@inhuman.tools/harness 0.0.0-stage → 0.1.0

package/dist/server/drivers/web-search/firecrawl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firecrawl.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/firecrawl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,IAAI,OAAO,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/firecrawl.js

@@ -0,0 +1,2 @@
+export { FirecrawlWebSearchConnection as default } from "../../../providers/web/registrations/index.js";
+//# sourceMappingURL=firecrawl.js.map

package/dist/server/drivers/web-search/firecrawl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firecrawl.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/firecrawl.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,IAAI,OAAO,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/http.d.ts

@@ -0,0 +1,2 @@
+export { SEARCH_TIMEOUT_MS as SEARCH_TIMEOUT_MS, SEARCH_USER_AGENT as SEARCH_USER_AGENT, SearchHttpError as SearchHttpError, getJson as getJson, isRateLimitish as isRateLimitish, isRetryableFailure as isRetryableFailure, mcpToolCall as mcpToolCall, parseMcpToolText as parseMcpToolText, postJson as postJson, searchSignal as searchSignal, } from "@providers/web/wire";
+//# sourceMappingURL=http.d.ts.map

package/dist/server/drivers/web-search/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/http.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,IAAI,iBAAiB,EACtC,iBAAiB,IAAI,iBAAiB,EACtC,eAAe,IAAI,eAAe,EAClC,OAAO,IAAI,OAAO,EAClB,cAAc,IAAI,cAAc,EAChC,kBAAkB,IAAI,kBAAkB,EACxC,WAAW,IAAI,WAAW,EAC1B,gBAAgB,IAAI,gBAAgB,EACpC,QAAQ,IAAI,QAAQ,EACpB,YAAY,IAAI,YAAY,GAC7B,MAAM,qBAAqB,CAAC"}

package/dist/server/drivers/web-search/http.js

@@ -0,0 +1,2 @@
+export { SEARCH_TIMEOUT_MS as SEARCH_TIMEOUT_MS, SEARCH_USER_AGENT as SEARCH_USER_AGENT, SearchHttpError as SearchHttpError, getJson as getJson, isRateLimitish as isRateLimitish, isRetryableFailure as isRetryableFailure, mcpToolCall as mcpToolCall, parseMcpToolText as parseMcpToolText, postJson as postJson, searchSignal as searchSignal, } from "../../../providers/web/wire/index.js";
+//# sourceMappingURL=http.js.map

package/dist/server/drivers/web-search/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/http.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,IAAI,iBAAiB,EACtC,iBAAiB,IAAI,iBAAiB,EACtC,eAAe,IAAI,eAAe,EAClC,OAAO,IAAI,OAAO,EAClB,cAAc,IAAI,cAAc,EAChC,kBAAkB,IAAI,kBAAkB,EACxC,WAAW,IAAI,WAAW,EAC1B,gBAAgB,IAAI,gBAAgB,EACpC,QAAQ,IAAI,QAAQ,EACpB,YAAY,IAAI,YAAY,GAC7B,MAAM,qBAAqB,CAAC"}

package/dist/server/drivers/web-search/keenable.d.ts

@@ -0,0 +1,2 @@
+export { KeenableWebSearchConnection as default } from "@providers/web/registrations";
+//# sourceMappingURL=keenable.d.ts.map

package/dist/server/drivers/web-search/keenable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keenable.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/keenable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,IAAI,OAAO,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/keenable.js

@@ -0,0 +1,2 @@
+export { KeenableWebSearchConnection as default } from "../../../providers/web/registrations/index.js";
+//# sourceMappingURL=keenable.js.map

package/dist/server/drivers/web-search/keenable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keenable.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/keenable.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,IAAI,OAAO,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/keyless.d.ts

@@ -0,0 +1,2 @@
+export { KeylessWebSearchConnection as default } from "@providers/web/registrations";
+//# sourceMappingURL=keyless.d.ts.map

package/dist/server/drivers/web-search/keyless.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyless.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/keyless.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,IAAI,OAAO,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/keyless.js

@@ -0,0 +1,2 @@
+export { KeylessWebSearchConnection as default } from "../../../providers/web/registrations/index.js";
+//# sourceMappingURL=keyless.js.map

package/dist/server/drivers/web-search/keyless.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyless.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/keyless.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,IAAI,OAAO,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/nous-gateway.d.ts

