@inhuman.tools/harness 0.0.0-stage → 0.2.0

package/dist/server/ack-requests.js

@@ -0,0 +1,74 @@
+/**
+ * Pending acknowledgements, as `ack/pending` reports them. A call that is allowed (or would be, once
+ * its ask is answered) but carries a `needsAcknowledgement` flag waits for a person. There is no ack
+ * job and no transcript entry: the daemon reads the `ackState` stamp on the call and renders it here.
+ */
+import { DEFAULT_PROMPT_TTL, parseTtl, ToolCallJob, } from "@inhuman.tools/harness-model";
+const DETAIL_MAX = 1200;
+const SUMMARY_MAX = 160;
+function clip(text, max) {
+    return text.length <= max ? text : `${text.slice(0, max - 1)}…`;
+}
+/** Agent-written strings are JSON-encoded, so a prompt cannot be forged by what the model wrote. */
+function renderArgs(job) {
+    const args = job instanceof ToolCallJob ? job.args : null;
+    if (args == null)
+        return "";
+    try {
+        return clip(JSON.stringify(args), DETAIL_MAX);
+    }
+    catch {
+        return "";
+    }
+}
+function summaryOf(job) {
+    if (!(job instanceof ToolCallJob))
+        return job.constructor.name;
+    const command = job.args?.command;
+    if (job.name === "shell" && typeof command === "string")
+        return clip(`shell · ${JSON.stringify(command)}`, SUMMARY_MAX);
+    const mcp = job.grantMcp;
+    if (mcp !== undefined)
+        return clip(`${mcp.server} · ${mcp.tool}`, SUMMARY_MAX);
+    return clip(job.name, SUMMARY_MAX);
+}
+function licensedBy(job) {
+    if (job.baseLicenseDetail.decision !== true)
+        return "pending";
+    if (job.policyResult === "policyApprove")
+        return "floor";
+    if (job.grantCovers)
+        return "grant";
+    if (job.classifierResult === "allow")
+        return "judge";
+    return "resolver";
+}
+/** Scopes a prompt may store an acknowledgement in. `bot` only when the session is a bot. */
+export function ackStoreScopes(bot) {
+    return bot === undefined ? ["session", "project", "global"] : ["session", "project", "bot", "global"];
+}
+export function ackRequestOf(root, job, env) {
+    const tier = job.policyResult === "ask" ? "ask" : job.policyResult === "deny" ? "soft-deny" : "allow";
+    return {
+        ackId: job.uuid,
+        sessionId: root.sessionId,
+        jobId: job.uuid,
+        tool: job instanceof ToolCallJob ? job.name : job.constructor.name,
+        summary: summaryOf(job),
+        detail: renderArgs(job),
+        flags: job.ackFlags.map((flag) => ({
+            label: flag.label,
+            ...(flag.why === undefined ? {} : { why: flag.why }),
+            layer: flag.layer,
+        })),
+        verdict: { tier, classes: [...job.policyClasses], licensedBy: licensedBy(job) },
+        storeOptions: job.ackOptions.flatMap((option) => ackStoreScopes(env.bot).map((scope) => ({
+            scope,
+            subject: option.subject,
+            label: option.label,
+            defaultTtlMs: parseTtl(env.promptTtl?.[scope] ?? DEFAULT_PROMPT_TTL[scope]),
+        }))),
+        createdAtMs: env.now,
+    };
+}
+//# sourceMappingURL=ack-requests.js.map

