@claudexor/control-api 3.1.1 → 3.2.0

package/dist/authorization.d.ts

@@ -0,0 +1,3 @@
+/** Parse the HTTP Bearer credential without overlapping regular-expression quantifiers. */
+export declare function bearerCredential(header: string | undefined): string | undefined;
+//# sourceMappingURL=authorization.d.ts.map

package/dist/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../src/authorization.ts"],"names":[],"mappings":"AAEA,2FAA2F;AAC3F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAS/E"}

package/dist/authorization.js

@@ -0,0 +1,15 @@
+const BEARER_SCHEME = "bearer";
+/** Parse the HTTP Bearer credential without overlapping regular-expression quantifiers. */
+export function bearerCredential(header) {
+    if (!header || header.slice(0, BEARER_SCHEME.length).toLowerCase() !== BEARER_SCHEME) {
+        return undefined;
+    }
+    let cursor = BEARER_SCHEME.length;
+    if (header[cursor] !== " " && header[cursor] !== "\t")
+        return undefined;
+    while (header[cursor] === " " || header[cursor] === "\t")
+        cursor += 1;
+    const credential = header.slice(cursor).trim();
+    return credential || undefined;
+}
+//# sourceMappingURL=authorization.js.map

package/dist/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../src/authorization.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,MAA0B;IACzD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,aAAa,EAAE,CAAC;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,UAAU,IAAI,SAAS,CAAC;AACjC,CAAC"}

package/dist/binary-response.d.ts

@@ -0,0 +1,5 @@
+import type { ServerResponse } from "node:http";
+/** RFC 6266/RFC 5987 filename projection with an ASCII compatibility fallback. */
+export declare function inlineContentDisposition(fileName: string): string;
+export declare function writeBinaryResponse(response: ServerResponse, status: number, body: Buffer, contentType: string, fileName: string): void;
+//# sourceMappingURL=binary-response.d.ts.map

package/dist/binary-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-response.d.ts","sourceRoot":"","sources":["../src/binary-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgBjE;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,IAAI,CAiBN"}

package/dist/binary-response.js

@@ -0,0 +1,31 @@
+/** RFC 6266/RFC 5987 filename projection with an ASCII compatibility fallback. */
+export function inlineContentDisposition(fileName) {
+    const validUtf8 = Buffer.from(fileName, "utf8")
+        .toString("utf8")
+        .normalize("NFC")
+        .replace(/[\u0000-\u001f\u007f]/g, "_");
+    const bounded = [...validUtf8].slice(0, 180).join("") || "remote-file";
+    const fallback = [...bounded]
+        .map((character) => (/^[A-Za-z0-9._ -]$/.test(character) ? character : "_"))
+        .join("")
+        .slice(0, 180) || "remote-file";
+    const encoded = encodeURIComponent(bounded).replace(/[!'()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+    return `inline; filename="${fallback}"; filename*=UTF-8''${encoded}`;
+}
+export function writeBinaryResponse(response, status, body, contentType, fileName) {
+    if (!Buffer.isBuffer(body) ||
+        typeof contentType !== "string" ||
+        contentType.length === 0 ||
+        typeof fileName !== "string" ||
+        fileName.length === 0) {
+        throw new TypeError("binary response is invalid");
+    }
+    response.writeHead(status, {
+        "content-type": contentType,
+        "content-length": body.length,
+        "content-disposition": inlineContentDisposition(fileName),
+        "cache-control": "private, no-store",
+    });
+    response.end(body);
+}
+//# sourceMappingURL=binary-response.js.map