@@ -0,0 +1,21 @@
+import { WebSearchDriverConnection } from "../../../providers/web/registrations/index.js";
+/** Dedicated intern. Token is the live Nous OIDC bag; bootstrap is a no-op. */
+export declare class NousGatewayWebSearchConnection extends WebSearchDriverConnection {
+    static configurationSchema: import("zod").ZodObject<{
+        apiUrl: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$loose>;
+    static configurationLabel: string;
+    static secretsSchema: import("zod").ZodObject<{
+        apiKey: import("zod").ZodOptional<import("zod").ZodString>;
+    }, import("zod/v4/core").$loose>;
+    static offers: {
+        name: string;
+        description: string;
+        live: boolean;
+        adoptable: boolean;
+        settings: {};
+    }[];
+    readonly vendor: "firecrawl";
+    apiUrl(): string;
+}
+//# sourceMappingURL=nous-gateway.d.ts.map

package/dist/server/drivers/web-search/nous-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nous-gateway.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/nous-gateway.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,yBAAyB,EAE1B,MAAM,+BAA+B,CAAC;AAGvC,+EAA+E;AAC/E,qBAAa,8BAA+B,SAAQ,yBAAyB;IAC3E,OAAgB,mBAAmB;;qCAAgC;IACnE,OAAgB,kBAAkB,SAA4B;IAC9D,OAAgB,aAAa;;qCAA0B;IACvD,MAAM,CAAC,MAAM;;;;;;QAQX;IAEF,QAAQ,CAAC,MAAM,EAAG,WAAW,CAAU;IAE9B,MAAM,IAAI,MAAM;CAG1B"}

package/dist/server/drivers/web-search/nous-gateway.js

@@ -0,0 +1,23 @@
+import { NOUS_GATEWAY_DRIVER_NAME } from "../../../providers/nous/index.js";
+import { firecrawlConfigurationSchema, WebSearchDriverConnection, webSearchSecretsSchema, } from "../../../providers/web/registrations/index.js";
+import { FIRECRAWL_NOUS_GATEWAY_URL } from "../../../providers/web/wire/index.js";
+/** Dedicated intern. Token is the live Nous OIDC bag; bootstrap is a no-op. */
+export class NousGatewayWebSearchConnection extends WebSearchDriverConnection {
+    static configurationSchema = firecrawlConfigurationSchema;
+    static configurationLabel = NOUS_GATEWAY_DRIVER_NAME;
+    static secretsSchema = webSearchSecretsSchema;
+    static offers = [
+        {
+            name: "Nous Tool Gateway",
+            description: "Firecrawl search and extract via Nous Portal OAuth",
+            live: true,
+            adoptable: false,
+            settings: {},
+        },
+    ];
+    vendor = "firecrawl";
+    apiUrl() {
+        return super.apiUrl() ?? FIRECRAWL_NOUS_GATEWAY_URL;
+    }
+}
+//# sourceMappingURL=nous-gateway.js.map

package/dist/server/drivers/web-search/nous-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nous-gateway.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/nous-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAElE,+EAA+E;AAC/E,MAAM,OAAO,8BAA+B,SAAQ,yBAAyB;IAC3E,MAAM,CAAU,mBAAmB,GAAG,4BAA4B,CAAC;IACnE,MAAM,CAAU,kBAAkB,GAAG,wBAAwB,CAAC;IAC9D,MAAM,CAAU,aAAa,GAAG,sBAAsB,CAAC;IACvD,MAAM,CAAC,MAAM,GAAG;QACd;YACE,IAAI,EAAE,mBAAmB;YACzB,WAAW,EAAE,oDAAoD;YACjE,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,EAAE;SACb;KACF,CAAC;IAEO,MAAM,GAAG,WAAoB,CAAC;IAE9B,MAAM;QACb,OAAO,KAAK,CAAC,MAAM,EAAE,IAAI,0BAA0B,CAAC;IACtD,CAAC"}

package/dist/server/drivers/web-search/parallel.d.ts

@@ -0,0 +1,2 @@
+export { ParallelWebSearchConnection as default } from "@providers/web/registrations";
+//# sourceMappingURL=parallel.d.ts.map

package/dist/server/drivers/web-search/parallel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parallel.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/parallel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,IAAI,OAAO,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/parallel.js

