@codetreker/daynight 0.25.4 → 0.26.0

package/dist/commands/worker/backends/grant-renewal.js

@@ -0,0 +1,42 @@
+import { setTimeout as delay } from "node:timers/promises";
+import { readLaunchTicket } from "../../controller/launch-ticket.js";
+/** Keep native channels authorized independently of claim-discovery polling. */
+export const maintainWorkerControllerGrants = async (options) => {
+    const readTicket = options.readTicket ?? readLaunchTicket;
+    const failures = new Map();
+    while (!options.signal.aborted) {
+        const renewals = await Promise.allSettled(options.store.listUnfinishedTasks().map(async (task) => {
+            if (options.signal.aborted)
+                return;
+            const execution = task.webExecution;
+            if (task.serverOrigin !== options.serverOrigin || !execution?.ticketPath || execution.launchSubmission === "not-submitted" || task.cleanup?.agentStopped)
+                return;
+            try {
+                const ticket = await readTicket(options.homeDirectory, execution.launchId);
+                if (ticket.executionId !== execution.executionId || ticket.executionGeneration !== execution.executionGeneration || ticket.controllerInstanceId !== execution.controllerInstanceId || ticket.claimId !== task.claimId)
+                    throw new Error("Controller credential renewal has conflicting execution evidence.");
+                await options.launcher.refreshGrant(task, ticket, options.signal);
+                failures.delete(execution.executionId);
+            }
+            catch (error) {
+                if (options.signal.aborted)
+                    return;
+                const message = error instanceof Error ? error.message : "Controller credential renewal failed.";
+                if (failures.get(execution.executionId) !== message)
+                    options.onError(message);
+                failures.set(execution.executionId, message);
+            }
+        }));
+        const rejected = renewals.filter(result => result.status === "rejected");
+        if (rejected.length > 0)
+            throw new AggregateError(rejected.map(result => result.reason), "Controller credential renewal could not finish safely.");
+        try {
+            await delay(30_000, undefined, { signal: options.signal });
+        }
+        catch (error) {
+            if (!options.signal.aborted)
+                throw error;
+        }
+    }
+};
+//# sourceMappingURL=grant-renewal.js.map

package/dist/commands/worker/backends/grant-renewal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-renewal.js","sourceRoot":"","sources":["../../../../src/commands/worker/backends/grant-renewal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAIrE,gFAAgF;AAChF,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,EAAE,OAKpD,EAAiB,EAAE;IAClB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YAC7F,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC;YACpC,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,IAAI,CAAC,SAAS,EAAE,UAAU,IAAI,SAAS,CAAC,gBAAgB,KAAK,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,YAAY;gBAAE,OAAO;YACjK,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAC3E,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,CAAC,mBAAmB,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS,CAAC,oBAAoB,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;gBAC5S,MAAM,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClE,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACnC,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC;gBACjG,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,OAAO;oBAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9E,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACzE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,wDAAwD,CAAC,CAAC;QACnJ,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QACnE,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC"}