package/dist/server/ack-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ack-requests.js","sourceRoot":"","sources":["../../src/server/ack-requests.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAGL,kBAAkB,EAElB,QAAQ,EAER,WAAW,GACZ,MAAM,8BAA8B,CAAC;AAEtC,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,WAAW,GAAG,GAAG,CAAC;AAwBxB,SAAS,IAAI,CAAC,IAAY,EAAE,GAAW;IACrC,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;AAClE,CAAC;AAED,oGAAoG;AACpG,SAAS,UAAU,CAAC,GAAkB;IACpC,MAAM,IAAI,GAAG,GAAG,YAAY,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,IAAI,IAAI,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,GAAkB;IACnC,IAAI,CAAC,CAAC,GAAG,YAAY,WAAW,CAAC;QAAE,OAAO,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;IAClC,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACrD,OAAO,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC;IACzB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,GAAkB;IACpC,IAAI,GAAG,CAAC,iBAAiB,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC9D,IAAI,GAAG,CAAC,YAAY,KAAK,eAAe;QAAE,OAAO,OAAO,CAAC;IACzD,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO,OAAO,CAAC;IACpC,IAAI,GAAG,CAAC,gBAAgB,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,GAAuB;IACpD,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAiB,EACjB,GAAkB,EAClB,GAAqH;IAErH,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,OAAiB,CAAC;IACjH,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,GAAG,CAAC,IAAI;QACf,IAAI,EAAE,GAAG,YAAY,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI;QAClE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC;QACvB,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC;QACvB,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YACpD,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE;QAC/E,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9C,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtC,KAAK;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;SAC5E,CAAC,CAAC,CACJ;QACD,WAAW,EAAE,GAAG,CAAC,GAAG;KACrB,CAAC;AACJ,CAAC"}

package/dist/server/adjust-json.d.ts

@@ -0,0 +1,2 @@
+export { adjustJson } from "../extensions/adjust-json.js";
+//# sourceMappingURL=adjust-json.d.ts.map

package/dist/server/adjust-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adjust-json.d.ts","sourceRoot":"","sources":["../../src/server/adjust-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/server/adjust-json.js

@@ -0,0 +1,2 @@
+export { adjustJson } from "../extensions/adjust-json.js";
+//# sourceMappingURL=adjust-json.js.map

package/dist/server/adjust-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adjust-json.js","sourceRoot":"","sources":["../../src/server/adjust-json.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/server/ask-answer.d.ts

@@ -0,0 +1,70 @@
+/**
+ * A human answer to a live ask or soft-deny, applied by the daemon. The desk is the answering
+ * client's session: it takes the session read root and the session grant. The leaf may sit on a worker
+ * that escalated its ask.
+ *
+ * - A `block` is never put to a human: the answer is refused (it would be a lift).
+ * - A soft-deny is licensed per call. `store` on it is refused and the answer is not applied.
+ * - An ask may be remembered as a grant, but only as one of the subjects the daemon offers for this
+ *   exact job (`grantOptions`): a client cannot widen what it stores.
+ * - A comment is a reply to the agent, so it widens and stores nothing.
+ */
+import { type ApprovableJob, type McpPersistScope, type GrantRow, type GrantScope, type GrantSubject, type SessionRoot } from "@inhuman.tools/harness-model";
+export type AskStore = {
+    readonly scope: GrantScope;
+    readonly subject: GrantSubject;
+    /** `null`: no expiry. Absent: the prompt default for the scope. */
+    readonly ttlMs?: number | null;
+};
+export type AskAnswer = {
+    readonly allow: boolean;
+    readonly comment?: string;
+    readonly widen?: string;
+    readonly store?: AskStore;
+    /** A combined prompt (ask + acknowledgement): also remember the acknowledgement. */
+    readonly ackStore?: AskStore;
+    /** Refusing an MCP look-up: hide the tool. Allowing is `store`. */
+    readonly persist?: McpPersistScope;
+};
+export type AckAnswer = {
+    readonly accept: boolean;
+    readonly store?: AskStore;
+    /** A refusal's comment is the reply the agent reads. */
+    readonly comment?: string;
+};
+export type AckAnswerResult = {
+    readonly ok: true;
+    readonly ack?: GrantRow;
+} | {
+    readonly ok: false;
+    readonly reason: "not-pending" | "subject-not-offered" | "scope-unavailable";
+};
+export type AskAnswerResult = {
+    readonly ok: true;
+    readonly grant?: GrantRow;
+} | {
+    readonly ok: false;
+    readonly reason: "block" | "soft-deny-not-storable" | "subject-not-offered" | "folder-not-allowed" | "scope-unavailable";
+};
+/** What the daemon supplies: a clock, ids, configured TTLs, and the store of the persistent scopes. */
+export type AnswerEnv = {
+    readonly now: () => number;
+    readonly newId: () => string;
+    /** Configured `authorization.grants.promptTtl`, e.g. `{ project: "30d" }`. */
+    readonly promptTtl?: Partial<Record<GrantScope, string | null>>;
+    /** Persist a project, bot or global row. Absent: only session grants can be stored. */
+    readonly persist?: (row: GrantRow) => void;
+    /** The bot this session is, for bot-scope grants. */
+    readonly bot?: string;
+};
+/** A comment is a reply to the agent, so it widens and persists nothing. */
+export declare function applyAskAnswer(desk: SessionRoot, leaf: ApprovableJob, answer: AskAnswer, env?: AnswerEnv): AskAnswerResult;
+/**
+ * A human answer to a pending acknowledgement. Accepting lets the call run (and a combined ask +
+ * acknowledgement is one prompt: it also settles the ask); refusing is a human denial, not a policy
+ * denial. `store` remembers the acknowledgement, but only as a subject the daemon offers for this job.
+ */
+export declare function applyAckAnswer(desk: SessionRoot, leaf: ApprovableJob, answer: AckAnswer, env?: AnswerEnv): AckAnswerResult;
+/** `authorization.grants.promptTtl` from the user layer: the TTL a prompt-created grant gets, per scope. */
+export declare function promptTtlOf(userLayerJson: string): Partial<Record<GrantScope, string | null>>;
+//# sourceMappingURL=ask-answer.d.ts.map

