@claudexor/cli 3.9.8 → 3.10.0

package/dist/daemon-agent-runner.js

@@ -0,0 +1,240 @@
+import { mkdirSync } from "node:fs";
+import { normalizeRunStartRequest } from "@claudexor/control-api";
+import { loadConfig } from "@claudexor/config";
+import { noProjectRepoRoot } from "@claudexor/util";
+import { restoreRecordedRunReviewRequest } from "@claudexor/schema";
+import { assertPlanImplementReady } from "./plan-implement-readiness.js";
+import { buildRunOrchestrator } from "./run-orchestrator.js";
+import { delegationBeltForRun } from "./delegation-belt-descriptor.js";
+import { accountsMigrationGate } from "./accounts-unified-migration.js";
+import { preflightRunGitRequirement } from "./request-preflight.js";
+import { resolveThreadExecutionWorkspace, threadRunStartRequiresGit, } from "./thread-execution-workspace.js";
+import { threadRunResumeInputs, threadContinuityContext } from "./thread-continuity-context.js";
+/** Agent commands alone own projects, tool execution, and conversation continuity.
+ * Model commands are dispatched before entering this run-normalization boundary. */
+export function createDaemonAgentRunner(deps) {
+    const { delegationBudgetAuthority, quotaStore, threads, interactions, resources, bus } = deps;
+    const NO_PROJECT_ROOT = noProjectRepoRoot();
+    return async (params, ctx) => {
+        const p = restoreRecordedRunReviewRequest(normalizeRunStartRequest(params));
+        const mode = p.mode;
+        const noProjectAsk = mode === "ask" && p.scope.kind === "none";
+        const repoRoot = p.scope.kind === "project" ? p.scope.root : NO_PROJECT_ROOT;
+        const runConfig = loadConfig(repoRoot);
+        if (noProjectAsk)
+            mkdirSync(NO_PROJECT_ROOT, { recursive: true, mode: 0o700 });
+        const orchestrator = buildRunOrchestrator({
+            p,
+            delegationBudgetAuthority,
+            quotaStore: () => quotaStore(),
+            // Typed per-harness refusal while a unified-accounts migration is
+            // incomplete (a crash between phases) — other harnesses keep working.
+            accountsMigrationGate,
+        });
+        const { threadId, turnId } = threads.assertKnownIds(p.threadId, p.turnId);
+        // Plan readiness gate (QA-045 / D17): refuse an Implement whose frozen
+        // plan still has open questions BEFORE any worktree, spawn, or spend —
+        // so the refusal is a durable, replayable refused turn (the daemon
+        // records enqueue_error=plan_not_ready on the turn; retry replays
+        // through this fresh preflight). Skipped when the operator explicitly
+        // overrode readiness (recorded on the turn at create time). The gate
+        // lives at run-start, not in the control API, so retry re-runs it.
+        if (p.planRef && typeof p.planRef === "object") {
+            const overridden = turnId != null && threads.getTurn(turnId)?.plan_readiness_overridden === true;
+            if (!overridden) {
+                const planRef = p.planRef;
+                assertPlanImplementReady(planRef.runId, planRef.path);
+            }
+        }
+        // Thread turns own a durable job before this fresh Git check. A
+        // missing/stub installation therefore records a replayable refusal on
+        // the exact turn, and Retry re-runs this boundary without changing any
+        // request fields. No worktree or provider exists yet.
