@claudexor/control-api 3.1.2 → 3.3.7-rc.0

package/dist/authorization.d.ts

@@ -0,0 +1,3 @@
+/** Parse the HTTP Bearer credential without overlapping regular-expression quantifiers. */
+export declare function bearerCredential(header: string | undefined): string | undefined;
+//# sourceMappingURL=authorization.d.ts.map

package/dist/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../src/authorization.ts"],"names":[],"mappings":"AAEA,2FAA2F;AAC3F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAS/E"}

package/dist/authorization.js

@@ -0,0 +1,15 @@
+const BEARER_SCHEME = "bearer";
+/** Parse the HTTP Bearer credential without overlapping regular-expression quantifiers. */
+export function bearerCredential(header) {
+    if (!header || header.slice(0, BEARER_SCHEME.length).toLowerCase() !== BEARER_SCHEME) {
+        return undefined;
+    }
+    let cursor = BEARER_SCHEME.length;
+    if (header[cursor] !== " " && header[cursor] !== "\t")
+        return undefined;
+    while (header[cursor] === " " || header[cursor] === "\t")
+        cursor += 1;
+    const credential = header.slice(cursor).trim();
+    return credential || undefined;
+}
+//# sourceMappingURL=authorization.js.map

package/dist/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../src/authorization.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,QAAQ,CAAC;AAE/B,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,MAA0B;IACzD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,aAAa,EAAE,CAAC;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,CAAC,CAAC;IACtE,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,OAAO,UAAU,IAAI,SAAS,CAAC;AACjC,CAAC"}

package/dist/binary-response.d.ts

@@ -0,0 +1,5 @@
+import type { ServerResponse } from "node:http";
+/** RFC 6266/RFC 5987 filename projection with an ASCII compatibility fallback. */
+export declare function inlineContentDisposition(fileName: string): string;
+export declare function writeBinaryResponse(response: ServerResponse, status: number, body: Buffer, contentType: string, fileName: string): void;
+//# sourceMappingURL=binary-response.d.ts.map

package/dist/binary-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-response.d.ts","sourceRoot":"","sources":["../src/binary-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgBjE;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACf,IAAI,CAiBN"}

package/dist/binary-response.js

@@ -0,0 +1,31 @@
+/** RFC 6266/RFC 5987 filename projection with an ASCII compatibility fallback. */
+export function inlineContentDisposition(fileName) {
+    const validUtf8 = Buffer.from(fileName, "utf8")
+        .toString("utf8")
+        .normalize("NFC")
+        .replace(/[\u0000-\u001f\u007f]/g, "_");
+    const bounded = [...validUtf8].slice(0, 180).join("") || "remote-file";
+    const fallback = [...bounded]
+        .map((character) => (/^[A-Za-z0-9._ -]$/.test(character) ? character : "_"))
+        .join("")
+        .slice(0, 180) || "remote-file";
+    const encoded = encodeURIComponent(bounded).replace(/[!'()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`);
+    return `inline; filename="${fallback}"; filename*=UTF-8''${encoded}`;
+}
+export function writeBinaryResponse(response, status, body, contentType, fileName) {
+    if (!Buffer.isBuffer(body) ||
+        typeof contentType !== "string" ||
+        contentType.length === 0 ||
+        typeof fileName !== "string" ||
+        fileName.length === 0) {
+        throw new TypeError("binary response is invalid");
+    }
+    response.writeHead(status, {
+        "content-type": contentType,
+        "content-length": body.length,
+        "content-disposition": inlineContentDisposition(fileName),
+        "cache-control": "private, no-store",
+    });
+    response.end(body);
+}
+//# sourceMappingURL=binary-response.js.map