package/dist/commands/worker/backends/session-api.d.ts

@@ -0,0 +1,66 @@
+import { SESSION_PROTOCOL } from "../../../session/protocol.js";
+import { type ControllerGrantResponse } from "../../../session/controller-protocol.js";
+import type { LocalTask, WebExecutionState } from "./web-types.js";
+export declare const createWorkerSessionApi: (serverOrigin: string, serverToken: string) => {
+    verifyUnregistered: (identity: {
+        projectId: string;
+        taskId: string;
+        claimId: string;
+    }, signal: AbortSignal) => Promise<void>;
+    verifySupport: (provider: string, signal: AbortSignal) => Promise<void>;
+    register: (task: LocalTask, execution: WebExecutionState, signal: AbortSignal) => Promise<{
+        readonly claimId: string;
+        readonly testExecutionId?: never;
+    } & {
+        readonly sessionId: string;
+        readonly executionGeneration: import("../../../session/protocol.js").DecimalSequence;
+    } & {
+        readonly connectionEpoch: import("../../../session/protocol.js").DecimalSequence;
+    } & {
+        readonly controls?: import("../../../session/controls.js").SessionControls;
+        readonly turnStartedAt?: string | null;
+        readonly protocol: typeof SESSION_PROTOCOL;
+        readonly schemaVersion: typeof import("../../../session/protocol.js").SESSION_SCHEMA_VERSION;
+        readonly projectionVersion: typeof import("../../../session/protocol.js").SESSION_PROJECTION_VERSION;
+        readonly identity: ({
+            readonly projectId: string;
+            readonly taskId: string;
+            readonly workerId: string;
+            readonly worktreeId: string;
+            readonly ownerUserId?: never;
+        } | {
+            readonly ownerUserId: string;
+            readonly projectId?: never;
+            readonly taskId?: never;
+            readonly workerId?: never;
+            readonly worktreeId?: never;
+        }) & {
+            readonly controllerId: string;
+            readonly controllerInstanceId: string;
+            readonly agentControlMode: "web";
+            readonly provider: import("../../../session/protocol.js").SessionProvider;
+            readonly nativeSessionId: string | null;
+        };
+        readonly sessionRevision: import("../../../session/protocol.js").DecimalSequence;
+        readonly historyEpoch: string;
+        readonly lastEventSeq: import("../../../session/protocol.js").DecimalSequence;
+        readonly lastTimelineSeq: import("../../../session/protocol.js").DecimalSequence;
+        readonly initialInputState: import("../../../session/protocol.js").InitialInputState;
+        readonly synchronized: boolean;
+        readonly lifecycle: "active" | "draining" | "archived";
+        readonly connectionState: "connected" | "disconnected" | "synchronizing";
+        readonly activity: "initializing" | "idle" | "working" | "waiting_input" | "stopped" | "unknown";
+        readonly currentTurnId: string | null;
+        readonly capabilities: import("../../../session/protocol.js").SessionCapabilities;
+        readonly operations: import("../../../session/protocol.js").SessionOperations;
+        readonly cleanupInteractionIds?: readonly string[];
+    }>;
+    grant: (task: LocalTask, execution: WebExecutionState, signal: AbortSignal, previous?: {
+        generation: string;
+        instanceId: string;
+        recordId: string;
+        stoppedAt: string;
+    }) => Promise<ControllerGrantResponse>;
+};
+export declare const writeControllerCredential: (filename: string, grant: ControllerGrantResponse) => Promise<void>;
+export type WorkerSessionApi = ReturnType<typeof createWorkerSessionApi>;

