@peerllm/client-core 0.1.0

package/dist/services/aggregations/doctors/DoctorAggregationService.js

@@ -0,0 +1,36 @@
+import { createTryCatch } from "./DoctorAggregationService.Exceptions.js";
+// What `peerllm doctor` is (PLAN.md 2.7): the four parts of this client, asked how they are.
+//
+// An aggregation exposes rather than decides. It holds no rule about what makes a client well,
+// because each of the four already answers that about itself, and a second opinion here would be a
+// place for the two to disagree.
+export class DoctorAggregationService {
+    configProcessingService;
+    secretProcessingService;
+    workspaceFileProcessingService;
+    processProcessingService;
+    tryCatch;
+    constructor(configProcessingService, secretProcessingService, workspaceFileProcessingService, processProcessingService, loggingBroker) {
+        this.configProcessingService = configProcessingService;
+        this.secretProcessingService = secretProcessingService;
+        this.workspaceFileProcessingService = workspaceFileProcessingService;
+        this.processProcessingService = processProcessingService;
+        this.tryCatch = createTryCatch(loggingBroker);
+    }
+    // In the order a person reads them: what this machine is configured to do, what it is allowed to
+    // do it with, where it would do it, and what it would use.
+    retrieveHealth(configPath, profileId, cwd) {
+        return this.tryCatch(async () => {
+            // Every one of them, every time. A report that stopped at the first problem would hide the
+            // second, and somebody who fixes one thing and runs it again to find another is somebody
+            // this command is wasting.
+            return [
+                await this.configProcessingService.verifyConfig(configPath),
+                await this.secretProcessingService.verifyStore(profileId),
+                await this.workspaceFileProcessingService.verifyWorkspace(),
+                await this.processProcessingService.verifyTooling(cwd),
+            ];
+        });
+    }
+}
+//# sourceMappingURL=DoctorAggregationService.js.map

package/dist/services/aggregations/doctors/DoctorAggregationService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DoctorAggregationService.js","sourceRoot":"","sources":["../../../../src/services/aggregations/doctors/DoctorAggregationService.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAiB,MAAM,0CAA0C,CAAC;AAEzF,6FAA6F;AAC7F,EAAE;AACF,+FAA+F;AAC/F,mGAAmG;AACnG,iCAAiC;AACjC,MAAM,OAAO,wBAAwB;IAClB,uBAAuB,CAA0B;IACjD,uBAAuB,CAA0B;IACjD,8BAA8B,CAAiC;IAC/D,wBAAwB,CAA2B;IACnD,QAAQ,CAAW;IAEpC,YACE,uBAAgD,EAChD,uBAAgD,EAChD,8BAA8D,EAC9D,wBAAkD,EAClD,aAA4B;QAE5B,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;QACvD,IAAI,CAAC,8BAA8B,GAAG,8BAA8B,CAAC;QACrE,IAAI,CAAC,wBAAwB,GAAG,wBAAwB,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,iGAAiG;IACjG,2DAA2D;IACpD,cAAc,CAAC,UAAkB,EAAE,SAAiB,EAAE,GAAW;QACtE,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,2FAA2F;YAC3F,yFAAyF;YACzF,2BAA2B;YAC3B,OAAO;gBACL,MAAM,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,UAAU,CAAC;gBAC3D,MAAM,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,SAAS,CAAC;gBACzD,MAAM,IAAI,CAAC,8BAA8B,CAAC,eAAe,EAAE;gBAC3D,MAAM,IAAI,CAAC,wBAAwB,CAAC,aAAa,CAAC,GAAG,CAAC;aACvD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/services/foundations/accounts/AccountService.Exceptions.d.ts

@@ -0,0 +1,4 @@
+import { type LoggingBroker } from "@hassanhabib/standard-agents";
+export type TryCatch = <T>(routine: () => Promise<T>) => Promise<T>;
+export declare function createTryCatch(loggingBroker: LoggingBroker): TryCatch;
+//# sourceMappingURL=AccountService.Exceptions.d.ts.map

package/dist/services/foundations/accounts/AccountService.Exceptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountService.Exceptions.d.ts","sourceRoot":"","sources":["../../../../src/services/foundations/accounts/AccountService.Exceptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAiBzF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAEpE,wBAAgB,cAAc,CAAC,aAAa,EAAE,aAAa,GAAG,QAAQ,CA2BrE"}