@@ -0,0 +1,2 @@
+export { ParallelWebSearchConnection as default } from "../../../providers/web/registrations/index.js";
+//# sourceMappingURL=parallel.js.map

package/dist/server/drivers/web-search/parallel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parallel.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/parallel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,IAAI,OAAO,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/pick.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Pick the web-search or web-extract connection for one intern.
+ * Pin → dedicated (non-completion, not the projected intern) → Nous intern → keyless.
+ * Grok/xAI `can` completion+web-search; it does not auto-win search or extract.
+ * `web-nous` is projected; file BYOK must beat it regardless of map insertion order.
+ *
+ * Product fallback policy lives here. Nous owns source/gateway credential lifecycle.
+ */
+import { ConnectionSpec, DriverSpec } from "@inhuman.tools/plexus-expectations";
+export type WebSearchCanFace = {
+    readonly driver: {
+        readonly abilityClaim: readonly string[];
+    };
+};
+export type WebSearchPickKernel = {
+    readonly kvs: {
+        readonly [key: string]: string;
+    };
+    readonly drivers: {
+        readonly [name: string]: DriverSpec | undefined;
+    };
+    readonly connections: {
+        readonly [id: string]: ConnectionSpec | WebSearchCanFace | undefined;
+    };
+};
+export declare function projectKeylessConnection(into: WebSearchPickKernel): void;
+export declare function pickWebSearchConnection(kernel: WebSearchPickKernel): string | null;
+export declare function pickWebExtractConnection(kernel: WebSearchPickKernel): string | null;
+//# sourceMappingURL=pick.d.ts.map

package/dist/server/drivers/web-search/pick.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pick.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/pick.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAehF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC;CAC/D,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,GAAG,EAAE;QAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAAA;KAAE,CAAC;IACtE,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,EAAE,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,gBAAgB,GAAG,SAAS,CAAC;KACtE,CAAC;CACH,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAexE;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAMlF;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAMnF"}

package/dist/server/drivers/web-search/pick.js

@@ -0,0 +1,65 @@
+/**
+ * Pick the web-search or web-extract connection for one intern.
+ * Pin → dedicated (non-completion, not the projected intern) → Nous intern → keyless.
+ * Grok/xAI `can` completion+web-search; it does not auto-win search or extract.
+ * `web-nous` is projected; file BYOK must beat it regardless of map insertion order.
+ *
+ * Product fallback policy lives here. Nous owns source/gateway credential lifecycle.
+ */
+import { ConnectionSpec } from "@inhuman.tools/plexus-expectations";
+import { NOUS_GATEWAY_CONNECTION_ID } from "../../../providers/nous/index.js";
+import { isCompletionCan, isWebExtractCan, isWebSearchCan, KEYLESS_CONNECTION_ID, KEYLESS_DRIVER_NAME, WEB_EXTRACT_PIN_KV, WEB_SEARCH_KEYLESS_FALLBACK_KV, WEB_SEARCH_PIN_KV, } from "./types.js";
+export function projectKeylessConnection(into) {
+    const driver = into.drivers[KEYLESS_DRIVER_NAME];
+    if (driver === undefined)
+        return;
+    if (into.kvs[WEB_SEARCH_KEYLESS_FALLBACK_KV] === "false") {
+        delete into.connections[KEYLESS_CONNECTION_ID];
+        return;
+    }
+    const connections = into.connections;
+    const spec = (connections[KEYLESS_CONNECTION_ID] ??= new ConnectionSpec({
+        driver,
+    }));
+    spec.driver = driver;
+    spec.name = "web-keyless";
+    spec.annotation = "Keyless web-search ring";
+    spec.configuration = {};
+}
+export function pickWebSearchConnection(kernel) {
+    return pickByCan(kernel, {
+        pin: (kernel.kvs[WEB_SEARCH_PIN_KV] ?? "").trim(),
+        eligible: (spec) => isWebSearchCan(spec.driver.abilityClaim),
+        dedicated: (spec) => isWebSearchCan(spec.driver.abilityClaim) && !isCompletionCan(spec.driver.abilityClaim),
+    });
+}
+export function pickWebExtractConnection(kernel) {
+    return pickByCan(kernel, {
+        pin: (kernel.kvs[WEB_EXTRACT_PIN_KV] ?? "").trim(),
+        eligible: (spec) => isWebExtractCan(spec.driver.abilityClaim),
+        dedicated: (spec) => isWebExtractCan(spec.driver.abilityClaim) && !isCompletionCan(spec.driver.abilityClaim),
+    });
+}
+function pickByCan(kernel, opts) {
+    const ids = [];
+    for (const [id, spec] of Object.entries(kernel.connections)) {
+        if (spec !== undefined && opts.eligible(spec))
+            ids.push(id);
+    }
+    if (opts.pin !== "" && ids.includes(opts.pin))
+        return opts.pin;
+    const dedicated = ids.find((id) => {
+        const spec = kernel.connections[id];
+        return (spec !== undefined && id !== KEYLESS_CONNECTION_ID && id !== NOUS_GATEWAY_CONNECTION_ID && opts.dedicated(spec));
+    });
+    if (dedicated !== undefined)
+        return dedicated;
+    const intern = kernel.connections[NOUS_GATEWAY_CONNECTION_ID];
+    if (intern !== undefined && ids.includes(NOUS_GATEWAY_CONNECTION_ID) && opts.dedicated(intern)) {
+        return NOUS_GATEWAY_CONNECTION_ID;
+    }
+    if (ids.includes(KEYLESS_CONNECTION_ID))
+        return KEYLESS_CONNECTION_ID;
+    return null;
+}
+//# sourceMappingURL=pick.js.map

