@knpkv/control-center 0.1.0

package/dist/server/domain/timeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline.d.ts","sourceRoot":"","sources":["../../../src/domain/timeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAIvC,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,kEAA0D,CAAA;AAExF,oCAAoC;AACpC,MAAM,MAAM,iBAAiB,GAAG,OAAO,iBAAiB,CAAC,IAAI,CAAA;AAE7D,gEAAgE;AAChE,eAAO,MAAM,kBAAkB,+EAAuE,CAAA;AAEtG,sCAAsC;AACtC,MAAM,MAAM,kBAAkB,GAAG,OAAO,kBAAkB,CAAC,IAAI,CAAA;AAE/D,gFAAgF;AAChF,eAAO,MAAM,eAAe,4FAAoF,CAAA;AAEhH,2CAA2C;AAC3C,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAEzD,0DAA0D;AAC1D,eAAO,MAAM,cAAc;;;EAGkB,CAAA;AAE7C,sCAAsC;AACtC,MAAM,MAAM,cAAc,GAAG,OAAO,cAAc,CAAC,IAAI,CAAA;AAEvD,gFAAgF;AAChF,eAAO,MAAM,aAAa;;;;;;;;;;;;EAYkB,CAAA;AAE5C,8BAA8B;AAC9B,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAA;AAIrD,sEAAsE;AACtE,eAAO,MAAM,wBAAwB;;;;;;;EAOkB,CAAA;AAEvD,kDAAkD;AAClD,MAAM,MAAM,wBAAwB,GAAG,OAAO,wBAAwB,CAAC,IAAI,CAAA;AAE3E,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB;;EAEkB,CAAA;AAErD,4CAA4C;AAC5C,MAAM,MAAM,sBAAsB,GAAG,OAAO,sBAAsB,CAAC,IAAI,CAAA;AAEvE,gFAAgF;AAChF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;EAIkB,CAAA;AAElD,mDAAmD;AACnD,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;AAEjE,iCAAiC;AACjC,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;EAKkB,CAAA;AAE3C,qCAAqC;AACrC,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAA"}

package/dist/server/domain/utcTimestamp.d.ts

@@ -0,0 +1,9 @@
+import { Schema } from "effect";
+/**
+ * Codec for instants that normalizes accepted ISO-8601 input to UTC and encodes
+ * it as a canonical UTC ISO-8601 string.
+ */
+export declare const UtcTimestamp: Schema.DateTimeUtcFromString;
+/** Decoded UTC instant used by Control Center domain records. */
+export type UtcTimestamp = typeof UtcTimestamp.Type;
+//# sourceMappingURL=utcTimestamp.d.ts.map

package/dist/server/domain/utcTimestamp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utcTimestamp.d.ts","sourceRoot":"","sources":["../../../src/domain/utcTimestamp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B;;;GAGG;AACH,eAAO,MAAM,YAAY,8BAEvB,CAAA;AAEF,iEAAiE;AACjE,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAA"}

package/dist/server/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Public package root for Control Center.
+ *
+ * @packageDocumentation
+ */
+export * from "./api/index.js";
+export * from "./domain/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA"}

