npm - @task-handoff/node-agent - Versions diffs - 0.0.29 → 0.0.31 - Mend

@task-handoff/node-agent 0.0.29 → 0.0.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/dist/cli.js CHANGED Viewed

	@@ -1 +1 @@
1	- "use strict";var e=require("commander"),t=require("node:fs"),n=require("node:path"),i=require("node:http"),s=require("node:url"),o=require("fastify"),r=require("@fastify/websocket"),a=require("zod"),c=require("node:os"),d=require("node:crypto"),l=require("node:child_process"),u=require("node-pty"),p=require("ws"),m=require("node:net"),h=require("node:stream"),g=require("node:fs/promises"),f=require("node:stream/promises"),y=require("tar"),I=require("write-file-atomic"),A=require("node:async_hooks"),_=require("drizzle-orm"),E=require("drizzle-orm/sqlite-core"),T=require("node:sqlite"),b=require("drizzle-orm/node-sqlite"),w=require("semver"),S=require("cron-parser"),v=require("node:readline/promises"),N=require("node:process"),O="undefined"!=typeof document?document.currentScript:null;function z(e,n){try{const i=JSON.parse(t.readFileSync(e,"utf8"));if(n&&i.name!==n)return;return"string"==typeof i.version&&i.version.trim()?i.version.trim():void 0}catch{return}}function C(e){if(e)try{return n.dirname(t.realpathSync(e))}catch{return}}function R(e,t=process.env,i=e){const s=t.TASK_HANDOFF_VERSION?.trim();if(s)return s;const o=i.split("/").at(-1),r=process.argv[1]?n.resolve(process.argv[1]):void 0,a=r?n.dirname(r):void 0,c=[C(r),a,process.cwd()].filter(e=>Boolean(e));for(const t of new Set(c)){let i=t;for(;;){const t=z(n.join(i,"package.json"),e);if(t)return t;const s=n.dirname(i);if(s===i)break;i=s}}let d;for(const e of new Set(c)){let t=e;for(;;){if(o){const e=z(n.join(t,"packages",o,"package.json"),i);if(e)return e}d\|\|=z(n.join(t,"package.json"));const e=n.dirname(t);if(e===t)break;t=e}}return d\|\|"unknown"}const x={perMessageDeflate:{threshold:256,serverNoContextTakeover:!0,clientNoContextTakeover:!0,concurrencyLimit:4,zlibDeflateOptions:{level:1}}};function k(e){return e.readyState===(e.OPEN??1)}function D(e){const t=Buffer.isBuffer(e)?e.toString("utf8"):"string"==typeof e?e:"";if(Buffer.byteLength(t,"utf8")<=123)return t;let n="";for(const e of t){const t=`${n}${e}`;if(Buffer.byteLength(t,"utf8")>123)break;n=t}return n}function P(e){if("number"==typeof e&&Number.isInteger(e))return e>=3e3&&e<=4999\|\|e>=1e3&&e<=1014&&1004!==e&&1005!==e&&1006!==e?e:void 0}function L(e,t,n){e.close(P(t),D(n)\|\|void 0)}function M(e,t,n,i){if(k(e))for(const e of t.splice(0))if(i(e),!n(e))return}function j(e,t,n={}){const i=n.pendingFrameLimit??256,s=n.maxFrameBytes??8388608,o=n.maxTotalBytes??1073741824,r=n.maxBufferedBytes??16777216;let a=!1,c=k(t);const d=[],l=[];let u,p=0,m=0,h=0;const g=e=>Buffer.isBuffer(e)\|\|e instanceof ArrayBuffer\|\|ArrayBuffer.isView(e)?e.byteLength:Buffer.byteLength("string"==typeof e?e:String(e),"utf8"),f=(i,r)=>{const a=g(r);return h+=a,n.onFrame?.(i,a),!(a>s\|\|h>o)\|\|(L(e,1009,"WebSocket bridge traffic limit exceeded."),L(t,1009,"WebSocket bridge traffic limit exceeded."),!1)},y=()=>{u&&(clearTimeout(u),u=void 0)},I=(n,i)=>{const s=i.bytes;if((n.bufferedAmount??0)+s>r)return L(e,1013,"WebSocket bridge consumer is too slow."),L(t,1013,"WebSocket bridge consumer is too slow."),!1;try{return function(e,t){e.send(t.data,{binary:t.isBinary,compress:!1})}(n,i),!0}catch{return L(e,1011,"WebSocket bridge send failed."),L(t,1011,"WebSocket bridge send failed."),!1}},A=(n,s,o)=>{if(s.length>=i)return L(e,1011,"WebSocket bridge pending frame limit exceeded."),void L(t,1011,"WebSocket bridge pending frame limit exceeded.");const a="upstream"===n?p:m;if((("upstream"===n?t:e).bufferedAmount??0)+a+o.bytes>r)return L(e,1013,"WebSocket bridge consumer is too slow."),void L(t,1013,"WebSocket bridge consumer is too slow.");s.push(o),"upstream"===n?p+=o.bytes:m+=o.bytes};return n.upstreamOpenTimeoutMs&&!c&&(u=setTimeout(()=>{c\|\|a\|\|(L(e,1011,"Upstream websocket did not open."),L(t))},n.upstreamOpenTimeoutMs)),e.on("open",()=>M(e,l,t=>I(e,t),e=>{m-=e.bytes})),t.on("open",()=>{y(),c=!0,n.onUpstreamOpen?.(),M(t,d,e=>I(t,e),e=>{p-=e.bytes})}),e.on("message",(e,n=!1)=>{if(!f("client-to-upstream",e))return;const i={data:e,isBinary:Boolean(n),bytes:g(e)};k(t)?I(t,i):A("upstream",d,i)}),t.on("message",(t,n=!1)=>{if(!f("upstream-to-client",t))return;const i={data:t,isBinary:Boolean(n),bytes:g(t)};k(e)?I(e,i):A("client",l,i)}),t.on("close",(t,i)=>{y(),n.onUpstreamClose?.(t,i),(c\|\|a\|\|!n.onUpstreamCloseBeforeOpen?.())&&L(e,t,i)}),t.on("error",t=>{n.onUpstreamError?.(t),(c\|\|a\|\|!n.onUpstreamErrorBeforeOpen?.(t))&&L(e)}),e.on("close",(e,i)=>{y(),a=!0,n.onClientClose?.(e,i),L(t,e,i)}),e.on("error",e=>{y(),a=!0,n.onClientError?.(e),L(t,1011,"WebSocket bridge client failed.")}),{close:(n,i)=>{y(),L(t,n,i),L(e,n,i)}}}var F,U,$=function(){if(U)return F;U=1;const e=t,{spawnSync:n}=l;return F={processStartIdentity:function(t,i=process.platform){if(Number.isInteger(t)&&!(t<=0)){if("linux"===i)try{const n=e.readFileSync(`/proc/${t}/stat`,"utf8"),i=n.lastIndexOf(")");if(i<0)return;const s=n.slice(i+2).trim().split(/\s+/)[19];return s?`linux:${s}`:void 0}catch{return}if(["darwin","freebsd","openbsd","aix","sunos"].includes(i)){const e=n("ps",["-o","lstart=","-p",String(t)],{encoding:"utf8",timeout:1e3}),s=0===e.status?e.stdout.trim().replace(/\s+/g," "):"";return s?`${i}:${s}`:void 0}if("win32"===i){const e=n("powershell.exe",["-NoProfile","-NonInteractive","-Command",`(Get-Process -Id ${t} -ErrorAction Stop).StartTime.ToUniversalTime().Ticks`],{encoding:"utf8",timeout:2e3}),i=0===e.status?e.stdout.trim():"";return/^\d+$/.test(i)?`win32:${i}`:void 0}}}}}();class H extends Error{code;lockPath;owner;constructor(e,t,n={}){const i=t?.pid?` pid ${t.pid}`:"";super(`${n.label\|\|"Process"} is already running${i}. Lock: ${e}`),this.name="ProcessSingletonError",this.code=n.code\|\|"PROCESS_ALREADY_RUNNING",this.lockPath=e,this.owner=t}}function q(e){return n.join(e,"owner.json")}function V(e){return n.join(e,"initializing.json")}function B(e){return n.join(e,"recovering.json")}function K(e){return Number.isInteger(e)&&Number(e)>0}function G(e){try{const n=JSON.parse(t.readFileSync(q(e),"utf8"));if(K(n.pid)&&"string"==typeof n.startTime){const e=n;return{pid:e.pid,hostname:"string"==typeof e.hostname&&e.hostname?e.hostname:c.hostname(),component:e.component\|\|"server-update",command:"string"==typeof e.command?e.command:"",acquiredAt:"string"==typeof e.createdAt&&Number.isFinite(Date.parse(e.createdAt))?e.createdAt:new Date(0).toISOString(),token:"string"==typeof e.token&&e.token?e.token:`legacy:${e.pid}:${e.startTime}`,startIdentity:e.startTime.startsWith("linux:")?e.startTime:`linux:${e.startTime}`}}if(!(K(n.pid)&&"string"==typeof n.hostname&&n.hostname&&"string"==typeof n.command&&"string"==typeof n.acquiredAt&&Number.isFinite(Date.parse(n.acquiredAt))&&"string"==typeof n.token&&n.token))return;return n}catch{return}}const W=G;function X(e){if(!K(e))return!1;try{return process.kill(Number(e),0),!0}catch(e){return"EPERM"===e.code}}function Y(e){if(!e\|\|!X(e.pid))return!1;if(!e.startIdentity)return!0;const t=$.processStartIdentity(e.pid);return void 0===t\|\|t===e.startIdentity}function J(e,i){const s=n.join(e,`.owner-${i.token}.tmp`);t.writeFileSync(s,`${JSON.stringify(i,null,2)}\n`,{encoding:"utf8",mode:384,flag:"wx"});const o=Z(e);if(o?.token!==i.token)throw te(s),new Error(`Process lock initialization was superseded: ${e}`);t.renameSync(s,q(e)),te(V(e))}function Q(e,i,s){const o=W(e);if(o?.token!==i.token)return!1;const r={...i};for(const[e,t]of Object.entries(s))void 0===t?delete r[e]:Object.assign(r,{[e]:t});const a=n.join(e,`.owner-update-${i.token}-${d.randomUUID()}.tmp`);try{if(t.writeFileSync(a,`${JSON.stringify(r,null,2)}\n`,{encoding:"utf8",mode:384,flag:"wx"}),W(e)?.token!==i.token)return!1;t.renameSync(a,q(e));for(const e of Object.keys(i))delete i[e];return Object.assign(i,r),!0}catch(e){if("ENOENT"===e.code)return!1;throw e}finally{te(a)}}function Z(e){try{return JSON.parse(t.readFileSync(V(e),"utf8"))}catch{return}}function ee(e){const t=Z(e);return K(t?.pid)&&Y({pid:t.pid,startIdentity:t.startIdentity})}function te(e){try{t.unlinkSync(e)}catch(e){if("ENOENT"!==e.code)throw e}}function ne(){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,20)}function ie(e){try{const n=Z(e),i=Date.parse(n?.startedAt\|\|"");return Number.isFinite(i)?Math.max(0,Date.now()-i):Math.max(0,Date.now()-t.statSync(e).mtimeMs)}catch{return 0}}function se(e,i){try{return t.writeFileSync(B(e),`${JSON.stringify({token:i,pid:process.pid,startedAt:(new Date).toISOString()})}\n`,{encoding:"utf8",mode:384,flag:"wx"}),!0}catch(s){if("EEXIST"===s.code)return!!function(e){const i=B(e),s=oe(i),o=Date.parse(s?.startedAt\|\|"");if(X(s?.pid)\|\|Number.isFinite(o)&&Date.now()-o<2e3)return!1;const r=n.join(e,`.recovering-${d.randomUUID()}.stale`);try{t.renameSync(i,r)}catch(e){if(["ENOENT","EEXIST"].includes(e.code\|\|""))return!1;throw e}const a=oe(r);if(a?.token===s?.token)return te(r),!0;try{t.linkSync(r,i)}catch(e){if("EEXIST"!==e.code)throw e}finally{te(r)}return!1}(e)&&se(e,i);if("ENOENT"===s.code)return!1;throw s}}function oe(e){try{return JSON.parse(t.readFileSync(e,"utf8"))}catch{return}}function re(e,t){return oe(B(e))?.token===t}function ae(){return(new Date).toISOString()}const ce=6048e5;function de(e,t){const i=n.resolve(e),s=n.resolve(i,t);if(n.dirname(s)!==i\|\|n.basename(s)!==t)throw new Error(`Retention entry is not a direct child of its managed root: ${t}`);return s}function le(e){if(t.existsSync(e)){const n=t.lstatSync(e);if(!n.isDirectory()\|\|n.isSymbolicLink())throw new Error(`Managed persistence path must be a real directory: ${e}`)}t.mkdirSync(e,{recursive:!0,mode:448}),t.chmodSync(e,448)}const ue=a.z.string().trim().min(1).max(120),pe=20971520,me=512e3,he=me,ge=pe,fe=41943040,ye="ai.sessions",Ie="ai-session.snapshot",Ae="ai-session.patch",_e="ai-session.removed",Ee="ai-session.message-delta",Te="ai-session.timeline-item",be="ai-session.timeline-item-delta",we=a.z.string().trim().min(1).max(80),Se=a.z.enum(["app-session","ai-session"]),ve=a.z.enum(["image","file"]),Ne={scopeType:a.z.enum(["session","create-request"]),scopeId:a.z.string().trim().min(1).max(160),kind:ve,name:a.z.string().trim().min(1).max(240),mime:a.z.string().trim().min(1).max(120)};a.z.object({...Ne,size:a.z.coerce.number().int().positive().max(pe)}).strict();const Oe=a.z.string().regex(/^cia_[a-f0-9]{24}$/);a.z.object({attachmentId:Oe,...Ne,size:a.z.number().int().positive().max(pe)}).strict(),a.z.object({offset:a.z.coerce.number().int().nonnegative()}).strict(),a.z.object({attachmentId:Oe,offset:a.z.number().int().nonnegative()}),a.z.object({id:Oe,kind:ve,name:a.z.string().trim().min(1).max(240),mime:a.z.string().trim().min(1).max(120),size:a.z.number().int().positive().max(pe),expiresAt:a.z.string().datetime()});const ze=a.z.object({id:a.z.string().trim().min(1).max(120),kind:ve,name:a.z.string().trim().min(1).max(240),mime:a.z.string().trim().min(1).max(120),size:a.z.number().int().min(0).max(Number.MAX_SAFE_INTEGER)}),Ce=a.z.enum(["available","expired","missing"]),Re=ze.extend({contentState:Ce.default("available")}).strict(),xe=a.z.object({id:a.z.string().trim().min(1).max(240),text:a.z.string(),attachments:a.z.array(Re).max(6).default([])}).strict(),ke=a.z.enum(["running","waiting","idle","failed"]);a.z.object({instanceId:a.z.string().trim().min(1).max(160),sessionId:a.z.string().trim().min(1).max(120),unread:a.z.boolean(),sessionUpdatedAt:a.z.string().datetime(),updatedAt:a.z.string().datetime()}).strict();const De=a.z.enum(["thinking","tool","editing","approval","responding","unknown"]),Pe=a.z.object({id:a.z.string().trim().min(1).max(240).optional(),kind:a.z.string().trim().min(1).max(80).optional(),name:a.z.string().trim().min(1).max(120),inputPreview:a.z.string().trim().max(500).optional(),startedAt:a.z.string().datetime().optional()}).strict(),Le=a.z.enum(["running","completed","failed","waiting"]),Me=a.z.object({id:a.z.string().trim().min(1).max(240),turnId:a.z.string().trim().min(1).max(240)}).strict(),je=Me.extend({type:a.z.literal("user-message"),text:a.z.string(),attachments:a.z.array(Re).max(6).optional()}).strict(),Fe=Me.extend({type:a.z.literal("ai-message"),text:a.z.string()}).strict(),Ue=Me.extend({type:a.z.literal("activity"),activityKind:a.z.string().trim().min(1).max(120),title:a.z.string().trim().min(1).max(240),status:Le.optional(),summary:a.z.string().max(4e3).optional(),input:a.z.string().max(1e5).optional(),output:a.z.string().max(1e6).optional(),paths:a.z.array(a.z.string().trim().min(1).max(4096)).max(500).optional(),exitCode:a.z.number().int().optional(),durationMs:a.z.number().int().nonnegative().optional()}).strict(),$e=a.z.discriminatedUnion("type",[je,Fe,Ue]);a.z.object({sessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),items:a.z.array($e),generatedAt:a.z.string().datetime()}).strict(),a.z.object({sessionId:a.z.string().trim().min(1).max(120),turnId:a.z.string().trim().min(1).max(240),items:a.z.array($e),generatedAt:a.z.string().datetime()}).strict();const He=a.z.enum(["pending-init","running","interrupted","completed","errored","shutdown","not-found"]),qe=a.z.enum(["started","interacted","interrupted"]),Ve=a.z.object({threadId:a.z.string().trim().min(1).max(240),path:a.z.string().trim().max(4096).optional(),status:He,activity:qe.optional(),message:a.z.string().trim().max(1e3).optional(),updatedAt:a.z.string().datetime()}).strict(),Be=a.z.object({toolCalls:a.z.number().int().min(0).default(0),edits:a.z.number().int().min(0).default(0),approvals:a.z.number().int().min(0).default(0)}).strict().default({toolCalls:0,edits:0,approvals:0}),Ke=a.z.object({send:a.z.boolean().optional(),interrupt:a.z.boolean().optional(),approval:a.z.boolean().optional(),fork:a.z.boolean().optional(),openApp:a.z.boolean().optional(),close:a.z.boolean().optional()}).strict(),Ge=a.z.string().trim().min(1).max(240),We=a.z.discriminatedUnion("kind",[a.z.object({kind:a.z.literal("fork"),parentProviderSessionId:Ge,throughTurnId:a.z.string().trim().min(1).max(240).optional()}).strict(),a.z.object({kind:a.z.literal("subagent"),parentProviderSessionId:Ge}).strict()]),Xe=a.z.preprocess(function(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const t=e;if("fork"===t.kind){const e=We.safeParse({kind:"fork",parentProviderSessionId:t.parentProviderSessionId,..."string"==typeof t.throughTurnId?{throughTurnId:t.throughTurnId}:{}});return e.success?e.data:void 0}if("subagent"===t.kind){const e=We.safeParse({kind:"subagent",parentProviderSessionId:t.parentProviderSessionId});return e.success?e.data:void 0}},We.optional()),Ye=a.z.union([ze.extend({source:a.z.object({type:a.z.literal("inline"),encoding:a.z.literal("base64"),data:a.z.string().min(1).max(31457280)}).strict()}).strict().superRefine((e,t)=>{const n="image"===e.kind?pe:me;(e.size<=0\|\|("file"===e.kind?e.size>=n:e.size>n))&&t.addIssue({code:a.z.ZodIssueCode.custom,path:["size"],message:`Inline ${e.kind} must be between 1 byte and ${n} bytes.`})}),ze.extend({source:a.z.object({type:a.z.literal("runtime-path"),path:a.z.string().trim().min(1).max(4096)}).strict()}).strict()]),Je=ze.extend({sourceType:a.z.enum(["inline","runtime-path"])}).strict(),Qe=a.z.union([a.z.object({id:a.z.string().trim().min(1).max(120),kind:ve.optional(),source:a.z.object({type:a.z.literal("upload-ref")}).strict().default({type:"upload-ref"})}).strict(),a.z.object({id:a.z.string().trim().min(1).max(120),kind:ve,name:a.z.string().trim().min(1).max(240),mime:a.z.string().trim().min(1).max(120),size:a.z.number().int().min(0).max(Number.MAX_SAFE_INTEGER),source:a.z.object({type:a.z.literal("runtime-path"),path:a.z.string().trim().min(1).max(4096)}).strict()}).strict()]),Ze=a.z.enum(["auto","queue","steer","immediate"]),et=a.z.enum(["ask","auto-review","full-access"]),tt=a.z.enum(["review","rename","goal","compact"]);a.z.object({command:tt,argument:a.z.string().trim().max(4e3).optional()}).strict().superRefine((e,t)=>{"rename"!==e.command\|\|e.argument\|\|t.addIssue({code:"custom",path:["argument"],message:"Rename requires a thread name."}),"review"!==e.command&&"compact"!==e.command\|\|!e.argument\|\|t.addIssue({code:"custom",path:["argument"],message:`${e.command} does not accept an argument.`})}),a.z.object({command:tt,value:a.z.string().max(4e3).optional(),turnId:a.z.string().trim().min(1).max(240).optional()}).strict(),a.z.enum(["skill","app","plugin"]);const nt=a.z.object({name:a.z.string().trim().min(1).max(240),path:a.z.string().trim().min(1).max(4096)}),it=a.z.discriminatedUnion("kind",[nt.extend({kind:a.z.literal("skill"),path:a.z.string().trim().min(1).max(4096).refine(e=>e.startsWith("/"),"Skill paths must be absolute.")}).strict(),nt.extend({kind:a.z.literal("app"),path:a.z.string().trim().min(7).max(4096).regex(/^app:\/\/[^\s/]+$/,"App paths must use app://<id>.")}).strict(),nt.extend({kind:a.z.literal("plugin"),path:a.z.string().trim().min(10).max(4096).regex(/^plugin:\/\/[^\s/]+$/,"Plugin paths must use plugin://<id>.")}).strict()]),st=a.z.array(it).max(20).default([]),ot=a.z.enum(["plugin","skill","file","directory","app"]),rt=a.z.object({kind:ot,name:a.z.string().trim().min(1).max(240),description:a.z.string().trim().max(1e3).optional(),path:a.z.string().trim().min(1).max(4096),icon:a.z.string().trim().max(4096).optional()}).strict().superRefine((e,t)=>{"skill"!==e.kind\|\|e.path.startsWith("/")\|\|t.addIssue({code:"custom",path:["path"],message:"Skill paths must be absolute."}),"app"!==e.kind\|\|/^app:\/\/[^\s/]+$/.test(e.path)\|\|t.addIssue({code:"custom",path:["path"],message:"App paths must use app://<id>."}),"plugin"!==e.kind\|\|/^plugin:\/\/[^\s/]+$/.test(e.path)\|\|t.addIssue({code:"custom",path:["path"],message:"Plugin paths must use plugin://<id>."}),"file"!==e.kind&&"directory"!==e.kind\|\|!e.path.startsWith("/")&&!e.path.split(/[\\/]+/).includes("..")\|\|t.addIssue({code:"custom",path:["path"],message:"File and directory paths must be relative to the session cwd."})}),at=a.z.object({category:a.z.enum(["skills","plugins","apps","files"]),code:a.z.string().trim().min(1).max(160),message:a.z.string().trim().min(1).max(2e3)}).strict();a.z.object({sessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),cwd:a.z.string().trim().min(1).max(4096),candidates:a.z.array(rt).max(1e3).default([]),diagnostics:a.z.array(at).max(20).default([])}).strict(),a.z.object({query:a.z.string().trim().max(240).default("")}).strict(),a.z.object({sessionId:a.z.string().trim().min(1).max(120),cwd:a.z.string().trim().min(1).max(4096),query:a.z.string().trim().max(240),requestId:a.z.string().trim().min(1).max(160),candidates:a.z.array(rt.refine(e=>"file"===e.kind\|\|"directory"===e.kind,"File search only returns files and directories.")).max(200).default([]),complete:a.z.boolean().default(!1)}).strict();const ct=a.z.object({message:a.z.string().trim().min(1).max(2e4),mode:Ze.optional(),permissionMode:et.optional()}),dt=ct.extend({attachments:a.z.array(Ye).max(6).default([]),references:st}).strict().superRefine((e,t)=>{e.attachments.reduce((e,t)=>e+("inline"===t.source.type?t.size:0),0)>fe&&t.addIssue({code:a.z.ZodIssueCode.custom,path:["attachments"],message:"Inline attachments must be 41943040 bytes or less in total."})}),lt=ct.extend({attachments:a.z.array(Qe).max(6).default([]),references:st}).strict(),ut=a.z.object({type:a.z.literal("runtime-path"),path:a.z.string().trim().min(1).max(4096).refine(e=>e.startsWith("/")\|\|/^[A-Za-z]:[\\/]/.test(e),"Runtime paths must be absolute in the target controlled instance.")}).strict(),pt=a.z.object({modelEntityId:a.z.string().trim().min(1).max(120),modelName:a.z.string().trim().min(1).max(240)}).strict(),mt=a.z.enum(["none","minimal","low","medium","high","xhigh","max","ultra"]);dt.extend({agent:we,cwd:ut,cwdFolderId:a.z.string().trim().min(1).max(120).optional(),clientRequestId:a.z.string().trim().min(1).max(160),modelSelection:pt.optional(),reasoningEffort:mt.optional(),storyId:ue.optional()}).strict();const ht=a.z.object({mode:a.z.enum(["current-folder","worktree"]),branch:a.z.string().trim().min(1).max(1024)}).strict();lt.extend({agent:we,cwdFolderId:a.z.string().trim().min(1).max(120).optional(),gitSelection:ht.optional(),clientRequestId:a.z.string().trim().min(1).max(160),modelSelection:pt.optional(),reasoningEffort:mt.optional(),storyId:ue.optional()}).strict(),a.z.object({clientRequestId:a.z.string().trim().min(1).max(160),modelSelection:pt}).strict(),a.z.object({sessionId:a.z.string().trim().min(1).max(120),accepted:a.z.literal(!0)}).strict(),a.z.object({clientRequestId:a.z.string().trim().min(1).max(160),reasoningEffort:mt}).strict(),a.z.object({sessionId:a.z.string().trim().min(1).max(120),accepted:a.z.literal(!0)}).strict(),a.z.object({storyId:ue.nullable()}).strict(),a.z.object({sessionId:a.z.string().trim().min(1).max(120),storyId:ue.optional()}).strict(),a.z.object({disposition:a.z.enum(["created","already-created"]),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),creationSource:a.z.literal("ai-session")}).strict();const gt=a.z.object({mode:a.z.enum(["current","managed-worktree"]).default("current")}).strict().default({mode:"current"});a.z.object({clientRequestId:a.z.string().trim().min(1).max(160),throughTurnId:a.z.string().trim().min(1).max(240).optional(),workspace:gt.optional().default({mode:"current"})}).strict(),a.z.object({disposition:a.z.enum(["created","already-created"]),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),creationSource:a.z.literal("ai-session")}).strict(),a.z.object({clientRequestId:a.z.string().trim().min(1).max(160)}).strict(),a.z.object({disposition:a.z.enum(["opened","already-open"]),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),appSessionId:a.z.string().trim().min(1).max(120),creationSource:Se}).strict(),a.z.object({clientRequestId:a.z.string().trim().min(1).max(160)}).strict(),a.z.object({disposition:a.z.enum(["closed","already-closed"]),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),creationSource:Se}).strict(),a.z.object({disposition:a.z.enum(["cleared","already-cleared"]),aiSessionId:a.z.string().trim().min(1).max(120),clearedSessionIds:a.z.array(a.z.string().trim().min(1).max(120))}).strict(),a.z.object({code:a.z.enum(["invalid-request","not-found","unsupported","provider-unavailable","materialization-failed","open-app-failed","close-failed","conflict"]),message:a.z.string().trim().min(1).max(4e3),retryable:a.z.boolean().default(!1),aiSessionId:a.z.string().trim().min(1).max(120).optional(),providerSessionId:a.z.string().trim().min(1).max(240).optional()}).strict(),a.z.object({decision:a.z.enum(["allow","deny","skip"])}).strict(),a.z.object({expectedRevision:a.z.number().int().min(0),queueIds:a.z.array(a.z.string().trim().min(1).max(120)).max(100)}).strict(),a.z.object({expectedRevision:a.z.number().int().min(0),message:a.z.string().trim().min(1).max(2e4)}).strict(),a.z.object({code:a.z.string().trim().min(1).max(160),message:a.z.string(),instanceId:a.z.string().trim().min(1).max(160).optional(),nodeId:a.z.string().trim().min(1).max(160).optional(),route:a.z.string().trim().min(1).max(4096).optional()}).strict();const ft=a.z.object({id:a.z.string().trim().min(1).max(120),messageId:a.z.string().trim().min(1).max(240).optional(),message:a.z.string().trim().min(1).max(2e4),attachments:a.z.array(Je).max(6).default([]),references:st,permissionMode:et.optional(),status:a.z.enum(["queued","sending","failed"]).default("queued"),createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime(),error:a.z.string().trim().max(4e3).optional()}).strict(),yt=a.z.object({revision:a.z.number().int().min(0).default(0),pendingCount:a.z.number().int().min(0).default(0),items:a.z.array(ft).max(100).default([])}).strict().default({revision:0,pendingCount:0,items:[]}),It=a.z.enum(["control","realtime","adapter-snapshot","transcript-tail","transcript-scan","process-scan","app-session"]),At=a.z.object({id:a.z.string().trim().min(1).max(240),status:a.z.enum(["running","completed"]),startedAt:a.z.string().datetime().optional(),completedAt:a.z.string().datetime().optional()}).strict(),_t=a.z.object({id:a.z.string().trim().min(1).max(240),providerTurnId:a.z.string().trim().max(240).optional(),source:It.optional(),userPrompt:a.z.string().trim().optional(),userMessages:a.z.array(xe).max(100).optional(),status:a.z.enum(["queued","running","waiting","completed","failed"]).default("running"),phase:De.optional(),summary:a.z.string().trim().max(1e3).optional(),lastMessage:a.z.string().trim().optional(),lastMessageItemId:a.z.string().trim().max(240).optional(),contextCompactions:a.z.array(At).max(20).optional(),revision:a.z.number().int().min(0).default(0),sourcePriority:a.z.number().int().min(0).max(100).optional(),snapshotVersion:a.z.number().int().min(0).optional(),observedAt:a.z.string().datetime().optional(),startedAt:a.z.string().datetime().optional(),updatedAt:a.z.string().datetime().optional(),completedAt:a.z.string().datetime().optional()}).strict(),Et=_t.pick({id:!0,providerTurnId:!0,userPrompt:!0,userMessages:!0,status:!0,phase:!0,summary:!0,lastMessage:!0,contextCompactions:!0,startedAt:!0,updatedAt:!0,completedAt:!0}).strict(),Tt=a.z.object({id:a.z.string().trim().min(1).max(120),agent:we,creationSource:Se.default("app-session"),appSessionId:a.z.string().trim().max(120).optional(),appId:a.z.string().trim().max(120).optional(),providerSessionId:a.z.string().trim().max(240).optional(),lineage:Xe,providerMeta:a.z.record(a.z.string(),a.z.unknown()).optional(),modelSelection:pt.optional(),reasoningEffort:mt.optional(),storyId:ue.optional(),appBindingKeys:a.z.array(a.z.string().trim().min(1).max(240)).max(20).optional(),actions:Ke.optional(),activeTurnId:a.z.string().trim().max(240).optional(),title:a.z.string().trim().max(240).optional(),cwd:a.z.string().trim().max(4096).optional(),cwdFolderId:a.z.string().trim().min(1).max(120).optional(),userPrompt:a.z.string().trim().optional(),turns:a.z.array(_t).max(50).optional(),status:ke.default("running"),phase:De.default("unknown"),summary:a.z.string().trim().max(1e3).optional(),lastMessage:a.z.string().trim().optional(),lastMessageItemId:a.z.string().trim().max(240).optional(),currentTool:Pe.optional(),toolCallsSinceLastMessage:a.z.number().int().min(0).default(0),subAgents:a.z.array(Ve).max(50).default([]),transcriptPath:a.z.string().trim().max(4096).optional(),transcriptSize:a.z.number().int().min(0).optional(),startedAt:a.z.string().datetime(),updatedAt:a.z.string().datetime(),completedAt:a.z.string().datetime().optional(),error:a.z.string().trim().max(4e3).optional(),counters:Be,queue:yt}).strict(),bt=Tt.pick({id:!0,appBindingKeys:!0,cwd:!0,error:!0,providerMeta:!0,modelSelection:!0,reasoningEffort:!0,queue:!0,subAgents:!0}).strict(),wt=_t.pick({id:!0,providerTurnId:!0,status:!0,phase:!0,revision:!0,startedAt:!0,updatedAt:!0,completedAt:!0}).extend({bodyRevision:a.z.string().trim().min(1).max(64)}).strict(),St=a.z.object({sessionId:a.z.string().trim().min(1).max(120),revision:a.z.string().trim().min(1).max(64),turns:a.z.array(wt).max(50)}).strict(),vt=a.z.object({sessionId:a.z.string().trim().min(1).max(120),revision:a.z.string().trim().min(1).max(64),turn:_t}).strict(),Nt=a.z.string().trim().min(1).max(64),Ot=a.z.object({kind:a.z.literal("not-modified"),revision:Nt}).strict();a.z.discriminatedUnion("kind",[Ot,a.z.object({kind:a.z.literal("updated"),revision:Nt,detail:bt}).strict()]),a.z.discriminatedUnion("kind",[Ot,a.z.object({kind:a.z.literal("updated"),revision:Nt,index:St}).strict()]),a.z.discriminatedUnion("kind",[Ot,a.z.object({kind:a.z.literal("updated"),revision:Nt,body:vt}).strict()]);const zt=a.z.object({session:Tt,provider:a.z.string().trim().min(1).max(80),action:a.z.enum(["send","queue","steer","interrupt","approval"]),decision:a.z.enum(["allow","deny","skip"]).optional(),turnId:a.z.string().trim().min(1).max(240).optional(),providerTurnId:a.z.string().trim().min(1).max(240).optional(),queueId:a.z.string().trim().min(1).max(120).optional()}).strict(),Ct=zt.omit({session:!0}).extend({sessionId:a.z.string().trim().min(1).max(120),messageId:a.z.string().trim().min(1).max(240).optional()}).strict();a.z.object({sessionId:a.z.string().trim().min(1).max(120),queueRevision:a.z.number().int().min(0),action:a.z.enum(["retry","remove","edit","reorder"]),queueId:a.z.string().trim().min(1).max(120).optional()}).strict(),a.z.union([Ct,zt.transform(function(e){const t=e.session.turns?.at(-1),n=(e.queueId?e.session.queue?.items.find(t=>t.id===e.queueId)?.messageId:void 0)\|\|("send"===e.action\|\|"queue"===e.action\|\|"steer"===e.action?t?.userMessages?.at(-1)?.id:void 0);return Ct.parse({sessionId:e.session.id,provider:e.provider,action:e.action,...e.decision?{decision:e.decision}:{},...e.turnId\|\|e.session.activeTurnId\|\|t?.id?{turnId:e.turnId\|\|e.session.activeTurnId\|\|t?.id}:{},...e.providerTurnId\|\|t?.providerTurnId?{providerTurnId:e.providerTurnId\|\|t?.providerTurnId}:{},...e.queueId?{queueId:e.queueId}:{},...n?{messageId:n}:{}})})]);const Rt=a.z.object({id:a.z.string().trim().min(1).max(120),agent:we,creationSource:Se,providerSessionId:a.z.string().trim().min(1).max(240),lineage:Xe,modelSelection:pt.optional(),reasoningEffort:mt.optional(),storyId:ue.optional(),title:a.z.string().trim().max(240).optional(),userPrompt:a.z.string().trim().optional(),lastMessage:a.z.string().trim().optional(),cwd:a.z.string().trim().min(1).max(4096),cwdFolderId:a.z.string().trim().min(1).max(120).optional(),lastActiveAt:a.z.string().datetime(),archivedAt:a.z.string().datetime()}).strict();a.z.object({schemaVersion:a.z.literal(1).default(1),items:a.z.array(Rt).max(1e4).default([])}).strict(),a.z.object({items:a.z.array(Rt).max(1e4).default([])}).strict(),a.z.object({item:Rt,turns:a.z.array(Et).max(50).default([])}).strict(),a.z.object({disposition:a.z.enum(["resumed","already-open"]),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),appSessionId:a.z.string().trim().min(1).max(120).optional(),creationSource:Se}).strict();const xt=_t.omit({userMessages:!0}),kt=Tt.pick({id:!0,agent:!0,creationSource:!0,appSessionId:!0,appId:!0,providerSessionId:!0,lineage:!0,providerMeta:!0,modelSelection:!0,reasoningEffort:!0,storyId:!0,appBindingKeys:!0,actions:!0,activeTurnId:!0,title:!0,cwd:!0,cwdFolderId:!0,userPrompt:!0,turns:!0,status:!0,phase:!0,summary:!0,lastMessage:!0,lastMessageItemId:!0,currentTool:!0,toolCallsSinceLastMessage:!0,subAgents:!0,queue:!0,startedAt:!0,updatedAt:!0,error:!0}).extend({turns:a.z.array(xt).max(50).optional(),detailRevision:a.z.string().trim().min(1).max(64).optional(),turnsRevision:a.z.string().trim().min(1).max(64).optional(),latestTurnRef:a.z.object({id:_t.shape.id,bodyRevision:a.z.string().trim().min(1).max(64)}).strict().optional(),turnCount:a.z.number().int().min(0).optional(),subAgentCount:a.z.number().int().min(0).optional(),lastUserMessageAt:a.z.string().datetime().optional()}).strict(),Dt=a.z.object({runningCount:a.z.number().int().min(0).default(0),waitingCount:a.z.number().int().min(0).default(0),staleCount:a.z.number().int().min(0).default(0),sessions:a.z.array(kt).default([]),updatedAt:a.z.string().datetime()}).strict(),Pt=a.z.object({streamId:a.z.string().trim().min(1).max(240),revision:a.z.number().int().min(0),lastEventAt:a.z.string().datetime(),snapshot:Dt}).strict();Dt.pick({runningCount:!0,waitingCount:!0,staleCount:!0,updatedAt:!0}).extend({idleCount:a.z.number().int().min(0).default(0),problemCount:a.z.number().int().min(0).default(0),revision:a.z.number().int().min(0).optional()});const Lt=a.z.enum(["provider-event","app-session-created","app-session-updated","app-session-deleted","discovery-scan","control-action","heartbeat-sync","startup"]),Mt=a.z.object({streamId:a.z.string().trim().min(1).max(240),instanceId:a.z.string().trim().min(1).max(160),nodeId:a.z.string().trim().min(1).max(160).optional(),revision:a.z.number().int().min(0),previousRevision:a.z.number().int().min(0).optional(),traceId:a.z.string().trim().min(1).max(160),generatedAt:a.z.string().datetime(),reason:Lt}).strict(),jt=a.z.object({meta:Mt,snapshot:Dt}).strict(),Ft=a.z.object({meta:Mt,upserted:a.z.array(kt).default([]),removed:a.z.array(a.z.string().trim().min(1).max(120)).default([])}).strict(),Ut=a.z.object({meta:Mt,sessionIds:a.z.array(a.z.string().trim().min(1).max(120)).default([]),expiresAt:a.z.string().datetime()}).strict(),$t=a.z.object({instanceId:a.z.string().trim().min(1).max(160),nodeId:a.z.string().trim().min(1).max(160).optional(),sessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240).optional(),turnId:a.z.string().trim().min(1).max(240),itemId:a.z.string().trim().min(1).max(240),delta:a.z.string().min(1),generatedAt:a.z.string().datetime()}).strict(),Ht=$t.omit({instanceId:!0,nodeId:!0,providerSessionId:!0}).strict();a.z.object({instanceId:a.z.string().trim().min(1).max(160),nodeId:a.z.string().trim().min(1).max(160).optional(),sessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),item:$e,generatedAt:a.z.string().datetime()}).strict();const qt=a.z.object({instanceId:a.z.string().trim().min(1).max(160),nodeId:a.z.string().trim().min(1).max(160).optional(),sessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240).optional(),turnId:a.z.string().trim().min(1).max(240),itemId:a.z.string().trim().min(1).max(240),field:a.z.literal("output"),delta:a.z.string().min(1),generatedAt:a.z.string().datetime()}).strict(),Vt=qt.omit({instanceId:!0,nodeId:!0,providerSessionId:!0}).strict();function Bt(e){return Vt.parse({sessionId:e.sessionId,turnId:e.turnId,itemId:e.itemId,field:e.field,delta:e.delta,generatedAt:e.generatedAt})}function Kt(e,t){if(t?.subagents\|\|"subagent"!==e.lineage?.kind)return e;const{lineage:n,...i}=e;return i}function Gt(e,t){return t?.subagents?e:{...e,sessions:e.sessions.map(e=>Kt(e,t))}}a.z.object({streamId:a.z.string().trim().min(1).max(240),instanceId:a.z.string().trim().min(1).max(160),sinceRevision:a.z.number().int().min(0),latestRevision:a.z.number().int().min(0),earliestRetainedRevision:a.z.number().int().min(0),syncRequired:a.z.boolean().default(!1),events:a.z.array(a.z.discriminatedUnion("type",[a.z.object({type:a.z.literal(Ie),payload:jt}).strict(),a.z.object({type:a.z.literal(Ae),payload:Ft}).strict(),a.z.object({type:a.z.literal(_e),payload:Ut}).strict()])).default([])}).strict();const Wt=a.z.object({source:It,sourcePriority:a.z.number().int().min(0).max(100).optional(),observedAt:a.z.string().datetime().optional(),snapshotVersion:a.z.number().int().min(0).optional()}).strict(),Xt=Wt.extend({type:a.z.literal("snapshot"),agent:a.z.string().trim().min(1).max(80),creationSource:Se.optional(),appSessionId:a.z.string().trim().max(120).optional(),appId:a.z.string().trim().max(120).optional(),providerSessionId:a.z.string().trim().max(240).optional(),lineage:We.optional(),providerMeta:a.z.record(a.z.string(),a.z.unknown()).optional(),modelSelection:pt.optional(),reasoningEffort:mt.optional(),storyId:ue.optional(),appBindingKeys:a.z.array(a.z.string().trim().min(1).max(240)).max(20).optional(),actions:Ke.optional(),title:a.z.string().trim().max(240).optional(),cwd:a.z.string().trim().max(4096).optional(),cwdFolderId:a.z.string().trim().min(1).max(120).optional(),activeTurnId:a.z.string().trim().max(240).optional(),userPrompt:a.z.string().trim().optional(),turns:a.z.array(_t).max(50).optional(),status:ke.optional(),phase:De.optional(),summary:a.z.string().trim().max(1e3).optional(),lastMessage:a.z.string().trim().optional(),lastMessageItemId:a.z.string().trim().max(240).optional(),error:a.z.string().trim().max(4e3).optional(),currentTool:Pe.optional(),toolCallsSinceLastMessage:a.z.number().int().min(0).optional(),subAgents:a.z.array(Ve).max(50).optional(),transcriptPath:a.z.string().trim().max(4096).optional(),transcriptSize:a.z.number().int().min(0).optional(),replaceActivity:a.z.boolean().optional()}).strict(),Yt=Wt.extend({type:a.z.literal("event"),sessionId:a.z.string().trim().min(1).max(120),kind:a.z.enum(["lifecycle","send-ack","turn-started","user-message","assistant-message","approval-requested","turn-completed","session-error","tool-activity","sub-agent-activity","context-compaction","model-selection","reasoning-effort"]),modelSelection:pt.optional(),reasoningEffort:mt.optional(),activeTurnId:a.z.string().trim().max(240).optional(),providerTurnId:a.z.string().trim().max(240).optional(),userPrompt:a.z.string().trim().optional(),userMessage:xe.optional(),text:a.z.string().optional(),itemId:a.z.string().trim().max(240).optional(),status:ke.optional(),phase:De.optional(),summary:a.z.string().trim().max(1e3).optional(),error:a.z.string().trim().max(4e3).optional(),currentTool:Pe.nullable().optional(),toolCallsSinceLastMessage:a.z.number().int().min(0).optional(),subAgents:a.z.array(Ve).max(50).optional(),contextCompaction:At.optional(),counters:a.z.object({toolCalls:a.z.number().int().min(0).optional(),edits:a.z.number().int().min(0).optional(),approvals:a.z.number().int().min(0).optional()}).strict().optional()}).strict().superRefine((e,t)=>{if("model-selection"===e.kind?e.modelSelection\|\|t.addIssue({code:"custom",path:["modelSelection"],message:"model-selection events require modelSelection"}):void 0!==e.modelSelection&&t.addIssue({code:"custom",path:["modelSelection"],message:"modelSelection is only valid for model-selection events"}),"reasoning-effort"===e.kind?e.reasoningEffort\|\|t.addIssue({code:"custom",path:["reasoningEffort"],message:"reasoning-effort events require reasoningEffort"}):void 0!==e.reasoningEffort&&t.addIssue({code:"custom",path:["reasoningEffort"],message:"reasoningEffort is only valid for reasoning-effort events"}),"session-error"!==e.kind\|\|e.error\|\|t.addIssue({code:"custom",path:["error"],message:"session-error events require error"}),"context-compaction"===e.kind?e.contextCompaction\|\|t.addIssue({code:"custom",path:["contextCompaction"],message:"context-compaction events require contextCompaction"}):void 0!==e.contextCompaction&&t.addIssue({code:"custom",path:["contextCompaction"],message:"contextCompaction is only valid for context-compaction events"}),"send-ack"!==e.kind&&"user-message"!==e.kind&&void 0!==e.userMessage&&t.addIssue({code:"custom",path:["userMessage"],message:"userMessage is only valid for send-ack and user-message events"}),"sub-agent-activity"===e.kind?e.subAgents\|\|t.addIssue({code:"custom",path:["subAgents"],message:"sub-agent-activity events require subAgents"}):void 0!==e.subAgents&&t.addIssue({code:"custom",path:["subAgents"],message:"subAgents is only valid for sub-agent-activity events"}),"tool-activity"!==e.kind)return void 0!==e.currentTool&&t.addIssue({code:"custom",path:["currentTool"],message:"currentTool is only valid for tool-activity events"}),void(void 0!==e.toolCallsSinceLastMessage&&t.addIssue({code:"custom",path:["toolCallsSinceLastMessage"],message:"toolCallsSinceLastMessage is only valid for tool-activity events"}));"currentTool"in e\|\|t.addIssue({code:"custom",path:["currentTool"],message:"tool-activity events require currentTool"}),void 0===e.toolCallsSinceLastMessage&&t.addIssue({code:"custom",path:["toolCallsSinceLastMessage"],message:"tool-activity events require toolCallsSinceLastMessage"})});a.z.discriminatedUnion("type",[Xt,Yt]);const Jt=a.z.union([a.z.object({type:a.z.literal("schedule"),scheduleKind:a.z.literal("interval").default("interval"),intervalMs:a.z.number().int().min(1e3)}).strict(),a.z.object({type:a.z.literal("schedule"),scheduleKind:a.z.literal("daily"),timeOfDay:a.z.string().regex(/^([01]\d\|2[0-3]):[0-5]\d$/),timezone:a.z.string().trim().min(1).max(120)}).strict(),a.z.object({type:a.z.literal("schedule"),scheduleKind:a.z.literal("weekly"),weekdays:a.z.array(a.z.number().int().min(0).max(6)).min(1).max(7),timeOfDay:a.z.string().regex(/^([01]\d\|2[0-3]):[0-5]\d$/),timezone:a.z.string().trim().min(1).max(120)}).strict()]),Qt=a.z.union([Jt,a.z.object({type:a.z.literal("file-change"),roots:a.z.array(a.z.string().trim().min(1).max(4096)).min(1).max(50),globs:a.z.array(a.z.string().trim().min(1).max(500)).min(1).max(100),ignore:a.z.array(a.z.string().trim().min(1).max(500)).max(100).optional(),debounceMs:a.z.number().int().min(100).max(6e4).default(1500)}).strict(),a.z.object({type:a.z.literal("ai-session"),agent:a.z.string().trim().min(1).max(80).optional(),statuses:a.z.array(a.z.enum(["running","waiting","idle","failed"])).max(20).optional(),phases:a.z.array(a.z.enum(["thinking","tool","editing","approval","responding","unknown"])).max(20).optional()}).strict()]),Zt=a.z.object({promptTemplate:a.z.string().trim().min(1).max(2e4)}).strict(),en=a.z.object({cooldownMs:a.z.number().int().min(0).max(864e5).optional(),maxConcurrentRuns:a.z.number().int().min(1).max(20).default(1),whenBusy:a.z.enum(["skip","queue"]).default("skip")}).strict(),tn=a.z.object({configHash:a.z.string().trim().min(8).max(80),name:a.z.string().trim().min(1).max(160),description:a.z.string().trim().max(1e3).optional(),source:Qt,action:Zt,policy:en.default({maxConcurrentRuns:1,whenBusy:"skip"}),createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime()}).strict(),nn=a.z.object({type:a.z.literal("ai-session"),aiSessionId:a.z.string().trim().min(1).max(160)}).strict(),sn=a.z.object({configHash:a.z.string().trim().min(8).max(80),deploymentId:a.z.string().trim().min(1).max(240).optional(),instanceId:a.z.string().trim().min(1).max(160),origin:a.z.enum(["control-plane","controlled-instance"]).default("controlled-instance"),enabled:a.z.boolean().default(!0),target:nn,localName:a.z.string().trim().min(1).max(160).optional(),createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime()}).strict(),on=a.z.object({configHash:a.z.string().trim().min(8).max(80),deploymentId:a.z.string().trim().min(1).max(240).optional(),instanceId:a.z.string().trim().min(1).max(160),status:a.z.enum(["idle","running","disabled","error"]).default("idle"),lastTriggeredAt:a.z.string().datetime().optional(),lastCompletedAt:a.z.string().datetime().optional(),lastSkippedAt:a.z.string().datetime().optional(),lastError:a.z.string().trim().max(4e3).optional(),runCount:a.z.number().int().min(0).default(0),skippedCount:a.z.number().int().min(0).default(0)}).strict(),rn=a.z.object({id:a.z.string().trim().min(1).max(160),configHash:a.z.string().trim().min(8).max(80),deploymentId:a.z.string().trim().min(1).max(240).optional(),instanceId:a.z.string().trim().min(1).max(160),eventType:a.z.enum(["manual","schedule","file-change","ai-session"]),status:a.z.enum(["started","completed","failed","skipped"]),target:nn,promptPreview:a.z.string().trim().max(500),eventSummary:a.z.string().trim().max(1e3).optional(),error:a.z.string().trim().max(4e3).optional(),startedAt:a.z.string().datetime(),completedAt:a.z.string().datetime().optional()}).strict();a.z.object({schemaVersion:a.z.literal(1).default(1),configs:a.z.array(tn).default([]),deployments:a.z.array(sn).default([]),runtime:a.z.array(on).default([]),recentRuns:a.z.array(rn).default([])}).strict();const an=a.z.object({config:tn,deployment:sn,runtime:on.optional()}).strict();a.z.object({instanceId:a.z.string().trim().min(1).max(160),sessionId:a.z.string().trim().min(1).max(160),mutation:an.optional()}).strip(),a.z.object({instanceId:a.z.string().trim().min(1).max(160),sessionId:a.z.string().trim().min(1).max(160),configHash:tn.shape.configHash}).strip();const cn=a.z.object({instanceId:a.z.string().trim().min(1).max(160),instanceName:a.z.string().trim().min(1).max(160),deployment:sn,runtime:on.optional()}).strip(),dn=rn.extend({instanceName:a.z.string().trim().min(1).max(160).optional()}).strip(),ln=a.z.object({configHash:a.z.string().trim().min(8).max(80),config:tn,deploymentCount:a.z.number().int().min(0),enabledCount:a.z.number().int().min(0),runningCount:a.z.number().int().min(0),errorCount:a.z.number().int().min(0),ownedByControlPlane:a.z.boolean(),controlPlaneDeploymentCount:a.z.number().int().min(0),deployments:a.z.array(cn),recentRuns:a.z.array(dn)}).strip();a.z.object({updatedAt:a.z.string().datetime(),triggers:a.z.array(ln)}).strip(),a.z.object({name:tn.shape.name,description:tn.shape.description,source:Qt,action:Zt,policy:en.partial().optional()}).strict(),a.z.object({scope:a.z.enum(["node","instance"]),nodeId:a.z.string().trim().min(1).max(160).optional(),instanceId:a.z.string().trim().min(1).max(160).optional(),code:a.z.string().trim().min(1).max(160),message:a.z.string().trim().min(1).max(4e3)}).strip();const un=a.z.string().regex(/^\d{4}-\d{2}-\d{2}$/,"Proxy protocol version must use YYYY-MM-DD format."),pn=a.z.string().trim().min(1).max(160).regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]$/),mn=a.z.string().datetime(),hn=a.z.string().trim().min(32).max(4096),gn=a.z.string().trim().max(2048).transform((e,t)=>{try{return function(e){const t=new URL(e.trim());if("https:"!==t.protocol\|\|t.username\|\|t.password\|\|"/"!==t.pathname\|\|t.search\|\|t.hash)throw new Error("Proxy origin must be an HTTPS origin without credentials, path, query, or fragment.");return t.origin}(e)}catch(e){return t.addIssue({code:"custom",message:e instanceof Error?e.message:String(e)}),a.z.NEVER}});a.z.string().trim().min(1).max(4096).transform((e,t)=>{try{return function(e){const t=e.trim();if(!t.startsWith("/")\|\|t.startsWith("//")\|\|t.includes("\\")\|\|/%25/i.test(t))throw new Error("Proxy route must be a single-encoded node-agent relative route.");const n=t.split("?",1)[0];let i,s;try{i=n.split("/").map(e=>decodeURIComponent(e))}catch{throw new Error("Proxy route contains invalid percent encoding.")}if(i.some(e=>".."===e\|\|"."===e))throw new Error("Proxy route cannot traverse outside the node-agent API.");try{s=new URL(t,"https://node-agent.invalid")}catch{throw new Error("Proxy route is invalid.")}if("https://node-agent.invalid"!==s.origin\|\|s.username\|\|s.password)throw new Error("Proxy route cannot select an absolute upstream URL.");return`${s.pathname}${s.search}`}(e)}catch(e){return t.addIssue({code:"custom",message:e instanceof Error?e.message:String(e)}),a.z.NEVER}});const fn=a.z.enum(Object.values({ProtocolUnsupported:"CONTROL_PLANE_PROXY_PROTOCOL_UNSUPPORTED",InviteInvalid:"CONTROL_PLANE_PROXY_INVITE_INVALID",InviteExpired:"CONTROL_PLANE_PROXY_INVITE_EXPIRED",InviteConsumed:"CONTROL_PLANE_PROXY_INVITE_CONSUMED",InviteRevoked:"CONTROL_PLANE_PROXY_INVITE_REVOKED",TargetUnavailable:"CONTROL_PLANE_PROXY_TARGET_UNAVAILABLE",TargetMismatch:"CONTROL_PLANE_PROXY_TARGET_MISMATCH",BindingUnknown:"CONTROL_PLANE_PROXY_BINDING_UNKNOWN",BindingRevoked:"CONTROL_PLANE_PROXY_BINDING_REVOKED",BindingIdentityConflict:"CONTROL_PLANE_PROXY_BINDING_IDENTITY_CONFLICT",AuthenticationFailed:"CONTROL_PLANE_PROXY_AUTHENTICATION_FAILED",RouteInvalid:"CONTROL_PLANE_PROXY_ROUTE_INVALID",HeaderInvalid:"CONTROL_PLANE_PROXY_HEADER_INVALID",ResourceLimit:"CONTROL_PLANE_PROXY_RESOURCE_LIMIT",SnapshotRequired:"CONTROL_PLANE_PROXY_SNAPSHOT_REQUIRED",Unavailable:"CONTROL_PLANE_PROXY_UNAVAILABLE",TransportFailed:"CONTROL_PLANE_PROXY_TRANSPORT_FAILED"})),yn=a.z.object({code:fn,message:a.z.string().trim().min(1).max(2048),retryable:a.z.boolean(),details:a.z.record(a.z.string(),a.z.unknown()).optional()}).strict(),In=a.z.enum(["active","revoked"]),An=a.z.object({id:pn,targetNodeId:pn,status:In,createdBy:pn,expiresAt:mn,revokedAt:mn.optional(),createdAt:mn,updatedAt:mn}).strict();a.z.object({targetNodeId:pn,expiresInSeconds:a.z.number().int().min(60).max(3600).default(600)}).strict(),a.z.object({invite:An,token:a.z.string().trim().min(24).max(512),proxyOrigin:gn,protocolVersion:un}).strict();const _n=a.z.enum(["active","revoked"]),En=a.z.object({id:pn,claimId:pn,sourceControlPlaneId:pn,targetNodeId:pn,bindingKeyId:pn,status:_n,revision:a.z.number().int().positive(),lastError:yn.optional(),revokedAt:mn.optional(),createdAt:mn,updatedAt:mn}).strict();a.z.object({protocolVersion:un,inviteToken:a.z.string().trim().min(24).max(512).optional(),claimId:pn,sourceControlPlaneId:pn,targetNodeId:pn.optional(),bindingKeyId:pn,credential:hn}).strict(),a.z.object({sourceControlPlaneId:pn,bindingKeyId:pn,credential:hn}).strict();const Tn=a.z.object({id:pn,name:a.z.string().trim().min(1).max(160),status:a.z.enum(["unknown","online","offline","degraded"]),health:a.z.enum(["unknown","ok","degraded","failed"]),lastSeenAt:mn.optional(),capabilities:a.z.record(a.z.string(),a.z.unknown()).default({})}).strict(),bn=a.z.object({protocolVersion:un,binding:En,streamId:pn,revision:a.z.number().int().nonnegative(),observedAt:mn,target:Tn}).strict(),wn=a.z.object({type:a.z.literal("control-plane-proxy.event"),protocolVersion:un,streamId:pn,bindingId:pn,sourceControlPlaneId:pn,targetNodeId:pn,revision:a.z.number().int().positive(),source:a.z.object({id:a.z.string().trim().min(1).max(512),seq:a.z.number().int().nonnegative()}).strict(),target:Tn,event:a.z.object({type:a.z.string().trim().min(1).max(240),topic:a.z.string().trim().min(1).max(240),createdAt:mn}).strict()}).strict(),Sn=a.z.object({type:a.z.literal("control-plane-proxy.events.ready"),protocolVersion:un,streamId:pn,bindingId:pn,sourceControlPlaneId:pn,targetNodeId:pn,latestRevision:a.z.number().int().nonnegative(),earliestRetainedRevision:a.z.number().int().nonnegative()}).strict(),vn=a.z.object({type:a.z.literal("control-plane-proxy.snapshot-required"),protocolVersion:un,streamId:pn,bindingId:pn,sourceControlPlaneId:pn,targetNodeId:pn,sinceRevision:a.z.number().int().nonnegative(),latestRevision:a.z.number().int().nonnegative(),earliestRetainedRevision:a.z.number().int().nonnegative(),error:yn}).strict();a.z.discriminatedUnion("type",[wn,Sn,vn]),a.z.object({protocolVersion:un,binding:En,target:bn.shape.target}).strict(),a.z.object({id:pn,claimId:pn,proxyOrigin:gn,requestedName:a.z.string().trim().min(1).max(160).optional(),sourceControlPlaneId:pn,targetNodeId:pn.optional(),bindingKeyId:pn,credential:hn,status:a.z.enum(["pending","compensation-required"]),createdAt:mn,updatedAt:mn,expiresAt:mn}).strict().omit({credential:!0}),a.z.object({id:pn,nodeId:pn,proxyOrigin:gn,proxyBindingId:pn,targetNodeId:pn,sourceControlPlaneId:pn,bindingKeyId:pn,credential:hn,createdAt:mn,updatedAt:mn}).strict();const Nn=a.z.string().trim().min(1).max(120),On=a.z.object({selectModelAtCreate:a.z.boolean().default(!1),selectProviderAtCreate:a.z.boolean().default(!1),switchModelWithinProvider:a.z.boolean().default(!1),switchProviderDuringSession:a.z.boolean().default(!1)}).strip().default({selectModelAtCreate:!1,selectProviderAtCreate:!1,switchModelWithinProvider:!1,switchProviderDuringSession:!1}),zn=a.z.object({selectAtCreate:a.z.boolean().default(!1),updateDuringSession:a.z.boolean().default(!1)}).strip().default({selectAtCreate:!1,updateDuringSession:!1}),Cn=a.z.object({subagents:a.z.boolean().default(!1)}).strip().default({subagents:!1}),Rn=a.z.object({agent:Nn,actions:a.z.object({create:a.z.boolean().default(!1),send:a.z.boolean().default(!1),queue:a.z.boolean().default(!1),steer:a.z.boolean().default(!1),interrupt:a.z.boolean().default(!1),archive:a.z.boolean().default(!1),delete:a.z.boolean().default(!1),fork:a.z.boolean().default(!1),approvalDecisions:a.z.array(a.z.enum(["allow","deny","skip"])).max(3).default([])}).passthrough(),permissionModes:a.z.array(a.z.enum(["ask","auto-review","full-access"])).max(3).default([]),timeline:a.z.object({sessionRead:a.z.boolean().default(!1),turnRead:a.z.boolean().default(!1),liveItems:a.z.boolean().default(!1)}).passthrough(),modelSelection:On.optional(),reasoningEffort:zn.optional(),hierarchy:Cn.optional()}).passthrough(),xn=a.z.array(Rn).max(100).default([]),kn="2026-08-27",Dn=new Set(["2026-08-01","2026-08-16","2026-08-17","2026-08-20",kn]),Pn=a.z.string().regex(/^\d{4}-\d{2}-\d{2}$/,"Protocol version must use YYYY-MM-DD format."),Ln=a.z.string().trim().min(1).max(120),Mn=a.z.enum(["low","medium","high"]),jn=a.z.enum(["none","friendly","pragmatic"]),Fn=a.z.object({modelEntityId:a.z.string().trim().min(1).max(120),modelName:a.z.string().trim().min(1).max(240)}).strict(),Un=a.z.object({modelVerbosity:Mn.optional(),personality:jn.optional(),multiAgent:a.z.object({enabled:a.z.boolean().default(!0),maxConcurrentThreads:a.z.number().int().min(1).max(64).optional(),defaultModel:Fn.optional(),defaultReasoningEffort:mt.optional()}).strict().default({enabled:!0})}).strict();function $n(){return{features:{appRuntime:!1,tty:!1,gui:!1,browser:!1,browserTunnel:!1,screenshots:!1,logs:!1,aiSessionWorkspaceSelection:!1,aiSessionPersistenceSettings:!1,privateModelCatalog:!1,codexManagedSettings:!1,gitCliCredentialBroker:!1,gitCredentialProxy:!1,aiSessionTimeline:{sessionReadAgents:[],turnReadAgents:[],liveItemAgents:[]},aiSessionConversationAttachments:{metadataAgents:[],contentAgents:[],uploadAgents:[],retentionSettings:!1,fileSizeLimitSettings:!1},aiSessionProviders:[]}}}const Hn=a.z.object({sessionReadAgents:a.z.array(Ln).max(100).default([]),turnReadAgents:a.z.array(Ln).max(100).default([]),liveItemAgents:a.z.array(Ln).max(100).default([])}).passthrough(),qn=a.z.object({metadataAgents:a.z.array(Ln).max(100).default([]),contentAgents:a.z.array(Ln).max(100).default([]),uploadAgents:a.z.array(Ln).max(100).default([]),retentionSettings:a.z.boolean().default(!1),fileSizeLimitSettings:a.z.boolean().default(!1)}).passthrough(),Vn=a.z.object({appRuntime:a.z.boolean().default(!1),tty:a.z.boolean().default(!1),gui:a.z.boolean().default(!1),browser:a.z.boolean().default(!1),browserTunnel:a.z.boolean().optional(),screenshots:a.z.boolean().default(!1),logs:a.z.boolean().default(!1),aiSessionWorkspaceSelection:a.z.boolean().default(!1),aiSessionPersistenceSettings:a.z.boolean().default(!1),privateModelCatalog:a.z.boolean().optional(),codexManagedSettings:a.z.boolean().optional(),gitCliCredentialBroker:a.z.boolean().optional(),gitCredentialProxy:a.z.boolean().optional(),aiSessionTimeline:Hn.default(function(){return{sessionReadAgents:[],turnReadAgents:[],liveItemAgents:[]}}),aiSessionConversationAttachments:qn.optional(),aiSessionProviders:xn.optional()}).passthrough(),Bn=a.z.object({features:Vn.default(function(){return{appRuntime:!1,tty:!1,gui:!1,browser:!1,browserTunnel:!1,screenshots:!1,logs:!1,aiSessionWorkspaceSelection:!1,aiSessionPersistenceSettings:!1,privateModelCatalog:!1,codexManagedSettings:!1,gitCliCredentialBroker:!1,gitCredentialProxy:!1,aiSessionTimeline:{sessionReadAgents:[],turnReadAgents:[],liveItemAgents:[]},aiSessionConversationAttachments:{metadataAgents:[],contentAgents:[],uploadAgents:[],retentionSettings:!1,fileSizeLimitSettings:!1},aiSessionProviders:[]}})}).passthrough();function Kn(e){const t={features:{appRuntime:!1,tty:!1,gui:!1,browser:!1,browserTunnel:!1,screenshots:!1,logs:!1,aiSessionWorkspaceSelection:!1,aiSessionPersistenceSettings:!1,privateModelCatalog:!1,codexManagedSettings:!1,gitCliCredentialBroker:!1,gitCredentialProxy:!1,aiSessionTimeline:{sessionReadAgents:[],turnReadAgents:[],liveItemAgents:[]},aiSessionConversationAttachments:{metadataAgents:[],contentAgents:[],uploadAgents:[],retentionSettings:!1,fileSizeLimitSettings:!1},aiSessionProviders:[]}};if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return t;const n=e,i=n.features;if(!i\|\|"object"!=typeof i\|\|Array.isArray(i))return t;const s=i,o={appRuntime:!1,tty:!1,gui:!1,browser:!1,browserTunnel:!1,screenshots:!1,logs:!1,aiSessionWorkspaceSelection:!1,aiSessionPersistenceSettings:!1,privateModelCatalog:!1,codexManagedSettings:!1,gitCliCredentialBroker:!1,gitCredentialProxy:!1,aiSessionTimeline:{sessionReadAgents:[],turnReadAgents:[],liveItemAgents:[]},aiSessionConversationAttachments:{metadataAgents:[],contentAgents:[],uploadAgents:[],retentionSettings:!1,fileSizeLimitSettings:!1},aiSessionProviders:[]};for(const e of["appRuntime","tty","gui","browser","browserTunnel","screenshots","logs","aiSessionWorkspaceSelection","aiSessionPersistenceSettings","privateModelCatalog","codexManagedSettings","gitCliCredentialBroker","gitCredentialProxy"]){const t=a.z.boolean().safeParse(s[e]);t.success&&(o[e]=t.data)}const r=Hn.safeParse(s.aiSessionTimeline);r.success&&(o.aiSessionTimeline=r.data);const c=qn.safeParse(s.aiSessionConversationAttachments);c.success&&(o.aiSessionConversationAttachments=c.data);const d=xn.safeParse(s.aiSessionProviders);return d.success&&(o.aiSessionProviders=d.data),Bn.parse({...n,features:{...s,...o}})}function Gn(e){return Kn(e).features.aiSessionConversationAttachments}const Wn=a.z.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]$/),Xn=a.z.string().datetime(),Yn=a.z.record(a.z.string(),a.z.string()).default({}),Jn=a.z.record(a.z.string(),a.z.string()).default({}),Qn=a.z.object({encoding:a.z.enum(["utf8","base64"]),data:a.z.string()}).strict().superRefine((e,t)=>{"base64"===e.encoding&&Buffer.from(e.data,"base64").toString("base64")!==e.data&&t.addIssue({code:"custom",path:["data"],message:"Node tunnel binary body must use canonical base64 encoding."})});function Zn(e){if(null==e)return;const t=Qn.parse(e);return"utf8"===t.encoding?t.data:Buffer.from(t.data,"base64")}const ei=/^[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}$/,ti=/^sha256:([a-fA-F0-9]{64})$/,ni=/^(?:localhost\|[a-z0-9](?:[a-z0-9.-][a-z0-9])?)(?::[1-9][0-9]{0,4})?$/,ii=/^[a-z0-9]+(?:(?:[._]\|__\|-+)[a-z0-9]+)$/;function si(e){const t=e.trim();if(!t\|\|t.length>512\|\|t.includes("://")\|\|/\s/.test(t))throw new Error("Docker image reference must not contain a URL scheme or whitespace.");const n=t.indexOf("@");if(-1!==n&&n!==t.lastIndexOf("@"))throw new Error("Docker image reference contains more than one digest separator.");const i=-1===n?void 0:t.slice(n+1),s=-1===n?t:t.slice(0,n),o=i?ti.exec(i):void 0;if(i&&!o)throw new Error("Docker image digest must use sha256 followed by 64 hexadecimal characters.");const r=s.lastIndexOf("/"),a=s.lastIndexOf(":"),c=a>r,d=c?s.slice(a+1):void 0,l=c?s.slice(0,a):s;if(d&&!ei.test(d))throw new Error("Docker image tag is invalid.");if(!d&&!o)throw new Error("Docker image reference must include an explicit tag or sha256 digest.");const u=l.split("/");if(!u.length\|\|u.some(e=>!e))throw new Error("Docker image repository path is invalid.");const p=u.length>1&&(u[0].includes(".")\|\|u[0].includes(":")\|\|"localhost"===u[0]),m=p?u.slice(1):u;if(p&&!ni.test(u[0].toLowerCase()))throw new Error("Docker image registry host or port is invalid.");if(!m.length\|\|m.some(e=>!ii.test(e)))throw new Error("Docker image repository names must be lowercase and use valid separators.");const h=u.map((e,t)=>p&&0===t?e.toLowerCase():e).join("/"),g=o?`sha256:${o[1].toLowerCase()}`:void 0;return`${h}${d?`:${d}`:""}${g?`@${g}`:""}`}function oi(e){const t=si(e),n=t.indexOf("@"),i=-1===n?void 0:t.slice(n+1),s=-1===n?t:t.slice(0,n),o=s.lastIndexOf("/"),r=s.lastIndexOf(":"),a=r>o;return{reference:t,repository:a?s.slice(0,r):s,tag:a?s.slice(r+1):void 0,digest:i}}const ri=a.z.string().trim().min(1).max(512).transform((e,t)=>{try{return si(e)}catch(e){return t.addIssue({code:"custom",message:e instanceof Error?e.message:String(e)}),a.z.NEVER}}),ai=a.z.string().trim().transform((e,t)=>{const n=ti.exec(e);return n?`sha256:${n[1].toLowerCase()}`:(t.addIssue({code:"custom",message:"Docker image digest must use sha256 followed by 64 hexadecimal characters."}),a.z.NEVER)}),ci=a.z.object({modelEntityIds:a.z.array(Wn).max(64).transform(e=>[...new Set(e)]).optional(),codexModelHash:Wn.nullable().optional(),claudeModelHash:Wn.nullable().optional(),opencodeModelHash:Wn.nullable().optional()}).strict().default({}),di=a.z.object({imageId:Wn,tag:a.z.string().trim().min(1).max(128).regex(ei).optional()}).strict(),li=a.z.discriminatedUnion("type",[a.z.object({type:a.z.literal("image"),imageSelection:di}).strict(),a.z.object({type:a.z.literal("template"),environmentTemplateId:Wn}).strict()]),ui=a.z.enum(["creating","ready","failed","deleting"]),pi=a.z.enum(["linux","darwin","win32","freebsd","openbsd","aix","sunos","unknown"]),mi=a.z.enum(["x64","arm64","arm","ia32","ppc64","s390x","riscv64","unknown"]),hi=a.z.object({code:a.z.string().trim().min(1).max(120),message:a.z.string().trim().min(1).max(2048),phase:a.z.enum(["validate","commit","inspect","security-check","persist","delete","recovery"]).optional()}).strict(),gi=a.z.object({templateId:Wn,nodeId:Wn,imageId:ai,name:a.z.string().trim().min(1).max(160),platform:pi,architecture:mi}).strict(),fi=a.z.enum(["data","agent-home","workspace"]),yi=a.z.object({deleteVolumes:a.z.boolean()}).strict(),Ii=a.z.object({role:fi,name:a.z.string().trim().min(1).max(255),mountPath:a.z.string().trim().startsWith("/").max(4096),status:a.z.enum(["deleted","retained","missing","failed"]),error:a.z.object({code:a.z.string().trim().min(1).max(120),message:a.z.string().trim().min(1).max(2048)}).strict().optional()}).strict(),Ai=a.z.object({instanceId:Wn,containerDeleted:a.z.boolean(),completed:a.z.boolean(),deletedVolumes:a.z.array(Ii),retainedVolumes:a.z.array(Ii),volumeResults:a.z.array(Ii)}).strict(),_i={img_default:"market_taskhandoff_browser",img_codex:"market_taskhandoff_codex",img_ai:"market_taskhandoff_ai"};function Ei(e,t){if(e&&"object"==typeof e&&!Array.isArray(e)){const t=e;return{imageId:"string"==typeof t.imageId&&_i[t.imageId]\|\|t.imageId,..."string"==typeof t.tag?{tag:t.tag}:{}}}if("string"==typeof t)return{imageId:_i[t]\|\|t}}function Ti(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e,{defaultImageId:n,...i}=t;return{...i,defaultImageSelection:Ei(t.defaultImageSelection,n)}}const bi=a.z.object({id:Wn,name:a.z.string().trim().min(1).max(120),kind:a.z.enum(["tty","gui","web"]),source:a.z.enum(["builtin","custom"]),availability:a.z.enum(["available","missing-dependency"]),capabilities:a.z.object({automation:a.z.enum(["cdp"]).optional(),supportsCwdSelection:a.z.boolean().default(!1)}).strict().default({supportsCwdSelection:!1}),diagnosticCode:a.z.enum(["APP_EXECUTABLE_NOT_FOUND"]).optional()}).strict(),wi=a.z.object({code:a.z.enum(["APP_CATALOG_INVALID"]),message:a.z.string().trim().min(1).max(500)}).strict(),Si=a.z.object({items:a.z.array(bi).max(256),observedAt:Xn,issues:a.z.array(wi).max(32).default([])}).strict(),vi=a.z.object({id:Wn,name:a.z.string().trim().min(1).max(160),sourceInstanceId:Wn,nodeId:Wn,imageId:ai.optional(),internalTag:a.z.string().trim().min(1).max(512).optional(),platform:pi.optional(),architecture:mi.optional(),sizeBytes:a.z.number().int().nonnegative().optional(),status:ui,error:hi.optional(),createdAt:Xn,updatedAt:Xn}).strict().superRefine((e,t)=>{if("ready"===e.status)for(const n of["imageId","internalTag","platform","architecture","sizeBytes"])void 0===e[n]&&t.addIssue({code:"custom",path:[n],message:`Ready environment template requires ${n}.`});"failed"!==e.status\|\|e.error\|\|t.addIssue({code:"custom",path:["error"],message:"Failed environment template requires an error diagnostic."})}),Ni=a.z.enum(["apt","dnf","brew","npm"]),Oi=a.z.enum(["user","passwordless-sudo","root"]),zi=a.z.object({platform:pi,arch:mi,installers:a.z.array(Ni).max(8),privilege:Oi,installerAccess:a.z.object({npmGlobalWritable:a.z.boolean().optional()}).strict().optional()}).strict(),Ci=a.z.enum(["installed","not-installed","broken","unsupported"]),Ri=a.z.enum(["recipe","bundled","external","none"]),xi=a.z.object({code:a.z.enum(["BUNDLED","EXTERNALLY_MANAGED","ALREADY_INSTALLED","NOT_INSTALLED","UNSUPPORTED_PLATFORM","INSTALLER_UNAVAILABLE","INSTALLER_NOT_WRITABLE","INSUFFICIENT_PRIVILEGE","OPERATION_IN_PROGRESS"]),message:a.z.string().trim().min(1).max(500)}).strict(),ki=a.z.object({id:Wn,name:a.z.string().trim().min(1).max(120),kind:a.z.enum(["tty","gui","web"]),description:a.z.string().trim().max(500).optional(),state:Ci,managementSource:Ri,version:a.z.string().trim().max(120).optional(),canInstall:a.z.boolean(),canUninstall:a.z.boolean(),installReason:xi.optional(),uninstallReason:xi.optional(),activeJobId:Wn.optional()}).strict(),Di=a.z.enum(["install","uninstall"]),Pi=a.z.enum(["queued","running","succeeded","failed","cancelled","interrupted"]),Li=a.z.object({current:a.z.number().finite().nonnegative().optional(),total:a.z.number().finite().positive().optional(),unit:a.z.string().trim().min(1).max(40).optional()}).strict().refine(e=>void 0===e.total\|\|void 0===e.current\|\|e.current<=e.total,{message:"Progress current must not exceed total.",path:["current"]}),Mi=a.z.object({executable:a.z.string().trim().min(1).max(4096),args:a.z.array(a.z.string().max(4096)).max(128)}).strict(),ji=a.z.object({code:a.z.string().trim().min(1).max(120).regex(/^[a-z0-9][a-z0-9._-]$/),message:a.z.string().trim().min(1).max(4096),retryable:a.z.boolean(),sessionIds:a.z.array(Wn).max(64).optional()}).strict(),Fi=a.z.object({id:Wn,requestId:Wn.optional(),appId:Wn,operation:Di,state:Pi,phase:a.z.string().trim().min(1).max(120).optional(),progress:Li.optional(),command:Mi.optional(),logTail:a.z.string().max(32768).optional(),logTruncated:a.z.boolean().optional(),error:ji.optional(),requestedAt:Xn,startedAt:Xn.optional(),finishedAt:Xn.optional(),updatedAt:Xn}).strict(),Ui=a.z.object({streamId:Wn,sequence:a.z.number().int().nonnegative(),capabilities:zi,apps:a.z.array(ki).max(256),activeJobs:a.z.array(Fi).max(256),recentJobs:a.z.array(Fi).max(256),observedAt:Xn}).strict();a.z.object({requestId:Wn.optional()}).strict(),a.z.object({job:Fi}).strict(),a.z.object({type:a.z.literal("app-management"),streamId:Wn,sequence:a.z.number().int().nonnegative(),observedAt:Xn,job:Fi.optional(),snapshot:Ui.optional()}).strict().refine(e=>void 0!==e.job\|\|void 0!==e.snapshot,{message:"An app management event requires a job or snapshot."});const $i=a.z.object({component:a.z.enum(["control-plane","node-agent","controlled-instance"]),packageName:a.z.string().trim().max(160).optional(),packageVersion:a.z.string().trim().max(80).optional(),protocolVersion:Pn.optional(),buildId:a.z.string().trim().max(160).optional(),builtAt:a.z.string().trim().max(120).optional(),gitCommit:a.z.string().trim().max(120).optional(),imageRef:a.z.string().trim().max(512).optional(),imageDigest:a.z.string().trim().max(240).optional()}).strict();a.z.object({data:a.z.object({ok:a.z.literal(!0),role:a.z.literal("control-plane"),protocolVersion:Pn,build:$i.extend({component:a.z.literal("control-plane"),packageVersion:a.z.string().trim().min(1).max(80)}).loose(),serverTime:Xn}).loose()}).loose();const Hi=a.z.enum(["stable","beta","alpha"]),qi=a.z.object({packageName:a.z.literal("@task-handoff/controlled-instance"),version:a.z.string().trim().min(1).max(80),platform:a.z.string().trim().min(1).max(40),arch:a.z.string().trim().min(1).max(40),formatVersion:a.z.number().int().positive(),launcherAbi:a.z.number().int().positive(),entrypoint:a.z.string().trim().min(1).max(512),sha256:a.z.string().regex(/^[a-f0-9]{64}$/)}).strict(),Vi=a.z.object({code:a.z.enum(["INSTANCE_RUNTIME_VERSION_MISMATCH","INSTANCE_RUNTIME_ARTIFACT_UNAVAILABLE","INSTANCE_RUNTIME_ARTIFACT_INVALID","INSTANCE_RUNTIME_INSTALL_FAILED","INSTANCE_RUNTIME_RESTART_FAILED","INSTANCE_RUNTIME_VERIFICATION_FAILED","INSTANCE_BASE_RUNTIME_INCOMPATIBLE","NODE_UPDATE_PREFLIGHT_FAILED","NODE_UPDATE_FAILED","LEGACY_INSTANCE_UPDATE_RETIRED"]),message:a.z.string().trim().min(1).max(4096),expectedVersion:a.z.string().trim().min(1).max(80).optional(),actualVersion:a.z.string().trim().min(1).max(80).optional(),retryable:a.z.boolean().default(!1)}).strict(),Bi=a.z.object({desiredVersion:a.z.string().trim().min(1).max(80),actualVersion:a.z.string().trim().min(1).max(80).optional(),phase:a.z.enum(["pending","draining","installing","restarting","verifying","matched","failed"]),attempt:a.z.number().int().nonnegative().default(0),lastAttemptAt:Xn.optional(),matchedAt:Xn.optional(),error:Vi.optional()}).strict(),Ki=a.z.object({runningInstanceCount:a.z.number().int().nonnegative(),stoppedInstanceCount:a.z.number().int().nonnegative(),activeInstanceCount:a.z.number().int().nonnegative(),restartInstanceCount:a.z.number().int().nonnegative(),runningInstanceIds:a.z.array(Wn).max(1024).default([]),stoppedInstanceIds:a.z.array(Wn).max(1024).default([]),activeInstanceIds:a.z.array(Wn).max(1024).default([])}).strict(),Gi=a.z.object({phase:a.z.enum(["queued","updating-node","restarting-node","converging-instances","succeeded","degraded","failed"]),desiredVersion:a.z.string().trim().min(1).max(80),nodeVersion:a.z.string().trim().min(1).max(80).optional(),expectedInstanceIds:a.z.array(Wn).max(1024).default([]),expectedInstanceCount:a.z.number().int().nonnegative(),matchedInstanceCount:a.z.number().int().nonnegative(),pendingInstanceCount:a.z.number().int().nonnegative(),failedInstanceCount:a.z.number().int().nonnegative(),deferredInstanceCount:a.z.number().int().nonnegative().default(0)}).strict(),Wi=a.z.object({channel:Hi.default("stable")}).strict(),Xi=a.z.object({source:a.z.literal("npm"),channel:Hi,currentVersion:a.z.string().trim().max(240).optional(),availableVersion:a.z.string().trim().min(1).max(240),artifactRef:a.z.string().trim().min(1).max(512).optional(),runtimeArtifacts:a.z.array(qi).default([]),impact:Ki,updateAvailable:a.z.boolean(),supported:a.z.boolean().default(!0),reason:a.z.string().trim().max(2048).optional(),checkedAt:Xn,preflightToken:a.z.string().trim().min(16).max(240).optional()}).strict(),Yi=a.z.object({id:Wn,nodeId:Wn,source:a.z.literal("npm"),channel:Hi,fromVersion:a.z.string().trim().max(240).optional(),toVersion:a.z.string().trim().min(1).max(240),artifactRef:a.z.string().trim().min(1).max(512).optional(),runtimeArtifacts:a.z.array(qi).default([]),impact:Ki,rollout:Gi,status:a.z.enum(["queued","updating-node","restarting-node","converging-instances","succeeded","degraded","failed"]),error:Vi.optional(),startedAt:Xn.optional(),completedAt:Xn.optional(),createdAt:Xn,updatedAt:Xn}).strict(),Ji=a.z.object({channel:Hi,targetVersion:a.z.string().trim().min(1).max(240),preflightToken:a.z.string().trim().min(16).max(240)}).strict(),Qi=a.z.object({type:a.z.enum(["branch","tag"]),name:a.z.string().trim().min(1).max(240)}).strict(),Zi=a.z.object({type:a.z.literal("commit"),commit:a.z.string().trim().regex(/^[0-9a-fA-F]{4,64}$/,"commit must be a hexadecimal Git object id")}).strict(),es=a.z.discriminatedUnion("type",[Qi,Zi]),ts=a.z.object({type:a.z.enum(["none","ssh-key","https-token"]).default("none"),secretId:a.z.string().trim().min(1).max(120).optional()}).strict(),ns=a.z.object({depth:a.z.number().int().positive().max(1e5).optional(),submodules:a.z.boolean().default(!1),lfs:a.z.boolean().default(!1),subdirectory:a.z.string().trim().max(240).refine(e=>!e.startsWith("/")&&!e.split("/").some(e=>".."===e),"subdirectory must be a relative path within the repository").transform(e=>e.split("/").filter(e=>e&&"."!==e).join("/")).default("")}).strict();a.z.object({id:Wn,name:a.z.string().trim().min(1).max(160),url:a.z.string().trim().min(1).max(2048),provider:a.z.string().trim().max(80).optional(),ref:es.default({type:"branch",name:"main"}),auth:ts.default({type:"none"}),clone:ns.default({submodules:!1,lfs:!1,subdirectory:""}),defaultImageSelection:di.optional(),labels:Yn,createdAt:Xn,updatedAt:Xn}).strict();const is=a.z.object({id:Wn,nodeId:Wn,name:a.z.string().trim().min(1).max(160),path:a.z.string().trim().min(1).max(4096),defaultImageSelection:di.optional(),labels:Yn,createdAt:Xn,updatedAt:Xn}).strict(),ss=a.z.discriminatedUnion("type",[a.z.object({type:a.z.literal("git-repository"),repositoryId:Wn.optional(),url:a.z.string().trim().min(1).max(2048),provider:a.z.string().trim().max(80).optional(),ref:es.default({type:"branch",name:"main"}),auth:ts.default({type:"none"}),clone:ns.default({submodules:!1,lfs:!1,subdirectory:""})}).strict(),a.z.object({type:a.z.literal("git-template"),url:a.z.string().trim().min(1).max(2048),templateId:a.z.string().trim().min(1).max(120).optional(),ref:es.default({type:"branch",name:"main"}),auth:ts.default({type:"none"}),clone:ns.default({submodules:!1,lfs:!1,subdirectory:""})}).strict(),a.z.object({type:a.z.literal("local-folder"),localFolderId:Wn.optional(),path:a.z.string().trim().min(1).max(4096),ownerNodeId:Wn.optional()}).strict()]),os=a.z.object({mode:a.z.enum(["local-bind","git-clone","empty-volume","persistent-volume"]),path:a.z.string().trim().min(1).max(4096).default("/workspace"),volumeName:a.z.string().trim().max(240).optional(),readOnly:a.z.boolean().default(!1)}).strict(),rs=a.z.enum(["codex","claude","opencode"]),as=a.z.enum(["openai-responses","openai-chat-completions","anthropic-messages"]),cs=a.z.object({name:a.z.string().trim().min(1).max(240),order:a.z.number().int().min(0).max(1e6).default(0)}).strict(),ds=a.z.object({id:Wn,name:a.z.string().trim().min(1).max(160),source:ss,defaultImageSelection:di.optional(),defaultNodeId:Wn.optional(),workspacePolicy:os,labels:Yn,createdAt:Xn,updatedAt:Xn}).strict(),ls=a.z.object({id:Wn,name:a.z.string().trim().min(1).max(160),endpoint:a.z.string().trim().min(1).max(2048),key:a.z.string().trim().min(1).max(4096),model:a.z.string().trim().min(1).max(240),modelNames:a.z.array(cs).max(256).default([]),protocols:a.z.array(as).max(3).default([]),app:rs,enabled:a.z.boolean().default(!0),order:a.z.number().int().min(0).max(1e6).default(0),labels:Yn,createdAt:Xn,updatedAt:Xn}).strict(),us=ls,ps=ls.omit({key:!0}).extend({keyPreview:a.z.string().trim().min(1).max(160),keySet:a.z.boolean()}).strict(),ms=ps.extend({referenceCount:a.z.number().int().min(0)}).strict(),hs=a.z.object({instanceId:Wn,modelEntityIds:a.z.array(Wn).max(64).transform(e=>[...new Set(e)]).optional(),codexModelHash:Wn.optional(),claudeModelHash:Wn.optional(),opencodeModelHash:Wn.optional(),updatedAt:Xn}).strict().transform(e=>({...e,modelEntityIds:e.modelEntityIds?.length?e.modelEntityIds:[...new Set([e.codexModelHash,e.claudeModelHash,e.opencodeModelHash].filter(e=>Boolean(e)))]})),gs=a.z.discriminatedUnion("type",[a.z.object({type:a.z.literal("control-plane"),name:ls.shape.name,enabled:ls.shape.enabled,order:ls.shape.order}).strict(),a.z.object({type:a.z.literal("node"),nodeId:Wn,name:ls.shape.name,enabled:ls.shape.enabled,order:ls.shape.order,referenceCount:a.z.number().int().min(0)}).strict()]),fs=a.z.object({id:Wn,model:ps,locations:a.z.array(gs).min(1),referenceCount:a.z.number().int().min(0).default(0)}).strict(),ys=a.z.object({nodeId:Wn,code:a.z.string().trim().min(1).max(120),message:a.z.string().trim().min(1).max(2e3)}).strict();a.z.object({models:a.z.array(fs),nodeDiagnostics:a.z.array(ys).default([]),updatedAt:Xn}).strict();const Is=ls.omit({id:!0,createdAt:!0,updatedAt:!0}).strict(),As=Is.partial().strict(),_s=ls,Es=a.z.object({modelSelection:ci,modelEntityIds:a.z.array(Wn).max(64).transform(e=>[...new Set(e)]).optional(),codexModelHash:Wn.optional(),claudeModelHash:Wn.optional(),opencodeModelHash:Wn.optional()}).strict().transform(e=>({...e,modelEntityIds:e.modelEntityIds\|\|e.modelSelection.modelEntityIds\|\|[...new Set([e.codexModelHash,e.claudeModelHash,e.opencodeModelHash].filter(e=>Boolean(e)))]}));function Ts(e){const t={app:rs.parse(e.app),endpoint:ls.shape.endpoint.parse(e.endpoint),key:ls.shape.key.parse(e.key),model:ls.shape.model.parse(e.model)};return`mdl_${d.createHash("sha256").update(JSON.stringify(t)).digest("hex")}`}const bs=a.z.enum(["market","custom"]),ws=a.z.enum(["active","deprecated","yanked"]),Ss=a.z.discriminatedUnion("kind",[a.z.object({kind:a.z.literal("builtin"),key:a.z.string().trim().min(1).max(120)}).strict(),a.z.object({kind:a.z.literal("remote"),url:a.z.string().trim().url().max(2048),mediaType:a.z.enum(["image/png","image/jpeg","image/webp"]).optional(),digest:ai.optional()}).strict()]),vs=a.z.array(a.z.string().trim().min(1).max(80)).default([]),Ns=a.z.array(a.z.string().trim().min(1).max(120)).default([]),Os=a.z.record(a.z.string().trim().min(2).max(35),a.z.string().trim().min(1).max(4096)),zs=a.z.object({os:a.z.string().trim().min(1).max(40),architecture:a.z.string().trim().min(1).max(40),digest:ai.optional(),downloadSizeBytes:a.z.number().int().positive().optional(),unpackedSizeBytes:a.z.number().int().positive().optional()}).strict(),Cs=a.z.object({name:a.z.string().trim().min(1).max(128).regex(ei),version:a.z.string().trim().min(1).max(160).optional(),reference:ri,manifestDigest:ai.optional(),publishedAt:Xn.optional(),platforms:a.z.array(zs).default([]),status:ws.default("active")}).strict(),Rs=a.z.object({id:Wn,publisher:a.z.string().trim().min(1).max(160),slug:a.z.string().trim().min(1).max(160),name:a.z.string().trim().min(1).max(160),description:a.z.string().trim().min(1).max(4096),localizedDescriptions:Os.optional(),cover:Ss.optional(),repository:a.z.string().trim().min(1).max(512),defaultTag:a.z.string().trim().min(1).max(128).regex(ei),tags:a.z.array(Cs).min(1),capabilities:vs,optionalApps:Ns,defaultEnv:Jn,labels:Yn,status:ws.default("active")}).strict().superRefine((e,t)=>{e.tags.some(t=>t.name===e.defaultTag)\|\|t.addIssue({code:"custom",path:["defaultTag"],message:"Market defaultTag must identify one of the image tags."})});a.z.object({protocolVersion:Pn,catalogId:Wn,revision:a.z.string().trim().min(1).max(240),source:a.z.enum(["embedded","remote","cache"]),generatedAt:Xn,expiresAt:Xn.optional(),items:a.z.array(Rs)}).strict(),a.z.object({source:a.z.enum(["embedded","remote","cache"]),state:a.z.enum(["ready","refreshing","stale","failed"]),revision:a.z.string().trim().min(1).max(240),updatedAt:Xn,error:a.z.string().trim().max(4096).optional()}).strict(),a.z.object({id:Wn,origin:a.z.literal("custom"),name:a.z.string().trim().min(1).max(160),description:a.z.string().trim().max(4096).optional(),localizedDescriptions:Os.optional(),cover:Ss.optional(),reference:ri,repository:a.z.string().trim().min(1).max(512),tag:a.z.string().trim().min(1).max(128).regex(ei).optional(),pullPolicy:a.z.literal("if-not-present").default("if-not-present"),capabilities:vs,optionalApps:Ns,defaultEnv:Jn,labels:Yn,createdAt:Xn,updatedAt:Xn}).strict();const xs=a.z.object({name:a.z.string().trim().min(1).max(128).regex(ei),version:a.z.string().trim().min(1).max(160).optional(),reference:ri,manifestDigest:ai.optional(),status:ws}).strict(),ks=a.z.object({id:Wn,origin:bs,name:a.z.string().trim().min(1).max(160),description:a.z.string().trim().max(4096).optional(),localizedDescriptions:Os.optional(),cover:Ss,repository:a.z.string().trim().min(1).max(512),tag:a.z.string().trim().min(1).max(128).regex(ei).optional(),availableTags:a.z.array(xs),reference:ri,digest:ai.optional(),downloadSizeBytes:a.z.number().int().positive().optional(),unpackedSizeBytes:a.z.number().int().positive().optional(),capabilities:vs,optionalApps:Ns,defaultEnv:Jn,labels:Yn,readOnly:a.z.boolean(),lifecycleStatus:ws.optional(),market:a.z.object({catalogId:Wn,catalogRevision:a.z.string().trim().min(1).max(240),publisher:a.z.string().trim().min(1).max(160),version:a.z.string().trim().min(1).max(160).optional()}).strict().optional()}).strict(),Ds=a.z.object({id:Wn,origin:bs,name:a.z.string().trim().min(1).max(160),description:a.z.string().trim().max(4096).optional(),localizedDescriptions:Os.optional(),cover:Ss.optional(),repository:a.z.string().trim().min(1).max(512),tag:a.z.string().trim().min(1).max(128).regex(ei).optional(),requestedReference:ri,resolvedDigest:ai.optional(),resolvedReference:ri.optional(),downloadSizeBytes:a.z.number().int().positive().optional(),pullPolicy:a.z.literal("if-not-present").default("if-not-present"),capabilities:vs,optionalApps:Ns,defaultEnv:Jn,labels:Yn,market:a.z.object({catalogId:Wn,catalogRevision:a.z.string().trim().min(1).max(240),publisher:a.z.string().trim().min(1).max(160),version:a.z.string().trim().min(1).max(160).optional()}).strict().optional(),createdAt:Xn,updatedAt:Xn}).strict(),Ps=a.z.object({phase:a.z.enum(["checking-image","pulling-image","resolving-image","ready","failed"]),requestedReference:ri,generation:a.z.number().int().nonnegative().default(0),error:a.z.string().trim().max(4096).optional(),startedAt:Xn,updatedAt:Xn}).strict(),Ls="image.pull.terminal.output",Ms="image.pull.terminal.finished",js=a.z.object({instanceId:Wn,generation:a.z.number().int().nonnegative(),requestedReference:ri,sequence:a.z.number().int().nonnegative(),observedAt:Xn}).strict(),Fs=js.extend({data:a.z.string().min(1).max(65536),replay:a.z.boolean().optional()}).strict(),Us=js.extend({outcome:a.z.enum(["succeeded","failed"])}).strict();js.extend({status:a.z.enum(["connecting","pulling","extracting","complete","failed"]),layers:a.z.object({total:a.z.number().int().nonnegative(),completed:a.z.number().int().nonnegative(),downloaded:a.z.number().int().nonnegative(),downloading:a.z.number().int().nonnegative(),extracting:a.z.number().int().nonnegative()}).strict(),bytes:a.z.object({current:a.z.number().finite().nonnegative(),total:a.z.number().finite().positive()}).strict().optional(),percent:a.z.number().finite().min(0).max(100).optional(),message:a.z.string().trim().min(1).max(500),terminalTail:a.z.string().max(262144).optional(),terminalTruncated:a.z.boolean().optional()}).strict();const $s=a.z.discriminatedUnion("kind",[a.z.object({kind:a.z.literal("direct")}).strict(),a.z.object({kind:a.z.literal("control-plane-proxy"),proxyId:Wn,proxyBindingId:Wn,targetNodeId:Wn}).strict()]),Hs=a.z.object({pingRttMs:a.z.number().nonnegative().optional(),pingRttP95Ms:a.z.number().nonnegative().optional(),consecutiveReconnects:a.z.number().int().nonnegative(),nextRetryAt:Xn.optional()}).strict();a.z.object({nodeId:Wn,inviteId:Wn.optional()}).strict(),a.z.discriminatedUnion("status",[a.z.object({id:Wn,status:a.z.literal("pending")}).strict(),a.z.object({id:Wn,status:a.z.literal("completed"),nodeId:Wn}).strict()]);const qs=a.z.object({reachability:a.z.enum(["unknown","reachable","unreachable"]),bindingStatus:a.z.enum(["unknown","active","revoked"]),bindingRevision:a.z.number().int().positive().optional(),streamId:a.z.string().trim().min(1).max(160).optional(),revision:a.z.number().int().nonnegative().optional(),observedAt:Xn.optional(),target:Tn.optional(),lastError:yn.optional(),updatedAt:Xn}).strict(),Vs=a.z.object({id:Wn,name:a.z.string().trim().min(1).max(160),connectionMode:a.z.enum(["local-ipc","local-loopback","direct-http","reverse-wss","control-plane-proxy"]).default("direct-http"),connectionPath:$s.default({kind:"direct"}),connectionEnabled:a.z.boolean().default(!0),auth:a.z.object({mode:a.z.enum(["local-static-key","paired-hmac","proxy-binding"]).default("local-static-key"),keyId:Wn.optional(),secret:a.z.string().trim().max(4096).optional(),pairedAt:Xn.optional(),pairing:a.z.object({status:a.z.enum(["pending","paired","expired"]).default("pending"),joinToken:a.z.string().trim().max(4096).optional(),expiresAt:Xn.optional()}).strict().optional()}).strict().default({mode:"local-static-key"}),endpoint:a.z.string().trim().max(2048).optional(),controlEndpoint:a.z.string().trim().max(2048).optional(),containerEndpoint:a.z.string().trim().max(2048).optional(),publicWebBase:a.z.string().trim().max(2048).optional(),status:a.z.enum(["unknown","online","offline","degraded"]).default("unknown"),health:a.z.enum(["unknown","ok","degraded","failed"]).default("unknown"),capabilities:a.z.record(a.z.string(),a.z.unknown()).default({}),proxyState:qs.optional(),appInventory:Si.optional(),labels:Yn,lastSeenAt:Xn.optional(),createdAt:Xn,updatedAt:Xn}).strict().superRefine((e,t)=>{"control-plane-proxy"===e.connectionPath.kind&&"control-plane-proxy"!