package/dist/services/foundations/accounts/AccountService.Exceptions.js

@@ -0,0 +1,55 @@
+import { HttpResponseException } from "@hassanhabib/standard-agents";
+import { AccountDependencyException } from "../../../models/foundations/accounts/exceptions/AccountDependencyException.js";
+import { AccountDependencyValidationException } from "../../../models/foundations/accounts/exceptions/AccountDependencyValidationException.js";
+import { AccountServiceException } from "../../../models/foundations/accounts/exceptions/AccountServiceException.js";
+import { AccountValidationException } from "../../../models/foundations/accounts/exceptions/AccountValidationException.js";
+import { FailedAccountDependencyException } from "../../../models/foundations/accounts/exceptions/FailedAccountDependencyException.js";
+import { FailedAccountServiceException } from "../../../models/foundations/accounts/exceptions/FailedAccountServiceException.js";
+import { InvalidAccountException } from "../../../models/foundations/accounts/exceptions/InvalidAccountException.js";
+import { NotFoundAccountException } from "../../../models/foundations/accounts/exceptions/NotFoundAccountException.js";
+export function createTryCatch(loggingBroker) {
+    return async function tryCatch(routine) {
+        try {
+            return await routine();
+        }
+        catch (error) {
+            if (error instanceof InvalidAccountException) {
+                throw await createAndLog(loggingBroker, new AccountValidationException("Account validation error occurred, fix the error and try again.", error));
+            }
+            if (error instanceof HttpResponseException) {
+                throw await createAndLog(loggingBroker, categorise(error));
+            }
+            const failed = new FailedAccountServiceException("Failed account service error occurred, contact support.", error instanceof Error ? error : new Error(String(error)));
+            throw await createAndLog(loggingBroker, new AccountServiceException("Account service error occurred, contact support.", failed));
+        }
+    };
+}
+// What a status means, decided once.
+//
+// The three the login route answers with are all the user's to fix and none of them is the same
+// thing: a wrong password is worth trying again, an unverified email is a mail to go and open, and
+// a locked account is a wait. Telling them apart is this line's job, and it is why the broker below
+// refuses to.
+function categorise(error) {
+    const refusal = REFUSALS[error.status];
+    if (refusal !== undefined) {
+        return new AccountDependencyValidationException("Account dependency validation error occurred, fix the error and try again.", new InvalidAccountException(refusal));
+    }
+    // Nothing there under that name. A key revoked twice is the ordinary way this happens, and it is
+    // not a failure of anything.
+    if (error.status === 404) {
+        return new AccountDependencyValidationException("Account dependency validation error occurred, fix the error and try again.", new NotFoundAccountException("does not exist: the account service has no such key", error));
+    }
+    return new AccountDependencyException("Account dependency error occurred, contact support.", new FailedAccountDependencyException(`the account service answered ${error.status}`, error));
+}
+const REFUSALS = {
+    400: "could not sign in: the service could not read that request",
+    401: "could not sign in: that email and password do not match",
+    403: "could not sign in: this email has not been verified yet. Open the message the service sent you",
+    423: "could not sign in: this account is locked. Wait, or reset the password",
+};
+async function createAndLog(loggingBroker, exception) {
+    await loggingBroker.logError(exception);
+    return exception;
+}
+//# sourceMappingURL=AccountService.Exceptions.js.map

package/dist/services/foundations/accounts/AccountService.Exceptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountService.Exceptions.js","sourceRoot":"","sources":["../../../../src/services/foundations/accounts/AccountService.Exceptions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAsB,MAAM,8BAA8B,CAAC;AAEzF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+EAA+E,CAAC;AAC3H,OAAO,EAAE,oCAAoC,EAAE,MAAM,yFAAyF,CAAC;AAC/I,OAAO,EAAE,uBAAuB,EAAE,MAAM,4EAA4E,CAAC;AACrH,OAAO,EAAE,0BAA0B,EAAE,MAAM,+EAA+E,CAAC;AAC3H,OAAO,EAAE,gCAAgC,EAAE,MAAM,qFAAqF,CAAC;AACvI,OAAO,EAAE,6BAA6B,EAAE,MAAM,kFAAkF,CAAC;AACjI,OAAO,EAAE,uBAAuB,EAAE,MAAM,4EAA4E,CAAC;AACrH,OAAO,EAAE,wBAAwB,EAAE,MAAM,6EAA6E,CAAC;AAUvH,MAAM,UAAU,cAAc,CAAC,aAA4B;IACzD,OAAO,KAAK,UAAU,QAAQ,CAAI,OAAyB;QACzD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gBAC7C,MAAM,MAAM,YAAY,CACtB,aAAa,EACb,IAAI,0BAA0B,CAAC,iEAAiE,EAAE,KAAK,CAAC,CACzG,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;gBAC3C,MAAM,MAAM,YAAY,CAAC,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,6BAA6B,CAC9C,yDAAyD,EACzD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;YAEF,MAAM,MAAM,YAAY,CACtB,aAAa,EACb,IAAI,uBAAuB,CAAC,kDAAkD,EAAE,MAAM,CAAC,CACxF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,qCAAqC;AACrC,EAAE;AACF,gGAAgG;AAChG,mGAAmG;AACnG,oGAAoG;AACpG,cAAc;AACd,SAAS,UAAU,CAAC,KAA4B;IAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEvC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,oCAAoC,CAC7C,4EAA4E,EAC5E,IAAI,uBAAuB,CAAC,OAAO,CAAC,CACrC,CAAC;IACJ,CAAC;IAED,iGAAiG;IACjG,6BAA6B;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,oCAAoC,CAC7C,4EAA4E,EAC5E,IAAI,wBAAwB,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAC3F,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,0BAA0B,CACnC,qDAAqD,EACrD,IAAI,gCAAgC,CAClC,gCAAgC,KAAK,CAAC,MAAM,EAAE,EAC9C,KAAK,CACN,CACF,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAqC;IACjD,GAAG,EAAE,4DAA4D;IACjE,GAAG,EAAE,yDAAyD;IAC9D,GAAG,EAAE,gGAAgG;IACrG,GAAG,EAAE,wEAAwE;CAC9E,CAAC;AAEF,KAAK,UAAU,YAAY,CAAkB,aAA4B,EAAE,SAAY;IACrF,MAAM,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAExC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/services/foundations/accounts/AccountService.Validations.d.ts

