@inhuman.tools/harness 0.0.0-stage → 0.2.0

package/dist/server/blobs/fs-bucket.js

@@ -0,0 +1,146 @@
+/* eslint-disable security/detect-non-literal-fs-filename -- every path is the bucket's own directory plus a name checked to be 64 lowercase hex */
+/**
+ * The first blob bucket: a directory under the kernel root.
+ *
+ *   <root>/blobs/sha256/<hex[0:2]>/<hex>   one object per content hash
+ *   <root>/blobs/tmp/<uuid>                a body being written; renamed onto its object, never read
+ *
+ * Directories are 0700 and files 0600, as for pictures. An object appears whole or not at all: it is written
+ * to `tmp` and renamed. Every read checks the bytes against the hash in the key, so a torn or edited file
+ * reads as missing instead of as a different fact.
+ */
+import { createHash, randomUUID } from "node:crypto";
+import { closeSync, fsyncSync, mkdirSync, openSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync, } from "node:fs";
+import { dirname, join } from "node:path";
+import { SHA256_HEX } from "@inhuman.tools/harness-model";
+import { BLOB_KEY_PREFIX, blobKeyOf, sha256OfBlobKey, } from "./bucket.js";
+const DEFAULT_LIST_LIMIT = 1_000;
+const FAN_OUT = /^[0-9a-f]{2}$/;
+function sha256Hex(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+function sizeOf(path) {
+    try {
+        const info = statSync(path);
+        return info.isFile() ? info.size : null;
+    }
+    catch {
+        return null;
+    }
+}
+export class FsBlobBucket {
+    #base;
+    /** @param root the kernel root; the bucket lives in `<root>/blobs`, created on the first put. */
+    constructor(root) {
+        this.#base = join(root, "blobs");
+    }
+    putSync(bytes, mime) {
+        const sha256 = sha256Hex(bytes);
+        const target = this.#pathOf(sha256);
+        // Same hash, same size: the object is already here. A different size is a torn or edited file, rewritten whole.
+        if (sizeOf(target) !== bytes.byteLength)
+            this.#write(target, bytes);
+        return { sha256, bytes: bytes.byteLength, mime };
+    }
+    getSync(key) {
+        const sha256 = sha256OfBlobKey(key);
+        if (sha256 === null)
+            return null;
+        let bytes;
+        try {
+            bytes = readFileSync(this.#pathOf(sha256));
+        }
+        catch {
+            return null;
+        }
+        return sha256Hex(bytes) === sha256 ? bytes : null;
+    }
+    headSync(key) {
+        const sha256 = sha256OfBlobKey(key);
+        if (sha256 === null)
+            return null;
+        const bytes = sizeOf(this.#pathOf(sha256));
+        return bytes === null ? null : { bytes, mime: null };
+    }
+    deleteSync(key) {
+        const sha256 = sha256OfBlobKey(key);
+        if (sha256 === null)
+            throw new RangeError(`not a blob key: ${key}`);
+        rmSync(this.#pathOf(sha256), { force: true });
+    }
+    listSync(options = {}) {
+        const requested = options.limit ?? DEFAULT_LIST_LIMIT;
+        const limit = Number.isFinite(requested) ? Math.max(1, Math.floor(requested)) : DEFAULT_LIST_LIMIT;
+        const { after } = options;
+        const keys = [];
+        for (const fan of this.#names(join(this.#base, "sha256"), FAN_OUT)) {
+            // Every key in this directory starts with `sha256/<fan>`; when that sorts before `after`'s same-length prefix, they all do.
+            if (after !== undefined && `${BLOB_KEY_PREFIX}${fan}` < after.slice(0, BLOB_KEY_PREFIX.length + 2))
+                continue;
+            for (const name of this.#names(join(this.#base, "sha256", fan), SHA256_HEX)) {
+                if (!name.startsWith(fan))
+                    continue;
+                const key = blobKeyOf(name);
+                if (after !== undefined && key <= after)
+                    continue;
+                keys.push(key);
+                // One past the page tells whether another page exists.
+                if (keys.length > limit)
+                    return { keys: keys.slice(0, limit), next: keys[limit - 1] ?? null };
+            }
+        }
+        return { keys, next: null };
+    }
+    // The async face of a directory: the work is synchronous file I/O, and a throw becomes a rejection.
+    async put(bytes, mime) {
+        return this.putSync(bytes, mime);
+    }
+    async get(key) {
+        return this.getSync(key);
+    }
+    async head(key) {
+        return this.headSync(key);
+    }
+    async delete(key) {
+        this.deleteSync(key);
+    }
+    async list(options) {
+        return this.listSync(options);
+    }
+    #pathOf(sha256) {
+        return join(this.#base, "sha256", sha256.slice(0, 2), sha256);
+    }
+    /** The names in a directory that match, sorted; none when the directory does not exist yet. */
+    #names(dir, pattern) {
+        try {
+            return readdirSync(dir)
+                .filter((name) => pattern.test(name))
+                .sort();
+        }
+        catch {
+            return [];
+        }
+    }
+    #write(target, bytes) {
+        const tmpDir = join(this.#base, "tmp");
+        mkdirSync(tmpDir, { recursive: true, mode: 0o700 });
+        mkdirSync(dirname(target), { recursive: true, mode: 0o700 });
+        const tmp = join(tmpDir, randomUUID());
+        try {
+            const fd = openSync(tmp, "wx", 0o600);
+            try {
+                writeFileSync(fd, bytes);
+                fsyncSync(fd);
+            }
+            finally {
+                closeSync(fd);
+            }
+            renameSync(tmp, target);
+        }
+        catch (error) {
+            rmSync(tmp, { force: true });
+            throw error;
+        }
+    }
+}
+//# sourceMappingURL=fs-bucket.js.map

