@inhuman.tools/harness 0.0.0-stage → 0.1.0

package/dist/protocol/schemas/message.js

@@ -0,0 +1,104 @@
+import { z } from "zod";
+import { publishedReadiness } from "./descriptor.js";
+import { publishedHealthSchema } from "./health.js";
+import { supervisionIdentitySchema } from "./identity.js";
+import { lockKindSchema, lossKindSchema, shutdownCutoffSchema } from "./loss.js";
+export const SUPERVISION_PROTOCOL_VERSION = 1;
+const envelope = {
+    v: z.literal(SUPERVISION_PROTOCOL_VERSION),
+    identity: supervisionIdentitySchema,
+};
+function refineChildHealth(message, ctx) {
+    const kind = message.identity.process.kind;
+    const allowed = new Set(kind === "yjs" || kind === "runtime" ? publishedReadiness(kind) : []);
+    const present = ["sync", "storage", "execution"].filter((plane) => message.health[plane] != null);
+    if (present.length === 0) {
+        ctx.addIssue({
+            code: "custom",
+            message: "child health requires a published plane",
+            path: ["health"],
+        });
+    }
+    for (const plane of present) {
+        if (!allowed.has(plane)) {
+            ctx.addIssue({
+                code: "custom",
+                message: `${kind} must not report ${plane}`,
+                path: ["health", plane],
+            });
+        }
+    }
+}
+const readyMessageSchema = z
+    .object({
+    ...envelope,
+    op: z.literal("ready"),
+    health: publishedHealthSchema,
+})
+    .strict()
+    .superRefine(refineChildHealth);
+const failedMessageSchema = z
+    .object({
+    ...envelope,
+    op: z.literal("failed"),
+    health: publishedHealthSchema,
+    reason: z.string().min(1),
+})
+    .strict()
+    .superRefine(refineChildHealth);
+const healthMessageSchema = z
+    .object({
+    ...envelope,
+    op: z.literal("health"),
+    health: publishedHealthSchema,
+})
+    .strict()
+    .superRefine(refineChildHealth);
+const shutdownMessageSchema = z
+    .object({
+    ...envelope,
+    op: z.literal("shutdown"),
+    deadlineMs: z.number().int().positive(),
+})
+    .strict();
+const stoppedMessageSchema = z
+    .object({
+    ...envelope,
+    op: z.literal("stopped"),
+    cutoff: shutdownCutoffSchema,
+})
+    .strict();
+const lossMessageSchema = z
+    .object({
+    ...envelope,
+    op: z.literal("loss"),
+    kind: lossKindSchema,
+    lock: lockKindSchema.optional(),
+})
+    .strict()
+    .superRefine((message, ctx) => {
+    if (message.kind === "lock-released" && message.lock == null) {
+        ctx.addIssue({
+            code: "custom",
+            message: "lock-released loss requires lock",
+            path: ["lock"],
+        });
+    }
+    if (message.kind !== "lock-released" && message.lock != null) {
+        ctx.addIssue({
+            code: "custom",
+            message: "lock is only valid on lock-released",
+            path: ["lock"],
+        });
+    }
+});
+/** Control IPC. Unknown `op` / `v` is fatal, not a dropped frame. */
+export const supervisionMessageSchema = z.discriminatedUnion("op", [
+    readyMessageSchema,
+    failedMessageSchema,
+    healthMessageSchema,
+    shutdownMessageSchema,
+    stoppedMessageSchema,
+    lossMessageSchema,
+]);
+//# sourceMappingURL=message.js.map

package/dist/protocol/schemas/message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.js","sourceRoot":"","sources":["../../../src/protocol/schemas/message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAwB,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAA4B,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAU,CAAC;AAEvD,MAAM,QAAQ,GAAG;IACf,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC;IAC1C,QAAQ,EAAE,yBAAyB;CACpC,CAAC;AAEF,SAAS,iBAAiB,CACxB,OAAmE,EACnE,GAAoB;IAEpB,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAI,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IAC7G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,yCAAyC;YAClD,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,GAAG,IAAI,oBAAoB,KAAK,EAAE;gBAC3C,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,GAAG,QAAQ;IACX,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACtB,MAAM,EAAE,qBAAqB;CAC9B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAElC,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,GAAG,QAAQ;IACX,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvB,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAElC,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,GAAG,QAAQ;IACX,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvB,MAAM,EAAE,qBAAqB;CAC9B,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAElC,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,GAAG,QAAQ;IACX,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,GAAG,QAAQ;IACX,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACxB,MAAM,EAAE,oBAAoB;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,GAAG,QAAQ;IACX,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACrB,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,cAAc,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,kCAAkC;YAC3C,IAAI,EAAE,CAAC,MAAM,CAAC;SACf,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,qCAAqC;YAC9C,IAAI,EAAE,CAAC,MAAM,CAAC;SACf,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,qEAAqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IACjE,kBAAkB;IAClB,mBAAmB;IACnB,mBAAmB;IACnB,qBAAqB;IACrB,oBAAoB;IACpB,iBAAiB;CAClB,CAAC,CAAC"}

