@claudexor/control-api 3.1.1 → 3.2.0

package/dist/decision-rerun.js

@@ -1,12 +1,21 @@
 import { ControlRunDecisionResponse, ControlRunStartRequest, } from "@claudexor/schema";
-import { recordTurnEnqueueFailure } from "./thread-turn-routes.js";
+import { recordTurnEnqueueFailure, turnEnqueueProblemResponse } from "./thread-turn-routes.js";
+import { resolveThreadRecoveryTurn } from "./thread-recovery.js";
+import { TERMINAL_STATES } from "./sse-shared.js";
 import * as runStart from "./run-start.js";
 export async function rerunWithFeedback(ctx, rec, body, idempotencyKey, res) {
     if (!body.feedback?.trim())
         return ctx.json(res, 400, { error: "feedback is required" });
     const source = paramsRecord(rec);
+    if (typeof source["delegatedFromRunId"] === "string") {
+        return ctx.json(res, 409, {
+            error: "Decision rerun is unavailable for a Delegate child after its parent authority ends; use Run Again to create an ordinary editable run",
+            code: "delegated_child_rerun_unavailable",
+            retryable: false,
+        });
+    }
     const originalPrompt = typeof source["prompt"] === "string" ? source["prompt"] : "";
-    const { turnId: _turnId, planRunId: _planRunId, planRef: _planRef, ...original } = source;
+    const { turnId: _turnId, planRunId: _planRunId, planRef: _planRef, retryOf: _retryOf, protectedPathApprovals: _protectedPathApprovals, ...original } = source;
     let params;
     try {
         params = runStart.normalizeRunStart(ControlRunStartRequest.parse({
@@ -21,56 +30,78 @@ export async function rerunWithFeedback(ctx, rec, body, idempotencyKey, res) {
         });
     }
     const threadId = typeof source["threadId"] === "string" ? source["threadId"] : null;
-    let turnId;
-    if (threadId && ctx.services?.createThreadTurn) {
-        const turn = (await ctx.services.createThreadTurn(threadId, params.prompt, {
-            kind: "decision",
-            parentRunId: rec.runId ?? rec.id,
-            idempotency: {
+    const rerun = async () => {
+        let turnId;
+        if (threadId) {
+            const idempotency = {
                 key: idempotencyKey,
                 client: "control-api",
                 request: { runId: rec.runId ?? rec.id, body },
-            },
+            };
+            const turn = await resolveThreadRecoveryTurn(ctx.daemon, ctx.services, rec, threadId, params.prompt, { kind: "decision", parentRunId: rec.runId ?? rec.id }, idempotency, (existingTurnId) => ctx.daemon.findAccepted?.({ ...params, turnId: existingTurnId }, {
+                idempotencyKey,
+                clientId: "control-api",
+                operation: "run.decision.rerun",
+                idempotencyRequest: idempotency.request,
+            }) ?? Promise.resolve(null));
+            turnId = turn.id;
+        }
+        let job;
+        try {
+            job = await ctx.daemon.enqueue({ ...params, ...(turnId ? { turnId } : {}) }, {
+                idempotencyKey,
+                clientId: "control-api",
+                operation: "run.decision.rerun",
+                idempotencyRequest: { runId: rec.runId ?? rec.id, body },
+            });
+        }
+        catch (error) {
+            const problem = recordTurnEnqueueFailure(ctx.services?.setTurnEnqueueError, turnId, error);
+            const status = error && typeof error === "object" && "status" in error
+                ? Number(error.status)
+                : 500;