package/dist/server/drivers/web-search/pick.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pick.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/pick.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,cAAc,EAAc,MAAM,oCAAoC,CAAC;AAEhF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EACL,eAAe,EACf,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,8BAA8B,EAC9B,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAcpB,MAAM,UAAU,wBAAwB,CAAC,IAAyB;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO;IACjC,IAAI,IAAI,CAAC,GAAG,CAAC,8BAA8B,CAAC,KAAK,OAAO,EAAE,CAAC;QACzD,OAAQ,IAAI,CAAC,WAAgD,CAAC,qBAAqB,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAA+C,CAAC;IACzE,MAAM,IAAI,GAAG,CAAC,WAAW,CAAC,qBAAqB,CAAC,KAAK,IAAI,cAAc,CAAC;QACtE,MAAM;KACP,CAAC,CAAC,CAAC;IACJ,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACrB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC1B,IAAI,CAAC,UAAU,GAAG,yBAAyB,CAAC;IAC5C,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAA2B;IACjE,OAAO,SAAS,CAAC,MAAM,EAAE;QACvB,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QACjD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAC5D,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;KAC5G,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAA2B;IAClE,OAAO,SAAS,CAAC,MAAM,EAAE;QACvB,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;QAClD,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QAC7D,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;KAC7G,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAChB,MAA2B,EAC3B,IAIC;IAED,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC;IAC/D,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;QAChC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACpC,OAAO,CACL,IAAI,KAAK,SAAS,IAAI,EAAE,KAAK,qBAAqB,IAAI,EAAE,KAAK,0BAA0B,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAChH,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAC9D,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/F,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/drivers/web-search/ring.d.ts

@@ -0,0 +1,2 @@
+export { extractWithFailover as extractWithFailover, FAILOVER_TIMEOUT_MS as FAILOVER_TIMEOUT_MS, ringOrder as ringOrder, searchWithFailover as searchWithFailover, } from "@providers/web/registrations";
+//# sourceMappingURL=ring.d.ts.map

package/dist/server/drivers/web-search/ring.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ring.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/ring.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,IAAI,mBAAmB,EAC1C,mBAAmB,IAAI,mBAAmB,EAC1C,SAAS,IAAI,SAAS,EACtB,kBAAkB,IAAI,kBAAkB,GACzC,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/ring.js

@@ -0,0 +1,2 @@
+export { extractWithFailover as extractWithFailover, FAILOVER_TIMEOUT_MS as FAILOVER_TIMEOUT_MS, ringOrder as ringOrder, searchWithFailover as searchWithFailover, } from "../../../providers/web/registrations/index.js";
+//# sourceMappingURL=ring.js.map

package/dist/server/drivers/web-search/ring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ring.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/ring.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,IAAI,mBAAmB,EAC1C,mBAAmB,IAAI,mBAAmB,EAC1C,SAAS,IAAI,SAAS,EACtB,kBAAkB,IAAI,kBAAkB,GACzC,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/ssrf.d.ts

