@claudexor/control-api 1.0.1

package/dist/thread-turn-routes.js

@@ -0,0 +1,317 @@
+import { ControlRunStartInfo, ControlRunStartRequest } from "@claudexor/schema";
+/**
+ * Chain `work` onto the thread's serialization chain and drop the entry once
+ * settled so the Map cannot grow unbounded across a thread's lifetime.
+ */
+function chainOnThread(ctx, threadId, work) {
+    const previous = ctx.threadTurnChains.get(threadId) ?? Promise.resolve();
+    const chained = previous.catch(() => undefined).then(work);
+    const entry = chained.then(() => undefined, () => undefined).finally(() => {
+        if (ctx.threadTurnChains.get(threadId) === entry)
+            ctx.threadTurnChains.delete(threadId);
+    });
+    ctx.threadTurnChains.set(threadId, entry);
+    return chained;
+}
+function errStatus(err, fallback = 400) {
+    return err && typeof err === "object" && "status" in err ? Number(err.status) : fallback;
+}
+/** A typed throw's machine code (e.g. the trust gate's), null when absent or
+ * non-string (a numeric errno-style `code` must not leak into the typed
+ * refusal contract). ONE owner — daemon-server's refusal recorder reuses it. */
+export function errCode(err) {
+    const code = err && typeof err === "object" && "code" in err ? err.code : null;
+    return typeof code === "string" && code ? code : null;
+}
+/**
+ * Persist an enqueue failure on a pre-created turn (refused-turn honesty,
+ * INV-093). Shared by every pre-create-then-enqueue path OUTSIDE these
+ * routes (direct POST /runs with threadId, rerun_with_feedback). Marked
+ * retryable=false: these are enqueue-throw paths — no job was recorded, so
+ * the retry endpoint has nothing to replay. Best-effort by
+ * contract: recording must never mask the original error (callers always
+ * return it), and errCode yields null for absent/non-string codes.
+ */
+export function recordTurnEnqueueFailure(setTurnEnqueueError, turnId, err) {
+    if (!turnId || !setTurnEnqueueError)
+        return;
+    try {
+        setTurnEnqueueError(turnId, err instanceof Error ? err.message : String(err), errCode(err), false);
+    }
+    catch {
+        /* recording the refusal must not mask the original error */
+    }
+}
+/**
+ * POST /threads/:id/turns — create the turn record FIRST (single-writer), then
+ * enqueue its run. Per-thread serialization: concurrent turns on one thread
+ * would race the head_run_id lineage (check-then-act across awaits).
+ */
+export function handleThreadTurnCreate(ctx, res, threadId, body) {
+    return chainOnThread(ctx, threadId, async () => {
+        // Once the turn record exists, any later failure in this handler must
+        // land ON the turn (honest inline refusal) — not only in one HTTP
+        // response that a reloading client never sees.
+        let createdTurnId = null;
+        try {
+            const detail = await ctx.threadDetail(threadId);
+            const thread = detail.thread;
+            let prompt = String(body["prompt"] ?? "");
+            let mode = typeof body["mode"] === "string" ? body["mode"] : thread.mode;
+            const planRunId = typeof body["planRunId"] === "string" ? body["planRunId"] : null;
+            // "Implement plan": prefix the approved plan from an earlier turn into
+            // the prompt and force agent mode. The plan run must belong to THIS
+            // thread (no cross-thread artifact reads).
+            if (planRunId) {
+                if (!(thread.run_ids ?? []).includes(planRunId)) {
+                    throw Object.assign(new Error(`planRunId ${planRunId} is not a turn of this thread`), { status: 400 });
+                }
+                const planText = await ctx.readRunArtifactText(planRunId, "final/plan.md");
+                if (!planText || !planText.trim()) {
+                    // Fail loudly: "Implement plan" with an unreadable plan must NOT
+                    // silently run the bare prompt as agent (review r2 #7).
