@paperclipai/server 2026.824.0 → 2026.825.0-beta.1

package/dist/services/login-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-command.js","sourceRoot":"","sources":["../../src/services/login-command.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,0CAA0C;AAC1C,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,2EAA2E;AAS3E;;;;GAIG;AACH,MAAM,iCAAiC,GAA8C;IACnF,YAAY,EAAE,QAAQ;IACtB,WAAW,EAAE,OAAO;CACrB,CAAC;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,iCAAiC,GAAG,+BAA+B,CAAC;AACjF,kEAAkE;AAClE,MAAM,CAAC,MAAM,0BAA0B,GAAG,gCAAgC,CAAC;AAE3E;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,MAAM,GAAG,GAAG,iCAAiC,CAAC,WAAW,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kCAAkC,CAAC,WAAmB;IACpE,OAAO,iCAAiC,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAEtE,6EAA6E;AAC7E,MAAM,YAAY,GAAG,gEAAgE,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,IAAI,MAAM,CACrC,IAAI,uBAAuB,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,gEAAgE,CACnI,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,GAAG,uBAAuB,IAAI,WAAW,EAAE,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC"}

package/dist/services/login-command.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=login-command.test.d.ts.map

package/dist/services/login-command.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-command.test.d.ts","sourceRoot":"","sources":["../../src/services/login-command.test.ts"],"names":[],"mappings":""}

package/dist/services/login-command.test.js

@@ -0,0 +1,71 @@
+import { describe, expect, it } from "vitest";
+import { deriveLoginSessionHome, isLoginCommandKey, isLoginCommandSupportedAdapterType, LOGIN_SESSION_HOME_ROOT, resolveLoginCommandKey, validateLoginSessionHome, } from "./login-command.js";
+const UUID = "11111111-2222-4333-8444-555555555555";
+describe("resolveLoginCommandKey", () => {
+    it("resolves the trusted adapter type to the closed key", () => {
+        expect(resolveLoginCommandKey("claude_local")).toBe("claude");
+        expect(resolveLoginCommandKey("codex_local")).toBe("codex");
+    });
+    it("fails closed for an unmapped adapter type", () => {
+        // The provider driver key and an unknown adapter confer no command authority.
+        expect(() => resolveLoginCommandKey("daytona")).toThrow("LOGIN_PTY_UNSUPPORTED_ADAPTER");
+        expect(() => resolveLoginCommandKey("gemini_local")).toThrow("LOGIN_PTY_UNSUPPORTED_ADAPTER");
+        expect(() => resolveLoginCommandKey("")).toThrow("LOGIN_PTY_UNSUPPORTED_ADAPTER");
+    });
+});
+describe("isLoginCommandKey", () => {
+    it("accepts only the closed key set", () => {
+        expect(isLoginCommandKey("claude")).toBe(true);
+        expect(isLoginCommandKey("codex")).toBe(true);
+        expect(isLoginCommandKey("gemini")).toBe(false);
+        expect(isLoginCommandKey("rm -rf /")).toBe(false);
+        expect(isLoginCommandKey(undefined)).toBe(false);
+    });
+});
+describe("isLoginCommandSupportedAdapterType", () => {
+    it("accepts only the adapter types the closed command map holds", () => {
+        // The admission guard reads this predicate, so it must match the map that
+        // the opener resolves. The mapped types pass; an unmapped type fails closed.
+        expect(isLoginCommandSupportedAdapterType("claude_local")).toBe(true);
+        expect(isLoginCommandSupportedAdapterType("codex_local")).toBe(true);
+        expect(isLoginCommandSupportedAdapterType("gemini_local")).toBe(false);
+        expect(isLoginCommandSupportedAdapterType("daytona")).toBe(false);
+        expect(isLoginCommandSupportedAdapterType("")).toBe(false);
+    });
+});
+describe("deriveLoginSessionHome", () => {
+    it("derives the exact UUID-form absolute path", () => {
+        expect(deriveLoginSessionHome(UUID)).toBe(`${LOGIN_SESSION_HOME_ROOT}/${UUID}`);
+    });
+    it("rejects a non-UUID id", () => {
+        expect(() => deriveLoginSessionHome("not-a-uuid")).toThrow("LOGIN_PTY_INVALID_SESSION_HOME");
+        expect(() => deriveLoginSessionHome("")).toThrow("LOGIN_PTY_INVALID_SESSION_HOME");
+    });
+});
+describe("validateLoginSessionHome", () => {
+    it("accepts the exact derived path shape", () => {
+        expect(() => validateLoginSessionHome(`${LOGIN_SESSION_HOME_ROOT}/${UUID}`)).not.toThrow();
+    });
+    it("rejects an empty, relative, traversal, whitespace, control, or metacharacter candidate", () => {
+        const candidates = [
+            "",
+            "paperclip-adapter-login/" + UUID,
+            `${LOGIN_SESSION_HOME_ROOT}/../${UUID}`,
+            `${LOGIN_SESSION_HOME_ROOT}/${UUID}/..`,
+            `${LOGIN_SESSION_HOME_ROOT}/ ${UUID}`,
+            `${LOGIN_SESSION_HOME_ROOT}/${UUID} `,
+            `${LOGIN_SESSION_HOME_ROOT}/${UUID}\n`,
+            `${LOGIN_SESSION_HOME_ROOT}/${UUID}\t`,
+            `${LOGIN_SESSION_HOME_ROOT}/${UUID}\0`,
+            `${LOGIN_SESSION_HOME_ROOT}/${UUID};rm -rf /`,
+            `${LOGIN_SESSION_HOME_ROOT}/$(id)`,
+            `${LOGIN_SESSION_HOME_ROOT}/${UUID}&&whoami`,
+            `/tmp/other/${UUID}`,
+            `${LOGIN_SESSION_HOME_ROOT}/NOTHEX11-2222-4333-8444-555555555555`,
+        ];
+        for (const candidate of candidates) {
+            expect(() => validateLoginSessionHome(candidate), candidate).toThrow("LOGIN_PTY_INVALID_SESSION_HOME");
+        }
+    });
+});
+//# sourceMappingURL=login-command.test.js.map

