@claudexor/cli 1.0.1 → 2.1.2

package/dist/setup-login-runner.js

@@ -0,0 +1,225 @@
+#!/usr/bin/env node
+import { spawn } from "node:child_process";
+import { realpathSync } from "node:fs";
+import { dirname, resolve, sep } from "node:path";
+import { fileURLToPath } from "node:url";
+import { defaultProcessGroupService, } from "@claudexor/core";
+import { nativeLoginEnv } from "./native-login.js";
+import { SETUP_LOGIN_PROTOCOL_VERSION, atomicPrivateJson, readLoginManifest, readRunnerPermit, verifyExecutableEvidence, } from "./setup-login-protocol.js";
+const PERMIT_POLL_MS = 50;
+/**
+ * Terminal-visible bootstrap. It creates a detached worker process group and
+ * waits for that worker, but the worker cannot start the vendor command until
+ * claudexord has durably recorded its exact group handle and issued a permit.
+ */
+export async function runSetupLogin(manifestPath, options = {}) {
+    const manifest = validateManifest(manifestPath);
+    const spawnProcess = options.spawnProcess ?? spawn;
+    const runnerPath = options.runnerPath ?? fileURLToPath(import.meta.url);
+    const worker = spawnProcess(process.execPath, [runnerPath, "--worker", resolve(manifestPath)], {
+        cwd: manifest.cwd,
+        env: runnerBootstrapEnv(),
+        detached: true,
+        stdio: "inherit",
+    });
+    const result = await waitForExit(worker);
+    return result.code === 0 && result.signal === null ? 0 : 1;
+}
+/** Worker entrypoint. Exported so the permit ordering can be fault-injected. */
+export async function runSetupLoginWorker(manifestPath, options = {}) {
+    const manifest = validateManifest(manifestPath);
+    const now = options.now ?? (() => new Date());
+    const sleep = options.sleep ?? ((ms) => new Promise((done) => setTimeout(done, ms)));
+    const spawnProcess = options.spawnProcess ?? spawn;
+    const processGroups = options.processGroupService ?? defaultProcessGroupService;
+    const captured = processGroups.captureLeader(options.selfPid ?? process.pid);
+    if (captured.status !== "known") {
+        throw new Error(describeCaptureFailure(captured));
+    }
+    const observedAt = now().toISOString();
+    const awaitingPermit = {
+        version: SETUP_LOGIN_PROTOCOL_VERSION,
+        jobId: manifest.jobId,
+        executionId: manifest.executionId,
+        processGroup: captured.handle,
+        stage: "awaiting_permit",
+        observedAt,
+        commandDigest: manifest.commandDigest,
+        manifestDigest: manifest.manifestDigest,
+    };
+    atomicPrivateJson(manifest.statePath, awaitingPermit);
+    const permit = await waitForPermit(manifest, now, sleep);
+    if (!permit) {
+        persistResult(manifest, {
+            permitIssuedAt: null,
+            commandStarted: false,
+            errorCode: "permit_timeout",
+            exitCode: null,
+            signal: null,
+            finishedAt: now().toISOString(),
+        });
+        return 1;
+    }
+    if (!verifyExecutableEvidence(manifest.executable)) {
+        persistResult(manifest, {
+            permitIssuedAt: permit.issuedAt,
+            commandStarted: false,
+            errorCode: "spawn_failed",
+            exitCode: null,
+            signal: null,
+            finishedAt: now().toISOString(),
+        });
+        return 1;
+    }
+    atomicPrivateJson(manifest.statePath, { ...awaitingPermit, stage: "running" });
+    // Keep the group leader alive through TERM so the daemon can still prove
+    // identity and escalate a stubborn descendant with KILL after the grace
+    // period. The vendor child receives the same group signal directly.
