@paperclipai/server 2026.824.1 → 2026.825.0-beta.1

package/dist/dev-runner-worktree.js

@@ -1,6 +1,7 @@
 import { existsSync, lstatSync, readFileSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
+import { hasVerifiedWorktreeSeedManifest } from "./worktree-seed-manifest.js";
 function parseEnvFile(contents) {
     const entries = {};
     for (const rawLine of contents.split(/\r?\n/)) {
@@ -43,6 +44,10 @@ export function resolveWorktreeEnvFilePath(rootDir) {
 }
 export function isWorktreeSeedPending(rootDir) {
     const markerDir = path.resolve(rootDir, ".paperclip");
+    const manifestPath = path.resolve(markerDir, "seed-manifest.json");
+    if (existsSync(manifestPath)) {
+        return !hasVerifiedWorktreeSeedManifest(manifestPath);
+    }
     return existsSync(path.resolve(markerDir, "seed-pending"))
         && !existsSync(path.resolve(markerDir, "seed-complete"));
 }

package/dist/dev-runner-worktree.js.map

@@ -1 +1 @@
-{"version":3,"file":"dev-runner-worktree.js","sourceRoot":"","sources":["../src/dev-runner-worktree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QAED,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAOD,MAAM,UAAU,2BAA2B,CAAC,OAAe;IACzD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/C,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,KAAK,CAAC;IAEjC,OAAO,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;WACrD,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAsB;IACxD,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,qCAAqC,CAC5C,OAAe,EACf,OAA+B,EAC/B,GAAsB;IAEtB,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC;IAEpC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,eAAe,GACnB,sBAAsB,KAAK,eAAe;QAC1C,CAAC,UAAU,CAAC,sBAAsB,CAAC;QACnC,UAAU,CAAC,eAAe,CAAC,CAAC;IAC9B,IAAI,CAAC,eAAe;QAAE,OAAO,OAAO,CAAC;IAErC,MAAM,OAAO,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO;QACL,GAAG,OAAO;QACV,cAAc,EAAE,OAAO;QACvB,gBAAgB,EAAE,eAAe;QACjC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAe,EACf,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,OAAO;YACP,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,qCAAqC,CACnD,OAAO,EACP,YAAY,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAC3C,GAAG,CACJ,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC1E,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO;QACL,OAAO;QACP,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"dev-runner-worktree.js","sourceRoot":"","sources":["../src/dev-runner-worktree.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAE9E,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAE5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QAED,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAC9C,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAOD,MAAM,UAAU,2BAA2B,CAAC,OAAe;IACzD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAE/C,MAAM,IAAI,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,KAAK,CAAC;IAEjC,OAAO,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACnE,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,+BAA+B,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;WACrD,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAsB;IACxD,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,IAAI,wBAAwB,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,qCAAqC,CAC5C,OAAe,EACf,OAA+B,EAC/B,GAAsB;IAEtB,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;IAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC;IAEpC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,eAAe,GACnB,sBAAsB,KAAK,eAAe;QAC1C,CAAC,UAAU,CAAC,sBAAsB,CAAC;QACnC,UAAU,CAAC,eAAe,CAAC,CAAC;IAC9B,IAAI,CAAC,eAAe;QAAE,OAAO,OAAO,CAAC;IAErC,MAAM,OAAO,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO;QACL,GAAG,OAAO;QACV,cAAc,EAAE,OAAO;QACvB,gBAAgB,EAAE,eAAe;QACjC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,OAAe,EACf,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,OAAO;YACP,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,qCAAqC,CACnD,OAAO,EACP,YAAY,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAC3C,GAAG,CACJ,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC1E,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IAED,OAAO;QACL,OAAO;QACP,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC"}

