@spinabot/brigade 0.1.2 → 1.0.1

package/dist/storage/boot.js

@@ -0,0 +1,588 @@
+// src/storage/boot.ts
+//
+// Process-boot entry for the storage layer. Every Brigade process calls
+// `bootRuntimeContext()` exactly once before any subsystem touches state;
+// after that, subsystems reach storage via `getRuntimeContext().store`.
+//
+// Idempotent by design: the CLI preAction hook, the gateway server, and any
+// future embedder can all call it — the first caller pays the resolution +
+// `store.init()` cost, everyone else gets the already-frozen context. A
+// failed boot clears the in-flight slot so a retry (e.g. convex backend came
+// back up) can succeed instead of replaying a cached rejection.
+import { primeConfigCache } from "./config-cache.js";
+import { primeSessionCache } from "./session-cache.js";
+import { createRuntimeContext, setRuntimeContext, tryGetRuntimeContext, } from "./runtime-context.js";
+let _inflight;
+/** Resolve mode, build + init the store, and install the process-wide
+ *  RuntimeContext. Safe to call from multiple places — only the first call
+ *  does work. Throws when the backing store cannot initialise (e.g. convex
+ *  mode with an unreachable deployment); callers that can operate without
+ *  storage (doctor, status) catch and continue.
+ *
+ *  Convex mode additionally hydrates the in-process config cache so the
+ *  codebase's synchronous `readConfigOrInit()` callers (per-turn loop, Pi
+ *  boot paths) are served without touching disk. Long-lived processes call
+ *  `enableConfigLiveRefresh()` afterwards to keep the cache hot. */
+export async function bootRuntimeContext() {
+    const existing = tryGetRuntimeContext();
+    if (existing)
+        return existing;
+    if (!_inflight) {
+        _inflight = (async () => {
+            const ctx = await createRuntimeContext();
+            if (ctx.mode === "convex") {
+                // Enforcement that ~/.brigade stays file-free (modulo the
+                // allowlist): preventive fs patches + a detective watcher.
+                // BRIGADE_STRICT_MODE=off|warn|enforce (default warn).
+                const { installStrictGuard } = await import("./strict-guard.js");
+                installStrictGuard(ctx.stateDir);
+                // Stale-bundle gate FIRST: a backend serving an older function
+                // push must fail boot with one clear operator action, not limp
+                // through hydration with per-domain "Could not find public
+                // function" spam + broken transcript flushes every turn.
+                await verifyConvexBundleVersion();
+                // Wrong-key tripwire: the first encrypted boot stores the key's
+                // fingerprint; every later boot verifies it. A mismatched
+                // BRIGADE_ENCRYPTION_KEY would otherwise corrupt-on-write and
+                // fail-on-read cryptically deep inside a turn.
+                await verifyEncryptionFingerprint(ctx.store);
+                const { value } = await ctx.store.config.read();
+                // First-boot parity with the disk path: an absent row reads as
+                // `{}`; the disk path's absent-file shape is `{ agents: {} }`.
+                const cfg = Object.keys(value).length === 0
+                    ? { agents: {} }
+                    : value;
+                primeConfigCache(cfg);
+                await Promise.all([
+                    hydrateSessionCaches(ctx.store, cfg),
+                    hydrateApprovalCaches(ctx.store, cfg),
+                    hydrateAccessCaches(ctx.store),
+                    hydrateCronCache(ctx.store),
+                    hydrateFactsCaches(ctx.store, cfg),
+                    hydrateAuthCaches(ctx.store, cfg),
+                    materialiseModelsCatalog(ctx.store),
+                    syncWorkspaceMirrors(ctx.store, cfg),
+                ]);
+                // The boot reconcile above is point-in-time; the live mirror
+                // watches each agent's workspace for persona edits mid-session
+                // and pushes them as they happen, so a `rm -rf ~/.brigade`
+                // no longer loses everything written since the last boot.
+                // Lifecycle stamps + manage_skill writes ride the same chain.
+                const { startWorkspaceLiveMirror } = await import("./workspace-live-mirror.js");
+                startWorkspaceLiveMirror(ctx.store, cfg);
+            }
+            setRuntimeContext(ctx);
+            return ctx;
+        })();
+        _inflight.catch(() => {
+            // Allow a later retry after a transient failure. Without this, the
+            // first rejection would be cached for the life of the process.
+            _inflight = undefined;
+        });
+    }
+    return _inflight;
+}
+/** Convex mode boot — fill the per-agent session caches so the codebase's
+ *  synchronous sessions.json helpers serve from memory. Every agent in the
+ *  config gets a slot (parallel queries — one wall-clock round-trip);
+ *  agents added at runtime start from the empty shape, which is correct
+ *  for a brand-new agent. */
+async function hydrateSessionCaches(store, cfg) {
+    const agents = cfg.agents;
+    const ids = new Set(["main"]);
+    if (agents && typeof agents === "object") {
+        for (const key of Object.keys(agents)) {
+            if (key === "defaults" || !key.trim())
+                continue;
+            ids.add(key.trim());
+        }
+    }
+    await Promise.all(Array.from(ids, async (agentId) => {
+        try {
+            const rows = await store.sessions.listEntries(agentId);
+            const sessions = {};
+            for (const { sessionKey, entry } of rows)
+                sessions[sessionKey] = entry;
+            primeSessionCache(agentId, {
+                version: 1,
+                sessions: sessions,
+            });
+        }
+        catch (err) {
+            // A failed hydration for one agent must not block boot; the
+            // empty-slot fallback in readSessionStore covers reads, and the
+            // error is loud enough for the operator to investigate.