+    const holdLeaderForEscalation = () => undefined;
+    process.on("SIGTERM", holdLeaderForEscalation);
+    process.on("SIGINT", holdLeaderForEscalation);
+    let child;
+    try {
+        const spawnOptions = {
+            cwd: manifest.cwd,
+            // A sealed profileConfigDir (INV-135) scopes the vendor login to the
+            // profile's own store; absent = the default vendor store as before.
+            env: nativeLoginEnv(manifest.harness, process.env, manifest.profileConfigDir),
+            detached: false,
+            stdio: "inherit",
+        };
+        child = spawnProcess(manifest.binary, manifest.args, spawnOptions);
+    }
+    catch {
+        persistResult(manifest, {
+            permitIssuedAt: permit.issuedAt,
+            commandStarted: false,
+            errorCode: "spawn_failed",
+            exitCode: null,
+            signal: null,
+            finishedAt: now().toISOString(),
+        });
+        process.off("SIGTERM", holdLeaderForEscalation);
+        process.off("SIGINT", holdLeaderForEscalation);
+        return 1;
+    }
+    let result;
+    try {
+        result = await waitForExit(child);
+    }
+    catch {
+        persistResult(manifest, {
+            permitIssuedAt: permit.issuedAt,
+            commandStarted: false,
+            errorCode: "spawn_failed",
+            exitCode: null,
+            signal: null,
+            finishedAt: now().toISOString(),
+        });
+        process.off("SIGTERM", holdLeaderForEscalation);
+        process.off("SIGINT", holdLeaderForEscalation);
+        return 1;
+    }
+    process.off("SIGTERM", holdLeaderForEscalation);
+    process.off("SIGINT", holdLeaderForEscalation);
+    persistResult(manifest, {
+        permitIssuedAt: permit.issuedAt,
+        commandStarted: true,
+        exitCode: result.code,
+        signal: result.signal,
+        finishedAt: now().toISOString(),
+    });
+    return result.code === 0 && result.signal === null ? 0 : 1;
+}
+function validateManifest(manifestPath) {
+    const manifest = readLoginManifest(manifestPath);
+    const base = resolve(dirname(manifestPath));
+    for (const output of [manifest.statePath, manifest.resultPath, manifest.permitPath]) {
+        const absolute = resolve(output);
+        if (!absolute.startsWith(base + sep))
+            throw new Error("setup-login sidecar escapes its job directory");
+    }
+    return manifest;
+}
+async function waitForPermit(manifest, now, sleep) {
+    const deadline = Date.parse(manifest.permitDeadlineAt);
+    while (now().getTime() <= deadline) {
+        const permit = readRunnerPermit(manifest.permitPath);
+        if (permit &&
+            permit.jobId === manifest.jobId &&
+            permit.executionId === manifest.executionId &&
+            permit.commandDigest === manifest.commandDigest &&
+            permit.manifestDigest === manifest.manifestDigest)
+            return permit;
+        await sleep(Math.min(PERMIT_POLL_MS, Math.max(1, deadline - now().getTime())));
+    }
+    return null;
+}
+function persistResult(manifest, result) {
+    atomicPrivateJson(manifest.resultPath, {
+        version: SETUP_LOGIN_PROTOCOL_VERSION,
+        jobId: manifest.jobId,
+        executionId: manifest.executionId,
+        commandDigest: manifest.commandDigest,
+        manifestDigest: manifest.manifestDigest,
+        ...result,
+    });
+}
+function waitForExit(child) {
+    return new Promise((resolveExit, reject) => {
+        child.once("error", reject);
+        child.once("exit", (code, signal) => resolveExit({ code, signal }));
+    });
+}
+function describeCaptureFailure(captured) {
+    return captured.status === "missing"
+        ? "setup-login worker disappeared before its process group could be captured"
+        : `setup-login worker process-group identity is unprovable: ${captured.reason}`;
+}
+/** The bootstrap itself never needs model/provider credentials. */
+function runnerBootstrapEnv(source = process.env) {
