@tangle-network/braid 0.1.0

package/dist/bin/production-credential-reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-credential-reference.d.ts","sourceRoot":"","sources":["../../src/bin/production-credential-reference.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,mDAAmD,CAAA;AAGpG,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,QAAQ,CAAA;AAE9D,eAAO,MAAM,sCAAsC,EAAE,WAAW,CAC9D,2BAA2B,CAAC,uBAAuB,CAAC,CACV,CAAA;AAE5C,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,2BAA2B,CAAC,uBAAuB,CAAC,GAC7D,2BAA2B,CAI7B"}

package/dist/bin/production-credential-reference.js

@@ -0,0 +1,8 @@
+import { credentialRef } from '../ports/credentials.js';
+export const defaultProductionCredentialRefResolver = (ref) => credentialRef(`cred:v1:${ref}`);
+export function productionCredentialMapping(resolver) {
+    return resolver === undefined || resolver === defaultProductionCredentialRefResolver
+        ? 'default'
+        : 'custom';
+}
+//# sourceMappingURL=production-credential-reference.js.map

package/dist/bin/production-credential-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-credential-reference.js","sourceRoot":"","sources":["../../src/bin/production-credential-reference.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAIvD,MAAM,CAAC,MAAM,sCAAsC,GAE/C,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,WAAW,GAAG,EAAE,CAAC,CAAA;AAE5C,MAAM,UAAU,2BAA2B,CACzC,QAA8D;IAE9D,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,sCAAsC;QAClF,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAA;AACd,CAAC"}

package/dist/bin/production-key-path.d.ts

@@ -0,0 +1,7 @@
+export declare function productionConfigPath(workspace: string, configPath?: string): string;
+/**
+ * Resolves a database key from the protected Braid config directory.
+ * Relative values never use cwd or the agent workspace as their base.
+ */
+export declare function resolveProductionDatabaseKeyFile(keyFile: string, configPath: string, workspace: string): string;
+//# sourceMappingURL=production-key-path.d.ts.map

package/dist/bin/production-key-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-key-path.d.ts","sourceRoot":"","sources":["../../src/bin/production-key-path.ts"],"names":[],"mappings":"AAGA,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnF;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER"}

package/dist/bin/production-key-path.js

@@ -0,0 +1,13 @@
+import { dirname, join, resolve } from 'node:path';
+import { resolveHeadlessKeyPath } from '../adapters/credentials/headless-key.js';
+export function productionConfigPath(workspace, configPath) {
+    return resolve(configPath ?? join(workspace, '.braid', 'config.json'));
+}
+/**
+ * Resolves a database key from the protected Braid config directory.
+ * Relative values never use cwd or the agent workspace as their base.
+ */
+export function resolveProductionDatabaseKeyFile(keyFile, configPath, workspace) {
+    return resolveHeadlessKeyPath(keyFile, dirname(resolve(configPath)), resolve(workspace));
+}
+//# sourceMappingURL=production-key-path.js.map

package/dist/bin/production-key-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-key-path.js","sourceRoot":"","sources":["../../src/bin/production-key-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAA;AAEhF,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,UAAmB;IACzE,OAAO,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAA;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAC9C,OAAe,EACf,UAAkB,EAClB,SAAiB;IAEjB,OAAO,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAA;AAC1F,CAAC"}

package/dist/bin/production-profile-projection.d.ts

@@ -0,0 +1,12 @@
+import type { ProfileDiscoveryResult, ProfileRecord, ProfileSourceSpec } from '../app/profile-types.js';
+import type { BridgeModel } from './production-bridge-discovery.js';
+import type { ProductionStartupLoadOptions } from './production-startup.js';
+export interface ProfileProjection {
+    readonly profiles: readonly ProfileRecord[];
+    readonly diagnostics: readonly string[];
+    readonly initialProfileId?: ProfileRecord['id'];
+}
+export declare function trustedProfileSources(options: ProductionStartupLoadOptions): readonly ProfileSourceSpec[];
+/** Projects every trusted profile and every compatible live model. */
+export declare function projectSetupProfiles(options: ProductionStartupLoadOptions, endpoint: string, models: readonly BridgeModel[], discovered: ProfileDiscoveryResult): ProfileProjection;
+//# sourceMappingURL=production-profile-projection.d.ts.map

package/dist/bin/production-profile-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-profile-projection.d.ts","sourceRoot":"","sources":["../../src/bin/production-profile-projection.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EACb,iBAAiB,EAClB,MAAM,yBAAyB,CAAA;AAIhC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAA;AAS3E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAA;IAC3C,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAA;CAChD;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,4BAA4B,GACpC,SAAS,iBAAiB,EAAE,CAyB9B;AAqGD,sEAAsE;AACtE,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,4BAA4B,EACrC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,SAAS,WAAW,EAAE,EAC9B,UAAU,EAAE,sBAAsB,GACjC,iBAAiB,CAmGnB"}

