@inhuman.tools/harness 0.0.0-stage → 0.2.0

package/dist/runtime/private-plugin-mcp.js

@@ -0,0 +1,228 @@
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+/**
+ * Lazy private bundled MCP connections per workspace. Not adopted into
+ * config.json or the foreground model catalog.
+ */
+import { createHash } from "node:crypto";
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+import { ConnectionSpec } from "@inhuman.tools/plexus-expectations";
+import { action, autorun, observable } from "mobx";
+import { pluginContributionRevision } from "../extensions/index.js";
+import { parseListedTools } from "../providers/mcp/wire.js";
+export const PRIVATE_CONNECTION_PREFIX = "__prv_";
+export function isPrivatePluginConnection(connectionKey) {
+    return connectionKey.startsWith(PRIVATE_CONNECTION_PREFIX);
+}
+export function privateConnectionKey(workspacePath, pluginName, serverName) {
+    const ws = createHash("sha256").update(workspacePath).digest("hex").slice(0, 12);
+    return `${PRIVATE_CONNECTION_PREFIX}${ws}__${pluginName}__${serverName}`;
+}
+export function parsePrivateConnectionKey(connectionKey) {
+    if (!isPrivatePluginConnection(connectionKey))
+        return null;
+    const body = connectionKey.slice(PRIVATE_CONNECTION_PREFIX.length);
+    const parts = body.split("__");
+    if (parts.length < 3)
+        return null;
+    const pluginName = parts.at(1);
+    if (pluginName == null || pluginName === "")
+        return null;
+    return { pluginName, serverName: parts.slice(2).join("__") };
+}
+function resolveTransportEnv(record, pluginRoot, serverName, workspacePath) {
+    const server = record.definition.mcpServers.find((row) => row.name === serverName);
+    if (server == null)
+        return {};
+    const env = server.transport.env;
+    const resolved = env == null ? {} : typeof env === "function" ? env({ pluginRoot, workspaceRoot: workspacePath }) : { ...env };
+    return {
+        ...resolved,
+        MEMORY_CONTRIBUTION_REVISION: pluginContributionRevision(record),
+    };
+}
+function resolvePluginRoot(pluginRootPath) {
+    return pluginRootPath.trim() === "" ? process.cwd() : resolve(pluginRootPath);
+}
+const MCP_PREFIX = "mcp__";
+const MAX_WIRE_NAME = 64;
+const WIRE_NAME_RE = /^[\w-]+$/;
+export function mcpWireName(connectionKey, serverToolName) {
+    const prefix = `${MCP_PREFIX}${connectionKey}__`;
+    const direct = `${prefix}${serverToolName}`;
+    if (direct.length <= MAX_WIRE_NAME && WIRE_NAME_RE.test(direct))
+        return direct;
+    const hash = createHash("sha256").update(serverToolName).digest("hex").slice(0, 10);
+    const safe = serverToolName.replaceAll(/[^\w-]+/g, "_").replaceAll(/^_+|_+$/g, "") || "tool";
+    const suffix = `__${hash}`;
+    const available = Math.max(1, MAX_WIRE_NAME - prefix.length - suffix.length);
+    return `${prefix}${safe.slice(0, available)}${suffix}`;
+}
+export function privateMcpCatalogEntries(state, workspacePath, recipeName, listedToolsByConnection) {
+    const pluginRecord = [...state.plugins.values()].find((row) => row.bindings.some((binding) => binding.botName === recipeName));
+    if (pluginRecord == null)
+        return [];
+    const bindings = pluginRecord.bindings.filter((binding) => binding.botName === recipeName);
+    const out = [];
+    for (const binding of bindings) {
+        const key = privateConnectionKey(workspacePath, pluginRecord.pluginName, binding.serverName);
+        const listed = listedToolsByConnection[key] ?? [];
+        for (const toolName of binding.tools) {
+            const tool = listed.find((row) => row.serverToolName === toolName);
+            if (tool == null)
+                continue;
+            out.push({
+                wireName: mcpWireName(key, toolName),
+                description: tool.description ?? toolName,
+                class: tool.class ?? "read",
+                representation: "symbol",
+                parameters: tool.parameters,
+                source: {
+                    kind: "connection",
+                    connectionKey: key,
+                    serverToolName: toolName,
+                },
+            });
+        }
+    }
+    return out;
+}
+let PrivatePluginMcpHost = (() => {
+    var _a;
+    let _instanceExtraInitializers = [];
+    let _listedToolsByConnection_decorators;
+    let _listedToolsByConnection_initializers = [];
+    let _listedToolsByConnection_extraInitializers = [];
+    let _sync_decorators;
+    return class PrivatePluginMcpHost {
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(null) : void 0;
+            __esDecorate(this, null, _listedToolsByConnection_decorators, { kind: "accessor", name: "listedToolsByConnection", static: false, private: false, access: { has: obj => "listedToolsByConnection" in obj, get: obj => obj.listedToolsByConnection, set: (obj, value) => { obj.listedToolsByConnection = value; } }, metadata: _metadata }, _listedToolsByConnection_initializers, _listedToolsByConnection_extraInitializers);