+    const env = {};
+    for (const key of [
+        "PATH",
+        "HOME",
+        "TMPDIR",
+        "LANG",
+        "LC_ALL",
+        "USER",
+        "LOGNAME",
+        "CLAUDEXOR_CODEX_NATIVE_HOME",
+        "CLAUDEXOR_CLAUDE_NATIVE_DIR",
+    ]) {
+        if (source[key] !== undefined)
+            env[key] = source[key];
+    }
+    return env;
+}
+function isDirectEntrypoint() {
+    if (!process.argv[1])
+        return false;
+    try {
+        return (realpathSync(resolve(process.argv[1])) ===
+            realpathSync(resolve(fileURLToPath(import.meta.url))));
+    }
+    catch {
+        return false;
+    }
+}
+if (isDirectEntrypoint()) {
+    const workerMode = process.argv[2] === "--worker";
+    const manifestPath = process.argv[workerMode ? 3 : 2];
+    if (!manifestPath) {
+        process.stderr.write("usage: setup-login-runner [--worker] <manifest.json>\n");
+        process.exitCode = 2;
+    }
+    else {
+        (workerMode ? runSetupLoginWorker(manifestPath) : runSetupLogin(manifestPath)).then((code) => {
+            process.exitCode = code;
+        }, (error) => {
+            process.stderr.write(`setup-login-runner: ${error instanceof Error ? error.message : String(error)}\n`);
+            process.exitCode = 1;
+        });
+    }
+}
+//# sourceMappingURL=setup-login-runner.js.map

package/dist/setup-login-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-login-runner.js","sourceRoot":"","sources":["../src/setup-login-runner.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAEL,0BAA0B,GAE3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,GAIzB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,cAAc,GAAG,EAAE,CAAC;AAW1B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,YAAoB,EACpB,UAAmC,EAAE;IAErC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE;QAC7F,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,EAAE,kBAAkB,EAAE;QACzB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,YAAoB,EACpB,UAAmC,EAAE;IAErC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;IACnD,MAAM,aAAa,GAAG,OAAO,CAAC,mBAAmB,IAAI,0BAA0B,CAAC;IAChF,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,cAAc,GAA0B;QAC5C,OAAO,EAAE,4BAA4B;QACrC,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,YAAY,EAAE,QAAQ,CAAC,MAAM;QAC7B,KAAK,EAAE,iBAAiB;QACxB,UAAU;QACV,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,cAAc,EAAE,QAAQ,CAAC,cAAc;KACxC,CAAC;IACF,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAEtD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,aAAa,CAAC,QAAQ,EAAE;YACtB,cAAc,EAAE,IAAI;YACpB,cAAc,EAAE,KAAK;YACrB,SAAS,EAAE,gBAAgB;YAC3B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;SAChC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,aAAa,CAAC,QAAQ,EAAE;YACtB,cAAc,EAAE,MAAM,CAAC,QAAQ;YAC/B,cAAc,EAAE,KAAK;YACrB,SAAS,EAAE,cAAc;YACzB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;SAChC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAED,iBAAiB,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,GAAG,cAAc,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/E,yEAAyE;IACzE,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,uBAAuB,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC;IAChD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,MAAM,YAAY,GAAiB;YACjC,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,qEAAqE;YACrE,oEAAoE;YACpE,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,CAAC;YAC7E,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,SAAS;SACjB,CAAC;QACF,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,CAAC,QAAQ,EAAE;YACtB,cAAc,EAAE,MAAM,CAAC,QAAQ;YAC/B,cAAc,EAAE,KAAK;YACrB,SAAS,EAAE,cAAc;YACzB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;SAChC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAA8D,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,CAAC,QAAQ,EAAE;YACtB,cAAc,EAAE,MAAM,CAAC,QAAQ;YAC/B,cAAc,EAAE,KAAK;YACrB,SAAS,EAAE,cAAc;YACzB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