package/dist/bin/production-profile-projection.js

@@ -0,0 +1,176 @@
+import { basename, join, resolve } from 'node:path';
+import { bridgeCatalogTarget, bridgeRunnerSupportsModel, materializeBridgeModelRoute, qualifyBridgeProfileModel, } from '../adapters/connections/cli-bridge-model-route.js';
+import { createProfileRecord, validateProfileShape } from '../app/profiles.js';
+import { compareCodeUnits } from '../domain/code-unit-order.js';
+import { redactSensitiveText } from '../domain/redaction.js';
+export function trustedProfileSources(options) {
+    if (options.profileReference !== undefined) {
+        const path = resolve(options.workspace, options.profileReference);
+        return [
+            {
+                kind: 'file',
+                path,
+                reference: path,
+                label: basename(path),
+                writable: false,
+                trusted: true,
+            },
+        ];
+    }
+    return [
+        join(options.workspace, '.braid', 'profile.json'),
+        join(options.workspace, 'braid.profile.json'),
+    ].map((path) => ({
+        kind: 'file',
+        path,
+        reference: path,
+        label: basename(path),
+        writable: false,
+        trusted: true,
+    }));
+}
+function compatibleModel(model) {
+    const candidate = bridgeCatalogTarget(model.id, model.backend);
+    if (candidate === undefined)
+        return undefined;
+    const profile = validateProfileShape({
+        name: 'Braid model candidate',
+        harness: candidate.runner,
+        model: { default: candidate.model, provider: candidate.provider },
+    });
+    if (!profile.ok || profile.profile?.harness === undefined)
+        return undefined;
+    return bridgeRunnerSupportsModel(profile.profile.harness, candidate.model) ? candidate : undefined;
+}
+function compatibleModels(models) {
+    const unique = new Map();
+    for (const advertised of models) {
+        const model = compatibleModel(advertised);
+        if (model === undefined)
+            continue;
+        const key = `${model.runner}\u0000${model.model}`;
+        unique.set(key, model);
+    }
+    return [...unique.values()].sort((left, right) => compareCodeUnits(`${left.route}\u0000${left.runner}`, `${right.route}\u0000${right.runner}`));
+}
+function hasRunnableTarget(profile) {
+    const model = profile.model?.default?.trim();
+    return (profile.harness !== undefined &&
+        profile.model?.provider !== undefined &&
+        profile.model.provider.trim().length > 0 &&
+        model !== undefined &&
+        model.length > 0 &&
+        bridgeRunnerSupportsModel(profile.harness, qualifyBridgeProfileModel(model, profile.model?.provider)));
+}
+function targetKey(profile) {
+    const runner = profile.harness;
+    const model = profile.model?.default?.trim();
+    const provider = profile.model?.provider?.trim();
+    if (runner === undefined ||
+        provider === undefined ||
+        provider.length === 0 ||
+        model === undefined ||
+        model.length === 0) {
+        return undefined;
+    }
+    return materializeBridgeModelRoute(runner, model, profile.model?.provider);
+}
+function generatedProfile(options, endpoint, candidate) {
+    const candidateProfile = {
+        name: `CLI Bridge · ${candidate.runner} · ${candidate.model}`,
+        description: `Advertised by the CLI Bridge model catalog at ${endpoint}.`,
+        harness: candidate.runner,
+        model: {
+            default: candidate.model,
+            provider: candidate.provider,
+            ...(options.effort === undefined ? {} : { reasoningEffort: options.effort }),
+        },
+    };
+    const validated = validateProfileShape(candidateProfile);
+    if (!validated.ok ||
+        validated.profile === undefined ||
+        validated.profile.harness === undefined ||
+        !bridgeRunnerSupportsModel(validated.profile.harness, candidate.model)) {
+        return undefined;
+    }
+    return createProfileRecord({
+        kind: 'inline',
+        reference: `braid:first-run-cli-bridge:${candidate.route}`,
+        label: 'Advertised CLI Bridge model',
+        writable: false,
+        trusted: true,
+    }, validated.profile);
+}
+function profileSort(left, right) {
+    return compareCodeUnits(`${left.displayName}\u0000${left.id}`, `${right.displayName}\u0000${right.id}`);
+}
+/** Projects every trusted profile and every compatible live model. */
+export function projectSetupProfiles(options, endpoint, models, discovered) {
+    const candidates = compatibleModels(models);
+    const explicitModel = options.model?.trim();
+    const explicitRunner = options.runner?.trim();
+    const matching = candidates.filter((candidate) => (explicitModel === undefined ||
+        candidate.route === explicitModel ||
+        candidate.model === explicitModel) &&
+        (explicitRunner === undefined || candidate.runner === explicitRunner));
+    const diagnostics = discovered.issues.map((issue) => redactSensitiveText(`${issue.source.label}: ${issue.issue.message}`, 512));
+    if (explicitModel !== undefined &&
+        !candidates.some((candidate) => candidate.route === explicitModel || candidate.model === explicitModel)) {
+        diagnostics.push(`Requested model ${explicitModel} was not advertised by the CLI Bridge at ${endpoint}; the full catalog remains available and any matching trusted profile will still be validated when selected`);
+    }
+    if (explicitRunner !== undefined &&
+        !candidates.some((candidate) => candidate.runner === explicitRunner)) {
+        diagnostics.push(`Requested runner ${explicitRunner} has no compatible advertised model at ${endpoint}; the full catalog remains available and any matching trusted profile will still be validated when selected`);
+    }
+    if ((explicitModel !== undefined || explicitRunner !== undefined) && matching.length === 0) {
+        diagnostics.push(`No advertised model matches the requested runner/model at ${endpoint}; choose a catalog entry or configure that bridge backend`);
+    }
+    const trusted = discovered.profiles.filter((record) => record.source.trusted).sort(profileSort);
+    const profiles = [...trusted];
+    for (const record of trusted) {
+        if (!hasRunnableTarget(record.profile)) {
+            diagnostics.push(`Trusted profile ${redactSensitiveText(record.displayName, 256)} has no compatible runner/model pair; selecting it will remain unavailable until it is configured`);
+        }
+    }
+    const knownTargets = new Set(trusted
+        .map((record) => targetKey(record.profile))
+        .filter((key) => key !== undefined));
+    for (const candidate of candidates) {
+        const generated = generatedProfile(options, endpoint, candidate);
+        if (generated === undefined) {
+            diagnostics.push(`Advertised model ${candidate.route} could not be represented by the installed agent-interface package; it was not offered`);
+            continue;
+        }
+        const key = targetKey(generated.profile);
+        if (key !== undefined && knownTargets.has(key))
+            continue;
+        if (key !== undefined)
+            knownTargets.add(key);
+        profiles.push(generated);
+    }
+    profiles.sort(profileSort);
+    const explicitProfileMatches = profiles.filter((record) => {
+        const model = record.profile.model?.default;
+        return ((explicitModel === undefined ||
+            model === explicitModel ||
+            targetKey(record.profile) === explicitModel) &&
+            (explicitRunner === undefined || record.profile.harness === explicitRunner));
+    });
+    const initialCandidate = matching[0];
+    const initial = (initialCandidate === undefined
+        ? undefined
+        : profiles.find((record) => record.profile.harness === initialCandidate.runner &&
+            targetKey(record.profile) === initialCandidate.route)) ?? explicitProfileMatches[0];
+    if (profiles.length === 0) {
+        diagnostics.push(`No trusted AgentProfile or compatible advertised model was discovered at ${endpoint}; configure a profile or start a ready CLI Bridge backend`);
+    }
+    else if (!profiles.some((record) => hasRunnableTarget(record.profile))) {
+        diagnostics.push(`No runnable runner/model pair was discovered at ${endpoint}; choose a live advertised model or repair a trusted profile before applying setup`);
+    }
+    return {
+        profiles,
+        diagnostics,
+        ...(initial === undefined ? {} : { initialProfileId: initial.id }),
+    };
+}
+//# sourceMappingURL=production-profile-projection.js.map

