@claudexor/cli 3.4.2 → 3.6.0

package/dist/credential-profile-mutations.js

@@ -0,0 +1,187 @@
+/**
+ * PATCH/DELETE credential-profile services (INV-135 unified account model),
+ * extracted from control-services.ts (INV-124). One mutation owner each:
+ * the Enabled toggle (with the deprecated `native_credentials_enabled`
+ * downgrade-window mirror for the migrated row) and the PROVABLE removal
+ * (D-U4: material cleanup BEFORE registry removal; a cleanup failure is a
+ * typed retryable error, never a removed-with-warning receipt).
+ */
+import { existsSync, rmSync } from "node:fs";
+import { join, sep } from "node:path";
+import { loadConfig, updateGlobalConfig } from "@claudexor/config";
+import { canonicalIsolationLocator, normalizeThroughExistingAncestor } from "@claudexor/core";
+import { claudexorOwnedRoot, noProjectRepoRoot } from "@claudexor/util";
+import { purgeProfileLanes } from "@claudexor/workspace";
+import { vendorVerifiedProfileStatus } from "@claudexor/orchestrator";
+import { locatorIsDefaultNativeStore, readAccountsMigrationFile, removeAccountsMigrationRecord, } from "./accounts-unified-migration.js";
+import { profileDoctorStatus } from "./accounts-projection.js";
+import { canonicalProfileLoginDir, isConfigDirLoginHarness } from "./config-dir-login-harnesses.js";
+import { assertCredentialProfileRegistered } from "./profile-compatibility.js";
+import { removeProfileFromRegistry } from "./profile-registration.js";
+const NO_PROJECT_ROOT = noProjectRepoRoot();
+export function credentialProfileMutations(deps) {
+    return {
+        // PATCH /credential-profiles/:harness/:id — the Enabled toggle of the
+        // accounts symmetry (INV-135): one locked registry write, plus the
+        // deprecated `native_credentials_enabled` downgrade-window mirror when the
+        // row is the migrated one (a silent divergence would re-enable the
+        // account after a downgrade).
+        updateCredentialProfile: async (input) => {
+            const p = (input ?? {});
+            const harnessId = typeof p["harnessId"] === "string" ? p["harnessId"] : "";
+            const profileId = typeof p["profileId"] === "string" ? p["profileId"] : "";
+            const enabled = typeof p["enabled"] === "boolean" ? p["enabled"] : undefined;
+            if (!harnessId || !profileId || enabled === undefined) {
+                throw Object.assign(new Error("harnessId, profileId and enabled are required"), {
+                    status: 400,
+                });
+            }
+            const registry = loadConfig(NO_PROJECT_ROOT).global.credential_profiles;
+            assertCredentialProfileRegistered(registry, harnessId, profileId);
+            // The downgrade-window mirror keys on the STRUCTURAL rule (the row's
+            // locator IS the harness default store), not on migration-record
+            // presence alone: a bootstrap row (ensureBootstrapProfile) sits at the
+            // native dir before any record exists, and a silent mirror divergence
+            // would re-enable that account after a downgrade — or let the legacy
+            // default-subject ladder route back into a disabled row's store.
+            const registryRow = registry.find((row) => row.harness_id === harnessId && row.profile_id === profileId);
+            const mirrorsNativeKey = readAccountsMigrationFile()[harnessId]?.row_id === profileId ||
+                locatorIsDefaultNativeStore(harnessId, registryRow?.isolation_locator ?? null);
+            let updated;
+            updateGlobalConfig((config) => ({
+                ...config,
+                ...(mirrorsNativeKey
+                    ? {
+                        harnesses: {
+                            ...config.harnesses,
+                            [harnessId]: {
+                                ...config.harnesses[harnessId],
+                                native_credentials_enabled: enabled,
+                            },
+                        },
+                    }
+                    : {}),
+                credential_profiles: config.credential_profiles.map((profile) => {
+                    if (profile.harness_id !== harnessId || profile.profile_id !== profileId)
+                        return profile;
+                    updated = { ...profile, enabled };
+                    return updated;
+                }),
+            }));
+            if (!updated) {
+                throw Object.assign(new Error("profile update did not persist"), { status: 500 });
+            }
+            deps.bustStatusCaches({ harnessId, profileId });
+            return {
+                profile: updated,
+                // Same vendor overlay the listing applies: a single-profile response
+                // must not re-declare a revoked credential `passed` (INV-135 honesty).
+                status: vendorVerifiedProfileStatus(await profileDoctorStatus(updated), deps.quotaRegistry().read()),
+            };
+        },
+        // DELETE /credential-profiles/:harness/:id — provable removal (D-U4).
+        deleteCredentialProfile: async (input) => {
+            const p = (input ?? {});
+            const harnessId = typeof p["harnessId"] === "string" ? p["harnessId"] : "";
+            const profileId = typeof p["profileId"] === "string" ? p["profileId"] : "";
+            if (!harnessId || !profileId) {
+                throw Object.assign(new Error("harnessId and profileId are required"), { status: 400 });
+            }
+            const activeLogin = deps.activeLoginJob(harnessId, profileId);
+            if (activeLogin) {
+                throw Object.assign(new Error(`a login for this account is in progress (${activeLogin.jobId}); cancel it before removing the account`), { status: 409 });
+            }
+            assertCredentialProfileRegistered(loadConfig(NO_PROJECT_ROOT).global.credential_profiles, harnessId, profileId);
+            deps.threads.invalidateCredentialProfile(harnessId, profileId);