package/dist/binary-response.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-response.js","sourceRoot":"","sources":["../src/binary-response.ts"],"names":[],"mappings":"AAEA,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC5C,QAAQ,CAAC,MAAM,CAAC;SAChB,SAAS,CAAC,KAAK,CAAC;SAChB,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC;IACvE,MAAM,QAAQ,GACZ,CAAC,GAAG,OAAO,CAAC;SACT,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SAC3E,IAAI,CAAC,EAAE,CAAC;SACR,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC;IACpC,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,CACjD,UAAU,EACV,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CACxE,CAAC;IACF,OAAO,qBAAqB,QAAQ,uBAAuB,OAAO,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAwB,EACxB,MAAc,EACd,IAAY,EACZ,WAAmB,EACnB,QAAgB;IAEhB,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,WAAW,KAAK,QAAQ;QAC/B,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,CAAC,MAAM,KAAK,CAAC,EACrB,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACpD,CAAC;IACD,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACzB,cAAc,EAAE,WAAW;QAC3B,gBAAgB,EAAE,IAAI,CAAC,MAAM;QAC7B,qBAAqB,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QACzD,eAAe,EAAE,mBAAmB;KACrC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/dist/candidates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"candidates.d.ts","sourceRoot":"","sources":["../src/candidates.ts"],"names":[],"mappings":"AASA,OAAO,EACL,gBAAgB,EAGhB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAoB3B,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,gBAAgB,EAAE,CA8DjG"}
+{"version":3,"file":"candidates.d.ts","sourceRoot":"","sources":["../src/candidates.ts"],"names":[],"mappings":"AASA,OAAO,EAEL,gBAAgB,EAKhB,KAAK,cAAc,EACpB,MAAM,mBAAmB,CAAC;AAoB3B,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,gBAAgB,EAAE,CA+DjG"}

package/dist/candidates.js

@@ -7,7 +7,7 @@ import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { join } from "node:path";
 import { parse as parseYaml } from "yaml";
 import { redactSecrets } from "@claudexor/util";
-import { ControlCandidate, ReviewFinding, isBlocking, } from "@claudexor/schema";
+import { ControlCandidate, confinementBoundaryProven, ReviewFinding, isBlocking, } from "@claudexor/schema";
 export function candidatesFor(runDir, decision) {
     const attemptsDir = join(runDir, "attempts");
     if (!existsSync(attemptsDir))
@@ -64,6 +64,7 @@ export function candidatesFor(runDir, decision) {
                 }
                 : null,
             rankingAxes: scorecardRow ? scorecardRow.axes : null,
+            confinement: confinementCard(raw),
         });
         if (parsed.success)
             out.push(parsed.data);
@@ -74,6 +75,30 @@ export function candidatesFor(runDir, decision) {
 function numberOr(v, fallback) {
     return typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : fallback;
 }
+function stringOrNull(v) {
+    return typeof v === "string" && v.length > 0 ? v : null;
+}
+/**
+ * The applied-boundary card, third and last place the absence of a boundary is
+ * disclosed (the attempt record and the child's prompt are the other two).
+ *
+ * `proven` comes from the shared owner rather than from a second reading of the
+ * same two fields, so this projection cannot drift into calling an unproven
+ * mechanism name a boundary. Null only for an attempt whose record carries
+ * neither half — a run that never asked for a boundary at all.
+ */
+function confinementCard(raw) {
+    const mechanism = stringOrNull(raw.confinement_mechanism);
+    const unavailableReason = stringOrNull(raw.confinement_unavailable_reason);
+    if (!mechanism && !unavailableReason)
+        return null;
+    return {
+        proven: confinementBoundaryProven(raw),
+        mechanism,
+        verifiedDeniedPath: stringOrNull(raw.confinement_verified_denied_path),
+        unavailableReason,
+    };
+}
 function readYamlMaybe(path) {
     try {
         if (!existsSync(path))