package/dist/bin/production-profile-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-profile-projection.js","sourceRoot":"","sources":["../../src/bin/production-profile-projection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnD,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,mDAAmD,CAAA;AAM1D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAiB5D,MAAM,UAAU,qBAAqB,CACnC,OAAqC;IAErC,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACjE,OAAO;YACL;gBACE,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC;gBACrB,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,IAAI;aACd;SACF,CAAA;IACH,CAAC;IACD,OAAO;QACL,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC;KAC9C,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACf,IAAI,EAAE,MAAe;QACrB,IAAI;QACJ,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC;QACrB,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;KACd,CAAC,CAAC,CAAA;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAkB;IACzC,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAC9D,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC7C,MAAM,OAAO,GAAG,oBAAoB,CAAC;QACnC,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,SAAS,CAAC,MAAM;QACzB,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;KAClE,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3E,OAAO,yBAAyB,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;AACpG,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA8B;IACtD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAA;IACvD,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,CAAA;QACzC,IAAI,KAAK,KAAK,SAAS;YAAE,SAAQ;QACjC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,SAAS,KAAK,CAAC,KAAK,EAAE,CAAA;QACjD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/C,gBAAgB,CAAC,GAAG,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,KAAK,SAAS,KAAK,CAAC,MAAM,EAAE,CAAC,CAC7F,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA+B;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC5C,OAAO,CACL,OAAO,CAAC,OAAO,KAAK,SAAS;QAC7B,OAAO,CAAC,KAAK,EAAE,QAAQ,KAAK,SAAS;QACrC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACxC,KAAK,KAAK,SAAS;QACnB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,yBAAyB,CACvB,OAAO,CAAC,OAAO,EACf,yBAAyB,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAC1D,CACF,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAA+B;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAA;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IAChD,IACE,MAAM,KAAK,SAAS;QACpB,QAAQ,KAAK,SAAS;QACtB,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,KAAK,KAAK,SAAS;QACnB,KAAK,CAAC,MAAM,KAAK,CAAC,EAClB,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,2BAA2B,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAqC,EACrC,QAAgB,EAChB,SAAgC;IAEhC,MAAM,gBAAgB,GAAG;QACvB,IAAI,EAAE,gBAAgB,SAAS,CAAC,MAAM,MAAM,SAAS,CAAC,KAAK,EAAE;QAC7D,WAAW,EAAE,iDAAiD,QAAQ,GAAG;QACzE,OAAO,EAAE,SAAS,CAAC,MAAM;QACzB,KAAK,EAAE;YACL,OAAO,EAAE,SAAS,CAAC,KAAK;YACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SAC7E;KACF,CAAA;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;IACxD,IACE,CAAC,SAAS,CAAC,EAAE;QACb,SAAS,CAAC,OAAO,KAAK,SAAS;QAC/B,SAAS,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;QACvC,CAAC,yBAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,EACtE,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,mBAAmB,CACxB;QACE,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,8BAA8B,SAAS,CAAC,KAAK,EAAE;QAC1D,KAAK,EAAE,6BAA6B;QACpC,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,IAAI;KACd,EACD,SAAS,CAAC,OAAO,CAClB,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAmB,EAAE,KAAoB;IAC5D,OAAO,gBAAgB,CACrB,GAAG,IAAI,CAAC,WAAW,SAAS,IAAI,CAAC,EAAE,EAAE,EACrC,GAAG,KAAK,CAAC,WAAW,SAAS,KAAK,CAAC,EAAE,EAAE,CACxC,CAAA;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAClC,OAAqC,EACrC,QAAgB,EAChB,MAA8B,EAC9B,UAAkC;IAElC,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IAC3C,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAA;IAC3C,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;IAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAChC,CAAC,SAAS,EAAE,EAAE,CACZ,CAAC,aAAa,KAAK,SAAS;QAC1B,SAAS,CAAC,KAAK,KAAK,aAAa;QACjC,SAAS,CAAC,KAAK,KAAK,aAAa,CAAC;QACpC,CAAC,cAAc,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,cAAc,CAAC,CACxE,CAAA;IACD,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAClD,mBAAmB,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAC1E,CAAA;IACD,IACE,aAAa,KAAK,SAAS;QAC3B,CAAC,UAAU,CAAC,IAAI,CACd,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,aAAa,IAAI,SAAS,CAAC,KAAK,KAAK,aAAa,CACtF,EACD,CAAC;QACD,WAAW,CAAC,IAAI,CACd,mBAAmB,aAAa,4CAA4C,QAAQ,6GAA6G,CAClM,CAAA;IACH,CAAC;IACD,IACE,cAAc,KAAK,SAAS;QAC5B,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,cAAc,CAAC,EACpE,CAAC;QACD,WAAW,CAAC,IAAI,CACd,oBAAoB,cAAc,0CAA0C,QAAQ,6GAA6G,CAClM,CAAA;IACH,CAAC;IACD,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3F,WAAW,CAAC,IAAI,CACd,6DAA6D,QAAQ,2DAA2D,CACjI,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC/F,MAAM,QAAQ,GAAoB,CAAC,GAAG,OAAO,CAAC,CAAA;IAC9C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,WAAW,CAAC,IAAI,CACd,mBAAmB,mBAAmB,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,mGAAmG,CACnK,CAAA;QACH,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,OAAO;SACJ,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;SAC1C,MAAM,CAAC,CAAC,GAAG,EAAiB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CACrD,CAAA;IACD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAA;QAChE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,WAAW,CAAC,IAAI,CACd,oBAAoB,SAAS,CAAC,KAAK,wFAAwF,CAC5H,CAAA;YACD,SAAQ;QACV,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACxC,IAAI,GAAG,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QACxD,IAAI,GAAG,KAAK,SAAS;YAAE,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC5C,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC1B,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAE1B,MAAM,sBAAsB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAA;QAC3C,OAAO,CACL,CAAC,aAAa,KAAK,SAAS;YAC1B,KAAK,KAAK,aAAa;YACvB,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC;YAC9C,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,cAAc,CAAC,CAC5E,CAAA;IACH,CAAC,CAAC,CAAA;IACF,MAAM,gBAAgB,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;IACpC,MAAM,OAAO,GACX,CAAC,gBAAgB,KAAK,SAAS;QAC7B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAC,IAAI,CACX,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,OAAO,CAAC,OAAO,KAAK,gBAAgB,CAAC,MAAM;YAClD,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,gBAAgB,CAAC,KAAK,CACvD,CAAC,IAAI,sBAAsB,CAAC,CAAC,CAAC,CAAA;IACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,WAAW,CAAC,IAAI,CACd,4EAA4E,QAAQ,2DAA2D,CAChJ,CAAA;IACH,CAAC;SAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACzE,WAAW,CAAC,IAAI,CACd,mDAAmD,QAAQ,oFAAoF,CAChJ,CAAA;IACH,CAAC;IACD,OAAO;QACL,QAAQ;QACR,WAAW;QACX,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;KACnE,CAAA;AACH,CAAC"}

