@knpkv/control-center 0.1.0

package/dist/server/server/plugins/jira/JiraReadPlugin.d.ts

@@ -0,0 +1,74 @@
+/** Production Jira issue-read plugin runtime. */
+import { JiraApiClient } from "@knpkv/jira-api-client";
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import { buildPluginDefinitionLayer } from "../PluginDefinition.js";
+import type { PluginDefinitionV1 } from "../PluginDefinitionV1.js";
+/** Secret-free runtime settings for the Jira read adapter. */
+export declare const JiraReadPluginConfiguration: Schema.Struct<{
+    readonly webBaseUrl: Schema.decodeTo<Schema.URL, Schema.String, never, never>;
+    readonly siteId: Schema.String;
+    readonly projectId: Schema.String;
+    readonly pageSize: Schema.Int;
+    readonly maximumPages: Schema.Int;
+    readonly operationTimeoutMillis: Schema.Int;
+}>;
+/** Decoded Jira read adapter settings. */
+export type JiraReadPluginConfiguration = typeof JiraReadPluginConfiguration.Type;
+/** Negotiated production runtime and its scoped plugin layer. */
+export interface JiraReadPluginRuntime {
+    readonly definition: PluginDefinitionV1;
+    readonly layer: ReturnType<typeof buildPluginDefinitionLayer>;
+}
+/** Descriptor persisted by provisioning before the runtime can be acquired. */
+export declare const jiraReadPluginDescriptor: {
+    contractId: string;
+    contractVersion: {
+        major: number;
+        minor: number;
+        patch: number;
+    };
+    pluginId: string;
+    adapterVersion: {
+        major: number;
+        minor: number;
+        patch: number;
+    };
+    displayName: string;
+    configurationFields: ({
+        _tag: string;
+        key: string;
+        label: string;
+        description: string;
+        required: boolean;
+        secretKind?: never;
+        minimum?: never;
+        maximum?: never;
+    } | {
+        _tag: string;
+        key: string;
+        label: string;
+        description: string;
+        required: boolean;
+        secretKind: string;
+        minimum?: never;
+        maximum?: never;
+    } | {
+        _tag: string;
+        key: string;
+        label: string;
+        description: string;
+        required: boolean;
+        minimum: number;
+        maximum: number;
+        secretKind?: never;
+    })[];
+    capabilities: {
+        capabilityId: string;
+        supportedVersions: number[];
+        requirement: string;
+    }[];
+};
+/** Build a production Jira runtime from the configured shared API client. */
+export declare const makeJiraReadPluginRuntime: (configuration: unknown, verifiedSiteId?: string | null) => Effect.Effect<JiraReadPluginRuntime, never, JiraApiClient>;
+//# sourceMappingURL=JiraReadPlugin.d.ts.map

package/dist/server/server/plugins/jira/JiraReadPlugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JiraReadPlugin.d.ts","sourceRoot":"","sources":["../../../../../src/server/plugins/jira/JiraReadPlugin.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAEtD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAuBvC,OAAO,EAAE,0BAA0B,EAAkB,MAAM,wBAAwB,CAAA;AACnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AA6GlE,8DAA8D;AAC9D,eAAO,MAAM,2BAA2B;;;;;;;EAOtC,CAAA;AAEF,0CAA0C;AAC1C,MAAM,MAAM,2BAA2B,GAAG,OAAO,2BAA2B,CAAC,IAAI,CAAA;AAEjF,iEAAiE;AACjE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAA;IACvC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAA;CAC9D;AAED,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0FlB,CAAA;AAylBnB,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,GACpC,eAAe,OAAO,EACtB,iBAAgB,MAAM,GAAG,IAAW,KACnC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,EAAE,aAAa,CACqD,CAAA"}

package/dist/server/server/plugins/jira/JiraReadProvider.d.ts

@@ -0,0 +1,7 @@
+import * as Schema from "effect/Schema";
+/**
+ * Leave room for both issue-key watermarks and timestamps inside the 2,048-character
+ * durable plugin checkpoint while accepting Jira cursors beyond identifier bounds.
+ */
+export declare const JiraProviderPageToken: Schema.String;
+//# sourceMappingURL=JiraReadProvider.d.ts.map

package/dist/server/server/plugins/jira/JiraReadProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JiraReadProvider.d.ts","sourceRoot":"","sources":["../../../../../src/server/plugins/jira/JiraReadProvider.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAuCvC;;;GAGG;AACH,eAAO,MAAM,qBAAqB,eAOjC,CAAA"}

package/dist/server/server/plugins/jira/index.d.ts

@@ -0,0 +1,3 @@
+/** Production Jira issue-read plugin runtime and configuration. */
+export * from "./JiraReadPlugin.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/server/plugins/jira/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/server/plugins/jira/index.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,cAAc,qBAAqB,CAAA"}

package/dist/server/server/plugins/negotiation.d.ts

@@ -0,0 +1,75 @@
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+import { NegotiatedPluginDescriptorV1, type PluginCapabilityId as PluginCapabilityIdType } from "../../domain/plugins/descriptor.js";
+import { PluginMalformedResponseFailure, PluginUnsupportedCapabilityFailure } from "./failures.js";
+/** Capability versions implemented by this host contract major. */
+export declare const HOST_PLUGIN_CAPABILITY_VERSIONS: Readonly<Record<PluginCapabilityIdType, ReadonlyArray<number>>>;
+/** Decode and negotiate a descriptor before any plugin factory can be invoked. */
+export declare const negotiatePluginDescriptorV1: (raw: unknown) => Effect.Effect<Schema.Struct.ReadonlySide<{
+    readonly descriptor: Schema.Struct<{
+        readonly contractId: Schema.Literal<"dev.knpkv.control-center.plugin">;
+        readonly contractVersion: Schema.Struct<{
+            readonly major: Schema.Int;
+            readonly minor: Schema.Int;
+            readonly patch: Schema.Int;
+        }>;
+        readonly pluginId: Schema.brand<Schema.String, string>;
+        readonly adapterVersion: Schema.Struct<{
+            readonly major: Schema.Int;
+            readonly minor: Schema.Int;
+            readonly patch: Schema.Int;
+        }>;
+        readonly displayName: Schema.String;
+        readonly configurationFields: Schema.$Array<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"text", {
+            key: Schema.brand<Schema.String, string>;
+            label: Schema.String;
+            description: Schema.String;
+            required: Schema.Boolean;
+        }>, Schema.TaggedStruct<"url", {
+            key: Schema.brand<Schema.String, string>;
+            label: Schema.String;
+            description: Schema.String;
+            required: Schema.Boolean;
+        }>, Schema.TaggedStruct<"boolean", {
+            key: Schema.brand<Schema.String, string>;
+            label: Schema.String;
+            description: Schema.String;
+            required: Schema.Boolean;
+        }>, Schema.Struct<{
+            readonly _tag: Schema.tag<"integer">;
+            readonly minimum: Schema.NullOr<Schema.Int>;
+            readonly maximum: Schema.NullOr<Schema.Int>;
+            readonly key: Schema.brand<Schema.String, string>;
+            readonly label: Schema.String;
+            readonly description: Schema.String;
+            readonly required: Schema.Boolean;
+        }>, Schema.TaggedStruct<"select", {
+            readonly options: Schema.$Array<Schema.Struct<{
+                readonly label: Schema.String;
+                readonly value: Schema.brand<Schema.String, string>;
+            }>>;
+            readonly key: Schema.brand<Schema.String, string>;
+            readonly label: Schema.String;
+            readonly description: Schema.String;
+            readonly required: Schema.Boolean;
+        }>, Schema.TaggedStruct<"secret-reference", {
+            readonly secretKind: Schema.Literals<readonly ["token", "password", "private-key", "certificate", "opaque"]>;
+            readonly key: Schema.brand<Schema.String, string>;
+            readonly label: Schema.String;
+            readonly description: Schema.String;
+            readonly required: Schema.Boolean;
+        }>]>>;
+        readonly capabilities: Schema.$Array<Schema.Struct<{
+            readonly capabilityId: Schema.Literals<readonly ["entity.read", "sync.incremental", "action.propose", "action.execute", "action.cancel", "action.reconcile", "diff.inventory", "diff.content"]>;
+            readonly supportedVersions: Schema.$Array<Schema.Int>;
+            readonly requirement: Schema.Literals<readonly ["required", "optional"]>;
+        }>>;
+    }>;
+    readonly capabilities: Schema.$Array<Schema.Struct<{
+        readonly capabilityId: Schema.Literals<readonly ["entity.read", "sync.incremental", "action.propose", "action.execute", "action.cancel", "action.reconcile", "diff.inventory", "diff.content"]>;
+        readonly version: Schema.Int;
+    }>>;
+}, "Type">, PluginMalformedResponseFailure | PluginUnsupportedCapabilityFailure, never>;
+/** Whether a negotiated descriptor exposes one exact capability version. */
+export declare const hasPluginCapability: (descriptor: typeof NegotiatedPluginDescriptorV1.Type, capabilityId: PluginCapabilityIdType, version: number) => boolean;
+//# sourceMappingURL=negotiation.d.ts.map