+            return ctx.json(res, status, turnEnqueueProblemResponse(problem, {
+                ...(threadId ? { threadId } : {}),
+                ...(turnId ? { turnId } : {}),
+            }));
+        }
+        let run;
+        try {
+            run = await ctx.waitForRunStart(job.id);
+        }
+        catch (error) {
+            return ctx.json(res, 500, {
+                error: `rerun job ${job.id} was accepted but its start could not be observed: ${error instanceof Error ? error.message : String(error)}`,
+                jobId: job.id,
+                ...(turnId ? { turnId } : {}),
+            });
+        }
+        if (!run.runId && TERMINAL_STATES.has(run.state)) {
+            const refusal = runStart.unboundRunStartResponse(run, true, {
+                ...(threadId ? { threadId } : {}),
+                ...(turnId ? { turnId } : {}),
+            });
+            return ctx.json(res, refusal.status, refusal.body);
+        }
+        // The daemon command journal is the idempotency authority. Only the
+        // request that durably accepted the command owns this audit side effect;
+        // same-key replays return the same run without duplicating history.
+        if (job.reused === false) {
+            ctx.appendAudit(rec, {
+                decision: body.action,
+                ...(run.runId ? { new_run_id: run.runId } : { new_job_id: run.id }),
+            });
+        }
+        ctx.json(res, 200, ControlRunDecisionResponse.parse({
+            accepted: true,
+            status: "requeued",
+            ...(run.runId ? { newRunId: run.runId } : {}),
+            message: run.runId
+                ? "follow-up run enqueued with reviewer feedback"
+                : "follow-up job enqueued; run start is still pending",
         }));
-        turnId = turn.id;
-    }
-    let job;
-    try {
-        job = await ctx.daemon.enqueue({ ...params, ...(turnId ? { turnId } : {}) }, {
-            idempotencyKey,
-            clientId: "control-api",
-            operation: "run.decision.rerun",
-            idempotencyRequest: { runId: rec.runId ?? rec.id, body },
-        });
-    }
-    catch (error) {
-        recordTurnEnqueueFailure(ctx.services?.setTurnEnqueueError, turnId, error);
-        const status = error && typeof error === "object" && "status" in error
-            ? Number(error.status)
-            : 500;
-        return ctx.json(res, status, {
-            error: error instanceof Error ? error.message : "rerun enqueue failed",
-            ...(turnId ? { turnId, retryable: false } : {}),
-        });
-    }
-    let run;
-    try {
-        run = await ctx.waitForRunStart(job.id);
-    }
-    catch (error) {
-        return ctx.json(res, 500, {
-            error: `rerun job ${job.id} was accepted but its start could not be observed: ${error instanceof Error ? error.message : String(error)}`,
-            jobId: job.id,
-            ...(turnId ? { turnId } : {}),
-        });
-    }
-    ctx.appendAudit(rec, { decision: body.action, new_run_id: run.runId ?? run.id });
-    ctx.json(res, 200, ControlRunDecisionResponse.parse({
-        accepted: true,
-        status: "requeued",
-        newRunId: run.runId ?? run.id,
-        message: "follow-up run enqueued with reviewer feedback",
-    }));
+    };
+    return threadId ? ctx.serializeThreadMutation(threadId, rerun) : rerun();
 }
 function paramsRecord(rec) {
     return rec.params && typeof rec.params === "object" && !Array.isArray(rec.params)