@@ -0,0 +1,8 @@
+export declare function validateCredentials(email: string, password: string): void;
+export declare function validateAccessToken(accessToken: string): void;
+export declare function validateRefreshToken(refreshToken: string): void;
+export declare function validateKeyName(keyName: string): void;
+export declare function validateKeyId(id: string): void;
+export declare function validateSession(accessToken: string, refreshToken: string): void;
+export declare function validateMintedKey(key: string): void;
+//# sourceMappingURL=AccountService.Validations.d.ts.map

package/dist/services/foundations/accounts/AccountService.Validations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountService.Validations.d.ts","sourceRoot":"","sources":["../../../../src/services/foundations/accounts/AccountService.Validations.ts"],"names":[],"mappings":"AAOA,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAYzE;AAID,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAI7D;AAED,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAI/D;AAID,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAIrD;AAED,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAI9C;AAID,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAI/E;AAID,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAInD"}

package/dist/services/foundations/accounts/AccountService.Validations.js

@@ -0,0 +1,55 @@
+import { InvalidAccountException } from "../../../models/foundations/accounts/exceptions/InvalidAccountException.js";
+// What this service refuses before it asks the service anything.
+//
+// Every one of these is a round trip the user does not have to wait for to be told something they
+// already knew. None of them is a security rule: the orchestrator decides who may sign in, and a
+// client that decided it here would be deciding it twice and differently.
+export function validateCredentials(email, password) {
+    const invalid = new InvalidAccountException("Invalid account. Please correct the errors and try again.");
+    if (email.trim().length === 0) {
+        invalid.upsertDataList("email", "is required");
+    }
+    if (password.length === 0) {
+        invalid.upsertDataList("password", "is required");
+    }
+    invalid.throwIfContainsErrors();
+}
+// The token that proves who is asking. Empty means nobody has signed in, which is a thing to say
+// rather than a request to send.
+export function validateAccessToken(accessToken) {
+    if (accessToken.trim().length === 0) {
+        throw new InvalidAccountException("could not ask: nobody is signed in on this machine");
+    }
+}
+export function validateRefreshToken(refreshToken) {
+    if (refreshToken.trim().length === 0) {
+        throw new InvalidAccountException("could not refresh: there is no session to refresh");
+    }
+}
+// A key needs a name, because a list of keys where several are called nothing is a list nobody can
+// revoke the right one from.
+export function validateKeyName(keyName) {
+    if (keyName.trim().length === 0) {
+        throw new InvalidAccountException("could not create a key: it needs a name");
+    }
+}
+export function validateKeyId(id) {
+    if (id.trim().length === 0) {
+        throw new InvalidAccountException("could not revoke a key: no key was named");
+    }
+}
+// The session the service answered with. A blank access token is the service saying yes and handing
+// back nothing, which would fail later and somewhere else.
+export function validateSession(accessToken, refreshToken) {
+    if (accessToken.length === 0 || refreshToken.length === 0) {
+        throw new InvalidAccountException("could not sign in: the service answered without a session");
+    }
+}
+// The key the service minted. The same reasoning, and more urgent: this is the only moment the key
+// is readable, so an empty one here is a key nobody will ever have.
+export function validateMintedKey(key) {
+    if (key.length === 0) {
+        throw new InvalidAccountException("could not create a key: the service answered without one");
+    }
+}
+//# sourceMappingURL=AccountService.Validations.js.map

package/dist/services/foundations/accounts/AccountService.Validations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountService.Validations.js","sourceRoot":"","sources":["../../../../src/services/foundations/accounts/AccountService.Validations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,4EAA4E,CAAC;AAErH,iEAAiE;AACjE,EAAE;AACF,kGAAkG;AAClG,iGAAiG;AACjG,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,QAAgB;IACjE,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,2DAA2D,CAAC,CAAC;IAEzG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,qBAAqB,EAAE,CAAC;AAClC,CAAC;AAED,iGAAiG;AACjG,iCAAiC;AACjC,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,uBAAuB,CAAC,oDAAoD,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,YAAoB;IACvD,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,uBAAuB,CAAC,mDAAmD,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,6BAA6B;AAC7B,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,uBAAuB,CAAC,yCAAyC,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,uBAAuB,CAAC,0CAA0C,CAAC,CAAC;IAChF,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,2DAA2D;AAC3D,MAAM,UAAU,eAAe,CAAC,WAAmB,EAAE,YAAoB;IACvE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAAC,2DAA2D,CAAC,CAAC;IACjG,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,uBAAuB,CAAC,0DAA0D,CAAC,CAAC;IAChG,CAAC;AACH,CAAC"}

