@pellux/goodvibes-daemon-sdk 0.38.0 → 1.1.0

package/dist/runtime-session-routes.js

@@ -1,16 +1,33 @@
+import { handleRegisterSharedSession } from './runtime-session-register.js';
+import { handleDeleteSharedSession, handleGetSharedSession, handleSharedSessionDetach, handleSharedSessionLifecycle, } from './runtime-session-lifecycle-routes.js';
 import { withAdmin } from './auth-helpers.js';
 import { randomUUID } from 'node:crypto';
 import { jsonErrorResponse } from './error-response.js';
+import { SDKErrorCodes } from '@pellux/goodvibes-errors';
 import { createRouteBodySchema, createRouteBodySchemaRegistry, isJsonRecord, readBoundedPositiveInteger, readOptionalStringField, readStringArrayField, } from './route-helpers.js';
 const DEFAULT_LIST_LIMIT = 100;
 const MAX_LIST_LIMIT = 500;
 const MAX_SESSION_TOOL_NAMES = 64;
-const SHARED_SESSION_KINDS = new Set(['tui', 'companion-task', 'companion-chat']);
+export const SHARED_SESSION_KINDS = new Set(['tui', 'agent', 'webui', 'companion-task', 'companion-chat', 'automation']);
 const SHARED_SESSION_STATUSES = new Set(['active', 'closed']);
 function readBoundedLimit(url, key = 'limit') {
     return readBoundedPositiveInteger(url.searchParams.get(key), DEFAULT_LIST_LIMIT, MAX_LIST_LIMIT);
 }
-function toSharedSessionRecordResponse(sessionId, session, options = {}) {
+/** Runs a submit/steer/follow-up broker call, converting its closed-session
+ * guard throw ({ code: SDKErrorCodes.SESSION_CLOSED, status: 409 }, thrown
+ * before any mutation) into the same structured 409 other routes return. */
+async function callOrSessionClosed(fn) {
+    try {
+        return await fn();
+    }
+    catch (err) {
+        const closed = err;
+        if (closed.code !== SDKErrorCodes.SESSION_CLOSED)
+            throw err;
+        return jsonErrorResponse({ error: 'Session is closed', code: SDKErrorCodes.SESSION_CLOSED }, { status: closed.status ?? 409 });
+    }
+}
+export function toSharedSessionRecordResponse(sessionId, session, options = {}) {
     const record = isJsonRecord(session) ? session : {};
     const id = readNonEmptyString(record.id) ?? sessionId;
     const now = Date.now();
@@ -24,9 +41,12 @@ function toSharedSessionRecordResponse(sessionId, session, options = {}) {
     const activeAgentId = readNonEmptyString(record.activeAgentId);
     const lastAgentId = readNonEmptyString(record.lastAgentId);
     const lastError = readNonEmptyString(record.lastError);
+    const messageCount = Math.max(readFiniteNumber(record.messageCount) ?? 0, options.messageCount ?? 0);
+    const retained = readFiniteNumber(record.retainedMessageCount);
     return {
         id,
         kind,
+        project: readNonEmptyString(record.project) ?? 'unknown',
         title: readNonEmptyString(record.title) ?? `Session ${id}`,
         status,
         createdAt,
@@ -34,7 +54,8 @@ function toSharedSessionRecordResponse(sessionId, session, options = {}) {
         ...(lastMessageAt !== undefined ? { lastMessageAt } : {}),
         ...(closedAt !== undefined ? { closedAt } : {}),
         lastActivityAt,
-        messageCount: Math.max(readFiniteNumber(record.messageCount) ?? 0, options.messageCount ?? 0),
+        messageCount,
+        ...(retained !== undefined && retained < messageCount ? { retainedMessageCount: retained } : {}),
         pendingInputCount: Math.max(readFiniteNumber(record.pendingInputCount) ?? 0, options.pendingInputCount ?? 0),
         routeIds: readStringArray(record.routeIds),
         surfaceKinds: readStringArray(record.surfaceKinds),
@@ -97,16 +118,20 @@ function readParticipants(value) {
 export function createDaemonRuntimeSessionRouteHandlers(context) {
     return {
         createSharedSession: async (request) => withAdmin(context, request, () => handleCreateSharedSession(context, request)),
+        registerSharedSession: async (request) => withAdmin(context, request, () => handleRegisterSharedSession(context, request)),
         postTask: async (request) => withAdmin(context, request, () => handlePostTask(context, request)),
         getSharedSession: async (sessionId) => handleGetSharedSession(context, sessionId),
         closeSharedSession: (sessionId, request) => withAdmin(context, request, () => handleSharedSessionLifecycle(context, sessionId, 'close')),
         reopenSharedSession: (sessionId, request) => withAdmin(context, request, () => handleSharedSessionLifecycle(context, sessionId, 'reopen')),
+        detachSharedSession: (sessionId, request) => withAdmin(context, request, () => handleSharedSessionDetach(context, sessionId, request)),
