@songsid/agend 2.1.12-beta.9 → 2.2.0-alpha.1

package/dist/settings-control.js

@@ -0,0 +1,294 @@
+import { operatorUid, assertOperatorRoot, assertOperatorClientPath } from "./operator-control-paths.js";
+import { createServer, createConnection } from "node:net";
+import { constants } from "node:fs";
+import { lstat, mkdir, open, chmod, unlink } from "node:fs/promises";
+import { join } from "node:path";
+import { performance } from "node:perf_hooks";
+import { randomBytes } from "node:crypto";
+import { settingsFingerprint } from "./settings-transaction.js";
+import { UNIX_SOCKET_PATH_MAX } from "./channel/ipc-bridge.js";
+const INPUT_BYTES = 2048;
+export const settingsSocketPath = (dataDir) => join(dataDir, "operator", "settings.sock");
+function uid() { return operatorUid("Settings confirmation"); }
+async function checkRoot(dataDir) { await assertOperatorRoot(dataDir, "Settings confirmation"); }
+async function checkClientPath(dataDir) { await assertOperatorClientPath(dataDir, settingsSocketPath(dataDir), "Settings confirmation"); }
+/** Operator-only Unix socket; never attached to daemon/MCP IPC or any HTTP listener. */
+export class SettingsControlServer {
+    dataDir;
+    store;
+    current;
+    server = null;
+    clients = new Set();
+    closed = false;
+    inode = null;
+    closing = null;
+    generation = randomBytes(16).toString("hex");
+    constructor(dataDir, store, current) {
+        this.dataDir = dataDir;
+        this.store = store;
+        this.current = current;
+    }
+    inspect(id) {
+        const value = this.store.inspectHost(id);
+        return value ? { pending_change: value.view, ticket: { id, generation: this.generation,
+                fingerprint: value.fingerprint, summary_fingerprint: settingsFingerprint(value.view.summary) } } : null;
+    }
+    async listen() {
+        const deadline = performance.now() + 2000;
+        let timer;
+        try {
+            await Promise.race([this.bind(deadline).catch(async (err) => { if (this.closed)
+                    await this.removeOwnedSocket(); throw err; }), new Promise((_yes, no) => {
+                    timer = setTimeout(() => { this.closed = true; no(new Error("Settings socket startup timed out")); }, 2000);
+                })]);
+        }
+        catch (err) {
+            await this.close();
+            throw err;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async bind(deadline) {
+        const current = () => {
+            if (this.closed || performance.now() >= deadline)
+                throw new Error("Settings socket startup expired.");
+        };
+        const path = settingsSocketPath(this.dataDir);
+        if (Buffer.byteLength(path) >= UNIX_SOCKET_PATH_MAX)
+            throw new Error("Settings socket path exceeds the Unix socket limit.");
+        await checkRoot(this.dataDir);
+        current();
+        const directory = join(this.dataDir, "operator");
+        await mkdir(directory, { mode: 0o700 }).catch(err => { if (err.code !== "EEXIST")
+            throw err; });
+        current();
+        const dir = await open(directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+        try {
+            current();
+            const info = await dir.stat();
+            current();
+            if (!info.isDirectory() || info.uid !== uid())
+                throw new Error("Settings operator directory is not owned by this user.");
+            await dir.chmod(0o700);
+            current(); // same fd checked and changed, never follow a replaced symlink
+        }
+        finally {
+            await dir.close();
+        }
+        current();
+        const existing = await lstat(path).catch(err => { if (err.code !== "ENOENT")
+            throw err; return null; });
+        current();
+        if (existing) {
+            if (!existing.isSocket() || existing.uid !== uid())
+                throw new Error("Refusing to replace a non-owned/non-socket settings path.");
+            await unlink(path);
+            current(); // only called after the fleet singleton has been claimed
+        }
+        const server = createServer(socket => this.accept(socket));
+        this.server = server;
+        server.on("error", () => { void this.close(); });
+        await new Promise((yes, no) => {
+            server.once("error", no);
+            server.listen(path, () => {
+                server.removeListener("error", no);
+                if (this.closed || performance.now() >= deadline) {
+                    // A late native listen completion must not reopen an expired listener.