package/dist/duplex-aggregate-ceiling-env.d.ts

@@ -0,0 +1,21 @@
+import { type DuplexAggregateCeilingOverrideRejectionReporter } from "@paperclipai/adapter-utils/duplex-aggregate-byte-ledger";
+/**
+ * Resolve the aggregate duplex route byte ceiling from the raw operator override
+ * string. The host reads the override from
+ * PAPERCLIP_MAX_AGGREGATE_DUPLEX_ROUTE_BYTES.
+ *
+ * This helper distinguishes an absent variable from a present blank value. An
+ * absent variable is `undefined`. The helper then uses the documented default and
+ * does not report a rejection. A present variable is a string, even when the
+ * string holds only whitespace. The helper sends every present string through
+ * `Number`, so a blank or whitespace-only value becomes `0`. The numeric
+ * validation in {@link resolveDuplexAggregateCeilingBytes} rejects `0`, reports it
+ * through `onRejectedOverride`, and returns the safe default. So a present blank
+ * value is visible as invalid instead of silent as absent.
+ *
+ * `Number` ignores surrounding whitespace, so a valid value with surrounding
+ * spaces still parses. The reporter receives only the parsed number, never the raw
+ * string, so no operator-supplied text reaches a log line.
+ */
+export declare function resolveDuplexAggregateCeilingBytesFromEnv(rawOverride: string | undefined, onRejectedOverride?: DuplexAggregateCeilingOverrideRejectionReporter): number;
+//# sourceMappingURL=duplex-aggregate-ceiling-env.d.ts.map

package/dist/duplex-aggregate-ceiling-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"duplex-aggregate-ceiling-env.d.ts","sourceRoot":"","sources":["../src/duplex-aggregate-ceiling-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,+CAA+C,EACrD,MAAM,yDAAyD,CAAC;AAEjE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yCAAyC,CACvD,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,kBAAkB,CAAC,EAAE,+CAA+C,GACnE,MAAM,CAKR"}

package/dist/duplex-aggregate-ceiling-env.js

@@ -0,0 +1,23 @@
+import { resolveDuplexAggregateCeilingBytes, } from "@paperclipai/adapter-utils/duplex-aggregate-byte-ledger";
+/**
+ * Resolve the aggregate duplex route byte ceiling from the raw operator override
+ * string. The host reads the override from
+ * PAPERCLIP_MAX_AGGREGATE_DUPLEX_ROUTE_BYTES.
+ *
+ * This helper distinguishes an absent variable from a present blank value. An
+ * absent variable is `undefined`. The helper then uses the documented default and
+ * does not report a rejection. A present variable is a string, even when the
+ * string holds only whitespace. The helper sends every present string through
+ * `Number`, so a blank or whitespace-only value becomes `0`. The numeric
+ * validation in {@link resolveDuplexAggregateCeilingBytes} rejects `0`, reports it
+ * through `onRejectedOverride`, and returns the safe default. So a present blank
+ * value is visible as invalid instead of silent as absent.
+ *
+ * `Number` ignores surrounding whitespace, so a valid value with surrounding
+ * spaces still parses. The reporter receives only the parsed number, never the raw
+ * string, so no operator-supplied text reaches a log line.
+ */
+export function resolveDuplexAggregateCeilingBytesFromEnv(rawOverride, onRejectedOverride) {
+    return resolveDuplexAggregateCeilingBytes(rawOverride === undefined ? undefined : Number(rawOverride), onRejectedOverride);
+}
+//# sourceMappingURL=duplex-aggregate-ceiling-env.js.map

package/dist/duplex-aggregate-ceiling-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"duplex-aggregate-ceiling-env.js","sourceRoot":"","sources":["../src/duplex-aggregate-ceiling-env.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,GAEnC,MAAM,yDAAyD,CAAC;AAEjE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,yCAAyC,CACvD,WAA+B,EAC/B,kBAAoE;IAEpE,OAAO,kCAAkC,CACvC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAC3D,kBAAkB,CACnB,CAAC;AACJ,CAAC"}

