@paperclipai/server 2026.817.0 → 2026.818.0-beta.1

package/dist/services/company-transfer-runs.d.ts

@@ -0,0 +1,136 @@
+import type { Db } from "@paperclipai/db";
+export type CompanyTransferDirection = "export" | "import";
+export type CompanyTransferRunStatus = "pending" | "running" | "applying" | "completed" | "failed" | "cancelled";
+/**
+ * Minimal structural view of a transfer manifest's part index: the ledger only
+ * ever needs part names and counts, so it stays decoupled from any particular
+ * container format. Manifests without this shape (e.g. the chunked zip-upload
+ * manifest, which carries its own part list) pass explicit counts to
+ * `recordManifest` and track parts by their own names.
+ */
+export interface CompanyTransferPartsIndex {
+    chunks: Array<{
+        name: string;
+    }>;
+    blobs: Array<{
+        name: string;
+    }>;
+}
+export interface CompanyTransferRunRow {
+    id: string;
+    companyId: string | null;
+    direction: CompanyTransferDirection;
+    status: CompanyTransferRunStatus;
+    actorKey: string;
+    containerRef: unknown;
+    idempotencyKey: string;
+    manifestSha256: string | null;
+    manifest: unknown;
+    chunkCount: number;
+    blobCount: number;
+    completedParts: string[];
+    error: string | null;
+    startedAt: Date | null;
+    finishedAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface ResumeOrCreateTransferRunInput {
+    direction: CompanyTransferDirection;
+    actorKey: string;
+    idempotencyKey: string;
+    /** Credential-free container location descriptor. Never put secrets here. */
+    containerRef: unknown;
+    companyId?: string | null;
+}
+export interface ResumeOrCreateTransferRunResult {
+    run: CompanyTransferRunRow;
+    /** True when an existing run for the same content was picked up. */
+    resumed: boolean;
+    /** True when that existing run already finished — the caller can short-circuit. */
+    alreadyCompleted: boolean;
+}
+declare function getRun(db: Db, runId: string): Promise<CompanyTransferRunRow | null>;
+export declare const companyTransferRunService: {
+    getRun: typeof getRun;
+    getRunForActor(db: Db, runId: string, actorKey: string): Promise<CompanyTransferRunRow | null>;
+    /**
+     * Find the actor's run for this exact content (same idempotency key and
+     * direction) or create a fresh one. A completed prior run is returned with
+     * `alreadyCompleted` so the caller can skip the apply outright; a pending,
+     * running, failed, or mid-apply prior run is resumed with its part progress
+     * intact (an "applying" run resumes so a concurrent re-declaration never
+     * spawns a duplicate, but `start` leaves it alone until the apply settles).
+     */
+    resumeOrCreate(db: Db, input: ResumeOrCreateTransferRunInput): Promise<ResumeOrCreateTransferRunResult>;
+    /**
+     * Persist the parsed manifest so resume can re-verify parts without
+     * refetching it. Counts default to the manifest's chunk/blob index when it
+     * has one; manifests with a different part layout pass them explicitly.
+     */
+    recordManifest(db: Db, runId: string, manifest: unknown, manifestSha256: string, counts?: {
+        chunkCount: number;
+        blobCount: number;
+    }): Promise<void>;
+    /**
+     * Atomically claim a run for apply. The apply itself is not idempotent, so
+     * of any overlapping apply attempts exactly one caller gets `true` here —
+     * a single guarded UPDATE moves the run to "applying" only while it is
+     * still open (pending/running/failed). The winner settles the claim with
+     * `complete` on success or `releaseApplyClaim`/`fail` on error (which makes
+     * the run retryable again); every concurrent loser gets `false` and must
+     * not run the apply.
+     */
+    claimApply(db: Db, runId: string): Promise<boolean>;
+    start(db: Db, runId: string): Promise<void>;
+    attachCompany(db: Db, runId: string, companyId: string): Promise<void>;
+    /**
+     * Record one finished container part. Appends atomically in SQL and is
+     * idempotent: re-completing an already recorded part leaves the ledger
+     * unchanged, so a retried part never double-counts. Only open runs
+     * (pending/running) accept parts; when the run has meanwhile gone terminal
+     * (e.g. the abandoned-spool sweep cancelled it) or is mid-apply, nothing is
+     * recorded and `false` comes back so the caller can discard the part.
+     */
+    completePart(db: Db, runId: string, partName: string): Promise<boolean>;
+    /** Container part names the run still has to process, in manifest order. */
+    remainingParts(run: CompanyTransferRunRow, manifest: CompanyTransferPartsIndex): string[];
+    complete(db: Db, runId: string): Promise<void>;
+    /**
+     * Atomically claim an abandoned open run: cancel it only while it is still
+     * open (pending/running) AND saw no activity since `idleSince` — one
+     * guarded UPDATE, so any concurrent part upload or resume that bumped
+     * `updatedAt` makes the guard miss and `false` comes back. Callers must
+     * only touch the run's spooled data after a `true` claim.
+     *
+     * The terminal state is "cancelled", not "failed", precisely because failed
+     * runs stay claimable: a failed sweep target could be claimed by an apply
+     * and assembled while its spool is being deleted underneath it. A cancelled
+     * run is unclaimable the instant this UPDATE commits — before any
+     * filesystem deletion — and `resumeOrCreate` ignores it, so redeclaring the
+     * same content afterwards starts a fresh run.
+     */
+    cancelIfIdle(db: Db, runId: string, idleSince: Date, error: string): Promise<boolean>;
+    /**
+     * Release a held apply claim into "failed". Guarded on "applying", unlike
+     * `fail`: catch-all error paths around an apply cannot know whether the run
+     * already settled (a cleanup error thrown after `complete` reaches the same
+     * catch as a real apply failure), and an unguarded fail there would flip a
+     * completed run back to claimable and invite a duplicate import. When the
+     * run already settled this is a no-op and returns false.
+     */
+    releaseApplyClaim(db: Db, runId: string, error: string): Promise<boolean>;
+    /**
+     * Fail every run stranded in "applying" by a dead process. Apply jobs run
+     * in-memory in this single server process, so at boot any run still
+     * "applying" belongs to an apply that died without settling its claim and
+     * would otherwise 409 every retry forever. Failing it makes it claimable
+     * again with its spooled parts intact. Startup only — running this while
+     * applies may be live (e.g. from a periodic sweep) would kill them.
+     */
+    recoverStrandedApplyingRuns(db: Db): Promise<string[]>;
+    fail(db: Db, runId: string, error: string): Promise<void>;
+    cancel(db: Db, runId: string): Promise<void>;
+};
+export {};
+//# sourceMappingURL=company-transfer-runs.d.ts.map