package/dist/protocol/supervision/codec.d.ts

@@ -0,0 +1,4 @@
+import { type SupervisionMessage } from "../schemas/message.js";
+export declare function encodeSupervisionMessage(message: SupervisionMessage): string;
+export declare function decodeSupervisionMessage(raw: unknown): SupervisionMessage;
+//# sourceMappingURL=codec.d.ts.map

package/dist/protocol/supervision/codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../../src/protocol/supervision/codec.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE1F,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,kBAAkB,GAAG,MAAM,CAE5E;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,CAGzE"}

package/dist/protocol/supervision/codec.js

@@ -0,0 +1,9 @@
+import { supervisionMessageSchema } from "../schemas/message.js";
+export function encodeSupervisionMessage(message) {
+    return JSON.stringify(supervisionMessageSchema.parse(message));
+}
+export function decodeSupervisionMessage(raw) {
+    const value = typeof raw === "string" ? JSON.parse(raw) : raw;
+    return supervisionMessageSchema.parse(value);
+}
+//# sourceMappingURL=codec.js.map

package/dist/protocol/supervision/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../../src/protocol/supervision/codec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAA2B,MAAM,uBAAuB,CAAC;AAE1F,MAAM,UAAU,wBAAwB,CAAC,OAA2B;IAClE,OAAO,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,MAAM,KAAK,GAAY,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACvE,OAAO,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC"}

package/dist/protocol/supervision/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./codec.js";
+export * from "./loss.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/protocol/supervision/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/protocol/supervision/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}

package/dist/protocol/supervision/index.js

@@ -0,0 +1,3 @@
+export * from "./codec.js";
+export * from "./loss.js";
+//# sourceMappingURL=index.js.map

package/dist/protocol/supervision/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/protocol/supervision/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}

package/dist/protocol/supervision/loss.d.ts

@@ -0,0 +1,28 @@
+import type { PublishedHealth, ReadinessKind, TopologyHealth } from "../schemas/health.js";
+import type { SupervisionIdentity } from "../schemas/identity.js";
+import type { OwnerEvidence, ReplacementDecision, ShutdownCutoff } from "../schemas/loss.js";
+export declare function isPlaneReady(health: TopologyHealth | PublishedHealth, kind: ReadinessKind): boolean;
+export declare function isSyncReady(health: TopologyHealth | PublishedHealth): boolean;
+export declare function isStorageReady(health: TopologyHealth | PublishedHealth): boolean;
+export declare function isExecutionReady(health: TopologyHealth | PublishedHealth): boolean;
+/** Same owner: hypervisor, process, server epoch, and runtime generation match. */
+export declare function isSameExecutionOwner(left: SupervisionIdentity, right: SupervisionIdentity): boolean;
+/** Live reconnect: same owner, strictly newer connection epoch. */
+export declare function isReconnect(current: SupervisionIdentity, frame: SupervisionIdentity): boolean;
+/**
+ * Stale iff frame clocks are lexicographically behind current.
+ * Newer clocks are never stale. Generation fencing rejects messages,
+ * not already-dispatched external effects.
+ */
+export declare function isStaleSupervisionIdentity(current: SupervisionIdentity, frame: SupervisionIdentity): boolean;
+export declare function replacementDecision(evidence: OwnerEvidence): ReplacementDecision;
+export declare function mayReplaceExecutionOwner(evidence: OwnerEvidence): boolean;
+/**
+ * Yjs death still requires the previous runtime to exit and release its lock
+ * before a new execution owner starts.
+ */
+export declare function mayStartExecutionOwnerAfterYjsLoss(runtime: OwnerEvidence): boolean;
+export declare function shutdownIsComplete(cutoff: ShutdownCutoff): boolean;
+/** Failed or forced-pending flush stays visible; it is not rewritten as success. */
+export declare function shutdownFlushFailed(cutoff: ShutdownCutoff): boolean;
+//# sourceMappingURL=loss.d.ts.map