package/dist/server/blobs/fs-bucket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-bucket.js","sourceRoot":"","sources":["../../../src/server/blobs/fs-bucket.ts"],"names":[],"mappings":"AAAA,mJAAmJ;AACnJ;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,UAAU,EAAgB,MAAM,8BAA8B,CAAC;AAExE,OAAO,EACL,eAAe,EACf,SAAS,EACT,eAAe,GAMhB,MAAM,aAAa,CAAC;AAErB,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,OAAO,GAAG,eAAe,CAAC;AAEhC,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,OAAO,YAAY;IACd,KAAK,CAAS;IAEvB,iGAAiG;IACjG,YAAY,IAAY;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,CAAC,KAAiB,EAAE,IAAY;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,gHAAgH;QAChH,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,UAAU;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IAED,OAAO,CAAC,GAAW;QACjB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IAED,UAAU,CAAC,GAAW;QACpB,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,QAAQ,CAAC,UAA2B,EAAE;QACpC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACnG,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAC1B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;YACnE,4HAA4H;YAC5H,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,eAAe,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;gBAAE,SAAS;YAC7G,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC5E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACpC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,IAAI,KAAK;oBAAE,SAAS;gBAClD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACf,uDAAuD;gBACvD,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK;oBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;YAChG,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,oGAAoG;IAEpG,KAAK,CAAC,GAAG,CAAC,KAAiB,EAAE,IAAY;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAW;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAyB;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,+FAA+F;IAC/F,MAAM,CAAC,GAAW,EAAE,OAAe;QACjC,IAAI,CAAC;YACH,OAAO,WAAW,CAAC,GAAG,CAAC;iBACpB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACpC,IAAI,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,KAAiB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACvC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBACzB,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;oBAAS,CAAC;gBACT,SAAS,CAAC,EAAE,CAAC,CAAC;YAChB,CAAC;YACD,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/server/blobs/media.d.ts