package/dist/server/index.js

@@ -0,0 +1,7 @@
+import { $ as MAXIMUM_NORMALIZED_ISSUE_HISTORY, $n as readinessObservationIsDeliveryActivity, $t as MAX_READINESS_EVIDENCE_REFERENCES, A as EvidenceAttribution, An as ReadinessVerdict, Ar as GovernedActionAuthorizationId, At as ReleaseRelayAlgorithm, B as RelationshipConfidence, Bn as deriveReadinessStages, Br as RelationshipRepairProposalId, Bt as HumanActor, C as DeliveryEntityDetails, Cn as ReadinessReleaseRevision, Cr as EntityId, Ct as ReleaseServiceName, D as DeliveryEntityStatusGroup, Dn as ReadinessScope, Dr as EvidenceId, Dt as RELEASE_RELAY_V1_ALGORITHM, E as DeliveryEntityService, En as ReadinessRuleVersion, Er as EvidenceClaimId, Et as RELEASE_RELAY_V1_ADJECTIVES, F as EvidenceValue, Fn as compareReadinessText, Fr as PersonId, Ft as ReleaseRelaySymbolIndices, G as RelationshipScope, Gn as deriveReleaseReadinessVerdict, Gr as ShareId, Gt as RoleAssignment, H as RelationshipKind, Hn as deriveReleaseReadinessNextEvaluationAt, Hr as ReleaseId, Ht as PersonAvatar, I as EvidenceVerifier, In as deriveEnvironmentReadinessVerdict, Ir as PluginConnectionId, It as deriveReleaseRelay, J as evidenceRetentionEligibilityAt, Jn as readinessFactResult, Jt as BuildReadinessStage, K as ResolvedDeliveryNode, Kn as readinessDefinitionsShapeIsV1, Kr as WorkspaceId, Kt as RoleScope, L as LedgerActor, Ln as deriveReadinessFindings, Lr as ProviderAccountId, Lt as Actor, M as EvidenceItem, Mn as ReleaseReadinessCandidateIdentity, Mr as GovernedActionTransitionId, Mt as ReleaseRelayNoun, N as EvidencePredicate, Nn as ReleaseReadinessRollupInput, Nr as GraphNodeId, Nt as ReleaseRelayProjection, O as DeliveryNode, On as ReadinessSourceSummary, Or as FollowedResourceId, Ot as RELEASE_RELAY_V1_NOUNS, P as EvidenceRetention, Pn as VerifyReadinessStage, Pr as JobId, Pt as ReleaseRelaySymbolIndex, Q as MAXIMUM_NORMALIZED_ISSUE_FIX_VERSIONS, Qn as readinessObservationIsCurrent, Qt as EnvironmentReadinessSummary, R as LedgerRevision, Rn as deriveReadinessNextEvaluationAt, Rr as ReadinessAssessmentId, Rt as AgentActor, S as RelationshipRepairReviewDecision, Sn as ReadinessProgress, Sr as DomainEventId, St as ReleaseLifecycle, T as DeliveryEntityProjection, Tn as ReadinessRuleReference, Tr as EventCursor, Tt as RELEASE_RELAY_ALGORITHM, U as RelationshipLifecycle, Un as deriveReleaseReadinessSourceSummaries, Ur as RoleAssignmentId, Ut as PersonSourceIdentity, V as RelationshipEndpointKind, Vn as deriveReleaseReadinessFindings, Vr as RelationshipRepairReviewId, Vt as Person, W as RelationshipProvenance, Wn as deriveReleaseReadinessStages, Wr as SessionId, Wt as Role, X as MAXIMUM_NORMALIZED_ISSUE_COMMENTS, Xn as readinessFindingKey, Xt as EnvironmentReadinessCandidateIdentity, Y as MAXIMUM_NORMALIZED_ISSUE_COLLABORATORS, Yn as readinessFailureCode, Yt as EnvironmentReadinessAssessment, Z as MAXIMUM_NORMALIZED_ISSUE_COMPONENTS, Zn as readinessNonPositiveCode, Zt as EnvironmentReadinessEvaluationInput, _ as RelationshipRepairDisposition, _n as ReadinessFactResult, _r as SourceUrl, _t as PluginConfigurationFieldV1, a as PortfolioInvalidatedPayloadV1, an as ReadinessAssessment, ar as MaximumPluginPayloadBytes, at as NormalizedIssueComment, b as RelationshipRepairRationale, bn as ReadinessFindingCode, br as AgentId, bt as SemanticVersion, c as TimelineAgentJobDetail, cn as ReadinessDerivationVersion, cr as hasMaximumPluginJsonBytes, ct as NormalizedIssueHistoryEntry, d as TimelineEventDetail, dn as ReadinessFactDefinition, dr as PluginHealth, dt as NormalizedIssueTruncatedField, en as MAX_READINESS_FINDINGS, er as readinessObservationIsPositive, et as MAXIMUM_NORMALIZED_ISSUE_HISTORY_CHANGES, f as TimelineEventIdentifiers, fn as ReadinessFactEvaluation, fr as evaluateFreshnessAt, ft as NormalizedRelatedIssue, g as RelationshipRepairApplication, gn as ReadinessFactRequirement, gr as SourceRevision, gt as PluginCapabilityOfferV1, h as TimelineSourceKind, hn as ReadinessFactObservation, hr as Revision, ht as PluginCapabilityId, i as PortfolioInvalidatedEventV1, in as ReadinessArtifactRevision, ir as MaximumPluginDescriptorBytes, it as NormalizedIssueCollaborator, j as EvidenceClaim, jn as ReleaseReadinessAssessment, jr as GovernedActionId, jt as ReleaseRelayCodename, k as DeliveryRelationship, kn as ReadinessStages, kr as GovernedActionAttemptId, kt as ReleaseRelayAdjective, l as TimelineCursor, ln as ReadinessEvidenceReference, lr as Freshness, lt as NormalizedIssueNamedValue, m as TimelineService, mn as ReadinessFactKind, mr as ProviderId, mt as NegotiatedPluginDescriptorV1, n as DomainEventMetadataV1, nn as READINESS_DERIVATION_VERSION_V1, nr as readinessStagesAreEqual, nt as MAXIMUM_NORMALIZED_ISSUE_SUBTASKS, o as PortfolioInvalidationReason, on as ReadinessCandidateDigest, or as MaximumPluginSyncPageBytes, ot as NormalizedIssueFixVersion, p as TimelinePage, pn as ReadinessFactId, pr as NormalizationSchemaVersion, pt as NegotiatedPluginCapabilityV1, q as evidenceFreshnessAt, qn as readinessEvidenceIsCurrent, qt as derivePersonInitials, r as MaximumDomainEventPayloadBytes, rn as READINESS_RULE_VERSION_V1, rr as sortedReadinessUnique, rt as NormalizedIssueAttributes, s as TimelineActorKind, sn as ReadinessCandidateIdentity, sr as PluginPayloadJson, st as NormalizedIssueHistoryChange, t as DomainEventCorrelationId, tn as ProductionReadinessStage, tr as readinessPolicyShapeIsV1, tt as MAXIMUM_NORMALIZED_ISSUE_LABELS, u as TimelineEvent, un as ReadinessEvidenceSource, ur as PluginFailureClass, ut as NormalizedIssueProject, v as RelationshipRepairProposal, vn as ReadinessFactState, vr as VendorImmutableId, vt as PluginDescriptorV1, w as DeliveryEntityKind, wn as ReadinessRuleId, wr as EnvironmentId, wt as ReleaseVersion, x as RelationshipRepairReview, xn as ReadinessFindingSubject, xr as AgentThreadId, xt as Release, y as RelationshipRepairProposalOrigin, yn as ReadinessFinding, yr as UtcTimestamp, yt as PluginId, z as RELATIONSHIP_ENDPOINT_MATRIX_V1, zn as deriveReadinessSourceSummaries, zr as RelationshipId, zt as AssignmentLifecycle } from "./assets/domainEvent-x7yeq-gU.js";