+            console.error(`brigade: session hydration failed for agent ${agentId} — ${err.message}`);
+        }
+    }));
+}
+/** Convex mode boot — fill the exec-approvals module cache so the
+ *  synchronous bash gate (`decideApproval`) never touches disk or network
+ *  on the hot path. Same agent set as the session hydration. */
+async function hydrateApprovalCaches(store, cfg) {
+    const { primeApprovalsCache } = await import("../core/exec-approvals.js");
+    const agents = cfg.agents;
+    const ids = new Set(["main"]);
+    if (agents && typeof agents === "object") {
+        for (const key of Object.keys(agents)) {
+            if (key === "defaults" || !key.trim())
+                continue;
+            ids.add(key.trim());
+        }
+    }
+    await Promise.all(Array.from(ids, async (agentId) => {
+        try {
+            const contents = await store.execApprovals.list(agentId);
+            primeApprovalsCache(agentId, contents);
+        }
+        catch (err) {
+            console.error(`brigade: approvals hydration failed for agent ${agentId} — ${err.message}`);
+        }
+    }));
+}
+/** Convex mode boot — install channel access state (allow lists + pending
+ *  pairings) into the access-control module's cache. One query for the
+ *  whole owner; the module groups rows by (channel, account, kind). */
+async function hydrateAccessCaches(store) {
+    try {
+        const { primeAccessCacheFromRows } = await import("../agents/channels/access-control/store.js");
+        const rows = await store.channels.listAllAccessRows();
+        primeAccessCacheFromRows(rows);
+    }
+    catch (err) {
+        console.error(`brigade: channel-access hydration failed — ${err.message}`);
+    }
+}
+/** Convex mode boot — install the cron jobs into the cron cache so the
+ *  cron service's whole-file load/save choke points serve from memory. */
+async function hydrateCronCache(store) {
+    try {
+        const { primeCronCache } = await import("./cron-cache.js");
+        const jobs = await store.cron.listJobs();
+        primeCronCache(jobs);
+    }
+    catch (err) {
+        console.error(`brigade: cron hydration failed — ${err.message}`);
+    }
+}
+/** Convex mode boot — fill the per-workspace facts caches ("main" + every
+ *  config agent) so the synchronous FactStore surface serves from memory. */
+async function hydrateFactsCaches(store, cfg) {
+    const { primeFactsCache, canonicalWorkspaceId } = await import("./facts-cache.js");
+    const agents = cfg.agents;
+    const ids = new Set(["main"]);
+    if (agents && typeof agents === "object") {
+        for (const key of Object.keys(agents)) {
+            if (key === "defaults" || !key.trim())
+                continue;
+            // CANONICAL key — must match the runtime FactStore's path-derived key (which
+            // `resolveAgentWorkspaceDir` lowercases), or the runtime read misses this
+            // boot-primed cache and the agent reads empty memory forever.
+            ids.add(canonicalWorkspaceId(key));
+        }
+    }
+    await Promise.all(Array.from(ids, async (workspaceId) => {
+        try {
+            const records = await store.memory.listAllFactRecordsRaw(workspaceId);
+            primeFactsCache(workspaceId, records);
+        }
+        catch (err) {
+            console.error(`brigade: memory hydration failed for workspace ${workspaceId} — ${err.message}`);
+        }
+    }));
+}
+/** Convex mode boot — install every config agent's auth profiles (decrypted
+ *  by the adapter) + auth-state + profile-state blobs into the in-process
+ *  caches so the synchronous credential surface (Pi's AuthStorage boot,
+ *  the failover ladder, cooldown bookkeeping) works without disk. */
+async function hydrateAuthCaches(store, cfg) {
+    const [{ primeAuthCaches }, { primeProfileStateCache }] = await Promise.all([
+        import("../auth/profiles.js"),
+        import("../auth/profile-cooldown.js"),
+    ]);
+    const agents = cfg.agents;
+    const ids = new Set(["main"]);
+    if (agents && typeof agents === "object") {
+        for (const key of Object.keys(agents)) {
+            if (key === "defaults" || !key.trim())
+                continue;
+            ids.add(key.trim());
+        }
+    }
+    await Promise.all(Array.from(ids, async (agentId) => {
+        try {
+            const [profiles, authState, profileState] = await Promise.all([
+                store.auth.listProfiles(agentId),
+                store.auth.readAuthFileBlob(agentId, "auth-state"),
+                store.auth.readAuthFileBlob(agentId, "profile-state"),
+            ]);
+            const profilesFile = {
+                version: 1,
+                profiles: {},
+            };
+            for (const p of profiles) {
+                const { profileId, ...rest } = p;
+                if (typeof profileId === "string")
+                    profilesFile.profiles[profileId] = rest;
+            }
+            primeAuthCaches(agentId, profilesFile, (authState ?? {
+                version: 1,
+                order: {},
+                lastGood: {},
+                usageStats: {},
+            }));
+            primeProfileStateCache(agentId, (profileState ?? { version: 1, usageStats: {} }));
+        }
+        catch (err) {
+            console.error(`brigade: auth hydration failed for agent ${agentId} — ${err.message}`);
+        }
+    }));
+}
+/** Convex mode boot — materialise the models.json catalog (custom providers
+ *  — Ollama etc.) from its sealed blob into the OS cache dir, where
+ *  `resolveModelsPath` points in convex mode. Pi's ModelRegistry reads the
+ *  file with sync fs, so a real file is unavoidable — but it's a
+ *  regenerable mirror OUTSIDE ~/.brigade; the blob is the source of
+ *  truth. No blob (the common case — no custom providers) → no file, and
+ *  Pi treats the absent file as an empty catalog. */
+async function materialiseModelsCatalog(store) {
+    try {
+        const blob = await store.auth.readAuthFileBlob("main", "models");
+        if (!blob)
+            return;
+        const { mkdirSync, writeFileSync } = await import("node:fs");
+        const path = await import("node:path");
+        const { resolveModelsPath } = await import("../config/paths.js");
+        const target = resolveModelsPath("main");
+        mkdirSync(path.dirname(target), { recursive: true });
+        writeFileSync(target, JSON.stringify(blob, null, 2), "utf8");
+    }
+    catch (err) {
+        console.error(`brigade: models catalog materialisation failed — ${err.message}`);
+    }
+}
+/** Convex mode boot — two-way workspace mirror sync.