package/dist/candidates.js.map

@@ -1 +1 @@
-{"version":3,"file":"candidates.js","sourceRoot":"","sources":["../src/candidates.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,UAAU,GAEX,MAAM,mBAAmB,CAAC;AAoB3B,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,QAA+B;IAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,aAAa,CAAa,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;YAAE,SAAS;QAC/F,MAAM,MAAM,GAAG,aAAa,CAAY,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC,CAAC;QACtF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,0DAA0D;QAC1D,uEAAuE;QACvE,wDAAwD;QACxD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC,MAAM,CAAC;QACV,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,KAAqC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,2EAA2E;QAC3E,kEAAkE;QAClE,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,YAAY,GAAG,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC;YACxC,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YACvD,OAAO,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5D,aAAa,EAAE,GAAG,CAAC,cAAc,KAAK,IAAI;YAC1C,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI;YAC7B,wEAAwE;YACxE,qEAAqE;YACrE,yEAAyE;YACzE,sDAAsD;YACtD,WAAW,EACT,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ;gBAC5D,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC9B,CAAC,CAAC,IAAI;YACV,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC9D,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,QAAQ;YACR,cAAc,EAAE,MAAM,EAAE,eAAe,KAAK,IAAI;YAChD,gBAAgB,EACd,GAAG,CAAC,OAAO,KAAK,IAAI;gBAClB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,OAAO,MAAM,EAAE,kBAAkB,KAAK,SAAS;oBAC/C,CAAC,CAAC,MAAM,CAAC,kBAAkB;oBAC3B,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,GAAG,CAAC,UAAU;YAC3C,QAAQ,EACN,GAAG,CAAC,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAC9C,CAAC,CAAC;oBACE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;oBACtC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;oBAC9C,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;iBAC/C;gBACH,CAAC,CAAC,IAAI;YACV,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACrD,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,0EAA0E;IAC1E,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,QAAgB;IAC5C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAI,IAAY;IACpC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,IAAI,CAAa,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"candidates.js","sourceRoot":"","sources":["../src/candidates.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAEL,gBAAgB,EAEhB,yBAAyB,EACzB,aAAa,EACb,UAAU,GAEX,MAAM,mBAAmB,CAAC;AAoB3B,MAAM,UAAU,aAAa,CAAC,MAAc,EAAE,QAA+B;IAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,SAAS,IAAI,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,aAAa,CAAa,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;YAAE,SAAS;QAC/F,MAAM,MAAM,GAAG,aAAa,CAAY,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC,CAAC;QACtF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,0DAA0D;QAC1D,uEAAuE;QACvE,wDAAwD;QACxD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACxC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1C,OAAO,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC,MAAM,CAAC;QACV,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,KAAqC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,2EAA2E;QAC3E,kEAAkE;QAClE,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,YAAY,GAAG,QAAQ,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC;YACxC,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YACvD,OAAO,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5D,aAAa,EAAE,GAAG,CAAC,cAAc,KAAK,IAAI;YAC1C,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI;YAC7B,wEAAwE;YACxE,qEAAqE;YACrE,yEAAyE;YACzE,sDAAsD;YACtD,WAAW,EACT,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ;gBAC5D,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC9B,CAAC,CAAC,IAAI;YACV,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC9D,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,QAAQ;YACR,cAAc,EAAE,MAAM,EAAE,eAAe,KAAK,IAAI;YAChD,gBAAgB,EACd,GAAG,CAAC,OAAO,KAAK,IAAI;gBAClB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,OAAO,MAAM,EAAE,kBAAkB,KAAK,SAAS;oBAC/C,CAAC,CAAC,MAAM,CAAC,kBAAkB;oBAC3B,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,GAAG,CAAC,UAAU;YAC3C,QAAQ,EACN,GAAG,CAAC,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAC9C,CAAC,CAAC;oBACE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;oBACtC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;oBAC9C,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;iBAC/C;gBACH,CAAC,CAAC,IAAI;YACV,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YACpD,WAAW,EAAE,eAAe,CAAC,GAAG,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,0EAA0E;IAC1E,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,QAAgB;IAC5C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,GAAe;IACtC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC1D,MAAM,iBAAiB,GAAG,YAAY,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC3E,IAAI,CAAC,SAAS,IAAI,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO;QACL,MAAM,EAAE,yBAAyB,CAAC,GAAG,CAAC;QACtC,SAAS;QACT,kBAAkB,EAAE,YAAY,CAAC,GAAG,CAAC,gCAAgC,CAAC;QACtE,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAI,IAAY;IACpC,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,IAAI,CAAa,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/catalog-query.d.ts

