@songsid/agend 2.1.12-beta.9 → 2.2.0-alpha.1

package/dist/settings-confirmation.d.ts

@@ -0,0 +1,105 @@
+import { SettingsExecution } from "./settings-transaction.js";
+export declare const SETTINGS_CONFIRMATION_TTL_MS: number;
+export type SettingsChangeSection = "access" | "secret" | "channel";
+export type SettingsChangeState = "pending" | "applying" | "applied" | "rejected" | "expired" | "stale" | "failed";
+export interface SettingsChangeOutcome {
+    state: SettingsChangeState;
+    decided_at: number;
+    decided_by_label?: string;
+    reason_code: string;
+    message: string;
+    result?: unknown;
+}
+export interface SettingsPendingView {
+    id: string;
+    state: SettingsChangeState;
+    section: SettingsChangeSection;
+    requested_at: number;
+    requested_by: string;
+    expires_at: number;
+    remaining_ms: number;
+    source: "web_session" | "public_link" | "setup_session";
+    execution?: {
+        phase: "queued" | "running" | "cleanup";
+        job_id?: string;
+        reason_code?: string;
+    };
+    summary: readonly string[];
+    confirmation: {
+        kind: "chat" | "host_cli";
+        code?: string;
+    };
+    can_withdraw: boolean;
+    outcome: SettingsChangeOutcome | null;
+}
+export interface SettingsChangeProposal {
+    session: string;
+    key: string;
+    fingerprint: string;
+    section: SettingsChangeSection;
+    requestedBy: string;
+    source: SettingsPendingView["source"];
+    summary: readonly string[];
+    bytes: number;
+    remainingMs?: number;
+    requestFingerprint?: string;
+    affectedConnections?: readonly string[];
+    /** Session, token epoch, exposure and fleet lifecycle; never extends expiry. */
+    current(): boolean;
+    /** Recheck the original configuration before admitting the effect. */
+    unchanged(): Promise<boolean>;
+    /** The original handler, guarded at its asynchronous continuation edges. */
+    apply(current: () => boolean, execution: SettingsExecution): Promise<unknown>;
+    /** Runtime state and persistence revisions, excluding the operation's private state. */
+    snapshot?(): unknown;
+    discard?(): void;
+}
+export declare class SettingsConfirmationError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(status: number, code: string);
+}
+/** One memory-only owner for chat and host claims. No HTTP confirmation method. */
+export declare class SettingsConfirmationStore {
+    private readonly options;
+    private records;
+    private keys;
+    private closed;
+    constructor(options: {
+        now?: () => number;
+        wallNow?: () => number;
+        audit(event: string, fields: Record<string, unknown>): void;
+        notify?(view: SettingsPendingView): void | Promise<void>;
+    });
+    private now;
+    private wall;
+    private audit;
+    private display;
+    private index;
+    private snapshot;
+    private prune;
+    private remove;
+    private expire;
+    private arm;
+    propose(proposal: SettingsChangeProposal): {
+        view: SettingsPendingView;
+        reused: boolean;
+    };
+    findRequest(session: string, key: string, fingerprint: string): SettingsPendingView | null;
+    affectedConnections(id: string): readonly string[];
+    inspectHost(id: string): {
+        view: SettingsPendingView;
+        fingerprint: string;
+    } | null;
+    get(id: string, session: string): SettingsPendingView | null;
+    list(session: string): SettingsPendingView[];
+    /** A prompt ACK can only attach to the still-pending owner; otherwise retire it. */
+    attachPrompt(id: string, retire: () => void): boolean;
+    withdraw(id: string, session: string): SettingsPendingView | null;
+    decide(id: string, decision: "confirm" | "reject", actor: {
+        label: string;
+        current(): boolean;
+    }): Promise<SettingsPendingView>;
+    private finish;
+    close(): void;
+}

package/dist/settings-confirmation.js

@@ -0,0 +1,232 @@
+import { randomBytes } from "node:crypto";
+import { SettingsExecution, settingsFingerprint } from "./settings-transaction.js";
+import { performance } from "node:perf_hooks";
+export const SETTINGS_CONFIRMATION_TTL_MS = 5 * 60_000;
+const RETAIN_TERMINAL_MS = 10 * 60_000;
+const MAX_PENDING = 64;
+const MAX_PER_SESSION = 8;
+const MAX_BYTES = 4 * 1024 * 1024;
+const MAX_RECORDS = 128;
+export class SettingsConfirmationError extends Error {
+    status;
+    code;
+    constructor(status, code) {
+        super(code);
+        this.status = status;
+        this.code = code;
+    }
+}