package/dist/binary-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-response.js","sourceRoot":"","sources":["../src/binary-response.ts"],"names":[],"mappings":"AAEA,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5C,QAAQ,CAAC,MAAM,CAAC;SAChB,SAAS,CAAC,KAAK,CAAC;SAChB,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC;IACvE,MAAM,QAAQ,GACZ,CAAC,GAAG,OAAO,CAAC;SACT,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SAC3E,IAAI,CAAC,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC;IACpC,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,CACjD,UAAU,EACV,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CACxE,CAAC;IACF,OAAO,qBAAqB,QAAQ,uBAAuB,OAAO,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAwB,EACxB,MAAc,EACd,IAAY,EACZ,WAAmB,EACnB,QAAgB;IAEhB,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,CAAC,MAAM,KAAK,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACpD,CAAC;IACD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,WAAW;QAC3B,gBAAgB,EAAE,IAAI,CAAC,MAAM;QAC7B,qBAAqB,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QACzD,eAAe,EAAE,mBAAmB;KACrC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/dist/budget-valuation.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Pure subscription-VALUATION fold over a run's events (QA-023c/QA-017b),
+ * independent of the cash truth. The owner-locked ledger settles native-
+ * subscription work to cash $0 while accumulating its token valuation on
+ * `budget.cash.valuation_usd` (last-wins, cumulative). An UNKNOWN valuation (no
+ * usage ever reported — e.g. a Cursor draft) stays NULL and is never coerced to
+ * a fake $0. The legacy fallback for runs predating budget.cash is the summed
+ * `budget.observation` spend.
+ */
+export declare function budgetValuationFromEvents(events: Record<string, unknown>[]): {
+    valuationUsd: number | null;
+    valuationKnowledge: "exact" | "estimated" | "unknown";
+};
+export declare function normalizeLegacyBudgetComponents(budget: {
+    estimated?: boolean;
+    spend_usd?: number | null;
+    valuation_usd?: number | null;
+    valuation_knowledge?: "exact" | "estimated" | "unknown";
+} | null, events: Record<string, unknown>[], folded: ReturnType<typeof budgetValuationFromEvents>): typeof folded & {
+    cashEstimated: boolean;
+};
+export declare function cashEstimatedFromLedgerEvent(payload: Record<string, unknown>): boolean;
+//# sourceMappingURL=budget-valuation.d.ts.map

package/dist/budget-valuation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-valuation.d.ts","sourceRoot":"","sources":["../src/budget-valuation.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG;IAC5E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kBAAkB,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;CACvD,CAuCA;AAED,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE;IACN,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,mBAAmB,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;CACzD,GAAG,IAAI,EACR,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EACjC,MAAM,EAAE,UAAU,CAAC,OAAO,yBAAyB,CAAC,GACnD,OAAO,MAAM,GAAG;IAAE,aAAa,EAAE,OAAO,CAAA;CAAE,CA4B5C;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAStF"}

package/dist/budget-valuation.js

@@ -0,0 +1,90 @@
+import { eventPayload } from "./run-timeline.js";
+/**
+ * Pure subscription-VALUATION fold over a run's events (QA-023c/QA-017b),
+ * independent of the cash truth. The owner-locked ledger settles native-
+ * subscription work to cash $0 while accumulating its token valuation on
+ * `budget.cash.valuation_usd` (last-wins, cumulative). An UNKNOWN valuation (no
+ * usage ever reported — e.g. a Cursor draft) stays NULL and is never coerced to
+ * a fake $0. The legacy fallback for runs predating budget.cash is the summed
+ * `budget.observation` spend.
+ */
+export function budgetValuationFromEvents(events) {
+    let valuationUsd = null;
+    let valuationKnowledge = "unknown";
+    let sawLedgerValuation = false;
+    let observation = 0;
+    let sawObservation = false;
+    for (const ev of events) {
+        const payload = eventPayload(ev);
+        if (ev["type"] === "budget.cash") {
+            const val = payload["valuation_usd"];
+            if (typeof val === "number" && Number.isFinite(val)) {
+                sawLedgerValuation = true;
+                const knowledge = payload["valuation_knowledge"];
+                if (knowledge === "exact" || knowledge === "estimated" || knowledge === "unknown") {
+                    valuationKnowledge = knowledge;
+                    valuationUsd = knowledge === "unknown" ? null : val;
+                }
+                else {
+                    // Legacy budget.cash had no valuation-specific knowledge. A positive
+                    // token valuation is safely estimated; zero alone cannot prove that
+                    // valuation evidence existed.
+                    valuationKnowledge = val > 0 ? "estimated" : "unknown";
+                    valuationUsd = val > 0 ? val : null;
+                }
+            }
+            continue;
+        }
+        if (ev["type"] === "budget.observation" && payload["kind"] === "spend") {
+            const usd = payload["usd"];
+            if (typeof usd === "number" && Number.isFinite(usd)) {
+                observation += usd;
+                sawObservation = true;
+            }
+        }
+    }
+    if (!sawLedgerValuation && sawObservation) {
+        valuationUsd = observation;
+        valuationKnowledge = "estimated";
+    }
+    return { valuationUsd, valuationKnowledge };
+}
+export function normalizeLegacyBudgetComponents(budget, events, folded) {
+    let cashEstimated = budget?.estimated ?? false;
+    let { valuationUsd, valuationKnowledge } = folded;
+    const knowledge = budget?.valuation_knowledge;
+    const valuation = budget?.valuation_usd;
+    const componentAwareEvent = events.some((event) => {
+        if (event["type"] !== "budget.cash")
+            return false;
+        const value = eventPayload(event)["valuation_knowledge"];
+        return value === "exact" || value === "estimated" || value === "unknown";
+    });
+    if (knowledge && typeof valuation === "number" && Number.isFinite(valuation)) {
+        valuationKnowledge = knowledge;
+        valuationUsd = knowledge === "unknown" ? null : valuation;
+    }
+    else if (valuationUsd === null && typeof valuation === "number" && valuation > 0) {
+        valuationUsd = valuation;
+        valuationKnowledge = "estimated";
+    }
+    if (knowledge === undefined &&
+        !componentAwareEvent &&
+        cashEstimated &&
+        budget?.spend_usd === 0 &&
+        typeof valuation === "number" &&
+        valuation > 0) {
+        cashEstimated = false;
+    }
+    return { valuationUsd, valuationKnowledge, cashEstimated };
+}
+export function cashEstimatedFromLedgerEvent(payload) {
+    const estimated = payload["estimated"] === true;
+    const legacyExactZero = payload["valuation_knowledge"] === undefined &&
+        estimated &&
+        payload["cash_spend_usd"] === 0 &&
+        typeof payload["valuation_usd"] === "number" &&
+        payload["valuation_usd"] > 0;
+    return estimated && !legacyExactZero;
+}
+//# sourceMappingURL=budget-valuation.js.map