package/dist/server/server/plugins/negotiation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"negotiation.d.ts","sourceRoot":"","sources":["../../../../src/server/plugins/negotiation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,EAEL,4BAA4B,EAC5B,KAAK,kBAAkB,IAAI,sBAAsB,EAIlD,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EAAE,8BAA8B,EAAE,kCAAkC,EAAE,MAAM,eAAe,CAAA;AAOlG,mEAAmE;AACnE,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,sBAAsB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAUtD,CAAA;AAoFD,kFAAkF;AAClF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uFAKtC,CAAA;AAEF,4EAA4E;AAC5E,eAAO,MAAM,mBAAmB,GAC9B,YAAY,OAAO,4BAA4B,CAAC,IAAI,EACpD,cAAc,sBAAsB,EACpC,SAAS,MAAM,KACd,OAGA,CAAA"}

package/dist/server/server/plugins/retryPolicy.d.ts

@@ -0,0 +1,28 @@
+import * as Effect from "effect/Effect";
+import * as Stream from "effect/Stream";
+import type { PluginFailure } from "./failures.js";
+/** Provider operation classes whose retry safety is decided by the caller. */
+export type PluginOperationSafety = "safe-read" | "idempotent-write" | "unsafe-mutation";
+/** Input for one bounded plugin operation. The effect remains lazy across attempts. */
+export interface RetryPluginOperationOptions<Value, Requirements> {
+    readonly operation: Effect.Effect<Value, PluginFailure, Requirements>;
+    readonly safety: PluginOperationSafety;
+}
+/** Input for one bounded plugin stream. The stream remains lazy across attempts. */
+export interface RetryPluginStreamOptions<Value, Requirements> {
+    readonly stream: Stream.Stream<Value, PluginFailure, Requirements>;
+    readonly safety: PluginOperationSafety;
+}
+/** Maximum total attempts, including the initial provider call. */
+export declare const PLUGIN_OPERATION_MAX_ATTEMPTS = 3;
+/** Initial upper bound for full-jitter transient retry delay. */
+export declare const PLUGIN_RETRY_BASE_DELAY_MILLIS = 100;
+/** Hard upper bound for every full-jitter transient retry delay. */
+export declare const PLUGIN_RETRY_MAX_DELAY_MILLIS = 10000;
+/** Whether one typed provider failure may be retried for the declared operation safety. */
+export declare const isPluginFailureRetryable: (safety: PluginOperationSafety, failure: PluginFailure) => boolean;
+/** Run a plugin operation with bounded, failure-aware retries and Retry-After support. */
+export declare const retryPluginOperation: <Value, Requirements>(options: RetryPluginOperationOptions<Value, Requirements>) => Effect.Effect<Value, PluginFailure, Requirements>;
+/** Retry a plugin stream at most three total times when its operation is safe. */
+export declare const retryPluginStream: <Value, Requirements>(options: RetryPluginStreamOptions<Value, Requirements>) => Stream.Stream<Value, PluginFailure, Requirements>;
+//# sourceMappingURL=retryPolicy.d.ts.map

package/dist/server/server/plugins/retryPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retryPolicy.d.ts","sourceRoot":"","sources":["../../../../src/server/plugins/retryPolicy.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAGvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElD,8EAA8E;AAC9E,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;AAExF,uFAAuF;AACvF,MAAM,WAAW,2BAA2B,CAAC,KAAK,EAAE,YAAY;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,YAAY,CAAC,CAAA;IACrE,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;CACvC;AAED,oFAAoF;AACpF,MAAM,WAAW,wBAAwB,CAAC,KAAK,EAAE,YAAY;IAC3D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,YAAY,CAAC,CAAA;IAClE,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;CACvC;AAED,mEAAmE;AACnE,eAAO,MAAM,6BAA6B,IAAI,CAAA;AAE9C,iEAAiE;AACjE,eAAO,MAAM,8BAA8B,MAAM,CAAA;AAEjD,oEAAoE;AACpE,eAAO,MAAM,6BAA6B,QAAS,CAAA;AAInD,2FAA2F;AAC3F,eAAO,MAAM,wBAAwB,GAAI,QAAQ,qBAAqB,EAAE,SAAS,aAAa,KAAG,OAiBhG,CAAA;AA2BD,0FAA0F;AAC1F,eAAO,MAAM,oBAAoB,GAAI,KAAK,EAAE,YAAY,EACtD,SAAS,2BAA2B,CAAC,KAAK,EAAE,YAAY,CAAC,KACxD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,YAAY,CAA2B,CAAA;AA6B9E,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,GAAI,KAAK,EAAE,YAAY,EACnD,SAAS,wBAAwB,CAAC,KAAK,EAAE,YAAY,CAAC,KACrD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,YAAY,CACkD,CAAA"}