+            __esDecorate(this, null, _sync_decorators, { kind: "method", name: "sync", static: false, private: false, access: { has: obj => "sync" in obj, get: obj => obj.sync }, metadata: _metadata }, null, _instanceExtraInitializers);
+            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+        }
+        #catalog = __runInitializers(this, _instanceExtraInitializers);
+        #workspacePath;
+        #pluginRoots;
+        #writeSecrets;
+        #dispose;
+        #listedToolsByConnection_accessor_storage = __runInitializers(this, _listedToolsByConnection_initializers, {});
+        get listedToolsByConnection() { return this.#listedToolsByConnection_accessor_storage; }
+        set listedToolsByConnection(value) { this.#listedToolsByConnection_accessor_storage = value; }
+        constructor(ops) {
+            __runInitializers(this, _listedToolsByConnection_extraInitializers);
+            this.#catalog = ops.catalog;
+            this.#workspacePath = ops.workspacePath;
+            this.#pluginRoots = ops.pluginRoots;
+            this.#writeSecrets = ops.writeSecrets;
+            this.#dispose = autorun(() => {
+                this.sync(ops.connections, ops.drivers);
+                const listed = {};
+                for (const record of this.#catalog.pluginInstall.plugins.values()) {
+                    for (const server of record.privateServers) {
+                        if (server.definition.scope !== "workspace")
+                            continue;
+                        const key = privateConnectionKey(this.#workspacePath, record.pluginName, server.definition.name);
+                        const spec = ops.connections[key];
+                        if (spec == null)
+                            continue;
+                        listed[key] = [...parseListedTools(spec.live.tools)];
+                    }
+                }
+                this.listedToolsByConnection = listed;
+            });
+        }
+        sync(connections, drivers) {
+            const keep = new Set();
+            const listed = {};
+            for (const record of this.#catalog.pluginInstall.plugins.values()) {
+                for (const server of record.privateServers) {
+                    if (server.definition.visibility !== "private")
+                        continue;
+                    if (server.definition.scope !== "workspace")
+                        continue;
+                    const key = privateConnectionKey(this.#workspacePath, record.pluginName, server.definition.name);
+                    keep.add(key);
+                    const driver = drivers["mcp-stdio"];
+                    if (driver == null)
+                        continue;
+                    const pluginRoot = resolvePluginRoot(this.#pluginRoots.get(record.pluginName) ?? "");
+                    const cwd = server.definition.transport.cwd === "plugin" ? pluginRoot : this.#workspacePath;
+                    const entry = server.definition.transport.args[0];
+                    if (typeof entry === "string" && entry.trim() !== "") {
+                        const executable = resolve(cwd, entry);
+                        // Plugin transport path is operator-authored, not a user upload.
+                        // eslint-disable-next-line security/detect-non-literal-fs-filename
+                        if (!existsSync(executable))
+                            continue;
+                    }
+                    const spec = connections[key] ?? new ConnectionSpec({ driver, name: key });
+                    spec.driver = driver;
+                    spec.name = key;
+                    spec.annotation = "@private-plugin";
+                    spec.configuration = {
+                        command: server.definition.transport.command,
+                        args: [...server.definition.transport.args],
+                        cwd,
+                        enabled: true,
+                    };
+                    connections[key] = spec;
+                    const env = resolveTransportEnv(record, pluginRoot, server.definition.name, this.#workspacePath);
+                    const secrets = {};
+                    for (const [name, value] of Object.entries(env)) {
+                        secrets[`env_${name}`] = value;
+                    }
+                    this.#writeSecrets(key, secrets);
+                    listed[key] = [...parseListedTools(spec.live.tools)];
+                }
+            }
+            for (const id of Object.keys(connections)) {
+                if (!isPrivatePluginConnection(id))
+                    continue;
+                if (keep.has(id))
+                    continue;
+                delete connections[id];
+                this.#writeSecrets(id, {});
+            }
+            this.listedToolsByConnection = listed;
+        }
+        [(_listedToolsByConnection_decorators = [(_a = observable).shallow.bind(_a)], _sync_decorators = [action], Symbol.dispose)]() {
+            this.#dispose();
+        }
+    };
+})();
+export { PrivatePluginMcpHost };
+//# sourceMappingURL=private-plugin-mcp.js.map