+ *
+ *  The workspace DIRECTORY stays fully local in both modes (operator
+ *  decision 2026-06-10): it is the agent's CWD, the git repo lives there,
+ *  and Pi tools read/write it natively. Convex's personaFiles +
+ *  workspaceState tables are the MIRROR:
+ *
+ *    • disk file present → push to Convex when content differs (the disk
+ *      copy is the working copy — disk wins while it exists)
+ *    • disk file missing but a Convex row exists → materialise to disk
+ *      (fresh machine, or the operator deleted ~/.brigade — customised
+ *      personas come back; only git history is lost, by design)
+ *
+ *  Runs BEFORE onboarding's bootstrapWorkspace can seed templates, so the
+ *  `wx` create-only flag preserves restored customisations over templates.
+ *  Agents that never had their own workspace (they share the top-level
+ *  one) have neither disk dirs nor Convex rows — both directions no-op. */
+async function syncWorkspaceMirrors(store, cfg) {
+    const fsp = await import("node:fs/promises");
+    const { existsSync } = await import("node:fs");
+    const path = await import("node:path");
+    const { resolveAgentWorkspaceDir } = await import("../config/paths.js");
+    const { readWorkspaceState, markBootstrapSeeded, markSetupCompleted } = await import("../workspace/state.js");
+    const PERSONA_NAMES = [
+        "AGENTS.md",
+        "SOUL.md",
+        "IDENTITY.md",
+        "USER.md",
+        "TOOLS.md",
+        "BOOTSTRAP.md",
+        "MEMORY.md",
+        "HEARTBEAT.md",
+    ];
+    const agents = cfg.agents;
+    const ids = new Set(["main"]);
+    if (agents && typeof agents === "object") {
+        for (const key of Object.keys(agents)) {
+            if (key === "defaults" || !key.trim())
+                continue;
+            ids.add(key.trim());
+        }
+    }
+    await Promise.all(Array.from(ids, async (agentId) => {
+        try {
+            const workspaceDir = resolveAgentWorkspaceDir(agentId);
+            const dirExists = existsSync(workspaceDir);
+            const rows = await store.workspace.listPersona(agentId);
+            const byName = new Map(rows.map((r) => [r.name, r]));
+            if (!dirExists && rows.length === 0)
+                return; // never materialised
+            // Read lifecycle state up-front: BOOTSTRAP.md is CONSUMED (deleted
+            // from disk) once first-run setup completes. Without this guard the
+            // restore-on-missing branch below would resurrect the first-run
+            // script on every boot — and the delete-propagation cleans the
+            // stale convex row so a fresh machine never restores it either.
+            const diskState = dirExists
+                ? await readWorkspaceState(workspaceDir)
+                : { version: 1 };
+            const convexState = await store.workspace.readState(agentId);
+            const bootstrapConsumed = Boolean(diskState.setupCompletedAt ||
+                convexState.setupCompletedAt);
+            for (const name of PERSONA_NAMES) {
+                const filePath = path.join(workspaceDir, name);
+                const onDisk = existsSync(filePath);
+                const inConvex = byName.get(name);
+                // Consumed BOOTSTRAP.md: never restore it, and reap the stale
+                // mirror row so restore-on-missing can't bring it back later.
+                if (name === "BOOTSTRAP.md" && bootstrapConsumed) {
+                    if (inConvex && !onDisk) {
+                        await store.workspace.deletePersona(agentId, name);
+                    }
+                    continue;
+                }
+                if (onDisk) {
+                    const content = await fsp.readFile(filePath, "utf8");
+                    if (!inConvex || inConvex.content !== content) {
+                        await store.workspace.writePersona(agentId, name, content);
+                    }
+                }
+                else if (inConvex) {
+                    await fsp.mkdir(workspaceDir, { recursive: true });
+                    await fsp.writeFile(filePath, inConvex.content, "utf8");
+                }
+            }
+            // Skills — same two-way rule, one row per workspace/skills/<name>/SKILL.md.
+            try {
+                const { skillContentFromParts } = await import("./convex/skill-store.js");
+                const skillsDir = path.join(workspaceDir, "skills");
+                // Scope to THIS agent's WORKSPACE skills only — without the
+                // scope every agent's skills would bleed into every workspace.
+                const convexSkills = await store.skills.list({
+                    workspaceDir,
+                    agentId,
+                    source: "workspace",
+                });
+                const convexByName = new Map(convexSkills.records
+                    .filter((r) => typeof r.name === "string")
+                    .map((r) => [r.name, r]));
+                const diskNames = new Set();
+                if (existsSync(skillsDir)) {
+                    for (const entry of await fsp.readdir(skillsDir, { withFileTypes: true })) {
+                        if (!entry.isDirectory())
+                            continue;
+                        const skillFile = path.join(skillsDir, entry.name, "SKILL.md");
+                        if (!existsSync(skillFile))
+                            continue;
+                        diskNames.add(entry.name);
+                        const content = await fsp.readFile(skillFile, "utf8");
+                        const inConvex = convexByName.get(entry.name);
+                        // Reconstruct with `---` fences so the compare matches the
+                        // on-disk shape (no fences → churn + malformed restores).