;SAChC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IAC/C,aAAa,CAAC,QAAQ,EAAE;QACtB,cAAc,EAAE,MAAM,CAAC,QAAQ;QAC/B,cAAc,EAAE,IAAI;QACpB,QAAQ,EAAE,MAAM,CAAC,IAAI;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;KAChC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAoB;IAC5C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAA4B,EAC5B,GAAe,EACf,KAAoC;IAEpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACvD,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACrD,IACE,MAAM;YACN,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;YAC/B,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;YAC3C,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;YAC/C,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;YAEjD,OAAO,MAAM,CAAC;QAChB,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CACpB,QAA4B,EAC5B,MAGC;IAED,iBAAiB,CAAC,QAAQ,CAAC,UAAU,EAAE;QACrC,OAAO,EAAE,4BAA4B;QACrC,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,GAAG,MAAM;KACuB,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAClB,KAA+B;IAE/B,OAAO,IAAI,OAAO,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE;QACzC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAA2D;IAE3D,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS;QAClC,CAAC,CAAC,2EAA2E;QAC7E,CAAC,CAAC,4DAA4D,QAAQ,CAAC,MAAM,EAAE,CAAC;AACpF,CAAC;AAED,mEAAmE;AACnE,SAAS,kBAAkB,CAAC,SAA4B,OAAO,CAAC,GAAG;IACjE,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI;QAChB,MAAM;QACN,MAAM;QACN,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,MAAM;QACN,SAAS;QACT,6BAA6B;QAC7B,6BAA6B;KACrB,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB;IACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,CACL,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CACtD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,kBAAkB,EAAE,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC;IAClD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC/E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CACjF,CAAC,IAAI,EAAE,EAAE;YACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC1B,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;YACR,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAClF,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/setup-supervisor.d.ts

@@ -0,0 +1,53 @@
+export type SetupSupervisorState = "idle" | "starting" | "healthy" | "failed" | "recovery_required" | "draining" | "stopped";
+export interface SetupSupervisorHealth {
+    state: SetupSupervisorState;
+    failure: Error | null;
+    activeTasks: number;
+}
+export interface SetupSupervisorOptions {
+    pollMs: number;
+    recoveryRequired: () => boolean;
+    reconcile: () => Promise<void>;
+    tick: () => Promise<void>;
+    abortInFlight: (reason: Error) => void;
+}
+export interface SetupSupervisorTrackOptions {
+    /** Safety work may be registered while an already-started drain is fencing
+     * ordinary admission (for example, process-group termination). */
+    safety?: boolean;
+}
+/**
+ * Owns setup background-work liveness. Domain transitions remain in the setup
+ * lifecycle service; this class only controls admission, monitor scheduling,
+ * exact task tracking, abort fan-out, and idempotent drain.
+ */
+export declare class SetupSupervisor {
+    private readonly options;
+    private stateValue;
+    private timer;
+    private readonly tasks;
+    private failureValue;
+    private startPromise;
+    private shutdownPromise;
+    private abortIssued;
+    constructor(options: SetupSupervisorOptions);
+    health(): SetupSupervisorHealth;
+    start(): Promise<void>;
+    private startOnce;
+    /** Synchronous admission/abort fence used before any shutdown await. */
+    beginDrain(): void;
+    assertCreateAllowed(): void;
+    reportFailure(error: unknown, label?: string): void;
+    /**
+     * Tracks an operation so shutdown cannot outlive it. Rejections are observed
+     * exactly once and fail-close future setup admission.
