@hearsay-tools/squawk 0.0.0-stage → 0.17.0-dev.5682

package/dist/server/run-event-feed.js

@@ -0,0 +1,203 @@
+import { LIVE_BYTE_LIMIT, LIVE_EVENT_LIMIT } from '../contract/index.js';
+import { decodeLiveCursor } from '../runs/event-history.js';
+import { streamHistoryAfter } from '../runs/history-stream.js';
+export class LiveFeedReset extends Error {
+    status = 413;
+}
+function parsePersistedRunEvent(line) {
+    try {
+        const value = JSON.parse(line);
+        if (Number.isSafeInteger(value.seq) && typeof value.type === 'string' && typeof value.ts === 'string')
+            return value;
+    }
+    catch { /* Malformed historical lines have never belonged to replay. */ }
+    return undefined;
+}
+function acceptRunEvent(scan, event, length, byteLimit) {
+    if (event.seq <= scan.afterSeq)
+        return true;
+    if (length > byteLimit)
+        throw new LiveFeedReset('event exceeds live batch limit — reload history');
+    if (scan.events.length >= LIVE_EVENT_LIMIT || scan.bytes + length > byteLimit) {
+        scan.hasMore = true;
+        return false;
+    }
+    scan.events.push(event);
+    scan.bytes += length;
+    scan.afterSeq = event.seq;
+    return true;
+}
+function acceptSnapshotsBefore(scan, seq, byteLimit) {
+    while (scan.snapshotIndex < scan.snapshots.length && scan.snapshots[scan.snapshotIndex].seq < seq) {
+        const snapshot = scan.snapshots[scan.snapshotIndex];
+        if (!acceptRunEvent(scan, snapshot, Buffer.byteLength(JSON.stringify(snapshot)) + 1, byteLimit))
+            return false;
+        scan.snapshotIndex++;
+    }
+    return true;
+}
+/** Accept or skip one complete history line and advance the offset, or stop the scan when the batch is full. */
+function consumePersistedLine(scan, line, byteLimit) {
+    const length = line.length + 1;
+    if (length > byteLimit)
+        throw new LiveFeedReset('event exceeds live batch limit — reload history');
+    const event = parsePersistedRunEvent(line.toString('utf8'));
+    if (event && scan.snapshot && event.seq > scan.snapshot.throughSeq) {
+        scan.laterWrites = true;
+        return 'stop';
+    }
+    if (event && event.seq > scan.afterSeq) {
+        if (!acceptSnapshotsBefore(scan, event.seq, byteLimit) || !acceptRunEvent(scan, event, length, byteLimit)) {
+            return 'stop';
+        }
+    }
+    scan.offset += length;
+    return 'continue';
+}
+/** The returned cursor covers exactly the accepted prefix, including complete ignored lines.
+ * Capture sorted live snapshots and their sequence boundary together BEFORE disk IO.
+ * Later writes wait for the next capture: otherwise a newer persisted event could
+ * acknowledge live content emitted during the scan but absent from the snapshots.
+ * Keep the byte offset at the first unaccepted persisted record. */
+export async function readRunEventBatch(dataDir, demand, signal, byteLimit = LIVE_BYTE_LIMIT, snapshot) {
+    signal.throwIfAborted();
+    const start = demand.cursor ? decodeLiveCursor(demand.cursor) : { offset: 0, boundarySeq: 0 };
+    const scan = {
+        offset: start.offset,
+        afterSeq: Math.max(demand.afterSeq, start.boundarySeq),
+        events: [],
+        bytes: 0,
+        hasMore: false,
+        laterWrites: false,
+        snapshots: snapshot?.events ?? [],
+        snapshotIndex: 0,
+        ...(snapshot ? { snapshot } : {}),
+    };
+    let pending = Buffer.alloc(0);
+    outer: for await (const chunk of streamHistoryAfter(dataDir, demand.runId, scan.offset, signal)) {
+        pending = pending.length ? Buffer.concat([pending, chunk]) : chunk;
+        let boundary;
+        while ((boundary = pending.indexOf(10)) !== -1) {
+            signal.throwIfAborted();
+            const line = pending.subarray(0, boundary);
+            if (consumePersistedLine(scan, line, byteLimit) === 'stop')
+                break outer;
+            pending = pending.subarray(boundary + 1);
+        }
+        if (pending.length > byteLimit)
+            throw new LiveFeedReset('event exceeds live batch limit — reload history');
+    }
+    signal.throwIfAborted();
+    if (!scan.hasMore)
+        acceptSnapshotsBefore(scan, Infinity, byteLimit);
+    // No newline means a writer is still appending: do not acknowledge that partial record.