package/dist/protocol/supervision/loss.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loss.d.ts","sourceRoot":"","sources":["../../../src/protocol/supervision/loss.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAE7F,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,GAAG,eAAe,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAEnG;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,cAAc,GAAG,eAAe,GAAG,OAAO,CAE7E;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,eAAe,GAAG,OAAO,CAEhF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,cAAc,GAAG,eAAe,GAAG,OAAO,CAElF;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAQnG;AAED,mEAAmE;AACnE,wBAAgB,WAAW,CAAC,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAE7F;AAYD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAE5G;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,GAAG,mBAAmB,CAiBhF;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAEzE;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAElF;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAElE;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAEnE"}

package/dist/protocol/supervision/loss.js

@@ -0,0 +1,77 @@
+export function isPlaneReady(health, kind) {
+    return health[kind]?.state === "ready";
+}
+export function isSyncReady(health) {
+    return isPlaneReady(health, "sync");
+}
+export function isStorageReady(health) {
+    return isPlaneReady(health, "storage");
+}
+export function isExecutionReady(health) {
+    return isPlaneReady(health, "execution");
+}
+/** Same owner: hypervisor, process, server epoch, and runtime generation match. */
+export function isSameExecutionOwner(left, right) {
+    return (left.hypervisor.id === right.hypervisor.id &&
+        left.process.kind === right.process.kind &&
+        left.process.id === right.process.id &&
+        left.serverEpoch === right.serverEpoch &&
+        left.runtimeGeneration === right.runtimeGeneration);
+}
+/** Live reconnect: same owner, strictly newer connection epoch. */
+export function isReconnect(current, frame) {
+    return isSameExecutionOwner(current, frame) && frame.connectionEpoch > current.connectionEpoch;
+}
+function compareClocks(left, right) {
+    if (left.serverEpoch !== right.serverEpoch) {
+        return left.serverEpoch - right.serverEpoch;
+    }
+    if (left.runtimeGeneration !== right.runtimeGeneration) {
+        return left.runtimeGeneration - right.runtimeGeneration;
+    }
+    return left.connectionEpoch - right.connectionEpoch;
+}
+/**
+ * Stale iff frame clocks are lexicographically behind current.
+ * Newer clocks are never stale. Generation fencing rejects messages,
+ * not already-dispatched external effects.
+ */
+export function isStaleSupervisionIdentity(current, frame) {
+    return compareClocks(frame, current) < 0;
+}
+export function replacementDecision(evidence) {
+    if (!evidence.exitConfirmed) {
+        if (evidence.heartbeatMissing) {
+            return { action: "refuse", reason: "heartbeat-is-not-death" };
+        }
+        if (evidence.dataDisconnected) {
+            return { action: "refuse", reason: "disconnect-is-not-death" };
+        }
+        if (evidence.parentLost && !evidence.lockReleased) {
+            return { action: "refuse", reason: "parent-loss-holds-runtime-lock" };
+        }
+        return { action: "refuse", reason: "exit-unconfirmed" };
+    }
+    if (!evidence.lockReleased) {
+        return { action: "refuse", reason: "lock-held" };
+    }
+    return { action: "replace" };
+}
+export function mayReplaceExecutionOwner(evidence) {
+    return replacementDecision(evidence).action === "replace";
+}
+/**
+ * Yjs death still requires the previous runtime to exit and release its lock
+ * before a new execution owner starts.
+ */
+export function mayStartExecutionOwnerAfterYjsLoss(runtime) {
+    return mayReplaceExecutionOwner(runtime);
+}
+export function shutdownIsComplete(cutoff) {
+    return cutoff.drain === "complete" && cutoff.flush !== "pending";
+}
+/** Failed or forced-pending flush stays visible; it is not rewritten as success. */
+export function shutdownFlushFailed(cutoff) {
+    return cutoff.flush === "failed" || (cutoff.forced && cutoff.flush === "pending");
+}
+//# sourceMappingURL=loss.js.map