@@ -0,0 +1,9 @@
+/** Valid UTF-8 without NUL bytes. */
+export declare function isTextBytes(bytes: Uint8Array): boolean;
+/**
+ * The body as text, or null when it is not text. A byte-order mark stays in the text, so the text is the
+ * exact string that was stored.
+ */
+export declare function utf8TextOf(bytes: Uint8Array): string | null;
+export declare function blobMimeOf(bytes: Uint8Array): string;
+//# sourceMappingURL=media.d.ts.map

package/dist/server/blobs/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../src/server/blobs/media.ts"],"names":[],"mappings":"AAMA,qCAAqC;AACrC,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAEtD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAG3D;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEpD"}

package/dist/server/blobs/media.js

@@ -0,0 +1,22 @@
+/**
+ * Media type of a blob whose bucket records none. The directory bucket keeps bytes only, so the daemon
+ * decides at the door whether a body is text a shell can paint or bytes it can only carry.
+ */
+import { isUtf8 } from "node:buffer";
+/** Valid UTF-8 without NUL bytes. */
+export function isTextBytes(bytes) {
+    return !bytes.includes(0) && isUtf8(bytes);
+}
+/**
+ * The body as text, or null when it is not text. A byte-order mark stays in the text, so the text is the
+ * exact string that was stored.
+ */
+export function utf8TextOf(bytes) {
+    if (!isTextBytes(bytes))
+        return null;
+    return Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength).toString("utf8");
+}
+export function blobMimeOf(bytes) {
+    return isTextBytes(bytes) ? "text/plain" : "application/octet-stream";
+}
+//# sourceMappingURL=media.js.map

package/dist/server/blobs/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../src/server/blobs/media.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,qCAAqC;AACrC,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,0BAA0B,CAAC;AACxE,CAAC"}

package/dist/server/blobs/store.d.ts

@@ -0,0 +1,13 @@
+import { type BlobBucketSync } from "./bucket.js";
+export type BlobBody = {
+    readonly bytes: Uint8Array;
+    /** What the bucket recorded for the object, or what the bytes look like when it recorded none. */
+    readonly mime: string;
+};
+/** Seats the directory bucket under the kernel root and binds both ports to it. */
+export declare function bindBlobStore(root: string): void;
+/** Seats any bucket; a remote one takes this door. `null` unseats and unbinds both ports. */
+export declare function bindBlobBucket(bucket: BlobBucketSync | null): void;
+/** Null while no bucket is seated, for a hash the bucket does not hold, and for bytes that no longer match it. */
+export declare function readBlobSync(sha256: string): BlobBody | null;
+//# sourceMappingURL=store.d.ts.map

package/dist/server/blobs/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/server/blobs/store.ts"],"names":[],"mappings":"AASA,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAI7D,MAAM,MAAM,QAAQ,GAAG;IACrB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,kGAAkG;IAClG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAIF,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEhD;AAED,6FAA6F;AAC7F,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAIlE;AAcD,kHAAkH;AAClH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAM5D"}

package/dist/server/blobs/store.js

@@ -0,0 +1,45 @@
+/**
+ * The kernel's blob bucket, seated for the daemon. The two places that stamp a file's prior text put through the
+ * writer port that turn exposes; providers read through the reader port of harness-provider-sdk; the `blob/get`
+ * handler reads through {@link readBlobSync}. Seated once at kernel boot, like the picture store.
+ */
+import { fail } from "@inhuman.tools/harness-diagnostics";
+import { bindBlobReader } from "@inhuman.tools/harness-provider-sdk";
+import { bindBlobWriter } from "@inhuman.tools/turn/tool-runtime";
+import { blobKeyOf } from "./bucket.js";
+import { FsBlobBucket } from "./fs-bucket.js";
+import { blobMimeOf } from "./media.js";
+let seated = null;
+/** Seats the directory bucket under the kernel root and binds both ports to it. */
+export function bindBlobStore(root) {
+    bindBlobBucket(new FsBlobBucket(root));
+}
+/** Seats any bucket; a remote one takes this door. `null` unseats and unbinds both ports. */
+export function bindBlobBucket(bucket) {
+    seated = bucket;
+    bindBlobWriter(bucket === null ? null : writerOver(bucket));
+    bindBlobReader(bucket === null ? null : (sha256) => bucket.getSync(blobKeyOf(sha256)));
+}
+function writerOver(bucket) {
+    return (bytes, mime) => {
+        try {
+            return bucket.putSync(bytes, mime);
+        }
+        catch (error) {
+            // The stamping site keeps the text inline; the log says why.
+            fail("blob bucket refused a put", error);
+            throw error;
+        }
+    };
+}
+/** Null while no bucket is seated, for a hash the bucket does not hold, and for bytes that no longer match it. */
+export function readBlobSync(sha256) {
+    if (seated === null)
+        return null;
+    const key = blobKeyOf(sha256);
+    const bytes = seated.getSync(key);
+    if (bytes === null)
+        return null;
+    return { bytes, mime: seated.headSync(key)?.mime ?? blobMimeOf(bytes) };
+}
+//# sourceMappingURL=store.js.map