+            // INV-034 lifecycle owner (b): the deleted account's durable per-lane
+            // read-only homes must not survive to be resumed. Sweep them across every
+            // project a live thread anchors to (plus the no-project partition).
+            const laneRoots = new Set([NO_PROJECT_ROOT]);
+            for (const thread of deps.threads.listThreads()) {
+                if (thread.repo?.root)
+                    laneRoots.add(thread.repo.root);
+            }
+            for (const root of laneRoots)
+                purgeProfileLanes(root, harnessId, profileId);
+            deps.quotaRegistry().removeSubject(harnessId, profileId);
+            // Unified account model: deleting a MIGRATED row retires the canonical
+            // id PLUS its legacy aliases (the null engine-default subject and its
+            // `<harness>-default` lane homes) in the SAME lifecycle operation — a
+            // dangling alias could resume the deleted credential's session or keep
+            // charging its quota subject.
+            const migrationRecord = readAccountsMigrationFile()[harnessId];
+            const registryEntry = loadConfig(NO_PROJECT_ROOT).global.credential_profiles.find((row) => row.harness_id === harnessId && row.profile_id === profileId);
+            const migratedRow = migrationRecord?.row_id === profileId;
+            if (migrationRecord && migratedRow) {
+                // The record's OWN alias list drives the retirement — the schema's
+                // "deletion retires these aliases" claim stays true by construction
+                // (the null alias is the engine-default subject and its
+                // `<harness>-default` lane homes).
+                for (const alias of migrationRecord.legacy_aliases) {
+                    deps.quotaRegistry().removeSubject(harnessId, alias);
+                    for (const root of laneRoots)
+                        purgeProfileLanes(root, harnessId, alias ?? "default");
+                }
+            }
+            // D-U4 failure contract: `removed: true` ONLY when the row AND its
+            // credential material are provably gone. Material cleanup therefore runs
+            // BEFORE registry removal: a cleanup failure is a typed RETRYABLE error
+            // that leaves the row registered (a retry finishes the job) — never a
+            // `removed: true` with a warning, which the startup auto-registration
+            // would resurrect from the surviving material on the next start.
+            let credentialCleanup = "none";
+            try {
+                if (registryEntry?.credential_kind === "config_dir_login" &&
+                    registryEntry.isolation_locator) {
+                    // Each member resolves through its OWN canonicalizer (the ladder
+                    // this used to hand-write let cursor and agy fall through to the
+                    // generic one, so a member whose canonicalizer adds a rule would
+                    // silently delete against a different path than its login wrote to).
+                    const dir = isConfigDirLoginHarness(harnessId)
+                        ? canonicalProfileLoginDir(harnessId, registryEntry.isolation_locator)
+                        : canonicalIsolationLocator(registryEntry.isolation_locator, "credential profile dir");
+                    // Recursive deletion is fenced to a strict descendant of the
+                    // profiles tree — PLUS exactly the harness's own default native
+                    // store dir (an exact-path allowlist, never a general "anything
+                    // under native/" deletion class — K.3). The structural rule covers
+                    // both the migrated row (whose record holds that locator) and a
+                    // bootstrap row registered at the native dir BEFORE any migration
+                    // record exists (a cancelled login must stay removable — K.4).
+                    const profilesRoot = normalizeThroughExistingAncestor(join(claudexorOwnedRoot(), "profiles"));
+                    const legacyAllowlisted = (migratedRow &&
+                        migrationRecord !== undefined &&
+                        dir === normalizeThroughExistingAncestor(migrationRecord.locator)) ||
+                        locatorIsDefaultNativeStore(harnessId, dir);
+                    if (!dir.startsWith(profilesRoot + sep) && !legacyAllowlisted) {
+                        throw new Error(`refusing to delete "${dir}": not inside the profiles tree ${profilesRoot} and not the migrated row's recorded legacy locator`);
+                    }
+                    if (existsSync(dir)) {
+                        rmSync(dir, { recursive: true, force: true });
+                        credentialCleanup = "config_dir_removed";
+                    }
+                }
+                else if (registryEntry?.secret_ref) {
+                    deps.secretStore.delete(registryEntry.secret_ref);
+                    credentialCleanup = "secret_deleted";
+                }
+            }
+            catch (err) {
+                deps.bustStatusCaches();
+                throw Object.assign(new Error(`credential cleanup failed; the account is still registered — retry the removal: ${err instanceof Error ? err.message : String(err)}`), { status: 503, code: "credential_cleanup_failed", retryable: true });
+            }
+            const entry = removeProfileFromRegistry(harnessId, profileId);
+            if (migratedRow) {
+                // The migration record dies with its row: the material is gone, so a
+                // later start detects no legacy login and fabricates nothing.
+                removeAccountsMigrationRecord(harnessId);
+            }
+            deps.bustStatusCaches({ harnessId, profileId });
+            return {
+                profile: entry,
+                removed: true,
+                credentialCleanup,
+            };
+        },
+    };
+}
+//# sourceMappingURL=credential-profile-mutations.js.map

