@synap-core/cli 1.11.0 → 1.13.0

package/dist/lib/box/proxmox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxmox.js","sourceRoot":"","sources":["../../../src/lib/box/proxmox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,YAAY,CAAC;AA0B/B,MAAM,OAAO,YAAa,SAAQ,KAAK;IAE1B;IADX,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;QAIvB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAkB;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAE1H,SAAS,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,MAAwC;QACxF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,IAAwB,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM;YACjB,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YACxF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CACvB,GAAG,EACH;gBACE,MAAM;gBACN,KAAK;gBACL,OAAO,EAAE;oBACP,aAAa,EAAE,eAAe,GAAG,CAAC,KAAK,EAAE;oBACzC,GAAG,CAAC,IAAI,KAAK,SAAS;wBACpB,CAAC,CAAC,EAAE,cAAc,EAAE,mCAAmC,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;wBACpG,CAAC,CAAC,EAAE,CAAC;iBACR;gBACD,OAAO,EAAE,MAAM;aAChB,EACD,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;oBACpD,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;wBACnC,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,GAAG,MAAM,IAAI,IAAI,UAAU,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,aAAa,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;wBACrJ,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC;wBACH,OAAO,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC,IAAI,CAAC,CAAC;oBAClD,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,EAAE,GAAG,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC;oBACjF,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;YAChF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxB,IAAI,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC;QAC/C,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC;QAC7C,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC;KACjD,CAAC;AACJ,CAAC;AA0BD,yEAAyE;AACzE,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAAC;AA6BnC,sEAAsE;AACtE,MAAM,UAAU,QAAQ,CAAC,GAAkB,EAAE,IAAY;IACvD,OAAO,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5D,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,GAAkB,EAAE,MAA+B;IACzE,OAAO,MAAM;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC;SACpF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;SACzD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAK,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,IAAK,IAAI,GAAG,CAAC,OAAO,CAAC;SAC/D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;SAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAID,wGAAwG;AACxG,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAA0B;IAClE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,wBAAwB,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC/E,CAAC;AAID,MAAM,UAAU,oBAAoB,CAAC,GAAe,EAAE,IAAY,EAAE,GAAkB;IACpF,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAEnC,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,SAAS,GAAG,OAAO;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACxC,SAAS,CAAC;YACR,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CAAO,UAAU,CAAC,UAAU,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtF,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI;oBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,QAAQ,IAAI,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC9F,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,QAAQ,IAAI,wBAAwB,SAAS,KAAK,CAAC,CAAC;YAC3G,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,QAAQ;QACrB,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,CAAC,MAAM,GAAG,CAAC,GAAG,CAAiB,4BAA4B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CACnI,CAAC;QACF,KAAK,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;gBAC5C,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;oBAAE,SAAS,CAAC,2BAA2B;gBAC5F,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,IAAY;QACjC,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAqB,UAAU,CAAC,QAAQ,IAAI,iBAAiB,CAAC,CAAC;YACvF,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAS,UAAU,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,CAAS,UAAU,CAAC,QAAQ,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,4BAA4B,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAClH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6CAA6C;YAC7C,IAAI,GAAG,YAAY,YAAY,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO;YACtG,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,QAAQ;YACZ,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAA8C,UAAU,CAAC,SAAS,CAAC,CAAC;YAChG,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CACtB,UAAU,CAAC,YAAY,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAChE,CAAC;YACF,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ;gBAC9B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,CAAC,GAAG,CAAa,UAAU,CAAC,gBAAgB,CAAC,CAAC;gBACnF,CAAC,CAAC,IAAI,CAAC;YACT,OAAO;gBACL,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;gBACpF,cAAc,