package/dist/server/ask-answer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask-answer.d.ts","sourceRoot":"","sources":["../../src/server/ask-answer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAEL,KAAK,aAAa,EAIlB,KAAK,eAAe,EAEpB,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,YAAY,EAKjB,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAGtC,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B,oFAAoF;IACpF,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B,wDAAwD;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAA;CAAE,GAC9C;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,qBAAqB,GAAG,mBAAmB,CAAA;CAAE,CAAC;AAEzG,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAA;CAAE,GAChD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EACb,OAAO,GAAG,wBAAwB,GAAG,qBAAqB,GAAG,oBAAoB,GAAG,mBAAmB,CAAC;CAC3G,CAAC;AAEN,uGAAuG;AACvG,MAAM,MAAM,SAAS,GAAG;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAChE,uFAAuF;IACvF,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3C,qDAAqD;IACrD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAQF,4EAA4E;AAC5E,wBAAgB,cAAc,CAC5B,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,SAAS,EACjB,GAAG,GAAE,SAAsB,GAC1B,eAAe,CA8CjB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,SAAS,EACjB,GAAG,GAAE,SAAsB,GAC1B,eAAe,CA0BjB;AAkDD,4GAA4G;AAC5G,wBAAgB,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAG7F"}

package/dist/server/ask-answer.js

@@ -0,0 +1,159 @@
+/**
+ * A human answer to a live ask or soft-deny, applied by the daemon. The desk is the answering
+ * client's session: it takes the session read root and the session grant. The leaf may sit on a worker
+ * that escalated its ask.
+ *
+ * - A `block` is never put to a human: the answer is refused (it would be a lift).
+ * - A soft-deny is licensed per call. `store` on it is refused and the answer is not applied.
+ * - An ask may be remembered as a grant, but only as one of the subjects the daemon offers for this
+ *   exact job (`grantOptions`): a client cannot widen what it stores.
+ * - A comment is a reply to the agent, so it widens and stores nothing.
+ */
+import { ACKED_ONCE, DEFAULT_PROMPT_TTL, grantLabel, mcpReadFloorDenies, MCPToolJob, parseAuthorizationConfig, parseGrantRows, parseTtl, sameSubject, } from "@inhuman.tools/harness-model";
+import { runInAction } from "mobx";
+let counter = 0;
+const defaultEnv = {
+    now: () => Date.now(),
+    newId: () => `g-${Date.now().toString(36)}-${(counter++).toString(36)}`,
+};
+/** A comment is a reply to the agent, so it widens and persists nothing. */
+export function applyAskAnswer(desk, leaf, answer, env = defaultEnv) {
+    // I1: a block is final. It is not put to a human, so there is nothing to answer.
+    if (leaf.policyResult === "block")
+        return { ok: false, reason: "block" };
+    const comment = (answer.comment ?? "").trim();
+    const wantsStore = answer.allow && answer.store !== undefined && comment === "";
+    if (wantsStore && leaf.policyResult === "deny")
+        return { ok: false, reason: "soft-deny-not-storable" };
+    let grant;
+    if (wantsStore) {
+        const store = answer.store;
+        if (!leaf.grantOptions.some((option) => sameSubject(option.subject, store.subject))) {
+            return { ok: false, reason: "subject-not-offered" };
+        }
+        const made = makeRow("grant", desk, store, env);
+        if (!made.ok)
+            return made;
+        grant = made.row;
+    }
+    // One prompt, not two: a combined ask + acknowledgement may also remember the acknowledgement.
+    let ack;
+    if (answer.allow && answer.ackStore !== undefined && comment === "" && leaf.ackPending) {
+        const ackStore = answer.ackStore;
+        if (!leaf.ackOptions.some((option) => sameSubject(option.subject, ackStore.subject))) {
+            return { ok: false, reason: "subject-not-offered" };
+        }
+        const made = makeRow("ack", desk, ackStore, env);
+        if (!made.ok)
+            return made;
+        ack = made.row;
+    }
+    const widening = answer.allow && answer.widen != null && answer.widen !== "" && comment === "";
+    if (widening && !desk.addReadRoot(answer.widen))
+        return { ok: false, reason: "folder-not-allowed" };