+    return {
+        type: 'batch', projectId: demand.projectId, runId: demand.runId, events: scan.events, afterSeq: scan.afterSeq, hasMore: scan.hasMore || scan.laterWrites,
+        cursor: Buffer.from(JSON.stringify({ v: 1, kind: 'live', offset: scan.offset, boundarySeq: scan.afterSeq })).toString('base64url'),
+    };
+}
+/** Freeze the finite scan even for a cold store with no in-memory sequence yet.
+ * Observing its first new write gives the upper boundary without rebuilding an
+ * entire cold/compressed transcript just to discover its final sequence. */
+export async function readFiniteRunFeed(context, demand, signal) {
+    const snapshot = context.store.liveReadSnapshot(demand.runId);
+    const bound = ({ runId, event }) => {
+        if (runId === demand.runId)
+            snapshot.throughSeq = Math.min(snapshot.throughSeq, event.seq - 1);
+    };
+    context.store.on('event', bound);
+    try {
+        return await readRunEventBatch(context.store.sourceDataDir(demand.runId), demand, signal, LIVE_BYTE_LIMIT, snapshot);
+    }
+    finally {
+        context.store.off('event', bound);
+    }
+}
+/** Attach before reading; serialize replay and live writes; bound slow-client memory. */
+export async function subscribeRunFeed(context, demand, handlers, signal, byteLimit = LIVE_BYTE_LIMIT) {
+    if (signal.aborted)
+        return;
+    const controller = new AbortController();
+    const stop = () => controller.abort();
+    signal.addEventListener('abort', stop, { once: true });
+    const stopped = new Promise(resolve => { controller.signal.addEventListener('abort', () => resolve(), { once: true }); });
+    const write = async (event) => {
+        await Promise.race([handlers.event(event), stopped]);
+        controller.signal.throwIfAborted();
+    };
+    let maxSeq = demand.afterSeq;
+    let pendingBytes = 0;
+    let pending = [];
+    let wake;
+    const reset = (reason, status = 409) => { if (!controller.signal.aborted) {
+        stop();
+        handlers.reset(reason, status);
+    } };
+    const onEvent = ({ runId, event }) => {
+        if (runId !== demand.runId || event.seq <= maxSeq || controller.signal.aborted)
+            return;
+        pendingBytes += Buffer.byteLength(JSON.stringify(event));
+        if (pendingBytes > byteLimit) {
+            reset('live buffer exceeded — reload history');
+            return;
+        }
+        pending.push(event);
+        wake?.();
+    };
+    const onDeleted = (id) => { if (id === demand.runId)
+        reset('run removed'); };
+    const onClosed = () => reset('project removed');
+    context.store.on('closed', onClosed);
+    context.store.on('event', onEvent);
+    context.store.on('deleted', onDeleted);
+    const detached = () => {
+        context.store.off('closed', onClosed);
+        context.store.off('event', onEvent);
+        context.store.off('deleted', onDeleted);
+        pending = [];
+        wake?.();
+    };
+    controller.signal.addEventListener('abort', detached, { once: true });
+    try {
+        let cursor = demand.cursor;
+        do {
+            const batch = await readRunEventBatch(context.store.sourceDataDir(demand.runId), { ...demand, ...(cursor ? { cursor } : {}), afterSeq: maxSeq }, controller.signal, byteLimit);
+            for (const event of batch.events) {
+                controller.signal.throwIfAborted();
+                if (event.seq <= maxSeq)
+                    continue;
+                await write(event);
+                maxSeq = event.seq;
+            }
+            maxSeq = Math.max(maxSeq, batch.afterSeq);
+            cursor = batch.cursor;
+            if (!batch.hasMore)
+                break;
+        } while (!controller.signal.aborted);
+        while (!controller.signal.aborted) {
+            // RunStore assigns one monotonic clock per run; ignore duplicate/reordered replays.