+import { $ as PortfolioReadinessSummary, $t as PairSessionResponse, A as RelationshipRepairProposalDraft, At as PluginConfiguration, B as DurableAgentProviderId, Bt as PluginOverviewResponse, C as CreateRelationshipRepairProposalRequest, Ct as CreatePluginConnectionsRequest, D as RelationshipHistoryInspection, Dt as ExchangeAtlassianOAuthGrantRequest, E as InspectedEntityProjection, Et as DiscoveredAwsProfile, F as AgentApiGroup, Ft as PluginConnectionSetupFailureClass, G as ReleaseAgentThreadCursor, Gt as PluginsApiGroup, H as EnqueueReleaseAgentJobResponse, Ht as PluginServiceCatalogField, I as AgentHistoryMessage, It as PluginConnectionSummary, J as ReleaseAgentThreadEventLimitFromString, Jt as CsrfToken, K as ReleaseAgentThreadCursorFromString, Kt as RedactedPluginConfigurationValue, L as AgentPrompt, Lt as PluginConnectionTestResult, M as WorkspaceEntityActivity, Mt as PluginConfigurationMetadata, N as WorkspaceEntityGraph, Nt as PluginConfigurationPatchValue, O as RelationshipRepairCandidate, Ot as OpaqueSecretReference, P as WorkspaceEntityInspection, Pt as PluginConnectionIdentity, Q as PortfolioApiGroup, Qt as PairSessionRequest, R as AgentProvider, Rt as PluginHealthResponse, S as StreamResetRequiredLiveEvent, St as CreatePluginConnectionValue, T as EvidenceInspection, Tt as DiscoveredAtlassianProfile, U as ReleaseAgentHistoryMessage, Ut as PluginSynchronizationResult, V as EnqueueReleaseAgentJobRequest, Vt as PluginServiceCatalogEntry, W as ReleaseAgentProvider, Wt as PluginSynchronizationState, X as ReleaseAgentTurnRequest, Xt as CurrentSessionResponse, Y as ReleaseAgentThreadPage, Yt as CurrentSession, Z as ReleaseAgentTurnResponse, Zt as MutationCsrf, _ as PortfolioInvalidatedLiveEvent, _t as CompleteAtlassianOAuthGrantRequest, a as TimelineExportResponseHeaders, an as SessionSummary, at as AtlassianOAuthClientConfiguration, b as StreamHeartbeatLiveEvent, bt as CreatePluginConnectionRequest, c as CreateAuthorizedShareRequest, cn as CorrelationResponseHeaders, ct as AtlassianOAuthGrantStartResponse, d as MediaResponseHeaders, dn as NotFoundApiError, dt as AtlassianOAuthSite, en as PairingCode, et as PortfolioRelationshipCounts, f as OpaqueMediaId, fn as PayloadTooLargeApiError, ft as AtlassianProfileDiscoveryResponse, g as LiveEventsApiGroup, gn as UnauthorizedApiError, gt as AwsServiceResourceDiscovery, h as EventCursorFromString, hn as ServiceUnavailableApiError, ht as AwsResourceDiscoveryResponse, i as TimelineExportLimitFromString, in as SessionMutationAuth, it as PortfolioSnapshot, j as ReleaseDeliveryGraphInspection, jt as PluginConfigurationKey, k as RelationshipRepairCandidates, kt as PatchPluginConfigurationRequest, l as SharesApiGroup, ln as ForbiddenApiError, lt as AtlassianOAuthProvider, m as ControlCenterLiveEvent, mn as RequestTimedOutApiError, mt as AwsResourceDiscoveryRequest, n as TimelineApiGroup, nn as SessionCookieAuth, nt as PortfolioReleaseRole, o as AuthorizedShareResolution, on as ConflictApiError, ot as AtlassianOAuthGrantExchangeResponse, p as SafeMediaContentType, pn as RateLimitedApiError, pt as AwsProfileDiscoveryResponse, q as ReleaseAgentThreadEvent, qt as SetPluginConnectionEnabledRequest, r as TimelineExportContentType, rn as SessionListResponse, rt as PortfolioReleaseSummary, s as AuthorizedShareSummary, sn as CorrelationId, st as AtlassianOAuthGrantId, t as ControlCenterApi, tn as SessionApiGroup, tt as PortfolioReleaseCollaborator, u as MediaApiGroup, un as InvalidRequestApiError, ut as AtlassianOAuthProviderIntent, v as PortfolioSnapshotLiveEvent, vt as CreateAtlassianOAuthGrantRequest, w as DeliveryGraphApiGroup, wt as CreatePluginConnectionsResponse, x as StreamResetRequired, xt as CreatePluginConnectionResponse, y as StreamHeartbeat, yt as CreatePluginConnectionBatchResult, zt as PluginListResponse } from "./assets/controlCenterApi-tZPvRPRH.js";
+import { makeControlCenterApiClient, makeControlCenterApiUrls } from "./api/index.js";
+import { $ as GovernedActionProposalOrigin, A as GovernedActionAuthorizationBindingInput, At as PluginSyncPageV1, B as GovernedActionEnvelopeMaterialV1, C as GovernedActionTransitionMaterialV1, Ct as PluginCheckpointV1, D as reduceGovernedActionState, Dt as PluginEventId, E as isGovernedActionTerminalState, Et as PluginEntityType, F as GovernedActionAttemptDigest, Ft as AuthorizedShareTarget, G as GovernedActionIdempotencyKey, H as GovernedActionEvidenceReference, I as GovernedActionAttemptV1, J as GovernedActionPolicyBinding, K as GovernedActionPluginConnectionAuthorityDigest, L as GovernedActionAuthorizationDigest, M as governedActionAuthorizationMatchesTransition, Mt as ReadPluginEntityRequestV1, N as governedActionAuthorizationMismatches, Nt as ReadPluginEntityResultV1, O as GovernedActionAuthorityBindingInput, Ot as PluginPageCursorV1, P as governedActionPermissionGrants, Pt as AuthorizedShareGrant, Q as GovernedActionPolicyId, R as GovernedActionAuthorizationV1, S as GovernedActionTransitionDigest, St as NormalizedPluginEventV1, T as GovernedActionUnknownOutcome, Tt as PluginEntityReferenceV1, U as GovernedActionEvidenceSet, V as GovernedActionEnvelopeV1, W as GovernedActionEvidenceSetDigest, X as GovernedActionPolicyEvaluationDigest, Y as GovernedActionPolicyDigest, Z as GovernedActionPolicyEvaluationV1, _ as GovernedActionDenialReason, _t as ReadyPluginActionPreflightV1, a as ReleaseReadinessCandidateMaterial, at as PluginActionCancellationResultV1, b as GovernedActionTransitionCause, bt as DiffInventoryPageRequestV1, c as normalizeReadinessRuleMaterial, ct as PluginActionPreflightV1, d as PluginDiscoveryV1, dt as PluginActionReconciliationRequestV1, et as GovernedActionTargetSnapshotV1, f as GovernedActionLifecycleHeadV1, ft as PluginActionReconciliationResultV1, g as GovernedActionCommandId, gt as ProposePluginActionRequestV1, h as GovernedActionCommandDigest, ht as PluginTerminalProviderReceiptV1, i as ReadinessRuleMaterial, it as PluginActionCancellationRequestV1, j as governedActionAuthorityMismatches, jt as