package/dist/decision-rerun.js.map

@@ -1 +1 @@
-{"version":3,"file":"decision-rerun.js","sourceRoot":"","sources":["../src/decision-rerun.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GAEvB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAe3C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAyB,EACzB,GAAoB,EACpB,IAA+B,EAC/B,cAAsB,EACtB,GAAmB;IAEnB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,cAAc,GAAG,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;IAC1F,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,iBAAiB,CACjC,sBAAsB,CAAC,KAAK,CAAC;YAC3B,GAAG,QAAQ;YACX,MAAM,EAAE,GAAG,cAAc,4DAA4D,IAAI,CAAC,QAAQ,EAAE;YACpG,WAAW,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE;SACjC,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,wCAAwC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACxG,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,IAAI,MAA0B,CAAC;IAC/B,IAAI,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;YACzE,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE;YAChC,WAAW,EAAE;gBACX,GAAG,EAAE,cAAc;gBACnB,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE;aAC9C;SACF,CAAC,CAAmB,CAAC;QACtB,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,GAAmB,CAAC;IACxB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAC5B,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC5C;YACE,cAAc;YACd,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,oBAAoB;YAC/B,kBAAkB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE;SACzD,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wBAAwB,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3E,MAAM,MAAM,GACV,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK;YACrD,CAAC,CAAC,MAAM,CAAE,KAA4B,CAAC,MAAM,CAAC;YAC9C,CAAC,CAAC,GAAG,CAAC;QACV,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE;YAC3B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;YACtE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAoB,CAAC;IACzB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,aAAa,GAAG,CAAC,EAAE,sDAAsD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YACxI,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,GAAG,CAAC,IAAI,CACN,GAAG,EACH,GAAG,EACH,0BAA0B,CAAC,KAAK,CAAC;QAC/B,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE;QAC7B,OAAO,EAAE,+CAA+C;KACzD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAoB;IACxC,OAAO,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAC/E,CAAC,CAAE,GAAG,CAAC,MAAkC;QACzC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}
+{"version":3,"file":"decision-rerun.js","sourceRoot":"","sources":["../src/decision-rerun.ts"],"names":[],"mappings":"AACA,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,GAEvB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAgB3C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,GAAyB,EACzB,GAAoB,EACpB,IAA+B,EAC/B,cAAsB,EACtB,GAAmB;IAEnB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzF,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,OAAO,MAAM,CAAC,oBAAoB,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EACH,sIAAsI;YACxI,IAAI,EAAE,mCAAmC;YACzC,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,MAAM,EACJ,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,QAAQ,EACjB,OAAO,EAAE,QAAQ,EACjB,sBAAsB,EAAE,uBAAuB,EAC/C,GAAG,QAAQ,EACZ,GAAG,MAAM,CAAC;IACX,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,iBAAiB,CACjC,sBAAsB,CAAC,KAAK,CAAC;YAC3B,GAAG,QAAQ;YACX,MAAM,EAAE,GAAG,cAAc,4DAA4D,IAAI,CAAC,QAAQ,EAAE;YACpG,WAAW,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE;SACjC,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;YACxB,KAAK,EAAE,wCAAwC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SACxG,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;QACtC,IAAI,MAA0B,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,WAAW,GAAG;gBAClB,GAAG,EAAE,cAAc;gBACnB,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE;aAC9C,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAC1C,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,QAAQ,EACZ,GAAG,EACH,QAAQ,EACR,MAAM,CAAC,MAAM,EACb,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,EACtD,WAAW,EACX,CAAC,cAAc,EAAE,EAAE,CACjB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CACvB,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,EACrC;gBACE,cAAc;gBACd,QAAQ,EAAE,aAAa;gBACvB,SAAS,EAAE,oBAAoB;gBAC/B,kBAAkB,EAAE,WAAW,CAAC,OAAO;aACxC,CACF,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAC7B,CAAC;YACF,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,GAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAC5B,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAC5C;gBACE,cAAc;gBACd,QAAQ,EAAE,aAAa;gBACvB,SAAS,EAAE,oBAAoB;gBAC/B,kBAAkB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE;aACzD,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,wBAAwB,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3F,MAAM,MAAM,GACV,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK;gBACrD,CAAC,CAAC,MAAM,CAAE,KAA4B,CAAC,MAAM,CAAC;gBAC9C,CAAC,CAAC,GAAG,CAAC;YACV,OAAO,GAAG,CAAC,IAAI,CACb,GAAG,EACH,MAAM,EACN,0BAA0B,CAAC,OAAO,EAAE;gBAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBACxB,KAAK,EAAE,aAAa,GAAG,CAAC,EAAE,sDAAsD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBACxI,KAAK,EAAE,GAAG,CAAC,EAAE;gBACb,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,uBAAuB,CAAC,GAAG,EAAE,IAAI,EAAE;gBAC1D,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9B,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QACD,oEAAoE;QACpE,yEAAyE;QACzE,oEAAoE;QACpE,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE;gBACnB,QAAQ,EAAE,IAAI,CAAC,MAAM;gBACrB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;aACpE,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,IAAI,CACN,GAAG,EACH,GAAG,EACH,0BAA0B,CAAC,KAAK,CAAC;YAC/B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,UAAU;YAClB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,GAAG,CAAC,KAAK;gBAChB,CAAC,CAAC,+CAA+C;gBACjD,CAAC,CAAC,oDAAoD;SACzD,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,YAAY,CAAC,GAAoB;IACxC,OAAO,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAC/E,CAAC,CAAE,GAAG,CAAC,MAAkC;QACzC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/delegation-control.d.ts