package/dist/services/login-command.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-command.test.js","sourceRoot":"","sources":["../../src/services/login-command.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,kCAAkC,EAClC,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,IAAI,GAAG,sCAAsC,CAAC;AAEpD,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,8EAA8E;QAC9E,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QAC9F,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,0EAA0E;QAC1E,6EAA6E;QAC7E,MAAM,CAAC,kCAAkC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,kCAAkC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,kCAAkC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,kCAAkC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,uBAAuB,IAAI,IAAI,EAAE,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,GAAG,uBAAuB,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,UAAU,GAAG;YACjB,EAAE;YACF,0BAA0B,GAAG,IAAI;YACjC,GAAG,uBAAuB,OAAO,IAAI,EAAE;YACvC,GAAG,uBAAuB,IAAI,IAAI,KAAK;YACvC,GAAG,uBAAuB,KAAK,IAAI,EAAE;YACrC,GAAG,uBAAuB,IAAI,IAAI,GAAG;YACrC,GAAG,uBAAuB,IAAI,IAAI,IAAI;YACtC,GAAG,uBAAuB,IAAI,IAAI,IAAI;YACtC,GAAG,uBAAuB,IAAI,IAAI,IAAI;YACtC,GAAG,uBAAuB,IAAI,IAAI,WAAW;YAC7C,GAAG,uBAAuB,QAAQ;YAClC,GAAG,uBAAuB,IAAI,IAAI,UAAU;YAC5C,cAAc,IAAI,EAAE;YACpB,GAAG,uBAAuB,uCAAuC;SAClE,CAAC;QACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,OAAO,CAClE,gCAAgC,CACjC,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/managed-workspace-identity.d.ts

@@ -0,0 +1,140 @@
+/**
+ * Control-plane half of the workspace readiness/handoff contract (PAP-17572).
+ *
+ * Resolves the identity and derived key material for one managed workspace,
+ * injects them into the guest process, and probes the guest's *protected*
+ * readiness so `running / healthy` can never be published for a workspace whose
+ * clone, identity, or login handoff disagrees with what was expected.
+ *
+ * Identity always comes from the worktree's own recorded instance pointer, never
+ * from a branch name or basename heuristic, and an unresolvable identity fails
+ * closed (no key injected, no readiness claimed).
+ */
+import { type Db } from "@paperclipai/db";
+import type { WorkspaceReadinessProbeResult } from "@paperclipai/shared";
+/**
+ * Per-probe budget. Matched to the semantic transport probe it replaces, so
+ * upgrading a runtime health check to the readiness contract cannot make a
+ * managed start or a reuse decision slower than it was.
+ */
+export declare const WORKSPACE_READINESS_PROBE_TIMEOUT_MS = 2000;
+export type ManagedWorkspaceIdentity = {
+    instanceId: string;
+    executionWorkspaceId: string;
+    companyId: string;
+    handoffKey: string;
+    readinessToken: string;
+    /** Whether the root secret was configured explicitly or derived. */
+    secretSource: "dedicated" | "derived";
+};
+/**
+ * Resolve the isolated instance id a worktree actually runs as.
+ *
+ * The worktree's `.paperclip/.env` pointer is authoritative because it is what
+ * the guest process itself loads. The path-derived id is only a fallback for a
+ * worktree provisioned before the pointer existed, and the two agree by
+ * construction for anything Paperclip provisioned.
+ */
+export declare function resolveManagedWorkspaceInstanceId(workspaceCwd: string): string | null;
+export declare function resolveManagedWorkspaceIdentity(input: {
+    workspaceCwd: string | null | undefined;
+    executionWorkspaceId: string | null | undefined;
+    companyId: string | null | undefined;
+    env?: NodeJS.ProcessEnv;
+}): ManagedWorkspaceIdentity | null;
+/**
+ * Env injected into a managed workspace's guest process.
+ *
+ * Only the *derived* per-workspace values cross the boundary: the guest never
+ * receives the root secret, so a compromised workspace cannot mint a ticket for
+ * a sibling workspace.
+ */
+export declare function buildManagedWorkspaceGuestEnv(identity: ManagedWorkspaceIdentity): Record<string, string>;
+/**
+ * Read a managed workspace's protected readiness over loopback.
+ *
+ * Failure modes are distinguished so callers can tell "not reachable" from
+ * "reachable but serving somebody else's clone" — the second is what made a
+ * relocated port able to masquerade as healthy.
+ */
+export declare function probeManagedWorkspaceReadiness(input: {
+    healthUrl: string;
+    identity: ManagedWorkspaceIdentity;
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+    handoffSubject?: {
+        userId: string;
+        email: string;
+    } | null;
+}): Promise<WorkspaceReadinessProbeResult>;
+/** Current board identities that must survive the clone for it to publish ready. */
+export declare function listManagedWorkspaceHandoffSubjects(db: Db, companyId: string): Promise<Array<{
+    userId: string;
+    email: string;
+}>>;
+/** Prove that every current board member can use the advertised handoff. */
+export declare function probeManagedWorkspaceHandoffSubjects(input: {
+    db: Db;
+    healthUrl: string;
+    identity: ManagedWorkspaceIdentity;
+    fetchImpl?: typeof fetch;
+}): Promise<WorkspaceReadinessProbeResult>;
+/**
+ * How strictly a managed start is gated on the guest's protected readiness.
+ *
+ *  - `auto` (default): a guest that *reports* readiness must satisfy it, and a
+ *    guest serving a different instance/workspace is always rejected. A guest
+ *    that reports no readiness block at all — an older checkout, which a managed
+ *    worktree can legitimately be — falls back to the semantic transport check
+ *    and is logged. Failing that case closed would turn an upgrade lag into an
+ *    outage of every existing workspace, which is a worse reliability outcome
+ *    than the defect this gate exists to fix. Such a workspace is still not
+ *    silently "usable": it has no handoff plugin, so `Open workspace` reports the
+ *    snapshot-local credential fallback rather than pretending to be ready.
+ *  - `strict`: a missing readiness block also blocks publication. Intended for
+ *    deployments that have finished rolling the new guest build everywhere.
+ */
+export type WorkspaceReadinessGateMode = "auto" | "strict";
+export declare function resolveWorkspaceReadinessGateMode(env?: NodeJS.ProcessEnv): WorkspaceReadinessGateMode;
+/**
+ * Whether a rejected probe must stop the runtime from being published.
+ *
+ * Everything except "this guest does not implement the contract" is a real
+ * disagreement about the clone and always blocks.
+ */
+export declare function shouldBlockPublicationOnReadiness(result: Extract<WorkspaceReadinessProbeResult, {
+    ok: false;
+}>, mode?: WorkspaceReadinessGateMode): boolean;
+/**
+ * How long a freshly started workspace may take to satisfy readiness.
+ *
+ * Deliberately short. The transport readiness probe has already required a
+ * `status: ok` response from this guest by the time the gate runs, so the only
+ * thing left to absorb is a one-off blip — not a cold start. A longer budget
+ * would add latency to every managed start to no benefit.
+ */
+export declare const WORKSPACE_READINESS_GATE_TIMEOUT_MS = 3000;
+/**
+ * Poll readiness until it passes or the gate budget runs out.
+ *
+ * `identity_mismatch` and `readiness_missing` are terminal and return
+ * immediately: another instance owning the port, or a guest that does not
+ * implement the contract, are not conditions that polling can change.
+ */
+export declare function waitForManagedWorkspaceReadiness(input: {
+    healthUrl: string;
+    identity: ManagedWorkspaceIdentity;
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+    now?: () => number;
+    sleep?: (ms: number) => Promise<void>;
+}): Promise<WorkspaceReadinessProbeResult>;
+/** Log a rejected probe once, with the machine reason kept intact for operators. */
+export declare function logManagedWorkspaceReadinessRejection(input: {
+    executionWorkspaceId: string;
+    healthUrl: string;
+    result: Extract<WorkspaceReadinessProbeResult, {
+        ok: false;
+    }>;
+}): void;
+//# sourceMappingURL=managed-workspace-identity.d.ts.map