package/dist/commands/worker/backends/session-api.js

@@ -0,0 +1,84 @@
+import { chmod, mkdir, rename, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+import { SESSION_PROTOCOL } from "../../../session/protocol.js";
+import { parseRegistrationResponse, parseControllerGrantResponse, parseCurrentSessionResponse } from "../../../session/controller-protocol.js";
+export const createWorkerSessionApi = (serverOrigin, serverToken) => {
+    const request = async (target, body, signal, method = "POST") => {
+        const response = await fetch(`${serverOrigin}${target}`, { method, headers: { authorization: `Bearer ${serverToken}`, "content-type": "application/json" }, ...(body === undefined ? {} : { body: JSON.stringify(body) }), signal: AbortSignal.any([signal, AbortSignal.timeout(30000)]) });
+        const chunks = [];
+        let size = 0;
+        if (response.body !== null) {
+            const reader = response.body.getReader();
+            try {
+                while (true) {
+                    const { done, value } = await reader.read();
+                    if (done)
+                        break;
+                    size += value.byteLength;
+                    if (size > 2 * 1024 * 1024) {
+                        await reader.cancel();
+                        throw new Error("Session registration response exceeds its limit.");
+                    }
+                    chunks.push(value);
+                }
+            }
+            finally {
+                reader.releaseLock();
+            }
+        }
+        const raw = Buffer.concat(chunks).toString("utf8");
+        if (!response.ok)
+            throw new Error(`Session registration failed with HTTP ${response.status}; read back the original registration before replacing its identity.`);
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            throw new Error("Session registration returned invalid JSON; the result is unconfirmed.");
+        }
+    };
+    const prefix = (task) => `/api/v1/projects/${task.projectId}/tasks/${task.taskId}/sessions`;
+    return {
+        verifyUnregistered: async (identity, signal) => {
+            const result = parseCurrentSessionResponse(await request(`/api/v1/projects/${identity.projectId}/tasks/${identity.taskId}/sessions/current`, undefined, signal, "GET"));
+            if (result.status !== "not_registered" || result.claimId !== identity.claimId)
+                throw new Error("The original Web launch provenance is missing; an existing or superseded Session cannot be recreated or deleted. Restore its execution evidence.");
+        },
+        verifySupport: async (provider, signal) => {
+            const response = await fetch(`${serverOrigin}/api/v1/session-capabilities`, { headers: { authorization: `Bearer ${serverToken}` }, signal: AbortSignal.any([signal, AbortSignal.timeout(10000)]) });
+            if (!response.ok)
+                throw new Error("This service has not confirmed Web session protocol support; no claim was submitted.");
+            const value = await response.json();
+            if (value.protocol !== SESSION_PROTOCOL || value.schemaVersion !== 1 || value.projectionVersion !== 1 || !Array.isArray(value.providers) || !value.providers.includes(provider))
+                throw new Error("The service Web session protocol or provider is incompatible; no claim was submitted.");
+        },
+        register: async (task, execution, signal) => {
+            if (task.configuration?.agentControlMode !== "web")
+                throw new Error("Session registration requires a supported web execution.");
+            const input = { protocol: SESSION_PROTOCOL, registrationId: execution.registrationId, claimId: task.claimId, workerId: task.workerId, worktreeId: task.worktreeId, provider: task.configuration.agent, controllerId: execution.controllerId, controllerInstanceId: execution.controllerInstanceId };
+            const result = parseRegistrationResponse(await request(prefix(task), input, signal));
+            const session = result.session;
+            if (session.claimId !== task.claimId || session.identity.taskId !== task.taskId || session.identity.projectId !== task.projectId || session.identity.workerId !== task.workerId || session.identity.worktreeId !== task.worktreeId || session.identity.provider !== task.configuration.agent || session.identity.controllerId !== execution.controllerId || session.identity.controllerInstanceId !== execution.controllerInstanceId)
+                throw new Error("Registered session does not match the frozen execution.");
+            return session;
+        },
+        grant: async (task, execution, signal, previous) => {
+            if (execution.sessionId === null)
+                throw new Error("Controller authorization requires its registered session.");
+            const input = { protocol: SESSION_PROTOCOL, claimId: task.claimId, controllerId: execution.controllerId, controllerInstanceId: execution.controllerInstanceId, executionGeneration: execution.executionGeneration, kind: execution.launchSubmission === "not-submitted" ? "bootstrap" : "reconnect", previousGeneration: previous?.generation ?? null, stopProof: previous === undefined ? null : { recordId: previous.recordId, previousControllerInstanceId: previous.instanceId, stoppedAt: previous.stoppedAt } };
+            const grant = parseControllerGrantResponse(await request(`${prefix(task)}/${execution.sessionId}/controller-grant`, input, signal));
+            if (grant.sessionId !== execution.sessionId || grant.claimId !== task.claimId || grant.executionGeneration !== execution.executionGeneration || grant.controllerId !== execution.controllerId || grant.controllerInstanceId !== execution.controllerInstanceId)
+                throw new Error("Controller grant does not match the frozen execution.");
+            return grant;
+        },
+    };
+};
+export const writeControllerCredential = async (filename, grant) => {
+    await mkdir(path.dirname(filename), { recursive: true, mode: 0o700 });
+    await chmod(path.dirname(filename), 0o700);
+    const temporary = `${filename}.${randomUUID()}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(grant)}\n`, { flag: "wx", mode: 0o600 });
+    await rename(temporary, filename);
+    await chmod(filename, 0o600);
+};
+//# sourceMappingURL=session-api.js.map

package/dist/commands/worker/backends/session-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-api.js","sourceRoot":"","sources":["../../../../src/commands/worker/backends/session-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,2BAA2B,EAAuF,MAAM,yCAAyC,CAAC;AAEpO,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,YAAoB,EAAE,WAAmB,EAAE,EAAE;IAClF,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAAE,IAAa,EAAE,MAAmB,EAAE,MAAM,GAAG,MAAM,EAAoB,EAAE;QAC9G,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,GAAG,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5R,MAAM,MAAM,GAAiB,EAAE,CAAC;QAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAAC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,OAAO,IAAI,EAAE,CAAC;oBAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAAC,IAAI,IAAI;wBAAE,MAAM;oBAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;oBAAC,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;wBAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;wBAAC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAAC,CAAC;QAAC,CAAC;QAC5W,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,CAAC,MAAM,sEAAsE,CAAC,CAAC;QAClK,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAAC,CAAC;IACjJ,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAe,EAAU,EAAE,CAAC,oBAAoB,IAAI,CAAC,SAAS,UAAU,IAAI,CAAC,MAAM,WAAW,CAAC;IAC/G,OAAO;QACL,kBAAkB,EAAE,KAAK,EAAE,QAAgE,EAAE,MAAmB,EAAiB,EAAE;YACjI,MAAM,MAAM,GAAG,2BAA2B,CAAC,MAAM,OAAO,CAAC,oBAAoB,QAAQ,CAAC,SAAS,UAAU,QAAQ,CAAC,MAAM,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YACxK,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,kJAAkJ,CAAC,CAAC;QACrP,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,QAAgB,EAAE,MAAmB,EAAiB,EAAE;YAC5E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,8BAA8B,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpM,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAC;YAC1H,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAuG,CAAC;YACzI,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;QAC5R,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,IAAe,EAAE,SAA4B,EAAE,MAAmB,EAAE,EAAE;YACrF,IAAI,IAAI,CAAC,aAAa,EAAE,gBAAgB,KAAK,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;YAChI,MAAM,KAAK,GAAwB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE,CAAC;YACzT,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YACrF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAC/B,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,CAAC,oBAAoB;gBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACjf,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,IAAe,EAAE,SAA4B,EAAE,MAAmB,EAAE,QAA0F,EAAoC,EAAE;YAChN,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC/G,MAAM,KAAK,GAA2B,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,EAAE,IAAI,EAAE,SAAS,CAAC,gBAAgB,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,4BAA4B,EAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC;YAC9gB,MAAM,KAAK,GAAG,4BAA4B,CAAC,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,SAAS,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;YACpI,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,mBAAmB,KAAK,SAAS,CAAC,mBAAmB,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,CAAC,oBAAoB;gBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YACzU,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AACF,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAAE,QAAgB,EAAE,KAA8B,EAAiB,EAAE;IACjH,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAClH,MAAM,SAAS,GAAG,GAAG,QAAQ,IAAI,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,MAAM,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAAC,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAC9M,CAAC,CAAC"}