package/dist/server/server/readinessDigests.d.ts

@@ -0,0 +1,103 @@
+import * as Crypto from "effect/Crypto";
+import * as Effect from "effect/Effect";
+import * as Schema from "effect/Schema";
+declare const ReadinessDigestError_base: Schema.Class<ReadinessDigestError, Schema.TaggedStruct<"ReadinessDigestError", {
+    readonly operation: Schema.Literals<readonly ["encode", "encode-utf8", "digest"]>;
+}>, import("effect/Cause").YieldableError>;
+/** Bounded server failure while producing a canonical readiness digest. */
+export declare class ReadinessDigestError extends ReadinessDigestError_base {
+}
+/** Hash the complete environment candidate after deterministic nested normalization. */
+export declare const digestEnvironmentReadinessCandidate: (material: Schema.Struct.ReadonlySide<{
+    readonly scope: Schema.TaggedStruct<"environment", {
+        readonly releaseId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ReleaseId">;
+        readonly environmentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EnvironmentId">;
+    }>;
+    readonly complete: Schema.Boolean;
+    readonly definitions: Schema.$Array<Schema.Struct<{
+        readonly factId: Schema.brand<Schema.String, "ReadinessFactId">;
+        readonly kind: Schema.Literals<readonly ["relationship", "approval", "check", "execution", "documentation", "deployment"]>;
+        readonly requirement: Schema.Literals<readonly ["required", "advisory"]>;
+    }>>;
+    readonly observations: Schema.$Array<Schema.Struct<{
+        readonly factId: Schema.brand<Schema.String, "ReadinessFactId">;
+        readonly state: Schema.TaggedUnion<{
+            readonly relationship: Schema.TaggedStruct<"relationship", {
+                readonly status: Schema.Literals<readonly ["missing", "inferred", "proposed", "verified", "governed", "rejected", "superseded"]>;
+            }>;
+            readonly approval: Schema.TaggedStruct<"approval", {
+                readonly status: Schema.Literals<readonly ["missing", "pending", "approved", "rejected", "expired"]>;
+            }>;
+            readonly check: Schema.TaggedStruct<"check", {
+                readonly status: Schema.Literals<readonly ["missing", "queued", "running", "passed", "failed", "cancelled"]>;
+            }>;
+            readonly execution: Schema.TaggedStruct<"execution", {
+                readonly status: Schema.Literals<readonly ["missing", "queued", "running", "succeeded", "failed", "stopped"]>;
+                readonly progress: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.Struct<{
+                    readonly _tag: Schema.tag<"count">;
+                    readonly completed: Schema.Int;
+                    readonly total: Schema.Int;
+                }>, Schema.TaggedStruct<"percent", {
+                    readonly value: Schema.Number;
+                }>]>>;
+            }>;
+            readonly documentation: Schema.TaggedStruct<"documentation", {
+                readonly status: Schema.Literals<readonly ["missing", "draft", "current", "stale", "superseded"]>;
+            }>;
+            readonly deployment: Schema.TaggedStruct<"deployment", {
+                readonly status: Schema.Literals<readonly ["not-started", "pending", "deploying", "succeeded", "failed", "rolled-back"]>;
+                readonly progress: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.Struct<{
+                    readonly _tag: Schema.tag<"count">;
+                    readonly completed: Schema.Int;
+                    readonly total: Schema.Int;
+                }>, Schema.TaggedStruct<"percent", {
+                    readonly value: Schema.Number;
+                }>]>>;
+            }>;
+        }>;
+        readonly evidence: Schema.$Array<Schema.Struct<{
+            readonly evidenceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EvidenceId">;
+            readonly source: Schema.TaggedUnion<{
+                readonly plugin: Schema.TaggedStruct<"plugin", {
+                    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                    readonly health: Schema.Literals<readonly ["healthy", "degraded", "unavailable", "disabled"]>;
+                }>;
+                readonly local: Schema.TaggedStruct<"local", {
+                    readonly origin: Schema.Literals<readonly ["human", "agent", "system"]>;
+                }>;
+            }>;
+            readonly freshness: Schema.Literals<readonly ["current", "stale", "missing", "unavailable"]>;
+            readonly validity: Schema.Literals<readonly ["valid", "expired"]>;
+            readonly reevaluateAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        }>>;
+    }>>;
+    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+    readonly releaseRevision: Schema.Int;
+    readonly artifactRevision: Schema.String;
+}, "Type">) => Effect.Effect<string & import("effect/Brand").Brand<"ReadinessCandidateDigest">, ReadinessDigestError, Crypto.Crypto>;
+/** Hash the exact set of child assessments forming a release candidate. */
+export declare const digestReleaseReadinessCandidate: (material: Schema.Struct.ReadonlySide<{
+    readonly scope: Schema.TaggedStruct<"release", {
+        readonly releaseId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ReleaseId">;
+    }>;
+    readonly environments: Schema.NonEmptyArray<Schema.Struct<{
+        readonly assessmentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ReadinessAssessmentId">;
+        readonly environmentId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "EnvironmentId">;
+        readonly candidateDigest: Schema.brand<Schema.String, "ReadinessCandidateDigest">;
+    }>>;
+    readonly workspaceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "WorkspaceId">;
+    readonly releaseRevision: Schema.Int;
+    readonly artifactRevision: Schema.String;
+}, "Type">) => Effect.Effect<string & import("effect/Brand").Brand<"ReadinessCandidateDigest">, ReadinessDigestError, Crypto.Crypto>;
+/** Hash a complete immutable readiness-rule snapshot. */
+export declare const digestReadinessRule: (material: Schema.Struct.ReadonlySide<{
+    readonly ruleId: Schema.String;
+    readonly version: Schema.brand<Schema.Int, "ReadinessRuleVersion">;
+    readonly definitions: Schema.$Array<Schema.Struct<{
+        readonly factId: Schema.brand<Schema.String, "ReadinessFactId">;
+        readonly kind: Schema.Literals<readonly ["relationship", "approval", "check", "execution", "documentation", "deployment"]>;
+        readonly requirement: Schema.Literals<readonly ["required", "advisory"]>;
+    }>>;
+}, "Type">) => Effect.Effect<string & import("effect/Brand").Brand<"ReadinessCandidateDigest">, ReadinessDigestError, Crypto.Crypto>;
+export {};
+//# sourceMappingURL=readinessDigests.d.ts.map

package/dist/server/server/readinessDigests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"readinessDigests.d.ts","sourceRoot":"","sources":["../../../src/server/readinessDigests.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;;;;AAavC,2EAA2E;AAC3E,qBAAa,oBAAqB,SAAQ,yBAExC;CAAG;AAqBL,wFAAwF;AACxF,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oIAO9C,CAAA;AAEF,2EAA2E;AAC3E,eAAO,MAAM,+BAA+B;;;;;;;;;;;;oIAO1C,CAAA;AAEF,yDAAyD;AACzD,eAAO,MAAM,mBAAmB;;;;;;;;oIAK9B,CAAA"}