package/dist/protocol/supervision/loss.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loss.js","sourceRoot":"","sources":["../../../src/protocol/supervision/loss.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,YAAY,CAAC,MAAwC,EAAE,IAAmB;IACxF,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,OAAO,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAwC;IAClE,OAAO,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAwC;IACrE,OAAO,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAwC;IACvE,OAAO,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AAC3C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,IAAyB,EAAE,KAA0B;IACxF,OAAO,CACL,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE;QAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI;QACxC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,CAAC,EAAE;QACpC,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACtC,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,CACnD,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,WAAW,CAAC,OAA4B,EAAE,KAA0B;IAClF,OAAO,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;AACjG,CAAC;AAED,SAAS,aAAa,CAAC,IAAyB,EAAE,KAA0B;IAC1E,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAC9C,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAA4B,EAAE,KAA0B;IACjG,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAuB;IACzD,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAC9B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAuB;IAC9D,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kCAAkC,CAAC,OAAsB;IACvE,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IACvD,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;AACnE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB,CAAC,MAAsB;IACxD,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;AACpF,CAAC"}

package/dist/protocol/supervision.d.ts

@@ -0,0 +1,4 @@
+export { encodeSupervisionMessage, decodeSupervisionMessage } from "./codec.js";
+export { isExecutionReady, isPlaneReady, isReconnect, isSameExecutionOwner, isStaleSupervisionIdentity, isStorageReady, isSyncReady, mayReplaceExecutionOwner, mayStartExecutionOwnerAfterYjsLoss, replacementDecision, shutdownFlushFailed, shutdownIsComplete, } from "./loss.js";
+export * from "./schemas/index.js";
+//# sourceMappingURL=supervision.d.ts.map

package/dist/protocol/supervision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervision.d.ts","sourceRoot":"","sources":["../../src/protocol/supervision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,WAAW,EACX,wBAAwB,EACxB,kCAAkC,EAClC,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,cAAc,oBAAoB,CAAC"}

package/dist/protocol/supervision.js

@@ -0,0 +1,4 @@
+export { encodeSupervisionMessage, decodeSupervisionMessage } from "./codec.js";
+export { isExecutionReady, isPlaneReady, isReconnect, isSameExecutionOwner, isStaleSupervisionIdentity, isStorageReady, isSyncReady, mayReplaceExecutionOwner, mayStartExecutionOwnerAfterYjsLoss, replacementDecision, shutdownFlushFailed, shutdownIsComplete, } from "./loss.js";
+export * from "./schemas/index.js";
+//# sourceMappingURL=supervision.js.map

package/dist/protocol/supervision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervision.js","sourceRoot":"","sources":["../../src/protocol/supervision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,oBAAoB,EACpB,0BAA0B,EAC1B,cAAc,EACd,WAAW,EACX,wBAAwB,EACxB,kCAAkC,EAClC,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AACnB,cAAc,oBAAoB,CAAC"}

package/dist/providers/auth/authorize.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Browser sign-in owned by the daemon. The loopback listener starts when a
+ * driver asks, parks `harness/open-url` carrying its callback, and closes
+ * when the sign-in settles. Clients only open the URL and answer
+ * `{ kind: "opened" }` (or `{ kind: "text", input }` to paste); none hosts a
+ * listener, so a browser client signs in the same way the TUI does.
+ */
+import { type OAuthLoopbackListen } from "./loopback.js";
+/** A sign-in nobody finishes must not hold a port forever. */
+export declare const BROWSER_SIGN_IN_TIMEOUT_MS: number;
+export type BrowserAuthorization = {
+    readonly pasted: string;
+} | {
+    readonly code: string;
+    readonly state: string;
+    readonly redirectUri: string;
+};
+export type BrowserAuthorizeOptions = {
+    readonly authUrl: string;
+    readonly description: string;
+    /**
+     * Offer a paste field, named for what it takes: a key, or the address the
+     * browser ended on when it runs on another machine than the daemon.
+     */
+    readonly paste?: string;
+    readonly signal?: AbortSignal;
+    readonly timeoutMs?: number;
+    /** Listen address instead of the dialect's (tests keep ChatGPT's fixed port off 1455). */
+    readonly listen?: OAuthLoopbackListen;
+};
+/** The parked UI door: Scheme body in, `ui/resolve` answer out. */
+export type BrowserAuthorizeUi = (body: string) => Promise<Readonly<Record<string, unknown>>>;
+/**
+ * Listen, park the authorize URL, settle on the first of: pasted text, the
+ * browser's callback, an error, timeout, abort. A pasted redirect URL carrying
+ * `code` is the callback delivered by hand. The listener is always closed.
+ */
+export declare function authorizeInBrowser(ui: BrowserAuthorizeUi, opts: BrowserAuthorizeOptions): Promise<BrowserAuthorization>;
+//# sourceMappingURL=authorize.d.ts.map