+        deleteSharedSession: (sessionId, request) => withAdmin(context, request, () => handleDeleteSharedSession(context, sessionId)),
         getSharedSessionMessages: async (sessionId, url) => handleGetSharedSessionMessages(context, sessionId, url),
         getSharedSessionInputs: async (sessionId, url) => handleGetSharedSessionInputs(context, sessionId, url),
         postSharedSessionMessage: (sessionId, request) => withAdmin(context, request, () => handlePostSharedSessionMessage(context, sessionId, request)),
         postSharedSessionSteer: (sessionId, request) => withAdmin(context, request, () => handlePostSharedSessionSteer(context, sessionId, request)),
         postSharedSessionFollowUp: (sessionId, request) => withAdmin(context, request, () => handlePostSharedSessionFollowUp(context, sessionId, request)),
         cancelSharedSessionInput: (sessionId, inputId, request) => withAdmin(context, request, () => handleCancelSharedSessionInput(context, sessionId, inputId)),
+        deliverSharedSessionInput: (sessionId, inputId, request) => withAdmin(context, request, () => handleDeliverSharedSessionInput(context, sessionId, inputId, request)),
         getRuntimeTask: (taskId) => handleGetRuntimeTask(context, taskId),
         runtimeTaskAction: (taskId, action, request) => withAdmin(context, request, () => handleRuntimeTaskAction(context, taskId, action, request)),
         getTaskStatus: (agentId) => handleGetTaskStatus(context, agentId),
@@ -169,7 +194,7 @@ async function handlePostTask(context, req) {
         return input;
     const wantsSharedSession = typeof body.sessionId === 'string' || typeof body.routeId === 'string' || typeof body.surfaceKind === 'string';
     if (wantsSharedSession) {
-        const submission = await context.sessionBroker.submitMessage({
+        const submission = await callOrSessionClosed(() => context.sessionBroker.submitMessage({
             sessionId: typeof body.sessionId === 'string' ? body.sessionId : undefined,
             routeId: typeof body.routeId === 'string' ? body.routeId : undefined,
             surfaceKind: typeof body.surfaceKind === 'string' ? body.surfaceKind : 'web',
@@ -182,7 +207,9 @@ async function handlePostTask(context, req) {
             body: input.task,
             metadata: typeof body.metadata === 'object' && body.metadata !== null ? body.metadata : {},
             ...(input.routing ? { routing: input.routing } : {}),
-        });
+        }));
+        if (submission instanceof Response)
+            return submission;
         if (submission.mode === 'continued-live') {
             return context.recordApiResponse(req, '/task', Response.json({
                 acknowledged: true,
@@ -258,27 +285,6 @@ async function handlePostTask(context, req) {
         tools: spawnResult.tools,
     }, { status: 202 }));
 }
-async function handleGetSharedSession(context, sessionId) {
-    await context.sessionBroker.start();
-    const session = context.sessionBroker.getSession(sessionId);
-    if (!session) {
-        return jsonErrorResponse({ error: 'Unknown shared session' }, { status: 404 });
-    }
-    const messages = context.sessionBroker.getMessages(sessionId, 100);
-    return Response.json({
-        session: toSharedSessionRecordResponse(sessionId, session, { messageCount: messages.length }),
-        messages,
-    });
-}
-async function handleSharedSessionLifecycle(context, sessionId, action) {
-    await context.sessionBroker.start();
-    const session = action === 'close'
-        ? await context.sessionBroker.closeSession(sessionId)
-        : await context.sessionBroker.reopenSession(sessionId);
-    return session
-        ? Response.json({ session: toSharedSessionRecordResponse(sessionId, session, { status: action === 'close' ? 'closed' : 'active' }) })
-        : jsonErrorResponse({ error: 'Unknown shared session' }, { status: 404 });
-}
 async function handleGetSharedSessionMessages(context, sessionId, url) {
     await context.sessionBroker.start();
     const session = context.sessionBroker.getSession(sessionId);
@@ -299,23 +305,54 @@ async function handleGetSharedSessionInputs(context, sessionId, url) {
         return jsonErrorResponse({ error: 'Unknown shared session' }, { status: 404 });
     }
     const limit = readBoundedLimit(url);
-    const inputs = context.sessionBroker.getInputs(sessionId, limit);
+    // Collection cursor for live surfaces: filter by state (e.g. 'queued') and/or a
+    // `since` createdAt cursor (exclusive) so a surface drains only inputs it has
+    // not collected yet. Absent params preserve the legacy "last N inputs" behavior.
