a job snapshot,
+ * event ledger or sequence metadata and cannot become a second authority.
+ */
+export declare class SetupJobStore {
+    readonly rootDir: string;
+    readonly artifactsDir: string;
+    readonly journal: DurableJournal;
+    private readonly jobs;
+    private readonly createByKey;
+    private readonly now;
+    private semanticRecovery;
+    constructor(rootDir: string, opts?: SetupJobStoreOptions);
+    paths(jobId: string): SetupJobPaths;
+    recoveryState(): JournalRecoveryState;
+    validateProjection(): void;
+    create(job: ControlSetupJob, idempotency?: SetupCreateIdempotency): ControlSetupJob;
+    resolveCreate(idempotency: SetupCreateIdempotency): ControlSetupJob | null;
+    bindCreate(jobId: string, idempotency: SetupCreateIdempotency): ControlSetupJob;
+    private persist;
+    update(jobId: string, patch: Partial<ControlSetupJob>): ControlSetupJob;
+    status(jobId: string): ControlSetupJob;
+    list(filter?: ControlSetupJobListFilter): ControlSetupJob[];
+    snapshot(jobId: string): ControlSetupJobSnapshot;
+    events(jobId: string, afterCursor?: string | null): {
+        message: string;
+        cursor: string;
+        state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
+        kind: "status";
+        time: string;
+        jobId: string;
+        previousCursor: string | null;
+        sequence: number;
+        job: {
+            message: string;
+            harness: "cursor" | "codex" | "claude";
+            startedAt: string | null;
+            state: "failed" | "cancelled" | "running" | "interrupted_unknown" | "queued" | "succeeded" | "timed_out" | "waiting_for_input" | "not_supported";
+            profileId: string | null;
+            command: string | null;
+            createdAt: string;
+            jobId: string;
+            phase: "completed" | "preparing" | "launching" | "awaiting_user" | "verifying" | "cancelling";
+            finishedAt: string | null;
+            action: "login";
+            guideUrl: string | null;
+            outcome?: {
+                reason: "completed" | "interrupted_unknown" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "interrupted" | "termination_unconfirmed";
+                exitCode?: number | null | undefined;
+                signal?: string | null | undefined;
+            } | undefined;
+            execution?: {
+                observedAt: string;
+                commandDigest: string;
+                executionId: string;
+                manifestDigest: string;
+                processGroup: {
+                    schemaVersion: 1;
+                    pgid: number;
+                    leader: {
+                        status: "known";
+                        source: "procfs_stat" | "proc_pidinfo";
+                        pid: number;
+                        platform: "linux" | "darwin";
+                        startToken: string;
+                        processGroupId: number;
+                    };
+                };
+                permitIssuedAt?: string | undefined;
+            } | undefined;
+            deadlineAt?: string | undefined;
+            authCapability?: {
+                attemptId: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "disclosed";
+            } | {
+                attemptId: string;
+                startedAt: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "running";
+            } | {
+                attemptId: string;
+                startedAt: string;
+                completedAt: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "completed";
+                receipt: {
+                    availability: "unknown" | "available" | "unavailable";
+                    verification: "passed" | "failed" | "not_run";
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    receiptId: string;
+                    attemptId: string;
+                    effective: "local" | "vendor_native" | "managed_api_key" | null;