package/dist/runtime/private-plugin-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-plugin-mcp.js","sourceRoot":"","sources":["../../src/runtime/private-plugin-mcp.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,cAAc,EAAc,MAAM,oCAAoC,CAAC;AAChF,OAAO,EAAE,MAAM,EAAE,OAAO,EAA0B,UAAU,EAAE,MAAM,MAAM,CAAC;AAE3E,OAAO,EAAE,0BAA0B,EAA4D,MAAM,cAAc,CAAC;AACpH,OAAO,EAAE,gBAAgB,EAAsB,MAAM,sBAAsB,CAAC;AAG5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;AAElD,MAAM,UAAU,yBAAyB,CAAC,aAAqB;IAC7D,OAAO,aAAa,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,aAAqB,EAAE,UAAkB,EAAE,UAAkB;IAChG,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,GAAG,yBAAyB,GAAG,EAAE,KAAK,UAAU,KAAK,UAAU,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,aAAqB;IAC7D,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,UAAU,IAAI,IAAI,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA8B,EAC9B,UAAkB,EAClB,UAAkB,EAClB,aAAqB;IAErB,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IACnF,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;IACjC,MAAM,QAAQ,GACZ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;IAChH,OAAO;QACL,GAAG,QAAQ;QACX,4BAA4B,EAAE,0BAA0B,CAAC,MAAM,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,cAAsB;IAC/C,OAAO,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,GAAG,OAAO,CAAC;AAC3B,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,YAAY,GAAG,UAAU,CAAC;AAEhC,MAAM,UAAU,WAAW,CAAC,aAAqB,EAAE,cAAsB;IACvE,MAAM,MAAM,GAAG,GAAG,UAAU,GAAG,aAAa,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,cAAc,EAAE,CAAC;IAC5C,IAAI,MAAM,CAAC,MAAM,IAAI,aAAa,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAE/E,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;IAC7F,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7E,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAA6B,EAC7B,aAAqB,EACrB,UAAkB,EAClB,uBAA2E;IAE3E,MAAM,YAAY,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAC5D,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAC/D,CAAC;IACF,IAAI,YAAY,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC;IAC3F,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,oBAAoB,CAAC,aAAa,EAAE,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAClD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC;YACnE,IAAI,IAAI,IAAI,IAAI;gBAAE,SAAS;YAC3B,GAAG,CAAC,IAAI,CAAC;gBACP,QAAQ,EAAE,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC;gBACpC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,QAAQ;gBACzC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,MAAM;gBAC3B,cAAc,EAAE,QAAQ;gBACxB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE;oBACN,IAAI,EAAE,YAAY;oBAClB,aAAa,EAAE,GAAG;oBAClB,cAAc,EAAE,QAAQ;iBACzB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;IAEY,oBAAoB;;;;;;;iBAApB,oBAAoB;;;YAMX,0NAAS,uBAAuB,6BAAvB,uBAAuB,yHAAuC;YAiC3F,+JAAA,IAAI,6DAkDH;;;QAxFQ,QAAQ,GADN,mDAAoB,CACuC;QAC7D,cAAc,CAAS;QACvB,YAAY,CAA8B;QAC1C,aAAa,CAA4E;QACzF,QAAQ,CAAoB;QACjB,2GAAoE,EAAE,EAAC;QAAvE,IAAS,uBAAuB,6DAAuC;QAAvE,IAAS,uBAAuB,mEAAuC;QAE3F,YAAY,GASX;;YACC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC;YAC5B,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,aAAa,CAAC;YACxC,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC,WAAW,CAAC;YACpC,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC;YACtC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE;gBAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,MAAM,GAAoC,EAAE,CAAC;gBACnD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;oBAClE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;wBAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,KAAK,WAAW;4BAAE,SAAS;wBACtD,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;wBACjG,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;wBAClC,IAAI,IAAI,IAAI,IAAI;4BAAE,SAAS;wBAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,uBAAuB,GAAG,MAAM,CAAC;YACxC,CAAC,CAAC,CAAC;SACJ;QAGD,IAAI,CACF,WAAoE,EACpE,OAAmD;YAEnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,MAAM,MAAM,GAAoC,EAAE,CAAC;YACnD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBAClE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS;wBAAE,SAAS;oBACzD,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,KAAK,WAAW;wBAAE,SAAS;oBACtD,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBACjG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACd,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;oBACpC,IAAI,MAAM,IAAI,IAAI;wBAAE,SAAS;oBAC7B,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;oBACrF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;oBAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;wBACrD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;wBACvC,iEAAiE;wBACjE,mEAAmE;wBACnE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;4BAAE,SAAS;oBACxC,CAAC;oBACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,IAAI,cAAc,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;oBAC3E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;oBACrB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;oBAChB,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC;oBACpC,IAAI,CAAC,aAAa,GAAG;wBACnB,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO;wBAC5C,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC;wBAC3C,GAAG;wBACH,OAAO,EAAE,IAAI;qBACd,CAAC;oBACF,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;oBACxB,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;oBACjG,MAAM,OAAO,GAA2B,EAAE,CAAC;oBAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;wBAChD,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;oBACjC,CAAC;oBACD,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBACjC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,yBAAyB,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC;gBACvB,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,CAAC,uBAAuB,GAAG,MAAM,CAAC;QACxC,CAAC;QAED,yCArFC,CAAA,KAAA,UAAU,CAAA,CAAC,OAAO,gCAgClB,MAAM,GAqDN,MAAM,CAAC,OAAO,EAAC;YACd,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC;;;SA7FU,oBAAoB"}