package/dist/services/foundations/accounts/AccountService.d.ts

@@ -0,0 +1,18 @@
+import type { LoggingBroker } from "@hassanhabib/standard-agents";
+import type { AccountBroker } from "../../../brokers/accounts/AccountBroker.js";
+import type { AccountKey, MintedKey } from "../../../models/brokers/accounts/AccountKey.js";
+import type { AccountSession } from "../../../models/brokers/accounts/AccountSession.js";
+import type { TokenBalance } from "../../../models/brokers/accounts/TokenBalance.js";
+export declare class AccountService {
+    private readonly accountBroker;
+    private readonly tryCatch;
+    constructor(accountBroker: AccountBroker, loggingBroker: LoggingBroker);
+    login(email: string, password: string): Promise<AccountSession>;
+    refreshSession(refreshToken: string): Promise<AccountSession>;
+    endSession(accessToken: string, refreshToken: string): Promise<void>;
+    addApiKey(accessToken: string, keyName: string): Promise<MintedKey>;
+    retrieveApiKeys(accessToken: string): Promise<readonly AccountKey[]>;
+    removeApiKey(accessToken: string, id: string): Promise<void>;
+    retrieveBalance(accessToken: string): Promise<TokenBalance>;
+}
+//# sourceMappingURL=AccountService.d.ts.map

package/dist/services/foundations/accounts/AccountService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountService.d.ts","sourceRoot":"","sources":["../../../../src/services/foundations/accounts/AccountService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oDAAoD,CAAC;AACzF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kDAAkD,CAAC;AAiBrF,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;gBAEjB,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa;IAKtE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAW/D,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAY7D,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASpE,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAYnE,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC;IAQpE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS5D,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;CAOnE"}

package/dist/services/foundations/accounts/AccountService.js

@@ -0,0 +1,68 @@
+import { createTryCatch } from "./AccountService.Exceptions.js";
+import { validateAccessToken, validateCredentials, validateKeyId, validateKeyName, validateMintedKey, validateRefreshToken, validateSession, } from "./AccountService.Validations.js";
+// The account, as this client is allowed to touch it (SPEC.md 8.6).
+//
+// One broker, and the floor under every account command: what must be filled in before a request
+// is worth sending, and what each answer means once it comes back. The tiers above this one never
+// see a status code, and the broker below never decides what one means.
+export class AccountService {
+    accountBroker;
+    tryCatch;
+    constructor(accountBroker, loggingBroker) {
+        this.accountBroker = accountBroker;
+        this.tryCatch = createTryCatch(loggingBroker);
+    }
+    login(email, password) {
+        return this.tryCatch(async () => {
+            validateCredentials(email, password);
+            const session = await this.accountBroker.postLogin(email, password);
+            validateSession(session.accessToken, session.refreshToken);
+            return session;
+        });
+    }
+    refreshSession(refreshToken) {
+        return this.tryCatch(async () => {
+            validateRefreshToken(refreshToken);
+            const session = await this.accountBroker.postRefresh(refreshToken);
+            validateSession(session.accessToken, session.refreshToken);
+            return session;
+        });
+    }
+    // Both sides. Dropping the client's copy alone would leave a token the service still honours.
+    endSession(accessToken, refreshToken) {
+        return this.tryCatch(async () => {
+            validateAccessToken(accessToken);
+            validateRefreshToken(refreshToken);
+            await this.accountBroker.postLogout(accessToken, refreshToken);
+        });
+    }
+    addApiKey(accessToken, keyName) {
+        return this.tryCatch(async () => {
+            validateAccessToken(accessToken);
+            validateKeyName(keyName);
+            const minted = await this.accountBroker.postApiKey(accessToken, keyName);
+            validateMintedKey(minted.key);
+            return minted;
+        });
+    }
+    retrieveApiKeys(accessToken) {
+        return this.tryCatch(async () => {
+            validateAccessToken(accessToken);
+            return await this.accountBroker.getApiKeys(accessToken);
+        });
+    }
+    removeApiKey(accessToken, id) {
+        return this.tryCatch(async () => {
+            validateAccessToken(accessToken);
+            validateKeyId(id);
+            await this.accountBroker.deleteApiKey(accessToken, id);
+        });
+    }
+    retrieveBalance(accessToken) {
+        return this.tryCatch(async () => {
+            validateAccessToken(accessToken);
+            return await this.accountBroker.getBalance(accessToken);
+        });
+    }
+}
+//# sourceMappingURL=AccountService.js.map