package/dist/bin/production-setup-credentials.d.ts

@@ -0,0 +1,27 @@
+import type { ConfigurationSelection } from '../app/configuration-session.js';
+import type { ConnectionRecord } from '../domain/entities.js';
+import { createCredentialRefId } from '../domain/ids.js';
+import type { CredentialPort } from '../ports/credentials.js';
+import type { ProductionCredentialContext } from './production-credential-context.js';
+import type { ProductionStartupLoadOptions } from './production-setup-types.js';
+export interface PreparedProductionSelection {
+    readonly selection: ConfigurationSelection;
+    readonly startupOptions: ProductionStartupLoadOptions;
+    /** Removes a credential written for a transition that did not commit. */
+    readonly rollback: () => Promise<void>;
+    /** Removes the crash-recovery marker after the new config is active. */
+    readonly commit: () => Promise<void>;
+}
+export declare function productionConnectionNeedsCredential(options: ProductionStartupLoadOptions, connection: ConnectionRecord): boolean;
+/** Reclaims an unfinished credential write without exposing credential data. */
+export declare function recoverPendingProductionCredential(configPath: string, options?: {
+    readonly credentialStore?: CredentialPort;
+    readonly credentialContext?: ProductionCredentialContext;
+}): Promise<void>;
+/**
+ * Moves one explicit connection token into secure storage before validation.
+ * The returned startup options deliberately omit the token and resolve the
+ * selected connection through its durable Braid credential id.
+ */
+export declare function prepareProductionSelection(options: ProductionStartupLoadOptions, selection: ConfigurationSelection, configPath: string, suppliedCredential?: Uint8Array, suppliedCredentialId?: ReturnType<typeof createCredentialRefId>): Promise<PreparedProductionSelection>;
+//# sourceMappingURL=production-setup-credentials.d.ts.map