package/dist/services/company-transfer-runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"company-transfer-runs.d.ts","sourceRoot":"","sources":["../../src/services/company-transfer-runs.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAiC1C,MAAM,MAAM,wBAAwB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC3D,MAAM,MAAM,wBAAwB,GAChC,SAAS,GACT,SAAS,GACT,UAAU,GACV,WAAW,GACX,QAAQ,GACR,WAAW,CAAC;AAEhB;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChC,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChC;AAqBD,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,wBAAwB,CAAC;IACpC,MAAM,EAAE,wBAAwB,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,wBAAwB,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,6EAA6E;IAC7E,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,qBAAqB,CAAC;IAC3B,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAC;IACjB,mFAAmF;IACnF,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAYD,iBAAe,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAOlF;AAED,eAAO,MAAM,yBAAyB;;uBAGX,EAAE,SAAS,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAKpG;;;;;;;OAOG;uBACsB,EAAE,SAAS,8BAA8B,GAAG,OAAO,CAAC,+BAA+B,CAAC;IAyC7G;;;;OAIG;uBAEG,EAAE,SACC,MAAM,YACH,OAAO,kBACD,MAAM,WACb;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GACjD,OAAO,CAAC,IAAI,CAAC;IAgBhB;;;;;;;;OAQG;mBACkB,EAAE,SAAS,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;cAWzC,EAAE,SAAS,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;sBASzB,EAAE,SAAS,MAAM,aAAa,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5E;;;;;;;OAOG;qBACoB,EAAE,SAAS,MAAM,YAAY,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAe7E,4EAA4E;wBACxD,qBAAqB,YAAY,yBAAyB,GAAG,MAAM,EAAE;iBAYtE,EAAE,SAAS,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpD;;;;;;;;;;;;;OAaG;qBACoB,EAAE,SAAS,MAAM,aAAa,IAAI,SAAS,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAe3F;;;;;;;OAOG;0BACyB,EAAE,SAAS,MAAM,SAAS,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAS/E;;;;;;;OAOG;oCACmC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;aAc7C,EAAE,SAAS,MAAM,SAAS,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;eAO9C,EAAE,SAAS,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMnD,CAAC"}