package/dist/server/server/runtime/Bootstrap.d.ts

@@ -0,0 +1,39 @@
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import type * as Redacted from "effect/Redacted";
+import type { Actor } from "../../domain/actors.js";
+import type { WorkspaceId } from "../../domain/identifiers.js";
+import { Auth } from "../auth/Auth.js";
+import type { AuthCryptoError, AuthPersistenceError, CredentialRejectedError } from "../auth/errors.js";
+import { Persistence, type PersistenceOperationFailure } from "../persistence/Persistence.js";
+import type { WorkspaceName } from "../persistence/repositories/models.js";
+/** Startup-owned workspace and first owner identity. */
+export interface ControlCenterBootstrapOptions {
+    readonly workspaceId: WorkspaceId;
+    readonly workspaceName: WorkspaceName;
+    readonly owner: Actor;
+}
+/** Secret-safe startup outcome retained for a future terminal presenter. */
+export type ControlCenterBootstrapState = {
+    readonly _tag: "disabled";
+} | {
+    readonly _tag: "already-initialized";
+    readonly workspaceId: WorkspaceId;
+} | {
+    readonly _tag: "pairing-issued";
+    readonly workspaceId: WorkspaceId;
+    readonly pairingCode: Redacted.Redacted<string>;
+};
+/** Startup failures possible while ensuring durable workspace and authentication state. */
+export type ControlCenterBootstrapError = AuthCryptoError | AuthPersistenceError | CredentialRejectedError | PersistenceOperationFailure;
+declare const ControlCenterBootstrap_base: Context.ServiceClass<ControlCenterBootstrap, "@knpkv/control-center/server/runtime/ControlCenterBootstrap", ControlCenterBootstrapState>;
+/** Startup bootstrap result available to a future CLI without implicit terminal output. */
+export declare class ControlCenterBootstrap extends ControlCenterBootstrap_base {
+}
+/** Ensure the configured workspace and issue its first owner code at most once. */
+export declare const makeControlCenterBootstrap: (options: ControlCenterBootstrapOptions) => Effect.Effect<ControlCenterBootstrapState, ControlCenterBootstrapError, Auth | Persistence>;
+/** Build the optional bootstrap result as a startup service. */
+export declare const controlCenterBootstrapLayer: (options: ControlCenterBootstrapOptions | null) => Layer.Layer<ControlCenterBootstrap, ControlCenterBootstrapError, Auth | Persistence>;
+export {};
+//# sourceMappingURL=Bootstrap.d.ts.map

package/dist/server/server/runtime/Bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bootstrap.d.ts","sourceRoot":"","sources":["../../../../src/server/runtime/Bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAEzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAEhD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AACtC,OAAO,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AACvG,OAAO,EAAE,WAAW,EAAE,KAAK,2BAA2B,EAAE,MAAM,+BAA+B,CAAA;AAC7F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAA;AAE1E,wDAAwD;AACxD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAA;IACrC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CACtB;AAED,4EAA4E;AAC5E,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAAE,GAC3E;IACA,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;CAChD,CAAA;AAEH,2FAA2F;AAC3F,MAAM,MAAM,2BAA2B,GACnC,eAAe,GACf,oBAAoB,GACpB,uBAAuB,GACvB,2BAA2B,CAAA;;AAE/B,2FAA2F;AAC3F,qBAAa,sBAAuB,SAAQ,2BAGsB;CAAG;AAoBrE,mFAAmF;AACnF,eAAO,MAAM,0BAA0B,EAAE,CACvC,OAAO,EAAE,6BAA6B,KACnC,MAAM,CAAC,MAAM,CAChB,2BAA2B,EAC3B,2BAA2B,EAC3B,IAAI,GAAG,WAAW,CAqBlB,CAAA;AAEF,gEAAgE;AAChE,eAAO,MAAM,2BAA2B,GACtC,SAAS,6BAA6B,GAAG,IAAI,KAC5C,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,2BAA2B,EAAE,IAAI,GAAG,WAAW,CAGP,CAAA"}