package/dist/bin/production-setup-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-setup-credentials.d.ts","sourceRoot":"","sources":["../../src/bin/production-setup-credentials.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAA;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,yBAAyB,CAAA;AAE5E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAA;AAGrF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAA;AAiB/E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAA;IAC1C,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAA;IACrD,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CACrC;AAED,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,4BAA4B,EACrC,UAAU,EAAE,gBAAgB,GAC3B,OAAO,CAST;AAiHD,gFAAgF;AAChF,wBAAsB,kCAAkC,CACtD,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE;IACP,QAAQ,CAAC,eAAe,CAAC,EAAE,cAAc,CAAA;IACzC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,CAAA;CACpD,GACL,OAAO,CAAC,IAAI,CAAC,CA8Bf;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,4BAA4B,EACrC,SAAS,EAAE,sBAAsB,EACjC,UAAU,EAAE,MAAM,EAClB,kBAAkB,CAAC,EAAE,UAAU,EAC/B,oBAAoB,CAAC,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,GAC9D,OAAO,CAAC,2BAA2B,CAAC,CA8ItC"}

package/dist/bin/production-setup-credentials.js

@@ -0,0 +1,280 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { canonicalCandidateJson } from '../adapters/agent-interface/profile-runtime.js';
+import { isLoopbackEndpoint } from '../adapters/connections/production-connection-endpoints.js';
+import { createOperatingSystemCredentialStore } from '../adapters/credentials/os.js';
+import { assertNoSymlinkPath, assertSafeDirectory, readNoFollow, removePrivateFile, writePrivateFile, } from '../adapters/persistence/safe-file.js';
+import { createCredentialRefId } from '../domain/ids.js';
+import { credentialRef } from '../ports/credentials.js';
+import { defaultProductionCredentialRefResolver } from './production-credential-reference.js';
+import { resolveProductionDatabaseKeyFile } from './production-key-path.js';
+const MAX_PENDING_CREDENTIAL_BYTES = 16 * 1024;
+export function productionConnectionNeedsCredential(options, connection) {
+    if (connection.credentialRef !== undefined)
+        return false;
+    if (connection.kind === 'cli-bridge') {
+        return (!isLoopbackEndpoint(connection.endpoint ?? connection.providerOptions.endpoint ?? '') &&
+            (options.bridgeAuth === undefined || options.bridgeAuth.trim().length === 0));
+    }
+    return options.tangleAuth === undefined || options.tangleAuth.trim().length === 0;
+}
+function credentialStoreError(message, cause) {
+    return new Error(message, cause === undefined ? undefined : { cause });
+}
+function noCredentialRollback() {
+    return async () => undefined;
+}
+function noCredentialCommit() {
+    return async () => undefined;
+}
+function pendingCredentialPath(configPath) {
+    return `${resolve(configPath)}.pending-credential`;
+}
+function parsePendingCredentialMarker(bytes, path) {
+    let parsed;
+    try {
+        parsed = JSON.parse(bytes.toString('utf8'));
+    }
+    catch (error) {
+        throw new Error(`The pending connection credential marker is not valid JSON: ${path}`, {
+            cause: error,
+        });
+    }
+    if (parsed === null ||
+        typeof parsed !== 'object' ||
+        Array.isArray(parsed) ||
+        parsed.format !== 'braid-pending-connection-credential' ||
+        parsed.schemaVersion !== 1) {
+        throw new Error(`The pending connection credential marker has an unsupported format: ${path}`);
+    }
+    const candidate = parsed;
+    if (typeof candidate.connectionId !== 'string' ||
+        typeof candidate.credentialId !== 'string' ||
+        typeof candidate.portRef !== 'string') {
+        throw new Error(`The pending connection credential marker is incomplete: ${path}`);
+    }
+    let credentialId;
+    let portRef;
+    try {
+        credentialId = createCredentialRefId(candidate.credentialId);
+        portRef = credentialRef(candidate.portRef);
+    }
+    catch (error) {
+        throw new Error(`The pending connection credential marker contains invalid references: ${path}`, {
+            cause: error,
+        });
+    }
+    return {
+        format: 'braid-pending-connection-credential',
+        schemaVersion: 1,
+        connectionId: candidate.connectionId,
+        credentialId,
+        portRef,
+    };
+}
+function configContainsCredential(configPath, marker) {
+    const bytes = readNoFollow(configPath, 2 * 1024 * 1024);
+    if (bytes === undefined)
+        return false;
+    try {
+        const parsed = JSON.parse(bytes.toString('utf8'));
+        if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed))
+            return false;
+        const connections = parsed.connections;
+        if (!Array.isArray(connections))
+            return false;
+        return connections.some((record) => {
+            if (record === null || typeof record !== 'object' || Array.isArray(record))
+                return false;
+            const candidate = record;
+            return candidate.id === marker.connectionId && candidate.credentialRef === marker.credentialId;
+        });
+    }
+    catch {
+        return false;
+    }
+}
+async function removePendingMarker(path, bytes) {
+    const current = readNoFollow(path, MAX_PENDING_CREDENTIAL_BYTES);
+    if (current?.equals(bytes))
+        removePrivateFile(path);
+}
+async function writePendingCredentialMarker(configPath, marker) {
+    const target = pendingCredentialPath(configPath);
+    const directory = dirname(target);
+    assertNoSymlinkPath(directory);
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    assertNoSymlinkPath(directory);
+    assertSafeDirectory(directory);
+    const bytes = Buffer.from(`${canonicalCandidateJson(marker)}\n`, 'utf8');
+    writePrivateFile(target, bytes);
+    let finished = false;
+    const cleanup = async () => {
+        if (finished)
+            return;
+        await removePendingMarker(target, bytes);
+        finished = true;
+    };
+    return {
+        commit: cleanup,
+        rollback: cleanup,
+    };
+}
+/** Reclaims an unfinished credential write without exposing credential data. */
+export async function recoverPendingProductionCredential(configPath, options = {}) {
+    const target = pendingCredentialPath(configPath);
+    const bytes = readNoFollow(target, MAX_PENDING_CREDENTIAL_BYTES);
+    if (bytes === undefined)
+        return;
+    const marker = parsePendingCredentialMarker(bytes, target);