==e.connectionMode&&t.addIssue({code:"custom",path:["connectionPath"],message:"Control-plane proxy paths require control-plane-proxy connection mode."}),"control-plane-proxy"===e.connectionMode&&"control-plane-proxy"!==e.connectionPath.kind&&t.addIssue({code:"custom",path:["connectionPath"],message:"Control-plane proxy nodes require a control-plane-proxy connection path."})});a.z.object({nodeId:Wn,status:a.z.enum(["unknown","online","offline","degraded"]),health:a.z.enum(["unknown","ok","degraded","failed"]),lastSeenAt:Xn.nullable(),connectionPhase:a.z.enum(["connecting","handshaking","healthy","reconnecting","suspect","offline"]).nullable(),connectionDiagnostics:Hs.nullable(),proxyState:qs.nullable()}).strict();const Bs=a.z.object({id:Wn,nodeId:Wn,name:a.z.string().trim().min(1).max(160),type:a.z.enum(["docker","kubernetes","local"]),status:a.z.enum(["unknown","online","offline","degraded"]).default("unknown"),accessStrategy:a.z.enum(["node-proxy","direct-port","kubernetes-ingress","kubernetes-port-forward"]).default("node-proxy"),capabilities:a.z.record(a.z.string(),a.z.unknown()).default({}),labels:Yn,createdAt:Xn,updatedAt:Xn}).strict(),Ks=a.z.object({instanceId:Wn,runtimeKind:a.z.literal("docker"),state:a.z.enum(["pending","available","stopped","unavailable"]),sampledAt:Xn,cpu:a.z.object({usagePercent:a.z.number().nonnegative()}).strict().optional(),memory:a.z.object({usageBytes:a.z.number().nonnegative(),limitBytes:a.z.number().nonnegative().optional(),usagePercent:a.z.number().nonnegative().optional()}).strict().optional(),network:a.z.object({rxBytes:a.z.number().nonnegative(),txBytes:a.z.number().nonnegative()}).strict().optional(),blockIo:a.z.object({readBytes:a.z.number().nonnegative(),writeBytes:a.z.number().nonnegative()}).strict().optional(),pids:a.z.number().int().nonnegative().optional(),error:a.z.string().trim().max(2048).optional()}).strict(),Gs=a.z.object({registry:a.z.boolean().default(!1),runtimeBroker:a.z.boolean().default(!1),workspaceProvisioning:a.z.object({docker:a.z.boolean().default(!1),kubernetes:a.z.boolean().default(!1),local:a.z.boolean().default(!1)}).strip().default({docker:!1,kubernetes:!1,local:!1})}).strip(),Ws=a.z.object({multiEntityAssignment:a.z.boolean().default(!1),privateModelCatalog:a.z.boolean().default(!1)}).strip(),Xs=a.z.object({enabled:a.z.boolean().default(!1),agentTools:a.z.boolean().default(!1),sessionRetention:a.z.boolean().default(!1),maxFileBytes:a.z.number().int().positive().default(33554432),maxBatchPaths:a.z.number().int().min(1).max(100).default(20)}).strip(),Ys=a.z.object({modelEndpointProbe:a.z.boolean().optional(),aiSessionHistoryLimit:a.z.boolean().optional(),aiSessionAttachmentRetention:a.z.boolean().optional(),aiSessionFileAttachmentLimit:a.z.boolean().optional(),folderPlaces:a.z.boolean().optional(),localFolderNameUpdate:a.z.boolean().optional(),managedGitCredentials:Gs.optional(),managedModels:Ws.optional(),stories:Xs.optional(),codexManagedSettings:a.z.boolean().optional()}).strip(),Js=a.z.object({status:a.z.enum(["healthy","congested","recovering"]),activeOutputs:a.z.number().int().nonnegative(),bufferedBytes:a.z.number().int().nonnegative(),peakBufferedBytes:a.z.number().int().nonnegative(),coalescedEvents:a.z.number().int().nonnegative(),oversizedEvents:a.z.number().int().nonnegative().optional(),peakEventBytes:a.z.number().int().nonnegative().optional(),congestedSince:Xn.optional(),lastCongestedAt:Xn.optional()}).strip();a.z.object({ok:a.z.boolean().optional(),role:a.z.string().optional(),nodeId:Wn.optional(),platform:pi.optional(),arch:mi.optional(),protocolVersion:Pn.optional(),capabilities:Ys.optional(),build:$i.strip().optional(),process:a.z.object({pid:a.z.number().int().positive(),startIdentity:a.z.string().trim().min(1).optional()}).strip().optional(),listener:a.z.object({host:a.z.string().trim().min(1),port:a.z.number().int().min(1).max(65535)}).strip().optional(),instanceProxy:a.z.object({requests:a.z.number().int().nonnegative(),active:a.z.number().int().nonnegative(),completed:a.z.number().int().nonnegative(),aborted:a.z.number().int().nonnegative(),limitRejected:a.z.number().int().nonnegative(),responseBytes:a.z.number().nonnegative(),totalDurationMs:a.z.number().nonnegative(),maxResponseBytes:a.z.number().int().nonnegative()}).partial().strip().optional(),eventTransport:Js.optional(),serverTime:Xn.optional()}).strip();const Qs=a.z.object({bindScope:a.z.enum(["loopback","all-ipv4"]),port:a.z.number().int().min(1).max(65535)}).strict(),Zs=Qs.extend({host:a.z.enum(["127.0.0.1","0.0.0.0"]),status:a.z.enum(["listening","error"]),source:a.z.enum(["bootstrap","persisted"]),error:a.z.string().trim().max(2048).optional()}).strict(),eo=Qs;a.z.object({nodeId:Wn,joinToken:a.z.string().trim().min(1),expiresAt:Xn}).passthrough(),a.z.object({nodeId:Wn,keyId:Wn,secret:a.z.string().regex(/^[A-Za-z0-9_-]{32,128}$/),pairedAt:Xn}).strict();const to=a.z.object({id:Wn,keyId:Wn,name:a.z.string().trim().min(1).max(160).optional(),pairedAt:Xn,updatedAt:Xn,current:a.z.boolean()}).passthrough();a.z.object({keyId:Wn,revoked:a.z.literal(!0),revokedAt:Xn}).strict(),a.z.object({id:Wn,pairingKeyId:Wn,url:a.z.string().trim().min(1).max(2048),name:a.z.string().trim().min(1).max(160).optional(),enabled:a.z.boolean(),createdAt:Xn,updatedAt:Xn,status:a.z.enum(["disabled","connecting","connected","reconnecting","failed"]),pingRttMs:a.z.number().nonnegative().optional(),pingRttP95Ms:a.z.number().nonnegative().optional(),consecutiveReconnects:a.z.number().int().nonnegative().optional(),nextRetryAt:Xn.optional(),lastConnectedAt:Xn.optional(),lastDisconnectedAt:Xn.optional(),error:a.z.string().optional()}).passthrough(),a.z.object({pairing:to,connection:a.z.object({id:Wn,pairingKeyId:Wn,url:a.z.string().trim().min(1).max(2048),name:a.z.string().trim().min(1).max(160).optional(),enabled:a.z.boolean(),createdAt:Xn,updatedAt:Xn}).passthrough(),tunnel:a.z.object({status:a.z.enum(["disabled","saved","connecting","connected","failed"]),error:a.z.string().trim().max(2048).optional()}).passthrough()}).passthrough(),a.z.object({deleted:a.z.boolean().optional()}).passthrough();const no=a.z.object({repository:a.z.string().trim().optional(),tag:a.z.string().trim().optional(),id:a.z.string().trim(),createdSince:a.z.string().trim().optional(),size:a.z.string().trim().optional(),sizeBytes:a.z.number().int().nonnegative().optional(),reference:a.z.string().trim().min(1),repoDigests:a.z.array(a.z.string().trim().min(1).max(512)).default([])}).passthrough();a.z.object({image:ks,status:a.z.enum(["available","pull-required","unknown"]),localImage:no.optional(),localSizeBytes:a.z.number().int().nonnegative().optional(),downloadSizeBytes:a.z.number().int().positive().optional(),unpackedSizeBytes:a.z.number().int().positive().optional(),error:a.z.string().trim().max(2048).optional()}).strict();const io=a.z.lazy(()=>a.z.object({name:a.z.string().trim().min(1),path:a.z.string().trim().min(1).max(4096),children:a.z.array(io)}).passthrough());a.z.object({kind:a.z.enum(["home","root"]),name:a.z.string().trim().min(1),path:a.z.string().trim().min(1).max(4096)}).passthrough(),a.z.object({status:a.z.number().int().min(100).max(599).optional(),headers:a.z.record(a.z.string(),a.z.string()).optional(),bodyBase64:a.z.string().optional()}).passthrough();const so=a.z.object({strategy:a.z.enum(["node-proxy","direct-port","kubernetes-ingress","kubernetes-port-forward"]).default("node-proxy"),web:a.z.string().trim().max(2048).optional(),api:a.z.string().trim().max(2048).optional(),vnc:a.z.string().trim().max(2048).optional(),tty:a.z.string().trim().max(2048).optional(),logs:a.z.string().trim().max(2048).optional(),status:a.z.enum(["unknown","reachable","endpoint-unreachable"]).default("unknown")}).strict(),oo=a.z.object({...so.shape}).strict(),ro=a.z.object({strategy:a.z.enum(["control-plane-proxy","direct-port","node-proxy","kubernetes-ingress","kubernetes-port-forward"]).default("control-plane-proxy"),web:a.z.string().trim().max(2048).optional(),api:a.z.string().trim().max(2048).optional(),ws:a.z.string().trim().max(2048).optional(),status:a.z.enum(["unknown","reachable","endpoint-unreachable"]).default("unknown")}).strict().default({strategy:"control-plane-proxy",status:"unknown"}),ao=a.z.object({mode:a.z.enum(["local-bind","git-clone","empty-volume","persistent-volume"]).optional(),status:a.z.enum(["unknown","pending","ready","failed"]).default("unknown"),path:a.z.string().trim().max(4096).optional(),resolvedCommit:a.z.string().trim().max(120).optional(),error:a.z.string().trim().max(2048).optional()}).passthrough(),co=a.z.object({id:Wn,name:a.z.string().trim().min(1).max(160),projectId:Wn.optional(),source:ss,sourceSnapshot:a.z.record(a.z.string(),a.z.unknown()).default({}),modelSelection:ci,nodeId:Wn,runtimeId:Wn,imageSelection:di.optional(),environmentSource:li.optional(),environmentTemplateOrigin:gi.optional(),imageSnapshot:Ds.optional(),imageProvisioning:Ps.optional(),stateRevision:a.z.number().int().min(0).default(0),processIncarnationId:a.z.string().trim().min(1).max(120).optional(),status:a.z.enum(["created","provisioning","starting","registering","registered","running","stopping","stopped","deleting","failed","unhealthy"]).default("created"),health:a.z.enum(["unknown","ok","degraded","failed"]).default("unknown"),connectionStatus:a.z.enum(["unknown","online","offline","endpoint-unreachable"]).default("unknown"),agentStatus:a.z.enum(["unknown","online","offline"]).default("unknown"),targetStatus:a.z.enum(["unknown","reachable","endpoint-unreachable"]).default("unknown"),uiAccessStatus:a.z.enum(["unknown","reachable","endpoint-unreachable"]).default("unknown"),controlMode:a.z.enum(["standalone","controlled"]).default("controlled"),protocolVersion:Pn.optional(),instanceVersion:a.z.string().trim().max(80).optional(),build:$i.optional(),runtimeVersion:Bi.optional(),ready:a.z.boolean().default(!1),capabilities:Bn.default($n),appInventory:Si.optional(),config:a.z.object({autoImportAgentConfigs:a.z.boolean().default(!0),codexConfigEnabled:a.z.boolean().default(!0),codexHomeMode:a.z.enum(["default","taskhandoff"]).default("taskhandoff"),defaultCodexPermissionMode:et.default("ask"),codexSettings:Un.optional(),aiSessionHistoryLimit:a.z.number().int().min(1).max(500).default(50),aiSessionAttachmentRetentionDays:a.z.number().int().min(0).max(365).default(30),aiSessionMaxFileAttachmentBytes:a.z.number().int().positive().max(ge).default(he)}).strict().default({autoImportAgentConfigs:!0,codexConfigEnabled:!0,codexHomeMode:"taskhandoff",defaultCodexPermissionMode:"ask",aiSessionHistoryLimit:50,aiSessionAttachmentRetentionDays:30,aiSessionMaxFileAttachmentBytes:he}),workspace:ao.default({status:"unknown"}),target:so.default({strategy:"direct-port",status:"unknown"}),access:ro,apps:a.z.object({runningCount:a.z.number().int().min(0).default(0),problemCount:a.z.number().int().min(0).default(0),updatedAt:Xn.optional(),revision:a.z.number().int().min(0).optional()}).strict().default({runningCount:0,problemCount:0}),aiSessions:Dt.default(()=>({runningCount:0,waitingCount:0,staleCount:0,sessions:[],updatedAt:(new Date).toISOString()})),triggers:a.z.object({enabledCount:a.z.number().int().min(0).default(0),runningCount:a.z.number().int().min(0).default(0),errorCount:a.z.number().int().min(0).default(0),configs:a.z.array(a.z.object({configHash:a.z.string().trim().min(1),config:tn,deployments:a.z.array(sn).default([]),runtime:a.z.array(on).default([])}).strict()).default([]),recentRuns:a.z.array(rn).default([])}).strict().optional(),runtime:a.z.object({kind:a.z.string().trim().max(80).optional(),containerName:a.z.string().trim().max(240).optional(),containerId:a.z.string().trim().max(240).optional(),workspacePath:a.z.string().trim().max(4096).optional(),pid:a.z.number().int().positive().optional(),port:a.z.number().int().positive().max(65535).optional(),labels:a.z.record(a.z.string(),a.z.string()).default({})}).strict().default({labels:{}}),registrationToken:a.z.string().trim().min(1).max(240).optional(),lastHeartbeatAt:Xn.optional(),createdAt:Xn,updatedAt:Xn}).strict(),lo=a.z.union([co.transform(e=>({instance:e,gitWorkspaceProvisioningOperationId:void 0})),a.z.object({instance:co,gitWorkspaceProvisioningOperationId:Wn.optional()}).strict()]);a.z.preprocess(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e;return t.instance&&"object"==typeof t.instance&&!Array.isArray(t.instance)?{instance:ho(t.instance),..."string"==typeof t.gitWorkspaceProvisioningOperationId?{gitWorkspaceProvisioningOperationId:t.gitWorkspaceProvisioningOperationId}:{}}:ho(t)},lo);const uo="instance.lifecycle.snapshot",po=a.z.object({instanceId:co.shape.id,revision:a.z.number().int().min(0),updatedAt:Xn,status:co.shape.status.unwrap(),health:co.shape.health.unwrap(),connectionStatus:co.shape.connectionStatus.unwrap(),accessStatus:a.z.enum(["reachable","endpoint-unreachable"]),imageProvisioning:Ps.optional(),workspace:ao,runtime:co.shape.runtime.unwrap(),runtimeVersion:Bi.optional(),ready:a.z.boolean(),lastHeartbeatAt:Xn.optional()}).strict();function mo(e,t){return co.safeParse(ho(e,t))}function ho(e,t){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const n=e,i=new Set(Object.keys(co.shape)),s={};for(const[e,o]of Object.entries(n))i.has(e)?s[e]=o:t?.({instanceId:"string"==typeof n.id?n.id:void 0,field:e});if(n.capabilities&&"object"==typeof n.capabilities&&!Array.isArray(n.capabilities)){const e={...n.capabilities};Object.prototype.hasOwnProperty.call(e,"apps")&&(t?.({instanceId:"string"==typeof n.id?n.id:void 0,field:"capabilities.apps"}),delete e.apps),s.capabilities=Kn(e)}else s.capabilities=Kn(void 0);s.appInventory=function(e,t,n){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const i=e;Object.keys(i).some(e=>!["observedAt","items","issues"].includes(e))&&t?.({instanceId:n,field:"appInventory"});const s={observedAt:i.observedAt,items:Array.isArray(i.items)?i.items.map(e=>{e&&"object"==typeof e&&!Array.isArray(e)&&Object.keys(e).some(e=>!["id","name","kind","source","availability","capabilities","diagnosticCode"].includes(e))&&t?.({instanceId:n,field:"appInventory.items"});const i=yo(e,["id","name","kind","source","availability","diagnosticCode"]);return!i\|\|"object"!=typeof i\|\|Array.isArray(i)?i:{...i,capabilities:yo(e.capabilities,["automation","supportsCwdSelection"])}}):i.items,issues:Array.isArray(i.issues)?i.issues.map(e=>yo(e,["code","message"])):i.issues},o=Si.safeParse(s);return o.success?o.data:void 0}(n.appInventory,t,"string"==typeof n.id?n.id:void 0),s.source=function(e,t,n){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const i=e,s=i.type,o=ss.options.find(e=>e.shape.type.value===s);if(!o)return e;const r="local-folder"===s?["type","localFolderId","path","ownerNodeId"]:"git-template"===s?["type","url","templateId","ref","auth","clone"]:["type","repositoryId","url","provider","ref","auth","clone"],a=yo(i,r);if("local-folder"!==s){const e=function(e,t,n){const i=e&&"object"==typeof e&&!Array.isArray(e)?e:void 0,s=es.safeParse(yo(i,["type","name","commit"]));if(s.success)return s.data;const o="string"==typeof i?.commit?i.commit.trim():"",r="string"==typeof i?.name?i.name.trim():"",a=o?es.safeParse({type:"commit",commit:o}):r?es.safeParse({type:"tag"===i?.type?"tag":"branch",name:r}):es.safeParse({type:"branch",name:"main"});return a.success?(t?.({instanceId:n,field:"source.ref"}),a.data):void 0}(i.ref,t,n),s=go(ts,yo(i.auth,["type","secretId"]),"source.auth",t,n),o=go(ns,yo(i.clone,["depth","submodules","lfs","subdirectory"]),"source.clone",t,n);e?a.ref=e:delete a.ref,s?a.auth=s:delete a.auth,o?a.clone=o:delete a.clone}const c=go(o,a,"source",t,n);return c?(Object.keys(i).some(e=>!r.includes(e))&&t?.({instanceId:n,field:"source"}),c):a}(n.source,t,"string"==typeof n.id?n.id:void 0),s.sourceSnapshot=n.sourceSnapshot&&"object"==typeof n.sourceSnapshot&&!Array.isArray(n.sourceSnapshot)?n.sourceSnapshot:{},s.build=go($i,n.build,"build",t,"string"==typeof n.id?n.id:void 0),s.aiSessions=function(e,t,n){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const i=e,s=Array.isArray(i.sessions)?i.sessions.flatMap((e,i)=>{const s=go(kt,e,`aiSessions.sessions.${i}`,t,n);return s?[s]:[]}):[],o={runningCount:"number"==typeof i.runningCount&&Number.isInteger(i.runningCount)&&i.runningCount>=0?i.runningCount:0,waitingCount:"number"==typeof i.waitingCount&&Number.isInteger(i.waitingCount)&&i.waitingCount>=0?i.waitingCount:0,staleCount:"number"==typeof i.staleCount&&Number.isInteger(i.staleCount)&&i.staleCount>=0?i.staleCount:0,sessions:s,updatedAt:Xn.safeParse(i.updatedAt).success?i.updatedAt:(new Date).toISOString()};return Object.keys(i).some(e=>!["runningCount","waitingCount","staleCount","sessions","updatedAt"].includes(e))&&t?.({instanceId:n,field:"aiSessions"}),Dt.parse(o)}(n.aiSessions,t,"string"==typeof n.id?n.id:void 0),s.triggers=function(e,t,n){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const i=e;Object.keys(i).some(e=>!["enabledCount","runningCount","errorCount","configs","recentRuns"].includes(e))&&t?.({instanceId:n,field:"triggers"});const s=(e,i,s)=>Array.isArray(e)?e.flatMap((e,o)=>{const r=go(i,e,`${s}.${o}`,t,n);return r?[r]:[]}):[],o=Array.isArray(i.configs)?i.configs.flatMap((e,i)=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const o=e;Object.keys(o).some(e=>!["configHash","config","deployments","runtime"].includes(e))&&t?.({instanceId:n,field:`triggers.configs.${i}`});const r=function(e,t,n,i){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const s=e,o=yo(s,["configHash","name","description","createdAt","updatedAt"]);if(s.source&&"object"==typeof s.source&&!Array.isArray(s.source)){const e=s.source,t="schedule"===e.type?"interval"===e.scheduleKind?["type","scheduleKind","intervalMs"]:"daily"===e.scheduleKind?["type","scheduleKind","timeOfDay","timezone"]:["type","scheduleKind","weekdays","timeOfDay","timezone"]:"file-change"===e.type?["type","roots","globs","ignore","debounceMs"]:["type","agent","statuses","phases"];o.source=yo(e,t)}return o.action=yo(s.action,["promptTemplate"]),o.policy=yo(s.policy,["cooldownMs","maxConcurrentRuns","whenBusy"]),go(tn,o,t,n,i)}(o.config,`triggers.configs.${i}.config`,t,n);return"string"==typeof o.configHash&&r?[{configHash:o.configHash,config:r,deployments:s(o.deployments,sn,`triggers.configs.${i}.deployments`),runtime:s(o.runtime,on,`triggers.configs.${i}.runtime`)}]:[]}):[];return{enabledCount:"number"==typeof i.enabledCount&&Number.isInteger(i.enabledCount)&&i.enabledCount>=0?i.enabledCount:0,runningCount:"number"==typeof i.runningCount&&Number.isInteger(i.runningCount)&&i.runningCount>=0?i.runningCount:0,errorCount:"number"==typeof i.errorCount&&Number.isInteger(i.errorCount)&&i.errorCount>=0?i.errorCount:0,configs:o,recentRuns:s(i.recentRuns,rn,"triggers.recentRuns")}}(n.triggers,t,"string"==typeof n.id?n.id:void 0),s.apps=go(co.shape.apps.unwrap(),yo(n.apps,["runningCount","problemCount","updatedAt","revision"]),"apps",t,"string"==typeof n.id?n.id:void 0)\|\|{runningCount:0,problemCount:0},s.config=go(co.shape.config.unwrap(),yo(n.config,["autoImportAgentConfigs","codexConfigEnabled","codexHomeMode","defaultCodexPermissionMode","codexSettings","aiSessionHistoryLimit","aiSessionAttachmentRetentionDays","aiSessionMaxFileAttachmentBytes"]),"config",t,"string"==typeof n.id?n.id:void 0)\|\|{autoImportAgentConfigs:!0,codexConfigEnabled:!0,codexHomeMode:"taskhandoff",defaultCodexPermissionMode:"ask",aiSessionHistoryLimit:50,aiSessionAttachmentRetentionDays:30,aiSessionMaxFileAttachmentBytes:he},s.modelSelection=go(ci.unwrap(),yo(n.modelSelection,["modelEntityIds","codexModelHash","claudeModelHash","opencodeModelHash"]),"modelSelection",t,"string"==typeof n.id?n.id:void 0)\|\|{},s.imageSnapshot=function(e,t,n,i){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const s=e,o=function(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e,n=new Set(["id","origin","name","description","localizedDescriptions","cover","reference","repository","tag","image","registry","pullPolicy","capabilities","optionalApps","defaultEnv","labels","createdAt","updatedAt"]);for(const e of Object.keys(t))n.has(e);"string"==typeof t.id&&t.id;const i="string"==typeof t.image?t.image:void 0;Object.prototype.hasOwnProperty.call(t,"registry");let s,o="string"==typeof t.reference?t.reference:i;if(o)try{o=si(o)}catch{if(!o.includes("@")&&o.lastIndexOf(":")<=o.lastIndexOf("/"))try{o=si(`${o}:latest`)}catch{}}try{s=o?oi(o):void 0}catch{}return{id:t.id,origin:"custom",name:t.name,description:t.description,localizedDescriptions:t.localizedDescriptions,cover:yo(t.cover,["kind","key","url","mediaType","digest"]),reference:s?.reference??o,repository:s?.repository??t.repository,tag:s?.tag??t.tag,pullPolicy:t.pullPolicy??"if-not-present",capabilities:t.capabilities,optionalApps:t.optionalApps,defaultEnv:t.defaultEnv,labels:t.labels,createdAt:t.createdAt,updatedAt:t.updatedAt}}(s),{reference:r,...a}=o,c=s.requestedReference??r;let d;try{d="string"==typeof c?oi(c):void 0}catch{}const l={img_default:"market_taskhandoff_browser",img_codex:"market_taskhandoff_codex",img_ai:"market_taskhandoff_ai"},u="string"==typeof s.id?s.id:"string"==typeof t?t:void 0,p="market"===s.origin\|\|u&&l[u]?"market":"custom";return void 0===s.image&&void 0===s.reference\|\|n?.({instanceId:i,field:"imageSnapshot.reference"}),{...a,id:u&&l[u]?l[u]:u,origin:p,repository:d?.repository??s.repository,tag:d?.tag??s.tag,requestedReference:d?.reference??c,resolvedDigest:s.resolvedDigest,resolvedReference:s.resolvedReference,downloadSizeBytes:s.downloadSizeBytes,market:"market"===p?yo(s.market,["catalogId","catalogRevision","publisher","version"])??{catalogId:"task_handoff_embedded",catalogRevision:"legacy",publisher:"task-handoff"}:void 0}}(n.imageSnapshot,n.imageId,t,"string"==typeof n.id?n.id:void 0);const o="string"==typeof n.imageId?{img_default:"market_taskhandoff_browser",img_codex:"market_taskhandoff_codex",img_ai:"market_taskhandoff_ai"}[n.imageId]\|\|n.imageId:void 0,r=yo(n.imageSelection,["imageId","tag"]);s.imageSelection=r\|\|(o?{imageId:o,tag:s.imageSnapshot?.tag}:void 0),s.imageProvisioning=go(Ps,yo(n.imageProvisioning,["phase","requestedReference","generation","error","startedAt","updatedAt"]),"imageProvisioning",t,"string"==typeof n.id?n.id:void 0),s.runtimeVersion=function(e,t,n){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const i=e,s=e=>{if("string"!=typeof e)return;const t=e.trim();return t&&t.length<=80?t:void 0},o=s(i.desiredVersion);if(!o)return void t?.({instanceId:n,field:"runtimeVersion.desiredVersion"});const r=new Set(Bi.shape.phase.options),a="string"==typeof i.phase?i.phase:"pending",c=r.has(a)?a:{idle:"pending",queued:"pending",checking:"pending",downloading:"installing",updating:"installing",completed:"matched",succeeded:"matched",ready:"matched",error:"failed"}[a]\|\|"pending";let d;if(c!==a&&t?.({instanceId:n,field:"runtimeVersion.phase"}),i.error&&"object"==typeof i.error&&!Array.isArray(i.error)){const e=i.error,o="string"==typeof e.message?e.message.trim().slice(0,4096):"";if(o){const i=new Set(Vi.shape.code.options),r="string"==typeof e.code&&i.has(e.code)?e.code:"INSTANCE_RUNTIME_INSTALL_FAILED";r!==e.code&&t?.({instanceId:n,field:"runtimeVersion.error.code"});const a=s(e.expectedVersion),c=s(e.actualVersion);d={code:r,message:o,...a?{expectedVersion:a}:{},...c?{actualVersion:c}:{},retryable:!0===e.retryable}}else t?.({instanceId:n,field:"runtimeVersion.error"})}"string"==typeof i.error&&i.error.trim()&&(d={code:"INSTANCE_RUNTIME_INSTALL_FAILED",message:i.error.trim().slice(0,4096),expectedVersion:o,...s(i.actualVersion)?{actualVersion:s(i.actualVersion)}:{},retryable:!1});const l=s(i.actualVersion),u=Xn.safeParse(i.lastAttemptAt),p=Xn.safeParse(i.matchedAt);return void 0===i.lastAttemptAt\|\|u.success\|\|t?.({instanceId:n,field:"runtimeVersion.lastAttemptAt"}),void 0===i.matchedAt\|\|p.success\|\|t?.({instanceId:n,field:"runtimeVersion.matchedAt"}),{desiredVersion:o,...l?{actualVersion:l}:{},phase:c,attempt:"number"==typeof i.attempt&&Number.isInteger(i.attempt)&&i.attempt>=0?i.attempt:0,...u.success?{lastAttemptAt:u.data}:{},...p.success?{matchedAt:p.data}:{},...d?{error:d}:{}}}(n.runtimeVersion,t,"string"==typeof n.id?n.id:void 0),s.workspace=go(ao,n.workspace,"workspace",t,"string"==typeof n.id?n.id:void 0)\|\|{status:"unknown"},s.environmentSource=go(li,n.environmentSource,"environmentSource",t,"string"==typeof n.id?n.id:void 0),s.environmentTemplateOrigin=go(gi,n.environmentTemplateOrigin,"environmentTemplateOrigin",t,"string"==typeof n.id?n.id:void 0),s.runtime=go(co.shape.runtime.unwrap(),n.runtime,"runtime",t,"string"==typeof n.id?n.id:void 0)\|\|{labels:{}},s.target=go(so,yo(n.target??n.endpoints,["strategy","web","api","vnc","tty","logs","status"]),"target",t,"string"==typeof n.id?n.id:void 0)\|\|{strategy:"direct-port",status:"unknown"},s.access=go(ro,yo(n.access,["strategy","web","api","ws","status"]),"access",t,"string"==typeof n.id?n.id:void 0)\|\|{strategy:"control-plane-proxy",status:"unknown"};for(const[e,i]of Object.entries(co.shape))Object.prototype.hasOwnProperty.call(s,e)&&!i.safeParse(s[e]).success&&i.safeParse(void 0).success&&(delete s[e],t?.({instanceId:"string"==typeof n.id?n.id:void 0,field:e}));return s}function go(e,t,n,i,s){if(!t\|\|"object"!=typeof t\|\|Array.isArray(t))return;let o=structuredClone(t),r=!1;for(let t=0;t<20;t+=1){const t=e.safeParse(o);if(t.success)return r&&i?.({instanceId:s,field:n}),t.data;let a=!1;for(const e of t.error.issues){if("unrecognized_keys"!==e.code)continue;const t=fo(o,e.path);if(t&&"object"==typeof t&&!Array.isArray(t))for(const n of e.keys)Object.prototype.hasOwnProperty.call(t,n)&&(delete t[n],a=!0,r=!0)}if(!a){const r=structuredClone(o);let a=!1;for(const e of t.error.issues){if(!e.path.length\|\|"string"!=typeof e.path.at(-1))continue;const t=fo(r,e.path.slice(0,-1)),n=e.path.at(-1);t&&"object"==typeof t&&!Array.isArray(t)&&Object.prototype.hasOwnProperty.call(t,n)&&(delete t[n],a=!0)}if(a){const t=e.safeParse(r);if(t.success)return i?.({instanceId:s,field:n}),t.data}break}}i?.({instanceId:s,field:n})}function fo(e,t){let n=e;for(const e of t){if(!n\|\|"object"!=typeof n)return;n=n[e]}return n}function yo(e,t){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const n=e;return Object.fromEntries(t.filter(e=>Object.prototype.hasOwnProperty.call(n,e)).map(e=>[e,n[e]]))}const Io=a.z.object({instanceId:Wn.optional(),projectId:Wn.optional(),source:ss.optional(),nodeId:Wn.optional(),runtimeId:Wn.optional(),imageSelection:di.optional(),instanceVersion:a.z.string().trim().max(80).optional(),protocolVersion:Pn,build:$i.optional(),controlMode:a.z.enum(["standalone","controlled"]).default("controlled"),capabilities:Bn.default($n),appInventory:Si.optional(),target:oo.optional(),workspace:ao.default({status:"unknown"}),registrationToken:a.z.string().trim().max(240).optional(),processIncarnationId:a.z.string().trim().min(1).max(120).optional()}).strict().superRefine((e,t)=>{Dn.has(e.protocolVersion)&&!e.appInventory&&t.addIssue({code:"custom",path:["appInventory"],message:"Current protocol register payload requires appInventory."})}),Ao=a.z.object({status:co.shape.status.optional(),health:co.shape.health.optional(),protocolVersion:Pn,build:$i.optional(),capabilities:co.shape.capabilities.optional(),appInventory:Si.optional(),apps:co.shape.apps.optional(),aiSessions:co.shape.aiSessions.optional(),triggers:co.shape.triggers.optional(),workspace:ao.optional(),target:oo.optional(),processIncarnationId:a.z.string().trim().min(1).max(120).optional()}).strict().superRefine((e,t)=>{Dn.has(e.protocolVersion)&&!e.appInventory&&t.addIssue({code:"custom",path:["appInventory"],message:"Current protocol heartbeat payload requires appInventory."})}),_o=a.z.enum(["web","telegram","wechat","dingding","lark"]);function Eo(e,t){let n=So(t);for(let t=0;t<100;t+=1){const t=e.safeParse(n);if(t.success)return t;const i=To(t.error.issues);let s=!1;for(const e of i){const t=wo(n,e.path);if(t&&"object"==typeof t&&!Array.isArray(t))for(const n of e.keys)Object.prototype.hasOwnProperty.call(t,n)&&(delete t[n],s=!0)}if(!s)return t}return e.safeParse(n)}function To(e,t=[]){const n=[];for(const i of e){if("unrecognized_keys"===i.code){n.push({code:"unrecognized_keys",keys:i.keys,path:[...t,...i.path]});continue}if("invalid_union"!==i.code\|\|!Array.isArray(i.errors))continue;const e=i.errors.filter(e=>Array.isArray(e));if(!e.length)continue;const s=e.reduce((e,t)=>bo(t)<bo(e)?t:e);n.push(...To(s,[...t,...i.path]))}return n}function bo(e){return e.reduce((e,t)=>{if("unrecognized_keys"===t.code)return e;if("invalid_union"!==t.code\|\|!Array.isArray(t.errors))return e+1;const n=t.errors.filter(e=>Array.isArray(e));return e+(n.length?Math.min(...n.map(bo)):1)},0)}function wo(e,t){let n=e;for(const e of t){if(!n\|\|"object"!=typeof n)return;n=n[e]}return n}function So(e){return Array.isArray(e)?e.map(So):e&&"object"==typeof e?Object.getPrototypeOf(e)!==Object.prototype&&null!==Object.getPrototypeOf(e)?e:Object.fromEntries(Object.entries(e).map(([e,t])=>[e,So(t)])):e}function vo(e,t,n={}){return new Promise((i,s)=>{if(n.signal?.aborted)return void s(Object.assign(new Error(`${e} was aborted.`),{code:"RUNTIME_COMMAND_ABORTED"}));const o=l.spawn(e,t,{stdio:["ignore","pipe","pipe"]}),r=[],a=[];let c=!1;const d=n.timeoutMs?setTimeout(()=>{c=!0,o.kill("SIGKILL")},n.timeoutMs):void 0;let u=!1;const p=()=>{u=!0,o.kill("SIGKILL")},m=()=>{d&&clearTimeout(d),n.signal?.removeEventListener("abort",p)};n.signal?.addEventListener("abort",p,{once:!0}),d?.unref?.(),o.stdout.on("data",e=>r.push(Buffer.from(e))),o.stderr.on("data",e=>a.push(Buffer.from(e))),o.on("error",e=>{m(),s(e)}),o.on("close",t=>{m();const o={stdout:Buffer.concat(r).toString("utf8").trim(),stderr:Buffer.concat(a).toString("utf8").trim()};if(c){const t=new Error(`${e} timed out after ${n.timeoutMs}ms`);return Object.assign(t,{statusCode:504,code:"RUNTIME_COMMAND_TIMEOUT",details:o}),void s(t)}if(u)return void s(Object.assign(new Error(`${e} was aborted.`),{code:"RUNTIME_COMMAND_ABORTED",details:o}));if(0===t)return void i(o);const d=new Error(o.stderr\|\|`${e} exited with code ${t}`);Object.assign(d,{statusCode:502,code:"RUNTIME_EXECUTOR_FAILED",details:o}),s(d)})})}a.z.object({id:Wn,channel:_o,name:a.z.string().trim().min(1).max(160),enabled:a.z.boolean().default(!1),token:a.z.string().trim().max(4096).optional(),defaultChatId:a.z.string().trim().max(240).optional(),allowedUserIds:a.z.array(a.z.string().trim().min(1).max(240)).default([]),pollIntervalMs:a.z.number().int().positive().max(6e4).default(3e3),settings:a.z.record(a.z.string(),a.z.unknown()).default({}),createdAt:Xn,updatedAt:Xn}).strict(),a.z.object({id:Wn,channel:_o,bridgeId:Wn.optional(),chatSessionId:a.z.string().trim().min(1).max(240),userId:a.z.string().trim().max(240).optional(),activeProjectId:Wn.optional(),activeInstanceId:Wn.optional(),activeAiSessionId:a.z.string().trim().min(1).max(120).optional(),lastUsedAt:Xn,createdAt:Xn,updatedAt:Xn}).strict(),a.z.object({source:a.z.object({type:a.z.literal("chat-gateway").default("chat-gateway"),channel:_o,bridgeId:Wn.optional(),chatSessionId:a.z.string().trim().min(1).max(240),userId:a.z.string().trim().max(240).optional()}).strict(),message:a.z.object({text:a.z.string().trim().max(2e4).default(""),attachments:a.z.array(Ye).max(6).default([])}).strict().superRefine((e,t)=>{e.attachments.reduce((e,t)=>e+("inline"===t.source.type?t.size:0),0)>fe&&t.addIssue({code:a.z.ZodIssueCode.custom,path:["attachments"],message:"Inline attachments must be 41943040 bytes or less in total."})}),target:a.z.object({instanceId:Wn,aiSessionId:a.z.string().trim().min(1).max(120)}).strict().optional()}).strict(),a.z.object({id:Wn,instanceId:Wn,projectId:Wn.optional(),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().max(240).optional(),result:a.z.string().default(""),timeoutMs:a.z.number().positive().optional(),source:a.z.string().trim().max(120).optional(),kind:a.z.enum(["task","approval"]).default("task"),status:a.z.enum(["pending","unreachable"]).default("pending"),error:a.z.string().trim().max(2048).optional(),lastSeenAt:Xn}).strict();const No=(e,t,n={})=>new Promise((i,s)=>{if(n.signal?.aborted)return void s(Object.assign(new Error(`${e} was aborted.`),{code:"RUNTIME_COMMAND_ABORTED"}));const o=[];let r,a=!1,c=!1;try{r=u.spawn(e,t,{name:"xterm-256color",cols:n.cols\|\|120,rows:n.rows\|\|40,cwd:process.cwd(),env:process.env})}catch(e){return void s(e)}const d=n.timeoutMs?setTimeout(()=>{a=!0,r.kill("SIGKILL")},n.timeoutMs):void 0,l=()=>{c=!0;try{r.kill("SIGKILL")}catch{}};n.signal?.addEventListener("abort",l,{once:!0}),d?.unref?.(),r.onData(e=>{o.push(e),n.onData?.(e)}),r.onExit(({exitCode:t})=>{d&&clearTimeout(d),n.signal?.removeEventListener("abort",l);const r={stdout:o.join(""),stderr:""};a?s(Object.assign(new Error(`${e} timed out after ${n.timeoutMs}ms`),{statusCode:504,code:"RUNTIME_COMMAND_TIMEOUT",details:r})):c?s(Object.assign(new Error(`${e} was aborted.`),{code:"RUNTIME_COMMAND_ABORTED",details:r})):0!==t?s(Object.assign(new Error(r.stdout.replace(/\u001b\[[0-?][ -/][@-~]/g,"").split(/\r?\n/).map(e=>e.trim()).filter(Boolean).at(-1)\|\|`${e} exited with code ${t}`),{statusCode:502,code:"RUNTIME_EXECUTOR_FAILED",details:r})):i(r)})});class Oo{inFlight=new Map;runCommand;runTerminalCommand;constructor(e=vo,t){this.runCommand=e,this.runTerminalCommand=t\|\|function(e){return e===vo?No:async(t,n,i={})=>{const s=await e(t,n,{timeoutMs:i.timeoutMs,signal:i.signal});return s.stdout&&i.onData?.(s.stdout),s.stderr&&i.onData?.(s.stderr),s}}(e)}ensure(e,t,n,i){const s=si(e),o=this.inFlight.get(s);if(o)return t&&(o.phaseListeners.add(t),o.phase&&t(o.phase)),n&&(o.terminalListeners.add(n),o.terminalTail&&n({sequence:o.terminalSequence,data:o.terminalTail,replay:!0})),this.bindAbort(o,i),o.promise;const r=new Set,a=new Set;t&&r.add(t),n&&a.add(n);const c={promise:Promise.resolve(void 0),controller:new AbortController,abortDisposers:new Set,phaseListeners:r,terminalListeners:a,terminalSequence:0,terminalTail:""};return this.bindAbort(c,i),c.promise=this.ensureOnce(s,e=>{c.phase=e,r.forEach(t=>t(e))},e=>{c.terminalSequence+=1,c.terminalTail=`${c.terminalTail}${e}`.slice(-262144);const t={sequence:c.terminalSequence,data:e};a.forEach(e=>e(t))},c.controller.signal).finally(()=>{this.inFlight.delete(s);for(const e of c.abortDisposers)e();c.abortDisposers.clear()}),this.inFlight.set(s,c),c.promise}bindAbort(e,t){if(!t)return;if(t.aborted)return void e.controller.abort();const n=()=>e.controller.abort();t.addEventListener("abort",n,{once:!0}),e.abortDisposers.add(()=>t.removeEventListener("abort",n))}async ensureOnce(e,t,n,i){t("checking-image");let s=await this.inspect(e,i).catch(e=>{if(i.aborted)throw e}),o=!1;s\|\|(t("pulling-image"),await this.runTerminalCommand("docker",["pull",e],{cols:120,rows:40,signal:i,onData:n}),o=!0,s=await this.inspect(e,i)),t("resolving-image");const r=(a=s,Array.isArray(a.RepoDigests)?a.RepoDigests.filter(e=>"string"==typeof e):[]).find(e=>/@sha256:[a-fA-F0-9]{64}$/.test(e));var a;const c=r?.split("@").at(-1)?.toLowerCase();return{requestedReference:e,...c?{resolvedDigest:c}:{},resolvedReference:r\|\|e,pulled:o}}async inspect(e,t){const n=await this.runCommand("docker",["image","inspect",e,"--format","{{json .}}"],{signal:t});return JSON.parse(n.stdout.trim()\|\|"{}")}}function zo(e){if(!e)return;const t=/^([0-9]+(?:\.[0-9]+)?)\s(B\|kB\|MB\|GB\|TB)$/i.exec(e.trim());if(!t)return;const n=Number(t[1]){b:1,kb:1e3,mb:1e6,gb:1e9,tb:1e12}[t[2].toLowerCase()];return Number.isSafeInteger(Math.round(n))?Math.round(n):void 0}const Co="/run/task-handoff/bootstrap",Ro=`${Co}/entrypoint.sh`,xo="/bin/bash",ko=`${Co}/runtime-installer.mjs`,Do="/opt/task-handoff/instance-runtime";function Po(e,t){return{role:"runtime",name:`${Zo(e)}-runtime`,mountPath:Do,labels:{"task-handoff.owner":"task-handoff","task-handoff.instance-id":e,"task-handoff.node-id":t,"task-handoff.volume-role":"runtime"}}}function Lo(e){return function(e,t,n){const i=Zo(e);return[{role:"data",suffix:"data",mountPath:"/data"},{role:"agent-home",suffix:"agent-home",mountPath:"/home/agent"},..."local-folder"===n.type?[]:[{role:"workspace",suffix:"workspace",mountPath:"/workspace"}]].map(({role:n,suffix:s,mountPath:o})=>({role:n,name:`${i}-${s}`,mountPath:o,labels:{"task-handoff.owner":"task-handoff","task-handoff.instance-id":e,"task-handoff.node-id":t,"task-handoff.volume-role":n}}))}(e.instance.id,e.node?.id\|\|"node_unset",e.project.source)}const Mo=new Set(["TASK_HANDOFF_REGISTRATION_TOKEN","OPENAI_API_KEY","OPENAI_BASE_URL","CODEX_MODEL","TASK_HANDOFF_CODEX_BASE_URL","TASK_HANDOFF_CODEX_MODEL","TASK_HANDOFF_CODEX_MODEL_ID","ANTHROPIC_API_KEY","ANTHROPIC_BASE_URL","CLAUDE_MODEL","TASK_HANDOFF_CLAUDE_MODEL","TASK_HANDOFF_CLAUDE_MODEL_ID"]);function jo(e,t=[]){const n=e&&"object"==typeof e&&!Array.isArray(e)?e:{},i=n.Config&&"object"==typeof n.Config&&!Array.isArray(n.Config)?n.Config:n,s=new Set;for(const e of Array.isArray(i.Env)?i.Env:[]){if("string"!=typeof e)continue;const n=e.indexOf("="),i=-1===n?e:e.slice(0,n),o=-1===n?"":e.slice(n+1);Mo.has(i)&&s.add(`Config.Env.${i}`),t.some(e=>e&&o.includes(e))&&s.add(`Config.Env.${i\|\|"unknown"}`)}if(i.Labels&&"object"==typeof i.Labels&&!Array.isArray(i.Labels))for(const[e,n]of Object.entries(i.Labels))(Mo.has(e)\|\|"string"==typeof n&&t.some(e=>e&&n.includes(e)))&&s.add(`Config.Labels.${e}`);if(s.size)throw Object.assign(new Error(`Docker configuration contains instance-private values in ${[...s].sort().join(", ")}.`),{statusCode:409,code:"ENVIRONMENT_TEMPLATE_SECRET_IN_DOCKER_CONFIG",findings:[...s].sort()})}class Fo{runCommand;publishHost;images;launcherAssetsDir;portResolutionRetryDelaysMs;constructor(e=vo,t={}){this.runCommand=e,this.images=t.imageService\|\|new Oo(e),this.publishHost=t.publishHost\|\|"127.0.0.1",this.launcherAssetsDir=t.launcherAssetsDir\|\|Bo(),this.portResolutionRetryDelaysMs=t.portResolutionRetryDelaysMs?.length?t.portResolutionRetryDelaysMs:[0,100,250,500,1e3]}async start(e){nr(e);const t=e.instance.runtime.containerName\|\|Zo(e.instance.id),i=await this.inspectContainerForStart(t);if(i){Jo(t,i.id,e.instance.runtime.containerId,"before start","RUNTIME_EXECUTOR_FAILED");const s=i.labels["task-handoff.instance-id"];if(s!==e.instance.id)throw Go("RUNTIME_EXECUTOR_FAILED",`Docker container ${t} belongs to ${s\|\|"an unknown instance"}, not ${e.instance.id}.`);const o=i.mounts.find(e=>"bind"===e.type&&e.destination===Co);if("1"!==i.labels["task-handoff.bootstrap-abi"]\|\|i.entrypoint[0]!==xo\|\|i.command[0]!==Ro\|\|!o?.source\|\|n.resolve(o.source)!==n.resolve(this.launcherAssetsDir)){const n=new Set(Lo(e).flatMap(e=>i.mounts.some(t=>"volume"===t.type&&t.name===e.name&&t.destination===e.mountPath)?[e.name]:[]));return await this.createPersistentVolumes(e,n),this.recreateWithAuthoritativeBootstrap(e,t,i)}await this.createRuntimeVolume(e),await this.validatePersistentVolumes(e,i.mounts);try{await this.runCommand("docker",["start",t])}catch(e){throw Go("RUNTIME_EXECUTOR_FAILED",`Could not start Docker container ${t}.`,e)}return this.resumedContainerResult(e,t,i.id)}if(e.instance.environmentTemplateOrigin){const t=await this.inspectEnvironmentTemplateImage(e.instance.environmentTemplateOrigin.imageId);if(t.imageId!==e.instance.environmentTemplateOrigin.imageId\|\|t.platform!==e.instance.environmentTemplateOrigin.platform\|\|t.architecture!==e.instance.environmentTemplateOrigin.architecture)throw Object.assign(new Error(`Environment template image identity or platform changed for instance ${e.instance.id}.`),{statusCode:409,code:"ENVIRONMENT_TEMPLATE_IMAGE_IDENTITY_MISMATCH"})}else await this.images.ensure(e.image.resolvedReference\|\|e.image.requestedReference);let s;await this.createPersistentVolumes(e),"local-folder"!==e.project.source.type&&await this.provisionGitWorkspace(e);try{s=await this.runCommand("docker",tr(e,t,{publishHost:this.publishHost,launcherAssetsDir:this.launcherAssetsDir}))}catch(e){throw Go("RUNTIME_EXECUTOR_FAILED",`Could not create Docker container ${t}.`,e)}return e.completeGitWorkspaceProvisioning?.(),this.bootstrapResult(e,t,s.stdout\|\|void 0)}async provisionGitWorkspace(e){const i=e.gitWorkspaceProvisioning;if(!i)throw Go("GIT_WORKSPACE_PROVISIONING_MISSING",`Git workspace provisioning input is missing for ${e.instance.id}.`);const s=`${Zo(e.instance.id)}-git-provision`,o=t.mkdtempSync(n.join(c.tmpdir(),"task-handoff-git-auth-"));t.chmodSync(o,448);try{await this.runCommand("docker",["rm","-f",s],{timeoutMs:3e4}).catch(()=>({stdout:"",stderr:""})),this.materializeGitProvisioningAuth(o,i);const t=function(e,t,i,s={}){const o=e.gitWorkspaceProvisioning;if(!o\|\|"local-folder"===e.project.source.type)throw Object.assign(new Error("Git provisioning requires a Git source and operation input."),{code:"GIT_WORKSPACE_PROVISIONING_INVALID",statusCode:400});const r=n.resolve(s.launcherAssetsDir\|\|Bo()),a=Lo(e).find(e=>"workspace"===e.role);if(!a)throw Object.assign(new Error("Git workspace volume was not found."),{code:"GIT_WORKSPACE_VOLUME_MISSING",statusCode:409});const c=["run","--rm","--name",t,"--label","task-handoff.role=git-provisioning","--label",`task-handoff.instance-id=${e.instance.id}`,"--user","0:0","--network","bridge","--security-opt","no-new-privileges","--cap-drop","ALL","--cap-add","CHOWN","--cap-add","SETUID","--cap-add","SETGID","--cap-add","DAC_OVERRIDE","--mount",`type=volume,src=${a.name},dst=/workspace`,"--mount",`type=bind,src=${r},dst=${Co},readonly`,"--tmpfs","/run/task-handoff/git-runtime:rw,nosuid,nodev,exec,mode=0700"];o.credentials.length&&c.push("--mount",`type=bind,src=${n.resolve(i)},dst=/run/task-handoff/git-auth,readonly`);const d=(e,t)=>c.push("-e",`${e}=${t}`);return d("TASK_HANDOFF_GIT_URL",o.remoteUrl),d("TASK_HANDOFF_INSTANCE_ID",e.instance.id),"commit"===o.ref.type?d("TASK_HANDOFF_GIT_COMMIT",o.ref.commit):d("TASK_HANDOFF_GIT_REF",o.ref.name),o.clone.depth&&d("TASK_HANDOFF_GIT_DEPTH",String(o.clone.depth)),d("TASK_HANDOFF_GIT_SUBMODULES",o.clone.submodules?"true":"false"),d("TASK_HANDOFF_GIT_LFS",o.clone.lfs?"true":"false"),o.clone.subdirectory&&d("TASK_HANDOFF_WORKSPACE_SUBDIRECTORY",o.clone.subdirectory),c.push("--entrypoint","/bin/bash",e.instance.environmentTemplateOrigin?.imageId\|\|e.image.resolvedReference\|\|e.image.requestedReference,`${Co}/git-provision.sh`),c}(e,s,o,{launcherAssetsDir:this.launcherAssetsDir});await this.runCommand("docker",t,{timeoutMs:9e5,signal:e.signal})}catch(t){throw function(e,t){const n=t&&"object"==typeof t?t:void 0,i="string"==typeof n?.code?n.code:"";if("RUNTIME_COMMAND_TIMEOUT"===i)return Go("GIT_WORKSPACE_PROVISIONING_TIMEOUT",`Git workspace provisioning timed out for ${e}.`);if("RUNTIME_COMMAND_ABORTED"===i)return Go("GIT_WORKSPACE_PROVISIONING_CANCELLED",`Git workspace provisioning was cancelled for ${e}.`);const s=Xo(t)\|\|"",o=s.match(/TASK_HANDOFF_GIT_PROVISIONING_ERROR=([A-Z_]+)/)?.[1];return Go(`GIT_WORKSPACE_PROVISIONING_${o&&Wo.has(o)?o:"FAILED"}`,`Could not provision Git workspace for ${e}.`)}(e.instance.id,t)}finally{await this.runCommand("docker",["rm","-f",s],{timeoutMs:3e4}).catch(()=>({stdout:"",stderr:""})),t.rmSync(o,{recursive:!0,force:!0})}}materializeGitProvisioningAuth(e,i){const s=(e,i,s)=>{const o=n.join(e,i);t.writeFileSync(o,s,{encoding:"utf8",mode:384}),t.chmodSync(o,384)};i.credentials.forEach((i,o)=>{const r=n.join(e,`credential-${o}`);if(t.mkdirSync(r,{recursive:!0,mode:448}),t.chmodSync(r,448),s(r,"scope.json",JSON.stringify(i.payload.credential.scope)),"https-token"===i.payload.secret.kind)return s(r,"username",i.payload.secret.username),void s(r,"token",i.payload.secret.token);s(r,"private-key",i.payload.secret.privateKey),s(r,"known_hosts",i.payload.secret.pinnedKnownHosts),i.payload.secret.passphrase&&s(r,"passphrase",i.payload.secret.passphrase),s(r,"ssh-askpass.sh",`#!/usr/bin/env bash\ncat /run/task-handoff/git-runtime/credential-${o}/passphrase 2>/dev/null \|\| true\n`)})}async recreateWithAuthoritativeBootstrap(e,t,n){const i=`${t}-pre-bootstrap-${n.id.slice(0,12)}`;n.running&&await this.runCommand("docker",["stop",t]);try{await this.runCommand("docker",["rename",t,i])}catch(e){throw n.running&&await this.runCommand("docker",["start",t]).catch(()=>({stdout:"",stderr:""})),Go("RUNTIME_EXECUTOR_FAILED",`Could not preserve Docker container ${t} before bootstrap migration.`,e)}try{const s=await this.runCommand("docker",tr(e,t,{publishHost:this.publishHost,launcherAssetsDir:this.launcherAssetsDir,imageReference:n.image}));return this.bootstrapResult(e,t,s.stdout\|\|void 0,i)}catch(e){throw await this.runCommand("docker",["rm","-f",t]).catch(()=>({stdout:"",stderr:""})),await this.runCommand("docker",["rename",i,t]).catch(()=>({stdout:"",stderr:""})),n.running&&await this.runCommand("docker",["start",t]).catch(()=>({stdout:"",stderr:""})),Go("RUNTIME_EXECUTOR_FAILED",`Could not recreate Docker container ${t} with the node-agent bootstrap.`,e)}}async inspectContainerConfigSecurity(e,t){jo(await this.runCommand("docker",["inspect","--format","{{json .}}",e]).then(e=>JSON.parse(e.stdout\|\|"{}")).catch(t=>{throw Go("ENVIRONMENT_TEMPLATE_CONTAINER_INSPECT_FAILED",`Could not inspect Docker container ${e}.`,t)}),t)}async inspectImageConfigSecurity(e,t){jo(await this.runCommand("docker",["image","inspect","--format","{{json .}}",e]).then(e=>JSON.parse(e.stdout\|\|"{}")).catch(e=>{throw Go("ENVIRONMENT_TEMPLATE_IMAGE_INSPECT_FAILED","Could not inspect Docker image configuration.",e)}),t)}async commitEnvironmentTemplate(e,t,n){const i=await this.inspectContainerId(e);if(!i)throw Go("ENVIRONMENT_TEMPLATE_CONTAINER_NOT_FOUND",`Docker container ${e} does not exist.`);Jo(e,i,t,"before environment template commit","ENVIRONMENT_TEMPLATE_CONTAINER_IDENTITY_MISMATCH");try{const t=(await this.runCommand("docker",["commit",e,n])).stdout.trim();if(!t)throw new Error("Docker commit did not return an image id.");return t}catch(t){throw Go("ENVIRONMENT_TEMPLATE_COMMIT_FAILED",`Could not save Docker container ${e} as an environment template.`,t)}}async inspectEnvironmentTemplateImage(e){try{const t=await this.runCommand("docker",["image","inspect","--format","{{json .}}",e]),n=JSON.parse(t.stdout\|\|"{}"),i="string"==typeof n.Id?n.Id:"",s=qo(n.Os),o=Vo(n.Architecture),r="number"==typeof n.Size?n.Size:Number.NaN;if(!/^sha256:[a-f0-9]{64}$/.test(i)\|\|!s\|\|!o\|\|!Number.isSafeInteger(r)\|\|r<0)throw new Error("Docker image inspection did not return a valid immutable identity.");return{imageId:i,platform:s,architecture:o,sizeBytes:r}}catch(e){throw Go("ENVIRONMENT_TEMPLATE_IMAGE_INSPECT_FAILED","Could not inspect the committed environment template image.",e)}}async untagEnvironmentTemplate(e,t){try{const n=t\|\|(await this.inspectEnvironmentTemplateImage(e)).imageId;return await this.runCommand("docker",["tag",n,Ko(n)]),await this.runCommand("docker",["image","rm",e]),n}catch(e){const t=Xo(e)?.toLowerCase()\|\|"";if(t.includes("no such image")\|\|t.includes("no such object"))return;throw Go("ENVIRONMENT_TEMPLATE_UNTAG_FAILED","Could not remove the environment template tag.",e)}}async garbageCollectEnvironmentTemplateImage(e){try{try{await this.runCommand("docker",["image","rm",Ko(e)])}catch(e){const t=Xo(e)?.toLowerCase()\|\|"";if(t.includes("being used by")\|\|t.includes("is referenced")\|\|t.includes("conflict"))return!1;if(!t.includes("no such image")&&!t.includes("no such object"))throw e}return await this.runCommand("docker",["image","rm",e]),!0}catch(e){const t=Xo(e)?.toLowerCase()\|\|"";if(t.includes("being used by")\|\|t.includes("is referenced")\|\|t.includes("conflict"))return!1;if(t.includes("no such image")\|\|t.includes("no such object"))return!0;throw Go("ENVIRONMENT_TEMPLATE_GC_FAILED","Could not garbage collect the environment template image.",e)}}async createPersistentVolumes(e,t=new Set){const n=Po(e.instance.id,e.node?.id\|\|"node_unset");for(const i of[...Lo(e),n])await this.createVolume(i),await this.validateOwnedVolume(e.instance.id,i,t.has(i.name))}async createRuntimeVolume(e){await this.createVolume(Po(e.instance.id,e.node?.id\|\|"node_unset"))}async createVolume(e){const t=["volume","create"];for(const[n,i]of Object.entries(e.labels).sort(([e],[t])=>e.localeCompare(t)))t.push("--label",`${n}=${i}`);t.push(e.name);try{await this.runCommand("docker",t)}catch(t){throw Go("INSTANCE_VOLUME_CREATE_FAILED",`Could not create managed volume ${e.name}.`,t)}}async validatePersistentVolumes(e,t){for(const n of Lo(e)){await this.validateOwnedVolume(e.instance.id,n);const i=t.find(e=>"volume"===e.type&&e.destination===n.mountPath);if(!i\|\|i.name!==n.name)throw Object.assign(new Error(`Docker container mount for ${n.role} does not match managed volume ${n.name}.`),{statusCode:409,code:"INSTANCE_VOLUME_MOUNT_IDENTITY_MISMATCH"})}const i=Po(e.instance.id,e.node?.id\|\|"node_unset");await this.validateOwnedVolume(e.instance.id,i);const s=t.find(e=>"volume"===e.type&&e.destination===i.mountPath);if(!s\|\|s.name!==i.name)throw Object.assign(new Error(`Docker container runtime mount does not match ${i.name}.`),{statusCode:409,code:"INSTANCE_VOLUME_MOUNT_IDENTITY_MISMATCH"});if("local-folder"===e.project.source.type){const i=t.find(t=>t.destination===(e.project.workspacePolicy.path\|\|"/workspace"));if(!i\|\|"bind"!==i.type\|\|n.resolve(i.source\|\|"")!==n.resolve(e.project.source.path))throw Object.assign(new Error(`Docker container workspace bind does not match local folder ${e.project.source.path}.`),{statusCode:409,code:"INSTANCE_WORKSPACE_MOUNT_IDENTITY_MISMATCH"})}}async validateOwnedVolume(e,t,n=!1){let i;try{i=await this.runCommand("docker",["volume","inspect","--format","{{json .}}",t.name])}catch(e){throw Go("INSTANCE_VOLUME_INSPECT_FAILED",`Could not inspect managed volume ${t.name}.`,e)}try{const s=JSON.parse(i.stdout\|\|"{}"),o=s.Labels&&"object"==typeof s.Labels&&!Array.isArray(s.Labels)?s.Labels:{},r=s.Name===t.name&&"task-handoff"===o["task-handoff.owner"]&&o["task-handoff.instance-id"]===e&&o["task-handoff.volume-role"]===t.role,a=n&&s.Name===t.name&&0===Object.keys(o).length;if(!r&&!a)throw new Error("volume name or ownership labels do not match")}catch(n){throw Object.assign(new Error(`Managed volume ${t.name} identity does not match instance ${e}.`,{cause:n}),{statusCode:409,code:"INSTANCE_VOLUME_IDENTITY_MISMATCH"})}}async runningResult(e,t,n){const i=await this.publishedEndpoint(t),s=e.node?.id\|\|"node_unset",o=e.runtime?.id\|\|"runtime_local_docker";return{status:"registering",health:"unknown",connectionStatus:"online",agentStatus:"unknown",targetStatus:"unknown",uiAccessStatus:"unknown",target:{strategy:"direct-port",status:"reachable",...i},workspace:{mode:e.project.workspacePolicy.mode,status:"pending",path:e.project.workspacePolicy.path},runtime:{...e.instance.runtime,kind:"docker",containerName:t,...n?{containerId:n}:{},labels:{...e.instance.runtime.labels,"task-handoff.instance-id":e.instance.id,"task-handoff.project-id":e.project.id,"task-handoff.node-id":s,"task-handoff.runtime-id":o,"task-handoff.image-id":e.image.id}}}}async resumedContainerResult(e,t,n){const i=this.bootstrapResult(e,t,n);return{...i,target:{...i.target,...await this.publishedEndpoint(t)}}}async publishedEndpoint(e){const t=`http://127.0.0.1:${await this.containerPort(e,"8080/tcp")}`;return{web:t,api:`${t}/api`}}async resolveInstanceWeb(e){const t=e.instance.runtime.containerName\|\|Zo(e.instance.id),n=await this.inspectContainerId(t);if(!n)throw Go("INSTANCE_RUNTIME_ENDPOINT_UNAVAILABLE",`Docker container ${t} does not exist.`);return Jo(t,n,e.instance.runtime.containerId,"while resolving its web endpoint","INSTANCE_RUNTIME_ENDPOINT_UNAVAILABLE"),(await this.publishedEndpoint(t)).web}bootstrapResult(e,t,n,i){return{status:"starting",health:"unknown",connectionStatus:"unknown",agentStatus:"unknown",targetStatus:"unknown",uiAccessStatus:"unknown",target:{strategy:"direct-port",status:"unknown"},workspace:{mode:e.project.workspacePolicy.mode,status:"pending",path:e.project.workspacePolicy.path},runtime:{...e.instance.runtime,kind:"docker",containerName:t,...n?{containerId:n}:{},labels:{...e.instance.runtime.labels,"task-handoff.bootstrap-abi":"1",...i?{"task-handoff.bootstrap-backup":i}:{}}}}}async stop(e){const t=e.instance.runtime.containerName\|\|Zo(e.instance.id);try{await this.runCommand("docker",["stop",t])}catch(e){if(!Yo(e))throw Go("RUNTIME_EXECUTOR_FAILED",`Could not stop Docker container ${t}.`,e)}return{status:"stopped",health:"unknown",connectionStatus:"offline",target:{...e.instance.target,status:"unknown"},runtime:e.instance.runtime}}async restart(e,t){nr(e);const n=e.instance.runtime.containerName\|\|Zo(e.instance.id),i=await this.inspectContainerId(n);if(!i)throw Go("INSTANCE_RUNTIME_RESTART_FAILED",`Docker container ${n} does not exist.`);Jo(n,i,t,"before restart","INSTANCE_RUNTIME_RESTART_FAILED"),await this.runCommand("docker",["restart",n]);const s=await this.inspectContainerId(n);if(!s\|\|s!==i)throw Go("INSTANCE_RUNTIME_RESTART_FAILED",`Docker container identity changed while restarting ${n}.`);return Jo(n,s,t,"after restart","INSTANCE_RUNTIME_RESTART_FAILED"),this.runningResult(e,n,s)}async delete(e,t){const n=e.instance.runtime.containerName\|\|Zo(e.instance.id),i=await this.inspectContainerForStart(n),s=new Set;if(i){Jo(n,i.id,e.instance.runtime.containerId,"before delete","RUNTIME_EXECUTOR_FAILED");const t=i.labels["task-handoff.instance-id"];if(t!==e.instance.id)throw Go("RUNTIME_EXECUTOR_FAILED",`Docker container ${n} belongs to ${t\|\|"an unknown instance"}, not ${e.instance.id}.`);for(const t of Lo(e))i.mounts.some(e=>"volume"===e.type&&e.name===t.name&&e.destination===t.mountPath)&&s.add(t.name);try{await this.runCommand("docker",["rm","-f",i.id])}catch(e){if(!Yo(e))throw Go("RUNTIME_EXECUTOR_FAILED",`Could not delete Docker container ${n}.`,e)}}const o=[];for(const n of Lo(e))if(t.deleteVolumes)try{const t=await this.inspectVolumeForDelete(n.name);if(!t){o.push({role:n.role,name:n.name,mountPath:n.mountPath,status:"missing"});continue}const i=t.name===n.name&&"task-handoff"===t.labels["task-handoff.owner"]&&t.labels["task-handoff.instance-id"]===e.instance.id&&t.labels["task-handoff.volume-role"]===n.role,r=s.has(n.name)&&t.name===n.name&&0===Object.keys(t.labels).length;if(!i&&!r)throw Object.assign(new Error(`Managed volume ${n.name} ownership does not match instance ${e.instance.id}.`),{code:"INSTANCE_VOLUME_IDENTITY_MISMATCH"});await this.runCommand("docker",["volume","rm",n.name]),o.push({role:n.role,name:n.name,mountPath:n.mountPath,status:"deleted"})}catch(e){o.push({role:n.role,name:n.name,mountPath:n.mountPath,status:"failed",error:{code:"object"==typeof e&&e&&"code"in e&&"string"==typeof e.code?e.code:"INSTANCE_VOLUME_DELETE_FAILED",message:e instanceof Error?e.message:String(e)}})}else o.push({role:n.role,name:n.name,mountPath:n.mountPath,status:"retained"});return await this.deleteRuntimeVolume(e),Ai.parse({instanceId:e.instance.id,containerDeleted:!0,completed:o.every(e=>"failed"!==e.status),deletedVolumes:o.filter(e=>"deleted"===e.status\|\|"missing"===e.status),retainedVolumes:o.filter(e=>"retained"===e.status),volumeResults:o})}async deleteRuntimeVolume(e){const t=Po(e.instance.id,e.node?.id\|\|"node_unset"),n=await this.inspectVolumeForDelete(t.name);if(n){if(n.name!==t.name\|\|"task-handoff"!==n.labels["task-handoff.owner"]\|\|n.labels["task-handoff.instance-id"]!==e.instance.id\|\|"runtime"!==n.labels["task-handoff.volume-role"])throw Go("INSTANCE_VOLUME_IDENTITY_MISMATCH",`Runtime volume ${t.name} ownership does not match instance ${e.instance.id}.`);try{await this.runCommand("docker",["volume","rm",t.name])}catch(e){throw Go("INSTANCE_VOLUME_DELETE_FAILED",`Could not delete runtime volume ${t.name}.`,e)}}}async inspectVolumeForDelete(e){try{const t=await this.runCommand("docker",["volume","inspect","--format","{{json .}}",e]),n=JSON.parse(t.stdout\|\|"{}");return{name:"string"==typeof n.Name?n.Name:"",labels:n.Labels&&"object"==typeof n.Labels&&!Array.isArray(n.Labels)?Object.fromEntries(Object.entries(n.Labels).filter(e=>"string"==typeof e[1])):{}}}catch(t){if(function(e){const t=Xo(e)?.toLowerCase()\|\|"";return t.includes("no such volume")\|\|t.includes("no such object")}(t))return;throw Go("INSTANCE_VOLUME_INSPECT_FAILED",`Could not inspect managed volume ${e}.`,t)}}async installRuntime(e){const t=await this.installRuntimeRelease(e);Jo(e.containerName,t,e.expectedContainerId,"before runtime restart","INSTANCE_RUNTIME_RESTART_FAILED");try{await this.runCommand("docker",["restart",t])}catch(t){throw Go("INSTANCE_RUNTIME_RESTART_FAILED",`Could not restart Docker container ${e.containerName}.`,t)}const n=await this.inspectContainerId(e.containerName);if(!n\|\|n!==t)throw Go("INSTANCE_RUNTIME_RESTART_FAILED",`Docker container identity changed while updating ${e.containerName}.`);return Jo(e.containerName,n,e.expectedContainerId,"after runtime restart","INSTANCE_RUNTIME_RESTART_FAILED"),this.inspectRuntimeVersion(e.containerName)}async installRuntimeRelease(e){const t=await this.inspectContainerId(e.containerName);if(!t)throw Go("INSTANCE_RUNTIME_INSTALL_FAILED",`Docker container ${e.containerName} does not exist.`);Jo(e.containerName,t,e.expectedContainerId,"before runtime install","INSTANCE_RUNTIME_INSTALL_FAILED");const n=`/opt/task-handoff/instance-runtime/incoming/task-handoff-runtime-${i=e.identity.version,i.replace(/[^0-9A-Za-z.+_-]/g,"-")}-${e.identity.sha256.slice(0,12)}.tar.gz`;var i;await this.runCommand("docker",["exec","--user","0",t,"install","-d","-o","root","-g","root","-m","0755","/opt/task-handoff/instance-runtime/incoming"]),await this.runCommand("docker",["cp",e.artifactPath,`${t}:${n}`]);try{await this.runCommand("docker",["exec","--user","0",t,"node",ko,"install","--artifact",n,"--version",e.identity.version,"--sha256",e.identity.sha256,"--platform",e.identity.platform,"--arch",e.identity.arch,"--launcher-abi",String(e.identity.launcherAbi)])}catch(t){throw Go("INSTANCE_RUNTIME_INSTALL_FAILED",`Could not install controlled-instance ${e.identity.version} in ${e.containerName}.`,t)}finally{await this.runCommand("docker",["exec","--user","0",t,"rm","-f",n]).catch(()=>({stdout:"",stderr:""}))}const s=await this.inspectContainerId(e.containerName);if(!s\|\|s!==t)throw Go("INSTANCE_RUNTIME_INSTALL_FAILED",`Docker container identity changed while installing ${e.containerName}.`);return Jo(e.containerName,s,e.expectedContainerId,"after runtime install","INSTANCE_RUNTIME_INSTALL_FAILED"),t}async inspectRuntimeVersion(e){const t=await this.inspectContainerId(e);if(!t)return{};const n=await this.runCommand("docker",["exec","--user","agent",e,"node",ko,"verify-active"]).catch(()=>{});if(!n?.stdout)return{containerId:t};try{const e=Eo(qi,JSON.parse(n.stdout));return e.success?{containerId:t,...e.data}:{containerId:t}}catch{return{containerId:t}}}async removeBootstrapBackup(e,t){const n=await this.inspectContainerForStart(e);if(n){if(n.labels["task-handoff.instance-id"]!==t)throw Go("RUNTIME_EXECUTOR_FAILED",`Docker bootstrap backup ${e} does not belong to ${t}.`);await this.runCommand("docker",["rm","-f",e])}}async inspectRuntimeTarget(e){let t,n;if(e){const i=await this.runCommand("docker",["inspect","--format","{{json .}}",e]).then(e=>JSON.parse(e.stdout.trim()\|\|"{}")).catch(()=>{});if(t=i?.Platform,"string"==typeof i?.Image&&i.Image){const e=await this.runCommand("docker",["image","inspect","--format","{{json .}}",i.Image]).then(e=>JSON.parse(e.stdout.trim()\|\|"{}")).catch(()=>{});t=e?.Os\|\|t,n=e?.Architecture}}if(!t\|\|!n){const e=await this.runCommand("docker",["info","--format","{{json .}}"]).then(e=>JSON.parse(e.stdout.trim()\|\|"{}")).catch(e=>{throw Go("INSTANCE_BASE_RUNTIME_INCOMPATIBLE","Could not inspect the Docker runtime target.",e)});t\|\|=e.OSType,n\|\|=e.Architecture}const i=qo(t),s=Vo(n);if(!i\|\|!s)throw Go("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Docker reported an unsupported runtime target ${String(t\|\|"unknown")}/${String(n\|\|"unknown")}.`);return{platform:i,arch:s,launcherAbi:1}}async installRuntimeReleaseWithRecovery(e){const t=e.containerName,i=await this.inspectContainerForStart(t);if(!i)throw Go("INSTANCE_RUNTIME_INSTALL_FAILED",`Docker container ${t} does not exist.`);if(Jo(t,i.id,e.expectedContainerId,"before runtime install recovery","INSTANCE_RUNTIME_INSTALL_FAILED"),i.running)return await this.installRuntimeLauncher(t,i.id),void await this.installRuntimeRelease({...e,expectedContainerId:i.id});if(!i.image)throw Go("INSTANCE_RUNTIME_INSTALL_FAILED",`Docker container ${t} does not expose its immutable image identity.`);const s="/run/task-handoff/runtime-rescue-artifact.tar.gz",o=[`test -r ${Ro}`,`test -r ${Co}/instance-launcher.sh`,`test -r ${ko}`,`install -d -o root -g root -m 0755 ${Do} ${Do}/releases ${Do}/staging ${Do}/incoming`,`chown -R root:root ${Do}`,`chmod -R go-w ${Do}`,`node ${ko} install --artifact "$1" --version "$2" --sha256 "$3" --platform "$4" --arch "$5" --launcher-abi "$6"`].join("; ");try{await this.runCommand("docker",["run","--rm","--user","0:0","--volumes-from",i.id,"--mount",`type=bind,source=${n.resolve(e.artifactPath)},target=${s},readonly`,"--entrypoint",xo,i.image,"-ceu",o,"task-handoff-runtime-rescue",s,e.identity.version,e.identity.sha256,e.identity.platform,e.identity.arch,String(e.identity.launcherAbi)])}catch(n){throw Go("INSTANCE_RUNTIME_INSTALL_FAILED",`Could not rescue controlled-instance ${e.identity.version} in stopped container ${t}.`,n)}const r=await this.inspectContainerForStart(t);if(!r)throw Go("INSTANCE_RUNTIME_INSTALL_FAILED",`Docker container ${t} disappeared during runtime install recovery.`);if(Jo(t,r.id,i.id,"after runtime install recovery","INSTANCE_RUNTIME_INSTALL_FAILED"),r.running)throw Go("INSTANCE_RUNTIME_INSTALL_FAILED",`Stopped Docker container ${t} changed lifecycle state during runtime install recovery.`)}async installRuntimeLauncher(e,t){const n=await this.inspectContainerId(e);if(!n)throw Go("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Docker container ${e} does not exist.`);Jo(e,n,t,"before runtime launcher install","INSTANCE_BASE_RUNTIME_INCOMPATIBLE");try{await this.runCommand("docker",["exec","--user","0",n,"bash","-ceu",`test -r ${Ro}; test -r ${Co}/instance-launcher.sh; test -r ${ko}; install -d -o root -g root -m 0755 /opt/task-handoff/instance-runtime /opt/task-handoff/instance-runtime/releases /opt/task-handoff/instance-runtime/staging /opt/task-handoff/instance-runtime/incoming; chown -R root:root /opt/task-handoff/instance-runtime; chmod -R go-w /opt/task-handoff/instance-runtime`])}catch(t){throw Go("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Could not install the runtime launcher in ${e}.`,t)}const i=await this.inspectContainerId(e);if(i!==n)throw Go("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Docker container identity changed while installing the runtime launcher in ${e}.`);Jo(e,i,t,"after runtime launcher install","INSTANCE_BASE_RUNTIME_INCOMPATIBLE")}async inspectContainerId(e){try{return(await this.runCommand("docker",["inspect","--format","{{.Id}}",e])).stdout.trim()\|\|void 0}catch(t){if(Yo(t))return;throw Go("RUNTIME_EXECUTOR_FAILED",`Could not inspect Docker container ${e}.`,t)}}async inspectContainerForStart(e){let t;try{t=await this.runCommand("docker",["inspect","--format","{{json .}}",e])}catch(t){if(Yo(t))return;throw Go("RUNTIME_EXECUTOR_FAILED",`Could not inspect Docker container ${e}.`,t)}try{const e=JSON.parse(t.stdout\|\|"{}");if("string"!=typeof e.Id\|\|!e.Id)throw new Error("Docker inspect did not return a container id.");const n=e.Config?.Labels&&"object"==typeof e.Config.Labels&&!Array.isArray(e.Config.Labels)?Object.fromEntries(Object.entries(e.Config.Labels).filter(e=>"string"==typeof e[1])):{},i=Array.isArray(e.Mounts)?e.Mounts.flatMap(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const t=e,n="volume"===t.Type\|\|"bind"===t.Type?t.Type:void 0,i="string"==typeof t.Destination?t.Destination:void 0;return n&&i?[{type:n,destination:i,name:"string"==typeof t.Name?t.Name:void 0,source:"string"==typeof t.Source?t.Source:void 0}]:[]}):[],s=Array.isArray(e.Config?.Entrypoint)?e.Config.Entrypoint.filter(e=>"string"==typeof e):"string"==typeof e.Config?.Entrypoint?[e.Config.Entrypoint]:[],o=Array.isArray(e.Config?.Cmd)?e.Config.Cmd.filter(e=>"string"==typeof e):"string"==typeof e.Config?.Cmd?[e.Config.Cmd]:[];return{id:e.Id,image:"string"==typeof e.Image?e.Image:void 0,running:!0===e.State?.Running,entrypoint:s,command:o,labels:n,mounts:i}}catch(t){throw Go("RUNTIME_EXECUTOR_FAILED",`Docker returned invalid inspection data for ${e}.`,t)}}async containerPort(e,t){let n,i=!1;for(const s of this.portResolutionRetryDelaysMs){s>0&&await Ho(s);try{const n=Uo((await this.runCommand("docker",["port",e,t])).stdout);if(n)return n}catch(e){n=e}try{const n=$o((await this.runCommand("docker",["inspect","--format","{{json .NetworkSettings.Ports}}",e])).stdout,t);if(i=!0,n)return n}catch(e){n=e}}if(i)throw Go("RUNTIME_EXECUTOR_FAILED",`Docker container ${e} does not publish ${t}.`);throw Go("RUNTIME_EXECUTOR_FAILED",`Could not resolve the published port for Docker container ${e}.`,n)}}function Uo(e){const t=e.split(/\r?\n/).find(Boolean);return t?.match(/:(\d+)$/)?.[1]}function $o(e,t){const n=JSON.parse(e\|\|"null");if(!n\|\|"object"!=typeof n\|\|Array.isArray(n))return;const i=n[t];if(Array.isArray(i))for(const e of i){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))continue;const t=e.HostPort;if("string"==typeof t&&/^\d+$/.test(t))return t}}function Ho(e){return new Promise(t=>setTimeout(t,e))}function qo(e){return"linux"===e\|\|"darwin"===e?e:"windows"===e\|\|"win32"===e?"win32":void 0}function Vo(e){return"amd64"===e\|\|"x86_64"===e\|\|"x64"===e?"x64":"arm64"===e\|\|"aarch64"===e?"arm64":void 0}function Bo(){const e=("undefined"==typeof document?require("url").pathToFileURL(__filename).href:O&&"SCRIPT"===O.tagName.toUpperCase()&&O.src\|\|new URL("cli.js",document.baseURI).href)?n.dirname(s.fileURLToPath("undefined"==typeof document?require("url").pathToFileURL(__filename).href:O&&"SCRIPT"===O.tagName.toUpperCase()&&O.src\|\|new URL("cli.js",document.baseURI).href)):__dirname,i=[n.resolve(e,"../../../../../docker"),n.resolve(e,"../docker"),n.resolve(e,"../../docker")];return i.find(e=>t.existsSync(n.join(e,"runtime-installer.mjs")))\|\|i[0]}function Ko(e){return`task-handoff/environment-image:${e.replace(/^sha256:/,"")}`}function Go(e,t,n){const i=Xo(n),s=new Error(i?`${t} Cause: ${i}`:t,void 0===n?void 0:{cause:n});return Object.assign(s,{statusCode:502,code:e}),s}const Wo=new Set(["AUTHENTICATION_REJECTED","CLONE_FAILED","CREDENTIAL_AMBIGUOUS","CREDENTIAL_MISSING","HOST_KEY_REQUIRED","LFS_FAILED","REF_NOT_FOUND","REMOTE_UNSUPPORTED","SSH_AGENT_UNAVAILABLE","SUBDIRECTORY_NOT_FOUND","WORKSPACE_NOT_EMPTY","WORKSPACE_OWNERSHIP_MISMATCH"]);function Xo(e){if(!e\|\|"object"!=typeof e)return void 0===e?void 0:String(e);const t=e,n=t.details?.stderr\|\|t.details?.stdout;return"string"==typeof n&&n.trim()?n.trim():"string"==typeof t.message&&t.message.trim()?t.message.trim():void 0}function Yo(e){const t=Xo(e)?.toLowerCase()\|\|"";return t.includes("no such container")\|\|t.includes("no such object")}function Jo(e,t,n,i,s){if(n&&t!==n)throw Go(s,`Docker container ${e} identity mismatch ${i}: expected ${n}, got ${t}.`)}async function Qo(e=vo){return async function(e=vo){return(await e("docker",["images","--digests","--format","{{json .}}"])).stdout.split(/\r?\n/).map(e=>e.trim()).filter(Boolean).map(e=>{const t=JSON.parse(e),n=t.Repository\|\|"<none>",i=t.Tag\|\|"<none>",s=t.ID\|\|t.IDShort\|\|"",o="<none>"!==n&&"<none>"!==i?`${n}:${i}`:s,r="<none>"!==n&&t.Digest&&"<none>"!==t.Digest?[`${n}@${t.Digest}`]:[];return{repository:n,tag:i,id:s,createdSince:t.CreatedSince,size:t.Size,sizeBytes:zo(t.Size),reference:o,repoDigests:r}}).filter(e=>Boolean(e.reference))}(e)}function Zo(e){return`task-handoff-${e.replace(/[^a-zA-Z0-9_.-]/g,"-")}`}function er(e,t,n){e.push("-e",`${t}=${n}`)}function tr(e,t,i={}){const s=i.publishHost\|\|"127.0.0.1",o=n.resolve(i.launcherAssetsDir\|\|Bo()),r=e.node?.id\|\|"node_unset",a=e.runtime?.id\|\|"runtime_local_docker",c=["run","-d","--name",t,"--user","0:0","--label",`task-handoff.instance-id=${e.instance.id}`,"--label",`task-handoff.project-id=${e.project.id}`,"--label",`task-handoff.node-id=${r}`,"--label",`task-handoff.runtime-id=${a}`,"--label",`task-handoff.image-id=${e.image.id}`,"--label","task-handoff.bootstrap-abi=1","--shm-size","1gb","--security-opt","seccomp=unconfined","--network","bridge","--no-healthcheck","--add-host","host.docker.internal:host-gateway","--tmpfs","/tmp:rw,nosuid,nodev,exec,mode=1777","-p",`${s}::8080`];if(!e.privateConfigPath)throw Object.assign(new Error(`Instance ${e.instance.id} private config was not materialized.`),{statusCode:409,code:"INSTANCE_PRIVATE_CONFIG_MISSING"});c.push("--mount",`type=bind,src=${e.privateConfigPath},dst=/run/task-handoff/instance-private-config.json,readonly`,"--mount",`type=bind,src=${o},dst=${Co},readonly`,"--entrypoint",xo);for(const t of Lo(e))c.push("--mount",`type=volume,src=${t.name},dst=${t.mountPath}`);const d=Po(e.instance.id,e.node?.id\|\|"node_unset");c.push("--mount",`type=volume,src=${d.name},dst=${d.mountPath}`);const l={TASK_HANDOFF_CONTROL_MODE:"controlled",TASK_HANDOFF_NODE_AGENT_URL:e.nodeAgentUrl\|\|e.node?.endpoint\|\|"",TASK_HANDOFF_INSTANCE_ID:e.instance.id,TASK_HANDOFF_INSTANCE_NAME:e.instance.name,TASK_HANDOFF_PROJECT_ID:e.project.id,TASK_HANDOFF_NODE_ID:r,TASK_HANDOFF_RUNTIME_ID:a,TASK_HANDOFF_IMAGE_ID:e.image.id,TASK_HANDOFF_INSTANCE_LAUNCHER:`${Co}/instance-launcher.sh`,...e.image.tag?{TASK_HANDOFF_IMAGE_TAG:e.image.tag}:{},TASK_HANDOFF_CHAT_BRIDGES:"none",TASK_HANDOFF_WORKSPACE:e.project.workspacePolicy.path\|\|"/workspace",TASK_HANDOFF_WORKSPACE_MODE:e.project.workspacePolicy.mode,..."local-folder"===e.project.source.type?{}:{TASK_HANDOFF_SKIP_WORKSPACE_BOOTSTRAP:"true"}};for(const[e,t]of Object.entries(l))er(c,e,t);"local-folder"===e.project.source.type?c.push("-v",`${e.project.source.path}:${e.project.workspacePolicy.path\|\|"/workspace"}:${e.project.workspacePolicy.readOnly?"ro":"rw"}`):(er(c,"TASK_HANDOFF_PROJECT_SOURCE",JSON.stringify(e.project.source)),er(c,"TASK_HANDOFF_WORKSPACE_POLICY",JSON.stringify(e.project.workspacePolicy)),er(c,"TASK_HANDOFF_GIT_URL",e.project.source.url),"commit"===e.project.source.ref.type?er(c,"TASK_HANDOFF_GIT_COMMIT",e.project.source.ref.commit):er(c,"TASK_HANDOFF_GIT_REF",e.project.source.ref.name),e.project.source.clone?.depth&&er(c,"TASK_HANDOFF_GIT_DEPTH",String(e.project.source.clone.depth)),er(c,"TASK_HANDOFF_GIT_SUBMODULES",e.project.source.clone?.submodules?"true":"false"),er(c,"TASK_HANDOFF_GIT_LFS",e.project.source.clone?.lfs?"true":"false"),e.project.source.clone?.subdirectory&&er(c,"TASK_HANDOFF_WORKSPACE_SUBDIRECTORY",e.project.source.clone.subdirectory));const u={...e.image.labels["task-handoff.image.profile"]?{TASK_HANDOFF_IMAGE_PROFILE:e.image.labels["task-handoff.image.profile"]}:{},TASK_HANDOFF_IMAGE_CAPABILITIES:e.image.capabilities.join(",")};for(const[t,n]of Object.entries(e.image.defaultEnv))t in u\|\|er(c,t,n);for(const[e,t]of Object.entries(u))er(c,e,t);return c.push(i.imageReference\|\|e.instance.environmentTemplateOrigin?.imageId\|\|e.image.resolvedReference\|\|e.image.requestedReference,Ro,"task-handoff","web"),c}function nr(e){if("local-folder"===e.project.source.type&&e.project.source.ownerNodeId&&e.project.source.ownerNodeId!==e.node.id){const e=new Error("Local folder projects can only start on the node that owns the folder.");throw Object.assign(e,{statusCode:400,code:"LOCAL_FOLDER_REQUIRES_OWNER_NODE"}),e}if(!e.image.requestedReference?.trim()){const e=new Error("Image profile must reference a registered image.");throw Object.assign(e,{statusCode:400,code:"IMAGE_PROFILE_INVALID"}),e}}const ir="app.sessions";a.z.object({type:a.z.literal("snapshot"),data:a.z.string(),pendingEscape:a.z.string(),cols:a.z.number().int().positive(),rows:a.z.number().int().positive()}).passthrough();const sr="app-session.snapshot",or="app-session.patch",rr="app-session.removed",ar=a.z.enum(["created","starting","running","stopping","stopped","exited","failed","closed","terminated","unknown"]),cr=a.z.enum(["tty","vnc","web"]);a.z.object({mode:cr,url:a.z.string().trim().min(1).max(4096),token:a.z.string().trim().min(1).max(512),expiresAt:a.z.string().datetime()}).strict(),a.z.object({revoked:a.z.boolean()}).strict();const dr=new Set(["stopped","failed","exited","closed","terminated"]),lr=a.z.object({type:a.z.enum(["app-session","provider-session","adapter-key"]),id:a.z.string().trim().min(1).max(240),agent:a.z.string().trim().min(1).max(80).optional(),adapter:a.z.string().trim().min(1).max(80).optional(),key:a.z.string().trim().min(1).max(240).optional()}).strict(),ur=a.z.record(a.z.string(),a.z.unknown()).and(a.z.object({id:a.z.string().trim().min(1).max(160),appId:a.z.string().trim().min(1).max(160).optional(),title:a.z.string().trim().max(240).optional(),kind:a.z.string().trim().max(80).optional(),status:ar.default("unknown"),bindings:a.z.array(lr).max(40).default([]),workspace:a.z.object({cwd:a.z.string().trim().max(4096).optional()}).strict().optional(),createdAt:a.z.string().datetime().optional(),updatedAt:a.z.string().datetime().optional()})),pr=a.z.object({runningCount:a.z.number().int().min(0).default(0),problemCount:a.z.number().int().min(0).default(0),sessions:a.z.array(ur).default([]),updatedAt:a.z.string().datetime()}).strict(),mr=a.z.object({streamId:a.z.string().trim().min(1).max(240),revision:a.z.number().int().min(0),lastEventAt:a.z.string().datetime(),snapshot:pr}).strict();pr.pick({runningCount:!0,problemCount:!0,updatedAt:!0}).extend({revision:a.z.number().int().min(0).optional()});const hr=a.z.enum(["app-session-created","app-session-updated","app-session-deleted","app-session-recovered","control-action","heartbeat-sync","startup"]),gr=a.z.object({streamId:a.z.string().trim().min(1).max(240),instanceId:a.z.string().trim().min(1).max(160),nodeId:a.z.string().trim().min(1).max(160).optional(),revision:a.z.number().int().min(0),previousRevision:a.z.number().int().min(0).optional(),traceId:a.z.string().trim().min(1).max(160),generatedAt:a.z.string().datetime(),reason:hr}).strict(),fr=a.z.object({meta:gr,snapshot:pr}).strict(),yr=a.z.object({meta:gr,session:ur}).strict(),Ir=a.z.object({meta:gr,sessionId:a.z.string().trim().min(1).max(160),tombstone:ur.optional(),expiresAt:a.z.string().datetime().optional()}).strict();function Ar(e,t=(new Date).toISOString()){const n=e.map(e=>function(e){const t=Er("string"==typeof e.status?e.status:void 0),n="string"==typeof e.id?e.id:"",i=function(e){const t=vr(e.workspace),n=vr(e.tty),i=vr(e.launch),s=vr(e.ai),o=vr(s.claude),r=Nr(t.cwd)\|\|Nr(n.cwd)\|\|Nr(o.cwd)\|\|Nr(i.cwd);return r?{cwd:r}:void 0}(e),{workspace:s,...o}=e;return ur.parse({...o,status:t,bindings:Sr([...(r=e.bindings,Array.isArray(r)?r.flatMap(e=>{const t=lr.safeParse(e);return t.success?[t.data]:[]}):[]),...n?[{type:"app-session",id:n}]:[],...wr(e)]),...i?{workspace:i}:{}});var r}(e));return pr.parse({runningCount:n.filter(e=>"running"===e.status).length,problemCount:n.filter(e=>"failed"===e.status).length,sessions:n,updatedAt:t})}function _r(e,t=(new Date).toISOString()){return Ar(e.filter(e=>Tr("string"==typeof e.status?e.status:void 0)),t)}function Er(e){const t=(e\|\|"unknown").trim().toLowerCase();return"ended"===t?"closed":"terminating"===t?"stopping":ar.options.includes(t)?t:"unknown"}function Tr(e){return!dr.has(Er(e))}function br(e){return"app-session"===e.type?`app:${e.id}`:"provider-session"===e.type?`provider:${e.agent\|\|""}:${e.id}`:`adapter:${e.adapter\|\|""}:${e.key\|\|e.id}`}function wr(e){const t=vr(e.ai),n=vr(t.claude),i=vr(t.appServer),s=vr(e.launch),o=[],r=Nr(vr(s.aiSessionResume).providerSessionId),a="codex"===e.appId\|\|"claude"===e.appId\|\|"opencode"===e.appId?e.appId:void 0;a&&r&&o.push({type:"provider-session",agent:a,id:r});const c=Nr(n.short);c&&o.push({type:"adapter-key",adapter:"claude",agent:"claude",id:`short:${c}`,key:`short:${c}`});const d=Nr(n.providerSessionId);d&&o.push({type:"provider-session",agent:"claude",id:d});const l=Array.isArray(t.threadIds)?t.threadIds.filter(e=>"string"==typeof e&&Boolean(e.trim())):[],u=Nr(t.activeThreadId);for(const e of[...new Set([u,...l].filter(Boolean))])o.push({type:"provider-session",agent:"codex",id:e});const p=Nr(i.socketPath);return p&&o.push({type:"adapter-key",adapter:"codex-app-server",agent:"codex",id:`socket:${p}`,key:`socket:${p}`}),o}function Sr(e){const t=new Map;for(const n of e)t.set(br(n),n);return[...t.values()]}function vr(e){return e&&"object"==typeof e&&!Array.isArray(e)?e:{}}function Nr(e){return"string"==typeof e&&e.trim()?e.trim():""}a.z.object({streamId:a.z.string().trim().min(1).max(240),instanceId:a.z.string().trim().min(1).max(160),sinceRevision:a.z.number().int().min(0),latestRevision:a.z.number().int().min(0),earliestRetainedRevision:a.z.number().int().min(0),syncRequired:a.z.boolean().default(!1),events:a.z.array(a.z.discriminatedUnion("type",[a.z.object({type:a.z.literal(sr),payload:fr}).strict(),a.z.object({type:a.z.literal(or),payload:yr}).strict(),a.z.object({type:a.z.literal(rr),payload:Ir}).strict()])).default([])}).strict();const Or="2026-08-25",zr=a.z.object({nodeId:a.z.string().optional(),instanceId:a.z.string().optional()}).passthrough(),Cr=a.z.object({v:a.z.literal(1),id:a.z.string().min(1),seq:a.z.number().finite(),type:a.z.string().min(1),topic:a.z.string().min(1),createdAt:a.z.string().datetime(),payload:a.z.unknown(),replay:a.z.literal(!0).optional(),scope:zr.optional()}).passthrough(),Rr=a.z.object({v:a.z.literal(Or),id:a.z.string().min(1),type:a.z.string().min(1),createdAt:a.z.string().datetime(),payload:a.z.unknown(),topic:a.z.string().min(1).optional(),replay:a.z.literal(!0).optional(),scope:zr.optional()}).passthrough();function xr(e){return e.startsWith("ai-session.")\|\|e.startsWith("ai.session.")?"ai.sessions":e.startsWith("app-session.")?"app.sessions":e.startsWith("app.management")?"apps":e.startsWith("trigger.")?"triggers":e.startsWith("instance.")?"instances":e.startsWith("node.")?"nodes":e.startsWith("project.")?"projects":e.startsWith("model.")?"models":e.startsWith("image.")?"images":e.startsWith("market.")?"market":e.startsWith("story.")?"stories":"system"}a.z.discriminatedUnion("v",[Cr,Rr]),a.z.object({v:a.z.literal(1),type:a.z.literal("ping"),sentAt:a.z.string().datetime()}).strict(),a.z.object({v:a.z.literal(1),type:a.z.literal("pong"),sentAt:a.z.string().datetime(),receivedAt:a.z.string().datetime()}).strict();const kr=a.z.object({replaySince:a.z.string().datetime().optional(),messageDeltas:a.z.object({allInstances:a.z.boolean().default(!1),instanceIds:a.z.array(a.z.string().trim().min(1).max(160)).max(1e3).default([])}).default({allInstances:!1,instanceIds:[]}),timelineAllSessions:a.z.boolean().default(!1),timelineSessions:a.z.array(a.z.object({instanceId:a.z.string().trim().min(1).max(160),sessionId:a.z.string().trim().min(1).max(120)})).max(1e3).default([])}),Dr=a.z.enum(["ai.sessions","app.sessions"]),Pr=a.z.object({topic:Dr,instanceId:a.z.string().trim().min(1).max(160),streamId:a.z.string().trim().min(1).max(240),latestRevision:a.z.number().int().min(0),earliestRetainedRevision:a.z.number().int().min(0)}).strict(),Lr=a.z.object({protocolVersion:a.z.literal(1),streams:a.z.array(Pr)}).strict();function Mr(e,t=Math.random){const n=Math.max(1,Math.floor(e));if(1===n)return 0;if(2===n)return 250;const i=Math.min(6e4,2502*(n-2));return Math.min(6e4,Math.round(i(.75+.5t())))}class jr{retryNumber=0;random;constructor(e=Math.random){this.random=e}get attempts(){return this.retryNumber}next(){return this.retryNumber+=1,{attempt:this.retryNumber,delay:Mr(this.retryNumber,this.random)}}reset(){this.retryNumber=0}}class Fr{backoff;timer;constructor(e=Math.random){this.backoff=new jr(e)}get pending(){return Boolean(this.timer)}get attempts(){return this.backoff.attempts}schedule(e,t={}){if(this.timer)return;const n=this.backoff.next(),i=t.setTimeoutFn\|\|setTimeout;return this.timer=i(()=>{this.timer=void 0,e()},n.delay),n}reset(e=clearTimeout){this.timer&&e(this.timer),this.timer=void 0,this.backoff.reset()}cancel(e=clearTimeout){this.timer&&e(this.timer),this.timer=void 0}}class Ur extends Fr{}function $r(e,t=6e4){const n=[];for(let i=0;i<e.length;i+=t)n.push(e.slice(i,i+t));return n}const Hr=262144,qr=4194304;class Vr{sockets=new Map;socketUrls=new Map;retries=new Map;outputs=new Set;outputSubscriptions=new Map;outputEnvelopeVersions=new Map;outputHierarchy=new Map;outputDiagnostics=new Map;aiSessionProjectionByInstance=new Map;appSessionProjectionByInstance=new Map;sessionStreamsHelloByInstance=new Map;sessionAuthorityReplayedOutputs=new Set;pendingAiSessionAuthorityByOutput=new Map;pendingAiSessionAuthorityFlush=new Map;eventTransportCongestion;imagePullTerminalByInstance=new Map;state;token;logger;safetyIntervalMs;lastAiSessionEventByInstance=new Map;lastAppSessionEventByInstance=new Map;timer;stopped=!1;reconnectAttempts=0;safetyReconciliations=0;localSequence=0;outputSequence=0;createSocket;setIntervalFn;clearIntervalFn;setTimeoutFn;clearTimeoutFn;constructor(e,t,n={}){var i;this.state=e,this.token=t,this.logger=n.logger,this.safetyIntervalMs=(i=n.safetyIntervalMs,Math.min(6e4,Math.max(3e4,i??45e3))),this.createSocket=n.createSocket\|\|((e,t)=>new p(e,t)),this.setIntervalFn=n.setIntervalFn\|\|setInterval,this.clearIntervalFn=n.clearIntervalFn\|\|clearInterval,this.setTimeoutFn=n.setTimeoutFn\|\|setTimeout,this.clearTimeoutFn=n.clearTimeoutFn\|\|clearTimeout}start(){this.stopped=!1,this.sync(),this.timer=this.setIntervalFn(()=>{this.safetyReconciliations+=1,this.sync()},this.safetyIntervalMs)}stop(){this.stopped=!0,this.timer&&(this.clearIntervalFn(this.timer),this.timer=void 0);for(const e of this.sockets.values())e.close();this.sockets.clear(),this.socketUrls.clear();for(const e of this.retries.values())e.timer.cancel();this.retries.clear(),this.outputs.clear(),this.outputSubscriptions.clear(),this.outputEnvelopeVersions.clear(),this.outputHierarchy.clear(),this.outputDiagnostics.clear();for(const e of this.pendingAiSessionAuthorityFlush.values())this.clearTimeoutFn(e);this.pendingAiSessionAuthorityFlush.clear(),this.pendingAiSessionAuthorityByOutput.clear(),this.aiSessionProjectionByInstance.clear(),this.appSessionProjectionByInstance.clear(),this.sessionStreamsHelloByInstance.clear(),this.sessionAuthorityReplayedOutputs.clear()}addOutput(e,t={}){let n;this.outputs.add(e),this.outputDiagnostics.set(e,{outputId:"event_output_"+ ++this.outputSequence,kind:t.expectsTransientSubscription?"events-websocket":void 0!