package/dist/runtime/types.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Occupancy/policy facts plus admitted-call grants. Composition decides
+ * seats; this package only derives eligibility from those inputs.
+ */
+/** Admitted, unsettled caller → worker edge. Never a fabricated client seat. */
+export type DelegatedGrant = {
+    readonly callId: string;
+    readonly callerSessionId: string;
+    readonly workerSessionId: string;
+};
+export type EligibilitySnapshot = {
+    readonly acquired: ReadonlySet<string>;
+    readonly occupied: ReadonlySet<string>;
+    readonly resident: ReadonlySet<string>;
+    /** Mint-until-first-seat. Idle conversations stay rooted; workers do not. */
+    readonly reserved: ReadonlySet<string>;
+    readonly conversations: ReadonlySet<string>;
+    readonly grants: readonly DelegatedGrant[];
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/runtime/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,gFAAgF;AAChF,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;CAC5C,CAAC"}

package/dist/runtime/types.js

@@ -0,0 +1,6 @@
+/**
+ * Occupancy/policy facts plus admitted-call grants. Composition decides
+ * seats; this package only derives eligibility from those inputs.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/runtime/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime/types.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/runtime-server/compose.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Production runtime over RemoteDocumentAdapter. Hydration, recovery, and
+ * ownership finish before activate.
+ */
+import { KernelPlexus, SessionPlexus } from "@inhuman.tools/harness-model";
+import { type ConnectionSpec, type DriverSpec } from "@inhuman.tools/plexus-expectations";
+import type { DriverRegistry } from "../connections/index.js";
+import { ProductionRuntime, type RecoveredJob } from "../runtime/index.js";
+import type { KernelToolCatalog } from "../tool-catalog/index.js";
+import type { RemoteDocumentAdapter } from "../yjs/index.js";
+export type { RecoveredJob } from "../runtime/index.js";
+type KernelTables = {
+    readonly connections: Record<string, ConnectionSpec | undefined>;
+    readonly drivers: Record<string, DriverSpec | undefined>;
+};
+export type RuntimeServerOptions = {
+    readonly adapter: RemoteDocumentAdapter;
+    readonly registry: DriverRegistry;
+    readonly catalog?: KernelToolCatalog;
+};
+export declare class RuntimeServer implements Disposable {
+    #private;
+    constructor(options: RuntimeServerOptions);
+    get runtime(): ProductionRuntime<SessionPlexus>;
+    get documents(): RemoteDocumentAdapter;
+    get kernel(): KernelPlexus | undefined;
+    get recovered(): boolean;
+    /** Bind has no catalog observers. */
+    bind(tables: KernelTables, opts?: {
+        readonly moduleRoot?: string;
+    }): void;
+    acquireKernel(): Promise<KernelPlexus>;
+    acquireSession(sessionId: string, path?: string): Promise<SessionPlexus>;
+    /** Classify interned session jobs. */
+    recover(): RecoveredJob[];
+    /** Catalog projection starts only after intern/recover. */
+    activate(): void;
+    /**
+     * Same runtime generation, new connection epoch. Re-acquires and recovers
+     * the held documents. Catalog observers stay off until activate().
+     */
+    reconnect(adapter: RemoteDocumentAdapter): Promise<RecoveredJob[]>;
+    [Symbol.dispose](): void;
+}
+//# sourceMappingURL=compose.d.ts.map

package/dist/runtime-server/compose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../src/runtime-server/compose.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAG1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAsB,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,OAAO,CAAC;AAEnD,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C,KAAK,YAAY,GAAG;IAClB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC,CAAC;IACjE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC;CACtC,CAAC;AAEF,qBAAa,aAAc,YAAW,UAAU;;gBAUlC,OAAO,EAAE,oBAAoB;IASzC,IAAI,OAAO,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAE9C;IAED,IAAI,SAAS,IAAI,qBAAqB,CAErC;IAED,IAAI,MAAM,IAAI,YAAY,GAAG,SAAS,CAErC;IAED,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,qCAAqC;IACrC,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAMnE,aAAa,IAAI,OAAO,CAAC,YAAY,CAAC;IAYtC,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,SAAK,GAAG,OAAO,CAAC,aAAa,CAAC;IAc1E,sCAAsC;IACtC,OAAO,IAAI,YAAY,EAAE;IASzB,2DAA2D;IAC3D,QAAQ,IAAI,IAAI;IAOhB;;;OAGG;IACG,SAAS,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IA6BxE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI;CA+DzB"}