+        if (turnId) {
+            await preflightRunGitRequirement(p, {
+                requiresGit: (request) => threadRunStartRequiresGit(request, threadId ? threads.getThread(threadId) : undefined, runConfig.project.constraints.protected_paths, runConfig.trust.access_default),
+            });
+        }
+        const { executionRoot: threadExecutionRoot, inPlace, projectGitInitialization, } = await resolveThreadExecutionWorkspace({
+            threadId,
+            repoRoot,
+            mode,
+            access: p.access,
+            accessDefault: runConfig.trust.access_default,
+            requestedInPlace: p.execution.isolation === "live",
+            protectedPaths: runConfig.project.constraints.protected_paths,
+            threads,
+        });
+        const executionRoot = p.execution.workspaceRoot ?? threadExecutionRoot;
+        const onRunStart = (info) => {
+            ctx.onRunStart?.(info);
+            if (!threadId)
+                return;
+            try {
+                if (turnId) {
+                    threads.bindTurnRun(turnId, info.runId);
+                }
+                else {
+                    const turn = threads.createTurn(threadId, String(p.prompt ?? ""), {
+                        parentRunId: typeof p.parentRunId === "string" ? p.parentRunId : null,
+                    });
+                    threads.bindTurnRun(turn.id, info.runId);
+                }
+            }
+            catch {
+                /* turn binding must never fail the run */
+            }
+        };
+        // maxSeconds: a hard wall-clock deadline for the WHOLE run (run-scoped,
+        // never per-attempt). Combine the daemon's per-run cancel signal with a
+        // deadline that aborts with a typed STRING reason so the terminal is
+        // `cancelled` + wall_clock_exceeded rather than a bare user cancel.
+        const maxSeconds = typeof p.maxSeconds === "number" && p.maxSeconds > 0
+            ? // setTimeout 32-bit-ms overflow defense (schema caps at 7 days).
+                Math.min(p.maxSeconds, 604_800)
+            : null;
+        // INV-135 precedence: explicit per-turn profile > thread sticky >
+        // unpinned; an explicit NULL forces unpinned (release wave round-11).
+        const requestedProfileId = p.credentialProfileId === null
+            ? null
+            : typeof p.credentialProfileId === "string" && p.credentialProfileId
+                ? p.credentialProfileId
+                : threadId
+                    ? (threads.getThread(threadId)?.credential_profile_id ?? null)
+                    : null;
+        const continuityContext = threadContinuityContext({
+            threads,
+            threadId,
+            turnId,
+            profileId: requestedProfileId,
+        });
+        let deadlineTimer;
+        let runSignal = ctx.signal;
+        if (maxSeconds !== null) {
+            const deadline = new AbortController();
+            deadlineTimer = setTimeout(() => deadline.abort("wall_clock_exceeded"), maxSeconds * 1000);
+            deadlineTimer.unref?.();
+            runSignal = ctx.signal ? AbortSignal.any([ctx.signal, deadline.signal]) : deadline.signal;
+        }
+        const delegationBelt = delegationBeltForRun(p.delegate === true, p.paidBudget);
+        return orchestrator
+            .run({
+            onEventPersist: (event) => {
+                // The owning journal partition is the durable terminal
+                // authority. EventLog runs this before committing RunFacts.
+                threads.recordRunEvent(p, event);
+            },
+            onEvent: (event) => {
+                if (event.type === "harness.event") {
+                    const payload = event.payload;
+                    const harnessId = typeof payload["harness_id"] === "string" ? payload["harness_id"] : "";
+                    if (harnessId)
+                        quotaStore().ingest(harnessId, payload);
+                }
+                // Live listeners observe only after journal + RunFacts commit;
+                // durable replay stays authoritative if publish throws.
+                try {
+                    bus.publish(event);
+                }
+                catch { }
+            },
+            onInteraction: (ctx2) => interactions.register(ctx2, p),
+            interactionTimeoutMs: runConfig.global.interaction_timeout_ms,
+            threadId,
+            executionRoot,
+            retryOf: p.retryOf ?? null,
+            projectGitInitialization,
+            ...threadRunResumeInputs(threads, threadId, requestedProfileId),
+            onSessionObserved: threadId
+                ? (harnessId, nativeSessionId, observedModel, profileId) => {
+                    // The EVENT's profile is the cache truth (INV-135): the
+                    // effective account can differ from the requested one.