==t.legacyFallbackMs?"reverse-tunnel":"legacy"}),this.outputSubscriptions.set(e,t.expectsTransientSubscription?kr.parse({}):void 0),this.outputEnvelopeVersions.set(e,1),this.outputHierarchy.set(e,Cn.parse(void 0)),t.expectsTransientSubscription\|\|void 0===t.legacyFallbackMs\|\|(n=this.setTimeoutFn(()=>{n=void 0,this.outputs.has(e)&&void 0===this.outputSubscriptions.get(e)&&(this.replaySessionAuthority(e),this.syncNow())},t.legacyFallbackMs));let i=!1;const s=()=>{if(i)return;i=!0,this.outputs.delete(e),this.outputSubscriptions.delete(e),this.outputEnvelopeVersions.delete(e),this.outputHierarchy.delete(e),this.outputDiagnostics.delete(e),this.sessionAuthorityReplayedOutputs.delete(e);const t=this.pendingAiSessionAuthorityFlush.get(e);t&&this.clearTimeoutFn(t),this.pendingAiSessionAuthorityFlush.delete(e),this.pendingAiSessionAuthorityByOutput.delete(e),this.refreshEventTransportRecovery(),n&&clearTimeout(n),this.stopped\|\|this.syncNow()};e.on("close",s),e.on("error",s);for(const t of this.state.listInstances()){const n=Br(t);n?this.sendForwarded(e,this.createEvent(uo,n,{instanceId:t.id})):this.logger?.warn?.({instanceId:t.id},"instance.lifecycle.snapshot.invalid")}for(const[t,n]of this.imagePullTerminalByInstance)$r(n.tail).forEach((i,s)=>this.sendForwarded(e,this.createEvent(Ls,{...n.output,sequence:n.output.sequence+s,data:i,...0===s?{replay:!0}:{}},{instanceId:t}))),n.finished&&this.sendForwarded(e,this.createEvent(Ms,n.finished,{instanceId:t}));return(t.expectsTransientSubscription\|\|void 0===t.legacyFallbackMs)&&(this.replaySessionAuthority(e),this.syncNow()),s}setOutputSubscription(e,t,n,i){if(!this.outputs.has(e))return!1;const s=kr.safeParse(t),o=Cn.safeParse(i);if(!s.success\|\|!o.success)return!1;this.outputSubscriptions.set(e,s.data),this.outputEnvelopeVersions.set(e,n===Or?Or:1),this.outputHierarchy.set(e,o.data),this.replaySessionAuthority(e),this.syncNow();for(const[e,t]of this.sockets)this.sendInstanceSubscription(e,t);return!0}publish(e,t,n={}){this.rememberImagePullTerminal(e,t);const i=this.createEvent(e,t,n);for(const e of this.outputs)this.sendForwarded(e,i)}rememberImagePullTerminal(e,t){if(e===Ls){const e=Eo(Fs,t);if(!e.success)return;const n=e.data,i=this.imagePullTerminalByInstance.get(n.instanceId);if(i&&n.generation<i.output.generation)return;const s=i?.output.generation===n.generation,o=n.replay\|\|!s?n.data:`${i.tail}${n.data}`.slice(-262144);return void this.imagePullTerminalByInstance.set(n.instanceId,{output:n,tail:o})}if(e===Ms){const e=Eo(Us,t);if(!e.success)return;const n=e.data,i=this.imagePullTerminalByInstance.get(n.instanceId);i?.output.generation===n.generation&&(i.finished=n)}}publishInstanceLifecycle(e){this.publish(uo,function(e){return po.parse(Kr(e))}(e),{instanceId:e.id});const t=this.imagePullTerminalByInstance.get(e.id);"ready"===e.imageProvisioning?.phase&&"succeeded"===t?.finished?.outcome&&this.imagePullTerminalByInstance.delete(e.id)}createEvent(e,t,n){const i=++this.localSequence;return{v:1,id:`node_evt_${Date.now().toString(36)}_${i.toString(36)}`,seq:i,type:e,topic:xr(e),createdAt:(new Date).toISOString(),payload:t,scope:n}}sendForwarded(e,t){const n=Wr(t),i=n?function(e,t){return t?.subagents\|\|e.type===_e?e:e.type===Ie?{...e,payload:{...e.payload,snapshot:Gt(e.payload.snapshot,t)}}:{...e,payload:{...e.payload,upserted:e.payload.upserted.map(e=>Kt(e,t))}}}(n,this.outputHierarchy.get(e)):void 0,s=i&&i.payload!==t.payload?{...t,payload:i.payload}:t,o=t.type===Ee?$t.safeParse(t.payload):void 0,r=t.type===be?qt.safeParse(t.payload):void 0,a=this.outputEnvelopeVersions.get(e)===Or?function(e,t,n={}){const i=e.scope?n.publicScope&&e.scope.instanceId?{instanceId:e.scope.instanceId}:e.scope:void 0;return{v:Or,id:e.id,type:e.type,createdAt:e.createdAt,payload:void 0===n.payload?e.payload:n.payload,...e.topic!==xr(e.type)?{topic:e.topic}:{},...e.replay?{replay:!0}:{},...i&&Object.keys(i).length?{scope:i}:{}}}(s,0,{...o?.success?{payload:(c=o.data,Ht.parse({sessionId:c.sessionId,turnId:c.turnId,itemId:c.itemId,delta:c.delta,generatedAt:c.generatedAt}))}:{},...r?.success?{payload:Bt(r.data)}:{}}):s;var c;const d=JSON.stringify({type:"node-agent.event.forwarded",event:a});this.sendOutput(e,d,s)}sendOutput(e,t,n){const i=Buffer.byteLength(t,"utf8"),s=n?.topic===ir?"app-session":n?.topic===ye?"ai-session":void 0,o=s?{...this.outputDiagnostics.get(e),instanceId:n.scope?.instanceId,eventType:n.type,...Gr(n.payload)}:void 0;if(e.readyState!==p.OPEN)return o&&this.logger?.warn?.({...o,readyState:e.readyState,outcome:"not-open"},`${s}.event.output.rejected`),!1;if(n&&this.shouldCoalesceAiSessionAuthority(e,n)&&this.deferAiSessionAuthority(e,n))return!0;if(n&&Xr(n)&&i>qr){if(n.type!==Ie&&this.deferAiSessionAuthority(e,n))return!0;this.observeEventTransportCongestion(e,!1,i),o&&this.logger?.warn?.({...o,bufferedAmount:e.bufferedAmount,bytes:i,maxBytes:qr,outcome:"payload-too-large"},`${s}.event.output.rejected`);try{e.close(1009,"AI Session authority event exceeds the transport limit.")}catch{}return!1}if(e.bufferedAmount+i>16777216){this.observeEventTransportCongestion(e,!1),o&&this.logger?.warn?.({...o,bufferedAmount:e.bufferedAmount,outcome:"backpressure"},`${s}.event.output.rejected`);try{e.close(1013,"Event consumer is too slow.")}catch{}return!1}try{return e.send(t),o&&this.logger?.info?.({...o,bufferedAmount:e.bufferedAmount,bytes:i,outcome:"queued"},`${s}.event.output.queued`),!0}catch(t){o&&this.logger?.warn?.({...o,error:t instanceof Error?t.message:String(t),outcome:"send-failed"},`${s}.event.output.rejected`);try{e.close(1011,"Event delivery failed.")}catch{}return!1}}shouldCoalesceAiSessionAuthority(e,t){if(!Xr(t))return!1;const n=t.scope?.instanceId;return!!n&&(!!this.pendingAiSessionAuthorityByOutput.get(e)?.has(n)\|\|e.bufferedAmount>=Hr)}deferAiSessionAuthority(e,t){const n=t.scope?.instanceId,i=n?this.aiSessionProjectionByInstance.get(n):void 0;if(!n\|\|!i)return!1;const s=function(e,t){const n=Wr(e);return n?n.payload.meta.streamId!==t.streamId\|\|n.payload.meta.revision!==t.revision?void 0:jt.parse({meta:n.payload.meta,snapshot:t.snapshot}):void 0}(t,i);if(!s)return!1;const o=this.pendingAiSessionAuthorityByOutput.get(e)\|\|new Map;return o.set(n,{...t,type:Ie,topic:ye,payload:s}),this.pendingAiSessionAuthorityByOutput.set(e,o),this.observeEventTransportCongestion(e,!0),this.logger?.info?.({...this.outputDiagnostics.get(e),instanceId:n,eventType:t.type,...Gr(s),bufferedAmount:e.bufferedAmount,outcome:"coalesced-latest"},"ai-session.event.output.coalesced"),this.scheduleAiSessionAuthorityFlush(e),!0}scheduleAiSessionAuthorityFlush(e){if(this.pendingAiSessionAuthorityFlush.has(e))return;const t=this.setTimeoutFn(()=>{this.pendingAiSessionAuthorityFlush.delete(e),this.flushAiSessionAuthority(e)},25);t.unref?.(),this.pendingAiSessionAuthorityFlush.set(e,t)}flushAiSessionAuthority(e){const t=this.pendingAiSessionAuthorityByOutput.get(e);if(!t?.size)return void this.pendingAiSessionAuthorityByOutput.delete(e);if(e.readyState!==p.OPEN)return void this.pendingAiSessionAuthorityByOutput.delete(e);const[n,i]=t.entries().next().value;e.bufferedAmount>=Hr?this.scheduleAiSessionAuthorityFlush(e):(t.delete(n),t.size\|\|this.pendingAiSessionAuthorityByOutput.delete(e),this.sendForwarded(e,i),this.refreshEventTransportRecovery(),t.size&&this.scheduleAiSessionAuthorityFlush(e))}observeEventTransportCongestion(e,t,n=0){const i=(new Date).toISOString(),s=Math.max(0,Math.floor(e.bufferedAmount)),o=this.eventTransportCongestion;this.eventTransportCongestion={congestedSince:o?.recoveredAt?i:o?.congestedSince\|\|i,lastCongestedAt:i,peakBufferedBytes:Math.max(o?.recoveredAt?0:o?.peakBufferedBytes\|\|0,s),coalescedEvents:(o?.recoveredAt?0:o?.coalescedEvents\|\|0)+(t?1:0),oversizedEvents:(o?.recoveredAt?0:o?.oversizedEvents\|\|0)+(n>0?1:0),peakEventBytes:Math.max(o?.recoveredAt?0:o?.peakEventBytes\|\|0,n)}}eventTransportIsCongested(){return!![...this.pendingAiSessionAuthorityByOutput.values()].some(e=>e.size>0)\|\|[...this.outputs].some(e=>e.readyState===p.OPEN&&e.bufferedAmount>=Hr)}refreshEventTransportRecovery(){const e=this.eventTransportCongestion;!e\|\|e.recoveredAt\|\|this.eventTransportIsCongested()\|\|(e.recoveredAt=(new Date).toISOString())}eventTransportHealth(){this.refreshEventTransportRecovery();const e=[...this.outputs].filter(e=>e.readyState===p.OPEN),t=e.reduce((e,t)=>Math.max(e,Math.max(0,Math.floor(t.bufferedAmount))),0),n=this.eventTransportIsCongested();let i=this.eventTransportCongestion;return i?.recoveredAt&&Date.now()-Date.parse(i.recoveredAt)>3e5&&(this.eventTransportCongestion=void 0,i=void 0),{status:n?"congested":i?"recovering":"healthy",activeOutputs:e.length,bufferedBytes:t,peakBufferedBytes:i?.peakBufferedBytes\|\|t,coalescedEvents:i?.coalescedEvents\|\|0,oversizedEvents:i?.oversizedEvents\|\|0,peakEventBytes:i?.peakEventBytes\|\|0,...n&&i?{congestedSince:i.congestedSince}:{},...i?{lastCongestedAt:i.lastCongestedAt}:{}}}syncNow(){this.sync()}diagnostics(){const e=[...this.outputSubscriptions.values()];return{reconnectAttempts:this.reconnectAttempts,safetyReconciliations:this.safetyReconciliations,activeConnections:this.sockets.size,pendingRetries:[...this.retries.values()].filter(e=>e.timer.pending).length,safetyIntervalMs:this.safetyIntervalMs,eventTransport:this.eventTransportHealth(),transientDemand:{legacyOutputs:e.filter(e=>void 0===e).length,scopedOutputs:e.filter(e=>void 0!==e).length,messageDeltaAllInstances:e.some(e=>e?.messageDeltas.allInstances),messageDeltaInstanceCount:new Set(e.flatMap(e=>e?.messageDeltas.instanceIds\|\|[])).size,timelineAllSessions:e.some(e=>e?.timelineAllSessions),timelineSessionCount:new Set(e.flatMap(e=>e?.timelineSessions.map(e=>JSON.stringify([e.instanceId,e.sessionId]))\|\|[])).size}}}sync(){const e=new Set(this.state.listInstances().map(e=>e.id));for(const t of this.aiSessionProjectionByInstance.keys())e.has(t)\|\|this.aiSessionProjectionByInstance.delete(t);for(const t of this.appSessionProjectionByInstance.keys())e.has(t)\|\|this.appSessionProjectionByInstance.delete(t);for(const t of this.sessionStreamsHelloByInstance.keys())e.has(t)\|\|this.sessionStreamsHelloByInstance.delete(t);for(const t of this.imagePullTerminalByInstance.keys())e.has(t)\|\|this.imagePullTerminalByInstance.delete(t);if(!this.outputs.size){for(const e of this.sockets.values())e.close();this.sockets.clear(),this.socketUrls.clear();for(const e of this.retries.values())e.timer.cancel();return void this.retries.clear()}const t=new Set;for(const e of this.state.listInstances()){const n=Yr(e);if(!n)continue;t.add(e.id);const i=this.retries.get(e.id);i?.timer.pending&&i.url!==n&&(i.timer.cancel(),this.retries.delete(e.id)),this.socketUrls.get(e.id)!==n&&this.sockets.has(e.id)&&(this.sockets.get(e.id)?.close(),this.sockets.delete(e.id)),this.sockets.has(e.id)\|\|this.retries.get(e.id)?.timer.pending\|\|this.connect(e.id,n)}for(const[e,n]of this.sockets)if(!t.has(e)){n.close(),this.sockets.delete(e),this.socketUrls.delete(e);const t=this.retries.get(e);t?.timer.cancel(),this.retries.delete(e)}for(const[e,n]of this.retries)t.has(e)\|\|(n.timer.cancel(),this.retries.delete(e),this.socketUrls.delete(e))}connect(e,t){const n=this.token?{authorization:`Bearer ${this.token}`}:void 0,i=this.createSocket(t,{headers:n});this.sockets.set(e,i),this.socketUrls.set(e,t),i.on("open",()=>{const n=this.retries.get(e);this.retries.set(e,{timer:n?.timer\|\|new Ur,url:t}),i.readyState===p.OPEN&&(this.sendInstanceSubscription(e,i),this.logger?.info?.({instanceId:e,url:t},"ai-session.event.forward.connect"),this.logger?.info?.({instanceId:e,url:t},"app-session.event.forward.connect"))}),i.on("message",t=>{const n=function(e,t){try{const n=function(e,t={}){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const n=e,i="string"==typeof n.type?n.type:"";if(!i)return;const s=n.scope&&"object"==typeof n.scope&&!Array.isArray(n.scope)?n.scope:{};return{v:1,id:"string"==typeof n.id?n.id:`event_${Date.now().toString(36)}`,seq:"number"==typeof n.seq&&Number.isFinite(n.seq)?n.seq:0,type:i,topic:"string"==typeof n.topic?n.topic:xr(i),createdAt:"string"==typeof n.createdAt?n.createdAt:(new Date).toISOString(),payload:"payload"in n?n.payload:{},...!0===n.replay?{replay:!0}:{},scope:{...t,...s}}}(JSON.parse(String(e)),{instanceId:t});if(!n\|\|"events.connected"===n.type)return;if(n.type===Ee){const e=function(e,t){const n=Ht.safeParse(e);return n.success?$t.parse({instanceId:t,...n.data}):$t.parse(e)}(n.payload,t);return{...n,payload:e,scope:{...n.scope,instanceId:t}}}if(n.type===be){const e=function(e,t){const n=Vt.safeParse(e);return n.success?qt.parse({instanceId:t,...n.data}):qt.parse(e)}(n.payload,t);return{...n,payload:e,scope:{...n.scope,instanceId:t}}}return{...n,scope:{...n.scope,instanceId:t}}}catch{return}}(t,e);if(n){if("streams.hello"===n.type){const t=Eo(Lr,n.payload);if(!t.success)return this.logger?.warn?.({instanceId:e,issues:t.error.issues},"session-stream.handshake.invalid"),void i.close(1002,"Incompatible session stream handshake.");this.retries.get(e)?.timer.reset(),this.sessionStreamsHelloByInstance.set(e,t.data);const s=JSON.stringify({type:"node-agent.streams.hello",instanceId:e,payload:t.data});for(const e of this.outputs)this.sendOutput(e,s);return}this.recordAiSessionEvent(e,n),this.recordAppSessionEvent(e,n);for(const e of this.outputs)this.outputAccepts(e,n)&&this.sendForwarded(e,n)}}),i.on("close",()=>{this.sockets.get(e)===i&&(this.sockets.delete(e),this.socketUrls.delete(e),this.scheduleReconnect(e))}),i.on("error",()=>{this.logger?.warn?.({instanceId:e,url:t},"ai-session.event.forward.error"),this.logger?.warn?.({instanceId:e,url:t},"app-session.event.forward.error"),i.close()})}sendInstanceSubscription(e,t){if(t.readyState!==p.OPEN)return;const n=[...this.outputs].map(e=>this.outputSubscriptions.get(e));if(n.some(e=>void 0===e))return void t.send(JSON.stringify({v:1,type:"subscribe",eventEnvelopeVersion:Or,aiSessionHierarchy:{subagents:!0},topics:[ye,"app.sessions","apps","instances"]}));const i=n.some(t=>t.messageDeltas.allInstances\|\|t.messageDeltas.instanceIds.includes(e)),s=n.some(e=>e.timelineAllSessions),o=[...new Set(n.flatMap(t=>t.timelineSessions.filter(t=>t.instanceId===e).map(e=>e.sessionId)))],r=n.map(e=>e.replaySince).filter(e=>Boolean(e)).sort()[0];t.send(JSON.stringify({v:1,type:"subscribe",eventEnvelopeVersion:Or,aiSessionHierarchy:{subagents:!0},topics:[Ie,Ae,_e,...i?[Ee]:[],...s\|\|o.length?[Te,be]:[],"app.sessions","apps","instances"],aiSessionTransient:{...r?{replaySince:r}:{},messageDeltas:{allInstances:i,instanceIds:[]},timelineAllSessions:s,timelineSessions:o.map(t=>({instanceId:e,sessionId:t}))}}))}outputAccepts(e,t){const n=this.outputSubscriptions.get(e);return!n\|\|function(e,t){if(!e)return!0;if("ai-session.message-delta"!==t.type&&"ai-session.timeline-item"!==t.type&&"ai-session.timeline-item-delta"!==t.type)return!0;const n=t.payload&&"object"==typeof t.payload&&!Array.isArray(t.payload)?t.payload:{},i=String(n.instanceId\|\|t.scope?.instanceId\|\|"");return"ai-session.message-delta"===t.type?e.messageDeltas.allInstances\|\|e.messageDeltas.instanceIds.includes(i):e.timelineAllSessions\|\|e.timelineSessions.some(e=>e.instanceId===i&&e.sessionId===n.sessionId)}(n,t)}scheduleReconnect(e){const t=this.state.listInstances().find(t=>t.id===e),n=t&&Yr(t);if(!n\|\|!this.outputs.size)return;const i=this.retries.get(e)??{timer:new Ur};if(i.timer.pending)return;i.url=n;const s=i.timer.schedule(()=>{this.sockets.has(e)\|\|this.connect(e,n)},{setTimeoutFn:this.setTimeoutFn});s&&(this.reconnectAttempts+=1,this.logger?.info?.({instanceId:e,url:n,attempt:s.attempt,delay:s.delay,reconnectAttempts:this.reconnectAttempts},"session-stream.connection.reconnect-scheduled")),this.retries.set(e,i)}recordAiSessionEvent(e,t){if(t.topic!==ye)return;if(t.type===Ee\|\|t.type===Te\|\|t.type===be)return;const n=Wr(t);if(n){const t=function(e,t){const{meta:n}=t.payload;if(t.type===Ie)return e?.streamId===n.streamId&&n.revision===e.revision?{kind:"duplicate",projection:e}:e?.streamId===n.streamId&&n.revision<e.revision?{kind:"stale",projection:e}:{kind:"applied",projection:Pt.parse({streamId:n.streamId,revision:n.revision,lastEventAt:n.generatedAt,snapshot:t.payload.snapshot})};if(!e\|\|e.streamId!==n.streamId)return{kind:"snapshot-required",projection:e,streamId:n.streamId};if(n.revision===e.revision)return{kind:"duplicate",projection:e};if(n.revision<e.revision)return{kind:"stale",projection:e};if(n.revision!==e.revision+1\|\|n.previousRevision!==e.revision)return{kind:"gap",projection:e,expectedRevision:e.revision+1,receivedRevision:n.revision};const i=new Map(e.snapshot.sessions.map(e=>[e.id,e]));if(t.type===Ae){for(const e of t.payload.upserted)i.set(e.id,e);for(const e of t.payload.removed)i.delete(e)}else for(const e of t.payload.sessionIds)i.delete(e);const s=[...i.values()],o=Dt.parse({runningCount:s.filter(e=>"running"===e.status).length,waitingCount:s.filter(e=>"waiting"===e.status).length,staleCount:e.snapshot.staleCount,sessions:s,updatedAt:n.generatedAt});return{kind:"applied",projection:Pt.parse({streamId:n.streamId,revision:n.revision,lastEventAt:n.generatedAt,snapshot:o})}}(this.aiSessionProjectionByInstance.get(e),n);"applied"!==t.kind&&"duplicate"!==t.kind&&"stale"!==t.kind\|\|this.aiSessionProjectionByInstance.set(e,t.projection)}const i=Gr(t.payload),s=this.lastAiSessionEventByInstance.get(e);s?.streamId===i.streamId&&void 0!==s.revision&&void 0!==i.revision&&i.revision>s.revision+1&&this.logger?.warn?.({instanceId:e,traceId:i.traceId,streamId:i.streamId,previousRevision:s.revision,revision:i.revision},"ai-session.event.forward.gap"),this.lastAiSessionEventByInstance.set(e,{streamId:i.streamId??s?.streamId,revision:i.revision??s?.revision}),this.logger?.info?.({instanceId:e,traceId:i.traceId,eventType:t.type,streamId:i.streamId,revision:i.revision},"ai-session.event.forward.message")}recordAppSessionEvent(e,t){if(t.topic!==ir)return;const n=function(e){const t=e.type===sr?fr:e.type===or?yr:e.type===rr?Ir:void 0;if(!t)return;const n=Eo(t,e.payload);return n.success?{type:e.type,payload:n.data}:void 0}(t);if(n){const t=function(e,t){const{meta:n}=t.payload;if(t.type===sr)return e?.streamId===n.streamId&&n.revision===e.revision?{kind:"duplicate",projection:e}:e?.streamId===n.streamId&&n.revision<e.revision?{kind:"stale",projection:e}:{kind:"applied",projection:mr.parse({streamId:n.streamId,revision:n.revision,lastEventAt:n.generatedAt,snapshot:_r(t.payload.snapshot.sessions,t.payload.snapshot.updatedAt)})};if(!e\|\|e.streamId!==n.streamId)return{kind:"snapshot-required",projection:e,streamId:n.streamId};if(n.revision===e.revision)return{kind:"duplicate",projection:e};if(n.revision<e.revision)return{kind:"stale",projection:e};if(n.revision!==e.revision+1\|\|n.previousRevision!==e.revision)return{kind:"gap",projection:e,expectedRevision:e.revision+1,receivedRevision:n.revision};const i=[...e.snapshot.sessions];if(t.type===or){const e=i.findIndex(e=>e.id===t.payload.session.id);Tr(t.payload.session.status)?e<0?i.push(t.payload.session):i[e]=t.payload.session:e>=0&&i.splice(e,1)}else{const e=i.findIndex(e=>e.id===t.payload.sessionId);e>=0&&i.splice(e,1)}const s=Ar(i,n.generatedAt);return{kind:"applied",projection:mr.parse({streamId:n.streamId,revision:n.revision,lastEventAt:n.generatedAt,snapshot:s})}}(this.appSessionProjectionByInstance.get(e),n);"applied"!==t.kind&&"duplicate"!==t.kind&&"stale"!==t.kind\|\|this.appSessionProjectionByInstance.set(e,t.projection)}const i=Gr(t.payload),s=this.lastAppSessionEventByInstance.get(e);s?.streamId===i.streamId&&void 0!==s.revision&&void 0!==i.revision&&i.revision>s.revision+1&&this.logger?.warn?.({instanceId:e,traceId:i.traceId,streamId:i.streamId,previousRevision:s.revision,revision:i.revision},"app-session.event.forward.gap"),this.lastAppSessionEventByInstance.set(e,{streamId:i.streamId??s?.streamId,revision:i.revision??s?.revision}),this.logger?.info?.({instanceId:e,traceId:i.traceId,eventType:t.type,streamId:i.streamId,revision:i.revision},"app-session.event.forward.message")}replaySessionAuthority(e){if(!this.sessionAuthorityReplayedOutputs.has(e)&&e.readyState===p.OPEN){this.sessionAuthorityReplayedOutputs.add(e);for(const[t,n]of this.sessionStreamsHelloByInstance){const i=n.streams.map(e=>{const n=e.topic===ye?this.aiSessionProjectionByInstance.get(t):this.appSessionProjectionByInstance.get(t);return n?n.streamId!==e.streamId?{...e,streamId:n.streamId,latestRevision:n.revision,earliestRetainedRevision:n.revision}:{...e,latestRevision:Math.max(e.latestRevision,n.revision)}:e});this.sendOutput(e,JSON.stringify({type:"node-agent.streams.hello",instanceId:t,payload:{...n,streams:i}}))}for(const[t,n]of this.aiSessionProjectionByInstance)this.sendForwarded(e,this.createEvent(Ie,{meta:{streamId:n.streamId,instanceId:t,revision:n.revision,traceId:`ais_replay_${Date.now().toString(36)}`,generatedAt:n.lastEventAt,reason:"startup"},snapshot:n.snapshot},{instanceId:t}));for(const[t,n]of this.appSessionProjectionByInstance)this.sendForwarded(e,this.createEvent(sr,{meta:{streamId:n.streamId,instanceId:t,revision:n.revision,traceId:`aps_replay_${Date.now().toString(36)}`,generatedAt:n.lastEventAt,reason:"startup"},snapshot:n.snapshot},{instanceId:t}))}}}function Br(e){const t=po.safeParse(Kr(e));return t.success?t.data:void 0}function Kr(e){return{instanceId:e.id,revision:e.stateRevision,updatedAt:e.updatedAt,status:e.status,health:e.health,connectionStatus:e.connectionStatus,accessStatus:"online"===e.connectionStatus\|\|"online"===e.agentStatus?"reachable":"endpoint-unreachable",imageProvisioning:e.imageProvisioning,workspace:e.workspace,runtime:e.runtime,runtimeVersion:e.runtimeVersion,ready:e.ready,lastHeartbeatAt:e.lastHeartbeatAt}}function Gr(e){const t=e&&"object"==typeof e&&!Array.isArray(e)?e:{},n=t.meta&&"object"==typeof t.meta&&!Array.isArray(t.meta)?t.meta:{};return{streamId:"string"==typeof n.streamId?n.streamId:void 0,revision:"number"==typeof n.revision?n.revision:void 0,traceId:"string"==typeof n.traceId?n.traceId:void 0}}function Wr(e){const t=e.type===Ie?jt:e.type===Ae?Ft:e.type===_e?Ut:void 0;if(!t)return;const n=Eo(t,e.payload);return n.success?{type:e.type,payload:n.data}:void 0}function Xr(e){return e.topic===ye&&(e.type===Ie\|\|e.type===Ae\|\|e.type===_e)}function Yr(e){if(!function(e){return!1!==e.ready&&(!e.runtimeVersion\|\|["matched","failed"].includes(e.runtimeVersion.phase))}(e))return;const t=e.target?.api\|\|e.target?.web;if(t)try{const e=new URL("/api/events",t);return e.searchParams.set("aiSessionTransient","1"),e.searchParams.set("aiSessionAuthoritySnapshot","1"),e.searchParams.set("aiSessionHierarchy","subagents"),e.protocol="https:"===e.protocol?"wss:":"ws:",e.toString()}catch{return}}const Jr=new Set(["provisioning","starting","registering","registered","running","unhealthy"]),Qr=JSON.stringify({id:"{{.ID}}",name:"{{.Name}}",cpu:"{{.CPUPerc}}",memory:"{{.MemUsage}}",memoryPercent:"{{.MemPerc}}",network:"{{.NetIO}}",blockIo:"{{.BlockIO}}",pids:"{{.PIDs}}"});class Zr{snapshots=new Map;runCommand;targets;publish;intervalMs;timer;inFlight;pendingTargets=new Map;collectingTargets=new Map;constructor(e,t,n,i=3e3){this.runCommand=e,this.targets=t,this.publish=n,this.intervalMs=i}start(){this.collect().catch(()=>{}),this.timer=setInterval(()=>{this.collect().catch(()=>{})},this.intervalMs)}stop(){this.timer&&clearInterval(this.timer),this.timer=void 0}async snapshot(e){const t=this.targets().find(t=>t.id===e);if(!t)return;if(!Jr.has(t.status))return oa(t.id);const n=this.snapshots.get(e);return n&&Date.now()-Date.parse(n.sampledAt)<=this.intervalMs?n:(await this.collect([t]),this.snapshots.get(e))}async collect(e){const t=e\|\|this.targets();if(!e){const e=new Set(t.map(e=>e.id));for(const t of this.snapshots.keys())e.has(t)\|\|this.snapshots.delete(t)}for(const e of t){const t=ea(e);this.collectingTargets.get(e.id)!==t&&this.pendingTargets.set(e.id,e)}this.inFlight\|\|(this.inFlight=this.drain().finally(()=>{this.inFlight=void 0})),await this.inFlight}async drain(){for(;this.pendingTargets.size;){const e=[...this.pendingTargets.values()];this.pendingTargets.clear();for(const t of e)this.collectingTargets.set(t.id,ea(t));try{await this.collectOnce(e)}finally{for(const t of e)this.collectingTargets.delete(t.id)}}}async collectOnce(e){const t=e.filter(e=>Jr.has(e.status)&&(e.runtime.containerId\|\|e.runtime.containerName));for(const t of e.filter(e=>Jr.has(e.status)&&!e.runtime.containerId&&!e.runtime.containerName))this.update(ra(t.id));for(const t of e.filter(e=>!Jr.has(e.status)))this.update(oa(t.id));if(!t.length)return;const n=t.map(e=>e.runtime.containerId\|\|e.runtime.containerName),i=(new Date).toISOString();try{const e=await this.runCommand("docker",["stats","--no-stream","--format",Qr,...n],{timeoutMs:5e3});this.applyDockerOutput(t,e.stdout,i)}catch(e){if(1===t.length)return void this.update(aa(t[0].id,i,e instanceof Error?e.message:String(e)));await Promise.all(t.map(async e=>{const t=e.runtime.containerId\|\|e.runtime.containerName;try{const n=await this.runCommand("docker",["stats","--no-stream","--format",Qr,t],{timeoutMs:5e3});this.applyDockerOutput([e],n.stdout,i)}catch(t){this.update(aa(e.id,i,t instanceof Error?t.message:String(t)))}}))}}applyDockerOutput(e,t,n){const i=function(e,t=(new Date).toISOString()){const n=new Map;for(const i of e.split(/\r?\n/).filter(Boolean)){let e;try{e=JSON.parse(i)}catch{continue}const s=sa(e.id),o=sa(e.name),r=s\|\|o;if(!r)continue;const a=ta(sa(e.memory)),c=ta(sa(e.network)),d=ta(sa(e.blockIo)),l=Ks.parse({instanceId:r,runtimeKind:"docker",state:"available",sampledAt:t,cpu:na(e.cpu,"usagePercent"),memory:a?{usageBytes:a[0],...void 0!==a[1]?{limitBytes:a[1]}:{},...na(e.memoryPercent,"usagePercent")}:void 0,network:c?{rxBytes:c[0],txBytes:c[1]\|\|0}:void 0,blockIo:d?{readBytes:d[0],writeBytes:d[1]\|\|0}:void 0,pids:ia(e.pids)});s&&n.set(s,l),o&&n.set(o,l)}return n}(t,n);for(const t of e){const e=[t.runtime.containerId,t.runtime.containerName].filter(Boolean),s=[...i.entries()].find(([t])=>e.some(e=>e===t\|\|e.startsWith(t)\|\|t.startsWith(e)))?.[1];this.update(s?{...s,instanceId:t.id}:aa(t.id,n,"Container metrics were not returned by Docker."))}}update(e){const t=Ks.parse(e);this.snapshots.set(t.instanceId,t),this.publish?.(t)}}function ea(e){return[e.status,e.runtime.containerId\|\|"",e.runtime.containerName\|\|""].join("\0")}function ta(e){if(!e)return;const[t,n]=e.split("/").map(e=>function(e){const t=e.trim().match(/^([0-9]+(?:\.[0-9]+)?)\s([kmgtpe]?i?b)$/i);if(!t)return;const n=Number(t[1]),i=t[2].toLowerCase(),s=i.includes("i"),o="b"===i[0]?"":i[0],r=o?"kmgtpe".indexOf(o)+1:0;return Math.round(n(s?1024:1e3)r)}(e\|\|""));return void 0===t?void 0:[t,n]}function na(e,t){const n=Number(sa(e).replace(/%$/,""));return Number.isFinite(n)&&n>=0?{[t]:n}:void 0}function ia(e){const t=Number(sa(e));return Number.isFinite(t)&&t>=0?t:void 0}function sa(e){return"string"==typeof e\|\|"number"==typeof e?String(e).trim():""}function oa(e){return{instanceId:e,runtimeKind:"docker",state:"stopped",sampledAt:(new Date).toISOString()}}function ra(e){return{instanceId:e,runtimeKind:"docker",state:"pending",sampledAt:(new Date).toISOString()}}function aa(e,t,n){return{instanceId:e,runtimeKind:"docker",state:"unavailable",sampledAt:t,error:n.slice(0,2048)}}function ca(e,t,n){return Object.assign(new Error(e),{statusCode:t,code:n})}function da(e){const i=n.resolve(e);let s;try{s=t.statSync(i)}catch(e){const t=e&&"object"==typeof e?e.code:void 0;if("ENOENT"===t\|\|"ENOTDIR"===t)throw ca(`Folder ${i} was not found.`,404,"NODE_FOLDER_PATH_NOT_FOUND");throw ca(`Folder ${i} is not accessible.`,403,"NODE_FOLDER_PATH_UNREADABLE")}if(!s.isDirectory())throw ca(`Path ${i} is not a folder.`,400,"NODE_FOLDER_PATH_NOT_DIRECTORY");try{t.accessSync(i,t.constants.R_OK\|t.constants.X_OK)}catch{throw ca(`Folder ${i} is not accessible.`,403,"NODE_FOLDER_PATH_UNREADABLE")}return i}function la(e){try{return t.statSync(e).isDirectory()}catch{return!1}}function ua(){if("win32"!==process.platform)return[n.parse(n.resolve(process.cwd())).root];const e=n.parse(n.resolve(process.cwd())).root,t=Array.from({length:26},(e,t)=>`${String.fromCharCode(65+t)}:\\`);return[...new Set([e,...t])].filter(la)}function pa(){const e=n.resolve(c.homedir()),t=ua().map(e=>n.resolve(e));return[...la(e)?[{kind:"home",name:n.basename(e)\|\|e,path:e}]:[],...t.map(e=>({kind:"root",name:e,path:e}))]}function ma(e,i){let s;try{s=t.statSync(e)}catch{return}if(!s.isDirectory())return;const o=n.resolve(e),r=n.basename(o)\|\|o;let a=[];try{a=i>0?t.readdirSync(o,{withFileTypes:!0}):[]}catch{a=[]}const c=i>0?a.filter(e=>e.isDirectory()\|\|e.isSymbolicLink()&&la(n.join(o,e.name))).sort((e,t)=>e.name.localeCompare(t.name)).slice(0,80).flatMap(e=>{const t=ma(n.join(o,e.name),i-1);return t?[t]:[]}):[];return{name:r,path:o,children:c}}function ha(e){return(e.path?[da(e.path)]:ua()).flatMap(t=>{const n=ma(t,e.depth);return n?[n]:[]})}function ga(){return process.env.TASK_HANDOFF_NODE_AGENT_DATA_DIR\|\|n.join(c.homedir(),".config","task-handoff","node-agent")}function fa(e=ga()){const t=n.resolve(e);return{dataDir:t,identityPath:n.join(t,"identity.json"),settingsPath:n.join(t,"runtime-settings.json"),localFoldersDir:n.join(t,"local-folders"),nodeRuntimesDir:n.join(t,"node-runtimes"),controlledInstancesDir:n.join(t,"controlled-instances"),environmentTemplatesDir:n.join(t,"environment-templates"),instancePrivateConfigsDir:n.join(t,"instance-private-configs"),nodeModelsDir:n.join(t,"models"),modelAssignmentsDir:n.join(t,"model-assignments"),modelEnvironmentsDir:n.join(t,"model-environments"),gitCredentialPayloadsDir:n.join(t,"git-credentials","payloads"),gitCredentialAssignmentsDir:n.join(t,"git-credentials","assignments"),gitCredentialAuthorizationSetsDir:n.join(t,"git-credentials","authorization-sets"),gitWorkspaceProvisioningIntentsDir:n.join(t,"git-credentials","workspace-provisioning-intents"),updatesDir:n.join(t,"updates"),logsDir:n.join(t,"logs"),databasePath:n.join(t,"node-agent.sqlite"),storyRegistryDir:n.join(t,"story-registry"),storyAutomationsDir:n.join(t,"story-automations"),storyContentDir:n.join(t,"stories"),storyMutationsDir:n.join(t,".story-mutations"),storyTrashDir:n.join(t,".story-trash")}}function ya(e,t){const i=n.extname(e);return`${i?e.slice(0,-i.length):e}.${t}${i}`}function Ia(e,n=10485760,i=2){if(!t.existsSync(e))return!1;const s=t.lstatSync(e);if(!s.isFile()\|\|s.isSymbolicLink()\|\|s.size<=n)return!1;if(i>0){!function(e,n){if(!(n<=0)){t.rmSync(ya(e,n),{force:!0});for(let i=n-1;i>=1;i-=1){const n=ya(e,i);t.existsSync(n)&&t.renameSync(n,ya(e,i+1))}}}(e,i);const s=function(e,n){const i=t.statSync(e),s=Math.min(i.size,n),o=Buffer.allocUnsafe(s),r=t.openSync(e,"r");let a=0;try{for(;a<s;){const e=t.readSync(r,o,a,s-a,i.size-s+a);if(0===e)break;a+=e}}finally{t.closeSync(r)}return a===s?o:o.subarray(0,a)}(e,n);t.writeFileSync(ya(e,1),s,{mode:384})}return t.truncateSync(e,0),t.chmodSync(e,384),!0}class Aa{logsDir;localInstancesRoot;localInstancesTrashRoot;privateConfigsDir;options;constructor(e,t={}){this.options=t,this.logsDir=e.logsDir,this.localInstancesRoot=n.join(e.dataDir,"local-instances"),this.localInstancesTrashRoot=n.join(e.dataDir,"local-instances-trash"),this.privateConfigsDir=e.instancePrivateConfigsDir}run(e){this.capNodeAgentLogs();const n=new Set(e);if(this.removeOrphanPrivateConfigs(n),t.existsSync(this.localInstancesRoot)){le(this.localInstancesRoot);for(const e of t.readdirSync(this.localInstancesRoot,{withFileTypes:!0}))e.isDirectory()&&!e.isSymbolicLink()&&(n.has(e.name)?this.capControlledInstanceLogs(e.name):this.retire(e.name))}return function(e){if(!t.existsSync(e.trashRoot))return[];const n=e.nowMs??Date.now(),i=e.retentionMs??ce,s=[];for(const o of t.readdirSync(e.trashRoot,{withFileTypes:!0})){const r=de(e.trashRoot,o.name);try{const e=Number(o.name.split("-",1)[0]);if(!Number.isFinite(e)\|\|e+i>n)continue;const a=t.lstatSync(r);a.isSymbolicLink()?t.unlinkSync(r):a.isDirectory()?t.rmSync(r,{recursive:!0,force:!0}):t.unlinkSync(r),s.push(r)}catch(t){e.logger?.("retired persistence entry cleanup failed",{path:r,error:t instanceof Error?t.message:String(t)})}}return s}({trashRoot:this.localInstancesTrashRoot,retentionMs:this.options.retentionMs??ce,nowMs:this.now(),logger:this.options.logger})}capActiveInstanceLogs(e){for(const t of e)this.capControlledInstanceLogs(t)}capNodeAgentLogs(){const e=[];for(const t of["node-agent.out.log","node-agent.err.log"]){const i=n.join(this.logsDir,t);try{Ia(i)&&e.push(i)}catch(e){this.options.logger?.("node-agent log rotation failed",{filePath:i,error:e instanceof Error?e.message:String(e)})}}return e}capControlledInstanceLogs(e){const t=n.resolve(this.localInstancesRoot,e);if(n.dirname(t)!==n.resolve(this.localInstancesRoot))return[];const i=n.join(t,"logs"),s=[];for(const t of["controlled-instance.out.log","controlled-instance.err.log"]){const o=n.join(i,t);try{Ia(o)&&s.push(o)}catch(t){this.options.logger?.("controlled instance log rotation failed",{instanceId:e,filePath:o,error:t instanceof Error?t.message:String(t)})}}return s}retire(e){try{return function(e){const n=de(e.sourceRoot,e.entryName);if(!t.existsSync(n))return;const i=t.lstatSync(n);if(!i.isDirectory()\|\|i.isSymbolicLink())throw new Error(`Retention source must be a real directory: ${n}`);le(e.trashRoot);const s=e.nowMs??Date.now();let o=0,r=`${s}-${e.entryName}`;for(;t.existsSync(de(e.trashRoot,r));)o+=1,r=`${s}-${o}-${e.entryName}`;const a=de(e.trashRoot,r);return t.renameSync(n,a),a}({sourceRoot:this.localInstancesRoot,entryName:e,trashRoot:this.localInstancesTrashRoot,nowMs:this.now()})}catch(t){return void this.options.logger?.("local instance persistence retirement failed",{instanceId:e,error:t instanceof Error?t.message:String(t)})}}removeOrphanPrivateConfigs(e){if(t.existsSync(this.privateConfigsDir))for(const i of t.readdirSync(this.privateConfigsDir,{withFileTypes:!0})){if(!i.isFile()\|\|!i.name.endsWith(".json"))continue;const s=i.name.slice(0,-5);if(e.has(s))continue;const o=n.join(this.privateConfigsDir,i.name);try{(this.options.removeFile\|\|(e=>t.rmSync(e,{force:!0})))(o)}catch(e){this.options.logger?.("orphan instance private config cleanup failed",{instanceId:s,filePath:o,error:e instanceof Error?e.message:String(e)})}}}now(){return this.options.now?.()??Date.now()}}function _a(e,t=process.platform){const i=n.resolve(e),s=d.createHash("sha256").update(i).digest("hex").slice(0,16);return"win32"===t?`\\\\.\\pipe\\task-handoff-node-agent-${s}`:n.join("/tmp",`task-handoff-node-agent-${process.getuid?.()??"user"}`,`${s}.sock`)}async function Ea(e,t,n={}){const s=n.method\|\|"GET",o="string"==typeof n.body\|\|n.body instanceof Buffer?n.body:void 0===n.body\|\|null===n.body?void 0:String(n.body),r=new Headers(n.headers\|\|{});return void 0===o\|\|r.has("content-length")\|\|r.set("content-length",String(Buffer.byteLength(o))),new Promise((a,c)=>{const d=i.request({socketPath:e,method:s,path:`/api/node-agent${t}`,headers:Object.fromEntries(r.entries())},e=>{const t=e.statusCode\|\|500;a(new Response("HEAD"!==s&&204!==t&&205!==t&&304!==t?h.Readable.toWeb(e):null,{status:t,headers:e.headers}))});d.on("error",c);const l=()=>d.destroy(new DOMException("The operation was aborted.","AbortError"));n.signal?.aborted?l():n.signal?.addEventListener("abort",l,{once:!0}),d.once("close",()=>n.signal?.removeEventListener("abort",l)),void 0!==o&&d.write(o),d.end()})}const Ta="runtime-manifest.json";class ba extends Error{code;retryable;constructor(e,t,n){super(t,void 0===n?.cause?void 0:{cause:n.cause}),this.name="RuntimeArtifactError",this.code=e,this.retryable=n?.retryable??!1}}async function wa(e,t=""){const i=[],s=await g.readdir(n.join(e,t),{withFileTypes:!0});for(const o of s){const s=t?n.posix.join(t,o.name):o.name;if(!t&&s===Ta)continue;const r=n.join(e,...s.split("/"));if(o.isDirectory()){i.push(...await wa(e,s));continue}if(o.isSymbolicLink()){const t=await g.readlink(r);if(n.isAbsolute(t))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime payload symlink is absolute: ${s}`);const o=n.resolve(n.dirname(r),t),a=n.relative(n.resolve(e),o);if(!a\|\|".."===a\|\|a.startsWith(`..${n.sep}`)\|\|n.isAbsolute(a))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime payload symlink escapes the artifact: ${s}`);if(!await g.lstat(o).catch(()=>{}))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime payload symlink is broken: ${s}`);i.push({absolutePath:r,relativePath:s,kind:"symlink",target:t,size:Buffer.byteLength(t)});continue}if(!o.isFile())throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime payload contains unsupported entry: ${s}`);const a=await g.lstat(r);i.push({absolutePath:r,relativePath:s,kind:"file",size:a.size})}return i}async function Sa(e){const n=(await wa(e)).sort((e,t)=>function(e,t){return Buffer.compare(Buffer.from(e,"utf8"),Buffer.from(t,"utf8"))}(e.relativePath,t.relativePath)),i=d.createHash("sha256");for(const e of n){if(i.update("file"===e.kind?"F":"L","ascii"),i.update(Buffer.from(e.relativePath,"utf8")),i.update(Buffer.from([0])),i.update(Buffer.from(String(e.size),"ascii")),i.update(Buffer.from([0])),"file"===e.kind)for await(const n of t.createReadStream(e.absolutePath))i.update(n);else i.update(Buffer.from(e.target,"utf8"));i.update(Buffer.from([0]))}return i.digest("hex")}function va(e){for(const[t,n]of[["version",e.version],["platform",e.platform],["arch",e.arch]])if(!/^[0-9A-Za-z._-]+$/.test(n))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Invalid runtime artifact ${t}: ${n}`);return`${e.version}-${e.platform}-${e.arch}`}function Na(e,t){return`${va(e)}-${e.sha256}-${t}`}async function Oa(e){const n=d.createHash("sha256");for await(const i of t.createReadStream(e))n.update(i);return n.digest("hex")}class za{#e;#t;#n=new Map;constructor(e){this.#e=e.cacheDir,this.#t=e.fetchImpl??fetch}resolve(e,t){const n=qi.parse(e);if(!/^[a-f0-9]{64}$/.test(t.archiveSha256))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID","Runtime archive SHA-256 is invalid.");if((t.archiveUrl?1:0)+(t.archivePath?1:0)!=1)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID","Runtime artifact source must specify exactly one archive location.");const i=Na(n,t.archiveSha256),s=this.#n.get(i);if(s)return s;const o=this.#i(n,t).finally(()=>this.#n.delete(i));return this.#n.set(i,o),o}async#i(e,i){if(!/^[a-f0-9]{64}$/.test(i.archiveSha256))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID","Runtime archive SHA-256 is invalid.");const s=Na(e,i.archiveSha256),o=n.join(this.#e,"archives"),r=n.join(o,`${s}.tar.gz`);if(await g.mkdir(o,{recursive:!0}),await this.#s(r,e,i.archiveSha256))return{identity:e,archivePath:r,cacheHit:!0};await g.rm(r,{force:!0});const a=n.join(o,`.${s}.${d.randomUUID()}.part`);try{const n=await g.open(a,"wx");if(i.archivePath)await f.pipeline(t.createReadStream(i.archivePath),n.createWriteStream());else{const e=await this.#t(i.archiveUrl);if(!e.ok\|\|!e.body)throw await n.close(),new ba("INSTANCE_RUNTIME_ARTIFACT_UNAVAILABLE",`Runtime artifact download failed with HTTP ${e.status}.`,{retryable:e.status>=500});await f.pipeline(e.body,n.createWriteStream())}if(await Oa(a)!==i.archiveSha256)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID","Downloaded runtime archive SHA-256 does not match release metadata.");return await this.#o(a,e),await g.rename(a,r),{identity:e,archivePath:r,cacheHit:!1}}catch(e){if(e instanceof ba)throw e;throw new ba("INSTANCE_RUNTIME_ARTIFACT_UNAVAILABLE","Could not download runtime artifact.",{cause:e,retryable:!0})}finally{await g.rm(a,{force:!0})}}async#s(e,t,n){try{return await Oa(e)===n&&(await this.#o(e,t),!0)}catch{return!1}}async#o(e,t){const i=n.join(this.#e,"validation",`${va(t)}-${d.randomUUID()}`);try{await async function(e,t){await g.mkdir(t,{recursive:!0});try{await y.extract({file:e,cwd:t,strict:!0,preservePaths:!1,filter:(e,t)=>{const i=n.posix.normalize(e.replace(/^\.\//,""));if(!i\|\|".."===i\|\|i.startsWith("../")\|\|n.posix.isAbsolute(i))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime archive entry escapes the artifact root: ${e}`);const s=t.type;if("File"!==s&&"OldFile"!==s&&"Directory"!==s&&"SymbolicLink"!==s)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime archive contains unsupported entry type ${s??"unknown"}: ${e}`);return!0}})}catch(e){throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID","Could not extract runtime artifact safely.",{cause:e})}}(e,i),await async function(e,t,i){const s=await async function(e){let t;try{t=JSON.parse(await g.readFile(n.join(e,Ta),"utf8"))}catch(e){throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID","Runtime artifact manifest is missing or invalid JSON.",{cause:e})}const i=Eo(qi,t);if(!i.success)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime artifact manifest is invalid: ${i.error.message}`);return i.data}(e);if(function(e,t){for(const n of["packageName","version","platform","arch","formatVersion","launcherAbi","entrypoint","sha256"])if(e[n]!==t[n])throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime artifact ${"sha256"===n?"SHA-256":n} mismatch: expected ${t[n]}, got ${e[n]}.`)}(s,t),1!==s.formatVersion)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Unsupported runtime artifact format ${s.formatVersion}.`);if(i?.platform&&"universal"!==s.platform&&s.platform!==i.platform)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime artifact platform ${s.platform} does not match ${i.platform}.`);if(i?.arch&&"universal"!==s.arch&&s.arch!==i.arch)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime artifact architecture ${s.arch} does not match ${i.arch}.`);if(void 0!==i?.launcherAbi&&s.launcherAbi>i.launcherAbi)throw new ba("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Runtime requires launcher ABI ${s.launcherAbi}, but the base runtime provides ${i.launcherAbi}.`);const o=function(e,t){if(!e\|\|e.includes("\\")\|\|n.posix.isAbsolute(e))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`${t} must be a non-empty POSIX relative path.`);const i=n.posix.normalize(e);if("."===i\|\|".."===i\|\|i.startsWith("../"))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`${t} escapes the runtime root.`);return i}(s.entrypoint,"Runtime entrypoint"),r=await g.lstat(n.join(e,...o.split("/"))).catch(()=>{});if(!r?.isFile())throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime entrypoint is missing: ${o}`);const a=await Sa(e);if(a!==s.sha256)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime payload SHA-256 mismatch: expected ${s.sha256}, got ${a}.`);return s}(i,t,{platform:t.platform,arch:t.arch})}finally{await g.rm(i,{recursive:!0,force:!0})}}}async function Ca(e,t,i,s=fetch){if("linux"!==t\|\|!["x64","arm64"].includes(i))throw new ba("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Managed controlled-instance updates require a Linux x64 or arm64 target, received ${t}/${i}.`);const o=await async function(e){const t=`controlled-instance-runtime-${e}-linux-universal`,i=function(){const e=process.env.TASK_HANDOFF_BUNDLED_RUNTIME_DIR?.trim();return n.resolve(e\|\|n.join(n.dirname(process.argv[1]\|\|process.cwd()),"..","runtime-artifacts"))}();try{const[s,o]=await Promise.all([g.readFile(n.join(i,`${t}.manifest.json`),"utf8"),g.readFile(n.join(i,`${t}.tar.gz.sha256`),"utf8")]),r=Eo(qi,JSON.parse(s));if(!r.success\|\|r.data.version!==e\|\|"linux"!==r.data.platform\|\|"universal"!==r.data.arch)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Bundled controlled-instance ${e} has an invalid Linux manifest.`);const a=o.trim().split(/\s+/)[0]?.toLowerCase();if(!a\|\|!/^[a-f0-9]{64}$/.test(a))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Bundled controlled-instance ${e} has an invalid archive checksum.`);return{identity:r.data,source:{archivePath:n.join(i,`${t}.tar.gz`),archiveSha256:a}}}catch(t){if("ENOENT"===t.code)return;if(t instanceof ba)throw t;throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Could not read bundled controlled-instance ${e}.`,{cause:t})}}(e);if(o)return o;const r=`controlled-instance-runtime-${e}-linux-universal`,a=function(e){const t=process.env.TASK_HANDOFF_RUNTIME_RELEASE_BASE_URL?.trim();return t?t.replaceAll("{version}",e).replace(/\/$/,""):`https://github.com/edgestorage/task-handoff/releases/download/v${e}`}(e),c=`${a}/${r}.manifest.json`,d=`${a}/${r}.tar.gz`,l=`${a}/${r}.tar.gz.sha256`,[u,p]=await Promise.all([s(c),s(l)]).catch(t=>{throw new ba("INSTANCE_RUNTIME_ARTIFACT_UNAVAILABLE",`Could not read release metadata for controlled-instance ${e}.`,{cause:t,retryable:!0})});if(!u.ok\|\|!p.ok)throw new ba("INSTANCE_RUNTIME_ARTIFACT_UNAVAILABLE",`Release metadata for controlled-instance ${e} is unavailable (manifest HTTP ${u.status}, checksum HTTP ${p.status}).`,{retryable:u.status>=500\|\|p.status>=500});let m;try{m=await u.json()}catch(t){throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Release manifest for controlled-instance ${e} is not valid JSON.`,{cause:t})}const h=Eo(qi,m);if(!h.success)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Release manifest for controlled-instance ${e} is invalid: ${h.error.message}`);if(h.data.version!==e\|\|"linux"!==h.data.platform\|\|"universal"!==h.data.arch)throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Release identity mismatch: requested ${e}-linux-universal, received ${h.data.version}-${h.data.platform}-${h.data.arch}.`);const f=(await p.text()).trim().split(/\s+/)[0]?.toLowerCase();if(!f\|\|!/^[a-f0-9]{64}$/.test(f))throw new ba("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Release checksum for controlled-instance ${e} is invalid.`);return{identity:h.data,source:{archiveUrl:d,archiveSha256:f}}}class Ra{store;desiredVersion;hooks;inFlight=new Map;requests=new Map;cancelled=new Set;now;delay;drainTimeoutMs;verificationTimeoutMs;pollIntervalMs;maxAttempts;retryBaseDelayMs;retryMaxDelayMs;constructor(e,t,n,i={}){this.store=e,this.desiredVersion=t,this.hooks=n,this.now=i.now\|\|(()=>new Date),this.delay=i.delay\|\|(e=>new Promise(t=>setTimeout(t,e))),this.drainTimeoutMs=i.drainTimeoutMs??3e5,this.verificationTimeoutMs=i.verificationTimeoutMs??6e4,this.pollIntervalMs=i.pollIntervalMs??250,this.maxAttempts=function(e){if(!Number.isInteger(e)\|\|e<=0)throw new TypeError("maxAttempts must be a positive integer.");return e}(i.maxAttempts??3),this.retryBaseDelayMs=Ua(i.retryBaseDelayMs??1e3,"retryBaseDelayMs"),this.retryMaxDelayMs=Ua(i.retryMaxDelayMs??3e4,"retryMaxDelayMs")}schedule(e,t={}){const n=this.requests.get(e)\|\|{startRequested:!1,resumeCancelled:!1};n.startRequested\|\|=!0===t.startRequested,n.resumeCancelled\|\|=!0===t.resumeCancelled\|\|!0===t.startRequested,n.resumeCancelled&&this.cancelled.delete(e),this.requests.set(e,n);const i=this.inFlight.get(e);if(i)return i;const s=Promise.resolve().then(()=>this.reconcile(e,n)).finally(()=>{this.inFlight.delete(e),this.requests.delete(e)});return this.inFlight.set(e,s),s}isRunning(e){return this.inFlight.has(e)}cancel(e){return this.cancelled.add(e),this.inFlight.get(e)}async reconcile(e,t){let n=this.requireInstance(e);const i=this.desiredVersion();if(this.cancelled.has(e)&&!t.resumeCancelled)return this.storePhase(n,"pending");if(Da(n))return this.storePhase(n,"pending");const s=n.runtimeVersion?.desiredVersion!==i\|\|t.startRequested\|\|Pa(n)?0:this.remainingRetryDelayMs(n.runtimeVersion);if(s>0&&(await this.delay(s),n=this.requireInstance(e),this.cancelled.has(e)))return this.storePhase(n,"pending");const o=xa(n),r=o===i&&(await(this.hooks.isInstalled?.(n,i))??!0);if(this.cancelled.has(e))return this.storePhase(this.requireInstance(e),"pending");if(o===i&&r)return this.storeState(n,{desiredVersion:i,actualVersion:o,phase:"matched",attempt:n.runtimeVersion?.attempt\|\|0,matchedAt:this.timestamp()},!Pa(n)&&"failed"!==n.health);if(n=this.storeState(n,function(e,t,n,i=!1){const s=e.runtimeVersion,o=s?.desiredVersion===t&&"matched"!==s.phase;return{desiredVersion:t,...n?{actualVersion:n}:{},phase:"pending",attempt:o?s.attempt:0,error:(o?s.error:void 0)\|\|(n!==t\|\|i?La(t,n):Ma("INSTANCE_RUNTIME_VERIFICATION_FAILED",`Controlled-instance ${t} is running, but the active runtime artifact does not match the desired release identity.`,t,n,!0))}}(n,i,o,r)),Pa(n)&&!t.startRequested)return n;let a=!1,c=0;try{for(;c<this.maxAttempts;){if(this.cancelled.has(e))return this.storePhase(this.requireInstance(e),"pending");let s;try{if(n=this.storePhase(n,"draining"),await(this.hooks.beginDrain?.(n)),a=!0,n=this.requireInstance(e),ka(n)){const t=await this.waitUntil(e,this.drainTimeoutMs,e=>!ka(e));if(n=this.requireInstance(e),!t){if(this.cancelled.has(e))return this.storePhase(n,"pending");await(this.hooks.onForcedDrain?.(n))}}if(n=this.storePhase(this.requireInstance(e),"installing",!0),c+=1,await this.hooks.install(n,i),this.cancelled.has(e)\|\|Pa(this.requireInstance(e))&&!t.startRequested)return this.storePhase(this.requireInstance(e),"pending");if(n=this.storePhase(this.requireInstance(e),"restarting"),await this.hooks.restart(n),this.cancelled.has(e))return this.storePhase(this.requireInstance(e),"pending");n=this.storePhase(this.requireInstance(e),"verifying");const s=await this.waitUntil(e,this.verificationTimeoutMs,e=>xa(e)===i);if(this.cancelled.has(e))return this.storePhase(this.requireInstance(e),"pending");if(!s)throw Ma("INSTANCE_RUNTIME_VERIFICATION_FAILED",`Instance ${e} did not register controlled-instance ${i} after restart.`,i,xa(this.requireInstance(e)),!0);const o=this.requireInstance(e);if(this.hooks.isInstalled&&!await this.hooks.isInstalled(o,i))throw Ma("INSTANCE_RUNTIME_VERIFICATION_FAILED",`Instance ${e} reported controlled-instance ${i}, but its active runtime release is missing.`,i,xa(o),!0);return this.storeState(o,{desiredVersion:i,actualVersion:i,phase:"matched",attempt:o.runtimeVersion?.attempt\|\|1,matchedAt:this.timestamp()},!Pa(o)&&"failed"!==o.health)}catch(t){if(this.cancelled.has(e))return this.storePhase(this.requireInstance(e),"pending");s=ja(t,i,xa(this.store.get(e)))}n=this.requireInstance(e);const o=n.runtimeVersion?.attempt\|\|1;if(!s.retryable\|\|c>=this.maxAttempts)return this.storeBatchFailure(n,i,o>=this.maxAttempts&&s.retryable?Fa(i,xa(n),this.maxAttempts,s):s);n=this.storeState(n,{desiredVersion:i,...xa(n)?{actualVersion:xa(n)}:{},phase:"pending",attempt:o,lastAttemptAt:this.timestamp(),error:s}),await this.delay(this.retryDelayMs(o))}return this.storeBatchFailure(n,i,Fa(i,xa(n),this.maxAttempts,n.runtimeVersion?.error))}finally{a&&await(this.hooks.endDrain?.(this.requireInstance(e)))}}storeBatchFailure(e,t,n){const i=xa(e);return this.storeState(e,{desiredVersion:t,...i?{actualVersion:i}:{},phase:"pending",attempt:e.runtimeVersion?.attempt\|\|0,lastAttemptAt:this.timestamp(),error:n})}retryDelayMs(e){return Math.min(this.retryMaxDelayMs,this.retryBaseDelayMs2*Math.max(0,e-1))}remainingRetryDelayMs(e){if(!e?.error\|\|!e.lastAttemptAt)return 0;const t=Date.parse(e.lastAttemptAt);return Number.isFinite(t)?Math.max(0,t+this.retryDelayMs(e.attempt\|\|1)-this.now().getTime()):0}storePhase(e,t,n=!1){const i=this.desiredVersion(),s=xa(e),o=e.runtimeVersion?.desiredVersion===i?e.runtimeVersion.error:void 0;return this.storeState(e,{desiredVersion:i,...s?{actualVersion:s}:{},phase:t,attempt:(e.runtimeVersion?.attempt\|\|0)+(n?1:0),lastAttemptAt:this.timestamp(),...o?{error:o}:"pending"===t?{error:La(i,s)}:{}},"restarting"!==t&&void 0)}storeState(e,t,n){const i=this.store.get(e.id)\|\|e;return this.store.put(co.parse({...i,runtimeVersion:t,...void 0===n?{}:{ready:n},updatedAt:this.timestamp()}))}async waitUntil(e,t,n){const i=this.now().getTime()+t;for(;;){const t=this.store.get(e);if(t&&n(t))return!0;if(this.cancelled.has(e))return!1;if(this.now().getTime()>=i)return!1;await this.delay(Math.min(this.pollIntervalMs,Math.max(0,i-this.now().getTime())))}}requireInstance(e){const t=this.store.get(e);if(!t)throw new Error(`Instance ${e} was removed during runtime reconciliation.`);return t}timestamp(){return this.now().toISOString()}}function xa(e){return e?.build?.packageVersion\|\|e?.instanceVersion}function ka(e){return e.apps.runningCount>0\|\|e.aiSessions.runningCount>0}function Da(e){return Boolean(e.imageProvisioning&&"ready"!==e.imageProvisioning.phase)}function Pa(e){return["created","stopped","failed"].includes(e.status)}function La(e,t){return Ma("INSTANCE_RUNTIME_VERSION_MISMATCH",`Expected controlled-instance ${e}, received ${t\|\|"an unknown version"}.`,e,t,!0)}function Ma(e,t,n,i,s){return{code:e,message:t,expectedVersion:n,...i?{actualVersion:i}:{},retryable:s}}function ja(e,t,n){if(e&&"object"==typeof e&&"code"in e&&"message"in e){const i=e,s=Vi.shape.code.safeParse(i.code);if(s.success&&"string"==typeof i.message)return Ma(s.data,i.message,t,n,"boolean"!=typeof i.retryable\|\|i.retryable)}return Ma("INSTANCE_RUNTIME_INSTALL_FAILED",e instanceof Error?e.message:String(e),t,n,!0)}function Fa(e,t,n,i){const s=i?.message?` Last error: ${i.message}`:"";return Ma(i?.code\|\|"INSTANCE_RUNTIME_INSTALL_FAILED",`Runtime convergence paused after ${n} attempts and will retry.${s}`,e,t,!0)}function Ua(e,t){if(!Number.isFinite(e)\|\|e<0)throw new TypeError(`${t} must be a nonnegative finite number.`);return e}function $a(e,n=448){t.mkdirSync(e,{recursive:!0,mode:n}),t.chmodSync(e,n)}function Ha(e,i,s={}){const o=s.directoryMode??448,r=s.fileMode??384;$a(n.dirname(e),o),I.sync(e,`${JSON.stringify(i,null,2)}\n`,{encoding:"utf8",mode:r}),t.chmodSync(e,r)}function qa(e,t){console.warn(JSON.stringify({message:e,...t}))}function Va(e){return e&&"object"==typeof e&&"issues"in e?{issues:e.issues}:{error:e instanceof Error?e.message:String(e)}}function Ba(e,n){const i=n.logger\|\|qa;let s;try{s=JSON.parse(t.readFileSync(e,"utf8"))}catch(t){if(n.rejectInvalid)throw t;return void i("stored JSON could not be read",{filePath:e,...Va(t)})}if(!n.schema)return s;const o=n.sanitize?n.sanitize(s):s,r=n.schema.safeParse(o);if(r.success)return r.data;if(n.rejectInvalid)throw r.error;const a="strip"in n.schema&&"function"==typeof n.schema.strip?n.schema.strip().safeParse(o):void 0;if(a?.success)return i("unknown stored fields were ignored",{filePath:e,issues:r.error.issues}),a.data;i("stored record failed validation and was isolated",{filePath:e,issues:r.error.issues})}function Ka(e){return`${e}_${d.randomUUID().replace(/-/g,"").slice(0,20)}`}function Ga(){return d.randomBytes(24).toString("base64url")}class Wa{directory;options;permissionsInitialized=!1;constructor(e,t={}){this.directory=e,this.options=t}init(){if(this.permissionsInitialized&&t.existsSync(this.directory))return;$a(this.directory,this.options.directoryMode??448);const e=this.options.fileMode??384;for(const i of t.readdirSync(this.directory).filter(e=>e.endsWith(".json")))t.chmodSync(n.join(this.directory,i),e);this.permissionsInitialized=!0}filePath(e){return n.join(this.directory,`${e}.json`)}list(){return this.init(),t.readdirSync(this.directory).filter(e=>e.endsWith(".json")).sort().flatMap(e=>{const t=Ba(n.join(this.directory,e),this.options);return t?[t]:[]})}get(e){this.init();const n=this.filePath(e);return t.existsSync(n)?Ba(n,this.options):void 0}put(e){const t=this.options.sanitize?this.options.sanitize(e):e,n=this.options.schema?this.options.schema.parse(t):t;return Ha(this.filePath(n.id),n,this.options),n}patch(e,t){const n=this.get(e);if(!n)return;const i={...n,...t,id:n.id,createdAt:n.createdAt,updatedAt:(new Date).toISOString()};return this.put(i)}delete(e){const n=this.filePath(e);return!!t.existsSync(n)&&(t.unlinkSync(n),!0)}}class Xa{filePathValue;defaults;options;constructor(e,t,n={}){this.filePathValue=e,this.defaults=t,this.options=n}init(){$a(n.dirname(this.filePathValue),this.options.directoryMode??448),t.existsSync(this.filePathValue)?t.chmodSync(this.filePathValue,this.options.fileMode??384):this.put(this.defaults())}get(){return this.init(),t.existsSync(this.filePathValue)?Ba(this.filePathValue,this.options)??this.defaults():this.defaults()}put(e){const t=this.options.sanitize?this.options.sanitize(e):e,n=this.options.schema?this.options.schema.parse(t):t;return Ha(this.filePathValue,n,this.options),n}}E.sqliteTable("na_migration_ledger",{id:E.text("id").primaryKey(),checksum:E.text("checksum").notNull(),appliedAt:E.text("applied_at").notNull(),details:E.text("details",{mode:"json"}).$type().notNull()});const Ya=E.sqliteTable("na_stories",{id:E.text("id").primaryKey(),title:E.text("title").notNull(),description:E.text("description"),createdAt:E.text("created_at").notNull(),updatedAt:E.text("updated_at").notNull(),archivedAt:E.text("archived_at"),maxIdleAiSessions:E.integer("max_idle_ai_sessions").notNull().default(5),nextDocumentSequence:E.integer("next_document_sequence").notNull().default(1)},e=>[E.check("na_stories_max_idle_check",_.sql`${e.maxIdleAiSessions} BETWEEN 1 AND 50`),E.check("na_stories_next_document_sequence_check",_.sql`${e.nextDocumentSequence} > 0`),E.index("na_stories_created_idx").on(e.createdAt)]),Ja=E.sqliteTable("na_story_actions",{storyId:E.text("story_id").notNull().references(()=>Ya.id,{onDelete:"cascade"}),id:E.text("id").notNull(),title:E.text("title").notNull(),promptTemplate:E.text("prompt_template").notNull(),targetInstanceId:E.text("target_instance_id"),sessionPreset:E.text("session_preset_json",{mode:"json"}).$type(),displayOrder:E.integer("display_order").notNull()},e=>[E.primaryKey({columns:[e.storyId,e.id]}),E.index("na_story_actions_order_idx").on(e.storyId,e.displayOrder,e.id)]),Qa=E.sqliteTable("na_story_documents",{storyId:E.text("story_id").notNull().references(()=>Ya.id,{onDelete:"cascade"}),storyPath:E.text("story_path").notNull(),title:E.text("title").notNull(),indexedSequence:E.integer("indexed_sequence").notNull(),displayOrder:E.integer("display_order").notNull()},e=>[E.primaryKey({columns:[e.storyId,e.storyPath]}),E.uniqueIndex("na_story_documents_sequence_uq").on(e.storyId,e.indexedSequence),E.index("na_story_documents_page_idx").on(e.storyId,e.indexedSequence,e.storyPath),E.index("na_story_documents_display_idx").on(e.storyId,e.displayOrder,e.storyPath),E.check("na_story_documents_sequence_check",_.sql`${e.indexedSequence} > 0`)]),Za=E.sqliteTable("na_story_automations",{id:E.text("id").primaryKey(),storyId:E.text("story_id").notNull(),actionId:E.text("action_id").notNull(),schedule:E.text("schedule_json",{mode:"json"}).$type().notNull(),enabled:E.integer("enabled",{mode:"boolean"}).notNull(),policy:E.text("policy_json",{mode:"json"}).$type().notNull(),scheduleAnchorAt:E.text("schedule_anchor_at").notNull(),createdAt:E.text("created_at").notNull(),updatedAt:E.text("updated_at").notNull()},e=>[E.foreignKey({columns:[e.storyId,e.actionId],foreignColumns:[Ja.storyId,Ja.id],name:"na_story_automations_action_fk"}).onDelete("restrict"),E.index("na_story_automations_story_idx").on(e.storyId),E.index("na_story_automations_enabled_idx").on(e.enabled)]),ec=E.sqliteTable("na_story_automation_runs",{id:E.text("id").primaryKey(),automationId:E.text("automation_id").notNull().references(()=>Za.id,{onDelete:"cascade"}),eventType:E.text("event_type",{enum:["manual","schedule"]}).notNull(),status:E.text("status",{enum:["queued","dispatching","running","completed","failed","skipped"]}).notNull(),scheduledFor:E.text("scheduled_for").notNull(),targetInstanceId:E.text("target_instance_id").notNull(),aiSessionId:E.text("ai_session_id"),error:E.text("error_json",{mode:"json"}).$type(),queuedAt:E.text("queued_at").notNull(),startedAt:E.text("started_at"),completedAt:E.text("completed_at"),executionKey:E.text("execution_key").notNull(),requestFingerprint:E.text("request_fingerprint").notNull(),executionInput:E.text("execution_input_json",{mode:"json"}).$type().notNull()},e=>[E.uniqueIndex("na_story_automation_runs_execution_key_uq").on(e.executionKey),E.index("na_story_automation_runs_automation_time_idx").on(e.automationId,e.queuedAt),E.index("na_story_automation_runs_status_idx").on(e.status,e.scheduledFor)]),tc=E.sqliteTable("na_story_file_mutations",{id:E.text("id").primaryKey(),storyId:E.text("story_id").notNull().references(()=>Ya.id,{onDelete:"restrict"}),operation:E.text("operation",{enum:["write","rename","delete"]}).notNull(),storyPath:E.text("story_path").notNull(),nextStoryPath:E.text("next_story_path"),title:E.text("title"),temporaryName:E.text("temporary_name"),backupName:E.text("backup_name"),phase:E.text("phase",{enum:["receiving","prepared","files-staged","database-committed","cleanup"]}).notNull(),createdAt:E.text("created_at").notNull(),updatedAt:E.text("updated_at").notNull()},e=>[E.index("na_story_file_mutations_story_idx").on(e.storyId,e.createdAt)]),nc=E.sqliteTable("na_story_deletion_intents",{storyId:E.text("story_id").primaryKey(),phase:E.text("phase",{enum:["prepared","files-staged","database-committed","cleanup"]}).notNull(),trashName:E.text("trash_name"),createdAt:E.text("created_at").notNull(),updatedAt:E.text("updated_at").notNull()}),ic=["health","connectionStatus","agentStatus","targetStatus","uiAccessStatus","ready","protocolVersion","instanceVersion","build","runtimeVersion","capabilities","appInventory","target","access","apps","aiSessions","triggers","runtime","lastHeartbeatAt"];function sc(e){return JSON.stringify(e??null)}function oc(e){return JSON.parse(String(e))}function rc(e,t){if(e.isTransaction)return t();e.exec("BEGIN IMMEDIATE");try{const n=t();return e.exec("COMMIT"),n}catch(t){throw e.exec("ROLLBACK"),t}}class ac{client;constructor(e){this.client=e}get(){return this.client.prepare("SELECT node_id, created_at, updated_at FROM na_node_identity WHERE singleton_key = 1").get()}ensure(e,t){const n=this.get();if(n&&n.node_id!==e)throw fc("NODE_AGENT_IDENTITY_MISMATCH",`Stored node identity ${n.node_id} does not match ${e}.`);return n\|\|this.client.prepare("INSERT INTO na_node_identity (singleton_key, node_id, created_at, updated_at) VALUES (1, ?, ?, ?)").run(e,t,t),this.get()}}class cc{client;constructor(e){this.client=e}list(){return this.client.prepare("SELECT FROM na_local_folders ORDER BY id").all().map(mc)}get(e){const t=this.client.prepare("SELECT * FROM na_local_folders WHERE id = ?").get(e);return t?mc(t):void 0}put(e){const t=is.parse(Ti(e));return this.client.prepare("INSERT INTO na_local_folders (id, node_id, name, path, labels_json, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET node_id=excluded.node_id, name=excluded.name, path=excluded.path,\n labels_json=excluded.labels_json, updated_at=excluded.updated_at").run(t.id,t.nodeId,t.name,t.path,sc(t.labels),t.createdAt,t.updatedAt),t}delete(e){return Number(this.client.prepare("DELETE FROM na_local_folders WHERE id = ?").run(e).changes)>0}}class dc{client;constructor(e){this.client=e}list(){return this.client.prepare("SELECT * FROM na_runtimes ORDER BY id").all().map(hc)}get(e){const t=this.client.prepare("SELECT * FROM na_runtimes WHERE id = ?").get(e);return t?hc(t):void 0}put(e){const t=Bs.parse(e);return this.client.prepare("INSERT INTO na_runtimes (id, node_id, name, type, status, access_strategy, capabilities_json, labels_json, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET node_id=excluded.node_id, name=excluded.name, type=excluded.type,\n status=excluded.status, access_strategy=excluded.access_strategy, capabilities_json=excluded.capabilities_json,\n labels_json=excluded.labels_json, updated_at=excluded.updated_at").run(t.id,t.nodeId,t.name,t.type,t.status,t.accessStrategy,sc(t.capabilities),sc(t.labels),t.createdAt,t.updatedAt),t}delete(e){try{return Number(this.client.prepare("DELETE FROM na_runtimes WHERE id = ?").run(e).changes)>0}catch(t){if(String(t).includes("FOREIGN KEY constraint failed"))throw fc("NODE_RUNTIME_IN_USE",`Runtime ${e} is used by a controlled instance.`,409);throw t}}}class lc{client;constructor(e){this.client=e}list(){return this.client.prepare("SELECT i., o.health, o.connection_status, o.ready, o.observed_json,\n o.last_heartbeat_at, o.updated_at AS observation_updated_at\n FROM na_instances i LEFT JOIN na_instance_observations o ON o.instance_id = i.id ORDER BY i.id").all().map(e=>gc(this.client,e))}get(e){const t=this.client.prepare("SELECT i., o.health, o.connection_status, o.ready, o.observed_json,\n o.last_heartbeat_at, o.updated_at AS observation_updated_at\n FROM na_instances i LEFT JOIN na_instance_observations o ON o.instance_id = i.id WHERE i.id = ?").get(e);return t?gc(this.client,t):void 0}put(e){const t=co.parse(ho(e));return rc(this.client,()=>{const e=this.client.prepare("SELECT state_revision, registration_credential FROM na_instances WHERE id = ?").get(t.id),n=Math.max(t.stateRevision\|\|0,Number(e?.state_revision)\|\|0)+1,i=t.registrationToken\|\|e?.registration_credential,s=function(e){const t={...e};for(const e of ic)delete t[e];for(const e of["id","nodeId","runtimeId","name","status","stateRevision","processIncarnationId","registrationToken","createdAt","updatedAt"])delete t[e];return t}({...t,stateRevision:n}),o=pc(t),r="local-folder"===t.source.type?t.source.localFolderId:void 0;return this.client.prepare("INSERT INTO na_instances\n (id, node_id, runtime_id, source_local_folder_id, name, status, state_revision, process_incarnation_id,\n registration_credential, desired_json, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET node_id=excluded.node_id, runtime_id=excluded.runtime_id,\n source_local_folder_id=excluded.source_local_folder_id, name=excluded.name, status=excluded.status,\n state_revision=excluded.state_revision, process_incarnation_id=excluded.process_incarnation_id,\n registration_credential=excluded.registration_credential, desired_json=excluded.desired_json,\n updated_at=excluded.updated_at").run(t.id,t.nodeId,t.runtimeId,r??null,t.name,t.status,n,t.processIncarnationId??null,i??null,sc(s),t.createdAt,t.updatedAt),this.client.prepare("INSERT INTO na_instance_observations\n (instance_id, health, connection_status, ready, observed_json, last_heartbeat_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(instance_id) DO UPDATE SET health=excluded.health, connection_status=excluded.connection_status,\n ready=excluded.ready, observed_json=excluded.observed_json, last_heartbeat_at=excluded.last_heartbeat_at,\n updated_at=excluded.updated_at").run(t.id,t.health,t.connectionStatus,t.ready?1:0,sc(o),t.lastHeartbeatAt??null,t.updatedAt),this.get(t.id)})}putObservation(e){const t=co.parse(ho(e));return rc(this.client,()=>{const e=this.client.prepare("SELECT state_revision, registration_credential FROM na_instances WHERE id = ?").get(t.id);if(!e)throw fc("NODE_INSTANCE_NOT_FOUND",`Instance ${t.id} was not found.`,404);const n=Math.max(t.stateRevision\|\|0,Number(e.state_revision)\|\|0)+1,i=t.registrationToken\|\|e.registration_credential;return this.client.prepare("UPDATE na_instances SET status = ?, state_revision = ?, process_incarnation_id = ?,\n registration_credential = ?, updated_at = ? WHERE id = ?").run(t.status,n,t.processIncarnationId??null,i??null,t.updatedAt,t.id),this.client.prepare("INSERT INTO na_instance_observations\n (instance_id, health, connection_status, ready, observed_json, last_heartbeat_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(instance_id) DO UPDATE SET health=excluded.health, connection_status=excluded.connection_status,\n ready=excluded.ready, observed_json=excluded.observed_json, last_heartbeat_at=excluded.last_heartbeat_at,\n updated_at=excluded.updated_at").run(t.id,t.health,t.connectionStatus,t.ready?1:0,sc(pc(t)),t.lastHeartbeatAt??null,t.updatedAt),this.get(t.id)})}delete(e){return Number(this.client.prepare("DELETE FROM na_instances WHERE id = ?").run(e).changes)>0}}function uc(e){return{nodeIdentity:new ac(e),localFolders:new cc(e),runtimes:new dc(e),instances:new lc(e)}}function pc(e){return Object.fromEntries(ic.flatMap(t=>void 0===e[t]?[]:[[t,e[t]]]))}function mc(e){return is.parse({id:e.id,nodeId:e.node_id,name:e.name,path:e.path,labels:oc(e.labels_json),createdAt:e.created_at,updatedAt:e.updated_at})}function hc(e){return Bs.parse({id:e.id,nodeId:e.node_id,name:e.name,type:e.type,status:e.status,accessStrategy:e.access_strategy,capabilities:oc(e.capabilities_json),labels:oc(e.labels_json),createdAt:e.created_at,updatedAt:e.updated_at})}function gc(e,t){const n=oc(t.desired_json),i=t.observed_json?oc(t.observed_json):{},s=e.prepare("SELECT * FROM na_instance_model_assignments WHERE instance_id = ?").get(String(t.id)),o=s?e.prepare("SELECT model_id FROM na_instance_model_entities WHERE instance_id = ? ORDER BY display_order").all(String(t.id)).map(e=>String(e.model_id)):void 0,r=s?{modelEntityIds:o,...s.legacy_codex_model_id?{codexModelHash:String(s.legacy_codex_model_id)}:{},...s.legacy_claude_model_id?{claudeModelHash:String(s.legacy_claude_model_id)}:{},...s.legacy_opencode_model_id?{opencodeModelHash:String(s.legacy_opencode_model_id)}:{}}:n.modelSelection;return co.parse({...n,...i,modelSelection:r,id:t.id,nodeId:t.node_id,runtimeId:t.runtime_id,name:t.name,status:t.status,stateRevision:t.state_revision,processIncarnationId:t.process_incarnation_id\|\|void 0,registrationToken:t.registration_credential\|\|void 0,health:t.health\|\|"unknown",connectionStatus:t.connection_status\|\|"unknown",ready:Boolean(t.ready),lastHeartbeatAt:t.last_heartbeat_at\|\|void 0,createdAt:t.created_at,updatedAt:t.updated_at})}function fc(e,t,n=409){return Object.assign(new Error(t),{code:e,statusCode:n})}function yc(e){return JSON.stringify(e??null)}function Ic(e){return JSON.parse(String(e))}class Ac{client;constructor(e){this.client=e}list(){return this.client.prepare("SELECT * FROM na_models ORDER BY display_order, id").all().map(Tc)}get(e){const t=this.client.prepare("SELECT * FROM na_models WHERE id = ?").get(e);return t?Tc(t):void 0}put(e){const t=us.parse(e);return this.client.prepare("INSERT INTO na_models\n (id, name, endpoint, key, model, app, enabled, display_order, model_names_json, protocols_json, labels_json, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET name=excluded.name, endpoint=excluded.endpoint, key=excluded.key,\n model=excluded.model, app=excluded.app, enabled=excluded.enabled, display_order=excluded.display_order,\n model_names_json=excluded.model_names_json, protocols_json=excluded.protocols_json,\n labels_json=excluded.labels_json, updated_at=excluded.updated_at").run(t.id,t.name,t.endpoint,t.key,t.model,t.app,t.enabled?1:0,t.order,yc(t.modelNames),yc(t.protocols),yc(t.labels),t.createdAt,t.updatedAt),t}delete(e){try{return Number(this.client.prepare("DELETE FROM na_models WHERE id = ?").run(e).changes)>0}catch(t){if(String(t).includes("FOREIGN KEY constraint failed")){const t=this.referenceIds(e);throw Object.assign(new Error(`Model ${e} is assigned to ${t.length} instance${1===t.length?"":"s"}.`),{statusCode:409,code:"NODE_MODEL_IN_USE",instanceIds:t})}throw t}}referenceIds(e){return this.client.prepare("SELECT DISTINCT instance_id FROM (\n SELECT instance_id FROM na_instance_model_entities WHERE model_id = ?\n UNION ALL SELECT instance_id FROM na_instance_model_assignments WHERE legacy_codex_model_id = ?\n UNION ALL SELECT instance_id FROM na_instance_model_assignments WHERE legacy_claude_model_id = ?\n UNION ALL SELECT instance_id FROM na_instance_model_assignments WHERE legacy_opencode_model_id = ?\n ) ORDER BY instance_id").all(e,e,e,e).map(e=>String(e.instance_id))}}class _c{client;constructor(e){this.client=e}get(e){const t=this.client.prepare("SELECT * FROM na_instance_model_assignments WHERE instance_id = ?").get(e);if(!t)return;const n=this.client.prepare("SELECT model_id FROM na_instance_model_entities WHERE instance_id = ? ORDER BY display_order").all(e).map(e=>String(e.model_id));return hs.parse({instanceId:e,modelEntityIds:n,codexModelHash:t.legacy_codex_model_id\|\|void 0,claudeModelHash:t.legacy_claude_model_id\|\|void 0,opencodeModelHash:t.legacy_opencode_model_id\|\|void 0,updatedAt:t.updated_at})}put(e){const t=hs.parse(e);return this.transaction(()=>{this.client.prepare("INSERT INTO na_instance_model_assignments\n (instance_id, legacy_codex_model_id, legacy_claude_model_id, legacy_opencode_model_id, updated_at)\n VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(instance_id) DO UPDATE SET legacy_codex_model_id=excluded.legacy_codex_model_id,\n legacy_claude_model_id=excluded.legacy_claude_model_id,\n legacy_opencode_model_id=excluded.legacy_opencode_model_id, updated_at=excluded.updated_at").run(t.instanceId,t.codexModelHash??null,t.claudeModelHash??null,t.opencodeModelHash??null,t.updatedAt),this.client.prepare("DELETE FROM na_instance_model_entities WHERE instance_id = ?").run(t.instanceId);const e=this.client.prepare("INSERT INTO na_instance_model_entities (instance_id, model_id, display_order) VALUES (?, ?, ?)");for(const[n,i]of t.modelEntityIds.entries())e.run(t.instanceId,i,n)}),this.get(t.instanceId)}delete(e){return Number(this.client.prepare("DELETE FROM na_instance_model_assignments WHERE instance_id = ?").run(e).changes)>0}transaction(e){if(this.client.isTransaction)return e();this.client.exec("BEGIN IMMEDIATE");try{const t=e();return this.client.exec("COMMIT"),t}catch(e){throw this.client.exec("ROLLBACK"),e}}}function Ec(e){return{models:new Ac(e),assignments:new _c(e),transaction(t){if(e.isTransaction)return t();e.exec("BEGIN IMMEDIATE");try{const n=t();return e.exec("COMMIT"),n}catch(t){throw e.exec("ROLLBACK"),t}}}}function Tc(e){const t=Ic(e.model_names_json);return us.parse({id:e.id,name:e.name,endpoint:e.endpoint,key:e.key,model:e.model,modelNames:t,protocols:Ic(e.protocols_json),app:e.app,enabled:Boolean(e.enabled),order:e.display_order,labels:Ic(e.labels_json),createdAt:e.created_at,updatedAt:e.updated_at})}class bc{client;constructor(e){this.client=e}readIdentity(){const e=this.client.prepare("SELECT node_id, created_at, updated_at FROM na_node_identity WHERE singleton_key = 1").get();if(!e)return;const t=this.client.prepare("SELECT * FROM na_control_plane_pairings ORDER BY updated_at, key_id").all().map(e=>({id:String(e.control_plane_id),keyId:String(e.key_id),...e.name?{name:String(e.name)}:{},secret:String(e.secret),pairedAt:String(e.paired_at),...e.revoked_at?{revokedAt:String(e.revoked_at)}:{},updatedAt:String(e.updated_at)})),n=this.client.prepare("SELECT * FROM na_control_plane_connections ORDER BY updated_at, id").all().map(e=>({id:String(e.id),pairingKeyId:String(e.pairing_key_id),...e.name?{name:String(e.name)}:{},url:String(e.normalized_url),enabled:Boolean(e.enabled),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}));return{nodeId:String(e.node_id),createdAt:String(e.created_at),updatedAt:String(e.updated_at),controlPlanePairings:t,controlPlaneConnections:n}}writeIdentity(e){return this.transaction(()=>{const t=this.readIdentity();if(t&&t.nodeId!==e.nodeId)throw n=`Stored node identity ${t.nodeId} does not match ${e.nodeId}.`,Object.assign(new Error(n),{code:"NODE_AGENT_IDENTITY_MISMATCH",statusCode:409});var n;this.client.prepare("INSERT INTO na_node_identity (singleton_key, node_id, created_at, updated_at) VALUES (1, ?, ?, ?)\n ON CONFLICT(singleton_key) DO UPDATE SET updated_at=excluded.updated_at").run(e.nodeId,e.createdAt,e.updatedAt);const i=(e.controlPlanePairings\|\|[]).map(e=>e.keyId),s=(e.controlPlaneConnections\|\|[]).map(e=>e.id);Sc(this.client,"na_control_plane_connections","id",s),Sc(this.client,"na_control_plane_pairings","key_id",i);const o=this.client.prepare("INSERT INTO na_control_plane_pairings\n (key_id, control_plane_id, name, secret, paired_at, revoked_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(key_id) DO UPDATE SET control_plane_id=excluded.control_plane_id, name=excluded.name,\n secret=excluded.secret, paired_at=excluded.paired_at, revoked_at=excluded.revoked_at, updated_at=excluded.updated_at");for(const t of e.controlPlanePairings\|\|[])o.run(t.keyId,t.id,t.name??null,t.secret,t.pairedAt,t.revokedAt??null,t.updatedAt);const r=this.client.prepare("INSERT INTO na_control_plane_connections\n (id, pairing_key_id, name, normalized_url, enabled, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET pairing_key_id=excluded.pairing_key_id, name=excluded.name,\n normalized_url=excluded.normalized_url, enabled=excluded.enabled, updated_at=excluded.updated_at");for(const t of e.controlPlaneConnections\|\|[])r.run(t.id,t.pairingKeyId,t.name??null,wc(t.url),t.enabled?1:0,t.createdAt,t.updatedAt);return this.readIdentity()})}listOperations(e){return(e?.length?this.client.prepare(`SELECT * FROM na_control_plane_connection_operations WHERE phase IN (${e.map(()=>"?").join(",")}) ORDER BY created_at`).all(...e):this.client.prepare("SELECT * FROM na_control_plane_connection_operations ORDER BY created_at").all()).map(vc)}putOperation(e){return this.client.prepare("INSERT INTO na_control_plane_connection_operations\n (id, kind, phase, requested_json, pairing_key_id, connection_id, replaced_connections_json, error_json, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET phase=excluded.phase, pairing_key_id=excluded.pairing_key_id,\n connection_id=excluded.connection_id, replaced_connections_json=excluded.replaced_connections_json,\n error_json=excluded.error_json, updated_at=excluded.updated_at").run(e.id,e.kind,e.phase,JSON.stringify(e.requested),e.pairingKeyId??null,e.connectionId??null,JSON.stringify(e.replacedConnections),e.error?JSON.stringify(e.error):null,e.createdAt,e.updatedAt),e}deleteOperation(e){return Number(this.client.prepare("DELETE FROM na_control_plane_connection_operations WHERE id = ?").run(e).changes)>0}transaction(e){if(this.client.isTransaction)return e();this.client.exec("BEGIN IMMEDIATE");try{const t=e();return this.client.exec("COMMIT"),t}catch(e){throw this.client.exec("ROLLBACK"),e}}}function wc(e){return new URL(e).toString().replace(/\/$/,"")}function Sc(e,t,n,i){i.length?e.prepare(`DELETE FROM ${t} WHERE ${n} NOT IN (${i.map(()=>"?").join(",")})`).run(...i):e.exec(`DELETE FROM ${t}`)}function vc(e){return{id:String(e.id),kind:String(e.kind),phase:e.phase,requested:JSON.parse(String(e.requested_json)),...e.pairing_key_id?{pairingKeyId:String(e.pairing_key_id)}:{},...e.connection_id?{connectionId:String(e.connection_id)}:{},replacedConnections:JSON.parse(String(e.replaced_connections_json)),...e.error_json?{error:JSON.parse(String(e.error_json))}:{},createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}const Nc=a.z.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]$/),Oc=a.z.string().datetime(),zc=a.z.number().int().nonnegative(),Cc=a.z.enum(["https-token","ssh-key"]),Rc=a.z.enum(["operation-only","instance-retained"]),xc=a.z.enum(["enabled","disabled"]),kc=a.z.enum(["pending","synced","deferred","revoking","revoked"]),Dc=a.z.object({scheme:a.z.enum(["https","ssh"]),host:a.z.string().trim().min(1).max(253),port:a.z.number().int().min(1).max(65535).optional(),pathPrefix:a.z.string().min(1).max(2048).default("/")}).strict();function Pc(e){throw new Error(`Invalid Git credential scope: ${e}`)}function Lc(e){const t=e.trim().replace(/^\[\|\]$/g,"");(!t\|\|t.includes("")\|\|/[/?#@\s]/.test(t))&&Pc("host is invalid");try{const e=new URL(t.includes(":")?`http://[${t}]/`:`http://${t}/`).hostname.replace(/^\[\|\]$/g,"").toLowerCase();return(!e\|\|e.length>253\|\|e.includes(""))&&Pc("host is invalid"),e}catch{Pc("host is invalid")}}function Mc(e){try{return decodeURIComponent(e)}catch{Pc("path contains invalid percent encoding")}}function jc(e){const t=e?.trim()\|\|"/";(t.includes("?")\|\|t.includes("#")\|\|t.includes("\\")\|\|t.includes("\0"))&&Pc("path contains an unsupported delimiter");const n=(t.startsWith("/")?t:`/${t}`).split("/").filter(Boolean);for(const e of n){const t=Mc(e);("."===t\|\|".."===t\|\|t.includes("/")\|\|t.includes("\\")\|\|t.includes("\0"))&&Pc("path contains an unsafe segment")}return 0===n.length?"/":`/${n.join("/")}/`}function Fc(e){const t=Dc.parse(e),n="https"===t.scheme?443:22;return Dc.parse({scheme:t.scheme,host:Lc(t.host),...void 0===t.port\|\|t.port===n?{}:{port:t.port},pathPrefix:jc(t.pathPrefix)})}function Uc(e){return jc(e.replace(/\.git\/?$/,""))}const $c=a.z.object({id:Nc,name:a.z.string().trim().min(1).max(160),kind:Cc,scope:Dc,secretSet:a.z.literal(!0),status:xc,revision:zc,createdAt:Oc,updatedAt:Oc}).strict(),Hc=a.z.object({kind:a.z.literal("https-token"),username:a.z.string().trim().min(1).max(240),token:a.z.string().min(1).max(8192)}).strict(),qc=a.z.object({kind:a.z.literal("ssh-key"),privateKey:a.z.string().min(1).max(131072),passphrase:a.z.string().max(8192).optional(),pinnedKnownHosts:a.z.string().min(1).max(131072)}).strict(),Vc=a.z.discriminatedUnion("kind",[Hc,qc]);a.z.object({name:a.z.string().trim().min(1).max(160),scope:Dc,secret:Vc}).strict().superRefine((e,t)=>{"https"===e.scope.scheme!=("https-token"===e.secret.kind)&&t.addIssue({code:"custom",path:["scope","scheme"],message:"Credential kind must match the remote scheme."});try{Fc(e.scope)}catch(e){t.addIssue({code:"custom",path:["scope"],message:e instanceof Error?e.message:"Invalid Git scope."})}}),a.z.object({name:a.z.string().trim().min(1).max(160).optional(),scope:Dc.optional(),secret:Vc.optional(),status:xc.optional()}).strict().refine(e=>Object.keys(e).length>0,"At least one credential field must be updated."),a.z.object({items:a.z.array($c).max(1e4)}).strict();const Bc=a.z.object({instanceId:Nc,credentialId:Nc,credentialRevision:zc,assignmentRevision:zc,status:kc,authorizedAt:Oc,updatedAt:Oc}).strict(),Kc=a.z.object({credential:$c,secret:Vc}).strict().superRefine((e,t)=>{e.credential.kind!==e.secret.kind&&t.addIssue({code:"custom",path:["secret","kind"],message:"Credential payload kind mismatch."