package/dist/services/managed-workspace-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-workspace-identity.d.ts","sourceRoot":"","sources":["../../src/services/managed-workspace-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAiC,KAAK,EAAE,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,KAAK,EAAsB,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAmB7F;;;;GAIG;AACH,eAAO,MAAM,oCAAoC,OAAQ,CAAC;AAE1D,MAAM,MAAM,wBAAwB,GAAG;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,YAAY,EAAE,WAAW,GAAG,SAAS,CAAC;CACvC,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKrF;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACxC,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAChD,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,wBAAwB,GAAG,IAAI,CAoBlC;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxG;AAgBD;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,wBAAwB,CAAC;IACnC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC3D,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAgGzC;AAED,oFAAoF;AACpF,wBAAsB,mCAAmC,CACvD,EAAE,EAAE,EAAE,EACN,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAkBnD;AAED,4EAA4E;AAC5E,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,EAAE,EAAE,EAAE,CAAC;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,wBAAwB,CAAC;IACnC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAiBzC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,0BAA0B,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE3D,wBAAgB,iCAAiC,CAC/C,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,0BAA0B,CAE5B;AAED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE,OAAO,CAAC,6BAA6B,EAAE;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC,EAC7D,IAAI,GAAE,0BAAgE,GACrE,OAAO,CAGT;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mCAAmC,OAAQ,CAAC;AAGzD;;;;;;GAMG;AACH,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,wBAAwB,CAAC;IACnC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAoBzC;AAED,oFAAoF;AACpF,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC,6BAA6B,EAAE;QAAE,EAAE,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;CAC/D,QAYA"}