package/dist/server/blobs/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/server/blobs/store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAmB,MAAM,kCAAkC,CAAC;AAEnF,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAQxC,IAAI,MAAM,GAA0B,IAAI,CAAC;AAEzC,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,cAAc,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,MAA6B;IAC1D,MAAM,GAAG,MAAM,CAAC;IAChB,cAAc,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,cAAc,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,UAAU,CAAC,MAAsB;IACxC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,IAAI,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;YACzC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1E,CAAC"}

package/dist/server/blobs/vacuum.d.ts

@@ -0,0 +1,24 @@
+import { type BlobRef, type SessionRoot } from "@inhuman.tools/harness-model";
+/** Stores bytes under their hash and returns the reference. Throws when the bucket refuses. */
+export type BlobPut = (bytes: Uint8Array, mime: string) => BlobRef;
+export type VacuumOptions = {
+    /** Count what would move; write no blob and change no entity. */
+    readonly dryRun: boolean;
+    /**
+     * Reads a blob back by hash. When given, a text leaves the document only after its blob reads back with the
+     * length that was put: the vacuum removes the only copy, so it checks the other one first.
+     */
+    readonly read?: (sha256: string) => Uint8Array | null;
+};
+export type VacuumCounts = {
+    /** File-mutate jobs whose prior text moved. */
+    readonly fileMutates: number;
+    /** Prompt messages whose content moved. */
+    readonly promptMessages: number;
+    /** Completions whose stored line moved. */
+    readonly promptTexts: number;
+    /** UTF-8 bytes taken out of the document. */
+    readonly bytesMoved: number;
+};
+export declare function vacuumSession(root: SessionRoot, put: BlobPut, options: VacuumOptions): VacuumCounts;
+//# sourceMappingURL=vacuum.d.ts.map

package/dist/server/blobs/vacuum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vacuum.d.ts","sourceRoot":"","sources":["../../../src/server/blobs/vacuum.ts"],"names":[],"mappings":"AA0BA,OAAO,EAQL,KAAK,OAAO,EACZ,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAGtC,+FAA+F;AAC/F,MAAM,MAAM,OAAO,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AAEnE,MAAM,MAAM,aAAa,GAAG;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,UAAU,GAAG,IAAI,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,+CAA+C;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2CAA2C;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,2CAA2C;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAOF,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,GAAG,YAAY,CAsEnG"}