})}),Gc=a.z.object({instanceId:Nc,generation:zc,credentialIds:a.z.array(Nc).max(256).transform(e=>[...new Set(e)].sort()),updatedAt:Oc}).strict(),Wc=a.z.object({remoteUrl:a.z.string().trim().min(1).max(4096)}).strict(),Xc=a.z.discriminatedUnion("status",[a.z.object({status:a.z.literal("ok"),username:a.z.string().min(1).max(240),password:a.z.string().min(1).max(8192)}).strict(),a.z.object({status:a.z.enum(["none","ambiguous","unsupported","missing-host-key","rejected"])}).strict()]),Yc=a.z.object({remoteUrl:a.z.string().trim().min(1).max(4096)}).strict(),Jc=a.z.discriminatedUnion("status",[a.z.object({status:a.z.literal("ok"),invocationId:Nc,publicIdentity:a.z.string().min(1).max(131072),pinnedKnownHosts:a.z.string().min(1).max(131072)}).strict(),a.z.object({status:a.z.enum(["none","ambiguous","unsupported","missing-host-key","rejected"])}).strict()]),Qc=a.z.object({invocationId:Nc,frame:a.z.string().min(1).max(1048576)}).strict(),Zc=a.z.object({frame:a.z.string().min(1).max(1048576)}).strict(),ed=a.z.object({operationId:Nc,retention:Rc,payload:Kc}).strict(),td=a.z.object({operationId:Nc,instanceId:Nc,remoteUrl:a.z.string().trim().min(1).max(4096),ref:a.z.discriminatedUnion("type",[a.z.object({type:a.z.enum(["branch","tag"]),name:a.z.string().trim().min(1).max(240)}).strict(),a.z.object({type:a.z.literal("commit"),commit:a.z.string().trim().regex(/^[0-9a-fA-F]{4,64}$/,"commit must be a hexadecimal Git object id")}).strict()]),clone:a.z.object({depth:a.z.number().int().positive().max(1e5).optional(),submodules:a.z.boolean().default(!1),lfs:a.z.boolean().default(!1),subdirectory:a.z.string().trim().max(240).refine(e=>!e.startsWith("/")&&!e.split("/").some(e=>".."===e),"subdirectory must be a relative path within the repository").transform(e=>e.split("/").filter(e=>e&&"."!==e).join("/")).default("")}).strict(),credentials:a.z.array(ed).max(256).default([])}).strict();function nd(e){return e&&"object"==typeof e&&!Array.isArray(e)?e:void 0}function id(e,t){if(e)return Object.fromEntries(t.filter(t=>Object.prototype.hasOwnProperty.call(e,t)).map(t=>[t,e[t]]))}function sd(e,t){let n;try{n=function(e){const t=e.trim();if(t&&!t.includes("\0")\|\|Pc("remote is empty or invalid"),/^https?:\/\//i.test(t)\|\|/^ssh:\/\//i.test(t)){let e;jc(t.replace(/^[a-z][a-z0-9+.-]:\/\/[^/]+/i,"").split(/[?#]/,1)[0]\|\|"/");try{e=new URL(t)}catch{Pc("remote URL is invalid")}"https:"!==e.protocol&&"ssh:"!==e.protocol&&Pc("remote scheme is unsupported"),(e.password\|\|"https:"===e.protocol&&e.username)&&Pc("HTTPS userinfo is forbidden"),(e.search\|\|e.hash)&&Pc("query and fragment are forbidden");const n="https:"===e.protocol?"https":"ssh",i=e.port?Number(e.port):void 0;return{...Fc({scheme:n,host:e.hostname,port:i,pathPrefix:Uc(e.pathname)}),original:t}}/^[a-z][a-z0-9+.-]:\/\//i.test(t)&&Pc("remote scheme is unsupported");const n=/^(?:([^@/:\s]+)@)?([^/:\s]+):(.+)$/.exec(t);n\|\|Pc("remote must use HTTPS, ssh://, or scp-like SSH syntax");const[,,i,s]=n;return(s.includes("?")\|\|s.includes("#"))&&Pc("query and fragment are forbidden"),{...Fc({scheme:"ssh",host:i,pathPrefix:Uc(s)}),original:t}}(e)}catch(e){return{status:"unsupported",reason:e instanceof Error?e.message:"Unsupported Git remote."}}const i=t.filter(e=>"enabled"===e.status).filter(e=>"https"===n.scheme==("https-token"===e.kind)).filter(e=>function(e,t){const n=Fc(e);return n.scheme===t.scheme&&n.host===t.host&&n.port===t.port&&("/"===n.pathPrefix\|\|t.pathPrefix.startsWith(n.pathPrefix))}(e.scope,n)).map(e=>({candidate:e,specificity:Fc(e.scope).pathPrefix.length}));if(0===i.length)return{status:"none",remote:n};const s=Math.max(...i.map(e=>e.specificity)),o=i.filter(e=>e.specificity===s).map(e=>e.candidate);if(o.length>1)return{status:"ambiguous",remote:n,credentialIds:o.map(e=>e.id).sort()};const r=o[0];return"ssh-key"===r.kind&&!0!==r.pinnedKnownHosts?{status:"missing-host-key",remote:n,credentialId:r.id}:{status:"unique",remote:n,credential:r}}class od{client;constructor(e){this.client=e}listPayloads(){return this.client.prepare("SELECT FROM na_git_credential_payloads ORDER BY credential_id").all().map(ad)}getPayload(e){const t=this.client.prepare("SELECT * FROM na_git_credential_payloads WHERE credential_id = ?").get(e);return t?ad(t):void 0}putPayload(e){const t=Kc.parse(e.payload);return this.client.prepare("INSERT INTO na_git_credential_payloads\n (credential_id, revision, public_json, secret_json, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)\n ON CONFLICT(credential_id) DO UPDATE SET revision=excluded.revision, public_json=excluded.public_json,\n secret_json=excluded.secret_json, updated_at=excluded.updated_at").run(e.id,t.credential.revision,JSON.stringify(t.credential),JSON.stringify(t.secret),e.createdAt,e.updatedAt),{...e,payload:t}}deletePayload(e){return Number(this.client.prepare("DELETE FROM na_git_credential_payloads WHERE credential_id = ?").run(e).changes)>0}collectUnreferencedPayloads(){return Number(this.client.prepare("DELETE FROM na_git_credential_payloads\n WHERE NOT EXISTS (SELECT 1 FROM na_git_authorization_members m WHERE m.credential_id = na_git_credential_payloads.credential_id)").run().changes)}listAuthorizations(){return this.client.prepare("SELECT * FROM na_git_authorization_sets ORDER BY instance_id").all().map(e=>this.authorizationFromRow(e))}getAuthorization(e){const t=this.client.prepare("SELECT * FROM na_git_authorization_sets WHERE instance_id = ?").get(e);return t?this.authorizationFromRow(t):void 0}putAuthorization(e){const t=Gc.parse({instanceId:e.instanceId,generation:e.generation,credentialIds:e.credentialIds,updatedAt:e.updatedAt});return this.transaction(()=>{this.client.prepare("INSERT INTO na_git_authorization_sets (instance_id, generation, created_at, updated_at)\n VALUES (?, ?, ?, ?) ON CONFLICT(instance_id) DO UPDATE SET generation=excluded.generation, updated_at=excluded.updated_at").run(t.instanceId,t.generation,e.createdAt,t.updatedAt),this.client.prepare("DELETE FROM na_git_authorization_members WHERE instance_id = ?").run(t.instanceId);const n=this.client.prepare("INSERT INTO na_git_authorization_members (instance_id, credential_id, display_order) VALUES (?, ?, ?)");for(const[e,i]of t.credentialIds.entries())n.run(t.instanceId,i,e);return this.getAuthorization(t.instanceId)})}putAuthorizationCas(e){const t=Gc.parse({instanceId:e.instanceId,generation:e.generation,credentialIds:e.credentialIds,updatedAt:e.updatedAt});return this.transaction(()=>{const n=this.getAuthorization(t.instanceId);if(n&&n.generation>t.generation)throw rd("GIT_CREDENTIAL_REVISION_STALE",`Refusing stale authorization set revision for ${t.instanceId}.`);if(n&&n.generation===t.generation){if(JSON.stringify(n.credentialIds)!==JSON.stringify(t.credentialIds))throw rd("GIT_CREDENTIAL_REVISION_CONFLICT",`Refusing conflicting authorization set revision for ${t.instanceId}.`);return n}for(const e of t.credentialIds)if(!this.getPayload(e))throw rd("GIT_CREDENTIAL_PAYLOAD_MISSING",`Credential payload ${e} is not deployed.`);if(n){const e=this.client.prepare("UPDATE na_git_authorization_sets\n SET generation = ?, updated_at = ? WHERE instance_id = ? AND generation < ?").run(t.generation,t.updatedAt,t.instanceId,t.generation).changes;if(1!==Number(e))throw rd("GIT_CREDENTIAL_REVISION_STALE",`Authorization set ${t.instanceId} changed concurrently.`)}else this.client.prepare("INSERT INTO na_git_authorization_sets (instance_id, generation, created_at, updated_at)\n VALUES (?, ?, ?, ?)").run(t.instanceId,t.generation,e.createdAt,t.updatedAt);this.client.prepare("DELETE FROM na_git_authorization_members WHERE instance_id = ?").run(t.instanceId);const i=this.client.prepare("INSERT INTO na_git_authorization_members (instance_id, credential_id, display_order) VALUES (?, ?, ?)");for(const[e,n]of t.credentialIds.entries())i.run(t.instanceId,n,e);return this.getAuthorization(t.instanceId)})}deleteAuthorization(e){return Number(this.client.prepare("DELETE FROM na_git_authorization_sets WHERE instance_id = ?").run(e).changes)>0}listProvisioning(){return this.client.prepare("SELECT * FROM na_git_workspace_provisioning ORDER BY instance_id").all().map(cd)}getProvisioning(e){const t=this.client.prepare("SELECT * FROM na_git_workspace_provisioning WHERE instance_id = ?").get(e);return t?cd(t):void 0}putProvisioning(e){const t="pending"===e.status?e.input.operationId:e.operationId;return this.client.prepare("INSERT INTO na_git_workspace_provisioning\n (instance_id, status, operation_id, input_json, created_at, updated_at, expires_at) VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(instance_id) DO UPDATE SET status=excluded.status, operation_id=excluded.operation_id,\n input_json=excluded.input_json, updated_at=excluded.updated_at, expires_at=excluded.expires_at").run(e.id,e.status,t,"pending"===e.status?JSON.stringify(e.input):null,e.createdAt,e.updatedAt,e.expiresAt),this.getProvisioning(e.id)}deleteProvisioning(e){return Number(this.client.prepare("DELETE FROM na_git_workspace_provisioning WHERE instance_id = ?").run(e).changes)>0}deleteExpiredProvisioning(e){return Number(this.client.prepare("DELETE FROM na_git_workspace_provisioning WHERE expires_at <= ?").run(e).changes)}consumeProvisioning(e,t,n,i){return this.transaction(()=>{const s=this.client.prepare("UPDATE na_git_workspace_provisioning\n SET status = 'consumed', input_json = NULL, updated_at = ?, expires_at = ?\n WHERE instance_id = ? AND operation_id = ? AND status = 'pending'").run(n,i,e,t).changes;if(1===Number(s))return!0;const o=this.getProvisioning(e);return"consumed"===o?.status&&o.operationId===t})}authorizationFromRow(e){const t=this.client.prepare("SELECT credential_id FROM na_git_authorization_members WHERE instance_id = ? ORDER BY display_order").all(String(e.instance_id)).map(e=>String(e.credential_id));return{id:String(e.instance_id),instanceId:String(e.instance_id),generation:Number(e.generation),credentialIds:t,createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}transaction(e){if(this.client.isTransaction)return e();this.client.exec("BEGIN IMMEDIATE");try{const t=e();return this.client.exec("COMMIT"),t}catch(e){throw this.client.exec("ROLLBACK"),e}}}function rd(e,t){return Object.assign(new Error(t),{code:e,statusCode:409})}function ad(e){return{id:String(e.credential_id),payload:Kc.parse({credential:JSON.parse(String(e.public_json)),secret:JSON.parse(String(e.secret_json))}),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function cd(e){const t={id:String(e.instance_id),createdAt:String(e.created_at),updatedAt:String(e.updated_at),expiresAt:String(e.expires_at)};return"pending"===e.status?{...t,status:"pending",input:td.parse(JSON.parse(String(e.input_json)))}:{...t,status:"consumed",operationId:String(e.operation_id)}}class dd{tail=Promise.resolve();accepting=!0;run(e){if(!this.accepting)return Promise.reject(Id("NODE_AGENT_REPOSITORY_QUIESCING","Node Agent storage is shutting down.",503));const t=this.tail.then(e,e);return this.tail=t.then(()=>{},()=>{}),t}async barrier(){await this.tail}stopAccepting(){this.accepting=!1}}function ld(e){const t=e.db,n=new dd,i=new A.AsyncLocalStorage;let s=!1;const o=()=>{if(s)throw Id("NODE_AGENT_REPOSITORY_CLOSED","Node Agent storage is closed.",503)},r=async e=>(o(),i.getStore()\|\|await n.barrier(),e()),a=async e=>(o(),i.getStore()?e():n.run(e));let c;return c={stories:ud(t,r,a),actions:pd(t,r,a),documents:md(t,r,a),automations:hd(t,r,a),runs:gd(t,r,a),fileMutations:fd(t,r,a),deletionIntents:yd(t,r,a),topology:uc(e.client),model:Ec(e.client),access:new bc(e.client),git:new od(e.client),transaction:async t=>i.getStore()?t(c):a(async()=>{e.client.exec("BEGIN IMMEDIATE");try{const n=await i.run(!0,()=>t(c));return e.client.exec("COMMIT"),n}catch(t){throw e.client.exec("ROLLBACK"),t}}),transactionSync:t=>{if(o(),e.client.isTransaction)return t(c);e.client.exec("BEGIN IMMEDIATE");try{const n=t(c);return e.client.exec("COMMIT"),n}catch(t){throw e.client.exec("ROLLBACK"),t}},stopAccepting(){n.stopAccepting()},async drain(){await n.barrier()},async checkpoint(){await n.barrier(),await e.checkpoint()},async close(){s\|\|(n.stopAccepting(),await n.barrier(),await e.checkpoint(),s=!0,await e.close())}},c}function ud(e,t,n){return{list:()=>t(()=>e.select().from(Ya).orderBy(_.desc(Ya.createdAt),_.asc(Ya.id))),get:async n=>t(async()=>(await e.select().from(Ya).where(_.eq(Ya.id,n)).limit(1))[0]),insert:async t=>n(async()=>(await e.insert(Ya).values(t),t)),update:async(t,i)=>n(async()=>(await e.update(Ya).set(i).where(_.eq(Ya.id,t)),(await e.select().from(Ya).where(_.eq(Ya.id,t)).limit(1))[0])),delete:async t=>n(async()=>Number((await e.delete(Ya).where(_.eq(Ya.id,t))).changes)>0)}}function pd(e,t,n){return{list:n=>t(()=>e.select().from(Ja).where(_.eq(Ja.storyId,n)).orderBy(_.asc(Ja.displayOrder),_.asc(Ja.id))),replace:async(t,i)=>n(async()=>{const n=i.map(e=>e.id);n.length?await e.delete(Ja).where(_.and(_.eq(Ja.storyId,t),_.notInArray(Ja.id,n))):await e.delete(Ja).where(_.eq(Ja.storyId,t));for(const t of i)await e.insert(Ja).values(t).onConflictDoUpdate({target:[Ja.storyId,Ja.id],set:{title:t.title,promptTemplate:t.promptTemplate,targetInstanceId:t.targetInstanceId,sessionPreset:t.sessionPreset,displayOrder:t.displayOrder}});return i})}}function md(e,t,n){return{list:n=>t(()=>e.select().from(Qa).where(_.eq(Qa.storyId,n)).orderBy(_.asc(Qa.displayOrder),_.asc(Qa.storyPath))),get:async(n,i)=>t(async()=>(await e.select().from(Qa).where(_.and(_.eq(Qa.storyId,n),_.eq(Qa.storyPath,i))).limit(1))[0]),page:async(n,i,s)=>t(async()=>{const t=Number((await e.select({value:_.count()}).from(Qa).where(_.eq(Qa.storyId,n)))[0]?.value??0);return{items:await e.select({title:Qa.title,storyPath:Qa.storyPath}).from(Qa).where(_.eq(Qa.storyId,n)).orderBy(_.desc(Qa.indexedSequence),_.asc(Qa.storyPath)).limit(s).offset((i-1)s),totalItems:t}}),insert:async t=>n(async()=>(await e.insert(Qa).values(t),t)),update:async(t,i,s)=>n(async()=>{await e.update(Qa).set(s).where(_.and(_.eq(Qa.storyId,t),_.eq(Qa.storyPath,i)))}),replacePath:async(t,i,s)=>n(async()=>{await e.delete(Qa).where(_.and(_.eq(Qa.storyId,t),_.eq(Qa.storyPath,i))),await e.insert(Qa).values(s)}),reorder:async(t,i)=>n(async()=>{for(const[n,s]of i.entries())await e.update(Qa).set({displayOrder:n}).where(_.and(_.eq(Qa.storyId,t),_.eq(Qa.storyPath,s)))}),delete:async(t,i)=>n(async()=>Number((await e.delete(Qa).where(_.and(_.eq(Qa.storyId,t),_.eq(Qa.storyPath,i)))).changes)>0)}}function hd(e,t,n){return{list:n=>t(()=>n?e.select().from(Za).where(_.eq(Za.storyId,n)).orderBy(_.asc(Za.createdAt),_.asc(Za.id)):e.select().from(Za).orderBy(_.asc(Za.createdAt),_.asc(Za.id))),get:async n=>t(async()=>(await e.select().from(Za).where(_.eq(Za.id,n)).limit(1))[0]),insert:async t=>n(async()=>(await e.insert(Za).values(t),t)),update:async(t,i)=>n(async()=>(await e.update(Za).set(i).where(_.eq(Za.id,t)),(await e.select().from(Za).where(_.eq(Za.id,t)).limit(1))[0])),referencingActions:async(n,i)=>i.length?t(()=>e.select().from(Za).where(_.and(_.eq(Za.storyId,n),_.inArray(Za.actionId,i)))):[],delete:async t=>n(async()=>Number((await e.delete(Za).where(_.eq(Za.id,t))).changes)>0),deleteForStory:async t=>n(async()=>{await e.delete(Za).where(_.eq(Za.storyId,t))})}}function gd(e,t,n){const i=["queued","dispatching","running"];return{list:n=>t(()=>e.select().from(ec).where(_.eq(ec.automationId,n)).orderBy(_.desc(ec.queuedAt))),get:async n=>t(async()=>(await e.select().from(ec).where(_.eq(ec.id,n)).limit(1))[0]),byExecutionKey:async n=>t(async()=>(await e.select().from(ec).where(_.eq(ec.executionKey,n)).limit(1))[0]),pending:()=>t(()=>e.select().from(ec).where(_.inArray(ec.status,[...i])).orderBy(_.asc(ec.queuedAt))),activeForStory:async n=>t(()=>e.select({run:ec}).from(ec).innerJoin(Za,_.eq(ec.automationId,Za.id)).where(_.and(_.eq(Za.storyId,n),_.inArray(ec.status,[...i]))).then(e=>e.map(e=>e.run))),insert:async t=>n(async()=>(await e.insert(ec).values(t),t)),update:async(t,i)=>n(async()=>(await e.update(ec).set(i).where(_.eq(ec.id,t)),(await e.select().from(ec).where(_.eq(ec.id,t)).limit(1))[0])),trimTerminal:async(t,i)=>n(async()=>{const n=await e.select({id:ec.id}).from(ec).where(_.and(_.eq(ec.automationId,t),_.inArray(ec.status,["completed","failed","skipped"]))).orderBy(_.desc(ec.queuedAt)).limit(2147483647).offset(i);n.length&&await e.delete(ec).where(_.inArray(ec.id,n.map(e=>e.id)))})}}function fd(e,t,n){return{list:()=>t(()=>e.select().from(tc).orderBy(_.asc(tc.createdAt))),get:async n=>t(async()=>(await e.select().from(tc).where(_.eq(tc.id,n)).limit(1))[0]),insert:async t=>n(async()=>(await e.insert(tc).values(t),t)),update:async(t,i)=>n(async()=>{await e.update(tc).set(i).where(_.eq(tc.id,t))}),delete:async t=>n(async()=>{await e.delete(tc).where(_.eq(tc.id,t))})}}function yd(e,t,n){return{list:()=>t(()=>e.select().from(nc).orderBy(_.asc(nc.createdAt))),get:async n=>t(async()=>(await e.select().from(nc).where(_.eq(nc.storyId,n)).limit(1))[0]),put:async t=>n(async()=>(await e.insert(nc).values(t).onConflictDoUpdate({target:nc.storyId,set:{phase:t.phase,trashName:t.trashName,updatedAt:t.updatedAt}}),t)),delete:async t=>n(async()=>{await e.delete(nc).where(_.eq(nc.storyId,t))})}}function Id(e,t,n){return Object.assign(new Error(t),{code:e,statusCode:n})}function Ad(e,t){return{id:e,sql:t,checksum:d.createHash("sha256").update(t).digest("hex")}}const _d=[Ad("0001_story_domain","\nCREATE TABLE na_stories (\n id TEXT PRIMARY KEY NOT NULL, title TEXT NOT NULL, description TEXT,\n created_at TEXT NOT NULL, updated_at TEXT NOT NULL, archived_at TEXT,\n max_idle_ai_sessions INTEGER NOT NULL DEFAULT 5 CHECK(max_idle_ai_sessions BETWEEN 1 AND 50),\n next_document_sequence INTEGER NOT NULL DEFAULT 1 CHECK(next_document_sequence > 0)\n);\nCREATE INDEX na_stories_created_idx ON na_stories(created_at);\nCREATE TABLE na_story_actions (\n story_id TEXT NOT NULL REFERENCES na_stories(id) ON DELETE CASCADE, id TEXT NOT NULL,\n title TEXT NOT NULL, prompt_template TEXT NOT NULL, target_instance_id TEXT,\n session_preset_json TEXT, display_order INTEGER NOT NULL,\n PRIMARY KEY(story_id, id)\n);\nCREATE INDEX na_story_actions_order_idx ON na_story_actions(story_id, display_order, id);\nCREATE TABLE na_story_documents (\n story_id TEXT NOT NULL REFERENCES na_stories(id) ON DELETE CASCADE, story_path TEXT NOT NULL,\n title TEXT NOT NULL, indexed_sequence INTEGER NOT NULL CHECK(indexed_sequence > 0), display_order INTEGER NOT NULL,\n PRIMARY KEY(story_id, story_path)\n);\nCREATE UNIQUE INDEX na_story_documents_sequence_uq ON na_story_documents(story_id, indexed_sequence);\nCREATE INDEX na_story_documents_page_idx ON na_story_documents(story_id, indexed_sequence, story_path);\nCREATE INDEX na_story_documents_display_idx ON na_story_documents(story_id, display_order, story_path);\nCREATE TABLE na_story_automations (\n id TEXT PRIMARY KEY NOT NULL, story_id TEXT NOT NULL, action_id TEXT NOT NULL,\n schedule_json TEXT NOT NULL, enabled INTEGER NOT NULL, policy_json TEXT NOT NULL,\n schedule_anchor_at TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL,\n CONSTRAINT na_story_automations_action_fk FOREIGN KEY(story_id, action_id)\n REFERENCES na_story_actions(story_id, id) ON DELETE RESTRICT\n);\nCREATE INDEX na_story_automations_story_idx ON na_story_automations(story_id);\nCREATE INDEX na_story_automations_enabled_idx ON na_story_automations(enabled);\nCREATE TABLE na_story_automation_runs (\n id TEXT PRIMARY KEY NOT NULL, automation_id TEXT NOT NULL REFERENCES na_story_automations(id) ON DELETE CASCADE,\n event_type TEXT NOT NULL CHECK(event_type IN ('manual','schedule')),\n status TEXT NOT NULL CHECK(status IN ('queued','dispatching','running','completed','failed','skipped')),\n scheduled_for TEXT NOT NULL, target_instance_id TEXT NOT NULL, ai_session_id TEXT, error_json TEXT,\n queued_at TEXT NOT NULL, started_at TEXT, completed_at TEXT,\n execution_key TEXT NOT NULL, request_fingerprint TEXT NOT NULL, execution_input_json TEXT NOT NULL\n);\nCREATE UNIQUE INDEX na_story_automation_runs_execution_key_uq ON na_story_automation_runs(execution_key);\nCREATE INDEX na_story_automation_runs_automation_time_idx ON na_story_automation_runs(automation_id, queued_at);\nCREATE INDEX na_story_automation_runs_status_idx ON na_story_automation_runs(status, scheduled_for);\nCREATE TABLE na_story_file_mutations (\n id TEXT PRIMARY KEY NOT NULL, story_id TEXT NOT NULL REFERENCES na_stories(id) ON DELETE RESTRICT,\n operation TEXT NOT NULL CHECK(operation IN ('write','rename','delete')), story_path TEXT NOT NULL,\n next_story_path TEXT, title TEXT, temporary_name TEXT, backup_name TEXT,\n phase TEXT NOT NULL CHECK(phase IN ('receiving','prepared','files-staged','database-committed','cleanup')),\n created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_story_file_mutations_story_idx ON na_story_file_mutations(story_id, created_at);\nCREATE TABLE na_story_deletion_intents (\n story_id TEXT PRIMARY KEY NOT NULL,\n phase TEXT NOT NULL CHECK(phase IN ('prepared','files-staged','database-committed','cleanup')),\n trash_name TEXT, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\n"),Ad("0002_p0_state_domains","\nCREATE TABLE na_node_identity (\n singleton_key INTEGER PRIMARY KEY NOT NULL DEFAULT 1 CHECK(singleton_key = 1),\n node_id TEXT NOT NULL UNIQUE, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE TABLE na_local_folders (\n id TEXT PRIMARY KEY NOT NULL, node_id TEXT NOT NULL REFERENCES na_node_identity(node_id) ON DELETE RESTRICT ON UPDATE CASCADE,\n name TEXT NOT NULL, path TEXT NOT NULL, labels_json TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL,\n UNIQUE(node_id, path)\n);\nCREATE TABLE na_runtimes (\n id TEXT PRIMARY KEY NOT NULL, node_id TEXT NOT NULL REFERENCES na_node_identity(node_id) ON DELETE RESTRICT ON UPDATE CASCADE,\n name TEXT NOT NULL, type TEXT NOT NULL CHECK(type IN ('docker','kubernetes','local')),\n status TEXT NOT NULL CHECK(status IN ('unknown','online','offline','degraded')), access_strategy TEXT NOT NULL,\n capabilities_json TEXT NOT NULL, labels_json TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_runtimes_node_type_idx ON na_runtimes(node_id, type);\nCREATE TABLE na_instances (\n id TEXT PRIMARY KEY NOT NULL, node_id TEXT NOT NULL REFERENCES na_node_identity(node_id) ON DELETE RESTRICT ON UPDATE CASCADE,\n runtime_id TEXT NOT NULL REFERENCES na_runtimes(id) ON DELETE RESTRICT ON UPDATE CASCADE,\n source_local_folder_id TEXT REFERENCES na_local_folders(id) ON DELETE SET NULL ON UPDATE CASCADE,\n name TEXT NOT NULL, status TEXT NOT NULL, state_revision INTEGER NOT NULL DEFAULT 0 CHECK(state_revision >= 0),\n process_incarnation_id TEXT, registration_credential TEXT, desired_json TEXT NOT NULL,\n created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_instances_runtime_idx ON na_instances(runtime_id);\nCREATE INDEX na_instances_status_idx ON na_instances(status, updated_at);\nCREATE TABLE na_instance_observations (\n instance_id TEXT PRIMARY KEY NOT NULL REFERENCES na_instances(id) ON DELETE CASCADE ON UPDATE CASCADE,\n health TEXT NOT NULL, connection_status TEXT NOT NULL, ready INTEGER NOT NULL,\n observed_json TEXT NOT NULL, last_heartbeat_at TEXT, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_instance_observations_connection_idx ON na_instance_observations(connection_status, updated_at);\nCREATE TABLE na_models (\n id TEXT PRIMARY KEY NOT NULL, name TEXT NOT NULL, endpoint TEXT NOT NULL, key TEXT NOT NULL, model TEXT NOT NULL,\n app TEXT NOT NULL CHECK(app IN ('codex','claude','opencode')), enabled INTEGER NOT NULL,\n display_order INTEGER NOT NULL, model_names_json TEXT NOT NULL, protocols_json TEXT NOT NULL,\n labels_json TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_models_order_idx ON na_models(display_order, id);\nCREATE TABLE na_instance_model_assignments (\n instance_id TEXT PRIMARY KEY NOT NULL REFERENCES na_instances(id) ON DELETE CASCADE ON UPDATE CASCADE,\n legacy_codex_model_id TEXT REFERENCES na_models(id) ON DELETE RESTRICT ON UPDATE CASCADE,\n legacy_claude_model_id TEXT REFERENCES na_models(id) ON DELETE RESTRICT ON UPDATE CASCADE,\n legacy_opencode_model_id TEXT REFERENCES na_models(id) ON DELETE RESTRICT ON UPDATE CASCADE,\n updated_at TEXT NOT NULL\n);\nCREATE TABLE na_instance_model_entities (\n instance_id TEXT NOT NULL REFERENCES na_instance_model_assignments(instance_id) ON DELETE CASCADE ON UPDATE CASCADE,\n model_id TEXT NOT NULL REFERENCES na_models(id) ON DELETE RESTRICT ON UPDATE CASCADE,\n display_order INTEGER NOT NULL, PRIMARY KEY(instance_id, model_id), UNIQUE(instance_id, display_order)\n);\nCREATE TABLE na_control_plane_pairings (\n key_id TEXT PRIMARY KEY NOT NULL, control_plane_id TEXT NOT NULL UNIQUE, name TEXT, secret TEXT NOT NULL,\n paired_at TEXT NOT NULL, revoked_at TEXT, updated_at TEXT NOT NULL\n);\nCREATE TABLE na_control_plane_connections (\n id TEXT PRIMARY KEY NOT NULL,\n pairing_key_id TEXT NOT NULL REFERENCES na_control_plane_pairings(key_id) ON DELETE RESTRICT ON UPDATE CASCADE,\n name TEXT, normalized_url TEXT NOT NULL UNIQUE, enabled INTEGER NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE TABLE na_control_plane_connection_operations (\n id TEXT PRIMARY KEY NOT NULL, kind TEXT NOT NULL,\n phase TEXT NOT NULL CHECK(phase IN ('prepared','remote-accepted','committed','failed')),\n requested_json TEXT NOT NULL, pairing_key_id TEXT, connection_id TEXT, replaced_connections_json TEXT NOT NULL,\n error_json TEXT, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_control_plane_connection_operations_phase_idx ON na_control_plane_connection_operations(phase, updated_at);\nCREATE TABLE na_git_credential_payloads (\n credential_id TEXT PRIMARY KEY NOT NULL, revision INTEGER NOT NULL CHECK(revision >= 0),\n public_json TEXT NOT NULL, secret_json TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE TABLE na_git_authorization_sets (\n instance_id TEXT PRIMARY KEY NOT NULL REFERENCES na_instances(id) ON DELETE CASCADE ON UPDATE CASCADE,\n generation INTEGER NOT NULL CHECK(generation >= 0), created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE TABLE na_git_authorization_members (\n instance_id TEXT NOT NULL REFERENCES na_git_authorization_sets(instance_id) ON DELETE CASCADE ON UPDATE CASCADE,\n credential_id TEXT NOT NULL REFERENCES na_git_credential_payloads(credential_id) ON DELETE RESTRICT ON UPDATE CASCADE,\n display_order INTEGER NOT NULL, PRIMARY KEY(instance_id, credential_id), UNIQUE(instance_id, display_order)\n);\nCREATE TABLE na_git_workspace_provisioning (\n instance_id TEXT PRIMARY KEY NOT NULL REFERENCES na_instances(id) ON DELETE CASCADE ON UPDATE CASCADE,\n status TEXT NOT NULL CHECK(status IN ('pending','consumed')), operation_id TEXT NOT NULL, input_json TEXT,\n created_at TEXT NOT NULL, updated_at TEXT NOT NULL, expires_at TEXT NOT NULL,\n CHECK((status = 'pending' AND input_json IS NOT NULL) OR (status = 'consumed' AND input_json IS NULL))\n);\nCREATE INDEX na_git_workspace_provisioning_expiry_idx ON na_git_workspace_provisioning(expires_at);\n")],Ed=a.z.string().trim().min(1).max(160),Td=a.z.string().datetime(),bd=a.z.string().min(1).max(4096),wd=a.z.string().trim().url().max(2048),Sd=a.z.object({id:Ed,keyId:Ed,name:a.z.string().trim().min(1).max(160).optional(),secret:bd,pairedAt:Td,revokedAt:Td.optional(),updatedAt:Td}).strip(),vd=a.z.object({id:Ed,pairingKeyId:Ed,name:a.z.string().trim().min(1).max(160).optional(),url:wd,enabled:a.z.boolean().default(!0),createdAt:Td,updatedAt:Td}).strip(),Nd=a.z.object({controlPlaneName:a.z.string().trim().min(1).max(160).optional(),controlPlaneUrl:a.z.string().trim().max(2048).optional(),expiresInMs:a.z.number().int().positive().max(36e5).optional()}).strict(),Od=a.z.object({joinToken:a.z.string().trim().min(1).max(4096),controlPlaneId:a.z.string().trim().min(1).max(160).optional(),controlPlaneName:a.z.string().trim().min(1).max(160).optional()}).strict(),zd=a.z.object({controlPlaneUrl:a.z.string().trim().url().max(2048),joinToken:a.z.string().trim().min(1).max(4096),controlPlaneName:a.z.string().trim().min(1).max(160).optional(),activate:a.z.boolean().optional()}).strict(),Cd=new Set(["nodeId","createdAt","updatedAt","pairingInvites","controlPlanePairings","controlPlaneConnections","remoteControlPlanes"]),Rd=new Set(["id","keyId","name","secret","pairedAt","revokedAt","updatedAt"]),xd=new Set(["id","pairingKeyId","name","url","enabled","createdAt","updatedAt"]),kd=new Set(["id","keyId","name","url","secret","pairedAt","updatedAt","active"]);function Dd(e,t){console.warn(JSON.stringify({message:e,...t}))}function Pd(e,t){return Object.assign(new Error(e,void 0===t?void 0:{cause:t}),{code:"NODE_AGENT_IDENTITY_INVALID"})}function Ld(e,t){return Object.keys(e).filter(e=>!t.has(e))}function Md(e,t,n){const i=Td.safeParse(e);return i.success?i.data:(n("invalid node agent identity timestamp was replaced",{field:t}),ae())}function jd(e,t=Dd){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))throw Pd("Node agent identity must be a JSON object.");const n=e,i=Ed.safeParse(n.nodeId);if(!i.success)throw Pd("Node agent identity has an invalid nodeId.",i.error);const s=i.data,o=Ld(n,Cd);o.length&&t("unknown node agent identity fields were ignored",{fields:o}),Array.isArray(n.pairingInvites)&&n.pairingInvites.length&&t("persisted node agent pairing invites were discarded",{count:n.pairingInvites.length});const r=Array.isArray(n.remoteControlPlanes)?n.remoteControlPlanes.flatMap(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const n=e,i=Ld(n,kd);i.length&&t("unknown legacy node agent remote control-plane fields were ignored",{fields:i});const s=Sd.safeParse(n);if(!s.success)return t("invalid legacy node agent control-plane pairing was ignored",{issues:s.error.issues}),[];const o=n.url?vd.safeParse({id:`connection_${s.data.keyId}`,pairingKeyId:s.data.keyId,name:n.name,url:n.url,enabled:!1!==n.active,createdAt:s.data.pairedAt,updatedAt:s.data.updatedAt}):void 0;return[{pairing:s.data,...o?.success?{connection:o.data}:{}}]}):[],a=(e,n,i,s)=>Array.isArray(e)?e.flatMap(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return t(`invalid node agent ${s} was ignored`,{}),[];const o=Ld(e,n);o.length&&t(`unknown node agent ${s} fields were ignored`,{fields:o});const r=i.safeParse(e);return r.success?[r.data]:(t(`invalid node agent ${s} was ignored`,{issues:r.error.issues}),[])}):[];return{nodeId:s,createdAt:Md(n.createdAt,"createdAt",t),updatedAt:Md(n.updatedAt,"updatedAt",t),controlPlanePairings:n.controlPlanePairings?a(n.controlPlanePairings,Rd,Sd,"control-plane pairing"):r.map(e=>e.pairing),controlPlaneConnections:n.controlPlaneConnections?a(n.controlPlaneConnections,xd,vd,"control-plane connection"):r.flatMap(e=>e.connection?[e.connection]:[])}}const Fd="1000_import_v0_0_28_p0",Ud=d.createHash("sha256").update(JSON.stringify({sourceTag:"v0.0.28",plannerVersion:3,domains:["identity","folders","runtimes","instances","models","assignments","model-environments","git"],transaction:"begin-immediate"})).digest("hex"),$d=["id","nodeId","name","path","defaultImageSelection","labels","createdAt","updatedAt"],Hd=["id","nodeId","name","type","status","accessStrategy","capabilities","labels","createdAt","updatedAt"],qd=["id","name","endpoint","key","model","modelNames","protocols","app","enabled","order","labels","createdAt","updatedAt"],Vd=["instanceId","modelEntityIds","codexModelHash","claudeModelHash","opencodeModelHash","updatedAt"],Bd=["id","payload","createdAt","updatedAt"],Kd=["id","instanceId","generation","credentialIds","createdAt","updatedAt"],Gd=["id","instanceId","credentialId","credentialRevision","assignmentRevision","status","authorizedAt","createdAt","updatedAt"],Wd=["id","status","operationId","input","createdAt","updatedAt","expiresAt"];function Xd(e,i,s={}){const o=e.prepare("SELECT checksum FROM na_migration_ledger WHERE id = ?").get(Fd);if(o){if(o.checksum!==Ud)throw al("ledger","Legacy P0 migration checksum mismatch.");return void tl(i,s.rename)}const r=[],c=function(e,i){const s=[],o=new Set,r=(e,o)=>function(e,i,s,o){return t.existsSync(e)?t.readdirSync(e).filter(e=>e.endsWith(".json")).sort().flatMap(r=>{const a=n.join(e,r);let c;try{c=t.readFileSync(a,"utf8")}catch(e){throw al(a,"Legacy JSON could not be accessed.",e)}const l={filePath:a,value:void 0,digest:d.createHash("sha256").update(c).digest("hex")};s.push(l);try{return l.value=JSON.parse(c),[l]}catch{return i.push({source:a,field:"unreadable-record"}),o?.(a),[]}}):[]}(e,i,s,o);return{...{folders:r(e.localFoldersDir),runtimes:r(e.nodeRuntimesDir),instances:r(e.controlledInstancesDir,e=>o.add(n.basename(e,".json"))),privateConfigs:r(e.instancePrivateConfigsDir),models:r(e.nodeModelsDir),assignments:r(e.modelAssignmentsDir),modelEnvironments:r(e.modelEnvironmentsDir),gitPayloads:r(e.gitCredentialPayloadsDir),gitAssignments:r(e.gitCredentialAssignmentsDir),gitAuthorizations:r(e.gitCredentialAuthorizationSetsDir),gitProvisioning:r(e.gitWorkspaceProvisioningIntentsDir)},allFiles:s,isolatedInstanceIds:o}}(i,r),l=c.allFiles.length>0,u=function(e){let n;try{n=t.lstatSync(e)}catch(t){if("ENOENT"===t.code)return;throw al(e,"Legacy JSON could not be accessed.",t)}if(!n.isFile())throw al(e,"Legacy JSON must be a regular file.");return function(e){try{const n=t.readFileSync(e,"utf8");return{filePath:e,value:JSON.parse(n),digest:d.createHash("sha256").update(n).digest("hex")}}catch(t){throw al(e,"Legacy JSON could not be read.",t)}}(e)}(i.identityPath);if(l&&!u)throw al(i.identityPath,"Legacy P0 data requires a node identity.");try{const t=u?jd(u.value,(e,t)=>r.push({source:i.identityPath,field:String(t.field\|\|t.fields\|\|"legacy")})):void 0,s=c.folders.map(e=>(rl(e,$d,r),Jd(e,is,Ti(e.value)))),o=c.runtimes.map(e=>(rl(e,Hd,r),Jd(e,Bs.strip(),e.value))),d=new Map(Yd(c.privateConfigs,c.isolatedInstanceIds,r).map(e=>{const t=il(e.value);return[n.basename(e.filePath,".json"),sl(t.instanceCredential??t.registrationToken)]})),l=c.instances.map(e=>{const t=mo(e.value,t=>r.push({source:e.filePath,field:t.field}));if(!t.success)throw Qd(e,t.error);return{...t.data,registrationToken:t.data.registrationToken\|\|d.get(t.data.id)}}),p=c.models.flatMap(e=>{const t=il(e.value);rl(e,qd,r);const i=Jd(e,us,ol(t,["id","name","endpoint","key","model","modelNames","protocols","app","enabled","order","labels","createdAt","updatedAt"]));return n.basename(e.filePath,".json")!==i.id\|\|Ts(i)!==i.id?(r.push({source:e.filePath,field:"identity-or-content-hash"}),[]):[us.parse({...i,modelNames:i.modelNames.length?i.modelNames:[{name:i.model,order:0}],protocols:i.protocols.length?i.protocols:[(s=i.app,"claude"===s?"anthropic-messages":"opencode"===s?"openai-chat-completions":"openai-responses")]})];var s}),m=Yd(c.assignments,c.isolatedInstanceIds,r).map(e=>{const t=il(e.value);return rl(e,Vd,r),Jd(e,hs,ol(t,["instanceId","modelEntityIds","codexModelHash","claudeModelHash","opencodeModelHash","updatedAt"]))});!function(e,t,i,s){const o=new Set(t.map(e=>e.id)),r=new Map(s.map(e=>[e.instanceId,e])),c=new Map(i.map(e=>[e.id,e]));let d=i.reduce((e,t)=>Math.max(e,t.order),0)+100;for(const l of e){const e=n.basename(l.filePath,".json");if(!o.has(e))throw al(l.filePath,`Legacy model environment references missing instance ${e}.`);if(r.has(e))continue;const u=a.z.record(a.z.string(),a.z.string()).safeParse(l.value);if(!u.success)throw Qd(l,u.error);const p=u.data,m=new Set(["OPENAI_API_KEY","OPENAI_BASE_URL","CODEX_MODEL","TASK_HANDOFF_CODEX_BASE_URL","TASK_HANDOFF_CODEX_MODEL","ANTHROPIC_API_KEY","ANTHROPIC_BASE_URL","CLAUDE_MODEL","TASK_HANDOFF_CLAUDE_MODEL"]);if(Object.keys(p).some(e=>!m.has(e)))throw al(l.filePath,"Legacy model environment contains an unknown field.");const h=[],g={};for(const n of["codex","claude"]){const s=p["codex"===n?"OPENAI_API_KEY":"ANTHROPIC_API_KEY"],o="codex"===n?p.TASK_HANDOFF_CODEX_BASE_URL\|\|p.OPENAI_BASE_URL:p.ANTHROPIC_BASE_URL,r="codex"===n?p.TASK_HANDOFF_CODEX_MODEL\|\|p.CODEX_MODEL:p.TASK_HANDOFF_CLAUDE_MODEL\|\|p.CLAUDE_MODEL;if(!s&&!o&&!r)continue;if(!s\|\|!o\|\|!r)throw al(l.filePath,`Legacy ${n} model environment is incomplete.`);const a=Ts({app:n,endpoint:o,key:s,model:r});if(!c.has(a)){const l=t.find(t=>t.id===e).updatedAt,u=us.parse({id:a,name:`Migrated ${"codex"===n?"Codex":"Claude"} model`,endpoint:o,key:s,model:r,app:n,enabled:!0,order:d,labels:{migratedFrom:"instance-model-environment"},createdAt:l,updatedAt:l});d+=100,i.push(u),c.set(a,u)}h.push(a),"codex"===n?g.codexModelHash=a:g.claudeModelHash=a}if(!h.length)throw al(l.filePath,"Legacy model environment has no complete model configuration.");const f=hs.parse({instanceId:e,modelEntityIds:h,...g,updatedAt:t.find(t=>t.id===e).updatedAt});s.push(f),r.set(e,f)}}(Yd(c.modelEnvironments,c.isolatedInstanceIds,r),l,p,m);const h=c.gitPayloads.map(e=>{const t=il(e.value);return rl(e,Bd,r),{id:sl(t.id),payload:Jd(e,Kc,t.payload),createdAt:sl(t.createdAt),updatedAt:sl(t.updatedAt)}}),g=function(e,t){const n=new Map(e.map(e=>[e.instanceId,e]));for(const e of new Set(t.map(e=>e.instanceId))){if(n.has(e))continue;const i=t.filter(t=>t.instanceId===e).sort((e,t)=>e.credentialId.localeCompare(t.credentialId)),s=i.map(e=>e.updatedAt).sort().at(-1);n.set(e,{id:e,instanceId:e,generation:Math.max(0,...i.map(e=>e.assignmentRevision)),credentialIds:i.filter(e=>"revoking"!==e.status&&"revoked"!==e.status).map(e=>e.credentialId),createdAt:s,updatedAt:s})}return[...n.values()].sort((e,t)=>e.instanceId.localeCompare(t.instanceId))}(Yd(c.gitAuthorizations,c.isolatedInstanceIds,r).map(e=>{const t=il(e.value);rl(e,Kd,r);const n=Jd(e,Gc,ol(t,["instanceId","generation","credentialIds","updatedAt"]));return{...n,id:n.instanceId,createdAt:sl(t.createdAt)}}),Yd(c.gitAssignments,c.isolatedInstanceIds,r).map(e=>{const t=il(e.value);return rl(e,Gd,r),Jd(e,Bc,ol(t,["instanceId","credentialId","credentialRevision","assignmentRevision","status","authorizedAt","updatedAt"]))})),f=Yd(c.gitProvisioning,c.isolatedInstanceIds,r).map(e=>(rl(e,Wd,r),function(e){const t=il(e.value),n={id:sl(t.id),createdAt:sl(t.createdAt),updatedAt:sl(t.updatedAt),expiresAt:sl(t.expiresAt)};if("consumed"===t.status)return{...n,status:"consumed",operationId:sl(t.operationId)};const i=function(e){const t=nd(e),n=nd(t?.ref),i=nd(t?.clone),s=Array.isArray(t?.credentials)?t.credentials.map(e=>{const t=nd(e),n=nd(t?.payload),i=function(e){const t=nd(e),n=nd(t?.scope);return $c.safeParse({...id(t,["id","name","kind","secretSet","status","revision","createdAt","updatedAt"]),scope:id(n,["scheme","host","port","pathPrefix"])})}(n?.credential),s=nd(n?.secret);return{...id(t,["operationId","retention"]),payload:{credential:i.success?i.data:n?.credential,secret:id(s,"https-token"===s?.kind?["kind","username","token"]:["kind","privateKey","passphrase","pinnedKnownHosts"])}}}):t?.credentials;return td.safeParse({...id(t,["operationId","instanceId","remoteUrl"]),ref:id(n,["type","name","commit"]),clone:id(i,["depth","submodules","lfs","subdirectory"]),credentials:s})}(t.input);if(!i.success)throw Qd(e,i.error);const s=td.parse(i.data);return{...n,id:s.instanceId,status:"pending",input:s}}(e)));!function(e){const t=e.identity?.nodeId,n=Zd("local folder",e.folders.map(e=>e.id)),i=Zd("runtime",e.runtimes.map(e=>e.id)),s=Zd("instance",e.instances.map(e=>e.id)),o=Zd("model",e.models.map(e=>e.id)),r=Zd("Git credential payload",e.payloads.map(e=>e.id));Zd("model assignment",e.assignments.map(e=>e.instanceId)),Zd("Git authorization",e.authorizations.map(e=>e.instanceId)),Zd("Git provisioning",e.provisioning.map(e=>e.id));for(const n of[...e.folders,...e.runtimes])if(!t\|\|n.nodeId!==t)throw el("node-identity",n.id,n.nodeId,"Legacy topology record references a different or missing node identity.");for(const s of e.instances){if(!t\|\|s.nodeId!==t)throw el("node-identity",s.id,s.nodeId,"Legacy instance references a different or missing node identity.");if(!i.has(s.runtimeId))throw el("runtime",s.id,s.runtimeId,"Legacy instance references a missing runtime.");if("local-folder"===s.source.type&&s.source.localFolderId&&!n.has(s.source.localFolderId))throw el("local-folder",s.id,s.source.localFolderId,"Legacy instance references a missing local folder.")}for(const t of e.privateConfigInstanceIds)if(!s.has(t))throw el("instance",t,t,"Legacy private config references a missing instance.");for(const t of e.assignments){if(!s.has(t.instanceId))throw el("instance",t.instanceId,t.instanceId,"Legacy model assignment references a missing instance.");for(const e of new Set([...t.modelEntityIds,t.codexModelHash,t.claudeModelHash,t.opencodeModelHash].filter(e=>Boolean(e))))if(!o.has(e))throw el("model",t.instanceId,e,"Legacy model assignment references a missing model.")}for(const t of e.payloads)if(t.id!==t.payload.credential.id)throw el("Git credential payload",t.id,t.payload.credential.id,"Legacy Git credential wrapper and payload ids do not match.");for(const t of e.authorizations){if(!s.has(t.instanceId))throw el("instance",t.instanceId,t.instanceId,"Legacy Git authorization references a missing instance.");for(const e of t.credentialIds)if(!r.has(e))throw el("Git credential payload",t.instanceId,e,"Legacy Git authorization references a missing credential payload.")}for(const t of e.provisioning)if(!s.has(t.id))throw el("instance",t.id,t.id,"Legacy Git provisioning references a missing instance.");if(e.identity){const t=Zd("Control Plane pairing",e.identity.controlPlanePairings.map(e=>e.keyId));Zd("Control Plane connection",e.identity.controlPlaneConnections.map(e=>e.id));const n=new Set;for(const i of e.identity.controlPlaneConnections){if(!t.has(i.pairingKeyId))throw el("Control Plane pairing",i.id,i.pairingKeyId,"Legacy connection references a missing pairing.");const e=new URL(i.url).toString().replace(/\/$/,"");if(n.has(e))throw el("Control Plane URL",i.id,e,"Legacy connections contain a duplicate normalized URL.");n.add(e)}}}({identity:t,folders:s,runtimes:o,instances:l,privateConfigInstanceIds:[...d.keys()],models:p,assignments:m,payloads:h,authorizations:g,provisioning:f}),e.exec("BEGIN IMMEDIATE");try{const n=new bc(e),i=uc(e),a=Ec(e),d=new od(e);t&&n.writeIdentity(t);for(const e of s)i.localFolders.put(e);for(const e of o)i.runtimes.put(e);for(const e of l)i.instances.put(e);for(const e of p)a.models.put(e);for(const e of m)a.assignments.put(e);for(const e of h)d.putPayload(e);for(const e of g)d.putAuthorization(e);for(const e of f)d.putProvisioning(e);const y={sourceTag:"v0.0.28",counts:{identities:t?1:0,folders:s.length,runtimes:o.length,instances:l.length,models:p.length,assignments:m.length,pairings:t?.controlPlanePairings?.length\|\|0,connections:t?.controlPlaneConnections?.length\|\|0,gitPayloads:h.length,gitAuthorizations:g.length,gitProvisioning:f.length},inputDigest:nl([...u?[u]:[],...c.allFiles]),warningCount:r.length};e.prepare("INSERT INTO na_migration_ledger (id, checksum, applied_at, details) VALUES (?, ?, ?, ?)").run(Fd,Ud,(new Date).toISOString(),JSON.stringify(y)),e.exec("COMMIT")}catch(t){throw e.exec("ROLLBACK"),t}}catch(e){if(e&&"object"==typeof e&&"code"in e&&"NODE_AGENT_LEGACY_MIGRATION_FAILED"===e.code)throw e;throw al("p0","Legacy P0 data failed validation.",e)}tl(i,s.rename);for(const e of r)console.warn(JSON.stringify({message:"legacy node agent field was ignored",...e}))}function Yd(e,t,i){return e.filter(e=>{const s=il(e.value),o="string"==typeof s.instanceId?s.instanceId:n.basename(e.filePath,".json");return!t.has(o)\|\|(i.push({source:e.filePath,field:"isolated-instance-owner"}),!1)})}function Jd(e,t,n){const i=t.safeParse(n);if(!i.success)throw Qd(e,i.error);return i.data}function Qd(e,t){return al(e.filePath,"Legacy record is missing a required field or has an invalid type.",void 0,{issues:t.issues.map(e=>({path:e.path.join("."),code:e.code}))})}function Zd(e,t){const n=new Set;for(const i of t){if(n.has(i))throw al(e,`Legacy ${e} id is duplicated.`,void 0,{recordId:i});n.add(i)}return n}function el(e,t,n,i){return al(e,i,void 0,{relation:e,recordId:t,referencedId:n})}function tl(e,n=t.renameSync){const i=[e.identityPath,e.localFoldersDir,e.nodeRuntimesDir,e.controlledInstancesDir,e.nodeModelsDir,e.modelAssignmentsDir,e.gitCredentialPayloadsDir,e.modelEnvironmentsDir,e.gitCredentialAssignmentsDir,e.gitCredentialAuthorizationSetsDir,e.gitWorkspaceProvisioningIntentsDir];for(const e of i){if(!t.existsSync(e))continue;const i=`${e}.migrated-v0.0.28`;let s=i;for(let e=1;t.existsSync(s);e+=1)s=`${i}.${e}`;try{n(e,s)}catch(t){console.warn(JSON.stringify({message:"legacy node agent persistence archive failed",source:e,target:s,error:t instanceof Error?t.message:String(t)}))}}}function nl(e){const t=d.createHash("sha256");for(const i of[...e].sort((e,t)=>e.filePath.localeCompare(t.filePath)))t.update(n.basename(i.filePath)),t.update(i.digest);return t.digest("hex")}function il(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))throw al("record","Legacy record must be an object.");return e}function sl(e){if("string"!=typeof e\|\|!e)throw al("record","Legacy record is missing a required string.");return e}function ol(e,t){return Object.fromEntries(t.flatMap(t=>Object.prototype.hasOwnProperty.call(e,t)?[[t,e[t]]]:[]))}function rl(e,t,n){const i=il(e.value),s=new Set(t);for(const t of Object.keys(i).filter(e=>!s.has(e)).sort())n.push({source:e.filePath,field:t})}function al(e,t,n,i={}){return Object.assign(new Error(t,void 0===n?void 0:{cause:n}),{code:"NODE_AGENT_LEGACY_MIGRATION_FAILED",statusCode:500,details:{source:e,...i}})}function cl(e,t){return Object.assign(new Error(`Node Agent database ${e} failed: ${t instanceof Error?t.message:String(t)}`,{cause:t}),{code:"NODE_AGENT_DATABASE_STARTUP_FAILED",statusCode:500,details:{phase:e,recovery:"Restore or remove the invalid node-agent.sqlite before restarting the Node Agent."}})}function dl(e,t){const n=e.prepare(t).get();return n?Object.values(n)[0]:void 0}function ll(e){for(const n of[e.databasePath,`${e.databasePath}-wal`,`${e.databasePath}-shm`])t.existsSync(n)&&t.chmodSync(n,384)}function ul(e,i={}){try{!function(e=process.versions.node){const[t,n]=e.split(".").map(Number);if(24!==t\|\|n<15)throw new Error(`Node.js 24.15 or newer within the Node.js 24 release line is required; received ${e}.`)}()}catch(e){throw cl("runtime",e)}let s;t.mkdirSync(n.dirname(e.databasePath),{recursive:!0,mode:448}),t.chmodSync(n.dirname(e.databasePath),448);try{if(s=new T.DatabaseSync(e.databasePath),function(e,t){e.exec("PRAGMA foreign_keys = ON"),e.exec("PRAGMA busy_timeout = 5000"),e.exec("PRAGMA journal_mode = WAL"),e.exec("PRAGMA synchronous = FULL");const n=Number(dl(e,"PRAGMA application_id"));if(0===n)e.exec("PRAGMA application_id = 1414024769");else if(1414024769!==n)throw new Error(`Unexpected application_id ${n}.`);if(1!==Number(dl(e,"PRAGMA foreign_keys")))throw new Error("foreign_keys could not be enabled.");if("wal"!==String(dl(e,"PRAGMA journal_mode")).toLowerCase())throw new Error("WAL could not be enabled.");if(5e3!==Number(dl(e,"PRAGMA busy_timeout")))throw new Error("busy_timeout=5000 could not be enabled.");if(2!==Number(dl(e,"PRAGMA synchronous")))throw new Error("synchronous=FULL could not be enabled.");if("ok"!==String(dl(e,"PRAGMA quick_check")))throw new Error("quick_check failed.");ll(t)}(s,e),function(e){e.exec("CREATE TABLE IF NOT EXISTS na_migration_ledger (\n id TEXT PRIMARY KEY NOT NULL, checksum TEXT NOT NULL, applied_at TEXT NOT NULL, details TEXT NOT NULL\n )"),e.exec("BEGIN IMMEDIATE");try{const t=e.prepare("SELECT checksum FROM na_migration_ledger WHERE id = ?"),n=e.prepare("INSERT INTO na_migration_ledger (id, checksum, applied_at, details) VALUES (?, ?, ?, ?)");for(const i of _d){const s=t.get(i.id);if(s){if(s.checksum!==i.checksum)throw new Error(`Migration checksum mismatch for ${i.id}.`)}else e.exec(i.sql),n.run(i.id,i.checksum,(new Date).toISOString(),JSON.stringify({domain:"node-agent-story"}))}e.exec("COMMIT")}catch(t){throw e.exec("ROLLBACK"),t}}(s),Xd(s,e,i.legacyMigration),"ok"!==String(dl(s,"PRAGMA quick_check")))throw new Error("post-migration quick_check failed.");ll(e);const t=b.drizzle({client:s});let n=!1;return{db:t,client:s,async checkpoint(){n\|\|(s.exec("PRAGMA wal_checkpoint(TRUNCATE)"),ll(e))},async close(){n\|\|(n=!0,s.close())}}}catch(e){try{s?.close()}catch{}throw cl(s?"initialize":"connect",e)}}const pl=a.z.enum(["openai-responses","openai-chat-completions","anthropic-messages"]),ml=a.z.object({protocolVersion:a.z.literal("2026-08-27"),instanceId:a.z.string().trim().min(1).max(120),entities:a.z.array(a.z.object({id:a.z.string().trim().min(1).max(120),endpoint:a.z.string().trim().min(1).max(2048),key:a.z.string().trim().min(1).max(4096),protocols:a.z.array(pl).min(1).max(3),modelNames:a.z.array(a.z.object({name:a.z.string().trim().min(1).max(240),order:a.z.number().int().min(0).max(1e6)}).strip()).min(1).max(256)}).strip()).max(64),updatedAt:a.z.string().datetime()}).strip();function hl(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e;return{protocolVersion:t.protocolVersion,instanceId:t.instanceId,entities:Array.isArray(t.entities)?t.entities.map(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e;return{id:t.id,endpoint:t.endpoint,key:t.key,protocols:t.protocols,modelNames:Array.isArray(t.modelNames)?t.modelNames.map(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e;return{name:t.name,order:t.order}}):t.modelNames}}):t.entities,updatedAt:t.updatedAt}}class gl{models;assignments;transaction;nodeId;instances;constructor(e,t,n,i){this.nodeId=t,this.instances=n;const s=i\|\|ld(ul(e)).model;this.models=s.models,this.assignments=s.assignments,this.transaction=s.transaction.bind(s)}init(){}list(){const e=new Map;for(const t of this.instances.list()){const n=this.assignments.get(t.id);for(const t of new Set([...n?.modelEntityIds\|\|[],n?.codexModelHash,n?.claudeModelHash,n?.opencodeModelHash]))t&&e.set(t,(e.get(t)\|\|0)+1)}return this.models.list().map(t=>this.toPublic(t,e.get(t.id)\|\|0))}create(e){const t=ae(),n=Il(e.modelNames,e.model),i={...e,model:n[0].name,modelNames:n,protocols:e.protocols?.length?e.protocols:yl(e.app)},s=Ts(i),o=this.models.get(s),r=us.parse({...i,id:s,enabled:e.enabled??!0,order:e.order??this.nextOrder(),labels:e.labels\|\|{},createdAt:o?.createdAt\|\|t,updatedAt:t});return this.toPublic(this.models.put(r),this.referenceIds(s).length)}deploy(e){const t=Ts(e);if(e.id!==t)throw Object.assign(new Error(`Model content hash ${t} does not match ${e.id}.`),{statusCode:400,code:"NODE_MODEL_HASH_MISMATCH"});const n=Il(e.modelNames,e.model),i=this.models.get(e.id)\|\|this.models.put(us.parse({...e,model:n[0].name,modelNames:n,protocols:e.protocols?.length?e.protocols:yl(e.app)}));return this.toPublic(i,this.referenceIds(i.id).length)}update(e,t){const n=this.requireModel(e),i=t.modelNames?.length?Il(t.modelNames,t.model\|\|n.model):t.model?Il(void 0,t.model):Il(n.modelNames,n.model),s=t.protocols?.length?t.protocols:n.protocols?.length?n.protocols:yl(t.app\|\|n.app),o=us.parse({...n,...t,key:t.key?.trim()?t.key:n.key,protocols:s,model:i[0].name,modelNames:i,createdAt:n.createdAt,updatedAt:ae()}),r=Ts(o),a=this.models.put(us.parse({...o,id:r}));return this.toPublic(a,this.referenceIds(r).length)}delete(e){this.requireModel(e);const t=this.referenceIds(e);if(t.length)throw Object.assign(new Error(`Model ${e} is assigned to ${t.length} instance${1===t.length?"":"s"}.`),{statusCode:409,code:"NODE_MODEL_IN_USE",instanceIds:t});return this.models.delete(e)}resolveProbeKey(e,t){const n=t?.trim()\|\|(e?this.requireModel(e).key:"");if(!n)throw Object.assign(new Error("An API key is required to contact the model endpoint."),{statusCode:400,code:"MODEL_API_KEY_REQUIRED"});return n}assign(e,t){const n=this.instances.require(e);for(const e of t.modelEntityIds)this.validateEntityRef(e);if(void 0!==t.modelSelection.modelEntityIds&&JSON.stringify(t.modelSelection.modelEntityIds)!==JSON.stringify(t.modelEntityIds))throw Object.assign(new Error("Ordered model entity selection does not match its node assignment."),{statusCode:400,code:"NODE_MODEL_SELECTION_MISMATCH"});if(this.validateRef("codex",t.codexModelHash),this.validateRef("claude",t.claudeModelHash),this.validateRef("opencode",t.opencodeModelHash),void 0!==t.modelSelection.codexModelHash&&(t.modelSelection.codexModelHash??void 0)!==t.codexModelHash)throw Object.assign(new Error("Codex model selection does not match its node assignment."),{statusCode:400,code:"NODE_MODEL_SELECTION_MISMATCH"});if(void 0!==t.modelSelection.claudeModelHash&&(t.modelSelection.claudeModelHash??void 0)!==t.claudeModelHash)throw Object.assign(new Error("Claude model selection does not match its node assignment."),{statusCode:400,code:"NODE_MODEL_SELECTION_MISMATCH"});if(void 0!==t.modelSelection.opencodeModelHash&&(t.modelSelection.opencodeModelHash??void 0)!==t.opencodeModelHash)throw Object.assign(new Error("OpenCode model selection does not match its node assignment."),{statusCode:400,code:"NODE_MODEL_SELECTION_MISMATCH"});const i=hs.parse({instanceId:e,modelEntityIds:t.modelEntityIds,codexModelHash:t.codexModelHash,claudeModelHash:t.claudeModelHash,opencodeModelHash:t.opencodeModelHash,updatedAt:ae()});return this.transaction(()=>({assignment:this.assignments.put(i),instance:this.instances.put(co.parse({...n,modelSelection:t.modelSelection,updatedAt:ae()}))}))}resolvedEnvironment(e){const t=this.assignments.get(e);if(!t)return{};const n=e=>t.modelEntityIds.find(t=>this.modelSupportsApp(this.requireModel(t),e));return{...this.environmentForRef("codex",n("codex")\|\|t.codexModelHash),...this.environmentForRef("claude",n("claude")\|\|t.claudeModelHash),...this.environmentForOpenCode(t)}}privateCatalog(e){const t=this.assignments.get(e);return ml.parse({protocolVersion:"2026-08-27",instanceId:e,entities:(t?.modelEntityIds\|\|[]).map(e=>{const t=this.requireModel(e);return this.validateEntityRef(e),{id:t.id,endpoint:t.endpoint,key:t.key,protocols:t.protocols?.length?t.protocols:yl(t.app),modelNames:Il(t.modelNames,t.model)}}),updatedAt:t?.updatedAt\|\|ae()})}privateSecretValues(e){return[...new Set(this.privateCatalog(e).entities.map(e=>e.key))]}deleteInstanceMetadata(e){this.assignments.delete(e)}validateRef(e,t){if(!t)return;const n=this.requireModel(t);if(!this.modelSupportsApp(n,e))throw Object.assign(new Error(`Model ${n.id} does not support the ${e} runtime protocol.`),{statusCode:400,code:"NODE_MODEL_APP_MISMATCH"});if(!n.enabled)throw Object.assign(new Error(`Model ${n.id} is disabled.`),{statusCode:409,code:"NODE_MODEL_DISABLED"})}modelSupportsApp(e,t){const n="claude"===t?"anthropic-messages":"opencode"===t?"openai-chat-completions":"openai-responses";return e.protocols?.length?e.protocols.includes(n):e.app===t}validateEntityRef(e){const t=this.requireModel(e);if(!t.enabled)throw Object.assign(new Error(`Model ${t.id} is disabled.`),{statusCode:409,code:"NODE_MODEL_DISABLED"});if(!t.protocols?.length&&!yl(t.app).length)throw Object.assign(new Error(`Model ${t.id} does not expose a supported protocol.`),{statusCode:400,code:"NODE_MODEL_PROTOCOL_UNSUPPORTED"})}environmentForRef(e,t){if(!t)return{};this.validateRef(e,t);const n=this.requireModel(t);return"codex"===e?{OPENAI_API_KEY:n.key,OPENAI_BASE_URL:n.endpoint,TASK_HANDOFF_CODEX_BASE_URL:n.endpoint,TASK_HANDOFF_CODEX_MODEL:n.model}:{ANTHROPIC_API_KEY:n.key,ANTHROPIC_BASE_URL:n.endpoint,TASK_HANDOFF_CLAUDE_MODEL:n.model}}environmentForOpenCode(e){const t=e.modelEntityIds.map(e=>this.requireModel(e)).filter(e=>this.modelSupportsApp(e,"opencode"));if(!t.length)return{};const n=t[0],i=Il(n.modelNames,n.model)[0].name,s=Object.fromEntries(t.map(e=>[`task-handoff-${e.id}`,fl(e,Il(e.modelNames,e.model).map(e=>e.name))]));if(e.opencodeModelHash){const t=this.requireModel(e.opencodeModelHash);s["task-handoff"]=fl(t,[t.model])}return{TASK_HANDOFF_OPENCODE_CONFIG_CONTENT:JSON.stringify({$schema:"https://opencode.ai/config.json",model:`task-handoff-${n.id}/${i}`,provider:s})}}requireModel(e){const t=this.models.get(e);if(!t)throw Object.assign(new Error(`Model ${e} was not found on node ${this.nodeId}.`),{statusCode:404,code:"NODE_MODEL_NOT_FOUND"});if(Ts(t)!==t.id)throw Object.assign(new Error(`Stored model ${e} does not match its content hash.`),{statusCode:409,code:"NODE_MODEL_HASH_INVALID"});return t}referenceIds(e){return this.instances.list().filter(t=>{const n=this.assignments.get(t.id);return n?.modelEntityIds.includes(e)\|\|n?.codexModelHash===e\|\|n?.claudeModelHash===e\|\|n?.opencodeModelHash===e}).map(e=>e.id)}toPublic(e,t){const{key:n,...i}=e;return ms.parse({...i,keyPreview:n.length<=8?"set":`${n.slice(0,4)}...${n.slice(-4)}`,keySet:!0,referenceCount:t})}nextOrder(){return this.models.list().reduce((e,t)=>Math.max(e,t.order),0)+100}}function fl(e,t){return{npm:"@ai-sdk/openai-compatible",name:e.name,options:{baseURL:e.endpoint,apiKey:e.key},models:Object.fromEntries(t.map(t=>[t,{name:e.name,variants:Object.fromEntries(["none","minimal","low","medium","high","xhigh","max","ultra"].map(e=>[e,{reasoningEffort:e}]))}]))}}function yl(e){return"claude"===e?["anthropic-messages"]:"opencode"===e?["openai-chat-completions"]:["openai-responses"]}function Il(e,t){const n=e?.length?e:[{name:t,order:100}],i=new Set;return n.map(e=>({name:e.name.trim(),order:e.order})).filter(e=>!(!e.name\|\|i.has(e.name)\|\|(i.add(e.name),0))).sort((e,t)=>e.order-t.order\|\|e.name.localeCompare(t.name)).map((e,t)=>({name:e.name,order:100(t+1)}))}function Al(e,t){if(!e)return!0;const n=w.valid(e),i=w.valid(t);return n&&i?w.gt(i,n):e!==t}function _l(){return process.env.TASK_HANDOFF_NPM_COMMAND\|\|"npm"}function El(e,i){const s=n.join(e,...i.split("/"),"package.json");try{const e=JSON.parse(t.readFileSync(s,"utf8"));if(e.name!==i\|\|"string"!=typeof e.version\|\|!e.version.trim())throw new Error(`Installed package manifest is invalid: ${s}`);return{name:i,version:e.version.trim()}}catch(e){if("ENOENT"===e.code)return;throw e}}async function Tl(e,i){const s=i?function(e){const i=function(e){let t=n.resolve(e);for(;t!==n.dirname(t);){if("node_modules"===n.basename(t)&&"lib"===n.basename(n.dirname(t)))return n.dirname(n.dirname(t));t=n.dirname(t)}}(e);if(!i)return;let s,o=n.resolve(e);for(;o!==n.dirname(o);){try{const e=JSON.parse(t.readFileSync(n.join(o,"package.json"),"utf8"));if("@task-handoff/node-agent"===e.name&&"string"==typeof e.version&&e.version.trim()&&(s=e.version.trim()),"@task-handoff/server"===e.name&&"string"==typeof e.version&&e.version.trim())return{packageName:"@task-handoff/server",currentVersion:e.version.trim(),relatedCurrentVersions:s?[s]:[],installPrefix:i}}catch(e){if("ENOENT"!==e.code)throw e}o=n.dirname(o)}return s?{packageName:"@task-handoff/node-agent",currentVersion:s,relatedCurrentVersions:[],installPrefix:i}:void 0}(i):void 0;if(s)return s;const o=(await e(_l(),["root","--global"])).stdout.trim();if(!o)throw new Error("npm did not return its global module root.");const r=(await e(_l(),["prefix","--global"])).stdout.trim();if(!n.isAbsolute(r))throw new Error(`npm did not return an absolute global prefix: ${r\|\|"empty"}`);const a=El(o,"@task-handoff/server"),c=El(o,"@task-handoff/node-agent");return a?{packageName:"@task-handoff/server",currentVersion:a.version,relatedCurrentVersions:c?[c.version]:[],installPrefix:r}:{packageName:"@task-handoff/node-agent",currentVersion:c?.version,relatedCurrentVersions:[],installPrefix:r}}function bl(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e,n="string"==typeof t.updatedAt?t.updatedAt:ae(),i=t.target&&"object"==typeof t.target&&!Array.isArray(t.target)?t.target:void 0,s="controlled-instance"===i?.component,o={updating:"updating-node",downloading:"updating-node",installing:"updating-node",restarting:"restarting-node",completed:"succeeded",success:"succeeded",error:"failed"},r=new Set(["queued","updating-node","restarting-node","converging-instances","succeeded","degraded","failed"]),a="string"==typeof t.status?t.status:"queued",c=s?"failed":r.has(a)?a:o[a]\|\|"failed",d="string"==typeof t.toVersion&&t.toVersion?t.toVersion:"unknown",l=Ki.strip().safeParse(t.impact).success?Ki.strip().parse(t.impact):{runningInstanceCount:0,stoppedInstanceCount:0,activeInstanceCount:0,restartInstanceCount:0,runningInstanceIds:[],stoppedInstanceIds:[],activeInstanceIds:[]},u=s?{code:"LEGACY_INSTANCE_UPDATE_RETIRED",message:"Independent controlled-instance update jobs were retired in favor of Node reconciliation.",retryable:!1}:"failed"!==c\|\|t.error\|\|r.has(a)\|\|a in o?"string"==typeof t.error?{code:"NODE_UPDATE_FAILED",message:t.error,retryable:!1}:Vi.strip().safeParse(t.error).success?Vi.strip().parse(t.error):t.error&&"object"==typeof t.error?{code:"NODE_UPDATE_FAILED",message:"string"==typeof t.error.message?t.error.message:"Stored update job contained an unknown error.",retryable:!1}:void 0:{code:"NODE_UPDATE_FAILED",message:`Stored update job used an unknown status: ${a}.`,retryable:!1},{target:p,error:m,...h}=t,g={phase:"succeeded"===c?"succeeded":"failed"===c?"failed":c\|\|"queued",desiredVersion:d,expectedInstanceIds:[],expectedInstanceCount:0,matchedInstanceCount:0,pendingInstanceCount:0,failedInstanceCount:s\|\|"failed"===c?1:0,deferredInstanceCount:0},f=Gi.strip().safeParse(t.rollout);return{...h,source:"npm",status:c,impact:l,runtimeArtifacts:Array.isArray(t.runtimeArtifacts)?t.runtimeArtifacts.flatMap(e=>{const t=qi.strip().safeParse(e);return t.success?[t.data]:[]}):[],rollout:f.success?f.data:g,...u?{error:u}:{},...s?{completedAt:t.completedAt\|\|n}:{}}}class wl{records;constructor(e){this.records=new Wa(e.updatesDir,{schema:Yi,sanitize:bl})}init(){this.records.init()}list(){return this.records.list().sort((e,t)=>t.createdAt.localeCompare(e.createdAt))}create(e,t){const n=ae();return this.records.put(Yi.parse({id:Ka("update"),nodeId:e,source:t.source,channel:t.channel,fromVersion:t.currentVersion,toVersion:t.availableVersion,artifactRef:t.artifactRef,runtimeArtifacts:t.runtimeArtifacts,impact:t.impact,status:"queued",rollout:{phase:"queued",desiredVersion:t.availableVersion,expectedInstanceIds:t.impact.runningInstanceIds,expectedInstanceCount:t.impact.runningInstanceCount,matchedInstanceCount:0,pendingInstanceCount:t.impact.runningInstanceCount,failedInstanceCount:0,deferredInstanceCount:t.impact.stoppedInstanceCount},createdAt:n,updatedAt:n}))}patch(e,t){const n=this.records.get(e);if(!n)throw Object.assign(new Error(`Update job ${e} was not found.`),{statusCode:404,code:"UPDATE_JOB_NOT_FOUND"});return this.records.put(Yi.parse({...n,...t,id:e,createdAt:n.createdAt,updatedAt:ae()}))}reconcileRollouts(e,t,n={}){const i=new Map(e.map(e=>[e.id,e]));if(n.processStarted)for(const e of this.list().filter(e=>"queued"===e.status))this.patch(e.id,{status:"failed",rollout:{...e.rollout,phase:"failed"},error:{code:"NODE_UPDATE_FAILED",message:"The node agent restarted before the update worker claimed this job.",retryable:!0},completedAt:ae()});for(const e of this.list().filter(e=>["updating-node","restarting-node","converging-instances"].includes(e.status))){if(n.processStarted&&"restarting-node"===e.status&&t!==e.toVersion){this.patch(e.id,{status:"failed",rollout:{...e.rollout,phase:"failed",nodeVersion:t},error:{code:"NODE_UPDATE_FAILED",message:`Node agent restarted with version ${t}, expected ${e.toVersion}.`,retryable:!1},completedAt:ae()});continue}const s="converging-instances"!==e.status&&t===e.toVersion?this.patch(e.id,{status:"converging-instances",rollout:{...e.rollout,phase:"converging-instances",nodeVersion:t}}):e;if("converging-instances"!==s.status)continue;const o=s.rollout.expectedInstanceIds,r=o.map(e=>i.get(e)),a=r.filter(e=>e?.ready&&"matched"===e.runtimeVersion?.phase&&e.runtimeVersion.actualVersion===s.toVersion).length,c=r.filter(e=>e&&["created","stopped","failed"].includes(e.status\|\|"")&&"failed"!==e.runtimeVersion?.phase).length,d=r.filter(e=>!e\|\|"failed"===e.runtimeVersion?.phase).length,l=Math.max(0,o.length-a-d-c),u=d>0?"degraded":0===l?"succeeded":"converging-instances";this.patch(s.id,{status:u,rollout:{...s.rollout,phase:u,nodeVersion:t,expectedInstanceCount:o.length,matchedInstanceCount:a,pendingInstanceCount:l,failedInstanceCount:d,deferredInstanceCount:s.impact.stoppedInstanceCount+c},..."succeeded"===u\|\|"degraded"===u?{completedAt:ae()}:{}})}}run(e,t){(async()=>{this.patch(e.id,{status:"updating-node",rollout:{...e.rollout,phase:"updating-node"},startedAt:ae(),error:void 0});try{await t(e),this.patch(e.id,{status:"succeeded",completedAt:ae()})}catch(t){this.patch(e.id,{status:"failed",rollout:{...e.rollout,phase:"failed"},error:{code:"NODE_UPDATE_FAILED",message:t instanceof Error?t.message:String(t),retryable:!1},completedAt:ae()})}})()}}class Sl{records;constructor(e){this.records=new Wa(e.environmentTemplatesDir,{schema:vi,sanitize:e=>function(e,t){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const n=e,i=new Set(["id","name","sourceInstanceId","nodeId","imageId","internalTag","platform","architecture","sizeBytes","status","error","createdAt","updatedAt"]),s="string"==typeof n.id?n.id:void 0;for(const e of Object.keys(n))i.has(e)\|\|t?.({templateId:s,field:e});const o=yo(n,[...i]);if(n.error&&"object"==typeof n.error&&!Array.isArray(n.error)){const e=n.error;for(const n of Object.keys(e))["code","message","phase"].includes(n)\|\|t?.({templateId:s,field:`error.${n}`});o.error=yo(e,["code","message","phase"])}return o}(e,e=>{console.warn(JSON.stringify({message:"unknown stored environment template field was ignored",...e}))})})}init(){this.records.init();for(const e of this.records.list())"creating"===e.status&&this.records.put(vi.parse({...e,status:"failed",error:{code:"ENVIRONMENT_TEMPLATE_CREATION_INTERRUPTED",message:"Environment template creation was interrupted by a node-agent restart.",phase:"recovery"},updatedAt:ae()}))}list(){return this.records.list()}get(e){return this.records.get(e)}put(e){return this.records.put(vi.parse(e))}patch(e,t){return this.records.patch(e,t)}delete(e){return this.records.delete(e)}}const vl=a.z.record(a.z.string().regex(/^[A-Za-z_][A-Za-z0-9_]$/),a.z.string()),Nl=a.z.object({version:a.z.literal(1),instanceId:a.z.string().trim().min(1).max(120),instanceCredential:a.z.string().trim().min(1).max(240),environment:vl,modelCatalog:ml.optional(),codexSettings:Un.optional(),updatedAt:a.z.string().datetime()}).strict();class Ol{directory;constructor(e){this.directory=e.instancePrivateConfigsDir}init(){t.mkdirSync(this.directory,{recursive:!0,mode:448}),t.chmodSync(this.directory,448);for(const e of t.readdirSync(this.directory).filter(e=>e.endsWith(".json")))t.chmodSync(n.join(this.directory,e),384)}filePath(e){return n.join(this.directory,`${e}.json`)}inspectMaterialized(e){const n=this.filePath(e);if(!t.existsSync(n))return;const i=JSON.parse(t.readFileSync(n,"utf8")),s=i&&"object"==typeof i&&!Array.isArray(i)?i:{},o=Nl.parse({version:s.version,instanceId:s.instanceId,instanceCredential:s.instanceCredential??s.registrationToken,environment:s.environment,modelCatalog:void 0===s.modelCatalog?void 0:hl(s.modelCatalog),codexSettings:void 0===s.codexSettings?void 0:(r=s.codexSettings,Un.parse(function(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e,n=t.multiAgent,i=!n\|\|"object"!=typeof n\|\|Array.isArray(n)?n:(()=>{const e=n,t=e.defaultModel;return{...void 0===e.enabled?{}:{enabled:e.enabled},...void 0===e.maxConcurrentThreads?{}:{maxConcurrentThreads:e.maxConcurrentThreads},...void 0===t?{}:{defaultModel:!t\|\|"object"!=typeof t\|\|Array.isArray(t)?t:{modelEntityId:t.modelEntityId,modelName:t.modelName}},...void 0===e.defaultReasoningEffort?{}:{defaultReasoningEffort:e.defaultReasoningEffort}}})();return{...void 0===t.modelVerbosity?{}:{modelVerbosity:t.modelVerbosity},...void 0===t.personality?{}:{personality:t.personality},...void 0===n?{}:{multiAgent:i}}}(r))),updatedAt:s.updatedAt});var r;if(o.instanceId!==e)throw Object.assign(new Error(`Private config identity mismatch for instance ${e}.`),{statusCode:409,code:"INSTANCE_PRIVATE_CONFIG_IDENTITY_MISMATCH"});return o}put(e){const n=Nl.parse(e);this.init();const i=this.filePath(n.instanceId);return I.sync(i,`${JSON.stringify(n,null,2)}\n`,{encoding:"utf8",mode:384}),t.chmodSync(i,384),n}materialize(e,t,n,i,s){if(!t)throw Object.assign(new Error(`Instance ${e} does not have a long-lived credential.`),{statusCode:409,code:"INSTANCE_PRIVATE_CONFIG_CREDENTIAL_MISSING"});return this.put({version:1,instanceId:e,instanceCredential:t,environment:n,...i?{modelCatalog:i}:{},...s?{codexSettings:s}:{},updatedAt:(new Date).toISOString()})}delete(e){t.rmSync(this.filePath(e),{force:!0})}}const zl=a.z.object({id:a.z.string().trim().min(1).max(120),status:a.z.literal("pending"),input:td,createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime(),expiresAt:a.z.string().datetime()}).strict();class Cl{repository;workspaceProvisioningTtlMs;workspaceProvisioningCleanupTimer;constructor(e,t={}){this.workspaceProvisioningTtlMs=t.workspaceProvisioningTtlMs??864e5,this.repository=t.repository\|\|ld(ul(e)).git}init(){this.repository.deleteExpiredProvisioning((new Date).toISOString()),this.scheduleWorkspaceProvisioningCleanup()}putPayload(e){const t=Kc.parse(e),n=this.repository.getPayload(t.credential.id);if(n&&n.payload.credential.revision>t.credential.revision)throw i=t.credential.id,Object.assign(new Error(`Refusing stale payload revision for ${i}.`),{code:"GIT_CREDENTIAL_REVISION_STALE",statusCode:409});var i;if(n&&n.payload.credential.revision===t.credential.revision&&JSON.stringify(n.payload)!==JSON.stringify(t))throw function(e,t){return Object.assign(new Error(`Refusing conflicting payload revision for ${t}.`),{code:"GIT_CREDENTIAL_REVISION_CONFLICT",statusCode:409})}(0,t.credential.id);const s=(new Date).toISOString();return this.repository.putPayload({id:t.credential.id,payload:t,createdAt:n?.createdAt\|\|s,updatedAt:s}).payload}getPayload(e){return this.repository.getPayload(e)?.payload}putAuthorizationSet(e){const t=Gc.parse(e),n=this.repository.getAuthorization(t.instanceId),i=(new Date).toISOString();return this.publicAuthorizationSet(this.repository.putAuthorizationCas({id:t.instanceId,...t,createdAt:n?.createdAt\|\|i}))}getAuthorizationSet(e){const t=this.repository.getAuthorization(e);return t?this.publicAuthorizationSet(t):{instanceId:e,generation:0,credentialIds:[],updatedAt:new Date(0).toISOString()}}resolve(e,t){const n=this.getAuthorizationSet(e).credentialIds.flatMap(e=>{const t=this.getPayload(e);return t?[t]:[]}),i=sd(t,n.map(e=>({id:e.credential.id,kind:e.credential.kind,scope:e.credential.scope,status:e.credential.status,pinnedKnownHosts:"ssh-key"===e.secret.kind&&Boolean(e.secret.pinnedKnownHosts.trim())}))),s="unique"===i.status?n.find(e=>e.credential.id===i.credential.id):void 0;return{match:i,payload:s}}removePayload(e){if(this.repository.listAuthorizations().some(t=>t.credentialIds.includes(e)))throw Object.assign(new Error(`Credential payload ${e} is still authorized.`),{code:"GIT_CREDENTIAL_PAYLOAD_IN_USE",statusCode:409});return this.repository.deletePayload(e)}collectUnreferencedPayloads(){return this.repository.collectUnreferencedPayloads()}removeInstance(e){const t=this.repository.deleteAuthorization(e)?1:0;return this.repository.deleteProvisioning(e),this.scheduleWorkspaceProvisioningCleanup(),t}putWorkspaceProvisioning(e){const t=td.parse(e);if(!Rl(t))throw Object.assign(new Error("Only operation-only Git provisioning may be persisted."),{code:"GIT_CREDENTIAL_PROVISIONING_RETENTION_INVALID",statusCode:400});const n=this.repository.getProvisioning(t.instanceId);if("consumed"===n?.status&&n.operationId===t.operationId)return t;const i=(new Date).toISOString(),s=zl.parse(this.repository.putProvisioning({id:t.instanceId,status:"pending",input:t,createdAt:n?.createdAt\|\|i,updatedAt:i,expiresAt:new Date(Date.now()+this.workspaceProvisioningTtlMs).toISOString()})).input;return this.scheduleWorkspaceProvisioningCleanup(),s}getWorkspaceProvisioning(e){const t=this.repository.getProvisioning(e);if(t&&"pending"===t.status)return!Rl(t.input)\|\|Date.parse(t.expiresAt)<=Date.now()?(this.repository.deleteProvisioning(e),void this.scheduleWorkspaceProvisioningCleanup()):t.input}removeWorkspaceProvisioning(e){const t=this.repository.deleteProvisioning(e);return this.scheduleWorkspaceProvisioningCleanup(),t}discardPendingWorkspaceProvisioning(e){const t=this.repository.getProvisioning(e);return!(!t\|\|"pending"!==t.status)&&this.removeWorkspaceProvisioning(e)}completeWorkspaceProvisioning(e,t){const n=(new Date).toISOString(),i=this.repository.consumeProvisioning(e,t,n,new Date(Date.now()+6048e5).toISOString());return this.scheduleWorkspaceProvisioningCleanup(),i}workspaceProvisioningStatus(e){const t=this.repository.getProvisioning(e);if(t){if(!(Date.parse(t.expiresAt)<=Date.now()))return"pending"===t.status?{status:t.status,operationId:t.input.operationId}:{status:t.status,operationId:t.operationId};this.removeWorkspaceProvisioning(e)}}scheduleWorkspaceProvisioningCleanup(){this.workspaceProvisioningCleanupTimer&&clearTimeout(this.workspaceProvisioningCleanupTimer),this.workspaceProvisioningCleanupTimer=void 0;const e=Math.min(...this.repository.listProvisioning().map(e=>Date.parse(e.expiresAt)));Number.isFinite(e)&&(this.workspaceProvisioningCleanupTimer=setTimeout(()=>{this.workspaceProvisioningCleanupTimer=void 0;const e=Date.now();this.repository.deleteExpiredProvisioning(new Date(e).toISOString()),this.scheduleWorkspaceProvisioningCleanup()},Math.min(2147483647,Math.max(0,e-Date.now()))),this.workspaceProvisioningCleanupTimer.unref?.())}publicAuthorizationSet(e){const{id:t,createdAt:n,...i}=e;return Gc.parse(i)}}function Rl(e){return e.credentials.length>0&&e.credentials.every(e=>"operation-only"===e.retention)}const xl=function(e,t=process.env,n=e){let i;return()=>{const s=t.TASK_HANDOFF_VERSION?.trim();return s\|\|(i\|\|=R(e,t,n),i)}}("@task-handoff/node-agent",process.env,"@task-handoff/control-plane");function kl(){return xl()}function Dl(e,t){return{code:"INSTANCE_RUNTIME_VERSION_MISMATCH",message:`Expected controlled-instance ${e}, received ${t\|\|"an unknown version"}.`,expectedVersion:e,...t?{actualVersion:t}:{},retryable:!0}}function Pl(e){const t=kl();return e===t?{desiredVersion:t,actualVersion:e,phase:"matched",attempt:0,matchedAt:(new Date).toISOString()}:{desiredVersion:t,...e?{actualVersion:e}:{},phase:"pending",attempt:0,error:Dl(t,e)}}function Ll(e,t,n=!0){if(!n){const n=kl(),i=e.runtimeVersion;return"matched"===i?.phase&&i.desiredVersion===n&&i.actualVersion===t?i:Pl(t)}const i=kl(),s=e.runtimeVersion;if(!s\|\|s.desiredVersion!==i)return Pl(t);const o="INSTANCE_RUNTIME_VERSION_MISMATCH"!==s.error?.code?s.error:t===i?void 0:Dl(i,t);return Bi.parse({...s,desiredVersion:i,...t?{actualVersion:t}:{actualVersion:void 0},..."pending"===s.phase?{error:o\|\|(t!==i?Dl(i,t):void 0)}:{}})}const Ml="runtime_local_host",jl="task-handoff.node-agent.builtin";function Fl(e){const t={...e};return delete t[jl],t}function Ul(e){return"local-folder"===e.type?os.parse({mode:"local-bind",path:"/workspace",readOnly:!1}):os.parse({mode:"git-clone",path:"/workspace",readOnly:!1})}function $l(e){const t=ss.parse(e.source),n=e.projectId\|\|("local-folder"===t.type?t.localFolderId:void 0)\|\|("git-repository"===t.type?t.repositoryId:void 0)\|\|("git-template"===t.type?t.templateId:void 0)\|\|`project_${e.id}`;return ds.parse({id:n,name:"string"==typeof e.sourceSnapshot.name?e.sourceSnapshot.name:e.name,source:t,defaultImageSelection:e.imageSelection,defaultNodeId:e.nodeId,workspacePolicy:Ul(t),labels:{},createdAt:e.createdAt,updatedAt:e.updatedAt})}function Hl(e,t){throw Object.assign(new Error(t),{statusCode:403,code:e})}function ql(e,t){e!==kn&&console.warn(JSON.stringify({message:"protocol version mismatch",peer:t,expectedProtocolVersion:kn,actualProtocolVersion:e\|\|"missing",errorCode:"PROTOCOL_VERSION_MISMATCH"}))}function Vl(e){return"none"!==e.capabilities.artifactKind}function Bl(e={}){return{...e,requiresImage:!1,supportsControlledInstanceApi:!0,supportsContainerLifecycle:!1,supportsAppSessions:!0,supportsHostSessions:!0,artifactKind:"none",isolation:"none"}}class Kl{onStored;records;constructor(e){this.records=e}init(){}setOnStored(e){this.onStored=e}put(e){const t=this.records.put(co.parse(e));return this.onStored?.(t),t}putObservation(e){const t=this.records.putObservation(co.parse(e));return this.onStored?.(t),t}get(e){return this.records.get(e)}list(){return this.records.list()}delete(e){return this.records.delete(e)}}class Gl{nodeId;paths;persistence;localFolders;nodeRuntimes;controlledInstances;environmentTemplates;instancePrivateConfigs;modelRegistry;gitCredentials;updateJobs;node;listenerPort;containerUrlOverride;platform;constructor(e,t,n,i,s,o,r){this.paths=e,this.nodeId=t;const a=r\|\|ld(ul(e));this.persistence=a,a.topology.nodeIdentity.ensure(t,ae()),this.localFolders=a.topology.localFolders,this.nodeRuntimes=a.topology.runtimes,this.instancePrivateConfigs=new Ol(e),this.controlledInstances=new Kl(a.topology.instances),this.environmentTemplates=new Sl(e),this.gitCredentials=new Cl(e,{repository:a.git}),this.modelRegistry=new gl(e,t,{has:e=>Boolean(this.controlledInstances.get(e)),list:()=>this.listInstances(),require:e=>this.requireInstance(e),put:e=>this.controlledInstances.put(e)},a.model),this.updateJobs=new wl(e),this.listenerPort=s,this.platform=o,this.containerUrlOverride=i;const c=ae();this.node=Vs.parse({id:t,name:t,connectionMode:"direct-http",endpoint:n,controlEndpoint:n,containerEndpoint:this.containerUrl,publicWebBase:n?n.replace(/:\d+$/,""):void 0,status:"online",health:"ok",capabilities:{},labels:{},createdAt:c,updatedAt:c})}init(){for(const e of this.localFolders.list())this.localFolders.put(e);if(this.instancePrivateConfigs.init(),this.controlledInstances.init(),this.environmentTemplates.init(),this.gitCredentials.init(),this.modelRegistry.init(),this.updateJobs.init(),this.updateJobs.reconcileRollouts(this.controlledInstances.list(),kl(),{processStarted:!0}),!this.nodeRuntimes.get("runtime_local_docker")){const e=ae();this.nodeRuntimes.put(Bs.parse({id:"runtime_local_docker",nodeId:this.nodeId,name:"Local Docker",type:"docker",status:"unknown",accessStrategy:"direct-port",capabilities:{},labels:{},createdAt:e,updatedAt:e}))}if("win32"!==this.platform){const e=this.nodeRuntimes.get(Ml),t=ae();this.nodeRuntimes.put(Bs.parse({id:Ml,nodeId:this.nodeId,name:"Local Runtime",type:"local",status:e?.status\|\|"unknown",accessStrategy:"node-proxy",capabilities:Bl(e?.capabilities),labels:{...e?.labels,[jl]:"true"},createdAt:e?.createdAt\|\|t,updatedAt:e?.updatedAt\|\|t}))}for(const e of this.nodeRuntimes.list())e.nodeId!==this.nodeId&&this.nodeRuntimes.put(Bs.parse({...e,nodeId:this.nodeId,updatedAt:ae()}));for(const e of this.localFolders.list())e.nodeId!==this.nodeId&&this.localFolders.put(is.parse({...e,nodeId:this.nodeId,updatedAt:ae()}));this.normalizeInstanceRuntimeVersions()}normalizeInstanceRuntimeVersions(){for(const e of this.controlledInstances.list()){const t=Pl(e.build?.packageVersion\|\|e.instanceVersion),n=Vl(this.requireRuntime(e.runtimeId)),i=["created","stopped","failed"].includes(e.status),s=n&&e.runtimeVersion?.desiredVersion===t.desiredVersion?e.runtimeVersion:void 0,o=n?"matched"===t.phase?i?t:{...t,phase:"verifying",matchedAt:void 0}:{...t,phase:"pending",attempt:s?.attempt\|\|0,lastAttemptAt:s?.lastAttemptAt,error:s?.error\|\|t.error}:t;this.controlledInstances.put(co.parse({...e,ready:!1,runtimeVersion:o,updatedAt:ae()}))}}get localNodeAgentUrl(){return`http://127.0.0.1:${this.listenerPort}`}get currentListenerPort(){return this.listenerPort}get containerUrl(){return this.containerUrlOverride\|\|`http://host.docker.internal:${this.listenerPort}`}setListenerPort(e){this.listenerPort=e,this.node.containerEndpoint=this.containerUrl,this.node.updatedAt=ae()}runningInstanceCount(){const e=new Set(["created","stopped","failed"]);return this.listInstances().filter(t=>!e.has(t.status)).length}createLocalFolder(e){const t=ae(),i=da(e.path),s=is.parse({...e,name:e.name.trim()\|\|n.basename(i),path:i,id:e.id\|\|Ka("folder"),nodeId:this.nodeId,labels:e.labels\|\|{},createdAt:t,updatedAt:t});return this.localFolders.put(s)}updateLocalFolder(e,t){const i=this.localFolders.get(e);if(!i){const t=new Error(`Local folder ${e} was not found.`);throw Object.assign(t,{statusCode:404,code:"NODE_LOCAL_FOLDER_NOT_FOUND"})}return this.localFolders.put(is.parse({...i,name:t.name.trim()\|\|n.basename(i.path),updatedAt:ae()}))}createRuntime(e){if("local"===e.type){const e="win32"===this.platform,t=new Error(e?"Local Runtime is not supported on Windows.":"Local Runtime is built in and cannot be added manually.");throw Object.assign(t,{statusCode:e?400:409,code:e?"LOCAL_RUNTIME_UNSUPPORTED":"LOCAL_RUNTIME_BUILTIN"}),t}const t=ae(),n=Bs.parse({...e,id:e.id\|\|Ka("runtime"),nodeId:this.nodeId,accessStrategy:e.accessStrategy\|\|(i=e.type,"docker"===i?"direct-port":"node-proxy"),capabilities:e.capabilities\|\|{},labels:Fl(e.labels),createdAt:t,updatedAt:t});var i;return this.nodeRuntimes.put(n)}updateRuntime(e,t){const n=this.requireRuntime(e);if("true"===n.labels[jl]){const t=new Error(`Built-in runtime ${e} cannot be modified.`);throw Object.assign(t,{statusCode:400,code:"NODE_RUNTIME_BUILTIN"}),t}if("local"===n.type\|\|"local"===t.type){const e="win32"===this.platform,t=new Error(e?"Local Runtime is not supported on Windows.":"Local Runtime is built in and cannot be configured manually.");throw Object.assign(t,{statusCode:e?400:409,code:e?"LOCAL_RUNTIME_UNSUPPORTED":"LOCAL_RUNTIME_BUILTIN"}),t}const i=Bs.parse({...n,...t,id:n.id,nodeId:this.nodeId,accessStrategy:t.accessStrategy\|\|n.accessStrategy,capabilities:t.capabilities\|\|n.capabilities,labels:t.labels?Fl(t.labels):n.labels,createdAt:n.createdAt,updatedAt:ae()});return this.nodeRuntimes.put(i)}deleteRuntime(e){if("true"===this.requireRuntime(e).labels[jl]){const t=new Error(`Built-in runtime ${e} cannot be deleted.`);throw Object.assign(t,{statusCode:400,code:"NODE_RUNTIME_BUILTIN"}),t}const t=this.listInstances().filter(t=>t.runtimeId===e);if(t.length){const n=new Error(`Runtime ${e} is used by ${t.length} instance${1===t.length?"":"s"}.`);throw Object.assign(n,{statusCode:409,code:"NODE_RUNTIME_IN_USE"}),n}return this.nodeRuntimes.delete(e)}checkRuntime(e,t){const n=this.requireRuntime(e);return t.check?t.check(n).then(e=>{const t=Bs.parse({...n,...e,id:n.id,nodeId:this.nodeId,createdAt:n.createdAt,updatedAt:ae()});return this.nodeRuntimes.put(t)}):this.nodeRuntimes.put(Bs.parse({...n,status:"unknown",updatedAt:ae()}))}requireRuntime(e){const t=this.nodeRuntimes.get(e);if(!t){const t=new Error(`Node runtime ${e} was not found.`);throw Object.assign(t,{statusCode:404,code:"NODE_RUNTIME_NOT_FOUND"}),t}return t}requireInstance(e){const t=this.controlledInstances.get(e);if(!t){const t=new Error(`Instance ${e} was not found on node ${this.nodeId}.