+                    server.close();
+                    no(new Error("Settings socket startup expired."));
+                }
+                else
+                    yes();
+            });
+        });
+        // The 0700 parent already gates access while these asynchronous checks run.
+        const info = await lstat(path);
+        this.inode = info.ino;
+        current();
+        await chmod(path, 0o600);
+        current();
+        if (this.closed)
+            await this.removeOwnedSocket();
+    }
+    accept(socket) {
+        if (this.closed || this.clients.size >= 8) {
+            socket.destroy();
+            return;
+        }
+        this.clients.add(socket);
+        let buffer = "", bytes = 0, handled = false;
+        let timer;
+        const write = (value) => {
+            try {
+                if (!socket.destroyed)
+                    socket.write(JSON.stringify(value) + "\n");
+            }
+            catch {
+                socket.destroy();
+            }
+        };
+        const expireAt = (deadline) => {
+            clearTimeout(timer);
+            const check = () => {
+                const remaining = deadline - performance.now();
+                if (remaining > 0)
+                    timer = setTimeout(check, Math.ceil(remaining));
+                else
+                    socket.destroy();
+            };
+            timer = setTimeout(check, Math.max(0, Math.ceil(deadline - performance.now())));
+        };
+        const inputDeadline = performance.now() + 2000;
+        expireAt(inputDeadline);
+        socket.on("close", () => { clearTimeout(timer); this.clients.delete(socket); });
+        socket.on("error", () => socket.destroy());
+        socket.on("data", (data) => {
+            if (handled || this.closed || socket.destroyed)
+                return;
+            if (performance.now() >= inputDeadline) {
+                socket.destroy();
+                return;
+            }
+            bytes += data.length;
+            if (bytes > INPUT_BYTES) {
+                socket.destroy();
+                return;
+            }
+            buffer += data.toString("utf8");
+            if (!buffer.includes("\n"))
+                return;
+            handled = true;
+            void (async () => {
+                try {
+                    const request = JSON.parse(buffer.slice(0, buffer.indexOf("\n")));
+                    if (!request || typeof request !== "object" || Array.isArray(request) || !this.current())
+                        throw new Error("Settings confirmation unavailable.");
+                    const input = request;
+                    const action = input.action;
+                    const id = typeof input.id === "string" ? input.id : input.ticket?.id;
+                    if (!id || !/^[0-9a-f]{32}$/.test(id))
+                        throw new Error("Invalid pending change id.");
+                    expireAt(performance.now() + 65_000);
+                    const inspected = this.inspect(id);
+                    if (!inspected)
+                        throw new Error("Pending change not found.");
+                    if (action === "inspect" && Object.keys(input).length === 2)
+                        write({ status: "ok", ...inspected });
+                    else if ((action === "confirm" || action === "reject") && Object.keys(input).length === 2
+                        && settingsFingerprint(input.ticket) === settingsFingerprint(inspected.ticket)) {
+                        const result = await this.store.decide(id, action, { label: "host operator", current: () => !this.closed && this.current() });
+                        write({ status: "ok", pending_change: result });
+                    }
+                    else
+                        throw new Error("Inspection is stale; inspect the authoritative diff again.");
+                }
+                catch {
+                    write({ status: "error", message: "Settings confirmation rejected; inspect the change again." });
+                }
+                finally {
+                    clearTimeout(timer);
+                    try {
+                        socket.end();
+                    }
+                    catch {
+                        socket.destroy();
+                    }
+                }
+            })();
+        });
+    }
+    close() {
+        this.closed = true;
+        for (const socket of this.clients)
+            socket.destroy();
+        this.clients.clear();
+        this.closing ??= (async () => {
+            const server = this.server;
+            this.server = null;
+            let timer;
+            try {
+                if (server)
+                    await Promise.race([
+                        new Promise(resolve => server.close(() => resolve())),
+                        new Promise(resolve => { timer = setTimeout(resolve, 2000); }),
+                    ]);
+            }
+            finally {
+                clearTimeout(timer);
+            }
+            await this.removeOwnedSocket();
+        })();
+        return this.closing;
+    }