package/dist/services/company-transfer-runs.js

@@ -0,0 +1,243 @@
+import { and, desc, eq, inArray, lt, sql } from "drizzle-orm";
+import { companyTransferRuns } from "@paperclipai/db";
+function asPartsIndex(manifest) {
+    if (typeof manifest !== "object" || manifest === null)
+        return null;
+    const { chunks, blobs } = manifest;
+    const named = (value) => Array.isArray(value) &&
+        value.every((entry) => typeof entry === "object" &&
+            entry !== null &&
+            typeof entry.name === "string");
+    if (!named(chunks) || !named(blobs))
+        return null;
+    return { chunks, blobs };
+}
+const RESUMABLE_STATUSES = ["pending", "running", "failed"];
+/** Statuses under which container parts may still be recorded as completed. */
+const PART_UPLOAD_STATUSES = ["pending", "running"];
+function rowFromRecord(record) {
+    return {
+        ...record,
+        direction: record.direction,
+        status: record.status,
+        manifest: record.manifest ?? null,
+        completedParts: Array.isArray(record.completedParts) ? record.completedParts : [],
+    };
+}
+async function getRun(db, runId) {
+    const [record] = await db
+        .select()
+        .from(companyTransferRuns)
+        .where(eq(companyTransferRuns.id, runId))
+        .limit(1);
+    return record ? rowFromRecord(record) : null;
+}
+export const companyTransferRunService = {
+    getRun,
+    async getRunForActor(db, runId, actorKey) {
+        const run = await getRun(db, runId);
+        return run && run.actorKey === actorKey ? run : null;
+    },
+    /**
+     * Find the actor's run for this exact content (same idempotency key and
+     * direction) or create a fresh one. A completed prior run is returned with
+     * `alreadyCompleted` so the caller can skip the apply outright; a pending,
+     * running, failed, or mid-apply prior run is resumed with its part progress
+     * intact (an "applying" run resumes so a concurrent re-declaration never
+     * spawns a duplicate, but `start` leaves it alone until the apply settles).
+     */
+    async resumeOrCreate(db, input) {
+        return db.transaction(async (tx) => {
+            const txDb = tx;
+            // No unique index backs the (actor, direction, content key) lookup, so
+            // two concurrent identical declarations could both miss the lookup and
+            // both insert. Serialize them with a transaction-scoped advisory lock
+            // on the key: the second caller waits here until the first commits and
+            // then resumes the first caller's row.
+            const lockKey = `${input.actorKey}|${input.direction}|${input.idempotencyKey}`;
+            await txDb.execute(sql `select pg_advisory_xact_lock(hashtextextended(${lockKey}, 0))`);
+            const matches = await txDb
+                .select()
+                .from(companyTransferRuns)
+                .where(and(eq(companyTransferRuns.idempotencyKey, input.idempotencyKey), eq(companyTransferRuns.direction, input.direction), eq(companyTransferRuns.actorKey, input.actorKey), inArray(companyTransferRuns.status, [...RESUMABLE_STATUSES, "applying", "completed"])))
+                .orderBy(desc(companyTransferRuns.createdAt))
+                .limit(1);
+            const existing = matches[0] ? rowFromRecord(matches[0]) : null;
+            if (existing) {
+                return { run: existing, resumed: true, alreadyCompleted: existing.status === "completed" };
+            }
+            const [created] = await txDb
+                .insert(companyTransferRuns)
+                .values({
+                direction: input.direction,
+                actorKey: input.actorKey,
+                idempotencyKey: input.idempotencyKey,
+                containerRef: input.containerRef,
+                companyId: input.companyId ?? null,
+            })
+                .returning();
+            return { run: rowFromRecord(created), resumed: false, alreadyCompleted: false };
+        });
+    },
+    /**
+     * Persist the parsed manifest so resume can re-verify parts without
+     * refetching it. Counts default to the manifest's chunk/blob index when it
+     * has one; manifests with a different part layout pass them explicitly.
+     */
+    async recordManifest(db, runId, manifest, manifestSha256, counts) {
+        const index = asPartsIndex(manifest);
+        const chunkCount = counts?.chunkCount ?? index?.chunks.length ?? 0;
+        const blobCount = counts?.blobCount ?? index?.blobs.length ?? 0;
+        await db
+            .update(companyTransferRuns)
+            .set({
+            manifest,
+            manifestSha256,
+            chunkCount,
+            blobCount,
+            updatedAt: new Date(),
+        })
+            .where(eq(companyTransferRuns.id, runId));
+    },
+    /**
+     * Atomically claim a run for apply. The apply itself is not idempotent, so
+     * of any overlapping apply attempts exactly one caller gets `true` here —
+     * a single guarded UPDATE moves the run to "applying" only while it is
+     * still open (pending/running/failed). The winner settles the claim with
+     * `complete` on success or `releaseApplyClaim`/`fail` on error (which makes
+     * the run retryable again); every concurrent loser gets `false` and must
+     * not run the apply.
+     */
+    async claimApply(db, runId) {
+        const claimed = await db
+            .update(companyTransferRuns)
+            .set({ status: "applying", error: null, updatedAt: new Date() })
+            .where(and(eq(companyTransferRuns.id, runId), inArray(companyTransferRuns.status, RESUMABLE_STATUSES)))
+            .returning({ id: companyTransferRuns.id });
+        return claimed.length > 0;
+    },
+    async start(db, runId) {
+        await db
+            .update(companyTransferRuns)
+            .set({ status: "running", error: null, startedAt: new Date(), finishedAt: null, updatedAt: new Date() })
+            .where(and(eq(companyTransferRuns.id, runId), inArray(companyTransferRuns.status, RESUMABLE_STATUSES)));
+    },
+    async attachCompany(db, runId, companyId) {
+        await db
+            .update(companyTransferRuns)
+            .set({ companyId, updatedAt: new Date() })
+            .where(eq(companyTransferRuns.id, runId));
+    },
+    /**
+     * Record one finished container part. Appends atomically in SQL and is
+     * idempotent: re-completing an already recorded part leaves the ledger
+     * unchanged, so a retried part never double-counts. Only open runs
+     * (pending/running) accept parts; when the run has meanwhile gone terminal
+     * (e.g. the abandoned-spool sweep cancelled it) or is mid-apply, nothing is
+     * recorded and `false` comes back so the caller can discard the part.
+     */
+    async completePart(db, runId, partName) {
+        const partJson = JSON.stringify([partName]);
+        const updated = await db
+            .update(companyTransferRuns)
+            .set({
+            completedParts: sql `case when ${companyTransferRuns.completedParts} @> ${partJson}::jsonb then ${companyTransferRuns.completedParts} else ${companyTransferRuns.completedParts} || ${partJson}::jsonb end`,
+            updatedAt: new Date(),
+        })
+            .where(and(eq(companyTransferRuns.id, runId), inArray(companyTransferRuns.status, PART_UPLOAD_STATUSES)))
+            .returning({ id: companyTransferRuns.id });
+        return updated.length > 0;
+    },
+    /** Container part names the run still has to process, in manifest order. */
+    remainingParts(run, manifest) {
+        const completed = new Set(run.completedParts);
+        const remaining = [];
+        for (const chunk of manifest.chunks) {
+            if (!completed.has(chunk.name))
+                remaining.push(chunk.name);
+        }
+        for (const blob of manifest.blobs) {
+            if (!completed.has(blob.name))
+                remaining.push(blob.name);
+        }
+        return remaining;
+    },
+    async complete(db, runId) {
+        await db
+            .update(companyTransferRuns)
+            .set({ status: "completed", error: null, finishedAt: new Date(), updatedAt: new Date() })
+            .where(eq(companyTransferRuns.id, runId));
+    },
+    /**
+     * Atomically claim an abandoned open run: cancel it only while it is still
+     * open (pending/running) AND saw no activity since `idleSince` — one
+     * guarded UPDATE, so any concurrent part upload or resume that bumped
+     * `updatedAt` makes the guard miss and `false` comes back. Callers must
+     * only touch the run's spooled data after a `true` claim.
+     *
+     * The terminal state is "cancelled", not "failed", precisely because failed
+     * runs stay claimable: a failed sweep target could be claimed by an apply
+     * and assembled while its spool is being deleted underneath it. A cancelled
+     * run is unclaimable the instant this UPDATE commits — before any
+     * filesystem deletion — and `resumeOrCreate` ignores it, so redeclaring the
+     * same content afterwards starts a fresh run.
+     */
+    async cancelIfIdle(db, runId, idleSince, error) {
+        const claimed = await db
+            .update(companyTransferRuns)
+            .set({ status: "cancelled", error, finishedAt: new Date(), updatedAt: new Date() })
+            .where(and(eq(companyTransferRuns.id, runId), inArray(companyTransferRuns.status, PART_UPLOAD_STATUSES), lt(companyTransferRuns.updatedAt, idleSince)))
+            .returning({ id: companyTransferRuns.id });
+        return claimed.length > 0;
+    },
+    /**
+     * Release a held apply claim into "failed". Guarded on "applying", unlike
+     * `fail`: catch-all error paths around an apply cannot know whether the run
+     * already settled (a cleanup error thrown after `complete` reaches the same
+     * catch as a real apply failure), and an unguarded fail there would flip a
+     * completed run back to claimable and invite a duplicate import. When the
+     * run already settled this is a no-op and returns false.
+     */
+    async releaseApplyClaim(db, runId, error) {
+        const released = await db
+            .update(companyTransferRuns)
+            .set({ status: "failed", error, finishedAt: new Date(), updatedAt: new Date() })
+            .where(and(eq(companyTransferRuns.id, runId), eq(companyTransferRuns.status, "applying")))
+            .returning({ id: companyTransferRuns.id });
+        return released.length > 0;
+    },
+    /**
+     * Fail every run stranded in "applying" by a dead process. Apply jobs run
+     * in-memory in this single server process, so at boot any run still
+     * "applying" belongs to an apply that died without settling its claim and
+     * would otherwise 409 every retry forever. Failing it makes it claimable
+     * again with its spooled parts intact. Startup only — running this while
+     * applies may be live (e.g. from a periodic sweep) would kill them.
+     */
+    async recoverStrandedApplyingRuns(db) {
+        const recovered = await db
+            .update(companyTransferRuns)
+            .set({
+            status: "failed",
+            error: "apply interrupted by a restart — verify whether the import completed before retrying",
+            finishedAt: new Date(),
+            updatedAt: new Date(),
+        })
+            .where(eq(companyTransferRuns.status, "applying"))
+            .returning({ id: companyTransferRuns.id });
+        return recovered.map((row) => row.id);
+    },
+    async fail(db, runId, error) {
+        await db
+            .update(companyTransferRuns)
+            .set({ status: "failed", error, finishedAt: new Date(), updatedAt: new Date() })
+            .where(eq(companyTransferRuns.id, runId));
+    },
+    async cancel(db, runId) {
+        await db
+            .update(companyTransferRuns)
+            .set({ status: "cancelled", finishedAt: new Date(), updatedAt: new Date() })
+            .where(and(eq(companyTransferRuns.id, runId), inArray(companyTransferRuns.status, RESUMABLE_STATUSES)));
+    },
+};
+//# sourceMappingURL=company-transfer-runs.js.map