package/dist/runtime-server/compose.js

@@ -0,0 +1,195 @@
+/**
+ * Production runtime over RemoteDocumentAdapter. Hydration, recovery, and
+ * ownership finish before activate.
+ */
+import { KernelPlexus, SessionPlexus } from "@inhuman.tools/harness-model";
+import * as Y from "yjs";
+import { documentKey, KERNEL_DOCUMENT_KEY } from "../protocol/document/index.js";
+import { ProductionRuntime, recoverSessionJobs } from "../runtime/index.js";
+export class RuntimeServer {
+    #runtime;
+    #adapter;
+    #tables = null;
+    #moduleRoot;
+    #kernel;
+    #recovered = false;
+    #acquiringKernel = null;
+    #acquiring = new Map();
+    constructor(options) {
+        this.#adapter = options.adapter;
+        this.#runtime = new ProductionRuntime({
+            registry: options.registry,
+            catalog: options.catalog,
+            documents: options.adapter,
+        });
+    }
+    get runtime() {
+        return this.#runtime;
+    }
+    get documents() {
+        return this.#adapter;
+    }
+    get kernel() {
+        return this.#kernel;
+    }
+    get recovered() {
+        return this.#recovered;
+    }
+    /** Bind has no catalog observers. */
+    bind(tables, opts) {
+        this.#tables = tables;
+        if (opts?.moduleRoot != null)
+            this.#moduleRoot = opts.moduleRoot;
+        this.#runtime.bind(tables, opts);
+    }
+    async acquireKernel() {
+        if (this.#kernel != null)
+            return this.#kernel;
+        if (this.#acquiringKernel != null)
+            return this.#acquiringKernel;
+        const run = this.#acquireKernelNow();
+        this.#acquiringKernel = run;
+        try {
+            return await run;
+        }
+        finally {
+            if (this.#acquiringKernel === run)
+                this.#acquiringKernel = null;
+        }
+    }
+    async acquireSession(sessionId, path = "") {
+        const live = this.#runtime.replica(sessionId);
+        if (live != null)
+            return live;
+        const pending = this.#acquiring.get(sessionId);
+        if (pending != null)
+            return pending;
+        const run = this.#acquireSessionNow(sessionId, path);
+        this.#acquiring.set(sessionId, run);
+        try {
+            return await run;
+        }
+        finally {
+            if (this.#acquiring.get(sessionId) === run)
+                this.#acquiring.delete(sessionId);
+        }
+    }
+    /** Classify interned session jobs. */
+    recover() {
+        const recovered = [];
+        for (const replica of this.#runtime.replicaValues()) {
+            recovered.push(...recoverSessionJobs(replica.root, { catalog: this.#runtime.catalog }));
+        }
+        this.#recovered = true;
+        return recovered;
+    }
+    /** Catalog projection starts only after intern/recover. */
+    activate() {
+        if (!this.#recovered) {
+            throw new Error("runtime: recover before activate");
+        }
+        this.#runtime.activate();
+    }
+    /**
+     * Same runtime generation, new connection epoch. Re-acquires and recovers
+     * the held documents. Catalog observers stay off until activate().
+     */
+    async reconnect(adapter) {
+        const sessionIds = [...this.#runtime.acquired];
+        const hadKernel = this.#kernel != null;
+        const tables = this.#tables;
+        const moduleRoot = this.#moduleRoot;
+        const registry = this.#runtime.registry;
+        const catalog = this.#runtime.catalog;
+        const previous = this.#adapter;
+        this.#stopAwareness();