+    async removeOwnedSocket() {
+        if (this.inode !== null) {
+            const info = await lstat(settingsSocketPath(this.dataDir)).catch(() => null);
+            if (info?.isSocket() && info.ino === this.inode && info.uid === uid())
+                await unlink(settingsSocketPath(this.dataDir)).catch(() => { });
+        }
+    }
+}
+/** Same-user host authority only. No agent, HTTP, MCP or fallback startup path. */
+export async function requestSettingsConfirmation(dataDir, request, env = process.env) {
+    if (Object.hasOwn(env, "AGEND_INSTANCE_NAME"))
+        throw new Error("Agent sessions cannot confirm Settings changes.");
+    await checkClientPath(dataDir);
+    const budget = request.action === "inspect" ? 8_000 : 65_000;
+    const deadline = performance.now() + budget;
+    return new Promise((resolve, reject) => {
+        const socket = createConnection(settingsSocketPath(dataDir));
+        let buffer = "", bytes = 0, settled = false;
+        let timer;
+        const finish = (err, result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            socket.destroy();
+            if (err)
+                reject(err);
+            else
+                resolve(result);
+        };
+        const check = () => {
+            const remaining = deadline - performance.now();
+            if (remaining > 0)
+                timer = setTimeout(check, Math.ceil(remaining));
+            else
+                finish(new Error("Confirmation is still running; inspect its pending state."));
+        };
+        timer = setTimeout(check, budget);
+        socket.once("connect", () => {
+            if (settled || performance.now() >= deadline) {
+                finish(new Error("Confirmation connection expired."));
+                return;
+            }
+            socket.write(JSON.stringify(request) + "\n");
+        });
+        socket.on("error", () => finish(new Error("Local Settings confirmation unavailable. Is the fleet or setup host running?")));
+        socket.on("close", () => finish(new Error("Settings confirmation control disconnected.")));
+        socket.on("data", (data) => {
+            bytes += data.length;
+            if (bytes > 32 * 1024) {
+                finish(new Error("Invalid confirmation response."));
+                return;
+            }
+            buffer += data.toString("utf8");
+            const end = buffer.indexOf("\n");
+            if (end < 0 || settled)
+                return;
+            try {
+                const value = JSON.parse(buffer.slice(0, end));
+                if (performance.now() >= deadline || value.status !== "ok" || !value.pending_change)
+                    throw new Error("Confirmation rejected or expired.");
+                finish(null, value);
+            }
+            catch (err) {
+                finish(err);
+            }
+        });
+    });
+}
+//# sourceMappingURL=settings-control.js.map

package/dist/settings-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-control.js","sourceRoot":"","sources":["../src/settings-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACxG,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA4B,MAAM,UAAU,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG/D,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AAE1G,SAAS,GAAG,KAAa,OAAO,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;AACvE,KAAK,UAAU,SAAS,CAAC,OAAe,IAAmB,MAAM,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC;AACxH,KAAK,UAAU,eAAe,CAAC,OAAe,IAAmB,MAAM,wBAAwB,CAAC,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC;AAEjK,wFAAwF;AACxF,MAAM,OAAO,qBAAqB;IAOH;IAAkC;IAAmD;IAN1G,MAAM,GAAkB,IAAI,CAAC;IAC7B,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,MAAM,GAAG,KAAK,CAAC;IACf,KAAK,GAAkB,IAAI,CAAC;IAC5B,OAAO,GAAyB,IAAI,CAAC;IAC5B,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9D,YAA6B,OAAe,EAAmB,KAAgC,EAAmB,OAAsB;QAA3G,YAAO,GAAP,OAAO,CAAQ;QAAmB,UAAK,GAAL,KAAK,CAA2B;QAAmB,YAAO,GAAP,OAAO,CAAe;IAAG,CAAC;IACpI,OAAO,CAAC,EAAU;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU;gBACpF,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5G,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC1C,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,EAAC,GAAG,EAAC,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;oBAC3J,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC9G,CAAC,CAAC,CAAC,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,GAAG,CAAC;QAAC,CAAC;gBACxC,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAClC,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAgB;QACjC,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,IAAI,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACxG,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,oBAAoB;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC5H,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,EAAE,CAAC;QACtI,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACrG,IAAI,CAAC;YACH,OAAO,EAAE,CAAC;YAAC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YACzH,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC,CAAC,+DAA+D;QACpG,CAAC;gBAAS,CAAC;YAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAChC,OAAO,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,EAAE,CAAC;QAC9I,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;YACjI,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC,CAAC,yDAAyD;QAC1F,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE;YAClC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACvB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACnC,IAAI,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBACjD,uEAAuE;oBACvE,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,EAAE,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBACpD,CAAC;;oBAAM,GAAG,EAAE,CAAC;YACf,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,4EAA4E;QAC5E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC;QACtB,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,OAAO,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAClD,CAAC;IAEO,MAAM,CAAC,MAAc;QAC3B,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;QAC5C,IAAI,KAAgD,CAAC;QACrD,MAAM,KAAK,GAAG,CAAC,KAAc,EAAQ,EAAE;YACrC,IAAI,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,SAAS;oBAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;YAC1E,MAAM,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,CAAC;QAC7B,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,QAAgB,EAAQ,EAAE;YAC1C,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,KAAK,GAAG,GAAS,EAAE;gBACvB,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;gBAC/C,IAAI,SAAS,GAAG,CAAC;oBAAE,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;;oBAC9D,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC,CAAC;YACF,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC/C,QAAQ,CAAC,aAAa,CAAC,CAAC;QACxB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACjC,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS;gBAAE,OAAO;YACvD,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,aAAa,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACrE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;YACrB,IAAI,KAAK,GAAG,WAAW,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtD,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO;YACnC,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC3E,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;oBAChJ,MAAM,KAAK,GAAG,OAAkC,CAAC;oBACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;oBAC5B,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAE,KAAK,CAAC,MAAqC,EAAE,EAAE,CAAC;oBACtG,IAAI,CAAC,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;oBACrF,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;oBACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBACnC,IAAI,CAAC,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;oBAC7D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;wBAAE,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;yBAC9F,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;2BACpF,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;wBACjF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;wBAC9H,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;oBAClD,CAAC;;wBAAM,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBACvF,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,2DAA2D,EAAE,CAAC,CAAC;gBACnG,CAAC;wBAAS,CAAC;oBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAAC,IAAI,CAAC;wBAAC,MAAM,CAAC,GAAG,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAAC,CAAC;gBAAC,CAAC;YACtF,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAC/C,IAAI,KAAgD,CAAC;YACrD,IAAI,CAAC;gBACH,IAAI,MAAM;oBAAE,MAAM,OAAO,CAAC,IAAI,CAAC;wBAC7B,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC3D,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;qBACrE,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAClC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC7E,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,EAAE;gBAAE,MAAM,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACxI,CAAC;IACH,CAAC;CACF;AAID,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAe,EAAE,OAElE,EAAE,MAAyB,OAAO,CAAC,GAAG;IACrC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,qBAAqB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAClH,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;QAC5C,IAAI,KAAoC,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,GAAiB,EAAE,MAAY,EAAQ,EAAE;YACvD,IAAI,OAAO;gBAAE,OAAO;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3E,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC/C,IAAI,SAAS,GAAG,CAAC;gBAAE,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;;gBAC9D,MAAM,CAAC,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC,CAAC;QACtF,CAAC,CAAC;QACF,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,IAAI,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAChH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC,CAAC,CAAC;QAC5H,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACjC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;YAAC,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC7G,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,GAAG,GAAG,CAAC,IAAI,OAAO;gBAAE,OAAO;YACjE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC/C,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBAC1I,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAY,CAAC,CAAC;YAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/settings-effect.d.ts