+                    effectiveSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none" | null;
+                    selectionReason: "harness_error" | "exact_requested_route" | "adapter_unavailable" | "request_mismatch" | "route_missing" | "route_mismatch" | "source_missing" | "source_mismatch" | "adapter_error" | "missing_completion" | "response_mismatch" | "scratch_mutated" | "protocol_violation" | "adapter_identity_mismatch" | "cancelled";
+                    costKnowledge: "exact" | "unknown" | "estimated";
+                    startedAt: string;
+                    completedAt: string;
+                    challengeDigest: string;
+                    requestDigest: string;
+                    responseDigest: string;
+                    streamDigest: string;
+                    scratchBeforeDigest: string;
+                    scratchAfterDigest: string;
+                    stream: {
+                        aborted: boolean;
+                        startedEvents: number;
+                        completedEvents: number;
+                        errorEvents: number;
+                        unexpectedToolEvents: number;
+                        interactionEvents: number;
+                        sessionMismatchEvents: number;
+                        eventsAfterCompleted: number;
+                    };
+                    evidenceRefs: string[];
+                    costUsd?: number | undefined;
+                };
+            } | {
+                attemptId: string;
+                startedAt: string;
+                challengeDigest: string;
+                requestDigest: string;
+                disclosure: {
+                    schemaVersion: 1;
+                    protocolVersion: 1;
+                    harness: string;
+                    requested: "auto" | "subscription" | "api_key";
+                    requiredRoute: "local" | "vendor_native" | "managed_api_key";
+                    requiredSource: "native_session" | "oauth_token_env" | "api_key_env" | "api_key_flag" | "provider_auth_file" | "none";
+                    networkScope: "selected_harness_only";
+                    billingKnowledge: "unknown" | "proven_zero" | "subscription_entitlement" | "metered";
+                    incrementalCostKnowledge: "exact" | "unknown" | "estimated";
+                    mayConsumeQuota: boolean;
+                    generatedAt: string;
+                };
+                state: "interrupted_unknown";
+                interruptedAt: string;
+            } | undefined;
+            authorization?: {
+                args: string[];
+                commandDigest: string;
+                executionId: string;
+                manifestDigest: string;
+                executable: {
+                    sha256: string;
+                    mode: number;
+                    realpath: string;
+                    size: number;
+                    device: string;
+                    inode: string;
+                };
+            } | undefined;
+            nativeCommand?: {
+                commandDigest: string;
+                finishedAt: string;
+                executionId: string;
+                manifestDigest: string;
+                permitIssuedAt: string | null;
+                commandStarted: boolean;
+                exitCode: number | null;
+                signal: string | null;
+                errorCode?: "permit_timeout" | "spawn_failed" | undefined;
+            } | undefined;
+            terminationReconciliation?: {
+                status: "empty";
+                observedAt: string;
+            } | undefined;
+        };
+    }[];
+    appendLog(jobId: string, line: string): void;
+    private rebuild;
+    private newBinding;
+    private rememberBinding;
+    private failSemantic;
+    private assertAvailable;
+    private ensureJobDir;
+    private validExistingJobDir;
+}
+export {};