+                    throw Object.assign(new Error(`plan run ${planRunId} has no readable final/plan.md to implement`), { status: 400 });
+                }
+                prompt = `Implement the following approved plan. Deviate only where the code contradicts it, and say so.\n\n${planText}\n\n## Additional instruction\n${prompt}`.trim();
+                mode = "agent";
+            }
+            // Agent turns run "live" in the execution tree (in-place project or the
+            // thread worktree — the runner resolves which from thread.workspace).
+            const isolation = mode === "agent" ? "live" : "envelope";
+            // Sticky routing inheritance (thin gateway — pure DTO passthrough, the
+            // engine's orderPool/resolveCandidateAdapters owns all ordering): pool/
+            // primary precedence is per-turn body > thread sticky > omit (engine then
+            // auto-pools doctor-ok / falls back to config primary).
+            // The pool THIS turn routes/races over: a per-turn override, else the
+            // thread's sticky pool, else omit.
+            const turnPool = Array.isArray(body["harnesses"])
+                ? body["harnesses"]
+                : (thread.eligible_harnesses && thread.eligible_harnesses.length > 0 ? thread.eligible_harnesses : undefined);
+            // Inherit the sticky primary ONLY when it stays valid in that pool. If the
+            // pool (per-turn OR the inherited thread pool) does not contain the primary
+            // — e.g. the user dropped the primary harness from the pool via the "⋯"
+            // chips — drop the bias rather than drag it along; the engine would
+            // otherwise reject the turn with "primary not in pool".
+            const inheritPrimary = body["primaryHarness"] === undefined && thread.primary_harness
+                && (!turnPool || turnPool.includes(thread.primary_harness))
+                ? thread.primary_harness
+                : undefined;
+            const params = ctx.normalizeStart(ControlRunStartRequest.parse({
+                ...body,
+                prompt,
+                scope: thread.repo ? { kind: "project", root: thread.repo.root } : { kind: "none" },
+                mode,
+                execution: { isolation },
+                threadId,
+                parentRunId: thread.head_run_id ?? undefined,
+                planRunId: planRunId ?? undefined,
+                authPreference: typeof body["authPreference"] === "string" ? body["authPreference"] : thread.auth_preference,
+                ...(inheritPrimary ? { primaryHarness: inheritPrimary } : {}),
+                ...(body["harnesses"] === undefined && thread.eligible_harnesses && thread.eligible_harnesses.length > 0
+                    ? { harnesses: thread.eligible_harnesses }
+                    : {}),
+            }));
+            // Single-writer: create the turn (run_id=null) BEFORE enqueue and pass
+            // its id in the params; the daemon runner binds the started run to it.
+            // This means a queued-but-not-yet-started turn is still recorded, so we
+            // NEVER cancel the job on a wait timeout (the old #18 race).
+            const turn = (await ctx.createThreadTurn(threadId, prompt, {
+                // No explicit kind: the store auto-detects initial vs followup so the
+                // FIRST turn of a thread is "initial", not "followup" (review #4).
+                parentRunId: thread.head_run_id ?? null,
+                planRunId,
+                attachments: params.attachments,
+            }));
+            createdTurnId = turn.id;
+            // Strip base64 attachment bytes from the enqueued params: jobs.json must
+            // never carry the bytes (the turn holds the resolved scoped paths, and
+            // the run reads them back from the turn at start).
+            const { attachments: _att, ...enqueueParams } = params;
+            // ENQUEUE phase: a throw here means NO job was recorded — persist the
+            // refusal as retryable:false (nothing to replay).
+            let job;
+            try {
+                job = await ctx.daemon.enqueue({ ...enqueueParams, turnId: turn.id });
+            }
+            catch (err) {
+                const message = err instanceof Error ? err.message : "enqueue failed";
+                try {
+                    ctx.setTurnEnqueueError?.(turn.id, message, errCode(err), false);
+                }
+                catch {
+                    /* recording the refusal must not mask the original error */
+                }
+                // Untyped enqueue throws are INFRA failures (daemon socket down) —
+                // 500, matching POST /runs; typed statuses pass through.