@@ -0,0 +1,24 @@
+import type { FleetConfig } from "./types.js";
+import { type SettingsChangeDiff } from "./settings-change.js";
+export interface SettingsSecretProof {
+    readonly key: string;
+    readonly secret: string;
+    readonly previous?: string;
+    readonly remainingMs: number;
+    readonly binding?: {
+        group_id: string;
+        general_channel_id?: string | null;
+    };
+    discard(): void;
+}
+export interface SettingsEffectContext {
+    config: FleetConfig | null;
+    classic: Record<string, any>;
+    proof?(kind: "provider" | "secret" | "binding", target: string, verification: string, binding?: string, key?: string): SettingsSecretProof | null;
+}
+export declare function isSettingsMutation(method: string, path: string): boolean;
+/** A pure projection. Original handler validation still runs against the admitted baseline. */
+export declare function prepareSettingsEffect(method: string, path: string, body: unknown, context: SettingsEffectContext, binding?: string, key?: string): {
+    diff: SettingsChangeDiff | null;
+    proof?: SettingsSecretProof;
+};

package/dist/settings-effect.js

@@ -0,0 +1,169 @@
+import { normalizeSettingsInstancePatch } from "./settings-instance-patch.js";
+import { basename } from "node:path";
+import { draftQuickstart, planQuickstart, validateWizardInput, wizardChannels } from "./quickstart-api.js";
+import { settingsChangeDiff } from "./settings-change.js";
+import { SettingsConfirmationError } from "./settings-confirmation.js";
+import { validateFleetConfig, validateClassicBotConfig } from "./config-validator.js";
+export function isSettingsMutation(method, path) {
+    if (!["POST", "PUT", "PATCH", "DELETE"].includes(method))
+        return false;
+    return /^\/api\/settings\/(?:fleet\/(?:defaults|channels|web|instances(?:\/[^/]+)?)|classic\/(?:defaults|channels\/[^/]+)|(?:provider-secrets|secrets)\/[^/]+\/apply|connections\/[^/]+\/(?:secret|binding)\/apply|quickstart\/commit)$/.test(path)
+        || path === "/ui/config" || path === "/ui/instances" || /^\/ui\/instances\/[^/]+\/delete$/.test(path);
+}
+function record(body) {
+    if (!body || typeof body !== "object" || Array.isArray(body))
+        throw new SettingsConfirmationError(400, "invalid_settings_body");
+    return body;
+}
+/** A pure projection. Original handler validation still runs against the admitted baseline. */
+export function prepareSettingsEffect(method, path, body, context, binding, key) {
+    const cfg = context.config, before = { fleet: structuredClone(cfg), classic: structuredClone(context.classic) }, after = structuredClone(before);
+    const operation = `${method} ${path}`;
+    const secret = path.match(/^\/api\/settings\/(?:provider-secrets|secrets)\/([^/]+)\/apply$/);
+    const connection = path.match(/^\/api\/settings\/connections\/([^/]+)\/(secret|binding)\/apply$/);
+    if (secret || connection) {
+        const payload = record(body), kind = secret ? "provider" : connection[2], target = decodeURIComponent((secret ?? connection)[1]);
+        const proof = context.proof?.(kind, target, String(payload.verification_id ?? ""), binding, key);
+        if (!proof || !(proof.remainingMs > 0))
+            throw new SettingsConfirmationError(422, "verification_expired");
+        if (kind === "binding") {
+            const channels = cfg?.channels ?? (cfg?.channel ? [cfg.channel] : []), current = channels.find((item, i) => (item.id ?? item.type ?? `channel-${i}`) === target);
+            if (!current || !proof.binding)
+                throw new SettingsConfirmationError(422, "invalid_binding_proof");
+            const candidate = { ...current, group_id: proof.binding.group_id, options: { ...current.options } };
+            if (proof.binding.general_channel_id === null)
+                delete candidate.options.general_channel_id;
+            else if (proof.binding.general_channel_id !== undefined)
+                candidate.options.general_channel_id = proof.binding.general_channel_id;
+            return { diff: settingsChangeDiff({ channels: [current] }, { channels: [candidate] }, { operation, force: true }), proof };
+        }
+        const diff = settingsChangeDiff(null, null, { operation, secret: { key: proof.key, before: proof.previous, after: proof.secret }, force: true });
+        return { diff: { ...diff, affectedConnections: connection ? [target] : [] }, proof };
+    }
+    let force = false;
+    if (path === "/api/settings/fleet/channels") {
+        if (!cfg || !Array.isArray(body))
+            throw new SettingsConfirmationError(400, "invalid_channels");
+        after.fleet.channels = body.map((item) => {
+            const ch = structuredClone(record(item));
+            if (typeof ch.group_id === "number") {
+                if (!Number.isSafeInteger(ch.group_id))
+                    throw new SettingsConfirmationError(400, "invalid_channel_id");
