@songsid/agend 2.1.12-beta.9 → 2.2.0-alpha.1

package/dist/settings-http-confirmation.js

@@ -0,0 +1,123 @@
+import { ServerResponse as Response } from "node:http";
+import { readBoundedWebBody } from "./web-body.js";
+import { requestSessionBinding } from "./connection-secrets.js";
+import { cacheSettingsBody, createSettingsReplay, settingsRequestExecution } from "./settings-request-capability.js";
+import { prepareSettingsEffect, isSettingsMutation } from "./settings-effect.js";
+import { SettingsConfirmationError } from "./settings-confirmation.js";
+import { SettingsExecution, settingsFingerprint } from "./settings-transaction.js";
+function json(res, status, body) {
+    if (res.destroyed || res.headersSent)
+        return;
+    res.writeHead(status, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+    res.end(JSON.stringify(body));
+}
+/** The same server-side gate serves a running fleet and the no-fleet SetupHost. */
+export class SettingsHttpConfirmation {
+    store;
+    options;
+    passed = new WeakSet();
+    constructor(store, options) {
+        this.store = store;
+        this.options = options;
+    }
+    handle(req, res, url, next) {
+        if (settingsRequestExecution(req) || this.passed.has(req))
+            return false;
+        const path = url.pathname, method = req.method ?? "GET";
+        const pending = path.match(/^\/api\/settings\/pending(?:\/([0-9a-f]{32}))?$/);
+        if (pending && (method === "GET" || method === "DELETE" && pending[1])) {
+            const principal = this.options.principal(req);
+            if (!principal?.current()) {
+                json(res, 401, { error: "session_required" });
+                return true;
+            }
+            const result = pending[1] ? method === "DELETE" ? this.store.withdraw(pending[1], principal.id) : this.store.get(pending[1], principal.id) : this.store.list(principal.id);
+            json(res, result === null ? 404 : 200, result === null ? { error: "not_found" } : result);
+            return true;
+        }
+        if (!isSettingsMutation(method, path))
+            return false;
+        void this.prepare(req, res, url, next).catch(err => json(res, err instanceof SettingsConfirmationError ? err.status : 409, { error: err instanceof SettingsConfirmationError ? err.code : "settings_confirmation_unavailable" }));
+        return true;
+    }
+    async prepare(req, res, url, next) {
+        const method = req.method ?? "POST", raw = method === "DELETE" ? Buffer.from("{}") : await readBoundedWebBody(req, 512 * 1024);
+        if (res.destroyed || req.aborted)
+            return;
+        let body;
+        try {
+            body = JSON.parse(raw.toString("utf8") || "{}");
+        }
+        catch {
+            throw new SettingsConfirmationError(400, "invalid_json");
+        }
+        const principal = this.options.principal(req);
+        const key = typeof req.headers["idempotency-key"] === "string" ? req.headers["idempotency-key"]
+            : body && typeof body === "object" && typeof body.idempotency_key === "string" ? body.idempotency_key : undefined;
+        const requestFingerprint = settingsFingerprint([method, url.pathname, body]);
+        if (principal?.current() && key) {
+            const prior = this.store.findRequest(principal.id, key, requestFingerprint);
+            if (prior) {
+                json(res, 202, { ok: true, result: "pending_confirmation", pending_change: prior });
+                return;
+            }
+        }
+        const baseline = await this.options.baseline();
+        if (res.destroyed || req.aborted)
+            return;
+        const classifiedSnapshot = settingsFingerprint(this.options.snapshot());
+        const effect = prepareSettingsEffect(method, url.pathname, body, baseline, requestSessionBinding(req), key);
+        if (!effect.diff) {
+            const execution = new SettingsExecution({ current: () => principal ? principal.current() : true,
+                snapshot: () => this.options.snapshot(), expectedFingerprint: classifiedSnapshot });
+            res.once?.("finish", () => execution.close());
+            res.once?.("close", () => execution.cancel());
+            this.passed.add(req);
+            cacheSettingsBody(req, raw, execution, requestSessionBinding(req));
+            next(req, res, url);
+            return;
+        }
+        if (!principal?.current())
+            throw new SettingsConfirmationError(401, "session_required");
+        const binding = requestSessionBinding(req), snapshot = settingsFingerprint(this.options.snapshot());
+        const payload = { method, url: url.pathname + url.search, key, body: Buffer.from(raw), binding };
+        const result = this.store.propose({ session: principal.id, key: key ?? `operation:${requestFingerprint}`,
+            requestFingerprint, fingerprint: effect.diff.fingerprint, section: effect.diff.section, requestedBy: principal.label,
+            source: principal.source, summary: effect.diff.summary, affectedConnections: effect.diff.affectedConnections,
+            bytes: raw.length, remainingMs: effect.proof?.remainingMs,
+            current: () => principal.current(), snapshot: () => this.options.snapshot(),
+            unchanged: async () => (await this.options.baseline()).fingerprint === baseline.fingerprint && settingsFingerprint(this.options.snapshot()) === snapshot,
+            apply: async (_current, execution) => {
+                // Recheck after replay/body/queue awaits in the real handler and actual job.
+                execution.assert();
+                const replay = createSettingsReplay(payload, execution);
+                const response = await new Promise((yes, no) => {
+                    const collector = new Response(replay);
+                    collector.end = ((chunk) => {
+                        try {
+                            yes({ status: collector.statusCode, body: JSON.parse(String(chunk ?? "{}")) });
+                        }
+                        catch {
+                            no(new Error("invalid_apply_response"));
+                        }
+                        return collector;
+                    });
+                    try {
+                        if (!next(replay, collector, new URL(payload.url, "http://localhost")))
+                            no(new Error("unsupported_apply"));
+                    }
+                    catch (err) {
+                        no(err);
+                    }
+                });
+                if (response.status >= 400)
+                    throw new Error("apply_rejected");
+                if (response.body.job_id && (!this.options.job || !await this.options.job(response.body.job_id)))
+                    throw new Error("apply_job_failed");
+                await this.options.applied?.(url.pathname, response.body, execution);
+                return response.body;
+            }, discard: () => { payload.body.fill(0); effect.proof?.discard(); }, });
+        json(res, 202, { ok: true, result: "pending_confirmation", pending_change: result.view });
+    }
+}
+//# sourceMappingURL=settings-http-confirmation.js.map