+    runInAction(() => {
+        if (comment !== "")
+            leaf.approvalComment = comment;
+        if (!answer.allow &&
+            answer.persist != null &&
+            comment === "" &&
+            leaf instanceof MCPToolJob &&
+            mcpReadFloorDenies(leaf.serverToolName))
+            desk.blockTool(leaf.connectionKey, leaf.serverToolName, answer.persist);
+        if (grant !== undefined)
+            save(desk, grant, env);
+        if (ack !== undefined)
+            save(desk, ack, env);
+        // The person who allowed a combined prompt saw the acknowledgement on it: one prompt, not two.
+        if (answer.allow && leaf.ackPending)
+            leaf.stampAck("satisfied", ACKED_ONCE);
+        leaf.humanApprove = answer.allow;
+    });
+    return grant === undefined ? { ok: true } : { ok: true, grant };
+}
+/**
+ * A human answer to a pending acknowledgement. Accepting lets the call run (and a combined ask +
+ * acknowledgement is one prompt: it also settles the ask); refusing is a human denial, not a policy
+ * denial. `store` remembers the acknowledgement, but only as a subject the daemon offers for this job.
+ */
+export function applyAckAnswer(desk, leaf, answer, env = defaultEnv) {
+    if (!leaf.ackPending || leaf.humanApprove !== null)
+        return { ok: false, reason: "not-pending" };
+    const comment = (answer.comment ?? "").trim();
+    let ack;
+    if (answer.accept && answer.store !== undefined) {
+        const store = answer.store;
+        if (!leaf.ackOptions.some((option) => sameSubject(option.subject, store.subject))) {
+            return { ok: false, reason: "subject-not-offered" };
+        }
+        const made = makeRow("ack", desk, store, env);
+        if (!made.ok)
+            return made;
+        ack = made.row;
+    }
+    runInAction(() => {
+        if (comment !== "")
+            leaf.approvalComment = comment;
+        if (ack !== undefined)
+            save(desk, ack, env);
+        if (answer.accept) {
+            leaf.stampAck("satisfied", ACKED_ONCE);
+            // A prompt that was also an ask: the same yes settles it. An ack-only prompt needs no more.
+            if (leaf.baseLicenseDetail.decision !== true)
+                leaf.humanApprove = true;
+        }
+        else {
+            leaf.stampAck("refused", null);
+            leaf.humanApprove = false;
+        }
+    });
+    return ack === undefined ? { ok: true } : { ok: true, ack };
+}
+function makeRow(kind, desk, store, env) {
+    if (store.scope !== "session" && env.persist === undefined)
+        return { ok: false, reason: "scope-unavailable" };
+    if (store.scope === "bot" && env.bot === undefined)
+        return { ok: false, reason: "scope-unavailable" };
+    const ttl = store.ttlMs === undefined ? parseTtl(env.promptTtl?.[store.scope] ?? DEFAULT_PROMPT_TTL[store.scope]) : store.ttlMs;
+    const now = env.now();
+    return {
+        ok: true,
+        row: {
+            id: env.newId(),
+            ...(kind === "ack" ? { kind } : {}),
+            scope: store.scope,
+            scopeKey: scopeKeyOf(desk, store.scope, env),
+            subject: store.subject,
+            createdAtMs: now,
+            expiresAtMs: ttl === null ? null : now + ttl,
+            source: "prompt",
+            label: grantLabel(store.subject),
+        },
+    };
+}
+function save(desk, row, env) {
+    if (row.scope === "session") {
+        desk.replaceGrantsJson(JSON.stringify([...parseGrantRows(desk.grantsJson), row]));
+    }
+    else {
+        env.persist?.(row);
+    }
+}
+function scopeKeyOf(desk, scope, env) {
+    switch (scope) {
+        case "session":
+            return desk.sessionId;
+        case "project":
+            return desk.path;
+        case "bot":
+            return env.bot ?? "";
+        case "global":
+            return "";
+    }
+}
+/** `authorization.grants.promptTtl` from the user layer: the TTL a prompt-created grant gets, per scope. */
+export function promptTtlOf(userLayerJson) {
+    const parsed = parseAuthorizationConfig(userLayerJson);
+    return parsed.ok ? (parsed.config.grants?.promptTtl ?? {}) : {};
+}
+//# sourceMappingURL=ask-answer.js.map