package/dist/server/blobs/vacuum.js

@@ -0,0 +1,99 @@
+/**
+ * The vacuum of a stored session. A session written before large bodies left the document keeps a file's prior
+ * text and an isolated completion's prompt inline, and the stored image carries them forever: the daemon never
+ * rewrites an image to convert it. The vacuum moves those bodies into the blob bucket and leaves what a new
+ * session would hold, a head beside a reference, so paint, the wire projection and `blob/get` read both alike.
+ *
+ * Three seats, as the stamping paths write them:
+ *
+ *   - a `FileMutateToolJob`'s `priorContent` moves to `priorBlobJson`;
+ *   - a done isolated `CompletionExpectation`'s `promptText` (the twin older builds stored beside the messages)
+ *     moves to `promptTextBlobJson`, the head staying in `promptText`. A session round's stored line stays:
+ *     `context_recall`, the compaction transcript and the environment capture read it by value, and only the
+ *     wire projection reads references;
+ *   - a `PromptMessage`'s `content` moves to `contentBlobJson`, the head staying in `content`. These are the
+ *     messages of a done completion, and the ones no completion owns any more: `settleAmbientJob` replaces a
+ *     summarizer's messages, and a replaced child stays in the document with its text.
+ *
+ * A completion that is still running is skipped, with its messages. A message owned by anything else (an
+ * agent call reads its prompt whole) is left alone. Each entity is its own Plexus transaction, so each is one
+ * update and a stop part-way leaves every entity either moved or untouched.
+ *
+ * The caller flushes the session with a forced snapshot afterwards: the update log still holds the text it was
+ * first written with, and only a snapshot drops it.
+ */
+import { docPlexus } from "@here.build/plexus/internals";
+import { asUserPrompt } from "@inhuman.tools/harness-commons";
+import { blobHeadOf, CompletionExpectation, exceedsInlineMax, FileMutateToolJob, parseStoredBlob, PromptMessage, storedBlobJson, } from "@inhuman.tools/harness-model";
+import { runInAction } from "mobx";
+const TEXT_MIME = "text/plain";
+export function vacuumSession(root, put, options) {
+    const doc = root.__doc__;
+    const plexus = doc == null ? undefined : docPlexus.get(doc);
+    if (plexus === undefined)
+        return { fileMutates: 0, promptMessages: 0, promptTexts: 0, bytesMoved: 0 };
+    let fileMutates = 0;
+    let promptMessages = 0;
+    let promptTexts = 0;
+    let bytesMoved = 0;
+    /** Puts the text, checks it reads back, and applies the stub in one transaction. Dry: only counts. */
+    const move = (text, apply) => {
+        if (!options.dryRun) {
+            const bytes = Buffer.from(text, "utf8");
+            const ref = put(bytes, TEXT_MIME);
+            const back = options.read?.(ref.sha256);
+            if (options.read !== undefined && back?.byteLength !== bytes.byteLength) {
+                throw new Error(`blob ${ref.sha256} did not read back whole; the text stays in the document`);
+            }
+            const head = blobHeadOf(text);
+            const stub = { head, blobJson: storedBlobJson({ ...ref, head }) };
+            runInAction(() => plexus.transact(() => apply(stub)));
+        }
+        bytesMoved += Buffer.byteLength(text, "utf8");
+    };
+    const moveMessage = (message) => {
+        if (parseStoredBlob(message.contentBlobJson) !== null || !exceedsInlineMax(message.content))
+            return;
+        move(message.content, ({ head, blobJson }) => {
+            message.content = head;
+            message.contentBlobJson = blobJson;
+        });
+        promptMessages += 1;
+    };
+    for (const job of plexus.getAllOfType(FileMutateToolJob)) {
+        const text = job.priorContent;
+        if (typeof text !== "string" || !exceedsInlineMax(text) || parseStoredBlob(job.priorBlobJson) !== null)
+            continue;
+        move(text, ({ blobJson }) => {
+            job.priorContent = null;
+            job.priorBlobJson = blobJson;
+        });
+        fileMutates += 1;
+    }
+    for (const completion of plexus.getAllOfType(CompletionExpectation)) {
+        if (!completion.isDone)
+            continue;
+        const line = completion.promptText;
+        // Only an isolated round's line leaves: nothing reads it (the messages win in `userPrompt`). A session
+        // round's line is read by value by `context_recall` and the compaction transcript, so it stays whole.
+        const lineLeaves = completion.completionMode === "isolated" &&
+            exceedsInlineMax(line) &&
+            parseStoredBlob(completion.promptTextBlobJson) === null;
+        if (lineLeaves) {
+            move(line, ({ head, blobJson }) => {
+                completion.promptText = asUserPrompt(head);
+                completion.promptTextBlobJson = blobJson;
+            });
+            promptTexts += 1;
+        }
+        for (const message of completion.promptMessages)
+            moveMessage(message);
+    }
+    // A message no completion owns is a replaced child: nothing reads it, and it still holds its text.
+    for (const message of plexus.getAllOfType(PromptMessage)) {
+        if (message.parent === null)
+            moveMessage(message);
+    }
+    return { fileMutates, promptMessages, promptTexts, bytesMoved };
+}
+//# sourceMappingURL=vacuum.js.map