+                ch.group_id = String(ch.group_id);
+            }
+            if (typeof ch.options?.general_channel_id === "number") {
+                if (!Number.isSafeInteger(ch.options.general_channel_id))
+                    throw new SettingsConfirmationError(400, "invalid_channel_id");
+                ch.options.general_channel_id = String(ch.options.general_channel_id);
+            }
+            return ch;
+        });
+        delete after.fleet.channel;
+        before.fleet.channels = cfg.channels ?? (cfg.channel ? [cfg.channel] : []);
+        delete before.fleet.channel;
+    }
+    else if (path === "/api/settings/fleet/defaults") {
+        if (!cfg)
+            throw new SettingsConfirmationError(503, "fleet_unavailable");
+        after.fleet.defaults = { ...cfg.defaults, ...record(body) };
+        if (after.fleet.defaults.locale === null || after.fleet.defaults.locale === "")
+            delete after.fleet.defaults.locale;
+    }
+    else if (path === "/api/settings/fleet/web") {
+        if (!cfg)
+            throw new SettingsConfirmationError(503, "fleet_unavailable");
+        const patch = record(body);
+        after.fleet.web = { ...cfg.web, ...patch };
+        if (patch.public_link)
+            after.fleet.web.public_link = { ...cfg.web?.public_link, ...patch.public_link };
+    }
+    else if (path === "/api/settings/classic/defaults") {
+        after.classic.defaults = { ...(before.classic.defaults ?? {}), ...record(body) };
+        for (const key of ["tool_progress", "reply_completion_guard"])
+            if (after.classic.defaults[key] === null)
+                delete after.classic.defaults[key];
+    }
+    else if (path.startsWith("/api/settings/classic/channels/")) {
+        const key = decodeURIComponent(path.split("/").at(-1));
+        after.classic.channels ??= {};
+        if (!Object.hasOwn(after.classic.channels, key) || !after.classic.channels[key] || typeof after.classic.channels[key] !== "object" || Array.isArray(after.classic.channels[key]))
+            throw new SettingsConfirmationError(404, "classic_channel_not_found");
+        after.classic.channels = { ...after.classic.channels, [key]: { ...after.classic.channels[key], ...record(body) } };
+        for (const key2 of ["model", "auto_pause_after", "tool_progress", "reply_completion_guard"])
+            if (after.classic.channels[key][key2] === null)
+                delete after.classic.channels[key][key2];
+    }
+    else if (path === "/ui/config") {
+        if (!cfg)
+            throw new SettingsConfirmationError(503, "fleet_unavailable");
+        const patch = record(body);
+        if (patch.channel && cfg.channel) {
+            if (patch.channel.group_id != null)
+                after.fleet.channel.group_id = patch.channel.group_id;
+            if (patch.channel.access)
+                after.fleet.channel.access = patch.channel.access;
+        }
+        if (patch.defaults) {
+            if (patch.defaults.backend)
+                after.fleet.defaults.backend = patch.defaults.backend;
+            if (patch.defaults.model)
+                after.fleet.defaults.model = patch.defaults.model;
+        }
+        if (patch.project_roots)
+            after.fleet.project_roots = patch.project_roots;
+    }
+    else if (path === "/api/settings/quickstart/commit") {
+        const patch = record(body);
+        if (!cfg || typeof patch.token !== "string" || typeof patch.token_env !== "string")
+            throw new SettingsConfirmationError(400, "invalid_quickstart");
+        if (validateWizardInput(patch))
+            throw new SettingsConfirmationError(400, "invalid_quickstart");
+        const channels = wizardChannels(cfg), plan = planQuickstart(patch, { channels, has_fleet: !!Object.keys(cfg.instances).length, backends: [] });
+        const draft = draftQuickstart(cfg, patch, plan);
+        const normalizedBefore = structuredClone(cfg);
+        normalizedBefore.channels = cfg.channels ?? (cfg.channel ? [cfg.channel] : []);
+        delete normalizedBefore.channel;
+        return { diff: settingsChangeDiff(normalizedBefore, draft, { operation: `${operation} instance ${patch.instance_name}`, force: true, secret: { key: patch.token_env, after: patch.token } }) };
+    }
+    else if (path === "/ui/instances") {
+        const payload = record(body), channels = cfg?.channels ?? (cfg?.channel ? [cfg.channel] : []);
+        const name = payload.topic_name ?? (typeof payload.directory === "string" ? basename(payload.directory) : null);
+        if (typeof name !== "string" || !name)
+            throw new SettingsConfirmationError(400, "invalid_instance_name");
+        const draft = { topic_name: name, directory: payload.directory,
+            channels: channels.slice(0, 1).map((item, index) => ({ id: item.id ?? item.type ?? `channel-${index}`, type: item.type, group_id: item.group_id })),
+            ...Object.fromEntries(Object.entries(payload).filter(([key]) => !["topic_name", "directory"].includes(key))) };
+        // Target allocation is deferred; the approved request and current owner binding stay pinned.