package/dist/server/ask-answer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask-answer.js","sourceRoot":"","sources":["../../src/server/ask-answer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,UAAU,EAEV,kBAAkB,EAClB,UAAU,EACV,kBAAkB,EAElB,UAAU,EAIV,wBAAwB,EACxB,cAAc,EACd,QAAQ,EACR,WAAW,GAEZ,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AAmDnC,IAAI,OAAO,GAAG,CAAC,CAAC;AAChB,MAAM,UAAU,GAAc;IAC5B,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACrB,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;CACxE,CAAC;AAEF,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAC5B,IAAiB,EACjB,IAAmB,EACnB,MAAiB,EACjB,MAAiB,UAAU;IAE3B,iFAAiF;IACjF,IAAI,IAAI,CAAC,YAAY,KAAK,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACzE,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,CAAC;IAChF,IAAI,UAAU,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACvG,IAAI,KAA2B,CAAC;IAChC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,MAAM,CAAC,KAAM,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACpF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC;IACnB,CAAC;IACD,+FAA+F;IAC/F,IAAI,GAAyB,CAAC;IAC9B,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACvF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACrF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,EAAE,IAAI,OAAO,KAAK,EAAE,CAAC;IAC/F,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACrG,WAAW,CAAC,GAAG,EAAE;QACf,IAAI,OAAO,KAAK,EAAE;YAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QACnD,IACE,CAAC,MAAM,CAAC,KAAK;YACb,MAAM,CAAC,OAAO,IAAI,IAAI;YACtB,OAAO,KAAK,EAAE;YACd,IAAI,YAAY,UAAU;YAC1B,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC;YAEvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1E,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,+FAA+F;QAC/F,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAC5E,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAiB,EACjB,IAAmB,EACnB,MAAiB,EACjB,MAAiB,UAAU;IAE3B,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAChG,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,GAAyB,CAAC;IAC9B,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QACtD,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACjB,CAAC;IACD,WAAW,CAAC,GAAG,EAAE;QACf,IAAI,OAAO,KAAK,EAAE;YAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;QACnD,IAAI,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YACvC,4FAA4F;YAC5F,IAAI,IAAI,CAAC,iBAAiB,CAAC,QAAQ,KAAK,IAAI;gBAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,OAAO,CACd,IAAqB,EACrB,IAAiB,EACjB,KAAe,EACf,GAAc;IAEd,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9G,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACtG,MAAM,GAAG,GACP,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACtH,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;IACtB,OAAO;QACL,EAAE,EAAE,IAAI;QACR,GAAG,EAAE;YACH,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE;YACf,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC;YAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,WAAW,EAAE,GAAG;YAChB,WAAW,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG;YAC5C,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;SACjC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,IAAiB,EAAE,GAAa,EAAE,GAAc;IAC5D,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAiB,EAAE,KAAiB,EAAE,GAAc;IACtE,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,KAAK,KAAK;YACR,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;QACvB,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,WAAW,CAAC,aAAqB;IAC/C,MAAM,MAAM,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAClE,CAAC"}

package/dist/server/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export declare function startDaemon(): Promise<void>;
+//# sourceMappingURL=bin.d.ts.map

package/dist/server/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../../src/server/bin.ts"],"names":[],"mappings":";AAoBA,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BjD"}