+                    threads.recordSession(threadId, harnessId, nativeSessionId, observedModel, profileId ?? null);
+                    // The lane (thread, harness, effective profile) has SEEN
+                    // this turn (INV-137); same key as the session record.
+                    if (turnId)
+                        threads.recordLaneCheckpoint(threadId, harnessId, profileId ?? null, turnId);
+                }
+                : undefined,
+            // Continuity facts (INV-137): cheap thread-store data; the engine
+            // reads prior outputs + git anchor itself and does the packet math.
+            threadContinuity: continuityContext,
+            onContinuityResolved: threadId
+                ? (tid, disclosure) => threads.setTurnContinuity(tid, {
+                    kind: disclosure.kind,
+                    packet_turns: disclosure.packetTurns,
+                    summarized: disclosure.summarized,
+                    lane_switched_from: disclosure.laneSwitchedFrom
+                        ? {
+                            harness_id: disclosure.laneSwitchedFrom.harness,
+                            profile_id: disclosure.laneSwitchedFrom.profileId,
+                        }
+                        : null,
+                })
+                : undefined,
+            authPreference: p.authPreference,
+            credentialProfileId: requestedProfileId,
+            parentRunId: p.parentRunId ?? null,
+            delegatedFromRunId: p.delegatedFromRunId ?? null,
+            delegationAdmissionId: ctx.jobId,
+            repoRoot,
+            prompt: String(p.prompt ?? ""),
+            planRef: p.planRef && typeof p.planRef === "object"
+                ? p.planRef
+                : undefined,
+            instructions: typeof p.instructions === "string" ? p.instructions : undefined,
+            denyPaths: Array.isArray(p.denyPaths) ? p.denyPaths : undefined,
+            maxTurns: typeof p.maxTurns === "number" && p.maxTurns > 0 ? p.maxTurns : undefined,
+            outputSchema: p.outputSchema && typeof p.outputSchema === "object" && !Array.isArray(p.outputSchema)
+                ? p.outputSchema
+                : undefined,
+            attachments: turnId
+                ? (threads.getTurn(turnId)?.attachments ?? [])
+                : resources().resolve(p.attachments),
+            browser: p.browser === true,
+            mode: p.mode,
+            review: p.review,
+            contextMode: noProjectAsk
+                ? "off"
+                : p.scope.kind === "project"
+                    ? p.scope.context
+                    : undefined,
+            harnesses: p.harnesses,
+            primaryHarness: p.primaryHarness,
+            routingGoal: p.routingGoal,
+            n: p.n,
+            attempts: p.attempts ?? null,
+            untilClean: p.untilClean === true,
+            deepScan: p.deepScan === true,
+            create: p.create === true,
+            council: p.council === true,
+            delegate: p.delegate === true,
+            // Belt descriptor (D32): built once per delegate run with the parent
+            // budget snapshot; injected into agent lanes whose adapter can host
+            // MCP servers. Null when delegate is off (no belt).
