@dharma-ai-labs/agent-fabric 0.2.103 → 0.2.104

package/dist/demoWatchHealth.test.js

@@ -0,0 +1,175 @@
+import assert from 'node:assert/strict';
+import { mkdir, mkdtemp, readFile, rm, symlink, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { createDemoWatchHealthRecorder, readDemoWatchHealth, writeDemoWatchHealth } from './demoWatchHealth.js';
+const key = 'a'.repeat(64);
+const now = Date.parse('2026-09-26T03:00:00.000Z');
+const receipt = { schema: 'dharma.demo-watch-health/v1', key, pid: 123,
+    version: '0.2.103', observedAt: new Date(now).toISOString(), state: 'completed',
+    stage: 'demo_repository_package_installed', sourceState: 'unchanged', code: null };
+test('health recorder serializes writes, coalesces pending scopes and drains before lease release', async () => {
+    const rows = [];
+    let finish;
+    let concurrent = 0;
+    let maximum = 0;
+    const recorder = createDemoWatchHealthRecorder({ home: '/unused', pid: 123, version: '0.2.103',
+        now: () => now, write: async (_home, row) => {
+            maximum = Math.max(maximum, ++concurrent);
+            if (!rows.length)
+                await new Promise(resolve => { finish = resolve; });
+            rows.push(row);
+            concurrent -= 1;
+        } });
+    recorder.record(receipt);
+    await new Promise(resolve => setImmediate(resolve));
+    recorder.record({ ...receipt, key: 'b'.repeat(64), sourceState: 'pending' });
+    recorder.record({ ...receipt, key: 'b'.repeat(64), sourceState: 'unchanged' });
+    let drained = false;
+    const drain = recorder.drain().then(() => { drained = true; });
+    await new Promise(resolve => setImmediate(resolve));
+    assert.equal(drained, false);
+    finish();
+    await drain;
+    assert.equal(maximum, 1);
+    assert.equal(rows.length, 2);
+    assert.equal(rows[1]?.sourceState, 'unchanged');
+    assert.equal(recorder.available(), true);
+});
+test('a receipt arriving while the writer closes is drained rather than stranded', async () => {
+    const rows = [];
+    const recorder = createDemoWatchHealthRecorder({ home: '/unused', pid: 123, version: '0.2.103',
+        now: () => now, write: async (_home, row) => {
+            rows.push(row);
+            if (rows.length === 1)
+                queueMicrotask(() => queueMicrotask(() => {
+                    recorder.record({ ...receipt, key: 'b'.repeat(64) });
+                }));
+        } });
+    recorder.record(receipt);
+    await recorder.drain();
+    assert.equal(rows.length, 2);
+    assert.equal(rows[1]?.key, 'b'.repeat(64));
+});
+test('health write failure gates cycles and a later recorded observation restores the gate', async () => {
+    let fail = true;
+    const recorder = createDemoWatchHealthRecorder({ home: '/unused', pid: 123, version: '0.2.103',
+        now: () => now, write: async () => { if (fail)
+            throw new Error('private filesystem error'); } });
+    recorder.record(receipt);
+    await recorder.drain();
+    assert.equal(recorder.available(), false);
+    fail = false;
+    recorder.record({ ...receipt, state: 'failed', stage: null, sourceState: null, code: 'demo_watch_health_unavailable' });
+    await recorder.drain();
+    assert.equal(recorder.available(), true);
+});
+test('success on another repository cannot clear a failed scope receipt', async () => {
+    let fail = true;
+    const otherKey = 'b'.repeat(64);
+    const recorder = createDemoWatchHealthRecorder({ home: '/unused', pid: 123, version: '0.2.103',
+        now: () => now, write: async (_home, row) => {
+            if (row.key === key && fail)
+                throw new Error('Single-scope write failed');
+        } });
+    recorder.record(receipt);
+    await recorder.drain();
+    recorder.record({ ...receipt, key: otherKey });
+    await recorder.drain();
+    assert.equal(recorder.available(), false);
+    assert.equal(recorder.available(key), false);
+    assert.equal(recorder.available(otherKey), true);
+    fail = false;
+    recorder.record(receipt);
+    await recorder.drain();
+    assert.equal(recorder.available(key), true);
+    assert.equal(recorder.available(), true);
+});
+test('health recorder rejects malformed observations and ignores unscoped registry failures', async () => {
+    let writes = 0;
+    const recorder = createDemoWatchHealthRecorder({ home: '/unused', pid: 123, version: '0.2.103',
+        now: () => now, write: async () => { writes += 1; } });
+    recorder.record({ ...receipt, key: null });
+    recorder.record({ ...receipt, key: 'bad-key' });