package/dist/credential-profile-mutations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-profile-mutations.js","sourceRoot":"","sources":["../src/credential-profile-mutations.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,iBAAiB,CAAC;AAG9F,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AACpG,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;AAkB5C,MAAM,UAAU,0BAA0B,CAAC,IAAmC;IAC5E,OAAO;QACL,sEAAsE;QACtE,mEAAmE;QACnE,2EAA2E;QAC3E,mEAAmE;QACnE,8BAA8B;QAC9B,uBAAuB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAChD,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;YACnD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACtD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,EAAE;oBAC9E,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,MAAM,QAAQ,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;YACxE,iCAAiC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAClE,qEAAqE;YACrE,iEAAiE;YACjE,uEAAuE;YACvE,sEAAsE;YACtE,qEAAqE;YACrE,iEAAiE;YACjE,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,CACtE,CAAC;YACF,MAAM,gBAAgB,GACpB,yBAAyB,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,SAAS;gBAC5D,2BAA2B,CAAC,SAAS,EAAE,WAAW,EAAE,iBAAiB,IAAI,IAAI,CAAC,CAAC;YACjF,IAAI,OAAsC,CAAC;YAC3C,kBAAkB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC9B,GAAG,MAAM;gBACT,GAAG,CAAC,gBAAgB;oBAClB,CAAC,CAAC;wBACE,SAAS,EAAE;4BACT,GAAG,MAAM,CAAC,SAAS;4BACnB,CAAC,SAAS,CAAC,EAAE;gCACX,GAAG,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;gCAC9B,0BAA0B,EAAE,OAAO;6BACpC;yBACF;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;oBAC9D,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;wBAAE,OAAO,OAAO,CAAC;oBACzF,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;oBAClC,OAAO,OAAO,CAAC;gBACjB,CAAC,CAAC;aACH,CAAC,CAAC,CAAC;YACJ,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YAChD,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,qEAAqE;gBACrE,uEAAuE;gBACvE,MAAM,EAAE,2BAA2B,CACjC,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAClC,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,CAC5B;aACF,CAAC;QACJ,CAAC;QACD,sEAAsE;QACtE,uBAAuB,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAChD,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;YACnD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC7B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC9D,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,4CAA4C,WAAW,CAAC,KAAK,0CAA0C,CACxG,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YACD,iCAAiC,CAC/B,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,EACtD,SAAS,EACT,SAAS,CACV,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/D,sEAAsE;YACtE,0EAA0E;YAC1E,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,eAAe,CAAC,CAAC,CAAC;YACrD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBAChD,IAAI,MAAM,CAAC,IAAI,EAAE,IAAI;oBAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,SAAS;gBAAE,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5E,IAAI,CAAC,aAAa,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACzD,uEAAuE;YACvE,sEAAsE;YACtE,sEAAsE;YACtE,uEAAuE;YACvE,8BAA8B;YAC9B,MAAM,eAAe,GAAG,yBAAyB,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/D,MAAM,aAAa,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAC/E,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,CACtE,CAAC;YACF,MAAM,WAAW,GAAG,eAAe,EAAE,MAAM,KAAK,SAAS,CAAC;YAC1D,IAAI,eAAe,IAAI,WAAW,EAAE,CAAC;gBACnC,mEAAmE;gBACnE,oEAAoE;gBACpE,wDAAwD;gBACxD,mCAAmC;gBACnC,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,cAAc,EAAE,CAAC;oBACnD,IAAI,CAAC,aAAa,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;oBACrD,KAAK,MAAM,IAAI,IAAI,SAAS;wBAAE,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,IAAI,SAAS,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,mEAAmE;YACnE,yEAAyE;YACzE,wEAAwE;YACxE,sEAAsE;YACtE,sEAAsE;YACtE,iEAAiE;YACjE,IAAI,iBAAiB,GAAqD,MAAM,CAAC;YACjF,IAAI,CAAC;gBACH,IACE,aAAa,EAAE,eAAe,KAAK,kBAAkB;oBACrD,aAAa,CAAC,iBAAiB,EAC/B,CAAC;oBACD,iEAAiE;oBACjE,iEAAiE;oBACjE,iEAAiE;oBACjE,qEAAqE;oBACrE,MAAM,GAAG,GAAG,uBAAuB,CAAC,SAAS,CAAC;wBAC5C,CAAC,CAAC,wBAAwB,CAAC,SAAS,EAAE,aAAa,CAAC,iBAAiB,CAAC;wBACtE,CAAC,CAAC,yBAAyB,CAAC,aAAa,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,CAAC;oBACzF,6DAA6D;oBAC7D,gEAAgE;oBAChE,gEAAgE;oBAChE,mEAAmE;oBACnE,gEAAgE;oBAChE,kEAAkE;oBAClE,+DAA+D;oBAC/D,MAAM,YAAY,GAAG,gCAAgC,CACnD,IAAI,CAAC,kBAAkB,EAAE,EAAE,UAAU,CAAC,CACvC,CAAC;oBACF,MAAM,iBAAiB,GACrB,CAAC,WAAW;wBACV,eAAe,KAAK,SAAS;wBAC7B,GAAG,KAAK,gCAAgC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;wBACpE,2BAA2B,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;oBAC9C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;wBAC9D,MAAM,IAAI,KAAK,CACb,uBAAuB,GAAG,mCAAmC,YAAY,qDAAqD,CAC/H,CAAC;oBACJ,CAAC;oBACD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;wBACpB,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC9C,iBAAiB,GAAG,oBAAoB,CAAC;oBAC3C,CAAC;gBACH,CAAC;qBAAM,IAAI,aAAa,EAAE,UAAU,EAAE,CAAC;oBACrC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;oBAClD,iBAAiB,GAAG,gBAAgB,CAAC;gBACvC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACxB,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,mFACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,EACD,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,2BAA2B,EAAE,SAAS,EAAE,IAAI,EAAE,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC9D,IAAI,WAAW,EAAE,CAAC;gBAChB,qEAAqE;gBACrE,8DAA8D;gBAC9D,6BAA6B,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YAChD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,IAAI;gBACb,iBAAiB;aAClB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/credential-status-invalidation.d.ts