package/dist/services/foundations/accounts/AccountService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AccountService.js","sourceRoot":"","sources":["../../../../src/services/foundations/accounts/AccountService.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,cAAc,EAAiB,MAAM,gCAAgC,CAAC;AAC/E,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,GAChB,MAAM,iCAAiC,CAAC;AAEzC,oEAAoE;AACpE,EAAE;AACF,iGAAiG;AACjG,kGAAkG;AAClG,wEAAwE;AACxE,MAAM,OAAO,cAAc;IACR,aAAa,CAAgB;IAC7B,QAAQ,CAAW;IAEpC,YAAmB,aAA4B,EAAE,aAA4B;QAC3E,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,QAAQ,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC;IAEM,KAAK,CAAC,KAAa,EAAE,QAAgB;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAErC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACpE,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YAE3D,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,cAAc,CAAC,YAAoB;QACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAEnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;YACnE,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YAE3D,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8FAA8F;IACvF,UAAU,CAAC,WAAmB,EAAE,YAAoB;QACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,mBAAmB,CAAC,WAAW,CAAC,CAAC;YACjC,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAEnC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,SAAS,CAAC,WAAmB,EAAE,OAAe;QACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,mBAAmB,CAAC,WAAW,CAAC,CAAC;YACjC,eAAe,CAAC,OAAO,CAAC,CAAC;YAEzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACzE,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAE9B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,eAAe,CAAC,WAAmB;QACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAEjC,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,YAAY,CAAC,WAAmB,EAAE,EAAU;QACjD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,mBAAmB,CAAC,WAAW,CAAC,CAAC;YACjC,aAAa,CAAC,EAAE,CAAC,CAAC;YAElB,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,eAAe,CAAC,WAAmB;QACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;YAC9B,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAEjC,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/services/foundations/configs/ConfigService.Exceptions.d.ts

@@ -0,0 +1,4 @@
+import type { LoggingBroker } from "@hassanhabib/standard-agents";
+export type TryCatch = <T>(routine: () => Promise<T>) => Promise<T>;
+export declare function createTryCatch(loggingBroker: LoggingBroker): TryCatch;
+//# sourceMappingURL=ConfigService.Exceptions.d.ts.map

package/dist/services/foundations/configs/ConfigService.Exceptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigService.Exceptions.d.ts","sourceRoot":"","sources":["../../../../src/services/foundations/configs/ConfigService.Exceptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAelE,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAEpE,wBAAgB,cAAc,CAAC,aAAa,EAAE,aAAa,GAAG,QAAQ,CA6DrE"}

package/dist/services/foundations/configs/ConfigService.Exceptions.js

@@ -0,0 +1,51 @@
+import { ConfigServiceException } from "../../../models/foundations/configs/exceptions/ConfigServiceException.js";
+import { FailedConfigServiceException } from "../../../models/foundations/configs/exceptions/FailedConfigServiceException.js";
+import { ConfigValidationException } from "../../../models/foundations/configs/exceptions/ConfigValidationException.js";
+import { InvalidConfigException } from "../../../models/foundations/configs/exceptions/InvalidConfigException.js";
+import { ConfigDependencyValidationException } from "../../../models/foundations/configs/exceptions/ConfigDependencyValidationException.js";
+import { LockedConfigException } from "../../../models/foundations/configs/exceptions/LockedConfigException.js";
+import { NotFoundConfigException } from "../../../models/foundations/configs/exceptions/NotFoundConfigException.js";
+import { ConfigDependencyException } from "../../../models/foundations/configs/exceptions/ConfigDependencyException.js";
+import { FailedConfigDependencyException } from "../../../models/foundations/configs/exceptions/FailedConfigDependencyException.js";
+export function createTryCatch(loggingBroker) {
+    return async function tryCatch(routine) {
+        try {
+            return await routine();
+        }
+        catch (error) {
+            if (error instanceof InvalidConfigException) {
+                throw await createAndLog(loggingBroker, new ConfigValidationException("Config validation error occurred, fix the error and try again.", error));
+            }
+            // Somebody else holds it. The loop above looks again rather than failing the write.
+            if (isErrorNumber(error, "EEXIST")) {
+                throw await createAndLog(loggingBroker, new ConfigDependencyValidationException("Config dependency validation error occurred, fix the error and try again.", new LockedConfigException("could not take the configuration lock: somebody holds it", asError(error))));
+            }
+            // There being no document yet is a fact the caller acts on, not a failure. On a first run it
+            // means "write the defaults"; when a user named the path it means they named the wrong one.
+            if (isErrorNumber(error, "ENOENT")) {
+                throw await createAndLog(loggingBroker, new ConfigDependencyValidationException("Config dependency validation error occurred, fix the error and try again.", new NotFoundConfigException("could not read the configuration: there is no document there", asError(error))));
+            }
+            // The document is there and could not be read. Nothing the caller can fix by asking
+            // differently, so it is reported as the resource's failure rather than theirs.
+            if (isErrorNumber(error)) {
+                throw await createAndLog(loggingBroker, new ConfigDependencyException("Config dependency error occurred, contact support.", new FailedConfigDependencyException("could not read the configuration: the file system refused", asError(error))));
+            }
+            const failedConfigServiceException = new FailedConfigServiceException("Failed config service error occurred, contact support.", error instanceof Error ? error : new Error(String(error)));
+            throw await createAndLog(loggingBroker, new ConfigServiceException("Config service error occurred, contact support.", failedConfigServiceException));
+        }
+    };
+}
+async function createAndLog(loggingBroker, exception) {
+    await loggingBroker.logError(exception);
+    return exception;
+}
+// An errno is the platform's word for what went wrong with the resource. It is read here, once,
+// and never above this file.
+function isErrorNumber(error, code) {
+    const candidate = error;
+    return typeof candidate?.code === "string" && (code === undefined || candidate.code === code);
+}
+function asError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
+//# sourceMappingURL=ConfigService.Exceptions.js.map