package/dist/services/company-transfer-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"company-transfer-runs.js","sourceRoot":"","sources":["../../src/services/company-transfer-runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAqDtD,SAAS,YAAY,CAAC,QAAiB;IACrC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,QAAiD,CAAC;IAC5E,MAAM,KAAK,GAAG,CAAC,KAAc,EAAoC,EAAE,CACjE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,KAAK,CACT,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ,CACzD,CAAC;IACJ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,kBAAkB,GAA+B,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACxF,+EAA+E;AAC/E,MAAM,oBAAoB,GAA+B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAuChF,SAAS,aAAa,CAAC,MAA+C;IACpE,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,MAAM,CAAC,SAAqC;QACvD,MAAM,EAAE,MAAM,CAAC,MAAkC;QACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;QACjC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,cAA2B,CAAC,CAAC,CAAC,EAAE;KAChG,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,EAAM,EAAE,KAAa;IACzC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE;SACtB,MAAM,EAAE;SACR,IAAI,CAAC,mBAAmB,CAAC;SACzB,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SACxC,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,MAAM;IAEN,KAAK,CAAC,cAAc,CAAC,EAAM,EAAE,KAAa,EAAE,QAAgB;QAC1D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACpC,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,cAAc,CAAC,EAAM,EAAE,KAAqC;QAChE,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,EAAmB,CAAC;YACjC,uEAAuE;YACvE,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,uCAAuC;YACvC,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YAC/E,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAA,iDAAiD,OAAO,OAAO,CAAC,CAAC;YACvF,MAAM,OAAO,GAAG,MAAM,IAAI;iBACvB,MAAM,EAAE;iBACR,IAAI,CAAC,mBAAmB,CAAC;iBACzB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,EAC5D,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAClD,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAChD,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,GAAG,kBAAkB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CACtF,CACF;iBACA,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;iBAC5C,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/D,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC7F,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI;iBACzB,MAAM,CAAC,mBAAmB,CAAC;iBAC3B,MAAM,CAAC;gBACN,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;aACnC,CAAC;iBACD,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,OAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QACnF,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAClB,EAAM,EACN,KAAa,EACb,QAAiB,EACjB,cAAsB,EACtB,MAAkD;QAElD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,EAAE,SAAS,IAAI,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QAChE,MAAM,EAAE;aACL,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC;YACH,QAAQ;YACR,cAAc;YACd,UAAU;YACV,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CAAC,EAAM,EAAE,KAAa;QACpC,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC/D,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAChG;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EAAM,EAAE,KAAa;QAC/B,MAAM,EAAE;aACL,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aACvG,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAChG,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAM,EAAE,KAAa,EAAE,SAAiB;QAC1D,MAAM,EAAE;aACL,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aACzC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,EAAM,EAAE,KAAa,EAAE,QAAgB;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC;YACH,cAAc,EAAE,GAAG,CAAA,aAAa,mBAAmB,CAAC,cAAc,OAAO,QAAQ,gBAAgB,mBAAmB,CAAC,cAAc,SAAS,mBAAmB,CAAC,cAAc,OAAO,QAAQ,aAAa;YAC1M,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAClG;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,4EAA4E;IAC5E,cAAc,CAAC,GAA0B,EAAE,QAAmC;QAC5E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAM,EAAE,KAAa;QAClC,MAAM,EAAE;aACL,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aACxF,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,YAAY,CAAC,EAAM,EAAE,KAAa,EAAE,SAAe,EAAE,KAAa;QACtE,MAAM,OAAO,GAAG,MAAM,EAAE;aACrB,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAClF,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,EACjC,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,CAAC,EACzD,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAC7C,CACF;aACA,SAAS,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,iBAAiB,CAAC,EAAM,EAAE,KAAa,EAAE,KAAa;QAC1D,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC/E,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;aACzF,SAAS,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,2BAA2B,CAAC,EAAM;QACtC,MAAM,SAAS,GAAG,MAAM,EAAE;aACvB,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC;YACH,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,sFAAsF;YAC7F,UAAU,EAAE,IAAI,IAAI,EAAE;YACtB,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;aACjD,SAAS,CAAC,EAAE,EAAE,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,KAAa,EAAE,KAAa;QAC7C,MAAM,EAAE;aACL,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC/E,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAM,EAAE,KAAa;QAChC,MAAM,EAAE;aACL,MAAM,CAAC,mBAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC3E,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC5G,CAAC;CACF,CAAC"}