+/** One memory-only owner for chat and host claims. No HTTP confirmation method. */
+export class SettingsConfirmationStore {
+    options;
+    records = new Map();
+    keys = new Map();
+    closed = false;
+    constructor(options) {
+        this.options = options;
+    }
+    now() { return this.options.now?.() ?? performance.now(); }
+    wall() { return this.options.wallNow?.() ?? Date.now(); }
+    audit(event, entry, extra = {}) {
+        this.options.audit(event, { id: entry.view.id, section: entry.view.section, source: entry.view.source, ...extra });
+    }
+    display(label) {
+        return label.slice(0, 256).replace(/[\p{Cc}\p{Cf}]/gu, char => `\\u{${char.codePointAt(0).toString(16)}}`).replace(/@/g, "[at]").replace(/[\\`*_~[\]()<>|]/g, char => "\\" + char);
+    }
+    index(session, key) { return JSON.stringify([session, key]); }
+    snapshot(entry) {
+        return structuredClone({ ...entry.view, remaining_ms: Math.max(0, Math.ceil(entry.deadline - this.now())),
+            can_withdraw: entry.view.state === "pending" });
+    }
+    prune() {
+        const now = this.now();
+        for (const entry of this.records.values()) {
+            this.expire(entry);
+            if (entry.finishedAt !== undefined && now - entry.finishedAt >= RETAIN_TERMINAL_MS)
+                this.remove(entry);
+        }
+        while (this.records.size >= MAX_RECORDS) {
+            const terminal = [...this.records.values()].find(entry => entry.finishedAt !== undefined);
+            if (!terminal)
+                break;
+            this.remove(terminal);
+        }
+    }
+    remove(entry) {
+        clearTimeout(entry.timer);
+        this.records.delete(entry.view.id);
+        const index = this.index(entry.session, entry.key);
+        if (this.keys.get(index) === entry.view.id)
+            this.keys.delete(index);
+    }
+    expire(entry) {
+        if (entry.view.state === "pending" && this.now() >= entry.deadline)
+            this.finish(entry, "expired", "expired", "Confirmation expired. Review and apply again.");
+    }
+    arm(entry) {
+        clearTimeout(entry.timer);
+        entry.timer = setTimeout(() => { this.expire(entry); if (entry.view.state === "pending")
+            this.arm(entry); }, Math.max(1, Math.ceil(entry.deadline - this.now())));
+        entry.timer.unref?.();
+    }
+    propose(proposal) {
+        if (this.closed || !proposal.current())
+            throw new SettingsConfirmationError(409, "request_no_longer_current");
+        this.prune();
+        const index = this.index(proposal.session, proposal.key);
+        const previousId = this.keys.get(index);
+        const previous = previousId ? this.records.get(previousId) : undefined;
+        if (previous) {
+            if (previous.fingerprint !== proposal.fingerprint)
+                throw new SettingsConfirmationError(409, "idempotency_key_reused");
+            return { view: this.snapshot(previous), reused: true };
+        }
+        const live = [...this.records.values()].filter(entry => entry.proposal);
+        if (live.length >= MAX_PENDING || live.filter(entry => entry.session === proposal.session).length >= MAX_PER_SESSION
+            || live.reduce((sum, entry) => sum + (entry.proposal?.bytes ?? 0), 0) + proposal.bytes > MAX_BYTES)
+            throw new SettingsConfirmationError(429, "too_many_pending_changes");
+        const ttl = Math.min(SETTINGS_CONFIRMATION_TTL_MS, proposal.remainingMs ?? SETTINGS_CONFIRMATION_TTL_MS);
+        if (!(ttl > 0) || !Number.isFinite(ttl))
+            throw new SettingsConfirmationError(409, "verification_expired");
+        const id = randomBytes(16).toString("hex");
+        const requested = this.wall();
+        const entry = { session: proposal.session, key: proposal.key, fingerprint: proposal.fingerprint,
+            snapshotFingerprint: settingsFingerprint(proposal.snapshot?.() ?? null),
+            deadline: this.now() + ttl, requestFingerprint: proposal.requestFingerprint, proposal, view: { id, state: "pending", section: proposal.section,
+                requested_at: requested, requested_by: this.display(proposal.requestedBy), expires_at: requested + ttl,
+                source: proposal.source, summary: [...proposal.summary], confirmation: { kind: "host_cli", code: id }, outcome: null } };
+        this.records.set(id, entry);
+        this.keys.set(index, id);
+        this.arm(entry);
+        this.audit("requested", entry);
+        // Notification may fail or arrive late. Neither admits a configuration write.