+    const stateParam = readSessionInputState(url.searchParams.get('state'));
+    const sinceParam = readPositiveInt(url.searchParams.get('since'));
+    const inputs = (stateParam !== undefined || sinceParam !== undefined)
+        ? context.sessionBroker.getInputsSince(sessionId, {
+            ...(stateParam !== undefined ? { state: stateParam } : {}),
+            ...(sinceParam !== undefined ? { since: sinceParam } : {}),
+            limit,
+        })
+        : context.sessionBroker.getInputs(sessionId, limit);
     return Response.json({
         session: toSharedSessionRecordResponse(sessionId, session, { pendingInputCount: inputs.length }),
         inputs,
     });
 }
-/**
- * Handle POST /api/sessions/:sessionId/messages.
- *
- * Accepts `{body}` in the request payload and returns 400 when it is absent or empty.
- */
+const SHARED_SESSION_INPUT_STATES = new Set([
+    'queued', 'delivered', 'spawned', 'completed', 'cancelled', 'failed', 'rejected',
+]);
+function readSessionInputState(value) {
+    return value !== null && SHARED_SESSION_INPUT_STATES.has(value) ? value : undefined;
+}
+function readPositiveInt(value) {
+    if (value === null)
+        return undefined;
+    const parsed = Number(value);
+    return Number.isFinite(parsed) && parsed >= 0 ? parsed : undefined;
+}
+/** Handle POST /api/sessions/:sessionId/inputs/:inputId/deliver — a live surface reports
+ * collection (`{consumed:true}` = completed, else delivered); optional body, null/bare = consumed:false. */
+async function handleDeliverSharedSessionInput(context, sessionId, inputId, req) {
+    const body = await context.parseOptionalJsonBody(req);
+    if (body instanceof Response)
+        return body;
+    const consumed = body?.consumed === true;
+    const input = await context.sessionBroker.markInputDelivered(sessionId, inputId, { consumed });
+    if (!input) {
+        return jsonErrorResponse({ error: 'Unknown shared session input' }, { status: 404 });
+    }
+    return context.recordApiResponse(req, `/api/sessions/${sessionId}/inputs/${inputId}/deliver`, Response.json({ input }, { status: 200 }));
+}
+/** Handle POST /api/sessions/:sessionId/messages. Accepts `{body}`; 400 when absent/empty. */
 async function handlePostSharedSessionMessage(context, sessionId, req) {
     const body = await context.parseJsonBody(req);
     if (body instanceof Response)
         return body;
-    // Validate kind field. Ordinary session messages default to conversation
-    // routing; callers must explicitly opt into kind='task' for agent/WRFC work.
+    // Ordinary session messages default to conversation routing; callers must opt into kind='task' for agent/WRFC work.
     const kind = body.kind === undefined ? 'message' : body.kind;
     if (kind !== 'task' && kind !== 'message' && kind !== 'followup') {
         return jsonErrorResponse({ error: `Invalid kind '${String(kind)}'. Accepted values: 'task' | 'message' | 'followup'`, code: 'INVALID_KIND' }, { status: 400 });
@@ -327,7 +364,9 @@ async function handlePostSharedSessionMessage(context, sessionId, req) {
     const input = buildSharedSessionMessageInput(sessionId, body, message);
     // kind='followup' — always queues/spawns a follow-up turn via followUpMessage()
     if (kind === 'followup') {
-        const followUpSubmission = await context.sessionBroker.followUpMessage(input);
+        const followUpSubmission = await callOrSessionClosed(() => context.sessionBroker.followUpMessage(input));
+        if (followUpSubmission instanceof Response)
+            return followUpSubmission;
         return await respondToSessionSubmission(context, req, followUpSubmission, message, `/api/sessions/${sessionId}/messages`, 'DaemonServer.handlePostSharedSessionMessage.followup', {
             context: `shared-session:${followUpSubmission.session.id}`,
         });
@@ -337,24 +376,22 @@ async function handlePostSharedSessionMessage(context, sessionId, req) {
     if (kind === 'message') {
         return handleCompanionMessageKind(context, sessionId, req, input);
     }
-    const submission = await context.sessionBroker.submitMessage(input);
+    const submission = await callOrSessionClosed(() => context.sessionBroker.submitMessage(input));
+    if (submission instanceof Response)
+        return submission;
     return await respondToSessionSubmission(context, req, submission, message, `/api/sessions/${sessionId}/messages`, 'DaemonServer.handlePostSharedSessionMessage', {
         context: `shared-session:${submission.session.id}`,
     });
 }
-/**
- * Handles kind='message' companion main-chat messages.