@@ -0,0 +1,11 @@
+import type { QuotaRegistry } from "@claudexor/daemon";
+/** The credential a control-API mutation touched: one registered profile, or
+ * a secret name whose subjects are resolved through the registry. */
+export type CredentialMutationSubject = {
+    harnessId: string;
+    profileId: string;
+} | {
+    secretName: string;
+};
+export declare function bustCredentialStatusCaches(quotaRegistry: () => QuotaRegistry, subject?: CredentialMutationSubject): void;
+//# sourceMappingURL=credential-status-invalidation.d.ts.map

package/dist/credential-status-invalidation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-status-invalidation.d.ts","sourceRoot":"","sources":["../src/credential-status-invalidation.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAKvD;qEACqE;AACrE,MAAM,MAAM,yBAAyB,GACnC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,wBAAgB,0BAA0B,CACxC,aAAa,EAAE,MAAM,aAAa,EAClC,OAAO,CAAC,EAAE,yBAAyB,GAClC,IAAI,CAiBN"}

package/dist/credential-status-invalidation.js

@@ -0,0 +1,36 @@
+/**
+ * ONE owner for what a control-API credential mutation invalidates: the
+ * doctor/status projections, the quota registry's absence pacing, and — per
+ * subject — the A7 unusable-credential ledger. The per-subject half of the
+ * ledger's clearing contract lives HERE (profile enable/disable/create/remove
+ * and secret set/delete each void exactly the verdicts about the credential
+ * they touched), while the whole-ledger clear stays with claudexord's
+ * login/logout lifecycle. Clearing is fail-open by contract: over-clearing
+ * costs at most one attempt rediscovering a refusal.
+ */
+import { loadConfig } from "@claudexor/config";
+import { invalidateDoctorCache } from "@claudexor/core";
+import { noProjectRepoRoot } from "@claudexor/util";
+import { invalidateStatusProjections } from "./status-projection-cache.js";
+import { credentialUnusableLedger } from "./run-orchestrator.js";
+export function bustCredentialStatusCaches(quotaRegistry, subject) {
+    invalidateDoctorCache();
+    invalidateStatusProjections();
+    quotaRegistry().noteCredentialChange();
+    if (!subject)
+        return;
+    if ("harnessId" in subject) {
+        credentialUnusableLedger.clearSubject(subject.harnessId, subject.profileId);
+        return;
+    }
+    // A secret names its subjects indirectly: profiles whose secret_ref IS this
+    // name, and — for a bare managed name — the engine-default slot of whichever
+    // harness reads it (adapter knowledge the daemon does not duplicate).
+    for (const profile of loadConfig(noProjectRepoRoot()).global.credential_profiles) {
+        if (profile.secret_ref === subject.secretName)
+            credentialUnusableLedger.clearSubject(profile.harness_id, profile.profile_id);
+    }
+    if (!subject.secretName.includes(":"))
+        credentialUnusableLedger.clearDefaultSubjects();
+}
+//# sourceMappingURL=credential-status-invalidation.js.map

package/dist/credential-status-invalidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-status-invalidation.js","sourceRoot":"","sources":["../src/credential-status-invalidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAOjE,MAAM,UAAU,0BAA0B,CACxC,aAAkC,EAClC,OAAmC;IAEnC,qBAAqB,EAAE,CAAC;IACxB,2BAA2B,EAAE,CAAC;IAC9B,aAAa,EAAE,CAAC,oBAAoB,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;QAC3B,wBAAwB,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IACD,4EAA4E;IAC5E,6EAA6E;IAC7E,sEAAsE;IACtE,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACjF,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU;YAC3C,wBAAwB,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,wBAAwB,CAAC,oBAAoB,EAAE,CAAC;AACzF,CAAC"}

package/dist/daemon-admission-runtime.d.ts

@@ -42,6 +42,11 @@ export interface NormalPlaneDuties {
     requested(): boolean;
     armQuotaPolling(): void;
     beginPidSnapshots(): void;
+    /** Unified-accounts startup migration (INV-135): runs FIRST on the normal
+     * plane — before setup jobs, so a login job can never race the registry
+     * write — and is crash-recoverable via its own phase file (an incomplete
+     * harness refuses runs typed until the next start finishes it). */
+    migrateAccounts(): void;
     startSetup(): Promise<void>;
     quarantineGhosts(): void;
     scheduleRetention(): void;

package/dist/daemon-admission-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-admission-runtime.d.ts","sourceRoot":"","sources":["../src/daemon-admission-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC7C,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACrD,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;oEAEoE;AACpE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,wBAAwB,CAoC3B;AAED;;;uEAGuE;AACvE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,IAAI,GAAG;IAAE,GAAG,IAAI,IAAI,CAAC;IAAC,IAAI,IAAI,IAAI,CAAA;CAAE,CAcvF;AAED;;;yBAGyB;AACzB,MAAM,WAAW,iBAAiB;IAChC,SAAS,IAAI,OAAO,CAAC;IACrB,eAAe,IAAI,IAAI,CAAC;IACxB,iBAAiB,IAAI,IAAI,CAAC;IAC1B,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,gBAAgB,IAAI,IAAI,CAAC;IACzB,iBAAiB,IAAI,IAAI,CAAC;CAC3B;AAED;;uDAEuD;AACvD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,SAAS,EAAE,sBAAsB,CAAC;IAClC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,WAAW,EAAE,wBAAwB,CAAC;IACtC,WAAW,EAAE,iBAAiB,CAAC;CAChC,GAAG;IACF,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtF,wBAAwB,CAAC,CAAC,EACxB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3D,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CACxD,CA4GA"}
+{"version":3,"file":"daemon-admission-runtime.d.ts","sourceRoot":"","sources":["../src/daemon-admission-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACxB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,0BAA0B,CAAC;AAElC,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAC7C,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACrD,KAAK,IAAI,IAAI,CAAC;CACf;AAED;;oEAEoE;AACpE,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,wBAAwB,CAoC3B;AAED;;;uEAGuE;AACvE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,IAAI,GAAG;IAAE,GAAG,IAAI,IAAI,CAAC;IAAC,IAAI,IAAI,IAAI,CAAA;CAAE,CAcvF;AAED;;;yBAGyB;AACzB,MAAM,WAAW,iBAAiB;IAChC,SAAS,IAAI,OAAO,CAAC;IACrB,eAAe,IAAI,IAAI,CAAC;IACxB,iBAAiB,IAAI,IAAI,CAAC;IAC1B;;;uEAGmE;IACnE,eAAe,IAAI,IAAI,CAAC;IACxB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,gBAAgB,IAAI,IAAI,CAAC;IACzB,iBAAiB,IAAI,IAAI,CAAC;CAC3B;AAED;;uDAEuD;AACvD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,SAAS,EAAE,sBAAsB,CAAC;IAClC,KAAK,EAAE,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,WAAW,EAAE,wBAAwB,CAAC;IACtC,WAAW,EAAE,iBAAiB,CAAC;CAChC,GAAG;IACF,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtF,wBAAwB,CAAC,CAAC,EACxB,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3D,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CACxD,CA6GA"}