@@ -0,0 +1,2 @@
+export { publicHttpUrl as publicHttpUrl } from "@providers/web/wire";
+//# sourceMappingURL=ssrf.d.ts.map

package/dist/server/drivers/web-search/ssrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/ssrf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/server/drivers/web-search/ssrf.js

@@ -0,0 +1,2 @@
+export { publicHttpUrl as publicHttpUrl } from "../../../providers/web/wire/index.js";
+//# sourceMappingURL=ssrf.js.map

package/dist/server/drivers/web-search/ssrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/ssrf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/server/drivers/web-search/tavily.d.ts

@@ -0,0 +1,2 @@
+export { TavilyWebSearchConnection as default } from "@providers/web/registrations";
+//# sourceMappingURL=tavily.d.ts.map

package/dist/server/drivers/web-search/tavily.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tavily.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/tavily.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,IAAI,OAAO,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/tavily.js

@@ -0,0 +1,2 @@
+export { TavilyWebSearchConnection as default } from "../../../providers/web/registrations/index.js";
+//# sourceMappingURL=tavily.js.map

package/dist/server/drivers/web-search/tavily.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tavily.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/tavily.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,IAAI,OAAO,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/server/drivers/web-search/types.d.ts

@@ -0,0 +1,10 @@
+/** Product driver IDs and pin keys. Wire types live in provider-web/wire. */
+export declare const KEYLESS_DRIVER_NAME = "web-keyless";
+export declare const KEYLESS_CONNECTION_ID = "web-keyless";
+export declare const WEB_SEARCH_PIN_KV = "web-search-connection";
+export declare const WEB_EXTRACT_PIN_KV = "web-extract-connection";
+export declare const WEB_SEARCH_KEYLESS_FALLBACK_KV = "web.keyless_fallback";
+export declare function isWebSearchCan(can: readonly string[]): boolean;
+export declare function isWebExtractCan(can: readonly string[]): boolean;
+export declare function isCompletionCan(can: readonly string[]): boolean;
+//# sourceMappingURL=types.d.ts.map

package/dist/server/drivers/web-search/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/types.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAI7E,eAAO,MAAM,mBAAmB,gBAAgB,CAAC;AACjD,eAAO,MAAM,qBAAqB,gBAAgB,CAAC;AACnD,eAAO,MAAM,iBAAiB,0BAA0B,CAAC;AACzD,eAAO,MAAM,kBAAkB,2BAA2B,CAAC;AAC3D,eAAO,MAAM,8BAA8B,yBAAyB,CAAC;AAErE,wBAAgB,cAAc,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAE9D;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAE/D;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAE/D"}

package/dist/server/drivers/web-search/types.js

@@ -0,0 +1,17 @@
+/** Product driver IDs and pin keys. Wire types live in provider-web/wire. */
+import { WEB_EXTRACT_CAN, WEB_SEARCH_CAN } from "../../../providers/web/wire/index.js";
+export const KEYLESS_DRIVER_NAME = "web-keyless";
+export const KEYLESS_CONNECTION_ID = "web-keyless";
+export const WEB_SEARCH_PIN_KV = "web-search-connection";
+export const WEB_EXTRACT_PIN_KV = "web-extract-connection";
+export const WEB_SEARCH_KEYLESS_FALLBACK_KV = "web.keyless_fallback";
+export function isWebSearchCan(can) {
+    return can.includes(WEB_SEARCH_CAN);
+}
+export function isWebExtractCan(can) {
+    return can.includes(WEB_EXTRACT_CAN);
+}
+export function isCompletionCan(can) {
+    return can.includes("completion");
+}
+//# sourceMappingURL=types.js.map

package/dist/server/drivers/web-search/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/server/drivers/web-search/types.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEvE,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AACjD,MAAM,CAAC,MAAM,qBAAqB,GAAG,aAAa,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,8BAA8B,GAAG,sBAAsB,CAAC;AAErE,MAAM,UAAU,cAAc,CAAC,GAAsB;IACnD,OAAO,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAsB;IACpD,OAAO,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAsB;IACpD,OAAO,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AACpC,CAAC"}