+            const event = pending.shift();
+            if (event) {
+                pendingBytes -= Buffer.byteLength(JSON.stringify(event));
+                if (event.seq > maxSeq) {
+                    await write(event);
+                    maxSeq = event.seq;
+                }
+            }
+            else {
+                await new Promise(resolve => { wake = resolve; });
+                wake = undefined;
+            }
+        }
+    }
+    catch (error) {
+        if (!controller.signal.aborted)
+            reset(error instanceof Error ? error.message : 'feed failed', error instanceof LiveFeedReset ? 413 : 409);
+    }
+    finally {
+        stop();
+        detached();
+        signal.removeEventListener('abort', stop);
+    }
+}
+//# sourceMappingURL=run-event-feed.js.map

package/dist/server/run-event-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-event-feed.js","sourceRoot":"","sources":["../../src/server/run-event-feed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAE7F,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAG/D,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,GAAG,GAAG,CAAC;CACvB;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAa,CAAC;QAC3C,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IACtH,CAAC;IAAC,MAAM,CAAC,CAAC,+DAA+D,CAAC,CAAC;IAC3E,OAAO,SAAS,CAAC;AACnB,CAAC;AAcD,SAAS,cAAc,CAAC,IAAuB,EAAE,KAAe,EAAE,MAAc,EAAE,SAAiB;IACjG,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,MAAM,GAAG,SAAS;QAAE,MAAM,IAAI,aAAa,CAAC,iDAAiD,CAAC,CAAC;IACnG,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,gBAAgB,IAAI,IAAI,CAAC,KAAK,GAAG,MAAM,GAAG,SAAS,EAAE,CAAC;QAC9E,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;IACrB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAuB,EAAE,GAAW,EAAE,SAAiB;IACpF,OAAO,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAE,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;QACnG,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAE,CAAC;QACrD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9G,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gHAAgH;AAChH,SAAS,oBAAoB,CAC3B,IAAuB,EACvB,IAAY,EACZ,SAAiB;IAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/B,IAAI,MAAM,GAAG,SAAS;QAAE,MAAM,IAAI,aAAa,CAAC,iDAAiD,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACnE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,CAAC,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAC1G,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;IACtB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;oEAIoE;AACpE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe,EAAE,MAAqB,EAAE,MAAmB,EAAE,SAAS,GAAG,eAAe,EAAE,QAAkE;IAClM,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAC9F,MAAM,IAAI,GAAsB;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC;QACtD,MAAM,EAAE,EAAE;QACV,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,QAAQ,EAAE,MAAM,IAAI,EAAE;QACjC,aAAa,EAAE,CAAC;QAChB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAC;IACF,IAAI,OAAO,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtC,KAAK,EAAE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QAChG,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,IAAI,QAAgB,CAAC;QACrB,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC3C,IAAI,oBAAoB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,MAAM;gBAAE,MAAM,KAAK,CAAC;YACxE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS;YAAE,MAAM,IAAI,aAAa,CAAC,iDAAiD,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpE,wFAAwF;IACxF,OAAO;QACL,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW;QACxJ,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;KACnI,CAAC;AACJ,CAAC;AAED;;4EAE4E;AAC5E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAkD,EAAE,MAAqB,EAAE,MAAmB;IAE9F,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAsC,EAAE,EAAE;QACrE,IAAI,KAAK,KAAK,MAAM,CAAC,KAAK;YAAE,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACjG,CAAC,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC;QAAC,OAAO,MAAM,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IAAC,CAAC;YACrH,CAAC;QAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;AAChD,CAAC;AAED,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAkD,EAClD,MAAqB,EACrB,QAAoG,EACpG,MAAmB,EACnB,SAAS,GAAG,eAAe;IAE3B,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO;IAC3B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACtC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChI,MAAM,KAAK,GAAG,KAAK,EAAE,KAAe,EAAE,EAAE;QACtC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;IACrC,CAAC,CAAC;IACF,IAAI,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,OAAO,GAAe,EAAE,CAAC;IAC7B,IAAI,IAA8B,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,MAAM,GAAc,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,IAAI,EAAE,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IAC3I,MAAM,OAAO,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAsC,EAAE,EAAE;QACvE,IAAI,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACvF,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,IAAI,YAAY,GAAG,SAAS,EAAE,CAAC;YAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,EAAE,EAAE,CAAC;IACX,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,MAAM,CAAC,KAAK;QAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAChD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACxC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,EAAE,EAAE,CAAC;IACX,CAAC,CAAC;IACF,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,GAAG,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC/K,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjC,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACnC,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM;oBAAE,SAAS;gBAClC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;gBACnB,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC;YACrB,CAAC;YACD,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,MAAM;QAC5B,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE;QACrC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClC,oFAAoF;YACpF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzD,IAAI,KAAK,CAAC,GAAG,GAAG,MAAM,EAAE,CAAC;oBAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC;gBAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxD,IAAI,GAAG,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,YAAY,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5I,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC;QACX,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC"}

package/dist/server/self-update-routes.d.ts

@@ -0,0 +1,308 @@
+import type { Home } from '../home/home.ts';
+import type { RunStore } from '../runs/store.ts';
+import { SelfUpdateService } from '../self-update/service.ts';
+/** The `createApp` dependency this family adds to `ServerDeps`. */
+export interface SelfUpdateServerDeps {
+    home: Home;
+    /** The cockpit's own updater (`/api/v1/workspace/self-update`, src/self-update/). Built by
+     *  the CLI, which knows the entry file, the port and how to restart; absent in tests and for
+     *  bare `createApp` callers, where the family answers a read-only "not available" status. */
+    selfUpdate?: SelfUpdateService;
+}
+/**
+ * The browser supplies a version STRING (validated shape, never a URL, a path or a tarball)
+ * and a channel; the server resolves both against the npm registry and its own managed
+ * layout. Allowed in hosted mode on purpose: an update pulls a published package from the
+ * registry, so the request cannot inject code, and a VPS behind the installer's Basic auth
+ * is exactly where "update from the cockpit" replaces `cezar server-deploy` — but hosted
+ * applies are FORWARD-ONLY (see the guard on /apply below).
+ */
+export declare function createSelfUpdateRoutes(deps: SelfUpdateServerDeps & {
+    version: string;
+}, 
+/** False on a hosted cockpit: no checkout paths, registry releases only, forward-only applies. */
+localHandoff: () => boolean, 
+/** Every open project's store: an update restarts the process under all of them. */
+stores: () => readonly RunStore[]): import("hono/hono-base").HonoBase<import("hono/types").BlankEnv, {
+    "/workspace/self-update": {
+        $get: {
+            output: {
+                version: string;
+                installKind: "checkout" | "global-npm" | "managed" | "npx" | "unknown";
+                entry: string;
+                canSelfUpdate: boolean;
+                reason?: string | undefined;
+                channel: "development" | "nightly" | "stable";
+                restartMode: "reexec" | "supervisor";
+                latest: {
+                    stable: string | null;
+                    nightly: string | null;
+                };
+                updateAvailable: string | null;
+                checkedAt: string | null;
+                installed: {
+                    id: string;
+                    version: string;
+                    source: "link" | "local" | "registry";
+                    installedAt: string;
+                    active: boolean;
+                    branch?: string | undefined;
+                    checkout?: string | undefined;
+                }[];
+                available: {
+                    version: string;
+                    channel: "nightly" | "preview" | "stable";
+                    publishedAt: string | null;
+                    installed: boolean;
+                }[];
+                job: {
+                    status: "failed" | "restarting" | "running";
+                    target: string;
+                    startedAt: string;
+                    finishedAt: string | null;
+                    log: string[];
+                    error?: string | undefined;
+                } | null;
+                activeRuns: number;
+            };
+            outputFormat: "json";
+            status: import("hono/utils/http-status").ContentfulStatusCode;
+            input: {};
+        };
+    };
+} & {
+    "/workspace/self-update/refresh": {
+        $post: {
+            output: {
+                version: string;
+                installKind: "checkout" | "global-npm" | "managed" | "npx" | "unknown";
+                entry: string;
+                canSelfUpdate: boolean;
+                reason?: string | undefined;
+                channel: "development" | "nightly" | "stable";
+                restartMode: "reexec" | "supervisor";
+                latest: {