package/dist/daemon-admission-runtime.js

@@ -96,6 +96,7 @@ export function createStartupAdmissionRuntime(input) {
         for (const sweep of sweepRetiredConfigKeysAtStartup()) {
             logLine(logPath(), `swept retired config keys from ${sweep.path}: ${sweep.removed.join(", ")}`);
         }
+        input.normalPlane.migrateAccounts();
         await input.normalPlane.startSetup();
         input.normalPlane.quarantineGhosts();
         input.normalPlane.scheduleRetention();

package/dist/daemon-admission-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-admission-runtime.js","sourceRoot":"","sources":["../src/daemon-admission-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,SAAS,EACT,OAAO,GAKR,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAE1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0CAA0C,EAC1C,sBAAsB,GAEvB,MAAM,0BAA0B,CAAC;AASlC;;oEAEoE;AACpE,MAAM,UAAU,sBAAsB,CAAC,QAItC;IACC,IAAI,WAAW,GAAoC,IAAI,CAAC;IACxD,IAAI,CAAC;QACH,WAAW,GAAG,0CAA0C,CAAC;YACvD,cAAc,EAAE,QAAQ,CAAC,OAAO;YAChC,QAAQ,EAAE,QAAQ,CAAC,GAAG;YACtB,SAAS,EAAE,QAAQ,CAAC,KAAK;YACzB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,SAAS,EAAE;YACrB,YAAY,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;SAC5E,CAAC,CAAC;QACH,WAAW,CAAC,MAAM,CAAC;YACjB,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CACL,OAAO,EAAE,EACT,oCAAoC,aAAa,CAC/C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,EAAE,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,KAAwD,EAAQ,EAAE;QAChF,IAAI,CAAC;YACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,WAAW;QACX,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC3D,aAAa,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACvF,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE;KAClC,CAAC;AACJ,CAAC;AAED;;;uEAGuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,IAAgB;IACtD,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,OAAO;QACL,GAAG,EAAE,GAAG,EAAE;YACR,IAAI,KAAK;gBAAE,OAAO;YAClB,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,EAAE,CAAC;QACT,CAAC;QACD,IAAI,EAAE,GAAG,EAAE;YACT,IAAI,KAAK;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;YAChC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAeD;;uDAEuD;AACvD,MAAM,UAAU,6BAA6B,CAAC,KAO7C;IAMC,yEAAyE;IACzE,0BAA0B;IAC1B,IAAI,wBAAwB,GAAG,KAAK,CAAC;IACrC,MAAM,iBAAiB,GAAG,KAAK,IAAmB,EAAE;QAClD,IAAI,wBAAwB,IAAI,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE;YAAE,OAAO;QACtE,wBAAwB,GAAG,IAAI,CAAC;QAChC,KAAK,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;QACpC,mEAAmE;QACnE,yCAAyC;QACzC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACtC,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,8CAA8C;QAC9C,KAAK,MAAM,KAAK,IAAI,+BAA+B,EAAE,EAAE,CAAC;YACtD,OAAO,CACL,OAAO,EAAE,EACT,kCAAkC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;IACxC,CAAC,CAAC;IAEF,IAAI,mBAAmB,GAAsC,IAAI,CAAC;IAClE,MAAM,sBAAsB,GAAG,CAC7B,iBAAiC,EACL,EAAE;QAC9B,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9E,mBAAmB,KAAK,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;oBACjD,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,iBAAiB,EAAE,iBAAiB,EAAE;oBACtC,MAAM,EAAE;wBACN,4DAA4D;wBAC5D,gEAAgE;wBAChE,oDAAoD;wBACpD,qBAAqB,EAAE,GAAG,EAAE;4BAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE;gCAAE,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;wBAClE,CAAC;wBACD,gBAAgB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE;wBACvD,mBAAmB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;qBAC9D;oBACD,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO,EAAE,GAAG,EAAE,CACZ,iBAAiB,CAAC;wBAChB,SAAS,EAAE,SAAS,EAAE;wBACtB,OAAO,EAAE,OAAO,EAAE;wBAClB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW;4BAC/B,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE;4BAChD,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;oBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;wBACf,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;wBAC5B,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;oBAC9D,CAAC;iBACF,CAAC,CAAC;gBACH,IAAI,WAAW,KAAK,QAAQ;oBAAE,MAAM,iBAAiB,EAAE,CAAC;gBACxD,OAAO,WAAW,CAAC;YACrB,CAAC;oBAAS,CAAC;gBACT,mBAAmB,GAAG,IAAI,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,mBAAmB,CAAC;IAC7B,CAAC,CAAC;IAEF,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,mBAAmB,GAAG,KAAK,IAAmB,EAAE;QACpD,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACnC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,CACpD,yBAAyB,CAAC;gBACxB,iBAAiB,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE;gBACzD,qBAAqB,EAAE,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE;aAC7D,CAAC,CACH,CAAC;YACF,IAAI,WAAW,KAAK,QAAQ;gBAAE,OAAO,CAAC,yCAAyC;QACjF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,sBAAsB;QACtB,wBAAwB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;YAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,mBAAmB,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gEAAgE;gBAChE,6CAA6C;gBAC7C,OAAO,CACL,OAAO,EAAE,EACT,wDAAwD,aAAa,CACnE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,EAAE,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"daemon-admission-runtime.js","sourceRoot":"","sources":["../src/daemon-admission-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,SAAS,EACT,OAAO,GAKR,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,+BAA+B,EAAE,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAE1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0CAA0C,EAC1C,sBAAsB,GAEvB,MAAM,0BAA0B,CAAC;AASlC;;oEAEoE;AACpE,MAAM,UAAU,sBAAsB,CAAC,QAItC;IACC,IAAI,WAAW,GAAoC,IAAI,CAAC;IACxD,IAAI,CAAC;QACH,WAAW,GAAG,0CAA0C,CAAC;YACvD,cAAc,EAAE,QAAQ,CAAC,OAAO;YAChC,QAAQ,EAAE,QAAQ,CAAC,GAAG;YACtB,SAAS,EAAE,QAAQ,CAAC,KAAK;YACzB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