@@ -0,0 +1,23 @@
+export interface DelegationControlRecord {
+    id: string;
+    runId?: string;
+    state: string;
+}
+export interface DelegationControlDaemon {
+    status(id: string): Promise<DelegationControlRecord>;
+    cancel(id: string): Promise<unknown>;
+    fenceDelegationParent?(runId: string): Promise<unknown>;
+}
+/** Fence admission, cancel the whole family, and wait for child settlement.
+ * Every cancel is attempted even after another fails; the collected failure is
+ * reported only after the parent has also been signalled. */
+export declare function cancelDelegationFamily(input: {
+    daemon: DelegationControlDaemon;
+    parent: DelegationControlRecord;
+    descendantsAfterFence: () => Promise<DelegationControlRecord[]>;
+    timeoutMs?: number;
+    pollMs?: number;
+}): Promise<{
+    descendants: DelegationControlRecord[];
+}>;
+//# sourceMappingURL=delegation-control.d.ts.map

package/dist/delegation-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-control.d.ts","sourceRoot":"","sources":["../src/delegation-control.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,qBAAqB,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzD;AAID;;6DAE6D;AAC7D,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,uBAAuB,CAAC;IAChC,qBAAqB,EAAE,MAAM,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,uBAAuB,EAAE,CAAA;CAAE,CAAC,CA+EtD"}

package/dist/delegation-control.js

@@ -0,0 +1,81 @@
+const terminal = (state) => state !== "queued" && state !== "running";
+/** Fence admission, cancel the whole family, and wait for child settlement.
+ * Every cancel is attempted even after another fails; the collected failure is
+ * reported only after the parent has also been signalled. */
+export async function cancelDelegationFamily(input) {
+    const parentRunId = input.parent.runId ?? input.parent.id;
+    const failures = [];
+    let parentSignalled = false;
+    try {
+        if (!input.daemon.fenceDelegationParent)
+            throw new Error("daemon does not expose a fence");
+        await input.daemon.fenceDelegationParent(parentRunId);
+    }
+    catch (error) {
+        const fenceFailure = `fence: ${error instanceof Error ? error.message : String(error)}`;
+        // Without a confirmed fence, abort the parent BEFORE taking the child
+        // snapshot. Daemon cancellation fences its live run authority atomically,
+        // so no new child can enter the family between snapshot and cascade.
+        try {
+            await input.daemon.cancel(input.parent.id);
+            parentSignalled = true;
+        }
+        catch (cancelError) {
+            failures.push(fenceFailure);
+            failures.push(`parent ${parentRunId}: ${cancelError instanceof Error ? cancelError.message : String(cancelError)}`);
+        }
+    }
+    let descendants = [];
+    try {
+        descendants = await input.descendantsAfterFence();
+    }
+    catch (error) {
+        failures.push(`descendant snapshot: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    const active = descendants.filter((record) => !terminal(record.state)).reverse();
+    for (const child of active) {
+        try {
+            await input.daemon.cancel(child.id);
+        }
+        catch (error) {
+            failures.push(`child ${child.runId ?? child.id}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    if (!parentSignalled) {
+        try {
+            await input.daemon.cancel(input.parent.id);
+            parentSignalled = true;
+        }
+        catch (error) {
+            failures.push(`parent ${parentRunId}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    const deadline = Date.now() + (input.timeoutMs ?? 10_000);
+    const pollMs = input.pollMs ?? 25;
+    for (const child of active) {
+        for (;;) {
+            try {
+                const current = await input.daemon.status(child.id);
+                if (terminal(current.state))
+                    break;
+            }
+            catch (error) {
+                failures.push(`child ${child.runId ?? child.id} status: ${error instanceof Error ? error.message : String(error)}`);
+                break;
+            }
+            if (Date.now() >= deadline) {
+                failures.push(`child ${child.runId ?? child.id}: terminal drain timed out`);
+                break;
+            }
+            await new Promise((resolve) => setTimeout(resolve, pollMs));
+        }
+    }
+    if (failures.length > 0) {
+        throw Object.assign(new Error(`delegation family cancellation incomplete: ${failures.join("; ")}`), {
+            code: "delegation_cancel_incomplete",
+            status: 503,
+        });
+    }
+    return { descendants: active.reverse() };
+}
+//# sourceMappingURL=delegation-control.js.map