+                        const convexContent = inConvex
+                            ? skillContentFromParts(inConvex.frontmatter, inConvex.body)
+                            : undefined;
+                        if (!inConvex || convexContent !== content) {
+                            await store.skills.write({
+                                scope: "workspace",
+                                agentId,
+                                name: entry.name,
+                                content,
+                            });
+                        }
+                    }
+                }
+                // Skills the curator/consolidation ARCHIVED were moved aside to the
+                // sibling `skills-archive/` dir (reversible, intentional). They are
+                // gone from the live dir on purpose — never restore them, and reap the
+                // stale table row so they can't resurrect on a later boot (same guard
+                // shape as the consumed-BOOTSTRAP reap above). Without this, every
+                // auto-aged/merged/pruned skill comes back on the next gateway restart.
+                const archiveDir = path.join(path.dirname(skillsDir), "skills-archive");
+                for (const [name, record] of convexByName) {
+                    if (diskNames.has(name))
+                        continue;
+                    if (existsSync(path.join(archiveDir, name, "SKILL.md"))) {
+                        await store.skills.remove({ scope: "workspace", agentId, name });
+                        continue;
+                    }
+                    const skillFile = path.join(skillsDir, name, "SKILL.md");
+                    await fsp.mkdir(path.dirname(skillFile), { recursive: true });
+                    await fsp.writeFile(skillFile, skillContentFromParts(record.frontmatter, record.body), "utf8");
+                }
+            }
+            catch {
+                // Skills mirror is best-effort — discovery still works from
+                // disk; a fresh machine simply re-installs skills.
+            }
+            // Lifecycle marker — same two-way rule. (diskState + convexState
+            // were read up-front for the BOOTSTRAP consumed-guard.)
+            if (diskState.bootstrapSeededAt && !convexState.bootstrapSeededAt) {
+                await store.workspace.markBootstrapSeeded(agentId);
+            }
+            if (diskState.setupCompletedAt && !convexState.setupCompletedAt) {
+                await store.workspace.markSetupCompleted(agentId);
+            }
+            if (!diskState.bootstrapSeededAt && convexState.bootstrapSeededAt) {
+                await markBootstrapSeeded(workspaceDir);
+            }
+            if (!diskState.setupCompletedAt && convexState.setupCompletedAt) {
+                await markSetupCompleted(workspaceDir);
+            }
+        }
+        catch (err) {
+            console.error(`brigade: workspace mirror sync failed for agent ${agentId} — ${err.message}`);
+        }
+    }));
+}
+/** Convex mode boot — wrong-key tripwire. The first boot with encryption
+ *  enabled records the key's sha256 fingerprint in systemMeta; later boots
+ *  refuse loudly on mismatch instead of corrupting writes / failing reads
+ *  cryptically mid-turn. Key ROTATION goes through
+ *  BRIGADE_ENCRYPTION_KEY_OLD: when the stored fingerprint matches the OLD
+ *  key, the stored value updates to the new key's fingerprint. */
+/** Twin of `BUNDLE_VERSION` in convex/health.ts — bump BOTH together
+ *  whenever convex/ functions or the schema change shape. */
+const EXPECTED_CONVEX_BUNDLE_VERSION = 7;
+function buildStaleBundleError(remote) {
+    return Object.assign(new Error(`The Convex backend is running an OLDER Brigade function bundle ` +
+        `(backend: ${remote}, this build needs: v${EXPECTED_CONVEX_BUNDLE_VERSION}).\n` +
+        `  Push the current functions, then retry:\n` +
+        `    npm run convex:push\n` +
+        `  (restarting \`npm run convex:dev\` also pushes automatically at startup)`), { brigadeStaleBundle: true });
+}
+/** Refuse to boot against a backend whose deployed function bundle is older
+ *  than this build expects. Nothing used to push functions automatically, so
+ *  the deployed bundle silently drifted from the code — every NEW function
+ *  then failed at runtime with "Could not find public function" while the
+ *  gateway limped along half-broken. One deterministic check → one clear fix.
+ *  Transient/network failures never block boot (the store's init()
+ *  healthcheck already proved the backend reachable). */
+async function verifyConvexBundleVersion() {
+    let staleErr;
+    try {
+        const { getConvexClient } = await import("./convex/client.js");
+        const { api } = await import("../../convex/_generated/api.js");
+        const client = getConvexClient({});
+        const remote = (await client.query(api.health.bundleVersion, {}));
+        if (typeof remote === "number" && remote >= EXPECTED_CONVEX_BUNDLE_VERSION)
+            return;
+        staleErr = buildStaleBundleError(`v${String(remote)}`);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        // A reachable backend that doesn't know the function = pre-versioning
+        // (stale) bundle. Anything else is transient — don't block boot.
+        if (msg.includes("Could not find public function")) {
+            staleErr = buildStaleBundleError("pre-versioning push");
+        }
+    }
+    if (staleErr)
+        throw staleErr;
+}
+async function verifyEncryptionFingerprint(store) {
+    const { encryptionStatus } = await import("./encryption.js");
+    const status = encryptionStatus();
+    if (!status.enabled || !status.primaryKeyFingerprint) {
+        // Convex mode with NO active encryption key: seal() degrades to a
+        // plaintext pass-through, so provider keys + other secrets would be
+        // written UNSEALED to the backend. The happy path always has a key
+        // (onboard / `store mode set convex` mint one), so reaching here means
+        // the key file was deleted or BRIGADE_ENCRYPTION_KEY is unset. Warn
+        // LOUDLY so the operator restores the key before saving credentials. (A
+        // hard boot-refuse is the stronger guard but risks bricking a
+        // recoverable install — flagged as a follow-up.)