package/dist/services/cross-issue-influence-limit.d.ts

@@ -1,7 +1,13 @@
 import type { Db } from "@paperclipai/db";
 export declare const CROSS_ISSUE_INFLUENCE_LIMIT = 20;
 export declare const CROSS_ISSUE_INFLUENCE_ENFORCE_AT: Date;
-export type CrossIssueInfluenceKind = "comment" | "update";
+/**
+ * Every kind shares one per-run counter. `interaction_resolution` covers the
+ * issue-thread accept/reject/respond/verdict routes: an open `anyone` resolver
+ * audience is not a licence to resolve, wake, and spawn suggested tasks across
+ * the whole company from one run.
+ */
+export type CrossIssueInfluenceKind = "comment" | "update" | "interaction_resolution";
 export type CrossIssueInfluenceDecision = {
     allowed: boolean;
     mode: "log_only" | "enforce";

package/dist/services/cross-issue-influence-limit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cross-issue-influence-limit.d.ts","sourceRoot":"","sources":["../../src/services/cross-issue-influence-limit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAM1C,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,eAAO,MAAM,gCAAgC,MAAuC,CAAC;AAKrF,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE3D,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,wBAAgB,kCAAkC,qCAKjD;AAWD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,2BAA2B,CAW9B;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GACA,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAiG7C;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,2BAA2B,EACrC,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO;;;;;;;;;;;;EAoB7G"}
+{"version":3,"file":"cross-issue-influence-limit.d.ts","sourceRoot":"","sources":["../../src/services/cross-issue-influence-limit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAM1C,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,eAAO,MAAM,gCAAgC,MAAuC,CAAC;AAKrF;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,QAAQ,GAAG,wBAAwB,CAAC;AAEtF,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,wBAAgB,kCAAkC,qCAKjD;AAWD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GAAG,2BAA2B,CAW9B;AAED;;;;;;;GAOG;AACH,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,EAAE,EACN,KAAK,EAAE;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,IAAI,EAAE,uBAAuB,CAAC;IAC9B,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ,GACA,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAiG7C;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,2BAA2B,EACrC,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO;;;;;;;;;;;;EAoB7G"}