package/dist/server/blobs/vacuum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vacuum.js","sourceRoot":"","sources":["../../../src/server/blobs/vacuum.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EACL,UAAU,EACV,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,aAAa,EACb,cAAc,GAGf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,MAAM,MAAM,CAAC;AA0BnC,MAAM,SAAS,GAAG,YAAY,CAAC;AAK/B,MAAM,UAAU,aAAa,CAAC,IAAiB,EAAE,GAAY,EAAE,OAAsB;IACnF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;IACzB,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAEtG,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,sGAAsG;IACtG,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,KAA2B,EAAQ,EAAE;QAC/D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAClC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,EAAE,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;gBACxE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,0DAA0D,CAAC,CAAC;YAChG,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,WAAW,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,OAAsB,EAAQ,EAAE;QACnD,IAAI,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO;QACpG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC3C,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,cAAc,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,IAAI;YAAE,SAAS;QACjH,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC1B,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;YACxB,GAAG,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,WAAW,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,YAAY,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,UAAU,CAAC,MAAM;YAAE,SAAS;QACjC,MAAM,IAAI,GAAW,UAAU,CAAC,UAAU,CAAC;QAC3C,uGAAuG;QACvG,sGAAsG;QACtG,MAAM,UAAU,GACd,UAAU,CAAC,cAAc,KAAK,UAAU;YACxC,gBAAgB,CAAC,IAAI,CAAC;YACtB,eAAe,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAAC;QAC1D,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;gBAChC,UAAU,CAAC,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC3C,UAAU,CAAC,kBAAkB,GAAG,QAAQ,CAAC;YAC3C,CAAC,CAAC,CAAC;YACH,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,cAAc;YAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;IAED,mGAAmG;IACnG,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC;QACzD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;YAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AAClE,CAAC"}

package/dist/server/boot.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=boot.d.ts.map

package/dist/server/boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../../src/server/boot.ts"],"names":[],"mappings":""}

package/dist/server/boot.js

@@ -0,0 +1,22 @@
+import { appendFileSync } from "node:fs";
+// ensure() spawns this, not bin.js. A stale re-export throws while bin.js is
+// still loading, before it opens the log, and the daemon stderr is ignored.
+const log = process.env.HARNESS_LOG;
+try {
+    const { startDaemon } = await import("./bin.js");
+    await startDaemon();
+}
+catch (error) {
+    const text = error instanceof Error ? (error.stack ?? error.message) : String(error);
+    const line = `${new Date().toISOString()} daemon pid=${process.pid} FAIL boot ${text.replaceAll(/\s+/g, " ").trim()}\n`;
+    if (log !== undefined && log !== "") {
+        try {
+            appendFileSync(log, line);
+        }
+        catch {
+            /* the parent still sees the exit code */
+        }
+    }
+    process.exit(1);
+}
+//# sourceMappingURL=boot.js.map

package/dist/server/boot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.js","sourceRoot":"","sources":["../../src/server/boot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;AACpC,IAAI,CAAC;IACH,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,OAAO,CAAC,GAAG,cAAc,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC;IACxH,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/server/capture-env.d.ts

@@ -0,0 +1,3 @@
+/** Workspace snapshot for genesis / refresh. Host-local — not a client replica. */
+export declare function captureEnv(cwd: string): Record<string, string>;
+//# sourceMappingURL=capture-env.d.ts.map

package/dist/server/capture-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-env.d.ts","sourceRoot":"","sources":["../../src/server/capture-env.ts"],"names":[],"mappings":"AAEA,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9D"}

package/dist/server/capture-env.js

@@ -0,0 +1,27 @@
+import { execFileSync } from "node:child_process";
+/** Workspace snapshot for genesis / refresh. Host-local — not a client replica. */
+export function captureEnv(cwd) {
+    const env = {
+        cwd,
+        date: new Date().toISOString().slice(0, 10),
+        platform: process.platform,
+    };
+    const branch = gitBranch(cwd);
+    if (branch !== "")
+        env.branch = branch;
+    return env;
+}
+function gitBranch(cwd) {
+    try {
+        return execFileSync("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
+            cwd,
+            encoding: "utf8",
+            timeout: 1000,
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+    }
+    catch {
+        return "";
+    }
+}
+//# sourceMappingURL=capture-env.js.map

package/dist/server/capture-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture-env.js","sourceRoot":"","sources":["../../src/server/capture-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,mFAAmF;AACnF,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,GAAG,GAA2B;QAClC,GAAG;QACH,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3C,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,MAAM,KAAK,EAAE;QAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE;YAChE,GAAG;YACH,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/server/composition.d.ts