+        this.#runtime[Symbol.dispose]();
+        this.#kernel = undefined;
+        this.#acquiringKernel = null;
+        this.#acquiring.clear();
+        this.#recovered = false;
+        this.#adapter = adapter;
+        previous[Symbol.dispose]();
+        this.#runtime = new ProductionRuntime({
+            registry,
+            catalog,
+            documents: adapter,
+        });
+        if (tables != null) {
+            this.#runtime.bind(tables, moduleRoot == null ? undefined : { moduleRoot });
+        }
+        if (hadKernel)
+            await this.acquireKernel();
+        for (const id of sessionIds)
+            await this.acquireSession(id);
+        return this.recover();
+    }
+    [Symbol.dispose]() {
+        this.#stopAwareness();
+        this.#runtime[Symbol.dispose]();
+        this.#adapter[Symbol.dispose]();
+    }
+    /** A reconnect swapped the adapter while an acquire waited on the old one. */
+    #stale(documents) {
+        return this.#adapter !== documents;
+    }
+    async #acquireKernelNow() {
+        if (this.#kernel != null)
+            return this.#kernel;
+        const documents = this.#adapter;
+        const opened = await documents.openExisting(KERNEL_DOCUMENT_KEY);
+        if (this.#stale(documents))
+            return this.acquireKernel();
+        if (opened.ok) {
+            this.#kernel = KernelPlexus.connect(opened.ref.doc);
+            return this.#kernel;
+        }
+        const boot = KernelPlexus.bootstrap();
+        const created = await documents.create(KERNEL_DOCUMENT_KEY, Y.encodeStateAsUpdate(boot.doc));
+        boot.doc.destroy();
+        if (this.#stale(documents))
+            return this.acquireKernel();
+        if (!created.ok) {
+            throw new Error(`kernel document create failed: ${created.reason}`);
+        }
+        this.#kernel = KernelPlexus.connect(created.ref.doc);
+        return this.#kernel;
+    }
+    async #acquireSessionNow(sessionId, path) {
+        const live = this.#runtime.replica(sessionId);
+        if (live != null)
+            return live;
+        const key = documentKey("sessions", sessionId);
+        const documents = this.#adapter;
+        const opened = await documents.openExisting(key);
+        if (this.#stale(documents))
+            return this.acquireSession(sessionId, path);
+        if (opened.ok) {
+            const interned = this.#runtime.replica(sessionId);
+            if (interned != null)
+                return interned;
+            const restored = SessionPlexus.connect(opened.ref.doc, { undo: "stub" });
+            return this.#runtime.intern(sessionId, restored);
+        }
+        const boot = SessionPlexus.create(sessionId, path);
+        const created = await documents.create(key, Y.encodeStateAsUpdate(boot.doc));
+        boot.doc.destroy();
+        if (this.#stale(documents))
+            return this.acquireSession(sessionId, path);
+        if (!created.ok) {
+            throw new Error(`session document create failed: ${created.reason}`);
+        }
+        const minted = SessionPlexus.connect(created.ref.doc, { undo: "stub" });
+        return this.#runtime.intern(sessionId, minted);
+    }
+    #stopAwareness() {
+        if (this.#kernel != null && !this.#kernel.doc.isDestroyed) {
+            this.#kernel.awareness.destroy();
+        }
+        for (const session of this.#runtime.replicaValues()) {
+            if (!session.doc.isDestroyed)
+                session.awareness.destroy();
+        }
+    }
+}
+//# sourceMappingURL=compose.js.map