,SAAS,EAAE;YACrB,YAAY,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;SAC5E,CAAC,CAAC;QACH,WAAW,CAAC,MAAM,CAAC;YACjB,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,qDAAqD;SAC/D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CACL,OAAO,EAAE,EACT,oCAAoC,aAAa,CAC/C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,EAAE,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,KAAwD,EAAQ,EAAE;QAChF,IAAI,CAAC;YACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,WAAW;QACX,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC3D,aAAa,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACvF,KAAK,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE;KAClC,CAAC;AACJ,CAAC;AAED;;;uEAGuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,IAAgB;IACtD,IAAI,KAAK,GAA0B,IAAI,CAAC;IACxC,OAAO;QACL,GAAG,EAAE,GAAG,EAAE;YACR,IAAI,KAAK;gBAAE,OAAO;YAClB,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,EAAE,CAAC;QACT,CAAC;QACD,IAAI,EAAE,GAAG,EAAE;YACT,IAAI,KAAK;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;YAChC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAoBD;;uDAEuD;AACvD,MAAM,UAAU,6BAA6B,CAAC,KAO7C;IAMC,yEAAyE;IACzE,0BAA0B;IAC1B,IAAI,wBAAwB,GAAG,KAAK,CAAC;IACrC,MAAM,iBAAiB,GAAG,KAAK,IAAmB,EAAE;QAClD,IAAI,wBAAwB,IAAI,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE;YAAE,OAAO;QACtE,wBAAwB,GAAG,IAAI,CAAC;QAChC,KAAK,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;QACpC,mEAAmE;QACnE,yCAAyC;QACzC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACtC,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,8CAA8C;QAC9C,KAAK,MAAM,KAAK,IAAI,+BAA+B,EAAE,EAAE,CAAC;YACtD,OAAO,CACL,OAAO,EAAE,EACT,kCAAkC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;QACpC,MAAM,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACrC,KAAK,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;IACxC,CAAC,CAAC;IAEF,IAAI,mBAAmB,GAAsC,IAAI,CAAC;IAClE,MAAM,sBAAsB,GAAG,CAC7B,iBAAiC,EACL,EAAE;QAC9B,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9E,mBAAmB,KAAK,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;oBACjD,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,iBAAiB,EAAE,iBAAiB,EAAE;oBACtC,MAAM,EAAE;wBACN,4DAA4D;wBAC5D,gEAAgE;wBAChE,oDAAoD;wBACpD,qBAAqB,EAAE,GAAG,EAAE;4BAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE;gCAAE,KAAK,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;wBAClE,CAAC;wBACD,gBAAgB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE;wBACvD,mBAAmB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;qBAC9D;oBACD,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO,EAAE,GAAG,EAAE,CACZ,iBAAiB,CAAC;wBAChB,SAAS,EAAE,SAAS,EAAE;wBACtB,OAAO,EAAE,OAAO,EAAE;wBAClB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW;4BAC/B,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE;4BAChD,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;oBACJ,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE;wBACf,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;wBAC5B,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;oBAC9D,CAAC;iBACF,CAAC,CAAC;gBACH,IAAI,WAAW,KAAK,QAAQ;oBAAE,MAAM,iBAAiB,EAAE,CAAC;gBACxD,OAAO,WAAW,CAAC;YACrB,CAAC;oBAAS,CAAC;gBACT,mBAAmB,GAAG,IAAI,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,mBAAmB,CAAC;IAC7B,CAAC,CAAC;IAEF,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,mBAAmB,GAAG,KAAK,IAAmB,EAAE;QACpD,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC;YACnC,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC7B,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE,CACpD,yBAAyB,CAAC;gBACxB,iBAAiB,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE;gBACzD,qBAAqB,EAAE,KAAK,CAAC,UAAU,CAAC,kBAAkB,EAAE;aAC7D,CAAC,CACH,CAAC;YACF,IAAI,WAAW,KAAK,QAAQ;gBAAE,OAAO,CAAC,yCAAyC;QACjF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,sBAAsB;QACtB,wBAAwB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE;YAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,mBAAmB,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gEAAgE;gBAChE,6CAA6C;gBAC7C,OAAO,CACL,OAAO,EAAE,EACT,wDAAwD,aAAa,CACnE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,EAAE,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/harness-command-specs.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The `harness` command's surface, kept beside its installable set so ONE
+ * array spells that set everywhere it is printed: the registry usage line,
+ * the dispatcher's usage error (harness-command.ts) and the installer's own
+ * refusal (harness-installer.ts). This module stays value-import-free on
+ * purpose — harness-installer.ts reaches command-registry.ts through args.ts,
+ * so owning the array there would close a runtime import cycle.
+ */
+import type { CliCommandSpec } from "./command-registry.js";
+/** Vendor CLIs `claudexor harness install` can fetch. harness-installer.ts
+ * owns each one's install recipe and its test asserts this list is exhaustive. */
+export declare const INSTALLABLE_HARNESSES: readonly ["agy", "claude", "codex", "cursor", "opencode"];
+/** The `harness` argument shape: rendered by `claudexor help` and reprinted by
+ * the dispatcher when a verb is unknown. */
+export declare const HARNESS_USAGE_ARGS: string;
+export declare const HARNESS_COMMAND_SPECS: readonly CliCommandSpec[];
+//# sourceMappingURL=harness-command-specs.d.ts.map

package/dist/harness-command-specs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-command-specs.d.ts","sourceRoot":"","sources":["../src/harness-command-specs.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D;kFACkF;AAClF,eAAO,MAAM,qBAAqB,YAAI,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AAE/F;4CAC4C;AAC5C,eAAO,MAAM,kBAAkB,QAAoF,CAAC;AAEpH,eAAO,MAAM,qBAAqB,EAAE,SAAS,cAAc,EAc1D,CAAC"}