package/dist/server/server/runtime/ControlCenterServer.d.ts

@@ -0,0 +1,57 @@
+import type * as Crypto from "effect/Crypto";
+import type * as FileSystem from "effect/FileSystem";
+import * as Layer from "effect/Layer";
+import type * as Path from "effect/Path";
+import type * as HttpClient from "effect/unstable/http/HttpClient";
+import * as HttpRouter from "effect/unstable/http/HttpRouter";
+import type { ServeError } from "effect/unstable/http/HttpServerError";
+import { ApiBindConfiguration } from "../api/ApiConfiguration.js";
+import type { AuthorizedShares, DeliveryGraphInspection, MediaReads, PluginAdministration, PortfolioSnapshots, RelationshipRepairProposals, TimelineExportAudits, TimelineReads } from "../api/ApplicationServices.js";
+import { RequestLimitPolicy } from "../api/RequestLimits.js";
+import { type ReleaseAgentRuntimeOptions } from "../application/index.js";
+import { StaticAssetStore, type StaticAssetStoreError, type StaticAssetStoreOptions } from "../http/security/StaticAssetStore.js";
+import { type Persistence, type PersistenceLayerError } from "../persistence/Persistence.js";
+import type { PersistenceConfig } from "../persistence/PersistenceConfig.js";
+import { type PluginConnectionMapV1 } from "../plugins/PluginConnectionMap.js";
+import { type SecretRoot, SecretStore } from "../secrets/SecretStore.js";
+import type { SecretStoreError } from "../secrets/SecretStoreError.js";
+import type { BindConfig } from "../security/BindConfig.js";
+import { type ControlCenterBootstrapError, type ControlCenterBootstrapOptions } from "./Bootstrap.js";
+import { DomainEventWakeups } from "./DomainEventWakeups.js";
+import { type GovernedActionExecutionStartupError, type GovernedActionExecutionStartupOptions } from "./GovernedActionExecutionStartup.js";
+import { type DirectTlsServerError } from "./NodeTransport.js";
+import { type ReleaseSynchronizationStartupError, type ReleaseSynchronizationStartupOptions } from "./ReleaseSynchronizationStartup.js";
+import { ServerLifecycle } from "./ServerLifecycle.js";
+type ControlCenterCoreApplicationServices = AuthorizedShares | DeliveryGraphInspection | MediaReads | PluginAdministration | PortfolioSnapshots | RelationshipRepairProposals | TimelineExportAudits | TimelineReads;
+/** Runtime construction settings after security and persistence decoding. */
+export interface ControlCenterServerOptions<ApplicationError = never, ApplicationRequirements = never> {
+    readonly bindConfig: BindConfig;
+    readonly persistenceConfig: PersistenceConfig;
+    /** Scoped first-party provider runtimes used by live connection checks. */
+    readonly pluginConnections?: PluginConnectionMapV1 | null;
+    /** Enable the fixed production provider registry when no test map is injected. */
+    readonly firstPartyPluginRuntime?: boolean | undefined;
+    readonly secretRoot: SecretRoot;
+    readonly staticAssets: StaticAssetStoreOptions;
+    readonly bootstrap?: ControlCenterBootstrapOptions | null;
+    readonly releaseSynchronization?: ReleaseSynchronizationStartupOptions | null;
+    readonly releaseAgent?: ReleaseAgentRuntimeOptions | null;
+    readonly governedActionExecution?: GovernedActionExecutionStartupOptions | null;
+    readonly applicationServices?: Layer.Layer<ControlCenterCoreApplicationServices, ApplicationError, ApplicationRequirements | Persistence | SecretStore>;
+}
+/** Failures that can prevent the runtime from acquiring or listening. */
+export type ControlCenterServerError<ApplicationError = never> = ApplicationError | ControlCenterBootstrapError | DirectTlsServerError | GovernedActionExecutionStartupError | PersistenceLayerError | ReleaseSynchronizationStartupError | SecretStoreError | ServeError | StaticAssetStoreError;
+/** Compose API routes, request policy, immutable static assets, and startup bootstrap. */
+declare const makeApplication: <ApplicationError = never, ApplicationRequirements = never>(options: ControlCenterServerOptions<ApplicationError, ApplicationRequirements>) => {
+    application: Layer.Layer<import("../auth/Auth.js").Auth | Persistence | import("./Bootstrap.js").ControlCenterBootstrap | ApiBindConfiguration | import("../api/ApplicationServices.js").ReleaseAgentTurns | import("../api/ApplicationServices.js").ReleaseAgentJobs | import("../api/ApplicationServices.js").LiveEvents | RequestLimitPolicy | import("effect/unstable/persistence/RateLimiter").RateLimiter | DomainEventWakeups | StaticAssetStore | import("./ReleaseSynchronizationStartup.js").ReleaseSynchronizationStartup | ControlCenterCoreApplicationServices, import("effect/SchemaError").SchemaError | import("../index.ts").PersistenceConfigError | import("../index.ts").DatabaseInitializationError | import("../index.ts").RecordNotFoundError | import("../index.ts").RecordAlreadyExistsError | import("../index.ts").PluginConnectionLimitError | import("../index.ts").SourceIdentityMismatchError | import("../index.ts").PersistenceOperationError | import("../index.ts").ContentMetadataMismatchError | import("../index.ts").ReproducibleContentUnavailableError | import("../index.ts").RevisionConflictError | import("../index.ts").SecretReferenceScopeConflictError | import("../index.ts").PersistedRecordError | import("../index.ts").QuarantineWriteError | import("../index.ts").SchemaWriteBarrierError | import("../index.ts").CredentialRejectedError | import("../index.ts").AuthPersistenceError | import("../index.ts").AuthCryptoError | import("../index.ts").BlobStoreError | import("../index.ts").AgentJobInputError | import("../persistence/repositories/authorizedShareRepository.ts").AuthorizedShareInputError | import("../persistence/repositories/deliveryGraphRepository.ts").DeliveryGraphInputError | import("../persistence/repositories/governedActionRepository.ts").GovernedActionInputError | import("../index.ts").PluginAuthenticationFailure | import("../index.ts").PluginAuthorizationFailure | import("../index.ts").PluginRateLimitFailure | import("../index.ts").PluginTimeoutFailure | import("../index.ts").PluginMalformedResponseFailure | import("../index.ts").PluginOutageFailure | import("../index.ts").PluginCancellationFailure | import("../index.ts").PluginConflictFailure | import("../index.ts").PluginUnsupportedCapabilityFailure | import("../index.ts").PluginConfigurationFailure | import("../index.ts").PluginUnknownOutcomeFailure | import("../persistence/repositories/providerAccountRepository.ts").ProviderAccountInputError | import("../persistence/repositories/readinessRepository.ts").ReadinessInputError | import("../persistence/repositories/relationshipRepairProposalRepository.ts").RelationshipRepairProposalInputError | import("../persistence/repositories/timelineExportAuditRepository.ts").TimelineExportAuditInputError | import("./ServerLifecycle.js").ServerDraining | import("./ServerLifecycle.js").ServerDrainHookConflict | import("../application/fakeReleaseNormalization.ts").FakeReleaseNormalizationError | StaticAssetStoreError | import("../governance/internal/GovernedActionExecutionStore.ts").GovernedActionExecutionStoreError | import("../governance/internal/GovernedActionPolicyEvaluator.ts").GovernedActionPolicyCatalogInvalid | import("./ReleaseSynchronizationStartup.js").ReleaseSynchronizationStartupConfigurationError | ApplicationError, HttpClient.HttpClient | SecretStore | Crypto.Crypto | FileSystem.FileSystem | Path.Path | ServerLifecycle | HttpRouter.Request<"Requires", ApiBindConfiguration> | import("effect/unstable/http/Etag").Generator | HttpRouter.HttpRouter | import("effect/unstable/http/HttpPlatform").HttpPlatform | HttpRouter.Request<"GlobalError", import("../api/RequestContext.ts").RequestContextUnavailable> | import("effect/unstable/process/ChildProcessSpawner").ChildProcessSpawner | HttpRouter.Request<"Requires", StaticAssetStore> | Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups> | Exclude<Exclude<Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups>, Persistence>, DomainEventWakeups>>;
+    lifecycle: Layer.Layer<ServerLifecycle, never, never>;
+    runtimeServices: Layer.Layer<import("../auth/Auth.js").Auth | Persistence | ApiBindConfiguration | import("../api/ApplicationServices.js").ReleaseAgentTurns | import("../api/ApplicationServices.js").ReleaseAgentJobs | import("../api/ApplicationServices.js").LiveEvents | RequestLimitPolicy | import("effect/unstable/persistence/RateLimiter").RateLimiter | DomainEventWakeups | StaticAssetStore | ControlCenterCoreApplicationServices, import("../index.ts").PersistenceConfigError | import("../index.ts").DatabaseInitializationError | import("../index.ts").SchemaWriteBarrierError | import("../index.ts").BlobStoreError | import("./ServerLifecycle.js").ServerDraining | import("./ServerLifecycle.js").ServerDrainHookConflict | StaticAssetStoreError | ApplicationError, HttpClient.HttpClient | SecretStore | Crypto.Crypto | FileSystem.FileSystem | Path.Path | ServerLifecycle | import("effect/unstable/process/ChildProcessSpawner").ChildProcessSpawner | Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups> | Exclude<Exclude<Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups>, Persistence>, DomainEventWakeups>>;
+};
+/** Compose API routes, request policy, immutable static assets, and startup bootstrap. */
+export declare const makeControlCenterApplication: <ApplicationError = never, ApplicationRequirements = never>(options: ControlCenterServerOptions<ApplicationError, ApplicationRequirements>) => ReturnType<typeof makeApplication<ApplicationError, ApplicationRequirements>>["application"];