package/dist/embedded-postgres-supervisor.d.ts

@@ -0,0 +1,27 @@
+export type EmbeddedPostgresExitListener = (code: number | null, signal: NodeJS.Signals | null) => void;
+export interface SupervisedEmbeddedPostgres {
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    process?: {
+        once(event: "exit", listener: EmbeddedPostgresExitListener): unknown;
+    };
+}
+export interface EmbeddedPostgresSupervisor {
+    current(): SupervisedEmbeddedPostgres;
+    shutdown(): Promise<void>;
+    waitForRecovery(): Promise<void>;
+}
+type Options = {
+    initialInstance: SupervisedEmbeddedPostgres;
+    createInstance: () => SupervisedEmbeddedPostgres;
+    beforeRestart?: (attempt: number) => Promise<void> | void;
+    restartDelaysMs?: number[];
+    delay?: (milliseconds: number) => Promise<void>;
+    onUnexpectedExit?: EmbeddedPostgresExitListener;
+    onRestartAttemptFailed?: (error: unknown, attempt: number) => void;
+    onRestarted?: (attempt: number) => void;
+    onRecoveryExhausted?: (error: unknown) => void;
+};
+export declare function createEmbeddedPostgresSupervisor(options: Options): EmbeddedPostgresSupervisor;
+export {};
+//# sourceMappingURL=embedded-postgres-supervisor.d.ts.map

package/dist/embedded-postgres-supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedded-postgres-supervisor.d.ts","sourceRoot":"","sources":["../src/embedded-postgres-supervisor.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,4BAA4B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC;AAExG,MAAM,WAAW,0BAA0B;IACzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,4BAA4B,GAAG,OAAO,CAAA;KAAE,CAAC;CACpF;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,IAAI,0BAA0B,CAAC;IACtC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAClC;AAED,KAAK,OAAO,GAAG;IACb,eAAe,EAAE,0BAA0B,CAAC;IAC5C,cAAc,EAAE,MAAM,0BAA0B,CAAC;IACjD,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC1D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,gBAAgB,CAAC,EAAE,4BAA4B,CAAC;IAChD,sBAAsB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnE,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CAChD,CAAC;AAIF,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,OAAO,GAAG,0BAA0B,CA+D7F"}

package/dist/embedded-postgres-supervisor.js

@@ -0,0 +1,72 @@
+const defaultDelay = (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds));
+export function createEmbeddedPostgresSupervisor(options) {
+    const restartDelaysMs = options.restartDelaysMs ?? [0, 250, 1_000];
+    const wait = options.delay ?? defaultDelay;
+    let activeInstance = options.initialInstance;
+    let activeInstanceExited = false;
+    let shuttingDown = false;
+    let recoveryPromise = null;
+    const recover = async () => {
+        let lastError = new Error("Embedded PostgreSQL exited unexpectedly");
+        for (let index = 0; index < restartDelaysMs.length; index += 1) {
+            if (shuttingDown)
+                return;
+            const attempt = index + 1;
+            const delayMs = restartDelaysMs[index] ?? 0;
+            if (delayMs > 0)
+                await wait(delayMs);
+            if (shuttingDown)
+                return;
+            try {
+                await options.beforeRestart?.(attempt);
+                const replacement = options.createInstance();
+                await replacement.start();
+                if (shuttingDown) {
+                    await replacement.stop();
+                    return;
+                }
+                activeInstance = replacement;
+                activeInstanceExited = false;
+                monitor(replacement);
+                options.onRestarted?.(attempt);
+                return;
+            }
+            catch (error) {
+                lastError = error;
+                options.onRestartAttemptFailed?.(error, attempt);
+            }
+        }
+        if (!shuttingDown)
+            options.onRecoveryExhausted?.(lastError);
+    };
+    const monitor = (instance) => {
+        const child = instance.process;
+        if (!child) {
+            options.onRecoveryExhausted?.(new Error("Embedded PostgreSQL started without a child process to monitor"));
+            return;
+        }
+        child.once("exit", (code, signal) => {
+            if (activeInstance !== instance)
+                return;
+            activeInstanceExited = true;
+            if (shuttingDown)
+                return;
+            options.onUnexpectedExit?.(code, signal);
+            recoveryPromise = recover().finally(() => { recoveryPromise = null; });
+        });
+    };
+    monitor(activeInstance);
+    return {
+        current: () => activeInstance,
+        waitForRecovery: async () => { await recoveryPromise; },
+        shutdown: async () => {
+            if (shuttingDown)
+                return;
+            shuttingDown = true;
+            await recoveryPromise;
+            if (!activeInstanceExited)
+                await activeInstance.stop();
+        },
+    };
+}
+//# sourceMappingURL=embedded-postgres-supervisor.js.map