package/dist/server/ensure.d.ts

@@ -0,0 +1,9 @@
+export type EnsureOptions = {
+    /** Kill the live owner, then spawn. Dev default; product `ensure()` is still attach. */
+    readonly restart?: boolean;
+};
+/** True when the kernel's daemon socket answers right now. Never spawns and never clears a stale socket. */
+export declare function daemonRunning(root?: string): Promise<boolean>;
+export declare function ensure(root?: string, options?: EnsureOptions): Promise<void>;
+export declare function stop(root: string): Promise<void>;
+//# sourceMappingURL=ensure.d.ts.map

package/dist/server/ensure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure.d.ts","sourceRoot":"","sources":["../../src/server/ensure.ts"],"names":[],"mappings":"AAgGA,MAAM,MAAM,aAAa,GAAG;IAC1B,wFAAwF;IACxF,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF,4GAA4G;AAC5G,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnE;AAED,wBAAsB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAkDlF;AAED,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBtD"}

package/dist/server/ensure.js

@@ -0,0 +1,174 @@
+import { execFileSync, spawn } from "node:child_process";
+import { existsSync, realpathSync, unlinkSync } from "node:fs";
+import { access, mkdir, realpath, unlink } from "node:fs/promises";
+import { connect } from "node:net";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { step } from "@inhuman.tools/harness-diagnostics";
+import { daemonLogPath, daemonSocketPath } from "@inhuman.tools/harness-sdk/paths";
+import invariant from "tiny-invariant";
+import { errnoCode } from "./util/errno.js";
+const READY_TIMEOUT_MS = 10_000;
+const PROBE_TIMEOUT_MS = 300;
+const GRACE_MS = 2000;
+// Old startup adapter: spawn the in-process daemon bin. Do not import composition.
+// Public ensure() is daemon-socket liveness, not hypervisor sync/execution health.
+const entry = fileURLToPath(new URL("boot.js", import.meta.url));
+async function socketAnswers(socketPath) {
+    return new Promise((_resolve) => {
+        const socket = connect(socketPath);
+        const settle = (alive) => {
+            socket.removeAllListeners();
+            socket.destroy();
+            _resolve(alive);
+        };
+        const timer = setTimeout(() => settle(false), PROBE_TIMEOUT_MS);
+        socket.once("connect", () => {
+            clearTimeout(timer);
+            settle(true);
+        });
+        socket.once("error", () => {
+            clearTimeout(timer);
+            settle(false);
+        });
+    });
+}
+async function exists(path) {
+    try {
+        await access(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function resolveRoot(root) {
+    const given = resolve(root ?? join(homedir(), ".harness"));
+    await mkdir(given, { recursive: true });
+    return realpath(given);
+}
+function pidAlive(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return errnoCode(error) === "EPERM";
+    }
+}
+/** lsof matches unix sockets by the bound (canonical) path. */
+function socketPids(socketPath) {
+    if (!existsSync(socketPath))
+        return [];
+    try {
+        const out = execFileSync("lsof", ["-t", socketPath], {
+            encoding: "utf8",
+            timeout: 5000,
+        }).trim();
+        if (out === "")
+            return [];
+        return [
+            ...new Set(out
+                .split("\n")
+                .map((line) => Number(line.trim()))
+                .filter((pid) => Number.isInteger(pid) && pid > 0 && pid !== process.pid)),
+        ].sort((a, b) => a - b);
+    }
+    catch {
+        return [];
+    }
+}
+function sockPath(root) {
+    try {
+        return daemonSocketPath(realpathSync(root));
+    }
+    catch {
+        return daemonSocketPath(root);
+    }
+}
+/** True when the kernel's daemon socket answers right now. Never spawns and never clears a stale socket. */
+export async function daemonRunning(root) {
+    return socketAnswers(daemonSocketPath(await resolveRoot(root)));
+}
+export async function ensure(root, options) {
+    const resolved = await resolveRoot(root);
+    if (options?.restart === true) {
+        step("ensure restart");
+        await stop(resolved);
+    }
+    const sock = daemonSocketPath(resolved);
+    step(`ensure probe ${sock}`);
+    if (await socketAnswers(sock)) {
+        step("ensure already live");
+        return;
+    }
+    if (await exists(sock)) {
+        try {
+            await unlink(sock);
+        }
+        catch {
+            /* another ensure() may have already cleared it */
+        }
+    }
+    step(`ensure spawn ${entry}`);
+    const log = process.env.HARNESS_LOG || daemonLogPath(resolved);
+    step(`ensure log ${log}`);
+    // Daemon identity is cwd. No argv, no stdout handshake. Log path is explicit
+    // so a live daemon writes the kernel file even if the parent cwd differs.
+    // stdio stays ignore: the daemon outlives this parent. boot.js records an
+    // import failure in that log, then exits.
+    const childExit = { code: null };
+    const child = spawn(process.execPath, [entry], {
+        cwd: resolved,
+        detached: true,
+        stdio: "ignore",
+        env: { ...process.env, HARNESS_LOG: log },
+    });
+    child.once("exit", (code, signal) => {
+        childExit.code = code ?? (signal == null ? 0 : 1);
+    });
+    step(`ensure pid ${child.pid ?? "none"}`);
+    child.unref();
+    const deadline = Date.now() + READY_TIMEOUT_MS;
+    while (!(await socketAnswers(sock))) {
+        if (childExit.code !== null) {
+            step(`ensure child exit ${childExit.code}`);
+            invariant(false, `harness daemon exited ${childExit.code} before listen: ${sock} (see ${log})`);
+        }
+        invariant(Date.now() < deadline, `harness daemon sock is dead: ${sock}`);
+        await new Promise((_resolve) => setTimeout(_resolve, 50));
+    }
+    step("ensure child ready");
+}
+export async function stop(root) {
+    const sock = sockPath(root);
+    const pids = socketPids(sock);
+    for (const pid of pids) {
+        try {
+            process.kill(pid, "SIGTERM");
+        }
+        catch { }
+    }
+    const deadline = Date.now() + GRACE_MS;
+    for (const pid of pids) {
+        while (pidAlive(pid) && Date.now() < deadline) {
+            await new Promise((_resolve) => setTimeout(_resolve, 50));
+        }
+        if (pidAlive(pid)) {
+            try {
+                process.kill(pid, "SIGKILL");
+            }
+            catch { }
+        }
+    }
+    if (existsSync(sock) && !(await socketAnswers(sock))) {
+        try {
+            unlinkSync(sock);
+        }
+        catch { }
+    }
+}
+//# sourceMappingURL=ensure.js.map