package/dist/server/bin.js

@@ -0,0 +1,52 @@
+#!/usr/bin/env node
+import { lstatSync, realpathSync } from "node:fs";
+import { pathToFileURL } from "node:url";
+import { installProcessLog, note } from "@inhuman.tools/harness-diagnostics";
+import { daemonSocketPath } from "@inhuman.tools/harness-sdk/paths";
+import { HarnessDaemon } from "./daemon/server/HarnessDaemon.js";
+import { openLog } from "./step.js";
+const SOCKET_CHECK_MS = 5000;
+function socketIno(path) {
+    try {
+        return lstatSync(path).ino;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function startDaemon() {
+    const log = openLog(process.cwd());
+    installProcessLog("daemon");
+    note(`log ${log} pid=${process.pid}`);
+    note(`daemon listen ${process.cwd()}`);
+    const daemon = new HarnessDaemon(process.cwd());
+    await daemon.listen();
+    const sock = daemonSocketPath(realpathSync(process.cwd()));
+    const bound = socketIno(sock);
+    note(`daemon ready ${sock}`);
+    let shuttingDown = false;
+    const shutdownDaemon = (why) => {
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        clearInterval(socketCheck);
+        note(`daemon ${why} shutdown`);
+        void (async () => {
+            await daemon[Symbol.asyncDispose]();
+            process.exit(0);
+        })();
+    };
+    // Clients find the daemon only through this path. Unlinked (kernel removed)
+    // or rebound by another daemon, this process is unreachable and would live forever.
+    const socketCheck = setInterval(() => {
+        if (socketIno(sock) !== bound)
+            shutdownDaemon("socket lost");
+    }, SOCKET_CHECK_MS);
+    socketCheck.unref();
+    process.on("SIGINT", () => shutdownDaemon("signal"));
+    process.on("SIGTERM", () => shutdownDaemon("signal"));
+}
+if (process.argv[1] !== undefined && import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href) {
+    await startDaemon();
+}
+//# sourceMappingURL=bin.js.map

package/dist/server/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/server/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO,GAAG,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,iBAAiB,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;IAC7B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,cAAc,GAAG,CAAC,GAAW,EAAQ,EAAE;QAC3C,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,CAAC;QAC/B,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IACF,4EAA4E;IAC5E,oFAAoF;IACpF,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;QACnC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK;YAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC,EAAE,eAAe,CAAC,CAAC;IACpB,WAAW,CAAC,KAAK,EAAE,CAAC;IACpB,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3G,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC"}

package/dist/server/blobs/bucket.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The blob bucket, S3-shaped. A key is a content address, `sha256/<hex>`; the bytes behind a key never change,
+ * so `put` is idempotent and two equal bodies are one object. The directory bucket under the kernel root is the
+ * first implementation. A remote one (S3, R2, MinIO) implements the same interface, and nothing above it knows
+ * which is bound.
+ */
+import { type BlobRef } from "@inhuman.tools/harness-model";
+export declare const BLOB_KEY_PREFIX = "sha256/";
+/** The object key of a hash. Does not check the hash; the bucket refuses a malformed key where it is used. */
+export declare function blobKeyOf(sha256: string): string;
+/** The hash inside a `sha256/<hex>` key, or null when the key is anything else. */
+export declare function sha256OfBlobKey(key: string): string | null;
+/** What `head` knows about one object. The directory bucket does not record a media type; the reference does. */
+export type BlobStat = {
+    readonly bytes: number;
+    readonly mime: string | null;
+};
+export type BlobListOptions = {
+    /** Exclusive: keys sort strictly after it. Pass the previous page's `next`. */
+    readonly after?: string;
+    /** Page size, at least 1. */
+    readonly limit?: number;
+};
+export type BlobListPage = {
+    /** In key order. */
+    readonly keys: readonly string[];
+    /** The key to pass as `after` for the next page, or null when this was the last. */
+    readonly next: string | null;
+};
+export interface BlobBucket {
+    /** Stores the bytes under their hash and returns the reference. Storing equal bytes again writes nothing new. */
+    put(bytes: Uint8Array, mime: string): Promise<BlobRef>;
+    /** Null when the key is unknown, malformed, or its bytes no longer match their hash. */
+    get(key: string): Promise<Uint8Array | null>;
+    head(key: string): Promise<BlobStat | null>;
+    /** Idempotent. A malformed key is refused. */
+    delete(key: string): Promise<void>;
+    list(options?: BlobListOptions): Promise<BlobListPage>;
+}
+/**
+ * The same bucket for the daemon's synchronous paths: the stamping of a job (`externalizePrior`) and the
+ * `blob/get` handler cannot await.
+ */
+export interface BlobBucketSync {
+    putSync(bytes: Uint8Array, mime: string): BlobRef;
+    getSync(key: string): Uint8Array | null;
+    headSync(key: string): BlobStat | null;
+}
+//# sourceMappingURL=bucket.d.ts.map