package/dist/embedded-postgres-supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedded-postgres-supervisor.js","sourceRoot":"","sources":["../src/embedded-postgres-supervisor.ts"],"names":[],"mappings":"AA0BA,MAAM,YAAY,GAAG,CAAC,YAAoB,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AAEjH,MAAM,UAAU,gCAAgC,CAAC,OAAgB;IAC/D,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;IAC3C,IAAI,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAC7C,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,eAAe,GAAyB,IAAI,CAAC;IAEjD,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,IAAI,SAAS,GAAY,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC9E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC/D,IAAI,YAAY;gBAAE,OAAO;YACzB,MAAM,OAAO,GAAG,KAAK,GAAG,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,YAAY;gBAAE,OAAO;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,CAAC;gBACvC,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC7C,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;gBAC1B,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,WAAW,CAAC,IAAI,EAAE,CAAC;oBACzB,OAAO;gBACT,CAAC;gBACD,cAAc,GAAG,WAAW,CAAC;gBAC7B,oBAAoB,GAAG,KAAK,CAAC;gBAC7B,OAAO,CAAC,WAAW,CAAC,CAAC;gBACrB,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,OAAO,CAAC,sBAAsB,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY;YAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,QAAoC,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,mBAAmB,EAAE,CAAC,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC,CAAC;YAC3G,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,cAAc,KAAK,QAAQ;gBAAE,OAAO;YACxC,oBAAoB,GAAG,IAAI,CAAC;YAC5B,IAAI,YAAY;gBAAE,OAAO;YACzB,OAAO,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzC,eAAe,GAAG,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,CAAC,cAAc,CAAC,CAAC;IACxB,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc;QAC7B,eAAe,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,eAAe,CAAC,CAAC,CAAC;QACvD,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,IAAI,YAAY;gBAAE,OAAO;YACzB,YAAY,GAAG,IAAI,CAAC;YACpB,MAAM,eAAe,CAAC;YACtB,IAAI,CAAC,oBAAoB;gBAAE,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -8,6 +8,8 @@ export declare function unauthorized(message?: string): HttpError;
 export declare function forbidden(message?: string, details?: unknown): HttpError;
 export declare function notFound(message?: string, details?: unknown): HttpError;
 export declare function conflict(message: string, details?: unknown): HttpError;
+export declare function payloadTooLarge(message: string, details?: unknown): HttpError;
+export declare function unsupportedMediaType(message: string, details?: unknown): HttpError;
 export declare function unprocessable(message: string, details?: unknown): HttpError;
 export declare function tooManyRequests(message?: string, details?: unknown): HttpError;
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,SAAU,SAAQ,KAAK;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEN,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO;CAK/D;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,aAE5D;AAED,wBAAgB,YAAY,CAAC,OAAO,SAAiB,aAEpD;AAED,wBAAgB,SAAS,CAAC,OAAO,SAAc,EAAE,OAAO,CAAC,EAAE,OAAO,aAEjE;AAED,wBAAgB,QAAQ,CAAC,OAAO,SAAc,EAAE,OAAO,CAAC,EAAE,OAAO,aAEhE;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,aAE1D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,aAE/D;AAED,wBAAgB,eAAe,CAAC,OAAO,SAAsB,EAAE,OAAO,CAAC,EAAE,OAAO,aAE/E"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,SAAU,SAAQ,KAAK;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEN,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO;CAK/D;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,aAE5D;AAED,wBAAgB,YAAY,CAAC,OAAO,SAAiB,aAEpD;AAED,wBAAgB,SAAS,CAAC,OAAO,SAAc,EAAE,OAAO,CAAC,EAAE,OAAO,aAEjE;AAED,wBAAgB,QAAQ,CAAC,OAAO,SAAc,EAAE,OAAO,CAAC,EAAE,OAAO,aAEhE;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,aAE1D;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,aAEjE;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,aAEtE;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,aAE/D;AAED,wBAAgB,eAAe,CAAC,OAAO,SAAsB,EAAE,OAAO,CAAC,EAAE,OAAO,aAE/E"}