package/dist/settings-http-confirmation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-http-confirmation.js","sourceRoot":"","sources":["../src/settings-http-confirmation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,IAAI,QAAQ,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACrH,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAA8B,MAAM,sBAAsB,CAAC;AAC7G,OAAO,EAA6B,yBAAyB,EAA4B,MAAM,4BAA4B,CAAC;AAC5H,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAOnF,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC9D,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW;QAAE,OAAO;IAC7C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5H,CAAC;AACD,mFAAmF;AACnF,MAAM,OAAO,wBAAwB;IAEd;IAAmD;IADhE,MAAM,GAAG,IAAI,OAAO,EAAU,CAAC;IACvC,YAAqB,KAAgC,EAAmB,OAMvE;QANoB,UAAK,GAAL,KAAK,CAA2B;QAAmB,YAAO,GAAP,OAAO,CAM9E;IAAG,CAAC;IACL,MAAM,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAQ,EAAE,IAA4B;QACtF,IAAI,wBAAwB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC9E,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC;YAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3K,IAAI,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QACzG,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EACvH,EAAE,KAAK,EAAE,GAAG,YAAY,yBAAyB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;QACzG,OAAO,IAAI,CAAC;IACd,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAQ,EAAE,IAA4B;QACrG,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE,GAAG,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;QAC/H,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO;QACzC,IAAI,IAAa,CAAC;QAAC,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAAC,CAAC;QAC/I,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC;YAC7F,CAAC,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAQ,IAAY,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAY,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QACtI,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7E,IAAI,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAC5E,IAAI,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;QAC7G,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO;YAAE,OAAO;QACzC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5G,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC7F,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACtF,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC;YAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7F,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO;QACxH,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,qBAAqB,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;QACjG,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,aAAa,kBAAkB,EAAE;YACtG,kBAAkB,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,KAAK;YACpH,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB;YAC5G,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW;YACzD,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YAC3E,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,QAAQ;YACxJ,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;gBACnC,6EAA6E;gBAC7E,SAAS,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAgC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE;oBAC5E,MAAM,SAAS,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACvC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,KAAU,EAAE,EAAE;wBAC9B,IAAI,CAAC;4BAAC,GAAG,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC;4BAAC,EAAE,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;wBAAC,CAAC;wBAC1I,OAAO,SAAS,CAAC;oBACnB,CAAC,CAAyB,CAAC;oBAC3B,IAAI,CAAC;wBAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;4BAAE,EAAE,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;oBAAC,CAAC;oBACnH,OAAO,GAAG,EAAE,CAAC;wBAAC,EAAE,CAAC,GAAG,CAAC,CAAC;oBAAC,CAAC;gBAC1B,CAAC,CAAC,CAAC;gBACH,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBAC9D,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACtI,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACrE,OAAO,QAAQ,CAAC,IAAI,CAAC;YACvB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GACrE,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5F,CAAC;CACF"}