package/dist/services/foundations/configs/ConfigService.Exceptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigService.Exceptions.js","sourceRoot":"","sources":["../../../../src/services/foundations/configs/ConfigService.Exceptions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0EAA0E,CAAC;AAClH,OAAO,EAAE,4BAA4B,EAAE,MAAM,gFAAgF,CAAC;AAC9H,OAAO,EAAE,yBAAyB,EAAE,MAAM,6EAA6E,CAAC;AACxH,OAAO,EAAE,sBAAsB,EAAE,MAAM,0EAA0E,CAAC;AAClH,OAAO,EAAE,mCAAmC,EAAE,MAAM,uFAAuF,CAAC;AAC5I,OAAO,EAAE,qBAAqB,EAAE,MAAM,yEAAyE,CAAC;AAChH,OAAO,EAAE,uBAAuB,EAAE,MAAM,2EAA2E,CAAC;AACpH,OAAO,EAAE,yBAAyB,EAAE,MAAM,6EAA6E,CAAC;AACxH,OAAO,EAAE,+BAA+B,EAAE,MAAM,mFAAmF,CAAC;AAOpI,MAAM,UAAU,cAAc,CAAC,aAA4B;IACzD,OAAO,KAAK,UAAU,QAAQ,CAAI,OAAyB;QACzD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;gBAC5C,MAAM,MAAM,YAAY,CACtB,aAAa,EACb,IAAI,yBAAyB,CAAC,gEAAgE,EAAE,KAAK,CAAC,CACvG,CAAC;YACJ,CAAC;YAED,oFAAoF;YACpF,IAAI,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACnC,MAAM,MAAM,YAAY,CACtB,aAAa,EACb,IAAI,mCAAmC,CACrC,2EAA2E,EAC3E,IAAI,qBAAqB,CAAC,0DAA0D,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CACtG,CACF,CAAC;YACJ,CAAC;YAED,6FAA6F;YAC7F,4FAA4F;YAC5F,IAAI,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACnC,MAAM,MAAM,YAAY,CACtB,aAAa,EACb,IAAI,mCAAmC,CACrC,2EAA2E,EAC3E,IAAI,uBAAuB,CAAC,8DAA8D,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAC5G,CACF,CAAC;YACJ,CAAC;YAED,oFAAoF;YACpF,+EAA+E;YAC/E,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,MAAM,YAAY,CACtB,aAAa,EACb,IAAI,yBAAyB,CAC3B,oDAAoD,EACpD,IAAI,+BAA+B,CACjC,2DAA2D,EAC3D,OAAO,CAAC,KAAK,CAAC,CACf,CACF,CACF,CAAC;YACJ,CAAC;YAED,MAAM,4BAA4B,GAAG,IAAI,4BAA4B,CACnE,wDAAwD,EACxD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;YAEF,MAAM,MAAM,YAAY,CACtB,aAAa,EACb,IAAI,sBAAsB,CAAC,iDAAiD,EAAE,4BAA4B,CAAC,CAC5G,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAkB,aAA4B,EAAE,SAAY;IACrF,MAAM,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAExC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gGAAgG;AAChG,6BAA6B;AAC7B,SAAS,aAAa,CAAC,KAAc,EAAE,IAAa;IAClD,MAAM,SAAS,GAAG,KAA8B,CAAC;IAEjD,OAAO,OAAO,SAAS,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACnE,CAAC"}

package/dist/services/foundations/configs/ConfigService.Validations.d.ts

@@ -0,0 +1,6 @@
+import { type ConfigDocument } from "../../../models/foundations/configs/ConfigDocument.js";
+export declare function validatePath(path: string): void;
+export declare function validateIsJson(text: string, path: string): Record<string, unknown>;
+export declare function validateDocument(parsed: Record<string, unknown>, path: string): void;
+export declare function validateDocumentToWrite(document: ConfigDocument): void;
+//# sourceMappingURL=ConfigService.Validations.d.ts.map

package/dist/services/foundations/configs/ConfigService.Validations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigService.Validations.d.ts","sourceRoot":"","sources":["../../../../src/services/foundations/configs/ConfigService.Validations.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,uDAAuD,CAAC;AAInH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAI/C;AAID,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQlF;AAYD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CASpF;AA2FD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAmBtE"}