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG;gBAC/D,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM;YACxB,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC9B,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,mBAAmB,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAChG,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,UAAU,CAAC,QAAQ,GAAG,CAAC,YAAY,QAAQ,EAAE;gBAC/E,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBACpC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,CAAC;gBACP,WAAW,EAAE,iBAAiB,KAAK,EAAE;aACtC,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,IAAI,SAAS,EAAE;oBAC9C,KAAK,EAAE,MAAM,CAAC,IAAI;oBAClB,MAAM,EAAE,MAAM,CAAC,QAAQ;oBACvB,IAAI,EAAE,CAAC;oBACP,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,qEAAqE;oBACrE,IAAI,EAAE,oBAAoB,GAAG,CAAC,MAAM,OAAO,EAAE,gBAAgB;oBAC7D,IAAI,EAAE,GAAG,OAAO,QAAQ,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;oBAC3C,MAAM,EAAE,CAAC;iBACV,CAAC,CAAC;gBACH,MAAM,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,CAAS,UAAU,CAAC,QAAQ,IAAI,eAAe,CAAC,CAAC,CAAC;YACjF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACtB,CAAC;QAED,OAAO;QAEP,KAAK,CAAC,IAAI;YACR,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,GAAG,CAAiB,4BAA4B,CAAC,CAAC,CAAC;QACnF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/box/wire.d.ts

@@ -0,0 +1,98 @@
+/**
+ * The pod side of a box run, as the provisioner sees it: lease, heartbeat,
+ * upload, finish. ONE module, so the wire shape lives in one place. Contract:
+ * lanes/code-runtime/BOX-CONTRACT.md v2 (2026-10-26, owned by the pod lane),
+ * Hub routes `/api/hub/box-runs/*`.
+ *
+ * Every call carries the COMPUTER's own key (device flow, scope `box.runner`):
+ * the provisioner is a computer that pulls runs, never an agent.
+ */
+import type { HubConfig } from "../hub-client.js";
+import type { BlockedEgress } from "./egress.js";
+import type { InstalledPackage, RunLog } from "./evidence.js";
+export type BoxLanguage = "python" | "node";
+export interface BoxLimits {
+    wallSeconds: number;
+    cpus: number;
+    memoryMb: number;
+    diskMb: number;
+    outMb: number;
+}
+export interface BoxScript {
+    skillId: string;
+    name: string;
+    language: BoxLanguage;
+    entrypoint: string;
+    code: string;
+    packages: Array<{
+        name: string;
+        version: string;
+    }>;
+    /** Run-phase egress allowlist: host names, optionally `host:port`. */
+    hosts: string[];
+    limits: BoxLimits;
+}
+export interface LeasedRun {
+    id: string;
+    leaseId: string;
+    leaseExpiresAt: string;
+    heartbeatIntervalSeconds: number;
+    script: BoxScript;
+    parameters: unknown;
+    queuedAt: string;
+    attempt: number;
+}
+export interface HeartbeatReply {
+    leaseExpiresAt: string;
+    stopRequested: boolean;
+}
+export interface UploadTicket {
+    uploadUrl: string;
+    method: string;
+    headers: Record<string, string>;
+    uploadToken: string;
+    expiresAt: string;
+    maxBytes: number;
+}
+/** BOX-CONTRACT v2: timeout and infra are stored as failed with the verdict kept. */
+export type FinishStatus = "done" | "failed" | "stopped" | "timeout" | "infra";
+export interface FinishedFile {
+    path: string;
+    size: number;
+    sha256: string;
+    /** Absent when the file could not be uploaded: it is recorded in the evidence only. */
+    uploadToken?: string;
+    title?: string;
+}
+export interface FinishBody {
+    leaseId: string;
+    status: FinishStatus;
+    exitCode: number | null;
+    durationMs: number;
+    /** Required when status = infra. */
+    infraReason?: string;
+    log: RunLog;
+    files: FinishedFile[];
+    blockedEgress: BlockedEgress[];
+    installedPackages: InstalledPackage[];
+}
+/** 404 / 409: the pod no longer holds this lease for us. Stop, destroy, never finish. */
+export declare class LeaseLostError extends Error {
+    constructor(runId: string, status: number);
+}
+/** The run has no workspace: its files cannot be stored (record them `stored: false`). */
+export declare class WorkspaceRequiredError extends Error {
+    constructor();
+}
+export interface BoxHub {
+    lease(): Promise<LeasedRun | null>;
+    heartbeat(run: LeasedRun, phase: "setup" | "running"): Promise<HeartbeatReply>;
+    upload(run: LeasedRun, file: {
+        filename: string;
+        mimeType: string;
+        bytes: Buffer;
+    }): Promise<string>;
+    finish(run: LeasedRun, body: FinishBody): Promise<unknown>;
+}
+export type FetchLike = (url: string, init: RequestInit) => Promise<Response>;
+export declare function createBoxHub(cfg: Pick<HubConfig, "podUrl" | "apiKey">, fetchImpl?: FetchLike): BoxHub;

package/dist/lib/box/wire.js

@@ -0,0 +1,70 @@
+/**
+ * The pod side of a box run, as the provisioner sees it: lease, heartbeat,
+ * upload, finish. ONE module, so the wire shape lives in one place. Contract:
+ * lanes/code-runtime/BOX-CONTRACT.md v2 (2026-10-26, owned by the pod lane),
+ * Hub routes `/api/hub/box-runs/*`.