package/dist/budget-valuation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-valuation.js","sourceRoot":"","sources":["../src/budget-valuation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAiC;IAIzE,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,kBAAkB,GAAsC,SAAS,CAAC;IACtE,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;YACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpD,kBAAkB,GAAG,IAAI,CAAC;gBAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;gBACjD,IAAI,SAAS,KAAK,OAAO,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAClF,kBAAkB,GAAG,SAAS,CAAC;oBAC/B,YAAY,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBACtD,CAAC;qBAAM,CAAC;oBACN,qEAAqE;oBACrE,oEAAoE;oBACpE,8BAA8B;oBAC9B,kBAAkB,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;oBACvD,YAAY,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBACtC,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;YACvE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpD,WAAW,IAAI,GAAG,CAAC;gBACnB,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,kBAAkB,IAAI,cAAc,EAAE,CAAC;QAC1C,YAAY,GAAG,WAAW,CAAC;QAC3B,kBAAkB,GAAG,WAAW,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,MAKQ,EACR,MAAiC,EACjC,MAAoD;IAEpD,IAAI,aAAa,GAAG,MAAM,EAAE,SAAS,IAAI,KAAK,CAAC;IAC/C,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,EAAE,mBAAmB,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,EAAE,aAAa,CAAC;IACxC,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAChD,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,aAAa;YAAE,OAAO,KAAK,CAAC;QAClD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC;QACzD,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,SAAS,CAAC;IAC3E,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,kBAAkB,GAAG,SAAS,CAAC;QAC/B,YAAY,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,CAAC;SAAM,IAAI,YAAY,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACnF,YAAY,GAAG,SAAS,CAAC;QACzB,kBAAkB,GAAG,WAAW,CAAC;IACnC,CAAC;IACD,IACE,SAAS,KAAK,SAAS;QACvB,CAAC,mBAAmB;QACpB,aAAa;QACb,MAAM,EAAE,SAAS,KAAK,CAAC;QACvB,OAAO,SAAS,KAAK,QAAQ;QAC7B,SAAS,GAAG,CAAC,EACb,CAAC;QACD,aAAa,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAgC;IAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC;IAChD,MAAM,eAAe,GACnB,OAAO,CAAC,qBAAqB,CAAC,KAAK,SAAS;QAC5C,SAAS;QACT,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAC/B,OAAO,OAAO,CAAC,eAAe,CAAC,KAAK,QAAQ;QAC5C,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,SAAS,IAAI,CAAC,eAAe,CAAC;AACvC,CAAC"}