+     */
+    track<T>(label: string, operation: () => Promise<T>, options?: SetupSupervisorTrackOptions): Promise<T>;
+    shutdown(): Promise<void>;
+    private shutdownOnce;
+    private schedule;
+    private clearTimer;
+    private rememberFailure;
+    private unavailableError;
+}
+//# sourceMappingURL=setup-supervisor.d.ts.map

package/dist/setup-supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-supervisor.d.ts","sourceRoot":"","sources":["../src/setup-supervisor.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAC9B,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,mBAAmB,GAAG,UAAU,GAAG,SAAS,CAAC;AAE5F,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,OAAO,EAAE,KAAK,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,OAAO,CAAC;IAChC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,aAAa,EAAE,CAAC,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;CACxC;AAED,MAAM,WAAW,2BAA2B;IAC1C;sEACkE;IAClE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,qBAAa,eAAe;IASd,OAAO,CAAC,QAAQ,CAAC,OAAO;IARpC,OAAO,CAAC,UAAU,CAAgC;IAClD,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IACrD,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,eAAe,CAA8B;IACrD,OAAO,CAAC,WAAW,CAAS;gBAEC,OAAO,EAAE,sBAAsB;IAM5D,MAAM,IAAI,qBAAqB;IAQ/B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAkBR,SAAS;IAqBvB,wEAAwE;IACxE,UAAU,IAAI,IAAI;IAgBlB,mBAAmB,IAAI,IAAI;IAS3B,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAqB,GAAG,IAAI;IAY/D;;;OAGG;IACH,KAAK,CAAC,CAAC,EACL,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,OAAO,GAAE,2BAAgC,GACxC,OAAO,CAAC,CAAC,CAAC;IA4Bb,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;YAMX,YAAY;IAW1B,OAAO,CAAC,QAAQ;IAahB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,gBAAgB;CAWzB"}

package/dist/setup-supervisor.js

@@ -0,0 +1,177 @@
+/**
+ * Owns setup background-work liveness. Domain transitions remain in the setup
+ * lifecycle service; this class only controls admission, monitor scheduling,
+ * exact task tracking, abort fan-out, and idempotent drain.
+ */
+export class SetupSupervisor {
+    options;
+    stateValue = "idle";
+    timer = null;
+    tasks = new Set();
+    failureValue = null;
+    startPromise = null;
+    shutdownPromise = null;
+    abortIssued = false;
+    constructor(options) {
+        this.options = options;
+        if (!Number.isFinite(options.pollMs) || options.pollMs < 0) {
+            throw new Error("setup supervisor poll interval must be a non-negative finite number");
+        }
+    }
+    health() {
+        return {
+            state: this.stateValue,
+            failure: this.failureValue,
+            activeTasks: this.tasks.size,
+        };
+    }
+    start() {
+        if (this.stateValue === "healthy")
+            return Promise.resolve();
+        if (this.startPromise)
+            return this.startPromise;
+        if (this.stateValue === "draining" || this.stateValue === "stopped") {
+            return Promise.reject(this.unavailableError("setup supervisor is already draining or stopped"));
+        }
+        if (this.stateValue === "failed" || this.stateValue === "recovery_required") {
+            return Promise.reject(this.unavailableError());
+        }
+        // Fence create/confirm/extend synchronously; startOnce runs in the tracked
+        // microtask and must not leave a one-turn admission window.
+        this.stateValue = "starting";
+        this.startPromise = this.track("reconcile", () => this.startOnce());
+        return this.startPromise;
+    }
+    async startOnce() {
+        if (this.stateValue !== "starting")
+            throw this.unavailableError();
+        if (this.options.recoveryRequired()) {
+            this.stateValue = "recovery_required";
+            throw this.unavailableError("setup journal requires recovery before setup can start");
+        }
+        try {
+            await this.options.reconcile();
+        }
+        catch (error) {
+            this.reportFailure(error, "reconcile");
+            throw this.unavailableError();
+        }
+        if (this.options.recoveryRequired()) {
+            this.stateValue = "recovery_required";
+            throw this.unavailableError("setup journal requires recovery after reconciliation");
+        }
+        if (this.stateValue !== "starting")
+            throw this.unavailableError();
+        this.stateValue = "healthy";
+        this.schedule();
+    }
+    /** Synchronous admission/abort fence used before any shutdown await. */
+    beginDrain() {
+        if (this.stateValue === "stopped")
+            return;
+        if (this.stateValue !== "draining") {
+            this.clearTimer();
+            this.stateValue = "draining";
+        }
+        if (!this.abortIssued) {
+            this.abortIssued = true;
+            try {
+                this.options.abortInFlight(new Error("setup supervisor is draining"));
+            }
+            catch (error) {
+                this.rememberFailure(error, "abort-in-flight");
+            }
+        }
+    }
+    assertCreateAllowed() {
+        // The production composition root awaits start() before exposing setup.