+            delegationBelt,
+            synthesis: p.synthesis,
+            paidBudget: p.paidBudget,
+            access: p.access,
+            web: p.web ?? p.externalContextPolicy,
+            externalContextPolicy: p.externalContextPolicy ?? p.web,
+            model: p.model,
+            models: p.models,
+            effort: p.effort,
+            efforts: p.efforts,
+            tests: Array.isArray(p.tests) ? p.tests : undefined,
+            protectedPathApprovals: Array.isArray(p.protectedPathApprovals)
+                ? p.protectedPathApprovals
+                : undefined,
+            inPlace,
+            delegated: p.execution.delegated,
+            signal: runSignal,
+            onRunStart,
+        })
+            .finally(() => {
+            if (deadlineTimer)
+                clearTimeout(deadlineTimer);
+        });
+    };
+}
+//# sourceMappingURL=daemon-agent-runner.js.map

package/dist/daemon-agent-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-agent-runner.js","sourceRoot":"","sources":["../src/daemon-agent-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAUpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,+BAA+B,EAA8B,MAAM,mBAAmB,CAAC;AAChG,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EACL,+BAA+B,EAC/B,yBAAyB,GAC1B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEhG;oFACoF;AACpF,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,MAAM,EAAE,yBAAyB,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC9F,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;IAC5C,OAAO,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,CAAC,GAAG,+BAA+B,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QACpB,MAAM,YAAY,GAAG,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;QAC/D,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;QAC7E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,YAAY;YAAE,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,MAAM,YAAY,GAAG,oBAAoB,CAAC;YACxC,CAAC;YACD,yBAAyB;YACzB,UAAU,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE;YAC9B,kEAAkE;YAClE,sEAAsE;YACtE,qBAAqB;SACtB,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1E,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,kEAAkE;QAClE,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,UAAU,GACd,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,yBAAyB,KAAK,IAAI,CAAC;YAChF,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAG,CAAC,CAAC,OAA0C,CAAC;gBAC7D,wBAAwB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,gEAAgE;QAChE,sEAAsE;QACtE,uEAAuE;QACvE,sDAAsD;QACtD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,0BAA0B,CAAC,CAAC,EAAE;gBAClC,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CACvB,yBAAyB,CACvB,OAAO,EACP,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,EAClD,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe,EAC7C,SAAS,CAAC,KAAK,CAAC,cAAc,CAC/B;aACJ,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EACJ,aAAa,EAAE,mBAAmB,EAClC,OAAO,EACP,wBAAwB,GACzB,GAAG,MAAM,+BAA+B,CAAC;YACxC,QAAQ;YACR,QAAQ;YACR,IAAI;YACJ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,cAAc;YAC7C,gBAAgB,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,MAAM;YAClD,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,eAAe;YAC7D,OAAO;SACR,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,IAAI,mBAAmB,CAAC;QACvE,MAAM,UAAU,GAAG,CAAC,IAAuD,EAAQ,EAAE;YACnF,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,QAAQ;gBAAE,OAAO;YACtB,IAAI,CAAC;gBACH,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;wBAChE,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;qBACtE,CAAC,CAAC;oBACH,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC,CAAC;QACF,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,oEAAoE;QACpE,MAAM,UAAU,GACd,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;YAClD,CAAC,CAAC,iEAAiE;gBACjE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC;QACX,kEAAkE;QAClE,sEAAsE;QACtE,MAAM,kBAAkB,GACtB,CAAC,CAAC,mBAAmB,KAAK,IAAI;YAC5B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,KAAK,QAAQ,IAAI,CAAC,CAAC,mBAAmB;gBAClE,CAAC,CAAC,CAAC,CAAC,mBAAmB;gBACvB,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,qBAAqB,IAAI,IAAI,CAAC;oBAC9D,CAAC,CAAC,IAAI,CAAC;QACf,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;YAChD,OAAO;YACP,QAAQ;YACR,MAAM;YACN,SAAS,EAAE,kBAAkB;SAC9B,CAAC,CAAC;QACH,IAAI,aAAwD,CAAC;QAC7D,IAAI,SAAS,GAA4B,GAAG,CAAC,MAAM,CAAC;QACpD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;YACvC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC,CAAC;YAC3F,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;YACxB,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5F,CAAC;QACD,MAAM,cAAc,GAAG,oBAAoB,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QAC/E,OAAO,YAAY;aAChB,GAAG,CAAC;YACH,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE;gBACxB,uDAAuD;gBACvD,4DAA4D;gBAC5D,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBACnC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;oBACzD,MAAM,SAAS,GACb,OAAO,OAAO,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzE,IAAI,SAAS;wBAAE,UAAU,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACzD,CAAC;gBACD,+DAA+D;gBAC/D,wDAAwD;gBACxD,IAAI,CAAC;oBACH,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;YACD,aAAa,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,sBAAsB;YAC7D,QAAQ;YACR,aAAa;YACb,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;YAC1B,wBAAwB;YACxB,GAAG,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC;YAC/D,iBAAiB,EAAE,QAAQ;gBACzB,CAAC,CAAC,CAAC,SAAS,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE;oBACvD,wDAAwD;oBACxD,uDAAuD;oBACvD,OAAO,CAAC,aAAa,CACnB,QAAQ,EACR,SAAS,EACT,eAAe,EACf,aAAa,EACb,SAAS,IAAI,IAAI,CAClB,CAAC;oBACF,yDAAyD;oBACzD,uDAAuD;oBACvD,IAAI,MAAM;wBACR,OAAO,CAAC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;gBACjF,CAAC;gBACH,CAAC,CAAC,SAAS;YACb,kEAAkE;YAClE,oEAAoE;YACpE,gBAAgB,EAAE,iBAAiB;YACnC,oBAAoB,EAAE,QAAQ;gBAC5B,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAClB,OAAO,CAAC,iBAAiB,CAAC,GAAG,EAAE;oBAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,YAAY,EAAE,UAAU,CAAC,WAAW;oBACpC,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,kBAAkB,EAAE,UAAU,CAAC,gBAAgB;wBAC7C,CAAC,CAAC;4BACE,UAAU,EAAE,UAAU,CAAC,gBAAgB,CAAC,OAAO;4BAC/C,UAAU,EAAE,UAAU,CAAC,gBAAgB,CAAC,SAAS;yBAClD;wBACH,CAAC,CAAC,IAAI;iBACT,CAAC;gBACN,CAAC,CAAC,SAAS;YACb,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,mBAAmB,EAAE,kBAAkB;YACvC,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;YAClC,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,IAAI,IAAI;YAChD,qBAAqB,EAAE,GAAG,CAAC,KAAK;YAChC,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;YAC9B,OAAO,EACL,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;gBACxC,CAAC,CAAE,CAAC,CAAC,OAA2D;gBAChE,CAAC,CAAC,SAAS;YACf,YAAY,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YAC7E,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC/D,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACnF,YAAY,EACV,CAAC,CAAC,YAAY,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;gBACpF,CAAC,CAAE,CAAC,CAAC,YAAwC;gBAC7C,CAAC,CAAC,SAAS;YACf,WAAW,EAAE,MAAM;gBACjB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,IAAI,EAAE,CAAC;gBAC9C,CAAC,CAAC,SAAS,EAAE,CAAC,OAAO,CAAE,CAA+C,CAAC,WAAW,CAAC;YACrF,OAAO,EAAG,CAA2B,CAAC,OAAO,KAAK,IAAI;YACtD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,YAAY;gBACvB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;oBAC1B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;oBACjB,CAAC,CAAC,SAAS;YACf,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI;YAC5B,UAAU,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI;YACjC,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;YAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI;YACzB,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI;YAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;YAC7B,qEAAqE;YACrE,oEAAoE;YACpE,oDAAoD;YACpD,cAAc;YACd,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,qBAAqB;YACrC,qBAAqB,EAAE,CAAC,CAAC,qBAAqB,IAAI,CAAC,CAAC,GAAG;YACvD,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YACnD,sBAAsB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;gBAC7D,CAAC,CAAC,CAAC,CAAC,sBAAsB;gBAC1B,CAAC,CAAC,SAAS;YACb,OAAO;YACP,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS;YAChC,MAAM,EAAE,SAAS;YACjB,UAAU;SACX,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,aAAa;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;AACJ,CAAC"}

package/dist/model-services.d.ts

@@ -0,0 +1,204 @@
+import type { AdapterRegistry, ModelAdapter } from "@claudexor/core";
+import { ModelOperations, type CredentialUnusableLedger, type DaemonClient, type ModelOperationDependencies, type QuotaRegistry } from "@claudexor/daemon";
+import { GlobalConfig } from "@claudexor/schema";
+import { accountsMigrationGate } from "./accounts-unified-migration.js";
+import type { RetentionRunner } from "./retention-service.js";
+interface ModelSource {
+    adapter: ModelAdapter;
+    label: string;