package/dist/commands/worker/backends/web-process.d.ts

@@ -0,0 +1,79 @@
+import { type ControllerLaunchTicket } from "../../controller/launch-ticket.js";
+import type { WebExecutionStore } from "./web-store.js";
+import type { LocalTask } from "./web-types.js";
+import type { WorkerSessionApi } from "./session-api.js";
+export declare const createWebControllerLauncher: (options: {
+    homeDirectory: string;
+    packageDirectory: string;
+    store: WebExecutionStore;
+    sessionApi: WorkerSessionApi;
+    now: () => number;
+}) => {
+    prepare: (...args: Parameters<(input: LocalTask, prompt: string, signal: AbortSignal) => Promise<ControllerLaunchTicket>>) => Promise<({
+        readonly schemaVersion: 1;
+        readonly launchId: string;
+        readonly executionId: string;
+        readonly controllerId: string;
+        readonly controllerInstanceId: string;
+        readonly sessionId: string;
+        readonly executionGeneration: string;
+        readonly serverOrigin: string;
+        readonly provider: "codex" | "claude" | "copilot";
+        readonly cwd: string;
+        readonly nativeHome: string;
+        readonly configuration: import("../types.js").FrozenExecutionConfiguration;
+        readonly initialOperationId: string;
+        readonly initialPrompt: string;
+        readonly resumeNativeSessionId: string | null;
+        readonly credentialFile: string;
+        readonly ipcEndpoint: string;
+        readonly ipcSecret: string;
+        readonly createdAt: string;
+    } & {
+        readonly claimId: string;
+        readonly testExecutionId?: never;
+    } & {
+        readonly claimId: string;
+        readonly projectId: string;
+        readonly taskId: string;
+        readonly workerId: string;
+        readonly worktreeId: string;
+        readonly userId: string;
+        readonly ownerUserId?: never;
+        readonly initialInput?: never;
+    }) | ({
+        readonly schemaVersion: 1;
+        readonly launchId: string;
+        readonly executionId: string;
+        readonly controllerId: string;
+        readonly controllerInstanceId: string;
+        readonly sessionId: string;
+        readonly executionGeneration: string;
+        readonly serverOrigin: string;
+        readonly provider: "codex" | "claude" | "copilot";
+        readonly cwd: string;
+        readonly nativeHome: string;
+        readonly configuration: import("../types.js").FrozenExecutionConfiguration;
+        readonly initialOperationId: string;
+        readonly initialPrompt: string;
+        readonly resumeNativeSessionId: string | null;
+        readonly credentialFile: string;
+        readonly ipcEndpoint: string;
+        readonly ipcSecret: string;
+        readonly createdAt: string;
+    } & {
+        readonly testExecutionId: string;
+        readonly claimId?: never;
+    } & {
+        readonly testExecutionId: string;
+        readonly ownerUserId: string;
+        readonly initialInput: "none" | "prompt";
+        readonly projectId?: never;
+        readonly taskId?: never;
+        readonly workerId?: never;
+        readonly worktreeId?: never;
+        readonly userId?: never;
+    })>;
+    launch: (...args: Parameters<(input: LocalTask, ticket: ControllerLaunchTicket, signal: AbortSignal) => Promise<void>>) => Promise<void>;
+    refreshGrant: (...args: Parameters<(input: LocalTask, ticket: ControllerLaunchTicket, signal: AbortSignal) => Promise<void>>) => Promise<void>;
+};