package/dist/providers/auth/authorize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.d.ts","sourceRoot":"","sources":["../../../src/providers/auth/authorize.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAKL,KAAK,mBAAmB,EACzB,MAAM,eAAe,CAAC;AAEvB,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B,QAAa,CAAC;AAErD,MAAM,MAAM,oBAAoB,GAC9B;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhH,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;CACvC,CAAC;AAEF,mEAAmE;AACnE,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAK9F;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,kBAAkB,EACtB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CA8D/B"}

package/dist/providers/auth/authorize.js

@@ -0,0 +1,107 @@
+/**
+ * Browser sign-in owned by the daemon. The loopback listener starts when a
+ * driver asks, parks `harness/open-url` carrying its callback, and closes
+ * when the sign-in settles. Clients only open the URL and answer
+ * `{ kind: "opened" }` (or `{ kind: "text", input }` to paste); none hosts a
+ * listener, so a browser client signs in the same way the TUI does.
+ */
+import { fail, step } from "@inhuman.tools/harness-diagnostics";
+import { listenOAuthLoopback, oauthCallbackFor, withCallbackParam, } from "./loopback.js";
+/** A sign-in nobody finishes must not hold a port forever. */
+export const BROWSER_SIGN_IN_TIMEOUT_MS = 5 * 60_000;
+/** Fixed-port callbacks (ChatGPT's 1455): the live sign-in per `host:port`, so the latest one wins. */
+const holders = new Map();
+/**
+ * Listen, park the authorize URL, settle on the first of: pasted text, the
+ * browser's callback, an error, timeout, abort. A pasted redirect URL carrying
+ * `code` is the callback delivered by hand. The listener is always closed.
+ */
+export async function authorizeInBrowser(ui, opts) {
+    const dialect = oauthCallbackFor(opts.authUrl);
+    const style = { ...dialect, listen: { ...dialect.listen, ...opts.listen } };
+    const stop = new AbortController();
+    let loopback;
+    const key = style.listen.port === 0 ? undefined : `${style.listen.host}:${style.listen.port}`;
+    // Closing here, not in the superseded call's finally: the new listen must find the port free.
+    const supersede = () => {
+        loopback?.close();
+        stop.abort(new DOMException("browser sign-in superseded", "AbortError"));
+    };
+    if (key !== undefined) {
+        holders.get(key)?.();
+        holders.set(key, supersede);
+    }
+    const timer = setTimeout(() => stop.abort(new Error("browser sign-in timed out")), opts.timeoutMs ?? BROWSER_SIGN_IN_TIMEOUT_MS);
+    const forward = () => stop.abort(opts.signal?.reason ?? new DOMException("aborted", "AbortError"));
+    if (opts.signal?.aborted === true)
+        forward();
+    else
+        opts.signal?.addEventListener("abort", forward, { once: true });
+    /** Work that yields to the first stop: abort, supersede, timeout. */
+    const until = async (work) => {
+        let onStop = () => undefined;
+        const stopped = new Promise((_resolve, reject) => {
+            onStop = () => reject(stop.signal.reason);
+            if (stop.signal.aborted)
+                onStop();
+            else
+                stop.signal.addEventListener("abort", onStop, { once: true });
+        });
+        try {
+            return await Promise.race([work, stopped]);
+        }
+        finally {
+            stop.signal.removeEventListener("abort", onStop);
+        }
+    };
+    try {
+        loopback = await listenOAuthLoopback(style.listen);
+        stop.signal.throwIfAborted();
+        const { callbackUrl, wait } = loopback;
+        step(`browser sign-in listen ${callbackUrl}`);
+        const url = withCallbackParam(opts.authUrl, callbackUrl, style.param);
+        const answer = await until(ui(openUrlBody(url, opts.description, opts.paste ?? "")));
+        const pasted = typeof answer.input === "string" ? answer.input.trim() : "";
+        if (pasted !== "") {
+            step(`browser sign-in pasted chars=${pasted.length}`);
+            return pastedAuthorization(pasted, callbackUrl);
+        }
+        const callback = await until(wait);
+        step(`browser sign-in callback code=${callback.code.length} state=${callback.state.length}`);
+        return { code: callback.code, state: callback.state, redirectUri: callbackUrl };
+    }
+    catch (error) {
+        if (error instanceof Error && error.name === "AbortError")
+            step(`browser sign-in ${error.message}`);
+        else
+            fail("browser sign-in", error);
+        throw error;
+    }
+    finally {
+        clearTimeout(timer);
+        opts.signal?.removeEventListener("abort", forward);
+        loopback?.close();
+        if (key !== undefined && holders.get(key) === supersede)
+            holders.delete(key);
+    }
+}
+function pastedAuthorization(pasted, redirectUri) {
+    try {
+        const url = new URL(pasted);
+        const code = url.searchParams.get("code")?.trim() ?? "";
+        if (code !== "")
+            return { code, state: url.searchParams.get("state")?.trim() ?? "", redirectUri };
+    }
+    catch {
+        /* not a URL: the text itself is the paste */
+    }
+    return { pasted };
+}
+function openUrlBody(url, description, paste) {
+    const field = paste === "" ? "" : ` :name ${quote(paste)} :input 'password`;
+    return `(harness/open-url :url ${quote(url)} :description ${quote(description)}${field})`;
+}
+function quote(value) {
+    return `"${value.replaceAll("\\", "\\\\").replaceAll('"', String.raw `\"`)}"`;
+}
+//# sourceMappingURL=authorize.js.map