`);throw Object.assign(t,{statusCode:404,code:"NODE_INSTANCE_NOT_FOUND"}),t}const n=mo(t);if(!n.success)throw function(e,t){const n=t.map(e=>`${e.path.join(".")\|\|"body"}: ${e.message}`).join("; ");return Object.assign(new Error(`Stored instance ${e} is not compatible with protocol ${kn}: ${n}`),{statusCode:409,code:"NODE_INSTANCE_PAYLOAD_INVALID"})}(e,n.error.issues);return n.data}applyInstanceLifecycle(e,t){return this.controlledInstances.put(function(e,t,n=(new Date).toISOString()){switch(t.type){case"start-requested":return co.parse({...e,status:"starting",ready:!1,updatedAt:n});case"stop-requested":return co.parse({...e,status:"stopping",ready:!1,updatedAt:n});case"stop-failed":return"stopping"!==e.status?e:co.parse({...e,status:t.baseline.status,health:t.baseline.health,connectionStatus:t.baseline.connectionStatus,agentStatus:t.baseline.agentStatus,targetStatus:t.baseline.targetStatus,uiAccessStatus:t.baseline.uiAccessStatus,ready:t.baseline.ready,target:{...e.target,status:t.baseline.target.status},updatedAt:n});case"convergence-restart-requested":return co.parse({...e,build:void 0,instanceVersion:void 0,ready:!1,updatedAt:n});case"runtime-lifecycle-completed":return function(e,t,n,i){if(t.stateRevision>e.stateRevision&&["failed","stopping","stopped","deleting"].includes(t.status))return t;const s=t.stateRevision>e.stateRevision&&t.lastHeartbeatAt!==e.lastHeartbeatAt&&"online"===t.agentStatus;return co.parse({...t,...n,...s?{status:t.status,health:t.health,connectionStatus:t.connectionStatus,agentStatus:t.agentStatus,targetStatus:t.targetStatus,uiAccessStatus:t.uiAccessStatus}:{},ready:!!s&&t.ready,target:n.target?{...t.target,...n.target}:t.target,workspace:n.workspace?s?{...n.workspace,...t.workspace}:{...t.workspace,...n.workspace}:t.workspace,runtime:n.runtime?{...t.runtime,...n.runtime}:t.runtime,updatedAt:i})}(t.baseline,e,t.observation,n);case"stop-completed":return co.parse({...e,status:"stopped",health:"unknown",connectionStatus:"offline",ready:!1,agentStatus:"offline",targetStatus:"unknown",uiAccessStatus:"unknown",target:{...e.target,status:"unknown"},updatedAt:n});case"runtime-exited":case"start-failed":return co.parse({...e,status:"failed",ready:!1,health:"failed",connectionStatus:"offline",agentStatus:"offline",targetStatus:"unknown",uiAccessStatus:"unknown",workspace:{...e.workspace,error:(i=t.error,i instanceof Error?i.message:String(i))},updatedAt:n})}var i}(this.requireInstance(e),t))}listInstances(){return this.controlledInstances.list().flatMap(e=>{const t=mo(e);return t.success?[t.data]:[]})}resolvedAssignedModelEnvironment(e){return this.modelRegistry.resolvedEnvironment(e)}createInstance(e){const t=this.requireRuntime(e.runtimeId),i=ae(),s=e.id\|\|Ka("inst"),o=function(e){const t=ss.parse(e);return"local-folder"===t.type?t:ss.parse({...t,auth:{type:"none"}})}(e.source),r=e.environmentSource\|\|(e.imageSelection?{type:"image",imageSelection:e.imageSelection}:void 0);if("template"===r?.type&&"docker"!==t.type){const e=new Error(`Runtime ${t.name} does not support environment templates.`);throw Object.assign(e,{statusCode:409,code:"ENVIRONMENT_TEMPLATE_RUNTIME_UNSUPPORTED"}),e}const a="template"===r?.type?this.environmentTemplates.get(r.environmentTemplateId):void 0;if("template"===r?.type&&(!a\|\|"ready"!==a.status)){const e=new Error(`Environment template ${r.environmentTemplateId} is not ready on node ${this.nodeId}.`);throw Object.assign(e,{statusCode:a?409:404,code:a?"ENVIRONMENT_TEMPLATE_NOT_READY":"ENVIRONMENT_TEMPLATE_NOT_FOUND"}),e}if(a&&a.nodeId!==this.nodeId){const e=new Error(`Environment template ${a.id} belongs to node ${a.nodeId}, not ${this.nodeId}.`);throw Object.assign(e,{statusCode:409,code:"ENVIRONMENT_TEMPLATE_NODE_MISMATCH"}),e}if(function(e){return"boolean"==typeof e.capabilities.requiresImage?e.capabilities.requiresImage:"local"!==e.type}(t)&&(!r\|\|"image"===r.type&&!e.image)){const e=new Error(`Runtime ${t.name} requires an image.`);throw Object.assign(e,{statusCode:400,code:"NODE_RUNTIME_IMAGE_REQUIRED"}),e}if("local"===t.type&&"local-folder"!==o.type){const e=new Error("Localhost runtime currently supports local folder sources only.");throw Object.assign(e,{statusCode:400,code:"LOCAL_RUNTIME_REQUIRES_LOCAL_FOLDER"}),e}if("local"===t.type&&this.listInstances().some(e=>"local"===this.requireRuntime(e.runtimeId).type)){const e=new Error("A localhost instance already exists on this node.");throw Object.assign(e,{statusCode:409,code:"LOCAL_RUNTIME_INSTANCE_EXISTS"}),e}const c=a?Ds.parse({id:a.id,origin:"custom",name:a.name,repository:"task-handoff/environment-template",tag:a.id.toLowerCase().replace(/[^a-z0-9_.-]/g,"-"),requestedReference:a.internalTag,resolvedDigest:a.imageId,resolvedReference:a.internalTag,downloadSizeBytes:a.sizeBytes\|\|void 0,pullPolicy:"if-not-present",capabilities:[],optionalApps:[],defaultEnv:{},labels:{},createdAt:a.createdAt,updatedAt:a.updatedAt}):e.image?Ds.parse(e.image):void 0,d="local"===t.type&&"local-folder"===o.type?n.resolve(o.path):void 0,l=co.parse({id:s,name:e.name\|\|`instance-${s.replace(/^inst_?/,"").slice(0,6)}`,source:o,sourceSnapshot:e.sourceSnapshot\|\|{},modelSelection:e.modelSelection,projectId:e.projectId,nodeId:this.nodeId,runtimeId:t.id,imageSelection:"image"===r?.type?r.imageSelection:void 0,environmentSource:r,environmentTemplateOrigin:a?{templateId:a.id,nodeId:a.nodeId,imageId:a.imageId,name:a.name,platform:a.platform,architecture:a.architecture}:void 0,imageSnapshot:c,imageProvisioning:c&&"docker"===t.type&&"template"!==r?.type?{phase:"checking-image",requestedReference:c.requestedReference,generation:0,startedAt:i,updatedAt:i}:void 0,status:c&&"docker"===t.type&&"template"!==r?.type?"provisioning":"created",health:"unknown",connectionStatus:"unknown",agentStatus:"unknown",targetStatus:"unknown",uiAccessStatus:"unknown",controlMode:"controlled",ready:!1,runtimeVersion:Pl(),capabilities:{},config:{autoImportAgentConfigs:e.config?.autoImportAgentConfigs??!0,codexConfigEnabled:e.config?.codexConfigEnabled??!0,codexHomeMode:e.config?.codexHomeMode??("local"===t.type?"taskhandoff":"default"),defaultCodexPermissionMode:e.config?.defaultCodexPermissionMode??("docker"===t.type?"full-access":"ask"),...e.config?.codexSettings?{codexSettings:e.config.codexSettings}:{},aiSessionHistoryLimit:e.config?.aiSessionHistoryLimit??50,aiSessionAttachmentRetentionDays:e.config?.aiSessionAttachmentRetentionDays??30,aiSessionMaxFileAttachmentBytes:e.config?.aiSessionMaxFileAttachmentBytes??he},workspace:"local"===t.type?{mode:"local-bind",status:"unknown",path:d}:{status:"unknown"},target:{strategy:"node-proxy",status:"unknown"},runtime:"local"===t.type?{kind:"local",workspacePath:d,labels:{"task-handoff.runtime-kind":"local"}}:{labels:{}},registrationToken:Ga(),createdAt:i,updatedAt:i}),u=this.persistence.transactionSync(()=>{let t=this.controlledInstances.put(l);const n=e.modelSelection;return n&&Object.values(n).some(e=>Array.isArray(e)?e.length>0:Boolean(e))&&(t=this.modelRegistry.assign(s,{modelSelection:n,modelEntityIds:n.modelEntityIds,codexModelHash:n.codexModelHash,claudeModelHash:n.claudeModelHash,opencodeModelHash:n.opencodeModelHash}).instance),e.gitWorkspaceProvisioning?.credentials.every(e=>"operation-only"===e.retention)&&this.gitCredentials.putWorkspaceProvisioning(e.gitWorkspaceProvisioning),t});return this.instancePrivateConfigs.materialize(u.id,u.registrationToken,this.resolvedAssignedModelEnvironment(u.id),this.modelRegistry.privateCatalog(u.id),u.config.codexSettings),u}takeGitWorkspaceProvisioning(e){const t=this.gitCredentials.getWorkspaceProvisioning(e);return this.gitCredentials.removeWorkspaceProvisioning(e),t}setGitWorkspaceProvisioning(e){const t=this.requireInstance(e.instanceId);if("local-folder"===t.source.type\|\|t.source.url!==e.remoteUrl)throw Object.assign(new Error(`Git provisioning does not match instance ${t.id}.`),{code:"GIT_WORKSPACE_PROVISIONING_INSTANCE_MISMATCH",statusCode:409});this.gitCredentials.putWorkspaceProvisioning(e)}gitWorkspaceProvisioningFor(e){if("local-folder"===e.source.type)return;const t=this.gitCredentials.getWorkspaceProvisioning(e.id);if(t)return t;const n=this.gitCredentials.getAuthorizationSet(e.id).credentialIds.flatMap(e=>{const t=this.gitCredentials.getPayload(e);return t?[t]:[]}),i=n.map(e=>({id:e.credential.id,kind:e.credential.kind,scope:e.credential.scope,status:e.credential.status,pinnedKnownHosts:"ssh-key"===e.secret.kind&&Boolean(e.secret.pinnedKnownHosts.trim())})),s=sd(e.source.url,i);if("ambiguous"===s.status\|\|"missing-host-key"===s.status)throw Object.assign(new Error(`Git credential resolution failed for instance ${e.id}: ${s.status}.`),{code:`GIT_CREDENTIAL_${s.status.replace(/-/g,"_").toUpperCase()}`,statusCode:409});return{operationId:`gitop_${e.id}_${e.stateRevision}`,instanceId:e.id,remoteUrl:e.source.url,ref:e.source.ref,clone:e.source.clone,credentials:n.map((t,n)=>({operationId:`gitcredop_${e.id}_${e.stateRevision}_${n}`,retention:"instance-retained",payload:t}))}}discardGitWorkspaceProvisioning(e){return this.gitCredentials.discardPendingWorkspaceProvisioning(e)}gitWorkspaceProvisioningStatus(e){return this.gitCredentials.workspaceProvisioningStatus(e)}registerInstance(e,t,n){const i=Io.parse(t),s=ae(),o=this.controlledInstances.get(e);if(!o){const t=new Error(`Instance ${e} was not found on node ${this.nodeId}.`);throw Object.assign(t,{statusCode:404,code:"NODE_INSTANCE_NOT_FOUND"}),t}if(this.validateInstanceReport(o,i,n),i.processIncarnationId&&i.processIncarnationId===o.processIncarnationId)return o;ql(i.protocolVersion,`Instance ${e}`);const r=i.build?.packageVersion\|\|i.instanceVersion,a=Vl(this.requireRuntime(o.runtimeId)),c=Ll(o,r,a),d=co.parse({...o,status:"registered",health:r===kl()?"ok":"degraded",ready:!a&&r===kl(),connectionStatus:"online",agentStatus:"online",targetStatus:o.targetStatus,uiAccessStatus:o.uiAccessStatus,controlMode:i.controlMode,protocolVersion:i.protocolVersion,instanceVersion:i.instanceVersion,build:i.build,runtimeVersion:c,processIncarnationId:i.processIncarnationId\|\|o.processIncarnationId,capabilities:i.capabilities,appInventory:i.appInventory,workspace:i.workspace,target:o.target,registrationToken:o.registrationToken\|\|i.registrationToken,lastHeartbeatAt:s,updatedAt:s});return this.controlledInstances.putObservation(d)}heartbeatInstance(e,t,n){const i=this.requireInstance(e);this.validateInstanceToken(i,n);const s=Ao.parse(t);i.processIncarnationId&&s.processIncarnationId&&s.processIncarnationId!==i.processIncarnationId&&function(e,t){throw Object.assign(new Error(t),{statusCode:409,code:"INSTANCE_PROCESS_INCARNATION_MISMATCH"})}(0,`Instance ${e} report belongs to an obsolete controlled-instance process.`),ql(s.protocolVersion,`Instance ${e}`);const o=ae(),r=i.target,a=i.targetStatus,c=Ll(i,s.build?.packageVersion\|\|i.build?.packageVersion\|\|i.instanceVersion,Vl(this.requireRuntime(i.runtimeId))),d=s.health\|\|i.health,l="running"===(s.status\|\|i.status)&&"failed"!==d,u=co.parse({...i,...s,target:r,ready:l,health:d,runtimeVersion:c,processIncarnationId:s.processIncarnationId\|\|i.processIncarnationId,agentStatus:"online",targetStatus:a,uiAccessStatus:a,connectionStatus:"online",build:s.build\|\|i.build,lastHeartbeatAt:o,updatedAt:o});return this.controlledInstances.putObservation(u)}validateInstanceReport(e,t,n){this.validateInstanceToken(e,n\|\|t.registrationToken),t.instanceId&&t.instanceId!==e.id&&Hl("INSTANCE_ID_MISMATCH",`Instance ${t.instanceId} cannot register as ${e.id}.`),t.nodeId&&t.nodeId!==this.nodeId&&Hl("INSTANCE_NODE_MISMATCH",`Instance ${e.id} belongs to node ${this.nodeId}.`),t.runtimeId&&t.runtimeId!==e.runtimeId&&Hl("INSTANCE_RUNTIME_MISMATCH",`Instance ${e.id} belongs to runtime ${e.runtimeId}.`),t.imageSelection&&t.imageSelection.imageId!==e.imageSelection?.imageId&&Hl("INSTANCE_IMAGE_MISMATCH",`Instance ${e.id} belongs to image ${e.imageSelection?.imageId}.`)}validateInstanceToken(e,t){e.registrationToken&&t===e.registrationToken\|\|Hl("INSTANCE_REGISTRATION_TOKEN_INVALID",`Invalid registration token for instance ${e.id}.`)}authenticateInstance(e,t){const n=this.requireInstance(e);return this.validateInstanceToken(n,t),n}context(e,t=this.resolvedAssignedModelEnvironment(e.id)){const n=t,i=e.imageSnapshot\|\|Ds.parse({id:"img_localhost",origin:"custom",name:"Localhost",repository:"localhost",tag:"local",requestedReference:"localhost:local",pullPolicy:"if-not-present",capabilities:[],optionalApps:[],defaultEnv:{},labels:{},createdAt:e.createdAt,updatedAt:e.updatedAt}),s=this.instancePrivateConfigs.materialize(e.id,e.registrationToken,n,this.modelRegistry.privateCatalog(e.id),e.config.codexSettings),o=this.gitWorkspaceProvisioningFor(e);return{project:$l(e),image:i,node:this.node,runtime:this.requireRuntime(e.runtimeId),instance:e,nodeAgentUrl:this.containerUrl,modelEnv:n,privateConfigPath:this.instancePrivateConfigs.filePath(s.instanceId),...o?{gitWorkspaceProvisioning:o,completeGitWorkspaceProvisioning:()=>this.gitCredentials.completeWorkspaceProvisioning(e.id,o.operationId)}:{}}}}async function Wl(e,t){const n=function(e){const t=Ql(e),n=[],i=t.pathname.split("/").filter(Boolean).at(-1)\|\|"";return iu(n,Yl(t.toString(),/^v\d+$/.test(i)?"models":"v1/models")),iu(n,new URL("/v1/models",t.origin).toString()),iu(n,new URL("/models",t.origin).toString()),n}(t.endpoint),i=Date.now();let s;for(const o of n){const n=await Zl(e,o,{method:"GET",headers:{accept:"application/json",authorization:`Bearer ${t.key}`}});if(404===n.status\|\|405===n.status){s=n.status;continue}if(!n.ok)throw tu("MODEL_DISCOVERY_FAILED",n.status);const r=await eu(n,"MODEL_DISCOVERY_RESPONSE_INVALID"),a=Array.isArray(r.data)?r.data:void 0;if(!a)throw nu("MODEL_DISCOVERY_RESPONSE_INVALID","The model endpoint returned an invalid model list.",502);return{models:su(a.flatMap(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const t=e,n="string"==typeof t.id?t.id.trim():"";if(!n)return[];const i="string"==typeof t.owned_by?t.owned_by.trim():"";return[{id:n,...i?{ownedBy:i}:{}}]}).sort((e,t)=>e.id.localeCompare(t.id))),latencyMs:Date.now()-i}}throw nu("MODEL_DISCOVERY_UNSUPPORTED","No compatible model-list endpoint was found for this endpoint.",502,s)}async function Xl(e,t){const n=Date.now(),i=t.protocol\|\|("claude"===t.app?"anthropic-messages":"opencode"===t.app?"openai-chat-completions":"openai-responses"),s="openai-responses"===i?await Zl(e,Jl(t.endpoint,"responses"),{method:"POST",headers:{accept:"application/json",authorization:`Bearer ${t.key}`,"content-type":"application/json"},body:JSON.stringify({model:t.model,input:"Reply with OK.",max_output_tokens:32,stream:!1})}):"openai-chat-completions"===i?await Zl(e,Jl(t.endpoint,"chat/completions"),{method:"POST",headers:{accept:"application/json",authorization:`Bearer ${t.key}`,"content-type":"application/json"},body:JSON.stringify({model:t.model,messages:[{role:"user",content:"Reply with OK."}],max_tokens:32,stream:!1})}):await Zl(e,function(e){const t=Ql(e);if(/\/messages\/?$/.test(t.pathname))return t.toString();const n=t.pathname.split("/").filter(Boolean).at(-1)\|\|"";return Yl(t.toString(),/^v\d+$/.test(n)?"messages":"v1/messages")}(t.endpoint),{method:"POST",headers:{accept:"application/json","anthropic-version":"2023-06-01","content-type":"application/json","x-api-key":t.key},body:JSON.stringify({model:t.model,max_tokens:8,messages:[{role:"user",content:"Reply with OK."}]})});if(!s.ok)throw tu("MODEL_TEST_FAILED",s.status);if((await eu(s,"MODEL_TEST_RESPONSE_INVALID")).error)throw nu("MODEL_TEST_RESPONSE_INVALID","The model endpoint returned an error payload.",502);return{success:!0,latencyMs:Date.now()-n}}function Yl(e,t){const n=Ql(e);return n.pathname=`${n.pathname.replace(/\/+$/,"")}/${t.replace(/^\/+/,"")}`,n.search="",n.hash="",n.toString()}function Jl(e,t){const n=Ql(e);return n.pathname.replace(/\/+$/,"").endsWith(`/${t}`)?n.toString():Yl(n.toString(),t)}function Ql(e){let t;try{t=new URL(e.trim())}catch{throw nu("MODEL_ENDPOINT_INVALID","The model endpoint must be a valid HTTP or HTTPS URL.",400)}if("http:"!==t.protocol&&"https:"!==t.protocol\|\|t.username\|\|t.password)throw nu("MODEL_ENDPOINT_INVALID","The model endpoint must be an HTTP or HTTPS URL without embedded credentials.",400);return t}async function Zl(e,t,n){try{return await e(t,{...n,redirect:"error",signal:AbortSignal.timeout(15e3)})}catch(e){const t=e&&"object"==typeof e&&"name"in e&&"TimeoutError"===e.name;throw nu(t?"MODEL_ENDPOINT_TIMEOUT":"MODEL_ENDPOINT_UNREACHABLE",t?"The model endpoint timed out.":"The model endpoint could not be reached.",t?504:502)}}async function eu(e,t){const n=await e.text();if(n.length>1e6)throw nu(t,"The model endpoint response was too large.",502);try{const e=JSON.parse(n);if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))throw new Error("not an object");return e}catch{throw nu(t,"The model endpoint returned invalid JSON.",502)}}function tu(e,t){return nu(e,401===t\|\|403===t?"The model endpoint rejected the API key.":"The model endpoint rejected the request.",502,t)}function nu(e,t,n,i){return Object.assign(new Error(t),{code:e,statusCode:n,...i?{details:{upstreamStatus:i}}:{}})}function iu(e,t){e.includes(t)\|\|e.push(t)}function su(e){const t=new Set;return e.filter(e=>!t.has(e.id)&&(t.add(e.id),!0))}const ou=a.z.object({endpoint:a.z.string().trim().url().max(2048),key:a.z.string().trim().min(1).max(4096).optional(),existingModelId:a.z.string().trim().min(1).max(120).optional()}).strict(),ru=ou.extend({model:a.z.string().trim().min(1).max(240),app:a.z.enum(["codex","claude","opencode"]).optional(),protocol:a.z.enum(["openai-responses","openai-chat-completions","anthropic-messages"]).optional()}).strict().refine(e=>Boolean(e.protocol\|\|e.app),{message:"A model protocol is required.",path:["protocol"]});class au{invocations=new Map;store;idleTtlMs;maxTtlMs;cleanupTimer;constructor(e,t={}){this.store=e,this.idleTtlMs=t.idleTtlMs??6e4,this.maxTtlMs=t.maxTtlMs??3e5}resolveHttps(e,t){const{match:n,payload:i}=this.store.resolve(e,t);return"unique"!==n.status\|\|"https-token"!==i?.secret.kind?{status:n.status}:{status:"ok",username:i.secret.username,password:i.secret.token}}async prepareSsh(e,i){this.cleanupExpired();const{match:s,payload:o}=this.store.resolve(e,i);if("unique"!==s.status\|\|"ssh-key"!==o?.secret.kind)return{status:s.status};const r=`gitssh_${d.randomUUID()}`,a=t.mkdtempSync(n.join(c.tmpdir(),"task-handoff-node-git-ssh-"));t.chmodSync(a,448);const l=n.join(a,"agent.sock"),u=n.join(a,"askpass.sh");let p;t.writeFileSync(u,"#!/bin/sh\nprintf '%s' \"${TASK_HANDOFF_SSH_KEY_PASSPHRASE:-}\"\n",{mode:448});try{const n=await du("ssh-agent",["-s","-a",l]);if(p=Number(/SSH_AGENT_PID=(\d+)/.exec(n)?.[1]),!Number.isInteger(p)\|\|p<=0)throw new Error("ssh-agent did not report a process id.");const s={...process.env,SSH_AUTH_SOCK:l,SSH_ASKPASS:u,SSH_ASKPASS_REQUIRE:"force",DISPLAY:process.env.DISPLAY\|\|":0",TASK_HANDOFF_SSH_KEY_PASSPHRASE:o.secret.passphrase\|\|""};await lu("ssh-add",["-"],o.secret.privateKey,s);const c=await du("ssh-add",["-L"],s);t.rmSync(u,{force:!0});const d=Date.now();return this.invocations.set(r,{instanceId:e,remoteUrl:i,credentialId:o.credential.id,credentialRevision:o.credential.revision,socketPath:l,agentPid:p,directory:a,idleExpiresAt:d+this.idleTtlMs,absoluteExpiresAt:d+this.maxTtlMs}),this.scheduleCleanup(),{status:"ok",invocationId:r,publicIdentity:c,pinnedKnownHosts:o.secret.pinnedKnownHosts}}catch(e){if(p)try{process.kill(p,"SIGTERM")}catch{}throw t.rmSync(a,{recursive:!0,force:!0}),e}}async exchangeAgentFrame(e,t,n){this.cleanupExpired();const i=this.invocations.get(t);if(!i\|\|i.instanceId!==e)throw cu("GIT_CREDENTIAL_SSH_INVOCATION_INVALID",404);const{match:s,payload:o}=this.store.resolve(e,i.remoteUrl);if("unique"!==s.status\|\|"ssh-key"!==o?.secret.kind\|\|o.credential.id!==i.credentialId\|\|o.credential.revision!==i.credentialRevision)throw this.release(t,e),cu("GIT_CREDENTIAL_SSH_INVOCATION_REVOKED",403);const r=Buffer.from(n,"base64");if(r.length<5\|\|r.length>1048576\|\|r.readUInt32BE(0)!==r.length-4)throw cu("GIT_CREDENTIAL_SSH_AGENT_FRAME_INVALID",400);i.idleExpiresAt=Math.min(i.absoluteExpiresAt,Date.now()+this.idleTtlMs),this.scheduleCleanup();const a=Math.max(1,Math.min(i.idleExpiresAt,i.absoluteExpiresAt)-Date.now());try{const e=await function(e,t,n){return new Promise((i,s)=>{const o=m.createConnection(e),r=[];let a=0,c=!1;const d=(e,t)=>{c\|\|(c=!0,o.destroy(),e?s(e):i(t))};o.setTimeout(n),o.once("timeout",()=>d(new Error("Managed Git SSH agent exchange timed out."))),o.once("error",e=>d(e)),o.once("end",()=>d(new Error("Managed Git SSH agent closed before returning a complete frame."))),o.once("close",()=>d(new Error("Managed Git SSH agent closed before returning a complete frame."))),o.on("data",e=>{r.push(e);const t=Buffer.concat(r);!a&&t.length>=4&&(a=t.readUInt32BE(0)+4,a<5\|\|a>1048576)?d(new Error("Managed Git SSH agent returned an invalid frame length.")):a&&t.length>=a&&d(void 0,t.subarray(0,a))}),o.once("connect",()=>o.write(t,e=>{e&&d(e)}))})}(i.socketPath,r,a);return{frame:e.toString("base64")}}catch{throw this.release(t,e),cu("GIT_CREDENTIAL_SSH_AGENT_UNAVAILABLE",502)}}release(e,n){const i=this.invocations.get(e);if(!i\|\|void 0!==n&&i.instanceId!==n)return!1;this.invocations.delete(e);try{process.kill(i.agentPid,"SIGTERM")}catch{}return t.rmSync(i.directory,{recursive:!0,force:!0}),this.scheduleCleanup(),!0}close(){this.cleanupTimer&&clearTimeout(this.cleanupTimer),this.cleanupTimer=void 0;for(const e of[...this.invocations.keys()])this.release(e)}cleanupExpired(){const e=Date.now();for(const[t,n]of this.invocations)(n.idleExpiresAt<=e\|\|n.absoluteExpiresAt<=e)&&this.release(t)}scheduleCleanup(){this.cleanupTimer&&clearTimeout(this.cleanupTimer),this.cleanupTimer=void 0;const e=Math.min(...[...this.invocations.values()].map(e=>Math.min(e.idleExpiresAt,e.absoluteExpiresAt)));Number.isFinite(e)&&(this.cleanupTimer=setTimeout(()=>{this.cleanupTimer=void 0,this.cleanupExpired(),this.scheduleCleanup()},Math.max(0,e-Date.now())),this.cleanupTimer.unref?.())}}function cu(e,t){return Object.assign(new Error("Managed Git broker request was rejected."),{code:e,statusCode:t})}function du(e,t,n=process.env){return lu(e,t,void 0,n)}function lu(e,t,n,i){return new Promise((s,o)=>{const r=l.spawn(e,t,{shell:!1,env:i,stdio:[void 0===n?"ignore":"pipe","pipe","pipe"]}),a=[];r.stdout.on("data",e=>a.push(e)),r.once("error",()=>o(new Error(`Managed Git SSH broker could not start ${e}.`))),r.once("close",t=>0===t?s(Buffer.concat(a).toString("utf8")):o(new Error(`Managed Git SSH broker command ${e} failed.`))),void 0!==n&&r.stdin.end(n)})}const uu=a.z.object({credentialId:a.z.string().trim().min(1).max(120)}).strict(),pu=a.z.object({id:a.z.string().trim().min(1).max(120)}).strict(),mu=pu.extend({invocationId:a.z.string().trim().min(1).max(120)}).strict();function hu(e){const t=e.authorization;return"string"==typeof t&&t.startsWith("Bearer ")?t.slice(7).trim():void 0}const gu=a.z.object({maxIdleAiSessions:a.z.number().int().min(1).max(50).default(5)}).strict(),fu=a.z.string().trim().min(1).max(1024).refine(e=>!e.startsWith("/")&&!e.includes("\\")&&e.split("/").every(e=>e.length>0&&"."!==e&&".."!==e),"Story paths must be normalized relative POSIX paths."),yu=a.z.string().regex(/^[a-f0-9]{64}$/),Iu=a.z.object({title:a.z.string().trim().min(1).max(240),storyPath:fu,revision:yu}).strict(),Au=a.z.object({agent:we.optional(),mode:Ze.optional(),permissionMode:et.optional(),modelSelection:pt.optional(),reasoningEffort:mt.optional(),cwdFolderId:a.z.string().trim().min(1).max(120).optional(),gitSelection:ht.optional()}).strict(),_u=a.z.object({id:a.z.string().trim().min(1).max(120),title:a.z.string().trim().min(1).max(120),promptTemplate:a.z.string().trim().min(1).max(32e3),targetInstanceId:a.z.string().trim().min(1).max(120).optional(),sessionPreset:Au.optional()}).strict(),Eu=_u.omit({id:!0}).strict(),Tu=Eu.extend({id:_u.shape.id.optional()}).strict(),bu=a.z.discriminatedUnion("scheduleKind",[a.z.object({scheduleKind:a.z.literal("interval"),intervalMs:a.z.number().int().min(6e4)}).strict(),a.z.object({scheduleKind:a.z.literal("daily"),timeOfDay:a.z.string().regex(/^([01]\d\|2[0-3]):[0-5]\d$/),timezone:a.z.string().trim().min(1).max(120)}).strict(),a.z.object({scheduleKind:a.z.literal("weekly"),weekdays:a.z.array(a.z.number().int().min(0).max(6)).min(1).max(7).refine(e=>new Set(e).size===e.length,"Weekdays must be unique."),timeOfDay:a.z.string().regex(/^([01]\d\|2[0-3]):[0-5]\d$/),timezone:a.z.string().trim().min(1).max(120)}).strict(),a.z.object({scheduleKind:a.z.literal("monthly"),dayOfMonth:a.z.number().int().min(-3).max(31).refine(e=>0!==e,"Day of month must not be zero."),timeOfDay:a.z.string().regex(/^([01]\d\|2[0-3]):[0-5]\d$/),timezone:a.z.string().trim().min(1).max(120)}).strict()]),wu=a.z.object({cooldownMs:a.z.number().int().min(0).max(864e5).optional(),maxConcurrentRuns:a.z.number().int().min(1).max(20).default(1),whenBusy:a.z.enum(["skip","queue"]).default("skip")}).strict(),Su=a.z.object({id:a.z.string().trim().min(1).max(120),storyId:ue,actionId:_u.shape.id,schedule:bu,enabled:a.z.boolean().default(!0),policy:wu.default({maxConcurrentRuns:1,whenBusy:"skip"}),createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime()}).strict(),vu=Su.omit({id:!0,createdAt:!0,updatedAt:!0}).strict(),Nu=a.z.object({action:_u,automation:vu.omit({storyId:!0,actionId:!0}).strict()}).strict(),Ou=a.z.object({actionId:Su.shape.actionId.optional(),schedule:bu.optional(),enabled:a.z.boolean().optional(),policy:wu.optional()}).strict().refine(e=>Object.keys(e).length>0,"At least one Automation field is required."),zu=a.z.object({code:a.z.string().trim().min(1).max(120),message:a.z.string().trim().min(1).max(2e3)}).strict(),Cu=a.z.enum(["queued","dispatching","running","completed","failed","skipped"]),Ru=a.z.object({id:a.z.string().trim().min(1).max(160),automationId:Su.shape.id,eventType:a.z.enum(["manual","schedule"]),status:Cu,scheduledFor:a.z.string().datetime(),targetInstanceId:a.z.string().trim().min(1).max(120),aiSessionId:a.z.string().trim().min(1).max(120).optional(),error:zu.optional(),queuedAt:a.z.string().datetime(),startedAt:a.z.string().datetime().optional(),completedAt:a.z.string().datetime().optional()}).strict(),xu=a.z.enum(["disabled","blocked","scheduled","running","error"]),ku=a.z.object({automation:Su,effectiveStatus:xu,blockedReason:zu.optional(),nextRunAt:a.z.string().datetime().optional(),currentRuns:a.z.array(Ru).max(20).default([]),lastRun:Ru.optional()}).strict(),Du=a.z.object({automations:a.z.array(ku).default([])}).strict(),Pu=a.z.object({runs:a.z.array(Ru).max(120).default([])}).strict(),Lu=a.z.object({clientRequestId:a.z.string().trim().min(1).max(160)}).strict(),Mu="story.automation.changed";a.z.object({storyId:ue,automationId:Su.shape.id,change:a.z.enum(["created","updated","deleted","status","run"]),status:ku.optional(),run:Ru.optional()}).strict();const ju=a.z.object({id:ue,ownerNodeId:a.z.string().trim().min(1).max(120),title:a.z.string().trim().min(1).max(240),description:a.z.string().trim().max(4e3).optional(),documents:a.z.array(Iu).max(500).default([]),actions:a.z.array(_u).max(50).default([]),createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime(),archivedAt:a.z.string().datetime().optional()}).strict();a.z.object({stories:a.z.array(ju).default([])}).strict();const Fu=a.z.object({title:ju.shape.title,description:ju.shape.description,actions:a.z.array(Eu).max(50).optional(),maxIdleAiSessions:gu.shape.maxIdleAiSessions.optional()}).strict(),Uu=a.z.object({title:ju.shape.title.optional(),description:ju.shape.description.nullable().optional(),actions:a.z.array(Tu).max(50).optional(),maxIdleAiSessions:gu.shape.maxIdleAiSessions.optional()}).strict().refine(e=>Object.keys(e).length>0,"At least one Story field is required."),$u=a.z.object({title:Iu.shape.title.optional(),storyPath:fu.optional()}).strict().refine(e=>Object.keys(e).length>0,"At least one document field is required."),Hu=a.z.object({storyPaths:a.z.array(fu).max(500)}).strict();a.z.object({storyPath:fu,title:Iu.shape.title.optional(),expectedRevision:yu.optional()}).strict();const qu=a.z.object({documents:a.z.array(Iu).max(500)}).strict(),Vu=a.z.union([a.z.number(),a.z.string().regex(/^\d+$/).transform(Number)]),Bu=a.z.object({page:Vu.pipe(a.z.number().int().min(1).max(500)).default(1),pageSize:Vu.pipe(a.z.number().int().min(1).max(100)).default(20)}).strict(),Ku=a.z.object({title:Iu.shape.title,storyPath:fu}).strict(),Gu=a.z.object({page:a.z.number().int().min(1).max(500),pageSize:a.z.number().int().min(1).max(100),totalItems:a.z.number().int().nonnegative(),totalPages:a.z.number().int().nonnegative(),hasMore:a.z.boolean()}).strict(),Wu=a.z.object({storyCreatedAt:ju.shape.createdAt,documents:a.z.array(Ku).max(100),pagination:Gu}).strict();a.z.object({storyCreatedAt:ju.shape.createdAt,documents:a.z.array(Ku.strip()).max(100),pagination:Gu.strip()}).strip(),a.z.object({storyPath:fu,revision:yu,content:a.z.string(),size:a.z.number().int().nonnegative()}).strict(),a.z.object({storyPaths:a.z.array(fu).min(1).max(20),destinationPath:a.z.string().trim().min(1).max(4096)}).strict(),a.z.object({storyPath:fu,title:Iu.shape.title.optional(),sourcePath:a.z.string().trim().min(1).max(4096),expectedRevision:yu.optional()}).strict();const Xu=a.z.object({storyPath:fu,path:a.z.string().trim().min(1).max(4096).optional(),revision:yu.optional(),error:a.z.object({code:a.z.string().trim().min(1).max(120),message:a.z.string().trim().min(1).max(2e3)}).strict().optional()}).strict();a.z.object({items:a.z.array(Xu).min(1).max(20)}).strict(),a.z.object({storyId:ue,nodeId:a.z.string().trim().min(1).max(120),change:a.z.enum(["created","updated","archived","restored","deleted","content.written","document.updated","document.reordered","document.deleted"]).optional(),storyPath:fu.optional()}).strict();const Yu=a.z.object({storyId:ue}).strict(),Ju=Yu.extend({storyPath:a.z.string().min(1).max(2048)}).strict(),Qu=Yu.extend({automationId:a.z.string().trim().min(1).max(120)}).strict(),Zu=a.z.object({id:a.z.string().trim().min(1).max(120),sessionId:a.z.string().trim().min(1).max(120)}).strict(),ep=a.z.object({storyPath:fu}).strict(),tp=ep.extend({title:a.z.string().trim().min(1).max(240).optional(),expectedRevision:a.z.string().regex(/^[a-f0-9]{64}$/).optional()}).strict();function np(e){const t=e.authorization;return"string"==typeof t&&t.startsWith("Bearer ")?t.slice(7).trim():void 0}async function ip(e,t,n,i,s){const o=e.authenticateInstance(n,s).aiSessions.sessions.find(e=>e.id===i);if(!o)throw Object.assign(new Error("AI Session was not found in the authoritative instance snapshot."),{code:"AI_SESSION_NOT_FOUND",statusCode:404});if(!o.storyId)throw Object.assign(new Error("AI Session is not assigned to a Story."),{code:"STORY_CONTEXT_REQUIRED",statusCode:409});return await t.get(o.storyId)\|\|(()=>{throw Object.assign(new Error("Story was not found."),{code:"STORY_NOT_FOUND",statusCode:404})})()}function sp(e,t,n,i){return e.header("content-type","application/octet-stream"),e.header("content-length",String(i)),e.header("x-story-revision",n),e.send(t)}class op{tails=new Map;accepting=!0;async acquire(e){if(!this.accepting)throw Object.assign(new Error("Story storage is shutting down."),{code:"STORY_STORAGE_QUIESCING",statusCode:503});const t=this.tails.get(e)??Promise.resolve();let n;const i=new Promise(e=>{n=e}),s=t.catch(()=>{}).then(()=>i);this.tails.set(e,s),await t.catch(()=>{});let o=!1;return()=>{o\|\|(o=!0,n(),s.finally(()=>{this.tails.get(e)===s&&this.tails.delete(e)}))}}async run(e,t){const n=await this.acquire(e);try{return await t()}finally{n()}}stopAccepting(){this.accepting=!1}async drain(){await Promise.all([...this.tails.values()])}pendingStoryIds(){return[...this.tails.keys()]}}class rp{coordinator;paths;ownerNodeId;repository;maxFileBytes;onChange;constructor(e,t,n,i=33554432,s){this.paths=e,this.ownerNodeId=t,this.repository=n,this.maxFileBytes=i,this.onChange=s,this.coordinator=new op}async init(){t.mkdirSync(this.paths.storyMutationsDir,{recursive:!0,mode:448}),t.mkdirSync(this.paths.storyTrashDir,{recursive:!0,mode:448}),t.chmodSync(this.paths.storyMutationsDir,448),t.chmodSync(this.paths.storyTrashDir,448),await this.recoverFileMutations()}setOnChange(e){this.onChange=e}async list(){const e=await this.repository.stories.list();return Promise.all(e.map(e=>this.project(e)))}async get(e){const t=await this.repository.stories.get(e);return t?this.project(t):void 0}async require(e){const t=await this.repository.stories.get(e);if(!t)throw ap("STORY_NOT_FOUND","Story was not found.",404);return t}async exists(e){return Boolean(await this.repository.stories.get(e))}async automationContext(e){const t=await this.repository.stories.get(e);if(!t)return;if(await this.repository.deletionIntents.get(e))throw ap("STORY_DELETING","Story is being deleted.",409);const n=(await this.repository.actions.list(e)).map(({storyId:e,displayOrder:t,sessionPreset:n,...i})=>_u.parse({...i,sessionPreset:n\|\|void 0}));return{id:t.id,archivedAt:t.archivedAt\|\|void 0,actions:n}}async create(e){const t=Fu.parse(e),n=(new Date).toISOString(),i=await this.repository.transaction(async e=>{const i=await e.stories.insert({id:Ka("story"),title:t.title,description:t.description,createdAt:n,updatedAt:n,maxIdleAiSessions:t.maxIdleAiSessions??5,nextDocumentSequence:1}),s=(t.actions\|\|[]).map((e,t)=>({storyId:i.id,id:Ka("story_action"),title:e.title,promptTemplate:e.promptTemplate,targetInstanceId:e.targetInstanceId,sessionPreset:e.sessionPreset,displayOrder:t}));return await e.actions.replace(i.id,s),i}),s=await this.project(i);return this.onChange?.("created",s),s}async retentionSettings(e){return gu.parse({maxIdleAiSessions:(await this.require(e)).maxIdleAiSessions})}async update(e,t,n=!0){const i=Uu.parse(t),s=(new Date).toISOString(),o=await this.repository.transaction(async t=>{if(!await t.stories.get(e))throw ap("STORY_NOT_FOUND","Story was not found.",404);if(await t.deletionIntents.get(e))throw ap("STORY_DELETING","Story is being deleted.",409);if(void 0!==i.actions){const n=await t.actions.list(e),s=new Set(i.actions.flatMap(e=>e.id?[e.id]:[])),o=n.map(e=>e.id).filter(e=>!s.has(e)),r=await t.automations.referencingActions(e,o);if(r.length)throw ap("STORY_ACTION_AUTOMATION_IN_USE","Story Action is referenced by an Automation.",409,{automationIds:r.map(e=>e.id)});await t.actions.replace(e,i.actions.map((t,n)=>({storyId:e,id:t.id\|\|Ka("story_action"),title:t.title,promptTemplate:t.promptTemplate,targetInstanceId:t.targetInstanceId,sessionPreset:t.sessionPreset,displayOrder:n})))}return t.stories.update(e,{...void 0!==i.title?{title:i.title}:{},...void 0!==i.description?{description:i.description\|\|null}:{},...void 0!==i.maxIdleAiSessions?{maxIdleAiSessions:i.maxIdleAiSessions}:{},updatedAt:s})}),r=await this.project(o);return n&&this.onChange?.("updated",r),r}async archive(e){return this.setArchived(e,!0)}async restore(e){return this.setArchived(e,!1)}async setArchived(e,t){await this.require(e);const n=(new Date).toISOString(),i=await this.repository.stories.update(e,{archivedAt:t?n:null,updatedAt:n}),s=await this.project(i);return this.onChange?.(t?"archived":"restored",s),s}async deleteRecord(e){const t=await this.get(e);if(!t)return!1;const n=await this.repository.stories.delete(e);return n&&this.onChange?.("deleted",t),n}notifyDeleted(e){this.onChange?.("deleted",e)}notifyUpdated(e){this.onChange?.("updated",e)}async listContent(e){const t=await this.require(e);return(await this.project(t)).documents}async pageContent(e,t,n){const i=await this.require(e),{items:s,totalItems:o}=await this.repository.documents.page(e,t,n),r=Math.ceil(o/n);return{storyCreatedAt:i.createdAt,documents:s,pagination:{page:t,pageSize:n,totalItems:o,totalPages:r,hasMore:tn<o}}}async readContent(e,n){const i=await this.coordinator.acquire(e);try{await this.require(e);const s=fu.parse(n);if(!await this.repository.documents.get(e,s))throw ap("STORY_CONTENT_NOT_INDEXED","Story content is not indexed.",404);const o=this.openRegularFileWithinRoot(e,s),r=t.createReadStream("",{fd:o.fd,autoClose:!0});let a=!1;const c=()=>{a\|\|(a=!0,i())};return r.once("close",c),r.once("error",c),{stream:r,size:o.size,revision:o.revision}}catch(t){if(i(),"ENOENT"===t.code)throw await this.removeMissingDocument(e,n),ap("STORY_CONTENT_NOT_FOUND","Story content file was not found.",404);throw t}}async writeContent(e,i){return this.coordinator.run(e,async()=>{if((await this.require(e)).archivedAt)throw ap("STORY_ARCHIVED","Archived Story content is read-only.",409);const s=fu.parse(i.storyPath),o=await this.repository.documents.get(e,s);if(o){if(!i.expectedRevision)throw ap("STORY_REVISION_REQUIRED","expectedRevision is required when replacing Story content.",409);const n=this.openRegularFileWithinRoot(e,s);if(t.closeSync(n.fd),n.revision!==i.expectedRevision)throw ap("STORY_REVISION_CONFLICT","Story content changed since it was read.",409)}else if(!i.title?.trim())throw ap("STORY_CONTENT_TITLE_REQUIRED","A title is required for new Story content.",400);this.ensureStoryParent(e,s);const r=Ka("story_file_mutation"),a=this.filePath(e,s),c=`${a}.${r}.tmp`,d=`${a}.${r}.bak`,l=(new Date).toISOString();if(!o&&t.existsSync(a))throw ap("STORY_PATH_CONFLICT","Story path already exists on disk.",409);await this.repository.fileMutations.insert({id:r,storyId:e,operation:"write",storyPath:s,title:i.title?.trim(),temporaryName:c,backupName:d,phase:"receiving",createdAt:l,updatedAt:l});let u=0,p=!1;try{const l=new h.Transform({transform:(e,t,n)=>{u+=e.byteLength,n(u>this.maxFileBytes?ap("STORY_FILE_TOO_LARGE","Story content exceeds the node limit.",413):null,e)}});await f.pipeline(i.stream,l,t.createWriteStream(c,{flags:"wx",mode:384})),this.fsyncFile(c),await this.repository.fileMutations.update(r,{phase:"prepared",updatedAt:(new Date).toISOString()}),o&&t.renameSync(a,d),t.renameSync(c,a),this.fsyncDirectory(n.dirname(a)),await this.repository.fileMutations.update(r,{phase:"files-staged",updatedAt:(new Date).toISOString()}),await this.repository.transaction(async t=>{const n=await t.stories.get(e);if(!n)throw ap("STORY_NOT_FOUND","Story was not found.",404);if(o)await t.documents.update(e,s,{title:i.title?.trim()\|\|o.title});else{const o=await t.documents.list(e);await t.documents.insert({storyId:e,storyPath:s,title:i.title.trim(),indexedSequence:n.nextDocumentSequence,displayOrder:o.length}),await t.stories.update(e,{nextDocumentSequence:n.nextDocumentSequence+1,updatedAt:(new Date).toISOString()})}o&&await t.stories.update(e,{updatedAt:(new Date).toISOString()}),await t.fileMutations.update(r,{phase:"database-committed",updatedAt:(new Date).toISOString()})}),p=!0,t.rmSync(d,{force:!0}),await this.repository.fileMutations.update(r,{phase:"cleanup",updatedAt:(new Date).toISOString()}),await this.repository.fileMutations.delete(r);const m=this.openRegularFileWithinRoot(e,s);t.closeSync(m.fd);const g=await this.get(e);return g&&this.onChange?.("content.written",g),{storyPath:s,revision:m.revision,size:u}}catch(e){throw p\|\|await this.rollbackFileMutation(r,a,c,d,Boolean(o)),e}})}async updateDocument(e,i,s){return this.coordinator.run(e,async()=>{if((await this.require(e)).archivedAt)throw ap("STORY_ARCHIVED","Archived Story content is read-only.",409);const o=fu.parse(i),r=await this.repository.documents.get(e,o);if(!r)throw ap("STORY_CONTENT_NOT_INDEXED","Story content is not indexed.",404);const a=s.storyPath?fu.parse(s.storyPath):o;if(a!==o&&await this.repository.documents.get(e,a))throw ap("STORY_PATH_CONFLICT","Story path is already indexed.",409);if(a===o)await this.repository.transaction(async t=>{await t.documents.update(e,o,{title:s.title?.trim()\|\|r.title}),await t.stories.update(e,{updatedAt:(new Date).toISOString()})});else{this.openAndClose(e,o),this.ensureStoryParent(e,a);const i=this.filePath(e,o),c=this.filePath(e,a);if(t.existsSync(c))throw ap("STORY_PATH_CONFLICT","Story path already exists on disk.",409);const d=Ka("story_file_mutation"),l=(new Date).toISOString();await this.repository.fileMutations.insert({id:d,storyId:e,operation:"rename",storyPath:o,nextStoryPath:a,title:s.title?.trim(),temporaryName:i,backupName:c,phase:"prepared",createdAt:l,updatedAt:l});let u=!1;try{t.renameSync(i,c),this.fsyncDirectory(n.dirname(i)),n.dirname(i)!==n.dirname(c)&&this.fsyncDirectory(n.dirname(c)),await this.repository.fileMutations.update(d,{phase:"files-staged",updatedAt:(new Date).toISOString()}),await this.repository.transaction(async t=>{await t.documents.replacePath(e,o,{...r,storyPath:a,title:s.title?.trim()\|\|r.title}),await t.stories.update(e,{updatedAt:(new Date).toISOString()}),await t.fileMutations.update(d,{phase:"database-committed",updatedAt:(new Date).toISOString()})}),u=!0,await this.repository.fileMutations.update(d,{phase:"cleanup",updatedAt:(new Date).toISOString()}),await this.repository.fileMutations.delete(d)}catch(e){throw u\|\|(t.existsSync(c)&&!t.existsSync(i)&&t.renameSync(c,i),await this.repository.fileMutations.delete(d)),e}}const c=await this.get(e);return this.onChange?.("document.updated",c),c})}async reorderDocuments(e,t){const{storyPaths:n}=Hu.parse(t),i=(await this.repository.documents.list(e)).map(e=>e.storyPath);if(n.length!==i.length\|\|new Set(n).size!==n.length\|\|i.some(e=>!n.includes(e)))throw ap("STORY_DOCUMENT_ORDER_INVALID","Document order must contain every indexed storyPath exactly once.",400);await this.repository.transaction(async t=>{await t.documents.reorder(e,n),await t.stories.update(e,{updatedAt:(new Date).toISOString()})});const s=await this.get(e);return this.onChange?.("document.reordered",s),s}async deleteDocument(e,i){return this.coordinator.run(e,async()=>{if((await this.require(e)).archivedAt)throw ap("STORY_ARCHIVED","Archived Story content is read-only.",409);const s=fu.parse(i);if(!await this.repository.documents.get(e,s))return!1;const o=this.filePath(e,s),r=`${o}.${Ka("story_file_mutation")}.deleted`,a=Ka("story_file_mutation"),c=(new Date).toISOString();await this.repository.fileMutations.insert({id:a,storyId:e,operation:"delete",storyPath:s,backupName:r,phase:"prepared",createdAt:c,updatedAt:c});let d=!1;try{this.openAndClose(e,s),t.renameSync(o,r),this.fsyncDirectory(n.dirname(o)),await this.repository.fileMutations.update(a,{phase:"files-staged",updatedAt:(new Date).toISOString()}),await this.repository.transaction(async t=>{await t.documents.delete(e,s),await t.stories.update(e,{updatedAt:(new Date).toISOString()}),await t.fileMutations.update(a,{phase:"database-committed",updatedAt:(new Date).toISOString()})}),d=!0,t.rmSync(r,{force:!0}),await this.repository.fileMutations.update(a,{phase:"cleanup",updatedAt:(new Date).toISOString()}),await this.repository.fileMutations.delete(a)}catch(e){throw d\|\|(t.existsSync(r)&&!t.existsSync(o)&&t.renameSync(r,o),await this.repository.fileMutations.delete(a)),e}const l=await this.get(e);return l&&this.onChange?.("document.deleted",l),!0})}stopAccepting(){this.coordinator.stopAccepting()}drain(){return this.coordinator.drain()}async project(e){const n=(await this.repository.actions.list(e.id)).map(({storyId:e,displayOrder:t,sessionPreset:n,...i})=>_u.parse({...i,sessionPreset:n\|\|void 0})),i=await this.repository.documents.list(e.id),s=[];for(const n of i)try{const i=this.openRegularFileWithinRoot(e.id,n.storyPath);t.closeSync(i.fd),s.push({title:n.title,storyPath:n.storyPath,revision:i.revision})}catch(t){if("ENOENT"!==t.code)throw t;await this.removeMissingDocument(e.id,n.storyPath)}return ju.parse({id:e.id,ownerNodeId:this.ownerNodeId,title:e.title,description:e.description\|\|void 0,actions:n,documents:s,createdAt:e.createdAt,updatedAt:e.updatedAt,archivedAt:e.archivedAt\|\|void 0})}storyRoot(e){return n.resolve(this.paths.storyContentDir,ju.shape.id.parse(e))}filePath(e,t){const i=this.storyRoot(e),s=n.resolve(i,...fu.parse(t).split("/"));if(s===i\|\|!s.startsWith(`${i}${n.sep}`))throw ap("STORY_PATH_OUTSIDE_ROOT","Story path is outside the Story directory.",400);return s}ensureStoryParent(e,i){const s=this.filePath(e,i);try{const e=t.lstatSync(this.paths.storyContentDir);if(e.isSymbolicLink()\|\|!e.isDirectory())throw ap("STORY_PATH_UNSAFE","Story content root must be a real directory.",409)}catch(e){if("ENOENT"!==e.code)throw e;t.mkdirSync(this.paths.storyContentDir,{recursive:!0,mode:448})}t.chmodSync(this.paths.storyContentDir,448);let o=this.paths.storyContentDir;for(const e of n.relative(this.paths.storyContentDir,n.dirname(s)).split(n.sep).filter(Boolean)){o=n.join(o,e);try{const e=t.lstatSync(o);if(e.isSymbolicLink()\|\|!e.isDirectory())throw ap("STORY_PATH_UNSAFE","Story path parent must be a real directory.",409)}catch(e){if("ENOENT"!==e.code)throw e;t.mkdirSync(o,{mode:448})}t.chmodSync(o,448)}}openRegularFileWithinRoot(e,i){const s=this.filePath(e,i);this.assertExistingParentsSafe(this.storyRoot(e),n.dirname(s));const o="number"==typeof t.constants.O_NOFOLLOW?t.constants.O_NOFOLLOW:0;if(!o)throw ap("STORY_NOFOLLOW_UNAVAILABLE","Safe no-follow file access is unavailable on this platform.",500);const r=t.openSync(s,t.constants.O_RDONLY\|o);try{const e=t.fstatSync(r);if(!e.isFile())throw ap("STORY_CONTENT_NOT_FILE","Story content must be a regular file.",409);if(e.size>this.maxFileBytes)throw ap("STORY_FILE_TOO_LARGE","Story content exceeds the node limit.",413);const n=d.createHash("sha256"),i=Buffer.allocUnsafe(65536);let s=0;for(;s<e.size;){const o=t.readSync(r,i,0,Math.min(i.length,e.size-s),s);if(!o)break;n.update(i.subarray(0,o)),s+=o}return{fd:r,size:e.size,revision:n.digest("hex")}}catch(e){throw t.closeSync(r),e}}assertExistingParentsSafe(e,i){const s=n.relative(this.paths.storyContentDir,i);let o=this.paths.storyContentDir;for(const e of s.split(n.sep).filter(Boolean)){o=n.join(o,e);const i=t.lstatSync(o);if(i.isSymbolicLink()\|\|!i.isDirectory())throw ap("STORY_PATH_UNSAFE","Story path parent must be a real directory.",409)}if(!i.startsWith(e))throw ap("STORY_PATH_OUTSIDE_ROOT","Story path is outside the Story directory.",400)}openAndClose(e,n){const i=this.openRegularFileWithinRoot(e,n);t.closeSync(i.fd)}fsyncFile(e){const n=t.openSync(e,"r");try{t.fsyncSync(n)}finally{t.closeSync(n)}}fsyncDirectory(e){if("win32"===process.platform)return;const n=t.openSync(e,"r");try{t.fsyncSync(n)}finally{t.closeSync(n)}}async removeMissingDocument(e,t){if(!await this.repository.documents.get(e,t))return;await this.repository.transaction(async n=>{await n.documents.delete(e,t),await n.stories.update(e,{updatedAt:(new Date).toISOString()})});const n=await this.get(e);n&&this.onChange?.("document.deleted",n)}async rollbackFileMutation(e,n,i,s,o){t.rmSync(i,{force:!0}),o&&t.existsSync(s)?(t.rmSync(n,{force:!0}),t.renameSync(s,n)):o\|\|t.rmSync(n,{force:!0}),await this.repository.fileMutations.delete(e)}async recoverFileMutations(){for(const e of await this.repository.fileMutations.list())await this.coordinator.run(e.storyId,async()=>{const n=this.filePath(e.storyId,e.nextStoryPath\|\|e.storyPath);if("database-committed"===e.phase\|\|"cleanup"===e.phase)"write"===e.operation?(e.temporaryName&&t.rmSync(e.temporaryName,{force:!0}),e.backupName&&t.rmSync(e.backupName,{force:!0})):"delete"===e.operation&&e.backupName&&t.rmSync(e.backupName,{force:!0});else if("write"===e.operation){const i=Boolean(e.temporaryName&&t.existsSync(e.temporaryName)),s=Boolean(await this.repository.documents.get(e.storyId,e.storyPath));e.backupName&&t.existsSync(e.backupName)?(t.rmSync(n,{force:!0}),t.renameSync(e.backupName,n)):s\|\|"files-staged"!==e.phase&&("prepared"!==e.phase\|\|i)\|\|t.rmSync(n,{force:!0}),e.temporaryName&&t.rmSync(e.temporaryName,{force:!0})}else"rename"===e.operation&&e.temporaryName&&t.existsSync(n)&&!t.existsSync(e.temporaryName)?t.renameSync(n,e.temporaryName):"delete"===e.operation&&e.backupName&&t.existsSync(e.backupName)&&!t.existsSync(n)&&t.renameSync(e.backupName,n);await this.repository.fileMutations.delete(e.id)})}}function ap(e,t,n,i){return Object.assign(new Error(t),{code:e,statusCode:n,...void 0===i?{}:{details:i}})}const cp=a.z.object({storyId:a.z.string().trim().min(1).max(120),actionId:a.z.string().trim().min(1).max(120),targetInstanceId:a.z.string().trim().min(1).max(120),prompt:a.z.string().trim().min(1).max(32e3),sessionPreset:Au.optional(),cwd:a.z.string().trim().min(1).max(4096)}).strict(),dp=bu,lp=wu,up=zu,pp=Ru.extend({executionKey:a.z.string().trim().min(1).max(160),requestFingerprint:a.z.string().regex(/^[a-f0-9]{64}$/),executionInput:cp}).strict(),mp=new Set(["completed","failed","skipped"]),hp={queued:["dispatching","skipped"],dispatching:["running","failed"],running:["completed","failed"],completed:[],failed:[],skipped:[]};class gp{repository;now;constructor(e,t=()=>new Date){this.repository=e,this.now=t}async init(){}async list(e){return(await this.repository.automations.list(e)).map(fp)}async stored(e){const t=await this.repository.automations.get(e);return t?function(e){return{...fp(e),scheduleAnchorAt:e.scheduleAnchorAt}}(t):void 0}async get(e){const t=await this.repository.automations.get(e);return t?fp(t):void 0}async create(e){const t=vu.parse(e),n=this.now().toISOString();return fp(await this.repository.automations.insert({id:Ka("story_automation"),storyId:t.storyId,actionId:t.actionId,schedule:dp.parse(t.schedule),enabled:t.enabled,policy:lp.parse(t.policy),scheduleAnchorAt:n,createdAt:n,updatedAt:n}))}async update(e,t){const n=Ou.parse(t),i=await this.repository.automations.get(e);if(!i)return;const s=this.now().toISOString(),o=void 0!==n.schedule\|\|!0===n.enabled&&!i.enabled,r=await this.repository.automations.update(e,{...n,...o?{scheduleAnchorAt:s}:{},updatedAt:s});return r?fp(r):void 0}referencingActions(e,t){return this.repository.automations.referencingActions(e,[...t])}async hasActiveRuns(e){return(await this.repository.runs.list(e)).some(e=>!mp.has(e.status))}activeRunsForStory(e){return this.repository.runs.activeForStory(e).then(e=>e.map(yp))}async delete(e){if(!await this.repository.automations.get(e))return!1;if(await this.hasActiveRuns(e))throw Ap("STORY_AUTOMATION_RUN_ACTIVE","Automation has a non-terminal run.",409);return this.repository.automations.delete(e)}async deleteForStory(e){if((await this.activeRunsForStory(e)).length)throw Ap("STORY_AUTOMATION_RUN_ACTIVE","Story has a non-terminal Automation run.",409);await this.repository.automations.deleteForStory(e)}async createRun(e){const t=cp.parse(e.executionInput);return this.repository.transaction(async n=>{const i=await n.runs.byExecutionKey(e.executionKey);if(i)return yp(i);const s=await n.runs.insert({...e,executionInput:t,id:Ka("story_automation_run"),status:"queued",targetInstanceId:t.targetInstanceId,queuedAt:this.now().toISOString()});return await n.runs.trimTerminal(e.automationId,100),yp(s)})}async transition(e,t,n={}){return this.repository.transaction(async i=>{const s=await i.runs.get(e);if(!s)throw Ap("STORY_AUTOMATION_RUN_NOT_FOUND","Automation run was not found.",404);const o=yp(s);if(o.status===t)return o;if(!hp[o.status].includes(t))throw Ap("STORY_AUTOMATION_RUN_TRANSITION_INVALID",`Cannot transition run from ${o.status} to ${t}.`,409);const r=this.now().toISOString(),a=await i.runs.update(e,{...n,status:t,..."dispatching"===t?{startedAt:r}:{},...mp.has(t)?{completedAt:r}:{}});return await i.runs.trimTerminal(o.automationId,100),yp(a)})}async runsFor(e){return(await this.repository.runs.list(e)).map(Ip)}async run(e){const t=await this.repository.runs.get(e);return t?Ip(t):void 0}async runByExecutionKey(e){const t=await this.repository.runs.byExecutionKey(e);return t?yp(t):void 0}async pendingRuns(){return(await this.repository.runs.pending()).map(yp)}}function fp(e){return Su.parse({id:e.id,storyId:e.storyId,actionId:e.actionId,schedule:dp.parse(e.schedule),enabled:e.enabled,policy:lp.parse(e.policy),createdAt:e.createdAt,updatedAt:e.updatedAt})}function yp(e){return pp.parse({...e,aiSessionId:e.aiSessionId\|\|void 0,startedAt:e.startedAt\|\|void 0,completedAt:e.completedAt\|\|void 0,error:e.error?up.parse(e.error):void 0,executionInput:cp.parse(e.executionInput)})}function Ip(e){const{executionKey:t,requestFingerprint:n,executionInput:i,...s}=yp(e);return Ru.parse(s)}function Ap(e,t,n){return Object.assign(new Error(t),{code:e,statusCode:n})}class _p{state;stories;automations;scheduler;repository;constructor(e,t,n,i,s){this.state=e,this.stories=t,this.automations=n,this.scheduler=i,this.repository=s}async init(){t.mkdirSync(this.state.paths.storyTrashDir,{recursive:!0,mode:448});for(const e of await this.repository.deletionIntents.list()){const i=await this.repository.stories.get(e.storyId),s=this.storyRoot(e.storyId),o=e.trashName?n.join(this.state.paths.storyTrashDir,e.trashName):void 0;i?o&&t.existsSync(o)&&!t.existsSync(s)&&t.renameSync(o,s):o&&t.rmSync(o,{recursive:!0,force:!0}),await this.repository.deletionIntents.delete(e.storyId)}}async update(e,t){const n=Uu.parse(t),i=await this.stories.update(e,n);return await this.scheduler.refresh(),i}async createAutomationWithAction(e,t){const n=Nu.parse(t),i=await this.stories.automationContext(e);if(!i)throw Ep("STORY_NOT_FOUND","Story was not found.",404);if(i.archivedAt)throw Ep("STORY_ARCHIVED","Archived Story cannot create an Automation.",409);if(i.actions.some(e=>e.id===n.action.id))throw Ep("STORY_ACTION_ID_CONFLICT","Story Action id already exists.",409);const s={storyId:e,actionId:n.action.id,...n.automation};await this.scheduler.validateCreate(s,{...i,actions:[...i.actions,n.action]});let o="";await this.repository.transaction(async t=>{await t.actions.replace(e,[...i.actions,n.action].map((t,n)=>({storyId:e,id:t.id,title:t.title,promptTemplate:t.promptTemplate,targetInstanceId:t.targetInstanceId,sessionPreset:t.sessionPreset,displayOrder:n}))),await t.stories.update(e,{updatedAt:(new Date).toISOString()}),o=(await this.automations.create(s)).id});const r=await this.stories.get(e);return r&&this.stories.notifyUpdated(r),this.scheduler.activateCreated(o)}async archive(e){const t=await this.stories.archive(e);return await this.scheduler.refresh(),t}async restore(e){const t=await this.stories.restore(e);return await this.scheduler.refresh(),t}async delete(e){return this.stories.coordinator.run(e,async()=>{const t=await this.stories.get(e);return!!t&&(await this.assertStoryCanBeDeleted(e),this.deleteCoordinated(t))})}async assertStoryCanBeDeleted(e){const t=this.state.listInstances().flatMap(t=>t.aiSessions.sessions.filter(t=>t.storyId===e).map(e=>({instanceId:t.id,aiSessionId:e.id})));if(t.length)throw Ep("STORY_IN_USE","Story is still referenced by an AI Session.",409,{sessions:t});const n=await this.automations.activeRunsForStory(e);if(n.length)throw Ep("STORY_AUTOMATION_RUN_ACTIVE","Story has a non-terminal Automation run.",409,{runIds:n.map(e=>e.id)})}async deleteCoordinated(e){const i=e.id;await this.scheduler.clearStory(i);const s=this.storyRoot(i),o=`${i}-${Date.now()}-${Math.random().toString(16).slice(2)}`,r=n.join(this.state.paths.storyTrashDir,o),a=(new Date).toISOString();await this.repository.deletionIntents.put({storyId:i,phase:"prepared",trashName:null,createdAt:a,updatedAt:a});try{let c=!1;return t.existsSync(s)&&(t.renameSync(s,r),this.fsyncDirectory(n.dirname(s)),this.fsyncDirectory(n.dirname(r)),c=!0),await this.repository.deletionIntents.put({storyId:i,phase:"files-staged",trashName:c?o:null,createdAt:a,updatedAt:(new Date).toISOString()}),await this.repository.transaction(async e=>{const t=await e.runs.activeForStory(i);if(t.length)throw Ep("STORY_AUTOMATION_RUN_ACTIVE","Story has a non-terminal Automation run.",409,{runIds:t.map(e=>e.id)});await e.automations.deleteForStory(i),await e.stories.delete(i),await e.deletionIntents.put({storyId:i,phase:"database-committed",trashName:c?o:null,createdAt:a,updatedAt:(new Date).toISOString()})}),c&&t.rmSync(r,{recursive:!0,force:!0}),await this.repository.deletionIntents.put({storyId:i,phase:"cleanup",trashName:c?o:null,createdAt:a,updatedAt:(new Date).toISOString()}),await this.repository.deletionIntents.delete(i),this.stories.notifyDeleted(e),!0}catch(e){throw await this.repository.stories.get(i)&&(t.existsSync(r)&&!t.existsSync(s)&&t.renameSync(r,s),await this.repository.deletionIntents.delete(i)),e}}storyRoot(e){return n.join(this.state.paths.storyContentDir,ue.parse(e))}fsyncDirectory(e){if("win32"===process.platform)return;const n=t.openSync(e,"r");try{t.fsyncSync(n)}finally{t.closeSync(n)}}}function Ep(e,t,n,i){return Object.assign(new Error(t),{code:e,statusCode:n,details:i})}class Tp{timers=new Map;running=new Map;queued=new Map;lastStartedAt=new Map;accepting=!0;adapter;maxQueuedPerJob;now;constructor(e,t=100,n=Date.now){this.adapter=e,this.maxQueuedPerJob=t,this.now=n}start(){this.accepting=!0}setTimer(e,t){const n=this.timers.get(e);n&&clearTimeout(n),this.timers.set(e,t)}clearTimer(e){const t=this.timers.get(e);t&&clearTimeout(t),this.timers.delete(e)}clearQueued(e,t="job-disabled"){const n=this.queued.get(e);if(n){for(const e of n)this.adapter.skipped(e.event,t);this.queued.delete(e)}}submit(e,t,n){if(!this.accepting)return this.adapter.skipped(t,"scheduler-stopped"),"skipped";const i=this.now(),s=this.lastStartedAt.get(e);if(n.cooldownMs&&void 0!==s&&i-s<n.cooldownMs)return this.adapter.skipped(t,"cooldown"),"skipped";if((this.running.get(e)??0)>=n.maxConcurrentRuns){if("skip"===n.whenBusy)return this.adapter.skipped(t,"busy"),"skipped";const i=this.queued.get(e)??[];return i.length>=this.maxQueuedPerJob?(this.adapter.skipped(t,"queue-full"),"skipped"):(i.push({event:t,policy:n}),this.queued.set(e,i),"queued")}return this.begin(e,t,n),"started"}stop(){this.accepting=!1;for(const e of this.timers.values())clearTimeout(e);this.timers.clear();for(const e of this.queued.values())for(const t of e)this.adapter.skipped(t.event,"scheduler-stopped");this.queued.clear()}begin(e,t,n){this.running.set(e,(this.running.get(e)??0)+1),this.lastStartedAt.set(e,this.now());const i=()=>{const t=(this.running.get(e)??1)-1;t>0?this.running.set(e,t):this.running.delete(e),this.drain(e)};this.adapter.execute(t).then(i,i)}drain(e){if(!this.accepting)return;const t=this.queued.get(e);if(!t?.length)return;const n=t[0];(this.running.get(e)??0)>=n.policy.maxConcurrentRuns\|\|(t.shift(),t.length\|\|this.queued.delete(e),this.begin(e,n.event,n.policy))}}function bp(e,t){return new Date(Date.UTC(e,t+1,0)).getUTCDate()}function wp(e,t,n,i,s,o){return S.CronExpressionParser.parse(`0 ${i} ${n} ${e} ${t} `,{currentDate:o,strict:!0,tz:s}).next().toDate()}function Sp(e,t,n){return`sch_${d.createHash("sha256").update(`${e}\0${t}\0${n}`).digest("hex").slice(0,32)}`}a.z.object({agent:we,cwd:ut,cwdFolderId:a.z.string().trim().min(1).max(120).optional(),gitSelection:ht.optional(),message:a.z.string().trim().min(1).max(32e3),permissionMode:et.optional(),clientRequestId:a.z.string().trim().min(1).max(160),modelSelection:pt.optional(),reasoningEffort:mt.optional(),storyId:ue}).strict();const vp=a.z.object({disposition:a.z.enum(["created","already-created"]),aiSessionId:a.z.string().trim().min(1).max(120)}).strict();class Np{runtime;nextRunAt=new Map;completion=new Map;registeredAutomationIds=new Set;backgroundMutations=new Set;state;stories;automations;fetchImpl;resolveInstanceWeb;publish;now;constructor(e,t,n,i,s,o,r=()=>new Date){this.state=e,this.stories=t,this.automations=n,this.fetchImpl=i,this.resolveInstanceWeb=s,this.publish=o,this.now=r,this.runtime=new Tp({execute:({runId:e})=>this.executeRun(e),skipped:({runId:e},t)=>this.trackMutation(this.skipRun(e,t))})}async start(){this.runtime.stop(),this.runtime.start(),this.nextRunAt.clear(),this.registeredAutomationIds.clear();for(const e of await this.automations.list())await this.register(e);for(const e of await this.automations.pendingRuns())await this.resume(e);await this.reconcileInstances()}async stop(){this.runtime.stop(),this.nextRunAt.clear(),await Promise.allSettled([...this.backgroundMutations])}async refresh(){for(const e of this.registeredAutomationIds)this.runtime.clearTimer(e);this.registeredAutomationIds.clear(),this.nextRunAt.clear();for(const e of await this.automations.list())e.enabled&&!await this.blockedReason(e)\|\|this.runtime.clearQueued(e.id),await this.register(e)}async clearStory(e){for(const t of await this.automations.list(e))this.runtime.clearTimer(t.id),this.runtime.clearQueued(t.id),this.registeredAutomationIds.delete(t.id),this.nextRunAt.delete(t.id)}async status(e){const t=await this.requireAutomation(e),n=await this.automations.runsFor(e),i=n.filter(e=>!zp(e.status)),s=await this.blockedReason(t),o=n.find(e=>zp(e.status)),r=t.enabled?s?"blocked":i.length?"running":"failed"===o?.status?"error":"scheduled":"disabled";return ku.parse({automation:t,effectiveStatus:r,blockedReason:s,nextRunAt:this.nextRunAt.get(e),currentRuns:i.slice(0,20),lastRun:o})}async list(e){return Promise.all((await this.automations.list(e)).map(e=>this.status(e.id)))}async create(e){const t=await this.validateInput(e),n=await this.automations.create(t);return await this.register(n),await this.publishStatus(n.id,"created"),this.status(n.id)}async validateCreate(e,t){const n=vu.parse(e);return await this.validateReferences({...n,id:"validation",createdAt:this.now().toISOString(),updatedAt:this.now().toISOString()},t),n}async activateCreated(e){const t=await this.requireAutomation(e);return await this.register(t),await this.publishStatus(e,"created"),this.status(e)}async update(e,t){const n={...await this.requireAutomation(e),...t};if(await this.validateReferences(n),await this.automations.update(e,t))return await this.refresh(),await this.publishStatus(e,"updated"),this.status(e)}setEnabled(e,t){return this.update(e,{enabled:t})}async delete(e){const t=await this.requireAutomation(e),n=await this.automations.delete(e);return n&&(this.runtime.clearTimer(e),this.nextRunAt.delete(e),this.publish?.(Mu,{storyId:t.storyId,automationId:e,change:"deleted"},{nodeId:this.state.node.id})),n}async manualRun(e,t){const n=await this.requireAutomation(e),i=this.now().toISOString(),s=Sp(e,"manual",t.clientRequestId),o=await this.automations.runByExecutionKey(s);if(o)return this.automations.run(o.id);const r=await this.prepareRun(n,"manual",i,s);return this.runtime.submit(e,{runId:r.id},n.policy),this.automations.run(r.id)}async runs(e){return await this.requireAutomation(e),this.automations.runsFor(e)}async reconcileInstances(e){for(const t of(await this.automations.pendingRuns()).filter(e=>"running"===e.status&&e.aiSessionId)){if(e&&t.targetInstanceId!==e)continue;const n=this.state.listInstances().find(e=>e.id===t.targetInstanceId),i=n?.aiSessions.sessions.find(e=>e.id===t.aiSessionId);if(!i&&e!==t.targetInstanceId)continue;if(i&&"idle"!==i.status&&"failed"!==i.status)continue;const s="failed"===i?.status?"failed":"completed",o="failed"===s?{code:"AI_SESSION_FAILED",message:"The automated AI Session failed."}:void 0,r=await this.automations.transition(t.id,s,o?{error:o}:{});this.resolveCompletion(t.id),await this.publishRun(r),await this.publishStatus(t.automationId,"status")}}async register(e){if(!e.enabled\|\|await this.blockedReason(e))return;const t=await this.automations.stored(e.id);if(!t)return;const n=function(e){const t=e.schedule;if("interval"===t.scheduleKind)return{type:"interval",intervalMs:t.intervalMs};if("daily"===t.scheduleKind)return{type:"daily",timeOfDay:t.timeOfDay,timezone:t.timezone};if("weekly"===t.scheduleKind)return{type:"weekly",weekdays:t.weekdays,timeOfDay:t.timeOfDay,timezone:t.timezone};if("monthly"===t.scheduleKind)return{type:"monthly",dayOfMonth:t.dayOfMonth,timeOfDay:t.timeOfDay,timezone:t.timezone};throw new Error(`Unsupported Story automation schedule kind: ${t.schedule.scheduleKind}`)}(e),i=function(e,t,n=t){if("interval"===e.type){const i=Math.max(0,t.getTime()-n.getTime()),s=Math.floor(i/e.intervalMs)+1;return new Date(n.getTime()+se.intervalMs)}const[i,s]=e.timeOfDay.split(":").map(Number);if("monthly"===e.type&&e.dayOfMonth<0)return function(e,t,n,i,s){const o=function(e,t){const n=new Intl.DateTimeFormat("en-US",{timeZone:t,year:"numeric",month:"2-digit",day:"2-digit"}).formatToParts(e),i=e=>Number(n.find(t=>t.type===e)?.value);return{year:i("year"),month:i("month")-1,day:i("day")}}(s,i),r=[];for(let a=0;a<12;a+=1){const c=new Date(Date.UTC(o.year,o.month+a,1)),d=c.getUTCFullYear(),l=c.getUTCMonth(),u=bp(d,l)+e+1;r.push(wp(u,l+1,t,n,i,s))}return r.sort((e,t)=>e.getTime()-t.getTime()),r[0]}(e.dayOfMonth,i,s,e.timezone,t);const o="weekly"===e.type?[...new Set(e.weekdays)].sort((e,t)=>e-t).join(","):"",r="monthly"===e.type?String(e.dayOfMonth):"";return S.CronExpressionParser.parse(`0 ${s} ${i} ${r} * ${o}`,{currentDate:t,strict:!0,tz:e.timezone}).next().toDate()}(n,this.now(),new Date(t.scheduleAnchorAt));this.nextRunAt.set(e.id,i.toISOString()),this.registeredAutomationIds.add(e.id);const s=setTimeout(()=>{this.trackMutation(this.handleTimer(e.id,i))},Math.max(1,i.getTime()-this.now().getTime()));s.unref?.(),this.runtime.setTimer(e.id,s)}async handleTimer(e,t){const n=await this.automations.get(e);if(!n?.enabled\|\|await this.blockedReason(n))return;const i=t.toISOString();try{const e=await this.prepareRun(n,"schedule",i,Sp(n.id,"schedule",i));this.runtime.submit(n.id,{runId:e.id},n.policy)}catch{await this.publishStatus(n.id,"status")}await this.register(n),await this.publishStatus(n.id,"status")}async prepareRun(e,t,n,i){const s=await this.executionInput(e),o=Op(s,i);return this.automations.createRun({automationId:e.id,eventType:t,scheduledFor:n,executionKey:i,requestFingerprint:(r=o,d.createHash("sha256").update(JSON.stringify(r)).digest("hex")),executionInput:s});var r}async resume(e){const t=await this.automations.get(e.automationId);t&&(e.status,this.runtime.submit(t.id,{runId:e.id},t.policy))}async executeRun(e){let t=(await this.automations.pendingRuns()).find(t=>t.id===e);if(t){if("queued"===t.status&&(t=await this.automations.transition(t.id,"dispatching")),"dispatching"===t.status)try{const e=this.state.requireInstance(t.targetInstanceId);if(!e.registrationToken)throw xp("STORY_AUTOMATION_INSTANCE_CREDENTIAL_MISSING","Target instance has no registration credential.",503);const n=`${await this.resolveInstanceWeb(e)}/api/internal/node-agent/story-automation/ai-sessions`;let i;try{i=await this.fetchImpl(n,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${e.registrationToken}`},body:JSON.stringify(Op(t.executionInput,t.executionKey))})}catch{return void await this.publishStatus(t.automationId,"status")}const s=await i.json().catch(()=>({}));if(!i.ok)throw xp(s.error?.code\|\|"STORY_AUTOMATION_DISPATCH_FAILED",s.error?.message\|\|`Target instance returned HTTP ${i.status}.`,i.status);const o=vp.parse(s.data);t=await this.automations.transition(t.id,"running",{aiSessionId:o.aiSessionId}),await this.publishRun(t)}catch(e){const n=await this.automations.transition(t.id,"failed",{error:Cp(e)});return await this.publishRun(n),void await this.publishStatus(t.automationId,"status")}await this.completionFor(t.id).promise}}async skipRun(e,t){const n=await this.automations.run(e);if(!n\|\|"queued"!==n.status)return;const i=await this.automations.transition(e,"skipped",{error:{code:`STORY_AUTOMATION_${t.replaceAll("-","_").toUpperCase()}`,message:Rp(t)}});await this.publishRun(i)}async executionInput(e,t){const n=t?.id===e.storyId?t:await this.stories.automationContext(e.storyId);if(!n)throw xp("STORY_NOT_FOUND","Story was not found.",404);if(n.archivedAt)throw xp("STORY_ARCHIVED","Archived Story cannot run Automation.",409);const i=n.actions.find(t=>t.id===e.actionId);if(!i)throw xp("STORY_ACTION_NOT_FOUND","Story Action was not found.",404);if(!i.targetInstanceId)throw xp("STORY_ACTION_TARGET_REQUIRED","Automated Story Action requires a target instance.",409);const s=this.state.requireInstance(i.targetInstanceId);return{storyId:n.id,actionId:i.id,targetInstanceId:s.id,prompt:i.promptTemplate,sessionPreset:i.sessionPreset,cwd:this.runtimeCwd(s,i.sessionPreset?.cwdFolderId)}}runtimeCwd(e,t){if(!t)return e.runtime.workspacePath\|\|e.workspace.path\|\|"/workspace";const i=this.state.localFolders.get(t);if(!i)throw xp("NODE_LOCAL_FOLDER_NOT_FOUND","Story Action working folder was not found.",404);if("local"===this.state.requireRuntime(e.runtimeId).type)return n.resolve(i.path);if("local-folder"!==e.source.type)throw xp("AI_SESSION_CWD_UNAVAILABLE","Working folder is unavailable for this instance source.",409);const s=n.relative(n.resolve(e.source.path),n.resolve(i.path));if(".."===s\|\|s.startsWith(`..${n.sep}`)\|\|n.isAbsolute(s))throw xp("AI_SESSION_CWD_OUTSIDE_WORKSPACE","Working folder is outside the instance workspace.",409);const o=e.runtime.workspacePath\|\|e.workspace.path\|\|"/workspace";return s?n.posix.join(o,...s.split(n.sep)):o}async validateInput(e){const t=vu.parse(e);return await this.validateReferences({...t,id:"validation",createdAt:this.now().toISOString(),updatedAt:this.now().toISOString()}),t}async validateReferences(e,t){await this.executionInput(e,t)}async blockedReason(e){try{return void await this.executionInput(e)}catch(e){const t=Cp(e);return["STORY_ARCHIVED","STORY_DELETING","STORY_NOT_FOUND","STORY_ACTION_NOT_FOUND","STORY_ACTION_TARGET_REQUIRED","NODE_INSTANCE_NOT_FOUND","STORY_NODE_MISMATCH"].includes(t.code)?t:void 0}}async requireAutomation(e){const t=await this.automations.get(e);if(!t)throw xp("STORY_AUTOMATION_NOT_FOUND","Story Automation was not found.",404);return t}completionFor(e){const t=this.completion.get(e);if(t)return t;let n;const i={promise:new Promise(e=>{n=e}),resolve:n};return this.completion.set(e,i),i}resolveCompletion(e){this.completion.get(e)?.resolve(),this.completion.delete(e)}trackMutation(e){return this.backgroundMutations.add(e),e.finally(()=>this.backgroundMutations.delete(e)),e}async publishRun(e){const t=await this.automations.run(e.id),n=await this.automations.get(e.automationId);t&&n&&this.publish?.(Mu,{storyId:n.storyId,automationId:n.id,change:"run",run:t},{nodeId:this.state.node.id,instanceId:e.targetInstanceId})}async publishStatus(e,t){const n=await this.status(e);this.publish?.(Mu,{storyId:n.automation.storyId,automationId:e,change:t,status:n},{nodeId:this.state.node.id})}}function Op(e,t){const n=e.sessionPreset;return{agent:n?.agent\|\|"codex",cwd:{type:"runtime-path",path:e.cwd},cwdFolderId:n?.cwdFolderId,gitSelection:n?.gitSelection,message:e.prompt,permissionMode:n?.permissionMode\|\|"ask",clientRequestId:t,modelSelection:n?.modelSelection,reasoningEffort:n?.reasoningEffort,storyId:e.storyId}}function zp(e){return"completed"===e\|\|"failed"===e\|\|"skipped"===e}function Cp(e){const t=e&&"object"==typeof e?e:void 0;return{code:"string"==typeof t?.code?t.code:"STORY_AUTOMATION_FAILED",message:"string"==typeof t?.message?t.message:String(e)}}function Rp(e){return{cooldown:"Skipped by cooldown policy.",busy:"Skipped because the concurrency limit was reached.","queue-full":"Skipped because the queue is full.","scheduler-stopped":"Skipped because the scheduler stopped.","job-disabled":"Skipped because the Automation was disabled or blocked."}[e]}function xp(e,t,n){return Object.assign(new Error(t),{code:e,statusCode:n})}class kp{closed=new Set;pending=new Set;reconciliation;state;stories;fetchImpl;resolveInstanceWeb;warn;constructor(e,t,n,i,s){this.state=e,this.stories=t,this.fetchImpl=n,this.resolveInstanceWeb=i,this.warn=s}reconcile(){if(this.reconciliation)return this.reconciliation;const e=this.reconcileOnce().finally(()=>{this.reconciliation===e&&(this.reconciliation=void 0)});return this.reconciliation=e,e}async reconcileOnce(){const e=new Map,t=new Set,n=[];for(const n of this.state.listInstances()){if(!n.registrationToken)continue;let i;try{i=await this.fetchImpl(`${await this.resolveInstanceWeb(n)}/api/internal/node-agent/ai-sessions/idle-retention`,{headers:{authorization:`Bearer ${n.registrationToken}`}})}catch(e){this.warn({instanceId:n.id,error:e instanceof Error?e.message:String(e)},"could not inspect Story idle sessions");continue}if(!i.ok)continue;const s=await i.json().catch(()=>({}));if(Array.isArray(s.data))for(const i of s.data){if(!i\|\|"object"!=typeof i)continue;const s=i;if("string"!=typeof s.sessionId\|\|"string"!=typeof s.storyId\|\|"idle"!==s.status)continue;if(void 0===Pp(s))continue;if(!await this.stories.exists(s.storyId))continue;const o=`${n.id}:${s.sessionId}`;if(t.add(o),this.closed.has(o))continue;const r=e.get(s.storyId)\|\|[];r.push({instance:n,sessionId:s.sessionId,storyId:s.storyId,status:"idle",completedAt:s.completedAt,updatedAt:s.updatedAt}),e.set(s.storyId,r)}}for(const[t,i]of e){const e=(await this.stories.retentionSettings(t)).maxIdleAiSessions;for(;i.length>e;){i.sort((e,t)=>Pp(e)-Pp(t)\|\|`${e.instance.id}:${e.sessionId}`.localeCompare(`${t.instance.id}:${t.sessionId}`));const e=i.shift(),s=`${e.instance.id}:${e.sessionId}`;this.pending.has(s)\|\|(this.pending.add(s),n.push(this.close(e,s).catch(n=>{this.warn({storyId:t,instanceId:e.instance.id,sessionId:e.sessionId,error:n instanceof Error?n.message:String(n)},"Story idle Session retention close failed"),setTimeout(()=>{this.reconcile()},5e3).unref?.()})))}}await Promise.all(n);for(const e of this.closed)t.has(e)\|\|this.closed.delete(e)}async close(e,t){try{const n=await this.fetchImpl(`${await this.resolveInstanceWeb(e.instance)}/api/internal/node-agent/ai-sessions/${encodeURIComponent(e.sessionId)}/close`,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${e.instance.registrationToken}`},body:JSON.stringify({clientRequestId:d.randomUUID()})});if(204===n.status)return;if(!n.ok)throw new Error(`HTTP ${n.status}`);this.closed.add(t)}finally{this.pending.delete(t)}}}class Dp{closed=new Set;pending=new Set;reconciliation;state;fetchImpl;resolveInstanceWeb;warn;constructor(e,t,n,i){this.state=e,this.fetchImpl=t,this.resolveInstanceWeb=n,this.warn=i}reconcile(){if(this.reconciliation)return this.reconciliation;const e=this.reconcileOnce().finally(()=>{this.reconciliation===e&&(this.reconciliation=void 0)});return this.reconciliation=e,e}async reconcileOnce(){const e=new Map,t=new Set,n=[];for(const n of this.state.listInstances()){if(!n.registrationToken)continue;let i;try{i=await this.fetchImpl(`${await this.resolveInstanceWeb(n)}/api/internal/node-agent/ai-sessions/instance-idle-retention`,{headers:{authorization:`Bearer ${n.registrationToken}`}})}catch(e){this.warn({instanceId:n.id,error:e instanceof Error?e.message:String(e)},"could not inspect instance idle sessions");continue}if(!i.ok)continue;const s=await i.json().catch(()=>({}));if(Array.isArray(s.data))for(const i of s.data){if(!i\|\|"object"!=typeof i)continue;const s=i;if("string"!=typeof s.sessionId\|\|"idle"!==s.status)continue;if(void 0===Pp(s))continue;const o=`${n.id}:${s.sessionId}`;if(t.add(o),this.closed.has(o))continue;const r=e.get(n.id)\|\|[];r.push({instance:n,sessionId:s.sessionId,status:"idle",completedAt:s.completedAt,updatedAt:s.updatedAt}),e.set(n.id,r)}}for(const[t,i]of e)for(;i.length>100;){i.sort((e,t)=>Pp(e)-Pp(t)\|\|`${e.instance.id}:${e.sessionId}`.localeCompare(`${t.instance.id}:${t.sessionId}`));const e=i.shift(),s=`${e.instance.id}:${e.sessionId}`;this.pending.has(s)\|\|(this.pending.add(s),n.push(this.close(e,s).catch(n=>{this.warn({instanceId:t,sessionId:e.sessionId,error:n instanceof Error?n.message:String(n)},"Instance idle Session retention close failed"),setTimeout(()=>{this.reconcile()},5e3).unref?.()})))}await Promise.all(n);for(const e of this.closed)t.has(e)\|\|this.closed.delete(e)}async close(e,t){try{const n=await this.fetchImpl(`${await this.resolveInstanceWeb(e.instance)}/api/internal/node-agent/ai-sessions/${encodeURIComponent(e.sessionId)}/close`,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${e.instance.registrationToken}`},body:JSON.stringify({clientRequestId:d.randomUUID()})});if(204===n.status)return;if(!n.ok)throw new Error(`HTTP ${n.status}`);this.closed.add(t)}finally{this.pending.delete(t)}}}function Pp(e){return Lp(e.completedAt)??Lp(e.updatedAt)}function Lp(e){const t=e?Date.parse(e):Number.NEGATIVE_INFINITY;return Number.isFinite(t)?t:void 0}const Mp=a.z.object({path:a.z.string().trim().min(1).max(2048),method:a.z.string().trim().min(1).max(20).default("GET"),headers:a.z.record(a.z.string(),a.z.string()).default({}),body:a.z.string().optional(),bodyBase64:a.z.string().optional()}).strict(),jp=a.z.object({id:a.z.string().trim().min(1).max(120).optional(),name:a.z.string().trim().max(160),path:a.z.string().trim().min(1).max(4096),defaultImageSelection:di.optional(),labels:a.z.record(a.z.string(),a.z.string()).default({})}).strict(),Fp=a.z.object({name:a.z.string().trim().max(160)}).strict(),Up=a.z.object({path:a.z.string().trim().min(1).max(4096).optional(),depth:a.z.coerce.number().int().min(0).max(1).default(0)}).strict(),$p=a.z.object({id:a.z.string().trim().min(1).max(120).optional(),name:a.z.string().trim().min(1).max(160).optional(),runtimeId:a.z.string().trim().min(1).max(120),imageSelection:di.optional(),environmentSource:li.optional(),projectId:a.z.string().trim().min(1).max(120).optional(),image:Ds.optional(),source:ss,sourceSnapshot:a.z.record(a.z.string(),a.z.unknown()).default({}),config:a.z.object({autoImportAgentConfigs:a.z.boolean().optional(),codexConfigEnabled:a.z.boolean().optional(),codexHomeMode:a.z.enum(["default","taskhandoff"]).optional(),defaultCodexPermissionMode:et.optional(),codexSettings:Un.optional(),aiSessionHistoryLimit:a.z.number().int().min(1).max(500).optional(),aiSessionAttachmentRetentionDays:a.z.number().int().min(0).max(365).optional(),aiSessionMaxFileAttachmentBytes:a.z.number().int().positive().max(ge).optional()}).strict().optional(),modelSelection:co.shape.modelSelection,gitWorkspaceProvisioning:td.optional()}).strict().superRefine((e,t)=>{e.environmentSource&&e.imageSelection&&t.addIssue({code:"custom",path:["environmentSource"],message:"environmentSource and imageSelection are mutually exclusive."}),"template"===e.environmentSource?.type&&e.image&&t.addIssue({code:"custom",path:["image"],message:"Template environment source is resolved by the node-agent and cannot include an image snapshot."}),e.gitWorkspaceProvisioning&&"local-folder"===e.source.type&&t.addIssue({code:"custom",path:["gitWorkspaceProvisioning"],message:"Git provisioning requires a Git source."})}),Hp=a.z.object({name:a.z.string().trim().min(1).max(160).optional(),config:a.z.object({autoImportAgentConfigs:a.z.boolean().optional(),codexConfigEnabled:a.z.boolean().optional(),codexHomeMode:a.z.enum(["default","taskhandoff"]).optional(),defaultCodexPermissionMode:et.optional(),codexSettings:Un.optional(),aiSessionHistoryLimit:a.z.number().int().min(1).max(500).optional(),aiSessionAttachmentRetentionDays:a.z.number().int().min(0).max(365).optional(),aiSessionMaxFileAttachmentBytes:a.z.number().int().positive().max(ge).optional()}).strict().optional(),modelSelection:co.shape.modelSelection.optional()}).strict(),qp=a.z.object({id:a.z.string().trim().min(1).max(120).optional(),name:a.z.string().trim().min(1).max(160),type:a.z.enum(["docker","kubernetes","local"]),status:a.z.enum(["unknown","online","offline","degraded"]).default("unknown"),accessStrategy:a.z.enum(["node-proxy","direct-port","kubernetes-ingress","kubernetes-port-forward"]).optional(),capabilities:a.z.record(a.z.string(),a.z.unknown()).default({}),labels:a.z.record(a.z.string(),a.z.string()).default({})}).strict(),Vp=qp.omit({id:!0}).partial().strict();function Bp(e){const t=e.authorization;return"string"==typeof t&&t.startsWith("Bearer ")?t.slice(7).trim():void 0}class Kp{operations=new Map;intents=new Map;intent(e){const t=this.intents.get(e);if(t)return t;const n={controller:new AbortController};return this.intents.set(e,n),n}invalidate(e){this.intents.get(e)?.controller.abort();const t={controller:new AbortController};return this.intents.set(e,t),t}isIntentCurrent(e,t){return this.intents.get(e)===t}signal(e,t){const n=this.intents.get(e);return n===t?n.controller.signal:AbortSignal.abort()}clearIntent(e){this.intents.delete(e)}async run(e,t){const n=this.operations.get(e)\|\|Promise.resolve();let i;const s=new Promise(e=>{i=e});this.operations.set(e,s),await n;try{return await t()}finally{i(),this.operations.get(e)===s&&this.operations.delete(e)}}}const Gp=a.z.object({gitWorkspaceProvisioning:td.optional()}).strict().default({});class Wp{state;images;options;inFlight=new Map;abortController=new AbortController;stopped=!1;constructor(e,t,n){this.state=e,this.images=t,this.options=n}retry(e){const t=this.state.requireInstance(e);if("docker"!==this.state.requireRuntime(t.runtimeId).type\|\|!t.imageSnapshot)throw Object.assign(new Error(`Instance ${e} does not use a Docker image.`),{statusCode:400,code:"INSTANCE_IMAGE_PROVISIONING_UNSUPPORTED"});if("failed"!==t.status\|\|"failed"!==t.imageProvisioning?.phase)throw Object.assign(new Error(`Instance ${e} does not have failed image provisioning to retry.`),{statusCode:409,code:"INSTANCE_IMAGE_PROVISIONING_NOT_FAILED"});const n=ae();return this.state.controlledInstances.put(co.parse({...t,status:"provisioning",health:"unknown",imageProvisioning:{phase:"checking-image",requestedReference:t.imageSnapshot.requestedReference,generation:(t.imageProvisioning?.generation\|\|0)+1,startedAt:n,updatedAt:n},updatedAt:n}))}provision(e,t){if(this.stopped)return Promise.resolve();const n=e.imageProvisioning?.generation;if(void 0===n)return Promise.resolve();const i=`${e.id}:${n}`,s=this.inFlight.get(i);if(s)return s;const o=this.provisionGeneration(e,n,t).finally(()=>{this.inFlight.get(i)===o&&this.inFlight.delete(i)});return this.inFlight.set(i,o),o}async stop(){this.stopped=!0,this.abortController.abort(),await Promise.allSettled([...this.inFlight.values()])}async provisionGeneration(e,t,n){const i=this.currentGeneration(e.id,t,!0,e.createdAt);if(!i)return;let s,o=0,r=!1,a=Promise.resolve();try{const c=await this.images.ensure(i.imageSnapshot.requestedReference,n=>{a=a.then(async()=>{if(!s)try{await this.updatePhase(e.id,t,n,e.createdAt)}catch(e){s={error:e}}})},n=>{this.stopped\|\|(r=!0,o=n.sequence,this.publishTerminalOutput(e,t,n))},this.abortController.signal);if(await a,s)throw s.error;if(this.stopped)return;r&&this.publishFinished(e,t,o+1,"succeeded");const d=async()=>{if(this.stopped)return;const i=this.currentGeneration(e.id,t,!0,e.createdAt);if(!i)return;const s=this.state.controlledInstances.put(co.parse({...i,status:"provisioning"===i.status?"created":i.status,health:"unknown",imageSnapshot:{...i.imageSnapshot,requestedReference:c.requestedReference,resolvedDigest:c.resolvedDigest,resolvedReference:c.resolvedReference},imageProvisioning:{...i.imageProvisioning,phase:"ready",error:void 0,updatedAt:ae()},updatedAt:ae()}));this.options.sync(),this.options.diagnostic({instanceId:e.id,action:"image.provision",reference:c.requestedReference,digest:c.resolvedDigest,pulled:c.pulled},"node instance image provisioning completed"),"starting"===s.status&&await(n?.