+        // Allowing idle keeps isolated lifecycle stores usable in focused tests;
+        // every failed/recovery/draining state remains a synchronous hard fence.
+        if (this.stateValue !== "idle" && this.stateValue !== "healthy") {
+            throw this.unavailableError();
+        }
+    }
+    reportFailure(error, label = "setup-supervisor") {
+        this.rememberFailure(error, label);
+        this.clearTimer();
+        if (this.stateValue !== "recovery_required" &&
+            this.stateValue !== "draining" &&
+            this.stateValue !== "stopped") {
+            this.stateValue = "failed";
+        }
+    }
+    /**
+     * Tracks an operation so shutdown cannot outlive it. Rejections are observed
+     * exactly once and fail-close future setup admission.
+     */
+    track(label, operation, options = {}) {
+        if (!label.trim())
+            throw new Error("setup supervisor task label must not be empty");
+        if ((this.stateValue === "draining" || this.stateValue === "stopped") && !options.safety) {
+            return Promise.reject(this.unavailableError("setup supervisor will not start ordinary work while draining"));
+        }
+        if (this.stateValue === "stopped") {
+            return Promise.reject(this.unavailableError("setup supervisor is stopped"));
+        }
+        const raw = Promise.resolve().then(operation);
+        let tracked;
+        tracked = raw
+            .then((value) => value, (error) => {
+            this.reportFailure(error, label);
+            throw error;
+        })
+            .finally(() => {
+            this.tasks.delete(tracked);
+        });
+        this.tasks.add(tracked);
+        return tracked;
+    }
+    shutdown() {
+        this.beginDrain();
+        this.shutdownPromise ??= this.shutdownOnce();
+        return this.shutdownPromise;
+    }
+    async shutdownOnce() {
+        // Drain to a fixed point: an operation that was already running may
+        // register bounded safety termination while handling its abort.
+        for (;;) {
+            const pending = [...this.tasks];
+            if (pending.length === 0)
+                break;
+            await Promise.allSettled(pending);
+        }
+        this.stateValue = "stopped";
+    }
+    schedule() {
+        if (this.stateValue !== "healthy")
+            return;
+        this.timer = setTimeout(() => {
+            this.timer = null;
+            const task = this.track("monitor", this.options.tick);
+            void task.then(() => this.schedule(), () => undefined);
+        }, this.options.pollMs);
+        this.timer.unref();
+    }
+    clearTimer() {
+        if (this.timer)
+            clearTimeout(this.timer);
+        this.timer = null;
+    }
+    rememberFailure(error, label) {
+        if (this.failureValue)
+            return;
+        const cause = error instanceof Error ? error : new Error(String(error));
+        this.failureValue = new Error(`${label}: ${cause.message}`, { cause });
+    }
+    unavailableError(message) {
+        const detail = message ??