+        console.error("brigade: WARNING — convex mode is active but NO at-rest encryption key is " +
+            "loaded. Provider keys and other secrets will be stored UNSEALED in the backend. " +
+            "Set BRIGADE_ENCRYPTION_KEY to your recovery key (or restore the key file) before " +
+            "saving credentials.");
+        return; // no key — nothing to pin
+    }
+    try {
+        const { getConvexClient } = await import("./convex/client.js");
+        const { api } = await import("../../convex/_generated/api.js");
+        const client = getConvexClient({});
+        const stored = (await client.query(api.health.getMeta, {
+            key: "encryptionFingerprint",
+        }));
+        if (stored === null) {
+            await client.mutation(api.health.setMeta, {
+                key: "encryptionFingerprint",
+                value: status.primaryKeyFingerprint,
+            });
+            return;
+        }
+        if (stored === status.primaryKeyFingerprint)
+            return;
+        // Rotation path: stored matches the OLD key → re-pin to the new one.
+        if (status.hasOldKey) {
+            const { createHash } = await import("node:crypto");
+            const oldHex = process.env.BRIGADE_ENCRYPTION_KEY_OLD?.trim();
+            if (oldHex) {
+                const oldFp = createHash("sha256")
+                    .update(Buffer.from(oldHex, "hex"))
+                    .digest("hex")
+                    .slice(0, 8);
+                if (stored === oldFp) {
+                    await client.mutation(api.health.setMeta, {
+                        key: "encryptionFingerprint",
+                        value: status.primaryKeyFingerprint,
+                    });
+                    return;
+                }
+            }
+        }
+        // Tag the deliberate mismatch so the catch below re-throws it without
+        // substring-matching the human-facing message. The previous guard
+        // matched "BRIGADE_ENCRYPTION_KEY does not match" — a string this error
+        // never contains — so the tripwire was DEAD: a wrong key was swallowed
+        // and boot proceeded, the exact corrupt-on-write scenario it guards.
+        throw Object.assign(new Error(`This backend holds Brigade data protected by a DIFFERENT encryption key.\n` +
+            `  Your options:\n` +
+            `    • Provide the original key — set BRIGADE_ENCRYPTION_KEY to the recovery\n` +
+            `      key you saved when this Brigade was created (or restore its key file).\n` +
+            `    • Rotating on purpose? Set BRIGADE_ENCRYPTION_KEY_OLD to the previous\n` +
+            `      key alongside the new BRIGADE_ENCRYPTION_KEY.\n` +
+            `    • Start over — \`brigade store reset\` permanently erases the backend\n` +
+            `      so you can onboard fresh.\n` +
+            `  (key fingerprints: stored ${stored}, current ${status.primaryKeyFingerprint}; ` +
+            `active key source: ${status.source})`), { brigadeKeyMismatch: true });
+    }
+    catch (err) {
+        // Re-throw only the deliberate key-mismatch error (tagged above) — a
+        // transient meta read failure must not block boot (the healthcheck
+        // already passed). Tag check, not substring match, so the message can
+        // change freely without silently disarming the tripwire again.
+        if (err.brigadeKeyMismatch)
+            throw err;
+    }
+}
+/** Test-only — exercise the workspace mirror sync against a stub store. */
+export async function __syncWorkspaceMirrorsForTests(store, cfg) {
+    await syncWorkspaceMirrors(store, cfg);
+}
+let _configLiveUnsub;
+/** Convex mode, long-lived processes only (the gateway): subscribe to the
+ *  config live-query and re-prime the cache on every server-side change —
+ *  the convex-mode equivalent of the filesystem hot-reload watcher. NOT
+ *  called by short-lived CLI commands: the reactive WebSocket client would
+ *  hold the process open. Idempotent; pair with
+ *  `disableConfigLiveRefresh()` on shutdown. No-op in filesystem mode,
+ *  where the existing fs.watch hot-reload already covers this. */
+export function enableConfigLiveRefresh() {
+    const ctx = tryGetRuntimeContext();
+    if (!ctx || ctx.mode !== "convex")
+        return;
+    if (_configLiveUnsub)
+        return; // already live
+    _configLiveUnsub = ctx.store.config.subscribe((cfg) => {
+        primeConfigCache(cfg);
+    });
+}
+export function disableConfigLiveRefresh() {
+    try {
+        _configLiveUnsub?.();
+    }
+    finally {
+        _configLiveUnsub = undefined;
+    }
+}
+/** Test-only — clear the in-flight slot alongside
+ *  `__resetRuntimeContextForTests()`. */
+export function __resetBootForTests() {
+    _inflight = undefined;
+}
+//# sourceMappingURL=boot.js.map