+ *
+ * Every call carries the COMPUTER's own key (device flow, scope `box.runner`):
+ * the provisioner is a computer that pulls runs, never an agent.
+ */
+/** 404 / 409: the pod no longer holds this lease for us. Stop, destroy, never finish. */
+export class LeaseLostError extends Error {
+    constructor(runId, status) {
+        super(`lease on box run ${runId} lost (HTTP ${status})`);
+        this.name = "LeaseLostError";
+    }
+}
+/** The run has no workspace: its files cannot be stored (record them `stored: false`). */
+export class WorkspaceRequiredError extends Error {
+    constructor() {
+        super("the run has no workspace: its files cannot be stored");
+        this.name = "WorkspaceRequiredError";
+    }
+}
+export function createBoxHub(cfg, fetchImpl = fetch) {
+    const base = `${cfg.podUrl.replace(/\/+$/, "")}/api/hub/box-runs`;
+    async function post(path, body, runId) {
+        const res = await fetchImpl(`${base}${path}`, {
+            method: "POST",
+            headers: { Authorization: `Bearer ${cfg.apiKey}`, "Content-Type": "application/json" },
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(30_000),
+        });
+        if (runId && (res.status === 404 || res.status === 409))
+            throw new LeaseLostError(runId, res.status);
+        if (!res.ok) {
+            const text = await res.text().catch(() => "");
+            if (res.status === 400 && /WORKSPACE_REQUIRED/.test(text))
+                throw new WorkspaceRequiredError();
+            throw new Error(`POST box-runs${path} failed (HTTP ${res.status})${text ? `: ${text.slice(0, 300)}` : ""}`);
+        }
+        return res.json();
+    }
+    const runPath = (run, verb) => `/${encodeURIComponent(run.id)}/${verb}`;
+    return {
+        async lease() {
+            const body = (await post("/lease", {}));
+            return body.run ?? null;
+        },
+        async heartbeat(run, phase) {
+            return (await post(runPath(run, "heartbeat"), { leaseId: run.leaseId, phase }, run.id));
+        },
+        async upload(run, file) {
+            const ticket = (await post(runPath(run, "uploads"), { leaseId: run.leaseId, filename: file.filename, mimeType: file.mimeType, size: file.bytes.length }, run.id));
+            // Straight to object storage with exactly the headers the pod signed.