+    await recorder.drain();
+    assert.equal(writes, 0);
+    assert.equal(recorder.available(), false);
+});
+async function fixture() {
+    const home = await mkdtemp(join(tmpdir(), 'dharma-demo-watch-health-'));
+    await mkdir(join(home, 'relay'));
+    await writeFile(join(home, 'relay', 'supervisor.pid'), '123\n');
+    return home;
+}
+test('health is credential-free and fresh only for its current supervisor/version', async () => {
+    const home = await fixture();
+    try {
+        await writeDemoWatchHealth(home, receipt);
+        assert.deepEqual(await readDemoWatchHealth(home, key, { pid: 123, version: '0.2.103', now }), receipt);
+        assert.equal(await readDemoWatchHealth(home, key, { pid: 124, version: '0.2.103', now }), null);
+        assert.equal(await readDemoWatchHealth(home, key, { pid: 123, version: '0.2.104', now }), null);
+        assert.equal(await readDemoWatchHealth(home, key, { pid: 123, version: '0.2.103', now: now + 180_001 }), null);
+        assert.equal(await readDemoWatchHealth(home, key, { pid: 123, version: '0.2.103', now: now - 10_000 }), null);
+        const raw = await readFile(join(home, 'relay', 'demo-watch-health', `${key}.json`), 'utf8');
+        assert.doesNotMatch(raw, /token|grant|password|workspace|email|Authorization/);
+    }
+    finally {
+        await rm(home, { recursive: true, force: true });
+    }
+});
+test('a departed supervisor cannot overwrite its successor receipt', async () => {
+    const home = await fixture();
+    try {
+        await writeDemoWatchHealth(home, receipt);
+        await writeFile(join(home, 'relay', 'supervisor.pid'), '124\n');
+        const newer = { ...receipt, pid: 124, state: 'timed_out',
+            stage: null, sourceState: null, code: 'demo_watch_cycle_timeout' };
+        await writeDemoWatchHealth(home, newer);
+        await assert.rejects(writeDemoWatchHealth(home, receipt), /supervisor changed/);
+        assert.deepEqual(await readDemoWatchHealth(home, key, { pid: 124, version: '0.2.103', now }), newer);
+    }
+    finally {
+        await rm(home, { recursive: true, force: true });
+    }
+});
+test('missing, malformed and foreign-key health cannot establish readiness', async () => {
+    const home = await fixture();
+    try {
+        const expected = { pid: 123, version: '0.2.103', now };
+        assert.equal(await readDemoWatchHealth(home, key, expected), null);
+        await writeDemoWatchHealth(home, receipt);
+        const path = join(home, 'relay', 'demo-watch-health', `${key}.json`);
+        await writeFile(path, JSON.stringify({ ...receipt, key: 'b'.repeat(64) }));
+        await assert.rejects(readDemoWatchHealth(home, key, expected), /invalid/);
+        await writeFile(path, 'private malformed payload');
+        await assert.rejects(readDemoWatchHealth(home, key, expected), /^Error: Demo watch health receipt is invalid\.$/);
+        await assert.rejects(writeDemoWatchHealth(home, { ...receipt, grant: 'never-persist' }), /invalid/);
+        await assert.rejects(writeDemoWatchHealth(home, { ...receipt, stage: 'private content' }), /invalid/);
+        await assert.rejects(writeDemoWatchHealth(home, { ...receipt, code: 'failure_on_completed' }), /invalid/);
+    }
+    finally {
+        await rm(home, { recursive: true, force: true });
+    }
+});
+test('health never follows directory or leaf symlinks', { skip: process.platform === 'win32' }, async () => {
+    const home = await fixture();
+    const outside = await mkdtemp(join(tmpdir(), 'dharma-demo-watch-health-outside-'));
+    try {
+        await symlink(outside, join(home, 'relay', 'demo-watch-health'));
+        await assert.rejects(writeDemoWatchHealth(home, receipt), /symlink/);
+        await rm(join(home, 'relay', 'demo-watch-health'));
+        await mkdir(join(home, 'relay', 'demo-watch-health'));
+        const target = join(outside, 'preserve.json');
+        await writeFile(target, JSON.stringify(receipt));
+        await symlink(target, join(home, 'relay', 'demo-watch-health', `${key}.json`));
+        await assert.rejects(readDemoWatchHealth(home, key, { pid: 123, version: '0.2.103', now }), /symlink/);
+        await assert.rejects(writeDemoWatchHealth(home, receipt), /symlink/);
+        assert.equal(await readFile(target, 'utf8'), JSON.stringify(receipt));
+    }
+    finally {
+        await rm(home, { recursive: true, force: true });
+        await rm(outside, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=demoWatchHealth.test.js.map