package/dist/storage/boot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.js","sourceRoot":"","sources":["../../src/storage/boot.ts"],"names":[],"mappings":"AAAA,sBAAsB;AACtB,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AACxE,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,wEAAwE;AACxE,6EAA6E;AAC7E,gEAAgE;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACN,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,GAEpB,MAAM,sBAAsB,CAAC;AAG9B,IAAI,SAA8C,CAAC;AAEnD;;;;;;;;;oEASoE;AACpE,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACvC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;YACvB,MAAM,GAAG,GAAG,MAAM,oBAAoB,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC3B,0DAA0D;gBAC1D,2DAA2D;gBAC3D,uDAAuD;gBACvD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBACjE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACjC,+DAA+D;gBAC/D,+DAA+D;gBAC/D,2DAA2D;gBAC3D,yDAAyD;gBACzD,MAAM,yBAAyB,EAAE,CAAC;gBAClC,gEAAgE;gBAChE,0DAA0D;gBAC1D,8DAA8D;gBAC9D,+CAA+C;gBAC/C,MAAM,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChD,+DAA+D;gBAC/D,+DAA+D;gBAC/D,MAAM,GAAG,GACR,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,MAAM,KAAK,CAAC;oBACzD,CAAC,CAAE,EAAE,MAAM,EAAE,EAAE,EAAmB;oBAClC,CAAC,CAAC,KAAK,CAAC;gBACV,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACtB,MAAM,OAAO,CAAC,GAAG,CAAC;oBACjB,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAA8B,CAAC;oBAC/D,qBAAqB,CAAC,GAAG,CAAC,KAAK,EAAE,GAA8B,CAAC;oBAChE,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC;oBAC9B,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;oBAC3B,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,GAA8B,CAAC;oBAC7D,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,GAA8B,CAAC;oBAC5D,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC;oBACnC,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,GAA8B,CAAC;iBAC/D,CAAC,CAAC;gBACH,6DAA6D;gBAC7D,+DAA+D;gBAC/D,2DAA2D;gBAC3D,0DAA0D;gBAC1D,8DAA8D;gBAC9D,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;gBAChF,wBAAwB,CAAC,GAAG,CAAC,KAAK,EAAE,GAA8B,CAAC,CAAC;YACrE,CAAC;YACD,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,GAAG,CAAC;QACZ,CAAC,CAAC,EAAE,CAAC;QACL,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE;YACpB,mEAAmE;YACnE,+DAA+D;YAC/D,SAAS,GAAG,SAAS,CAAC;QACvB,CAAC,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;6BAI6B;AAC7B,KAAK,UAAU,oBAAoB,CAClC,KAAmB,EACnB,GAA4B;IAE5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,IAAI,GAAG,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBAAE,SAAS;YAChD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CAChB,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,QAAQ,GAA4B,EAAE,CAAC;YAC7C,KAAK,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,IAAI;gBAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;YACvE,iBAAiB,CAAC,OAAO,EAAE;gBAC1B,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,QAAiB;aAC3B,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,4DAA4D;YAC5D,gEAAgE;YAChE,wDAAwD;YACxD,OAAO,CAAC,KAAK,CACZ,+CAA+C,OAAO,MAAO,GAAa,CAAC,OAAO,EAAE,CACpF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CACF,CAAC;AACH,CAAC;AAED;;gEAEgE;AAChE,KAAK,UAAU,qBAAqB,CACnC,KAAmB,EACnB,GAA4B;IAE5B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,IAAI,GAAG,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBAAE,SAAS;YAChD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CAChB,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzD,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CACZ,iDAAiD,OAAO,MAAO,GAAa,CAAC,OAAO,EAAE,CACtF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CACF,CAAC;AACH,CAAC;AAED;;uEAEuE;AACvE,KAAK,UAAU,mBAAmB,CAAC,KAAmB;IACrD,IAAI,CAAC;QACJ,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAChD,4CAA4C,CAC5C,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QACtD,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CACZ,8CAA+C,GAAa,CAAC,OAAO,EAAE,CACtE,CAAC;IACH,CAAC;AACF,CAAC;AAED;0EAC0E;AAC1E,KAAK,UAAU,gBAAgB,CAAC,KAAmB;IAClD,IAAI,CAAC;QACJ,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzC,cAAc,CAAC,IAAe,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,oCAAqC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;AACF,CAAC;AAED;6EAC6E;AAC7E,KAAK,UAAU,kBAAkB,CAChC,KAAmB,EACnB,GAA4B;IAE5B,MAAM,EAAE,eAAe,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,IAAI,GAAG,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBAAE,SAAS;YAChD,6EAA6E;YAC7E,0EAA0E;YAC1E,8DAA8D;YAC9D,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,CAAC;IACF,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CAChB,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;QACrC,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;YACtE,eAAe,CAAC,WAAW,EAAE,OAAkB,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CACZ,kDAAkD,WAAW,MAAO,GAAa,CAAC,OAAO,EAAE,CAC3F,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CACF,CAAC;AACH,CAAC;AAED;;;qEAGqE;AACrE,KAAK,UAAU,iBAAiB,CAC/B,KAAmB,EACnB,GAA4B;IAE5B,MAAM,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,sBAAsB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3E,MAAM,CAAC,qBAAqB,CAAC;QAC7B,MAAM,CAAC,6BAA6B,CAAC;KACrC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,IAAI,GAAG,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBAAE,SAAS;YAChD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CAChB,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,CAAC;YACJ,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC7D,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC;gBAClD,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,CAAC;aACrD,CAAC,CAAC;YACH,MAAM,YAAY,GAA2D;gBAC5E,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,EAAE;aACZ,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,QAA0C,EAAE,CAAC;gBAC5D,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;gBACjC,IAAI,OAAO,SAAS,KAAK,QAAQ;oBAAE,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;YAC5E,CAAC;YACD,eAAe,CACd,OAAO,EACP,YAAqB,EACrB,CAAC,SAAS,IAAI;gBACb,OAAO,EAAE,CAAC;gBACV,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;aACd,CAAU,CACX,CAAC;YACF,sBAAsB,CACrB,OAAO,EACP,CAAC,YAAY,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAU,CACzD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CACZ,4CAA4C,OAAO,MAAO,GAAa,CAAC,OAAO,EAAE,CACjF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CACF,CAAC;AACH,CAAC;AAED;;;;;;qDAMqD;AACrD,KAAK,UAAU,wBAAwB,CAAC,KAAmB;IAC1D,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CACZ,oDAAqD,GAAa,CAAC,OAAO,EAAE,CAC5E,CAAC;IACH,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;;2EAgB2E;AAC3E,KAAK,UAAU,oBAAoB,CAClC,KAAmB,EACnB,GAA4B;IAE5B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACxE,MAAM,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CACnF,uBAAuB,CACvB,CAAC;IAEF,MAAM,aAAa,GAAG;QACrB,WAAW;QACX,SAAS;QACT,aAAa;QACb,SAAS;QACT,UAAU;QACV,cAAc;QACd,WAAW;QACX,cAAc;KACL,CAAC;IAEX,MAAM,MAAM,GAAG,GAAG,CAAC,MAA6C,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,IAAI,GAAG,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;gBAAE,SAAS;YAChD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;IAED,MAAM,OAAO,CAAC,GAAG,CAChB,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,CAAC;YACJ,MAAM,YAAY,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,CAAC,qBAAqB;YAElE,mEAAmE;YACnE,oEAAoE;YACpE,gEAAgE;YAChE,+DAA+D;YAC/D,gEAAgE;YAChE,MAAM,SAAS,GAAG,SAAS;gBAC1B,CAAC,CAAC,MAAM,kBAAkB,CAAC,YAAY,CAAC;gBACxC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;YAClB,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7D,MAAM,iBAAiB,GAAG,OAAO,CAC/B,SAA2C,CAAC,gBAAgB;gBAC5D,WAAW,CAAC,gBAAgB,CAC7B,CAAC;YAEF,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;gBAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClC,8DAA8D;gBAC9D,8DAA8D;gBAC9D,IAAI,IAAI,KAAK,cAAc,IAAI,iBAAiB,EAAE,CAAC;oBAClD,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;wBACzB,MAAM,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACpD,CAAC;oBACD,SAAS;gBACV,CAAC;gBACD,IAAI,MAAM,EAAE,CAAC;oBACZ,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBACrD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;wBAC/C,MAAM,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC5D,CAAC;gBACF,CAAC;qBAAM,IAAI,QAAQ,EAAE,CAAC;oBACrB,MAAM,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACnD,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACzD,CAAC;YACF,CAAC;YAED,4EAA4E;YAC5E,IAAI,CAAC;gBACJ,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;gBAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;gBACpD,4DAA4D;gBAC5D,+DAA+D;gBAC/D,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC5C,YAAY;oBACZ,OAAO;oBACP,MAAM,EAAE,WAAW;iBACnB,CAAC,CAAC;gBACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,YAAY,CAAC,OAAyE;qBACrF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;qBACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAc,EAAE,CAAC,CAAU,CAAC,CAC5C,CAAC;gBACF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;gBACpC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;wBAC3E,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;4BAAE,SAAS;wBACnC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;wBAC/D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;4BAAE,SAAS;wBACrC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAC1B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;wBACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAC9C,2DAA2D;wBAC3D,0DAA0D;wBAC1D,MAAM,aAAa,GAAG,QAAQ;4BAC7B,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC;4BAC5D,CAAC,CAAC,SAAS,CAAC;wBACb,IAAI,CAAC,QAAQ,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;4BAC5C,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;gCACxB,KAAK,EAAE,WAAW;gCAClB,OAAO;gCACP,IAAI,EAAE,KAAK,CAAC,IAAI;gCAChB,OAAO;6BACE,CAAC,CAAC;wBACb,CAAC;oBACF,CAAC;gBACF,CAAC;gBACD,oEAAoE;gBACpE,oEAAoE;gBACpE,uEAAuE;gBACvE,sEAAsE;gBACtE,mEAAmE;gBACnE,wEAAwE;gBACxE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBACxE,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;oBAC3C,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;wBAAE,SAAS;oBAClC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;wBACzD,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAW,CAAC,CAAC;wBAC1E,SAAS;oBACV,CAAC;oBACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;oBACzD,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC9D,MAAM,GAAG,CAAC,SAAS,CAClB,SAAS,EACT,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,EACtD,MAAM,CACN,CAAC;gBACH,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,4DAA4D;gBAC5D,mDAAmD;YACpD,CAAC;YAED,iEAAiE;YACjE,wDAAwD;YACxD,IAAI,SAAS,CAAC,iBAAiB,IAAI,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;gBACnE,MAAM,KAAK,CAAC,SAAS,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,SAAS,CAAC,gBAAgB,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;gBACjE,MAAM,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,iBAAiB,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;gBACnE,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,gBAAgB,IAAI,WAAW,CAAC,gBAAgB,EAAE,CAAC;gBACjE,