+//# sourceMappingURL=setup-job-store.d.ts.map

package/dist/setup-job-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-job-store.d.ts","sourceRoot":"","sources":["../src/setup-job-store.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,cAAc,EAEd,KAAK,oBAAoB,EAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAIL,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC7B,MAAM,mBAAmB,CAAC;AAI3B,eAAO,MAAM,mBAAmB,gJAI9B,CAAC;AACH,eAAO,MAAM,qBAAqB,gJAEhC,CAAC;AAEH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,UAAU,sBAAsB;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CAClB;AAgBD;;;;;;GAMG;AACH,qBAAa,aAAa;IAUtB,QAAQ,CAAC,OAAO,EAAE,MAAM;IAT1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsC;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+D;IAC3F,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;IACjC,OAAO,CAAC,gBAAgB,CACjB;gBAGI,OAAO,EAAE,MAAM,EACxB,IAAI,GAAE,oBAAyB;IAwBjC,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa;IAkBnC,aAAa,IAAI,oBAAoB;IAQrC,kBAAkB,IAAI,IAAI;IAI1B,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,WAAW,CAAC,EAAE,sBAAsB,GAAG,eAAe;IASnF,aAAa,CAAC,WAAW,EAAE,sBAAsB,GAAG,eAAe,GAAG,IAAI;IAS1E,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,sBAAsB,GAAG,eAAe;IAc/E,OAAO,CAAC,OAAO;IAUf,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,eAAe;IAMvE,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe;IAOtC,IAAI,CAAC,MAAM,CAAC,EAAE,yBAAyB,GAAG,eAAe,EAAE;IAiB3D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB;IAShD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;;;;;;;;;;;;;;;;;;;;;;mBAoNk8tM,CAAC;;wBAAqU,CAAC;sBAA+C,CAAC;;qBAAqE,CAAC;;;;;;;;;;;;;;;;;8BAAskB,CAAC;;sBAA+D,CAAC;0BAA4C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAAgsJ,CAAC;;;;;;;;;;;;;;;;;;;;;;;yBAAghC,CAAC;;;;;;;;;;;;;;yBAA0Z,CAAC;;;;;;;;;yBAAyT,CAAC;;qCAAyG,CAAC;;;;;;IAvLrn9M,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAY5C,OAAO,CAAC,OAAO;IAkEf,OAAO,CAAC,UAAU;IAgBlB,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,YAAY;IASpB,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,YAAY;IAWpB,OAAO,CAAC,mBAAmB;CAU5B"}

package/dist/setup-job-store.js

@@ -0,0 +1,359 @@
+import { chmodSync, existsSync, lstatSync, mkdirSync, realpathSync } from "node:fs";
+import { join, sep } from "node:path";
+import { DurableJournal, JournalRecoveryRequiredError, } from "@claudexor/journal";
+import { ControlSetupJob as ControlSetupJobSchema, ControlSetupJobEvent, TERMINAL_CONTROL_SETUP_JOB_STATES, } from "@claudexor/schema";
+import { ensureCanonicalPrivateDirectory, hashJson, redactSecrets } from "@claudexor/util";
+import { initialSetupJob, reduceSetupJob } from "./setup-job-reducer.js";
+export const ACTIVE_SETUP_STATES = new Set([
+    "queued",
+    "running",
+    "waiting_for_input",
+]);
+export const TERMINAL_SETUP_STATES = new Set([
+    ...TERMINAL_CONTROL_SETUP_JOB_STATES,
+]);
+const MAX_LOG_RECORD_BYTES = 16 * 1024;
+/**
+ * Setup lifecycle projection over the daemon's global durable journal.
+ *
+ * Per-job directories contain only operational artifacts (runner handshake
+ * and command launcher). They never contain a job snapshot,
+ * event ledger or sequence metadata and cannot become a second authority.
+ */
+export class SetupJobStore {
+    rootDir;
+    artifactsDir;
+    journal;
+    jobs = new Map();
+    createByKey = new Map();
+    now;
+    semanticRecovery = null;
+    constructor(rootDir, opts = {}) {
+        this.rootDir = rootDir;
+        this.now = opts.now ?? (() => new Date());
+        ensurePrivateRealDirectory(rootDir, "daemon data root");
+        this.artifactsDir = join(rootDir, "setup-artifacts");
+        ensurePrivateRealDirectory(this.artifactsDir, "setup artifacts root");
+        if (realpathSync(this.artifactsDir).startsWith(realpathSync(rootDir) + sep) === false) {
+            throw new Error("setup artifacts root escapes daemon data root");
+        }
+        this.journal =
+            opts.journal ??