package/dist/demoWatchHealth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoWatchHealth.test.js","sourceRoot":"","sources":["../src/demoWatchHealth.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,oBAAoB,EAAwB,MAAM,sBAAsB,CAAC;AAEtI,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AACnD,MAAM,OAAO,GAAoB,EAAE,MAAM,EAAE,6BAA6B,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;IACrF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,WAAW;IAC/E,KAAK,EAAE,mCAAmC,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAErF,IAAI,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;IAC7G,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,IAAI,MAAmB,CAAC;IACxB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,QAAQ,GAAG,6BAA6B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS;QAC5F,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1C,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,UAAU,IAAI,CAAC,CAAC;QAClC,CAAC,EAAE,CAAC,CAAC;IACP,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;IAC/E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC;IAAC,MAAM,KAAK,CAAC;IACtB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;IAC5F,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS;QAC5F,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,cAAc,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE;oBAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACvD,CAAC,CAAC,CAAC,CAAC;QACN,CAAC,EAAE,CAAC,CAAC;IACP,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;IACtG,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,MAAM,QAAQ,GAAG,6BAA6B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS;QAC5F,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,IAAI,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,CAAC;IACb,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACxH,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS;QAC5F,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC1C,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC5E,CAAC,EAAE,CAAC,CAAC;IACP,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,CAAC;IACb,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;IACvG,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,QAAQ,GAAG,6BAA6B,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS;QAC5F,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,OAAO;IACpB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACjC,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QACvG,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAChG,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAChG,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/G,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9G,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5F,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;IACjF,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;IAC9E,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,WAAoB;YAC/D,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;QACrE,MAAM,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACvG,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;IACtF,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;QACrE,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;QAC1E,MAAM,SAAS,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;QACnD,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,iDAAiD,CAAC,CAAC;QAClH,MAAM,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,eAAe,EAAqB,CAAC,EAAE,SAAS,CAAC,CAAC;QACvH,MAAM,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACtG,MAAM,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5G,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE;IACzG,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mCAAmC,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;QACrE,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC9C,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,MAAM,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC;QAC/E,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACvG,MAAM,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACtH,CAAC,CAAC,CAAC"}

package/dist/demoWatchRegistry.d.ts

@@ -0,0 +1,17 @@
+export type DemoWatchRegistration = {
+    schema: 'dharma.demo-watch/v1';
+    hqUrl: string;
+    organizationId: string;
+    repositoryId: string;
+    normalizedRepository: string;
+    provider: 'codex' | 'claude' | 'agy' | 'hermes';
+    workspace: string;
+};
+export declare function demoWatchRegistrationKey(registration: DemoWatchRegistration): string;
+export declare function listDemoWatchRegistrations(home: string): Promise<DemoWatchRegistration[]>;