package/dist/services/foundations/configs/ConfigService.Validations.js

@@ -0,0 +1,118 @@
+import { InvalidConfigException } from "../../../models/foundations/configs/exceptions/InvalidConfigException.js";
+import { CONFIG_SCHEMA_VERSION } from "../../../models/foundations/configs/ConfigDocument.js";
+// A path nobody gave is a caller who does not know where their own configuration lives, and
+// reading whatever happens to sit at the empty path is not the kinder answer.
+export function validatePath(path) {
+    if (path.trim().length === 0) {
+        throw new InvalidConfigException("could not read the configuration: no path was given");
+    }
+}
+// Localised here rather than let through: a syntax error from the platform names a byte offset,
+// and the person who hand-edited the file needs to be told which file it was.
+export function validateIsJson(text, path) {
+    const parsed = parseOrRefuse(text, path);
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new InvalidConfigException(`could not read the configuration: ${path} is not a JSON object`);
+    }
+    return parsed;
+}
+function parseOrRefuse(text, path) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new InvalidConfigException(`could not read the configuration: ${path} is not valid JSON`);
+    }
+}
+// Collected rather than thrown one field at a time, because somebody fixing a hand-edited config
+// wants every complaint at once and not a new one on each attempt.
+export function validateDocument(parsed, path) {
+    const invalid = new InvalidConfigException(`could not read the configuration: ${path} is not one this client can work from`);
+    validateSchemaVersion(parsed["schemaVersion"], invalid);
+    validateProfiles(parsed, invalid);
+    invalid.throwIfContainsErrors();
+}
+// A document from the future is refused rather than read hopefully. Guessing at a field that
+// changed meaning is how one application quietly corrupts another's settings.
+function validateSchemaVersion(value, invalid) {
+    if (typeof value !== "number" || !Number.isInteger(value) || value < 1) {
+        invalid.upsertDataList("schemaVersion", "must be a whole number of 1 or greater");
+        return;
+    }
+    if (value > CONFIG_SCHEMA_VERSION) {
+        invalid.upsertDataList("schemaVersion", `is ${value}, which this build does not know; upgrade the client rather than let it guess`);
+    }
+}
+function validateProfiles(parsed, invalid) {
+    const profiles = parsed["profiles"];
+    if (!Array.isArray(profiles)) {
+        invalid.upsertDataList("profiles", "must be a list of connection profiles");
+        return;
+    }
+    // A document with no profiles is what a first run writes, and it is only coherent while it names
+    // no active profile either. The write rule has said so since the defaults landed; this one had not
+    // caught up, so a document this client had just written was a document it refused to read back.
+    //
+    // It matters beyond a first run: naming a tool server or setting a limit has nothing to do with
+    // having an account, and a machine that could not record either until somebody signed in would be
+    // refusing to remember the one thing it was just told.
+    if (profiles.length === 0) {
+        const named = parsed["activeProfileId"];
+        if (typeof named === "string" && named.trim().length > 0) {
+            invalid.upsertDataList("activeProfileId", `names '${named}', and there are no profiles`);
+        }
+        return;
+    }
+    const identifiers = [];
+    for (const [index, value] of profiles.entries()) {
+        identifiers.push(validateProfile(value, index, invalid));
+    }
+    const activeProfileId = parsed["activeProfileId"];
+    if (typeof activeProfileId !== "string" || activeProfileId.trim().length === 0) {
+        invalid.upsertDataList("activeProfileId", "must name a profile");
+        return;
+    }
+    if (!identifiers.includes(activeProfileId)) {
+        invalid.upsertDataList("activeProfileId", `names '${activeProfileId}', which is not one of the profiles`);
+    }
+}
+function validateProfile(value, index, invalid) {
+    const profile = value !== null && typeof value === "object" ? value : {};
+    const identifier = typeof profile["id"] === "string" ? profile["id"] : "";
+    const field = `profiles[${index}]`;
+    if (identifier.trim().length === 0) {
+        invalid.upsertDataList(field, "must carry an id");
+    }
+    if (!PROFILE_KINDS.has(profile["kind"])) {
+        invalid.upsertDataList(field, `must be one of ${[...PROFILE_KINDS].join(", ")}`);
+    }
+    if (typeof profile["baseUrl"] !== "string" || profile["baseUrl"].trim().length === 0) {
+        invalid.upsertDataList(field, "must carry a baseUrl");
+    }
+    return identifier;
+}
+// The three doors of SPEC 2.2 and no fourth: the PeerLLM network, a host on this machine, and a
+// host on the network.
+const PROFILE_KINDS = new Set(["network", "local", "server"]);
+// What must be true of a document before it is written. Read validation forgives a file somebody
+// hand-edited by naming every complaint; write validation refuses, because the caller here is this
+// program and a bad write costs the user their settings.
+export function validateDocumentToWrite(document) {
+    const invalid = new InvalidConfigException("could not write the configuration: it is not one this client would read back");
+    if (document.lastWriter.trim().length === 0) {
+        invalid.upsertDataList("lastWriter", "must name the application that wrote it");
+    }
+    // A document with no profiles is what a first run writes before anybody has signed in, and it is
+    // only coherent while it names no active profile either. A document that names one it does not
+    // have is the broken state this refuses.
+    if (document.profiles.length === 0) {
+        if (document.activeProfileId.length > 0) {
+            invalid.upsertDataList("activeProfileId", `names '${document.activeProfileId}', and there are no profiles`);
+        }
+    }
+    else if (!document.profiles.some((profile) => profile.id === document.activeProfileId)) {
+        invalid.upsertDataList("activeProfileId", `names '${document.activeProfileId}', which is not one of the profiles`);
+    }
+    invalid.throwIfContainsErrors();
+}
+//# sourceMappingURL=ConfigService.Validations.js.map