+    credentialHarness: string;
+}
+interface Dependencies extends Pick<ModelOperationDependencies, "commands" | "resources" | "warn"> {
+    client: Pick<DaemonClient, "enqueue" | "cancel">;
+    quota: () => QuotaRegistry;
+    config?: () => GlobalConfig;
+    registry?: AdapterRegistry;
+    sources?: readonly ModelSource[];
+    unusable?: CredentialUnusableLedger;
+    migrationGate?: typeof accountsMigrationGate;
+}
+/** Model transport composition shares account, quota, command, and retention owners
+ * with Agents. It never starts an Agent Run or creates another routing ledger. */
+export declare function createModelServices(deps: Dependencies): {
+    operations: ModelOperations;
+    routes: {
+        modelSources: () => Promise<{
+            sources: {
+                id: string;
+                label: string;
+                credentialHarness: string;
+            }[];
+        }>;
+        modelCatalog: (sourceId: string, credentialProfileId?: string, requestedModel?: string) => Promise<{
+            source: string;
+            credentialProfileId: string;
+            accountFingerprint: string | null;
+            observedAt: string;
+            provenance: string;
+            models: {
+                id: string;
+                label: string | null;
+                isDefault: boolean;
+                contextWindow: number | null;
+                maxContextWindow: number | null;
+                maxOutputTokens: number | null;
+                inputModalities: string[];
+                reasoningEfforts: string[];
+                defaultReasoningEffort: string | null;
+                supportedOptions: string[];
+            }[];
+        }>;
+        createModelOperation: (request: import("@claudexor/schema").ModelPayloadRef, idempotencyKey: string) => Promise<import("@claudexor/schema").ControlModelOperationDetail>;
+        getModelOperation: (id: string) => Promise<{
+            id: string;
+            state: "cancelled" | "failed" | "interrupted" | "queued" | "running" | "succeeded";
+            createdAt: string;
+            startedAt: string | null;
+            finishedAt: string | null;
+            dispatch: {
+                state: "not_started" | "response_received" | "started" | "unknown";
+                startedAt: string | null;
+                route: {
+                    source: string;
+                    credentialProfileId: string;
+                    accountFingerprint: string | null;
+                    model: string | null;
+                } | null;
+            };
+            response: {
+                state: "absent";
+            } | {
+                state: "ready";
+                ref: {
+                    resourceId: string;
+                    sha256: string;
+                    sizeBytes: number;
+                };
+                readyAt: string;
+                expiresAt: string;
+            } | {
+                state: "acknowledged";
+                ref: {
+                    resourceId: string;
+                    sha256: string;
+                    sizeBytes: number;
+                };
+                releasedAt: string;
+            } | {
+                state: "expired";
+                ref: {
+                    resourceId: string;
+                    sha256: string;
+                    sizeBytes: number;
+                };
+                releasedAt: string;
+            };
+            usage: {
+                input_tokens: number | null;
+                output_tokens: number | null;
+                cached_input_tokens: number | null;
+                cache_write_tokens: number | null;
+                reasoning_tokens: number | null;
+            };
+            cost: {
+                knowledge: "estimated" | "exact" | "unknown";
+                billing: "metered" | "proven_zero" | "subscription_entitlement" | "unknown";
+                source: string;
+                provenance: string[];
+                estimatedUsd: number | null;
+                cashUsd: number | null;
+                valuationUsd: number | null;
+                valuationKnowledge: "estimated" | "exact" | "unknown";
+            } | null;
+            problem: {
+                code: string;
+                message: string;
+                retryable: boolean;
+                fieldErrors: Record<string, string[]>;
+                requiredActions: string[];
+                evidenceRefs: string[];
+                context: Record<string, unknown>;