package/dist/errors.js

@@ -22,6 +22,12 @@ export function notFound(message = "Not found", details) {
 export function conflict(message, details) {
     return new HttpError(409, message, details);
 }
+export function payloadTooLarge(message, details) {
+    return new HttpError(413, message, details);
+}
+export function unsupportedMediaType(message, details) {
+    return new HttpError(415, message, details);
+}
 export function unprocessable(message, details) {
     return new HttpError(422, message, details);
 }

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,MAAM,CAAS;IACf,OAAO,CAAW;IAElB,YAAY,MAAc,EAAE,OAAe,EAAE,OAAiB;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAiB;IAC3D,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAO,GAAG,cAAc;IACnD,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAO,GAAG,WAAW,EAAE,OAAiB;IAChE,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAO,GAAG,WAAW,EAAE,OAAiB;IAC/D,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,OAAiB;IACzD,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,OAAiB;IAC9D,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAO,GAAG,mBAAmB,EAAE,OAAiB;IAC9E,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,MAAM,CAAS;IACf,OAAO,CAAW;IAElB,YAAY,MAAc,EAAE,OAAe,EAAE,OAAiB;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAiB;IAC3D,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAO,GAAG,cAAc;IACnD,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAO,GAAG,WAAW,EAAE,OAAiB;IAChE,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAO,GAAG,WAAW,EAAE,OAAiB;IAC/D,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,OAAiB;IACzD,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,OAAiB;IAChE,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,OAAiB;IACrE,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,OAAiB;IAC9D,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAO,GAAG,mBAAmB,EAAE,OAAiB;IAC9E,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9C,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AA6HzC,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,CAAC,CAu/C1D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAyIzC,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,CAAC,CAinD1D"}