package/dist/services/managed-workspace-identity.js

@@ -0,0 +1,277 @@
+/**
+ * Control-plane half of the workspace readiness/handoff contract (PAP-17572).
+ *
+ * Resolves the identity and derived key material for one managed workspace,
+ * injects them into the guest process, and probes the guest's *protected*
+ * readiness so `running / healthy` can never be published for a workspace whose
+ * clone, identity, or login handoff disagrees with what was expected.
+ *
+ * Identity always comes from the worktree's own recorded instance pointer, never
+ * from a branch name or basename heuristic, and an unresolvable identity fails
+ * closed (no key injected, no readiness claimed).
+ */
+import path from "node:path";
+import { and, eq } from "drizzle-orm";
+import { authUsers, companyMemberships } from "@paperclipai/db";
+import { deriveWorkspaceHandoffKey, deriveWorkspaceReadinessToken, resolveWorkspaceHandoffRootSecret, WORKSPACE_EXECUTION_WORKSPACE_COMPANY_ID_ENV_KEY, WORKSPACE_EXECUTION_WORKSPACE_ID_ENV_KEY, WORKSPACE_HANDOFF_KEY_ENV_KEY, WORKSPACE_READINESS_TOKEN_ENV_KEY, WORKSPACE_READINESS_TOKEN_HEADER, WORKSPACE_READINESS_USER_EMAIL_HEADER, WORKSPACE_READINESS_USER_ID_HEADER, } from "../auth/workspace-login-handoff.js";
+import { logger } from "../middleware/logger.js";
+import { deriveWorktreeInstanceId, readWorktreeInstanceId, } from "./workspace-instance-cleanup.js";
+/**
+ * Per-probe budget. Matched to the semantic transport probe it replaces, so
+ * upgrading a runtime health check to the readiness contract cannot make a
+ * managed start or a reuse decision slower than it was.
+ */
+export const WORKSPACE_READINESS_PROBE_TIMEOUT_MS = 2_000;
+/**
+ * Resolve the isolated instance id a worktree actually runs as.
+ *
+ * The worktree's `.paperclip/.env` pointer is authoritative because it is what
+ * the guest process itself loads. The path-derived id is only a fallback for a
+ * worktree provisioned before the pointer existed, and the two agree by
+ * construction for anything Paperclip provisioned.
+ */
+export function resolveManagedWorkspaceInstanceId(workspaceCwd) {
+    const recorded = readWorktreeInstanceId(workspaceCwd);
+    if (recorded)
+        return recorded;
+    const derived = deriveWorktreeInstanceId(workspaceCwd);
+    return derived || null;
+}
+export function resolveManagedWorkspaceIdentity(input) {
+    const workspaceCwd = input.workspaceCwd?.trim();
+    const executionWorkspaceId = input.executionWorkspaceId?.trim();
+    const companyId = input.companyId?.trim();
+    if (!workspaceCwd || !executionWorkspaceId || !companyId)
+        return null;
+    const root = resolveWorkspaceHandoffRootSecret(input.env ?? process.env);
+    if (!root)
+        return null;
+    const instanceId = resolveManagedWorkspaceInstanceId(path.resolve(workspaceCwd));
+    if (!instanceId)
+        return null;
+    return {
+        instanceId,
+        executionWorkspaceId,
+        companyId,
+        handoffKey: deriveWorkspaceHandoffKey({ rootSecret: root.secret, instanceId, executionWorkspaceId }),
+        readinessToken: deriveWorkspaceReadinessToken({ rootSecret: root.secret, instanceId, executionWorkspaceId }),
+        secretSource: root.source,
+    };
+}
+/**
+ * Env injected into a managed workspace's guest process.
+ *
+ * Only the *derived* per-workspace values cross the boundary: the guest never
+ * receives the root secret, so a compromised workspace cannot mint a ticket for
+ * a sibling workspace.
+ */
+export function buildManagedWorkspaceGuestEnv(identity) {
+    return {
+        [WORKSPACE_HANDOFF_KEY_ENV_KEY]: identity.handoffKey,
+        [WORKSPACE_READINESS_TOKEN_ENV_KEY]: identity.readinessToken,
+        [WORKSPACE_EXECUTION_WORKSPACE_ID_ENV_KEY]: identity.executionWorkspaceId,
+        [WORKSPACE_EXECUTION_WORKSPACE_COMPANY_ID_ENV_KEY]: identity.companyId,
+    };
+}
+function isWorkspaceReadinessShape(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const candidate = value;
+    return (typeof candidate.state === "string"
+        && typeof candidate.databaseReady === "boolean"
+        && typeof candidate.cloneDataReady === "boolean"
+        && typeof candidate.authHandoffReady === "boolean"
+        && (typeof candidate.authHandoffUserId === "string" || candidate.authHandoffUserId === null)
+        && typeof candidate.seedState === "string"
+        && (typeof candidate.companyId === "string" || candidate.companyId === null));
+}
+/**
+ * Read a managed workspace's protected readiness over loopback.
+ *
+ * Failure modes are distinguished so callers can tell "not reachable" from
+ * "reachable but serving somebody else's clone" — the second is what made a
+ * relocated port able to masquerade as healthy.
+ */
+export async function probeManagedWorkspaceReadiness(input) {
+    const fetchImpl = input.fetchImpl ?? fetch;
+    let response;
+    try {
+        response = await fetchImpl(input.healthUrl, {
+            headers: {
+                [WORKSPACE_READINESS_TOKEN_HEADER]: input.identity.readinessToken,
+                ...(input.handoffSubject
+                    ? {
+                        [WORKSPACE_READINESS_USER_ID_HEADER]: input.handoffSubject.userId,
+                        [WORKSPACE_READINESS_USER_EMAIL_HEADER]: input.handoffSubject.email,
+                    }
+                    : {}),
+            },
+            signal: AbortSignal.timeout(input.timeoutMs ?? WORKSPACE_READINESS_PROBE_TIMEOUT_MS),
+        });
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: "unreachable",
+            readiness: null,
+            detail: error instanceof Error ? error.message : String(error),
+        };
+    }
+    const payload = await response.json().catch(() => null);
+    if (!response.ok) {
+        const readiness = isWorkspaceReadinessShape(payload?.workspace) ? payload.workspace : null;
+        return { ok: false, reason: "http_error", readiness, detail: `HTTP ${response.status}` };
+    }
+    if (payload?.status !== "ok") {
+        return { ok: false, reason: "unhealthy_payload", readiness: null, detail: String(payload?.status ?? "missing") };
+    }
+    if (payload.workspace
+        && typeof payload.workspace === "object"
+        && !("companyId" in payload.workspace)) {
+        // A guest that implements readiness but predates the company binding is not
+        // a legacy transport-only guest. Treat the partial contract as an identity
+        // disagreement so auto compatibility mode cannot publish an unopenable clone.
+        return {
+            ok: false,
+            reason: "identity_mismatch",
+            readiness: null,
+            detail: `expected company ${input.identity.companyId}, got missing`,
+        };
+    }
+    if (input.handoffSubject
+        && payload.workspace
+        && typeof payload.workspace === "object"
+        && !("authHandoffUserId" in payload.workspace)) {
+        return {
+            ok: false,
+            reason: "identity_mismatch",
+            readiness: null,
+            detail: `expected handoff user ${input.handoffSubject.userId}, got missing`,
+        };
+    }
+    if (!isWorkspaceReadinessShape(payload.workspace)) {
+        // Either the token was rejected or the guest predates this contract. Both
+        // mean the control plane cannot prove user readiness, so neither may publish.
+        return { ok: false, reason: "readiness_missing", readiness: null, detail: null };
+    }
+    const readiness = payload.workspace;
+    if (readiness.instanceId !== input.identity.instanceId
+        || readiness.executionWorkspaceId !== input.identity.executionWorkspaceId
+        || readiness.companyId !== input.identity.companyId) {
+        return {
+            ok: false,
+            reason: "identity_mismatch",
+            readiness,
+            detail: `expected ${input.identity.instanceId}/${input.identity.executionWorkspaceId}/${input.identity.companyId}, got ${readiness.instanceId}/${readiness.executionWorkspaceId}/${readiness.companyId}`,
+        };
+    }
+    if (!readiness.databaseReady || !readiness.cloneDataReady || !readiness.authHandoffReady) {
+        return { ok: false, reason: "not_ready", readiness, detail: readiness.failurePhase };
+    }
+    if (input.handoffSubject && readiness.authHandoffUserId !== input.handoffSubject.userId) {
+        return {
+            ok: false,
+            reason: "identity_mismatch",
+            readiness,
+            detail: `expected handoff user ${input.handoffSubject.userId}, got ${readiness.authHandoffUserId}`,
+        };
+    }
+    return { ok: true, readiness };
+}
+/** Current board identities that must survive the clone for it to publish ready. */
+export async function listManagedWorkspaceHandoffSubjects(db, companyId) {
+    const rows = await db
+        .select({ userId: authUsers.id, email: authUsers.email })
+        .from(authUsers)
+        .innerJoin(companyMemberships, and(eq(companyMemberships.principalType, "user"), eq(companyMemberships.principalId, authUsers.id), eq(companyMemberships.companyId, companyId), eq(companyMemberships.status, "active")));
+    return rows.flatMap((row) => {
+        const userId = row.userId?.trim();
+        const email = row.email?.trim();
+        return userId && email ? [{ userId, email }] : [];
+    });
+}
+/** Prove that every current board member can use the advertised handoff. */
+export async function probeManagedWorkspaceHandoffSubjects(input) {
+    const subjects = await listManagedWorkspaceHandoffSubjects(input.db, input.identity.companyId);
+    if (subjects.length === 0) {
+        return {
+            ok: false,
+            reason: "not_ready",
+            readiness: null,
+            detail: "no active board user is eligible for workspace login handoff",
+        };
+    }
+    const results = await Promise.all(subjects.map((handoffSubject) => probeManagedWorkspaceReadiness({
+        healthUrl: input.healthUrl,
+        identity: input.identity,
+        fetchImpl: input.fetchImpl,
+        handoffSubject,
+    })));
+    return results.find((result) => !result.ok) ?? results[0];
+}
+export function resolveWorkspaceReadinessGateMode(env = process.env) {
+    return env.PAPERCLIP_WORKSPACE_READINESS_GATE?.trim().toLowerCase() === "strict" ? "strict" : "auto";
+}
+/**
+ * Whether a rejected probe must stop the runtime from being published.
+ *
+ * Everything except "this guest does not implement the contract" is a real
+ * disagreement about the clone and always blocks.
+ */
+export function shouldBlockPublicationOnReadiness(result, mode = resolveWorkspaceReadinessGateMode()) {
+    if (result.reason === "readiness_missing")
+        return mode === "strict";
+    return true;
+}
+/**
+ * How long a freshly started workspace may take to satisfy readiness.
+ *
+ * Deliberately short. The transport readiness probe has already required a
+ * `status: ok` response from this guest by the time the gate runs, so the only
+ * thing left to absorb is a one-off blip — not a cold start. A longer budget
+ * would add latency to every managed start to no benefit.
+ */
+export const WORKSPACE_READINESS_GATE_TIMEOUT_MS = 3_000;
+const WORKSPACE_READINESS_GATE_INTERVAL_MS = 250;
+/**
+ * Poll readiness until it passes or the gate budget runs out.
+ *
+ * `identity_mismatch` and `readiness_missing` are terminal and return
+ * immediately: another instance owning the port, or a guest that does not
+ * implement the contract, are not conditions that polling can change.
+ */
+export async function waitForManagedWorkspaceReadiness(input) {
+    const now = input.now ?? Date.now;
+    const sleep = input.sleep ?? ((ms) => new Promise((resolve) => { setTimeout(resolve, ms); }));
+    const deadline = now() + (input.timeoutMs ?? WORKSPACE_READINESS_GATE_TIMEOUT_MS);
+    let last = {
+        ok: false,
+        reason: "unreachable",
+        readiness: null,
+        detail: "readiness gate did not run",
+    };
+    for (;;) {
+        last = await probeManagedWorkspaceReadiness({
+            healthUrl: input.healthUrl,
+            identity: input.identity,
+            fetchImpl: input.fetchImpl,
+        });
+        if (last.ok || last.reason === "identity_mismatch" || last.reason === "readiness_missing")
+            return last;
+        if (now() >= deadline)
+            return last;
+        await sleep(WORKSPACE_READINESS_GATE_INTERVAL_MS);
+    }
+}
+/** Log a rejected probe once, with the machine reason kept intact for operators. */
+export function logManagedWorkspaceReadinessRejection(input) {
+    logger.warn({
+        executionWorkspaceId: input.executionWorkspaceId,
+        healthUrl: input.healthUrl,
+        reason: input.result.reason,
+        detail: input.result.detail,
+        seedState: input.result.readiness?.seedState ?? null,
+        failurePhase: input.result.readiness?.failurePhase ?? null,
+    }, "managed workspace readiness probe rejected the runtime");
+}
+//# sourceMappingURL=managed-workspace-identity.js.map