+/** Construct the fully runnable Node HTTP/HTTPS server layer. */
+declare const makeServer: <ApplicationError = never, ApplicationRequirements = never>(options: ControlCenterServerOptions<ApplicationError, ApplicationRequirements>) => Layer.Layer<import("../auth/Auth.js").Auth | Persistence | import("./Bootstrap.js").ControlCenterBootstrap | ApiBindConfiguration | import("../api/ApplicationServices.js").ReleaseAgentTurns | import("../api/ApplicationServices.js").ReleaseAgentJobs | import("../api/ApplicationServices.js").LiveEvents | ServerLifecycle | RequestLimitPolicy | import("effect/unstable/persistence/RateLimiter").RateLimiter | DomainEventWakeups | StaticAssetStore | import("./ReleaseSynchronizationStartup.js").ReleaseSynchronizationStartup | ControlCenterCoreApplicationServices, import("effect/SchemaError").SchemaError | import("../index.ts").PersistenceConfigError | import("../index.ts").DatabaseInitializationError | import("../index.ts").RecordNotFoundError | import("../index.ts").RecordAlreadyExistsError | import("../index.ts").PluginConnectionLimitError | import("../index.ts").SourceIdentityMismatchError | import("../index.ts").PersistenceOperationError | import("../index.ts").ContentMetadataMismatchError | import("../index.ts").ReproducibleContentUnavailableError | import("../index.ts").RevisionConflictError | import("../index.ts").SecretReferenceScopeConflictError | import("../index.ts").PersistedRecordError | import("../index.ts").QuarantineWriteError | SecretStoreError | import("../index.ts").SchemaWriteBarrierError | import("../index.ts").CredentialRejectedError | import("../index.ts").AuthPersistenceError | import("../index.ts").AuthCryptoError | import("../index.ts").BlobStoreError | import("../index.ts").AgentJobInputError | import("../persistence/repositories/authorizedShareRepository.ts").AuthorizedShareInputError | import("../persistence/repositories/deliveryGraphRepository.ts").DeliveryGraphInputError | import("../persistence/repositories/governedActionRepository.ts").GovernedActionInputError | import("../index.ts").PluginAuthenticationFailure | import("../index.ts").PluginAuthorizationFailure | import("../index.ts").PluginRateLimitFailure | import("../index.ts").PluginTimeoutFailure | import("../index.ts").PluginMalformedResponseFailure | import("../index.ts").PluginOutageFailure | import("../index.ts").PluginCancellationFailure | import("../index.ts").PluginConflictFailure | import("../index.ts").PluginUnsupportedCapabilityFailure | import("../index.ts").PluginConfigurationFailure | import("../index.ts").PluginUnknownOutcomeFailure | import("../persistence/repositories/providerAccountRepository.ts").ProviderAccountInputError | import("../persistence/repositories/readinessRepository.ts").ReadinessInputError | import("../persistence/repositories/relationshipRepairProposalRepository.ts").RelationshipRepairProposalInputError | import("../persistence/repositories/timelineExportAuditRepository.ts").TimelineExportAuditInputError | import("./ServerLifecycle.js").ServerDraining | import("./ServerLifecycle.js").ServerDrainHookConflict | import("../application/fakeReleaseNormalization.ts").FakeReleaseNormalizationError | StaticAssetStoreError | import("../governance/internal/GovernedActionExecutionStore.ts").GovernedActionExecutionStoreError | import("../governance/internal/GovernedActionPolicyEvaluator.ts").GovernedActionPolicyCatalogInvalid | DirectTlsServerError | ServeError | import("./ReleaseSynchronizationStartup.js").ReleaseSynchronizationStartupConfigurationError | ApplicationError | HttpRouter.Request.Without<ApplicationError>, Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups>, import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpServer").HttpServer | import("@effect/platform-node/NodeServices").NodeServices>, SecretStore>, HttpClient.HttpClient>, ServerLifecycle> | Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups>, Persistence>, DomainEventWakeups>, import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpServer").HttpServer | import("@effect/platform-node/NodeServices").NodeServices>, SecretStore>, HttpClient.HttpClient>, ServerLifecycle> | Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<HttpRouter.Request.Without<Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups>>, HttpRouter.HttpRouter>, import("../auth/Auth.js").Auth | Persistence | ApiBindConfiguration | import("../api/ApplicationServices.js").ReleaseAgentTurns | import("../api/ApplicationServices.js").ReleaseAgentJobs | import("../api/ApplicationServices.js").LiveEvents | RequestLimitPolicy | import("effect/unstable/persistence/RateLimiter").RateLimiter | DomainEventWakeups | StaticAssetStore | ControlCenterCoreApplicationServices>, import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpServer").HttpServer | import("@effect/platform-node/NodeServices").NodeServices>, SecretStore>, HttpClient.HttpClient>, ServerLifecycle> | Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<HttpRouter.Request.Without<Exclude<Exclude<Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups>, Persistence>, DomainEventWakeups>>, HttpRouter.HttpRouter>, import("../auth/Auth.js").Auth | Persistence | ApiBindConfiguration | import("../api/ApplicationServices.js").ReleaseAgentTurns | import("../api/ApplicationServices.js").ReleaseAgentJobs | import("../api/ApplicationServices.js").LiveEvents | RequestLimitPolicy | import("effect/unstable/persistence/RateLimiter").RateLimiter | DomainEventWakeups | StaticAssetStore | ControlCenterCoreApplicationServices>, import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpServer").HttpServer | import("@effect/platform-node/NodeServices").NodeServices>, SecretStore>, HttpClient.HttpClient>, ServerLifecycle> | Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<HttpRouter.Request.Only<"Requires", Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups>>, HttpRouter.GlobalProvided>, HttpRouter.HttpRouter>, import("../auth/Auth.js").Auth | Persistence | ApiBindConfiguration | import("../api/ApplicationServices.js").ReleaseAgentTurns | import("../api/ApplicationServices.js").ReleaseAgentJobs | import("../api/ApplicationServices.js").LiveEvents | RequestLimitPolicy | import("effect/unstable/persistence/RateLimiter").RateLimiter | DomainEventWakeups | StaticAssetStore | ControlCenterCoreApplicationServices>, import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpServer").HttpServer | import("@effect/platform-node/NodeServices").NodeServices>, SecretStore>, HttpClient.HttpClient>, ServerLifecycle> | Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<HttpRouter.Request.Only<"Requires", Exclude<Exclude<Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups>, Persistence>, DomainEventWakeups>>, HttpRouter.GlobalProvided>, HttpRouter.HttpRouter>, import("../auth/Auth.js").Auth | Persistence | ApiBindConfiguration | import("../api/ApplicationServices.js").ReleaseAgentTurns | import("../api/ApplicationServices.js").ReleaseAgentJobs | import("../api/ApplicationServices.js").LiveEvents | RequestLimitPolicy | import("effect/unstable/persistence/RateLimiter").RateLimiter | DomainEventWakeups | StaticAssetStore | ControlCenterCoreApplicationServices>, import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpServer").HttpServer | import("@effect/platform-node/NodeServices").NodeServices>, SecretStore>, HttpClient.HttpClient>, ServerLifecycle> | Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<HttpRouter.Request.Only<"GlobalRequires", Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups>>, HttpRouter.GlobalProvided>, HttpRouter.HttpRouter>, import("../auth/Auth.js").Auth | Persistence | ApiBindConfiguration | import("../api/ApplicationServices.js").ReleaseAgentTurns | import("../api/ApplicationServices.js").ReleaseAgentJobs | import("../api/ApplicationServices.js").LiveEvents | RequestLimitPolicy | import("effect/unstable/persistence/RateLimiter").RateLimiter | DomainEventWakeups | StaticAssetStore | ControlCenterCoreApplicationServices>, import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpServer").HttpServer | import("@effect/platform-node/NodeServices").NodeServices>, SecretStore>, HttpClient.HttpClient>, ServerLifecycle> | Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<Exclude<HttpRouter.Request.Only<"GlobalRequires", Exclude<Exclude<Exclude<Exclude<ApplicationRequirements, Persistence>, DomainEventWakeups>, Persistence>, DomainEventWakeups>>, HttpRouter.GlobalProvided>, HttpRouter.HttpRouter>, import("../auth/Auth.js").Auth | Persistence | ApiBindConfiguration | import("../api/ApplicationServices.js").ReleaseAgentTurns | import("../api/ApplicationServices.js").ReleaseAgentJobs | import("../api/ApplicationServices.js").LiveEvents | RequestLimitPolicy | import("effect/unstable/persistence/RateLimiter").RateLimiter | DomainEventWakeups | StaticAssetStore | ControlCenterCoreApplicationServices>, import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpServer").HttpServer | import("@effect/platform-node/NodeServices").NodeServices>, SecretStore>, HttpClient.HttpClient>, ServerLifecycle>>;
+/** Construct the fully runnable Node HTTP/HTTPS server layer. */
+export declare const makeControlCenterServer: <ApplicationError = never, ApplicationRequirements = never>(options: ControlCenterServerOptions<ApplicationError, ApplicationRequirements>) => ReturnType<typeof makeServer<ApplicationError, ApplicationRequirements>>;
+export {};
+//# sourceMappingURL=ControlCenterServer.d.ts.map