+                return ctx.json(res, errStatus(err, 500), { error: message, turnId: turn.id, retryable: false });
+            }
+            // POST-ENQUEUE phase: the job EXISTS now. A status-poll throw here is
+            // transient observation loss, NOT a refusal — record nothing on the
+            // turn (the run may be starting fine; the runner hook records real
+            // pre-start deaths) and never claim retryable:false.
+            let rec;
+            try {
+                rec = await ctx.waitForRunStart(job.id);
+            }
+            catch (err) {
+                return ctx.json(res, 500, {
+                    error: `job ${job.id} was accepted but its start could not be observed: ${err instanceof Error ? err.message : String(err)}`,
+                    jobId: job.id,
+                    turnId: turn.id,
+                    threadId,
+                });
+            }
+            if (rec.runId && rec.runDir) {
+                return ctx.json(res, 200, {
+                    ...ControlRunStartInfo.parse({ jobId: rec.id, runId: rec.runId, taskId: rec.taskId, runDir: rec.runDir }),
+                    turnId: turn.id,
+                    threadId,
+                });
+            }
+            // A job that went TERMINAL without ever binding a run is a pre-start
+            // failure (trust/preflight refusal inside the runner): report it as one
+            // (mirrors POST /runs' 500), never as an accepted queued turn. The
+            // daemon hook has already persisted the refusal on the turn record.
+            if (ctx.isTerminalState(rec.state)) {
+                return ctx.json(res, 500, { jobId: rec.id, turnId: turn.id, threadId, state: rec.state, error: rec.error ?? `run ended pre-start: ${rec.state}` });
+            }
+            // The turn IS recorded (turnId) and the job is canonical in the daemon;
+            // the runner binds the run when it starts. Return 202 without cancelling.
+            return ctx.json(res, 202, { jobId: rec.id, turnId: turn.id, threadId, state: rec.state });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "bad request";
+            // PRE-ENQUEUE failures only reach here (plan read, param validation,
+            // turn creation) — the enqueue and status-wait phases return from
+            // their own catches above. When the turn was already recorded, persist
+            // the refusal so a thread reload still shows it (no silent orphan);
+            // no job exists -> retryable:false.
+            if (createdTurnId) {
+                try {
+                    ctx.setTurnEnqueueError?.(createdTurnId, message, errCode(err), false);
+                }
+                catch {
+                    /* recording the refusal must not mask the original error */
+                }
+            }
+            return ctx.json(res, errStatus(err), {
+                error: message,
+                ...(createdTurnId ? { turnId: createdTurnId, retryable: false } : {}),
+            });
+        }
+    });
+}
+/**
+ * POST /threads/:id/turns/:turnId/retry — re-enqueue a REFUSED turn (same
+ * prompt/options/attachment refs: the job registry is the SSOT of enqueue
+ * params, replayed verbatim). No duplicate bubble: the run binds to the SAME
+ * turn, which also clears enqueue_error.
+ */
+export function handleThreadTurnRetry(ctx, res, threadId, turnId) {
+    // Same per-thread serialization as turn creation: a retry racing a new
+    // turn would otherwise interleave lineage bookkeeping.
+    return chainOnThread(ctx, threadId, async () => {
+        try {
+            const detail = await ctx.threadDetail(threadId);
+            const turns = detail.turns;
+            const turn = turns.find((t) => t["id"] === turnId);
+            if (!turn)
+                throw Object.assign(new Error(`no such turn on this thread: ${turnId}`), { status: 404 });
+            if (turn["run_id"]) {
+                throw Object.assign(new Error(`turn ${turnId} already has a run; retry only repairs refused turns`), { status: 409 });
+            }
+            const recorded = turn["enqueue_error"];
+            if (!recorded) {
+                throw Object.assign(new Error(`turn ${turnId} has no recorded refusal; its job may still be queued or starting`), { status: 409 });
+            }
+            // Recorded as NOT replayable (the original enqueue threw before any
+            // job existed): refuse immediately — no registry lookup can find
+            // params that were never recorded.