@@ -0,0 +1,19 @@
+import type { ServerRoster } from "../protocol/schemas/index.js";
+export declare const PRODUCT_PROVIDERS: import("@inhuman.tools/harness-provider-sdk").RegisteredProvider[];
+/** Dedicated driver id, or null to keep the generic openai-compat row. */
+export declare function dedicatedCompatDriver(baseUrl: string): string | null;
+export type ProductBins = {
+    readonly yjs: {
+        readonly executable: string;
+        readonly args: readonly string[];
+    };
+    readonly runtime: {
+        readonly executable: string;
+        readonly args: readonly string[];
+    };
+};
+/** Built package bins named by the hypervisor descriptors. */
+export declare function productBins(): ProductBins;
+/** Hypervisor descriptors. Runtime requires yjs readiness. */
+export declare function productRoster(bins?: ProductBins): ServerRoster;
+//# sourceMappingURL=composition.d.ts.map

package/dist/server/composition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition.d.ts","sourceRoot":"","sources":["../../src/server/composition.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAYtE,eAAO,MAAM,iBAAiB,oEAS5B,CAAC;AAuBH,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQpE;AAQD,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,GAAG,EAAE;QACZ,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;KAClC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;KAClC,CAAC;CACH,CAAC;AAwBF,8DAA8D;AAC9D,wBAAgB,WAAW,IAAI,WAAW,CAKzC;AAED,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,IAAI,GAAE,WAA2B,GAAG,YAAY,CAqB7E"}