PluginSyncRequestV1, k as GovernedActionAuthorityMismatch, kt as PluginRelativePathV1, l as normalizeReleaseReadinessCandidateMaterial, lt as PluginActionProposalV1, m as advanceGovernedActionLifecycle, mt as PluginProviderReceiptV1, n as summarizeEnvironmentReadiness, nt as BlockedPluginActionPreflightV1, o as ReleaseReadinessChildMaterial, ot as PluginActionDispatchResultV1, p as GovernedActionProviderLineage, pt as PluginProviderOperationId, q as GovernedActionPluginConnectionRevision, r as EnvironmentReadinessCandidateMaterial, rt as PluginAcceptedProviderReceiptV1, s as normalizeEnvironmentReadinessCandidateMaterial, st as PluginActionPayloadDigest, t as rollUpReleaseReadiness, tt as AuthorizedPluginActionV1, u as PluginDiscoveryEndpointV1, ut as PluginActionReconciliationKey, v as GovernedActionOutcomeSource, vt as DiffContentRangeRequestV1, w as GovernedActionTransitionV1, wt as PluginDiffInventoryEntryV1, x as GovernedActionTransitionCommand, xt as DiffInventoryPageV1, y as GovernedActionState, yt as DiffContentRangeV1, z as GovernedActionEnvelopeDigest } from "./assets/readiness-CzU3vjYQ.js";
+import { n as firstPartyServiceIdentities, r as firstPartyServiceIdentityByProvider, t as FirstPartyServiceIdentity } from "./assets/firstPartyServices-Y41P8uke.js";
+import { assessEnvironmentReadiness } from "./domain/index.js";
+export { Actor, AgentActor, AgentApiGroup, AgentHistoryMessage, AgentId, AgentPrompt, AgentProvider, AgentThreadId, AssignmentLifecycle, AtlassianOAuthClientConfiguration, AtlassianOAuthGrantExchangeResponse, AtlassianOAuthGrantId, AtlassianOAuthGrantStartResponse, AtlassianOAuthProvider, AtlassianOAuthProviderIntent, AtlassianOAuthSite, AtlassianProfileDiscoveryResponse, AuthorizedPluginActionV1, AuthorizedShareGrant, AuthorizedShareResolution, AuthorizedShareSummary, AuthorizedShareTarget, AwsProfileDiscoveryResponse, AwsResourceDiscoveryRequest, AwsResourceDiscoveryResponse, AwsServiceResourceDiscovery, BlockedPluginActionPreflightV1, BuildReadinessStage, CompleteAtlassianOAuthGrantRequest, ConflictApiError, ControlCenterApi, ControlCenterLiveEvent, CorrelationId, CorrelationResponseHeaders, CreateAtlassianOAuthGrantRequest, CreateAuthorizedShareRequest, CreatePluginConnectionBatchResult, CreatePluginConnectionRequest, CreatePluginConnectionResponse, CreatePluginConnectionValue, CreatePluginConnectionsRequest, CreatePluginConnectionsResponse, CreateRelationshipRepairProposalRequest, CsrfToken, CurrentSession, CurrentSessionResponse, DeliveryEntityDetails, DeliveryEntityKind, DeliveryEntityProjection, DeliveryEntityService, DeliveryEntityStatusGroup, DeliveryGraphApiGroup, DeliveryNode, DeliveryRelationship, DiffContentRangeRequestV1, DiffContentRangeV1, DiffInventoryPageRequestV1, DiffInventoryPageV1, DiscoveredAtlassianProfile, DiscoveredAwsProfile, DomainEventCorrelationId, DomainEventId, DomainEventMetadataV1, DurableAgentProviderId, EnqueueReleaseAgentJobRequest, EnqueueReleaseAgentJobResponse, EntityId, EnvironmentId, EnvironmentReadinessAssessment, EnvironmentReadinessCandidateIdentity, EnvironmentReadinessCandidateMaterial, EnvironmentReadinessEvaluationInput, EnvironmentReadinessSummary, EventCursor, EventCursorFromString, EvidenceAttribution, EvidenceClaim, EvidenceClaimId, EvidenceId, EvidenceInspection, EvidenceItem, EvidencePredicate, EvidenceRetention, EvidenceValue, EvidenceVerifier, ExchangeAtlassianOAuthGrantRequest, FirstPartyServiceIdentity, FollowedResourceId, ForbiddenApiError, Freshness, GovernedActionAttemptDigest, GovernedActionAttemptId, GovernedActionAttemptV1, GovernedActionAuthorityBindingInput, GovernedActionAuthorityMismatch, GovernedActionAuthorizationBindingInput, GovernedActionAuthorizationDigest, GovernedActionAuthorizationId, GovernedActionAuthorizationV1, GovernedActionCommandDigest, GovernedActionCommandId, GovernedActionDenialReason, GovernedActionEnvelopeDigest, GovernedActionEnvelopeMaterialV1, GovernedActionEnvelopeV1, GovernedActionEvidenceReference, GovernedActionEvidenceSet, GovernedActionEvidenceSetDigest, GovernedActionId, GovernedActionIdempotencyKey, GovernedActionLifecycleHeadV1, GovernedActionOutcomeSource, GovernedActionPluginConnectionAuthorityDigest, GovernedActionPluginConnectionRevision, GovernedActionPolicyBinding, GovernedActionPolicyDigest, GovernedActionPolicyEvaluationDigest, GovernedActionPolicyEvaluationV1, GovernedActionPolicyId, GovernedActionProposalOrigin, GovernedActionProviderLineage, GovernedActionState, GovernedActionTargetSnapshotV1, GovernedActionTransitionCause, GovernedActionTransitionCommand, GovernedActionTransitionDigest, GovernedActionTransitionId, GovernedActionTransitionMaterialV1, GovernedActionTransitionV1, GovernedActionUnknownOutcome, GraphNodeId, HumanActor, InspectedEntityProjection, InvalidRequestApiError, JobId, LedgerActor, LedgerRevision, LiveEventsApiGroup, MAXIMUM_NORMALIZED_ISSUE_COLLABORATORS, MAXIMUM_NORMALIZED_ISSUE_COMMENTS, MAXIMUM_NORMALIZED_ISSUE_COMPONENTS, MAXIMUM_NORMALIZED_ISSUE_FIX_VERSIONS, MAXIMUM_NORMALIZED_ISSUE_HISTORY, MAXIMUM_NORMALIZED_ISSUE_HISTORY_CHANGES, MAXIMUM_NORMALIZED_ISSUE_LABELS, MAXIMUM_NORMALIZED_ISSUE_SUBTASKS, MAX_READINESS_EVIDENCE_REFERENCES, MAX_READINESS_FINDINGS, MaximumDomainEventPayloadBytes, MaximumPluginDescriptorBytes, MaximumPluginPayloadBytes, MaximumPluginSyncPageBytes, MediaApiGroup, MediaResponseHeaders, MutationCsrf, NegotiatedPluginCapabilityV1, NegotiatedPluginDescriptorV1, NormalizationSchemaVersion, NormalizedIssueAttributes, NormalizedIssueCollaborator, NormalizedIssueComment, NormalizedIssueFixVersion, NormalizedIssueHistoryChange, NormalizedIssueHistoryEntry, NormalizedIssueNamedValue, NormalizedIssueProject, NormalizedIssueTruncatedField, NormalizedPluginEventV1, NormalizedRelatedIssue, NotFoundApiError, OpaqueMediaId, OpaqueSecretReference, PairSessionRequest, PairSessionResponse, PairingCode, PatchPluginConfigurationRequest, PayloadTooLargeApiError, Person, PersonAvatar, PersonId, PersonSourceIdentity, PluginAcceptedProviderReceiptV1, PluginActionCancellationRequestV1, PluginActionCancellationResultV1, PluginActionDispatchResultV1, PluginActionPayloadDigest, PluginActionPreflightV1, PluginActionProposalV1, PluginActionReconciliationKey, PluginActionReconciliationRequestV1, PluginActionReconciliationResultV1, PluginCapabilityId, PluginCapabilityOfferV1, PluginCheckpointV1, PluginConfiguration, PluginConfigurationFieldV1, PluginConfigurationKey, PluginConfigurationMetadata, PluginConfigurationPatchValue, PluginConnectionId, PluginConnectionIdentity, PluginConnectionSetupFailureClass, PluginConnectionSummary, PluginConnectionTestResult, PluginDescriptorV1, PluginDiffInventoryEntryV1, PluginDiscoveryEndpointV1, PluginDiscoveryV1, PluginEntityReferenceV1, PluginEntityType, PluginEventId, PluginFailureClass, PluginHealth, PluginHealthResponse, PluginId, PluginListResponse, PluginOverviewResponse, PluginPageCursorV1, PluginPayloadJson, PluginProviderOperationId, PluginProviderReceiptV1, PluginRelativePathV1, PluginServiceCatalogEntry, PluginServiceCatalogField, PluginSyncPageV1, PluginSyncRequestV1, PluginSynchronizationResult, PluginSynchronizationState, PluginTerminalProviderReceiptV1, PluginsApiGroup, PortfolioApiGroup, PortfolioInvalidatedEventV1, PortfolioInvalidatedLiveEvent, PortfolioInvalidatedPayloadV1, PortfolioInvalidationReason, PortfolioReadinessSummary, PortfolioRelationshipCounts, PortfolioReleaseCollaborator, PortfolioReleaseRole, PortfolioReleaseSummary, PortfolioSnapshot, PortfolioSnapshotLiveEvent, ProductionReadinessStage, ProposePluginActionRequestV1, ProviderAccountId, ProviderId, READINESS_DERIVATION_VERSION_V1, READINESS_RULE_VERSION_V1, RELATIONSHIP_ENDPOINT_MATRIX_V1, RELEASE_RELAY_ALGORITHM, RELEASE_RELAY_V1_ADJECTIVES, RELEASE_RELAY_V1_ALGORITHM, RELEASE_RELAY_V1_NOUNS, RateLimitedApiError, ReadPluginEntityRequestV1, ReadPluginEntityResultV1, ReadinessArtifactRevision, ReadinessAssessment, ReadinessAssessmentId, ReadinessCandidateDigest, ReadinessCandidateIdentity, ReadinessDerivationVersion, ReadinessEvidenceReference, ReadinessEvidenceSource, ReadinessFactDefinition, ReadinessFactEvaluation, ReadinessFactId, ReadinessFactKind, ReadinessFactObservation, ReadinessFactRequirement, ReadinessFactResult, ReadinessFactState, ReadinessFinding, ReadinessFindingCode, ReadinessFindingSubject, ReadinessProgress, ReadinessReleaseRevision, ReadinessRuleId, ReadinessRuleMaterial, ReadinessRuleReference, ReadinessRuleVersion, ReadinessScope, ReadinessSourceSummary, ReadinessStages, ReadinessVerdict, ReadyPluginActionPreflightV1, RedactedPluginConfigurationValue, RelationshipConfidence, RelationshipEndpointKind, RelationshipHistoryInspection, RelationshipId, RelationshipKind, RelationshipLifecycle, RelationshipProvenance, RelationshipRepairApplication, RelationshipRepairCandidate, RelationshipRepairCandidates, RelationshipRepairDisposition, RelationshipRepairProposal, RelationshipRepairProposalDraft, RelationshipRepairProposalId, RelationshipRepairProposalOrigin, RelationshipRepairRationale, RelationshipRepairReview, RelationshipRepairReviewDecision, RelationshipRepairReviewId, RelationshipScope, Release, ReleaseAgentHistoryMessage, ReleaseAgentProvider, ReleaseAgentThreadCursor, ReleaseAgentThreadCursorFromString, ReleaseAgentThreadEvent, ReleaseAgentThreadEventLimitFromString, ReleaseAgentThreadPage, ReleaseAgentTurnRequest, ReleaseAgentTurnResponse, ReleaseDeliveryGraphInspection, ReleaseId, ReleaseLifecycle, ReleaseReadinessAssessment, ReleaseReadinessCandidateIdentity, ReleaseReadinessCandidateMaterial, ReleaseReadinessChildMaterial, ReleaseReadinessRollupInput, ReleaseRelayAdjective, ReleaseRelayAlgorithm, ReleaseRelayCodename, ReleaseRelayNoun, ReleaseRelayProjection, ReleaseRelaySymbolIndex, ReleaseRelaySymbolIndices, ReleaseServiceName, ReleaseVersion, RequestTimedOutApiError, ResolvedDeliveryNode, Revision, Role, RoleAssignment, RoleAssignmentId, RoleScope, SafeMediaContentType, SemanticVersion, ServiceUnavailableApiError, SessionApiGroup, SessionCookieAuth, SessionId, SessionListResponse, SessionMutationAuth, SessionSummary, SetPluginConnectionEnabledRequest, ShareId, SharesApiGroup, SourceRevision, SourceUrl, StreamHeartbeat, StreamHeartbeatLiveEvent, StreamResetRequired, StreamResetRequiredLiveEvent, TimelineActorKind, TimelineAgentJobDetail, TimelineApiGroup, TimelineCursor, TimelineEvent, TimelineEventDetail, TimelineEventIdentifiers, TimelineExportContentType, TimelineExportLimitFromString, TimelineExportResponseHeaders, TimelinePage, TimelineService, TimelineSourceKind, UnauthorizedApiError, UtcTimestamp, VendorImmutableId, VerifyReadinessStage, WorkspaceEntityActivity, WorkspaceEntityGraph, WorkspaceEntityInspection, WorkspaceId, advanceGovernedActionLifecycle, assessEnvironmentReadiness, compareReadinessText, deriveEnvironmentReadinessVerdict, derivePersonInitials, deriveReadinessFindings, deriveReadinessNextEvaluationAt, deriveReadinessSourceSummaries, deriveReadinessStages, deriveReleaseReadinessFindings, deriveReleaseReadinessNextEvaluationAt, deriveReleaseReadinessSourceSummaries, deriveReleaseReadinessStages, deriveReleaseReadinessVerdict, deriveReleaseRelay, evaluateFreshnessAt, evidenceFreshnessAt, evidenceRetentionEligibilityAt, firstPartyServiceIdentities, firstPartyServiceIdentityByProvider, governedActionAuthorityMismatches, governedActionAuthorizationMatchesTransition, governedActionAuthorizationMismatches, governedActionPermissionGrants, hasMaximumPluginJsonBytes, isGovernedActionTerminalState, makeControlCenterApiClient, makeControlCenterApiUrls, normalizeEnvironmentReadinessCandidateMaterial, normalizeReadinessRuleMaterial, normalizeReleaseReadinessCandidateMaterial, readinessDefinitionsShapeIsV1, readinessEvidenceIsCurrent, readinessFactResult, readinessFailureCode, readinessFindingKey, readinessNonPositiveCode, readinessObservationIsCurrent, readinessObservationIsDeliveryActivity, readinessObservationIsPositive, readinessPolicyShapeIsV1, readinessStagesAreEqual, reduceGovernedActionState, rollUpReleaseReadiness, sortedReadinessUnique, summarizeEnvironmentReadiness };