+        void Promise.resolve().then(() => this.options.notify?.(this.snapshot(entry))).catch(() => this.audit("notification_failed", entry));
+        return { view: this.snapshot(entry), reused: false };
+    }
+    findRequest(session, key, fingerprint) {
+        this.prune();
+        const id = this.keys.get(this.index(session, key));
+        const entry = id ? this.records.get(id) : undefined;
+        if (!entry)
+            return null;
+        if (entry.requestFingerprint !== fingerprint)
+            throw new SettingsConfirmationError(409, "idempotency_key_reused");
+        return this.snapshot(entry);
+    }
+    affectedConnections(id) { return this.records.get(id)?.proposal?.affectedConnections ?? []; }
+    inspectHost(id) {
+        this.prune();
+        const entry = this.records.get(id);
+        return entry && !this.closed ? { view: this.snapshot(entry), fingerprint: entry.fingerprint } : null;
+    }
+    get(id, session) {
+        this.prune();
+        const entry = this.records.get(id);
+        return entry?.session === session ? this.snapshot(entry) : null;
+    }
+    list(session) {
+        this.prune();
+        return [...this.records.values()].filter(entry => entry.session === session
+            && (entry.view.state === "pending" || entry.view.state === "applying")).map(entry => this.snapshot(entry));
+    }
+    /** A prompt ACK can only attach to the still-pending owner; otherwise retire it. */
+    attachPrompt(id, retire) {
+        const entry = this.records.get(id);
+        if (entry)
+            this.expire(entry);
+        if (!entry || entry.view.state !== "pending" || this.closed || !entry.proposal?.current()) {
+            retire();
+            return false;
+        }
+        entry.retire?.();
+        entry.retire = retire;
+        entry.view.confirmation = { kind: "chat" };
+        return true;
+    }
+    withdraw(id, session) {
+        const entry = this.records.get(id);
+        if (entry?.session !== session)
+            return null;
+        this.expire(entry);
+        if (entry.view.state === "pending")
+            this.finish(entry, "rejected", "withdrawn", "Change withdrawn.");
+        return this.snapshot(entry);
+    }
+    async decide(id, decision, actor) {
+        const entry = this.records.get(id);
+        if (entry)
+            this.expire(entry);
+        if (!entry || this.closed || entry.view.state !== "pending")
+            throw new SettingsConfirmationError(409, "confirmation_not_pending");
+        const proposal = entry.proposal;
+        if (!actor.current())
+            throw new SettingsConfirmationError(403, "admin_required");
+        if (!proposal.current()) {
+            this.finish(entry, "stale", "request_no_longer_current", "The requesting session or fleet changed. Review and apply again.");
+            return this.snapshot(entry);
+        }
+        if (decision === "reject") {
+            this.finish(entry, "rejected", "rejected", "Change rejected.", actor.label);
+            return this.snapshot(entry);
+        }
+        // Both surfaces claim before the first await, so neither can execute twice.