package/dist/delegation-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-control.js","sourceRoot":"","sources":["../src/delegation-control.ts"],"names":[],"mappings":"AAYA,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC;AAEvF;;6DAE6D;AAC7D,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAM5C;IACC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC3F,MAAM,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,sEAAsE;QACtE,0EAA0E;QAC1E,qEAAqE;QACrE,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3C,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,WAAW,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC5B,QAAQ,CAAC,IAAI,CACX,UAAU,WAAW,KAAK,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CACrG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,WAAW,GAA8B,EAAE,CAAC;IAChD,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,IAAI,CAAC,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CACX,SAAS,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3C,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CACX,UAAU,WAAW,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,SAAS,CAAC;YACR,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACpD,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM;YACrC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,QAAQ,CAAC,IAAI,CACX,SAAS,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,YAAY,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrG,CAAC;gBACF,MAAM;YACR,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,4BAA4B,CAAC,CAAC;gBAC5E,MAAM;YACR,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAC9E;YACE,IAAI,EAAE,8BAA8B;YACpC,MAAM,EAAE,GAAG;SACZ,CACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;AAC3C,CAAC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 export * from "./daemon-server.js";
 export * from "./operation-catalog.js";
 export * from "./retention.js";
+export { normalizeExistingProjectRoot } from "./run-start.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -1,4 +1,5 @@
 export * from "./daemon-server.js";
 export * from "./operation-catalog.js";
 export * from "./retention.js";
+export { normalizeExistingProjectRoot } from "./run-start.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/maintenance-routes.d.ts

@@ -1,5 +1,5 @@
 import type { IncomingMessage, ServerResponse } from "node:http";
-import { ControlGcRequest, type ControlGcReceipt } from "@claudexor/schema";
+import { ControlGcReceipt, ControlGcRequest } from "@claudexor/schema";
 export interface MaintenanceRouteServices {
     /** One retention pass over engine-owned runtime artifacts (W3.6). */
     runRetention(request: ControlGcRequest): Promise<ControlGcReceipt>;
@@ -8,7 +8,7 @@ export interface MaintenanceRouteContext {
     services?: Partial<MaintenanceRouteServices>;
     readBody(req: IncomingMessage): Promise<unknown>;
     json(res: ServerResponse, status: number, body: unknown): void;
-    requestError(res: ServerResponse, error: unknown): void;
+    requestError(res: ServerResponse, error: unknown, fallbackStatus?: 400 | 500): void;
 }
 export declare function handleMaintenanceRoute(ctx: MaintenanceRouteContext, method: string, path: string, req: IncomingMessage, res: ServerResponse): Promise<boolean>;
 //# sourceMappingURL=maintenance-routes.d.ts.map

package/dist/maintenance-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance-routes.d.ts","sourceRoot":"","sources":["../src/maintenance-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,MAAM,WAAW,wBAAwB;IACvC,qEAAqE;IACrE,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/D,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CACzD;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,uBAAuB,EAC5B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,CAYlB"}
+{"version":3,"file":"maintenance-routes.d.ts","sourceRoot":"","sources":["../src/maintenance-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAGvE,MAAM,WAAW,wBAAwB;IACvC,qEAAqE;IACrE,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/D,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC;CACrF;AAED,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,uBAAuB,EAC5B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,CAelB"}

package/dist/maintenance-routes.js

@@ -1,16 +1,17 @@
-import { ControlGcRequest } from "@claudexor/schema";
+import { ControlGcReceipt, ControlGcRequest } from "@claudexor/schema";
+import { routeValue, serviceResponse } from "./route-stages.js";
 export async function handleMaintenanceRoute(ctx, method, path, req, res) {
     if (method === "POST" && path === "/maintenance/gc") {
-        if (!ctx.services?.runRetention)
+        const service = ctx.services?.runRetention;
+        if (!service)
             return false;
-        try {
-            const request = ControlGcRequest.parse((await ctx.readBody(req)) ?? {});
-            ctx.json(res, 200, await ctx.services.runRetention(request));
-        }
-        catch (error) {
-            ctx.requestError(res, error);
-        }
-        return true;
+        const request = await routeValue(ctx, res, 400, async () => ControlGcRequest.parse((await ctx.readBody(req)) ?? {}));
+        if (!request.ok)
+            return true;
+        const receipt = await routeValue(ctx, res, 500, () => service(request.value));
+        if (!receipt.ok)
+            return true;
+        return serviceResponse(ctx, res, "runRetention", () => ctx.json(res, 200, ControlGcReceipt.parse(receipt.value)));
     }
     return false;
 }