package/dist/settings-instance-patch.d.ts

@@ -0,0 +1,4 @@
+export declare const NULLABLE_INSTANCE_OVERRIDES: Set<string>;
+export declare function removesInstanceOverride(key: string, value: unknown): boolean;
+/** Projection and persistence share exactly the same null/inheritance rules. */
+export declare function normalizeSettingsInstancePatch(base: Record<string, any>, patch: Record<string, any>): Record<string, any>;

package/dist/settings-instance-patch.js

@@ -0,0 +1,26 @@
+import { SettingsConfirmationError } from "./settings-confirmation.js";
+export const NULLABLE_INSTANCE_OVERRIDES = new Set(["model", "auto_pause_after", "hang_detector", "agent_mode", "tool_set", "tool_progress", "reply_completion_guard", "log_level", "lightweight", "model_failover", "display_name", "status_emojis", "cross_instance_visibility"]);
+export function removesInstanceOverride(key, value) {
+    return NULLABLE_INSTANCE_OVERRIDES.has(key) && (value === null || key === "model" && typeof value === "string" && value.trim() === "");
+}
+/** Projection and persistence share exactly the same null/inheritance rules. */
+export function normalizeSettingsInstancePatch(base, patch) {
+    for (const [key, value] of Object.entries(patch))
+        if (value === null && !NULLABLE_INSTANCE_OVERRIDES.has(key))
+            throw new SettingsConfirmationError(400, "unsupported_instance_null");
+    const next = { ...base, ...patch };
+    if (patch.hang_detector && typeof patch.hang_detector === "object" && !Array.isArray(patch.hang_detector)) {
+        const hang = { ...base.hang_detector, ...patch.hang_detector };
+        if (patch.hang_detector.timeout_minutes === null)
+            delete hang.timeout_minutes;
+        if (Object.keys(hang).length)
+            next.hang_detector = hang;
+        else
+            delete next.hang_detector;
+    }
+    for (const key of NULLABLE_INSTANCE_OVERRIDES)
+        if (removesInstanceOverride(key, patch[key]))
+            delete next[key];
+    return next;
+}
+//# sourceMappingURL=settings-instance-patch.js.map

package/dist/settings-instance-patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-instance-patch.js","sourceRoot":"","sources":["../src/settings-instance-patch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,wBAAwB,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,2BAA2B,CAAC,CAAC,CAAC;AACpR,MAAM,UAAU,uBAAuB,CAAC,GAAW,EAAE,KAAc;IACjE,OAAO,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,GAAG,KAAK,OAAO,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzI,CAAC;AACD,gFAAgF;AAChF,MAAM,UAAU,8BAA8B,CAAC,IAAyB,EAAE,KAA0B;IAClG,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;IACrL,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,aAAa,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QAC/D,IAAI,KAAK,CAAC,aAAa,CAAC,eAAe,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC;QAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;;YAAM,OAAO,IAAI,CAAC,aAAa,CAAC;IAC1F,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,2BAA2B;QAAE,IAAI,uBAAuB,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9G,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/settings-request-capability.d.ts

@@ -0,0 +1,16 @@
+import type { IncomingMessage } from "node:http";
+import type { SettingsExecution } from "./settings-transaction.js";
+export declare function isSettingsReplay(req: object): boolean;
+/** Only server code creates a replay; bearer cookies/tokens are never replayed. */
+export declare function createSettingsReplay(input: {
+    method: string;
+    url: string;
+    key?: string;
+    body: Buffer;
+    binding: string;
+}, execution: SettingsExecution): IncomingMessage;
+export declare function settingsRequestExecution(req: object): SettingsExecution | undefined;
+export declare function settingsRequestBinding(req: object): string | undefined;
+export declare function cacheSettingsBody(req: object, body: Buffer, execution?: SettingsExecution, binding?: string): void;
+export declare function cachedSettingsBody(req: object): Buffer | undefined;
+export declare function settingsWrite<T>(req: object, effect: () => T, final?: boolean): T;