+            const put = await fetchImpl(ticket.uploadUrl, {
+                method: ticket.method || "PUT",
+                headers: ticket.headers,
+                body: new Uint8Array(file.bytes),
+                signal: AbortSignal.timeout(10 * 60_000),
+            });
+            if (!put.ok)
+                throw new Error(`storing ${file.filename} failed (HTTP ${put.status})`);
+            return ticket.uploadToken;
+        },
+        async finish(run, body) {
+            return post(runPath(run, "finish"), body, run.id);
+        },
+    };
+}
+//# sourceMappingURL=wire.js.map

package/dist/lib/box/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../../src/lib/box/wire.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA8EH,yFAAyF;AACzF,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,KAAa,EAAE,MAAc;QACvC,KAAK,CAAC,oBAAoB,KAAK,eAAe,MAAM,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,0FAA0F;AAC1F,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C;QACE,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAWD,MAAM,UAAU,YAAY,CAAC,GAAyC,EAAE,YAAuB,KAAK;IAClG,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC;IAElE,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,IAAa,EAAE,KAAc;QAC7D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACtF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACrG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,sBAAsB,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,iBAAiB,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAc,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;IAE3F,OAAO;QACL,KAAK,CAAC,KAAK;YACT,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAA+B,CAAC;YACtE,OAAO,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK;YACxB,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAmB,CAAC;QAC5G,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI;YACpB,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CACxB,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EACvB,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EACnG,GAAG,CAAC,EAAE,CACP,CAAiB,CAAC;YACnB,sEAAsE;YACtE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,EAAE;gBAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;gBAChC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC;aACzC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,QAAQ,iBAAiB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACrF,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI;YACpB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/capture-lane.d.ts

@@ -31,12 +31,13 @@ export interface LaneReport {
 }
 /**
  * Derive the lane from the workspace-routing `source` returned by
- * `resolveKnowledgeWorkspace`. A domain capture always lands in a real product
- * workspace → the Work lane. (The backend routing endpoint P7b is the SSoT for
- * resolving user/global lanes; the CLI's lane detection is a best-effort hint.)
+ * `resolveKnowledgeWorkspace`. Domain capture is the Work lane (even when
+ * workspaceId is omitted for server-derived / pod-wide preferred placement).
+ * (The backend routing endpoint P7b is the SSoT for resolving user/global
+ * lanes; the CLI's lane detection is a best-effort hint.)
  *
- *   source                              → lane
- *   "explicit" / "team" / "active …"    → work
+ *   source                                           → lane
+ *   "explicit" / "team" / "server-derived …"         → work
  */
 export declare function laneFromSource(_source: string): CaptureLane;
 /** Best-effort resolve a workspace name from the pod. Never throws. */

package/dist/lib/capture-lane.js

@@ -22,12 +22,13 @@ import { hubGet } from "./hub-client.js";
 import { unwrapList } from "./unwrapList.js";
 /**
  * Derive the lane from the workspace-routing `source` returned by
- * `resolveKnowledgeWorkspace`. A domain capture always lands in a real product
- * workspace → the Work lane. (The backend routing endpoint P7b is the SSoT for
- * resolving user/global lanes; the CLI's lane detection is a best-effort hint.)
+ * `resolveKnowledgeWorkspace`. Domain capture is the Work lane (even when
+ * workspaceId is omitted for server-derived / pod-wide preferred placement).
+ * (The backend routing endpoint P7b is the SSoT for resolving user/global
+ * lanes; the CLI's lane detection is a best-effort hint.)