package/dist/runtime-server/compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../src/runtime-server/compose.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE3E,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAGzB,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAqB,MAAM,WAAW,CAAC;AAiBrF,MAAM,OAAO,aAAa;IACxB,QAAQ,CAAmC;IAC3C,QAAQ,CAAwB;IAChC,OAAO,GAAwB,IAAI,CAAC;IACpC,WAAW,CAAqB;IAChC,OAAO,CAA2B;IAClC,UAAU,GAAG,KAAK,CAAC;IACnB,gBAAgB,GAAiC,IAAI,CAAC;IAC7C,UAAU,GAAG,IAAI,GAAG,EAAkC,CAAC;IAEhE,YAAY,OAA6B;QACvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,IAAI,iBAAiB,CAAC;YACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,OAAO;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,qCAAqC;IACrC,IAAI,CAAC,MAAoB,EAAE,IAAuC;QAChE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,IAAI,EAAE,UAAU,IAAI,IAAI;YAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QAC9C,IAAI,IAAI,CAAC,gBAAgB,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC;QAChE,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACrC,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,gBAAgB,KAAK,GAAG;gBAAE,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB,EAAE,IAAI,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,OAAO,IAAI,IAAI;YAAE,OAAO,OAAO,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,GAAG;gBAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,OAAO;QACL,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;YACpD,SAAS,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,2DAA2D;IAC3D,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS,CAAC,OAA8B;QAC5C,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,IAAI,iBAAiB,CAAC;YACpC,QAAQ;YACR,OAAO;YACP,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,SAAS;YAAE,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,KAAK,MAAM,EAAE,IAAI,UAAU;YAAE,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,CAAC,MAAM,CAAC,OAAO,CAAC;QACd,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAClC,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,SAAgC;QACrC,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7F,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,IAAY;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,IAAI,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,QAAQ,IAAI,IAAI;gBAAE,OAAO,QAAQ,CAAC;YACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,cAAc;QACZ,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QACnC,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW;gBAAE,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;CACF"}