package/dist/catalog-query.d.ts

@@ -0,0 +1,310 @@
+export interface HarnessListQuery {
+    fresh?: boolean;
+    includeFakes?: boolean;
+    harnessIds?: string[];
+}
+export declare function parseHarnessListQuery(url: URL): HarnessListQuery;
+export declare function parseCredentialProfilesSnapshotQuery(url: URL): {
+    input: {
+        snapshot: boolean;
+    };
+    schema: import("zod/v3").ZodObject<{
+        profiles: import("zod/v3").ZodArray<import("zod/v3").ZodObject<{
+            profile: import("zod/v3").ZodEffects<import("zod/v3").ZodObject<{
+                profile_id: import("zod/v3").ZodString;
+                harness_id: import("zod/v3").ZodString;
+                display_name: import("zod/v3").ZodString;
+                credential_kind: import("zod/v3").ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+                isolation_locator: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodString>>;
+                secret_ref: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodString>>;
+                enabled: import("zod/v3").ZodDefault<import("zod/v3").ZodBoolean>;
+                created_at: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodString>>;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator: string | null;
+                secret_ref: string | null;
+                enabled: boolean;
+                created_at: string | null;
+            }, {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator?: string | null | undefined;
+                secret_ref?: string | null | undefined;
+                enabled?: boolean | undefined;
+                created_at?: string | null | undefined;
+            }>, {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator: string | null;
+                secret_ref: string | null;
+                enabled: boolean;
+                created_at: string | null;
+            }, {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator?: string | null | undefined;
+                secret_ref?: string | null | undefined;
+                enabled?: boolean | undefined;
+                created_at?: string | null | undefined;
+            }>;
+            status: import("zod/v3").ZodObject<{
+                profile_id: import("zod/v3").ZodString;
+                harness_id: import("zod/v3").ZodString;
+                availability: import("zod/v3").ZodEnum<["available", "unavailable", "unknown"]>;
+                verification: import("zod/v3").ZodEnum<["passed", "failed", "not_run"]>;
+                detail: import("zod/v3").ZodOptional<import("zod/v3").ZodString>;
+                last_verified_at: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodString>>;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                detail?: string | undefined;
+                last_verified_at: string | null;
+            }, {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                detail?: string | undefined;
+                last_verified_at?: string | null | undefined;
+            }>;
+            identity: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodObject<{
+                email: import("zod/v3").ZodOptional<import("zod/v3").ZodString>;
+                plan: import("zod/v3").ZodOptional<import("zod/v3").ZodString>;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                email?: string | undefined;
+                plan?: string | undefined;
+            }, {
+                email?: string | undefined;
+                plan?: string | undefined;
+            }>>>;
+        }, "strict", import("zod/v3").ZodTypeAny, {
+            profile: {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator: string | null;
+                secret_ref: string | null;
+                enabled: boolean;
+                created_at: string | null;
+            };
+            status: {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                detail?: string | undefined;
+                last_verified_at: string | null;
+            };
+            identity: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null;
+        }, {
+            profile: {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator?: string | null | undefined;
+                secret_ref?: string | null | undefined;
+                enabled?: boolean | undefined;
+                created_at?: string | null | undefined;
+            };
+            status: {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                detail?: string | undefined;
+                last_verified_at?: string | null | undefined;
+            };
+            identity?: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null | undefined;
+        }>, "many">;
+        harnessAccounts: import("zod/v3").ZodDefault<import("zod/v3").ZodArray<import("zod/v3").ZodObject<{
+            harness_id: import("zod/v3").ZodString;
+            native_credentials_enabled: import("zod/v3").ZodBoolean;
+            native_login_detected: import("zod/v3").ZodBoolean;
+            identity: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodObject<{
+                email: import("zod/v3").ZodOptional<import("zod/v3").ZodString>;
+                plan: import("zod/v3").ZodOptional<import("zod/v3").ZodString>;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                email?: string | undefined;
+                plan?: string | undefined;
+            }, {
+                email?: string | undefined;
+                plan?: string | undefined;
+            }>>>;
+            next_up: import("zod/v3").ZodDiscriminatedUnion<"kind", [import("zod/v3").ZodObject<{
+                kind: import("zod/v3").ZodLiteral<"profile">;
+                profileId: import("zod/v3").ZodString;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                kind: "profile";
+                profileId: string;
+            }, {
+                kind: "profile";
+                profileId: string;
+            }>, import("zod/v3").ZodObject<{
+                kind: import("zod/v3").ZodLiteral<"native">;
+                route: import("zod/v3").ZodOptional<import("zod/v3").ZodEnum<["local_session", "api_key"]>>;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            }, {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            }>, import("zod/v3").ZodObject<{
+                kind: import("zod/v3").ZodLiteral<"none">;
+                reason: import("zod/v3").ZodString;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                kind: "none";
+                reason: string;
+            }, {
+                kind: "none";
+                reason: string;
+            }>]>;
+        }, "strict", import("zod/v3").ZodTypeAny, {
+            harness_id: string;
+            native_credentials_enabled: boolean;
+            native_login_detected: boolean;
+            identity: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            } | {
+                kind: "none";
+                reason: string;
+            };
+        }, {
+            harness_id: string;
+            native_credentials_enabled: boolean;
+            native_login_detected: boolean;
+            identity?: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null | undefined;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            } | {
+                kind: "none";
+                reason: string;
+            };
+        }>, "many">>;
+    }, "strict", import("zod/v3").ZodTypeAny, {
+        profiles: {
+            profile: {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator: string | null;
+                secret_ref: string | null;
+                enabled: boolean;
+                created_at: string | null;
+            };
+            status: {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                detail?: string | undefined;
+                last_verified_at: string | null;
+            };
+            identity: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null;
+        }[];
+        harnessAccounts: {
+            harness_id: string;
+            native_credentials_enabled: boolean;
+            native_login_detected: boolean;
+            identity: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            } | {
+                kind: "none";
+                reason: string;
+            };
+        }[];
+    }, {
+        profiles: {
+            profile: {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator?: string | null | undefined;
+                secret_ref?: string | null | undefined;
+                enabled?: boolean | undefined;
+                created_at?: string | null | undefined;
+            };
+            status: {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                detail?: string | undefined;
+                last_verified_at?: string | null | undefined;
+            };
+            identity?: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null | undefined;
+        }[];
+        harnessAccounts?: {
+            harness_id: string;
+            native_credentials_enabled: boolean;
+            native_login_detected: boolean;
+            identity?: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null | undefined;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            } | {
+                kind: "none";
+                reason: string;
+            };
+        }[] | undefined;
+    }>;
+};
+export declare function parseRunApplicabilityQuery(url: URL): {
+    repoRoot: string;
+};
+//# sourceMappingURL=catalog-query.d.ts.map