package/dist/providers/auth/authorize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorize.js","sourceRoot":"","sources":["../../../src/providers/auth/authorize.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAEhE,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAGlB,MAAM,eAAe,CAAC;AAEvB,8DAA8D;AAC9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,MAAM,CAAC;AAsBrD,uGAAuG;AACvG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE9C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAsB,EACtB,IAA6B;IAE7B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,QAAmC,CAAC;IACxC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9F,8FAA8F;IAC9F,MAAM,SAAS,GAAG,GAAS,EAAE;QAC3B,QAAQ,EAAE,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,4BAA4B,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC;IACF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,EACxD,IAAI,CAAC,SAAS,IAAI,0BAA0B,CAC7C,CAAC;IACF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IACzG,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;;QACxC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,qEAAqE;IACrE,MAAM,KAAK,GAAG,KAAK,EAAK,IAAgB,EAAc,EAAE;QACtD,IAAI,MAAM,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACtD,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,EAAE,CAAC;;gBAC7B,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7C,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC7B,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC;QACvC,IAAI,CAAC,0BAA0B,WAAW,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAClB,IAAI,CAAC,gCAAgC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACtD,OAAO,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAClD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,iCAAiC,QAAQ,CAAC,IAAI,CAAC,MAAM,UAAU,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,IAAI,CAAC,mBAAmB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;;YAC/F,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnD,QAAQ,EAAE,KAAK,EAAE,CAAC;QAClB,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,WAAmB;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACxD,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,WAAmB,EAAE,KAAa;IAClE,MAAM,KAAK,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,mBAAmB,CAAC;IAC5E,OAAO,0BAA0B,KAAK,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,WAAW,CAAC,GAAG,KAAK,GAAG,CAAC;AAC5F,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAA,IAAI,CAAC,GAAG,CAAC;AAC/E,CAAC"}

package/dist/providers/auth/device.d.ts

@@ -0,0 +1,30 @@
+import { type OidcTokens } from "./oidc.js";
+export declare const DEVICE_CODE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
+export type DeviceClient = {
+    readonly driver: string;
+    readonly clientId: string;
+    readonly deviceCodeUrl: string;
+    readonly tokenUrl: string;
+    readonly scope: string;
+    readonly extraDevice?: Readonly<Record<string, string>>;
+    readonly fallbackVerificationUri?: string;
+    /** Error-message prefix; defaults to `driver`. */
+    readonly label?: string;
+    /** Floor for poll interval. RFC 8628 default is 5. */
+    readonly minIntervalSec?: number;
+};
+export type DeviceAuthorization = {
+    readonly deviceCode: string;
+    readonly userCode: string;
+    readonly verificationUri: string;
+    readonly verificationUriComplete: string;
+    readonly expiresInSec: number;
+    readonly intervalSec: number;
+};
+export type DevicePollClock = {
+    now(): number;
+    wait(ms: number): Promise<void>;
+};
+export declare function requestDeviceCode(client: DeviceClient): Promise<DeviceAuthorization>;
+export declare function pollDeviceToken(client: DeviceClient, device: Pick<DeviceAuthorization, "deviceCode" | "expiresInSec" | "intervalSec">, clock?: DevicePollClock, signal?: AbortSignal): Promise<OidcTokens>;
+//# sourceMappingURL=device.d.ts.map