package/dist/server/server/runtime/ControlCenterServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ControlCenterServer.d.ts","sourceRoot":"","sources":["../../../../src/server/runtime/ControlCenterServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAA;AAE5C,OAAO,KAAK,KAAK,UAAU,MAAM,mBAAmB,CAAA;AACpD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,KAAK,IAAI,MAAM,aAAa,CAAA;AACxC,OAAO,KAAK,KAAK,UAAU,MAAM,iCAAiC,CAAA;AAClE,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAA;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAA;AAEtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AACjE,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,oBAAoB,EACpB,kBAAkB,EAClB,2BAA2B,EAC3B,oBAAoB,EACpB,aAAa,EACd,MAAM,+BAA+B,CAAA;AAGtC,OAAO,EAAE,kBAAkB,EAA2B,MAAM,yBAAyB,CAAA;AACrF,OAAO,EAWL,KAAK,0BAA0B,EAKhC,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC7B,MAAM,sCAAsC,CAAA;AAG7C,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAE3B,MAAM,+BAA+B,CAAA;AACtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAA;AAC5E,OAAO,EAAuB,KAAK,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AACnG,OAAO,EAAE,KAAK,UAAU,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAA;AACtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EACL,KAAK,2BAA2B,EAEhC,KAAK,6BAA6B,EACnC,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,OAAO,EAEL,KAAK,mCAAmC,EACxC,KAAK,qCAAqC,EAC3C,MAAM,qCAAqC,CAAA;AAC5C,OAAO,EACL,KAAK,oBAAoB,EAI1B,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,KAAK,kCAAkC,EAEvC,KAAK,oCAAoC,EAC1C,MAAM,oCAAoC,CAAA;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAEtD,KAAK,oCAAoC,GACrC,gBAAgB,GAChB,uBAAuB,GACvB,UAAU,GACV,oBAAoB,GACpB,kBAAkB,GAClB,2BAA2B,GAC3B,oBAAoB,GACpB,aAAa,CAAA;AAEjB,6EAA6E;AAC7E,MAAM,WAAW,0BAA0B,CAAC,gBAAgB,GAAG,KAAK,EAAE,uBAAuB,GAAG,KAAK;IACnG,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAA;IAC7C,2EAA2E;IAC3E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAA;IACzD,kFAAkF;IAClF,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACtD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAA;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,IAAI,CAAA;IACzD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,oCAAoC,GAAG,IAAI,CAAA;IAC7E,QAAQ,CAAC,YAAY,CAAC,EAAE,0BAA0B,GAAG,IAAI,CAAA;IACzD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,qCAAqC,GAAG,IAAI,CAAA;IAC/E,QAAQ,CAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,KAAK,CACxC,oCAAoC,EACpC,gBAAgB,EAChB,uBAAuB,GAAG,WAAW,GAAG,WAAW,CACpD,CAAA;CACF;AAED,yEAAyE;AACzE,MAAM,MAAM,wBAAwB,CAAC,gBAAgB,GAAG,KAAK,IACzD,gBAAgB,GAChB,2BAA2B,GAC3B,oBAAoB,GACpB,mCAAmC,GACnC,qBAAqB,GACrB,kCAAkC,GAClC,gBAAgB,GAChB,UAAU,GACV,qBAAqB,CAAA;AAqCzB,0FAA0F;AAC1F,QAAA,MAAM,eAAe,GAAI,gBAAgB,GAAG,KAAK,EAAE,uBAAuB,GAAG,KAAK,EAChF,SAAS,0BAA0B,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;;;;CA4E/E,CAAA;AAED,0FAA0F;AAC1F,eAAO,MAAM,4BAA4B,GAAI,gBAAgB,GAAG,KAAK,EAAE,uBAAuB,GAAG,KAAK,EACpG,SAAS,0BAA0B,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,KAC7E,UAAU,CAAC,OAAO,eAAe,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC,CAAC,aAAa,CAG7F,CAAA;AAED,iEAAiE;AACjE,QAAA,MAAM,UAAU,GAAI,gBAAgB,GAAG,KAAK,EAAE,uBAAuB,GAAG,KAAK,EAC3E,SAAS,0BAA0B,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,y/SAe/E,CAAA;AAED,iEAAiE;AACjE,eAAO,MAAM,uBAAuB,GAAI,gBAAgB,GAAG,KAAK,EAAE,uBAAuB,GAAG,KAAK,EAC/F,SAAS,0BAA0B,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,KAC7E,UAAU,CAAC,OAAO,UAAU,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAwB,CAAA"}