package/dist/harness-command-specs.js

@@ -0,0 +1,22 @@
+/** Vendor CLIs `claudexor harness install` can fetch. harness-installer.ts
+ * owns each one's install recipe and its test asserts this list is exhaustive. */
+export const INSTALLABLE_HARNESSES = ["agy", "claude", "codex", "cursor", "opencode"];
+/** The `harness` argument shape: rendered by `claudexor help` and reprinted by
+ * the dispatcher when a verb is unknown. */
+export const HARNESS_USAGE_ARGS = `list [--all] | install <${INSTALLABLE_HARNESSES.join("|")}> [--dry-run] [--yes]`;
+export const HARNESS_COMMAND_SPECS = [
+    {
+        id: "harness",
+        positionalPatterns: [
+            { prefix: ["list"], min: 1, max: 1 },
+            { prefix: ["install"], min: 2, max: 2 },
+        ],
+        usageArgs: HARNESS_USAGE_ARGS,
+        summary: "List harnesses, or install one vendor CLI after disclosure",
+        flags: ["all", "dry-run", "yes", "json"],
+        subcommandFlags: { list: ["all"], install: ["dry-run", "yes"] },
+        mutability: "ops",
+        stability: "stable",
+    },
+];
+//# sourceMappingURL=harness-command-specs.js.map

package/dist/harness-command-specs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-command-specs.js","sourceRoot":"","sources":["../src/harness-command-specs.ts"],"names":[],"mappings":"AAUA;kFACkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AAE/F;4CAC4C;AAC5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,2BAA2B,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC;AAEpH,MAAM,CAAC,MAAM,qBAAqB,GAA8B;IAC9D;QACE,EAAE,EAAE,SAAS;QACb,kBAAkB,EAAE;YAClB,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;YACpC,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE;SACxC;QACD,SAAS,EAAE,kBAAkB;QAC7B,OAAO,EAAE,4DAA4D;QACrE,KAAK,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC;QACxC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE;QAC/D,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,QAAQ;KACpB;CACF,CAAC"}

package/dist/harness-command.d.ts

@@ -2,10 +2,10 @@ import { type ParsedArgs } from "./args.js";
 /**
  * `claudexor harness list [--all]` and `claudexor harness install <id>`.
  * Fakes are test fixtures, not real harnesses; `--all` reveals them. The
- * install verb is the disclosed pinned installer (harness-installer.ts,
- * issue #89): exact npm pins for claude/codex/opencode, the human-verified
- * PTY path for cursor, and nothing executes without disclosure. Flags are
- * verb-owned (registry `subcommandFlags`): `harness list --yes` or
+ * install verb is the disclosed installer (harness-installer.ts, issue #89):
+ * exact npm pins for claude/codex/opencode, the human-verified PTY path for
+ * the script vendors (cursor, agy), and nothing executes without disclosure.
+ * Flags are verb-owned (registry `subcommandFlags`): `harness list --yes` or
  * `harness install --all` is a loud exit-2 usage error, never a silently
  * ignored flag (INV-021).
  */

package/dist/harness-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harness-command.d.ts","sourceRoot":"","sources":["../src/harness-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAMtD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAkBtE"}
+{"version":3,"file":"harness-command.d.ts","sourceRoot":"","sources":["../src/harness-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAOtD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAetE"}

package/dist/harness-command.js

@@ -1,15 +1,16 @@
 import { flagBool } from "./args.js";
 import { print, printJson, printUsageError } from "./cli-io.js";
 import { subcommandFlagScopeError } from "./command-scope.js";
+import { HARNESS_USAGE_ARGS } from "./harness-command-specs.js";
 import { harnessInstallCommand } from "./harness-installer.js";
 import { buildRegistry } from "./registry.js";
 /**
  * `claudexor harness list [--all]` and `claudexor harness install <id>`.
  * Fakes are test fixtures, not real harnesses; `--all` reveals them. The
- * install verb is the disclosed pinned installer (harness-installer.ts,
- * issue #89): exact npm pins for claude/codex/opencode, the human-verified
- * PTY path for cursor, and nothing executes without disclosure. Flags are
- * verb-owned (registry `subcommandFlags`): `harness list --yes` or
+ * install verb is the disclosed installer (harness-installer.ts, issue #89):
+ * exact npm pins for claude/codex/opencode, the human-verified PTY path for
+ * the script vendors (cursor, agy), and nothing executes without disclosure.
+ * Flags are verb-owned (registry `subcommandFlags`): `harness list --yes` or
  * `harness install --all` is a loud exit-2 usage error, never a silently
  * ignored flag (INV-021).
  */
@@ -30,6 +31,6 @@ export function harnessCommand(args, json) {
     if (args._[1] === "install") {
         return harnessInstallCommand(args, json);
     }
-    return printUsageError(json, "usage: claudexor harness list [--all] | install <claude|codex|cursor|opencode> [--dry-run] [--yes]");
+    return printUsageError(json, `usage: claudexor harness ${HARNESS_USAGE_ARGS}`);
 }
 //# sourceMappingURL=harness-command.js.map

package/dist/harness-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"harness-command.js","sourceRoot":"","sources":["../src/harness-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAmB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrF,IAAI,UAAU;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,IAAI;YAAE,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,eAAe,CACpB,IAAI,EACJ,oGAAoG,CACrG,CAAC;AACJ,CAAC"}
+{"version":3,"file":"harness-command.js","sourceRoot":"","sources":["../src/harness-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAmB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,IAAa;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,wBAAwB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrF,IAAI,UAAU;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,GAAG,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,IAAI;YAAE,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;;YACnC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,eAAe,CAAC,IAAI,EAAE,4BAA4B,kBAAkB,EAAE,CAAC,CAAC;AACjF,CAAC"}