package/dist/runtime-server/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./compose.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime-server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime-server/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC"}

package/dist/runtime-server/index.js

@@ -0,0 +1,2 @@
+export * from "./compose.js";
+//# sourceMappingURL=index.js.map

package/dist/runtime-server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime-server/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC"}

package/dist/server/ack-requests.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Pending acknowledgements, as `ack/pending` reports them. A call that is allowed (or would be, once
+ * its ask is answered) but carries a `needsAcknowledgement` flag waits for a person. There is no ack
+ * job and no transcript entry: the daemon reads the `ackState` stamp on the call and renders it here.
+ */
+import { type ApprovableJob, type ClassId, type GrantScope, type SessionRoot } from "@inhuman.tools/harness-model";
+export type AckRequest = {
+    readonly ackId: string;
+    readonly sessionId: string;
+    readonly jobId: string;
+    readonly tool: string;
+    readonly summary: string;
+    readonly detail: string;
+    readonly flags: Array<{
+        label: string;
+        why?: string;
+        layer: "dist" | "managed" | "user" | "project" | "session";
+    }>;
+    readonly verdict: {
+        tier: "allow" | "ask" | "soft-deny";
+        classes: ClassId[];
+        licensedBy: "floor" | "grant" | "judge" | "resolver" | "pending";
+    };
+    readonly storeOptions: Array<{
+        scope: GrantScope;
+        subject: ApprovableJob["ackOptions"][number]["subject"];
+        label: string;
+        defaultTtlMs: number | null;
+    }>;
+    readonly createdAtMs: number;
+};
+/** Scopes a prompt may store an acknowledgement in. `bot` only when the session is a bot. */
+export declare function ackStoreScopes(bot: string | undefined): GrantScope[];
+export declare function ackRequestOf(root: SessionRoot, job: ApprovableJob, env: {
+    readonly bot?: string;
+    readonly promptTtl?: Partial<Record<GrantScope, string | null>>;
+    readonly now: number;
+}): AckRequest;
+//# sourceMappingURL=ack-requests.d.ts.map

package/dist/server/ack-requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ack-requests.d.ts","sourceRoot":"","sources":["../../src/server/ack-requests.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,OAAO,EAEZ,KAAK,UAAU,EAEf,KAAK,WAAW,EAEjB,MAAM,8BAA8B,CAAC;AAKtC,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;IACnH,QAAQ,CAAC,OAAO,EAAE;QAChB,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,WAAW,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,CAAC;QACnB,UAAU,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;KAClE,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC;QAC3B,KAAK,EAAE,UAAU,CAAC;QAClB,OAAO,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;QACxD,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC,CAAC;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAmCF,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,EAAE,CAEpE;AAED,wBAAgB,YAAY,CAC1B,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,aAAa,EAClB,GAAG,EAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpH,UAAU,CAyBZ"}