  *
- *   source                              → lane
- *   "explicit" / "team" / "active …"    → work
+ *   source                                           → lane
+ *   "explicit" / "team" / "server-derived …"         → work
  */
 export function laneFromSource(_source) {
     return "work";

package/dist/lib/capture-lane.js.map

@@ -1 +1 @@
-{"version":3,"file":"capture-lane.js","sourceRoot":"","sources":["../../src/lib/capture-lane.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,MAAM,EAAkB,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAmB7C;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,GAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,CAAC,CAA4B,CAAC;QAC9E,MAAM,IAAI,GAAG,UAAU,CAA0B,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,WAAW,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,SAAS,CAAC,IAAiB;IAClC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,cAAc,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,mBAAmB,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,iBAAiB,CAAC;QAC3B,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,GAAG,CAAC,iBAAiB,KAAK,uBAAuB,CAAC,GAAG,OAAO,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,mBAAmB,CAAC,GAAG,OAAO,CAAC;AACtE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,GAA4B;IAC1D,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU;QAC9B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC;QACrC,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAA4B,EAC5B,CAMC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAe;QACzB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,aAAa,EAAE,CAAC,CAAC,WAAW;YAC1B,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC;YAClD,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;gBACxC,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS;QACf,UAAU;KACX,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAEhD,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,GAAG,GAAG;YACN,OAAO,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YAC1D,GAAG,cAAc,CAAC,MAAM,CAAC;SAC1B,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,4EAA4E;QAC5E,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,4BAA4B,CAAC,CAAC;QACjD,iEAAiE;QACjE,oEAAoE;QACpE,IAAI,UAAU;YAAE,GAAG,CAAC,GAAG,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;QACrD,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,gBAAgB;YAAE,GAAG,CAAC,GAAG,CAAC,aAAa,gBAAgB,EAAE,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"capture-lane.js","sourceRoot":"","sources":["../../src/lib/capture-lane.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,MAAM,EAAkB,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAmB7C;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,GAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,CAAC,CAA4B,CAAC;QAC9E,MAAM,IAAI,GAAG,UAAU,CAA0B,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,WAAW,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,SAAS,CAAC,IAAiB;IAClC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,cAAc,CAAC;QACxB,KAAK,MAAM;YACT,OAAO,mBAAmB,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,iBAAiB,CAAC;QAC3B,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,GAAG,CAAC,iBAAiB,KAAK,uBAAuB,CAAC,GAAG,OAAO,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,KAAK,mBAAmB,CAAC,GAAG,OAAO,CAAC;AACtE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,GAA4B;IAC1D,OAAO,GAAG,CAAC,MAAM,KAAK,UAAU;QAC9B,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC;QACrC,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAA4B,EAC5B,CAMC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAe;QACzB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,aAAa,EAAE,CAAC,CAAC,WAAW;YAC1B,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC;YAClD,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;gBACxC,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS;QACf,UAAU;KACX,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IAEhD,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;YACE,GAAG,GAAG;YACN,OAAO,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YAC1D,GAAG,cAAc,CAAC,MAAM,CAAC;SAC1B,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,0EAA0E;QAC1E,4EAA4E;QAC5E,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,4BAA4B,CAAC,CAAC;QACjD,iEAAiE;QACjE,oEAAoE;QACpE,IAAI,UAAU;YAAE,GAAG,CAAC,GAAG,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;QACrD,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,gBAAgB;YAAE,GAAG,CAAC,GAAG,CAAC,aAAa,gBAAgB,EAAE,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/lib/capture-structure.d.ts

@@ -13,7 +13,7 @@
  * ACTUALLY returned (applied vs proposed vs nothing-created) instead of guessing
  * off the planned proposal count.
  *
- * Kept local to the CLI (not imported from @synap/hub-rest-client) because the
+ * Kept local to the CLI (not imported from @synap-core/hub-rest-client) because the
  * CLI resolves the SDK via its built dist — the same reason the previous local
  * mirrors existed. This is now the ONE mirror instead of two.
  */
@@ -42,20 +42,157 @@ export interface FollowUp {
     question: string;
     suggestions?: FollowUpChip[];
 }
+/** The distribution behind an AI workspace pick (see the shared type). */
+export interface WorkspaceDecisionRecord {
+    decider: "jev" | "llm";
+    model?: string;
+    probabilities?: Record<string, number>;
+    candidates?: Array<{
+        id: string;
+        name: string;
+    }>;
+}
+/** The placement advice a `capture.structure` result carries (a subset). */
+export interface CaptureStructureRouting {
+    targetWorkspaceId?: string | null;
+    targetWorkspaceReason?: string | null;
+    targetWorkspaceConfidence?: number | null;
+    targetWorkspaceDecision?: WorkspaceDecisionRecord | null;
+    targetProjectId?: string | null;
+    targetProjectReason?: string | null;
+    targetProjectConfidence?: number | null;
+}
+/** The advisory routing fields `capture.execute` accepts. */
+export interface CaptureExecuteRoutingHints {
+    aiWorkspaceId?: string | null;
+    aiWorkspaceConfidence?: number | null;
+    aiWorkspaceReason?: string | null;
+    aiWorkspaceDecision?: WorkspaceDecisionRecord | null;
+    aiProjectId?: string | null;
+    aiProjectConfidence?: number | null;
+    aiProjectReason?: string | null;
+}
+/**
+ * ADVISORY hints only — an AI pick proposes, it never places data. A user's
+ * deliberate choice (`--workspace` / `--project`) is NOT a hint.