package/dist/index.js

@@ -10,6 +10,7 @@ import { resolve } from "node:path";
 import { createInterface } from "node:readline/promises";
 import { stdin, stdout } from "node:process";
 import { pathToFileURL } from "node:url";
+import { warnIfUnsupportedNodeVersion } from "@paperclipai/shared/node-version";
 import { and, eq } from "drizzle-orm";
 import { createDb, ensurePostgresDatabase, formatEmbeddedPostgresError, getPostgresDataDirectory, inspectMigrations, applyPendingMigrations, createEmbeddedPostgresLogBuffer, prepareEmbeddedPostgresNativeRuntime, reconcilePendingMigrationHistory, formatDatabaseBackupResult, runDatabaseBackup, authUsers, companies, companyMemberships, instanceUserRoles, } from "@paperclipai/db";
 import detectPort from "detect-port";
@@ -26,12 +27,16 @@ import { createSecretProposalsService } from "./services/secret-proposals.js";
 import { environmentRuntimeService } from "./services/environment-runtime.js";
 import { createDbAdapterAuthSessionStore } from "./services/codex-device-login-service.js";
 import { createCodexDeviceLoginReaper, createProductionLoginSessionReaperRuntime, } from "./services/codex-device-login-reaper.js";
+import { createProductionSetupTokenReaper } from "./services/setup-token-reaper.js";
 import { resolveWorktreeRunExecutionActivationState } from "./services/instance-settings.js";
 import { parseAdapterRegistryEnv, reconcileAdapterAvailability, } from "./services/adapter-registry-bootstrap.js";
 import { createFeedbackTraceShareClientFromConfig } from "./services/feedback-share-client.js";
 import { buildRuntimeApiCandidateUrls, choosePrimaryRuntimeApiUrl } from "./runtime-api.js";
 import { isLoopbackHost, rewriteLoopbackUrlPort } from "./url-utils.js";
 import { createPluginWorkerManager } from "./services/plugin-worker-manager.js";
+import { createDuplexAggregateByteLedgerTelemetry, DuplexAggregateByteLedger, } from "@paperclipai/adapter-utils/duplex-aggregate-byte-ledger";
+import { resolveDuplexAggregateCeilingBytesFromEnv } from "./duplex-aggregate-ceiling-env.js";
+import { DUPLEX_COUNTER_AGGREGATE_BYTE_ACCOUNTING_UNDERFLOW_TOTAL } from "@paperclipai/adapter-utils/duplex-observability";
 import { createStorageServiceFromConfig } from "./storage/index.js";
 import { printStartupBanner } from "./startup-banner.js";
 import { getBoardClaimWarningUrl, initializeBoardClaimChallenge } from "./board-claim.js";
@@ -43,7 +48,9 @@ import { createDecisionRetentionNotifyOriginAgent, createDecisionWakeOriginAgent
 import { coordinateHeartbeatSchedulerShutdown, finalizeServerShutdown, loadWithoutCoordinatedShutdownSignalHooks, } from "./shutdown.js";
 import { systemdNotify } from "./services/systemd-notify.js";
 import { flushInFlightRunLogMirrors } from "./services/run-log-store.js";
+import { createEmbeddedPostgresSupervisor, } from "./embedded-postgres-supervisor.js";
 export async function startServer() {
+    warnIfUnsupportedNodeVersion(process.versions.node, (message) => logger.warn(message));
     // Tracing must be active (or have failed and logged) before the first DB
     // connection or the HTTP server exists — see instrumentation.ts.
     await instrumentationReady;
@@ -189,6 +196,7 @@ export async function startServer() {
     let db;
     let pluginMigrationDb;
     let embeddedPostgres = null;
+    let embeddedPostgresSupervisor = null;
     let embeddedPostgresStartedByThisProcess = false;
     let migrationSummary = "skipped";
     let activeDatabaseConnectionString;
@@ -304,7 +312,7 @@ export async function startServer() {
                 }
                 port = detectedPort;
                 logger.info(`Using embedded PostgreSQL because no DATABASE_URL set (dataDir=${dataDir}, port=${port})`);
-                embeddedPostgres = new EmbeddedPostgres({
+                const createEmbeddedPostgres = () => new EmbeddedPostgres({
                     databaseDir: dataDir,
                     user: "paperclip",
                     password: "paperclip",
@@ -314,6 +322,7 @@ export async function startServer() {
                     onLog: appendEmbeddedPostgresLog,
                     onError: appendEmbeddedPostgresLog,
                 });
+                embeddedPostgres = createEmbeddedPostgres();
                 if (!clusterAlreadyInitialized) {
                     try {
                         await embeddedPostgres.initialise();
@@ -344,6 +353,25 @@ export async function startServer() {
                     });
                 }
                 embeddedPostgresStartedByThisProcess = true;
+                embeddedPostgresSupervisor = createEmbeddedPostgresSupervisor({
+                    initialInstance: embeddedPostgres,
+                    createInstance: createEmbeddedPostgres,
+                    beforeRestart: () => {
+                        const runningPostgresPid = getRunningPid();
+                        if (runningPostgresPid) {