package/dist/services/managed-workspace-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-workspace-identity.js","sourceRoot":"","sources":["../../src/services/managed-workspace-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAW,MAAM,iBAAiB,CAAC;AAEzE,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,iCAAiC,EACjC,gDAAgD,EAChD,wCAAwC,EACxC,6BAA6B,EAC7B,iCAAiC,EACjC,gCAAgC,EAChC,qCAAqC,EACrC,kCAAkC,GACnC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,KAAK,CAAC;AAY1D;;;;;;;GAOG;AACH,MAAM,UAAU,iCAAiC,CAAC,YAAoB;IACpE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACtD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,wBAAwB,CAAC,YAAY,CAAC,CAAC;IACvD,OAAO,OAAO,IAAI,IAAI,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAK/C;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,YAAY,IAAI,CAAC,oBAAoB,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAEtE,MAAM,IAAI,GAAG,iCAAiC,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,UAAU,GAAG,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACjF,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAE7B,OAAO;QACL,UAAU;QACV,oBAAoB;QACpB,SAAS;QACT,UAAU,EAAE,yBAAyB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;QACpG,cAAc,EAAE,6BAA6B,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC;QAC5G,YAAY,EAAE,IAAI,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,QAAkC;IAC9E,OAAO;QACL,CAAC,6BAA6B,CAAC,EAAE,QAAQ,CAAC,UAAU;QACpD,CAAC,iCAAiC,CAAC,EAAE,QAAQ,CAAC,cAAc;QAC5D,CAAC,wCAAwC,CAAC,EAAE,QAAQ,CAAC,oBAAoB;QACzE,CAAC,gDAAgD,CAAC,EAAE,QAAQ,CAAC,SAAS;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,OAAO,CACL,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;WAChC,OAAO,SAAS,CAAC,aAAa,KAAK,SAAS;WAC5C,OAAO,SAAS,CAAC,cAAc,KAAK,SAAS;WAC7C,OAAO,SAAS,CAAC,gBAAgB,KAAK,SAAS;WAC/C,CAAC,OAAO,SAAS,CAAC,iBAAiB,KAAK,QAAQ,IAAI,SAAS,CAAC,iBAAiB,KAAK,IAAI,CAAC;WACzF,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;WACvC,CAAC,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,CAC7E,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,KAMpD;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE;YAC1C,OAAO,EAAE;gBACP,CAAC,gCAAgC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;gBACjE,GAAG,CAAC,KAAK,CAAC,cAAc;oBACtB,CAAC,CAAC;wBACE,CAAC,kCAAkC,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,MAAM;wBACjE,CAAC,qCAAqC,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,KAAK;qBACpE;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,oCAAoC,CAAC;SACrF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,aAAa;YACrB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAE9C,CAAC;IAET,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,OAAO,EAAE,MAAM,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,SAAS,CAAC,EAAE,CAAC;IACnH,CAAC;IACD,IACE,OAAO,CAAC,SAAS;WACd,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;WACrC,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,SAAS,CAAC,EACtC,CAAC;QACD,4EAA4E;QAC5E,2EAA2E;QAC3E,8EAA8E;QAC9E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB;YAC3B,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,oBAAoB,KAAK,CAAC,QAAQ,CAAC,SAAS,eAAe;SACpE,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,cAAc;WACjB,OAAO,CAAC,SAAS;WACjB,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;WACrC,CAAC,CAAC,mBAAmB,IAAI,OAAO,CAAC,SAAS,CAAC,EAC9C,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB;YAC3B,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,yBAAyB,KAAK,CAAC,cAAc,CAAC,MAAM,eAAe;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,0EAA0E;QAC1E,8EAA8E;QAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACnF,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,IACE,SAAS,CAAC,UAAU,KAAK,KAAK,CAAC,QAAQ,CAAC,UAAU;WAC/C,SAAS,CAAC,oBAAoB,KAAK,KAAK,CAAC,QAAQ,CAAC,oBAAoB;WACtE,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS,EACnD,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB;YAC3B,SAAS;YACT,MAAM,EAAE,YAAY,KAAK,CAAC,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,SAAS,SAAS,CAAC,UAAU,IAAI,SAAS,CAAC,oBAAoB,IAAI,SAAS,CAAC,SAAS,EAAE;SACzM,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,IAAI,SAAS,CAAC,iBAAiB,KAAK,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QACxF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB;YAC3B,SAAS;YACT,MAAM,EAAE,yBAAyB,KAAK,CAAC,cAAc,CAAC,MAAM,SAAS,SAAS,CAAC,iBAAiB,EAAE;SACnG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,EAAM,EACN,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;SACxD,IAAI,CAAC,SAAS,CAAC;SACf,SAAS,CACR,kBAAkB,EAClB,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,EAC5C,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC,EAChD,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,EAC3C,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CACxC,CACF,CAAC;IACJ,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QAChC,OAAO,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,KAK1D;IACC,MAAM,QAAQ,GAAG,MAAM,mCAAmC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,8DAA8D;SACvE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,8BAA8B,CAAC;QAChG,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc;KACf,CAAC,CAAC,CAAC,CAAC;IACL,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC;AAC7D,CAAC;AAmBD,MAAM,UAAU,iCAAiC,CAC/C,MAAyB,OAAO,CAAC,GAAG;IAEpC,OAAO,GAAG,CAAC,kCAAkC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AACvG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iCAAiC,CAC/C,MAA6D,EAC7D,OAAmC,iCAAiC,EAAE;IAEtE,IAAI,MAAM,CAAC,MAAM,KAAK,mBAAmB;QAAE,OAAO,IAAI,KAAK,QAAQ,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,KAAK,CAAC;AACzD,MAAM,oCAAoC,GAAG,GAAG,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,KAOtD;IACC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5G,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,mCAAmC,CAAC,CAAC;IAClF,IAAI,IAAI,GAAkC;QACxC,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,4BAA4B;KACrC,CAAC;IACF,SAAS,CAAC;QACR,IAAI,GAAG,MAAM,8BAA8B,CAAC;YAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,mBAAmB,IAAI,IAAI,CAAC,MAAM,KAAK,mBAAmB;YAAE,OAAO,IAAI,CAAC;QACvG,IAAI,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qCAAqC,CAAC,KAIrD;IACC,MAAM,CAAC,IAAI,CACT;QACE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;QAC3B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;QAC3B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,IAAI,IAAI;QACpD,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,IAAI,IAAI;KAC3D,EACD,wDAAwD,CACzD,CAAC;AACJ,CAAC"}