+ */
+export declare function captureExecuteRoutingHints(structured: CaptureStructureRouting): CaptureExecuteRoutingHints;
+/** The AI's workspace-side hints only (drop them when the user pinned a workspace). */
+export declare function workspaceRoutingHints(structured: CaptureStructureRouting): {
+    aiWorkspaceId: string | null | undefined;
+    aiWorkspaceConfidence: number | null | undefined;
+    aiWorkspaceReason: string | null | undefined;
+    aiWorkspaceDecision: WorkspaceDecisionRecord | null | undefined;
+};
+/** The AI's project-side hints only (drop them when the user pinned a project). */
+export declare function projectRoutingHints(structured: CaptureStructureRouting): {
+    aiProjectId: string | null | undefined;
+    aiProjectConfidence: number | null | undefined;
+    aiProjectReason: string | null | undefined;
+};
+/** Where a capture will land, as `capture.structure` resolved it. */
+export interface CapturePlacement {
+    workspaceId: string | null;
+    workspaceName: string | null;
+    /** A deterministic rung placed it — never an AI guess. */
+    deterministic: boolean;
+    suggestion?: {
+        workspaceId: string;
+        workspaceName: string;
+        reason: string | null;
+        alternatives: Array<{
+            workspaceId: string;
+            workspaceName: string;
+            weight: number;
+        }>;
+    };
+}
+/** What the person did with the destination field before saving. */
+export type WorkspaceSelection = {
+    kind: "default";
+} | {
+    kind: "chosen";
+    workspaceId: string;
+    workspaceName: string;
+} | {
+    kind: "removed";
+};
+export type WorkspaceChoice = "accepted" | "changed" | "removed" | "ignored";
+export interface WorkspacePlacementView {
+    destination: {
+        workspaceId: string | null;
+        workspaceName: string | null;
+    };
+    aiSuggested: boolean;
+    alternatives: NonNullable<CapturePlacement["suggestion"]>["alternatives"];
+    canRemove: boolean;
+    execute: {
+        targetWorkspaceId?: string;
+        workspaceChoice?: WorkspaceChoice;
+    };
+}
+/** THE destination rule — see the shared type's docblock. */
+export declare function deriveWorkspacePlacementView(placement: CapturePlacement | null | undefined, selection: WorkspaceSelection, opts: {
+    interactive: boolean;
+}): WorkspacePlacementView;
+/**
+ * The headless placement fields the CLI sends to `/capture/execute` — the ONE
+ * door, so the CLI can never hand-roll a destination. Headless ⇒ an AI
+ * suggestion stays a proposal; a deterministic placement is pinned explicitly.
+ */
+export declare function headlessPlacementFields(structured: Pick<StructureResult, "placement">): {
+    targetWorkspaceId?: string;
+    workspaceChoice?: WorkspaceChoice;
+};
+/**
+ * The workspace line for a structure result: the NAME the pod resolved (never
+ * a raw id when a name is known) and the confidence percent, once.