- *
- * Short-circuits before sessionBroker.submitMessage() so conversation messages
- * are routed to the existing session instead of spawning continuation work.
- */
+/** Handles kind='message' companion main-chat messages — short-circuits before
+ * sessionBroker.submitMessage() so conversation messages route to the existing session instead of spawning continuation work. */
 async function handleCompanionMessageKind(context, sessionId, req, input) {
     const session = context.sessionBroker.getSession(sessionId);
     if (!session) {
         return jsonErrorResponse({ error: 'Unknown shared session', code: 'SESSION_NOT_FOUND' }, { status: 404 });
     }
     if (session.status === 'closed') {
-        return jsonErrorResponse({ error: 'Session is closed', code: 'SESSION_CLOSED' }, { status: 409 });
+        return jsonErrorResponse({ error: 'Session is closed', code: SDKErrorCodes.SESSION_CLOSED }, { status: 409 });
     }
     const messageId = `companion-${randomUUID()}`;
     const timestamp = Date.now();
@@ -368,9 +405,8 @@ async function handleCompanionMessageKind(context, sessionId, req, input) {
         timestamp,
         ...(metadata ? { metadata } : {}),
     });
-    // Notify in-process subscribers via the conversation follow-up event. The
-    // runtime subscriber turns this persisted message into a normal conversation
-    // turn whose events stream to both local and remote clients.
+    // Notify in-process subscribers via the conversation follow-up event (the
+    // runtime subscriber turns it into a normal conversation turn that streams out).
     context.publishConversationFollowup(sessionId, {
         messageId,
         body: input.body,
@@ -378,8 +414,7 @@ async function handleCompanionMessageKind(context, sessionId, req, input) {
         timestamp,
         ...(metadata ? { metadata } : {}),
     });
-    // The { routedTo: 'conversation' } shape signals the companion app that the message
-    // was received and persisted (isConversationRouteResult check).
+    // { routedTo: 'conversation' } signals the companion app the message was persisted.
     return context.recordApiResponse(req, `/api/sessions/${sessionId}/messages`, Response.json({
         messageId,
         routedTo: 'conversation',
@@ -408,11 +443,8 @@ function buildCompanionMessageMetadata(input) {
         metadata.displayName = input.displayName;
     return Object.keys(metadata).length > 0 ? metadata : undefined;
 }
-/**
- * Handle GET /api/sessions/:id/events — creates a session-scoped SSE stream
- * for the companion app to receive turn events (STREAM_DELTA, TURN_COMPLETED,
- * etc.) and agent events from the shared session.
- */
+/** Handle GET /api/sessions/:id/events — a session-scoped SSE stream for turn events
+ * (STREAM_DELTA, TURN_COMPLETED, etc.) and agent events. */
 async function handleGetSharedSessionEvents(context, sessionId, req) {
     await context.sessionBroker.start();
     const session = context.sessionBroker.getSession(sessionId);
@@ -431,10 +463,12 @@ async function handlePostSharedSessionSteer(context, sessionId, req) {
     if (!message) {
         return jsonErrorResponse({ error: 'Missing shared session steer body' }, { status: 400 });
     }
-    const submission = await context.sessionBroker.steerMessage({
+    const submission = await callOrSessionClosed(() => context.sessionBroker.steerMessage({
         ...buildSharedSessionMessageInput(sessionId, body, message),
         ...(body.allowSpawnFallback === true ? { allowSpawnFallback: true } : {}),
-    });
+    }));
+    if (submission instanceof Response)
+        return submission;
     return await respondToSessionSubmission(context, req, submission, message, `/api/sessions/${sessionId}/steer`, 'DaemonServer.handlePostSharedSessionSteer', {
         context: `shared-session:${submission.session.id}`,
     });
@@ -447,7 +481,9 @@ async function handlePostSharedSessionFollowUp(context, sessionId, req) {
     if (!message) {
         return jsonErrorResponse({ error: 'Missing shared session follow-up body' }, { status: 400 });
     }
-    const submission = await context.sessionBroker.followUpMessage(buildSharedSessionMessageInput(sessionId, body, message));
+    const submission = await callOrSessionClosed(() => context.sessionBroker.followUpMessage(buildSharedSessionMessageInput(sessionId, body, message)));
+    if (submission instanceof Response)
+        return submission;
     return await respondToSessionSubmission(context, req, submission, message, `/api/sessions/${sessionId}/follow-up`, 'DaemonServer.handlePostSharedSessionFollowUp', {
         context: `shared-session:${submission.session.id}`,
     });
@@ -477,14 +513,8 @@ function handleGetRuntimeTask(context, taskId) {
     return Response.json({ task });
 }
 /**
- * Extract the message body from an incoming POST body.