+            } | null;
+        }>;
+        readModelResult: (id: string) => Promise<{
+            bytes: Buffer;
+            sha256: string;
+        }>;
+        acknowledgeModelResult: (id: string, sha256: string) => Promise<{
+            id: string;
+            state: "cancelled" | "failed" | "interrupted" | "queued" | "running" | "succeeded";
+            createdAt: string;
+            startedAt: string | null;
+            finishedAt: string | null;
+            dispatch: {
+                state: "not_started" | "response_received" | "started" | "unknown";
+                startedAt: string | null;
+                route: {
+                    source: string;
+                    credentialProfileId: string;
+                    accountFingerprint: string | null;
+                    model: string | null;
+                } | null;
+            };
+            response: {
+                state: "absent";
+            } | {
+                state: "ready";
+                ref: {
+                    resourceId: string;
+                    sha256: string;
+                    sizeBytes: number;
+                };
+                readyAt: string;
+                expiresAt: string;
+            } | {
+                state: "acknowledged";
+                ref: {
+                    resourceId: string;
+                    sha256: string;
+                    sizeBytes: number;
+                };
+                releasedAt: string;
+            } | {
+                state: "expired";
+                ref: {
+                    resourceId: string;
+                    sha256: string;
+                    sizeBytes: number;
+                };
+                releasedAt: string;
+            };
+            usage: {
+                input_tokens: number | null;
+                output_tokens: number | null;
+                cached_input_tokens: number | null;
+                cache_write_tokens: number | null;
+                reasoning_tokens: number | null;
+            };
+            cost: {
+                knowledge: "estimated" | "exact" | "unknown";
+                billing: "metered" | "proven_zero" | "subscription_entitlement" | "unknown";
+                source: string;
+                provenance: string[];
+                estimatedUsd: number | null;
+                cashUsd: number | null;
+                valuationUsd: number | null;
+                valuationKnowledge: "estimated" | "exact" | "unknown";
+            } | null;
+            problem: {
+                code: string;
+                message: string;
+                retryable: boolean;
+                fieldErrors: Record<string, string[]>;
+                requiredActions: string[];
+                evidenceRefs: string[];
+                context: Record<string, unknown>;
+            } | null;
+        }>;
+        cancelModelOperation: (id: string, reason?: import("@claudexor/schema").CancelReasonCode) => Promise<import("@claudexor/schema").ControlModelOperationDetail>;
+    };
+    withRetention: (run: RetentionRunner) => RetentionRunner;
+    close: () => void;
+};
+export {};
+//# sourceMappingURL=model-services.d.ts.map

package/dist/model-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-services.d.ts","sourceRoot":"","sources":["../src/model-services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAGrE,OAAO,EACL,eAAe,EACf,KAAK,wBAAwB,EAC7B,KAAK,YAAY,EACjB,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAW3B,OAAO,EAGL,YAAY,EAKb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,UAAU,WAAW;IACnB,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,YAAa,SAAQ,IAAI,CAAC,0BAA0B,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;IAChG,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC;IACjD,KAAK,EAAE,MAAM,aAAa,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,YAAY,CAAC;IAC5B,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,OAAO,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IACjC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,aAAa,CAAC,EAAE,OAAO,qBAAqB,CAAC;CAC9C;AAMD;kFACkF;AAClF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,YAAY;;;QAmUhD,YAAY;;;;;;;QAOZ,YAAY,aACA,MAAM,wBACM,MAAM,mBACX,MAAM;;;;;;;;;;;;;;;;;;;QAYzB,oBAAoB;QACpB,iBAAiB,OAAa,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QACpC,eAAe,OAAa,MAAM;;;;QAClC,sBAAsB,OAAa,MAAM,UAAU,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAEzD,oBAAoB;;yBAGd,eAAe,KAAG,eAAe;;EAa5C"}