())};await(this.options.runInstanceOperation?.(e.id,d)??d())}catch(n){if(await a,s&&(n=s.error),this.stopped)return;r&&this.publishFinished(e,t,o+1,"failed");const i=n instanceof Error?n.message:String(n),c=async()=>{if(this.stopped)return;const n=this.currentGeneration(e.id,t,!1,e.createdAt);n?.imageProvisioning&&["provisioning","starting"].includes(n.status)&&(this.state.controlledInstances.put(co.parse({...n,status:"failed",health:"failed",imageProvisioning:{...n.imageProvisioning,phase:"failed",error:i,updatedAt:ae()},updatedAt:ae()})),this.options.sync(),this.options.warn({instanceId:e.id,action:"image.provision",reference:n.imageProvisioning.requestedReference,error:i},"node instance image provisioning failed"))};await(this.options.runInstanceOperation?.(e.id,c)??c())}}currentGeneration(e,t,n=!0,i){const s=this.state.controlledInstances.get(e);if(!(!s\|\|i&&s.createdAt!==i\|\|s.imageProvisioning?.generation!==t\|\|n&&!s.imageSnapshot))return s}async updatePhase(e,t,n,i){if(this.stopped)return;const s=async()=>{if(this.stopped)return;const s=this.currentGeneration(e,t,!0,i);s&&["provisioning","starting"].includes(s.status)&&(this.state.controlledInstances.put(co.parse({...s,status:"starting"===s.status?"starting":"provisioning",imageProvisioning:{...s.imageProvisioning,phase:n,error:void 0,updatedAt:ae()},updatedAt:ae()})),this.options.sync())};await(this.options.runInstanceOperation?.(e,s)??s())}eventBase(e,t){return{instanceId:e.id,generation:t,requestedReference:e.imageProvisioning.requestedReference,observedAt:ae()}}publishTerminalOutput(e,t,n){for(const[i,s]of function(e,t=6e4){const n=[];for(let i=0;i<e.length;i+=t)n.push(e.slice(i,i+t));return n}(n.data).entries())this.options.publish(Ls,{...this.eventBase(e,t),sequence:1e3n.sequence+i,data:s,...n.replay?{replay:!0}:{}},e.id)}publishFinished(e,t,n,i){this.options.publish(Ms,{...this.eventBase(e,t),sequence:1e3n,outcome:i},e.id)}}const Xp=a.z.object({name:a.z.string().trim().min(1).max(160)}).strict();function Yp(e,t,n){return{code:"object"==typeof e&&e&&"code"in e&&"string"==typeof e.code?e.code:t,message:e instanceof Error?e.message:String(e),phase:n}}class Jp{templateOperations=new Kp;store;docker;requireInstanceValue;requireRuntimeValue;runInstanceOperationValue;privateSecretValues;isImageReferencedValue;constructor(e,t,n,i,s,o,r=()=>!1){this.store=e,this.docker=t,this.requireInstanceValue=n,this.requireRuntimeValue=i,this.runInstanceOperationValue=s,this.privateSecretValues=o,this.isImageReferencedValue=r}list(){return this.store.list()}require(e){const t=this.store.get(e);if(!t)throw Object.assign(new Error(`Environment template ${e} was not found.`),{statusCode:404,code:"ENVIRONMENT_TEMPLATE_NOT_FOUND"});return t}runTemplateOperation(e,t){return this.templateOperations.run(e,async()=>t())}async create(e,t){const n=Xp.parse(t),i=this.requireInstanceValue(e),s=this.requireRuntimeValue(i.runtimeId);if("docker"!==s.type)throw Object.assign(new Error(`Runtime ${s.name} does not support environment templates.`),{statusCode:409,code:"ENVIRONMENT_TEMPLATE_RUNTIME_UNSUPPORTED"});if(!i.runtime.containerName)throw Object.assign(new Error(`Instance ${i.id} does not have a Docker container.`),{statusCode:409,code:"ENVIRONMENT_TEMPLATE_CONTAINER_NOT_FOUND"});const o=ae(),r=Ka("envtpl"),a=`task-handoff/environment-template:${r.toLowerCase().replace(/[^a-z0-9_.-]/g,"-")}`;return this.store.put(vi.parse({id:r,name:n.name,sourceInstanceId:i.id,nodeId:i.nodeId,internalTag:a,status:"creating",createdAt:o,updatedAt:o})),this.runInstanceOperationValue(i.id,async()=>{let e,t=!1;try{const n=this.requireInstanceValue(i.id);if("docker"!==this.requireRuntimeValue(n.runtimeId).type\|\|!n.runtime.containerName)throw Object.assign(new Error(`Instance ${i.id} is no longer a valid Docker template source.`),{code:"ENVIRONMENT_TEMPLATE_SOURCE_CHANGED"});const s=this.privateSecretValues(n);await this.docker.inspectContainerConfigSecurity(n.runtime.containerName,s),e=await this.docker.commitEnvironmentTemplate(n.runtime.containerName,n.runtime.containerId,a),t=!0;const o=await this.docker.inspectEnvironmentTemplateImage(a);return await this.docker.inspectImageConfigSecurity(a,s),this.store.put(vi.parse({...this.require(r),...o,status:"ready",error:void 0,updatedAt:ae()}))}catch(n){return t&&(await this.docker.untagEnvironmentTemplate(a,e).catch(()=>!1),e&&await this.docker.garbageCollectEnvironmentTemplateImage(e).catch(()=>!1)),this.store.put(vi.parse({...this.require(r),status:"failed",error:Yp(n,"ENVIRONMENT_TEMPLATE_CREATE_FAILED","commit"),updatedAt:ae()}))}})}async delete(e){return this.runTemplateOperation(e,async()=>{const t=this.require(e);this.store.put(vi.parse({...t,status:"deleting",error:void 0,updatedAt:ae()}));try{const n=t.internalTag?await this.docker.untagEnvironmentTemplate(t.internalTag,t.imageId):void 0,i=t.imageId\|\|n;return i&&!this.isImageReferencedValue(i)&&await this.docker.garbageCollectEnvironmentTemplateImage(i),this.store.delete(e),{deleted:!0,templateId:e}}catch(e){throw this.store.put(vi.parse({...t,status:"failed",error:Yp(e,"ENVIRONMENT_TEMPLATE_DELETE_FAILED","delete"),updatedAt:ae()})),e}})}async releaseUnusedImage(e){return!this.store.list().some(t=>t.imageId===e)&&!this.isImageReferencedValue(e)&&this.docker.garbageCollectEnvironmentTemplateImage(e)}}const Qp=new Set(["content-encoding","content-length","transfer-encoding"]),Zp=67108864;function em(e){return Object.fromEntries([...e.entries()].filter(([e])=>!Qp.has(e.toLowerCase())))}function tm(e){return e.bodyBase64?Buffer.from(e.bodyBase64,"base64"):e.body}function nm(){const e=Number(process.env.TASK_HANDOFF_INSTANCE_PROXY_MAX_RESPONSE_BYTES);return Number.isSafeInteger(e)&&e>0?e:67108864}const im="x-task-handoff-trace-id";function sm(e){return e.startsWith("/")?e:`/${e}`}function om(e,t){return e.code(502).send({error:{code:"INSTANCE_PROXY_RESPONSE_TOO_LARGE",message:`Instance response exceeds ${t} bytes.`}})}async function rm(e,t,n,i){try{return await e(t,n)}catch(e){if(n.signal?.aborted)throw e;throw i.diagnostic({instanceId:i.instanceId,action:"proxy.upstream.failed",method:i.method,path:i.path,error:e instanceof Error?e.message:String(e)},"node instance proxy upstream unavailable"),Object.assign(new Error(`Instance ${i.instanceId} web endpoint is not reachable.`),{statusCode:502,code:"INSTANCE_PROXY_UPSTREAM_UNREACHABLE",retryable:!0,cause:e})}}function am(e,t){return Object.assign(new Error(`Instance ${e.id} has an invalid node-owned web endpoint: ${t}`),{statusCode:409,code:"NODE_INSTANCE_WEB_ENDPOINT_INVALID"})}function cm(e,t){const n=t\|\|("local"===e.runtime?.kind&&e.runtime.port?`http://127.0.0.1:${e.runtime.port}`:void 0);if(!n){const t=new Error(`Instance ${e.id} does not have a web endpoint.`);throw Object.assign(t,{statusCode:409,code:"NODE_INSTANCE_WEB_ENDPOINT_MISSING"}),t}let i;try{i=new URL(n)}catch{throw am(e,"endpoint is not a URL")}if("http:"!==i.protocol\|\|"127.0.0.1"!==i.hostname\|\|!i.port\|\|i.username\|\|i.password\|\|"/"!==i.pathname&&""!==i.pathname\|\|i.search\|\|i.hash)throw am(e,"endpoint must be an origin-only http://127.0.0.1:<port> URL");return i.origin}const dm=a.z.object({version:a.z.literal(1),externalListener:Qs}).strict();function lm(e){return"all-ipv4"===e?"0.0.0.0":"127.0.0.1"}function um(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e,n=t.externalListener&&"object"==typeof t.externalListener&&!Array.isArray(t.externalListener)?t.externalListener:{},i=Object.keys(t).filter(e=>"version"!==e&&"externalListener"!==e),s=Object.keys(n).filter(e=>"bindScope"!==e&&"port"!==e);return(i.length\|\|s.length)&&console.warn(JSON.stringify({message:"unknown stored node agent runtime setting fields were ignored",filePath:"runtime-settings.json",fields:[...i,...s.map(e=>`externalListener.${e}`)]})),{version:t.version,externalListener:{bindScope:n.bindScope,port:n.port}}}async function pm(e){const t=lm(e.bindScope);return!await new Promise(t=>{const n=m.createConnection({host:"127.0.0.1",port:e.port}),i=e=>{n.removeAllListeners(),n.destroy(),t(e)};n.once("connect",()=>i(!0)),n.once("error",()=>i(!1)),n.setTimeout(250,()=>i(!1))})&&new Promise(n=>{const i=m.createServer();i.once("error",()=>n(!1)),i.listen({host:t,port:e.port,exclusive:!0},()=>i.close(()=>n(!0)))})}class mm{app;state;settings;sockets=new Set;config;source;status="error";error;onActiveListener;updateQueue=Promise.resolve();constructor(e){this.app=e.app,this.state=e.state,this.settings=e.settings,this.config=e.config,this.source=e.source,this.onActiveListener=e.onActiveListener,this.app.server.on("connection",e=>{this.sockets.add(e),e.once("close",()=>this.sockets.delete(e))})}current(){return Zs.parse({...this.config,host:lm(this.config.bindScope),status:this.status,source:this.source,...this.error?{error:this.error}:{}})}async start(){try{await this.listen(this.config),this.status="listening",this.error=void 0,this.state.setListenerPort(this.config.port)}catch(e){throw this.status="error",this.error=e instanceof Error?e.message:String(e),this.app.log.error({host:lm(this.config.bindScope),port:this.config.port,error:this.error},"node agent TCP listener failed to start"),Object.assign(new Error(`Failed to bind node agent TCP listener at ${lm(this.config.bindScope)}:${this.config.port}: ${this.error}`),{statusCode:409,code:"NODE_AGENT_LISTENER_BIND_FAILED"})}const e=this.current();return this.onActiveListener?.(e),e}update(e){const t=this.updateQueue.then(()=>this.updateOnce(e));return this.updateQueue=t.then(()=>{},()=>{}),t}async updateOnce(e){const t=eo.parse(e);if(t.bindScope===this.config.bindScope&&t.port===this.config.port)return this.current();if(t.port!==this.config.port){const e=this.state.runningInstanceCount();if(e>0)throw Object.assign(new Error(`Cannot change the node agent port while ${e} controlled instance(s) are running.`),{statusCode:409,code:"NODE_AGENT_LISTENER_PORT_IN_USE_BY_INSTANCES",blockingInstanceCount:e})}const n=this.snapshot();await this.stop();try{await this.listen(t)}catch(e){throw await this.restore(n),Object.assign(new Error(`Failed to bind node agent TCP listener at ${lm(t.bindScope)}:${t.port}: ${e instanceof Error?e.message:String(e)}`),{statusCode:409,code:"NODE_AGENT_LISTENER_BIND_FAILED"})}try{this.settings.put({version:1,externalListener:t})}catch(e){throw await this.stop(),await this.restore(n),Object.assign(new Error(`Failed to persist node agent TCP listener: ${e instanceof Error?e.message:String(e)}`),{statusCode:500,code:"NODE_AGENT_LISTENER_PERSIST_FAILED"})}this.config=t,this.source="persisted",this.status="listening",this.error=void 0,this.state.setListenerPort(t.port);const i=this.current();return this.onActiveListener?.(i),i}async shutdown(){await this.updateQueue,await this.stop()}snapshot(){return{config:this.config,source:this.source,status:this.status,error:this.error}}async restore(e){if(this.config=e.config,this.source=e.source,this.status=e.status,this.error=e.error,"listening"===e.status)try{await this.listen(e.config)}catch(e){this.status="error",this.error=`Failed to restore previous listener: ${e instanceof Error?e.message:String(e)}`,this.app.log.error({error:this.error},"node agent TCP listener rollback failed")}this.state.setListenerPort(e.config.port),"listening"===this.status&&this.onActiveListener?.(this.current())}async listen(e){await new Promise((t,n)=>{const i=e=>{this.app.server.off("listening",s),n(e)},s=()=>{this.app.server.off("error",i),t()};this.app.server.once("error",i),this.app.server.once("listening",s),this.app.server.listen({host:lm(e.bindScope),port:e.port})})}async stop(){this.app.server.listening&&await new Promise((e,t)=>{this.app.server.close(n=>n?t(n):e());for(const e of this.sockets)e.destroy()})}}const hm="TASK_HANDOFF_NODE_AGENT_V1",gm="/api/node-tunnel";function fm(e=""){return d.createHash("sha256").update(e).digest("hex")}function ym(e,t){return d.createHmac("sha256",e).update(function(e){return[hm,e.keyId,e.method.toUpperCase(),e.pathWithQuery,e.timestamp,e.nonce,e.bodySha256].join("\n")}(t)).digest("hex")}function Im(e){const t=e.timestamp\|\|(new Date).toISOString(),n=e.nonce\|\|d.randomBytes(18).toString("base64url"),i=fm(e.body\|\|""),s=ym(e.secret,{keyId:e.keyId,method:e.method,pathWithQuery:e.pathWithQuery,timestamp:t,nonce:n,bodySha256:i});return{"x-taskhandoff-node-id":e.nodeId,"x-taskhandoff-key-id":e.keyId,"x-taskhandoff-timestamp":t,"x-taskhandoff-nonce":n,"x-taskhandoff-body-sha256":i,"x-taskhandoff-signature":s}}class Am{usedNonces=new Map;identity;nodeId;overrideSecret;overrideKeyId;nowMs;constructor(e,t,n,i,s=Date.now){this.identity=e,this.nodeId=t,this.overrideSecret=n,this.overrideKeyId=i,this.nowMs=s}hasRemoteSecrets(){return this.identity.remoteSecrets(this.overrideSecret,this.overrideKeyId).length>0}verify(e){const t=function(e){const t=new Map;for(const[n,i]of Object.entries(e)){const e=Array.isArray(i)?i.join(","):"string"==typeof i?i:void 0===i?"":String(i);t.set(n.toLowerCase(),e)}return{nodeId:t.get("x-taskhandoff-node-id")\|\|"",keyId:t.get("x-taskhandoff-key-id")\|\|"",timestamp:t.get("x-taskhandoff-timestamp")\|\|"",nonce:t.get("x-taskhandoff-nonce")\|\|"",bodySha256:t.get("x-taskhandoff-body-sha256")\|\|"",signature:t.get("x-taskhandoff-signature")\|\|""}}(e.headers);if(!t.nodeId&&!t.signature)return!1;const n="DELETE"===e.method&&"/api/node-agent/pairing/current"===e.url.split("?")[0],i=this.identity.remoteSecrets(this.overrideSecret,this.overrideKeyId,n);if(!i.length)return!1;if(t.nodeId!==this.nodeId)throw Object.assign(new Error("Invalid node agent HMAC node id."),{statusCode:401,code:"NODE_AGENT_HMAC_NODE_MISMATCH"});if(!t.keyId)throw Object.assign(new Error("Node agent HMAC key id is missing."),{statusCode:401,code:"NODE_AGENT_HMAC_KEY_MISSING"});const s=i.filter(e=>t.keyId===e.keyId);if(!s.length)throw Object.assign(new Error("Invalid node agent HMAC key id."),{statusCode:401,code:"NODE_AGENT_HMAC_KEY_INVALID"});const o=Date.parse(t.timestamp);if(!Number.isFinite(o)\|\|Math.abs(this.nowMs()-o)>6e4)throw Object.assign(new Error("Node agent HMAC timestamp is outside the allowed window."),{statusCode:401,code:"NODE_AGENT_HMAC_TIMESTAMP_INVALID"});if(!t.nonce)throw Object.assign(new Error("Node agent HMAC nonce is missing."),{statusCode:401,code:"NODE_AGENT_HMAC_NONCE_MISSING"});this.pruneNonces();const r=`${t.nodeId}:${t.keyId}:${t.nonce}`;if(this.usedNonces.has(r))throw Object.assign(new Error("Node agent HMAC nonce was already used."),{statusCode:401,code:"NODE_AGENT_HMAC_NONCE_REPLAY"});const a=fm(null==(c=e.body)?"":"string"==typeof c\|\|Buffer.isBuffer(c)?c:JSON.stringify(c));var c;if(t.bodySha256!==a)throw Object.assign(new Error("Node agent HMAC body hash mismatch."),{statusCode:401,code:"NODE_AGENT_HMAC_BODY_HASH_INVALID"});if(!s.some(n=>function(e,t){const n=Buffer.from(e,"hex"),i=Buffer.from(t,"hex");return n.length===i.length&&d.timingSafeEqual(n,i)}(t.signature,ym(n.secret,{keyId:t.keyId,method:e.method,pathWithQuery:e.url,timestamp:t.timestamp,nonce:t.nonce,bodySha256:a}))))throw Object.assign(new Error("Invalid node agent HMAC signature."),{statusCode:401,code:"NODE_AGENT_HMAC_SIGNATURE_INVALID"});return this.usedNonces.set(r,o+6e4+1),t.keyId}pruneNonces(){const e=this.nowMs();for(const[t,n]of this.usedNonces)n<=e&&this.usedNonces.delete(t)}}function _m(e,t){console.warn(JSON.stringify({message:e,...t}))}class Em{repository;logger;constructor(e,t,n={}){const i=t&&"readIdentity"in t?t:void 0,s=i?n:t\|\|n;this.repository=i\|\|ld(ul(e)).access,this.logger=s.logger\|\|_m}read(){const e=this.repository.readIdentity();return e?jd(e,this.logger):void 0}init(){}write(e){const t=jd({...e,updatedAt:ae()},this.logger);return this.repository.writeIdentity(t)}}class Tm{values=new Map;put(e,t,n=Date.now()){this.prune(n),this.values.set(e,t)}take(e,t=Date.now()){this.prune(t);const n=this.values.get(e);return n&&this.values.delete(e),n}peek(e,t=Date.now()){return this.prune(t),this.values.get(e)}delete(e,t=Date.now()){this.prune(t);const n=this.values.get(e);return n&&this.values.delete(e),n}list(e=Date.now()){return this.prune(e),[...this.values.values()]}prune(e=Date.now()){for(const[t,n]of this.values)Date.parse(n.expiresAt)<=e&&this.values.delete(t)}}class bm{store;repository;pairingInvites=new Tm;controlPlaneConnectionOperations=new Map;constructor(e,t){this.repository=t\|\|ld(ul(e)).access,this.store=new Em(e,this.repository),this.store.init(),this.recoverControlPlaneConnectionOperations()}async runControlPlaneConnectionOperation(e,t){const n=e.replace(/\/$/,""),i=this.controlPlaneConnectionOperations.get(n)\|\|Promise.resolve();let s;const o=new Promise(e=>{s=e});this.controlPlaneConnectionOperations.set(n,o),await i;try{return await t()}finally{s(),this.controlPlaneConnectionOperations.get(n)===o&&this.controlPlaneConnectionOperations.delete(n)}}resolveNodeId(e){if(e?.trim())return this.writeNodeId(e.trim()),e.trim();const t=this.store.read();if(t?.nodeId)return t.nodeId;const n=Ka("node");return this.writeNodeId(n),n}createPairingInvite(e){const t=ae(),n=new Date(Date.now()+(e.expiresInMs\|\|6e5)).toISOString(),i=Ga(),s={tokenHash:fm(i),createdAt:t,expiresAt:n,...e.controlPlaneName?{controlPlaneName:e.controlPlaneName}:{}};return this.pairingInvites.put(s.tokenHash,s),{...s,token:i}}completePairingInvite(e){const t=this.store.read()\|\|this.newIdentity(),n=fm(e.joinToken),i=this.pairingInvites.take(n);if(!i){const e=new Error("Node agent pairing invite is invalid or expired.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_PAIRING_INVITE_INVALID"}),e}const s=ae(),o={id:e.controlPlaneId\|\|Ka("cp"),keyId:Ka("key"),...e.controlPlaneName\|\|i.controlPlaneName?{name:e.controlPlaneName\|\|i.controlPlaneName}:{},secret:Ga(),pairedAt:s,updatedAt:s};return this.store.write({...t,controlPlanePairings:[...(t.controlPlanePairings\|\|[]).filter(e=>e.id!==o.id),o]}),o}stageControlPlaneConnection(e){const{pairing:t,connection:n}=this.createControlPlaneConnection(e),i=this.store.read()\|\|this.newIdentity(),s=n.url.replace(/\/$/,""),o=(i.controlPlaneConnections\|\|[]).filter(e=>e.id===n.id\|\|e.url.replace(/\/$/,"")===s),r={operationId:Ka("connection_operation"),pairing:t,connection:n,replacedConnections:o},a=ae();return this.repository.transaction(()=>{this.store.write({...i,controlPlanePairings:[...(i.controlPlanePairings\|\|[]).filter(e=>e.keyId!==t.keyId),t],controlPlaneConnections:[...(i.controlPlaneConnections\|\|[]).filter(e=>e.id!==n.id&&e.url.replace(/\/$/,"")!==s),n]}),this.repository.putOperation({id:r.operationId,kind:"create-connection",phase:"prepared",requested:r,pairingKeyId:t.keyId,connectionId:n.id,replacedConnections:o,createdAt:a,updatedAt:a})}),r}markControlPlaneConnectionRemoteAccepted(e){const t=this.repository.listOperations().find(t=>t.id===e.operationId);if(!t)throw Object.assign(new Error("Control-plane connection operation was not found."),{code:"NODE_AGENT_CONNECTION_OPERATION_NOT_FOUND",statusCode:409});this.repository.putOperation({...t,phase:"remote-accepted",updatedAt:ae()})}commitControlPlaneConnection(e,t={}){const n=this.store.read()\|\|this.newIdentity(),i={...e.pairing,...t.name?{name:t.name}:{}},s={...e.connection,...t.name?{name:t.name}:{}},o=new Set((n.controlPlaneConnections\|\|[]).map(e=>e.pairingKeyId)),r=new Set(e.replacedConnections.map(e=>e.pairingKeyId));return this.repository.transaction(()=>{this.store.write({...n,controlPlanePairings:[...(n.controlPlanePairings\|\|[]).filter(e=>e.keyId!==i.keyId&&(!r.has(e.keyId)\|\|o.has(e.keyId))),i],controlPlaneConnections:[...(n.controlPlaneConnections\|\|[]).filter(e=>e.id!==s.id),s]});const t=this.repository.listOperations().find(t=>t.id===e.operationId);t&&this.repository.putOperation({...t,phase:"committed",updatedAt:ae()}),this.repository.deleteOperation(e.operationId)}),{pairing:i,connection:s}}rollbackControlPlaneConnection(e){const t=this.store.read();if(!t)return;const n=new Set(e.replacedConnections.map(e=>e.id));this.repository.transaction(()=>{this.store.write({...t,controlPlanePairings:(t.controlPlanePairings\|\|[]).filter(t=>t.keyId!==e.pairing.keyId),controlPlaneConnections:[...(t.controlPlaneConnections\|\|[]).filter(t=>t.id!==e.connection.id&&!n.has(t.id)),...e.replacedConnections]}),this.repository.deleteOperation(e.operationId)})}recoverControlPlaneConnectionOperations(){for(const e of this.repository.listOperations(["prepared","remote-accepted"])){const t=e.requested;t?.pairing?.keyId&&t?.connection?.id?"remote-accepted"===e.phase?(this.repository.putOperation({...e,phase:"committed",updatedAt:ae()}),this.repository.deleteOperation(e.id)):this.rollbackControlPlaneConnection(t):this.repository.putOperation({...e,phase:"failed",error:{code:"NODE_AGENT_CONNECTION_OPERATION_INVALID"},updatedAt:ae()})}}createControlPlaneConnection(e){const t=ae(),n={id:Ka("cp"),keyId:Ka("key"),...e.name?{name:e.name}:{},secret:Ga(),pairedAt:t,updatedAt:t};return{pairing:n,connection:{id:Ka("connection"),pairingKeyId:n.keyId,...e.name?{name:e.name}:{},url:e.url,enabled:!1!==e.enabled,createdAt:t,updatedAt:t}}}resolvedControlPlaneAccess(){const e=this.store.read(),t=new Map((e?.controlPlanePairings\|\|[]).filter(e=>!e.revokedAt).map(e=>[e.keyId,e])),n=e?.controlPlaneConnections\|\|[];return{hasPersistedAccess:n.length>0\|\|t.size>0,connections:n.map(e=>({connection:e,pairing:t.get(e.pairingKeyId)}))}}listControlPlanePairings(e=""){return(this.store.read()?.controlPlanePairings\|\|[]).filter(e=>!e.revokedAt).map(({secret:t,...n})=>({...n,current:Boolean(e&&n.keyId===e)})).sort((e,t)=>Number(t.current)-Number(e.current)\|\|t.updatedAt.localeCompare(e.updatedAt))}listControlPlaneConnections(){return[...this.store.read()?.controlPlaneConnections\|\|[]].sort((e,t)=>t.updatedAt.localeCompare(e.updatedAt))}deleteControlPlanePairing(e,t=""){if(t&&e===t){const e=new Error("Cannot delete the pairing used to authenticate the current request.");throw Object.assign(e,{statusCode:409,code:"NODE_AGENT_PAIRING_CURRENT_REQUEST"}),e}const n=this.store.read();if(!n)return!1;if((n.controlPlaneConnections\|\|[]).some(t=>t.pairingKeyId===e))throw Object.assign(new Error("Cannot delete a pairing used by a configured control-plane connection."),{statusCode:409,code:"NODE_AGENT_PAIRING_IN_USE"});const i=(n.controlPlanePairings\|\|[]).filter(t=>t.keyId!==e);return i.length!==(n.controlPlanePairings\|\|[]).length&&(this.store.write({...n,controlPlanePairings:i}),!0)}revokeCurrentControlPlanePairing(e){if(!e)throw Object.assign(new Error("Current paired-HMAC authentication is required to revoke this pairing."),{statusCode:403,code:"NODE_AGENT_PAIRING_SELF_REVOKE_HMAC_REQUIRED"});const t=this.store.read(),n=t?.controlPlanePairings?.find(t=>t.keyId===e);if(!t\|\|!n)throw Object.assign(new Error("The current control-plane pairing no longer exists."),{statusCode:404,code:"NODE_AGENT_PAIRING_NOT_FOUND"});if(n.revokedAt)return{keyId:e,revoked:!0,revokedAt:n.revokedAt};if((t.controlPlaneConnections\|\|[]).some(t=>t.pairingKeyId===e))throw Object.assign(new Error("Cannot revoke a pairing used by a configured control-plane connection."),{statusCode:409,code:"NODE_AGENT_PAIRING_IN_USE"});const i=ae();return this.store.write({...t,controlPlanePairings:t.controlPlanePairings.map(t=>t.keyId===e?{...t,revokedAt:i,updatedAt:i}:t)}),{keyId:e,revoked:!0,revokedAt:i}}deleteControlPlaneConnection(e){const t=this.store.read();if(!t)return!1;const n=(t.controlPlaneConnections\|\|[]).filter(t=>t.id!==e);return n.length!==(t.controlPlaneConnections\|\|[]).length&&(this.store.write({...t,controlPlaneConnections:n}),!0)}remoteSecrets(e,t,n=!1){return[...(this.store.read()?.controlPlanePairings\|\|[]).filter(e=>n\|\|!e.revokedAt).map(e=>({keyId:e.keyId,secret:e.secret})),...e&&t?[{keyId:t,secret:e}]:[]]}isRevokedPairing(e){return Boolean(this.store.read()?.controlPlanePairings?.some(t=>t.keyId===e&&t.revokedAt))}reverseTunnelSecret(e,t,n){if(t&&n)return{keyId:n,secret:t};const i=this.store.read(),s=(i?.controlPlanePairings\|\|[]).filter(e=>!e.revokedAt);if(!s.length)return;if(e){const t=e.replace(/\/$/,""),n=(i?.controlPlaneConnections\|\|[]).find(e=>e.url.replace(/\/$/,"")===t),o=n&&s.find(e=>e.keyId===n.pairingKeyId);if(o)return{keyId:o.keyId,secret:o.secret}}const o=[...s].sort((e,t)=>t.updatedAt.localeCompare(e.updatedAt))[0];return o?{keyId:o.keyId,secret:o.secret}:void 0}newIdentity(){return{nodeId:this.resolveNodeId(),createdAt:ae(),updatedAt:ae(),controlPlanePairings:[],controlPlaneConnections:[]}}writeNodeId(e){const t=this.store.read();this.store.write({...t\|\|{createdAt:ae()},nodeId:e,updatedAt:ae(),controlPlanePairings:t?.controlPlanePairings\|\|[],controlPlaneConnections:t?.controlPlaneConnections\|\|[]})}}const wm=a.z.string().trim().min(1).max(160);const Sm=Ji.strict();function vm(e){const t=e.filter(e=>!["created","stopped","failed"].includes(e.status)),n=new Set(t.map(e=>e.id)),i=t.filter(e=>e.apps.runningCount>0\|\|e.aiSessions.runningCount>0);return{runningInstanceCount:t.length,stoppedInstanceCount:e.length-t.length,activeInstanceCount:i.length,restartInstanceCount:t.length,runningInstanceIds:t.map(e=>e.id).sort(),stoppedInstanceIds:e.filter(e=>!n.has(e.id)).map(e=>e.id).sort(),activeInstanceIds:i.map(e=>e.id).sort()}}class Nm{preflights=new Map;options;applying=!1;constructor(e){this.options=e}async check(e){const t=Wi.parse(e),n=vm(this.options.listInstances()),i=await Tl(this.options.runCommand,this.options.moduleDir),s=this.options.currentRuntimeVersion(),o=this.options.managedUpdateSupport?.(i)\|\|{supported:!0};if(!o.supported)return Xi.parse({source:"npm",channel:t.channel,currentVersion:i.currentVersion\|\|s,availableVersion:i.currentVersion\|\|s\|\|"unavailable",impact:n,updateAvailable:!1,supported:!1,reason:o.reason\|\|"Managed updates are unavailable on this node.",checkedAt:(new Date).toISOString()});const r="@task-handoff/server"===i.packageName?[...new Set([...i.relatedCurrentVersions,s])]:i.relatedCurrentVersions,a=await async function(e){const t=e.packageName\|\|"@task-handoff/node-agent",n=await async function(e,t,n){const i=function(e){return"stable"===e?"latest":e}(n),s=await e(_l(),["view",`${t}@${i}`,"version","--json"]).catch(e=>{if(!function(e){if(!e\|\|"object"!=typeof e)return!1;const t=e,n=[t.message,t.details?.stdout,t.details?.stderr].filter(e=>"string"==typeof e).join("\n");return/\bE404\b/i.test(n)}(e))throw e});if(!s)return;const o=JSON.parse(s.stdout);if("string"!=typeof o)throw new Error(`npm did not resolve ${t}@${i} to one version.`);return o}(e.runCommand,t,e.channel);if(!n)return function(e){return Xi.parse({source:"npm",channel:e.channel,currentVersion:e.currentVersion,availableVersion:e.currentVersion\|\|"unavailable",impact:e.impact\|\|{runningInstanceCount:0,stoppedInstanceCount:0,activeInstanceCount:0,restartInstanceCount:0,runningInstanceIds:[],stoppedInstanceIds:[],activeInstanceIds:[]},updateAvailable:!1,reason:`No ${e.channel} release is currently published.`,checkedAt:ae()})}({channel:e.channel,currentVersion:e.currentVersion,impact:e.impact});const i=Al(e.currentVersion,n)\|\|(e.relatedCurrentVersions\|\|[]).some(e=>Al(e,n)),s=i?await async function(e,t,n){const i=await e(_l(),["view",`${t}@${n}`,"dist.integrity","--json"]),s=JSON.parse(i.stdout);if("string"!=typeof s\|\|!/^sha(?:256\|384\|512)-[A-Za-z0-9+/=]+$/.test(s))throw Object.assign(new Error(`npm did not return immutable integrity metadata for ${t}@${n}.`),{statusCode:502,code:"NODE_UPDATE_PREFLIGHT_FAILED",retryable:!0});return s}(e.runCommand,t,n):void 0;return Xi.parse({source:"npm",channel:e.channel,currentVersion:e.currentVersion,availableVersion:n,...s?{artifactRef:`npm:${t}@${n}#${s}`}:{},runtimeArtifacts:e.runtimeArtifacts\|\|[],impact:e.impact\|\|{runningInstanceCount:0,stoppedInstanceCount:0,activeInstanceCount:0,restartInstanceCount:0,runningInstanceIds:[],stoppedInstanceIds:[],activeInstanceIds:[]},updateAvailable:i,checkedAt:ae()})}({channel:t.channel,currentVersion:i.currentVersion\|\|s,runCommand:this.options.runCommand,packageName:i.packageName,relatedCurrentVersions:r,impact:n});if(!a.updateAvailable)return a;const c={...a,runtimeArtifacts:await this.options.resolveRuntimeArtifacts(a.availableVersion),preflightToken:Ga()};return this.preflights.set(c.preflightToken,{result:c,expiresAt:Date.now()+6e5}),c}async apply(e){const i=Sm.parse(e),s=this.preflights.get(i.preflightToken);(!s\|\|s.expiresAt<=Date.now())&&await this.consumePreflight(i),this.applying&&this.throwAlreadyRunning(),this.applying=!0;try{const{check:e,selection:s}=await this.consumePreflight(i);if(this.options.jobs.list().some(e=>!["succeeded","degraded","failed"].includes(e.status))&&this.throwAlreadyRunning(),!e.supported)throw Object.assign(new Error(e.reason\|\|"The requested update is not supported."),{statusCode:400,code:"UPDATE_UNSUPPORTED"});if(!e.updateAvailable)throw Object.assign(new Error(e.reason\|\|"No update is available for the selected channel."),{statusCode:409,code:"UPDATE_NOT_AVAILABLE"});const o=this.options.jobs.create(this.options.nodeId,e),{worker:r,packaged:a,expectedWorker:c}=function(e,i=t.existsSync){const s=[n.resolve(e,"..","bin","task-handoff-node-update-worker"),n.resolve(e,"..","..","bin","task-handoff-node-update-worker")],o=s.find(i),r=n.resolve(e,"..","..","..","..","scripts","node-update-worker.cts");return o?{worker:o,packaged:!0,expectedWorker:s[0]}:i(r)?{worker:r,packaged:!1,expectedWorker:s[0]}:{worker:void 0,packaged:!1,expectedWorker:s[0]}}(this.options.moduleDir);if(!r)throw this.options.jobs.patch(o.id,{status:"failed",rollout:{...o.rollout,phase:"failed"},error:{code:"NODE_UPDATE_FAILED",message:`Update worker was not found: ${c}`,retryable:!1},completedAt:(new Date).toISOString()}),Object.assign(new Error(`Node agent update worker was not found: ${c}`),{statusCode:500,code:"UPDATE_WORKER_NOT_FOUND"});const d=process.env.TASK_HANDOFF_CONTROL_PLANE_HEALTH_URL?.trim();try{await this.options.runCommand("systemd-run",["--unit",`task-handoff-update-${o.id}`,"--collect","--property=Type=exec",...a?[r]:[process.execPath,r],"--job-file",this.options.jobs.records.filePath(o.id),"--target-version",o.toVersion,"--npm-command",_l(),"--install-prefix",s.installPrefix,...process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH?.trim()?["--node-agent-ipc-path",process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH.trim()]:[],...d?["--control-plane-health-url",d]:[]])}catch(e){const t=e instanceof Error?e.message:String(e);throw this.options.jobs.patch(o.id,{status:"failed",rollout:{...o.rollout,phase:"failed"},error:{code:"NODE_UPDATE_FAILED",message:`Failed to launch the node update worker: ${t}`,retryable:!0},completedAt:(new Date).toISOString()}),Object.assign(new Error(`Failed to launch the node update worker: ${t}`),{statusCode:500,code:"NODE_UPDATE_WORKER_LAUNCH_FAILED",cause:e})}return await this.waitForWorkerClaim(o)}finally{this.applying=!1}}async consumePreflight(e){const t=this.preflights.get(e.preflightToken);if(this.preflights.delete(e.preflightToken),!t\|\|t.expiresAt<=Date.now())throw Object.assign(new Error("The update preflight is missing or expired. Check for updates again."),{statusCode:409,code:"UPDATE_PREFLIGHT_EXPIRED"});const n=t.result,i=await Tl(this.options.runCommand,this.options.moduleDir);n.channel===e.channel&&n.availableVersion===e.targetVersion&&n.currentVersion===(i.currentVersion\|\|this.options.currentRuntimeVersion())&&!0===n.artifactRef?.startsWith(`npm:${i.packageName}@`)&&JSON.stringify(n.impact)===JSON.stringify(vm(this.options.listInstances()))\|\|this.throwStale();const s=await this.options.resolveRuntimeArtifacts(n.availableVersion);return JSON.stringify(n.runtimeArtifacts)!==JSON.stringify(s)&&this.throwStale(),{check:n,selection:i}}throwStale(){throw Object.assign(new Error("The update target or affected instances changed after preflight. Check for updates again."),{statusCode:409,code:"UPDATE_PREFLIGHT_STALE"})}throwAlreadyRunning(){throw Object.assign(new Error("Another server update is already running on this node."),{statusCode:409,code:"SERVER_UPDATE_ALREADY_RUNNING"})}async waitForWorkerClaim(e){const t=this.options.workerClaimTimeoutMs??5e3,n=this.options.workerClaimPollMs??50,i=Date.now()+t;for(;Date.now()<=i;){const t=this.options.jobs.records.get(e.id);if(!t)throw Object.assign(new Error(`Update job ${e.id} disappeared before the worker claimed it.`),{statusCode:500,code:"UPDATE_JOB_NOT_FOUND"});if("queued"!==t.status)return t;if(Date.now()>=i)break;await new Promise(e=>setTimeout(e,Math.max(1,Math.min(n,i-Date.now()))))}const s=this.options.jobs.records.get(e.id);if("queued"!==s?.status)return s\|\|e;throw this.options.jobs.patch(e.id,{status:"failed",rollout:{...s.rollout,phase:"failed"},error:{code:"NODE_UPDATE_FAILED",message:"The node update worker did not claim the queued job after systemd accepted it.",retryable:!0},completedAt:(new Date).toISOString()}),Object.assign(new Error("The node update worker did not start after systemd accepted the update job."),{statusCode:500,code:"NODE_UPDATE_WORKER_START_TIMEOUT"})}}const Om=new Set(["provisioning","starting","registering","registered","running"]);function zm(e){return Om.has(e.status)&&!Da(e)}function Cm(e){return co.parse({...e,health:"unknown",connectionStatus:"offline",agentStatus:"offline",targetStatus:"unknown",uiAccessStatus:"unknown",target:{...e.target,status:"unknown"},updatedAt:ae()})}class Rm{options;restoredInstances=new Set;restoreErrors=new Map;unexpectedExitRetries=new Map;suppressedInstances=new Set;pendingUnexpectedExits=new Map;activeRestores=new Map;timer;activeCycle;cycleRequested=!1;cycleRequestDelayMs;started=!1;stopped=!1;constructor(e){this.options=e}markRestored(e){const t=this.options.state.requireInstance(e);return!["failed","stopping","stopped"].includes(t.status)&&!Da(t)&&(this.restoredInstances.add(e),this.restoreErrors.delete(e),!0)}allowRecovery(e){this.suppressedInstances.delete(e);const t=this.pendingUnexpectedExits.get(e);void 0!==t&&(this.pendingUnexpectedExits.delete(e),this.applyUnexpectedLocalExit(e,t))}completeSuppressedOperation(e){this.pendingUnexpectedExits.delete(e),this.restoredInstances.delete(e),this.restoreErrors.delete(e),this.unexpectedExitRetries.delete(e)}forgetInstance(e){this.restoredInstances.delete(e),this.restoreErrors.delete(e),this.unexpectedExitRetries.delete(e),this.suppressedInstances.delete(e),this.activeRestores.delete(e),this.pendingUnexpectedExits.delete(e)}async suppressRecovery(e){this.suppressedInstances.add(e),await(this.activeRestores.get(e)?.catch(()=>{}))}handleUnexpectedLocalExit(e,t){this.stopped\|\|(this.suppressedInstances.has(e)?this.pendingUnexpectedExits.set(e,t):this.applyUnexpectedLocalExit(e,t))}applyUnexpectedLocalExit(e,t){const n=this.options.state.requireInstance(e);if("local"!==this.options.state.requireRuntime(n.runtimeId).type)return;this.restoredInstances.delete(e);const i=this.options.nowMs?.()??Date.now(),s=this.unexpectedExitRetries.get(e),o=this.options.crashStableWindowMs??3e4,r=s&&i-s.lastExitAt<o?s.attempt+1:1;this.unexpectedExitRetries.set(e,{attempt:r,lastExitAt:i});const a=this.options.retryBaseDelayMs??1e3,c=1===r?0:Math.min(this.options.retryMaxDelayMs??3e4,a2Math.min(r-2,10)),d=t instanceof Error?t.message:String(t);this.restoreErrors.set(e,{message:d,attempt:r,nextAttemptAt:i+c}),this.options.state.applyInstanceLifecycle(e,{type:"runtime-exited",error:t}),this.requestCycle(c)}async restoreManagedInstances(){if(this.stopped)return;const{state:e}=this.options;for(const t of e.listInstances()){if(this.stopped)return;"docker"===e.requireRuntime(t.runtimeId).type&&["provisioning","starting"].includes(t.status)&&"ready"!==t.imageProvisioning?.phase&&this.options.provisionImage(t)}const t=e.listInstances().filter(t=>{if(this.restoredInstances.has(t.id))return!1;if(this.suppressedInstances.has(t.id))return!1;const n=e.requireRuntime(t.runtimeId);if("local"===n.type){const e=this.restoreErrors.get(t.id);return(Om.has(t.status)\|\|"failed"===t.status)&&(!e\|\|e.nextAttemptAt<=(this.options.nowMs?.()??Date.now()))}return"docker"===n.type&&zm(t)});await Promise.all(t.map(async t=>{if(this.stopped)return;const n=async()=>{if(this.stopped)return;const n=e.listInstances().find(e=>e.id===t.id);if(!n)return;if(!this.isRestoreCandidate(n))return;const i=this.restoreErrors.get(n.id);try{const t=this.options.restoreInstance(n.id);this.activeRestores.set(n.id,t);try{await t}finally{this.activeRestores.get(n.id)===t&&this.activeRestores.delete(n.id)}if(this.stopped\|\|this.suppressedInstances.has(n.id))return;if(await this.options.autoImport(e.requireInstance(n.id)),this.stopped\|\|this.suppressedInstances.has(n.id))return;if(this.restoreErrors.get(n.id)!==i)return;if(!this.markRestored(n.id))throw new Error(`Restored instance ${n.id} did not reach a recoverable running state.`)}catch(t){if(this.stopped\|\|this.suppressedInstances.has(n.id))return;"local"===e.requireRuntime(n.runtimeId).type&&e.applyInstanceLifecycle(n.id,{type:"start-failed",error:t});const i=t instanceof Error?t.message:String(t),s=this.restoreErrors.get(n.id),o=(s?.attempt??0)+1,r=this.options.retryBaseDelayMs??1e3,a=Math.min(this.options.retryMaxDelayMs??3e4,r2*Math.min(o-1,10)),c=(this.options.nowMs?.()??Date.now())+a;this.restoreErrors.set(n.id,{message:i,attempt:o,nextAttemptAt:c}),s?.message===i&&s.attempt===o\|\|this.options.warn({instanceId:n.id,action:"restore",runtimeId:n.runtimeId,error:i,attempt:o,nextAttemptAt:new Date(c).toISOString()},"node instance restore failed; recovery will retry")}};await(this.options.runInstanceOperation?.(t.id,n)??n())}))}isRestoreCandidate(e){if(this.restoredInstances.has(e.id)\|\|this.suppressedInstances.has(e.id))return!1;const t=this.options.state.requireRuntime(e.runtimeId);if("local"===t.type){const t=this.restoreErrors.get(e.id);return(Om.has(e.status)\|\|"failed"===e.status)&&(!t\|\|t.nextAttemptAt<=(this.options.nowMs?.()??Date.now()))}return"docker"===t.type&&zm(e)}async recoverManagedInstances(){if(this.stopped)return;const{state:e,convergence:t}=this.options,n=e.listInstances().filter(e=>this.options.usesManagedArtifact(e)&&!t.isRunning(e.id)&&(this.restoredInstances.has(e.id)\|\|"unknown"!==e.target.status)&&(!e.ready\|\|"matched"!==e.runtimeVersion?.phase)&&!Da(e)&&!["created","stopped","failed","provisioning","stopping"].includes(e.status));await Promise.all(n.map(async e=>{if(!this.stopped)try{await t.schedule(e.id)}catch(t){this.options.error({instanceId:e.id,error:t},"runtime convergence recovery failed")}}))}start(){this.started\|\|this.stopped\|\|(this.started=!0,this.runAndContinue())}async stop(){this.stopped=!0,this.timer&&clearTimeout(this.timer),this.timer=void 0;const e=this.options.stopImageProvisioning(),t=this.options.state.listInstances().map(e=>this.options.convergence.cancel(e.id));await Promise.all(t),await this.activeCycle,await e,await this.options.runtimeAdapters.stopAll();for(const e of this.options.state.listInstances())"local"===this.options.state.requireRuntime(e.runtimeId).type&&this.options.state.controlledInstances.put(Cm(e))}async runCycle(){await this.restoreManagedInstances(),this.stopped\|\|await this.recoverManagedInstances()}runAndContinue(){if(this.stopped)return;const e=this.runCycle().catch(e=>this.options.error({error:e},"node agent startup recovery cycle failed"));this.activeCycle=e,e.finally(()=>{this.activeCycle===e&&(this.activeCycle=void 0),this.cycleRequested?(this.cycleRequested=!1,this.cycleRequestDelayMs=void 0,this.scheduleNext()):this.scheduleNext()})}scheduleNext(){if(this.stopped)return;const e=this.options.nowMs?.()??Date.now(),t=new Map(this.options.state.listInstances().map(e=>[e.id,e])),n=[...this.restoreErrors.entries()].reduce((e,[n,i])=>{const s=t.get(n);return!s\|\|this.restoredInstances.has(n)\|\|this.suppressedInstances.has(n)\|\|"local"!==this.options.state.requireRuntime(s.runtimeId).type?e:Om.has(s.status)\|\|"failed"===s.status?Math.min(e,i.nextAttemptAt):e},Number.POSITIVE_INFINITY),i=Math.min(this.options.intervalMs??1e4,Math.max(0,n-e));this.timer=setTimeout(()=>{this.timer=void 0,this.runAndContinue()},i),this.timer.unref?.()}requestCycle(e=0){if(this.started&&!this.stopped){if(this.activeCycle)return this.cycleRequested=!0,void(this.cycleRequestDelayMs=void 0===this.cycleRequestDelayMs?e:Math.min(this.cycleRequestDelayMs,e));this.timer&&clearTimeout(this.timer),this.timer=setTimeout(()=>{this.timer=void 0,this.runAndContinue()},e),this.timer.unref?.()}}}const xm=new Set(["DELETE","GET","HEAD","PATCH","POST","PUT","OPTIONS"]);function km(e){return"string"==typeof e&&xm.has(e.toUpperCase())?e.toUpperCase():"GET"}function Dm(e,t){const n=new URL(t.tunnelUrl);n.searchParams.set("nodeId",t.nodeId);const i=t.secret?Im({nodeId:t.nodeId,keyId:t.keyId,secret:t.secret,method:"GET",pathWithQuery:`${n.pathname}${n.search}`}):{},s=new p(n,{headers:i}),o=new Map,r=new Map,a=new Map;let c;s.on("error",i=>{e.log.warn({nodeId:t.nodeId,tunnelUrl:`${n.origin}${n.pathname}`,error:i instanceof Error?i.message:String(i)},"node agent reverse tunnel connection failed")});const d=e=>{const n=e.startsWith("/")?e:`/${e}`,i="function"==typeof t.port?t.port():t.port,s=new URL(`/api/node-agent${n}`,`http://127.0.0.1:${i}`);return s.protocol="ws:",s},l=(e,n,i,s={})=>{const o=e.startsWith("/")?e:`/${e}`;return{...s,...t.secret&&t.keyId?Im({nodeId:t.nodeId,keyId:t.keyId,secret:t.secret,method:n,pathWithQuery:`/api/node-agent${o}`,body:i}):t.token?{authorization:`Bearer ${t.token}`}:{}}},u=e=>t.secret?Im({nodeId:t.nodeId,keyId:t.keyId,secret:t.secret,method:"GET",pathWithQuery:`${e.pathname}${e.search}`}):{},m=(e,t,n)=>{const i=o.get(e);o.delete(e),i?.upstream&&L(i.upstream,t,n),i?.tunnel&&L(i.tunnel,t,n)},h=(e,t,n=!1)=>new Promise((i,s)=>{e.send(t,{binary:n,compress:!1},e=>e?s(e):i())});s.on("open",()=>{s.send(JSON.stringify({type:"node-agent.identify",nodeId:t.nodeId,serverTime:(new Date).toISOString()})),c=e.nodeAgentEventForwarder?.addOutput(s,{legacyFallbackMs:1e3})}),s.on("close",()=>{for(const e of o.keys())m(e,1001,"Reverse tunnel disconnected.");for(const[e,t]of r)r.delete(e),t.controller.abort(),L(t.tunnel,1001,"Reverse tunnel disconnected.");for(const[e,t]of a)a.delete(e),t.abort();c?.(),c=void 0});return s.on("message",i=>{(async i=>{let c;try{c=JSON.parse(String(i))}catch{return void s.send(JSON.stringify({type:"node-agent.error",code:"INVALID_JSON"}))}const g=c&&"object"==typeof c?c:{};if("control-plane.event-subscribe"!==g.type){if("control-plane.http.open"===g.type){const i="string"==typeof g.streamId?g.streamId:"",o="string"==typeof g.route&&g.route.startsWith("/")?g.route:"/health",a=g.init&&"object"==typeof g.init?g.init:{},c=a.headers&&"object"==typeof a.headers?a.headers:{},d=km(a.method);let m;try{m=Zn(a.body)}catch(n){return e.log.warn({nodeId:t.nodeId,messageType:g.type,streamId:i,error:n instanceof Error?n.message:String(n)},"node agent reverse tunnel request body rejected"),void s.send(JSON.stringify({type:"node-agent.error",code:"NODE_TUNNEL_REQUEST_BODY_INVALID",streamId:i}))}const f=new AbortController,y=(e=>{const t=new URL(n);return t.pathname=`${t.pathname.replace(/\/$/,"")}/http-streams/${encodeURIComponent(e)}`,t})(i),I=new p(y,{headers:u(y)});return r.set(i,{tunnel:I,controller:f}),I.on("open",async()=>{try{const e=await fetch((e=>{const n=e.startsWith("/")?e:`/${e}`,i="function"==typeof t.port?t.port():t.port;return new URL(`/api/node-agent${n}`,`http://127.0.0.1:${i}`)})(o),{method:d,headers:l(o,d,m,c),body:Buffer.isBuffer(m)?new Uint8Array(m):m,signal:f.signal});if(await h(I,JSON.stringify({type:"node-agent.http.head",streamId:i,status:e.status,headers:Object.fromEntries(e.headers.entries())})),e.body){const t=e.body.getReader();for(;;){const{done:e,value:n}=await t.read();if(e)break;await h(I,Buffer.from(n),!0)}}await h(I,JSON.stringify({type:"node-agent.http.end",streamId:i})),I.close(1e3,"HTTP stream completed.")}catch(e){I.readyState===p.OPEN&&(await h(I,JSON.stringify({type:"node-agent.http.error",streamId:i,message:e instanceof Error?e.message:String(e)})).catch(()=>{}),I.close(1011,"HTTP stream failed."))}finally{r.delete(i)}}),I.on("close",()=>{f.abort(),r.delete(i)}),void I.on("error",()=>f.abort())}if("control-plane.http.cancel"===g.type){const e="string"==typeof g.streamId?g.streamId:"",t=r.get(e);if(!t)return;return r.delete(e),t.controller.abort(),void L(t.tunnel,1e3,"string"==typeof g.reason?g.reason:"HTTP stream canceled.")}if("control-plane.websocket.open"===g.type){const e="string"==typeof g.streamId?g.streamId:"",t="string"==typeof g.route?g.route:"",i=Array.isArray(g.protocols)?g.protocols.filter(e=>"string"==typeof e):void 0;try{const r=l(t,"GET",void 0),a=i?.length?new p(d(t),i,{headers:r}):new p(d(t),{headers:r}),c=(e=>{const t=new URL(n);return t.pathname=`${t.pathname.replace(/\/$/,"")}/streams/${encodeURIComponent(e)}`,t})(e),m=new p(c,{headers:u(c)});o.set(e,{upstream:a,tunnel:m,close:(e=1e3,t="")=>{L(a,e,t),L(m,e,t)}}),a.on("open",()=>{s.send(JSON.stringify({type:"node-agent.websocket.open",streamId:e,protocol:a.protocol}))}),j(m,a,{pendingFrameLimit:256,upstreamOpenTimeoutMs:1e4,onClientClose:()=>{o.delete(e)},onClientError:t=>{o.delete(e),s.send(JSON.stringify({type:"node-agent.websocket.error",streamId:e,message:t instanceof Error?t.message:String(t)}))},onUpstreamClose:(t,n)=>{o.delete(e);const i=P(t),r=D(n);s.send(JSON.stringify({type:"node-agent.websocket.close",streamId:e,...void 0===i?{}:{code:i},...r?{reason:r}:{}}))},onUpstreamError:t=>{o.delete(e),s.send(JSON.stringify({type:"node-agent.websocket.error",streamId:e,message:t instanceof Error?t.message:String(t)}))}})}catch(t){s.send(JSON.stringify({type:"node-agent.websocket.error",streamId:e,message:t instanceof Error?t.message:String(t)}))}return}if("control-plane.websocket.close"===g.type){const e="string"==typeof g.streamId?g.streamId:"";return void m(e,"number"==typeof g.code?g.code:1e3,"string"==typeof g.reason?g.reason:"")}if("control-plane.request.cancel"===g.type){const e="string"==typeof g.requestId?g.requestId:"";return a.get(e)?.abort(),void a.delete(e)}if("control-plane.request"===g.type){const n="string"==typeof g.requestId?g.requestId:"",i=g.init&&"object"==typeof g.init?g.init:{},o="string"==typeof g.route&&g.route.startsWith("/")?g.route:"/health",r=i.headers&&"object"==typeof i.headers?i.headers:{},c=km(i.method);let d;try{d=Zn(i.body)}catch(i){return e.log.warn({nodeId:t.nodeId,messageType:g.type,requestId:n,error:i instanceof Error?i.message:String(i)},"node agent reverse tunnel request body rejected"),void s.send(JSON.stringify({type:"node-agent.response",requestId:n,status:400,error:{code:"NODE_TUNNEL_REQUEST_BODY_INVALID",message:"Reverse tunnel request body does not match the negotiated protocol."}}))}const u=new AbortController;a.set(n,u);try{const t=await e.inject({method:c,url:`/api/node-agent${o}`,headers:l(o,c,d,r),payload:d,signal:u.signal});if(u.signal.aborted)return;s.send(JSON.stringify({type:"node-agent.response",requestId:n,status:t.statusCode,headers:t.headers,body:t.body}))}catch(e){if(u.signal.aborted)return;s.send(JSON.stringify({type:"node-agent.response",requestId:n,status:502,error:{code:"NODE_AGENT_REVERSE_INJECT_FAILED",message:e instanceof Error?e.message:String(e)}}))}finally{a.delete(n)}}}else e.nodeAgentEventForwarder?.setOutputSubscription?.(s,g.aiSessionTransient,g.eventEnvelopeVersion,g.aiSessionHierarchy)})(i).catch(n=>{e.log.warn({nodeId:t.nodeId,error:n instanceof Error?n.message:String(n)},"node agent reverse tunnel message rejected");try{s.send(JSON.stringify({type:"node-agent.error",code:"INVALID_TUNNEL_MESSAGE"}))}catch{}})}),s}function Pm(e,t){return Number.isFinite(e)&&Number(e)>0?Number(e):t}function Lm(e){if(!e.length)return;const t=[...e].sort((e,t)=>e-t);return t[Math.ceil(.95t.length)-1]}function Mm(e){return e.unref?.(),e}class jm{connectTimeoutMs;handshakeTimeoutMs;heartbeatIntervalMs;heartbeatTimeoutMs;heartbeatMissThreshold;stableThresholdMs;now;setTimeoutFn;clearTimeoutFn;ping;onTimeout;onStable;onPhase;connectTimer;handshakeTimer;heartbeatTimer;stableTimer;awaitingPongSince;consecutiveHeartbeatMisses=0;stable=!1;stopped=!1;currentPhase="connecting";lastActivityAt;lastPongAt;pingRttMs;recentPingRttMs=[];constructor(e){this.connectTimeoutMs=Pm(e.connectTimeoutMs,1e4),this.handshakeTimeoutMs=Pm(e.handshakeTimeoutMs,1e4),this.heartbeatIntervalMs=Pm(e.heartbeatIntervalMs,25e3),this.heartbeatTimeoutMs=Pm(e.heartbeatTimeoutMs,15e3),this.heartbeatMissThreshold=Math.max(1,Math.floor(Pm(e.heartbeatMissThreshold,2))),this.stableThresholdMs=Pm(e.stableThresholdMs,6e4),this.now=e.now\|\|Date.now,this.setTimeoutFn=e.setTimeoutFn\|\|setTimeout,this.clearTimeoutFn=e.clearTimeoutFn\|\|clearTimeout,this.ping=e.ping,this.onTimeout=e.onTimeout,this.onStable=e.onStable,this.onPhase=e.onPhase}get phase(){return this.currentPhase}start(){this.stopped=!1,this.setPhase("connecting"),this.clearTimer("connectTimer"),this.connectTimer=Mm(this.setTimeoutFn(()=>this.timeout("connect"),this.connectTimeoutMs))}opened(){this.stopped\|\|(this.clearTimer("connectTimer"),this.setPhase("handshaking"),this.handshakeTimer=Mm(this.setTimeoutFn(()=>this.timeout("handshake"),this.handshakeTimeoutMs)),this.scheduleHeartbeat(this.heartbeatIntervalMs))}healthy(){this.stopped\|\|(this.clearTimer("handshakeTimer"),this.activity(),this.setPhase("healthy"),this.stable\|\|this.stableTimer\|\|(this.stableTimer=Mm(this.setTimeoutFn(()=>{this.stableTimer=void 0,this.stopped\|\|"healthy"!==this.currentPhase\|\|(this.stable=!0,this.onStable?.())},this.stableThresholdMs))))}activity(){this.stopped\|\|(this.lastActivityAt=this.now(),this.awaitingPongSince=void 0,this.consecutiveHeartbeatMisses=0,"handshaking"!==this.currentPhase&&"healthy"!==this.currentPhase\|\|this.scheduleHeartbeat(this.heartbeatIntervalMs))}pong(){if(this.stopped)return;const e=this.now();void 0!==this.awaitingPongSince&&(this.pingRttMs=Math.max(0,e-this.awaitingPongSince),this.recentPingRttMs.push(this.pingRttMs),this.recentPingRttMs.length>20&&this.recentPingRttMs.shift()),this.awaitingPongSince=void 0,this.consecutiveHeartbeatMisses=0,this.lastPongAt=e,this.lastActivityAt=e,this.scheduleHeartbeat(this.heartbeatIntervalMs)}close(){this.stopped\|\|(this.stopped=!0,this.clearTimers(),this.awaitingPongSince=void 0,this.setPhase("closed"))}diagnostics(){return{phase:this.currentPhase,stable:this.stable,...void 0===this.pingRttMs?{}:{pingRttMs:this.pingRttMs},...this.recentPingRttMs.length?{pingRttP95Ms:Lm(this.recentPingRttMs)}:{},...void 0===this.lastActivityAt?{}:{lastActivityAt:new Date(this.lastActivityAt).toISOString()},...void 0===this.lastPongAt?{}:{lastPongAt:new Date(this.lastPongAt).toISOString()},...this.consecutiveHeartbeatMisses?{consecutiveHeartbeatMisses:this.consecutiveHeartbeatMisses}:{}}}scheduleHeartbeat(e){this.stopped\|\|(this.clearTimer("heartbeatTimer"),this.heartbeatTimer=Mm(this.setTimeoutFn(()=>{if(this.heartbeatTimer=void 0,!this.stopped){if(void 0!==this.awaitingPongSince){const e=Math.max(0,this.now()-this.awaitingPongSince);return e>=this.heartbeatTimeoutMs?(this.consecutiveHeartbeatMisses+=1,this.awaitingPongSince=void 0,this.consecutiveHeartbeatMisses>=this.heartbeatMissThreshold?void this.timeout("heartbeat"):void this.sendHeartbeatProbe()):void this.scheduleHeartbeat(this.heartbeatTimeoutMs-e)}this.sendHeartbeatProbe()}},e)))}sendHeartbeatProbe(){this.awaitingPongSince=this.now();try{this.ping()}catch{if(this.consecutiveHeartbeatMisses+=1,this.awaitingPongSince=void 0,this.consecutiveHeartbeatMisses>=this.heartbeatMissThreshold)return void this.timeout("heartbeat")}this.scheduleHeartbeat(this.heartbeatTimeoutMs)}timeout(e){this.stopped\|\|(this.clearTimers(),this.setPhase("failed"),this.onTimeout(e))}setPhase(e){this.currentPhase!==e&&(this.currentPhase=e,this.onPhase?.(e))}clearTimers(){this.clearTimer("connectTimer"),this.clearTimer("handshakeTimer"),this.clearTimer("heartbeatTimer"),this.clearTimer("stableTimer")}clearTimer(e){const t=this[e];t&&this.clearTimeoutFn(t),this[e]=void 0}}function Fm(e){const t=new URL(gm,e);return t.protocol="https:"===t.protocol?"wss:":"ws:",t.toString()}const Um=new Set(["linux","darwin","win32","freebsd","openbsd","aix","sunos"]);function $m(e){return Um.has(e)?e:"unknown"}function Hm(e){return!0===e.managedArtifacts}class qm{managedArtifacts=!0;executor;runCommand;platform;arch;constructor(e,t,n,i){this.executor=e,this.runCommand=t,this.platform=n,this.arch=i}artifactTarget(e){return this.executor.inspectRuntimeTarget(e?.instance.runtime.containerName)}resolveInstanceWeb(e){return this.executor.resolveInstanceWeb(e)}async installRuntime(e,t){const n=e.instance.runtime.containerName;if(!n)throw Object.assign(new Error(`Instance ${e.instance.id} does not have a Docker container.`),{code:"INSTANCE_RUNTIME_INSTALL_FAILED"});await this.executor.installRuntimeReleaseWithRecovery({containerName:n,expectedContainerId:e.instance.runtime.containerId,artifactPath:t.archivePath,identity:t.identity})}async inspectRuntime(e,t){const n=e.instance.runtime.containerName;if(!n)return!1;const i=function(e,t){return e.packageName===t.packageName&&e.version===t.version&&e.platform===t.platform&&e.arch===t.arch&&e.formatVersion===t.formatVersion&&e.launcherAbi===t.launcherAbi&&e.entrypoint===t.entrypoint&&e.sha256===t.sha256}(await this.executor.inspectRuntimeVersion(n),t),s=e.instance.runtime.labels["task-handoff.bootstrap-backup"];return i&&s&&await this.executor.removeBootstrapBackup(s,e.instance.id),i}start(e){return this.executor.start(e)}stop(e){return this.executor.stop(e)}restart(e){return this.executor.restart(e,e.instance.runtime.containerId)}delete(e,t){return this.executor.delete(e,t)}async check(e){try{const t=(await this.runCommand("docker",["version","--format","{{.Server.Version}}"],{timeoutMs:5e3})).stdout.trim();return{status:"online",capabilities:{...e.capabilities,daemon:{status:"online",hostPlatform:$m(this.platform),...t?{serverVersion:t}:{}}}}}catch(t){return{status:"offline",capabilities:{...e.capabilities,daemon:{status:"offline",hostPlatform:$m(this.platform),error:t instanceof Error?t.message:String(t)}}}}}}class Vm{docker;local;constructor(e,t){this.docker=e,this.local=t}forRuntime(e){if("docker"===e.type)return this.docker;if("local"===e.type)return this.local;throw Object.assign(new Error(`Runtime type ${e.type} is not supported by this node agent.`),{statusCode:400,code:"NODE_RUNTIME_TYPE_UNSUPPORTED"})}managedAdapters(){return[this.docker,this.local].filter(Hm)}async stopAll(){await(this.local.stopAll?.())}}const Bm="task-handoff.local-process-nonce",Km=1e3,Gm=1e4,Wm=2e3;function Xm(e,t){try{e?.(t)}catch{}}function Ym(e){return e.runtime.port?`http://127.0.0.1:${e.runtime.port}`:void 0}async function Jm(e,t){try{const n=await fetch(`${e}/api/internal/node-agent/process-identity`,{headers:{authorization:`Bearer ${t}`},signal:AbortSignal.timeout(Km)});if(!n.ok)return;const i=(await n.json()).data;if("string"!=typeof i?.instanceId\|\|"number"!=typeof i.pid\|\|"string"!=typeof i.processNonce)return;return{instanceId:i.instanceId,pid:i.pid,processNonce:i.processNonce,startIdentity:"string"==typeof i.startIdentity?i.startIdentity:void 0}}catch{return}}async function Qm(e,t){if($.processStartIdentity(e)!==t)return!1;try{process.kill(e,"SIGTERM")}catch{return!0}const n=Date.now()+Gm;for(;Date.now()<n;){try{process.kill(e,0)}catch{return!0}await new Promise(e=>setTimeout(e,50))}try{process.kill(e,"SIGKILL")}catch{}const i=Date.now()+Wm;for(;Date.now()<i;){try{process.kill(e,0)}catch{return!0}await new Promise(e=>setTimeout(e,50))}return!1}function Zm(e,t){return Object.assign(new Error(t),{statusCode:503,code:"LOCAL_INSTANCE_STOP_UNCONFIRMED",instanceId:e.id})}async function eh(e){return!await function(e){return new Promise(t=>{const n=m.createConnection({host:"127.0.0.1",port:e}),i=e=>{n.removeAllListeners(),n.destroy(),t(e)};n.once("connect",()=>i(!0)),n.once("error",()=>i(!1)),n.setTimeout(250,()=>i(!1))})}(e)&&new Promise(t=>{const n=m.createServer();n.once("error",()=>t(!1)),n.listen({host:"127.0.0.1",port:e,exclusive:!0},()=>n.close(()=>t(!0)))})}const th=eh;function nh(e,t){return null!==e.exitCode\|\|null!==e.signalCode?Promise.resolve(!0):new Promise(n=>{const i=setTimeout(()=>{e.off("exit",s),n(null!==e.exitCode\|\|null!==e.signalCode)},t);i.unref();const s=()=>{clearTimeout(i),n(!0)};e.once("exit",s)})}async function ih(e,t=1e4,n=2e3,i){if(await nh(e,t))return;Xm(i,{stage:"graceful-timeout",pid:e.pid,timeoutMs:t});let s=!1;if(null===e.exitCode&&null===e.signalCode&&(e.kill("SIGKILL"),s=!0,Xm(i,{stage:"force-signal-sent",pid:e.pid,signal:"SIGKILL"})),!await nh(e,n))throw Xm(i,{stage:"force-exit-unconfirmed",pid:e.pid,signal:"SIGKILL",timeoutMs:n}),Object.assign(new Error(`Controlled instance process pid=${e.pid??"unknown"} did not exit after SIGKILL.`),{statusCode:503,code:"LOCAL_INSTANCE_PROCESS_EXIT_UNCONFIRMED",pid:e.pid});s&&Xm(i,{stage:"force-exit-confirmed",pid:e.pid,signal:"SIGKILL"})}class sh{children=new Map;readyChildren=new WeakSet;expectedExits=new WeakSet;lifecycleReporters=new WeakMap;lockPath;onUnexpectedExit;onUnexpectedExitError;constructor(e,t,n){this.lockPath=e,this.onUnexpectedExit=t,this.onUnexpectedExitError=n}track(e,t,n){this.children.set(e,t),n&&this.lifecycleReporters.set(t,n),t.once("exit",(n,i)=>{if(this.release(e,t),this.readyChildren.has(t)&&!this.expectedExits.has(t)){const s={instanceId:e,pid:t.pid,code:n,signal:i},o=e=>{try{this.onUnexpectedExitError?.(e,s)}catch{}};try{Promise.resolve(this.onUnexpectedExit?.(s)).catch(o)}catch(e){o(e)}}})}markReady(e,t){return this.children.get(e)===t&&null===t.exitCode&&null===t.signalCode&&(this.readyChildren.add(t),!0)}release(e,t){this.children.get(e)===t&&this.children.delete(e)}async stop(e){const t=this.children.get(e.id);if(t){this.expectedExits.add(t);const n=this.lifecycleReporters.get(t);return t.killed\|\|(t.kill("SIGTERM"),Xm(n,{stage:"graceful-signal-sent",pid:t.pid,signal:"SIGTERM"})),this.children.delete(e.id),void await ih(t,Gm,Wm,n)}const i=await async function(e){const t=Ym(e),n=e.runtime.labels?.[Bm];if(!t\|\|!n\|\|!e.registrationToken)return;const i=await Jm(t,e.registrationToken);if(i&&i.instanceId===e.id&&i.processNonce===n)try{return(await fetch(`${t}/api/internal/node-agent/shutdown`,{method:"POST",headers:{authorization:`Bearer ${e.registrationToken}`},signal:AbortSignal.timeout(Km)})).ok?i:void 0}catch{return}}(e);if(i){const t=Ym(e),n=Date.now()+Gm;for(;t&&Date.now()<n;){if(!await Jm(t,e.registrationToken))return;await new Promise(e=>setTimeout(e,50))}const s=t?await Jm(t,e.registrationToken):void 0;if(s&&s.instanceId===i.instanceId&&s.pid===i.pid&&s.processNonce===i.processNonce&&s.startIdentity===i.startIdentity&&s.startIdentity&&await Qm(s.pid,s.startIdentity))return;throw Zm(e,`Controlled instance ${e.id} accepted shutdown but its exit could not be confirmed.`)}const s=function(e=function(){const e="win32"===process.platform?c.tmpdir():"/tmp";return n.join(e,`task-handoff-local-controlled-instance-${function(){const e=process.getuid?.();return void 0!==e?String(e):c.userInfo().username.replace(/[^a-zA-Z0-9_.-]/g,"_")}()}.lock`)}()){return G(e)}(this.lockPath),o=await async function(e){const t=Ym(e);if(t)try{const[n,i]=await Promise.all([fetch(`${t}/api/instance/status`,{signal:AbortSignal.timeout(Km)}),fetch(`${t}/api/diagnostics`,{signal:AbortSignal.timeout(Km)})]);if(!n.ok\|\|!i.ok)return;const s=await n.json(),o=await i.json(),r=o.data?.runtime?.pid;if(s.data?.id!==e.id\|\|"controlled"!==s.data.controlMode\|\|"number"!=typeof r\|\|!Number.isInteger(r)\|\|r<=0)return;const a=$.processStartIdentity(r);return a?{pid:r,startIdentity:a}:void 0}catch{return}}(e);if(o){if(await Qm(o.pid,o.startIdentity))return;throw Zm(e,`Legacy controlled instance ${e.id} did not exit after termination.`)}if(s?.instanceId===e.id&&Y(s))throw Zm(e,`Local controlled instance ${e.id} is still owned by pid ${s.pid}, but its process identity could not be verified.`)}async waitUntilHealthy(e,t,n,i,s=function(e=process.env.TASK_HANDOFF_LOCAL_PROCESS_READY_TIMEOUT_MS){const t=Number(e);return Number.isFinite(t)&&t>0?t:3e4}()){const o=Date.now()+s;for(;Date.now()<o;){if(null!==n.exitCode\|\|null!==n.signalCode)return!1;const s=await Jm(e,i);if(s&&s.instanceId===t.instanceId&&s.pid===t.pid&&s.processNonce===t.processNonce&&s.startIdentity===t.startIdentity)return!0;await new Promise(e=>setTimeout(e,100))}return!1}async stopAll(){const e=Array.from(this.children.values());for(const t of e){this.expectedExits.add(t);const e=this.lifecycleReporters.get(t);t.killed\|\|(t.kill("SIGTERM"),Xm(e,{stage:"graceful-signal-sent",pid:t.pid,signal:"SIGTERM"}))}this.children.clear(),await Promise.all(e.map(e=>ih(e,Gm,Wm,this.lifecycleReporters.get(e))))}}async function oh(e,t){try{const n=await e(t,["--version"]);return{available:!0,command:t,version:(n.stdout\|\|n.stderr).split(/\r?\n/)[0]?.trim()\|\|void 0}}catch{return{available:!1}}}class rh{runCommand;paths;nodeAgentUrl;processSupervisor;async resolveInstanceWeb(e){const t=e.instance.runtime.port;if(!t)throw Object.assign(new Error(`Instance ${e.instance.id} does not have a node-owned local runtime port.`),{statusCode:409,code:"INSTANCE_RUNTIME_ENDPOINT_UNAVAILABLE"});return`http://127.0.0.1:${t}`}commandOverride;lockPath;constructor(e,t,n,i,s,o,r){this.runCommand=e,this.paths=t,this.nodeAgentUrl=n,this.commandOverride=i,this.lockPath=s,this.processSupervisor=new sh(s,o,r)}async start(e){await this.processSupervisor.stop(e.instance);const i=function(e){if("local-folder"!==e.source.type){const e=new Error("Localhost runtime currently supports local folder sources only.");throw Object.assign(e,{statusCode:400,code:"LOCAL_RUNTIME_REQUIRES_LOCAL_FOLDER"}),e}return n.resolve(e.source.path)}(e.instance),s=e.instance.runtime.port,o=!!s&&await eh(s),r="allocate"===process.env.TASK_HANDOFF_LOCAL_INSTANCE_PORT_CONFLICT;if(s&&!o&&!r)throw Object.assign(new Error(`Local controlled instance port 127.0.0.1:${s} is already in use.`),{statusCode:409,code:"LOCAL_INSTANCE_PORT_IN_USE"});const a=s&&o?s:await async function(){const e=Number(process.env.TASK_HANDOFF_LOCAL_INSTANCE_PORT_START\|\|19e3),t=Number.isInteger(e)&&e>0?e:19e3;for(let e=t;e<t+1e3&&e<=65535;e+=1)if(await th(e))return e;throw Object.assign(new Error(`No free localhost port found in range ${t}-${Math.min(t+999,65535)}.`),{statusCode:503,code:"LOCAL_INSTANCE_PORT_UNAVAILABLE"})}(),u=n.join(this.paths.dataDir,"local-instances",e.instance.id),p=n.join(u,"logs"),m=(e.instance.config?.codexConfigEnabled??1)&&"taskhandoff"===(e.instance.config?.codexHomeMode??"taskhandoff")?n.join(u,"configs","codex"):void 0;t.mkdirSync(p,{recursive:!0,mode:448}),m&&t.mkdirSync(m,{recursive:!0,mode:448}),t.chmodSync(u,448),t.chmodSync(p,448),m&&t.chmodSync(m,448);const[h,...g]=function(e){if(e)return e;const i=n.resolve(process.cwd(),"bin","task-handoff.js");if(t.existsSync(i))return[process.execPath,i,"web"];throw Object.assign(new Error("The bundled controlled-instance command is unavailable."),{statusCode:500,code:"LOCAL_CONTROLLED_COMMAND_MISSING"})}(this.commandOverride),f=[...g,"--host","127.0.0.1","--port",String(a)],y=d.randomUUID(),I=n.join(p,"controlled-instance.out.log"),A=n.join(p,"controlled-instance.err.log");Ia(I),Ia(A);const _=t.mkdtempSync(function(e,t=process.platform,i=c.tmpdir()){const s="darwin"===t?"/private/tmp":i,o=d.createHash("sha256").update(e).digest("hex").slice(0,12);return n.join(s,`th-git-${o}-`)}(e.instance.id));t.chmodSync(_,448);const E=t.openSync(I,"a",384),T=t.openSync(A,"a",384),b=l.spawn(h,f,{cwd:i,detached:!1,stdio:["ignore",E,T],env:{...process.env,TASK_HANDOFF_CONTROL_MODE:"controlled",TASK_HANDOFF_RUNTIME_KIND:"local",TASK_HANDOFF_CONTROLLED_INSTANCE_VERSION:kl(),...this.lockPath?{TASK_HANDOFF_LOCAL_CONTROLLED_INSTANCE_LOCK_PATH:this.lockPath}:{},TASK_HANDOFF_NODE_AGENT_URL:this.nodeAgentUrl(),TASK_HANDOFF_INSTANCE_ID:e.instance.id,TASK_HANDOFF_INSTANCE_NAME:e.instance.name,TASK_HANDOFF_REGISTRATION_TOKEN:e.instance.registrationToken\|\|"",TASK_HANDOFF_PROJECT_ID:e.project.id,TASK_HANDOFF_NODE_ID:e.node.id,TASK_HANDOFF_RUNTIME_ID:e.runtime.id,TASK_HANDOFF_LOCAL_PROCESS_NONCE:y,TASK_HANDOFF_WORKSPACE:i,TASK_HANDOFF_WORKSPACE_MODE:"local-bind",TASK_HANDOFF_DATA_DIR:u,TASK_HANDOFF_INSTANCE_PRIVATE_CONFIG_PATH:e.privateConfigPath\|\|"",TASK_HANDOFF_LOG_DIR:p,TASK_HANDOFF_APP_SESSION_PERSIST:"1",TASK_HANDOFF_CODEX_APP_SERVER:process.env.TASK_HANDOFF_CODEX_APP_SERVER\|\|"1",TASK_HANDOFF_WEB_PORT:String(a),TASK_HANDOFF_WEB_HOST:"127.0.0.1",TASK_HANDOFF_GIT_CREDENTIAL_SOCKET:n.join(_,"broker.sock"),...e.modelEnv\|\|{},CODEX_HOME:m}});t.closeSync(E),t.closeSync(T);try{await function(e){return new Promise((t,n)=>{const i=()=>{e.off("error",s),t()},s=t=>{e.off("spawn",i),n(t)};e.once("spawn",i),e.once("error",s)})}(b)}catch(e){t.rmSync(_,{recursive:!0,force:!0});const s=e instanceof Error?e.message:String(e);try{t.appendFileSync(n.join(p,"controlled-instance.lifecycle.log"),`[${(new Date).toISOString()}] spawn failed command=${h} cwd=${i} error=${s}\n`)}catch{}throw Object.assign(new Error(`Controlled instance process could not start with command ${h} in ${i}: ${s}`),{statusCode:500,code:"LOCAL_INSTANCE_PROCESS_SPAWN_FAILED"})}const w=n.join(p,"controlled-instance.lifecycle.log");this.processSupervisor.track(e.instance.id,b,e=>{t.appendFileSync(w,`[${(new Date).toISOString()}] shutdown stage=${e.stage} pid=${e.pid??""} signal=${e.signal??""} timeoutMs=${e.timeoutMs??""}\n`)}),b.on("error",e=>{try{t.appendFileSync(w,`[${(new Date).toISOString()}] process error pid=${b.pid??""} error=${e.message}\n`)}catch{}}),b.once("exit",(e,n)=>{t.rmSync(_,{recursive:!0,force:!0});try{t.appendFileSync(w,`[${(new Date).toISOString()}] exited pid=${b.pid??""} code=${e??""} signal=${n??""}\n`)}catch{}});const S=`http://127.0.0.1:${a}`,v=b.pid?$.processStartIdentity(b.pid):void 0;if(!(b.pid&&e.instance.registrationToken&&await this.processSupervisor.waitUntilHealthy(S,{instanceId:e.instance.id,pid:b.pid,processNonce:y,startIdentity:v},b,e.instance.registrationToken)&&this.processSupervisor.markReady(e.instance.id,b)))throw this.processSupervisor.release(e.instance.id,b),null===b.exitCode&&null===b.signalCode&&b.kill("SIGTERM"),await ih(b),Object.assign(new Error(`Controlled instance process did not become ready for instance ${e.instance.id} on ${S}.`),{statusCode:503,code:"LOCAL_INSTANCE_PROCESS_NOT_READY"});return{status:"registering",health:"unknown",connectionStatus:"online",agentStatus:"unknown",targetStatus:"unknown",uiAccessStatus:"unknown",target:{strategy:"direct-port",status:"unknown",web:S,api:`${S}/api`},workspace:{mode:"local-bind",status:"pending",path:i},runtime:{kind:"local",workspacePath:i,pid:b.pid,port:a,labels:{...e.instance.runtime.labels,"task-handoff.runtime-kind":"local",[Bm]:y}}}}async stop(e){return await this.processSupervisor.stop(e.instance),{status:"stopped",health:"unknown",connectionStatus:"offline",agentStatus:"offline",targetStatus:"unknown",uiAccessStatus:"unknown",target:{...e.instance.target,status:"unknown"},runtime:e.instance.runtime}}async restart(e){return this.start(e)}async delete(e,t){return await this.stop(e),Ai.parse({instanceId:e.instance.id,containerDeleted:!0,completed:!0,deletedVolumes:[],retainedVolumes:[],volumeResults:[]})}async check(e){const[t,n]=await Promise.all([oh(this.runCommand,"codex"),oh(this.runCommand,"claude")]);return{status:"online",capabilities:Bl({...e.capabilities,apps:{terminal:!0,codex:t,claude:n}})}}async stopAll(){await this.processSupervisor.stopAll()}}const ah=["codex","claude"],ch=5e3,dh=$.processStartIdentity(process.pid);function lh(e){const t=process.env[e]?.trim();return t\|\|void 0}function uh(e){const t=e.authorization;return"string"==typeof t&&t.startsWith("Bearer ")?t.slice(7).trim():void 0}function ph(e){if("string"!=typeof e)return!1;const t=e.trim().toLowerCase();return"localhost"===t\|\|"127.0.0.1"===t\|\|"::1"===t\|\|"::ffff:127.0.0.1"===t}function mh(e){return!e.ip&&!e.socket.remoteAddress&&!e.socket.remoteFamily}async function hh(e,t,n){const i=new AbortController,s=setTimeout(()=>i.abort(),2e3);try{return(await e(`${await n(t)}/api/health`,{signal:i.signal})).ok?"reachable":"endpoint-unreachable"}catch{return"endpoint-unreachable"}finally{clearTimeout(s)}}async function gh(e,t,n,i){const s=new AbortController,o=setTimeout(()=>s.abort(),i);try{return await e(t,{...n,signal:s.signal})}finally{clearTimeout(o)}}async function fh(e,t,n,i,s){if(!t.config.autoImportAgentConfigs)return void i.diagnostic({instanceId:t.id,action:n},"node instance config auto-import skipped");if("reachable"!==t.targetStatus)return;const o=await s(t),r=Number(process.env.TASK_HANDOFF_CONFIG_AUTO_IMPORT_TIMEOUT_MS\|\|ch);for(const s of ah)try{const a=await gh(e,`${o}/api/config-sync/import/${encodeURIComponent(s)}`,{method:"POST"},Number.isFinite(r)&&r>0?r:ch);if(!a.ok){i.warn({instanceId:t.id,action:n,preset:s,statusCode:a.status},"node instance config auto-import failed");continue}i.diagnostic({instanceId:t.id,action:n,preset:s},"node instance config auto-import completed")}catch(e){i.warn({instanceId:t.id,action:n,preset:s,error:e instanceof Error?e.message:String(e)},"node instance config auto-import failed")}}async function yh(e,t,n,i,s=async e=>cm(e)){const o=t.requireInstance(n),r=t.resolvedAssignedModelEnvironment(n),a=t.modelRegistry.privateCatalog(n);if(t.instancePrivateConfigs.materialize(o.id,o.registrationToken,r,a,o.config.codexSettings),"reachable"!==o.targetStatus)return!1;let c;try{c=await gh(e,`${await s(o)}/api/internal/model-environment`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${o.registrationToken}`},body:JSON.stringify(r)},ch)}catch(e){return i?.({instanceId:n,targetWeb:o.target.web,error:e instanceof Error?e.message:String(e)},"node instance model environment live sync deferred"),!1}if(!c.ok)return i?.({instanceId:n,targetWeb:o.target.web,statusCode:c.status},"node instance model environment live sync deferred"),!1;if(!Kn(o.capabilities).features.privateModelCatalog)return!0;try{const t=await gh(e,`${await s(o)}/api/internal/model-catalog`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${o.registrationToken}`},body:JSON.stringify(a)},ch);t.ok\|\|404===t.status\|\|i?.({instanceId:n,statusCode:t.status},"node instance model catalog live sync deferred")}catch(e){i?.({instanceId:n,error:e instanceof Error?e.message:String(e)},"node instance model catalog live sync deferred")}return!0}async function Ih(e,t,n,i,s,o,r="request",a){const c=e.requireInstance(i);if(c.imageProvisioning&&"ready"!==c.imageProvisioning.phase&&"docker"===e.requireRuntime(c.runtimeId).type)return s.diagnostic({instanceId:i,action:"start",reason:r,runtimeId:c.runtimeId,imageId:c.imageSelection?.imageId,imagePhase:c.imageProvisioning.phase},"node instance start queued until image provisioning completes"),e.controlledInstances.put(co.parse({...c,status:"starting",updatedAt:ae()}));s.diagnostic({instanceId:i,action:"start",reason:r,runtimeId:c.runtimeId,imageId:c.imageSelection?.imageId},"node instance start requested");const d=e.applyInstanceLifecycle(i,{type:"start-requested"}),l=t.forRuntime(e.requireRuntime(d.runtimeId)),u=await l.start({...e.context(d),signal:a}),p=u.target?.web?await hh(n,co.parse({...d,...u,target:{...d.target,...u.target},workspace:u.workspace?{...d.workspace,error:void 0,...u.workspace}:d.workspace,runtime:u.runtime?{...d.runtime,...u.runtime}:d.runtime,updatedAt:ae()}),o):"unknown",m=e.applyInstanceLifecycle(i,{type:"runtime-lifecycle-completed",baseline:d,observation:{...u,target:u.target?{...u.target,status:p}:void 0,workspace:u.workspace?{error:void 0,...u.workspace}:void 0,targetStatus:p,uiAccessStatus:p}});return s.diagnostic({instanceId:i,action:"start",reason:r,status:m.status,connectionStatus:m.connectionStatus,targetStatus:m.targetStatus,targetWeb:m.target.web,containerName:m.runtime.containerName},"node instance start completed"),m}async function Ah(e={}){const i=e.token\|\|process.env.TASK_HANDOFF_NODE_AGENT_TOKEN,c=Number(e.port\|\|process.env.TASK_HANDOFF_NODE_AGENT_PORT\|\|"8091"),d=`http://127.0.0.1:${c}`,l=e.containerUrl\|\|process.env.TASK_HANDOFF_NODE_AGENT_CONTAINER_URL,u=fa(e.dataDir),m=await async function(e){return ul(e)}(u);try{const f=ld(m),y=e.remoteSecret\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_SECRET,I=e.remoteKeyId\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_KEY_ID,A=new bm(u,f.access),_=A.resolveNodeId(e.nodeId\|\|process.env.TASK_HANDOFF_NODE_ID),E=e.connectionMode\|\|("local-ipc"===process.env.TASK_HANDOFF_NODE_AGENT_CONNECTION_MODE?"local-ipc":"local-loopback"),T=e.ipcPath\|\|process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH\|\|_a(u.dataDir),b="local-ipc"===E?`ipc://${encodeURIComponent(T)}`:d,w=e.platform\|\|process.platform,S=e.arch\|\|process.arch,v=new Gl(u,_,d,l,c,w,f);v.node.connectionMode=E,v.node.controlEndpoint=b,v.node.endpoint=b,v.init();const N=new rp(u,_,f);await N.init();const z=new gp(f);await z.init();const C=e.dockerCommandRunner\|\|vo,R=new Oo(C,e.dockerTerminalCommandRunner),k=new Fo(C,{publishHost:"127.0.0.1",imageService:R});let D;const P=new Vm(new qm(k,C,w,S),new rh(e.dockerCommandRunner\|\|vo,u,()=>v.localNodeAgentUrl,function(){const e=process.env.TASK_HANDOFF_LOCAL_CONTROLLED_COMMAND_ARGV?.trim();if(!e){const e=process.env.TASK_HANDOFF_LOCAL_CONTROLLED_COMMAND?.trim();return e?e.split(/\s+/):void 0}let t;try{t=JSON.parse(e)}catch{throw Object.assign(new Error("TASK_HANDOFF_LOCAL_CONTROLLED_COMMAND_ARGV must be valid JSON."),{code:"LOCAL_CONTROLLED_COMMAND_INVALID"})}if(!Array.isArray(t)\|\|!t.length\|\|t.some(e=>"string"!=typeof e\|\|!e))throw Object.assign(new Error("TASK_HANDOFF_LOCAL_CONTROLLED_COMMAND_ARGV must be a non-empty string array."),{code:"LOCAL_CONTROLLED_COMMAND_INVALID"});return t}(),e.localControlledInstanceLockPath\|\|process.env.TASK_HANDOFF_LOCAL_CONTROLLED_INSTANCE_LOCK_PATH,e=>D.handleUnexpectedLocalExit(e.instanceId,new Error(`Local controlled instance exited unexpectedly (pid=${e.pid??"unknown"}, code=${e.code??"none"}, signal=${e.signal??"none"}).`)),(e,t)=>te.log.error({error:e,instanceId:t.instanceId,pid:t.pid},"local controlled instance exit recovery failed"))),L=async e=>cm(e,await P.forRuntime(v.requireRuntime(e.runtimeId)).resolveInstanceWeb(v.context(e))),M=e.updateCommandRunner\|\|e.dockerCommandRunner\|\|vo,F=e.fetchImpl\|\|fetch,U=new kp(v,N,F,L,(e,t)=>te.log.warn(e,t)),$=new Dp(v,F,L,(e,t)=>te.log.warn(e,t)),H=new Map,q=new Map,V=e=>{if("endpoint-unreachable"!==e.targetStatus\|\|"online"!==e.connectionStatus\|\|"online"!==e.agentStatus\|\|!e.target.web\|\|q.has(e.id))return;const t=e.processIncarnationId,n=(async()=>{if("reachable"!==await hh(F,e,L))return;const n=v.requireInstance(e.id);n.processIncarnationId===t&&"online"===n.connectionStatus&&"online"===n.agentStatus&&(v.controlledInstances.put(co.parse({...n,target:{...n.target,status:"reachable"},targetStatus:"reachable",uiAccessStatus:"reachable",updatedAt:ae()})),le.syncNow())})().catch(t=>{te.log.debug({instanceId:e.id,error:t},"node instance endpoint reconciliation probe failed")}).finally(()=>{q.delete(e.id)});q.set(e.id,n)},B=async e=>{const t=v.requireInstance(e);if(!Kn(t.capabilities).features.aiSessionPersistenceSettings\|\|"reachable"!==t.targetStatus\|\|!t.registrationToken)return!1;const n=function(e){return Gn(e).retentionSettings}(t.capabilities),i=function(e){return!0===Gn(e).fileSizeLimitSettings}(t.capabilities),s=`${t.processIncarnationId\|\|"unknown"}:${t.config.aiSessionHistoryLimit}:${n?t.config.aiSessionAttachmentRetentionDays:"unsupported"}:${i?t.config.aiSessionMaxFileAttachmentBytes:"unsupported"}`;if(H.get(e)===s)return!0;let o;try{o=await gh(F,`${await L(t)}/api/internal/ai-session-persistence-settings`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${t.registrationToken}`},body:JSON.stringify({historyLimit:t.config.aiSessionHistoryLimit,...n?{attachmentRetentionDays:t.config.aiSessionAttachmentRetentionDays}:{},...i?{maxFileAttachmentBytes:t.config.aiSessionMaxFileAttachmentBytes}:{}})},ch)}catch(t){return Ae.warn({instanceId:e,error:t instanceof Error?t.message:String(t)},"node instance AI session persistence settings live sync deferred"),!1}return o.ok?(H.set(e,s),!0):(Ae.warn({instanceId:e,statusCode:o.status},"node instance AI session persistence settings live sync deferred"),!1)},K=async e=>{const t=v.requireInstance(e);if(v.instancePrivateConfigs.materialize(t.id,t.registrationToken,v.resolvedAssignedModelEnvironment(e),v.modelRegistry.privateCatalog(e),t.config.codexSettings),!t.config.codexSettings)return!0;if(!Kn(t.capabilities).features.codexManagedSettings\|\|"reachable"!==t.targetStatus\|\|!t.registrationToken)return!1;try{const n=await gh(F,`${await L(t)}/api/internal/codex-settings`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${t.registrationToken}`},body:JSON.stringify(t.config.codexSettings\|\|{})},ch);return!!n.ok\|\|(Ae.warn({instanceId:e,statusCode:n.status},"node instance Codex settings live sync deferred"),!1)}catch(t){return Ae.warn({instanceId:e,error:t instanceof Error?t.message:String(t)},"node instance Codex settings live sync deferred"),!1}},G=new za({cacheDir:n.join(u.dataDir,"runtime-artifacts"),fetchImpl:F}),W=e.resolveRuntimeArtifactRelease\|\|((e,t,n)=>Ca(e,t,n,F)),X=async(t,n,i)=>{const s=await n.artifactTarget(i);if(e.resolveRuntimeArtifact)return e.resolveRuntimeArtifact(t,s.platform,s.arch);const o=await W(t,s.platform,s.arch);if(o.identity.launcherAbi>s.launcherAbi)throw Object.assign(new Error(`Runtime requires launcher ABI ${o.identity.launcherAbi}, but ${s.platform}-${s.arch} provides ABI ${s.launcherAbi}.`),{code:"INSTANCE_BASE_RUNTIME_INCOMPATIBLE",retryable:!1});return G.resolve(o.identity,o.source)},Y=e=>P.forRuntime(v.requireRuntime(e.runtimeId)),J=e=>{const t=Y(e);return Hm(t)?t:void 0},Q=e=>{const t=J(e);if(t)return t;throw Object.assign(new Error(`Runtime for instance ${e.id} does not use managed artifacts.`),{code:"INSTANCE_RUNTIME_ARTIFACT_UNMANAGED",retryable:!1})},Z=e=>Boolean(J(e)),ee=(e,t)=>{const n=v.context(e);return X(t,Q(e),n)},te=o({logger:e.logger??!0}),ne=new Aa(u,{logger:(e,t)=>te.log.warn(t,e)}),ie=()=>v.listInstances().map(e=>e.id),se=()=>{try{ne.run(ie())}catch(e){te.log.warn({error:e},"node-agent persistence maintenance failed")}},oe=()=>{try{ne.capNodeAgentLogs(),ne.capActiveInstanceLogs(ie())}catch(e){te.log.warn({error:e},"node-agent open log maintenance failed")}};se();const re=setInterval(()=>{se()},216e5);re.unref();const ce=setInterval(()=>{oe()},6e4);ce.unref();const de={requests:0,active:0,completed:0,aborted:0,limitRejected:0,responseBytes:0,totalDurationMs:0,maxResponseBytes:nm()};te.decorate("nodeAgentState",v),te.decorate("nodeAgentIdentityService",A),await te.register(r,{options:x});const le=new Vr(v,i,{logger:te.log,safetyIntervalMs:Number(process.env.TASK_HANDOFF_EVENT_CONNECTION_SAFETY_INTERVAL_MS)\|\|void 0}),pe=new Ra(v.controlledInstances,kl,{isInstalled:async(e,t)=>{const n=await ee(e,t),i=await Q(e).inspectRuntime(v.context(e),n.identity);if(i&&e.runtime.labels["task-handoff.bootstrap-backup"]){const t=v.requireInstance(e.id),n={...t.runtime.labels};delete n["task-handoff.bootstrap-backup"],v.controlledInstances.put(co.parse({...t,runtime:{...t.runtime,labels:n},updatedAt:ae()}))}return i},beginDrain:async e=>{try{const t=await async function(e,t,n=async e=>cm(e)){const i=await n(t);if(t.registrationToken&&(await gh(e,`${i}/api/internal/node-agent/drain`,{method:"POST",headers:{authorization:`Bearer ${t.registrationToken}`}},1e4)).ok)return{requested:t.apps.runningCount,failures:[]};const s=await gh(e,`${i}/api/apps/sessions`,{method:"GET",headers:{"cache-control":"no-cache"}},5e3);if(!s.ok)throw new Error(`Could not list app sessions for runtime drain (HTTP ${s.status}).`);const o=function(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const t=e.data;if(Array.isArray(t))return t;if(!t\|\|"object"!=typeof t\|\|Array.isArray(t))return[];const n=t.snapshot,i=(n&&"object"==typeof n&&!Array.isArray(n)?n:t).sessions;return Array.isArray(i)?i:[]}(await s.json()).flatMap(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const t=e;return"running"===t.status&&"string"==typeof t.id&&t.id?[t.id]:[]}),r=await Promise.all(o.map(async t=>{try{const n=await gh(e,`${i}/api/apps/sessions/${encodeURIComponent(t)}/stop`,{method:"POST"},5e3);return n.ok?void 0:{sessionId:t,error:`HTTP ${n.status}`}}catch(e){return{sessionId:t,error:e instanceof Error?e.message:String(e)}}}));return{requested:o.length,failures:r.filter(e=>Boolean(e))}}(F,e,L);t.failures.length?te.log.warn({instanceId:e.id,requested:t.requested,failures:t.failures},"runtime convergence could not stop every app session"):te.log.info({instanceId:e.id,requested:t.requested},"runtime convergence requested app session drain")}catch(t){te.log.warn({instanceId:e.id,error:t instanceof Error?t.message:String(t)},"runtime convergence could not request app session drain")}},endDrain:async e=>{try{await async function(e,t,n=async e=>cm(e)){return!!t.registrationToken&&(await gh(e,`${await n(t)}/api/internal/node-agent/resume`,{method:"POST",headers:{authorization:`Bearer ${t.registrationToken}`}},5e3)).ok}(F,e,L)&&te.log.info({instanceId:e.id},"runtime convergence released app session drain")}catch(t){te.log.warn({instanceId:e.id,error:t instanceof Error?t.message:String(t)},"runtime convergence could not release app session drain")}},install:async(e,t)=>{const n=Q(e);await n.installRuntime(v.context(e),await ee(e,t))},restart:async e=>{const t=Y(e),n=v.applyInstanceLifecycle(e.id,{type:"convergence-restart-requested"}),i=await t.restart(v.context(n)),s=co.parse({...n,...i,target:i.target?{...n.target,...i.target}:n.target,runtime:i.runtime?{...n.runtime,...i.runtime}:n.runtime,updatedAt:ae()}),o=await hh(F,s,L);v.applyInstanceLifecycle(e.id,{type:"runtime-lifecycle-completed",baseline:n,observation:{...i,target:i.target?