+                    stable: string | null;
+                    nightly: string | null;
+                };
+                updateAvailable: string | null;
+                checkedAt: string | null;
+                installed: {
+                    id: string;
+                    version: string;
+                    source: "link" | "local" | "registry";
+                    installedAt: string;
+                    active: boolean;
+                    branch?: string | undefined;
+                    checkout?: string | undefined;
+                }[];
+                available: {
+                    version: string;
+                    channel: "nightly" | "preview" | "stable";
+                    publishedAt: string | null;
+                    installed: boolean;
+                }[];
+                job: {
+                    status: "failed" | "restarting" | "running";
+                    target: string;
+                    startedAt: string;
+                    finishedAt: string | null;
+                    log: string[];
+                    error?: string | undefined;
+                } | null;
+                activeRuns: number;
+            };
+            outputFormat: "json";
+            status: import("hono/utils/http-status").ContentfulStatusCode;
+            input: {};
+        };
+    };
+} & {
+    "/workspace/self-update/development": {
+        $get: {
+            output: {
+                error: string;
+                code?: "invalid_input" | undefined;
+            };
+            outputFormat: "json";
+            status: 400;
+            input: {
+                query: {
+                    refresh?: "1" | undefined;
+                };
+            };
+        } | {
+            output: {
+                checkouts: {
+                    id: string;
+                    branch: string;
+                    version: string;
+                    worktree: string;
+                    built: boolean;
+                    linked: boolean;
+                    commit: {
+                        sha: string;
+                        subject: string;
+                        at: string;
+                    } | null;
+                    builtAt: string | null;
+                    stale: boolean;
+                    task: {
+                        id: string;
+                        title: string;
+                        status: string;
+                    } | null;
+                    pr: number | null;
+                }[];
+                pulls: {
+                    available: boolean;
+                    reason?: string | undefined;
+                    repo: string;
+                    items: {
+                        number: number;
+                        title: string;
+                        author: string | null;
+                        branch: string;
+                        draft: boolean;
+                        updatedAt: string;
+                        url: string;
+                        version: string | null;
+                        publishedAt: string | null;
+                        installed: boolean;
+                    }[];
+                };
+            };
+            outputFormat: "json";
+            status: import("hono/utils/http-status").ContentfulStatusCode;
+            input: {
+                query: {
+                    refresh?: "1" | undefined;
+                };
+            };
+        };
+    };
+} & {
+    "/workspace/self-update/channel": {
+        $put: {
+            output: {
+                version: string;
+                installKind: "checkout" | "global-npm" | "managed" | "npx" | "unknown";
+                entry: string;
+                canSelfUpdate: boolean;
+                reason?: string | undefined;
+                channel: "development" | "nightly" | "stable";
+                restartMode: "reexec" | "supervisor";
+                latest: {
+                    stable: string | null;
+                    nightly: string | null;
+                };
+                updateAvailable: string | null;
+                checkedAt: string | null;
+                installed: {
+                    id: string;
+                    version: string;
+                    source: "link" | "local" | "registry";
+                    installedAt: string;
+                    active: boolean;
+                    branch?: string | undefined;
+                    checkout?: string | undefined;
+                }[];
+                available: {
+                    version: string;
+                    channel: "nightly" | "preview" | "stable";
+                    publishedAt: string | null;
+                    installed: boolean;
+                }[];
+                job: {
+                    status: "failed" | "restarting" | "running";
+                    target: string;
+                    startedAt: string;
+                    finishedAt: string | null;
+                    log: string[];
+                    error?: string | undefined;
+                } | null;
+                activeRuns: number;
+            };
+            outputFormat: "json";