- *
- * Accepts the canonical `body` field from the request envelope.
- * Returns an empty string when the field is absent or not a string; the
- * caller must check for an empty result and return 400.
- *
- * @param body - Parsed JSON body from the request.
- * @returns Trimmed message string, or '' if none of the accepted fields are present.
+ * Extract the canonical `body` field from an incoming POST envelope. Returns ''
+ * when absent or non-string; the caller must check for '' and return 400.
  */
 export function readSharedSessionMessageBody(body) {
     return typeof body.body === 'string' ? body.body.trim() : '';
@@ -551,7 +581,12 @@ function readHelperModel(value) {
         : undefined;
 }
 async function respondToSessionSubmission(context, req, submission, taskText, path, logLabel, spawnOptions = {}) {
-    if (submission.mode === 'continued-live' || submission.mode === 'queued-follow-up') {
+    if (submission.mode === 'continued-live' ||
+        submission.mode === 'queued-follow-up' ||
+        submission.mode === 'queued-for-surface') {
+        // queued-for-surface: the input is queued for a live registered surface to
+        // collect (sessions.inputs.list) and deliver (sessions.inputs.deliver). No
+        // daemon executor is spawned — the surface owns turn execution.
         return context.recordApiResponse(req, path, Response.json({
             session: toSharedSessionRecordResponse(submission.session.id, submission.session),
             message: submission.userMessage ?? null,

package/dist/sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE/D,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAwC1B"}
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE/D,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAgD1B"}

package/dist/sessions.js

@@ -4,16 +4,23 @@ export async function dispatchSessionRoutes(req, handlers) {
     const method = req.method;
     if (pathname === '/api/sessions' && method === 'GET')
         return handlers.getIntegrationSessions();
+    if (pathname === '/api/sessions/register' && method === 'POST')
+        return handlers.registerSharedSession(req);
     if (pathname === '/api/sessions' && method === 'POST')
         return handlers.createSharedSession(req);
     const sharedSessionMatch = pathname.match(/^\/api\/sessions\/([^/]+)$/);
     if (sharedSessionMatch && method === 'GET')
         return handlers.getSharedSession(sharedSessionMatch[1]);
-    const sharedSessionCloseMatch = pathname.match(/^\/api\/sessions\/([^/]+)\/(close|reopen)$/);
-    if (sharedSessionCloseMatch && method === 'POST') {
-        return sharedSessionCloseMatch[2] === 'close'
-            ? handlers.closeSharedSession(sharedSessionCloseMatch[1], req)
-            : handlers.reopenSharedSession(sharedSessionCloseMatch[1], req);
+    if (sharedSessionMatch && method === 'DELETE')
+        return handlers.deleteSharedSession(sharedSessionMatch[1], req);
+    const sharedSessionLifecycleMatch = pathname.match(/^\/api\/sessions\/([^/]+)\/(close|reopen|detach)$/);
+    if (sharedSessionLifecycleMatch && method === 'POST') {
+        const [, sessionId, action] = sharedSessionLifecycleMatch;
+        if (action === 'close')
+            return handlers.closeSharedSession(sessionId, req);
+        if (action === 'reopen')
+            return handlers.reopenSharedSession(sessionId, req);
+        return handlers.detachSharedSession(sessionId, req);
     }
     const sharedSessionMessagesMatch = pathname.match(/^\/api\/sessions\/([^/]+)\/messages$/);
     if (sharedSessionMessagesMatch && method === 'GET')
@@ -33,6 +40,10 @@ export async function dispatchSessionRoutes(req, handlers) {
     if (sharedSessionCancelInputMatch && method === 'POST') {
         return handlers.cancelSharedSessionInput(sharedSessionCancelInputMatch[1], sharedSessionCancelInputMatch[2], req);
     }
+    const sharedSessionDeliverInputMatch = pathname.match(/^\/api\/sessions\/([^/]+)\/inputs\/([^/]+)\/deliver$/);
+    if (sharedSessionDeliverInputMatch && method === 'POST') {
+        return handlers.deliverSharedSessionInput(sharedSessionDeliverInputMatch[1], sharedSessionDeliverInputMatch[2], req);
+    }
     const sharedSessionEventsMatch = pathname.match(/^\/api\/sessions\/([^/]+)\/events$/);
     if (sharedSessionEventsMatch && method === 'GET')
         return handlers.getSharedSessionEvents(sharedSessionEventsMatch[1], req);

package/dist/system-route-types.d.ts

@@ -101,6 +101,13 @@ export interface ApprovalBrokerLike {
         readonly actor: string;
         readonly actorSurface: string;
         readonly note?: string | undefined;
+        /**
+         * Optional per-hunk selection (edit-tool approvals only). The broker
+         * filters the approval's own edit list to these indices server-side. An
+         * out-of-range index or a non-edit approval throws a 400-tagged error the
+         * route layer converts to an HTTP 400.