package/dist/commands/worker/backends/web-process.js

@@ -0,0 +1,156 @@
+import { spawn } from "node:child_process";
+import { open, mkdir, readFile } from "node:fs/promises";
+import path from "node:path";
+import { createHash, randomBytes } from "node:crypto";
+import { controllerExecutionDirectory, controllerTicketPath, readLaunchTicket, writeLaunchTicket } from "../../controller/launch-ticket.js";
+import { readControllerSnapshot } from "../../controller/lifecycle-store.js";
+import { requestController } from "../../controller/local-client.js";
+import { captureProcessProof } from "../../controller/process-proof.js";
+import { writeControllerCredential } from "./session-api.js";
+export const createWebControllerLauncher = (options) => {
+    const current = (task) => { const latest = options.store.getTask(task); if (latest?.webExecution == null)
+        throw new Error("The web execution identity disappeared."); return latest; };
+    const tails = new Map();
+    const serialize = async (task, action) => {
+        const key = task.webExecution?.executionId ?? task.claimId;
+        const previous = tails.get(key) ?? Promise.resolve();
+        let release;
+        const gate = new Promise(resolve => { release = resolve; });
+        const tail = previous.then(() => gate);
+        tails.set(key, tail);
+        await previous;
+        try {
+            return await action();
+        }
+        finally {
+            release();
+            if (tails.get(key) === tail)
+                tails.delete(key);
+        }
+    };
+    const methods = {
+        prepare: async (input, prompt, signal) => {
+            let task = current(input);
+            let execution = task.webExecution;
+            if (execution.ticketPath !== null) {
+                const ticket = await readLaunchTicket(options.homeDirectory, execution.launchId);
+                if (execution.nativeHome === null)
+                    options.store.updateWebExecution(task, { nativeHome: ticket.nativeHome }, options.now());
+                return ticket;
+            }
+            try {
+                const existing = await readLaunchTicket(options.homeDirectory, execution.launchId);
+                if (existing.executionId !== execution.executionId || existing.claimId !== task.claimId || existing.executionGeneration !== execution.executionGeneration || existing.controllerInstanceId !== execution.controllerInstanceId || existing.initialOperationId !== execution.initialOperationId || existing.sessionId !== execution.sessionId || existing.initialPrompt !== execution.initialPrompt)
+                    throw new Error("An existing launch ticket does not match the durable execution intent.");
+                options.store.updateWebExecution(task, { ticketPath: controllerTicketPath(options.homeDirectory, execution.launchId), nativeHome: existing.nativeHome }, options.now());
+                return existing;
+            }
+            catch (error) {
+                if (!(error instanceof Error && "code" in error && error.code === "ENOENT"))
+                    throw error;
+            }
+            if (execution.initialPrompt === null) {
+                task = options.store.updateWebExecution(task, { initialPrompt: prompt }, options.now());
+                execution = task.webExecution;
+            }
+            if (task.resources.worktree === null || task.configuration === null || task.userId === null)
+                throw new Error("Controller launch requires its original worktree, provider and owner.");
+            if (execution.sessionId === null) {
+                const registered = await options.sessionApi.register(task, execution, signal);
+                task = options.store.updateWebExecution(task, { sessionId: registered.sessionId }, options.now());
+                execution = task.webExecution;
+            }
+            const directory = controllerExecutionDirectory(options.homeDirectory, execution.executionId);
+            await mkdir(directory, { recursive: true, mode: 0o700 });
+            const credentialFile = path.join(directory, "credential.json");
+            const previous = readControllerSnapshot(path.join(directory, "journal.sqlite"));
+            const stop = previous !== null && previous.executionGeneration !== execution.executionGeneration && previous.nativeStopped && previous.stoppedAt !== null ? { generation: previous.executionGeneration, instanceId: previous.controllerInstanceId, recordId: execution.launchId, stoppedAt: previous.stoppedAt } : undefined;
+            const grant = await options.sessionApi.grant(task, execution, signal, stop);
+            await writeControllerCredential(credentialFile, grant);
+            const endpointKey = createHash("sha256").update(`${options.homeDirectory}:${execution.launchId}`).digest("hex").slice(0, 20);
+            const ipcEndpoint = process.platform === "win32" ? `\\\\.\\pipe\\daynight-${endpointKey}` : path.join(options.homeDirectory, ".daynight", "c", `${endpointKey}.sock`);
+            if (process.platform !== "win32" && Buffer.byteLength(ipcEndpoint) > (process.platform === "darwin" ? 103 : 107))
+                throw new Error("The controller IPC endpoint exceeds this platform's socket path limit.");
+            if (process.platform !== "win32")
+                await mkdir(path.dirname(ipcEndpoint), { recursive: true, mode: 0o700 });
+            if (task.resources.worktree === null || task.configuration === null || task.userId === null)
+                throw new Error("The frozen launch binding disappeared.");
+            const nativeHome = execution.nativeHome ?? (task.configuration.agent === "codex" ? process.env.CODEX_HOME ?? path.join(options.homeDirectory, ".codex")