package/dist/server/ensure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure.js","sourceRoot":"","sources":["../../src/server/ensure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,SAAS,MAAM,gBAAgB,CAAC;AAEvC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC;AACtB,mFAAmF;AACnF,mFAAmF;AACnF,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEjE,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE;YACtC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAa;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC;IACtC,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAS,UAAU,CAAC,UAAkB;IACpC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE;YACnD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC1B,OAAO;YACL,GAAG,IAAI,GAAG,CACR,GAAG;iBACA,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;iBAClC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAC5E;SACF,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAOD,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAa;IAC/C,OAAO,aAAa,CAAC,gBAAgB,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAa,EAAE,OAAuB;IACjE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACvB,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC7B,IAAI,MAAM,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC5B,OAAO;IACT,CAAC;IACD,IAAI,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;IAC1B,6EAA6E;IAC7E,0EAA0E;IAC1E,0EAA0E;IAC1E,0CAA0C;IAC1C,MAAM,SAAS,GAA4B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE;QAC7C,GAAG,EAAE,QAAQ;QACb,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE;KAC1C,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAClC,SAAS,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,cAAc,KAAK,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC;IAC/C,OAAO,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpC,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,qBAAqB,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5C,SAAS,CAAC,KAAK,EAAE,yBAAyB,SAAS,CAAC,IAAI,mBAAmB,IAAI,SAAS,GAAG,GAAG,CAAC,CAAC;QAClG,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,gCAAgC,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAY;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,UAAU,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/server/error-with-invariant.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Error whose `static invariant` throws `new this(...ctorArgs)`.
+ * Not on ErrorConstructor — a receiver with extra constructor args
+ * (`(code, message)`) does not fight `(condition, message?)`.
+ */
+export declare class ErrorWithInvariant extends Error {
+    static invariant<T extends new (...args: any) => ErrorWithInvariant>(this: T, condition: unknown, ...args: ConstructorParameters<T>): asserts condition;
+}
+//# sourceMappingURL=error-with-invariant.d.ts.map