package/dist/services/plugin-environment-driver.d.ts

@@ -17,6 +17,20 @@ import type { PluginWorkerManager } from "./plugin-worker-manager.js";
  * provider-capabilities value all read one source and cannot drift.
  */
 export declare const REUSABLE_LEASE_WORKER_METHODS: readonly ["environmentResumeLease", "environmentReleaseLease", "environmentDestroyLease"];
+/**
+ * The worker methods a sandbox provider must advertise before the customImage
+ * setup gate in `environment-custom-images.ts` allows an interactive setup
+ * session. The setup lifecycle starts a session through
+ * `environmentStartInteractiveSetup`, polls it through
+ * `environmentGetInteractiveSetup`, and cancels it through
+ * `environmentCancelInteractiveSetup`. A provider that omits any of the three
+ * can strand a setup session partway through the lifecycle.
+ */
+export declare const INTERACTIVE_SETUP_WORKER_METHODS: readonly ["environmentStartInteractiveSetup", "environmentGetInteractiveSetup", "environmentCancelInteractiveSetup"];
+/** The worker method the customImage template-capture gate in `environment-custom-images.ts` requires. */
+export declare const TEMPLATE_CAPTURE_WORKER_METHODS: readonly ["environmentCaptureTemplate"];
+/** The worker method the customImage template-delete gate in `environment-custom-images.ts` requires. */
+export declare const TEMPLATE_DELETE_WORKER_METHODS: readonly ["environmentDeleteTemplate"];
 export interface ReadyPluginWorkerRecovery {
     pluginKeys: readonly string[];
     startWorker(plugin: {
@@ -48,7 +62,7 @@ export interface ReadyPluginEnvironmentDriver {
     templateRefKind?: PluginEnvironmentDriverDeclaration["templateRefKind"];
     templateConfigBinding?: PluginEnvironmentDriverDeclaration["templateConfigBinding"];
     supportsTemplateDelete?: PluginEnvironmentDriverDeclaration["supportsTemplateDelete"];
-    supportsSetupTokenLogin?: PluginEnvironmentDriverDeclaration["supportsSetupTokenLogin"];
+    supportsLoginPty?: PluginEnvironmentDriverDeclaration["supportsLoginPty"];
 }
 export declare function pluginDriverProviderKey(config: Pick<PluginEnvironmentConfig, "pluginKey" | "driverKey">): string;
 export declare function resolvePluginEnvironmentDriver(input: {