+export declare function registerDemoWatch(home: string, input: DemoWatchRegistration): Promise<{
+    created: boolean;
+    key: string;
+}>;
+export declare function unregisterDemoWatch(home: string, input: DemoWatchRegistration): Promise<boolean>;
+//# sourceMappingURL=demoWatchRegistry.d.ts.map

package/dist/demoWatchRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoWatchRegistry.d.ts","sourceRoot":"","sources":["../src/demoWatchRegistry.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,QAAQ,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AA0BF,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,qBAAqB,UAI3E;AAoCD,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAc/F;AAiBD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB;;;GAyBjF;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,oBAWnF"}

package/dist/demoWatchRegistry.js

@@ -0,0 +1,170 @@
+import { constants } from 'node:fs';
+import { createHash, randomUUID } from 'node:crypto';
+import { link, lstat, mkdir, open, readdir, realpath, unlink } from 'node:fs/promises';
+import { isAbsolute, join, resolve } from 'node:path';
+import { normalizeHqUrl } from '@dharma-ai-labs/agent-fabric-relay-client';
+const MAXIMUM_REGISTRATIONS = 32;
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const FILE = /^[a-f0-9]{64}\.json$/;
+function validate(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new Error('Demo watch registration is invalid.');
+    }
+    const row = value;
+    const keys = ['schema', 'hqUrl', 'organizationId', 'repositoryId',
+        'normalizedRepository', 'provider', 'workspace'];
+    if (Object.keys(row).length !== keys.length || keys.some(key => !Object.hasOwn(row, key))
+        || row.schema !== 'dharma.demo-watch/v1'
+        || typeof row.hqUrl !== 'string' || normalizeHqUrl(row.hqUrl) !== row.hqUrl
+        || typeof row.organizationId !== 'string' || !/^org_[A-Za-z0-9]+$/.test(row.organizationId)
+        || typeof row.repositoryId !== 'string' || !UUID.test(row.repositoryId)
+        || typeof row.normalizedRepository !== 'string' || row.normalizedRepository.length > 500
+        || !/^[A-Za-z0-9.-]+\/[A-Za-z0-9._/-]+$/.test(row.normalizedRepository)
+        || row.normalizedRepository.split('/').some(part => !part || part === '.' || part === '..')
+        || typeof row.provider !== 'string' || !['codex', 'claude', 'agy', 'hermes'].includes(row.provider)
+        || typeof row.workspace !== 'string' || !isAbsolute(row.workspace)
+        || resolve(row.workspace) !== row.workspace || row.workspace.length > 4096
+        || /[\r\n\0]/.test(row.workspace)) {
+        throw new Error('Demo watch registration is invalid or contains untrusted fields.');
+    }
+    return row;
+}
+export function demoWatchRegistrationKey(registration) {
+    const row = validate(registration);
+    return createHash('sha256').update(`${row.hqUrl}\0${row.organizationId}\0${row.repositoryId}`)
+        .digest('hex');
+}
+async function directory(home, create) {
+    let current = resolve(home);
+    for (const segment of ['', 'relay', 'demo-watches']) {
+        if (segment)
+            current = join(current, segment);
+        if (create && segment)
+            await mkdir(current, { mode: 0o700 }).catch((error) => {
+                if (error.code !== 'EEXIST')
+                    throw error;
+            });
+        const stat = await lstat(current).catch((error) => {
+            if (!create && error.code === 'ENOENT')
+                return null;
+            throw error;
+        });
+        if (!stat)
+            return null;
+        if (!stat.isDirectory() || stat.isSymbolicLink()) {
+            throw new Error('Demo watch registry directory or symlink is invalid.');
+        }
+    }
+    return current;
+}
+async function readRegistration(path) {
+    const entry = await lstat(path);
+    if (!entry.isFile() || entry.isSymbolicLink() || entry.size > 8192) {
+        throw new Error('Demo watch registry file or symlink is invalid.');
+    }
+    const handle = await open(path, constants.O_RDONLY | (constants.O_NOFOLLOW || 0));
+    try {
+        const actual = await handle.stat();
+        if (!actual.isFile() || actual.size > 8192 || (entry.ino !== 0 && actual.ino !== entry.ino)) {
+            throw new Error('Demo watch registry file changed during validation.');
+        }
+        return validate(JSON.parse(await handle.readFile({ encoding: 'utf8' })));
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function listDemoWatchRegistrations(home) {
+    const root = await directory(home, false);