package/dist/providers/auth/device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../../src/providers/auth/device.ts"],"names":[],"mappings":"AAQA,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAEjE,eAAO,MAAM,iBAAiB,iDAAiD,CAAC;AAEhF,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C,kDAAkD;IAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,IAAI,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,CAAC;AAWF,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+B1F;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,cAAc,GAAG,aAAa,CAAC,EAChF,KAAK,GAAE,eAA8B,EACrC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC,CAerB"}

package/dist/providers/auth/device.js

@@ -0,0 +1,105 @@
+/**
+ * RFC 8628 device-code grant. Vendor URLs and client ids stay with the
+ * provider; this package only runs the wire dance.
+ */
+import invariant from "tiny-invariant";
+import { postForm } from "./fetch.js";
+import { asNonEmpty, asNonNegativeInt, asPositiveInt, asRecord } from "./json.js";
+import { tokensFromGrantBody } from "./oidc.js";
+export const DEVICE_CODE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
+const defaultClock = {
+    now: () => Date.now(),
+    wait: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+};
+function labelOf(client) {
+    return client.label ?? client.driver;
+}
+export async function requestDeviceCode(client) {
+    const response = await postForm(client.deviceCodeUrl, {
+        client_id: client.clientId,
+        scope: client.scope,
+        ...client.extraDevice,
+    }, `${labelOf(client)} device code`);
+    const label = labelOf(client);
+    invariant(response.ok, `${label} device code failed (${response.status})`);
+    const rec = asRecord(await response.json());
+    invariant(rec !== null, `${label} device code returned no body`);
+    const deviceCode = asNonEmpty(rec.device_code);
+    const userCode = asNonEmpty(rec.user_code);
+    invariant(deviceCode !== undefined, `${label} device code returned no device_code`);
+    invariant(userCode !== undefined, `${label} device code returned no user_code`);
+    const verificationUri = asNonEmpty(rec.verification_uri) ?? client.fallbackVerificationUri ?? "";
+    const verificationUriComplete = asNonEmpty(rec.verification_uri_complete) ??
+        (verificationUri === "" ? "" : `${verificationUri}?user_code=${userCode}`);
+    invariant(verificationUriComplete !== "", `${label} device code returned no verification_uri`);
+    return {
+        deviceCode,
+        userCode,
+        verificationUri: verificationUri === "" ? verificationUriComplete : verificationUri,
+        verificationUriComplete,
+        expiresInSec: asPositiveInt(rec.expires_in) ?? 600,
+        intervalSec: asNonNegativeInt(rec.interval) ?? 5,
+    };
+}
+export async function pollDeviceToken(client, device, clock = defaultClock, signal) {
+    const label = labelOf(client);
+    const deadline = clock.now() + device.expiresInSec * 1000;
+    const minIntervalSec = client.minIntervalSec ?? 5;
+    let intervalMs = Math.max(device.intervalSec, minIntervalSec) * 1000;
+    for (;;) {
+        signal?.throwIfAborted();
+        const result = await tryDeviceToken(client, device.deviceCode);
+        if (result.kind === "tokens")
+            return result.tokens;
+        if (result.kind === "denied")
+            throw new Error(`${label} authorization denied`);
+        if (result.kind === "expired")
+            throw new Error(`${label} device code expired`);
+        if (clock.now() >= deadline)
+            throw new Error(`${label} authorization timed out`);
+        if (result.kind === "slow_down")
+            intervalMs += 5_000;
+        await waitOrAbort(clock.wait(intervalMs), signal);
+    }
+}
+async function waitOrAbort(wait, signal) {
+    if (signal === undefined)
+        return wait;
+    signal.throwIfAborted();
+    let onAbort = () => undefined;
+    const aborted = new Promise((_resolve, reject) => {
+        onAbort = () => reject(signal.reason);
+        signal.addEventListener("abort", onAbort, { once: true });
+    });
+    try {
+        await Promise.race([wait, aborted]);
+    }
+    finally {
+        signal.removeEventListener("abort", onAbort);
+    }
+}
+async function tryDeviceToken(client, deviceCode) {
+    const label = labelOf(client);
+    const response = await postForm(client.tokenUrl, {
+        grant_type: DEVICE_CODE_GRANT,
+        device_code: deviceCode,
+        client_id: client.clientId,
+    }, `${label} device token`);
+    const rec = asRecord(await response.json().catch(() => null));
+    if (response.ok) {
+        return { kind: "tokens", tokens: tokensFromGrantBody(rec, label) };
+    }
+    if (response.status === 429)
+        return { kind: "slow_down" };
+    const error = asNonEmpty(rec?.error);
+    if (error === "authorization_pending")
+        return { kind: "pending" };
+    if (error === "slow_down")
+        return { kind: "slow_down" };
+    if (error === "access_denied")
+        return { kind: "denied" };
+    if (error === "expired_token")
+        return { kind: "expired" };
+    throw new Error(`${label} token exchange failed (${response.status}${error === undefined ? "" : ` ${error}`})`);
+}
+//# sourceMappingURL=device.js.map