+                : task.configuration.agent === "claude" ? process.env.CLAUDE_CONFIG_DIR ?? path.join(options.homeDirectory, ".claude")
+                    : process.env.COPILOT_HOME ?? path.join(options.homeDirectory, ".copilot"));
+            if (execution.nativeHome === null)
+                execution = options.store.updateWebExecution(task, { nativeHome }, options.now()).webExecution;
+            const initialPrompt = execution.initialPrompt ?? prompt;
+            const ticket = { schemaVersion: 1, launchId: execution.launchId, executionId: execution.executionId, controllerId: execution.controllerId, controllerInstanceId: execution.controllerInstanceId, sessionId: execution.sessionId, executionGeneration: execution.executionGeneration, serverOrigin: task.serverOrigin, projectId: task.projectId, taskId: task.taskId, claimId: task.claimId, workerId: task.workerId, worktreeId: task.worktreeId, userId: task.userId, provider: task.configuration.agent, cwd: task.resources.worktree.worktreePath, nativeHome, configuration: task.configuration, initialOperationId: execution.initialOperationId, initialPrompt, resumeNativeSessionId: task.resources.nativeSession?.sessionId ?? null, credentialFile, ipcEndpoint, ipcSecret: randomBytes(32).toString("hex"), createdAt: new Date(options.now()).toISOString() };
+            const ticketPath = await writeLaunchTicket(options.homeDirectory, ticket);
+            options.store.updateWebExecution(task, { ticketPath, initialPrompt }, options.now());
+            return ticket;
+        },
+        launch: async (input, ticket, signal) => {
+            let task = current(input);
+            if (task.webExecution.launchSubmission !== "not-submitted")
+                return;
+            // A reusable grant also supports the first hello, including a lost bootstrap handshake.
+            await writeControllerCredential(ticket.credentialFile, await options.sessionApi.grant(task, { ...task.webExecution, launchSubmission: "unknown" }, signal));
+            const directory = controllerExecutionDirectory(options.homeDirectory, ticket.executionId);
+            const log = await open(path.join(directory, "controller.log"), "a", 0o600);
+            try {
+                signal.throwIfAborted();
+                task = options.store.updateWebExecution(task, { launchSubmission: "unknown" }, options.now());
+                const child = spawn(process.execPath, [path.join(options.packageDirectory, "dist", "main.js"), "controller", ticket.provider, "--launch-id", ticket.launchId], { cwd: ticket.cwd, env: { ...process.env, HOME: options.homeDirectory, USERPROFILE: options.homeDirectory }, detached: process.platform !== "win32", stdio: ["ignore", log.fd, log.fd], windowsHide: true });
+                await new Promise((resolve, reject) => { child.once("spawn", resolve); child.once("error", reject); });
+                child.unref();
+                if (child.pid === undefined)
+                    throw new Error("Controller spawn did not establish its process identity.");
+                const proof = await captureProcessProof(child.pid);
+                task = options.store.updateWebExecution(task, { controllerProcess: proof }, options.now());
+                const deadline = Date.now() + 30000;
+                while (Date.now() < deadline) {
+                    signal.throwIfAborted();
+                    try {
+                        const response = await requestController(ticket, { kind: "observe" }, { signal, timeoutMs: 1000 });
+                        options.store.updateWebExecution(task, { launchSubmission: "acknowledged", nativeProcesses: response.snapshot.nativeProcesses }, options.now());
+                        return;
+                    }
+                    catch {
+                        if (child.exitCode !== null || child.signalCode !== null)
+                            throw new Error("Controller exited before its authenticated initialization; inspect its private log.");
+                    }
+                    await new Promise(resolve => setTimeout(resolve, 100));
+                }
+                throw new Error("Controller startup outcome is unknown; the original process and launch intent are retained.");
+            }
+            finally {
+                await log.close();
+            }
+        },
+        refreshGrant: async (input, ticket, signal) => {
+            const task = current(input);
+            if (task.webExecution.launchId !== ticket.launchId || task.cleanup?.agentStopped)
+                return;
+            let expiresAt;
+            try {
+                expiresAt = JSON.parse(await readFile(ticket.credentialFile, "utf8")).expiresAt;
+            }
+            catch {
+                throw new Error("Controller credential state is unavailable; it cannot be silently replaced.");
+            }
+            if (typeof expiresAt !== "string" || !Number.isFinite(Date.parse(expiresAt)))
+                throw new Error("Controller credential expiry is invalid.");
+            if (Date.parse(expiresAt) - options.now() > 120_000)
+                return;
+            const grant = await options.sessionApi.grant(task, task.webExecution, signal);
+            const latest = current(task);
+            if (latest.webExecution.launchId !== ticket.launchId || latest.cleanup?.agentStopped)
+                return;
+            signal.throwIfAborted();
+            await writeControllerCredential(ticket.credentialFile, grant);
+        },
+    };
+    return {
+        prepare: (...args) => serialize(args[0], () => methods.prepare(...args)),
+        launch: (...args) => serialize(args[0], () => methods.launch(...args)),
+        refreshGrant: (...args) => serialize(args[0], () => methods.refreshGrant(...args)),
+    };
+};
+//# sourceMappingURL=web-process.js.map