package/dist/settings-request-capability.js

@@ -0,0 +1,32 @@
+import { Readable } from "node:stream";
+const continuations = new WeakMap();
+const bodies = new WeakMap();
+const replays = new WeakSet();
+export function isSettingsReplay(req) { return replays.has(req); }
+/** Only server code creates a replay; bearer cookies/tokens are never replayed. */
+export function createSettingsReplay(input, execution) {
+    const req = Readable.from([]);
+    req.method = input.method;
+    req.url = input.url;
+    replays.add(req);
+    req.headers = input.key ? { "idempotency-key": input.key } : {};
+    continuations.set(req, { body: Buffer.from(input.body), execution, binding: input.binding });
+    return req;
+}
+export function settingsRequestExecution(req) { return continuations.get(req)?.execution; }
+export function settingsRequestBinding(req) { return continuations.get(req)?.binding; }
+export function cacheSettingsBody(req, body, execution, binding = "") {
+    if (execution)
+        continuations.set(req, { body: Buffer.from(body), execution, binding });
+    else
+        bodies.set(req, Buffer.from(body));
+}
+export function cachedSettingsBody(req) {
+    const body = continuations.get(req)?.body ?? bodies.get(req);
+    return body ? Buffer.from(body) : undefined;
+}
+export function settingsWrite(req, effect, final = true) {
+    const execution = settingsRequestExecution(req);
+    return execution ? final ? execution.commit(effect) : execution.mutate(effect) : effect();
+}
+//# sourceMappingURL=settings-request-capability.js.map

package/dist/settings-request-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-request-capability.js","sourceRoot":"","sources":["../src/settings-request-capability.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAIvC,MAAM,aAAa,GAAG,IAAI,OAAO,EAAwB,CAAC;AAC1D,MAAM,MAAM,GAAG,IAAI,OAAO,EAAkB,CAAC;AAC7C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAU,CAAC;AACtC,MAAM,UAAU,gBAAgB,CAAC,GAAW,IAAa,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnF,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,KAAmF,EAAE,SAA4B;IACpJ,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAA+B,CAAC;IAC5D,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAAC,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7F,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,GAAW,IAAmC,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AAClI,MAAM,UAAU,sBAAsB,CAAC,GAAW,IAAwB,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AACnH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,IAAY,EAAE,SAA6B,EAAE,OAAO,GAAG,EAAE;IACtG,IAAI,SAAS;QAAE,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;;QAClF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5G,CAAC;AACD,MAAM,UAAU,aAAa,CAAI,GAAW,EAAE,MAAe,EAAE,KAAK,GAAG,IAAI;IACzE,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5F,CAAC"}

package/dist/settings-transaction.d.ts

@@ -0,0 +1,65 @@
+export declare const SETTINGS_OPERATION_MS = 60000;
+export declare class SettingsExecutionError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}
+export declare function settingsFingerprint(value: unknown): string;
+export declare function settingsRevision(path: string): number;
+/** All in-process writers, including ordinary edits, record before replacement. */
+export declare function noteSettingsWrite(path: string, before: unknown, after: unknown): void;
+export interface SettingsUndo {
+    path: readonly string[];
+    before: unknown;
+    written: unknown;
+    revision: number;
+}
+export declare function settingsUndo(path: string, before: unknown, written: unknown, fields: readonly (readonly string[])[]): SettingsUndo[];
+/** Preserve concurrent edits and ABA writes; never restore a whole stale document. */
+export declare function undoSettingsPaths(path: string, current: unknown, undo: readonly SettingsUndo[]): {
+    value: any;
+    conflicts: boolean;
+};
+export interface SettingsLease {
+    readonly owner: symbol;
+    readonly keys: readonly string[];
+    release(): void;
+}
+export declare function settingsFileResource(path: string): string;
+export declare function settingsLeaseBusy(key: string): boolean;
+export declare function assertSettingsLease(key: string, owner?: symbol): void;
+/** Atomic reservation of the complete resource set; helpers reuse the same owner. */
+export declare function trySettingsLease(keys: readonly string[], owner?: symbol): SettingsLease | null;
+/** A server-created continuation; never reconstructed from headers or payload. */
+export declare class SettingsExecution {
+    private readonly options;
+    readonly owner: symbol;
+    private expected;
+    private deadline;
+    private cancelled;
+    private committed;
+    private timer;
+    constructor(options: {
+        current(): boolean;
+        snapshot(): unknown;
+        now?: () => number;
+        expectedFingerprint?: string;
+        progress?(phase: "queued" | "running" | "cleanup", reason?: string): void;
+    });
+    private now;
+    current(): boolean;
+    assert(): void;
+    /** No await is permitted between the check, mutation, and expected-state update. */
+    mutate<T>(effect: () => T): T;
+    /** Place a self-revoking effect last; its receipt authorizes settlement only. */
+    commit<T>(effect: () => T): T;
+    complete(): void;
+    get deadlineAt(): number;
+    get remainingMs(): number;
+    get completed(): boolean;
+    cancel(): void;
+    close(): void;
+}
+/** Wait for physical cleanup, with a bounded admission deadline and no polling. */
+export declare function waitSettingsLease(keys: readonly string[], current: () => boolean, deadline: number, owner?: symbol): Promise<SettingsLease>;
+/** Apply only this writer's delta to the latest document, retaining unrelated fields. */
+export declare function mergeSettingsDelta(before: any, after: any, current: any): any;