+        return { diff: settingsChangeDiff({}, { new_instance: draft }, { operation, force: true }) };
+    }
+    else {
+        if (!cfg)
+            throw new SettingsConfirmationError(503, "fleet_unavailable");
+        const payload = method === "DELETE" ? {} : record(body), pieces = path.split("/");
+        const name = path === "/ui/instances" || path === "/api/settings/fleet/instances" ? typeof payload.name === "string" ? payload.name.trim() : payload.name : decodeURIComponent(path.startsWith("/ui/") ? pieces[3] : pieces.at(-1));
+        if (typeof name !== "string" || !name)
+            throw new SettingsConfirmationError(400, "invalid_instance_name");
+        const exists = Object.hasOwn(cfg.instances, name);
+        if (method === "DELETE" || path.endsWith("/delete")) {
+            delete after.fleet.instances[name];
+            force = true;
+        }
+        else {
+            const patch = { ...payload };
+            delete patch.name;
+            if (path === "/ui/instances") {
+                after.fleet.instances = { ...after.fleet.instances, [name]: { ...(exists ? cfg.instances[name] : {}), working_directory: payload.working_directory, backend: payload.backend ?? cfg.defaults?.backend, model: payload.model } };
+            }
+            else {
+                after.fleet.instances = { ...after.fleet.instances, [name]: normalizeSettingsInstancePatch(exists ? cfg.instances[name] : {}, patch) };
+            }
+            force = !exists;
+        }
+    }
+    if (after.fleet && !validateFleetConfig(after.fleet).valid && validateFleetConfig(before.fleet).valid)
+        throw new SettingsConfirmationError(400, "invalid_settings_effect");
+    if (!validateClassicBotConfig(after.classic).valid && validateClassicBotConfig(before.classic).valid)
+        throw new SettingsConfirmationError(400, "invalid_classic_effect");
+    return { diff: settingsChangeDiff(before, after, { operation, force }) };
+}
+//# sourceMappingURL=settings-effect.js.map

package/dist/settings-effect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-effect.js","sourceRoot":"","sources":["../src/settings-effect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,cAAc,EAAwB,MAAM,qBAAqB,CAAC;AAEjI,OAAO,EAAE,kBAAkB,EAA2B,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAWtF,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAY;IAC7D,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,OAAO,iOAAiO,CAAC,IAAI,CAAC,IAAI,CAAC;WAC9O,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,eAAe,IAAI,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1G,CAAC;AACD,SAAS,MAAM,CAAC,IAAa;IAC3B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;IAChI,OAAO,IAA2B,CAAC;AACrC,CAAC;AACD,+FAA+F;AAC/F,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,IAAY,EAAE,IAAa,EAAE,OAA8B,EAAE,OAAgB,EAAE,GAAY;IAG/I,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,GAAQ,EAAE,KAAK,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACtJ,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC7F,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;IAClG,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAW,CAAC,CAAC,CAAyB,EAAE,MAAM,GAAG,kBAAkB,CAAC,CAAC,MAAM,IAAI,UAAU,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3J,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACjG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACzG,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC;YACjK,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;YAClG,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACpG,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI;gBAAE,OAAO,SAAS,CAAC,OAAO,CAAC,kBAAkB,CAAC;iBACtF,IAAI,KAAK,CAAC,OAAO,CAAC,kBAAkB,KAAK,SAAS;gBAAE,SAAS,CAAC,OAAO,CAAC,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,CAAC;YACjI,OAAO,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;QAC7H,CAAC;QACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAE,CAAC;QAClJ,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,IAAI,KAAK,8BAA8B,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC/F,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,EAAE;YAChD,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,IAAI,OAAO,EAAE,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;gBAAC,EAAE,CAAC,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YACnL,IAAI,OAAO,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,QAAQ,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;oBAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;gBAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAAC,CAAC;YAC5P,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;IAC1G,CAAC;SAAM,IAAI,IAAI,KAAK,8BAA8B,EAAE,CAAC;QACnD,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxE,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;IACrH,