package/dist/maintenance-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"maintenance-routes.js","sourceRoot":"","sources":["../src/maintenance-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAyB,MAAM,mBAAmB,CAAC;AAc5E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAA4B,EAC5B,MAAc,EACd,IAAY,EACZ,GAAoB,EACpB,GAAmB;IAEnB,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACpD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY;YAAE,OAAO,KAAK,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"maintenance-routes.js","sourceRoot":"","sources":["../src/maintenance-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAchE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAA4B,EAC5B,MAAc,EACd,IAAY,EACZ,GAAoB,EACpB,GAAmB;IAEnB,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CACzD,gBAAgB,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CACxD,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC7B,OAAO,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CACpD,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/operation-catalog.d.ts

@@ -17,28 +17,28 @@ export declare function resolveControlProtocol(input: {
 export declare const OPERATION_CATALOG: {
     protocolMajor: 3;
     operations: {
+        id: string;
+        method: "DELETE" | "GET" | "PATCH" | "POST" | "PUT";
         path: string;
         summary: string;
-        id: string;
         auth: "loopback_bearer" | "loopback_only";
-        mutability: "read_only" | "mutating";
-        method: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
         requestSchema: string | null;
         parameters: {
             name: string;
-            description: string;
-            required: boolean;
             location: "header" | "query";
+            required: boolean;
             repeatable: boolean;
             enum: string[] | null;
             schemaRef: string | null;
+            description: string;
         }[];
         responseSchema: string | null;
         errorSchema: "ControlProblem";
-        idempotency: "none" | "natural" | "key_required";
-        applicability: "project" | "run" | "thread" | "global";
-        responseKind: "stream" | "binary" | "json";
-        completion: "immediate" | "durable_handle" | "terminal_stream";
+        mutability: "mutating" | "read_only";
+        idempotency: "key_required" | "natural" | "none";
+        applicability: "global" | "project" | "run" | "thread";
+        responseKind: "binary" | "json" | "stream";
+        completion: "durable_handle" | "immediate" | "terminal_stream";
     }[];
 };
 //# sourceMappingURL=operation-catalog.d.ts.map

package/dist/operation-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operation-catalog.d.ts","sourceRoot":"","sources":["../src/operation-catalog.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAY7E,+FAA+F;AAC/F,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9C,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAClC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA2EnC;AAmgBD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;CAG5B,CAAC"}
+{"version":3,"file":"operation-catalog.d.ts","sourceRoot":"","sources":["../src/operation-catalog.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAY7E,+FAA+F;AAC/F,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9C,QAAQ,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;CAClC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CA2EnC;AA8aD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;CAG5B,CAAC"}