package/dist/harness-installer.d.ts

@@ -11,11 +11,11 @@
  *   model/effort freshness gates verified; the opencode pin is a
  *   deterministic install target, NOT a verification claim (no recorded
  *   fixture yet — see packages/harness-opencode vendor-cli-version.ts).
- * - cursor has no npm artifact and CANNOT be pinned. Instead of pretending,
- *   the HUMAN is the verifier: the complete vendor script is downloaded first
- *   (never piped to a shell), its size and sha256 are printed, and it runs in
- *   the visible PTY the operator is watching — the same principle as
- *   interactive SSH auth.
+ * - cursor and agy have no npm artifact and CANNOT be pinned. Instead of
+ *   pretending, the HUMAN is the verifier: the complete vendor script is
+ *   downloaded first (never piped to a shell), its size and sha256 are
+ *   printed, and it runs in the visible PTY the operator is watching — the
+ *   same principle as interactive SSH auth.
  * - NOTHING executes without disclosure: the exact command and install
  *   destination print first, and execution needs a TTY confirmation or an
  *   explicit `--yes` (the macOS flow confirms against this module's own
@@ -31,24 +31,37 @@
 import { spawnSync } from "node:child_process";
 import { existsSync, mkdirSync } from "node:fs";
 import { type ParsedArgs } from "./args.js";
-export declare const INSTALLABLE_HARNESSES: readonly ["claude", "codex", "cursor", "opencode"];
+import { INSTALLABLE_HARNESSES } from "./harness-command-specs.js";
 export type InstallableHarness = (typeof INSTALLABLE_HARNESSES)[number];
 export declare function isInstallableHarness(value: string): value is InstallableHarness;
 /** Exact npm pins. Each version ALIASES the harness package's vendor-version
  * SSOT (vendor-cli-version.ts there). For claude/codex that is the version
  * this release's freshness gates verified; the opencode pin is a
  * deterministic install target only — no recorded verification fixture
- * vouches for it (its vendor-cli-version.ts discloses this). Cursor is
- * absent deliberately: it ships no npm artifact (see the cursor branch
+ * vouches for it (its vendor-cli-version.ts discloses this). Cursor and agy
+ * are absent deliberately: they ship no npm artifact (see SCRIPT_INSTALLERS
  * below). */
 export type HarnessInstallVerification = "release_verified" | "deterministic_only" | "human_observed";
 export declare const CURSOR_INSTALL_URL = "https://cursor.com/install";
+/**
+ * Google's official Antigravity CLI installer, as published on
+ * antigravity.google/docs/cli/install (`curl -fsSL <this url> | bash`, which
+ * Claudexor deliberately does NOT do — see the header). Verified end to end on
+ * 2026-08-16: the script fetched from this URL installed agy 1.1.13 to
+ * `~/.local/bin/agy`, which is the destination disclosed below. The vendor
+ * ships one signed Go binary and no npm package, so it takes the same
+ * human-observed path as cursor.
+ */
+export declare const AGY_INSTALL_URL = "https://antigravity.google/cli/install.sh";
+/** The vendor's Windows installer, from the same documentation page. */
+export declare const AGY_INSTALL_URL_WINDOWS = "https://antigravity.google/cli/install.ps1";
 export interface HarnessInstallerDisclosure {
     harness: InstallableHarness;
     command: string;
     installLocation: string;
-    /** Exact vendor version the command installs; null ONLY for cursor, which
-     * has no pinnable artifact (disclosed, never faked). */
+    /** Exact vendor version the command installs; null exactly for the script
+     * vendors (cursor, agy), which have no pinnable artifact — disclosed, never
+     * faked. */
     pinnedVersion: string | null;
     /** Evidence behind the install target. Package-registry integrity verifies
      * downloaded bytes for every npm pin, but only release_verified means the

package/dist/harness-installer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"harness-installer.d.ts","sourceRoot":"","sources":["../src/harness-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAA+C,MAAM,SAAS,CAAC;AAQ7F,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAGtD,eAAO,MAAM,qBAAqB,YAAI,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;AACxF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E;AAED;;;;;;aAMa;AACb,MAAM,MAAM,0BAA0B,GACpC,kBAAkB,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AA6B/D,eAAO,MAAM,kBAAkB,+BAA+B,CAAC;AAE/D,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB;4DACwD;IACxD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;+EAE2E;IAC3E,YAAY,EAAE,0BAA0B,CAAC;CAC1C;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,kBAAkB,GAC1B,0BAA0B,CAoB5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB;+EAC2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,kBAAkB,EAC3B,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,UAAU,CAAC;IAC3B;;2EAEuE;IACvE,IAAI,CAAC,EAAE,OAAO,CAAC;CACX,GACL,uBAAuB,CAwFzB;AAyCD,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,OAAO;AACb,4EAA4E;AAC5E,aAAa,GAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAM,GACvF,MAAM,CAoDR"}
+{"version":3,"file":"harness-installer.d.ts","sourceRoot":"","sources":["../src/harness-installer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAA+C,MAAM,SAAS,CAAC;AAQ7F,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAEnE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E;AAED;;;;;;aAMa;AACb,MAAM,MAAM,0BAA0B,GACpC,kBAAkB,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AA6B/D,eAAO,MAAM,kBAAkB,+BAA+B,CAAC;AAC/D;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,8CAA8C,CAAC;AAC3E,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,+CAA+C,CAAC;AAoCpF,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB;;gBAEY;IACZ,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B;;+EAE2E;IAC3E,YAAY,EAAE,0BAA0B,CAAC;CAC1C;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,kBAAkB,GAC1B,0BAA0B,CAgC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB;+EAC2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,kBAAkB,EAC3B,OAAO,GAAE;IACP,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,UAAU,CAAC;IAC3B;;2EAEuE;IACvE,IAAI,CAAC,EAAE,OAAO,CAAC;CACX,GACL,uBAAuB,CAkGzB;AAwCD,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,OAAO;AACb,4EAA4E;AAC5E,aAAa,GAAE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAM,GACvF,MAAM,CAoDR"}