package/dist/server/blobs/bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket.d.ts","sourceRoot":"","sources":["../../../src/server/blobs/bucket.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAExE,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC,8GAA8G;AAC9G,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI1D;AAED,iHAAiH;AACjH,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,6BAA6B;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,oBAAoB;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,iHAAiH;IACjH,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvD,wFAAwF;IACxF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC5C,8CAA8C;IAC9C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACxD;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAClD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAAC;CACxC"}

package/dist/server/blobs/bucket.js

@@ -0,0 +1,20 @@
+/**
+ * The blob bucket, S3-shaped. A key is a content address, `sha256/<hex>`; the bytes behind a key never change,
+ * so `put` is idempotent and two equal bodies are one object. The directory bucket under the kernel root is the
+ * first implementation. A remote one (S3, R2, MinIO) implements the same interface, and nothing above it knows
+ * which is bound.
+ */
+import { SHA256_HEX } from "@inhuman.tools/harness-model";
+export const BLOB_KEY_PREFIX = "sha256/";
+/** The object key of a hash. Does not check the hash; the bucket refuses a malformed key where it is used. */
+export function blobKeyOf(sha256) {
+    return `${BLOB_KEY_PREFIX}${sha256}`;
+}
+/** The hash inside a `sha256/<hex>` key, or null when the key is anything else. */
+export function sha256OfBlobKey(key) {
+    if (!key.startsWith(BLOB_KEY_PREFIX))
+        return null;
+    const hex = key.slice(BLOB_KEY_PREFIX.length);
+    return SHA256_HEX.test(hex) ? hex : null;
+}
+//# sourceMappingURL=bucket.js.map

package/dist/server/blobs/bucket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bucket.js","sourceRoot":"","sources":["../../../src/server/blobs/bucket.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAgB,MAAM,8BAA8B,CAAC;AAExE,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AAEzC,8GAA8G;AAC9G,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,OAAO,GAAG,eAAe,GAAG,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC"}

package/dist/server/blobs/fs-bucket.d.ts

@@ -0,0 +1,18 @@
+import { type BlobRef } from "@inhuman.tools/harness-model";
+import { type BlobBucket, type BlobBucketSync, type BlobListOptions, type BlobListPage, type BlobStat } from "./bucket.js";
+export declare class FsBlobBucket implements BlobBucket, BlobBucketSync {
+    #private;
+    /** @param root the kernel root; the bucket lives in `<root>/blobs`, created on the first put. */
+    constructor(root: string);
+    putSync(bytes: Uint8Array, mime: string): BlobRef;
+    getSync(key: string): Uint8Array | null;
+    headSync(key: string): BlobStat | null;
+    deleteSync(key: string): void;
+    listSync(options?: BlobListOptions): BlobListPage;
+    put(bytes: Uint8Array, mime: string): Promise<BlobRef>;
+    get(key: string): Promise<Uint8Array | null>;
+    head(key: string): Promise<BlobStat | null>;
+    delete(key: string): Promise<void>;
+    list(options?: BlobListOptions): Promise<BlobListPage>;
+}
+//# sourceMappingURL=fs-bucket.d.ts.map

package/dist/server/blobs/fs-bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-bucket.d.ts","sourceRoot":"","sources":["../../../src/server/blobs/fs-bucket.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAExE,OAAO,EAIL,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AAkBrB,qBAAa,YAAa,YAAW,UAAU,EAAE,cAAc;;IAG7D,iGAAiG;gBACrF,IAAI,EAAE,MAAM;IAIxB,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAQjD,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAYvC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI;IAOtC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAM7B,QAAQ,CAAC,OAAO,GAAE,eAAoB,GAAG,YAAY;IAsB/C,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAItD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAI5C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAI3C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,IAAI,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;CAsC7D"}