+    if (configContainsCredential(configPath, marker)) {
+        await removePendingMarker(target, bytes);
+        return;
+    }
+    let store;
+    try {
+        store =
+            options.credentialStore ??
+                options.credentialContext?.store ??
+                createOperatingSystemCredentialStore();
+    }
+    catch (error) {
+        throw credentialStoreError('An unfinished connection credential write needs recovery, but no secure operating-system credential store is available; unlock or configure it before continuing', error);
+    }
+    try {
+        await store.remove(marker.portRef);
+    }
+    catch (error) {
+        throw credentialStoreError('An unfinished connection credential write could not be removed from the secure operating-system credential store; unlock it and retry', error);
+    }
+    await removePendingMarker(target, bytes);
+}
+/**
+ * Moves one explicit connection token into secure storage before validation.
+ * The returned startup options deliberately omit the token and resolve the
+ * selected connection through its durable Braid credential id.
+ */
+export async function prepareProductionSelection(options, selection, configPath, suppliedCredential, suppliedCredentialId) {
+    await recoverPendingProductionCredential(configPath, {
+        ...(options.credentialStore === undefined ? {} : { credentialStore: options.credentialStore }),
+        ...(options.credentialContext === undefined
+            ? {}
+            : { credentialContext: options.credentialContext }),
+    });
+    const preparedOptions = options.databaseKeyFile === undefined
+        ? options
+        : {
+            ...options,
+            databaseKeyFile: resolveProductionDatabaseKeyFile(options.databaseKeyFile, configPath, options.workspace),
+        };
+    const configuredAuth = selection.connection.kind === 'cli-bridge'
+        ? preparedOptions.bridgeAuth
+        : preparedOptions.tangleAuth;
+    const hasSuppliedCredential = suppliedCredential !== undefined && suppliedCredential.length > 0;
+    const hasConfiguredAuth = configuredAuth !== undefined && configuredAuth.trim().length > 0;
+    if (!hasSuppliedCredential && !hasConfiguredAuth) {
+        if (productionConnectionNeedsCredential(preparedOptions, selection.connection)) {
+            throw new Error(`${selection.connection.name} requires a credential; enter it in setup or set ${selection.connection.kind === 'cli-bridge' ? 'BRAID_CLI_BRIDGE_AUTH' : 'BRAID_TANGLE_AUTH'}`);
+        }
+        return {
+            selection,
+            startupOptions: preparedOptions,
+            rollback: noCredentialRollback(),
+            commit: noCredentialCommit(),
+        };
+    }
+    let store;
+    try {
+        store =
+            preparedOptions.credentialStore ??
+                preparedOptions.credentialContext?.store ??
+                createOperatingSystemCredentialStore();
+    }
+    catch (error) {
+        throw credentialStoreError('Connection authentication was supplied, but no secure operating-system credential store is available; unlock or configure the credential store before setup', error);
+    }
+    let available;
+    try {
+        available = await store.available();
+    }
+    catch (error) {
+        throw credentialStoreError('Connection authentication was supplied, but the secure operating-system credential store could not be checked; unlock or configure it before setup', error);
+    }
+    if (!available) {
+        throw new Error('Connection authentication was supplied, but the secure operating-system credential store is unavailable; unlock or configure it before setup');
+    }
+    const credentialId = suppliedCredentialId ??
+        createCredentialRefId(`credential-${selection.connection.kind}-${randomUUID()}`);
+    const portRef = credentialRef(`cred:v1:${credentialId}`);
+    const pending = await writePendingCredentialMarker(configPath, {
+        format: 'braid-pending-connection-credential',
+        schemaVersion: 1,
+        connectionId: selection.connection.id,
+        credentialId,
+        portRef,
+    });
+    const secret = hasSuppliedCredential
+        ? Buffer.from(suppliedCredential)
+        : Buffer.from(configuredAuth ?? '', 'utf8');
+    try {
+        try {
+            const storedRef = await store.store({
+                ref: portRef,
+                value: secret,
+                label: `Braid ${selection.connection.name} authentication`,
+            });
+            if (storedRef !== portRef) {
+                await store.remove(storedRef).catch(() => undefined);
+                await store.remove(portRef).catch(() => undefined);
+                throw new Error('The secure credential store returned a different credential reference');
+            }
+        }
+        catch (error) {
+            await store.remove(portRef).catch(() => undefined);
+            await pending.rollback().catch(() => undefined);
+            throw credentialStoreError('Connection authentication could not be saved in the secure operating-system credential store; setup was not applied', error);
+        }
+    }
+    finally {
+        secret.fill(0);
+    }
+    const { bridgeAuth: ignoredBridgeAuth, tangleAuth: ignoredTangleAuth, ...optionsWithoutAuth } = preparedOptions;
+    void ignoredBridgeAuth;
+    void ignoredTangleAuth;
+    const suppliedResolver = preparedOptions.credentialRefResolver;
+    const startupOptions = {
+        ...optionsWithoutAuth,
+        credentialStore: store,
+        credentialRefResolver: async (ref) => {
+            if (ref === credentialId)
+                return portRef;
+            if (suppliedResolver !== undefined)
+                return suppliedResolver(ref);
+            return defaultProductionCredentialRefResolver(ref);
+        },
+    };
+    const preparedSelection = {
+        ...selection,
+        connection: {
+            ...selection.connection,
+            credentialRef: credentialId,
+        },
+    };
+    let rolledBack = false;
+    return {
+        selection: preparedSelection,
+        startupOptions,
+        rollback: async () => {
+            if (rolledBack)
+                return;
+            await store.remove(portRef);
+            await pending.rollback();
+            rolledBack = true;
+        },
+        commit: async () => {
+            await pending.commit().catch(() => undefined);
+        },
+    };
+}
+//# sourceMappingURL=production-setup-credentials.js.map