package/dist/operation-catalog.js

@@ -1,6 +1,8 @@
 import { CONTROL_PROTOCOL_MAJOR, ControlHandshakeRequest, ControlHandshakeResponse, ControlOperationCatalog, ControlProblem, ControlRunState, } from "@claudexor/schema";
 import { engineBuildIdentity } from "@claudexor/util";
 import { pathnameDecodes, queryParam, resumeHeader } from "./operation-parameters.js";
+import { REMOTE_OPERATION_DRAFTS } from "./remote-operation-descriptors.js";
+import { OPERATION_SUMMARIES } from "./operation-summaries.js";
 const protocolProblem = (code, message, requiredActions = []) => ControlProblem.parse({
     code,
     message,
@@ -110,84 +112,6 @@ function descriptor(input) {
         completion: input.completion ?? (input.responseKind === "stream" ? "terminal_stream" : "immediate"),
     };
 }
-/**
- * Human one-line summaries, keyed by `${method} ${path}`, co-located with the
- * descriptors they annotate. This IS the descriptor summary data (not a shadow
- * of another table) — descriptor() throws if a route has no entry, so the map
- * can never silently drift from the operations array.
- */
-const OPERATION_SUMMARIES = {
-    "POST /v2/uploads": "Create a single-request streaming upload session for an attachment of the declared size.",
-    "PUT /v2/uploads/:id/bytes": "Stream the complete declared byte body in ONE request. The store is single-shot: a short, oversized, or interrupted PUT cancels the upload and discards partial bytes — retry by creating a new upload and resending from byte zero. Not resumable.",
-    "GET /v2/uploads/:id": "Read an upload session's status and received byte count (diagnostic on a cancelled upload, not a resumable offset).",
-    "DELETE /v2/uploads/:id": "Abort and discard an in-progress upload session.",
-    "POST /v2/uploads/:id/finalize": "Finalize an upload into a durable attachment resource.",
-    "POST /v2/handshake": "Negotiate the control protocol major before product calls.",
-    "GET /v2/operations": "List the implemented operations (this catalog).",
-    "POST /v2/maintenance/gc": "Run retention garbage collection over expired run trees.",
-    "GET /v2/agent-capabilities": "List the agent capability catalog this engine advertises.",
-    "GET /v2/global/events": "Subscribe to the global cross-project event stream (SSE).",
-    "GET /v2/quota": "Read cached per-profile harness quota snapshots.",
-    "POST /v2/quota": "Refresh and read per-profile harness quota snapshots.",
-    "GET /v2/credential-profiles": "List credential profiles per harness.",
-    "POST /v2/credential-profiles": "Create a credential profile for a harness.",
-    "PATCH /v2/credential-profiles/:harness/:profileId": "Toggle a credential profile's enabled state (the accounts Enabled row).",
-    "DELETE /v2/credential-profiles/:harness/:profileId": "Delete a harness credential profile.",
-    "GET /v2/harnesses": "List installed harnesses and their availability.",
-    "GET /v2/projects": "List registered projects (durable handles).",
-    "POST /v2/projects": "Register a project root as a durable handle.",
-    "POST /v2/projects/:id/relink": "Relink a registered project to a new root.",
-    "DELETE /v2/projects/:id": "Remove a registered project: retire the registry entry and archive its journal partition. Refused (409) while any non-purged thread or live/queued run references it; run artifacts are left to normal GC.",
-    "GET /v2/projects/:id/events": "Subscribe to a project's event stream (SSE).",
-    "GET /v2/projects/:id/outputs": "List a project's durable outputs (artifacts/).",
-    "GET /v2/projects/:id/outputs/<path>": "Fetch one durable output file from a project.",
-    "GET /v2/harnesses/:id/models": "List a harness's selectable models.",
-    "POST /v2/harnesses/:id/auth-readiness": "Re-check a harness's auth readiness (dry).",
-    "GET /v2/runs": "List a bounded, newest-first, keyset-paginated page of durable run summaries visible to the daemon.",
-    "POST /v2/runs": "Start a run and return its durable handle.",
-    "GET /v2/runs/:id": "Read a run's full detail snapshot.",
-    "POST /v2/runs/:id/retry": "Retry a run, returning a new durable handle.",
-    "GET /v2/runs/:id/run-again": "Draft a run-again request from a prior run.",
-    "POST /v2/runs/:id/apply": "Apply a run's work product to the live tree; replay of an already-delivered run is a typed idempotent no-op.",
-    "POST /v2/runs/:id/apply/check": "Dry-check whether a run's patch would apply; an already-delivered run reports the safe already-applied no-op.",
-    "GET /v2/runs/:id/artifacts": "List a run tree's technical artifacts.",
-    "GET /v2/runs/:id/artifacts/<path>": "Fetch one artifact file from a run tree.",
-    "POST /v2/runs/:id/control": "Send a control signal (cancel/pause) to a run.",