+            status: import("hono/utils/http-status").ContentfulStatusCode;
+            input: {
+                json: {
+                    channel: "development" | "nightly" | "stable";
+                };
+            };
+        } | {
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 500;
+            input: {
+                json: {
+                    channel: "development" | "nightly" | "stable";
+                };
+            };
+        };
+    };
+} & {
+    "/workspace/self-update/apply": {
+        $post: {
+            output: {
+                version: string;
+                installKind: "checkout" | "global-npm" | "managed" | "npx" | "unknown";
+                entry: string;
+                canSelfUpdate: boolean;
+                reason?: string | undefined;
+                channel: "development" | "nightly" | "stable";
+                restartMode: "reexec" | "supervisor";
+                latest: {
+                    stable: string | null;
+                    nightly: string | null;
+                };
+                updateAvailable: string | null;
+                checkedAt: string | null;
+                installed: {
+                    id: string;
+                    version: string;
+                    source: "link" | "local" | "registry";
+                    installedAt: string;
+                    active: boolean;
+                    branch?: string | undefined;
+                    checkout?: string | undefined;
+                }[];
+                available: {
+                    version: string;
+                    channel: "nightly" | "preview" | "stable";
+                    publishedAt: string | null;
+                    installed: boolean;
+                }[];
+                job: {
+                    status: "failed" | "restarting" | "running";
+                    target: string;
+                    startedAt: string;
+                    finishedAt: string | null;
+                    log: string[];
+                    error?: string | undefined;
+                } | null;
+                activeRuns: number;
+            };
+            outputFormat: "json";
+            status: import("hono/utils/http-status").ContentfulStatusCode;
+            input: {
+                json: {
+                    version: string;
+                };
+            };
+        } | {
+            output: {
+                error: string;
+            };
+            outputFormat: "json";
+            status: 409;
+            input: {
+                json: {
+                    version: string;
+                };
+            };
+        };
+    };
+}, "/", "/workspace/self-update/apply">;

package/dist/server/self-update-routes.js

@@ -0,0 +1,80 @@
+import { Hono } from 'hono';
+import { selfUpdateApplyRequestSchema, selfUpdateChannelRequestSchema, selfUpdateDevelopmentQuerySchema } from '../contract/index.js';
+import { SelfUpdateBusyError, SelfUpdateService } from '../self-update/service.js';
+import { jsonZodValidator, queryZodValidator } from './validators.js';
+/** No injected updater (tests, embedded callers): a READ-ONLY service over the running entry.
+ *  It has no way to restart the process, so it must not install either — an install that flips
+ *  `current` under a process that keeps running the old code is the worst of both. */
+function readOnlySelfUpdate(version, localHandoff, home) {
+    return new SelfUpdateService({
+        home,
+        pkgName: '@wjarka/cezarion',
+        version,
+        entry: process.argv[1] ?? '',
+        restart: () => { },
+        readOnly: true,
+        trimPaths: () => !localHandoff(),
+    });
+}
+/**
+ * The browser supplies a version STRING (validated shape, never a URL, a path or a tarball)
+ * and a channel; the server resolves both against the npm registry and its own managed
+ * layout. Allowed in hosted mode on purpose: an update pulls a published package from the
+ * registry, so the request cannot inject code, and a VPS behind the installer's Basic auth
+ * is exactly where "update from the cockpit" replaces `cezar server-deploy` — but hosted
+ * applies are FORWARD-ONLY (see the guard on /apply below).
+ */
+export function createSelfUpdateRoutes(deps, 
+/** False on a hosted cockpit: no checkout paths, registry releases only, forward-only applies. */
+localHandoff, 
+/** Every open project's store: an update restarts the process under all of them. */
+stores) {
+    const selfUpdate = deps.selfUpdate ?? readOnlySelfUpdate(deps.version, localHandoff, deps.home);
+    const managedUpdateStatus = async (opts) => {
+        const activeRuns = [...new Set(stores())].reduce((count, store) => count + store.listRuns().filter(run => ['queued', 'waiting', 'running'].includes(run.status)).length, 0);
+        return { ...await selfUpdate.status({ ...opts, registryOnly: !localHandoff() }), activeRuns };
+    };
+    return new Hono()
+        .get('/workspace/self-update', async (c) => c.json(await managedUpdateStatus()))
+        .post('/workspace/self-update/refresh', async (c) => c.json(await managedUpdateStatus({ refresh: true })))
+        // The development channel's pickers: cezar's own worktrees and its open PRs' preview builds.