{...i.target,status:o}:void 0,targetStatus:o,uiAccessStatus:o}})},onForcedDrain:e=>te.log.warn({instanceId:e.id},"runtime convergence drain deadline reached; restarting instance")},{drainTimeoutMs:Number(process.env.TASK_HANDOFF_RUNTIME_DRAIN_TIMEOUT_MS)\|\|void 0,verificationTimeoutMs:Number(process.env.TASK_HANDOFF_RUNTIME_VERIFY_TIMEOUT_MS)\|\|void 0,maxAttempts:Number(process.env.TASK_HANDOFF_RUNTIME_MAX_ATTEMPTS)\|\|void 0});v.controlledInstances.setOnStored(e=>{le.publishInstanceLifecycle(e),v.updateJobs.reconcileRollouts(v.listInstances(),kl())}),le.start(),te.decorate("nodeAgentEventForwarder",le);const me=new Np(v,N,z,F,L,(e,t,n)=>le.publish(e,t,n)),he=new _p(v,N,z,me,f);await he.init(),await me.start(),N.setOnChange((e,t)=>{le.publish("story.changed",{storyId:t.id,nodeId:t.ownerNodeId,change:e},{nodeId:t.ownerNodeId}),U.reconcile()});const ge=new Zr(C,()=>v.listInstances().filter(e=>"docker"===v.requireRuntime(e.runtimeId).type),e=>le.publish("instance.metrics.snapshot",e,{instanceId:e.instanceId}));ge.start(),te.decorate("nodeAgentRuntimeMetrics",ge);const fe=(g=process.env.TASK_HANDOFF_DIAGNOSTIC_LOGS,["1","true","yes","on"].includes(String(g\|\|"").trim().toLowerCase())),ye=new Am(A,_,y,I),Ie=(e,t)=>{fe&&te.log.info(e,t)},Ae={diagnostic:Ie,warn:(e,t)=>te.log.warn(e,t)},_e=new Kp,Ee=new Jp(v.environmentTemplates,k,e=>v.requireInstance(e),e=>v.requireRuntime(e),(e,t)=>_e.run(e,t),e=>[e.registrationToken,...v.modelRegistry.privateSecretValues(e.id)].filter(e=>Boolean(e)),e=>v.listInstances().some(t=>t.environmentTemplateOrigin?.imageId===e)),Te=(e,t,n)=>{const i=n&&"object"==typeof n&&!Array.isArray(n)?n.protocolVersion:void 0;if("string"!=typeof i\|\|i===kn)return n;const s=({field:n,action:s})=>te.log.warn({instanceId:e,report:t,protocolVersion:i,expectedProtocolVersion:kn,field:n,action:s},"cross-version controlled instance report sanitized");return"register"===t?function(e,t){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const n=e,i=["instanceId","projectId","source","nodeId","runtimeId","imageSelection","instanceVersion","protocolVersion","build","controlMode","capabilities","appInventory","target","workspace","registrationToken","processIncarnationId"],s=new Set([...i,"imageId"]);for(const e of Object.keys(n))s.has(e)\|\|t?.({field:e,action:"ignored"});return Object.prototype.hasOwnProperty.call(n,"imageId")&&t?.({field:"imageId",action:"migrated"}),{...yo(n,i),imageSelection:Ei(n.imageSelection,n.imageId)}}(n,s):function(e,t){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const n=["status","health","protocolVersion","build","capabilities","appInventory","apps","aiSessions","triggers","workspace","target","processIncarnationId"],i=new Set(n);for(const n of Object.keys(e))i.has(n)\|\|t?.({field:n,action:"ignored"});return yo(e,n)}(n,s)},be=async(e,t,n=()=>!0,i)=>{try{if(!n())return v.requireInstance(e);let s=v.requireInstance(e);"failed"===s.runtimeVersion?.phase&&Z(s)&&(s=v.controlledInstances.put(co.parse({...s,ready:!1,runtimeVersion:Pl(xa(s)),updatedAt:ae()})));const o=v.requireRuntime(s.runtimeId);await Ih(v,P,F,e,Ae,L,t,i);const r=v.requireInstance(e);if("docker"===o.type&&r.imageProvisioning&&"ready"!==r.imageProvisioning.phase)return le.syncNow(),r;if(!n())return v.requireInstance(e);D.markRestored(e);let a=v.requireInstance(e);if(Z(a)){try{a=await pe.schedule(e,{startRequested:!0})}catch(n){a=v.requireInstance(e),Ae.warn({instanceId:e,action:"runtime.converge",reason:t,error:n instanceof Error?n.message:String(n)},"node instance runtime convergence failed after start")}"matched"!==a.runtimeVersion?.phase&&a.runtimeVersion?.error&&Ae.warn({instanceId:e,action:"runtime.converge",reason:t,error:a.runtimeVersion.error},"node instance started with pending runtime convergence")}return n()?(await fh(F,a,"start",Ae,L),le.syncNow(),a):v.requireInstance(e)}catch(n){throw v.applyInstanceLifecycle(e,{type:"start-failed",error:n}),le.syncNow(),Ae.warn({instanceId:e,action:"start",reason:t,error:n instanceof Error?n.message:String(n)},"node instance start failed"),n}},we=new Wp(v,R,{sync:()=>le.syncNow(),diagnostic:Ae.diagnostic,warn:Ae.warn,publish:(e,t,n)=>le.publish(e,t,{instanceId:n}),runInstanceOperation:(e,t)=>_e.run(e,t)}),Se=e=>{const t=_e.intent(e.id);we.provision(e,async()=>{await be(e.id,"image-ready",()=>_e.isIntentCurrent(e.id,t),_e.signal(e.id,t)).catch(()=>{})})};D=new Rm({state:v,runtimeAdapters:P,convergence:pe,restoreInstance:e=>Ih(v,P,F,e,Ae,L,"restore"),autoImport:e=>fh(F,e,"start",Ae,L),provisionImage:Se,stopImageProvisioning:()=>we.stop(),usesManagedArtifact:Z,warn:Ae.warn,error:(e,t)=>te.log.error(e,t),runInstanceOperation:(e,t)=>_e.run(e,t)});const ve=async e=>{const t=new Map;for(const e of P.managedAdapters()){const n=await e.artifactTarget();t.set(`${n.platform}-${n.arch}`,{adapter:e})}for(const e of v.listInstances()){const n=J(e);if(!n)continue;const i=v.context(e),s=await n.artifactTarget(i);t.set(`${s.platform}-${s.arch}`,{adapter:n,context:i})}return(await Promise.all([...t.values()].map(({adapter:t,context:n})=>X(e,t,n)))).sort((e,t)=>`${e.identity.platform}/${e.identity.arch}`.localeCompare(`${t.identity.platform}/${t.identity.arch}`))},Ne=new Nm({nodeId:_,jobs:v.updateJobs,runCommand:M,currentRuntimeVersion:kl,listInstances:()=>v.listInstances(),resolveRuntimeArtifacts:async e=>(await ve(e)).map(e=>e.identity),moduleDir:("undefined"==typeof document?require("url").pathToFileURL(__filename).href:O&&"SCRIPT"===O.tagName.toUpperCase()&&O.src\|\|new URL("cli.js",document.baseURI).href)?n.dirname(s.fileURLToPath("undefined"==typeof document?require("url").pathToFileURL(__filename).href:O&&"SCRIPT"===O.tagName.toUpperCase()&&O.src\|\|new URL("cli.js",document.baseURI).href)):__dirname,managedUpdateSupport:e.managedUpdateSupport\|\|(n=>"linux"!==(e.platform\|\|process.platform)?{supported:!1,reason:"Managed server updates require Linux and systemd."}:"function"==typeof process.getuid&&0!==process.getuid()?{supported:!1,reason:"Managed server updates require the node agent to run as root."}:t.existsSync("/run/systemd/system")?"@task-handoff/server"!==n.packageName\|\|process.env.TASK_HANDOFF_CONTROL_PLANE_HEALTH_URL?.trim()?process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH?.trim()?{supported:!0}:{supported:!1,reason:"Managed server updates require the node-agent IPC readiness endpoint."}:{supported:!1,reason:"Managed server updates require a local control-plane health URL."}:{supported:!1,reason:"Managed server updates require an active systemd host."})});return te.setErrorHandler((e,t,n)=>{const i=function(e){if(e instanceof a.z.ZodError)return{statusCode:400,code:"VALIDATION_ERROR",message:e.issues.map(e=>`${e.path.join(".")\|\|"body"}: ${e.message}`).join("; "),details:{issues:e.issues.map(e=>({path:e.path.map(String),code:e.code,message:e.message}))}};const t=e&&"object"==typeof e?e:{};return{statusCode:"number"==typeof t.statusCode?t.statusCode:500,code:"string"==typeof t.code?t.code:"NODE_AGENT_ERROR",message:e instanceof Error?e.message:String(e),...t.details&&"object"==typeof t.details&&!Array.isArray(t.details)?{details:t.details}:{},..."boolean"==typeof t.retryable?{retryable:t.retryable}:{}}}(e);(fe\|\|i.statusCode>=500)&&(i.statusCode>=500?te.log.error.bind(te.log):te.log.warn.bind(te.log))({method:t.method,url:t.url,statusCode:i.statusCode,errorCode:i.code,error:i.message},"node agent request failed"),n.code(i.statusCode).send({error:{code:i.code,message:i.message,...i.details?{details:i.details}:{},...e&&"object"==typeof e&&"string"==typeof e.expectedVersion?{expectedVersion:e.expectedVersion}:{},...e&&"object"==typeof e&&"string"==typeof e.actualVersion?{actualVersion:e.actualVersion}:{},...e&&"object"==typeof e&&"string"==typeof e.phase?{phase:e.phase}:{},...e&&"object"==typeof e&&"boolean"==typeof e.retryable?{retryable:e.retryable}:{},...e&&"object"==typeof e&&"number"==typeof e.blockingInstanceCount?{blockingInstanceCount:e.blockingInstanceCount}:{}}})}),te.addHook("preHandler",async e=>{const t=ye.verify(e);if(t){if(A.isRevokedPairing(t)&&"/api/node-agent/pairing/current"!==e.url.split("?")[0]){const e=new Error("The node agent pairing used for this request has been revoked.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_HMAC_KEY_REVOKED"}),e}e.nodeAgentAuthKeyId=t}else if(mh(e)){if(i&&uh(e.headers)!==i){const e=new Error("Invalid node agent token.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_UNAUTHORIZED"}),e}}else if("/api/node-agent/pairing/complete"!==e.url.split("?")[0]&&!function(e){const t=e.split("?")[0];return/^\/api\/node-agent\/instances\/[^/]+\/(register\|heartbeat)$/.test(t)\|\|/^\/api\/node-agent\/instances\/[^/]+\/git-credentials\//.test(t)\|\|/^\/api\/node-agent\/instances\/[^/]+\/ai-sessions\/[^/]+\/story-content(?:\/\|$)/.test(t)}(e.url)){if(ye.hasRemoteSecrets()){const e=new Error("Node agent HMAC signature is required.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_HMAC_SIGNATURE_REQUIRED"}),e}if(!function(e){return ph(e.ip)\|\|ph(e.socket.remoteAddress)\|\|!e.ip&&!e.socket.remoteAddress&&!e.socket.remoteFamily}(e)){const e=new Error("Local node agent access is only accepted from loopback or local IPC connections.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_LOCAL_TOKEN_REQUIRES_LOOPBACK"}),e}if(i&&uh(e.headers)!==i){const e=new Error("Invalid node agent token.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_UNAUTHORIZED"}),e}}}),te.addHook("onClose",async()=>{N.stopAccepting(),f.stopAccepting();const e=Number(process.env.TASK_HANDOFF_STORY_DRAIN_DIAGNOSTIC_MS)\|\|3e4,t=setTimeout(()=>{te.log.warn({pendingStoryIds:N.coordinator.pendingStoryIds()},"Story storage drain deadline reached; waiting for accepted operations and preserving recovery intents")},e);t.unref();try{await me.stop(),clearInterval(re),clearInterval(ce),ge.stop(),le.stop(),await D.stop(),await N.drain(),await f.close()}finally{clearTimeout(t)}}),te.decorate("nodeAgentRestoreManagedInstances",()=>D.restoreManagedInstances()),te.decorate("nodeAgentRecoverManagedInstances",()=>D.recoverManagedInstances()),te.decorate("nodeAgentStartRecoverySupervisor",()=>D.start()),te.get("/api/node-agent/health",async()=>{return{data:{ok:!0,role:"node-agent",process:{pid:process.pid,...dh?{startIdentity:dh}:{}},listener:{host:"127.0.0.1",port:v.currentListenerPort},nodeId:_,platform:$m(w),arch:process.arch,protocolVersion:kn,capabilities:{modelEndpointProbe:!0,managedModels:{multiEntityAssignment:!0,privateModelCatalog:!0},aiSessionHistoryLimit:!0,aiSessionAttachmentRetention:!0,aiSessionFileAttachmentLimit:!0,codexManagedSettings:!0,folderPlaces:!0,localFolderNameUpdate:!0,managedGitCredentials:{registry:!0,runtimeBroker:!0,workspaceProvisioning:{docker:!0,kubernetes:!1,local:!1}},stories:{enabled:!0,agentTools:!0,sessionRetention:!0,maxFileBytes:33554432,maxBatchPaths:20}},build:(e="node-agent",{component:e,packageName:"@task-handoff/node-agent",packageVersion:kl(),protocolVersion:kn,buildId:lh("TASK_HANDOFF_BUILD_ID"),builtAt:lh("TASK_HANDOFF_BUILT_AT"),gitCommit:lh("TASK_HANDOFF_GIT_COMMIT"),imageRef:lh("TASK_HANDOFF_IMAGE_REF"),imageDigest:lh("TASK_HANDOFF_IMAGE_DIGEST")}),instanceProxy:{...de},eventTransport:le.eventTransportHealth(),serverTime:(new Date).toISOString()}};var e}),function(e,t){e.get("/api/node-agent/settings/external-listener",async e=>({data:t(e).current()})),e.patch("/api/node-agent/settings/external-listener",async e=>({data:await t(e).update(e.body)}))}(te,e=>{if(!mh(e)){const e=new Error("Node agent TCP listener settings are available only over local Unix IPC.");throw Object.assign(e,{statusCode:403,code:"NODE_AGENT_LISTENER_LOCAL_IPC_ONLY"}),e}if(!te.nodeAgentListenerManager){const e=new Error("Node agent TCP listener manager is not initialized.");throw Object.assign(e,{statusCode:503,code:"NODE_AGENT_LISTENER_UNAVAILABLE"}),e}return te.nodeAgentListenerManager}),function(e,t,n){e.get("/api/node-agent/updates/jobs",async()=>({data:n.list()})),e.post("/api/node-agent/updates/check",async e=>({data:await t.check(e.body)})),e.post("/api/node-agent/updates/apply",async(e,n)=>n.code(202).send({data:await t.apply(e.body)}))}(te,Ne,v.updateJobs),function(e,t){const{identity:n,nodeId:i,fetchImpl:s}=t;e.post("/api/node-agent/pairing/invites",async(e,t)=>{const s=n.createPairingInvite(Nd.parse(e.body\|\|{}));return t.code(201).send({data:{nodeId:i,joinToken:s.token,expiresAt:s.expiresAt}})}),e.post("/api/node-agent/pairing/complete",async(e,t)=>{const s=n.completePairingInvite(Od.parse(e.body));return t.code(201).send({data:{nodeId:i,keyId:s.keyId,secret:s.secret,pairedAt:s.pairedAt}})}),e.get("/api/node-agent/control-plane-pairings",async e=>({data:n.listControlPlanePairings(e.nodeAgentAuthKeyId)})),e.delete("/api/node-agent/control-plane-pairings/:keyId",async e=>{const t=wm.parse(e.params.keyId);return{data:{deleted:n.deleteControlPlanePairing(t,e.nodeAgentAuthKeyId)}}}),e.delete("/api/node-agent/pairing/current",async e=>({data:n.revokeCurrentControlPlanePairing(e.nodeAgentAuthKeyId\|\|"")})),e.get("/api/node-agent/control-plane-connections",async()=>({data:n.listControlPlaneConnections().map(e=>({...e,...t.reverseTunnels()?.state(e.id)\|\|{status:e.enabled?"connecting":"disabled"}}))})),e.delete("/api/node-agent/control-plane-connections/:connectionId",async e=>{const i=wm.parse(e.params.connectionId),s=n.deleteControlPlaneConnection(i);return s&&t.reverseTunnels()?.connectConfigured(),{data:{deleted:s}}}),e.post("/api/node-agent/control-plane-connections",async(e,o)=>{const r=zd.parse(e.body),a=function(e){const t=new URL(e);if("http:"!==t.protocol&&"https:"!==t.protocol){const e=new Error("Control-plane URL must use http or https.");throw Object.assign(e,{statusCode:400,code:"NODE_AGENT_REMOTE_CONTROL_PLANE_URL_INVALID"}),e}return t.toString().replace(/\/$/,"")}(r.controlPlaneUrl);return n.runControlPlaneConnectionOperation(a,async()=>{const e=n.stageControlPlaneConnection({url:a,...r.controlPlaneName?{name:r.controlPlaneName}:{},enabled:!1!==r.activate});let c;try{c=await async function(e,t,n){const i=await e(new URL("/api/node-join/complete",t).toString(),{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(n)}),s=await i.json().catch(()=>({}));if(!i.ok){const e=new Error(s.error?.message\|\|`Control-plane node join failed with HTTP ${i.status}.`);throw Object.assign(e,{statusCode:i.status,code:s.error?.code\|\|"NODE_AGENT_REMOTE_JOIN_FAILED"}),e}return s.data\|\|{}}(s,a,{joinToken:r.joinToken,nodeId:i,nodeName:t.nodeName(),keyId:e.pairing.keyId,secret:e.pairing.secret,pairedAt:e.pairing.pairedAt})}catch(t){throw n.rollbackControlPlaneConnection(e),t}n.markControlPlaneConnectionRemoteAccepted(e);const d=n.commitControlPlaneConnection(e,{name:r.controlPlaneName\|\|("string"==typeof c.name&&c.name?c.name:void 0)});let l,u=d.connection.enabled?"saved":"disabled";const p=t.reverseTunnels();if(p)try{p.connectConfigured(),d.connection.enabled&&(u="connecting")}catch(e){u="failed",l=e instanceof Error?e.message:String(e)}return o.code(201).send({data:{pairing:n.listControlPlanePairings().find(e=>e.keyId===d.pairing.keyId),connection:d.connection,tunnel:{status:u,...l?{error:l}:{}}}})})})}(te,{identity:A,nodeId:_,nodeName:()=>v.node.name,fetchImpl:F,reverseTunnels:()=>te.nodeAgentReverseTunnels}),function(e,t){e.get("/api/node-agent/runtimes",async()=>({data:t.listRuntimes()})),e.post("/api/node-agent/runtimes",async(e,n)=>n.code(201).send({data:t.createRuntime(qp.parse(e.body))})),e.patch("/api/node-agent/runtimes/:id",async e=>({data:t.updateRuntime(e.params.id,Vp.parse(e.body))})),e.delete("/api/node-agent/runtimes/:id",async e=>({data:{deleted:t.deleteRuntime(e.params.id)}})),e.post("/api/node-agent/runtimes/:id/check",async e=>({data:await t.checkRuntime(e.params.id)})),e.get("/api/node-agent/local-folders",async()=>({data:t.listLocalFolders()})),e.get("/api/node-agent/folders/places",async()=>({data:t.listFolderPlaces()})),e.get("/api/node-agent/folders/tree",async e=>({data:t.listFolderTree(Up.parse(e.query))})),e.post("/api/node-agent/local-folders",async(e,n)=>n.code(201).send({data:t.createLocalFolder(jp.parse(e.body))})),e.patch("/api/node-agent/local-folders/:id",async e=>({data:t.updateLocalFolder(e.params.id,Fp.parse(e.body))})),e.delete("/api/node-agent/local-folders/:id",async e=>({data:{deleted:t.deleteLocalFolder(e.params.id)}}))}(te,{listRuntimes:()=>v.nodeRuntimes.list(),createRuntime:e=>v.createRuntime(e),updateRuntime:(e,t)=>v.updateRuntime(e,t),deleteRuntime:e=>v.deleteRuntime(e),checkRuntime:async e=>{const t=v.requireRuntime(e);return v.checkRuntime(e,P.forRuntime(t))},listLocalFolders:()=>v.localFolders.list(),listFolderPlaces:pa,listFolderTree:ha,createLocalFolder:e=>v.createLocalFolder(e),updateLocalFolder:(e,t)=>v.updateLocalFolder(e,t),deleteLocalFolder:e=>v.localFolders.delete(e)}),function(e,t,n,i){e.get("/api/node-agent/models",async()=>({data:t.list()})),e.post("/api/node-agent/models",async(e,n)=>n.code(201).send({data:t.create(Is.parse(e.body))})),e.post("/api/node-agent/models/discover",async e=>{const n=ou.parse(e.body);return{data:await Wl(i,{...n,key:t.resolveProbeKey(n.existingModelId,n.key)})}}),e.post("/api/node-agent/models/test",async e=>{const n=ru.parse(e.body);return{data:await Xl(i,{...n,key:t.resolveProbeKey(n.existingModelId,n.key)})}}),e.put("/api/node-agent/models/:id/deploy",async e=>{const n=e.params.id,i=_s.parse(e.body);if(i.id!==n)throw Object.assign(new Error(`Model payload id ${i.id} does not match route id ${n}.`),{statusCode:400,code:"NODE_MODEL_ID_MISMATCH"});return{data:t.deploy(i)}}),e.patch("/api/node-agent/models/:id",async e=>({data:t.update(e.params.id,As.parse(e.body))})),e.delete("/api/node-agent/models/:id",async e=>({data:{deleted:t.delete(e.params.id)}})),e.put("/api/node-agent/instances/:id/model-assignment",async e=>{const i=e.params.id,s=e.body&&"object"==typeof e.body&&!Array.isArray(e.body)&&Object.prototype.hasOwnProperty.call(e.body,"modelEntityIds"),o=t.assign(i,Es.parse(e.body));if(await n(i),s)return{data:o};const{modelEntityIds:r,...a}=o.assignment;return{data:{...o,assignment:a}}})}(te,v.modelRegistry,e=>yh(F,v,e,Ae.warn,L),F),function(e,t){const n=new au(t.gitCredentials);e.addHook("onClose",async()=>n.close()),e.put("/api/node-agent/git-credentials/:credentialId",async e=>{const n=uu.parse(e.params),i=Kc.parse(e.body);if(i.credential.id!==n.credentialId)throw Object.assign(new Error("Credential payload identity mismatch."),{code:"GIT_CREDENTIAL_IDENTITY_MISMATCH",statusCode:409});return{data:t.gitCredentials.putPayload(i).credential}}),e.delete("/api/node-agent/git-credentials/:credentialId",async e=>({data:{deleted:t.gitCredentials.removePayload(uu.parse(e.params).credentialId)}})),e.get("/api/node-agent/instances/:id/git-credential-authorizations",async e=>{const{id:n}=pu.parse(e.params);return t.requireInstance(n),{data:t.gitCredentials.getAuthorizationSet(n)}}),e.put("/api/node-agent/instances/:id/git-credential-authorizations",async e=>{const{id:n}=pu.parse(e.params);t.requireInstance(n);const i=Gc.parse(e.body);if(i.instanceId!==n)throw Object.assign(new Error("Git credential authorization identity mismatch."),{code:"GIT_CREDENTIAL_AUTHORIZATION_IDENTITY_MISMATCH",statusCode:409});return{data:t.gitCredentials.putAuthorizationSet(i)}}),e.post("/api/node-agent/instances/:id/git-credentials/https",async e=>{const{id:i}=pu.parse(e.params);t.authenticateInstance(i,hu(e.headers));const s=Wc.parse(e.body);return{data:Xc.parse(n.resolveHttps(i,s.remoteUrl))}}),e.post("/api/node-agent/instances/:id/git-credentials/ssh/prepare",async e=>{const{id:i}=pu.parse(e.params);t.authenticateInstance(i,hu(e.headers));const s=Yc.parse(e.body);return{data:Jc.parse(await n.prepareSsh(i,s.remoteUrl))}}),e.post("/api/node-agent/instances/:id/git-credentials/ssh/agent",async e=>{const{id:i}=pu.parse(e.params);t.authenticateInstance(i,hu(e.headers));const s=Qc.parse(e.body);return{data:Zc.parse(await n.exchangeAgentFrame(i,s.invocationId,s.frame))}}),e.delete("/api/node-agent/instances/:id/git-credentials/ssh/:invocationId",async e=>{const{id:i,invocationId:s}=mu.parse(e.params);return t.authenticateInstance(i,hu(e.headers)),{data:{deleted:n.release(s,i)}}})}(te,v),function(e,t,n,i={}){if(e.hasContentTypeParser("application/octet-stream")\|\|e.addContentTypeParser("application/octet-stream",(e,t,n)=>n(null,t)),e.get("/api/node-agent/stories",async()=>({data:{stories:await n.list()}})),e.post("/api/node-agent/stories",async(e,t)=>{const s=await n.create(Fu.parse(e.body));return i.onRetentionSettingsChanged?.(),t.code(201).send({data:s})}),e.get("/api/node-agent/stories/:storyId",async e=>{const{storyId:t}=Yu.parse(e.params);return{data:await n.get(t)\|\|(()=>{throw Object.assign(new Error("Story was not found."),{code:"STORY_NOT_FOUND",statusCode:404})})()}}),e.patch("/api/node-agent/stories/:storyId",async e=>{const{storyId:t}=Yu.parse(e.params),s=Uu.parse(e.body),o=i.commands?await i.commands.update(t,s):await n.update(t,s);return void 0!==s.maxIdleAiSessions&&i.onRetentionSettingsChanged?.(),{data:o}}),e.get("/api/node-agent/stories/:storyId/settings",async e=>{const{storyId:t}=Yu.parse(e.params);return{data:await n.retentionSettings(t)}}),e.post("/api/node-agent/stories/:storyId/archive",async e=>({data:i.commands?await i.commands.archive(Yu.parse(e.params).storyId):await n.archive(Yu.parse(e.params).storyId)})),e.post("/api/node-agent/stories/:storyId/restore",async e=>({data:i.commands?await i.commands.restore(Yu.parse(e.params).storyId):await n.restore(Yu.parse(e.params).storyId)})),e.delete("/api/node-agent/stories/:storyId",async e=>{const{storyId:t}=Yu.parse(e.params);if(!i.commands)throw Object.assign(new Error("Story command service is unavailable."),{code:"STORY_COMMAND_UNAVAILABLE",statusCode:503});return{data:{deleted:await i.commands.delete(t)}}}),i.scheduler){const t=i.scheduler,s=async(e,n)=>{const i=await t.status(n);if(i.automation.storyId!==e)throw Object.assign(new Error("Story Automation belongs to another Story."),{code:"STORY_AUTOMATION_STORY_MISMATCH",statusCode:409});return i};e.get("/api/node-agent/stories/:storyId/automations",async e=>{const{storyId:i}=Yu.parse(e.params);return await n.require(i),{data:Du.parse({automations:await t.list(i)})}}),e.post("/api/node-agent/stories/:storyId/automations",async(e,n)=>{const{storyId:i}=Yu.parse(e.params),s=vu.parse(e.body);if(s.storyId!==i)throw Object.assign(new Error("Automation storyId does not match the route."),{code:"STORY_AUTOMATION_STORY_MISMATCH",statusCode:409});return n.code(201).send({data:ku.parse(await t.create(s))})}),e.post("/api/node-agent/stories/:storyId/automations/with-action",async(e,t)=>{const{storyId:n}=Yu.parse(e.params);if(!i.commands)throw Object.assign(new Error("Story command service is unavailable."),{code:"STORY_COMMAND_UNAVAILABLE",statusCode:503});const s=Nu.parse(e.body);return t.code(201).send({data:ku.parse(await i.commands.createAutomationWithAction(n,s))})}),e.get("/api/node-agent/stories/:storyId/automations/:automationId",async e=>{const{storyId:t,automationId:n}=Qu.parse(e.params);return{data:ku.parse(await s(t,n))}}),e.patch("/api/node-agent/stories/:storyId/automations/:automationId",async e=>{const{storyId:n,automationId:i}=Qu.parse(e.params);return await s(n,i),{data:ku.parse(await t.update(i,Ou.parse(e.body)))}}),e.delete("/api/node-agent/stories/:storyId/automations/:automationId",async e=>{const{storyId:n,automationId:i}=Qu.parse(e.params);return await s(n,i),{data:{deleted:await t.delete(i)}}});for(const n of["enable","disable"])e.post(`/api/node-agent/stories/:storyId/automations/:automationId/${n}`,async e=>{const{storyId:i,automationId:o}=Qu.parse(e.params);return await s(i,o),{data:ku.parse(await t.setEnabled(o,"enable"===n))}});e.post("/api/node-agent/stories/:storyId/automations/:automationId/run",async e=>{const{storyId:n,automationId:i}=Qu.parse(e.params);return await s(n,i),{data:await t.manualRun(i,Lu.parse(e.body))}}),e.get("/api/node-agent/stories/:storyId/automations/:automationId/runs",async e=>{const{storyId:n,automationId:i}=Qu.parse(e.params);return await s(n,i),{data:Pu.parse({runs:await t.runs(i)})}})}e.get("/api/node-agent/stories/:storyId/content",async e=>{const{storyId:t}=Yu.parse(e.params);return{data:qu.parse({documents:await n.listContent(t)})}}),e.get("/api/node-agent/stories/:storyId/content/file",async(e,t)=>{const{storyId:i}=Yu.parse(e.params),{storyPath:s}=ep.parse(e.query),o=await n.readContent(i,s);return sp(t,o.stream,o.revision,o.size)}),e.put("/api/node-agent/stories/:storyId/content/file",{bodyLimit:33555456},async e=>{const{storyId:t}=Yu.parse(e.params),i=tp.parse(e.query);return{data:await n.writeContent(t,{...i,stream:e.body})}}),e.patch("/api/node-agent/stories/:storyId/documents/:storyPath",async e=>{const t=Ju.parse(e.params),i=fu.parse(decodeURIComponent(t.storyPath));return{data:await n.updateDocument(t.storyId,i,$u.parse(e.body))}}),e.delete("/api/node-agent/stories/:storyId/documents/:storyPath",async e=>{const t=Ju.parse(e.params);return{data:{deleted:await n.deleteDocument(t.storyId,fu.parse(decodeURIComponent(t.storyPath)))}}}),e.post("/api/node-agent/stories/:storyId/documents/order",async e=>{const{storyId:t}=Yu.parse(e.params);return{data:await n.reorderDocuments(t,e.body)}}),e.get("/api/node-agent/instances/:id/ai-sessions/:sessionId/story-content",async e=>{const{id:i,sessionId:s}=Zu.parse(e.params),o=await ip(t,n,i,s,np(e.headers)),{page:r,pageSize:a}=Bu.parse(e.query\|\|{});return{data:Wu.parse(await n.pageContent(o.id,r,a))}}),e.get("/api/node-agent/instances/:id/ai-sessions/:sessionId/story-content/file",async(e,i)=>{const{id:s,sessionId:o}=Zu.parse(e.params),r=await ip(t,n,s,o,np(e.headers)),{storyPath:a}=ep.parse(e.query),c=await n.readContent(r.id,a);return sp(i,c.stream,c.revision,c.size)}),e.put("/api/node-agent/instances/:id/ai-sessions/:sessionId/story-content/file",{bodyLimit:33555456},async e=>{const{id:i,sessionId:s}=Zu.parse(e.params),o=await ip(t,n,i,s,np(e.headers)),r=tp.parse(e.query);return{data:await n.writeContent(o.id,{...r,stream:e.body})}}),e.put("/api/node-agent/instances/:id/ai-sessions/:sessionId/story",async e=>{const{id:s,sessionId:o}=Zu.parse(e.params),r=t.requireInstance(s),c=a.z.object({storyId:ue.nullable()}).strict().parse(e.body\|\|{});if(c.storyId){const e=await n.get(c.storyId);if(!e)throw Object.assign(new Error("Story belongs to another node or was not found."),{code:"STORY_NODE_MISMATCH",statusCode:409});if(e.archivedAt)throw Object.assign(new Error("Archived Story cannot receive new Session associations."),{code:"STORY_ARCHIVED",statusCode:409})}if(!i.fetchImpl\|\|!i.resolveInstanceWeb\|\|!r.registrationToken)throw Object.assign(new Error("Managed instance Session association is unavailable."),{code:"STORY_SESSION_ASSOCIATION_UNAVAILABLE",statusCode:503});const d=await i.resolveInstanceWeb(r),l=await i.fetchImpl(`${d}/api/ai-sessions/${encodeURIComponent(o)}/story`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${r.registrationToken}`},body:JSON.stringify(c)}),u=await l.json().catch(()=>({}));if(!l.ok)throw Object.assign(new Error(u.error?.message\|\|"Controlled instance rejected Story association."),{code:u.error?.code\|\|"STORY_SESSION_ASSOCIATION_FAILED",statusCode:l.status});return u})}(te,v,N,{fetchImpl:F,resolveInstanceWeb:L,onRetentionSettingsChanged:()=>U.reconcile(),commands:he,scheduler:me}),function(e,t){e.get("/api/node-agent/environment-templates",async()=>({data:t.list()})),e.get("/api/node-agent/environment-templates/:id",async e=>({data:vi.parse(t.require(e.params.id))})),e.post("/api/node-agent/instances/:id/environment-templates",async(e,n)=>{const i=await t.create(e.params.id,e.body);return n.code(201).send({data:i})}),e.delete("/api/node-agent/environment-templates/:id",async e=>({data:await t.delete(e.params.id)}))}(te,Ee),function(e,t){e.get("/api/node-agent/instances",async()=>({data:t.list()})),e.post("/api/node-agent/instances",async(e,n)=>{const i=await t.create($p.parse(e.body));return t.afterCreate(i),n.code(201).send({data:i})}),e.post("/api/node-agent/instances/:id/image-provisioning/retry",async e=>{const n=t.retryImageProvisioning(e.params.id);return t.afterImageRetry(n),{data:n}}),e.patch("/api/node-agent/instances/:id",async e=>{const n=t.update(e.params.id,Hp.parse(e.body));return await t.afterUpdate(n),{data:n}}),e.post("/api/node-agent/instances/:id/register",async(e,n)=>{const i=e.params.id,s=t.sanitizeReport(i,"register",e.body),o=t.register(i,Io.parse(s),Bp(e.headers));return t.afterReport(o,"register"),n.code(201).send({data:o})}),e.post("/api/node-agent/instances/:id/heartbeat",async e=>{const n=e.params.id,i=t.sanitizeReport(n,"heartbeat",e.body),s=t.heartbeat(n,Ao.parse(i),Bp(e.headers));return t.afterReport(s,"heartbeat"),{data:s}})}(te,{list:()=>v.listInstances(),create:e=>"template"===e.environmentSource?.type?Ee.runTemplateOperation(e.environmentSource.environmentTemplateId,()=>v.createInstance(e)):v.createInstance(e),retryImageProvisioning:e=>we.retry(e),update:(e,t)=>{const n=v.requireInstance(e),i=t.config?.codexSettings?.multiAgent.defaultModel;if(i){const t=v.modelRegistry.privateCatalog(e).entities.find(e=>e.id===i.modelEntityId&&e.protocols.includes("openai-responses"));if(!t?.modelNames.some(e=>e.name===i.modelName))throw Object.assign(new Error("The Codex subagent model must be assigned to this instance."),{statusCode:400,code:"CODEX_SUBAGENT_MODEL_UNAVAILABLE"})}return v.controlledInstances.put(co.parse({...n,...t,...t.config?{config:{...n.config,...t.config}}:{},updatedAt:ae()}))},register:(e,t,n)=>v.registerInstance(e,t,n),heartbeat:(e,t,n)=>v.heartbeatInstance(e,t,n),sanitizeReport:Te,afterCreate:e=>{le.syncNow(),e.imageProvisioning&&Se(e)},afterImageRetry:e=>{le.syncNow(),Se(e)},afterUpdate:async e=>{le.syncNow(),await Promise.all([B(e.id),K(e.id)])},afterReport:(e,t)=>{le.syncNow(),me.reconcileInstances("heartbeat"===t?e.id:void 0).catch(t=>te.log.warn({error:t,instanceId:e.id},"Story scheduler reconciliation failed")),V(e),B(e.id),K(e.id),U.reconcile(),$.reconcile(),"register"===t?Ie({instanceId:e.id,action:t,protocolVersion:e.protocolVersion,build:e.build,targetStatus:e.targetStatus,targetStrategy:e.target.strategy},"node instance registered"):Ie({instanceId:e.id,action:t,status:e.status,health:e.health,protocolVersion:e.protocolVersion,build:e.build,targetStatus:e.targetStatus,apps:e.apps.runningCount},"node instance heartbeat accepted"),!Z(e)\|\|e.ready&&"matched"===e.runtimeVersion?.phase\|\|pe.schedule(e.id).catch(n=>te.log.error({instanceId:e.id,error:n},`runtime convergence after ${t} failed`))}}),te.get("/api/node-agent/events",{websocket:!0},(e,t)=>{const n=e;n.send(JSON.stringify({type:"node-agent.events.connected",nodeId:_,serverTime:(new Date).toISOString()}));const i=t.query,s=le.addOutput(n,{expectsTransientSubscription:"1"===i.aiSessionTransient});n.on("message",e=>{try{const t=JSON.parse(String(e));"subscribe"===t.type&&void 0!==t.aiSessionTransient&&le.setOutputSubscription(n,t.aiSessionTransient,t.eventEnvelopeVersion,t.aiSessionHierarchy)}catch{}}),n.on("close",s),n.on("error",s)}),te.get("/api/node-agent/docker/images",async()=>({data:await Qo(e.dockerCommandRunner)})),te.get("/api/node-agent/instances/:id/metrics",async e=>{const t=e.params.id,n=v.requireInstance(t);if("docker"!==v.requireRuntime(n.runtimeId).type){const e=new Error(`Runtime type ${v.requireRuntime(n.runtimeId).type} does not provide resource metrics.`);throw Object.assign(e,{statusCode:409,code:"INSTANCE_METRICS_UNSUPPORTED"}),e}return{data:await ge.snapshot(t)}}),function(e,t,n,i,s,o=new Kp){const r=e=>o.intent(e),a=e=>Promise.resolve(i.cancel(e)).then(()=>({ok:!0}),e=>({ok:!1,error:e})),c=(e,t)=>{if(!o.isIntentCurrent(e,t))throw Object.assign(new Error(`Instance operation for ${e} was superseded by stop or delete.`),{statusCode:409,code:"INSTANCE_OPERATION_SUPERSEDED"})},d=(e,t)=>{const n=o.signal;return"function"==typeof n?n.call(o,e,t):void 0},l=(e,n)=>{if(n){if(n.instanceId!==e)throw Object.assign(new Error(`Git provisioning belongs to ${n.instanceId}, not ${e}.`),{code:"GIT_WORKSPACE_PROVISIONING_INSTANCE_MISMATCH",statusCode:409});t.setGitWorkspaceProvisioning(n)}},u=(e,n)=>{if(!n)return e;const i=t.gitWorkspaceProvisioningStatus(e.id);return"consumed"===i?.status&&i.operationId===n.operationId?{instance:e,gitWorkspaceProvisioningOperationId:n.operationId}:e};e.post("/api/node-agent/instances/:id/start",async e=>{const t=Gp.parse(e.body),n=e.params.id,i=r(n);return o.run(n,async()=>(c(n,i),l(n,t.gitWorkspaceProvisioning),s.allowRecovery(n),{data:u(await s.start(n,()=>o.isIntentCurrent(n,i),d(n,i)),t.gitWorkspaceProvisioning)}))}),e.post("/api/node-agent/instances/:id/runtime/reconcile",async e=>{const n=e.params.id;Gp.parse(e.body);const a=r(n);return o.run(n,async()=>{c(n,a);const e=t.requireInstance(n);t.putInstance(co.parse({...e,ready:!1,runtimeVersion:Pl(xa(e)),updatedAt:ae()})),c(n,a);const o=await i.schedule(n,{startRequested:!["created","stopped"].includes(e.status),resumeCancelled:!0});return c(n,a),s.sync(),{data:o}})}),e.post("/api/node-agent/instances/:id/stop",async e=>{const i=e.params.id;t.requireInstance(i),t.discardGitWorkspaceProvisioning(i),o.invalidate(i);const r=a(i);return o.run(i,async()=>{const e=t.requireInstance(i);t.applyLifecycle(i,{type:"stop-requested"});try{await s.suppressRecovery(i);const e=await r;if("error"in e)throw e.error;const o=t.requireInstance(i);s.diagnostic({instanceId:i,action:"stop",runtimeId:o.runtimeId,containerName:o.runtime.containerName},"node instance stop requested"),await n.forRuntime(t.requireRuntime(o.runtimeId)).stop(t.context(o))}catch(n){try{t.applyLifecycle(i,{type:"stop-failed",baseline:e}),s.sync()}finally{s.allowRecovery(i)}throw n}const o=t.applyLifecycle(i,{type:"stop-completed"});return s.completeSuppressedRecovery(i),s.sync(),s.diagnostic({instanceId:i,action:"stop",status:o.status,connectionStatus:o.connectionStatus,containerName:o.runtime.containerName},"node instance stop completed"),{data:o}})}),e.post("/api/node-agent/instances/:id/restart",async e=>{const a=e.params.id,d=Gp.parse(e.body),p=r(a);return o.run(a,async()=>{c(a,p),l(a,d.gitWorkspaceProvisioning),s.allowRecovery(a);let e=t.requireInstance(a);if(s.isManaged(e)&&(!e.ready\|\|"matched"!==e.runtimeVersion?.phase)){"failed"===e.runtimeVersion?.phase&&(e=t.putInstance(co.parse({...e,runtimeVersion:Pl(xa(e)),updatedAt:ae()}))),c(a,p);const n=await i.schedule(a,{startRequested:!0});return c(a,p),s.sync(),{data:u(n,d.gitWorkspaceProvisioning)}}s.diagnostic({instanceId:a,action:"restart",runtimeId:e.runtimeId,imageId:e.imageSelection?.imageId,containerName:e.runtime.containerName},"node instance restart requested");const o=await n.forRuntime(t.requireRuntime(e.runtimeId)).restart(t.context(e));let r=t.applyLifecycle(a,{type:"runtime-lifecycle-completed",baseline:e,observation:{...o,target:o.target?{...e.target,...o.target}:void 0}});s.markRestarted(a),c(a,p);const m=co.parse({...r,updatedAt:ae()}),h=await s.probe(m);return c(a,p),r=t.applyLifecycle(a,{type:"runtime-lifecycle-completed",baseline:r,observation:{target:{...r.target,status:h},targetStatus:h,uiAccessStatus:h}}),await s.autoImport(r),s.sync(),s.diagnostic({instanceId:a,action:"restart",status:r.status,connectionStatus:r.connectionStatus,targetStatus:r.targetStatus,targetWeb:r.target.web,containerName:r.runtime.containerName},"node instance restart completed"),{data:u(r,d.gitWorkspaceProvisioning)}})}),e.post("/api/node-agent/instances/:id/delete",async e=>{const i=e.params.id,r=yi.parse(e.body);t.requireInstance(i),o.invalidate(i);const c=a(i);return o.run(i,async()=>{const e=t.requireInstance(i);"deleting"!==e.status&&t.applyLifecycle(i,{type:"stop-requested"});try{await s.suppressRecovery(i);const e=await c;if("error"in e)throw e.error;const a=t.requireInstance(i);t.putInstance(co.parse({...a,status:"deleting",ready:!1,updatedAt:ae()})),s.diagnostic({instanceId:i,action:"delete",runtimeId:a.runtimeId,containerName:a.runtime.containerName},"node instance delete requested");const d=await n.forRuntime(t.requireRuntime(a.runtimeId)).delete(t.context(a,{}),r);if(!d.completed)return s.diagnostic({instanceId:i,action:"delete",volumeResults:d.volumeResults},"node instance delete requires retry"),s.sync(),{data:d};s.diagnostic({instanceId:i,action:"delete"},"node instance delete completed");const l=t.deleteInstance(i);return l&&(s.forgetRecovery(i),o.clearIntent(i)),s.deleteMetadata(i),l&&s.retireInstanceData(i),l&&a.environmentTemplateOrigin?.imageId&&s.releaseEnvironmentImage&&await s.releaseEnvironmentImage(a.environmentTemplateOrigin.imageId).catch(e=>{s.diagnostic({instanceId:i,action:"release-environment-image",error:e instanceof Error?e.message:String(e)},"environment image cleanup deferred after instance deletion")}),s.sync(),{data:d}}catch(n){try{t.putInstance(co.parse({...e,updatedAt:ae()})),s.sync()}finally{s.allowRecovery(i)}throw n}})})}(te,{requireInstance:e=>v.requireInstance(e),requireRuntime:e=>v.requireRuntime(e),putInstance:e=>v.controlledInstances.put(e),deleteInstance:e=>v.controlledInstances.delete(e),applyLifecycle:(e,t)=>v.applyInstanceLifecycle(e,t),context:(e,t)=>v.context(e,t),setGitWorkspaceProvisioning:e=>v.setGitWorkspaceProvisioning(e),discardGitWorkspaceProvisioning:e=>v.discardGitWorkspaceProvisioning(e),gitWorkspaceProvisioningStatus:e=>v.gitWorkspaceProvisioningStatus(e)},P,pe,{start:(e,t,n)=>be(e,"request",t,n),sync:()=>le.syncNow(),isManaged:Z,probe:e=>hh(F,e,L),autoImport:e=>fh(F,e,"restart",Ae,L),markRestarted:e=>D.markRestored(e),allowRecovery:e=>D.allowRecovery(e),suppressRecovery:e=>D.suppressRecovery(e),forgetRecovery:e=>D.forgetInstance(e),completeSuppressedRecovery:e=>D.completeSuppressedOperation(e),deleteMetadata:e=>{H.delete(e),v.modelRegistry.deleteInstanceMetadata(e),v.gitCredentials.removeInstance(e),v.gitCredentials.collectUnreferencedPayloads(),v.discardGitWorkspaceProvisioning(e),v.instancePrivateConfigs.delete(e)},retireInstanceData:e=>{ne.retire(e)},releaseEnvironmentImage:e=>Ee.releaseUnusedImage(e),diagnostic:Ie},_e),function(e,t){const{fetchImpl:n,metrics:i,diagnostic:s}=t;e.post("/api/node-agent/instances/:id/proxy",async(e,i)=>{const o=performance.now(),r=e.params.id,a=Mp.parse(e.body),c=await t.instanceBase(r),d=sm(a.path);"POST"===a.method&&"/api/apps/sessions"===d&&await t.syncModelEnvironment(r),s({instanceId:r,action:"proxy",method:a.method,path:d,instanceBase:c},"node instance proxy requested");const l=await rm(n,`${c}${d}`,{method:a.method,headers:{...a.headers},body:tm(a)},{instanceId:r,method:a.method,path:d,diagnostic:s}),u=l.headers.get("content-type")\|\|"application/octet-stream",p=await l.text(),m=performance.now()-o,h=l.headers.get(im)\|\|a.headers[im],g=function(...e){return e.map(e=>String(e\|\|"").trim()).filter(Boolean).join(", ")}(l.headers.get("server-timing"),function(e,t){return`node_proxy;dur=${(Number.isFinite(t)?Math.max(0,t):0).toFixed(1)}`}(0,m));i.header("server-timing",g),h&&i.header(im,h),s({instanceId:r,action:"proxy",method:a.method,path:d,statusCode:l.status,contentType:u,durationMs:m,traceId:h},"node instance proxy completed"),i.code(l.status).type(u).send(p)}),e.post("/api/node-agent/instances/:id/proxy/stream",{bodyLimit:Zp},async(e,o)=>{const r=Date.now();i.requests+=1,i.active+=1;const a=new AbortController;let c=0,d=!1,l=!1;const u=e=>{l\|\|(l=!0,i.active-=1,i.totalDurationMs+=Date.now()-r,i.responseBytes+=c,i[e]+=1)},p=()=>{a.abort(),d&&u("aborted")};e.raw.once("aborted",p),o.raw.once("close",p);try{const r=e.params.id,l=Mp.parse(e.body),p=await t.instanceBase(r),m=sm(l.path);s({instanceId:r,action:"proxy.stream",method:l.method,path:m,instanceBase:p},"node instance streaming proxy requested");const g=await rm(n,`${p}${m}`,{method:l.method,headers:{...l.headers},body:tm(l),signal:a.signal},{instanceId:r,method:l.method,path:m,diagnostic:s}),f=Number(g.headers.get("content-length"));if(Number.isFinite(f)&&f>i.maxResponseBytes)return i.limitRejected+=1,a.abort(),om(o,i.maxResponseBytes);o.code(g.status);for(const[e,t]of Object.entries(em(g.headers)))o.header(e,t);if(!g.body\|\|"HEAD"===l.method)return u("completed"),o.send();const y=new h.Transform({transform(e,t,n){if(c+=e.length,c>i.maxResponseBytes)return i.limitRejected+=1,a.abort(),void n(Object.assign(new Error("Instance proxy response limit exceeded."),{code:"INSTANCE_PROXY_RESPONSE_TOO_LARGE"}));n(null,e)}});return d=!0,y.once("end",()=>u("completed")),y.once("error",()=>u("aborted")),o.send(h.Readable.fromWeb(g.body).pipe(y))}catch(e){throw u("aborted"),e}finally{e.raw.off("aborted",p),d\|\|u("completed")}}),e.post("/api/node-agent/instances/:id/proxy/raw",{bodyLimit:Zp},async(e,o)=>{const r=e.params.id,a=Mp.parse(e.body),c=await t.instanceBase(r),d=sm(a.path);s({instanceId:r,action:"proxy.raw",method:a.method,path:d,instanceBase:c},"node instance raw proxy requested");const l=await rm(n,`${c}${d}`,{method:a.method,headers:{...a.headers},body:tm(a)},{instanceId:r,method:a.method,path:d,diagnostic:s}),u=Number(l.headers.get("content-length"));if(Number.isFinite(u)&&u>i.maxResponseBytes)return i.limitRejected+=1,await(l.body?.cancel("Instance proxy response limit exceeded.").catch(()=>{})),om(o,i.maxResponseBytes);let p;try{p=await async function(e,t){if(!e.body)return Buffer.alloc(0);const n=[];let i=0;const s=e.body.getReader();for(;;){const{done:e,value:o}=await s.read();if(e)break;if(i+=o.byteLength,i>t)throw await s.cancel("Instance proxy response limit exceeded.").catch(()=>{}),Object.assign(new Error("Instance proxy response limit exceeded."),{code:"INSTANCE_PROXY_RESPONSE_TOO_LARGE"});n.push(Buffer.from(o))}return Buffer.concat(n,i)}(l,i.maxResponseBytes)}catch(e){if(!(e instanceof Error)\|\|"INSTANCE_PROXY_RESPONSE_TOO_LARGE"!==e.code)throw e;return i.limitRejected+=1,om(o,i.maxResponseBytes)}return s({instanceId:r,action:"proxy.raw",method:a.method,path:d,statusCode:l.status,byteLength:p.length},"node instance raw proxy completed"),{data:{status:l.status,headers:em(l.headers),bodyBase64:p.toString("base64")}}}),e.get("/api/node-agent/instances/:id/proxy/ws/",{websocket:!0},async(e,n)=>{const i=n.params.id,o=n.params[""]\|\|"",r=n.url.indexOf("?"),a=r>=0?n.url.slice(r):"";let c;try{const r=await t.instanceBase(i),d=new URL(`/${o}${a}`,`${r}/`);d.protocol="https:"===d.protocol?"wss:":"ws:";const l=function(e){const t=Object.entries(e).find(([e])=>"sec-websocket-protocol"===e.toLowerCase()),n=t?.[1],i=(Array.isArray(n)?n.join(","):"string"==typeof n?n:"").split(",").map(e=>e.trim()).filter(Boolean);return i.length?i:void 0}(n.headers);s({instanceId:i,action:"proxy.ws",path:`/${o}${a}`,upstreamUrl:d.toString(),protocols:l\|\|[]},"node instance websocket proxy opening"),c=l?new p(d,l,{perMessageDeflate:!1}):new p(d,{perMessageDeflate:!1}),c.on("open",()=>{s({instanceId:i,action:"proxy.ws",path:`/${o}${a}`},"node instance websocket proxy opened")}),c.on("close",()=>{s({instanceId:i,action:"proxy.ws",path:`/${o}${a}`},"node instance websocket proxy closed")}),c.on("error",e=>{s({instanceId:i,action:"proxy.ws",path:`/${o}${a}`,error:e instanceof Error?e.message:String(e)},"node instance websocket proxy failed")}),j(e,c,{upstreamOpenTimeoutMs:1e4})}catch(t){s({instanceId:i,action:"proxy.ws",path:`/${o}${a}`,error:t instanceof Error?t.message:String(t)},"node instance websocket endpoint unavailable"),c?.close(),e.close(1011,"Instance websocket endpoint is not reachable.")}})}(te,{fetchImpl:F,metrics:de,instanceBase:e=>L(v.requireInstance(e)),syncModelEnvironment:e=>yh(F,v,e,Ae.warn,L),diagnostic:Ie}),te}catch(e){throw await m.close(),e}var g}async function _h(e){const s=fa(e.dataDir),o=function(e,i={}){return function(e,i={}){t.mkdirSync(n.dirname(e),{recursive:!0});const s=$.processStartIdentity(process.pid),o={pid:process.pid,hostname:c.hostname(),command:process.argv.join(" "),acquiredAt:(new Date).toISOString(),token:d.randomUUID(),...void 0!==i.component?{component:i.component}:{},...s?{startIdentity:s}:{},...void 0!==i.dataDir?{dataDir:i.dataDir}:{},...void 0!==i.host?{host:i.host}:{},...void 0!==i.port?{port:i.port}:{},...void 0!==i.instanceId?{instanceId:i.instanceId}:{}};for(let n=0;n<5;n+=1)try{return t.mkdirSync(e),t.writeFileSync(V(e),`${JSON.stringify({token:o.token,pid:o.pid,startIdentity:o.startIdentity,startedAt:(new Date).toISOString()})}\n`,{encoding:"utf8",mode:384,flag:"wx"}),J(e,o),{lockPath:e,owner:o,updateDetails:t=>Q(e,o,t),release(){const n=W(e);n?.token===o.token&&t.rmSync(e,{recursive:!0,force:!0})}}}catch(s){if("EEXIST"!==s.code)throw s;const o=W(e);if(Y(o))throw new H(e,o,i.error);if(!o&&(ee(e)\|\|ie(e)<(i.incompleteLockStaleMs??2e3))){if(n+1<5){ne();continue}throw new H(e,void 0,i.error)}const r=d.randomUUID();if(!se(e,r)){if(n+1<5){ne();continue}throw new H(e,W(e),i.error)}const a=W(e);if(Y(a))throw te(B(e)),new H(e,a,i.error);if(o?.token&&a?.token!==o.token){te(B(e));continue}if(!re(e,r))continue;t.rmSync(e,{recursive:!0,force:!0})}const r=W(e);throw new H(e,r,i.error)}(e,{...i,component:"node-agent",error:{label:"Node agent",code:"NODE_AGENT_ALREADY_RUNNING"}})}(function(){const e=process.env.TASK_HANDOFF_NODE_AGENT_LOCK_PATH?.trim();return e?n.resolve(e):n.join(c.tmpdir(),`task-handoff-node-agent-${process.getuid?.()??"user"}.lock`)}(),{dataDir:s.dataDir});try{const c=(r=e.host,a=e.port,Qs.parse({bindScope:"0.0.0.0"===r.trim()?"all-ipv4":"loopback",port:a})),d=t.existsSync(s.settingsPath),l=function(e,t){return new Xa(e.settingsPath,()=>({version:1,externalListener:t}),{schema:dm,sanitize:um})}(s,c);let u=l.get().externalListener;if("allocate"===process.env.TASK_HANDOFF_NODE_AGENT_PORT_CONFLICT){const e=await async function(e,t=20){for(let n=0;n<t&&e.port+n<=65535;n+=1){const t={...e,port:e.port+n};if(await pm(t))return t}throw Object.assign(new Error(`No available node-agent port found starting at ${e.port}.`),{statusCode:503,code:"NODE_AGENT_LISTENER_PORT_UNAVAILABLE"})}(u);e.port!==u.port&&(l.put({version:1,externalListener:e}),u=e)}const p=e=>{if(!o.updateDetails({dataDir:s.dataDir,host:e.host,port:e.port,instanceId:void 0}))throw new Error("Node agent singleton ownership changed while publishing listener state.")},m={...e,port:u.port},h=await Ah(m),g=h.nodeAgentState;if(!g)throw new Error("Node agent state was not initialized.");const f=h.nodeAgentIdentityService;if(!f)throw new Error("Node agent identity service was not initialized.");const y=f.resolveNodeId(e.nodeId\|\|process.env.TASK_HANDOFF_NODE_ID),I=function(e,t,n,i,s){const o=t.token\|\|process.env.TASK_HANDOFF_NODE_AGENT_TOKEN,r=s\|\|new bm(n),a=new Map;let c=!1;const d=(t,n)=>{if(c\|\|n.retry.pending\|\|a.get(t)!==n)return;const s=n.retry.schedule(()=>{c\|\|a.get(t)!==n\|\|n.socket\|\|l(t,n)});s&&(n.status="reconnecting",n.nextRetryAt=new Date(Date.now()+s.delay).toISOString(),e.log.info({nodeId:i,tunnelUrl:new URL(n.config.tunnelUrl).origin,attempt:s.attempt,delay:s.delay},"node agent reverse tunnel reconnect scheduled"))},l=(n,s)=>{let r;s.status=s.lastDisconnectedAt?"reconnecting":"connecting",s.error=void 0,s.failureReason=void 0,s.nextRetryAt=void 0;try{r=Dm(e,{...s.config,nodeId:i,port:()=>e.nodeAgentState.currentListenerPort,token:o})}catch(e){return s.status="failed",s.lastDisconnectedAt=(new Date).toISOString(),s.error=e instanceof Error?e.message:String(e),void d(n,s)}s.socket=r;const l=new jm({connectTimeoutMs:t.connectTimeoutMs,handshakeTimeoutMs:t.handshakeTimeoutMs,heartbeatIntervalMs:t.heartbeatIntervalMs,heartbeatTimeoutMs:t.heartbeatTimeoutMs,heartbeatMissThreshold:t.heartbeatMissThreshold,stableThresholdMs:t.stableThresholdMs,ping:()=>r.ping(),onTimeout:e=>{a.get(n)===s&&s.socket===r&&(s.status="failed",s.failureReason=`Reverse tunnel ${e} timeout.`,s.error=s.failureReason,r.terminate())},onStable:()=>s.retry.reset()});return s.supervisor=l,l.start(),r.on("open",()=>{a.get(n)===s&&s.socket===r&&(s.status="connecting",l.opened())}),r.on("message",t=>{if(a.get(n)!==s\|\|s.socket!==r)return;if(l.activity(),"connected"===s.status)return;let o;try{o=JSON.parse(String(t))}catch{return}const c=o&&"object"==typeof o?o.type:void 0;"control-plane.hello"!==c&&"control-plane.identified"!==c\|\|(l.activity(),l.healthy(),s.status="connected",s.lastConnectedAt=(new Date).toISOString(),s.nextRetryAt=void 0,s.error=void 0,e.log.info({nodeId:i,tunnelUrl:new URL(s.config.tunnelUrl).origin},"node agent reverse tunnel connected"))}),r.on("pong",()=>l.pong()),r.on("close",(t,o)=>{if(a.get(n)!==s\|\|s.socket!==r)return;l.close(),s.socket=void 0,s.lastDisconnectedAt=(new Date).toISOString();const u=`WebSocket closed${t?` (${t})`:""}${o?`: ${Buffer.isBuffer(o)?o.toString("utf8"):String(o)}`:""}`;s.error=s.failureReason\|\|u,c\|\|(e.log.warn({nodeId:i,tunnelUrl:new URL(s.config.tunnelUrl).origin,code:t,reason:Buffer.isBuffer(o)?o.toString("utf8"):String(o\|\|""),error:s.error,closeOrigin:s.failureReason?"supervisor":"transport"},"node agent reverse tunnel disconnected"),d(n,s))}),r.on("error",e=>{a.get(n)===s&&s.socket===r&&(s.status="failed",s.failureReason=e instanceof Error?e.message:String(e),s.error=s.failureReason,r.terminate())}),r},u=(e,t)=>{const n=a.get(e);n?.retry.cancel(),n?.supervisor?.close();const i={config:t,retry:new Ur,status:"connecting"};return a.set(e,i),n?.socket?.close(1e3,"Reverse tunnel reconnecting."),l(e,i)},p=(e,t)=>e.tunnelUrl===t.tunnelUrl&&e.keyId===t.keyId&&e.secret===t.secret;return{connectConfigured:()=>{c=!1;const n=new Map,s=r.resolvedControlPlaneAccess(),o=new Set;for(const{connection:t,pairing:r}of s.connections){if(!t.enabled)continue;if(!r){e.log.warn({nodeId:i,connectionId:t.id,pairingKeyId:t.pairingKeyId},"node agent control-plane connection has no pairing");continue}const s=Fm(t.url);n.set(t.id,{tunnelUrl:s,keyId:r.keyId,secret:r.secret}),o.add(s)}const d=function(e){const t=e.controlPlaneTunnelUrl\|\|process.env.TASK_HANDOFF_CONTROL_PLANE_TUNNEL_URL;return t?new URL(t).toString():void 0}(t);if(d&&!o.has(d)){const e=r.reverseTunnelSecret(process.env.TASK_HANDOFF_CONTROL_PLANE_URL,t.remoteSecret\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_SECRET,t.remoteKeyId\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_KEY_ID);n.set(`explicit:${d}`,{tunnelUrl:d,keyId:e?.keyId,secret:e?.secret}),o.add(d)}const l=s.hasPersistedAccess?void 0:function(){const e=process.env.TASK_HANDOFF_CONTROL_PLANE_URL;if(!e)return;const t=new URL(gm,e);return t.protocol="https:"===t.protocol?"wss:":"ws:",t.toString()}();if(l&&!o.has(l)){const e=r.reverseTunnelSecret(process.env.TASK_HANDOFF_CONTROL_PLANE_URL,t.remoteSecret\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_SECRET,t.remoteKeyId\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_KEY_ID);n.set(`bootstrap:${l}`,{tunnelUrl:l,keyId:e?.keyId,secret:e?.secret})}(e=>{for(const[t,n]of a)e.has(t)\|\|(n.retry.cancel(),n.supervisor?.close(),a.delete(t),n.socket?.close(1e3,"Reverse tunnel configuration removed."));for(const[t,n]of e){const e=a.get(t);e&&p(e.config,n)\|\|u(t,n)}})(n)},state:e=>{const t=a.get(e);if(!t)return;const n=t.supervisor?.diagnostics();return{status:t.status,...void 0===n?.pingRttMs?{}:{pingRttMs:n.pingRttMs},...void 0===n?.pingRttP95Ms?{}:{pingRttP95Ms:n.pingRttP95Ms},consecutiveReconnects:t.retry.attempts,...t.lastConnectedAt?{lastConnectedAt:t.lastConnectedAt}:{},...t.lastDisconnectedAt?{lastDisconnectedAt:t.lastDisconnectedAt}:{},...t.nextRetryAt?{nextRetryAt:t.nextRetryAt}:{},...t.error?{error:t.error}:{}}},closeAll:()=>{c=!0;for(const e of a.values())e.retry.cancel(),e.supervisor?.close(),e.socket?.close(1001,"Node agent shutting down.");a.clear()}}}({log:h.log,inject:e=>h.inject(e),nodeAgentEventForwarder:h.nodeAgentEventForwarder,nodeAgentState:g},m,s,y,f);h.decorate("nodeAgentReverseTunnels",I);const A=new mm({app:h,state:g,settings:l,config:u,source:d?"persisted":"bootstrap",onActiveListener:p});let _;h.decorate("nodeAgentListenerManager",A),function(e){let t=!1;const n=async n=>{if(!t){t=!0,I.closeAll(),_?.close();try{await e.close()}finally{process.exitCode=n?0:process.exitCode}}},i=()=>{n("SIGINT")},s=()=>{n("SIGTERM")};process.once("SIGINT",i),process.once("SIGTERM",s),e.addHook("onClose",async()=>{process.off("SIGINT",i),process.off("SIGTERM",s)})}(h),h.addHook("onClose",async()=>{_?.close(),o.release()});try{await h.ready();const o=e.ipcPath\|\|process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH\|\|_a(s.dataDir);_=await async function(e,s){!function(e,i=process.platform){if("win32"!==i){t.mkdirSync(n.dirname(e),{recursive:!0,mode:448});try{t.chmodSync(n.dirname(e),448)}catch{}try{t.unlinkSync(e)}catch(e){if("ENOENT"!==e.code)throw e}}}(s);const o=i.createServer((t,n)=>{e.server.emit("request",t,n)});return o.on("upgrade",(t,n,i)=>{e.server.emit("upgrade",t,n,i)}),await new Promise((e,t)=>{o.once("error",t),o.listen(s,()=>{o.off("error",t),e()})}),o}(h,o),await A.start(),I.connectConfigured(),h.nodeAgentStartRecoverySupervisor?.()}catch(e){throw await h.close(),e}}catch(e){throw o.release(),e}var r,a}const Eh="task-handoff-node-agent.service",Th=`/etc/systemd/system/${Eh}`,bh="/etc/task-handoff/node-agent.env",wh=["@task-handoff/node-agent","@task-handoff/controlled-instance"];function Sh(e,t,n){const i=e.run(t,n);if(0!==i.status){const e=function(e){return[e.stdout,e.stderr].filter(Boolean).map(e=>String(e).trim()).filter(Boolean).join("\n")}(i);throw new Error(`${t} ${n.join(" ")} failed${e?`:\n${e}`:""}`)}}function vh(e,t){for(const n of e.split(/\r?\n/)){const e=n.indexOf("=");if(!(e<0\|\|n.slice(0,e).trim()!==t))return n.slice(e+1).trim()}}const Nh={getuid:()=>process.getuid?.(),exists:t.existsSync,readText:e=>t.readFileSync(e,"utf8"),remove:(e,n)=>t.rmSync(e,n),run:(e,t)=>l.spawnSync(e,t,{encoding:"utf8"}),confirmDeleteData:async function(e){if(!N.stdin.isTTY\|\|!N.stdout.isTTY)return!1;const t=v.createInterface({input:N.stdin,output:N.stdout});try{const n=await t.question(`Delete Node Agent data at ${e}? This removes identity, configuration, logs, and managed-instance metadata. Docker volumes are preserved. [y/N] `);return/^(?:y\|yes)$/i.test(n.trim())}finally{t.close()}},log:e=>console.log(e)};function Oh(e){const t=Number(e);if(!Number.isInteger(t)\|\|t<=0\|\|t>65535)throw new Error("Port must be a valid TCP port.");return t}function zh(e){if("local-ipc"!==e&&"local-loopback"!==e)throw new Error("Connection mode must be local-ipc or local-loopback.");return e}function Ch(e){const t=Number(e);if(!Number.isInteger(t)\|\|t<=0)throw new Error("Expiry must be a positive integer.");return t}(async function(){const t=new e.Command;t.name("task-handoff-node-agent").description("Run a TaskHandoff node agent.").version(R("@task-handoff/cli")).option("--host <host>","Node agent host",process.env.TASK_HANDOFF_NODE_AGENT_HOST\|\|"127.0.0.1").option("-p, --port <port>","Node agent port",Oh,Number(process.env.TASK_HANDOFF_NODE_AGENT_PORT)\|\|8091).option("--data-dir <path>","Node agent data directory").option("--token <token>","Bearer token required by the control plane").option("--connection-mode <mode>","Local control connection mode",zh).option("--ipc-path <path>","Unix socket path used by local-ipc mode").option("--control-plane-tunnel-url <url>","Control plane reverse WebSocket tunnel URL").action(async e=>{await _h({host:e.host,port:e.port,dataDir:e.dataDir,token:e.token,connectionMode:e.connectionMode,ipcPath:e.ipcPath,controlPlaneTunnelUrl:e.controlPlaneTunnelUrl})}),t.command("invite").description("Create a one-time token for pairing this node agent with a control plane.").option("--endpoint <url>","Use the node-agent HTTP endpoint instead of its local IPC socket").option("--ipc-path <path>","Local node-agent IPC socket path").option("--data-dir <path>","Node-agent data directory used to locate its IPC socket").option("--token <token>","Bearer token for local node-agent access",process.env.TASK_HANDOFF_NODE_AGENT_TOKEN).option("--expires-in-ms <ms>","Invite expiry in milliseconds",Ch).option("--json","Print raw JSON output").action(async e=>{const n=t.opts(),i=e.ipcPath\|\|n.ipcPath\|\|process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH,s=e.dataDir\|\|n.dataDir\|\|process.env.TASK_HANDOFF_NODE_AGENT_DATA_DIR,o=e.endpoint?void 0:i\|\|_a(s\|\|ga()),r=await async function(e){const t={"content-type":"application/json",...e.token?{authorization:`Bearer ${e.token}`}:{}},n=JSON.stringify({...e.expiresInMs?{expiresInMs:e.expiresInMs}:{}}),i=e.endpoint?await fetch(`${e.endpoint.replace(/\/$/,"")}/api/node-agent/pairing/invites`,{method:"POST",headers:t,body:n}):await Ea(e.ipcPath,"/pairing/invites",{method:"POST",headers:t,body:n}),s=await i.json().catch(()=>({}));if(!i.ok)throw new Error(s.error?.message\|\|`Node agent pairing invite failed with HTTP ${i.status}`);const o="string"==typeof s.data?.joinToken?s.data.joinToken:"";if(!o)throw new Error("Node agent pairing invite response did not include a join token.");return{nodeId:"string"==typeof s.data?.nodeId?s.data.nodeId:"",joinToken:o,expiresAt:"string"==typeof s.data?.expiresAt?s.data.expiresAt:""}}({endpoint:e.endpoint,ipcPath:o,token:e.token,expiresInMs:e.expiresInMs});e.json?console.log(JSON.stringify(r,null,2)):(r.nodeId&&console.log(`Node: ${r.nodeId}`),console.log(`Join token: ${r.joinToken}`),r.expiresAt&&console.log(`Expires: ${r.expiresAt}`))}),t.command("connect").description("Connect this Node Agent to a reachable Control Plane.").requiredOption("--control-plane <url>","Public Control Plane base URL").requiredOption("--join-token <token>","One-time join token issued by the Control Plane").option("--control-plane-name <name>","Control Plane display name").option("--endpoint <url>","Use the Node Agent HTTP endpoint instead of its local IPC socket").option("--ipc-path <path>","Local Node Agent IPC socket path").option("--data-dir <path>","Node Agent data directory used to locate its IPC socket").option("--token <token>","Bearer token for local Node Agent access",process.env.TASK_HANDOFF_NODE_AGENT_TOKEN).option("--json","Print raw JSON output").action(async e=>{const n=t.opts(),i=e.ipcPath\|\|n.ipcPath\|\|process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH,s=e.dataDir\|\|n.dataDir\|\|process.env.TASK_HANDOFF_NODE_AGENT_DATA_DIR,o=e.endpoint?void 0:i\|\|_a(s\|\|ga()),r=await async function(e){const t={"content-type":"application/json",...e.token?{authorization:`Bearer ${e.token}`}:{}},n=JSON.stringify({controlPlaneUrl:e.controlPlane,joinToken:e.joinToken,...e.controlPlaneName?{controlPlaneName:e.controlPlaneName}:{},activate:!0}),i=e.endpoint?await fetch(`${e.endpoint.replace(/\/$/,"")}/api/node-agent/control-plane-connections`,{method:"POST",headers:t,body:n}):await Ea(e.ipcPath,"/control-plane-connections",{method:"POST",headers:t,body:n}),s=await i.json().catch(()=>({}));if(!i.ok)throw new Error(s.error?.message\|\|`Node Agent connection failed with HTTP ${i.status}`);return s.data}({controlPlane:e.controlPlane,joinToken:e.joinToken,controlPlaneName:e.controlPlaneName,endpoint:e.endpoint,ipcPath:o,token:e.token});e.json?console.log(JSON.stringify(r,null,2)):(console.log(`Control Plane: ${String(r?.connection?.url\|\|e.controlPlane)}`),console.log(`Connection: ${String(r?.tunnel?.status\|\|"saved")}`))}),t.command("uninstall").description("Uninstall the Node Agent service and packages; data is preserved by default.").option("--data-dir <path>","Override the installed Node Agent data directory").option("--delete-data","Delete Node Agent data without prompting").option("--keep-data","Preserve Node Agent data without prompting").action(async e=>{await async function(e,t=Nh){if(e.deleteData&&e.keepData)throw new Error("--delete-data and --keep-data cannot be used together.");if(0!==t.getuid())throw new Error("Run this command as root so the Node Agent service and packages can be removed.");const i=t.exists(bh)?t.readText(bh):"",s=function(e,t){if(e.dataDir?.trim())return n.resolve(e.dataDir.trim());if(t.exists(bh)){const e=vh(t.readText(bh),"TASK_HANDOFF_NODE_AGENT_DATA_DIR");if(e)return n.resolve(e)}return n.resolve(ga())}(e,{exists:e=>e===bh&&Boolean(i),readText:()=>i});if(s===n.parse(s).root)throw new Error(`Refusing to use a filesystem root as the Node Agent data directory: ${s}`);const o=vh(i,"TASK_HANDOFF_NPM_COMMAND")\|\|process.env.TASK_HANDOFF_NPM_COMMAND\|\|"npm";if(t.exists(Th)){const e=t.readText(Th);if(!/^ExecStart=\S*task-handoff-node-agent(?:\s\|$)/m.test(e))throw new Error(`Refusing to remove ${Eh} because it is not owned by a standalone Node Agent installation.`);Sh(t,"systemctl",["disable","--now",Eh]),t.remove(Th,{force:!0}),Sh(t,"systemctl",["daemon-reload"])}Sh(t,o,["uninstall","--global",...wh]),t.remove(bh,{force:!0}),t.log("TaskHandoff Node Agent service and packages were removed.");const r=!!e.deleteData\|\|!e.keepData&&await t.confirmDeleteData(s);return r?(t.remove(s,{recursive:!0,force:!0}),t.log(`Node Agent data was deleted from ${s}.`)):t.log(`Node Agent data was preserved at ${s}.`),{dataDir:s,dataDeleted:r}}(e)}),await t.parseAsync(process.argv)})().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exitCode=1});
1	+ "use strict";var e=require("commander"),t=require("node:fs"),n=require("node:path"),i=require("node:http"),s=require("node:url"),o=require("fastify"),r=require("@fastify/websocket"),a=require("zod"),c=require("node:os"),d=require("node:crypto"),l=require("node:child_process"),u=require("node-pty"),p=require("ws"),m=require("node:net"),h=require("node:stream"),g=require("node:fs/promises"),f=require("node:stream/promises"),y=require("tar"),I=require("write-file-atomic"),A=require("node:async_hooks"),_=require("drizzle-orm"),E=require("drizzle-orm/sqlite-core"),w=require("node:sqlite"),T=require("drizzle-orm/node-sqlite"),b=require("semver"),S=require("cron-parser"),v=require("node:readline/promises"),N=require("node:process"),O="undefined"!=typeof document?document.currentScript:null;function z(e,n){try{const i=JSON.parse(t.readFileSync(e,"utf8"));if(n&&i.name!==n)return;return"string"==typeof i.version&&i.version.trim()?i.version.trim():void 0}catch{return}}function C(e){if(e)try{return n.dirname(t.realpathSync(e))}catch{return}}function R(e,t=process.env,i=e){const s=t.TASK_HANDOFF_VERSION?.trim();if(s)return s;const o=i.split("/").at(-1),r=process.argv[1]?n.resolve(process.argv[1]):void 0,a=r?n.dirname(r):void 0,c=[C(r),a,process.cwd()].filter(e=>Boolean(e));for(const t of new Set(c)){let i=t;for(;;){const t=z(n.join(i,"package.json"),e);if(t)return t;const s=n.dirname(i);if(s===i)break;i=s}}let d;for(const e of new Set(c)){let t=e;for(;;){if(o){const e=z(n.join(t,"packages",o,"package.json"),i);if(e)return e}d\|\|=z(n.join(t,"package.json"));const e=n.dirname(t);if(e===t)break;t=e}}return d\|\|"unknown"}const x={perMessageDeflate:{threshold:256,serverNoContextTakeover:!0,clientNoContextTakeover:!0,concurrencyLimit:4,zlibDeflateOptions:{level:1}}};function k(e){return e.readyState===(e.OPEN??1)}function D(e){const t=Buffer.isBuffer(e)?e.toString("utf8"):"string"==typeof e?e:"";if(Buffer.byteLength(t,"utf8")<=123)return t;let n="";for(const e of t){const t=`${n}${e}`;if(Buffer.byteLength(t,"utf8")>123)break;n=t}return n}function P(e){if("number"==typeof e&&Number.isInteger(e))return e>=3e3&&e<=4999\|\|e>=1e3&&e<=1014&&1004!==e&&1005!==e&&1006!==e?e:void 0}function L(e,t,n){e.close(P(t),D(n)\|\|void 0)}function M(e,t,n,i){if(k(e))for(const e of t.splice(0))if(i(e),!n(e))return}function j(e,t,n={}){const i=n.pendingFrameLimit??256,s=n.maxFrameBytes??8388608,o=n.maxTotalBytes??1073741824,r=n.maxBufferedBytes??16777216;let a=!1,c=k(t);const d=[],l=[];let u,p=0,m=0,h=0;const g=e=>Buffer.isBuffer(e)\|\|e instanceof ArrayBuffer\|\|ArrayBuffer.isView(e)?e.byteLength:Buffer.byteLength("string"==typeof e?e:String(e),"utf8"),f=(i,r)=>{const a=g(r);return h+=a,n.onFrame?.(i,a),!(a>s\|\|h>o)\|\|(L(e,1009,"WebSocket bridge traffic limit exceeded."),L(t,1009,"WebSocket bridge traffic limit exceeded."),!1)},y=()=>{u&&(clearTimeout(u),u=void 0)},I=(n,i)=>{const s=i.bytes;if((n.bufferedAmount??0)+s>r)return L(e,1013,"WebSocket bridge consumer is too slow."),L(t,1013,"WebSocket bridge consumer is too slow."),!1;try{return function(e,t){e.send(t.data,{binary:t.isBinary,compress:!1})}(n,i),!0}catch{return L(e,1011,"WebSocket bridge send failed."),L(t,1011,"WebSocket bridge send failed."),!1}},A=(n,s,o)=>{if(s.length>=i)return L(e,1011,"WebSocket bridge pending frame limit exceeded."),void L(t,1011,"WebSocket bridge pending frame limit exceeded.");const a="upstream"===n?p:m;if((("upstream"===n?t:e).bufferedAmount??0)+a+o.bytes>r)return L(e,1013,"WebSocket bridge consumer is too slow."),void L(t,1013,"WebSocket bridge consumer is too slow.");s.push(o),"upstream"===n?p+=o.bytes:m+=o.bytes};return n.upstreamOpenTimeoutMs&&!c&&(u=setTimeout(()=>{c\|\|a\|\|(L(e,1011,"Upstream websocket did not open."),L(t))},n.upstreamOpenTimeoutMs)),e.on("open",()=>M(e,l,t=>I(e,t),e=>{m-=e.bytes})),t.on("open",()=>{y(),c=!0,n.onUpstreamOpen?.(),M(t,d,e=>I(t,e),e=>{p-=e.bytes})}),e.on("message",(e,n=!1)=>{if(!f("client-to-upstream",e))return;const i={data:e,isBinary:Boolean(n),bytes:g(e)};k(t)?I(t,i):A("upstream",d,i)}),t.on("message",(t,n=!1)=>{if(!f("upstream-to-client",t))return;const i={data:t,isBinary:Boolean(n),bytes:g(t)};k(e)?I(e,i):A("client",l,i)}),t.on("close",(t,i)=>{y(),n.onUpstreamClose?.(t,i),(c\|\|a\|\|!n.onUpstreamCloseBeforeOpen?.())&&L(e,t,i)}),t.on("error",t=>{n.onUpstreamError?.(t),(c\|\|a\|\|!n.onUpstreamErrorBeforeOpen?.(t))&&L(e)}),e.on("close",(e,i)=>{y(),a=!0,n.onClientClose?.(e,i),L(t,e,i)}),e.on("error",e=>{y(),a=!0,n.onClientError?.(e),L(t,1011,"WebSocket bridge client failed.")}),{close:(n,i)=>{y(),L(t,n,i),L(e,n,i)}}}var U,F,$=function(){if(F)return U;F=1;const e=t,{spawnSync:n}=l;return U={processStartIdentity:function(t,i=process.platform){if(Number.isInteger(t)&&!(t<=0)){if("linux"===i)try{const n=e.readFileSync(`/proc/${t}/stat`,"utf8"),i=n.lastIndexOf(")");if(i<0)return;const s=n.slice(i+2).trim().split(/\s+/)[19];return s?`linux:${s}`:void 0}catch{return}if(["darwin","freebsd","openbsd","aix","sunos"].includes(i)){const e=n("ps",["-o","lstart=","-p",String(t)],{encoding:"utf8",timeout:1e3}),s=0===e.status?e.stdout.trim().replace(/\s+/g," "):"";return s?`${i}:${s}`:void 0}if("win32"===i){const e=n("powershell.exe",["-NoProfile","-NonInteractive","-Command",`(Get-Process -Id ${t} -ErrorAction Stop).StartTime.ToUniversalTime().Ticks`],{encoding:"utf8",timeout:2e3}),i=0===e.status?e.stdout.trim():"";return/^\d+$/.test(i)?`win32:${i}`:void 0}}}}}();class H extends Error{code;lockPath;owner;constructor(e,t,n={}){const i=t?.pid?` pid ${t.pid}`:"";super(`${n.label\|\|"Process"} is already running${i}. Lock: ${e}`),this.name="ProcessSingletonError",this.code=n.code\|\|"PROCESS_ALREADY_RUNNING",this.lockPath=e,this.owner=t}}function q(e){return n.join(e,"owner.json")}function V(e){return n.join(e,"initializing.json")}function B(e){return n.join(e,"recovering.json")}function K(e){return Number.isInteger(e)&&Number(e)>0}function G(e){try{const n=JSON.parse(t.readFileSync(q(e),"utf8"));if(K(n.pid)&&"string"==typeof n.startTime){const e=n;return{pid:e.pid,hostname:"string"==typeof e.hostname&&e.hostname?e.hostname:c.hostname(),component:e.component\|\|"server-update",command:"string"==typeof e.command?e.command:"",acquiredAt:"string"==typeof e.createdAt&&Number.isFinite(Date.parse(e.createdAt))?e.createdAt:new Date(0).toISOString(),token:"string"==typeof e.token&&e.token?e.token:`legacy:${e.pid}:${e.startTime}`,startIdentity:e.startTime.startsWith("linux:")?e.startTime:`linux:${e.startTime}`}}if(!(K(n.pid)&&"string"==typeof n.hostname&&n.hostname&&"string"==typeof n.command&&"string"==typeof n.acquiredAt&&Number.isFinite(Date.parse(n.acquiredAt))&&"string"==typeof n.token&&n.token))return;return n}catch{return}}const W=G;function X(e){if(!K(e))return!1;try{return process.kill(Number(e),0),!0}catch(e){return"EPERM"===e.code}}function Y(e){if(!e\|\|!X(e.pid))return!1;if(!e.startIdentity)return!0;const t=$.processStartIdentity(e.pid);return void 0===t\|\|t===e.startIdentity}function J(e,i){const s=n.join(e,`.owner-${i.token}.tmp`);t.writeFileSync(s,`${JSON.stringify(i,null,2)}\n`,{encoding:"utf8",mode:384,flag:"wx"});const o=Z(e);if(o?.token!==i.token)throw te(s),new Error(`Process lock initialization was superseded: ${e}`);t.renameSync(s,q(e)),te(V(e))}function Q(e,i,s){const o=W(e);if(o?.token!==i.token)return!1;const r={...i};for(const[e,t]of Object.entries(s))void 0===t?delete r[e]:Object.assign(r,{[e]:t});const a=n.join(e,`.owner-update-${i.token}-${d.randomUUID()}.tmp`);try{if(t.writeFileSync(a,`${JSON.stringify(r,null,2)}\n`,{encoding:"utf8",mode:384,flag:"wx"}),W(e)?.token!==i.token)return!1;t.renameSync(a,q(e));for(const e of Object.keys(i))delete i[e];return Object.assign(i,r),!0}catch(e){if("ENOENT"===e.code)return!1;throw e}finally{te(a)}}function Z(e){try{return JSON.parse(t.readFileSync(V(e),"utf8"))}catch{return}}function ee(e){const t=Z(e);return K(t?.pid)&&Y({pid:t.pid,startIdentity:t.startIdentity})}function te(e){try{t.unlinkSync(e)}catch(e){if("ENOENT"!==e.code)throw e}}function ne(){Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,20)}function ie(e){try{const n=Z(e),i=Date.parse(n?.startedAt\|\|"");return Number.isFinite(i)?Math.max(0,Date.now()-i):Math.max(0,Date.now()-t.statSync(e).mtimeMs)}catch{return 0}}function se(e,i){try{return t.writeFileSync(B(e),`${JSON.stringify({token:i,pid:process.pid,startedAt:(new Date).toISOString()})}\n`,{encoding:"utf8",mode:384,flag:"wx"}),!0}catch(s){if("EEXIST"===s.code)return!!function(e){const i=B(e),s=oe(i),o=Date.parse(s?.startedAt\|\|"");if(X(s?.pid)\|\|Number.isFinite(o)&&Date.now()-o<2e3)return!1;const r=n.join(e,`.recovering-${d.randomUUID()}.stale`);try{t.renameSync(i,r)}catch(e){if(["ENOENT","EEXIST"].includes(e.code\|\|""))return!1;throw e}const a=oe(r);if(a?.token===s?.token)return te(r),!0;try{t.linkSync(r,i)}catch(e){if("EEXIST"!==e.code)throw e}finally{te(r)}return!1}(e)&&se(e,i);if("ENOENT"===s.code)return!1;throw s}}function oe(e){try{return JSON.parse(t.readFileSync(e,"utf8"))}catch{return}}function re(e,t){return oe(B(e))?.token===t}function ae(){return(new Date).toISOString()}const ce=6048e5;function de(e,t){const i=n.resolve(e),s=n.resolve(i,t);if(n.dirname(s)!==i\|\|n.basename(s)!==t)throw new Error(`Retention entry is not a direct child of its managed root: ${t}`);return s}function le(e){if(t.existsSync(e)){const n=t.lstatSync(e);if(!n.isDirectory()\|\|n.isSymbolicLink())throw new Error(`Managed persistence path must be a real directory: ${e}`)}t.mkdirSync(e,{recursive:!0,mode:448}),t.chmodSync(e,448)}const ue=a.z.string().trim().min(1).max(120),pe=20971520,me=512e3,he=me,ge=pe,fe=41943040,ye="ai.sessions",Ie="ai-session.snapshot",Ae="ai-session.patch",_e="ai-session.removed",Ee="ai-session.message-delta",we="ai-session.timeline-item",Te="ai-session.timeline-item-delta",be=a.z.string().trim().min(1).max(80),Se=a.z.enum(["app-session","ai-session"]),ve=a.z.enum(["image","file"]),Ne={scopeType:a.z.enum(["session","create-request"]),scopeId:a.z.string().trim().min(1).max(160),kind:ve,name:a.z.string().trim().min(1).max(240),mime:a.z.string().trim().min(1).max(120)};a.z.object({...Ne,size:a.z.coerce.number().int().positive().max(pe)}).strict();const Oe=a.z.string().regex(/^cia_[a-f0-9]{24}$/);a.z.object({attachmentId:Oe,...Ne,size:a.z.number().int().positive().max(pe)}).strict(),a.z.object({offset:a.z.coerce.number().int().nonnegative()}).strict(),a.z.object({attachmentId:Oe,offset:a.z.number().int().nonnegative()}),a.z.object({id:Oe,kind:ve,name:a.z.string().trim().min(1).max(240),mime:a.z.string().trim().min(1).max(120),size:a.z.number().int().positive().max(pe),expiresAt:a.z.string().datetime()});const ze=a.z.object({id:a.z.string().trim().min(1).max(120),kind:ve,name:a.z.string().trim().min(1).max(240),mime:a.z.string().trim().min(1).max(120),size:a.z.number().int().min(0).max(Number.MAX_SAFE_INTEGER)}),Ce=a.z.enum(["available","expired","missing"]),Re=ze.extend({contentState:Ce.default("available")}).strict(),xe=a.z.object({id:a.z.string().trim().min(1).max(240),text:a.z.string(),attachments:a.z.array(Re).max(6).default([])}).strict(),ke=a.z.enum(["running","waiting","idle","failed"]);a.z.object({instanceId:a.z.string().trim().min(1).max(160),sessionId:a.z.string().trim().min(1).max(120),unread:a.z.boolean(),sessionUpdatedAt:a.z.string().datetime(),updatedAt:a.z.string().datetime()}).strict();const De=a.z.enum(["thinking","tool","editing","approval","responding","unknown"]),Pe=a.z.object({id:a.z.string().trim().min(1).max(240).optional(),kind:a.z.string().trim().min(1).max(80).optional(),name:a.z.string().trim().min(1).max(120),inputPreview:a.z.string().trim().max(500).optional(),startedAt:a.z.string().datetime().optional()}).strict(),Le=a.z.enum(["running","completed","failed","waiting"]),Me=a.z.object({id:a.z.string().trim().min(1).max(240),turnId:a.z.string().trim().min(1).max(240)}).strict(),je=Me.extend({type:a.z.literal("user-message"),text:a.z.string(),attachments:a.z.array(Re).max(6).optional()}).strict(),Ue=Me.extend({type:a.z.literal("ai-message"),text:a.z.string()}).strict(),Fe=Me.extend({type:a.z.literal("activity"),activityKind:a.z.string().trim().min(1).max(120),title:a.z.string().trim().min(1).max(240),status:Le.optional(),summary:a.z.string().max(4e3).optional(),input:a.z.string().max(1e5).optional(),output:a.z.string().max(1e6).optional(),paths:a.z.array(a.z.string().trim().min(1).max(4096)).max(500).optional(),exitCode:a.z.number().int().optional(),durationMs:a.z.number().int().nonnegative().optional()}).strict(),$e=a.z.discriminatedUnion("type",[je,Ue,Fe]);a.z.object({sessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),items:a.z.array($e),generatedAt:a.z.string().datetime()}).strict(),a.z.object({sessionId:a.z.string().trim().min(1).max(120),turnId:a.z.string().trim().min(1).max(240),items:a.z.array($e),generatedAt:a.z.string().datetime()}).strict();const He=a.z.enum(["pending-init","running","interrupted","completed","errored","shutdown","not-found"]),qe=a.z.enum(["started","interacted","interrupted"]),Ve=a.z.object({threadId:a.z.string().trim().min(1).max(240),path:a.z.string().trim().max(4096).optional(),status:He,activity:qe.optional(),message:a.z.string().trim().max(1e3).optional(),updatedAt:a.z.string().datetime()}).strict();function Be(e){return"completed"!==e.status}const Ke=a.z.array(Ve).max(50).transform(e=>e.filter(Be)),Ge=a.z.object({toolCalls:a.z.number().int().min(0).default(0),edits:a.z.number().int().min(0).default(0),approvals:a.z.number().int().min(0).default(0)}).strict().default({toolCalls:0,edits:0,approvals:0}),We=a.z.object({send:a.z.boolean().optional(),interrupt:a.z.boolean().optional(),approval:a.z.boolean().optional(),fork:a.z.boolean().optional(),openApp:a.z.boolean().optional(),close:a.z.boolean().optional()}).strict(),Xe=a.z.string().trim().min(1).max(240),Ye=a.z.discriminatedUnion("kind",[a.z.object({kind:a.z.literal("fork"),parentProviderSessionId:Xe,throughTurnId:a.z.string().trim().min(1).max(240).optional()}).strict(),a.z.object({kind:a.z.literal("subagent"),parentProviderSessionId:Xe}).strict()]),Je=a.z.preprocess(function(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const t=e;if("fork"===t.kind){const e=Ye.safeParse({kind:"fork",parentProviderSessionId:t.parentProviderSessionId,..."string"==typeof t.throughTurnId?{throughTurnId:t.throughTurnId}:{}});return e.success?e.data:void 0}if("subagent"===t.kind){const e=Ye.safeParse({kind:"subagent",parentProviderSessionId:t.parentProviderSessionId});return e.success?e.data:void 0}},Ye.optional()),Qe=a.z.union([ze.extend({source:a.z.object({type:a.z.literal("inline"),encoding:a.z.literal("base64"),data:a.z.string().min(1).max(31457280)}).strict()}).strict().superRefine((e,t)=>{const n="image"===e.kind?pe:me;(e.size<=0\|\|("file"===e.kind?e.size>=n:e.size>n))&&t.addIssue({code:a.z.ZodIssueCode.custom,path:["size"],message:`Inline ${e.kind} must be between 1 byte and ${n} bytes.`})}),ze.extend({source:a.z.object({type:a.z.literal("runtime-path"),path:a.z.string().trim().min(1).max(4096)}).strict()}).strict()]),Ze=ze.extend({sourceType:a.z.enum(["inline","runtime-path"])}).strict(),et=a.z.union([a.z.object({id:a.z.string().trim().min(1).max(120),kind:ve.optional(),source:a.z.object({type:a.z.literal("upload-ref")}).strict().default({type:"upload-ref"})}).strict(),a.z.object({id:a.z.string().trim().min(1).max(120),kind:ve,name:a.z.string().trim().min(1).max(240),mime:a.z.string().trim().min(1).max(120),size:a.z.number().int().min(0).max(Number.MAX_SAFE_INTEGER),source:a.z.object({type:a.z.literal("runtime-path"),path:a.z.string().trim().min(1).max(4096)}).strict()}).strict()]),tt=a.z.enum(["auto","queue","steer","immediate"]),nt=a.z.enum(["ask","auto-review","full-access"]),it=a.z.enum(["review","rename","goal","compact"]);a.z.object({command:it,argument:a.z.string().trim().max(4e3).optional()}).strict().superRefine((e,t)=>{"rename"!==e.command\|\|e.argument\|\|t.addIssue({code:"custom",path:["argument"],message:"Rename requires a thread name."}),"review"!==e.command&&"compact"!==e.command\|\|!e.argument\|\|t.addIssue({code:"custom",path:["argument"],message:`${e.command} does not accept an argument.`})}),a.z.object({command:it,value:a.z.string().max(4e3).optional(),turnId:a.z.string().trim().min(1).max(240).optional()}).strict(),a.z.enum(["skill","app","plugin"]);const st=a.z.object({name:a.z.string().trim().min(1).max(240),path:a.z.string().trim().min(1).max(4096)}),ot=a.z.discriminatedUnion("kind",[st.extend({kind:a.z.literal("skill"),path:a.z.string().trim().min(1).max(4096).refine(e=>e.startsWith("/"),"Skill paths must be absolute.")}).strict(),st.extend({kind:a.z.literal("app"),path:a.z.string().trim().min(7).max(4096).regex(/^app:\/\/[^\s/]+$/,"App paths must use app://<id>.")}).strict(),st.extend({kind:a.z.literal("plugin"),path:a.z.string().trim().min(10).max(4096).regex(/^plugin:\/\/[^\s/]+$/,"Plugin paths must use plugin://<id>.")}).strict()]),rt=a.z.array(ot).max(20).default([]),at=a.z.enum(["plugin","skill","file","directory","app"]),ct=a.z.object({kind:at,name:a.z.string().trim().min(1).max(240),description:a.z.string().trim().max(1e3).optional(),path:a.z.string().trim().min(1).max(4096),icon:a.z.string().trim().max(4096).optional()}).strict().superRefine((e,t)=>{"skill"!==e.kind\|\|e.path.startsWith("/")\|\|t.addIssue({code:"custom",path:["path"],message:"Skill paths must be absolute."}),"app"!==e.kind\|\|/^app:\/\/[^\s/]+$/.test(e.path)\|\|t.addIssue({code:"custom",path:["path"],message:"App paths must use app://<id>."}),"plugin"!==e.kind\|\|/^plugin:\/\/[^\s/]+$/.test(e.path)\|\|t.addIssue({code:"custom",path:["path"],message:"Plugin paths must use plugin://<id>."}),"file"!==e.kind&&"directory"!==e.kind\|\|!e.path.startsWith("/")&&!e.path.split(/[\\/]+/).includes("..")\|\|t.addIssue({code:"custom",path:["path"],message:"File and directory paths must be relative to the session cwd."})}),dt=a.z.object({category:a.z.enum(["skills","plugins","apps","files"]),code:a.z.string().trim().min(1).max(160),message:a.z.string().trim().min(1).max(2e3)}).strict();a.z.object({sessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),cwd:a.z.string().trim().min(1).max(4096),candidates:a.z.array(ct).max(1e3).default([]),diagnostics:a.z.array(dt).max(20).default([])}).strict(),a.z.object({query:a.z.string().trim().max(240).default("")}).strict(),a.z.object({sessionId:a.z.string().trim().min(1).max(120),cwd:a.z.string().trim().min(1).max(4096),query:a.z.string().trim().max(240),requestId:a.z.string().trim().min(1).max(160),candidates:a.z.array(ct.refine(e=>"file"===e.kind\|\|"directory"===e.kind,"File search only returns files and directories.")).max(200).default([]),complete:a.z.boolean().default(!1)}).strict();const lt=a.z.object({message:a.z.string().trim().min(1).max(2e4),mode:tt.optional(),permissionMode:nt.optional()}),ut=lt.extend({attachments:a.z.array(Qe).max(6).default([]),references:rt}).strict().superRefine((e,t)=>{e.attachments.reduce((e,t)=>e+("inline"===t.source.type?t.size:0),0)>fe&&t.addIssue({code:a.z.ZodIssueCode.custom,path:["attachments"],message:"Inline attachments must be 41943040 bytes or less in total."})}),pt=lt.extend({attachments:a.z.array(et).max(6).default([]),references:rt}).strict(),mt=a.z.object({type:a.z.literal("runtime-path"),path:a.z.string().trim().min(1).max(4096).refine(e=>e.startsWith("/")\|\|/^[A-Za-z]:[\\/]/.test(e),"Runtime paths must be absolute in the target controlled instance.")