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CACZ,mDAAmD,OAAO,MAAO,GAAa,CAAC,OAAO,EAAE,CACxF,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CACF,CAAC;AACH,CAAC;AAED;;;;;kEAKkE;AAClE;6DAC6D;AAC7D,MAAM,8BAA8B,GAAG,CAAC,CAAC;AAEzC,SAAS,qBAAqB,CAAC,MAAc;IAC5C,OAAO,MAAM,CAAC,MAAM,CACnB,IAAI,KAAK,CACR,iEAAiE;QAChE,aAAa,MAAM,wBAAwB,8BAA8B,MAAM;QAC/E,6CAA6C;QAC7C,2BAA2B;QAC3B,4EAA4E,CAC7E,EACD,EAAE,kBAAkB,EAAE,IAAa,EAAE,CACrC,CAAC;AACH,CAAC;AAED;;;;;;yDAMyD;AACzD,KAAK,UAAU,yBAAyB;IACvC,IAAI,QAA2B,CAAC;IAChC,IAAI,CAAC;QACJ,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAW,CAAC;QAC5E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,8BAA8B;YAAE,OAAO;QACnF,QAAQ,GAAG,qBAAqB,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,sEAAsE;QACtE,iEAAiE;QACjE,IAAI,GAAG,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,CAAC;YACpD,QAAQ,GAAG,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IACD,IAAI,QAAQ;QAAE,MAAM,QAAQ,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAAmB;IAC7D,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;QACtD,kEAAkE;QAClE,oEAAoE;QACpE,mEAAmE;QACnE,uEAAuE;QACvE,oEAAoE;QACpE,wEAAwE;QACxE,8DAA8D;QAC9D,iDAAiD;QACjD,OAAO,CAAC,KAAK,CACZ,4EAA4E;YAC3E,kFAAkF;YAClF,mFAAmF;YACnF,qBAAqB,CACtB,CAAC;QACF,OAAO,CAAC,0BAA0B;IACnC,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE;YACtD,GAAG,EAAE,uBAAuB;SAC5B,CAAC,CAAkB,CAAC;QACrB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE;gBACzC,GAAG,EAAE,uBAAuB;gBAC5B,KAAK,EAAE,MAAM,CAAC,qBAAqB;aACnC,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,CAAC,qBAAqB;YAAE,OAAO;QACpD,qEAAqE;QACrE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;YAC9D,IAAI,MAAM,EAAE,CAAC;gBACZ,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC;qBAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;qBAClC,MAAM,CAAC,KAAK,CAAC;qBACb,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACd,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;oBACtB,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE;wBACzC,GAAG,EAAE,uBAAuB;wBAC5B,KAAK,EAAE,MAAM,CAAC,qBAAqB;qBACnC,CAAC,CAAC;oBACH,OAAO;gBACR,CAAC;YACF,CAAC;QACF,CAAC;QACD,sEAAsE;QACtE,kEAAkE;QAClE,wEAAwE;QACxE,uEAAuE;QACvE,qEAAqE;QACrE,MAAM,MAAM,CAAC,MAAM,CAClB,IAAI,KAAK,CACR,4EAA4E;YAC3E,mBAAmB;YACnB,+EAA+E;YAC/E,gFAAgF;YAChF,6EAA6E;YAC7E,uDAAuD;YACvD,6EAA6E;YAC7E,mCAAmC;YACnC,+BAA+B,MAAM,aAAa,MAAM,CAAC,qBAAqB,IAAI;YAClF,sBAAsB,MAAM,CAAC,MAAM,GAAG,CACvC,EACD,EAAE,kBAAkB,EAAE,IAAa,EAAE,CACrC,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,+DAA+D;QAC/D,IAAK,GAAwC,CAAC,kBAAkB;YAAE,MAAM,GAAG,CAAC;IAC7E,CAAC;AACF,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,KAAmB,EACnB,GAA4B;IAE5B,MAAM,oBAAoB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,IAAI,gBAA0C,CAAC;AAE/C;;;;;;kEAMkE;AAClE,MAAM,UAAU,uBAAuB;IACtC,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO;IAC1C,IAAI,gBAAgB;QAAE,OAAO,CAAC,eAAe;IAC7C,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;QACrD,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB;IACvC,IAAI,CAAC;QACJ,gBAAgB,EAAE,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACV,gBAAgB,GAAG,SAAS,CAAC;IAC9B,CAAC;AACF,CAAC;AAED;yCACyC;AACzC,MAAM,UAAU,mBAAmB;IAClC,SAAS,GAAG,SAAS,CAAC;AACvB,CAAC"}

package/dist/storage/config-cache.d.ts

@@ -0,0 +1,23 @@
+import type { BrigadeConfig } from "../config/types.js";
+/** Install/replace the cached raw config. Deep-clones so later caller
+ *  mutations can't corrupt the cache. Notifies listeners AFTER the swap —
+ *  in filesystem mode the gateway hot-reloads agents off an fs.watch on
+ *  brigade.json, but convex-mode config writes never touch disk, so a
+ *  mid-session `manage_agent add` / org init left the gateway's
+ *  perAgentRuntime stale: 20 agents in config, `agents on the gateway:
+ *  main` only, `/agent <id>` refusing every new id until restart. This
+ *  notification is the convex-mode equivalent of that fs.watch — fired by
+ *  BOTH the in-process write path (io.ts) and the cross-process live
+ *  subscription (boot.ts enableConfigLiveRefresh). */
+export declare function primeConfigCache(cfg: BrigadeConfig): void;
+/** Subscribe to cache re-primes (= every convex-mode config change, local or
+ *  remote). Returns the unsubscribe. Listeners should debounce themselves —
+ *  a burst of writes fires once per write. */
+export declare function onConfigCachePrimed(cb: () => void): () => void;
+/** The cached raw (secret-refs-intact) config, or undefined when boot has
+ *  not primed it. Callers MUST clone before mutating or resolving. */
+export declare function getCachedConfigRaw(): BrigadeConfig | undefined;
+export declare function isConfigCachePrimed(): boolean;
+/** Test-only. */
+export declare function __resetConfigCacheForTests(): void;
+//# sourceMappingURL=config-cache.d.ts.map

package/dist/storage/config-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-cache.d.ts","sourceRoot":"","sources":["../../src/storage/config-cache.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKxD;;;;;;;;;sDASsD;AACtD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CASzD;AAED;;8CAE8C;AAC9C,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAG9D;AAED;sEACsE;AACtE,wBAAgB,kBAAkB,IAAI,aAAa,GAAG,SAAS,CAE9D;AAED,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAED,iBAAiB;AACjB,wBAAgB,0BAA0B,IAAI,IAAI,CAGjD"}