+        // A separate read because it costs a git call per worktree and a GitHub round trip.
+        .get('/workspace/self-update/development', queryZodValidator(selfUpdateDevelopmentQuerySchema), async (c) => c.json(await selfUpdate.development({ refresh: c.req.valid('query').refresh === '1' })))
+        .put('/workspace/self-update/channel', jsonZodValidator(selfUpdateChannelRequestSchema, { message: 'body must be { channel: "stable" | "nightly" | "development" }' }), async (c) => {
+        const { channel } = c.req.valid('json');
+        try {
+            await selfUpdate.setChannel(channel);
+        }
+        catch (error) {
+            return c.json({ error: error instanceof Error ? error.message : String(error) }, 500);
+        }
+        return c.json(await managedUpdateStatus());
+    })
+        .post('/workspace/self-update/apply', jsonZodValidator(selfUpdateApplyRequestSchema, { message: 'body must be { version }' }), async (c) => {
+        const { version: target } = c.req.valid('json');
+        // SECURITY: a hosted cockpit may only move FORWARD. Installing a published package cannot
+        // inject code, but installing an OLDER one can: every hosted-mode guard — the `/api/*`
+        // request-origin check (open-mercato/cezar#426), the `settingsAdmin` 409 that closes the agent-config hooks
+        // RCE path — lives in the running version, so a downgrade to a release that predates them
+        // re-opens exactly what they close, through a route those guards never get to see. A
+        // local cockpit keeps the full picker, downgrades included: there is no boundary left to
+        // escalate across when the caller already owns the machine. `forwardOnlyRefusal` decides
+        // what "forward" means — publish time, not just semver order, because a nightly for the
+        // next minor outranks every later patch of the current one.
+        if (!localHandoff()) {
+            const refusal = await selfUpdate.forwardOnlyRefusal(target);
+            if (refusal)
+                return c.json({ error: refusal }, 409);
+        }
+        try {
+            selfUpdate.apply(target, { registryOnly: !localHandoff() });
+        }
+        catch (error) {
+            if (error instanceof SelfUpdateBusyError)
+                return c.json({ error: error.message }, 409);
+            return c.json({ error: error instanceof Error ? error.message : String(error) }, 409);
+        }
+        return c.json(await managedUpdateStatus());
+    });
+}
+//# sourceMappingURL=self-update-routes.js.map

package/dist/server/self-update-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-update-routes.js","sourceRoot":"","sources":["../../src/server/self-update-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,4BAA4B,EAAE,8BAA8B,EAAE,gCAAgC,EAAE,MAAM,0CAA0C,CAAC;AAE1J,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAWtE;;sFAEsF;AACtF,SAAS,kBAAkB,CAAC,OAAe,EAAE,YAA2B,EAAE,IAAU;IAClF,OAAO,IAAI,iBAAiB,CAAC;QAC3B,IAAI;QACJ,OAAO,EAAE,kBAAkB;QAC3B,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;QAC5B,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;QACjB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,YAAY,EAAE;KACjC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAgD;AAChD,kGAAkG;AAClG,YAA2B;AAC3B,oFAAoF;AACpF,MAAiC;IAEjC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAChG,MAAM,mBAAmB,GAAG,KAAK,EAAE,IAA4B,EAAE,EAAE;QACjE,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC5K,OAAO,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;IAChG,CAAC,CAAC;IACF,OAAO,IAAI,IAAI,EAAE;SACd,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC;SAE/E,IAAI,CAAC,gCAAgC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,mBAAmB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAE1G,6FAA6F;QAC7F,oFAAoF;SACnF,GAAG,CAAC,oCAAoC,EAAE,iBAAiB,CAAC,gCAAgC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAC1G,CAAC,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC,CACxF;SAEA,GAAG