+                            throw new Error(`Refusing embedded PostgreSQL recovery because the data directory reports a live process (pid=${runningPostgresPid})`);
+                        }
+                        if (existsSync(postmasterPidFile))
+                            rmSync(postmasterPidFile, { force: true });
+                    },
+                    onUnexpectedExit: (code, signal) => logger.error({ code, signal, recentLogs: logBuffer.getRecentLogs() }, "Embedded PostgreSQL exited unexpectedly; attempting recovery"),
+                    onRestartAttemptFailed: (err, attempt) => logger.error({ err, attempt, recentLogs: logBuffer.getRecentLogs() }, "Embedded PostgreSQL recovery attempt failed"),
+                    onRestarted: (attempt) => logger.info({ attempt, port }, "Embedded PostgreSQL recovered after unexpected exit"),
+                    onRecoveryExhausted: (err) => {
+                        logger.fatal({ err, recentLogs: logBuffer.getRecentLogs() }, "Embedded PostgreSQL recovery exhausted; stopping the unhealthy server");
+                        process.kill(process.pid, "SIGTERM");
+                    },
+                });
             }
         }
         const embeddedAdminConnectionString = `postgres://paperclip:paperclip@127.0.0.1:${port}/postgres`;
@@ -534,9 +562,51 @@ export async function startServer() {
             databaseBackupInFlight = false;
         }
     };
-    const pluginWorkerManager = createPluginWorkerManager();
+    // The process-owned aggregate byte ledger for the sandbox duplex channel. One
+    // ledger per host process bounds the aggregate bytes that all live duplex routes
+    // retain. The route-count controller bounds only the route count, so without this
+    // ledger the per-route byte bounds multiply to many gigabytes at the maximum
+    // route count. The manager injects this same object into every worker handle, so
+    // one shared gauge bounds every host-side retention site.
+    //
+    // The optional operator override reads PAPERCLIP_MAX_AGGREGATE_DUPLEX_ROUTE_BYTES.
+    // An absent variable uses the documented default. A present invalid, blank,
+    // whitespace-only, non-finite, zero, negative, non-integer, unsafe, or
+    // over-maximum value does not fail startup. The host process is multi-tenant, so
+    // one invalid environment value must not brick the whole host. The helper sends
+    // the raw string to the resolver, so a present blank value is invalid, not
+    // absent. The resolver rejects the invalid override and returns the safe default.
+    // The reporter logs the rejection loudly at error, so the misconfiguration stays
+    // visible while the host stays up. The log line carries only the rejected numeric
+    // value, never the raw string.
+    const duplexAggregateCeilingBytes = resolveDuplexAggregateCeilingBytesFromEnv(process.env.PAPERCLIP_MAX_AGGREGATE_DUPLEX_ROUTE_BYTES, (rejectedValue) => {
+        logger.error({ rejectedValue }, "duplex aggregate byte ceiling override rejected; using the safe default");
+    });
+    // The server has no process metric pipeline yet, so the ledger telemetry maps to
+    // the structured logger. The gauge logs at debug. A reservation rejection logs at
+    // warn, because it marks an availability limit hit. An accounting-underflow defect
+    // logs at error, because it marks a real cleanup bug. Each record carries only the
+    // fixed metric name and the numeric value; no route, company, run, or payload
+    // value reaches a log line.
+    const duplexAggregateByteLedgerMetricSink = {
+        setGauge(name, value) {
+            logger.debug({ metric: name, value }, "duplex aggregate byte ledger gauge");
+        },
+        incrementCounter(name) {
+            if (name === DUPLEX_COUNTER_AGGREGATE_BYTE_ACCOUNTING_UNDERFLOW_TOTAL) {
+                logger.error({ metric: name }, "duplex aggregate byte ledger accounting underflow");
+                return;
+            }
+            logger.warn({ metric: name }, "duplex aggregate byte ledger reservation rejected");
+        },
+    };
+    const duplexAggregateByteLedger = new DuplexAggregateByteLedger({
+        ceilingBytes: duplexAggregateCeilingBytes,
+        telemetry: createDuplexAggregateByteLedgerTelemetry(duplexAggregateByteLedgerMetricSink),
+    });
+    const pluginWorkerManager = createPluginWorkerManager({ duplexAggregateByteLedger });
     const heartbeat = config.heartbeatSchedulerEnabled
-        ? heartbeatService(db, { pluginWorkerManager })
+        ? heartbeatService(db, { pluginWorkerManager, duplexAggregateByteLedger })
         : null;
     const decisionServiceOptions = {
         wakeOriginAgent: createDecisionWakeOriginAgent(heartbeat?.wakeup ?? null),
@@ -826,7 +896,9 @@ export async function startServer() {
         const mergedPullRequestConfirmations = issueThreadInteractionService(db, {