+    if (!root)
+        return [];
+    const names = (await readdir(root)).filter(name => FILE.test(name)).sort();
+    if (names.length > MAXIMUM_REGISTRATIONS)
+        throw new Error('Demo watch registration limit exceeded.');
+    const result = [];
+    for (const name of names) {
+        const row = await readRegistration(join(root, name));
+        if (name !== `${demoWatchRegistrationKey(row)}.json`) {
+            throw new Error('Demo watch registry identity does not match its filename.');
+        }
+        result.push(row);
+    }
+    return result;
+}
+function assertSame(existing, requested) {
+    if (existing.workspace !== requested.workspace) {
+        throw new Error('demo_watch_workspace_conflict: this repository is watched from another checkout.');
+    }
+    if (existing.provider !== requested.provider) {
+        throw new Error('demo_watch_provider_conflict: this repository has another provider registration.');
+    }
+    if (JSON.stringify(existing) !== JSON.stringify(requested)) {
+        const keys = Object.keys(requested);
+        if (keys.some(key => existing[key] !== requested[key])) {
+            throw new Error('Demo watch registration conflicts with its existing scope.');
+        }
+    }
+}
+export async function registerDemoWatch(home, input) {
+    const row = validate(input);
+    if (await realpath(row.workspace) !== row.workspace) {
+        throw new Error('Demo watch workspace must be its canonical path.');
+    }
+    const root = (await directory(home, true));
+    const key = demoWatchRegistrationKey(row);
+    const target = join(root, `${key}.json`);
+    const temporary = join(root, `.${key}.${randomUUID()}.tmp`);
+    const handle = await open(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | (constants.O_NOFOLLOW || 0), 0o600);
+    try {
+        await handle.writeFile(`${JSON.stringify(row)}\n`);
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+    let created = false;
+    try {
+        // A no-replace link makes simultaneous enrollment idempotent without overwriting another checkout.
+        try {
+            await link(temporary, target);
+            created = true;
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+            assertSame(await readRegistration(target), row);
+        }
+        try {
+            await listDemoWatchRegistrations(home);
+        }
+        catch (error) {
+            if (created)
+                await unlink(target);
+            throw error;
+        }
+        return { created, key };
+    }
+    finally {
+        await unlink(temporary);
+    }
+}
+export async function unregisterDemoWatch(home, input) {
+    const row = validate(input);
+    const root = await directory(home, false);
+    if (!root)
+        return false;
+    const target = join(root, `${demoWatchRegistrationKey(row)}.json`);
+    let existing;
+    try {
+        existing = await readRegistration(target);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+    assertSame(existing, row);
+    await unlink(target);
+    return true;
+}
+//# sourceMappingURL=demoWatchRegistry.js.map

package/dist/demoWatchRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoWatchRegistry.js","sourceRoot":"","sources":["../src/demoWatchRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAE3E,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,IAAI,GAAG,4EAA4E,CAAC;AAC1F,MAAM,IAAI,GAAG,sBAAsB,CAAC;AAYpC,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc;QAC/D,sBAAsB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;WACpF,GAAG,CAAC,MAAM,KAAK,sBAAsB;WACrC,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,KAAK;WACxE,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;WACxF,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;WACpE,OAAO,GAAG,CAAC,oBAAoB,KAAK,QAAQ,IAAI,GAAG,CAAC,oBAAoB,CAAC,MAAM,GAAG,GAAG;WACrF,CAAC,oCAAoC,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC;WACpE,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;WACxF,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;WAChG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;WAC/D,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI;WACvE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,GAA4B,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,YAAmC;IAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,cAAc,KAAK,GAAG,CAAC,YAAY,EAAE,CAAC;SAC3F,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,MAAe;IACpD,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,KAAK,MAAM,OAAO,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