+                new DurableJournal({
+                    rootDir: join(rootDir, "journal"),
+                    partition: "global",
+                    now: this.now,
+                });
+        if (this.journal.options.partition !== "global") {
+            throw new Error(`setup lifecycle requires the global journal, received '${this.journal.options.partition}'`);
+        }
+        this.rebuild();
+    }
+    paths(jobId) {
+        if (!/^setup-[A-Za-z0-9-]+$/.test(jobId)) {
+            throw new Error(`unsafe setup job id: ${jobId}`);
+        }
+        const dir = join(this.artifactsDir, jobId);
+        if (!dir.startsWith(this.artifactsDir + sep)) {
+            throw new Error(`setup job path escapes store: ${jobId}`);
+        }
+        return {
+            dir,
+            manifest: join(dir, "runner-manifest.json"),
+            runnerState: join(dir, "runner-state.json"),
+            runnerResult: join(dir, "runner-result.json"),
+            runnerPermit: join(dir, "runner-permit.json"),
+            command: join(dir, "login.command"),
+        };
+    }
+    recoveryState() {
+        if (!this.semanticRecovery)
+            return this.journal.state();
+        return {
+            ...this.semanticRecovery,
+            location: { ...this.semanticRecovery.location },
+        };
+    }
+    validateProjection() {
+        this.assertAvailable();
+    }
+    create(job, idempotency) {
+        this.assertAvailable();
+        if (this.jobs.has(job.jobId))
+            throw new Error(`setup job already exists: ${job.jobId}`);
+        return this.persist(initialSetupJob(job), idempotency ? this.newBinding(job.jobId, idempotency) : undefined);
+    }
+    resolveCreate(idempotency) {
+        this.assertAvailable();
+        const binding = this.newBinding("pending", idempotency);
+        const prior = this.createByKey.get(binding.keyDigest);
+        if (!prior)
+            return null;
+        if (prior.requestDigest !== binding.requestDigest)
+            throw idempotencyConflict();
+        return this.status(prior.jobId);
+    }
+    bindCreate(jobId, idempotency) {
+        this.assertAvailable();
+        const job = this.status(jobId);
+        const binding = this.newBinding(jobId, idempotency);
+        const prior = this.createByKey.get(binding.keyDigest);
+        if (prior) {
+            if (prior.requestDigest !== binding.requestDigest)
+                throw idempotencyConflict();
+            return this.status(prior.jobId);
+        }
+        this.journal.append("setup.job.create_bound", { binding });
+        this.rememberBinding(binding);
+        return job;
+    }
+    persist(job, binding) {
+        this.assertAvailable();
+        this.ensureJobDir(this.paths(job.jobId).dir);
+        this.journal.append("setup.job.saved", { job, binding });
+        const stored = cloneJob(job);
+        this.jobs.set(job.jobId, stored);
+        if (binding)
+            this.rememberBinding(binding);
+        return cloneJob(stored);
+    }
+    update(jobId, patch) {
+        const current = this.jobs.get(jobId);
+        if (!current)
+            throw Object.assign(new Error("setup job not found"), { status: 404 });
+        return this.persist(reduceSetupJob(current, { ...current, ...patch }));
+    }
+    status(jobId) {
+        this.assertAvailable();
+        const job = this.jobs.get(jobId);
+        if (!job)
+            throw Object.assign(new Error("setup job not found"), { status: 404 });
+        return cloneJob(job);
+    }
+    list(filter) {
+        this.assertAvailable();
+        let rows = [...this.jobs.values()];
+        if (filter?.harness)
+            rows = rows.filter((job) => job.harness === filter.harness);
+        if (filter?.action)
+            rows = rows.filter((job) => job.action === filter.action);
+        if (filter?.active !== undefined) {
+            rows = rows.filter((job) => filter.active === (job.phase !== undefined && ACTIVE_SETUP_STATES.has(job.state)));
+        }
+        rows.sort((a, b) => a.createdAt.localeCompare(b.createdAt));
+        if (filter?.limit !== undefined && rows.length > filter.limit) {
+            rows = rows.slice(-filter.limit);
+        }
+        return rows.map(cloneJob);
+    }
+    snapshot(jobId) {
+        this.assertAvailable();
+        return {
+            job: this.status(jobId),
+            cursor: this.journal.currentCursor(),
+            sequence: this.journal.currentSequence(),
+        };
+    }
+    events(jobId, afterCursor) {
+        this.assertAvailable();
+        this.status(jobId);
+        const afterSeq = this.journal.sequenceAfter(afterCursor);
+        let previousCursor = afterCursor ?? null;