@@ -0,0 +1,317 @@
+export interface HarnessListQuery {
+    fresh?: boolean;
+    includeFakes?: boolean;
+    harnessIds?: string[];
+}
+export declare function parseHarnessListQuery(url: URL): HarnessListQuery;
+export declare function parseCredentialProfilesSnapshotQuery(url: URL): {
+    input: {
+        snapshot: boolean;
+    };
+    schema: import("zod/v3").ZodObject<{
+        profiles: import("zod/v3").ZodArray<import("zod/v3").ZodObject<{
+            profile: import("zod/v3").ZodEffects<import("zod/v3").ZodObject<{
+                profile_id: import("zod/v3").ZodString;
+                harness_id: import("zod/v3").ZodString;
+                display_name: import("zod/v3").ZodString;
+                credential_kind: import("zod/v3").ZodEnum<["config_dir_login", "oauth_token", "api_key"]>;
+                isolation_locator: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodString>>;
+                secret_ref: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodString>>;
+                enabled: import("zod/v3").ZodDefault<import("zod/v3").ZodBoolean>;
+                created_at: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodString>>;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator: string | null;
+                secret_ref: string | null;
+                enabled: boolean;
+                created_at: string | null;
+            }, {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator?: string | null | undefined;
+                secret_ref?: string | null | undefined;
+                enabled?: boolean | undefined;
+                created_at?: string | null | undefined;
+            }>, {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator: string | null;
+                secret_ref: string | null;
+                enabled: boolean;
+                created_at: string | null;
+            }, {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator?: string | null | undefined;
+                secret_ref?: string | null | undefined;
+                enabled?: boolean | undefined;
+                created_at?: string | null | undefined;
+            }>;
+            status: import("zod/v3").ZodObject<{
+                profile_id: import("zod/v3").ZodString;
+                harness_id: import("zod/v3").ZodString;
+                availability: import("zod/v3").ZodEnum<["available", "unavailable", "unknown"]>;
+                verification: import("zod/v3").ZodEnum<["passed", "failed", "not_run"]>;
+                verification_source: import("zod/v3").ZodDefault<import("zod/v3").ZodEnum<["local_store", "vendor"]>>;
+                detail: import("zod/v3").ZodOptional<import("zod/v3").ZodString>;
+                last_verified_at: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodString>>;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                verification_source: "local_store" | "vendor";
+                detail?: string | undefined;
+                last_verified_at: string | null;
+            }, {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                verification_source?: "local_store" | "vendor" | undefined;
+                detail?: string | undefined;
+                last_verified_at?: string | null | undefined;
+            }>;
+            identity: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodObject<{
+                email: import("zod/v3").ZodOptional<import("zod/v3").ZodString>;
+                plan: import("zod/v3").ZodOptional<import("zod/v3").ZodString>;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                email?: string | undefined;
+                plan?: string | undefined;
+            }, {
+                email?: string | undefined;
+                plan?: string | undefined;
+            }>>>;
+        }, "strict", import("zod/v3").ZodTypeAny, {
+            profile: {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator: string | null;
+                secret_ref: string | null;
+                enabled: boolean;
+                created_at: string | null;
+            };
+            status: {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                verification_source: "local_store" | "vendor";
+                detail?: string | undefined;
+                last_verified_at: string | null;
+            };
+            identity: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null;
+        }, {
+            profile: {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator?: string | null | undefined;
+                secret_ref?: string | null | undefined;
+                enabled?: boolean | undefined;
+                created_at?: string | null | undefined;
+            };
+            status: {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                verification_source?: "local_store" | "vendor" | undefined;
+                detail?: string | undefined;
+                last_verified_at?: string | null | undefined;
+            };
+            identity?: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null | undefined;
+        }>, "many">;
+        harnessAccounts: import("zod/v3").ZodDefault<import("zod/v3").ZodArray<import("zod/v3").ZodObject<{
+            harness_id: import("zod/v3").ZodString;
+            native_credentials_enabled: import("zod/v3").ZodBoolean;