;QACpD,IAAI,OAAO;YAAE,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,IAAI,OAAO;YAAE,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;gBAClG,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAC3C,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;YACvE,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACrC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACrG,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,GAAG,wBAAwB,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,QAA+B,EAAE,SAAgC;IACnF,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAoC,CAAC;QACvE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAA4B;IAChF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EACjC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClG,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;YACxE,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,mGAAmG;QACnG,IAAI,CAAC;YAAC,MAAM,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;QACtD,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,UAAU,CAAC,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC;YAAC,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAC/C,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,OAAO;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAA4B;IAClF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QAAC,QAAQ,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAClD,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IACpG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1B,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/demoWatchRegistry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=demoWatchRegistry.test.d.ts.map

package/dist/demoWatchRegistry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoWatchRegistry.test.d.ts","sourceRoot":"","sources":["../src/demoWatchRegistry.test.ts"],"names":[],"mappings":""}

package/dist/demoWatchRegistry.test.js

@@ -0,0 +1,146 @@
+import assert from 'node:assert/strict';
+import { mkdtemp, mkdir, readFile, realpath, rm, symlink, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { basename, join } from 'node:path';
+import test from 'node:test';
+import { demoWatchRegistrationKey, listDemoWatchRegistrations, registerDemoWatch, unregisterDemoWatch } from './demoWatchRegistry.js';
+const scope = {
+    hqUrl: 'https://demo.example.test', organizationId: 'org_demo123',
+    repositoryId: '00000000-0000-4000-8000-000000000001',
+    normalizedRepository: 'github.com/example/repository', provider: 'codex',
+};
+async function fixture(parent = tmpdir()) {
+    const root = await realpath(await mkdtemp(join(parent, 'dharma-demo-watch-')));
+    const home = join(root, 'home');
+    const workspace = join(root, 'workspace');
+    await mkdir(home);
+    await mkdir(workspace);
+    return { root, home, workspace, registration: { schema: 'dharma.demo-watch/v1',
+            ...scope, workspace } };
+}
+test('Demo watch registration is scoped, credential-free and idempotent', async () => {
+    const f = await fixture();
+    try {
+        assert.equal((await registerDemoWatch(f.home, f.registration)).created, true);
+        assert.equal((await registerDemoWatch(f.home, f.registration)).created, false);
+        assert.deepEqual(await listDemoWatchRegistrations(f.home), [f.registration]);
+        const bytes = await readFile(join(f.home, 'relay', 'demo-watches', `${demoWatchRegistrationKey(f.registration)}.json`), 'utf8');
+        assert.equal(bytes.includes('grant'), false);
+        assert.equal(bytes.includes('privateKey'), false);
+        assert.equal(bytes.includes('installationId'), false);
+    }
+    finally {
+        await rm(f.root, { recursive: true, force: true });
+    }
+});
+test('fixtures canonicalize an aliased temporary root without accepting an alias in a registration', async () => {
+    const root = await realpath(await mkdtemp(join(tmpdir(), 'dharma-watch-temp-alias-')));
+    const target = join(root, 'target');
+    const alias = join(root, 'alias');
+    try {
+        await mkdir(target);
+        await symlink(target, alias, process.platform === 'win32' ? 'junction' : 'dir');
+        const f = await fixture(alias);
+        assert.equal(f.workspace, await realpath(f.workspace));
+        await registerDemoWatch(f.home, f.registration);
+        await assert.rejects(registerDemoWatch(f.home, { ...f.registration,
+            workspace: join(alias, basename(f.root), 'workspace') }), /canonical path/);
+        assert.deepEqual(await listDemoWatchRegistrations(f.home), [f.registration]);