package/dist/settings-transaction.js

@@ -0,0 +1,223 @@
+import { createHash } from "node:crypto";
+import { dirname, resolve, basename } from "node:path";
+import { realpathSync } from "node:fs";
+import { performance } from "node:perf_hooks";
+export const SETTINGS_OPERATION_MS = 60_000;
+export class SettingsExecutionError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+    }
+}
+export function settingsFingerprint(value) {
+    return createHash("sha256").update((JSON.stringify(value, (_key, item) => item && typeof item === "object" && !Array.isArray(item)
+        ? Object.fromEntries(Object.entries(item).sort(([a], [b]) => a.localeCompare(b))) : item) ?? "undefined")).digest("hex");
+}
+function canonicalPath(path) {
+    const full = resolve(path);
+    try {
+        return realpathSync(full);
+    }
+    catch { /* a future file still has one identity */ }
+    try {
+        return resolve(realpathSync(dirname(full)), basename(full));
+    }
+    catch {
+        return full;
+    }
+}
+// Process-wide: stop/start never revives an old lease or revision ticket.
+const journals = new Map();
+function journal(path) {
+    const key = canonicalPath(path);
+    let value = journals.get(key);
+    if (!value) {
+        value = { epoch: 0, next: 0, revisions: new Map() };
+        journals.set(key, value);
+    }
+    return value;
+}
+export function settingsRevision(path) { return journal(path).epoch; }
+function leaves(value, path = [], result = new Map()) {
+    if (value && typeof value === "object" && Object.keys(value).length) {
+        for (const [key, child] of Object.entries(value))
+            leaves(child, [...path, key], result);
+    }
+    else
+        result.set(JSON.stringify(path), value);
+    return result;
+}
+/** All in-process writers, including ordinary edits, record before replacement. */
+export function noteSettingsWrite(path, before, after) {
+    const state = journal(path), old = leaves(before), next = leaves(after);
+    state.epoch++;
+    for (const key of new Set([...old.keys(), ...next.keys()])) {
+        if (settingsFingerprint(old.get(key)) !== settingsFingerprint(next.get(key))) {
+            const parts = JSON.parse(key);
+            for (let depth = 0; depth <= parts.length; depth++)
+                state.revisions.set(JSON.stringify(parts.slice(0, depth)), ++state.next);
+        }
+    }
+}
+function getPath(value, path) {
+    for (const key of path)
+        value = value != null && Object.hasOwn(value, key) ? value[key] : undefined;
+    return value;
+}
+function setPath(value, path, next) {
+    for (const key of path.slice(0, -1)) {
+        if (!Object.hasOwn(value, key) || !value[key] || typeof value[key] !== "object")
+            Object.defineProperty(value, key, { value: {}, writable: true, enumerable: true, configurable: true });
+        value = value[key];
+    }
+    if (next === undefined)
+        delete value[path.at(-1)];
+    else
+        Object.defineProperty(value, path.at(-1), { value: structuredClone(next), writable: true, enumerable: true, configurable: true });
+}
+export function settingsUndo(path, before, written, fields) {
+    return fields.map(field => ({ path: [...field], before: structuredClone(getPath(before, field)),
+        written: structuredClone(getPath(written, field)), revision: journal(path).revisions.get(JSON.stringify(field)) ?? 0 }));
+}
+/** Preserve concurrent edits and ABA writes; never restore a whole stale document. */
+export function undoSettingsPaths(path, current, undo) {
+    const value = structuredClone(current), state = journal(path);
+    let conflicts = false;
+    for (const item of undo) {
+        if ((state.revisions.get(JSON.stringify(item.path)) ?? 0) !== item.revision
+            || settingsFingerprint(getPath(current, item.path)) !== settingsFingerprint(item.written)) {
+            conflicts = true;
+            continue;
+        }
+        setPath(value, item.path, item.before);
+    }
+    return { value, conflicts };
+}
+const leases = new Map();
+const leaseWaiters = new Set();
+export function settingsFileResource(path) { return `file:${canonicalPath(path)}`; }
+export function settingsLeaseBusy(key) { return leases.has(key); }
+export function assertSettingsLease(key, owner) {
+    const held = leases.get(key);
+    if (held && held.owner !== owner)
+        throw new SettingsExecutionError("settings_resource_busy");
+}
+/** Atomic reservation of the complete resource set; helpers reuse the same owner. */
+export function trySettingsLease(keys, owner = Symbol("settings-operation")) {
+    const ordered = [...new Set(keys)].sort();
+    if (ordered.some(key => leases.has(key) && leases.get(key)?.owner !== owner))
+        return null;
+    for (const key of ordered) {