+ */
+export declare function formatWorkspaceRouting(result: {
+    targetWorkspaceId?: string | null;
+    targetWorkspaceName?: string | null;
+    targetWorkspaceConfidence?: number | null;
+}): string | null;
 /** Response of POST /capture/structure (the AI plan — writes NOTHING). */
 export interface StructureResult {
     proposals?: StructureProposal[];
     relations?: StructureRelation[];
     followUp?: string | FollowUp | null;
     targetWorkspaceId?: string | null;
+    /** The pod's display name for `targetWorkspaceId` — what the CLI prints. */
+    targetWorkspaceName?: string | null;
     targetWorkspaceConfidence?: number | null;
     targetWorkspaceReason?: string | null;
+    targetWorkspaceDecision?: WorkspaceDecisionRecord | null;
     targetProjectId?: string | null;
     targetProjectConfidence?: number | null;
     targetProjectReason?: string | null;
+    /**
+     * The honest destination block — where the capture lands and, separately,
+     * what the AI would SUGGEST. Read it through `headlessPlacementFields` /
+     * `deriveWorkspacePlacementView`, never by digging at `targetWorkspaceId`
+     * (which mixes a deterministic placement and an AI guess into one field).
+     * Absent on an older pod.
+     */
+    placement?: CapturePlacement | null;
     /** True when the IS structurer is down and the server returned a raw fallback. */
     degraded?: boolean;
-    degradedReason?: string;
+    degradedReason?: DegradedReason;
+    /**
+     * Summary of the extraction pass, present when a `file` input was normalized
+     * to text before structuring. `text` is what the pod needs echoed back on
+     * execute (as `file.extractedText`) so a kept original lands with a real
+     * document body instead of an empty one — the pod cannot re-derive it,
+     * because extraction runs in the Intelligence Service.
+     */
+    extraction?: {
+        kind: string;
+        extractor: string;
+        metadata?: Record<string, unknown>;
+        warnings?: string[];
+        text?: string;
+        textTruncated?: boolean;
+    };
 }
 /** One materialized entity row in a /capture/execute response. */
 export interface ExecuteCreated {
@@ -87,8 +224,33 @@ export interface ExecuteResult {
     proposalId?: string;
     reviewUrl?: string;
     reviewPath?: string;
-    movedToWorkspace?: string | null;
+    /**
+     * The AI's outstanding "move to X?" suggestion. NOTHING was moved — the
+     * capture landed where it would have without the AI; re-file with an
+     * explicit workspace to accept it. (This replaced `movedToWorkspace`, which
+     * claimed a move the ladder never performs.)
+     */
+    pendingWorkspaceSwitch?: {
+        suggestedWorkspaceId: string;
+        suggestedWorkspaceName: string | null;
+        reason: string | null;
+        confidence: number | null;
+    } | null;
     message?: string;
+    /**
+     * Disposition of the ORIGINAL file, present only when the caller sent
+     * `keepRaw: true` + `file`. Four honest outcomes — the blob can be stored,
+     * parked behind governance, denied by policy, or fail on storage — and a
+     * caller that prints "kept" for all four is back to false success.
+     */
+    sourceFile?: {
+        status: "stored" | "proposed" | "denied" | "failed";
+        entityId?: string;
+        documentId?: string;
+        proposalId?: string;
+        reviewUrl?: string;
+        reason?: string;
+    };
 }
 /** The honest outcome of a /capture/execute call, derived from the response. */
 export interface CaptureExecuteOutcome {
@@ -101,7 +263,16 @@ export interface CaptureExecuteOutcome {
     relationsCreated: number;
     proposalId?: string;
     reviewUrl?: string;
-    movedToWorkspace?: string;
+    /**
+     * The AI suggested another workspace and the pod did NOT move anything —
+     * a proposal for the caller to confirm, never a receipt of a move.
+     */
+    pendingWorkspaceSwitch?: {
+        suggestedWorkspaceId: string;
+        suggestedWorkspaceName: string | null;
+        reason: string | null;
+        confidence: number | null;
+    };
 }
 /**
  * Interpret a /capture/execute response HONESTLY. Distinguishes applied vs
@@ -110,14 +281,62 @@ export interface CaptureExecuteOutcome {
  * only linked existing entities.