package/dist/services/plugin-environment-driver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin-environment-driver.d.ts","sourceRoot":"","sources":["../../src/services/plugin-environment-driver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,kCAAkC,EACnC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EACV,8BAA8B,EAC9B,8BAA8B,EAC9B,wCAAwC,EACxC,4CAA4C,EAC5C,0CAA0C,EAC1C,sCAAsC,EACtC,sCAAsC,EACtC,6CAA6C,EAC7C,6CAA6C,EAC7C,qCAAqC,EACrC,qCAAqC,EACrC,sBAAsB,EACtB,uCAAuC,EACvC,uCAAuC,EACxC,MAAM,yBAAyB,CAAC;AAQjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,2FAIhC,CAAC;AAEX,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,WAAW,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,kCAAkC,CAAC,cAAc,CAAC,CAAC;IACjE,sBAAsB,CAAC,EAAE,kCAAkC,CAAC,wBAAwB,CAAC,CAAC;IACtF,mBAAmB,CAAC,EAAE,kCAAkC,CAAC,qBAAqB,CAAC,CAAC;IAChF;;;;;;OAMG;IACH,4BAA4B,EAAE,OAAO,CAAC;IACtC,wBAAwB,CAAC,EAAE,kCAAkC,CAAC,0BAA0B,CAAC,CAAC;IAC1F,+BAA+B,CAAC,EAAE,kCAAkC,CAAC,iCAAiC,CAAC,CAAC;IACxG,uBAAuB,CAAC,EAAE,kCAAkC,CAAC,yBAAyB,CAAC,CAAC;IACxF,eAAe,CAAC,EAAE,kCAAkC,CAAC,iBAAiB,CAAC,CAAC;IACxE,qBAAqB,CAAC,EAAE,kCAAkC,CAAC,uBAAuB,CAAC,CAAC;IACpF,sBAAsB,CAAC,EAAE,kCAAkC,CAAC,wBAAwB,CAAC,CAAC;IACtF,uBAAuB,CAAC,EAAE,kCAAkC,CAAC,yBAAyB,CAAC,CAAC;CACzF;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,MAAM,CAEhH;AAmBD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;CACjC;;;;;;;;;;;;;;;;;GAgBA;AAED,wBAAsB,mCAAmC,CAAC,KAAK,EAAE;IAC/D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;YAcqB,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAAU,kCAAkC;UAP9I;AAED,wBAAsB,uCAAuC,CAAC,KAAK,EAAE;IACnE,EAAE,EAAE,EAAE,CAAC;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,kCAAkC,CAAA;CAAE,GAAG,IAAI,CAAC,CAexJ;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sCAAsC,CAAC,KAAK,EAAE;IAClE,EAAE,EAAE,EAAE,CAAC;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,EAAE,kCAAkC,CAAA;CAAE,GAAG,IAAI,CAAC,CASnJ;AAED,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;CAClD,2CAsEA;AAED,wBAAsB,mCAAmC,CAAC,KAAK,EAAE;IAC/D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC;IACV,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kCAAkC,CAAC;CAC5C,CAAC,CAoDD;AAED,wBAAsB,qCAAqC,CAAC,KAAK,EAAE;IACjE,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;CACjC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAqBnC;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,uBAAuB,CAAC;CACjC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoBlC;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoClC;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,uBAAuB,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAWlC;AAED,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,uBAAuB,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhB;AAED,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,uCAAuC,CAAC;IAChD,MAAM,EAAE,uBAAuB,CAAC;CACjC,GAAG,OAAO,CAAC,uCAAuC,CAAC,CASnD;AAED,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,8BAA8B,CAAC;IACvC,MAAM,EAAE,uBAAuB,CAAC;CACjC,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAiB1C;AAED,wBAAsB,sCAAsC,CAAC,KAAK,EAAE;IAClE,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,4CAA4C,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CACpF,GAAG,OAAO,CAAC,wCAAwC,CAAC,CAcpD;AAED,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,0CAA0C,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CAClF,GAAG,OAAO,CAAC,wCAAwC,CAAC,CAcpD;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,sCAAsC,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CAC9E,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAclD;AAED,wBAAsB,uCAAuC,CAAC,KAAK,EAAE;IACnE,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,6CAA6C,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CACrF,GAAG,OAAO,CAAC,6CAA6C,CAAC,CAczD;AAED,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,qCAAqC,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CAC7E,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAcjD;AAID,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GAAG,MAAM,GAAG,SAAS,CAWrB"}
+{"version":3,"file":"plugin-environment-driver.d.ts","sourceRoot":"","sources":["../../src/services/plugin-environment-driver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,kCAAkC,EACnC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EACV,8BAA8B,EAC9B,8BAA8B,EAC9B,wCAAwC,EACxC,4CAA4C,EAC5C,0CAA0C,EAC1C,sCAAsC,EACtC,sCAAsC,EACtC,6CAA6C,EAC7C,6CAA6C,EAC7C,qCAAqC,EACrC,qCAAqC,EACrC,sBAAsB,EACtB,uCAAuC,EACvC,uCAAuC,EACxC,MAAM,yBAAyB,CAAC;AAQjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,2FAIhC,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,gCAAgC,sHAInC,CAAC;AAEX,0GAA0G;AAC1G,eAAO,MAAM,+BAA+B,yCAElC,CAAC;AAEX,yGAAyG;AACzG,eAAO,MAAM,8BAA8B,wCAEjC,CAAC;AAEX,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,WAAW,CAAC,MAAM,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,kCAAkC,CAAC,cAAc,CAAC,CAAC;IACjE,sBAAsB,CAAC,EAAE,kCAAkC,CAAC,wBAAwB,CAAC,CAAC;IACtF,mBAAmB,CAAC,EAAE,kCAAkC,CAAC,qBAAqB,CAAC,CAAC;IAChF;;;;;;OAMG;IACH,4BAA4B,EAAE,OAAO,CAAC;IACtC,wBAAwB,CAAC,EAAE,kCAAkC,CAAC,0BAA0B,CAAC,CAAC;IAC1F,+BAA+B,CAAC,EAAE,kCAAkC,CAAC,iCAAiC,CAAC,CAAC;IACxG,uBAAuB,CAAC,EAAE,kCAAkC,CAAC,yBAAyB,CAAC,CAAC;IACxF,eAAe,CAAC,EAAE,kCAAkC,CAAC,iBAAiB,CAAC,CAAC;IACxE,qBAAqB,CAAC,EAAE,kCAAkC,CAAC,uBAAuB,CAAC,CAAC;IACpF,sBAAsB,CAAC,EAAE,kCAAkC,CAAC,wBAAwB,CAAC,CAAC;IACtF,gBAAgB,CAAC,EAAE,kCAAkC,CAAC,kBAAkB,CAAC,CAAC;CAC3E;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,IAAI,CAAC,uBAAuB,EAAE,WAAW,GAAG,WAAW,CAAC,GAAG,MAAM,CAEhH;AAmBD,wBAAsB,8BAA8B,CAAC,KAAK,EAAE;IAC1D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;CACjC;;;;;;;;;;;;;;;;;GAgBA;AAED,wBAAsB,mCAAmC,CAAC,KAAK,EAAE;IAC/D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;YAcqB,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAAU,kCAAkC;UAP9I;AAED,wBAAsB,uCAAuC,CAAC,KAAK,EAAE;IACnE,EAAE,EAAE,EAAE,CAAC;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAAC,MAAM,EAAE,kCAAkC,CAAA;CAAE,GAAG,IAAI,CAAC,CAexJ;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,sCAAsC,CAAC,KAAK,EAAE;IAClE,EAAE,EAAE,EAAE,CAAC;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAAC,MAAM,EAAE,kCAAkC,CAAA;CAAE,GAAG,IAAI,CAAC,CASnJ;AAED,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,oBAAoB,CAAC,EAAE,yBAAyB,CAAC;CAClD,2CAsEA;AAED,wBAAsB,mCAAmC,CAAC,KAAK,EAAE;IAC/D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC;IACV,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kCAAkC,CAAC;CAC5C,CAAC,CAoDD;AAED,wBAAsB,qCAAqC,CAAC,KAAK,EAAE;IACjE,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;CACjC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAqBnC;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,uBAAuB,CAAC;CACjC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoBlC;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAoClC;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,uBAAuB,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAWlC;AAED,wBAAsB,6BAA6B,CAAC,KAAK,EAAE;IACzD,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,uBAAuB,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzC,GAAG,OAAO,CAAC,IAAI,CAAC,CAWhB;AAED,wBAAsB,iCAAiC,CAAC,KAAK,EAAE;IAC7D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,uCAAuC,CAAC;IAChD,MAAM,EAAE,uBAAuB,CAAC;CACjC,GAAG,OAAO,CAAC,uCAAuC,CAAC,CASnD;AAED,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,8BAA8B,CAAC;IACvC,MAAM,EAAE,uBAAuB,CAAC;CACjC,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAiB1C;AAED,wBAAsB,sCAAsC,CAAC,KAAK,EAAE;IAClE,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,4CAA4C,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CACpF,GAAG,OAAO,CAAC,wCAAwC,CAAC,CAcpD;AAED,wBAAsB,oCAAoC,CAAC,KAAK,EAAE;IAChE,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,0CAA0C,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CAClF,GAAG,OAAO,CAAC,wCAAwC,CAAC,CAcpD;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC5D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,sCAAsC,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CAC9E,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAclD;AAED,wBAAsB,uCAAuC,CAAC,KAAK,EAAE;IACnE,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,6CAA6C,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CACrF,GAAG,OAAO,CAAC,6CAA6C,CAAC,CAczD;AAED,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,EAAE,EAAE,EAAE,CAAC;IACP,aAAa,EAAE,mBAAmB,CAAC;IACnC,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,IAAI,CAAC,qCAAqC,EAAE,WAAW,GAAG,QAAQ,CAAC,CAAC;CAC7E,GAAG,OAAO,CAAC,qCAAqC,CAAC,CAcjD;AAID,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GAAG,MAAM,GAAG,SAAS,CAWrB"}