+        entry.view.state = "applying";
+        clearTimeout(entry.timer);
+        entry.retire?.();
+        entry.retire = undefined;
+        this.audit("confirmed", entry, { decided_by: this.display(actor.label) });
+        const current = () => !this.closed && entry.view.state === "applying"
+            && this.now() < entry.deadline && actor.current() && proposal.current();
+        try {
+            const unchanged = await proposal.unchanged();
+            if (!current() || !unchanged || entry.snapshotFingerprint !== settingsFingerprint(proposal.snapshot?.() ?? null))
+                this.finish(entry, "stale", "settings_changed", "Settings changed since this request. Review and apply again.", actor.label);
+            else {
+                const execution = new SettingsExecution({ current, snapshot: () => proposal.snapshot?.() ?? null,
+                    now: () => this.now(), expectedFingerprint: entry.snapshotFingerprint, progress: (phase, reason_code) => { entry.view.execution = { phase, ...(reason_code ? { reason_code } : {}) }; } });
+                entry.execution = execution;
+                try {
+                    const result = await proposal.apply(() => execution.current(), execution);
+                    if (!execution.completed)
+                        execution.complete();
+                    this.finish(entry, "applied", "applied", "Change applied.", actor.label, result);
+                }
+                finally {
+                    execution.close();
+                    entry.execution = undefined;
+                }
+            }
+        }
+        catch {
+            if (entry.view.state === "applying")
+                this.finish(entry, this.closed ? "stale" : this.now() >= entry.deadline ? "expired" : "failed", this.closed ? "fleet_stopped" : this.now() >= entry.deadline ? "expired" : "apply_failed", "Change could not be applied. Review the configuration and try again.", actor.label);
+        }
+        return this.snapshot(entry);
+    }
+    finish(entry, state, reason, message, actor, result) {
+        clearTimeout(entry.timer);
+        entry.retire?.();
+        entry.retire = undefined;
+        entry.view.state = state;
+        entry.finishedAt = this.now();
+        entry.view.outcome = { state, reason_code: reason, message, decided_at: this.wall(), ...(actor ? { decided_by_label: this.display(actor) } : {}),
+            ...(result !== undefined ? { result } : {}) };
+        entry.proposal?.discard?.();
+        entry.proposal = undefined;
+        this.audit(state === "rejected" && reason === "withdrawn" ? "withdrawn" : state, entry);
+    }
+    close() {
+        this.closed = true;
+        for (const entry of this.records.values())
+            if (entry.proposal) {
+                if (entry.view.state === "applying") {
+                    entry.execution?.cancel();
+                    entry.retire?.();
+                    entry.retire = undefined;
+                }
+                else
+                    this.finish(entry, "stale", "fleet_stopped", "Fleet stopped. Review and apply again.");
+            }
+    }
+}
+//# sourceMappingURL=settings-confirmation.js.map

package/dist/settings-confirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-confirmation.js","sourceRoot":"","sources":["../src/settings-confirmation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,GAAG,MAAM,CAAC;AACvD,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AACvC,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAClC,MAAM,WAAW,GAAG,GAAG,CAAC;AA+DxB,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAC7B;IAAyB;IAA9C,YAAqB,MAAc,EAAW,IAAY;QAAI,KAAK,CAAC,IAAI,CAAC,CAAC;QAArD,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAQ;IAAiB,CAAC;CAC7E;AAED,mFAAmF;AACnF,MAAM,OAAO,yBAAyB;IAIP;IAHrB,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjC,MAAM,GAAG,KAAK,CAAC;IACvB,YAA6B,OAK5B;QAL4B,YAAO,GAAP,OAAO,CAKnC;IAAG,CAAC;IACG,GAAG,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACnE,IAAI,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,CAAC,KAAa,EAAE,KAAkB,EAAE,QAAiC,EAAE;QAClF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IACrH,CAAC;IACO,OAAO,CAAC,KAAa;QAAY,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAC5F,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAAC,CAAC;IACzH,KAAK,CAAC,OAAe,EAAE,GAAW,IAAY,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,QAAQ,CAAC,KAAkB;QACjC,OAAO,eAAe,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACvG,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC,CAAC;IACpD,CAAC;IACO,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,kBAAkB;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;YAC1F,IAAI,CAAC,QAAQ;gBAAE,MAAM;YACrB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACO,MAAM,CAAC,KAAkB;QAC/B,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACO,MAAM,CAAC,KAAkB;QAC/B,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,+CAA+C,CAAC,CAAC;IAChK,CAAC;IACO,GAAG,CAAC,KAAkB;QAC5B,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACzG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,QAAgC;QACtC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;QAC9G,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;gBAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;YACtH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACzD,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,MAAM,IAAI,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,eAAe;eAC/G,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