+        const held = leases.get(key);
+        leases.set(key, { owner, count: (held?.count ?? 0) + 1 });
+    }
+    let released = false;
+    return { owner, keys: ordered, release() {
+            if (released)
+                return;
+            released = true;
+            for (const key of ordered) {
+                const held = leases.get(key);
+                if (held?.owner !== owner)
+                    continue;
+                if (--held.count === 0)
+                    leases.delete(key);
+            }
+            for (const notify of [...leaseWaiters])
+                notify();
+        } };
+}
+/** A server-created continuation; never reconstructed from headers or payload. */
+export class SettingsExecution {
+    options;
+    owner = Symbol("settings-execution");
+    expected;
+    deadline;
+    cancelled = false;
+    committed = false;
+    timer;
+    constructor(options) {
+        this.options = options;
+        this.expected = options.expectedFingerprint ?? settingsFingerprint(options.snapshot());
+        this.deadline = this.now() + SETTINGS_OPERATION_MS;
+        this.timer = setTimeout(() => { this.cancelled = true; options.progress?.("cleanup", "operation_timed_out"); }, SETTINGS_OPERATION_MS);
+        this.timer.unref?.();
+        options.progress?.("queued");
+    }
+    now() { return this.options.now?.() ?? performance.now(); }
+    current() {
+        return !this.cancelled && !this.committed && this.now() < this.deadline && this.options.current()
+            && this.expected === settingsFingerprint(this.options.snapshot());
+    }
+    assert() { if (!this.current())
+        throw new SettingsExecutionError("settings_execution_stale"); }
+    /** No await is permitted between the check, mutation, and expected-state update. */
+    mutate(effect) {
+        this.assert();
+        this.options.progress?.("running");
+        try {
+            return effect();
+        }
+        finally {
+            this.expected = settingsFingerprint(this.options.snapshot());
+        }
+    }
+    /** Place a self-revoking effect last; its receipt authorizes settlement only. */
+    commit(effect) {
+        const result = this.mutate(effect);
+        this.committed = true;
+        clearTimeout(this.timer);
+        return result;
+    }
+    complete() { this.commit(() => undefined); }
+    get deadlineAt() { return this.deadline; }
+    get remainingMs() { return Math.max(0, this.deadline - this.now()); }
+    get completed() { return this.committed; }
+    cancel() { this.cancelled = true; this.options.progress?.("cleanup", "execution_cancelled"); }
+    close() { clearTimeout(this.timer); }
+}
+/** Wait for physical cleanup, with a bounded admission deadline and no polling. */
+export function waitSettingsLease(keys, current, deadline, owner) {
+    return new Promise((resolve, reject) => {
+        let timer;
+        const check = () => {
+            if (!current() || performance.now() >= deadline) {
+                clearTimeout(timer);
+                leaseWaiters.delete(check);
+                reject(new SettingsExecutionError("settings_resource_unavailable"));
+                return;
+            }
+            const lease = trySettingsLease(keys, owner);
+            if (lease) {
+                clearTimeout(timer);
+                leaseWaiters.delete(check);
+                resolve(lease);
+            }
+        };
+        leaseWaiters.add(check);
+        timer = setTimeout(check, Math.max(1, Math.ceil(deadline - performance.now())));
+        check();
+    });
+}
+/** Apply only this writer's delta to the latest document, retaining unrelated fields. */
+export function mergeSettingsDelta(before, after, current) {
+    if (settingsFingerprint(before) === settingsFingerprint(after))
+        return structuredClone(current);
+    const object = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+    if (!object(before) || !object(after))
+        return structuredClone(after);
+    const next = object(current) ? structuredClone(current) : {};
+    for (const key of new Set([...Object.keys(before), ...Object.keys(after)])) {
+        const old = Object.hasOwn(before, key) ? before[key] : undefined, written = Object.hasOwn(after, key) ? after[key] : undefined;
+        if (settingsFingerprint(old) === settingsFingerprint(written))
+            continue;
+        if (!Object.hasOwn(after, key))
+            delete next[key];
+        else
+            Object.defineProperty(next, key, { value: mergeSettingsDelta(old, written, Object.hasOwn(next, key) ? next[key] : undefined),
+                writable: true, enumerable: true, configurable: true });
+    }
+    return next;
+}
+//# sourceMappingURL=settings-transaction.js.map