+            if (recorded.retryable === false) {
+                throw Object.assign(new Error(`turn ${turnId} has no recorded enqueue attempt to replay; send a new message instead`), { status: 409 });
+            }
+            // Retry repairs the TAIL of the conversation only. Re-running an OLDER
+            // refused turn would bind its run as the thread's new head (bindTurnRun
+            // advances head_run_id unconditionally) and silently reorder lineage
+            // that later turns already advanced — refuse loudly instead.
+            const lastTurn = turns[turns.length - 1];
+            if (lastTurn && lastTurn["id"] !== turnId) {
+                throw Object.assign(new Error(`turn ${turnId} is not the latest turn of this thread; the conversation moved on — send a new message instead`), { status: 409 });
+            }
+            const jobs = (await ctx.daemon.list())
+                .filter((r) => {
+                const p = r.params;
+                return Boolean(p && typeof p === "object" && p.turnId === turnId);
+            })
+                .sort((a, b) => String(a.createdAt ?? "").localeCompare(String(b.createdAt ?? "")));
+            const last = jobs[jobs.length - 1];
+            if (!last) {
+                // The refusal happened before any job existed (enqueue itself threw):
+                // there are no recorded params to replay faithfully — honest refusal.
+                throw Object.assign(new Error(`turn ${turnId} has no recorded enqueue attempt to replay; send a new message instead`), { status: 409 });
+            }
+            if (last.state === "queued" || last.state === "running") {
+                throw Object.assign(new Error(`turn ${turnId} already has an active job (${last.state})`), { status: 409 });
+            }
+            // REPLAY-ENQUEUE phase. Deliberately NO eager clear of the old refusal:
+            // the daemon hook (a fast-failing replay) can write a FRESH refusal at
+            // ANY point after enqueue, and no timestamp compare can fully close
+            // that race (same-millisecond writes). The stale refusal stays visible
+            // for the queued window; truth converges on the next transition —
+            // bindTurnRun clears it when the run starts, the hook replaces it when
+            // the replay fails. Honest, ordering-independent, no lost refusals.
+            let job;
+            try {
+                job = await ctx.daemon.enqueue(last.params);
+            }
+            catch (err) {
+                // A failed replay ENQUEUE is a fresh refusal — but the ORIGINAL job
+                // params remain in the registry, so the turn STAYS replayable.
+                // Untyped throws are infra failures — 500 (matching POST /runs).
+                const message = err instanceof Error ? err.message : "enqueue failed";
+                try {
+                    ctx.setTurnEnqueueError?.(turnId, message, errCode(err), true);
+                }
+                catch {
+                    /* recording the refusal must not mask the original error */
+                }
+                return ctx.json(res, errStatus(err, 500), { error: message, turnId, threadId });
+            }
+            // POST-ENQUEUE: the replay job exists; a status-poll throw is
+            // observation loss, NOT a refusal — record nothing on the turn.
+            let rec;
+            try {
+                rec = await ctx.waitForRunStart(job.id);
+            }
+            catch (err) {
+                return ctx.json(res, 500, {
+                    error: `replay job ${job.id} was accepted but its start could not be observed: ${err instanceof Error ? err.message : String(err)}`,
+                    jobId: job.id,
+                    turnId,
+                    threadId,
+                });
+            }
+            if (rec.runId && rec.runDir) {
+                return ctx.json(res, 200, {
+                    ...ControlRunStartInfo.parse({ jobId: rec.id, runId: rec.runId, taskId: rec.taskId, runDir: rec.runDir }),
+                    turnId,
+                    threadId,
+                });
+            }
+            // A job that went TERMINAL without ever binding a run is a pre-start
+            // failure (trust/preflight refusal inside the runner) — report it as
+            // one (mirrors POST /runs), never as an accepted queued turn. The
+            // runner hook has already persisted the refusal on the turn.
+            if (ctx.isTerminalState(rec.state)) {
+                return ctx.json(res, 500, { jobId: rec.id, turnId, threadId, state: rec.state, error: rec.error ?? `run ended pre-start: ${rec.state}` });
+            }
+            return ctx.json(res, 202, { jobId: rec.id, turnId, threadId, state: rec.state });
+        }
+        catch (err) {
+            // Guard refusals only (404/409): never overwrite the original recorded
+            // refusal with bookkeeping noise.