package/dist/services/foundations/configs/ConfigService.Validations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigService.Validations.js","sourceRoot":"","sources":["../../../../src/services/foundations/configs/ConfigService.Validations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0EAA0E,CAAC;AAClH,OAAO,EAAE,qBAAqB,EAAuB,MAAM,uDAAuD,CAAC;AAEnH,4FAA4F;AAC5F,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,sBAAsB,CAAC,qDAAqD,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY;IACvD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEzC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,sBAAsB,CAAC,qCAAqC,IAAI,uBAAuB,CAAC,CAAC;IACrG,CAAC;IAED,OAAO,MAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,CAAC,qCAAqC,IAAI,oBAAoB,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,mEAAmE;AACnE,MAAM,UAAU,gBAAgB,CAAC,MAA+B,EAAE,IAAY;IAC5E,MAAM,OAAO,GAAG,IAAI,sBAAsB,CACxC,qCAAqC,IAAI,uCAAuC,CACjF,CAAC;IAEF,qBAAqB,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,OAAO,CAAC,qBAAqB,EAAE,CAAC;AAClC,CAAC;AAED,6FAA6F;AAC7F,8EAA8E;AAC9E,SAAS,qBAAqB,CAAC,KAAc,EAAE,OAA+B;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACvE,OAAO,CAAC,cAAc,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;QAElF,OAAO;IACT,CAAC;IAED,IAAI,KAAK,GAAG,qBAAqB,EAAE,CAAC;QAClC,OAAO,CAAC,cAAc,CACpB,eAAe,EACf,MAAM,KAAK,+EAA+E,CAC3F,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA+B,EAAE,OAA+B;IACxF,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,cAAc,CAAC,UAAU,EAAE,uCAAuC,CAAC,CAAC;QAE5E,OAAO;IACT,CAAC;IAED,iGAAiG;IACjG,mGAAmG;IACnG,gGAAgG;IAChG,EAAE;IACF,gGAAgG;IAChG,kGAAkG;IAClG,uDAAuD;IACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAExC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,cAAc,CAAC,iBAAiB,EAAE,UAAU,KAAK,8BAA8B,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAElD,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/E,OAAO,CAAC,cAAc,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;QAEjE,OAAO;IACT,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,cAAc,CAAC,iBAAiB,EAAE,UAAU,eAAe,qCAAqC,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,KAAa,EAAE,OAA+B;IACrF,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtG,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,KAAK,GAAG,YAAY,KAAK,GAAG,CAAC;IAEnC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAW,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,kBAAkB,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrF,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gGAAgG;AAChG,uBAAuB;AACvB,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE9D,iGAAiG;AACjG,mGAAmG;AACnG,yDAAyD;AACzD,MAAM,UAAU,uBAAuB,CAAC,QAAwB;IAC9D,MAAM,OAAO,GAAG,IAAI,sBAAsB,CAAC,8EAA8E,CAAC,CAAC;IAE3H,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;IAClF,CAAC;IAED,iGAAiG;IACjG,+FAA+F;IAC/F,yCAAyC;IACzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,cAAc,CAAC,iBAAiB,EAAE,UAAU,QAAQ,CAAC,eAAe,8BAA8B,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACzF,OAAO,CAAC,cAAc,CAAC,iBAAiB,EAAE,UAAU,QAAQ,CAAC,eAAe,qCAAqC,CAAC,CAAC;IACrH,CAAC;IAED,OAAO,CAAC,qBAAqB,EAAE,CAAC;AAClC,CAAC"}

package/dist/services/foundations/configs/ConfigService.d.ts

@@ -0,0 +1,17 @@
+import type { LoggingBroker, TimeBroker } from "@hassanhabib/standard-agents";
+import type { ConfigBroker } from "../../../brokers/configs/ConfigBroker.js";
+import { type ConfigDocument } from "../../../models/foundations/configs/ConfigDocument.js";
+import type { LockHolder } from "../../../models/foundations/configs/LockHolder.js";
+export declare class ConfigService {
+    private readonly configBroker;
+    private readonly loggingBroker;
+    private readonly timeBroker;
+    private readonly tryCatch;
+    constructor(configBroker: ConfigBroker, loggingBroker: LoggingBroker, timeBroker: TimeBroker);
+    retrieveConfig(path: string): Promise<ConfigDocument>;
+    acquireLock(path: string, pid: number): Promise<void>;
+    retrieveLockHolder(path: string): Promise<LockHolder | null>;
+    releaseLock(path: string): Promise<void>;
+    modifyConfig(path: string, document: ConfigDocument): Promise<void>;
+}
+//# sourceMappingURL=ConfigService.d.ts.map

package/dist/services/foundations/configs/ConfigService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigService.d.ts","sourceRoot":"","sources":["../../../../src/services/foundations/configs/ConfigService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAE9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0CAA0C,CAAC;AAC7E,OAAO,EAGL,KAAK,cAAc,EAMpB,MAAM,uDAAuD,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mDAAmD,CAAC;AAQpF,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;gBAEjB,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU;IAO5F,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAcrD,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrD,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAQ5D,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWxC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;CAU3E"}