package/dist/server/server/DataRootProtocol.d.ts

@@ -0,0 +1,80 @@
+import * as Crypto from "effect/Crypto";
+import * as Effect from "effect/Effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Path from "effect/Path";
+import * as Schema from "effect/Schema";
+import { PersistenceConfigError } from "./persistence/errors.js";
+import { type PersistenceConfig } from "./persistence/PersistenceConfig.js";
+import { SecretRoot } from "./secrets/SecretStore.js";
+export interface ControlCenterDataPaths {
+    readonly dataRoot: string;
+    readonly persistenceConfig: PersistenceConfig;
+    readonly secretRoot: SecretRoot;
+}
+export declare const DATA_ROOT_DIRECTORY_MODE = 448;
+export declare const DATA_ROOT_MARKER_MODE = 384;
+export declare const DATA_ROOT_MARKER_NAME = ".control-center-root";
+export declare const DATA_ROOT_MARKER_V1_CONTENT = "@knpkv/control-center:data-root:v1\n";
+export declare const DATA_ROOT_MARKER_V2_PREFIX = "@knpkv/control-center:data-root:v2\nclaim-basename:";
+export declare const DATA_ROOT_MARKER_MAX_BYTES = 8192;
+export declare const DATA_ROOT_PENDING_MARKER_PREFIX = ".control-center-root.pending-";
+export declare const DATA_ROOT_STAGING_PREFIX = ".control-center-incoming-";
+export declare const dataRootConfigurationError: () => PersistenceConfigError;
+export declare const mapDataRootConfigurationError: <Value, Failure, Requirements>(effect: Effect.Effect<Value, Failure, Requirements>) => Effect.Effect<Value, PersistenceConfigError, Requirements>;
+export declare const boundDataRootMarkerContent: (claimBasename: string, targetBasename: string) => string;
+declare const FreshDataRootClaimConflict_base: Schema.Class<FreshDataRootClaimConflict, Schema.TaggedStruct<"FreshDataRootClaimConflict", {
+    readonly reason: Schema.Literal<"target-raced">;
+}>, import("effect/Cause").YieldableError>;
+export declare class FreshDataRootClaimConflict extends FreshDataRootClaimConflict_base {
+}
+declare const DataRootProtocolError_base: Schema.Class<DataRootProtocolError, Schema.TaggedStruct<"DataRootProtocolError", {
+    readonly reason: Schema.Literals<readonly ["cleanup-uncertain", "invalid-path", "parent-changed", "post-claim-sync-failed", "storage"]>;
+}>, import("effect/Cause").YieldableError>;
+export declare class DataRootProtocolError extends DataRootProtocolError_base {
+}
+export interface DataRootClaimLocation {
+    readonly canonicalDataRoot: string;
+    readonly canonicalParent: string;
+    readonly configuredDataRoot: string;
+    readonly parent: string;
+    readonly parentInfo: FileSystem.File.Info;
+}
+/** Constrained writer for files owned by one unclaimed data-root staging tree. */
+export interface StagedDataRootWriter {
+    readonly writeFile: (pathSegments: ReadonlyArray<string>, bytes: Uint8Array) => Effect.Effect<void, DataRootProtocolError>;
+}
+/** Internal writer variant for a caller that relinquishes an already-owned buffer. */
+export interface TransferringStagedDataRootWriter extends StagedDataRootWriter {
+    /** The caller must not read or mutate `bytes` after invoking this operation. */
+    readonly writeTransferredFile: (pathSegments: ReadonlyArray<string>, bytes: Uint8Array) => Effect.Effect<void, DataRootProtocolError>;
+}
+/** Validate only a configured claim path; generated operational staging paths use a separate decoder. */
+export declare const validateConfiguredDataRootClaim: (configuredDataRoot: string) => Effect.Effect<string, DataRootProtocolError, Path.Path>;
+/** Capture the canonical prospective target and stable identity of its existing parent. */
+export declare const inspectFreshDataRootClaim: (configuredDataRoot: string) => Effect.Effect<{
+    canonicalDataRoot: string;
+    canonicalParent: string;
+    configuredDataRoot: string;
+    parent: string;
+    parentInfo: FileSystem.File.Info;
+}, DataRootProtocolError, FileSystem.FileSystem | Path.Path>;
+/** Resolve a not-yet-created claim through its nearest existing canonical ancestor without writing. */
+export declare const canonicalProspectiveDataRoot: (configuredDataRoot: string) => Effect.Effect<string, DataRootProtocolError, FileSystem.FileSystem | Path.Path>;
+/** Durably create only missing configured-parent segments without changing existing ancestor modes. */
+export declare const ensureFreshDataRootParent: (configuredDataRoot: string) => Effect.Effect<undefined, DataRootProtocolError, FileSystem.FileSystem | Path.Path>;
+export declare const syncDataRootPath: (target: string) => Effect.Effect<void, PersistenceConfigError, FileSystem.FileSystem>;
+export declare const publishDataRootMarker: (dataRoot: string, claimBasename: string, targetBasename: string) => Effect.Effect<void, PersistenceConfigError, Crypto.Crypto | FileSystem.FileSystem | Path.Path>;
+export declare const publishFreshDataRootClaim: <Failure, Requirements>(location: DataRootClaimLocation, rejectExistingClaim: boolean, initialize: (writer: TransferringStagedDataRootWriter) => Effect.Effect<void, Failure, Requirements>) => Effect.Effect<ControlCenterDataPaths, FreshDataRootClaimConflict | DataRootProtocolError | Failure, Crypto.Crypto | FileSystem.FileSystem | Path.Path | Requirements>;
+export declare const decodeControlCenterDataPaths: (configuredDataRoot: string) => Effect.Effect<ControlCenterDataPaths, PersistenceConfigError, Path.Path>;
+export declare const decodeOperationalDataPaths: (dataRoot: string) => Effect.Effect<{
+    dataRoot: string;
+    persistenceConfig: Schema.Struct.ReadonlySide<{
+        readonly blobRoot: Schema.brand<Schema.String, "BlobRoot">;
+        readonly busyTimeoutMilliseconds: Schema.Literal<5000>;
+        readonly databaseUrl: Schema.brand<Schema.String, "LocalDatabaseUrl">;
+        readonly maxConnections: Schema.Literal<1>;
+    }, "Type">;
+    secretRoot: string & import("effect/Brand").Brand<"SecretRoot">;
+}, PersistenceConfigError, Path.Path>;
+export {};
+//# sourceMappingURL=DataRootProtocol.d.ts.map