+         */
+        readonly selectedHunks?: readonly number[] | undefined;
     }): Promise<unknown | null>;
 }
 export interface WorkspaceSwapManagerLike {
@@ -120,9 +127,50 @@ export interface WorkspaceSwapManagerLike {
         reason: string;
     }>;
 }
+/**
+ * Secret-free status metadata for a single credential held in the daemon's
+ * shared store (or overridden by an environment variable). This is the ONLY
+ * shape the credential-read wire method (`credentials.get`) ever returns — the
+ * plaintext secret value never crosses the wire. `usable` reflects a real
+ * in-process resolution attempt, so a configured-but-unresolvable reference
+ * (e.g. a broken `op://` ref) reports `configured: true, usable: false`.
+ */
+export interface CredentialStatusRecord {
+    readonly key: string;
+    /** A value exists in the shared store (or, for a named probe, in env). */
+    readonly configured: boolean;
+    /** The value/reference resolved to non-empty plaintext in-process. */
+    readonly usable: boolean;
+    /** Where the value was found: 'env' | 'user-secure' | 'project-secure' | … */
+    readonly source: string;
+    /** 'user' | 'project' | 'env'. */
+    readonly scope: string;
+    /** Backed by an encrypted store (vs plaintext). */
+    readonly secure: boolean;
+    /** A same-named environment variable overrides the stored value. */
+    readonly overriddenByEnv: boolean;
+    /** External-reference provider, when the stored value is a secret ref. */
+    readonly refSource?: string | undefined;
+}
+/**
+ * Reads credential STATUS (never plaintext) from the daemon's shared secret
+ * store. Enumeration (`list`) is over stored keys only — never `process.env` —
+ * so it cannot leak the names of unrelated environment variables. A named probe
+ * (`get`) may consult env for that one caller-named key.
+ */
+export interface CredentialStatusProviderLike {
+    list(): Promise<readonly CredentialStatusRecord[]>;
+    get(key: string): Promise<CredentialStatusRecord | null>;
+}
 export interface DaemonSystemRouteContext {
     readonly approvalBroker: ApprovalBrokerLike;
     readonly configManager: ConfigManagerLike;
+    /**
+     * Secret-free credential-status source for `credentials.get`. Null when the
+     * daemon host wires no shared secret store — the handler then reports an
+     * honest 503 rather than a false "no credentials".
+     */
+    readonly credentialStatus: CredentialStatusProviderLike | null;
     readonly integrationHelpers: IntegrationApprovalSnapshotSourceLike | null;
     readonly inspectInboundTls: (surface: 'controlPlane' | 'httpListener') => unknown;
     readonly inspectOutboundTls: () => unknown;

package/dist/system-route-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system-route-types.d.ts","sourceRoot":"","sources":["../src/system-route-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtE,YAAY,EAAE,qBAAqB,EAAE,CAAC;AAEtC,MAAM,MAAM,mBAAmB,GAC3B,KAAK,GACL,OAAO,GACP,SAAS,GACT,MAAM,GACN,SAAS,GACT,UAAU,GACV,aAAa,GACb,QAAQ,GACR,UAAU,GACV,UAAU,GACV,SAAS,GACT,aAAa,GACb,YAAY,GACZ,QAAQ,GACR,QAAQ,CAAC;AAEb,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAChD,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAC7C,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC5C,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC;AACjD,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,qCAAqC;IACpD,mBAAmB,IAAI,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,IAAI,OAAO,CAAC;IACnB,KAAK,IAAI,OAAO,CAAC;IACjB,IAAI,IAAI,OAAO,CAAC;IAChB,OAAO,IAAI,OAAO,CAAC;IACnB,SAAS,IAAI,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,IAAI,SAAS,OAAO,EAAE,CAAC;IACnC,aAAa,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACxF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,IAAI,SAAS,OAAO,EAAE,CAAC;IAC3B,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,eAAe,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;QACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;KAC3C,GAAG,aAAa,CAAC;IAClB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IACpD,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IACtD,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IACrE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC/G,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAChH,eAAe,CACb,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACpC,GACA,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,oBAAoB,IAAI,MAAM,CAAC;IAC/B,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CACvC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAC/C;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,gBAAgB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GACzE;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,cAAc,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CACtD,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,iBAAiB,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,EAAE,qCAAqC,GAAG,IAAI,CAAC;IAC1E,QAAQ,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,cAAc,GAAG,cAAc,KAAK,OAAO,CAAC;IAClF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,OAAO,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC;IACzE,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC;IACxF,QAAQ,CAAC,sBAAsB,EAAE,0BAA0B,CAAC;IAC5D,QAAQ,CAAC,iBAAiB,EAAE,CAC1B,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,EAClB,UAAU,CAAC,EAAE,mBAAmB,KAC7B,QAAQ,CAAC;IACd,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,2BAA2B,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9G,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,uFAAuF;IACvF,QAAQ,CAAC,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,eAAe,EAAE,mBAAmB,CAAC;CAC/C"}