+    }
+    finally {
+        await rm(root, { recursive: true, force: true });
+    }
+});
+test('concurrent registration converges and never overwrites another checkout', async () => {
+    const f = await fixture();
+    try {
+        const results = await Promise.all(Array.from({ length: 10 }, () => registerDemoWatch(f.home, f.registration)));
+        assert.equal(results.filter(result => result.created).length, 1);
+        const other = join(f.root, 'other');
+        await mkdir(other);
+        await assert.rejects(registerDemoWatch(f.home, { ...f.registration, workspace: other }), /demo_watch_workspace_conflict/);
+        assert.deepEqual(await listDemoWatchRegistrations(f.home), [f.registration]);
+    }
+    finally {
+        await rm(f.root, { recursive: true, force: true });
+    }
+});
+test('registration rejects untrusted fields and invalid scope', async () => {
+    const f = await fixture();
+    try {
+        for (const override of [{ grant: 'never-save-me' }, { workspace: '../foreign' },
+            { hqUrl: 'https://secret@example.test' }, { repositoryId: '../foreign' },
+            { provider: 'shell' }, { normalizedRepository: 'repo\ncommand' }]) {
+            await assert.rejects(registerDemoWatch(f.home, { ...f.registration, ...override }));
+        }
+        assert.deepEqual(await listDemoWatchRegistrations(f.home), []);
+    }
+    finally {
+        await rm(f.root, { recursive: true, force: true });
+    }
+});
+test('registration and listing reject symlink redirection and forged filenames', async () => {
+    const f = await fixture();
+    try {
+        await mkdir(join(f.home, 'relay'));
+        await symlink(f.workspace, join(f.home, 'relay', 'demo-watches'), 'dir');
+        await assert.rejects(registerDemoWatch(f.home, f.registration), /symlink|directory/);
+        await rm(join(f.home, 'relay', 'demo-watches'));
+        await registerDemoWatch(f.home, f.registration);
+        const directory = join(f.home, 'relay', 'demo-watches');
+        await writeFile(join(directory, `${'a'.repeat(64)}.json`), JSON.stringify(f.registration));
+        await assert.rejects(listDemoWatchRegistrations(f.home), /identity/);
+    }
+    finally {
+        await rm(f.root, { recursive: true, force: true });
+    }
+});
+test('unregister removes only its scope and preserves workspace content', async () => {
+    const f = await fixture();
+    try {
+        await writeFile(join(f.workspace, 'preserve.txt'), 'customer work');
+        await registerDemoWatch(f.home, f.registration);
+        await registerDemoWatch(f.home, { ...f.registration,
+            repositoryId: '00000000-0000-4000-8000-000000000002' });
+        assert.equal(await unregisterDemoWatch(f.home, f.registration), true);
+        assert.equal(await unregisterDemoWatch(f.home, f.registration), false);
+        assert.equal((await listDemoWatchRegistrations(f.home)).length, 1);
+        assert.equal(await readFile(join(f.workspace, 'preserve.txt'), 'utf8'), 'customer work');
+    }
+    finally {
+        await rm(f.root, { recursive: true, force: true });
+    }
+});
+test('capacity is bounded and a rejected registration leaves existing scopes intact', async () => {
+    const f = await fixture();
+    try {
+        for (let index = 1; index <= 32; index += 1) {
+            await registerDemoWatch(f.home, { ...f.registration,
+                repositoryId: `00000000-0000-4000-8000-${String(index).padStart(12, '0')}` });
+        }
+        await assert.rejects(registerDemoWatch(f.home, { ...f.registration,
+            repositoryId: '00000000-0000-4000-8000-000000000033' }), /limit/);
+        assert.equal((await listDemoWatchRegistrations(f.home)).length, 32);
+    }
+    finally {
+        await rm(f.root, { recursive: true, force: true });
+    }
+});
+test('leaf symlink never supplies a registration or gets overwritten', async () => {
+    const f = await fixture();
+    try {
+        await registerDemoWatch(f.home, f.registration);
+        const target = join(f.home, 'relay', 'demo-watches', `${demoWatchRegistrationKey(f.registration)}.json`);
+        await rm(target);
+        const outside = join(f.workspace, 'outside.json');
+        await writeFile(outside, JSON.stringify(f.registration));
+        await symlink(outside, target, 'file');
+        await assert.rejects(listDemoWatchRegistrations(f.home), /symlink/);
+        await assert.rejects(registerDemoWatch(f.home, f.registration), /symlink/);
+        assert.deepEqual(JSON.parse(await readFile(outside, 'utf8')), f.registration);