package/dist/settings-transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-transaction.js","sourceRoot":"","sources":["../src/settings-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC1B;IAArB,YAAqB,IAAY;QAAI,KAAK,CAAC,IAAI,CAAC,CAAC;QAA5B,SAAI,GAAJ,IAAI,CAAQ;IAAiB,CAAC;CACpD;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAChI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7H,CAAC;AACD,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;IACvF,IAAI,CAAC;QAAC,OAAO,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC7F,CAAC;AAED,0EAA0E;AAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;AAC5C,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAC9F,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,IAAY,IAAY,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACtF,SAAS,MAAM,CAAC,KAAc,EAAE,OAAiB,EAAE,EAAE,SAAS,IAAI,GAAG,EAAmB;IACtF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QACpE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1F,CAAC;;QAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAe,EAAE,KAAc;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;YAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE;gBAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/H,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAU,EAAE,IAAuB;IAClD,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,KAAK,GAAG,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAAC,OAAO,KAAK,CAAC;AACpH,CAAC;AACD,SAAS,OAAO,CAAC,KAAU,EAAE,IAAuB,EAAE,IAAa;IACjE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ;YAC7E,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QACzG,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;;QAC9C,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AAC1I,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAe,EAAE,OAAgB,EAAE,MAAsC;IAClH,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7F,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7H,CAAC;AACD,sFAAsF;AACtF,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAAgB,EAAE,IAA6B;IAC7F,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,SAAS,GAAG,KAAK,CAAC;IACrF,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ;eACtE,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5H,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4C,CAAC;AACnE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAc,CAAC;AAE3C,MAAM,UAAU,oBAAoB,CAAC,IAAY,IAAY,OAAO,QAAQ,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACpG,MAAM,UAAU,iBAAiB,CAAC,GAAW,IAAa,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnF,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,KAAc;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;QAAE,MAAM,IAAI,sBAAsB,CAAC,wBAAwB,CAAC,CAAC;AAC7H,CAAC;AACD,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,IAAuB,EAAE,KAAK,GAAG,MAAM,CAAC,oBAAoB,CAAC;IAC5F,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAAC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IACvH,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO;YACpC,IAAI,QAAQ;gBAAE,OAAO;YAAC,QAAQ,GAAG,IAAI,CAAC;YACtC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,IAAI,IAAI,EAAE,KAAK,KAAK,KAAK;oBAAE,SAAS;gBAClE,IAAI,EAAE,IAAI,CAAC,KAAK,KAAK,CAAC;oBAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC;YACD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,YAAY,CAAC;gBAAE,MAAM,EAAE,CAAC;QACnD,CAAC,EAAE,CAAC;AACN,CAAC;AAED,kFAAkF;AAClF,MAAM,OAAO,iBAAiB;IAOC;IANpB,KAAK,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACtC,QAAQ,CAAS;IACjB,QAAQ,CAAS;IACjB,SAAS,GAAG,KAAK,CAAC;IAClB,SAAS,GAAG,KAAK,CAAC;IAClB,KAAK,CAAgC;IAC7C,YAA6B,OAG5B;QAH4B,YAAO,GAAP,OAAO,CAGnC;QACC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,mBAAmB,IAAI,mBAAmB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,CAAC;QAC3I,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;QACvI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IACO,GAAG,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO;QACL,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;eAC5F,IAAI,CAAC,QAAQ,KAAK,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,KAAW,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;QAAE,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;IACrG,oFAAoF;IACpF,MAAM,CAAI,MAAe;QACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;IACpG,CAAC;IACD,iFAAiF;IACjF,MAAM,CAAI,MAAe;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IACrG,CAAC;IACD,QAAQ,KAAW,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,UAAU,KAAa,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClD,IAAI,WAAW,KAAa,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,MAAM,KAAW,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACpG,KAAK,KAAW,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;CAC5C;AAED,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,IAAuB,EAAE,OAAsB,EAAE,QAAgB,EAAE,KAAc;IACjH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,KAAoC,CAAC;QACzC,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,IAAI,CAAC,OAAO,EAAE,IAAI,WAAW,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAChD,YAAY,CAAC,KAAK,CAAC,CAAC;gBAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,MAAM,CAAC,IAAI,sBAAsB,CAAC,+BAA+B,CAAC,CAAC,CAAC;gBAAC,OAAO;YAC/H,CAAC;YACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5C,IAAI,KAAK,EAAE,CAAC;gBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QACjF,CAAC,CAAC;QACF,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAC,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAAC,KAAK,EAAE,CAAC;IACpH,CAAC,CAAC,CAAC;AACL,CAAC;AACD,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,MAAW,EAAE,KAAU,EAAE,OAAY;IACtE,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,mBAAmB,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,CAAC,CAAM,EAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/H,IAAI,mBAAmB,CAAC,GAAG,CAAC,KAAK,mBAAmB,CAAC,OAAO,CAAC;YAAE,SAAS;QACxE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;;YAC5C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC/H,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/setup-auth.d.ts