+{"version":3,"file":"system-route-types.d.ts","sourceRoot":"","sources":["../src/system-route-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtE,YAAY,EAAE,qBAAqB,EAAE,CAAC;AAEtC,MAAM,MAAM,mBAAmB,GAC3B,KAAK,GACL,OAAO,GACP,SAAS,GACT,MAAM,GACN,SAAS,GACT,UAAU,GACV,aAAa,GACb,QAAQ,GACR,UAAU,GACV,UAAU,GACV,SAAS,GACT,aAAa,GACb,YAAY,GACZ,QAAQ,GACR,QAAQ,CAAC;AAEb,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAChD,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAC7C,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC5C,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC;AACjD,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CAC/C;AAED,MAAM,WAAW,qCAAqC;IACpD,mBAAmB,IAAI,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,IAAI,OAAO,CAAC;IACnB,KAAK,IAAI,OAAO,CAAC;IACjB,IAAI,IAAI,OAAO,CAAC;IAChB,OAAO,IAAI,OAAO,CAAC;IACnB,SAAS,IAAI,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,IAAI,SAAS,OAAO,EAAE,CAAC;IACnC,aAAa,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACxF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,IAAI,SAAS,OAAO,EAAE,CAAC;IAC3B,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,eAAe,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;QACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;KAC3C,GAAG,aAAa,CAAC;IAClB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IACpD,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IACtD,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;IACrE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC/G,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAChH,eAAe,CACb,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC;;;;;WAKG;QACH,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;KACxD,GACA,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,oBAAoB,IAAI,MAAM,CAAC;IAC/B,WAAW,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CACvC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAC/C;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,gBAAgB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GACzE;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,cAAc,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CACtD,CAAC;CACH;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,oEAAoE;IACpE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C,IAAI,IAAI,OAAO,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAAC;IACnD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAC;IAC5C,QAAQ,CAAC,aAAa,EAAE,iBAAiB,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,EAAE,4BAA4B,GAAG,IAAI,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,EAAE,qCAAqC,GAAG,IAAI,CAAC;IAC1E,QAAQ,CAAC,iBAAiB,EAAE,CAAC,OAAO,EAAE,cAAc,GAAG,cAAc,KAAK,OAAO,CAAC;IAClF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,OAAO,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC;IACzE,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC;IACxF,QAAQ,CAAC,sBAAsB,EAAE,0BAA0B,CAAC;IAC5D,QAAQ,CAAC,iBAAiB,EAAE,CAC1B,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,EAClB,UAAU,CAAC,EAAE,mBAAmB,KAC7B,QAAQ,CAAC;IACd,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,2BAA2B,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;IAC9G,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,uFAAuF;IACvF,QAAQ,CAAC,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,eAAe,EAAE,mBAAmB,CAAC;CAC/C"}

package/dist/system-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"system-routes.d.ts","sourceRoot":"","sources":["../src/system-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAU9D,OAAO,KAAK,EAMV,wBAAwB,EAEzB,MAAM,yBAAyB,CAAC;AA4CjC,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,wBAAwB,GAChC,yBAAyB,CA0J3B"}
+{"version":3,"file":"system-routes.d.ts","sourceRoot":"","sources":["../src/system-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAU9D,OAAO,KAAK,EAMV,wBAAwB,EAEzB,MAAM,yBAAyB,CAAC;AA4CjC,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,wBAAwB,GAChC,yBAAyB,CAkL3B"}

package/dist/system-routes.js

@@ -182,6 +182,28 @@ export function createDaemonSystemRouteHandlers(context) {
                 return admin;
             return Response.json(context.configManager.getAll());
         },
+        getCredentials: async (req) => {
+            const admin = context.requireAdmin(req);
+            if (admin)
+                return admin;
+            if (!context.credentialStatus) {
+                // Honest degraded state: no shared secret store is wired, so we cannot
+                // truthfully report credential status. Never fabricate an empty "no
+                // credentials" answer that a caller would read as "nothing configured".