+        const events = [];
+        for (const record of this.journal.records(afterSeq)) {
+            if (record.type !== "setup.job.saved")
+                continue;
+            const parsed = ControlSetupJobSchema.safeParse(record.payload?.job);
+            if (!parsed.success || parsed.data.jobId !== jobId)
+                continue;
+            const cursor = this.journal.cursorFor(record);
+            events.push(ControlSetupJobEvent.parse({
+                jobId,
+                cursor,
+                previousCursor,
+                sequence: record.seq,
+                time: record.time,
+                kind: "status",
+                state: parsed.data.state,
+                message: parsed.data.message,
+                job: parsed.data,
+            }));
+            previousCursor = cursor;
+        }
+        return events;
+    }
+    appendLog(jobId, line) {
+        this.assertAvailable();
+        if (!this.jobs.has(jobId))
+            return;
+        const redacted = `[${this.now().toISOString()}] ${redactSecrets(line)}`;
+        const bytes = Buffer.from(redacted, "utf8");
+        const bounded = bytes.length <= MAX_LOG_RECORD_BYTES
+            ? redacted
+            : `${bytes.subarray(0, MAX_LOG_RECORD_BYTES).toString("utf8")}\n[output truncated at ${MAX_LOG_RECORD_BYTES} bytes]`;
+        this.journal.append("setup.job.log", { jobId, line: bounded });
+    }
+    rebuild() {
+        if (this.journal.state().status === "recovery_required")
+            return;
+        for (const record of this.journal.records()) {
+            if (record.type === "setup.job.log") {
+                if (typeof record.payload?.jobId !== "string" ||
+                    !/^setup-[A-Za-z0-9-]+$/.test(record.payload.jobId) ||
+                    typeof record.payload.line !== "string" ||
+                    Buffer.byteLength(record.payload.line, "utf8") > MAX_LOG_RECORD_BYTES + 128) {
+                    this.semanticRecovery = {
+                        status: "recovery_required",
+                        location: { kind: "cursor", epoch: record.epoch, seq: record.seq },
+                        reason: `invalid setup.job.log payload at journal seq ${record.seq}`,
+                        discardedTailBytes: 0,
+                    };
+                    return;
+                }
+                continue;
+            }
+            if (record.type === "setup.job.create_bound") {
+                const binding = parseBinding(record.payload?.binding);
+                if (!binding || !this.jobs.has(binding.jobId)) {
+                    this.failSemantic(record, "invalid setup.job.create_bound payload");
+                    return;
+                }
+                this.rememberBinding(binding);
+                continue;
+            }
+            if (record.type !== "setup.job.saved")
+                continue;
+            const parsed = ControlSetupJobSchema.safeParse(record.payload?.job);
+            if (!parsed.success) {
+                this.semanticRecovery = {
+                    status: "recovery_required",
+                    location: { kind: "cursor", epoch: record.epoch, seq: record.seq },
+                    reason: `invalid setup.job.saved payload at journal seq ${record.seq}`,
+                    discardedTailBytes: 0,
+                };
+                return;
+            }
+            try {
+                const current = this.jobs.get(parsed.data.jobId);
+                const next = current ? reduceSetupJob(current, parsed.data) : initialSetupJob(parsed.data);
+                this.jobs.set(next.jobId, cloneJob(next));
+                if (record.payload?.binding !== undefined) {
+                    const binding = parseBinding(record.payload.binding);
+                    if (!binding || binding.jobId !== next.jobId) {
+                        this.failSemantic(record, "invalid setup create binding");
+                        return;
+                    }
+                    this.rememberBinding(binding);
+                }
+            }
+            catch (error) {
+                this.semanticRecovery = {
+                    status: "recovery_required",
+                    location: { kind: "cursor", epoch: record.epoch, seq: record.seq },
+                    reason: `invalid setup lifecycle transition at journal seq ${record.seq}: ${error instanceof Error ? error.message : String(error)}`,
+                    discardedTailBytes: 0,
+                };
+                return;
+            }
+        }
+        // Partition-level recovery is acknowledged only by the global recovery
+        // coordinator after every registered projection has validated the prefix.