+            (this.failureValue
+                ? `setup supervisor is unavailable: ${this.failureValue.message}`
+                : `setup supervisor is unavailable (${this.stateValue})`);
+        return Object.assign(new Error(detail), {
+            status: 503,
+            code: "setup_supervisor_unavailable",
+        });
+    }
+}
+//# sourceMappingURL=setup-supervisor.js.map

package/dist/setup-supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-supervisor.js","sourceRoot":"","sources":["../src/setup-supervisor.ts"],"names":[],"mappings":"AAuBA;;;;GAIG;AACH,MAAM,OAAO,eAAe;IASG;IARrB,UAAU,GAAyB,MAAM,CAAC;IAC1C,KAAK,GAA0B,IAAI,CAAC;IAC3B,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC7C,YAAY,GAAiB,IAAI,CAAC;IAClC,YAAY,GAAyB,IAAI,CAAC;IAC1C,eAAe,GAAyB,IAAI,CAAC;IAC7C,WAAW,GAAG,KAAK,CAAC;IAE5B,YAA6B,OAA+B;QAA/B,YAAO,GAAP,OAAO,CAAwB;QAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,UAAU;YACtB,OAAO,EAAE,IAAI,CAAC,YAAY;YAC1B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;SAC7B,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAChD,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpE,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,CAAC,gBAAgB,CAAC,iDAAiD,CAAC,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,KAAK,mBAAmB,EAAE,CAAC;YAC5E,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,2EAA2E;QAC3E,4DAA4D;QAC5D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;YAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAClE,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,GAAG,mBAAmB,CAAC;YACtC,MAAM,IAAI,CAAC,gBAAgB,CAAC,wDAAwD,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACvC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,GAAG,mBAAmB,CAAC;YACtC,MAAM,IAAI,CAAC,gBAAgB,CAAC,sDAAsD,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;YAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAClE,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAED,wEAAwE;IACxE,UAAU;QACR,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO;QAC1C,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;QACjB,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAChE,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAED,aAAa,CAAC,KAAc,EAAE,KAAK,GAAG,kBAAkB;QACtD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IACE,IAAI,CAAC,UAAU,KAAK,mBAAmB;YACvC,IAAI,CAAC,UAAU,KAAK,UAAU;YAC9B,IAAI,CAAC,UAAU,KAAK,SAAS,EAC7B,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC;QAC7B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CACH,KAAa,EACb,SAA2B,EAC3B,UAAuC,EAAE;QAEzC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACpF,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACzF,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,CAAC,gBAAgB,CAAC,8DAA8D,CAAC,CACtF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,OAAoB,CAAC;QACzB,OAAO,GAAG,GAAG;aACV,IAAI,CACH,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAChB,CAAC,KAAK,EAAE,EAAE;YACR,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACjC,MAAM,KAAK,CAAC;QACd,CAAC,CACF;aACA,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,oEAAoE;QACpE,gEAAgE;QAChE,SAAS,CAAC;YACR,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM;YAChC,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO;QAC1C,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtD,KAAK,IAAI,CAAC,IAAI,CACZ,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EACrB,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACJ,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAEO,eAAe,CAAC,KAAc,EAAE,KAAa;QACnD,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO;QAC9B,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,YAAY,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;IAEO,gBAAgB,CAAC,OAAgB;QACvC,MAAM,MAAM,GACV,OAAO;YACP,CAAC,IAAI,CAAC,YAAY;gBAChB,CAAC,CAAC,oCAAoC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE;gBACjE,CAAC,CAAC,oCAAoC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE;YACtC,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,8BAA8B;SACrC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/spec.d.ts

@@ -1,29 +1,17 @@
 import { type SpecDraft, type SpecFieldChange } from "@claudexor/interview";
-import { type InterviewAnswer, type InterviewQuestion, type SpecPack } from "@claudexor/schema";
+import { type InterviewAnswer, type InterviewQuestion, type SpecPack, type TestCommandInvocation } from "@claudexor/schema";
 export interface SpecAnswersFile {
+    /** Durable daemon session that owns the questions and grounding plan. */
+    sessionId?: string;
     answers: InterviewAnswer[];
-    /** Present in the draft questions file so freezing can reuse the exact grounding plan. */
-    planRunId?: string;
-    planDir?: string;