package/dist/services/cross-issue-influence-limit.js.map

@@ -1 +1 @@
-{"version":3,"file":"cross-issue-influence-limit.js","sourceRoot":"","sources":["../../src/services/cross-issue-influence-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC9C,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAErF,MAAM,8BAA8B,GAAG,sCAAsC,CAAC;AAC9E,MAAM,uCAAuC,GAAG,0CAA0C,CAAC;AAY3F,MAAM,UAAU,kCAAkC;IAChD,yGAAyG;IACzG,uEAAuE;IACvE,MAAM,EAAE,IAAI,EAAE,GAAG,wBAAwB,CAAC,4CAA4C,CAAC,CAAC;IACxF,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,oBAAoB,CAAC,eAAwB;IACpD,IAAI,CAAC,eAAe,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3G,MAAM,OAAO,GAAG,eAA0C,CAAC;IAC3D,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAGhD;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,IAAI,gCAAgC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,SAAS,IAAI,2BAA2B;QACxE,IAAI;QACJ,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,2BAA2B;QAChC,SAAS,EAAE,gCAAgC,CAAC,WAAW,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAM,EACN,KASC;IAED,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,kCAAkC,EAAE,CAAC;IAEzE,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,MAAM,EAAE;aACjB,MAAM,CAAC;YACN,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;YAClD,eAAe,EAAE,aAAa,CAAC,eAAe;SAC/C,CAAC;aACD,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EACjC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAC5C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CACzC,CAAC;aACD,GAAG,CAAC,QAAQ,CAAC;aACb,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,IACE,CAAC,GAAG;YACJ,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACjC,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAC7B,CAAC;YACD,MAAM,kCAAkC,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,aAAa;YAAE,MAAM,kCAAkC,EAAE,CAAC;QAC/D,IACE,aAAa,KAAK,KAAK,CAAC,aAAa;YACrC,CAAC,KAAK,CAAC,qBAAqB,IAAI,aAAa,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,qBAAqB,CAAC,WAAW,EAAE,CAAC,EAC1G,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAC1C,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAClC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,8BAA8B,CAAC,CACvD,CAAC;aACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,gCAAgC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAElF,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,IAAI,IAAI;YAC3E,MAAM,EAAE,QAAQ,CAAC,OAAO;gBACtB,CAAC,CAAC,8BAA8B;gBAChC,CAAC,CAAC,uCAAuC;YAC3C,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,KAAK,CAAC,aAAa;YAC7B,OAAO,EAAE;gBACP,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,aAAa;gBACb,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,IAAI,IAAI;gBAC1D,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B;SACF,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG;YACjB,KAAK,EAAE,2BAA2B;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,aAAa;YACb,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;QACF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,QAAqC,EACrC,UAA0G,EAAE;IAE5G,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,wBAAwB,CAAC,oCAAoC,EAAE;QAC9E,GAAG,OAAO;QACV,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE;YACP,GAAG,IAAI,CAAC,OAAO;YACf,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cross-issue-influence-limit.js","sourceRoot":"","sources":["../../src/services/cross-issue-influence-limit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEjD,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC9C,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AAErF,MAAM,8BAA8B,GAAG,sCAAsC,CAAC;AAC9E,MAAM,uCAAuC,GAAG,0CAA0C,CAAC;AAkB3F,MAAM,UAAU,kCAAkC;IAChD,yGAAyG;IACzG,uEAAuE;IACvE,MAAM,EAAE,IAAI,EAAE,GAAG,wBAAwB,CAAC,4CAA4C,CAAC,CAAC;IACxF,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,oBAAoB,CAAC,eAAwB;IACpD,IAAI,CAAC,eAAe,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3G,MAAM,OAAO,GAAG,eAA0C,CAAC;IAC3D,KAAK,MAAM,SAAS,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAGhD;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,IAAI,gCAAgC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,IAAI,KAAK,UAAU,IAAI,SAAS,IAAI,2BAA2B;QACxE,IAAI;QACJ,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,2BAA2B;QAChC,SAAS,EAAE,gCAAgC,CAAC,WAAW,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,EAAM,EACN,KASC;IAED,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,kCAAkC,EAAE,CAAC;IAEzE,OAAO,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,MAAM,EAAE;aACjB,MAAM,CAAC;YACN,EAAE,EAAE,aAAa,CAAC,EAAE;YACpB,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,iBAAiB,EAAE,aAAa,CAAC,iBAAiB;YAClD,eAAe,EAAE,aAAa,CAAC,eAAe;SAC/C,CAAC;aACD,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,EACjC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAC5C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CACzC,CAAC;aACD,GAAG,CAAC,QAAQ,CAAC;aACb,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QACnC,IACE,CAAC,GAAG;YACJ,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YACjC,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAC7B,CAAC;YACD,MAAM,kCAAkC,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAChE,IAAI,CAAC,aAAa;YAAE,MAAM,kCAAkC,EAAE,CAAC;QAC/D,IACE,aAAa,KAAK,KAAK,CAAC,aAAa;YACrC,CAAC,KAAK,CAAC,qBAAqB,IAAI,aAAa,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,qBAAqB,CAAC,WAAW,EAAE,CAAC,EAC1G,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CAAC,GAAG,CACR,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAC1C,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAClC,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,8BAA8B,CAAC,CACvD,CAAC;aACD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,gCAAgC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAElF,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,IAAI,IAAI;YAC3E,MAAM,EAAE,QAAQ,CAAC,OAAO;gBACtB,CAAC,CAAC,8BAA8B;gBAChC,CAAC,CAAC,uCAAuC;YAC3C,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,KAAK,CAAC,aAAa;YAC7B,OAAO,EAAE;gBACP,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,aAAa;gBACb,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,IAAI,IAAI;gBAC1D,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B;SACF,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG;YACjB,KAAK,EAAE,2BAA2B;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,aAAa;YACb,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;QACF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,gCAAgC,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,QAAqC,EACrC,UAA0G,EAAE;IAE5G,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,wBAAwB,CAAC,oCAAoC,EAAE;QAC9E,GAAG,OAAO;QACV,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC,CAAC;IACH,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE;YACP,GAAG,IAAI,CAAC,OAAO;YACf,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B;KACF,CAAC;AACJ,CAAC"}