package/dist/server/server/DataRootProtocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DataRootProtocol.d.ts","sourceRoot":"","sources":["../../../src/server/DataRootProtocol.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAGvC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAE/C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AAGnC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAIvC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAChE,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,oCAAoC,CAAA;AACpG,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAErD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAA;IAC7C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAChC;AAED,eAAO,MAAM,wBAAwB,MAAQ,CAAA;AAC7C,eAAO,MAAM,qBAAqB,MAAQ,CAAA;AAC1C,eAAO,MAAM,qBAAqB,yBAAyB,CAAA;AAC3D,eAAO,MAAM,2BAA2B,yCAAyC,CAAA;AACjF,eAAO,MAAM,0BAA0B,wDAAwD,CAAA;AAC/F,eAAO,MAAM,0BAA0B,OAAQ,CAAA;AAC/C,eAAO,MAAM,+BAA+B,kCAAsC,CAAA;AAClF,eAAO,MAAM,wBAAwB,8BAA8B,CAAA;AA0BnE,eAAO,MAAM,0BAA0B,QAAO,sBAG1C,CAAA;AAEJ,eAAO,MAAM,6BAA6B,GACxC,KAAK,EACL,OAAO,EACP,YAAY,oHAKZ,CAAA;AAEF,eAAO,MAAM,0BAA0B,GAAI,eAAe,MAAM,EAAE,gBAAgB,MAAM,KAAG,MAGrF,CAAA;;;;AAEN,qBAAa,0BAA2B,SAAQ,+BAG/C;CAAG;;;;AAEJ,qBAAa,qBAAsB,SAAQ,0BAW1C;CAAG;AAEJ,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAA;CAC1C;AAED,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,CAClB,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,EACnC,KAAK,EAAE,UAAU,KACd,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;CAChD;AAED,sFAAsF;AACtF,MAAM,WAAW,gCAAiC,SAAQ,oBAAoB;IAC5E,gFAAgF;IAChF,QAAQ,CAAC,oBAAoB,EAAE,CAC7B,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,EACnC,KAAK,EAAE,UAAU,KACd,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAA;CAChD;AA6QD,yGAAyG;AACzG,eAAO,MAAM,+BAA+B,yFAa1C,CAAA;AAEF,2FAA2F;AAC3F,eAAO,MAAM,yBAAyB;;;;;;4DAiBpC,CAAA;AAEF,uGAAuG;AACvG,eAAO,MAAM,4BAA4B,iHAgBvC,CAAA;AAEF,uGAAuG;AACvG,eAAO,MAAM,yBAAyB,oHAwBpC,CAAA;AAaF,eAAO,MAAM,gBAAgB,wFAO3B,CAAA;AAEF,eAAO,MAAM,qBAAqB,qKA4BhC,CAAA;AAEF,eAAO,MAAM,yBAAyB,GACpC,OAAO,EACP,YAAY,sFAKF,gCAAgC,KACrC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,0KA0S/C,CAAA;AAEF,eAAO,MAAM,4BAA4B,0GAQvC,CAAA;AAEF,eAAO,MAAM,0BAA0B;;;;;;;;;qCAcrC,CAAA"}

package/dist/server/server/agent/AgentJobWorker.d.ts

@@ -0,0 +1,48 @@
+import * as Context from "effect/Context";
+import * as Crypto from "effect/Crypto";
+import type * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import type { JobId, WorkspaceId } from "../../domain/identifiers.js";
+import { type AgentLeaseOwner } from "../persistence/repositories/agentJobModels.js";
+import { AgentJobRepository } from "../persistence/repositories/agentJobRepository.js";
+import { AgentRuntimeRegistry } from "./AgentRuntimeRegistry.js";
+/** Worker lease policy fixed when the server composes the module. */
+export interface AgentJobWorkerOptions {
+    readonly leaseDuration: Duration.Input;
+    readonly leaseOwner: AgentLeaseOwner;
+}
+/** One run-once observation: no work, or one durably terminal job. */
+export type AgentJobWorkerRunResult = {
+    readonly _tag: "idle";
+} | {
+    readonly _tag: "completed";
+    readonly jobId: JobId;
+    readonly outcome: "success" | "cancelled" | "max-steps";
+} | {
+    readonly _tag: "failed";
+    readonly jobId: JobId;
+};
+declare const makeAgentJobWorker: Effect.Effect<(options: AgentJobWorkerOptions) => {
+    runOnce: (workspaceId: string & import("effect/Brand").Brand<"WorkspaceId">) => Effect.Effect<{
+        _tag: "failed";
+        jobId: string & import("effect/Brand").Brand<"JobId">;
+    } | {
+        _tag: "completed";
+        jobId: string & import("effect/Brand").Brand<"JobId">;
+        outcome: "cancelled" | "success" | "max-steps";
+    } | {
+        _tag: "idle";
+    }, unknown, never>;
+}, never, Crypto.Crypto | AgentJobRepository | AgentRuntimeRegistry>;
+export interface AgentJobWorkerService {
+    readonly runOnce: (workspaceId: WorkspaceId) => ReturnType<ReturnType<Effect.Success<typeof makeAgentJobWorker>>["runOnce"]>;
+}
+declare const AgentJobWorker_base: Context.ServiceClass<AgentJobWorker, "@knpkv/control-center/server/agent/AgentJobWorker", AgentJobWorkerService>;
+/** Deep run-once module owning claim, selection, execution, and terminal persistence. */
+export declare class AgentJobWorker extends AgentJobWorker_base {
+}
+/** Captures worker policy while acquiring persistence, crypto, and runtime selection. */
+export declare const agentJobWorkerLayer: (options: AgentJobWorkerOptions) => Layer.Layer<AgentJobWorker, never, AgentJobRepository | AgentRuntimeRegistry | Crypto.Crypto>;
+export {};
+//# sourceMappingURL=AgentJobWorker.d.ts.map

package/dist/server/server/agent/AgentJobWorker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentJobWorker.d.ts","sourceRoot":"","sources":["../../../../src/server/agent/AgentJobWorker.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAChD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAOrC,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AACrE,OAAO,EAEL,KAAK,eAAe,EAGrB,MAAM,+CAA+C,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAA;AACtF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAEhE,qEAAqE;AACrE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAA;IACtC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAA;CACrC;AAED,sEAAsE;AACtE,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IACA,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,WAAW,GAAG,WAAW,CAAA;CACxD,GACC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAA;AAqFtD,QAAA,MAAM,kBAAkB,0BA6GL,qBAAqB;;;;;;;;;;;oEAkBtC,CAAA;AAEF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,CAChB,WAAW,EAAE,WAAW,KACrB,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;CAClF;;AAED,yFAAyF;AACzF,qBAAa,cAAe,SAAQ,mBAEnC;CAAG;AAEJ,yFAAyF;AACzF,eAAO,MAAM,mBAAmB,GAC9B,SAAS,qBAAqB,KAC7B,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,kBAAkB,GAAG,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAI5F,CAAA"}