+            return ctx.json(res, errStatus(err), { error: err instanceof Error ? err.message : "bad request" });
+        }
+    });
+}
+//# sourceMappingURL=thread-turn-routes.js.map

package/dist/thread-turn-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thread-turn-routes.js","sourceRoot":"","sources":["../src/thread-turn-routes.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAwBhF;;;GAGG;AACH,SAAS,aAAa,CAAC,GAAuB,EAAE,QAAgB,EAAE,IAAyB;IACzF,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACzE,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAkB,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACvF,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK;YAAE,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,QAAQ,GAAG,GAAG;IAC7C,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAE,GAA0B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACnH,CAAC;AAED;;gFAEgF;AAChF,MAAM,UAAU,OAAO,CAAC,GAAY;IAClC,MAAM,IAAI,GAAG,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC,CAAE,GAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACtG,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,mBAAsH,EACtH,MAA0B,EAC1B,GAAY;IAEZ,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB;QAAE,OAAO;IAC5C,IAAI,CAAC;QACH,mBAAmB,CAAC,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAuB,EACvB,GAAmB,EACnB,QAAgB,EAChB,IAA6B;IAE7B,OAAO,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC7C,sEAAsE;QACtE,kEAAkE;QAClE,+CAA+C;QAC/C,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAgO,CAAC;YACvP,IAAI,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1C,IAAI,IAAI,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,MAAM,CAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACrF,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,WAAW,CAAY,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/F,uEAAuE;YACvE,oEAAoE;YACpE,2CAA2C;YAC3C,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAChD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,SAAS,+BAA+B,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACzG,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;gBAC3E,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;oBAClC,iEAAiE;oBACjE,wDAAwD;oBACxD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,SAAS,6CAA6C,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACtH,CAAC;gBACD,MAAM,GAAG,qGAAqG,QAAQ,kCAAkC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;gBACxK,IAAI,GAAG,OAAO,CAAC;YACjB,CAAC;YACD,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,SAAS,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;YACzD,uEAAuE;YACvE,wEAAwE;YACxE,0EAA0E;YAC1E,wDAAwD;YACxD,sEAAsE;YACtE,mCAAmC;YACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC/C,CAAC,CAAE,IAAI,CAAC,WAAW,CAAc;gBACjC,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAChH,2EAA2E;YAC3E,4EAA4E;YAC5E,wEAAwE;YACxE,oEAAoE;YACpE,wDAAwD;YACxD,MAAM,cAAc,GAClB,IAAI,CAAC,gBAAgB,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe;mBACzD,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC3D,CAAC,CAAC,MAAM,CAAC,eAAe;gBACxB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,CAC/B,sBAAsB,CAAC,KAAK,CAAC;gBAC3B,GAAG,IAAI;gBACP,MAAM;gBACN,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;gBACnF,IAAI;gBACJ,SAAS,EAAE,EAAE,SAAS,EAAE;gBACxB,QAAQ;gBACR,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,SAAS;gBAC5C,SAAS,EAAE,SAAS,IAAI,SAAS;gBACjC,cAAc,EAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,eAA0B;gBACxH,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;oBACtG,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,kBAAkB,EAAE;oBAC1C,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CACH,CAAC;YACF,uEAAuE;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,6DAA6D;YAC7D,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE;gBACzD,sEAAsE;gBACtE,mEAAmE;gBACnE,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,IAAI;gBACvC,SAAS;gBACT,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAmB,CAAC;YACtB,aAAa,GAAG,IAAI,CAAC,EAAE,CAAC;YACxB,yEAAyE;YACzE,uEAAuE;YACvE,mDAAmD;YACnD,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,GAAG,MAAM,CAAC;YACvD,sEAAsE;YACtE,kDAAkD;YAClD,IAAI,GAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBACtE,IAAI,CAAC;oBACH,GAAG,CAAC,mBAAmB,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;gBACnE,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;gBACD,mEAAmE;gBACnE,yDAAyD;gBACzD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YACnG,CAAC;YACD,sEAAsE;YACtE,oEAAoE;YACpE,mEAAmE;YACnE,qDAAqD;YACrD,IAAI,GAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACxB,KAAK,EAAE,OAAO,GAAG,CAAC,EAAE