package/dist/server/composition.js

@@ -0,0 +1,111 @@
+/**
+ * Product composition: shipped driver-provider roster, hypervisor descriptors
+ * (yjs + runtime bins), and the in-process daemon host. Importing this module
+ * loads runtime and providers. The public barrel must not.
+ */
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { registerProviders } from "@inhuman.tools/harness-provider-sdk";
+import { chatgptProvider } from "../providers/chatgpt/index.js";
+import { grokProvider } from "../providers/grok/index.js";
+import { mcpProvider } from "../providers/mcp/index.js";
+import { nousProvider } from "../providers/nous/index.js";
+import { cacheFlavorFromBaseUrl } from "../providers/openai-compat/index.js";
+import { openaiCompatProvider } from "../providers/openai-compat/register.js";
+import { openrouterProvider } from "../providers/openrouter/index.js";
+import { webProvider } from "../providers/web/registrations/index.js";
+import { nousGatewayIntern } from "./provider-roster/nous.js";
+export const PRODUCT_PROVIDERS = registerProviders([
+    openaiCompatProvider,
+    openrouterProvider,
+    nousProvider,
+    chatgptProvider,
+    grokProvider,
+    mcpProvider,
+    webProvider,
+    nousGatewayIntern,
+]);
+/**
+ * Dedicated vendor for a pasted generic openai-compat URL.
+ * Host predicates for grok/chatgpt/openrouter are {@link cacheFlavorFromBaseUrl}.
+ */
+const DEDICATED_BY_FLAVOR = {
+    grok: "grok",
+    chatgpt: "chatgpt",
+    openrouter: "openrouter",
+    openai: null,
+    none: null,
+};
+const NOUS_INFERENCE_HOST = "inference-api.nousresearch.com";
+function hostOf(baseUrl) {
+    const rest = baseUrl.trim().replace(/^[a-z][a-z+\-.]*:\/\//i, "");
+    return (rest.split(/[/:?#]/, 1)[0] ?? "").toLowerCase();
+}
+/** Dedicated driver id, or null to keep the generic openai-compat row. */
+export function dedicatedCompatDriver(baseUrl) {
+    const fromFlavor = DEDICATED_BY_FLAVOR[cacheFlavorFromBaseUrl(baseUrl)];
+    if (fromFlavor != null)
+        return fromFlavor;
+    const host = hostOf(baseUrl);
+    if (host === NOUS_INFERENCE_HOST || host.endsWith(`.${NOUS_INFERENCE_HOST}`)) {
+        return "nous";
+    }
+    return null;
+}
+const PRODUCT_RESTART = {
+    mode: "on-failure",
+    maxAttempts: 5,
+    backoffMs: 250,
+};
+/** Built runtime bin. Source resolves `dist/server`; emit resolves the sibling. */
+function runtimeBin() {
+    const here = fileURLToPath(new URL(".", import.meta.url));
+    const sibling = join(here, "runtime-bin.js");
+    const fromSource = join(here, "../../dist/server/runtime-bin.js");
+    return {
+        executable: process.execPath,
+        args: [existsSync(sibling) ? sibling : fromSource],
+    };
+}
+/** Built yjs bin. Source resolves `dist/yjs`; emit resolves the sibling of `dist/server`. */
+function yjsBin() {
+    const here = fileURLToPath(new URL(".", import.meta.url));
+    const sibling = join(here, "../yjs/bin.js");
+    const fromSource = join(here, "../../dist/yjs/bin.js");
+    return {
+        executable: process.execPath,
+        args: [existsSync(sibling) ? sibling : fromSource],
+    };
+}
+/** Built package bins named by the hypervisor descriptors. */
+export function productBins() {
+    return {
+        yjs: yjsBin(),
+        runtime: runtimeBin(),
+    };
+}
+/** Hypervisor descriptors. Runtime requires yjs readiness. */
+export function productRoster(bins = productBins()) {
+    return {
+        servers: [
+            {
+                id: "yjs",
+                role: "yjs",
+                executable: bins.yjs.executable,
+                args: [...bins.yjs.args],
+                requires: [],
+                restart: PRODUCT_RESTART,
+            },
+            {
+                id: "runtime",
+                role: "runtime",
+                executable: bins.runtime.executable,
+                args: [...bins.runtime.args],
+                requires: ["yjs"],
+                restart: PRODUCT_RESTART,
+            },
+        ],
+    };
+}
+//# sourceMappingURL=composition.js.map

package/dist/server/composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition.js","sourceRoot":"","sources":["../../src/server/composition.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAGxE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAoB,MAAM,2BAA2B,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;IACjD,oBAAoB;IACpB,kBAAkB;IAClB,YAAY;IACZ,eAAe;IACf,YAAY;IACZ,WAAW;IACX,WAAW;IACX,iBAAiB;CAClB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,mBAAmB,GAErB;IACF,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,IAAI;CACX,CAAC;AAEF,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AAE7D,SAAS,MAAM,CAAC,OAAe;IAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,UAAU,GAAG,mBAAmB,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,IAAI,UAAU,IAAI,IAAI;QAAE,OAAO,UAAU,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,mBAAmB,EAAE,CAAC,EAAE,CAAC;QAC7E,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe,GAAkB;IACrC,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,CAAC;IACd,SAAS,EAAE,GAAG;CACf,CAAC;AAaF,mFAAmF;AACnF,SAAS,UAAU;IACjB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;IAClE,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,QAAQ;QAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,SAAS,MAAM;IACb,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IACvD,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,QAAQ;QAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,WAAW;IACzB,OAAO;QACL,GAAG,EAAE,MAAM,EAAE;QACb,OAAO,EAAE,UAAU,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,OAAoB,WAAW,EAAE;IAC7D,OAAO;QACL,OAAO,EAAE;YACP;gBACE,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,KAAK;gBACX,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU;gBAC/B,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBACxB,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,eAAe;aACzB;YACD;gBACE,EAAE,EAAE,SAAS;gBACb,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBACnC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC5B,QAAQ,EAAE,CAAC,KAAK,CAAC;gBACjB,OAAO,EAAE,eAAe;aACzB;SACF;KACF,CAAC;AACJ,CAAC"}