+            native_login_detected: import("zod/v3").ZodBoolean;
+            identity: import("zod/v3").ZodDefault<import("zod/v3").ZodNullable<import("zod/v3").ZodObject<{
+                email: import("zod/v3").ZodOptional<import("zod/v3").ZodString>;
+                plan: import("zod/v3").ZodOptional<import("zod/v3").ZodString>;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                email?: string | undefined;
+                plan?: string | undefined;
+            }, {
+                email?: string | undefined;
+                plan?: string | undefined;
+            }>>>;
+            next_up: import("zod/v3").ZodDiscriminatedUnion<"kind", [import("zod/v3").ZodObject<{
+                kind: import("zod/v3").ZodLiteral<"profile">;
+                profileId: import("zod/v3").ZodString;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                kind: "profile";
+                profileId: string;
+            }, {
+                kind: "profile";
+                profileId: string;
+            }>, import("zod/v3").ZodObject<{
+                kind: import("zod/v3").ZodLiteral<"native">;
+                route: import("zod/v3").ZodOptional<import("zod/v3").ZodEnum<["local_session", "api_key"]>>;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            }, {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            }>, import("zod/v3").ZodObject<{
+                kind: import("zod/v3").ZodLiteral<"none">;
+                reason: import("zod/v3").ZodString;
+            }, "strict", import("zod/v3").ZodTypeAny, {
+                kind: "none";
+                reason: string;
+            }, {
+                kind: "none";
+                reason: string;
+            }>]>;
+        }, "strict", import("zod/v3").ZodTypeAny, {
+            harness_id: string;
+            native_credentials_enabled: boolean;
+            native_login_detected: boolean;
+            identity: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            } | {
+                kind: "none";
+                reason: string;
+            };
+        }, {
+            harness_id: string;
+            native_credentials_enabled: boolean;
+            native_login_detected: boolean;
+            identity?: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null | undefined;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            } | {
+                kind: "none";
+                reason: string;
+            };
+        }>, "many">>;
+    }, "strict", import("zod/v3").ZodTypeAny, {
+        profiles: {
+            profile: {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator: string | null;
+                secret_ref: string | null;
+                enabled: boolean;
+                created_at: string | null;
+            };
+            status: {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                verification_source: "local_store" | "vendor";
+                detail?: string | undefined;
+                last_verified_at: string | null;
+            };
+            identity: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null;
+        }[];
+        harnessAccounts: {
+            harness_id: string;
+            native_credentials_enabled: boolean;
+            native_login_detected: boolean;
+            identity: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            } | {
+                kind: "none";
+                reason: string;
+            };
+        }[];
+    }, {
+        profiles: {
+            profile: {
+                profile_id: string;
+                harness_id: string;
+                display_name: string;
+                credential_kind: "api_key" | "config_dir_login" | "oauth_token";
+                isolation_locator?: string | null | undefined;
+                secret_ref?: string | null | undefined;
+                enabled?: boolean | undefined;
+                created_at?: string | null | undefined;
+            };
+            status: {
+                profile_id: string;
+                harness_id: string;
+                availability: "available" | "unavailable" | "unknown";
+                verification: "failed" | "not_run" | "passed";
+                verification_source?: "local_store" | "vendor" | undefined;
+                detail?: string | undefined;
+                last_verified_at?: string | null | undefined;
+            };
+            identity?: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null | undefined;
+        }[];
+        harnessAccounts?: {
+            harness_id: string;
+            native_credentials_enabled: boolean;
+            native_login_detected: boolean;
+            identity?: {
+                email?: string | undefined;
+                plan?: string | undefined;
+            } | null | undefined;
+            next_up: {
+                kind: "profile";
+                profileId: string;
+            } | {
+                kind: "native";
+                route?: "api_key" | "local_session" | undefined;
+            } | {
+                kind: "none";
+                reason: string;
+            };
+        }[] | undefined;
+    }>;
+};
+export declare function parseRunApplicabilityQuery(url: URL): {
+    repoRoot: string;
+};
+//# sourceMappingURL=catalog-query.d.ts.map