     questions?: InterviewQuestion[];
+    priorDecisions?: PriorDecision[];
     summary?: string;
     success_criteria?: string[];
     non_goals?: string[];
     forbidden_approaches?: string[];
     decided_tradeoffs?: string[];
-    tests?: string[];
-}
-export interface SpecCommandResult {
-    status: "questions" | "frozen";
-    planRunId: string;
-    planDir: string;
-    questionsPath?: string;
-    specId?: string;
-    specDir?: string;
-    specHash?: string;
-    runHint?: string;
-    questions: InterviewQuestion[];
-    changes?: SpecFieldChange[];
+    tests?: TestCommandInvocation[];
 }
 export interface LoadedFrozenSpec {
     spec: SpecPack;
@@ -31,7 +19,7 @@ export interface LoadedFrozenSpec {
     specHash: string;
 }
 export declare function loadFrozenSpec(path: string): LoadedFrozenSpec;
-export declare function resolveRunTestCommands(cliTests: string[] | undefined, spec: SpecPack | null): string[] | undefined;
+export declare function resolveRunTestCommands(cliTests: TestCommandInvocation[] | undefined, spec: SpecPack | null): TestCommandInvocation[] | undefined;
 /**
  * The grounding-plan instruction that DRIVES extractQuestionsFromPlan: it tells the
  * harness to end its read-only plan with a structured `## Open Questions` block in
@@ -75,10 +63,11 @@ export declare function draftFromPlanAndAnswers(prompt: string, plan: string, qu
  */
 export declare function validateAnswers(questions: InterviewQuestion[], answers: InterviewAnswer[]): void;
 export declare function freezeSpecFromGrounding(prompt: string, plan: string, answers: SpecAnswersFile): Promise<SpecPack>;
-export declare function persistSpec(repoRoot: string, spec: SpecPack, plan: string, previous?: SpecPack | null): {
+export declare function persistSpec(repoRoot: string, spec: SpecPack, plan: string, previous?: SpecPack | null): ReturnType<typeof persistSpecAt>;
+/** Persist a runnable immutable projection outside the user repository. */
+export declare function persistSpecAt(specsRoot: string, spec: SpecPack, plan: string, previous?: SpecPack | null): {
     specDir: string;
     specHash: string;
     changes: SpecFieldChange[];
 };
-export declare function loadPreviousSpec(path?: string): SpecPack | null;
 //# sourceMappingURL=spec.d.ts.map

package/dist/spec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spec.d.ts","sourceRoot":"","sources":["../src/spec.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,eAAe,EAErB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,iBAAiB,EAAE,KAAK,QAAQ,EAA8B,MAAM,mBAAmB,CAAC;AAI5H,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CA+B7D;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,EAC9B,IAAI,EAAE,QAAQ,GAAG,IAAI,GACpB,MAAM,EAAE,GAAG,SAAS,CAItB;AAED;;;;;;GAMG;AACH;wCACwC;AACxC,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,GAAE,aAAa,EAAO,GAAG,MAAM,CAmCjG;AAkCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAmD1E;AAiED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAQzD;AAmBD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,SAAS,CA+CtI;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAsBhG;AAED,wBAAsB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAevH;AAmCD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,GAAG;IACvG,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B,CAwBA;AAED,wBAAgB,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAI/D"}
+{"version":3,"file":"spec.d.ts","sourceRoot":"","sources":["../src/spec.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,eAAe,EAErB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,QAAQ,EACb,KAAK,qBAAqB,EAE3B,MAAM,mBAAmB,CAAC;AAW3B,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAChC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,KAAK,CAAC,EAAE,qBAAqB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAqC7D;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,qBAAqB,EAAE,GAAG,SAAS,EAC7C,IAAI,EAAE,QAAQ,GAAG,IAAI,GACpB,qBAAqB,EAAE,GAAG,SAAS,CAUrC;AAED;;;;;;GAMG;AACH;wCACwC;AACxC,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,GAAE,aAAa,EAAO,GAAG,MAAM,CAmCjG;AAqCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,EAAE,CA0D1E;AAoED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAQzD;AAmBD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,iBAAiB,EAAE,EAC9B,IAAI,EAAE,eAAe,GACpB,SAAS,CA0DX;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAwBhG;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,QAAQ,CAAC,CAenB;AAyCD,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,GACzB,UAAU,CAAC,OAAO,aAAa,CAAC,CAElC;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAC3B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,GACzB;IACD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B,CAwBA"}