package/dist/services/environment-config.d.ts

@@ -59,6 +59,21 @@ export declare function resolveEnvironmentDriverConfigForRuntime(db: Db, company
     heartbeatRunId?: string | null;
     applyCustomImageTemplate?: boolean;
 }): Promise<ParsedEnvironmentConfig>;
+/**
+ * Resolve the connection secrets of a recorded sandbox config for a durable
+ * orphan-sandbox teardown. The retry reads the recorded config from the durable
+ * `pending_cleanup` lease row, not from the current environment. So this
+ * resolver must not require the environment binding: a delete removed the
+ * environment, or a provider change replaced the binding. It resolves each
+ * schema-declared secret ref by id at the latest version through
+ * `resolveSecretValueForSandboxCleanup`, which authorizes the read from the
+ * durable orphan record and skips the binding check. The resolved values are
+ * used once for the teardown RPC and never persisted.
+ */
+export declare function resolveSandboxCleanupConfigSecrets(db: Db, companyId: string, config: SandboxEnvironmentConfig, context?: {
+    issueId?: string | null;
+    heartbeatRunId?: string | null;
+}): Promise<SandboxEnvironmentConfig>;
 export declare function readSshEnvironmentPrivateKeySecretId(environment: Pick<Environment, "driver" | "config">): string | null;
 export declare function parseEnvironmentDriverConfig(environment: Pick<Environment, "driver" | "config">): ParsedEnvironmentConfig;
 //# sourceMappingURL=environment-config.d.ts.map

package/dist/services/environment-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"environment-config.d.ts","sourceRoot":"","sources":["../../src/services/environment-config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAEjB,sBAAsB,EACtB,uBAAuB,EAEvB,wBAAwB,EACxB,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,qBAAqB,CAAC;AAS7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAsFtE,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,GACnD;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GAC/C;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,GACvD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAAC;AA6C1D,wBAAsB,oCAAoC,CACxD,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAEtB;AAgLD,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,EAAE,EAAE,EAAE,CAAC;IACP,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAAC,CA0BpG;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGtG;AA0BD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;CACpD,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoC1B;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,EAAE,EAAE,EAAE,CAAC;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;IACnD,aAAa,CAAC,EAAE;QACd,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,CAAC;QACtG,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC;IACF,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkD7D;AAED,wBAAsB,wCAAwC,CAAC,KAAK,EAAE;IACpE,EAAE,EAAE,EAAE,CAAC;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;IACnD,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5D,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAgGnC;AAED,wBAAsB,wCAAwC,CAC5D,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,EACtF,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK/B,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,GACA,OAAO,CAAC,uBAAuB,CAAC,CA0ElC;AAED,wBAAgB,oCAAoC,CAClD,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAClD,MAAM,GAAG,IAAI,CAKf;AAED,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAClD,uBAAuB,CAoCzB"}
+{"version":3,"file":"environment-config.d.ts","sourceRoot":"","sources":["../../src/services/environment-config.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EAEjB,sBAAsB,EACtB,uBAAuB,EAEvB,wBAAwB,EACxB,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,qBAAqB,CAAC;AAS7B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAoFtE,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,GACnD;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GAC/C;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,GACvD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAgE1D,wBAAsB,oCAAoC,CACxD,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAEtB;AAgLD,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,EAAE,EAAE,EAAE,CAAC;IACP,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,QAAQ,GAAG,QAAQ,CAAC,CAAC;CAC5D,GAAG,OAAO,CAAC,KAAK,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,qBAAqB,CAAA;CAAE,CAAC,CAAC,CA0BpG;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGtG;AAyBD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;CACpD,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoC1B;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE;IACxD,EAAE,EAAE,EAAE,CAAC;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;IACnD,aAAa,CAAC,EAAE;QACd,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,CAAC;QACtG,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC;IACF,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkD7D;AAED,wBAAsB,wCAAwC,CAAC,KAAK,EAAE;IACpE,EAAE,EAAE,EAAE,CAAC;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;IACnD,KAAK,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5D,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAgGnC;AAED,wBAAsB,wCAAwC,CAC5D,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,EACtF,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAK/B,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC,GACA,OAAO,CAAC,uBAAuB,CAAC,CA0ElC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kCAAkC,CACtD,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,wBAAwB,EAChC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACpE,OAAO,CAAC,wBAAwB,CAAC,CAqBnC;AAED,wBAAgB,oCAAoC,CAClD,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAClD,MAAM,GAAG,IAAI,CAKf;AAED,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAClD,uBAAuB,CAoCzB"}