package/dist/catalog-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-query.d.ts","sourceRoot":"","sources":["../src/catalog-query.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,GAAG,GAAG,gBAAgB,CAchE;AAED,wBAAgB,oCAAoC,CAAC,GAAG,EAAE,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS5D;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,GAAG,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAOzE"}

package/dist/catalog-query.js

@@ -0,0 +1,36 @@
+import { assertOnlyQueryParams, optionalBooleanQuery, singleQuery } from "./query.js";
+import { ControlCredentialProfilesResponse, ControlCredentialProfilesSnapshotResponse, } from "@claudexor/schema";
+export function parseHarnessListQuery(url) {
+    assertOnlyQueryParams(url, ["fresh", "all", "harness"]);
+    const fresh = optionalBooleanQuery(url, "fresh");
+    const includeFakes = optionalBooleanQuery(url, "all");
+    const harnessValues = url.searchParams.getAll("harness");
+    if (harnessValues.some((id) => id.trim().length === 0)) {
+        throw new Error("harness query parameters must be non-empty");
+    }
+    const harnessIds = harnessValues.map((id) => id.trim());
+    return {
+        ...(fresh === undefined ? {} : { fresh }),
+        ...(includeFakes === undefined ? {} : { includeFakes }),
+        ...(harnessIds.length === 0 ? {} : { harnessIds }),
+    };
+}
+export function parseCredentialProfilesSnapshotQuery(url) {
+    assertOnlyQueryParams(url, ["snapshot"]);
+    const snapshot = optionalBooleanQuery(url, "snapshot") ?? false;
+    return {
+        input: { snapshot },
+        schema: snapshot
+            ? ControlCredentialProfilesSnapshotResponse
+            : ControlCredentialProfilesResponse,
+    };
+}
+export function parseRunApplicabilityQuery(url) {
+    assertOnlyQueryParams(url, ["repoRoot"]);
+    const repoRoot = singleQuery(url, "repoRoot");
+    if (repoRoot === undefined || repoRoot.trim().length === 0) {
+        throw new Error("repoRoot query parameter is required");
+    }
+    return { repoRoot };
+}
+//# sourceMappingURL=catalog-query.js.map

package/dist/catalog-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-query.js","sourceRoot":"","sources":["../src/catalog-query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACtF,OAAO,EACL,iCAAiC,EACjC,yCAAyC,GAC1C,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,UAAU,qBAAqB,CAAC,GAAQ;IAC5C,qBAAqB,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO;QACL,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACzC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,GAAQ;IAC3D,qBAAqB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC;IAChE,OAAO;QACL,KAAK,EAAE,EAAE,QAAQ,EAAE;QACnB,MAAM,EAAE,QAAQ;YACd,CAAC,CAAC,yCAAyC;YAC3C,CAAC,CAAC,iCAAiC;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAQ;IACjD,qBAAqB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC;AACtB,CAAC"}