package/dist/providers/auth/device.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device.js","sourceRoot":"","sources":["../../../src/providers/auth/device.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,SAAS,MAAM,gBAAgB,CAAC;AAEvC,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAmB,MAAM,WAAW,CAAC;AAEjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,8CAA8C,CAAC;AA8BhF,MAAM,YAAY,GAAoB;IACpC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACrB,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;CAChE,CAAC;AAEF,SAAS,OAAO,CAAC,MAAoB;IACnC,OAAO,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAoB;IAC1D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,MAAM,CAAC,aAAa,EACpB;QACE,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,MAAM,CAAC,WAAW;KACtB,EACD,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,CACjC,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,KAAK,wBAAwB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,SAAS,CAAC,GAAG,KAAK,IAAI,EAAE,GAAG,KAAK,+BAA+B,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3C,SAAS,CAAC,UAAU,KAAK,SAAS,EAAE,GAAG,KAAK,sCAAsC,CAAC,CAAC;IACpF,SAAS,CAAC,QAAQ,KAAK,SAAS,EAAE,GAAG,KAAK,oCAAoC,CAAC,CAAC;IAChF,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,MAAM,CAAC,uBAAuB,IAAI,EAAE,CAAC;IACjG,MAAM,uBAAuB,GAC3B,UAAU,CAAC,GAAG,CAAC,yBAAyB,CAAC;QACzC,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,eAAe,cAAc,QAAQ,EAAE,CAAC,CAAC;IAC7E,SAAS,CAAC,uBAAuB,KAAK,EAAE,EAAE,GAAG,KAAK,2CAA2C,CAAC,CAAC;IAC/F,OAAO;QACL,UAAU;QACV,QAAQ;QACR,eAAe,EAAE,eAAe,KAAK,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,eAAe;QACnF,uBAAuB;QACvB,YAAY,EAAE,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG;QAClD,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,MAAgF,EAChF,QAAyB,YAAY,EACrC,MAAoB;IAEpB,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1D,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;IAClD,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,IAAI,CAAC;IACrE,SAAS,CAAC;QACR,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;QAC/E,IAAI,KAAK,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;YAAE,UAAU,IAAI,KAAK,CAAC;QACrD,MAAM,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAmB,EAAE,MAA+B;IAC7E,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,IAAI,OAAO,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtD,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAMD,KAAK,UAAU,cAAc,CAAC,MAAoB,EAAE,UAAkB;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,MAAM,CAAC,QAAQ,EACf;QACE,UAAU,EAAE,iBAAiB;QAC7B,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,MAAM,CAAC,QAAQ;KAC3B,EACD,GAAG,KAAK,eAAe,CACxB,CAAC;IACF,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,uBAAuB;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAClE,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACxD,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzD,IAAI,KAAK,KAAK,eAAe;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,QAAQ,CAAC,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,GAAG,CAAC,CAAC;AAClH,CAAC"}

package/dist/providers/auth/fetch.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Undici's TypeError message is "fetch failed" — no URL, no OS/TLS reason.
+ * Wrap at `fetch` so token errors share one line. Local copy so this
+ * package does not import the server barrel.
+ */
+export type FetchFailureOpts = {
+    readonly url: string;
+    readonly method?: string;
+    readonly why?: string;
+};
+export declare const FORM_HEADERS: {
+    readonly accept: "application/json";
+    readonly "content-type": "application/x-www-form-urlencoded";
+};
+export declare function describeFetchLine(opts: FetchFailureOpts, rest: string): string;
+export declare function wrapFetchFailure(error: unknown, opts: FetchFailureOpts): Error;
+export declare function postForm(url: string, body: Record<string, string>, why: string): Promise<Response>;
+//# sourceMappingURL=fetch.d.ts.map

package/dist/providers/auth/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../../src/providers/auth/fetch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAIF,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAEX,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAO9E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,GAAG,KAAK,CA6B9E;AAED,wBAAsB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAUxG"}