+    }
+    newBinding(jobId, input) {
+        if (!input.key.trim() || input.key.length > 256) {
+            throw Object.assign(new Error("invalid Idempotency-Key"), { status: 400 });
+        }
+        return {
+            keyDigest: hashJson({
+                client: input.client,
+                partition: "global",
+                operation: "setup.job.create",
+                key: input.key,
+            }),
+            requestDigest: hashJson(input.request),
+            jobId,
+        };
+    }
+    rememberBinding(binding) {
+        const prior = this.createByKey.get(binding.keyDigest);
+        if (prior && (prior.requestDigest !== binding.requestDigest || prior.jobId !== binding.jobId)) {
+            throw idempotencyConflict();
+        }
+        this.createByKey.set(binding.keyDigest, {
+            requestDigest: binding.requestDigest,
+            jobId: binding.jobId,
+        });
+    }
+    failSemantic(record, reason) {
+        this.semanticRecovery = {
+            status: "recovery_required",
+            location: { kind: "cursor", epoch: record.epoch, seq: record.seq },
+            reason: `${reason} at journal seq ${record.seq}`,
+            discardedTailBytes: 0,
+        };
+    }
+    assertAvailable() {
+        const recovery = this.recoveryState();
+        if (recovery.status === "recovery_required") {
+            throw new JournalRecoveryRequiredError(recovery);
+        }
+    }
+    ensureJobDir(dir) {
+        if (existsSync(dir)) {
+            if (!this.validExistingJobDir(dir)) {
+                throw new Error(`refusing unsafe setup job directory: ${dir}`);
+            }
+        }
+        else {
+            mkdirSync(dir, { recursive: false, mode: 0o700 });
+        }
+        chmodSync(dir, 0o700);
+    }
+    validExistingJobDir(dir) {
+        try {
+            const stat = lstatSync(dir);
+            if (stat.isSymbolicLink() || !stat.isDirectory())
+                return false;
+            const root = realpathSync(this.artifactsDir);
+            return realpathSync(dir).startsWith(root + sep);
+        }
+        catch {
+            return false;
+        }
+    }
+}
+function parseBinding(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return null;
+    const row = value;
+    if (typeof row["keyDigest"] !== "string" ||
+        !/^sha256:[a-f0-9]{64}$/.test(row["keyDigest"]) ||
+        typeof row["requestDigest"] !== "string" ||
+        !/^sha256:[a-f0-9]{64}$/.test(row["requestDigest"]) ||
+        typeof row["jobId"] !== "string" ||
+        !/^setup-[A-Za-z0-9-]+$/.test(row["jobId"]))
+        return null;
+    return {
+        keyDigest: row["keyDigest"],
+        requestDigest: row["requestDigest"],
+        jobId: row["jobId"],
+    };
+}
+function idempotencyConflict() {
+    return Object.assign(new Error("Idempotency-Key was already used with a different request"), {
+        code: "idempotency_conflict",
+        status: 409,
+    });
+}
+function ensurePrivateRealDirectory(path, label) {
+    try {
+        ensureCanonicalPrivateDirectory(path);
+    }
+    catch (error) {
+        throw new Error(`${label} is unsafe: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+function cloneJob(job) {
+    return ControlSetupJobSchema.parse(JSON.parse(JSON.stringify(job)));
+}
+//# sourceMappingURL=setup-job-store.js.map

package/dist/setup-job-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-job-store.js","sourceRoot":"","sources":["../src/setup-job-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACL,cAAc,EACd,4BAA4B,GAE7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,eAAe,IAAI,qBAAqB,EACxC,oBAAoB,EACpB,iCAAiC,GAIlC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,+BAA+B,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAEzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAA2B;IACnE,QAAQ;IACR,SAAS;IACT,mBAAmB;CACpB,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAA2B;IACrE,GAAG,iCAAiC;CACrC,CAAC,CAAC;AAkCH,MAAM,oBAAoB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IAUb;IATF,YAAY,CAAS;IACrB,OAAO,CAAiB;IAChB,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC1C,WAAW,GAAG,IAAI,GAAG,EAAoD,CAAC;IAC1E,GAAG,CAAa;IACzB,gBAAgB,GACtB,IAAI,CAAC;IAEP,YACW,OAAe,EACxB,OAA6B,EAAE;QADtB,YAAO,GAAP,OAAO,CAAQ;QAGxB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1C,0BAA0B,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACxD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACrD,0BAA0B,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;QACtE,IAAI,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,OAAO;YACV,IAAI,CAAC,OAAO;gBACZ,IAAI,cAAc,CAAC;oBACjB,