package/dist/daemon-server.d.ts

@@ -3,8 +3,11 @@ import { type ControlOperatorDecisionRecord, type DaemonFacadeClient } from "./r
 export { type ControlOperatorDecisionRecord, type DaemonFacadeClient, type DaemonRunRecord, } from "./run-record.js";
 import { type DeliveryCommandServices } from "./run-apply-routes.js";
 export { normalizeRunStartRequest } from "./run-start.js";
+import { type ProjectRouteServices } from "./project-routes.js";
+export { inlineContentDisposition } from "./binary-response.js";
 import { type MaintenanceRouteServices } from "./maintenance-routes.js";
 import { type ResourceRouteServices } from "./resource-routes.js";
+export { resetRunListFingerprintProbeCountForTests, runListFingerprintProbeCountForTests, } from "./run-list-fingerprint.js";
 import { ControlAuthReadinessRefreshRequest, ResourceAttachmentRef, ControlSetupJobCreateRequest, type ControlRunStartRequest, ControlTrustUpdateRequest, type ControlPendingInteraction } from "@claudexor/schema";
 export interface DaemonControlApiOptions {
     token: string;
@@ -19,17 +22,7 @@ export interface DaemonControlApiOptions {
             run_id: string;
         }) => void): () => void;
     };
-    services?: DeliveryCommandServices & Partial<ResourceRouteServices> & Partial<MaintenanceRouteServices> & {
-        listProjects?: () => Promise<{
-            projects: unknown[];
-        }>;
-        registerProject?: (input: {
-            root: string;
-            idempotencyKey: string;
-            clientId: string;
-        }) => Promise<unknown>;
-        relinkProject?: (id: string, root: string) => Promise<unknown>;
-        removeProject?: (id: string) => Promise<unknown>;
+    services?: DeliveryCommandServices & Partial<ResourceRouteServices> & Partial<MaintenanceRouteServices> & Partial<ProjectRouteServices> & {
         harnesses?: (input?: {
             fresh?: boolean;
             includeFakes?: boolean;
@@ -37,6 +30,7 @@ export interface DaemonControlApiOptions {
         }) => Promise<unknown>;
         agentCapabilities?: () => Promise<unknown>;
         preflightRunRequirements?: (request: ControlRunStartRequest) => Promise<void>;
+        preflightThreadRunRequirements?: (request: ControlRunStartRequest) => Promise<void>;
         harnessModels?: (input: {
             harnessId: string;
             route?: "local_session" | "api_key";
@@ -66,7 +60,12 @@ export interface DaemonControlApiOptions {
         updateSettings?: (patch: unknown) => Promise<unknown>;
         quota?: () => Promise<unknown>;
         refreshQuota?: () => Promise<unknown>;
-        credentialProfiles?: () => Promise<unknown>;
+        credentialProfiles?: (input?: {
+            snapshot?: boolean;
+        }) => Promise<unknown>;
+        runApplicability?: (input: {
+            repoRoot: string;
+        }) => Promise<unknown>;
         createCredentialProfile?: (input: unknown) => Promise<unknown>;
         updateCredentialProfile?: (input: unknown) => Promise<unknown>;
         deleteCredentialProfile?: (input: unknown) => Promise<unknown>;
@@ -79,11 +78,19 @@ export interface DaemonControlApiOptions {
             message?: string;
         };
         operatorDecision?: (runId: string, params: unknown) => ControlOperatorDecisionRecord | null;
+        findOperatorDecisionByIdempotency?: (runId: string, params: unknown, idempotency: {
+            key: string;
+            client: string;
+            request: unknown;
+        }) => ControlOperatorDecisionRecord | null;
         recordOperatorDecision?: (runId: string, params: unknown, decision: ControlOperatorDecisionRecord, idempotency?: {
             key: string;
             client: string;
             request: unknown;
-        }) => ControlOperatorDecisionRecord;
+        }) => {
+            record: ControlOperatorDecisionRecord;
+            reused: boolean;
+        };
         createThread?: (input: unknown) => Promise<unknown>;
         listThreads?: () => Promise<{
             threads: unknown[];
@@ -107,6 +114,13 @@ export interface DaemonControlApiOptions {
                 request: unknown;
             };
         }) => Promise<unknown>;
+        findThreadTurnByIdempotency?: (id: string, idempotency: {
+            key: string;
+            client: string;
+            request: unknown;
+        }) => Promise<{
+            id: string;
+        } | null>;
         updateThread?: (id: string, patch: {
             title?: string;
             state?: string;
@@ -124,7 +138,7 @@ export interface DaemonControlApiOptions {
             message?: string;
             gates?: NonNullable<Parameters<typeof verifyAndDeliver>[3]>;
         }) => Promise<unknown>;
-        setTurnEnqueueError?: (turnId: string, message: string, code: string | null, retryable?: boolean) => void;
+        setTurnEnqueueError?: (turnId: string, problem: import("@claudexor/schema").TurnEnqueueProblem) => void;
         listTrust?: (input?: {
             repoRoot?: string;
         }) => Promise<unknown>;
@@ -205,7 +219,6 @@ export declare class DaemonControlApiServer {
      * so the decision endpoint rejects accept_risk with a typed problem instead of
      * a false "Apply is now available" ACK the delivery gate would then refuse. */
     private runWorkStateVeto;
-    private recordOperatorDecision;
     private chainRunMutation;
     private threadTurnRouteCtx;
     private runApplyRouteCtx;
@@ -251,6 +264,4 @@ export declare class DaemonControlApiServer {
     private streamEvents;
     private pendingInteractionsFor;
 }
-export declare function runListFingerprintProbeCountForTests(): number;
-export declare function resetRunListFingerprintProbeCountForTests(): void;
 //# sourceMappingURL=daemon-server.d.ts.map