  */
 export declare function readCaptureExecute(res: ExecuteResult): CaptureExecuteOutcome;
-/** True when the structure step degraded (IS structurer unavailable). */
+/**
+ * The one line every CLI surface prints for an outstanding workspace
+ * suggestion. It says what to DO (re-file with `--workspace`), because the pod
+ * moved nothing — the old "→ filed into workspace X" line reported a move that
+ * never happened.
+ */
+export declare function formatPendingWorkspaceSwitch(outcome: Pick<CaptureExecuteOutcome, "pendingWorkspaceSwitch">): string | null;
+/** True when the structure step degraded (nothing usable came back). */
 export declare function isDegraded(res: StructureResult): boolean;
 /**
- * The ONE degraded message. When the structurer is down the server returns a
- * generic `item` stand-in wrapping the raw text — but the CLI does NOT
- * materialize it (the browser does the same via `offlineFallback:false`). We
- * create nothing and tell the user, so a captured note is never silently
- * downgraded to an unstructured blob behind a "success" line. Retry when the
- * structurer is back.
+ * WHY a capture degraded. Two families, and the difference is the whole point:
+ *
+ *  • pod plumbing (`is_*`) — the structurer itself failed. Retrying is sensible.
+ *  • Intelligence Service extraction honesty (everything else) — the INPUT
+ *    could not be read. Several of these are PERMANENT CONFIGURATION states
+ *    (`vision_provider_not_configured`, `transcription_provider_not_configured`)
+ *    where "retry when it's back" is simply a lie: nothing is coming back.
+ *
+ * Open-ended (`string & {}`) because the IS owns this vocabulary and may add to
+ * it. An unknown value must humanize, never leak, never crash.
+ */
+export type DegradedReason = "is_auth_error" | "is_invalid_response" | "is_empty_result" | "llm_budget_exceeded" | "pdf_scanned_needs_ocr" | "pdf_missing_binary" | "vision_provider_not_configured" | "vision_provider_failed" | "image_missing_binary" | "transcription_provider_not_configured" | "audio_missing_binary" | "docx_missing_binary" | "docx_empty" | "html_empty" | "unsupported_type" | (string & {});
+/**
+ * One line of honest copy for a degraded reason: WHAT happened, and WHAT TO DO.
+ *
+ * ── Why this is a second table, deliberately ────────────────────────────────
+ * `@synap-core/capture-pipeline`'s `describeDegradedReason` is the existing
+ * one-door for this copy, and it is the RIGHT door — but the CLI is a separate
+ * pnpm workspace whose only Synap runtime dependencies are
+ * `@synap-core/hub-rest-client` (a file: link into synap-backend) and
+ * `@synap-core/workspace-templates`. It cannot reach a `synap-app` package
+ * without a package.json/lockfile change. Same reason the `StructureResult`
+ * mirror above is local.
+ *
+ * So: the `title` half is COPIED VERBATIM from `describeDegradedReason` and
+ * pinned by a parity test (`test/degraded-message-honesty.test.ts`) that reads
+ * the sibling repo's source, so the two can never drift on WHAT happened.
+ * The `detail` half is deliberately DIFFERENT, because the app's
+ * details end in "saved as a note in the meantime" and the CLI creates nothing
+ * at all — repeating the app's sentence here would be a new lie in place of the
+ * old one.
+ */
+export declare function describeDegradedReason(reason: DegradedReason | undefined): {
+    title: string;
+    detail: string;
+};
+/**
+ * The ONE degraded message. The CLI does NOT materialize the server's generic
+ * `item` stand-in (the browser does the same via `offlineFallback:false`), so a
+ * captured note is never silently downgraded to an unstructured blob behind a
+ * "success" line.
+ *
+ * It used to print a single sentence for every cause — "AI structuring
+ * unavailable (is_empty_result) — nothing was created. Retry when it's back."
+ * — which leaked a raw machine token AND told users to retry states that never
+ * change (a pod with no vision provider is not going to come back). Now each
+ * reason says what actually happened and what to do about it.
  */
 export declare function degradedMessage(res: StructureResult): string;