package/dist/server/server/runtime/DatabaseDrain.d.ts

@@ -0,0 +1,6 @@
+import * as Layer from "effect/Layer";
+import { Database } from "../persistence/Database.js";
+import { ServerLifecycle } from "./ServerLifecycle.js";
+/** Register the local SQLite checkpoint behind the shared lifecycle seam. */
+export declare const databaseDrainLayer: Layer.Layer<never, import("./ServerLifecycle.js").ServerDraining | import("./ServerLifecycle.js").ServerDrainHookConflict, Database | ServerLifecycle>;
+//# sourceMappingURL=DatabaseDrain.d.ts.map

package/dist/server/server/runtime/DatabaseDrain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DatabaseDrain.d.ts","sourceRoot":"","sources":["../../../../src/server/runtime/DatabaseDrain.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAGrC,OAAO,EAAE,QAAQ,EAAsB,MAAM,4BAA4B,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAgBtD,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB,wJAU9B,CAAA"}

package/dist/server/server/runtime/DomainEventWakeups.d.ts

@@ -0,0 +1,22 @@
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Stream from "effect/Stream";
+/** Maximum lossy wake hints retained while the durable journal remains authoritative. */
+export declare const DOMAIN_EVENT_WAKEUP_CAPACITY = 64;
+declare const DomainEventWakeups_base: Context.ServiceClass<DomainEventWakeups, "@knpkv/control-center/server/runtime/DomainEventWakeups", {
+    notify: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">) => Effect.Effect<void, never, never>;
+    subscribe: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">) => Effect.Effect<Stream.Stream<string & import("effect/Brand").Brand<"WorkspaceId">, never, never>, never, import("effect/Scope").Scope>;
+}>;
+/**
+ * Lossy, bounded wake hints for durable event consumers.
+ *
+ * The database journal remains authoritative. Missing a wake only delays the
+ * next poll and can never lose a committed event.
+ */
+export declare class DomainEventWakeups extends DomainEventWakeups_base {
+    /** One process-local bounded wake channel shared by writers and SSE readers. */
+    static readonly layer: Layer.Layer<DomainEventWakeups, never, never>;
+}
+export {};
+//# sourceMappingURL=DomainEventWakeups.d.ts.map

package/dist/server/server/runtime/DomainEventWakeups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DomainEventWakeups.d.ts","sourceRoot":"","sources":["../../../../src/server/runtime/DomainEventWakeups.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAErC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAIvC,yFAAyF;AACzF,eAAO,MAAM,4BAA4B,KAAK,CAAA;;;;;AAmB9C;;;;;GAKG;AACH,qBAAa,kBAAmB,SAAQ,uBAGsB;IAC5D,gFAAgF;IAChF,MAAM,CAAC,QAAQ,CAAC,KAAK,gDAA2D;CACjF"}

package/dist/server/server/runtime/FirstPartyPluginRuntime.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=FirstPartyPluginRuntime.d.ts.map

package/dist/server/server/runtime/FirstPartyPluginRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FirstPartyPluginRuntime.d.ts","sourceRoot":"","sources":["../../../../src/server/runtime/FirstPartyPluginRuntime.ts"],"names":[],"mappings":""}

package/dist/server/server/runtime/GovernedActionExecutionStartup.d.ts

@@ -0,0 +1,35 @@
+import * as Context from "effect/Context";
+import * as Layer from "effect/Layer";
+import type { WorkspaceId } from "../../domain/identifiers.js";
+import { type GovernedActionExecutionEngineService, type GovernedActionRecoverySweepResult } from "../governance/internal/GovernedActionExecutionEngine.js";
+import type { GovernedActionExecutionStoreError } from "../governance/internal/GovernedActionExecutionStore.js";
+import { type GovernedActionPolicyCatalogInvalid } from "../governance/internal/GovernedActionPolicyEvaluator.js";
+import { type PluginRuntimeRegistryV1 } from "../plugins/internal/PluginRuntimeRegistry.js";
+import { type ServerDraining, ServerLifecycle } from "./ServerLifecycle.js";
+/** Server-owned runtime factories; this grants no route or agent an execution handle. */
+export interface GovernedActionExecutionStartupOptions {
+    readonly pluginRuntimes: PluginRuntimeRegistryV1;
+    readonly workspaceId: WorkspaceId;
+}
+/** Failures that can prevent the private governed worker from being constructed. */
+export type GovernedActionExecutionStartupError = GovernedActionExecutionStoreError | GovernedActionPolicyCatalogInvalid | ServerDraining;
+/** Private worker state; import boundaries keep `advance` out of APIs and agent adapters. */
+export type GovernedActionExecutionStartupState = {
+    readonly _tag: "disabled";
+} | {
+    readonly _tag: "ready";
+    readonly advance: GovernedActionExecutionEngineService["run"];
+    readonly recovery: GovernedActionRecoverySweepResult;
+};
+/** Register governed-action recovery-claim expiry behind the shared drain barrier. */
+export declare const governedActionRecoveryClaimDrainLayer: (workspaceId: WorkspaceId) => Layer.Layer<never, ServerDraining | import("./ServerLifecycle.js").ServerDrainHookConflict, import("../persistence/Database.ts").Database | ServerLifecycle>;
+declare const GovernedActionExecutionStartup_base: Context.ServiceClass<GovernedActionExecutionStartup, "@knpkv/control-center/server/runtime/GovernedActionExecutionStartup", GovernedActionExecutionStartupState>;
+/** Private worker composition result retained only by the server runtime. */
+export declare class GovernedActionExecutionStartup extends GovernedActionExecutionStartup_base {
+}
+/** Install the engine only when an internal runtime registry is explicitly configured. */
+export declare const governedActionExecutionStartupLayer: (options: GovernedActionExecutionStartupOptions | null) => Layer.Layer<GovernedActionExecutionStartup, ServerDraining | import("./ServerLifecycle.js").ServerDrainHookConflict | GovernedActionExecutionStoreError | GovernedActionPolicyCatalogInvalid, import("effect/Crypto").Crypto | import("../persistence/Database.ts").Database | ServerLifecycle>;
+/** Acquire the private worker for server lifetime without returning its capability. */
+export declare const governedActionExecutionServerLayer: (options: GovernedActionExecutionStartupOptions | null) => Layer.Layer<never, ServerDraining | import("./ServerLifecycle.js").ServerDrainHookConflict | GovernedActionExecutionStoreError | GovernedActionPolicyCatalogInvalid, import("effect/Crypto").Crypto | import("../persistence/Database.ts").Database | ServerLifecycle>;
+export {};
+//# sourceMappingURL=GovernedActionExecutionStartup.d.ts.map

package/dist/server/server/runtime/GovernedActionExecutionStartup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GovernedActionExecutionStartup.d.ts","sourceRoot":"","sources":["../../../../src/server/runtime/GovernedActionExecutionStartup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AAGzC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AAG9D,OAAO,EAEL,KAAK,oCAAoC,EACzC,KAAK,iCAAiC,EACvC,MAAM,yDAAyD,CAAA;AAChE,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,wDAAwD,CAAA;AAC/G,OAAO,EACL,KAAK,kCAAkC,EAExC,MAAM,yDAAyD,CAAA;AAKhE,OAAO,EAAyB,KAAK,uBAAuB,EAAE,MAAM,8CAA8C,CAAA;AAClH,OAAO,EAAE,KAAK,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAE3E,yFAAyF;AACzF,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAA;IAChD,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAClC;AAED,oFAAoF;AACpF,MAAM,MAAM,mCAAmC,GAC3C,iCAAiC,GACjC,kCAAkC,GAClC,cAAc,CAAA;AAElB,6FAA6F;AAC7F,MAAM,MAAM,mCAAmC,GAC3C;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7B;IACA,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,oCAAoC,CAAC,KAAK,CAAC,CAAA;IAC7D,QAAQ,CAAC,QAAQ,EAAE,iCAAiC,CAAA;CACrD,CAAA;AAaH,sFAAsF;AACtF,eAAO,MAAM,qCAAqC,GAAI,aAAa,WAAW,iKAe3E,CAAA;;AAEH,6EAA6E;AAC7E,qBAAa,8BAA+B,SAAQ,mCAGsB;CAAG;AAuB7E,0FAA0F;AAC1F,eAAO,MAAM,mCAAmC,GAC9C,SAAS,qCAAqC,GAAG,IAAI,oSAI9B,CAAA;AAEzB,uFAAuF;AACvF,eAAO,MAAM,kCAAkC,GAC7C,SAAS,qCAAqC,GAAG,IAAI,2QAIpD,CAAA"}