,GAAG,SAAS;YAClG,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,QAAQ,CAAC,WAAW,IAAI,4BAA4B,CAAC,CAAC;QACzG,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QAC1G,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW;YAC1G,mBAAmB,EAAE,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;YACvE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO;gBAC5I,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,SAAS,GAAG,GAAG;gBACtG,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QAC7H,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACvG,8EAA8E;QAC9E,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC,CAAC;QACrI,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,WAAW,CAAC,OAAe,EAAE,GAAW,EAAE,WAAmB;QAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtH,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,KAAK,CAAC,kBAAkB,KAAK,WAAW;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;QACjH,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,mBAAmB,CAAC,EAAU,IAAuB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC;IACxH,WAAW,CAAC,EAAU;QACpB,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,CAAC;IACD,GAAG,CAAC,EAAU,EAAE,OAAe;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,OAAe;QAClB,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,OAAO;eACpF,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/G,CAAC;IACD,oFAAoF;IACpF,YAAY,CAAC,EAAU,EAAE,MAAkB;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QACtH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC;IACnG,CAAC;IACD,QAAQ,CAAC,EAAU,EAAE,OAAe;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,KAAK,EAAE,OAAO,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;QACrG,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,QAA8B,EAAE,KAA4C;QACnG,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAClI,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAS,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACjF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,kEAAkE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACvL,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,kBAAkB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACxI,4EAA4E;QAC5E,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC;QAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;QACrG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU;eACzE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC1E,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,mBAAmB,KAAK,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE,8DAA8D,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;iBAC1O,CAAC;gBACJ,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI;oBAC9F,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC7L,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;oBAC1E,IAAI,CAAC,SAAS,CAAC,SAAS;wBAAE,SAAS,CAAC,QAAQ,EAAE,CAAC;oBAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,iBAAiB,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACnF,CAAC;wBAAS,CAAC;oBAAC,SAAS,CAAC,KAAK,EAAE,CAAC;oBAAC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;gBAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU;gBAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,EAAE,sEAAsE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACvT,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACO,MAAM,CAAC,KAAkB,EAAE,KAA0B,EAAE,MAAc,EAAE,OAAe,EAAE,KAAc,EAAE,MAAgB;QAC9H,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9I,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAChD,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QAAC,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1F,CAAC;IACD,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC9D,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;oBAAC,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;oBAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;oBAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;gBAAC,CAAC;;oBAC1G,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,wCAAwC,CAAC,CAAC;YAC9F,CAAC;IACH,CAAC;CACF"}

package/dist/settings-control.d.ts

@@ -0,0 +1,41 @@
+import { SettingsConfirmationStore, type SettingsPendingView } from "./settings-confirmation.js";
+export declare const settingsSocketPath: (dataDir: string) => string;
+/** Operator-only Unix socket; never attached to daemon/MCP IPC or any HTTP listener. */
+export declare class SettingsControlServer {
+    private readonly dataDir;
+    private readonly store;
+    private readonly current;
+    private server;
+    private clients;
+    private closed;
+    private inode;
+    private closing;
+    private readonly generation;
+    constructor(dataDir: string, store: SettingsConfirmationStore, current: () => boolean);
+    private inspect;
+    listen(): Promise<void>;
+    private bind;
+    private accept;
+    close(): Promise<void>;
+    private removeOwnedSocket;
+}
+export interface SettingsTicket {
+    id: string;
+    generation: string;
+    fingerprint: string;
+    summary_fingerprint: string;
+}
+export interface SettingsInspection {
+    pending_change: SettingsPendingView;
+    ticket: SettingsTicket;
+}
+/** Same-user host authority only. No agent, HTTP, MCP or fallback startup path. */
+export declare function requestSettingsConfirmation(dataDir: string, request: {
+    action: "inspect";
+    id: string;
+} | {
+    action: "confirm" | "reject";
+    ticket: SettingsTicket;
+}, env?: NodeJS.ProcessEnv): Promise<SettingsInspection | {
+    pending_change: SettingsPendingView;
+}>;