-    "POST /v2/runs/:id/decision": "Record an operator unblock/rerun decision on a run.",
-    "GET /v2/runs/:id/events": "Replay + tail a run's event stream (SSE).",
-    "POST /v2/runs/:id/interactions/:id/answer": "Answer a run's pending interactive question.",
-    "GET /v2/runs/:id/produced": "List a run's produced project outputs.",
-    "GET /v2/runs/:id/produced/<path>": "Fetch one produced project-output file from a run.",
-    "GET /v2/threads": "List conversation threads.",
-    "POST /v2/threads": "Create a conversation thread.",
-    "GET /v2/threads/:id": "Read a thread's detail (turns + head).",
-    "PATCH /v2/threads/:id": "Update a thread's sticky settings (harness/profile/access).",
-    "POST /v2/threads/:id/trash": "Move a thread to trash.",
-    "POST /v2/threads/:id/restore": "Restore a thread from trash.",
-    "POST /v2/threads/:id/purge": "Permanently purge a trashed thread.",
-    "POST /v2/threads/:id/apply": "Apply the thread's latest run work product.",
-    "POST /v2/threads/:id/turns": "Enqueue a new turn on a thread.",
-    "POST /v2/threads/:id/turns/:id/retry": "Retry a thread turn.",
-    "GET /v2/trust": "List protected-path trust state.",
-    "POST /v2/trust": "Update protected-path trust state.",
-    "GET /v2/settings": "Read the settings snapshot.",
-    "POST /v2/settings": "Update settings.",
-    "GET /v2/secrets": "List stored secret handles (values never returned).",
-    "POST /v2/secrets": "Set a stored secret value.",
-    "DELETE /v2/secrets/:id": "Delete a stored secret.",
-    "GET /v2/setup/jobs": "List harness setup/login jobs.",
-    "POST /v2/setup/jobs": "Start a harness setup/login job.",
-    "GET /v2/setup/jobs/:id": "Read a setup job's status.",
-    "GET /v2/setup/jobs/:id/snapshot": "Read a setup job's terminal snapshot.",
-    "GET /v2/setup/jobs/:id/events": "Tail a setup job's event stream (SSE).",
-    "POST /v2/setup/jobs/:id/cancel": "Cancel a setup job.",
-    "POST /v2/setup/jobs/:id/reconcile": "Reconcile a setup job's state.",
-    "POST /v2/setup/jobs/:id/extend": "Extend a setup job's deadline.",
-    "GET /v2/recovery/partitions/:id": "Inspect a journal partition for recovery.",
-    "POST /v2/recovery/partitions/:id/validate": "Validate a journal partition (dry).",
-    "POST /v2/recovery/partitions/:id/export": "Export a journal partition (dry).",
-    "POST /v2/recovery/partitions/:id/quarantine": "Quarantine a corrupt journal partition.",
-};
 const j = (method, path, mutability, requestSchema = null, responseSchema = null, extra = {}) => descriptor({
     method,
     path,
@@ -211,6 +135,16 @@ const operations = [
         idempotency: "natural",
     }),
     j("GET", "/v2/agent-capabilities", "read_only", null, "AgentCapabilityCatalog"),
+    j("GET", "/v2/run-applicability", "read_only", null, "ControlRunApplicabilityResponse", {
+        applicability: "project",
+        parameters: [
+            queryParam({
+                name: "repoRoot",
+                required: true,
+                description: "Absolute existing project root whose protected-path policy and Git prerequisite should be projected.",
+            }),
+        ],
+    }),
     j("GET", "/v2/global/events", "read_only", null, null, {
         responseKind: "stream",
         parameters: [
@@ -218,7 +152,15 @@ const operations = [
         ],
     }),
     j("GET", "/v2/quota", "read_only", null, "ControlQuotaResponse"),
-    j("GET", "/v2/credential-profiles", "read_only", null, "ControlCredentialProfilesResponse"),
+    j("GET", "/v2/credential-profiles", "read_only", null, "ControlCredentialProfilesQueryResponse", {
+        parameters: [
+            queryParam({
+                name: "snapshot",
+                enum: ["true", "false"],
+                description: "Return one fresh server-authored Accounts snapshot epoch.",
+            }),
+        ],
+    }),
     j("POST", "/v2/credential-profiles", "mutating", "ControlCredentialProfileCreateRequest", "ControlCredentialProfileCreateResponse", { idempotency: "natural" }),
     j("PATCH", "/v2/credential-profiles/:harness/:profileId", "mutating", "ControlCredentialProfileUpdateRequest", "ControlCredentialProfileUpdateResponse", { idempotency: "natural" }),
     j("DELETE", "/v2/credential-profiles/:harness/:profileId", "mutating", null, "ControlCredentialProfileDeleteResponse", { idempotency: "natural" }),
@@ -245,6 +187,7 @@ const operations = [
         ],
     }),
     j("GET", "/v2/projects", "read_only", null, "ControlProjectListResponse"),
+    ...REMOTE_OPERATION_DRAFTS.map(descriptor),
     j("POST", "/v2/projects", "mutating", "ControlProjectRegisterRequest", "ControlProject", {
         idempotency: "key_required",
     }),