package/dist/bin/production-setup-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-setup-credentials.js","sourceRoot":"","sources":["../../src/bin/production-setup-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAA;AACxC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gDAAgD,CAAA;AACvF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4DAA4D,CAAA;AAC/F,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAA;AACpF,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,sCAAsC,CAAA;AAG7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAA;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEvD,OAAO,EAAE,sCAAsC,EAAE,MAAM,sCAAsC,CAAA;AAC7F,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAA;AAG3E,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAA;AAwB9C,MAAM,UAAU,mCAAmC,CACjD,OAAqC,EACrC,UAA4B;IAE5B,IAAI,UAAU,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACxD,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACrC,OAAO,CACL,CAAC,kBAAkB,CAAC,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,eAAe,CAAC,QAAQ,IAAI,EAAE,CAAC;YACrF,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAC7E,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAA;AACnF,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,KAAe;IAC5D,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACxE,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,KAAK,IAAI,EAAE,CAAC,SAAS,CAAA;AAC9B,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,KAAK,IAAI,EAAE,CAAC,SAAS,CAAA;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB;IAC/C,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,qBAAqB,CAAA;AACpD,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAa,EAAE,IAAY;IAC/D,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,+DAA+D,IAAI,EAAE,EAAE;YACrF,KAAK,EAAE,KAAK;SACb,CAAC,CAAA;IACJ,CAAC;IACD,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACpB,MAAwC,CAAC,MAAM,KAAK,qCAAqC;QACzF,MAA+C,CAAC,aAAa,KAAK,CAAC,EACpE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uEAAuE,IAAI,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,MAAM,SAAS,GAAG,MAAiC,CAAA;IACnD,IACE,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;QAC1C,OAAO,SAAS,CAAC,YAAY,KAAK,QAAQ;QAC1C,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,EAAE,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,YAAsD,CAAA;IAC1D,IAAI,OAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,YAAY,GAAG,qBAAqB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QAC5D,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,yEAAyE,IAAI,EAAE,EAC/E;YACE,KAAK,EAAE,KAAK;SACb,CACF,CAAA;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,qCAAqC;QAC7C,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,YAAY;QACZ,OAAO;KACR,CAAA;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,UAAkB,EAAE,MAA+B;IACnF,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAA;IACvD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1D,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAA;QACxF,MAAM,WAAW,GAAI,MAA6C,CAAC,WAAW,CAAA;QAC9E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAA;QAC7C,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACjC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAA;YACxF,MAAM,SAAS,GAAG,MAAqE,CAAA;YACvF,OAAO,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,IAAI,SAAS,CAAC,aAAa,KAAK,MAAM,CAAC,YAAY,CAAA;QAChG,CAAC,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa;IAC5D,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAA;IAChE,IAAI,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC;QAAE,iBAAiB,CAAC,IAAI,CAAC,CAAA;AACrD,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,UAAkB,EAClB,MAA+B;IAE/B,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACjC,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAC9B,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxD,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAC9B,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACxE,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IAC/B,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,QAAQ;YAAE,OAAM;QACpB,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACxC,QAAQ,GAAG,IAAI,CAAA;IACjB,CAAC,CAAA;IACD,OAAO;QACL,MAAM,EAAE,OAAO;QACf,QAAQ,EAAE,OAAO;KAClB,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,UAAkB,EAClB,OAAO,GAGH,EAAE;IAEN,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAA;IAChD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAA;IAChE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAM;IAC/B,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;IAC1D,IAAI,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;QACjD,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACxC,OAAM;IACR,CAAC;IACD,IAAI,KAAqB,CAAA;IACzB,IAAI,CAAC;QACH,KAAK;YACH,OAAO,CAAC,eAAe;gBACvB,OAAO,CAAC,iBAAiB,EAAE,KAAK;gBAChC,oCAAoC,EAAE,CAAA;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,oBAAoB,CACxB,kKAAkK,EAClK,KAAK,CACN,