package/dist/commands/worker/backends/web-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-process.js","sourceRoot":"","sources":["../../../../src/commands/worker/backends/web-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,iBAAiB,EAA+B,MAAM,mCAAmC,CAAC;AACzK,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAIxE,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,OAAuI,EAAE,EAAE;IACrL,MAAM,OAAO,GAAG,CAAC,IAAe,EAAE,EAAE,GAAG,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,YAAY,IAAI,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAClM,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,EAAK,IAAe,EAAE,MAAwB,EAAc,EAAE;QACnF,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC;QAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAAC,IAAI,OAAoB,CAAC;QAC/E,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACvC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAAC,MAAM,QAAQ,CAAC;QACrC,IAAI,CAAC;YAAC,OAAO,MAAM,MAAM,EAAE,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;IACvG,CAAC,CAAC;IACF,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,KAAK,EAAE,KAAgB,EAAE,MAAc,EAAE,MAAmB,EAAmC,EAAE;YACxG,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,SAAS,GAAG,IAAI,CAAC,YAAa,CAAC;YAC9D,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAAC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAAC,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI;oBAAE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAC,EAAC,UAAU,EAAC,MAAM,CAAC,UAAU,EAAC,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YAC/P,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACnF,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,mBAAmB,KAAK,SAAS,CAAC,mBAAmB,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,CAAC,oBAAoB,IAAI,QAAQ,CAAC,kBAAkB,KAAK,SAAS,CAAC,kBAAkB,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,aAAa;oBAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;gBAC7d,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,oBAAoB,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAAC,OAAO,QAAQ,CAAC;YAC3L,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;YAC7G,IAAI,SAAS,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;gBAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC,YAAa,CAAC;YAAC,CAAC;YAClK,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;YACtL,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;gBAAC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBAAC,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC,YAAa,CAAC;YAAC,CAAC;YACvP,MAAM,SAAS,GAAG,4BAA4B,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvJ,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAChF,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,mBAAmB,KAAK,SAAS,CAAC,mBAAmB,IAAI,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,mBAAmB,EAAE,UAAU,EAAE,QAAQ,CAAC,oBAAoB,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7T,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAAC,MAAM,yBAAyB,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YACpI,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7H,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,yBAAyB,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC;YACtK,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;YAC5M,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3G,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACvJ,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC;gBACrJ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC;oBACtH,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;YAC9E,IAAI,SAAS,CAAC,UAAU,KAAK,IAAI;gBAAE,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAC,EAAC,UAAU,EAAC,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,YAAa,CAAC;YAC/H,MAAM,aAAa,GAAG,SAAS,CAAC,aAAa,IAAI,MAAM,CAAC;YACxD,MAAM,MAAM,GAA2B,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE,SAAS,EAAE,SAAS,CAAC,SAAU,EAAE,mBAAmB,EAAE,SAAS,CAAC,mBAAmB,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE,aAAa,EAAE,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,IAAI,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACp2B,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;YAC1E,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;YACrF,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,KAAgB,EAAE,MAA8B,EAAE,MAAmB,EAAiB,EAAE;YACrG,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,IAAI,CAAC,YAAa,CAAC,gBAAgB,KAAK,eAAe;gBAAE,OAAO;YAC/F,wFAAwF;YACxF,MAAM,yBAAyB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,YAAa,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7J,MAAM,SAAS,GAAG,4BAA4B,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC9F,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5W,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7G,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBACzG,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACnD,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;gBACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;oBAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,IAAI,CAAC;wBAAC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBACpQ,MAAM,CAAC;wBAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;4BAAE,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;oBAAC,CAAC;oBAC3K,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBACzD,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;YACjH,CAAC;oBAAS,CAAC;gBAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QAClC,CAAC;QACD,YAAY,EAAE,KAAK,EAAE,KAAgB,EAAE,MAA8B,EAAE,MAAmB,EAAiB,EAAE;YAC3G,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,YAAa,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,YAAY;gBAAE,OAAO;YAC1F,IAAI,SAAkB,CAAC;YAAC,IAAI,CAAC;gBAAC,SAAS,GAAI,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAA4B,CAAC,SAAS,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;YAAC,CAAC;YACtP,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC1I,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO;gBAAE,OAAO;YAC5D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,YAAa,EAAE,MAAM,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,MAAM,CAAC,YAAa,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,YAAY;gBAAE,OAAO;YAC9F,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,yBAAyB,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;KACF,CAAC;IACF,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,IAAwC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5G,MAAM,EAAE,CAAC,GAAG,IAAuC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACzG,YAAY,EAAE,CAAC,GAAG,IAA6C,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;KAC5H,CAAC;AACJ,CAAC,CAAC"}