+    }
+    finally {
+        await rm(f.root, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=demoWatchRegistry.test.js.map

package/dist/demoWatchRegistry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"demoWatchRegistry.test.js","sourceRoot":"","sources":["../src/demoWatchRegistry.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,wBAAwB,EAAE,0BAA0B,EAC3D,iBAAiB,EAAE,mBAAmB,EAA8B,MAAM,wBAAwB,CAAC;AAErG,MAAM,KAAK,GAAG;IACZ,KAAK,EAAE,2BAA2B,EAAE,cAAc,EAAE,aAAa;IACjE,YAAY,EAAE,sCAAsC;IACpD,oBAAoB,EAAE,+BAA+B,EAAE,QAAQ,EAAE,OAAgB;CAClF,CAAC;AAEF,KAAK,UAAU,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE;IACtC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,sBAA+B;YACrF,GAAG,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;AAC5B,CAAC;AAED,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/E,MAAM,CAAC,SAAS,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,EAC/D,GAAG,wBAAwB,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,KAAK,CAAC,CAAC;IACxD,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;IAC9G,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChF,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACvD,MAAM,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,YAAY;YAChE,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC9E,MAAM,CAAC,SAAS,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/E,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;IACzF,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAChE,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EACrF,+BAA+B,CAAC,CAAC;QACnC,MAAM,CAAC,SAAS,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/E,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE;YAC7E,EAAE,KAAK,EAAE,6BAA6B,EAAE,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE;YACxE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,oBAAoB,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;YACpE,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAC3C,EAAE,GAAG,CAAC,CAAC,YAAY,EAAE,GAAG,QAAQ,EAA2B,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACnC,MAAM,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC;QACzE,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACrF,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QAChD,MAAM,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QACxD,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3F,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;IACvE,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,eAAe,CAAC,CAAC;QACpE,MAAM,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,YAAY;YACjD,YAAY,EAAE,sCAAsC,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE,eAAe,CAAC,CAAC;IAC3F,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,YAAY;gBACjD,YAAY,EAAE,2BAA2B,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,YAAY;YAChE,YAAY,EAAE,sCAAsC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;IAChF,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,wBAAwB,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACzG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACzD,MAAM,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;QACpE,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3E,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnE,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -88,6 +88,7 @@ export declare function materializeWorkspacePolicy(input: {
     policy: OrganizationPolicy;
     applied: boolean;
 }>;
+export declare function withRelayStartupMutation<T>(operation: () => Promise<T>, home?: string): Promise<T>;
 export declare function withWorkspacePolicyRefreshLock<T>(workspaceId: string, operation: () => Promise<T>): Promise<T>;
 export declare function withWorkspaceSkillActivationLock<T>(workspaceId: string, provider: ProviderId, operation: () => Promise<T>): Promise<T>;
 export declare function applyServerEvidencePolicy(base: OrganizationPolicy, value: unknown, serverPublicKeyEd25519: string, organizationId: string, workspaceId: string, now?: Date): OrganizationPolicy;
@@ -141,7 +142,10 @@ export declare function deferUnavailableRelayRetention<T>(operation: () => Promi
     reason: 'retention_not_ready';
 }>;
 export declare function requireCompletedBootstrapEvidence(result: BootstrapEvidenceSynchronization, discovered: number): void;
-export declare function stableRepositoryLauncherContents(version?: string): {
+export declare function stableRepositoryLauncherContents(version?: string, runtime?: {
+    platform: NodeJS.Platform;
+    nodeDirectory: string;
+}): {
     shell: string;
     windows: string;
 };