+                return jsonErrorResponse({ error: 'Shared credential store unavailable', code: 'CREDENTIAL_STORE_UNAVAILABLE' }, { status: 503 });
+            }
+            const key = new URL(req.url).searchParams.get('key');
+            if (key !== null) {
+                const trimmed = key.trim();
+                if (!trimmed) {
+                    return jsonErrorResponse({ error: 'Missing or invalid key' }, { status: 400 });
+                }
+                const record = await context.credentialStatus.get(trimmed);
+                return Response.json({ available: true, credentials: record ? [record] : [] });
+            }
+            const credentials = await context.credentialStatus.list();
+            return Response.json({ available: true, credentials });
+        },
         postConfig: async (req) => {
             const admin = context.requireAdmin(req);
             if (admin)
@@ -366,14 +388,44 @@ async function handleApprovalAction(context, approvalId, action, req) {
             ? context.recordApiResponse(req, `/api/approvals/${approvalId}/${action}`, Response.json({ approval }))
             : context.recordApiResponse(req, `/api/approvals/${approvalId}/${action}`, jsonErrorResponse({ error: 'Unknown approval' }, { status: 404 }));
     }
-    const approval = await context.approvalBroker.resolveApproval(approvalId, {
-        approved: action === 'approve',
-        remember: typeof payload.remember === 'boolean' ? payload.remember : false,
-        actor,
-        actorSurface: 'web',
-        note,
-    });
+    const selectedHunks = action === 'approve' ? readSelectedHunks(payload.selectedHunks) : undefined;
+    if (selectedHunks instanceof Response) {
+        return context.recordApiResponse(req, `/api/approvals/${approvalId}/${action}`, selectedHunks);
+    }
+    let approval;
+    try {
+        approval = await context.approvalBroker.resolveApproval(approvalId, {
+            approved: action === 'approve',
+            remember: typeof payload.remember === 'boolean' ? payload.remember : false,
+            actor,
+            actorSurface: 'web',
+            note,
+            ...(selectedHunks !== undefined ? { selectedHunks } : {}),
+        });
+    }
+    catch (error) {
+        // The broker throws a 400-tagged error for an out-of-range or non-edit
+        // per-hunk selection. Surface it as an honest HTTP 400, not a 500.
+        const status = typeof error?.status === 'number' ? error.status : 500;
+        const message = error instanceof Error ? error.message : 'Approval resolution failed.';
+        return context.recordApiResponse(req, `/api/approvals/${approvalId}/${action}`, jsonErrorResponse({ error: message }, { status }));
+    }
     return approval
         ? context.recordApiResponse(req, `/api/approvals/${approvalId}/${action}`, Response.json({ approval }))
         : context.recordApiResponse(req, `/api/approvals/${approvalId}/${action}`, jsonErrorResponse({ error: 'Unknown approval' }, { status: 404 }));
 }
+/**
+ * Read an optional selectedHunks array off the request payload. Returns the
+ * validated number[] when present and well-formed, undefined when absent, or a
+ * 400 Response when present but malformed (non-array, or an entry that is not a
+ * finite integer). Range validation against the specific approval's hunk count
+ * is the broker's job (it owns the pending edit list).
+ */
+function readSelectedHunks(value) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (!Array.isArray(value) || !value.every((entry) => Number.isInteger(entry))) {
+        return jsonErrorResponse({ error: 'selectedHunks must be an array of integer hunk indices.' }, { status: 400 });
+    }
+    return value;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pellux/goodvibes-daemon-sdk",
-  "version": "0.38.0",
+  "version": "1.1.0",
   "engines": {
     "bun": "1.3.10",
     "node": ">=22.0.0"
@@ -157,8 +157,8 @@
     "control-plane"
   ],
   "dependencies": {
-    "@pellux/goodvibes-contracts": "0.38.0",
-    "@pellux/goodvibes-errors": "0.38.0"
+    "@pellux/goodvibes-contracts": "1.1.0",
+    "@pellux/goodvibes-errors": "1.1.0"
   },
   "publishConfig": {
     "access": "public"