CAAC;SAAM,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;QAC9C,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,WAAW;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACzG,CAAC;SAAM,IAAI,IAAI,KAAK,gCAAgC,EAAE,CAAC;QACrD,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACjF,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,wBAAwB,CAAC;YAAE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC9I,CAAC;SAAM,IAAI,IAAI,CAAC,UAAU,CAAC,iCAAiC,CAAC,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,EAAE,CAAC;QACvF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9K,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;QACxE,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACnH,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,wBAAwB,CAAC;YAAE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACxL,CAAC;SAAM,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI;gBAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM;gBAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC9E,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO;gBAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAClF,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK;gBAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9E,CAAC;QACD,IAAI,KAAK,CAAC,aAAa;YAAE,KAAK,CAAC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAC3E,CAAC;SAAM,IAAI,IAAI,KAAK,iCAAiC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC/K,IAAI,mBAAmB,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAC/F,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,cAAc,CAAC,KAAwB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAClK,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,EAAE,KAAwB,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,gBAAgB,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAAC,gBAAgB,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,gBAAgB,CAAC,OAAO,CAAC;QAC/J,OAAO,EAAE,IAAI,EAAE,kBAAkB,CAAC,gBAAgB,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,SAAS,aAAa,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IACjM,CAAC;SAAM,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9F,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChH,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACzG,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5D,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,WAAW,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACnJ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACjH,6FAA6F;QAC7F,OAAO,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAE/F,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,+BAA+B,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QACrO,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QACzG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;aACrG,CAAC;YACJ,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC,IAAI,CAAC;YAChD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC7B,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;YAClO,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;YACzI,CAAC;YACD,KAAK,GAAG,CAAC,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK;QAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC;IAC3K,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK;QAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IACzK,OAAO,EAAE,IAAI,EAAE,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC"}

package/dist/settings-http-confirmation.d.ts

@@ -0,0 +1,29 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import { type SettingsEffectContext } from "./settings-effect.js";
+import { SettingsConfirmationStore, type SettingsPendingView } from "./settings-confirmation.js";
+import { SettingsExecution } from "./settings-transaction.js";
+export interface SettingsPrincipal {
+    id: string;
+    label: string;
+    source: SettingsPendingView["source"];
+    current(): boolean;
+}
+export interface SettingsBaseline extends SettingsEffectContext {
+    fingerprint: string;
+}
+export type SettingsRequestHandler = (req: IncomingMessage, res: ServerResponse, url: URL) => boolean;
+/** The same server-side gate serves a running fleet and the no-fleet SetupHost. */
+export declare class SettingsHttpConfirmation {
+    readonly store: SettingsConfirmationStore;
+    private readonly options;
+    private passed;
+    constructor(store: SettingsConfirmationStore, options: {
+        principal(req: IncomingMessage): SettingsPrincipal | null;
+        baseline(): Promise<SettingsBaseline>;
+        snapshot(): unknown;
+        job?(id: string): Promise<boolean>;
+        applied?(path: string, result: unknown, execution: SettingsExecution): void | Promise<void>;
+    });
+    handle(req: IncomingMessage, res: ServerResponse, url: URL, next: SettingsRequestHandler): boolean;
+    private prepare;
+}