package/dist/server/server/agent/AgentRuntimeRegistry.d.ts

@@ -0,0 +1,17 @@
+/** Provider-neutral selector seam for server-owned agent runtimes. @module */
+import type { AgentProviderError, AgentProviderId, AgentRuntimeService } from "@knpkv/ai-runtime";
+import * as Context from "effect/Context";
+import type * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+/** Selects one configured runtime without exposing provider conditionals to workers. */
+export interface AgentRuntimeRegistryService {
+    readonly select: (providerId: AgentProviderId) => Effect.Effect<AgentRuntimeService, AgentProviderError>;
+}
+declare const AgentRuntimeRegistry_base: Context.ServiceClass<AgentRuntimeRegistry, "@knpkv/control-center/server/agent/AgentRuntimeRegistry", AgentRuntimeRegistryService>;
+/** Server-owned registry for Codex, Claude, and deterministic runtime adapters. */
+export declare class AgentRuntimeRegistry extends AgentRuntimeRegistry_base {
+}
+/** Provides a selector implementation behind the runtime registry seam. */
+export declare const agentRuntimeRegistryLayer: (select: AgentRuntimeRegistryService["select"]) => Layer.Layer<AgentRuntimeRegistry>;
+export {};
+//# sourceMappingURL=AgentRuntimeRegistry.d.ts.map

package/dist/server/server/agent/AgentRuntimeRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentRuntimeRegistry.d.ts","sourceRoot":"","sources":["../../../../src/server/agent/AgentRuntimeRegistry.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACjG,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAA;AAC5C,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAErC,wFAAwF;AACxF,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,CACf,UAAU,EAAE,eAAe,KACxB,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAA;CAC5D;;AAED,mFAAmF;AACnF,qBAAa,oBAAqB,SAAQ,yBAGoB;CAAG;AAEjE,2EAA2E;AAC3E,eAAO,MAAM,yBAAyB,GACpC,QAAQ,2BAA2B,CAAC,QAAQ,CAAC,KAC5C,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAA6E,CAAA"}

package/dist/server/server/agent/index.d.ts

@@ -0,0 +1,4 @@
+/** Durable local-agent worker modules. @packageDocumentation */
+export { AgentJobWorker, agentJobWorkerLayer, type AgentJobWorkerOptions, type AgentJobWorkerRunResult, type AgentJobWorkerService } from "./AgentJobWorker.js";
+export { AgentRuntimeRegistry, agentRuntimeRegistryLayer, type AgentRuntimeRegistryService } from "./AgentRuntimeRegistry.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/server/agent/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/server/agent/index.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC3B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,KAAK,2BAA2B,EACjC,MAAM,2BAA2B,CAAA"}

package/dist/server/server/api/ApiConfiguration.d.ts

@@ -0,0 +1,24 @@
+import * as Context from "effect/Context";
+import * as Layer from "effect/Layer";
+import type { BindConfig } from "../security/BindConfig.js";
+declare const ApiBindConfiguration_base: Context.ServiceClass<ApiBindConfiguration, "@knpkv/control-center/server/api/ApiBindConfiguration", import("effect/Schema").Struct.ReadonlySide<{
+    readonly host: import("effect/Schema").brand<import("effect/Schema").String, "BindHost">;
+    readonly port: import("effect/Schema").Number;
+    readonly publicOrigin: import("effect/Schema").brand<import("effect/Schema").String, "OriginString">;
+    readonly allowedHosts: import("effect/Schema").$Array<import("effect/Schema").brand<import("effect/Schema").String, "HostToken">>;
+    readonly allowedOrigins: import("effect/Schema").$Array<import("effect/Schema").brand<import("effect/Schema").String, "OriginString">>;
+    readonly transportPolicy: import("effect/Schema").Literals<readonly ["loopback-http", "direct-tls", "trusted-tls-proxy", "insecure-lan"]>;
+    readonly directTls: import("effect/Schema").NullOr<import("effect/Schema").Struct<{
+        readonly certificateRef: import("effect/Schema").brand<import("effect/Schema").String, "SecretRef">;
+        readonly privateKeyRef: import("effect/Schema").brand<import("effect/Schema").String, "SecretRef">;
+    }>>;
+    readonly trustedProxyAddresses: import("effect/Schema").$Array<import("effect/Schema").brand<import("effect/Schema").String, "ProxyAddress">>;
+    readonly cookieSecure: import("effect/Schema").Boolean;
+    readonly lanAdministrationAllowed: import("effect/Schema").Boolean;
+}, "Type">>;
+/** Validated network binding policy consumed by HTTP authorization middleware. */
+export declare class ApiBindConfiguration extends ApiBindConfiguration_base {
+    static readonly layer: (config: BindConfig) => Layer.Layer<ApiBindConfiguration, never, never>;
+}
+export {};
+//# sourceMappingURL=ApiConfiguration.d.ts.map

package/dist/server/server/api/ApiConfiguration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiConfiguration.d.ts","sourceRoot":"","sources":["../../../../src/server/api/ApiConfiguration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAErC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;;;;;;;;;;;;;;;;AAE3D,kFAAkF;AAClF,qBAAa,oBAAqB,SAAQ,yBAEzC;IACC,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAI,QAAQ,UAAU,qDAAgD;CAC5F"}

package/dist/server/server/api/ApiMiddleware.d.ts

@@ -0,0 +1,14 @@
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as HttpServerRequest from "effect/unstable/http/HttpServerRequest";
+import { SessionCookieAuth, SessionMutationAuth } from "../../api/session.js";
+import { Auth } from "../auth/Auth.js";
+import { ServerLifecycle } from "../runtime/ServerLifecycle.js";
+import { ApiBindConfiguration } from "./ApiConfiguration.js";
+/** Guard the sole unauthenticated endpoint with the same authority and Origin policy. */
+export declare const authorizePairingRequest: () => Effect.Effect<void, import("../../index.ts").InvalidRequestApiError, ApiBindConfiguration | HttpServerRequest.HttpServerRequest>;
+/** Authenticate `cc_session`, apply read transport policy, and provide secret-free session metadata. */
+export declare const sessionCookieAuthLayer: Layer.Layer<SessionCookieAuth, never, Auth | ApiBindConfiguration | ServerLifecycle>;
+/** Require an independent CSRF credential and re-authorize the cookie-owned session. */
+export declare const mutationCsrfLayer: Layer.Layer<SessionMutationAuth, never, Auth | ApiBindConfiguration | ServerLifecycle>;
+//# sourceMappingURL=ApiMiddleware.d.ts.map

package/dist/server/server/api/ApiMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiMiddleware.d.ts","sourceRoot":"","sources":["../../../../src/server/api/ApiMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAGrC,OAAO,KAAK,iBAAiB,MAAM,wCAAwC,CAAA;AAE3E,OAAO,EAAkB,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC7F,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAA;AAOtC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAO/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAuC5D,yFAAyF;AACzF,eAAO,MAAM,uBAAuB,wIAMlC,CAAA;AAEF,wGAAwG;AACxG,eAAO,MAAM,sBAAsB,sFA6BlC,CAAA;AAMD,wFAAwF;AACxF,eAAO,MAAM,iBAAiB,wFAwC7B,CAAA"}