package/dist/commands/worker/backends/web-store.d.ts

@@ -0,0 +1,49 @@
+import type { ExecutionConfiguration as FrozenExecutionConfiguration, WorkerProject, ResourceOwner } from "../types.js";
+import type { LocalTask, ClaimIdentity, CleanupState, WorktreeBinding, WebExecutionState } from "./web-types.js";
+export declare const openWebExecutionStore: (filename: string) => {
+    close: () => void;
+    getTask: (identity: ClaimIdentity) => LocalTask | null;
+    listUnfinishedTasks: () => LocalTask[];
+    register: (input: ResourceOwner & {
+        project: WorkerProject;
+        serverOrigin: string;
+        workerId: string;
+        userId: string;
+        configuration: FrozenExecutionConfiguration;
+    }, now: number) => LocalTask;
+    clearShutdown: (identity: ClaimIdentity, now: number) => LocalTask;
+    beginRecovery: (identity: ClaimIdentity, now: number) => LocalTask;
+    authorizeRecoveryRetry: (identity: ClaimIdentity, now: number) => LocalTask;
+    bindNativeSession: (identity: ClaimIdentity, reference: {
+        source: "controller";
+        sessionId: string;
+    }, now: number) => LocalTask;
+    completeTask: (identity: ClaimIdentity, now: number) => LocalTask;
+    initializeWebExecution: (identity: ClaimIdentity, now: number) => LocalTask;
+    updateWebExecution: (identity: ClaimIdentity, patch: Partial<WebExecutionState>, now: number) => LocalTask;
+    beginWebGeneration: (identity: ClaimIdentity, previous: {
+        executionGeneration: string;
+        controllerInstanceId: string;
+        nativeSessionId: string | null;
+        nativeStopped: boolean;
+    }, now: number) => LocalTask;
+    confirmBackendResourcesClosed: (identity: ClaimIdentity, proof: {
+        controllerStopped: true;
+        endpointClosed: true;
+    }, now: number) => LocalTask;
+    bindWorktree: (identity: ClaimIdentity, binding: WorktreeBinding, now: number) => LocalTask;
+    beginCleanup: (identity: ClaimIdentity, input: {
+        kind: CleanupState["kind"];
+        deadline: number;
+    }, now: number) => LocalTask;
+    markCleanupInputSubmitting: (identity: ClaimIdentity, now: number) => LocalTask;
+    recordCleanupInputOutcome: (identity: ClaimIdentity, input: "submitted" | "rejected" | "unavailable", now: number) => LocalTask;
+    recordCleanupResult: (identity: ClaimIdentity, result: NonNullable<CleanupState["result"]>, error: string | null, now: number) => LocalTask;
+    confirmAgentStopped: (identity: ClaimIdentity, proof: {
+        agentStopped: true;
+    }, now: number) => LocalTask;
+    confirmWorktreeDeleted: (identity: ClaimIdentity, proof: {
+        worktreeDeleted: true;
+    }, now: number) => LocalTask;
+};
+export type WebExecutionStore = ReturnType<typeof openWebExecutionStore>;