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,oBAAoB,CACxB,uIAAuI,EACvI,KAAK,CACN,CAAA;IACH,CAAC;IACD,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAqC,EACrC,SAAiC,EACjC,UAAkB,EAClB,kBAA+B,EAC/B,oBAA+D;IAE/D,MAAM,kCAAkC,CAAC,UAAU,EAAE;QACnD,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;QAC9F,GAAG,CAAC,OAAO,CAAC,iBAAiB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;KACtD,CAAC,CAAA;IACF,MAAM,eAAe,GACnB,OAAO,CAAC,eAAe,KAAK,SAAS;QACnC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC;YACE,GAAG,OAAO;YACV,eAAe,EAAE,gCAAgC,CAC/C,OAAO,CAAC,eAAe,EACvB,UAAU,EACV,OAAO,CAAC,SAAS,CAClB;SACF,CAAA;IACP,MAAM,cAAc,GAClB,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,YAAY;QACxC,CAAC,CAAC,eAAe,CAAC,UAAU;QAC5B,CAAC,CAAC,eAAe,CAAC,UAAU,CAAA;IAChC,MAAM,qBAAqB,GAAG,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAA;IAC/F,MAAM,iBAAiB,GAAG,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;IAC1F,IAAI,CAAC,qBAAqB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACjD,IAAI,mCAAmC,CAAC,eAAe,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CACb,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,oDAC1B,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,mBACzE,EAAE,CACH,CAAA;QACH,CAAC;QACD,OAAO;YACL,SAAS;YACT,cAAc,EAAE,eAAe;YAC/B,QAAQ,EAAE,oBAAoB,EAAE;YAChC,MAAM,EAAE,kBAAkB,EAAE;SAC7B,CAAA;IACH,CAAC;IACD,IAAI,KAAqB,CAAA;IACzB,IAAI,CAAC;QACH,KAAK;YACH,eAAe,CAAC,eAAe;gBAC/B,eAAe,CAAC,iBAAiB,EAAE,KAAK;gBACxC,oCAAoC,EAAE,CAAA;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,oBAAoB,CACxB,6JAA6J,EAC7J,KAAK,CACN,CAAA;IACH,CAAC;IACD,IAAI,SAAkB,CAAA;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAA;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,oBAAoB,CACxB,oJAAoJ,EACpJ,KAAK,CACN,CAAA;IACH,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,8IAA8I,CAC/I,CAAA;IACH,CAAC;IAED,MAAM,YAAY,GAChB,oBAAoB;QACpB,qBAAqB,CAAC,cAAc,SAAS,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,EAAE,EAAE,CAAC,CAAA;IAClF,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,YAAY,EAAE,CAAC,CAAA;IACxD,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,UAAU,EAAE;QAC7D,MAAM,EAAE,qCAAqC;QAC7C,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE;QACrC,YAAY;QACZ,OAAO;KACR,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,qBAAqB;QAClC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,EAAE,MAAM,CAAC,CAAA;IAC7C,IAAI,CAAC;QACH,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;gBAClC,GAAG,EAAE,OAAO;gBACZ,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,SAAS,SAAS,CAAC,UAAU,CAAC,IAAI,iBAAiB;aAC3D,CAAC,CAAA;YACF,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;gBAC1B,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACpD,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBAClD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC/C,MAAM,oBAAoB,CACxB,qHAAqH,EACrH,KAAK,CACN,CAAA;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChB,CAAC;IAED,MAAM,EACJ,UAAU,EAAE,iBAAiB,EAC7B,UAAU,EAAE,iBAAiB,EAC7B,GAAG,kBAAkB,EACtB,GAAG,eAAe,CAAA;IACnB,KAAK,iBAAiB,CAAA;IACtB,KAAK,iBAAiB,CAAA;IACtB,MAAM,gBAAgB,GAAG,eAAe,CAAC,qBAAqB,CAAA;IAC9D,MAAM,cAAc,GAAiC;QACnD,GAAG,kBAAkB;QACrB,eAAe,EAAE,KAAK;QACtB,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACnC,IAAI,GAAG,KAAK,YAAY;gBAAE,OAAO,OAAO,CAAA;YACxC,IAAI,gBAAgB,KAAK,SAAS;gBAAE,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAA;YAChE,OAAO,sCAAsC,CAAC,GAAG,CAAC,CAAA;QACpD,CAAC;KACF,CAAA;IACD,MAAM,iBAAiB,GAA2B;QAChD,GAAG,SAAS;QACZ,UAAU,EAAE;YACV,GAAG,SAAS,CAAC,UAAU;YACvB,aAAa,EAAE,YAAY;SAC5B;KACF,CAAA;IACD,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,OAAO;QACL,SAAS,EAAE,iBAAiB;QAC5B,cAAc;QACd,QAAQ,EAAE,KAAK,IAAI,EAAE;YACnB,IAAI,UAAU;gBAAE,OAAM;YACtB,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;YAC3B,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAA;YACxB,UAAU,GAAG,IAAI,CAAA;QACnB,CAAC;QACD,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC/C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/bin/production-setup-discovery.d.ts

@@ -0,0 +1,6 @@
+import type { ProductionStartupSetup } from './production-setup-types.js';
+import { type ProductionStartupLoadOptions } from './production-startup.js';
+export declare const DEFAULT_CLI_BRIDGE_ENDPOINT = "http://127.0.0.1:3344";
+/** Composes first-run setup from independently bounded bridge and profile services. */
+export declare function loadProductionSetup(options: ProductionStartupLoadOptions): Promise<ProductionStartupSetup>;
+//# sourceMappingURL=production-setup-discovery.d.ts.map

package/dist/bin/production-setup-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production-setup-discovery.d.ts","sourceRoot":"","sources":["../../src/bin/production-setup-discovery.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,EAA0B,KAAK,4BAA4B,EAAE,MAAM,yBAAyB,CAAA;AAEnG,eAAO,MAAM,2BAA2B,0BAA0B,CAAA;AAqElE,uFAAuF;AACvF,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,sBAAsB,CAAC,CAsDjC"}