@@ -1,3 +1,4 @@
+import { constantTimeMatches, formatOneTimeCode, generateOneTimeCode, normalizeOneTimeCode } from "./auth/one-time-code.js";
 export declare const SETUP_CODE_LENGTH = 8;
 /**
  * Five, not three.
@@ -8,24 +9,10 @@ export declare const SETUP_CODE_LENGTH = 8;
  */
 export declare const MAX_SETUP_ATTEMPTS = 5;
 export declare const SETUP_COOKIE_NAME = "agend_setup";
-export declare function generateSetupCode(): string;
-/** `ABCD-EFGH` — a shape that survives being read aloud and retyped. */
-export declare function formatSetupCode(code: string): string;
-/**
- * What the person typed, as the code it was meant to be.
- *
- * Case and the dash are presentation. Rejecting `abcd efgh` would be rejecting
- * a correct answer, and the person retyping it has no idea which detail was
- * wrong — so they spend attempts on formatting.
- */
-export declare function normalizeSetupCode(input: string): string;
-/**
- * Fixed-length constant-time compare.
- *
- * Both sides are padded to the same length first: `timingSafeEqual` throws on a
- * mismatch, and returning early on one leaks the length through timing.
- */
-export declare function constantTimeMatches(provided: string, expected: string): boolean;
+export declare const generateSetupCode: typeof generateOneTimeCode;
+export declare const formatSetupCode: typeof formatOneTimeCode;
+export declare const normalizeSetupCode: typeof normalizeOneTimeCode;
+export { constantTimeMatches };
 /** The cookie carries a hash of the secret, never the secret itself. */
 export declare function setupCookieValue(secret: string): string;
 export declare function buildSetupCookie(secret: string, opts: {
@@ -62,6 +49,11 @@ export declare class SetupCredentials {
     readonly sid: string;
     readonly code: string;
     private secret;
+    private sessionOwner;
+    get sessionIdentity(): {
+        readonly id: string;
+    } | null;
+    isSessionCurrent(owner: object): boolean;
     private failures;
     constructor(opts?: {
         sid?: string;