             wakeup: heartbeat.wakeup,
         });
-        const terminalWorkspaces = executionWorkspaceService(db);
+        const terminalWorkspaces = executionWorkspaceService(db, {
+            workspaceReaperCooldownDays: config.workspaceReaperCooldownDays,
+        });
         const scheduleMergedPullRequestConfirmationSweep = () => {
             if (heartbeatSchedulerStopped)
                 return;
@@ -859,7 +931,8 @@ export async function startServer() {
                 const skipped = result.skippedActiveRun
                     + result.skippedNonTerminalTree
                     + result.skippedUndelivered
-                    + result.skippedRace;
+                    + result.skippedRace
+                    + result.skippedCooldown;
                 const nowMs = Date.now();
                 if (skipped > 0 && nowMs - lastTerminalWorkspaceSkipLogAt >= terminalWorkspaceSkipLogIntervalMs) {
                     lastTerminalWorkspaceSkipLogAt = nowMs;
@@ -901,6 +974,30 @@ export async function startServer() {
                 logger.error({ err }, "adapter login reaper sweep failed");
             }));
         };
+        // The restart-safe cleanup backstop for the Claude setup-token login flow. It
+        // runs on startup and on the scheduler interval, so a sandbox lease survives a
+        // server restart and a release failure. It releases any lease whose login
+        // session is terminal, past its deadline, or already consumed.
+        const setupTokenReaper = createProductionSetupTokenReaper({
+            db: db,
+            environmentRuntime: environmentRuntimeService(db, { pluginWorkerManager }),
+            log: (line) => logger.info(line),
+        });
+        const logSetupTokenReaperResult = (result) => {
+            if (result.released > 0 || result.failed > 0) {
+                logger.info(result, "setup-token login reaper released leases");
+            }
+        };
+        const scheduleSetupTokenReaperSweep = () => {
+            if (heartbeatSchedulerStopped)
+                return;
+            trackHeartbeatSchedulerWork(setupTokenReaper
+                .sweep()
+                .then(logSetupTokenReaperResult)
+                .catch((err) => {
+                logger.error({ err }, "setup-token login reaper sweep failed");
+            }));
+        };
         const tools = toolAccessService(db, {
             deploymentMode: config.deploymentMode,
             deploymentExposure: config.deploymentExposure,
@@ -1001,6 +1098,14 @@ export async function startServer() {
             .catch((err) => {
             logger.error({ err }, "startup adapter login reaper sweep failed");
         });
+        // Run the setup-token login reaper once at startup, so a login sandbox lease
+        // that outlived a server restart releases before timer ticks start.
+        await setupTokenReaper
+            .sweep()
+            .then(logSetupTokenReaperResult)
+            .catch((err) => {
+            logger.error({ err }, "startup setup-token login reaper sweep failed");
+        });
         // Retry any orphan sandbox teardown left by a failed acquire before a server
         // restart, so a leaked sandbox does not stay allocated across the restart.
         await runEnvironmentLeaseCleanupSweep(0);
@@ -1059,6 +1164,7 @@ export async function startServer() {
                 scheduleMergedPullRequestConfirmationSweep();
                 scheduleTerminalWorkspaceSweep();
                 scheduleAdapterLoginReaperSweep();
+                scheduleSetupTokenReaperSweep();
                 scheduleEnvironmentLeaseCleanupSweep();
                 if (heartbeatSchedulerStopped)
                     return;
@@ -1341,7 +1447,9 @@ export async function startServer() {
             }
             const appShutdown = app.locals
                 ?.paperclipShutdown;
-            const embeddedPostgresToStop = embeddedPostgres && embeddedPostgresStartedByThisProcess ? embeddedPostgres : null;
+            const stopEmbeddedPostgres = embeddedPostgres && embeddedPostgresStartedByThisProcess
+                ? () => embeddedPostgresSupervisor?.shutdown() ?? embeddedPostgres.stop()
+                : null;
             // Await the ordered application teardown before the process exits. A live
             // setup-token login session must stop and release its sandbox lease before
             // the database and the provider stop, so an orderly shutdown never leaves a
@@ -1349,7 +1457,7 @@ export async function startServer() {
             await finalizeServerShutdown({
                 signal,
                 shutdownAppServices: appShutdown,
-                stopEmbeddedPostgres: embeddedPostgresToStop ? () => embeddedPostgresToStop.stop() : null,
+                stopEmbeddedPostgres,
                 shutdownInstrumentation,
                 log: logger,
             });