package/dist/services/environment-config.js

@@ -48,7 +48,6 @@ const fakeSandboxEnvironmentConfigSchema = z.object({
         .default("ubuntu:24.04"),
     reuseLease: z.boolean().optional().default(false),
     streamRunLogs: z.boolean().optional(),
-    streamAgentSessionOutput: z.boolean().optional(),
     archiveOnRelease: z.boolean().optional(),
 }).strict();
 const pluginSandboxProviderKeySchema = z.string()
@@ -60,7 +59,6 @@ const pluginSandboxEnvironmentConfigSchema = z.object({
     timeoutMs: z.coerce.number().int().min(1).max(86_400_000).optional(),
     reuseLease: z.boolean().optional().default(false),
     streamRunLogs: z.boolean().optional(),
-    streamAgentSessionOutput: z.boolean().optional(),
     archiveOnRelease: z.boolean().optional(),
 }).catchall(z.unknown());
 const pluginEnvironmentConfigSchema = z.object({
@@ -77,8 +75,25 @@ function toErrorMessage(error) {
 function getSandboxProvider(raw) {
     return typeof raw.provider === "string" && raw.provider.trim().length > 0 ? raw.provider.trim() : "fake";
 }
+// Operator flags removed when session-output streaming moved to the verified
+// capability snapshot. A saved environment config can still carry a removed key.
+// The server now decides session-output streaming from the effective capability
+// snapshot alone, so no consumer reads these flags. Strip a removed key before
+// validation so a strict schema (the fake sandbox) still loads an old config,
+// and so the removed flag never reaches the parsed config.
+const REMOVED_SANDBOX_CONFIG_KEYS = ["streamAgentSessionOutput"];
+function stripRemovedSandboxConfigKeys(raw) {
+    if (!REMOVED_SANDBOX_CONFIG_KEYS.some((key) => key in raw)) {
+        return raw;
+    }
+    const next = { ...raw };
+    for (const key of REMOVED_SANDBOX_CONFIG_KEYS) {
+        delete next[key];
+    }
+    return next;
+}
 function parseSandboxEnvironmentConfig(input) {
-    const raw = parseObject(input);
+    const raw = stripRemovedSandboxConfigKeys(parseObject(input));
     const provider = getSandboxProvider(raw);
     if (provider === "fake") {
         const parsed = fakeSandboxEnvironmentConfigSchema.safeParse(raw);
@@ -252,15 +267,14 @@ export function stripSandboxProviderEnvelope(config) {
     const { provider: _provider, ...driverConfig } = config;
     return driverConfig;
 }
-// The host owns these sandbox run-behavior flags, not the provider plugin. The
-// host reads them to select the run-log stream and the ACP session output
-// stream. The host passes the whole config to the plugin, so a plugin that
-// allowlists its own driver fields drops these flags from its normalized
-// config. Re-apply them from the parsed envelope after the plugin normalizes,
-// or a saved environment loses the operator opt-in and the stream never starts.
+// The host owns this sandbox run-behavior flag, not the provider plugin. The
+// host reads it to select the run-log stream. The host passes the whole config
+// to the plugin, so a plugin that allowlists its own driver fields drops the
+// flag from its normalized config. Re-apply it from the parsed envelope after
+// the plugin normalizes, or a saved environment loses the operator opt-in and
+// the stream never starts.
 const HOST_OWNED_SANDBOX_STREAM_FLAGS = [
     "streamRunLogs",
-    "streamAgentSessionOutput",
 ];
 function applyHostOwnedSandboxStreamFlags(normalizedConfig, envelope) {
     const merged = { ...normalizedConfig };
@@ -509,6 +523,38 @@ export async function resolveEnvironmentDriverConfigForRuntime(db, companyId, en
     }
     return parsed;
 }
+/**
+ * Resolve the connection secrets of a recorded sandbox config for a durable
+ * orphan-sandbox teardown. The retry reads the recorded config from the durable
+ * `pending_cleanup` lease row, not from the current environment. So this
+ * resolver must not require the environment binding: a delete removed the
+ * environment, or a provider change replaced the binding. It resolves each
+ * schema-declared secret ref by id at the latest version through
+ * `resolveSecretValueForSandboxCleanup`, which authorizes the read from the
+ * durable orphan record and skips the binding check. The resolved values are
+ * used once for the teardown RPC and never persisted.
+ */
+export async function resolveSandboxCleanupConfigSecrets(db, companyId, config, context) {
+    if (config.provider === "fake")
+        return config;
+    const schema = await getSandboxProviderConfigSchema(db, config.provider);
+    const secrets = secretService(db);
+    let nextConfig = { ...config };
+    for (const path of collectSecretRefPaths(schema)) {
+        const current = canonicalizeSecretRefValue(readConfigValueAtPath(nextConfig, path), path);
+        if (typeof current !== "string")
+            continue;
+        const trimmed = current.trim();
+        if (!isUuidSecretRef(trimmed))
+            continue;
+        nextConfig = writeConfigValueAtPath(nextConfig, path, await secrets.resolveSecretValueForSandboxCleanup(companyId, trimmed, "latest", {
+            configPath: path,
+            issueId: context?.issueId ?? null,
+            heartbeatRunId: context?.heartbeatRunId ?? null,
+        }));
+    }
+    return nextConfig;
+}
 export function readSshEnvironmentPrivateKeySecretId(environment) {
     if (environment.driver !== "ssh")
         return null;