package/dist/catalog-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-query.d.ts","sourceRoot":"","sources":["../src/catalog-query.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,GAAG,GAAG,gBAAgB,CAchE;AAED,wBAAgB,oCAAoC,CAAC,GAAG,EAAE,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS5D;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,GAAG,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAOzE"}

package/dist/catalog-query.js

@@ -0,0 +1,36 @@
+import { assertOnlyQueryParams, optionalBooleanQuery, singleQuery } from "./query.js";
+import { ControlCredentialProfilesResponse, ControlCredentialProfilesSnapshotResponse, } from "@claudexor/schema";
+export function parseHarnessListQuery(url) {
+    assertOnlyQueryParams(url, ["fresh", "all", "harness"]);
+    const fresh = optionalBooleanQuery(url, "fresh");
+    const includeFakes = optionalBooleanQuery(url, "all");
+    const harnessValues = url.searchParams.getAll("harness");
+    if (harnessValues.some((id) => id.trim().length === 0)) {
+        throw new Error("harness query parameters must be non-empty");
+    }
+    const harnessIds = harnessValues.map((id) => id.trim());
+    return {
+        ...(fresh === undefined ? {} : { fresh }),
+        ...(includeFakes === undefined ? {} : { includeFakes }),
+        ...(harnessIds.length === 0 ? {} : { harnessIds }),
+    };
+}
+export function parseCredentialProfilesSnapshotQuery(url) {
+    assertOnlyQueryParams(url, ["snapshot"]);
+    const snapshot = optionalBooleanQuery(url, "snapshot") ?? false;
+    return {
+        input: { snapshot },
+        schema: snapshot
+            ? ControlCredentialProfilesSnapshotResponse
+            : ControlCredentialProfilesResponse,
+    };
+}
+export function parseRunApplicabilityQuery(url) {
+    assertOnlyQueryParams(url, ["repoRoot"]);
+    const repoRoot = singleQuery(url, "repoRoot");
+    if (repoRoot === undefined || repoRoot.trim().length === 0) {
+        throw new Error("repoRoot query parameter is required");
+    }
+    return { repoRoot };
+}
+//# sourceMappingURL=catalog-query.js.map

package/dist/catalog-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-query.js","sourceRoot":"","sources":["../src/catalog-query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACtF,OAAO,EACL,iCAAiC,EACjC,yCAAyC,GAC1C,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,UAAU,qBAAqB,CAAC,GAAQ;IAC5C,qBAAqB,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO;QACL,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,GAAQ;IAC3D,qBAAqB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC;IAChE,OAAO;QACL,KAAK,EAAE,EAAE,QAAQ,EAAE;QACnB,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,yCAAyC;YAC3C,CAAC,CAAC,iCAAiC;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAQ;IACjD,qBAAqB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC"}