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;oBACjC,SAAS,EAAE,QAAQ;oBACnB,GAAG,EAAE,IAAI,CAAC,GAAG;iBACd,CAAC,CAAC;QACL,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,0DAA0D,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,GAAG,CAC5F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,GAAG;YACH,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC;YAC3C,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC;YAC3C,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC;YAC7C,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC;YAC7C,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,gBAAgB;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACxD,OAAO;YACL,GAAG,IAAI,CAAC,gBAAgB;YACxB,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE;SAChD,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,GAAoB,EAAE,WAAoC;QAC/D,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC,OAAO,CACjB,eAAe,CAAC,GAAG,CAAC,EACpB,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAClE,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,WAAmC;QAC/C,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;YAAE,MAAM,mBAAmB,EAAE,CAAC;QAC/E,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,WAAmC;QAC3D,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa;gBAAE,MAAM,mBAAmB,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAsB,wBAAwB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,OAAO,CAAC,GAAoB,EAAE,OAA4B;QAChE,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAsB,iBAAiB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,OAAO;YAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,KAA+B;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACjF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,MAAkC;QACrC,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnC,IAAI,MAAM,EAAE,OAAO;YAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,MAAM,EAAE,MAAM;YAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9E,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,GAAG,IAAI,CAAC,MAAM,CAChB,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAC3F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9D,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,QAAQ,CAAC,KAAa;QACpB,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACvB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE;YACpC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE;SACzC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAa,EAAE,WAA2B;QAC/C,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,cAAc,GAAG,WAAW,IAAI,IAAI,CAAC;QACzC,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAsB,QAAQ,CAAC,EAAE,CAAC;YACzE,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;gBAAE,SAAS;YAChD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK;gBAAE,SAAS;YAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,IAAI,CACT,oBAAoB,CAAC,KAAK,CAAC;gBACzB,KAAK;gBACL,MAAM;gBACN,cAAc;gBACd,QAAQ,EAAE,MAAM,CAAC,GAAG;gBACpB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,GAAG,EAAE,MAAM,CAAC,IAAI;aACjB,CAAC,CACH,CAAC;YACF,cAAc,GAAG,MAAM,CAAC;QAC1B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CAAC,KAAa,EAAE,IAAY;QACnC,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QAClC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,OAAO,GACX,KAAK,CAAC,MAAM,IAAI,oBAAoB;YAClC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,0BAA0B,oBAAoB,SAAS,CAAC;QACzH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAsB,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IAEO,OAAO;QACb,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,KAAK,mBAAmB;YAAE,OAAO;QAChE,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAuB,EAAE,CAAC;YACjE,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACpC,IACE,OAAO,MAAM,CAAC,OAAO,EAAE,KAAK,KAAK,QAAQ;oBACzC,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;oBACnD,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ;oBACvC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,oBAAoB,GAAG,GAAG,EAC3E,CAAC;oBACD,IAAI,CAAC,gBAAgB,GAAG;wBACtB,MAAM,EAAE,mBAAmB;wBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;wBAClE,MAAM,EAAE,gDAAgD,MAAM,CAAC,GAAG,EAAE;wBACpE,kBAAkB,EAAE,CAAC;qBACtB,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACtD,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC9C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB;gBAAE,SAAS;YAChD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACpE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,gBAAgB,GAAG;oBACtB,MAAM,EAAE,mBAAmB;oBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;oBAClE,MAAM,EAAE,kDAAkD,MAAM,CAAC,GAAG,EAAE;oBACtE,kBAAkB,EAAE,CAAC;iBACtB,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACjD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC3F,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC1C,IAAI,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;oBAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBACrD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;wBAC7C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;wBAC1D,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,gBAAgB,GAAG;oBACtB,MAAM,EAAE,mBAAmB;oBAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;oBAClE,MAAM,EAAE,qDAAqD,MAAM,CAAC,GAAG,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;oBACpI,kBAAkB,EAAE,CAAC;iBACtB,CAAC;gBACF,OAAO;YACT,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,0EAA0E;IAC5E,CAAC;IAEO,UAAU,CAAC,KAAa,EAAE,KAA6B;QAC7D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAChD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO;YACL,SAAS,EAAE,QAAQ,CAAC;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,QAAQ;gBACnB,SAAS,EAAE,kBAAkB;gBAC7B,GAAG,EAAE,KAAK,CAAC,GAAG;aACf,CAAC;YACF,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YACtC,KAAK;SACN,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,OAA2B;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9F,MAAM,mBAAmB,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE;YACtC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,MAAsC,EAAE,MAAc;QACzE,IAAI,CAAC,gBAAgB,GAAG;YACtB,MAAM,EAAE,mBAAmB;YAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE;YAClE,MAAM,EAAE,GAAG,MAAM,mBAAmB,MAAM,CAAC,GAAG,EAAE;YAChD,kBAAkB,EAAE,CAAC;SACtB,CAAC;IACJ,CAAC;IAEO,eAAe;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;YAC5C,MAAM,IAAI,4BAA4B,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,GAAW;QAC9B,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IAEO,mBAAmB,CAAC,GAAW;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;gBAAE,OAAO,KAAK,CAAC;YAC/D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC7C,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IACE,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ;QACpC,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC,eAAe,CAAC,KAAK,QAAQ;QACxC,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;QAChC,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE3C,OAAO,IAAI,CAAC;IACd,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC;QAC3B,aAAa,EAAE,GAAG,CAAC,eAAe,CAAC;QACnC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2DAA2D,CAAC,EAAE;QAC3F,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,GAAG;KACZ,CAAC,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY,EAAE,KAAa;IAC7D,IAAI,CAAC;QACH,+BAA+B,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,eAAe,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/setup-job-support.d.ts

@@ -0,0 +1,27 @@
+import { type HarnessAdapter, type ProcessGroupHandle } from "@claudexor/core";
+import type { ControlHarnessSetupHarness, ControlSetupJob, CredentialProfileStatus } from "@claudexor/schema";
+import type { SetupLoginRunnerState } from "./setup-login-protocol.js";
+export type SetupProfile = {
+    guideUrl: string;
+    note: string;
+};
+export declare const SETUP_PROFILES: Record<ControlHarnessSetupHarness, SetupProfile>;
+/**
+ * Resolve an INV-135 profile-targeted login request to its canonical scoped
+ * config dir. Typed 400s: an unknown/disabled/secret-ref profile must refuse
+ * at create time, never open a Terminal login into the wrong store.
+ */
+export declare function resolveProfileBinding(harness: ControlHarnessSetupHarness, profileId: string | undefined): {
+    profileId: string;
+    configDir: string;
+} | null;
+/** INV-135 profile verification: the registry adapter's doctor probe against
+ * the durable registry entry — the SAME truth `claudexor profiles login` uses. */
+export declare function profileDoctorProbe(getAdapter: (harness: string) => HarnessAdapter | undefined): (harness: string, profileId: string, abortSignal: AbortSignal) => Promise<CredentialProfileStatus | null>;
+export declare function resolveSetupLoginRunnerPath(moduleUrl?: string, pathExists?: (path: string) => boolean): string;
+export declare function waitWithAbort(ms: number, controller: AbortController, sleep: (ms: number) => Promise<void>): Promise<void>;
+export declare function withAbortAndTimeout<T>(operation: () => Promise<T>, controller: AbortController, timeoutMs: number, label: string): Promise<T>;
+export declare function processGroupFromJob(job: ControlSetupJob): ProcessGroupHandle | null;
+export declare function stateMatchesDurableExecution(job: ControlSetupJob, state: SetupLoginRunnerState): boolean;
+export declare function shellQuote(value: string): string;
+//# sourceMappingURL=setup-job-support.d.ts.map