package/dist/services/plugin-environment-driver.js

@@ -19,6 +19,28 @@ export const REUSABLE_LEASE_WORKER_METHODS = [
     "environmentReleaseLease",
     "environmentDestroyLease",
 ];
+/**
+ * The worker methods a sandbox provider must advertise before the customImage
+ * setup gate in `environment-custom-images.ts` allows an interactive setup
+ * session. The setup lifecycle starts a session through
+ * `environmentStartInteractiveSetup`, polls it through
+ * `environmentGetInteractiveSetup`, and cancels it through
+ * `environmentCancelInteractiveSetup`. A provider that omits any of the three
+ * can strand a setup session partway through the lifecycle.
+ */
+export const INTERACTIVE_SETUP_WORKER_METHODS = [
+    "environmentStartInteractiveSetup",
+    "environmentGetInteractiveSetup",
+    "environmentCancelInteractiveSetup",
+];
+/** The worker method the customImage template-capture gate in `environment-custom-images.ts` requires. */
+export const TEMPLATE_CAPTURE_WORKER_METHODS = [
+    "environmentCaptureTemplate",
+];
+/** The worker method the customImage template-delete gate in `environment-custom-images.ts` requires. */
+export const TEMPLATE_DELETE_WORKER_METHODS = [
+    "environmentDeleteTemplate",
+];
 export function pluginDriverProviderKey(config) {
     return `${config.pluginKey}:${config.driverKey}`;
 }
@@ -157,7 +179,7 @@ export async function listReadyPluginEnvironmentDrivers(input) {
             templateRefKind: driver.templateRefKind,
             templateConfigBinding: driver.templateConfigBinding,
             supportsTemplateDelete: driver.supportsTemplateDelete,
-            supportsSetupTokenLogin: driver.supportsSetupTokenLogin,
+            supportsLoginPty: driver.supportsLoginPty,
         })));
     }
     return rows;