,CAAC,gCAAgC,EAAE,gBAAgB,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,gEAAgE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClL,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC;SAED,IAAI,CAAC,8BAA8B,EAAE,gBAAgB,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzI,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChD,0FAA0F;QAC1F,uFAAuF;QACvF,4GAA4G;QAC5G,0FAA0F;QAC1F,qFAAqF;QACrF,yFAAyF;QACzF,yFAAyF;QACzF,wFAAwF;QACxF,4DAA4D;QAC5D,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAC5D,IAAI,OAAO;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC;YACH,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YACvF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/server/server-deps.d.ts

@@ -0,0 +1,40 @@
+import { type ProviderId, type ProviderStatusResponse } from '../core/provider-auth.ts';
+import type { TaskWebhooks } from '../runs/webhook.ts';
+import type { ProjectContext, ProjectContexts } from './project-context.ts';
+import type { ProviderRuntimeAuthObserver } from './provider-auth-runtime.ts';
+import type { ServerDeps, WorkspaceEventBus } from './server.ts';
+/** The host-wide services `createApp` always has: the injected one, or the real default. */
+type HostServiceKey = 'modelCatalog' | 'providerAuth' | 'workspaceConfig' | 'openTerminal' | 'openFile' | 'openApp';
+type HostServices = {
+    [K in HostServiceKey]: Exclude<ServerDeps[K], undefined>;
+};
+/**
+ * Resolve each host-wide service to the injected dependency or its real default. A default is
+ * built only when its dependency is absent (`??` short-circuits), in the order below, so a test
+ * that injects a service never pays for the real one.
+ */
+export declare function resolveServerDeps(deps: Pick<ServerDeps, HostServiceKey> & Pick<ServerDeps, 'home'>, bootRoot: string): HostServices;
+/** The host-wide provider closures the provider, models and start-gate routes share. */
+export declare function createProviderStatus(services: Pick<HostServices, 'modelCatalog' | 'providerAuth' | 'workspaceConfig'>): {
+    providerStatus: (options?: {
+        refresh?: boolean;
+    }) => Promise<ProviderStatusResponse>;
+    providerActionError: (required: readonly ProviderId[]) => Promise<string | null>;
+    invalidateHostModels: (provider: ProviderId) => void;
+};
+export declare function emitProviderRow(workspaceEvents: WorkspaceEventBus, providers: ProviderStatusResponse['providers'], id: ProviderId): void;
+/**
+ * The boot project's context is SEEDED from the deps the caller already built (src/index.ts
+ * `serveCommand` did the recover/prune/launch-key work at startup — observable boot behavior
+ * unchanged); it never enters the lazy map, so its `.ai/cezar` state is never double-opened. `id`
+ * starts as the reserved alias when registration was suppressed — handlers never read it; API
+ * payloads name the boot project via `resolveBootProject` instead.
+ */
+export declare function createBootContext(deps: Pick<ServerDeps, 'bootProjectId' | 'store' | 'manager' | 'automationStore' | 'home'>, bootRoot: string, bootDataDir: string): ProjectContext;
+/** Watch the boot store, every context already built, and each store or context built later. */
+export declare function watchProviderRuntimeAuth(providerRuntimeAuth: Pick<ProviderRuntimeAuthObserver, 'watch'>, bootContext: Pick<ProjectContext, 'store'>, contexts: Pick<ProjectContexts, 'ids' | 'peek' | 'onStoreCreated' | 'onContextBuilt'>): void;
+/** Injected contexts (tests) skip `prepareManager`; attach those now, and each one built later. */
+export declare function attachProjectWebhooks(taskWebhooks: Pick<TaskWebhooks, 'attach'>, contexts: Pick<ProjectContexts, 'ids' | 'peek' | 'onContextBuilt'>): void;
+/** The origin a local client reaches this cockpit at: `CEZ_COCKPIT_URL` and the task webhook's links (hearsay-tools/cezarion#774, hearsay-tools/cezarion#594). */
+export declare function cockpitOriginFor(bindHost: string | undefined, port: number): string;
+export {};