,sDAAsD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;oBAC5H,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC5B,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACxB,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;oBACzG,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;YACD,qEAAqE;YACrE,wEAAwE;YACxE,mEAAmE;YACnE,oEAAoE;YACpE,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,wBAAwB,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrJ,CAAC;YACD,wEAAwE;YACxE,0EAA0E;YAC1E,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YACnE,qEAAqE;YACrE,kEAAkE;YAClE,uEAAuE;YACvE,oEAAoE;YACpE,oCAAoC;YACpC,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACH,GAAG,CAAC,mBAAmB,EAAE,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;gBACzE,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE;gBACnC,KAAK,EAAE,OAAO;gBACd,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAuB,EACvB,GAAmB,EACnB,QAAgB,EAChB,MAAc;IAEd,uEAAuE;IACvE,uDAAuD;IACvD,OAAO,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAuC,CAAC;YAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACrG,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,MAAM,sDAAsD,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACxH,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAA+C,CAAC;YACrF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,MAAM,mEAAmE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACrI,CAAC;YACD,oEAAoE;YACpE,iEAAiE;YACjE,mCAAmC;YACnC,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBACjC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,MAAM,wEAAwE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1I,CAAC;YACD,uEAAuE;YACvE,wEAAwE;YACxE,qEAAqE;YACrE,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC1C,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,QAAQ,MAAM,gGAAgG,CAAC,EACzH,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;iBACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACZ,MAAM,CAAC,GAAG,CAAC,CAAC,MAAiD,CAAC;gBAC9D,OAAO,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YACpE,CAAC,CAAC;iBACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACtF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,sEAAsE;gBACtE,sEAAsE;gBACtE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,MAAM,wEAAwE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1I,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,MAAM,+BAA+B,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,oEAAoE;YACpE,uEAAuE;YACvE,kEAAkE;YAClE,uEAAuE;YACvE,oEAAoE;YACpE,IAAI,GAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,oEAAoE;gBACpE,+DAA+D;gBAC/D,iEAAiE;gBACjE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC;gBACtE,IAAI,CAAC;oBACH,GAAG,CAAC,mBAAmB,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;gBACjE,CAAC;gBAAC,MAAM,CAAC;oBACP,4DAA4D;gBAC9D,CAAC;gBACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,8DAA8D;YAC9D,gEAAgE;YAChE,IAAI,GAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACxB,KAAK,EAAE,cAAc,GAAG,CAAC,EAAE,sDAAsD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;oBACnI,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,MAAM;oBACN,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC5B,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;oBACxB,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;oBACzG,MAAM;oBACN,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC;YACD,qEAAqE;YACrE,qEAAqE;YACrE,kEAAkE;YAClE,6DAA6D;YAC7D,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,wBAAwB,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC5I,CAAC;YACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,kCAAkC;YAClC,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACtG,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "@claudexor/control-api",
+  "version": "1.0.1",
+  "license": "MIT",
+  "description": "Loopback HTTP+SSE control surface for GUI/service clients: token-auth, Host/Origin guard, live run event stream with Last-Event-ID replay. Runner injected (no second scheduler).",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "yaml": "^2.6.1",
+    "@claudexor/delivery": "1.0.1",
+    "@claudexor/event-log": "1.0.1",
+    "@claudexor/util": "1.0.1",
+    "@claudexor/schema": "1.0.1",
+    "@claudexor/secrets": "1.0.1"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/razzant/claudexor.git",
+    "directory": "packages/control-api"
+  },
+  "homepage": "https://github.com/razzant/claudexor#readme",
+  "bugs": {
+    "url": "https://github.com/razzant/claudexor/issues"
+  },
+  "engines": {
+    "node": ">=20.19"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit"
+  }
+}