package/dist/server/error-with-invariant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-with-invariant.d.ts","sourceRoot":"","sources":["../../src/server/error-with-invariant.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,KAAK,GAAG,IAAI,EAAE,GAAG,KAAK,kBAAkB,EACjE,IAAI,EAAE,CAAC,EACP,SAAS,EAAE,OAAO,EAClB,GAAG,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAChC,OAAO,CAAC,SAAS;CAGrB"}

package/dist/server/error-with-invariant.js

@@ -0,0 +1,12 @@
+/**
+ * Error whose `static invariant` throws `new this(...ctorArgs)`.
+ * Not on ErrorConstructor — a receiver with extra constructor args
+ * (`(code, message)`) does not fight `(condition, message?)`.
+ */
+export class ErrorWithInvariant extends Error {
+    static invariant(condition, ...args) {
+        if (!condition)
+            throw new this(...args);
+    }
+}
+//# sourceMappingURL=error-with-invariant.js.map

package/dist/server/error-with-invariant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-with-invariant.js","sourceRoot":"","sources":["../../src/server/error-with-invariant.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,MAAM,CAAC,SAAS,CAEd,SAAkB,EAClB,GAAG,IAA8B;QAEjC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/server/index.d.ts

@@ -0,0 +1,5 @@
+/** Light client facade: start/stop, plugin install, and the process log path. Does not import executable composition. */
+export { installPlugin, type InstallStreams } from "../extensions/install.js";
+export { daemonRunning as daemonRunning, ensure as ensure, stop as stop } from "./ensure.js";
+export * from "./step.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,yHAAyH;AACzH,OAAO,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,IAAI,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM,aAAa,CAAC;AAC7F,cAAc,WAAW,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,5 @@
+/** Light client facade: start/stop, plugin install, and the process log path. Does not import executable composition. */
+export { installPlugin } from "../extensions/install.js";
+export { daemonRunning as daemonRunning, ensure as ensure, stop as stop } from "./ensure.js";
+export * from "./step.js";
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,yHAAyH;AACzH,OAAO,EAAE,aAAa,EAAuB,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,IAAI,MAAM,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM,aAAa,CAAC;AAC7F,cAAc,WAAW,CAAC"}

package/dist/server/keywords.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Public splitter. Implementation lives in scheme-runtime; this leaf must
+ * not load composition or the interpreter.
+ */
+export { isKeyword, keywordsOf, splitKeywords, type KeywordShape, type Keywords, } from "@scheme/keywords";
+//# sourceMappingURL=keywords.d.ts.map

package/dist/server/keywords.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keywords.d.ts","sourceRoot":"","sources":["../../src/server/keywords.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,SAAS,EACT,UAAU,EACV,aAAa,EACb,KAAK,YAAY,EACjB,KAAK,QAAQ,GACd,MAAM,kBAAkB,CAAC"}

package/dist/server/keywords.js

@@ -0,0 +1,6 @@
+/**
+ * Public splitter. Implementation lives in scheme-runtime; this leaf must
+ * not load composition or the interpreter.
+ */
+export { isKeyword, keywordsOf, splitKeywords, } from "../scheme/keywords.js";
+//# sourceMappingURL=keywords.js.map

package/dist/server/keywords.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keywords.js","sourceRoot":"","sources":["../../src/server/keywords.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,SAAS,EACT,UAAU,EACV,aAAa,GAGd,MAAM,kBAAkB,CAAC"}

package/dist/server/outcome-receipts.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Compatibility re-export. Squeeze-aware cancel/deny stamps live in harness-tool-runtime.
+ */
+export { CLASSIFIER_DENIED, POLICY_PROHIBITS, USER_REFUSED, denyReceiptText, rejectTool, stampDenyReceipt, stampToolOutcome, } from "@tool-runtime";
+//# sourceMappingURL=outcome-receipts.d.ts.map