}).strict(),ht=a.z.object({modelEntityId:a.z.string().trim().min(1).max(120),modelName:a.z.string().trim().min(1).max(240)}).strict(),gt=a.z.enum(["none","minimal","low","medium","high","xhigh","max","ultra"]);ut.extend({agent:be,cwd:mt,cwdFolderId:a.z.string().trim().min(1).max(120).optional(),clientRequestId:a.z.string().trim().min(1).max(160),modelSelection:ht.optional(),reasoningEffort:gt.optional(),storyId:ue.optional()}).strict();const ft=a.z.object({mode:a.z.enum(["current-folder","worktree"]),branch:a.z.string().trim().min(1).max(1024)}).strict();pt.extend({agent:be,cwdFolderId:a.z.string().trim().min(1).max(120).optional(),gitSelection:ft.optional(),clientRequestId:a.z.string().trim().min(1).max(160),modelSelection:ht.optional(),reasoningEffort:gt.optional(),storyId:ue.optional()}).strict(),a.z.object({clientRequestId:a.z.string().trim().min(1).max(160),modelSelection:ht}).strict(),a.z.object({sessionId:a.z.string().trim().min(1).max(120),accepted:a.z.literal(!0)}).strict(),a.z.object({clientRequestId:a.z.string().trim().min(1).max(160),reasoningEffort:gt}).strict(),a.z.object({sessionId:a.z.string().trim().min(1).max(120),accepted:a.z.literal(!0)}).strict(),a.z.object({storyId:ue.nullable()}).strict(),a.z.object({sessionId:a.z.string().trim().min(1).max(120),storyId:ue.optional()}).strict(),a.z.object({disposition:a.z.enum(["created","already-created"]),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),creationSource:a.z.literal("ai-session")}).strict();const yt=a.z.object({mode:a.z.enum(["current","managed-worktree"]).default("current")}).strict().default({mode:"current"});a.z.object({clientRequestId:a.z.string().trim().min(1).max(160),throughTurnId:a.z.string().trim().min(1).max(240).optional(),workspace:yt.optional().default({mode:"current"})}).strict(),a.z.object({disposition:a.z.enum(["created","already-created"]),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),creationSource:a.z.literal("ai-session")}).strict(),a.z.object({clientRequestId:a.z.string().trim().min(1).max(160)}).strict(),a.z.object({disposition:a.z.enum(["opened","already-open"]),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),appSessionId:a.z.string().trim().min(1).max(120),creationSource:Se}).strict(),a.z.object({clientRequestId:a.z.string().trim().min(1).max(160)}).strict(),a.z.object({disposition:a.z.enum(["closed","already-closed"]),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),creationSource:Se}).strict(),a.z.object({disposition:a.z.enum(["cleared","already-cleared"]),aiSessionId:a.z.string().trim().min(1).max(120),clearedSessionIds:a.z.array(a.z.string().trim().min(1).max(120))}).strict(),a.z.object({code:a.z.enum(["invalid-request","not-found","unsupported","provider-unavailable","materialization-failed","open-app-failed","close-failed","conflict"]),message:a.z.string().trim().min(1).max(4e3),retryable:a.z.boolean().default(!1),aiSessionId:a.z.string().trim().min(1).max(120).optional(),providerSessionId:a.z.string().trim().min(1).max(240).optional()}).strict(),a.z.object({decision:a.z.enum(["allow","deny","skip"])}).strict(),a.z.object({expectedRevision:a.z.number().int().min(0),queueIds:a.z.array(a.z.string().trim().min(1).max(120)).max(100)}).strict(),a.z.object({expectedRevision:a.z.number().int().min(0),message:a.z.string().trim().min(1).max(2e4)}).strict(),a.z.object({code:a.z.string().trim().min(1).max(160),message:a.z.string(),instanceId:a.z.string().trim().min(1).max(160).optional(),nodeId:a.z.string().trim().min(1).max(160).optional(),route:a.z.string().trim().min(1).max(4096).optional()}).strict();const It=a.z.object({id:a.z.string().trim().min(1).max(120),messageId:a.z.string().trim().min(1).max(240).optional(),message:a.z.string().trim().min(1).max(2e4),attachments:a.z.array(Ze).max(6).default([]),references:rt,permissionMode:nt.optional(),status:a.z.enum(["queued","sending","failed"]).default("queued"),createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime(),error:a.z.string().trim().max(4e3).optional()}).strict(),At=a.z.object({revision:a.z.number().int().min(0).default(0),pendingCount:a.z.number().int().min(0).default(0),items:a.z.array(It).max(100).default([])}).strict().default({revision:0,pendingCount:0,items:[]}),_t=a.z.enum(["control","realtime","adapter-snapshot","transcript-tail","transcript-scan","process-scan","app-session"]),Et=a.z.object({id:a.z.string().trim().min(1).max(240),status:a.z.enum(["running","completed"]),startedAt:a.z.string().datetime().optional(),completedAt:a.z.string().datetime().optional()}).strict(),wt=a.z.object({id:a.z.string().trim().min(1).max(240),providerTurnId:a.z.string().trim().max(240).optional(),source:_t.optional(),userPrompt:a.z.string().trim().optional(),userMessages:a.z.array(xe).max(100).optional(),status:a.z.enum(["queued","running","waiting","completed","failed"]).default("running"),phase:De.optional(),summary:a.z.string().trim().max(1e3).optional(),lastMessage:a.z.string().trim().optional(),lastMessageItemId:a.z.string().trim().max(240).optional(),contextCompactions:a.z.array(Et).max(20).optional(),revision:a.z.number().int().min(0).default(0),sourcePriority:a.z.number().int().min(0).max(100).optional(),snapshotVersion:a.z.number().int().min(0).optional(),observedAt:a.z.string().datetime().optional(),startedAt:a.z.string().datetime().optional(),updatedAt:a.z.string().datetime().optional(),completedAt:a.z.string().datetime().optional()}).strict(),Tt=wt.pick({id:!0,providerTurnId:!0,userPrompt:!0,userMessages:!0,status:!0,phase:!0,summary:!0,lastMessage:!0,contextCompactions:!0,startedAt:!0,updatedAt:!0,completedAt:!0}).strict(),bt=a.z.object({id:a.z.string().trim().min(1).max(120),agent:be,creationSource:Se.default("app-session"),appSessionId:a.z.string().trim().max(120).optional(),appId:a.z.string().trim().max(120).optional(),providerSessionId:a.z.string().trim().max(240).optional(),lineage:Je,providerMeta:a.z.record(a.z.string(),a.z.unknown()).optional(),modelSelection:ht.optional(),reasoningEffort:gt.optional(),storyId:ue.optional(),appBindingKeys:a.z.array(a.z.string().trim().min(1).max(240)).max(20).optional(),actions:We.optional(),activeTurnId:a.z.string().trim().max(240).optional(),title:a.z.string().trim().max(240).optional(),cwd:a.z.string().trim().max(4096).optional(),cwdFolderId:a.z.string().trim().min(1).max(120).optional(),userPrompt:a.z.string().trim().optional(),turns:a.z.array(wt).max(50).optional(),status:ke.default("running"),phase:De.default("unknown"),summary:a.z.string().trim().max(1e3).optional(),lastMessage:a.z.string().trim().optional(),lastMessageItemId:a.z.string().trim().max(240).optional(),currentTool:Pe.optional(),toolCallsSinceLastMessage:a.z.number().int().min(0).default(0),subAgents:Ke.default([]),transcriptPath:a.z.string().trim().max(4096).optional(),transcriptSize:a.z.number().int().min(0).optional(),startedAt:a.z.string().datetime(),updatedAt:a.z.string().datetime(),completedAt:a.z.string().datetime().optional(),error:a.z.string().trim().max(4e3).optional(),counters:Ge,queue:At}).strict(),St=bt.pick({id:!0,appBindingKeys:!0,cwd:!0,error:!0,providerMeta:!0,modelSelection:!0,reasoningEffort:!0,queue:!0,subAgents:!0}).strict(),vt=wt.pick({id:!0,providerTurnId:!0,status:!0,phase:!0,revision:!0,startedAt:!0,updatedAt:!0,completedAt:!0}).extend({bodyRevision:a.z.string().trim().min(1).max(64)}).strict(),Nt=a.z.object({sessionId:a.z.string().trim().min(1).max(120),revision:a.z.string().trim().min(1).max(64),turns:a.z.array(vt).max(50)}).strict(),Ot=a.z.object({sessionId:a.z.string().trim().min(1).max(120),revision:a.z.string().trim().min(1).max(64),turn:wt}).strict(),zt=a.z.string().trim().min(1).max(64),Ct=a.z.object({kind:a.z.literal("not-modified"),revision:zt}).strict();a.z.discriminatedUnion("kind",[Ct,a.z.object({kind:a.z.literal("updated"),revision:zt,detail:St}).strict()]),a.z.discriminatedUnion("kind",[Ct,a.z.object({kind:a.z.literal("updated"),revision:zt,index:Nt}).strict()]),a.z.discriminatedUnion("kind",[Ct,a.z.object({kind:a.z.literal("updated"),revision:zt,body:Ot}).strict()]);const Rt=a.z.object({session:bt,provider:a.z.string().trim().min(1).max(80),action:a.z.enum(["send","queue","steer","interrupt","approval"]),decision:a.z.enum(["allow","deny","skip"]).optional(),turnId:a.z.string().trim().min(1).max(240).optional(),providerTurnId:a.z.string().trim().min(1).max(240).optional(),queueId:a.z.string().trim().min(1).max(120).optional()}).strict(),xt=Rt.omit({session:!0}).extend({sessionId:a.z.string().trim().min(1).max(120),messageId:a.z.string().trim().min(1).max(240).optional()}).strict();a.z.object({sessionId:a.z.string().trim().min(1).max(120),queueRevision:a.z.number().int().min(0),action:a.z.enum(["retry","remove","edit","reorder"]),queueId:a.z.string().trim().min(1).max(120).optional()}).strict(),a.z.union([xt,Rt.transform(function(e){const t=e.session.turns?.at(-1),n=(e.queueId?e.session.queue?.items.find(t=>t.id===e.queueId)?.messageId:void 0)\|\|("send"===e.action\|\|"queue"===e.action\|\|"steer"===e.action?t?.userMessages?.at(-1)?.id:void 0);return xt.parse({sessionId:e.session.id,provider:e.provider,action:e.action,...e.decision?{decision:e.decision}:{},...e.turnId\|\|e.session.activeTurnId\|\|t?.id?{turnId:e.turnId\|\|e.session.activeTurnId\|\|t?.id}:{},...e.providerTurnId\|\|t?.providerTurnId?{providerTurnId:e.providerTurnId\|\|t?.providerTurnId}:{},...e.queueId?{queueId:e.queueId}:{},...n?{messageId:n}:{}})})]);const kt=a.z.object({id:a.z.string().trim().min(1).max(120),agent:be,creationSource:Se,providerSessionId:a.z.string().trim().min(1).max(240),lineage:Je,modelSelection:ht.optional(),reasoningEffort:gt.optional(),storyId:ue.optional(),title:a.z.string().trim().max(240).optional(),userPrompt:a.z.string().trim().optional(),lastMessage:a.z.string().trim().optional(),cwd:a.z.string().trim().min(1).max(4096),cwdFolderId:a.z.string().trim().min(1).max(120).optional(),lastActiveAt:a.z.string().datetime(),archivedAt:a.z.string().datetime()}).strict();a.z.object({schemaVersion:a.z.literal(1).default(1),items:a.z.array(kt).max(1e4).default([])}).strict(),a.z.object({items:a.z.array(kt).max(1e4).default([])}).strict(),a.z.object({item:kt,turns:a.z.array(Tt).max(50).default([])}).strict(),a.z.object({disposition:a.z.enum(["resumed","already-open"]),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),appSessionId:a.z.string().trim().min(1).max(120).optional(),creationSource:Se}).strict();const Dt=wt.omit({userMessages:!0}),Pt=bt.pick({id:!0,agent:!0,creationSource:!0,appSessionId:!0,appId:!0,providerSessionId:!0,lineage:!0,providerMeta:!0,modelSelection:!0,reasoningEffort:!0,storyId:!0,appBindingKeys:!0,actions:!0,activeTurnId:!0,title:!0,cwd:!0,cwdFolderId:!0,userPrompt:!0,turns:!0,status:!0,phase:!0,summary:!0,lastMessage:!0,lastMessageItemId:!0,currentTool:!0,toolCallsSinceLastMessage:!0,subAgents:!0,queue:!0,startedAt:!0,updatedAt:!0,error:!0}).extend({turns:a.z.array(Dt).max(50).optional(),detailRevision:a.z.string().trim().min(1).max(64).optional(),turnsRevision:a.z.string().trim().min(1).max(64).optional(),latestTurnRef:a.z.object({id:wt.shape.id,bodyRevision:a.z.string().trim().min(1).max(64)}).strict().optional(),turnCount:a.z.number().int().min(0).optional(),subAgentCount:a.z.number().int().min(0).optional(),lastUserMessageAt:a.z.string().datetime().optional()}).strict(),Lt=a.z.object({runningCount:a.z.number().int().min(0).default(0),waitingCount:a.z.number().int().min(0).default(0),staleCount:a.z.number().int().min(0).default(0),sessions:a.z.array(Pt).default([]),updatedAt:a.z.string().datetime()}).strict(),Mt=a.z.object({streamId:a.z.string().trim().min(1).max(240),revision:a.z.number().int().min(0),lastEventAt:a.z.string().datetime(),snapshot:Lt}).strict();Lt.pick({runningCount:!0,waitingCount:!0,staleCount:!0,updatedAt:!0}).extend({idleCount:a.z.number().int().min(0).default(0),problemCount:a.z.number().int().min(0).default(0),revision:a.z.number().int().min(0).optional()});const jt=a.z.enum(["provider-event","app-session-created","app-session-updated","app-session-deleted","discovery-scan","control-action","heartbeat-sync","startup"]),Ut=a.z.object({streamId:a.z.string().trim().min(1).max(240),instanceId:a.z.string().trim().min(1).max(160),nodeId:a.z.string().trim().min(1).max(160).optional(),revision:a.z.number().int().min(0),previousRevision:a.z.number().int().min(0).optional(),traceId:a.z.string().trim().min(1).max(160),generatedAt:a.z.string().datetime(),reason:jt}).strict(),Ft=a.z.object({meta:Ut,snapshot:Lt}).strict(),$t=a.z.object({meta:Ut,upserted:a.z.array(Pt).default([]),removed:a.z.array(a.z.string().trim().min(1).max(120)).default([])}).strict(),Ht=a.z.object({meta:Ut,sessionIds:a.z.array(a.z.string().trim().min(1).max(120)).default([]),expiresAt:a.z.string().datetime()}).strict(),qt=a.z.object({instanceId:a.z.string().trim().min(1).max(160),nodeId:a.z.string().trim().min(1).max(160).optional(),sessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240).optional(),turnId:a.z.string().trim().min(1).max(240),itemId:a.z.string().trim().min(1).max(240),delta:a.z.string().min(1),generatedAt:a.z.string().datetime()}).strict(),Vt=qt.omit({instanceId:!0,nodeId:!0,providerSessionId:!0}).strict();a.z.object({instanceId:a.z.string().trim().min(1).max(160),nodeId:a.z.string().trim().min(1).max(160).optional(),sessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240),item:$e,generatedAt:a.z.string().datetime()}).strict();const Bt=a.z.object({instanceId:a.z.string().trim().min(1).max(160),nodeId:a.z.string().trim().min(1).max(160).optional(),sessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().min(1).max(240).optional(),turnId:a.z.string().trim().min(1).max(240),itemId:a.z.string().trim().min(1).max(240),field:a.z.literal("output"),delta:a.z.string().min(1),generatedAt:a.z.string().datetime()}).strict(),Kt=Bt.omit({instanceId:!0,nodeId:!0,providerSessionId:!0}).strict();function Gt(e){return Kt.parse({sessionId:e.sessionId,turnId:e.turnId,itemId:e.itemId,field:e.field,delta:e.delta,generatedAt:e.generatedAt})}function Wt(e,t){if(t?.subagents\|\|"subagent"!==e.lineage?.kind)return e;const{lineage:n,...i}=e;return i}function Xt(e,t){return t?.subagents?e:{...e,sessions:e.sessions.map(e=>Wt(e,t))}}a.z.object({streamId:a.z.string().trim().min(1).max(240),instanceId:a.z.string().trim().min(1).max(160),sinceRevision:a.z.number().int().min(0),latestRevision:a.z.number().int().min(0),earliestRetainedRevision:a.z.number().int().min(0),syncRequired:a.z.boolean().default(!1),events:a.z.array(a.z.discriminatedUnion("type",[a.z.object({type:a.z.literal(Ie),payload:Ft}).strict(),a.z.object({type:a.z.literal(Ae),payload:$t}).strict(),a.z.object({type:a.z.literal(_e),payload:Ht}).strict()])).default([])}).strict();const Yt=a.z.object({source:_t,sourcePriority:a.z.number().int().min(0).max(100).optional(),observedAt:a.z.string().datetime().optional(),snapshotVersion:a.z.number().int().min(0).optional()}).strict(),Jt=Yt.extend({type:a.z.literal("snapshot"),agent:a.z.string().trim().min(1).max(80),creationSource:Se.optional(),appSessionId:a.z.string().trim().max(120).optional(),appId:a.z.string().trim().max(120).optional(),providerSessionId:a.z.string().trim().max(240).optional(),lineage:Ye.optional(),providerMeta:a.z.record(a.z.string(),a.z.unknown()).optional(),modelSelection:ht.optional(),reasoningEffort:gt.optional(),storyId:ue.optional(),appBindingKeys:a.z.array(a.z.string().trim().min(1).max(240)).max(20).optional(),actions:We.optional(),title:a.z.string().trim().max(240).optional(),cwd:a.z.string().trim().max(4096).optional(),cwdFolderId:a.z.string().trim().min(1).max(120).optional(),activeTurnId:a.z.string().trim().max(240).optional(),userPrompt:a.z.string().trim().optional(),turns:a.z.array(wt).max(50).optional(),status:ke.optional(),phase:De.optional(),summary:a.z.string().trim().max(1e3).optional(),lastMessage:a.z.string().trim().optional(),lastMessageItemId:a.z.string().trim().max(240).optional(),error:a.z.string().trim().max(4e3).optional(),currentTool:Pe.optional(),toolCallsSinceLastMessage:a.z.number().int().min(0).optional(),subAgents:Ke.optional(),transcriptPath:a.z.string().trim().max(4096).optional(),transcriptSize:a.z.number().int().min(0).optional(),replaceActivity:a.z.boolean().optional()}).strict(),Qt=Yt.extend({type:a.z.literal("event"),sessionId:a.z.string().trim().min(1).max(120),kind:a.z.enum(["lifecycle","send-ack","turn-started","user-message","assistant-message","approval-requested","turn-completed","session-error","tool-activity","sub-agent-activity","context-compaction","model-selection","reasoning-effort"]),modelSelection:ht.optional(),reasoningEffort:gt.optional(),activeTurnId:a.z.string().trim().max(240).optional(),providerTurnId:a.z.string().trim().max(240).optional(),userPrompt:a.z.string().trim().optional(),userMessage:xe.optional(),text:a.z.string().optional(),itemId:a.z.string().trim().max(240).optional(),status:ke.optional(),phase:De.optional(),summary:a.z.string().trim().max(1e3).optional(),error:a.z.string().trim().max(4e3).optional(),currentTool:Pe.nullable().optional(),toolCallsSinceLastMessage:a.z.number().int().min(0).optional(),subAgents:Ke.optional(),contextCompaction:Et.optional(),counters:a.z.object({toolCalls:a.z.number().int().min(0).optional(),edits:a.z.number().int().min(0).optional(),approvals:a.z.number().int().min(0).optional()}).strict().optional()}).strict().superRefine((e,t)=>{if("model-selection"===e.kind?e.modelSelection\|\|t.addIssue({code:"custom",path:["modelSelection"],message:"model-selection events require modelSelection"}):void 0!==e.modelSelection&&t.addIssue({code:"custom",path:["modelSelection"],message:"modelSelection is only valid for model-selection events"}),"reasoning-effort"===e.kind?e.reasoningEffort\|\|t.addIssue({code:"custom",path:["reasoningEffort"],message:"reasoning-effort events require reasoningEffort"}):void 0!==e.reasoningEffort&&t.addIssue({code:"custom",path:["reasoningEffort"],message:"reasoningEffort is only valid for reasoning-effort events"}),"session-error"!==e.kind\|\|e.error\|\|t.addIssue({code:"custom",path:["error"],message:"session-error events require error"}),"context-compaction"===e.kind?e.contextCompaction\|\|t.addIssue({code:"custom",path:["contextCompaction"],message:"context-compaction events require contextCompaction"}):void 0!==e.contextCompaction&&t.addIssue({code:"custom",path:["contextCompaction"],message:"contextCompaction is only valid for context-compaction events"}),"send-ack"!==e.kind&&"user-message"!==e.kind&&void 0!==e.userMessage&&t.addIssue({code:"custom",path:["userMessage"],message:"userMessage is only valid for send-ack and user-message events"}),"sub-agent-activity"===e.kind?e.subAgents\|\|t.addIssue({code:"custom",path:["subAgents"],message:"sub-agent-activity events require subAgents"}):void 0!==e.subAgents&&t.addIssue({code:"custom",path:["subAgents"],message:"subAgents is only valid for sub-agent-activity events"}),"tool-activity"!==e.kind)return void 0!==e.currentTool&&t.addIssue({code:"custom",path:["currentTool"],message:"currentTool is only valid for tool-activity events"}),void(void 0!==e.toolCallsSinceLastMessage&&t.addIssue({code:"custom",path:["toolCallsSinceLastMessage"],message:"toolCallsSinceLastMessage is only valid for tool-activity events"}));"currentTool"in e\|\|t.addIssue({code:"custom",path:["currentTool"],message:"tool-activity events require currentTool"}),void 0===e.toolCallsSinceLastMessage&&t.addIssue({code:"custom",path:["toolCallsSinceLastMessage"],message:"tool-activity events require toolCallsSinceLastMessage"})});a.z.discriminatedUnion("type",[Jt,Qt]);const Zt=a.z.union([a.z.object({type:a.z.literal("schedule"),scheduleKind:a.z.literal("interval").default("interval"),intervalMs:a.z.number().int().min(1e3)}).strict(),a.z.object({type:a.z.literal("schedule"),scheduleKind:a.z.literal("daily"),timeOfDay:a.z.string().regex(/^([01]\d\|2[0-3]):[0-5]\d$/),timezone:a.z.string().trim().min(1).max(120)}).strict(),a.z.object({type:a.z.literal("schedule"),scheduleKind:a.z.literal("weekly"),weekdays:a.z.array(a.z.number().int().min(0).max(6)).min(1).max(7),timeOfDay:a.z.string().regex(/^([01]\d\|2[0-3]):[0-5]\d$/),timezone:a.z.string().trim().min(1).max(120)}).strict()]),en=a.z.union([Zt,a.z.object({type:a.z.literal("file-change"),roots:a.z.array(a.z.string().trim().min(1).max(4096)).min(1).max(50),globs:a.z.array(a.z.string().trim().min(1).max(500)).min(1).max(100),ignore:a.z.array(a.z.string().trim().min(1).max(500)).max(100).optional(),debounceMs:a.z.number().int().min(100).max(6e4).default(1500)}).strict(),a.z.object({type:a.z.literal("ai-session"),agent:a.z.string().trim().min(1).max(80).optional(),statuses:a.z.array(a.z.enum(["running","waiting","idle","failed"])).max(20).optional(),phases:a.z.array(a.z.enum(["thinking","tool","editing","approval","responding","unknown"])).max(20).optional()}).strict()]),tn=a.z.object({promptTemplate:a.z.string().trim().min(1).max(2e4)}).strict(),nn=a.z.object({cooldownMs:a.z.number().int().min(0).max(864e5).optional(),maxConcurrentRuns:a.z.number().int().min(1).max(20).default(1),whenBusy:a.z.enum(["skip","queue"]).default("skip")}).strict(),sn=a.z.object({configHash:a.z.string().trim().min(8).max(80),name:a.z.string().trim().min(1).max(160),description:a.z.string().trim().max(1e3).optional(),source:en,action:tn,policy:nn.default({maxConcurrentRuns:1,whenBusy:"skip"}),createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime()}).strict(),on=a.z.object({type:a.z.literal("ai-session"),aiSessionId:a.z.string().trim().min(1).max(160)}).strict(),rn=a.z.object({configHash:a.z.string().trim().min(8).max(80),deploymentId:a.z.string().trim().min(1).max(240).optional(),instanceId:a.z.string().trim().min(1).max(160),origin:a.z.enum(["control-plane","controlled-instance"]).default("controlled-instance"),enabled:a.z.boolean().default(!0),target:on,localName:a.z.string().trim().min(1).max(160).optional(),createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime()}).strict(),an=a.z.object({configHash:a.z.string().trim().min(8).max(80),deploymentId:a.z.string().trim().min(1).max(240).optional(),instanceId:a.z.string().trim().min(1).max(160),status:a.z.enum(["idle","running","disabled","error"]).default("idle"),lastTriggeredAt:a.z.string().datetime().optional(),lastCompletedAt:a.z.string().datetime().optional(),lastSkippedAt:a.z.string().datetime().optional(),lastError:a.z.string().trim().max(4e3).optional(),runCount:a.z.number().int().min(0).default(0),skippedCount:a.z.number().int().min(0).default(0)}).strict(),cn=a.z.object({id:a.z.string().trim().min(1).max(160),configHash:a.z.string().trim().min(8).max(80),deploymentId:a.z.string().trim().min(1).max(240).optional(),instanceId:a.z.string().trim().min(1).max(160),eventType:a.z.enum(["manual","schedule","file-change","ai-session"]),status:a.z.enum(["started","completed","failed","skipped"]),target:on,promptPreview:a.z.string().trim().max(500),eventSummary:a.z.string().trim().max(1e3).optional(),error:a.z.string().trim().max(4e3).optional(),startedAt:a.z.string().datetime(),completedAt:a.z.string().datetime().optional()}).strict();a.z.object({schemaVersion:a.z.literal(1).default(1),configs:a.z.array(sn).default([]),deployments:a.z.array(rn).default([]),runtime:a.z.array(an).default([]),recentRuns:a.z.array(cn).default([])}).strict();const dn=a.z.object({config:sn,deployment:rn,runtime:an.optional()}).strict();a.z.object({instanceId:a.z.string().trim().min(1).max(160),sessionId:a.z.string().trim().min(1).max(160),mutation:dn.optional()}).strip(),a.z.object({instanceId:a.z.string().trim().min(1).max(160),sessionId:a.z.string().trim().min(1).max(160),configHash:sn.shape.configHash}).strip();const ln=a.z.object({instanceId:a.z.string().trim().min(1).max(160),instanceName:a.z.string().trim().min(1).max(160),deployment:rn,runtime:an.optional()}).strip(),un=cn.extend({instanceName:a.z.string().trim().min(1).max(160).optional()}).strip(),pn=a.z.object({configHash:a.z.string().trim().min(8).max(80),config:sn,deploymentCount:a.z.number().int().min(0),enabledCount:a.z.number().int().min(0),runningCount:a.z.number().int().min(0),errorCount:a.z.number().int().min(0),ownedByControlPlane:a.z.boolean(),controlPlaneDeploymentCount:a.z.number().int().min(0),deployments:a.z.array(ln),recentRuns:a.z.array(un)}).strip();a.z.object({updatedAt:a.z.string().datetime(),triggers:a.z.array(pn)}).strip(),a.z.object({name:sn.shape.name,description:sn.shape.description,source:en,action:tn,policy:nn.partial().optional()}).strict(),a.z.object({scope:a.z.enum(["node","instance"]),nodeId:a.z.string().trim().min(1).max(160).optional(),instanceId:a.z.string().trim().min(1).max(160).optional(),code:a.z.string().trim().min(1).max(160),message:a.z.string().trim().min(1).max(4e3)}).strip();const mn=a.z.string().regex(/^\d{4}-\d{2}-\d{2}$/,"Proxy protocol version must use YYYY-MM-DD format."),hn=a.z.string().trim().min(1).max(160).regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]$/),gn=a.z.string().datetime(),fn=a.z.string().trim().min(32).max(4096),yn=a.z.string().trim().max(2048).transform((e,t)=>{try{return function(e){const t=new URL(e.trim());if("https:"!==t.protocol\|\|t.username\|\|t.password\|\|"/"!==t.pathname\|\|t.search\|\|t.hash)throw new Error("Proxy origin must be an HTTPS origin without credentials, path, query, or fragment.");return t.origin}(e)}catch(e){return t.addIssue({code:"custom",message:e instanceof Error?e.message:String(e)}),a.z.NEVER}});a.z.string().trim().min(1).max(4096).transform((e,t)=>{try{return function(e){const t=e.trim();if(!t.startsWith("/")\|\|t.startsWith("//")\|\|t.includes("\\")\|\|/%25/i.test(t))throw new Error("Proxy route must be a single-encoded node-agent relative route.");const n=t.split("?",1)[0];let i,s;try{i=n.split("/").map(e=>decodeURIComponent(e))}catch{throw new Error("Proxy route contains invalid percent encoding.")}if(i.some(e=>".."===e\|\|"."===e))throw new Error("Proxy route cannot traverse outside the node-agent API.");try{s=new URL(t,"https://node-agent.invalid")}catch{throw new Error("Proxy route is invalid.")}if("https://node-agent.invalid"!==s.origin\|\|s.username\|\|s.password)throw new Error("Proxy route cannot select an absolute upstream URL.");return`${s.pathname}${s.search}`}(e)}catch(e){return t.addIssue({code:"custom",message:e instanceof Error?e.message:String(e)}),a.z.NEVER}});const In=a.z.enum(Object.values({ProtocolUnsupported:"CONTROL_PLANE_PROXY_PROTOCOL_UNSUPPORTED",InviteInvalid:"CONTROL_PLANE_PROXY_INVITE_INVALID",InviteExpired:"CONTROL_PLANE_PROXY_INVITE_EXPIRED",InviteConsumed:"CONTROL_PLANE_PROXY_INVITE_CONSUMED",InviteRevoked:"CONTROL_PLANE_PROXY_INVITE_REVOKED",TargetUnavailable:"CONTROL_PLANE_PROXY_TARGET_UNAVAILABLE",TargetMismatch:"CONTROL_PLANE_PROXY_TARGET_MISMATCH",BindingUnknown:"CONTROL_PLANE_PROXY_BINDING_UNKNOWN",BindingRevoked:"CONTROL_PLANE_PROXY_BINDING_REVOKED",BindingIdentityConflict:"CONTROL_PLANE_PROXY_BINDING_IDENTITY_CONFLICT",AuthenticationFailed:"CONTROL_PLANE_PROXY_AUTHENTICATION_FAILED",RouteInvalid:"CONTROL_PLANE_PROXY_ROUTE_INVALID",HeaderInvalid:"CONTROL_PLANE_PROXY_HEADER_INVALID",ResourceLimit:"CONTROL_PLANE_PROXY_RESOURCE_LIMIT",SnapshotRequired:"CONTROL_PLANE_PROXY_SNAPSHOT_REQUIRED",Unavailable:"CONTROL_PLANE_PROXY_UNAVAILABLE",TransportFailed:"CONTROL_PLANE_PROXY_TRANSPORT_FAILED"})),An=a.z.object({code:In,message:a.z.string().trim().min(1).max(2048),retryable:a.z.boolean(),details:a.z.record(a.z.string(),a.z.unknown()).optional()}).strict(),_n=a.z.enum(["active","revoked"]),En=a.z.object({id:hn,targetNodeId:hn,status:_n,createdBy:hn,expiresAt:gn,revokedAt:gn.optional(),createdAt:gn,updatedAt:gn}).strict();a.z.object({targetNodeId:hn,expiresInSeconds:a.z.number().int().min(60).max(3600).default(600)}).strict(),a.z.object({invite:En,token:a.z.string().trim().min(24).max(512),proxyOrigin:yn,protocolVersion:mn}).strict();const wn=a.z.enum(["active","revoked"]),Tn=a.z.object({id:hn,claimId:hn,sourceControlPlaneId:hn,targetNodeId:hn,bindingKeyId:hn,status:wn,revision:a.z.number().int().positive(),lastError:An.optional(),revokedAt:gn.optional(),createdAt:gn,updatedAt:gn}).strict();a.z.object({protocolVersion:mn,inviteToken:a.z.string().trim().min(24).max(512).optional(),claimId:hn,sourceControlPlaneId:hn,targetNodeId:hn.optional(),bindingKeyId:hn,credential:fn}).strict(),a.z.object({sourceControlPlaneId:hn,bindingKeyId:hn,credential:fn}).strict();const bn=a.z.object({id:hn,name:a.z.string().trim().min(1).max(160),status:a.z.enum(["unknown","online","offline","degraded"]),health:a.z.enum(["unknown","ok","degraded","failed"]),lastSeenAt:gn.optional(),capabilities:a.z.record(a.z.string(),a.z.unknown()).default({})}).strict(),Sn=a.z.object({protocolVersion:mn,binding:Tn,streamId:hn,revision:a.z.number().int().nonnegative(),observedAt:gn,target:bn}).strict(),vn=a.z.object({type:a.z.literal("control-plane-proxy.event"),protocolVersion:mn,streamId:hn,bindingId:hn,sourceControlPlaneId:hn,targetNodeId:hn,revision:a.z.number().int().positive(),source:a.z.object({id:a.z.string().trim().min(1).max(512),seq:a.z.number().int().nonnegative()}).strict(),target:bn,event:a.z.object({type:a.z.string().trim().min(1).max(240),topic:a.z.string().trim().min(1).max(240),createdAt:gn}).strict()}).strict(),Nn=a.z.object({type:a.z.literal("control-plane-proxy.events.ready"),protocolVersion:mn,streamId:hn,bindingId:hn,sourceControlPlaneId:hn,targetNodeId:hn,latestRevision:a.z.number().int().nonnegative(),earliestRetainedRevision:a.z.number().int().nonnegative()}).strict(),On=a.z.object({type:a.z.literal("control-plane-proxy.snapshot-required"),protocolVersion:mn,streamId:hn,bindingId:hn,sourceControlPlaneId:hn,targetNodeId:hn,sinceRevision:a.z.number().int().nonnegative(),latestRevision:a.z.number().int().nonnegative(),earliestRetainedRevision:a.z.number().int().nonnegative(),error:An}).strict();a.z.discriminatedUnion("type",[vn,Nn,On]),a.z.object({protocolVersion:mn,binding:Tn,target:Sn.shape.target}).strict(),a.z.object({id:hn,claimId:hn,proxyOrigin:yn,requestedName:a.z.string().trim().min(1).max(160).optional(),sourceControlPlaneId:hn,targetNodeId:hn.optional(),bindingKeyId:hn,credential:fn,status:a.z.enum(["pending","compensation-required"]),createdAt:gn,updatedAt:gn,expiresAt:gn}).strict().omit({credential:!0}),a.z.object({id:hn,nodeId:hn,proxyOrigin:yn,proxyBindingId:hn,targetNodeId:hn,sourceControlPlaneId:hn,bindingKeyId:hn,credential:fn,createdAt:gn,updatedAt:gn}).strict();const zn=a.z.string().trim().min(1).max(120),Cn=a.z.object({selectModelAtCreate:a.z.boolean().default(!1),selectProviderAtCreate:a.z.boolean().default(!1),switchModelWithinProvider:a.z.boolean().default(!1),switchProviderDuringSession:a.z.boolean().default(!1)}).strip().default({selectModelAtCreate:!1,selectProviderAtCreate:!1,switchModelWithinProvider:!1,switchProviderDuringSession:!1}),Rn=a.z.object({selectAtCreate:a.z.boolean().default(!1),updateDuringSession:a.z.boolean().default(!1)}).strip().default({selectAtCreate:!1,updateDuringSession:!1}),xn=a.z.object({subagents:a.z.boolean().default(!1)}).strip().default({subagents:!1}),kn=a.z.object({agent:zn,actions:a.z.object({create:a.z.boolean().default(!1),send:a.z.boolean().default(!1),queue:a.z.boolean().default(!1),steer:a.z.boolean().default(!1),interrupt:a.z.boolean().default(!1),archive:a.z.boolean().default(!1),delete:a.z.boolean().default(!1),fork:a.z.boolean().default(!1),approvalDecisions:a.z.array(a.z.enum(["allow","deny","skip"])).max(3).default([])}).passthrough(),permissionModes:a.z.array(a.z.enum(["ask","auto-review","full-access"])).max(3).default([]),timeline:a.z.object({sessionRead:a.z.boolean().default(!1),turnRead:a.z.boolean().default(!1),liveItems:a.z.boolean().default(!1)}).passthrough(),modelSelection:Cn.optional(),reasoningEffort:Rn.optional(),hierarchy:xn.optional()}).passthrough(),Dn=a.z.array(kn).max(100).default([]),Pn="2026-08-27",Ln=new Set(["2026-08-01","2026-08-16","2026-08-17","2026-08-20",Pn]),Mn=a.z.string().regex(/^\d{4}-\d{2}-\d{2}$/,"Protocol version must use YYYY-MM-DD format."),jn=a.z.string().trim().min(1).max(120),Un=a.z.enum(["low","medium","high"]),Fn=a.z.enum(["none","friendly","pragmatic"]),$n=a.z.object({modelEntityId:a.z.string().trim().min(1).max(120),modelName:a.z.string().trim().min(1).max(240)}).strict(),Hn=a.z.object({modelVerbosity:Un.optional(),personality:Fn.optional(),multiAgent:a.z.object({enabled:a.z.boolean().default(!0),maxConcurrentThreads:a.z.number().int().min(1).max(64).optional(),defaultModel:$n.optional(),defaultReasoningEffort:gt.optional()}).strict().default({enabled:!0})}).strict();function qn(){return{features:{appRuntime:!1,tty:!1,gui:!1,browser:!1,browserTunnel:!1,screenshots:!1,logs:!1,aiSessionWorkspaceSelection:!1,aiSessionPersistenceSettings:!1,privateModelCatalog:!1,codexManagedSettings:!1,nodeAgentConnectionUpdate:!1,gitCliCredentialBroker:!1,gitCredentialProxy:!1,aiSessionTimeline:{sessionReadAgents:[],turnReadAgents:[],liveItemAgents:[]},aiSessionConversationAttachments:{metadataAgents:[],contentAgents:[],uploadAgents:[],retentionSettings:!1,fileSizeLimitSettings:!1},aiSessionProviders:[]}}}const Vn=a.z.object({sessionReadAgents:a.z.array(jn).max(100).default([]),turnReadAgents:a.z.array(jn).max(100).default([]),liveItemAgents:a.z.array(jn).max(100).default([])}).passthrough(),Bn=a.z.object({metadataAgents:a.z.array(jn).max(100).default([]),contentAgents:a.z.array(jn).max(100).default([]),uploadAgents:a.z.array(jn).max(100).default([]),retentionSettings:a.z.boolean().default(!1),fileSizeLimitSettings:a.z.boolean().default(!1)}).passthrough(),Kn=a.z.object({appRuntime:a.z.boolean().default(!1),tty:a.z.boolean().default(!1),gui:a.z.boolean().default(!1),browser:a.z.boolean().default(!1),browserTunnel:a.z.boolean().optional(),screenshots:a.z.boolean().default(!1),logs:a.z.boolean().default(!1),aiSessionWorkspaceSelection:a.z.boolean().default(!1),aiSessionPersistenceSettings:a.z.boolean().default(!1),privateModelCatalog:a.z.boolean().optional(),codexManagedSettings:a.z.boolean().optional(),nodeAgentConnectionUpdate:a.z.boolean().optional(),gitCliCredentialBroker:a.z.boolean().optional(),gitCredentialProxy:a.z.boolean().optional(),aiSessionTimeline:Vn.default(function(){return{sessionReadAgents:[],turnReadAgents:[],liveItemAgents:[]}}),aiSessionConversationAttachments:Bn.optional(),aiSessionProviders:Dn.optional()}).passthrough(),Gn=a.z.object({features:Kn.default(function(){return{appRuntime:!1,tty:!1,gui:!1,browser:!1,browserTunnel:!1,screenshots:!1,logs:!1,aiSessionWorkspaceSelection:!1,aiSessionPersistenceSettings:!1,privateModelCatalog:!1,codexManagedSettings:!1,nodeAgentConnectionUpdate:!1,gitCliCredentialBroker:!1,gitCredentialProxy:!1,aiSessionTimeline:{sessionReadAgents:[],turnReadAgents:[],liveItemAgents:[]},aiSessionConversationAttachments:{metadataAgents:[],contentAgents:[],uploadAgents:[],retentionSettings:!1,fileSizeLimitSettings:!1},aiSessionProviders:[]}})}).passthrough(),Wn=a.z.object({nodeAgentUrl:a.z.string().trim().url().max(2048).refine(e=>{const t=new URL(e);return/^https?:$/.test(t.protocol)&&!t.username&&!t.password&&"/"===t.pathname&&!t.search&&!t.hash},"Node agent URL must be an HTTP(S) origin.")}).strict();function Xn(e){const t={features:{appRuntime:!1,tty:!1,gui:!1,browser:!1,browserTunnel:!1,screenshots:!1,logs:!1,aiSessionWorkspaceSelection:!1,aiSessionPersistenceSettings:!1,privateModelCatalog:!1,codexManagedSettings:!1,nodeAgentConnectionUpdate:!1,gitCliCredentialBroker:!1,gitCredentialProxy:!1,aiSessionTimeline:{sessionReadAgents:[],turnReadAgents:[],liveItemAgents:[]},aiSessionConversationAttachments:{metadataAgents:[],contentAgents:[],uploadAgents:[],retentionSettings:!1,fileSizeLimitSettings:!1},aiSessionProviders:[]}};if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return t;const n=e,i=n.features;if(!i\|\|"object"!=typeof i\|\|Array.isArray(i))return t;const s=i,o={appRuntime:!1,tty:!1,gui:!1,browser:!1,browserTunnel:!1,screenshots:!1,logs:!1,aiSessionWorkspaceSelection:!1,aiSessionPersistenceSettings:!1,privateModelCatalog:!1,codexManagedSettings:!1,nodeAgentConnectionUpdate:!1,gitCliCredentialBroker:!1,gitCredentialProxy:!1,aiSessionTimeline:{sessionReadAgents:[],turnReadAgents:[],liveItemAgents:[]},aiSessionConversationAttachments:{metadataAgents:[],contentAgents:[],uploadAgents:[],retentionSettings:!1,fileSizeLimitSettings:!1},aiSessionProviders:[]};for(const e of["appRuntime","tty","gui","browser","browserTunnel","screenshots","logs","aiSessionWorkspaceSelection","aiSessionPersistenceSettings","privateModelCatalog","codexManagedSettings","nodeAgentConnectionUpdate","gitCliCredentialBroker","gitCredentialProxy"]){const t=a.z.boolean().safeParse(s[e]);t.success&&(o[e]=t.data)}const r=Vn.safeParse(s.aiSessionTimeline);r.success&&(o.aiSessionTimeline=r.data);const c=Bn.safeParse(s.aiSessionConversationAttachments);c.success&&(o.aiSessionConversationAttachments=c.data);const d=Dn.safeParse(s.aiSessionProviders);return d.success&&(o.aiSessionProviders=d.data),Gn.parse({...n,features:{...s,...o}})}function Yn(e){return Xn(e).features.aiSessionConversationAttachments}const Jn=a.z.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]$/),Qn=a.z.string().datetime(),Zn=a.z.record(a.z.string(),a.z.string()).default({}),ei=a.z.record(a.z.string(),a.z.string()).default({}),ti=a.z.object({encoding:a.z.enum(["utf8","base64"]),data:a.z.string()}).strict().superRefine((e,t)=>{"base64"===e.encoding&&Buffer.from(e.data,"base64").toString("base64")!==e.data&&t.addIssue({code:"custom",path:["data"],message:"Node tunnel binary body must use canonical base64 encoding."})});function ni(e){if(null==e)return;const t=ti.parse(e);return"utf8"===t.encoding?t.data:Buffer.from(t.data,"base64")}const ii=/^[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}$/,si=/^sha256:([a-fA-F0-9]{64})$/,oi=/^(?:localhost\|[a-z0-9](?:[a-z0-9.-][a-z0-9])?)(?::[1-9][0-9]{0,4})?$/,ri=/^[a-z0-9]+(?:(?:[._]\|__\|-+)[a-z0-9]+)$/;function ai(e){const t=e.trim();if(!t\|\|t.length>512\|\|t.includes("://")\|\|/\s/.test(t))throw new Error("Docker image reference must not contain a URL scheme or whitespace.");const n=t.indexOf("@");if(-1!==n&&n!==t.lastIndexOf("@"))throw new Error("Docker image reference contains more than one digest separator.");const i=-1===n?void 0:t.slice(n+1),s=-1===n?t:t.slice(0,n),o=i?si.exec(i):void 0;if(i&&!o)throw new Error("Docker image digest must use sha256 followed by 64 hexadecimal characters.");const r=s.lastIndexOf("/"),a=s.lastIndexOf(":"),c=a>r,d=c?s.slice(a+1):void 0,l=c?s.slice(0,a):s;if(d&&!ii.test(d))throw new Error("Docker image tag is invalid.");if(!d&&!o)throw new Error("Docker image reference must include an explicit tag or sha256 digest.");const u=l.split("/");if(!u.length\|\|u.some(e=>!e))throw new Error("Docker image repository path is invalid.");const p=u.length>1&&(u[0].includes(".")\|\|u[0].includes(":")\|\|"localhost"===u[0]),m=p?u.slice(1):u;if(p&&!oi.test(u[0].toLowerCase()))throw new Error("Docker image registry host or port is invalid.");if(!m.length\|\|m.some(e=>!ri.test(e)))throw new Error("Docker image repository names must be lowercase and use valid separators.");const h=u.map((e,t)=>p&&0===t?e.toLowerCase():e).join("/"),g=o?`sha256:${o[1].toLowerCase()}`:void 0;return`${h}${d?`:${d}`:""}${g?`@${g}`:""}`}function ci(e){const t=ai(e),n=t.indexOf("@"),i=-1===n?void 0:t.slice(n+1),s=-1===n?t:t.slice(0,n),o=s.lastIndexOf("/"),r=s.lastIndexOf(":"),a=r>o;return{reference:t,repository:a?s.slice(0,r):s,tag:a?s.slice(r+1):void 0,digest:i}}const di=a.z.string().trim().min(1).max(512).transform((e,t)=>{try{return ai(e)}catch(e){return t.addIssue({code:"custom",message:e instanceof Error?e.message:String(e)}),a.z.NEVER}}),li=a.z.string().trim().transform((e,t)=>{const n=si.exec(e);return n?`sha256:${n[1].toLowerCase()}`:(t.addIssue({code:"custom",message:"Docker image digest must use sha256 followed by 64 hexadecimal characters."}),a.z.NEVER)}),ui=a.z.object({modelEntityIds:a.z.array(Jn).max(64).transform(e=>[...new Set(e)]).optional(),codexModelHash:Jn.nullable().optional(),claudeModelHash:Jn.nullable().optional(),opencodeModelHash:Jn.nullable().optional()}).strict().default({}),pi=a.z.object({imageId:Jn,tag:a.z.string().trim().min(1).max(128).regex(ii).optional()}).strict(),mi=a.z.discriminatedUnion("type",[a.z.object({type:a.z.literal("image"),imageSelection:pi}).strict(),a.z.object({type:a.z.literal("template"),environmentTemplateId:Jn}).strict()]),hi=a.z.enum(["creating","ready","failed","deleting"]),gi=a.z.enum(["linux","darwin","win32","freebsd","openbsd","aix","sunos","unknown"]),fi=a.z.enum(["x64","arm64","arm","ia32","ppc64","s390x","riscv64","unknown"]),yi=a.z.object({code:a.z.string().trim().min(1).max(120),message:a.z.string().trim().min(1).max(2048),phase:a.z.enum(["validate","commit","inspect","security-check","persist","delete","recovery"]).optional()}).strict(),Ii=a.z.object({templateId:Jn,nodeId:Jn,imageId:li,name:a.z.string().trim().min(1).max(160),platform:gi,architecture:fi}).strict(),Ai=a.z.enum(["data","agent-home","workspace"]),_i=a.z.object({deleteVolumes:a.z.boolean()}).strict(),Ei=a.z.object({role:Ai,name:a.z.string().trim().min(1).max(255),mountPath:a.z.string().trim().startsWith("/").max(4096),status:a.z.enum(["deleted","retained","missing","failed"]),error:a.z.object({code:a.z.string().trim().min(1).max(120),message:a.z.string().trim().min(1).max(2048)}).strict().optional()}).strict(),wi=a.z.object({instanceId:Jn,containerDeleted:a.z.boolean(),completed:a.z.boolean(),deletedVolumes:a.z.array(Ei),retainedVolumes:a.z.array(Ei),volumeResults:a.z.array(Ei)}).strict(),Ti={img_default:"market_taskhandoff_browser",img_codex:"market_taskhandoff_codex",img_ai:"market_taskhandoff_ai"};function bi(e,t){if(e&&"object"==typeof e&&!Array.isArray(e)){const t=e;return{imageId:"string"==typeof t.imageId&&Ti[t.imageId]\|\|t.imageId,..."string"==typeof t.tag?{tag:t.tag}:{}}}if("string"==typeof t)return{imageId:Ti[t]\|\|t}}function Si(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e,{defaultImageId:n,...i}=t;return{...i,defaultImageSelection:bi(t.defaultImageSelection,n)}}const vi=a.z.object({id:Jn,name:a.z.string().trim().min(1).max(120),kind:a.z.enum(["tty","gui","web"]),source:a.z.enum(["builtin","custom"]),availability:a.z.enum(["available","missing-dependency"]),capabilities:a.z.object({automation:a.z.enum(["cdp"]).optional(),supportsCwdSelection:a.z.boolean().default(!1)}).strict().default({supportsCwdSelection:!1}),diagnosticCode:a.z.enum(["APP_EXECUTABLE_NOT_FOUND"]).optional()}).strict(),Ni=a.z.object({code:a.z.enum(["APP_CATALOG_INVALID"]),message:a.z.string().trim().min(1).max(500)}).strict(),Oi=a.z.object({items:a.z.array(vi).max(256),observedAt:Qn,issues:a.z.array(Ni).max(32).default([])}).strict(),zi=a.z.object({id:Jn,name:a.z.string().trim().min(1).max(160),sourceInstanceId:Jn,nodeId:Jn,imageId:li.optional(),internalTag:a.z.string().trim().min(1).max(512).optional(),platform:gi.optional(),architecture:fi.optional(),sizeBytes:a.z.number().int().nonnegative().optional(),status:hi,error:yi.optional(),createdAt:Qn,updatedAt:Qn}).strict().superRefine((e,t)=>{if("ready"===e.status)for(const n of["imageId","internalTag","platform","architecture","sizeBytes"])void 0===e[n]&&t.addIssue({code:"custom",path:[n],message:`Ready environment template requires ${n}.`});"failed"!==e.status\|\|e.error\|\|t.addIssue({code:"custom",path:["error"],message:"Failed environment template requires an error diagnostic."})}),Ci=a.z.enum(["apt","dnf","brew","npm"]),Ri=a.z.enum(["user","passwordless-sudo","root"]),xi=a.z.object({platform:gi,arch:fi,installers:a.z.array(Ci).max(8),privilege:Ri,installerAccess:a.z.object({npmGlobalWritable:a.z.boolean().optional()}).strict().optional()}).strict(),ki=a.z.enum(["installed","not-installed","broken","unsupported"]),Di=a.z.enum(["recipe","bundled","external","none"]),Pi=a.z.object({code:a.z.enum(["BUNDLED","EXTERNALLY_MANAGED","ALREADY_INSTALLED","NOT_INSTALLED","UNSUPPORTED_PLATFORM","INSTALLER_UNAVAILABLE","INSTALLER_NOT_WRITABLE","INSUFFICIENT_PRIVILEGE","OPERATION_IN_PROGRESS"]),message:a.z.string().trim().min(1).max(500)}).strict(),Li=a.z.object({id:Jn,name:a.z.string().trim().min(1).max(120),kind:a.z.enum(["tty","gui","web"]),description:a.z.string().trim().max(500).optional(),state:ki,managementSource:Di,version:a.z.string().trim().max(120).optional(),canInstall:a.z.boolean(),canUninstall:a.z.boolean(),installReason:Pi.optional(),uninstallReason:Pi.optional(),activeJobId:Jn.optional()}).strict(),Mi=a.z.enum(["install","uninstall"]),ji=a.z.enum(["queued","running","succeeded","failed","cancelled","interrupted"]),Ui=a.z.object({current:a.z.number().finite().nonnegative().optional(),total:a.z.number().finite().positive().optional(),unit:a.z.string().trim().min(1).max(40).optional()}).strict().refine(e=>void 0===e.total\|\|void 0===e.current\|\|e.current<=e.total,{message:"Progress current must not exceed total.",path:["current"]}),Fi=a.z.object({executable:a.z.string().trim().min(1).max(4096),args:a.z.array(a.z.string().max(4096)).max(128)}).strict(),$i=a.z.object({code:a.z.string().trim().min(1).max(120).regex(/^[a-z0-9][a-z0-9._-]$/),message:a.z.string().trim().min(1).max(4096),retryable:a.z.boolean(),sessionIds:a.z.array(Jn).max(64).optional()}).strict(),Hi=a.z.object({id:Jn,requestId:Jn.optional(),appId:Jn,operation:Mi,state:ji,phase:a.z.string().trim().min(1).max(120).optional(),progress:Ui.optional(),command:Fi.optional(),logTail:a.z.string().max(32768).optional(),logTruncated:a.z.boolean().optional(),error:$i.optional(),requestedAt:Qn,startedAt:Qn.optional(),finishedAt:Qn.optional(),updatedAt:Qn}).strict(),qi=a.z.object({streamId:Jn,sequence:a.z.number().int().nonnegative(),capabilities:xi,apps:a.z.array(Li).max(256),activeJobs:a.z.array(Hi).max(256),recentJobs:a.z.array(Hi).max(256),observedAt:Qn}).strict();a.z.object({requestId:Jn.optional()}).strict(),a.z.object({job:Hi}).strict(),a.z.object({type:a.z.literal("app-management"),streamId:Jn,sequence:a.z.number().int().nonnegative(),observedAt:Qn,job:Hi.optional(),snapshot:qi.optional()}).strict().refine(e=>void 0!==e.job\|\|void 0!==e.snapshot,{message:"An app management event requires a job or snapshot."});const Vi=a.z.object({component:a.z.enum(["control-plane","node-agent","controlled-instance"]),packageName:a.z.string().trim().max(160).optional(),packageVersion:a.z.string().trim().max(80).optional(),protocolVersion:Mn.optional(),buildId:a.z.string().trim().max(160).optional(),builtAt:a.z.string().trim().max(120).optional(),gitCommit:a.z.string().trim().max(120).optional(),imageRef:a.z.string().trim().max(512).optional(),imageDigest:a.z.string().trim().max(240).optional()}).strict();a.z.object({data:a.z.object({ok:a.z.literal(!0),role:a.z.literal("control-plane"),protocolVersion:Mn,build:Vi.extend({component:a.z.literal("control-plane"),packageVersion:a.z.string().trim().min(1).max(80)}).loose(),serverTime:Qn}).loose()}).loose();const Bi=a.z.enum(["stable","beta","alpha"]),Ki=a.z.object({packageName:a.z.literal("@task-handoff/controlled-instance"),version:a.z.string().trim().min(1).max(80),platform:a.z.string().trim().min(1).max(40),arch:a.z.string().trim().min(1).max(40),formatVersion:a.z.number().int().positive(),launcherAbi:a.z.number().int().positive(),entrypoint:a.z.string().trim().min(1).max(512),sha256:a.z.string().regex(/^[a-f0-9]{64}$/)}).strict(),Gi=a.z.object({code:a.z.enum(["INSTANCE_RUNTIME_VERSION_MISMATCH","INSTANCE_RUNTIME_ARTIFACT_UNAVAILABLE","INSTANCE_RUNTIME_ARTIFACT_INVALID","INSTANCE_RUNTIME_INSTALL_FAILED","INSTANCE_RUNTIME_RESTART_FAILED","INSTANCE_RUNTIME_VERIFICATION_FAILED","INSTANCE_BASE_RUNTIME_INCOMPATIBLE","NODE_UPDATE_PREFLIGHT_FAILED","NODE_UPDATE_FAILED","LEGACY_INSTANCE_UPDATE_RETIRED"]),message:a.z.string().trim().min(1).max(4096),expectedVersion:a.z.string().trim().min(1).max(80).optional(),actualVersion:a.z.string().trim().min(1).max(80).optional(),retryable:a.z.boolean().default(!1)}).strict(),Wi=a.z.object({desiredVersion:a.z.string().trim().min(1).max(80),actualVersion:a.z.string().trim().min(1).max(80).optional(),phase:a.z.enum(["pending","draining","installing","restarting","verifying","matched","failed"]),attempt:a.z.number().int().nonnegative().default(0),lastAttemptAt:Qn.optional(),matchedAt:Qn.optional(),error:Gi.optional()}).strict(),Xi=a.z.object({runningInstanceCount:a.z.number().int().nonnegative(),stoppedInstanceCount:a.z.number().int().nonnegative(),activeInstanceCount:a.z.number().int().nonnegative(),restartInstanceCount:a.z.number().int().nonnegative(),runningInstanceIds:a.z.array(Jn).max(1024).default([]),stoppedInstanceIds:a.z.array(Jn).max(1024).default([]),activeInstanceIds:a.z.array(Jn).max(1024).default([])}).strict(),Yi=a.z.object({phase:a.z.enum(["queued","updating-node","restarting-node","converging-instances","succeeded","degraded","failed"]),desiredVersion:a.z.string().trim().min(1).max(80),nodeVersion:a.z.string().trim().min(1).max(80).optional(),expectedInstanceIds:a.z.array(Jn).max(1024).default([]),expectedInstanceCount:a.z.number().int().nonnegative(),matchedInstanceCount:a.z.number().int().nonnegative(),pendingInstanceCount:a.z.number().int().nonnegative(),failedInstanceCount:a.z.number().int().nonnegative(),deferredInstanceCount:a.z.number().int().nonnegative().default(0)}).strict(),Ji=a.z.object({channel:Bi.default("stable")}).strict(),Qi=a.z.object({source:a.z.literal("npm"),channel:Bi,currentVersion:a.z.string().trim().max(240).optional(),availableVersion:a.z.string().trim().min(1).max(240),artifactRef:a.z.string().trim().min(1).max(512).optional(),runtimeArtifacts:a.z.array(Ki).default([]),impact:Xi,updateAvailable:a.z.boolean(),supported:a.z.boolean().default(!0),reason:a.z.string().trim().max(2048).optional(),checkedAt:Qn,preflightToken:a.z.string().trim().min(16).max(240).optional()}).strict(),Zi=a.z.object({id:Jn,nodeId:Jn,source:a.z.literal("npm"),channel:Bi,fromVersion:a.z.string().trim().max(240).optional(),toVersion:a.z.string().trim().min(1).max(240),artifactRef:a.z.string().trim().min(1).max(512).optional(),runtimeArtifacts:a.z.array(Ki).default([]),impact:Xi,rollout:Yi,status:a.z.enum(["queued","updating-node","restarting-node","converging-instances","succeeded","degraded","failed"]),error:Gi.optional(),startedAt:Qn.optional(),completedAt:Qn.optional(),createdAt:Qn,updatedAt:Qn}).strict(),es=a.z.object({channel:Bi,targetVersion:a.z.string().trim().min(1).max(240),preflightToken:a.z.string().trim().min(16).max(240)}).strict(),ts=a.z.object({type:a.z.enum(["branch","tag"]),name:a.z.string().trim().min(1).max(240)}).strict(),ns=a.z.object({type:a.z.literal("commit"),commit:a.z.string().trim().regex(/^[0-9a-fA-F]{4,64}$/,"commit must be a hexadecimal Git object id")}).strict(),is=a.z.discriminatedUnion("type",[ts,ns]),ss=a.z.object({type:a.z.enum(["none","ssh-key","https-token"]).default("none"),secretId:a.z.string().trim().min(1).max(120).optional()}).strict(),os=a.z.object({depth:a.z.number().int().positive().max(1e5).optional(),submodules:a.z.boolean().default(!1),lfs:a.z.boolean().default(!1),subdirectory:a.z.string().trim().max(240).refine(e=>!e.startsWith("/")&&!e.split("/").some(e=>".."===e),"subdirectory must be a relative path within the repository").transform(e=>e.split("/").filter(e=>e&&"."!==e).join("/")).default("")}).strict();a.z.object({id:Jn,name:a.z.string().trim().min(1).max(160),url:a.z.string().trim().min(1).max(2048),provider:a.z.string().trim().max(80).optional(),ref:is.default({type:"branch",name:"main"}),auth:ss.default({type:"none"}),clone:os.default({submodules:!1,lfs:!1,subdirectory:""}),defaultImageSelection:pi.optional(),labels:Zn,createdAt:Qn,updatedAt:Qn}).strict();const rs=a.z.object({id:Jn,nodeId:Jn,name:a.z.string().trim().min(1).max(160),path:a.z.string().trim().min(1).max(4096),defaultImageSelection:pi.optional(),labels:Zn,createdAt:Qn,updatedAt:Qn}).strict(),as=a.z.discriminatedUnion("type",[a.z.object({type:a.z.literal("git-repository"),repositoryId:Jn.optional(),url:a.z.string().trim().min(1).max(2048),provider:a.z.string().trim().max(80).optional(),ref:is.default({type:"branch",name:"main"}),auth:ss.default({type:"none"}),clone:os.default({submodules:!1,lfs:!1,subdirectory:""})}).strict(),a.z.object({type:a.z.literal("git-template"),url:a.z.string().trim().min(1).max(2048),templateId:a.z.string().trim().min(1).max(120).optional(),ref:is.default({type:"branch",name:"main"}),auth:ss.default({type:"none"}),clone:os.default({submodules:!1,lfs:!1,subdirectory:""})}).strict(),a.z.object({type:a.z.literal("local-folder"),localFolderId:Jn.optional(),path:a.z.string().trim().min(1).max(4096),ownerNodeId:Jn.optional()}).strict()]),cs=a.z.object({mode:a.z.enum(["local-bind","git-clone","empty-volume","persistent-volume"]),path:a.z.string().trim().min(1).max(4096).default("/workspace"),volumeName:a.z.string().trim().max(240).optional(),readOnly:a.z.boolean().default(!1)}).strict(),ds=a.z.enum(["codex","claude","opencode"]),ls=a.z.enum(["openai-responses","openai-chat-completions","anthropic-messages"]),us=a.z.object({name:a.z.string().trim().min(1).max(240),order:a.z.number().int().min(0).max(1e6).default(0)}).strict(),ps=a.z.object({id:Jn,name:a.z.string().trim().min(1).max(160),source:as,defaultImageSelection:pi.optional(),defaultNodeId:Jn.optional(),workspacePolicy:cs,labels:Zn,createdAt:Qn,updatedAt:Qn}).strict(),ms=a.z.object({id:Jn,name:a.z.string().trim().min(1).max(160),endpoint:a.z.string().trim().min(1).max(2048),key:a.z.string().trim().min(1).max(4096),model:a.z.string().trim().min(1).max(240),modelNames:a.z.array(us).max(256).default([]),protocols:a.z.array(ls).max(3).default([]),app:ds,enabled:a.z.boolean().default(!0),order:a.z.number().int().min(0).max(1e6).default(0),labels:Zn,createdAt:Qn,updatedAt:Qn}).strict(),hs=ms,gs=ms.omit({key:!0}).extend({keyPreview:a.z.string().trim().min(1).max(160),keySet:a.z.boolean()}).strict(),fs=gs.extend({referenceCount:a.z.number().int().min(0)}).strict(),ys=a.z.object({instanceId:Jn,modelEntityIds:a.z.array(Jn).max(64).transform(e=>[...new Set(e)]).optional(),codexModelHash:Jn.optional(),claudeModelHash:Jn.optional(),opencodeModelHash:Jn.optional(),updatedAt:Qn}).strict().transform(e=>({...e,modelEntityIds:e.modelEntityIds?.length?e.modelEntityIds:[...new Set([e.codexModelHash,e.claudeModelHash,e.opencodeModelHash].filter(e=>Boolean(e)))]})),Is=a.z.discriminatedUnion("type",[a.z.object({type:a.z.literal("control-plane"),name:ms.shape.name,enabled:ms.shape.enabled,order:ms.shape.order}).strict(),a.z.object({type:a.z.literal("node"),nodeId:Jn,name:ms.shape.name,enabled:ms.shape.enabled,order:ms.shape.order,referenceCount:a.z.number().int().min(0)}).strict()]),As=a.z.object({id:Jn,model:gs,locations:a.z.array(Is).min(1),referenceCount:a.z.number().int().min(0).default(0)}).strict(),_s=a.z.object({nodeId:Jn,code:a.z.string().trim().min(1).max(120),message:a.z.string().trim().min(1).max(2e3)}).strict();a.z.object({models:a.z.array(As),nodeDiagnostics:a.z.array(_s).default([]),updatedAt:Qn}).strict();const Es=ms.omit({id:!0,createdAt:!0,updatedAt:!0}).strict(),ws=Es.partial().strict(),Ts=ms,bs=a.z.object({modelSelection:ui,modelEntityIds:a.z.array(Jn).max(64).transform(e=>[...new Set(e)]).optional(),codexModelHash:Jn.optional(),claudeModelHash:Jn.optional(),opencodeModelHash:Jn.optional()}).strict().transform(e=>({...e,modelEntityIds:e.modelEntityIds\|\|e.modelSelection.modelEntityIds\|\|[...new Set([e.codexModelHash,e.claudeModelHash,e.opencodeModelHash].filter(e=>Boolean(e)))]}));function Ss(e){const t={app:ds.parse(e.app),endpoint:ms.shape.endpoint.parse(e.endpoint),key:ms.shape.key.parse(e.key),model:ms.shape.model.parse(e.model)};return`mdl_${d.createHash("sha256").update(JSON.stringify(t)).digest("hex")}`}const vs=a.z.enum(["market","custom"]),Ns=a.z.enum(["active","deprecated","yanked"]),Os=a.z.discriminatedUnion("kind",[a.z.object({kind:a.z.literal("builtin"),key:a.z.string().trim().min(1).max(120)}).strict(),a.z.object({kind:a.z.literal("remote"),url:a.z.string().trim().url().max(2048),mediaType:a.z.enum(["image/png","image/jpeg","image/webp"]).optional(),digest:li.optional()}).strict()]),zs=a.z.array(a.z.string().trim().min(1).max(80)).default([]),Cs=a.z.array(a.z.string().trim().min(1).max(120)).default([]),Rs=a.z.record(a.z.string().trim().min(2).max(35),a.z.string().trim().min(1).max(4096)),xs=a.z.object({os:a.z.string().trim().min(1).max(40),architecture:a.z.string().trim().min(1).max(40),digest:li.optional(),downloadSizeBytes:a.z.number().int().positive().optional(),unpackedSizeBytes:a.z.number().int().positive().optional()}).strict(),ks=a.z.object({name:a.z.string().trim().min(1).max(128).regex(ii),version:a.z.string().trim().min(1).max(160).optional(),reference:di,manifestDigest:li.optional(),publishedAt:Qn.optional(),platforms:a.z.array(xs).default([]),status:Ns.default("active")}).strict(),Ds=a.z.object({id:Jn,publisher:a.z.string().trim().min(1).max(160),slug:a.z.string().trim().min(1).max(160),name:a.z.string().trim().min(1).max(160),description:a.z.string().trim().min(1).max(4096),localizedDescriptions:Rs.optional(),cover:Os.optional(),repository:a.z.string().trim().min(1).max(512),defaultTag:a.z.string().trim().min(1).max(128).regex(ii),tags:a.z.array(ks).min(1),capabilities:zs,optionalApps:Cs,defaultEnv:ei,labels:Zn,status:Ns.default("active")}).strict().superRefine((e,t)=>{e.tags.some(t=>t.name===e.defaultTag)\|\|t.addIssue({code:"custom",path:["defaultTag"],message:"Market defaultTag must identify one of the image tags."})});a.z.object({protocolVersion:Mn,catalogId:Jn,revision:a.z.string().trim().min(1).max(240),source:a.z.enum(["embedded","remote","cache"]),generatedAt:Qn,expiresAt:Qn.optional(),items:a.z.array(Ds)}).strict(),a.z.object({source:a.z.enum(["embedded","remote","cache"]),state:a.z.enum(["ready","refreshing","stale","failed"]),revision:a.z.string().trim().min(1).max(240),updatedAt:Qn,error:a.z.string().trim().max(4096).optional()}).strict(),a.z.object({id:Jn,origin:a.z.literal("custom"),name:a.z.string().trim().min(1).max(160),description:a.z.string().trim().max(4096).optional(),localizedDescriptions:Rs.optional(),cover:Os.optional(),reference:di,repository:a.z.string().trim().min(1).max(512),tag:a.z.string().trim().min(1).max(128).regex(ii).optional(),pullPolicy:a.z.literal("if-not-present").default("if-not-present"),capabilities:zs,optionalApps:Cs,defaultEnv:ei,labels:Zn,createdAt:Qn,updatedAt:Qn}).strict();const Ps=a.z.object({name:a.z.string().trim().min(1).max(128).regex(ii),version:a.z.string().trim().min(1).max(160).optional(),reference:di,manifestDigest:li.optional(),status:Ns}).strict(),Ls=a.z.object({id:Jn,origin:vs,name:a.z.string().trim().min(1).max(160),description:a.z.string().trim().max(4096).optional(),localizedDescriptions:Rs.optional(),cover:Os,repository:a.z.string().trim().min(1).max(512),tag:a.z.string().trim().min(1).max(128).regex(ii).optional(),availableTags:a.z.array(Ps),reference:di,digest:li.optional(),downloadSizeBytes:a.z.number().int().positive().optional(),unpackedSizeBytes:a.z.number().int().positive().optional(),capabilities:zs,optionalApps:Cs,defaultEnv:ei,labels:Zn,readOnly:a.z.boolean(),lifecycleStatus:Ns.optional(),market:a.z.object({catalogId:Jn,catalogRevision:a.z.string().trim().min(1).max(240),publisher:a.z.string().trim().min(1).max(160),version:a.z.string().trim().min(1).max(160).optional()}).strict().optional()}).strict(),Ms=a.z.object({id:Jn,origin:vs,name:a.z.string().trim().min(1).max(160),description:a.z.string().trim().max(4096).optional(),localizedDescriptions:Rs.optional(),cover:Os.optional(),repository:a.z.string().trim().min(1).max(512),tag:a.z.string().trim().min(1).max(128).regex(ii).optional(),requestedReference:di,resolvedDigest:li.optional(),resolvedReference:di.optional(),downloadSizeBytes:a.z.number().int().positive().optional(),pullPolicy:a.z.literal("if-not-present").default("if-not-present"),capabilities:zs,optionalApps:Cs,defaultEnv:ei,labels:Zn,market:a.z.object({catalogId:Jn,catalogRevision:a.z.string().trim().min(1).max(240),publisher:a.z.string().trim().min(1).max(160),version:a.z.string().trim().min(1).max(160).optional()}).strict().optional(),createdAt:Qn,updatedAt:Qn}).strict(),js=a.z.object({phase:a.z.enum(["checking-image","pulling-image","resolving-image","ready","failed"]),requestedReference:di,generation:a.z.number().int().nonnegative().default(0),error:a.z.string().trim().max(4096).optional(),startedAt:Qn,updatedAt:Qn}).strict(),Us="image.pull.terminal.output",Fs="image.pull.terminal.finished",$s=a.z.object({instanceId:Jn,generation:a.z.number().int().nonnegative(),requestedReference:di,sequence:a.z.number().int().nonnegative(),observedAt:Qn}).strict(),Hs=$s.extend({data:a.z.string().min(1).max(65536),replay:a.z.boolean().optional()}).strict(),qs=$s.extend({outcome:a.z.enum(["succeeded","failed"])}).strict();$s.extend({status:a.z.enum(["connecting","pulling","extracting","complete","failed"]),layers:a.z.object({total:a.z.number().int().nonnegative(),completed:a.z.number().int().nonnegative(),downloaded:a.z.number().int().nonnegative(),downloading:a.z.number().int().nonnegative(),extracting:a.z.number().int().nonnegative()}).strict(),bytes:a.z.object({current:a.z.number().finite().nonnegative(),total:a.z.number().finite().positive()}).strict().optional(),percent:a.z.number().finite().min(0).max(100).optional(),message:a.z.string().trim().min(1).max(500),terminalTail:a.z.string().max(262144).optional(),terminalTruncated:a.z.boolean().optional()}).strict();const Vs=a.z.discriminatedUnion("kind",[a.z.object({kind:a.z.literal("direct")}).strict(),a.z.object({kind:a.z.literal("control-plane-proxy"),proxyId:Jn,proxyBindingId:Jn,targetNodeId:Jn}).strict()]),Bs=a.z.object({pingRttMs:a.z.number().nonnegative().optional(),pingRttP95Ms:a.z.number().nonnegative().optional(),consecutiveReconnects:a.z.number().int().nonnegative(),nextRetryAt:Qn.optional()}).strict();a.z.object({nodeId:Jn,inviteId:Jn.optional()}).strict(),a.z.discriminatedUnion("status",[a.z.object({id:Jn,status:a.z.literal("pending")}).strict(),a.z.object({id:Jn,status:a.z.literal("completed"),nodeId:Jn}).strict()]);const Ks=a.z.object({reachability:a.z.enum(["unknown","reachable","unreachable"]),bindingStatus:a.z.enum(["unknown","active","revoked"]),bindingRevision:a.z.number().int().positive().optional(),streamId:a.z.string().trim().min(1).max(160).optional(),revision:a.z.number().int().nonnegative().optional(),observedAt:Qn.optional(),target:bn.optional(),lastError:An.optional(),updatedAt:Qn}).strict(),Gs=a.z.object({id:Jn,name:a.z.string().trim().min(1).max(160),connectionMode:a.z.enum(["local-ipc","local-loopback","direct-http","reverse-wss","control-plane-proxy"]).default("direct-http"),connectionPath:Vs.default({kind:"direct"}),connectionEnabled:a.z.boolean().default(!0),auth:a.z.object({mode:a.z.enum(["local-static-key","paired-hmac","proxy-binding"]).default("local-static-key"),keyId:Jn.optional(),secret:a.z.string().trim().max(4096).optional(),pairedAt:Qn.optional(),pairing:a.z.object({status:a.z.enum(["pending","paired","expired"]).default("pending"),joinToken:a.z.string().trim().max(4096).optional(),expiresAt:Qn.optional()}).strict().optional()}).strict().default({mode:"local-static-key"}),endpoint:a.z.string().trim().max(2048).optional(),controlEndpoint:a.z.string().trim().max(2048).optional(),containerEndpoint:a.z.string().trim().max(2048).optional(),publicWebBase:a.z.string().trim().max(2048).optional(),status:a.z.enum(["unknown","online","offline","degraded"]).default("unknown"),health:a.z.enum(["unknown","ok","degraded","failed"]).default("unknown"),capabilities:a.z.record(a.z.string(),a.z.unknown()).default({}),proxyState:Ks.optional(),appInventory:Oi.optional(),labels:Zn,lastSeenAt:Qn.optional(),createdAt:Qn,updatedAt:Qn}).strict().superRefine((e,t)=>{"control-plane-proxy"===e.connectionPath.kind&&"control-plane-proxy"!==e.connectionMode&&t.addIssue({code:"custom",path:["connectionPath"],message:"Control-plane proxy paths require control-plane-proxy connection mode."}),"control-plane-proxy"===e.connectionMode&&"control-plane-proxy"!==e.connectionPath.kind&&t.addIssue({code:"custom",path:["connectionPath"],message:"Control-plane proxy nodes require a control-plane-proxy connection path."})});a.z.object({nodeId:Jn,status:a.z.enum(["unknown","online","offline","degraded"]),health:a.z.enum(["unknown","ok","degraded","failed"]),lastSeenAt:Qn.nullable(),connectionPhase:a.z.enum(["connecting","handshaking","healthy","reconnecting","suspect","offline"]).nullable(),connectionDiagnostics:Bs.nullable(),proxyState:Ks.nullable()}).strict();const Ws=a.z.object({id:Jn,nodeId:Jn,name:a.z.string().trim().min(1).max(160),type:a.z.enum(["docker","kubernetes","local"]),status:a.z.enum(["unknown","online","offline","degraded"]).default("unknown"),accessStrategy:a.z.enum(["node-proxy","direct-port","kubernetes-ingress","kubernetes-port-forward"]).default("node-proxy"),capabilities:a.z.record(a.z.string(),a.z.unknown()).default({}),labels:Zn,createdAt:Qn,updatedAt:Qn}).strict(),Xs=a.z.object({instanceId:Jn,runtimeKind:a.z.literal("docker"),state:a.z.enum(["pending","available","stopped","unavailable"]),sampledAt:Qn,cpu:a.z.object({usagePercent:a.z.number().nonnegative()}).strict().optional(),memory:a.z.object({usageBytes:a.z.number().nonnegative(),limitBytes:a.z.number().nonnegative().optional(),usagePercent:a.z.number().nonnegative().optional()}).strict().optional(),network:a.z.object({rxBytes:a.z.number().nonnegative(),txBytes:a.z.number().nonnegative()}).strict().optional(),blockIo:a.z.object({readBytes:a.z.number().nonnegative(),writeBytes:a.z.number().nonnegative()}).strict().optional(),pids:a.z.number().int().nonnegative().optional(),error:a.z.string().trim().max(2048).optional()}).strict(),Ys=a.z.object({registry:a.z.boolean().default(!1),runtimeBroker:a.z.boolean().default(!1),workspaceProvisioning:a.z.object({docker:a.z.boolean().default(!1),kubernetes:a.z.boolean().default(!1),local:a.z.boolean().default(!1)}).strip().default({docker:!1,kubernetes:!1,local:!1})}).strip(),Js=a.z.object({multiEntityAssignment:a.z.boolean().default(!1),privateModelCatalog:a.z.boolean().default(!1)}).strip(),Qs=a.z.object({enabled:a.z.boolean().default(!1),agentTools:a.z.boolean().default(!1),sessionRetention:a.z.boolean().default(!1),maxFileBytes:a.z.number().int().positive().default(33554432),maxBatchPaths:a.z.number().int().min(1).max(100).default(20)}).strip(),Zs=a.z.object({modelEndpointProbe:a.z.boolean().optional(),aiSessionHistoryLimit:a.z.boolean().optional(),aiSessionAttachmentRetention:a.z.boolean().optional(),aiSessionFileAttachmentLimit:a.z.boolean().optional(),folderPlaces:a.z.boolean().optional(),localFolderNameUpdate:a.z.boolean().optional(),managedGitCredentials:Ys.optional(),managedModels:Js.optional(),stories:Qs.optional(),codexManagedSettings:a.z.boolean().optional()}).strip(),eo=a.z.object({status:a.z.enum(["healthy","congested","recovering"]),activeOutputs:a.z.number().int().nonnegative(),bufferedBytes:a.z.number().int().nonnegative(),peakBufferedBytes:a.z.number().int().nonnegative(),coalescedEvents:a.z.number().int().nonnegative(),oversizedEvents:a.z.number().int().nonnegative().optional(),peakEventBytes:a.z.number().int().nonnegative().optional(),congestedSince:Qn.optional(),lastCongestedAt:Qn.optional()}).strip();a.z.object({ok:a.z.boolean().optional(),role:a.z.string().optional(),nodeId:Jn.optional(),platform:gi.optional(),arch:fi.optional(),protocolVersion:Mn.optional(),capabilities:Zs.optional(),build:Vi.strip().optional(),process:a.z.object({pid:a.z.number().int().positive(),startIdentity:a.z.string().trim().min(1).optional()}).strip().optional(),listener:a.z.object({host:a.z.string().trim().min(1),port:a.z.number().int().min(1).max(65535)}).strip().optional(),instanceProxy:a.z.object({requests:a.z.number().int().nonnegative(),active:a.z.number().int().nonnegative(),completed:a.z.number().int().nonnegative(),aborted:a.z.number().int().nonnegative(),limitRejected:a.z.number().int().nonnegative(),responseBytes:a.z.number().nonnegative(),totalDurationMs:a.z.number().nonnegative(),maxResponseBytes:a.z.number().int().nonnegative()}).partial().strip().optional(),eventTransport:eo.optional(),serverTime:Qn.optional()}).strip();const to=a.z.object({bindScope:a.z.enum(["loopback","all-ipv4"]),port:a.z.number().int().min(1).max(65535)}).strict(),no=to.extend({host:a.z.enum(["127.0.0.1","0.0.0.0"]),status:a.z.enum(["listening","error"]),source:a.z.enum(["bootstrap","persisted"]),error:a.z.string().trim().max(2048).optional()}).strict(),io=to;a.z.object({nodeId:Jn,joinToken:a.z.string().trim().min(1),expiresAt:Qn}).passthrough(),a.z.object({nodeId:Jn,keyId:Jn,secret:a.z.string().regex(/^[A-Za-z0-9_-]{32,128}$/),pairedAt:Qn}).strict();const so=a.z.object({id:Jn,keyId:Jn,name:a.z.string().trim().min(1).max(160).optional(),pairedAt:Qn,updatedAt:Qn,current:a.z.boolean()}).passthrough();a.z.object({keyId:Jn,revoked:a.z.literal(!0),revokedAt:Qn}).strict(),a.z.object({id:Jn,pairingKeyId:Jn,url:a.z.string().trim().min(1).max(2048),name:a.z.string().trim().min(1).max(160).optional(),enabled:a.z.boolean(),createdAt:Qn,updatedAt:Qn,status:a.z.enum(["disabled","connecting","connected","reconnecting","failed"]),pingRttMs:a.z.number().nonnegative().optional(),pingRttP95Ms:a.z.number().nonnegative().optional(),consecutiveReconnects:a.z.number().int().nonnegative().optional(),nextRetryAt:Qn.optional(),lastConnectedAt:Qn.optional(),lastDisconnectedAt:Qn.optional(),error:a.z.string().optional()}).passthrough(),a.z.object({pairing:so,connection:a.z.object({id:Jn,pairingKeyId:Jn,url:a.z.string().trim().min(1).max(2048),name:a.z.string().trim().min(1).max(160).optional(),enabled:a.z.boolean(),createdAt:Qn,updatedAt:Qn}).passthrough(),tunnel:a.z.object({status:a.z.enum(["disabled","saved","connecting","connected","failed"]),error:a.z.string().trim().max(2048).optional()}).passthrough()}).passthrough(),a.z.object({deleted:a.z.boolean().optional()}).passthrough();const oo=a.z.object({repository:a.z.string().trim().optional(),tag:a.z.string().trim().optional(),id:a.z.string().trim(),createdSince:a.z.string().trim().optional(),size:a.z.string().trim().optional(),sizeBytes:a.z.number().int().nonnegative().optional(),reference:a.z.string().trim().min(1),repoDigests:a.z.array(a.z.string().trim().min(1).max(512)).default([])}).passthrough();a.z.object({image:Ls,status:a.z.enum(["available","pull-required","unknown"]),localImage:oo.optional(),localSizeBytes:a.z.number().int().nonnegative().optional(),downloadSizeBytes:a.z.number().int().positive().optional(),unpackedSizeBytes:a.z.number().int().positive().optional(),error:a.z.string().trim().max(2048).optional()}).strict();const ro=a.z.lazy(()=>a.z.object({name:a.z.string().trim().min(1),path:a.z.string().trim().min(1).max(4096),children:a.z.array(ro)}).passthrough());a.z.object({kind:a.z.enum(["home","root"]),name:a.z.string().trim().min(1),path:a.z.string().trim().min(1).max(4096)}).passthrough(),a.z.object({status:a.z.number().int().min(100).max(599).optional(),headers:a.z.record(a.z.string(),a.z.string()).optional(),bodyBase64:a.z.string().optional()}).passthrough();const ao=a.z.object({strategy:a.z.enum(["node-proxy","direct-port","kubernetes-ingress","kubernetes-port-forward"]).default("node-proxy"),web:a.z.string().trim().max(2048).optional(),api:a.z.string().trim().max(2048).optional(),vnc:a.z.string().trim().max(2048).optional(),tty:a.z.string().trim().max(2048).optional(),logs:a.z.string().trim().max(2048).optional(),status:a.z.enum(["unknown","reachable","endpoint-unreachable"]).default("unknown")}).strict(),co=a.z.object({...ao.shape}).strict(),lo=a.z.object({strategy:a.z.enum(["control-plane-proxy","direct-port","node-proxy","kubernetes-ingress","kubernetes-port-forward"]).default("control-plane-proxy"),web:a.z.string().trim().max(2048).optional(),api:a.z.string().trim().max(2048).optional(),ws:a.z.string().trim().max(2048).optional(),status:a.z.enum(["unknown","reachable","endpoint-unreachable"]).default("unknown")}).strict().default({strategy:"control-plane-proxy",status:"unknown"}),uo=a.z.object({mode:a.z.enum(["local-bind","git-clone","empty-volume","persistent-volume"]).optional(),status:a.z.enum(["unknown","pending","ready","failed"]).default("unknown"),path:a.z.string().trim().max(4096).optional(),resolvedCommit:a.z.string().trim().max(120).optional(),error:a.z.string().trim().max(2048).optional()}).passthrough(),po=a.z.object({id:Jn,name:a.z.string().trim().min(1).max(160),projectId:Jn.optional(),source:as,sourceSnapshot:a.z.record(a.z.string(),a.z.unknown()).default({}),modelSelection:ui,nodeId:Jn,runtimeId:Jn,imageSelection:pi.optional(),environmentSource:mi.optional(),environmentTemplateOrigin:Ii.optional(),imageSnapshot:Ms.optional(),imageProvisioning:js.optional(),stateRevision:a.z.number().int().min(0).default(0),processIncarnationId:a.z.string().trim().min(1).max(120).optional(),status:a.z.enum(["created","provisioning","starting","registering","registered","running","stopping","stopped","deleting","failed","unhealthy"]).default("created"),health:a.z.enum(["unknown","ok","degraded","failed"]).default("unknown"),connectionStatus:a.z.enum(["unknown","online","offline","endpoint-unreachable"]).default("unknown"),agentStatus:a.z.enum(["unknown","online","offline"]).default("unknown"),targetStatus:a.z.enum(["unknown","reachable","endpoint-unreachable"]).default("unknown"),uiAccessStatus:a.z.enum(["unknown","reachable","endpoint-unreachable"]).default("unknown"),controlMode:a.z.enum(["standalone","controlled"]).default("controlled"),protocolVersion:Mn.optional(),instanceVersion:a.z.string().trim().max(80).optional(),build:Vi.optional(),runtimeVersion:Wi.optional(),ready:a.z.boolean().default(!1),capabilities:Gn.default(qn),appInventory:Oi.optional(),config:a.z.object({autoImportAgentConfigs:a.z.boolean().default(!0),codexConfigEnabled:a.z.boolean().default(!0),codexHomeMode:a.z.enum(["default","taskhandoff"]).default("taskhandoff"),defaultCodexPermissionMode:nt.default("ask"),codexSettings:Hn.optional(),aiSessionHistoryLimit:a.z.number().int().min(1).max(500).default(50),aiSessionAttachmentRetentionDays:a.z.number().int().min(0).max(365).default(30),aiSessionMaxFileAttachmentBytes:a.z.number().int().positive().max(ge).default(he)}).strict().default({autoImportAgentConfigs:!0,codexConfigEnabled:!0,codexHomeMode:"taskhandoff",defaultCodexPermissionMode:"ask",aiSessionHistoryLimit:50,aiSessionAttachmentRetentionDays:30,aiSessionMaxFileAttachmentBytes:he}),workspace:uo.default({status:"unknown"}),target:ao.default({strategy:"direct-port",status:"unknown"}),access:lo,apps:a.z.object({runningCount:a.z.number().int().min(0).default(0),problemCount:a.z.number().int().min(0).default(0),updatedAt:Qn.optional(),revision:a.z.number().int().min(0).optional()}).strict().default({runningCount:0,problemCount:0}),aiSessions:Lt.default(()=>({runningCount:0,waitingCount:0,staleCount:0,sessions:[],updatedAt:(new Date).toISOString()})),triggers:a.z.object({enabledCount:a.z.number().int().min(0).default(0),runningCount:a.z.number().int().min(0).default(0),errorCount:a.z.number().int().min(0).default(0),configs:a.z.array(a.z.object({configHash:a.z.string().trim().min(1),config:sn,deployments:a.z.array(rn).default([]),runtime:a.z.array(an).default([])}).strict()).default([]),recentRuns:a.z.array(cn).default([])}).strict().optional(),runtime:a.z.object({kind:a.z.string().trim().max(80).optional(),containerName:a.z.string().trim().max(240).optional(),containerId:a.z.string().trim().max(240).optional(),workspacePath:a.z.string().trim().max(4096).optional(),pid:a.z.number().int().positive().optional(),port:a.z.number().int().positive().max(65535).optional(),labels:a.z.record(a.z.string(),a.z.string()).default({})}).strict().default({labels:{}}),registrationToken:a.z.string().trim().min(1).max(240).optional(),lastHeartbeatAt:Qn.optional(),createdAt:Qn,updatedAt:Qn}).strict(),mo=a.z.union([po.transform(e=>({instance:e,gitWorkspaceProvisioningOperationId:void 0})),a.z.object({instance:po,gitWorkspaceProvisioningOperationId:Jn.optional()}).strict()]);a.z.preprocess(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e;return t.instance&&"object"==typeof t.instance&&!Array.isArray(t.instance)?{instance:yo(t.instance),..."string"==typeof t.gitWorkspaceProvisioningOperationId?{gitWorkspaceProvisioningOperationId:t.gitWorkspaceProvisioningOperationId}:{}}:yo(t)},mo);const ho="instance.lifecycle.snapshot",go=a.z.object({instanceId:po.shape.id,revision:a.z.number().int().min(0),updatedAt:Qn,status:po.shape.status.unwrap(),health:po.shape.health.unwrap(),connectionStatus:po.shape.connectionStatus.unwrap(),accessStatus:a.z.enum(["reachable","endpoint-unreachable"]),imageProvisioning:js.optional(),workspace:uo,runtime:po.shape.runtime.unwrap(),runtimeVersion:Wi.optional(),ready:a.z.boolean(),lastHeartbeatAt:Qn.optional()}).strict();function fo(e,t){return po.safeParse(yo(e,t))}function yo(e,t){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const n=e,i=new Set(Object.keys(po.shape)),s={};for(const[e,o]of Object.entries(n))i.has(e)?s[e]=o:t?.({instanceId:"string"==typeof n.id?n.id:void 0,field:e});if(n.capabilities&&"object"==typeof n.capabilities&&!Array.isArray(n.capabilities)){const e={...n.capabilities};Object.prototype.hasOwnProperty.call(e,"apps")&&(t?.({instanceId:"string"==typeof n.id?n.id:void 0,field:"capabilities.apps"}),delete e.apps),s.capabilities=Xn(e)}else s.capabilities=Xn(void 0);s.appInventory=function(e,t,n){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const i=e;Object.keys(i).some(e=>!["observedAt","items","issues"].includes(e))&&t?.({instanceId:n,field:"appInventory"});const s={observedAt:i.observedAt,items:Array.isArray(i.items)?i.items.map(e=>{e&&"object"==typeof e&&!Array.isArray(e)&&Object.keys(e).some(e=>!["id","name","kind","source","availability","capabilities","diagnosticCode"].includes(e))&&t?.({instanceId:n,field:"appInventory.items"});const i=_o(e,["id","name","kind","source","availability","diagnosticCode"]);return!i\|\|"object"!=typeof i\|\|Array.isArray(i)?i:{...i,capabilities:_o(e.capabilities,["automation","supportsCwdSelection"])}}):i.items,issues:Array.isArray(i.issues)?i.issues.map(e=>_o(e,["code","message"])):i.issues},o=Oi.safeParse(s);return o.success?o.data:void 0}(n.appInventory,t,"string"==typeof n.id?n.id:void 0),s.source=function(e,t,n){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const i=e,s=i.type,o=as.options.find(e=>e.shape.type.value===s);if(!o)return e;const r="local-folder"===s?["type","localFolderId","path","ownerNodeId"]:"git-template"===s?["type","url","templateId","ref","auth","clone"]:["type","repositoryId","url","provider","ref","auth","clone"],a=_o(i,r);if("local-folder"!==s){const e=function(e,t,n){const i=e&&"object"==typeof e&&!Array.isArray(e)?e:void 0,s=is.safeParse(_o(i,["type","name","commit"]));if(s.success)return s.data;const o="string"==typeof i?.commit?i.commit.trim():"",r="string"==typeof i?.name?i.name.trim():"",a=o?is.safeParse({type:"commit",commit:o}):r?is.safeParse({type:"tag"===i?.type?"tag":"branch",name:r}):is.safeParse({type:"branch",name:"main"});return a.success?(t?.({instanceId:n,field:"source.ref"}),a.data):void 0}(i.ref,t,n),s=Io(ss,_o(i.auth,["type","secretId"]),"source.auth",t,n),o=Io(os,_o(i.clone,["depth","submodules","lfs","subdirectory"]),"source.clone",t,n);e?a.ref=e:delete a.ref,s?a.auth=s:delete a.auth,o?a.clone=o:delete a.clone}const c=Io(o,a,"source",t,n);return c?(Object.keys(i).some(e=>!r.includes(e))&&t?.({instanceId:n,field:"source"}),c):a}(n.source,t,"string"==typeof n.id?n.id:void 0),s.sourceSnapshot=n.sourceSnapshot&&"object"==typeof n.sourceSnapshot&&!Array.isArray(n.sourceSnapshot)?n.sourceSnapshot:{},s.build=Io(Vi,n.build,"build",t,"string"==typeof n.id?n.id:void 0),s.aiSessions=function(e,t,n){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const i=e,s=Array.isArray(i.sessions)?i.sessions.flatMap((e,i)=>{const s=Io(Pt,e,`aiSessions.sessions.${i}`,t,n);return s?[s]:[]}):[],o={runningCount:"number"==typeof i.runningCount&&Number.isInteger(i.runningCount)&&i.runningCount>=0?i.runningCount:0,waitingCount:"number"==typeof i.waitingCount&&Number.isInteger(i.waitingCount)&&i.waitingCount>=0?i.waitingCount:0,staleCount:"number"==typeof i.staleCount&&Number.isInteger(i.staleCount)&&i.staleCount>=0?i.staleCount:0,sessions:s,updatedAt:Qn.safeParse(i.updatedAt).success?i.updatedAt:(new Date).toISOString()};return Object.keys(i).some(e=>!["runningCount","waitingCount","staleCount","sessions","updatedAt"].includes(e))&&t?.({instanceId:n,field:"aiSessions"}),Lt.parse(o)}(n.aiSessions,t,"string"==typeof n.id?n.id:void 0),s.triggers=function(e,t,n){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const i=e;Object.keys(i).some(e=>!["enabledCount","runningCount","errorCount","configs","recentRuns"].includes(e))&&t?.({instanceId:n,field:"triggers"});const s=(e,i,s)=>Array.isArray(e)?e.flatMap((e,o)=>{const r=Io(i,e,`${s}.${o}`,t,n);return r?[r]:[]}):[],o=Array.isArray(i.configs)?i.configs.flatMap((e,i)=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const o=e;Object.keys(o).some(e=>!["configHash","config","deployments","runtime"].includes(e))&&t?.({instanceId:n,field:`triggers.configs.${i}`});const r=function(e,t,n,i){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const s=e,o=_o(s,["configHash","name","description","createdAt","updatedAt"]);if(s.source&&"object"==typeof s.source&&!Array.isArray(s.source)){const e=s.source,t="schedule"===e.type?"interval"===e.scheduleKind?["type","scheduleKind","intervalMs"]:"daily"===e.scheduleKind?["type","scheduleKind","timeOfDay","timezone"]:["type","scheduleKind","weekdays","timeOfDay","timezone"]:"file-change"===e.type?["type","roots","globs","ignore","debounceMs"]:["type","agent","statuses","phases"];o.source=_o(e,t)}return o.action=_o(s.action,["promptTemplate"]),o.policy=_o(s.policy,["cooldownMs","maxConcurrentRuns","whenBusy"]),Io(sn,o,t,n,i)}(o.config,`triggers.configs.${i}.config`,t,n);return"string"==typeof o.configHash&&r?[{configHash:o.configHash,config:r,deployments:s(o.deployments,rn,`triggers.configs.${i}.deployments`),runtime:s(o.runtime,an,`triggers.configs.${i}.runtime`)}]:[]}):[];return{enabledCount:"number"==typeof i.enabledCount&&Number.isInteger(i.enabledCount)&&i.enabledCount>=0?i.enabledCount:0,runningCount:"number"==typeof i.runningCount&&Number.isInteger(i.runningCount)&&i.runningCount>=0?i.runningCount:0,errorCount:"number"==typeof i.errorCount&&Number.isInteger(i.errorCount)&&i.errorCount>=0?i.errorCount:0,configs:o,recentRuns:s(i.recentRuns,cn,"triggers.recentRuns")}}(n.triggers,t,"string"==typeof n.id?n.id:void 0),s.apps=Io(po.shape.apps.unwrap(),_o(n.apps,["runningCount","problemCount","updatedAt","revision"]),"apps",t,"string"==typeof n.id?n.id:void 0)\|\|{runningCount:0,problemCount:0},s.config=Io(po.shape.config.unwrap(),_o(n.config,["autoImportAgentConfigs","codexConfigEnabled","codexHomeMode","defaultCodexPermissionMode","codexSettings","aiSessionHistoryLimit","aiSessionAttachmentRetentionDays","aiSessionMaxFileAttachmentBytes"]),"config",t,"string"==typeof n.id?n.id:void 0)\|\|{autoImportAgentConfigs:!0,codexConfigEnabled:!0,codexHomeMode:"taskhandoff",defaultCodexPermissionMode:"ask",aiSessionHistoryLimit:50,aiSessionAttachmentRetentionDays:30,aiSessionMaxFileAttachmentBytes:he},s.modelSelection=Io(ui.unwrap(),_o(n.modelSelection,["modelEntityIds","codexModelHash","claudeModelHash","opencodeModelHash"]),"modelSelection",t,"string"==typeof n.id?n.id:void 0)\|\|{},s.imageSnapshot=function(e,t,n,i){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const s=e,o=function(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e,n=new Set(["id","origin","name","description","localizedDescriptions","cover","reference","repository","tag","image","registry","pullPolicy","capabilities","optionalApps","defaultEnv","labels","createdAt","updatedAt"]);for(const e of Object.keys(t))n.has(e);"string"==typeof t.id&&t.id;const i="string"==typeof t.image?t.image:void 0;Object.prototype.hasOwnProperty.call(t,"registry");let s,o="string"==typeof t.reference?t.reference:i;if(o)try{o=ai(o)}catch{if(!o.includes("@")&&o.lastIndexOf(":")<=o.lastIndexOf("/"))try{o=ai(`${o}:latest`)}catch{}}try{s=o?ci(o):void 0}catch{}return{id:t.id,origin:"custom",name:t.name,description:t.description,localizedDescriptions:t.localizedDescriptions,cover:_o(t.cover,["kind","key","url","mediaType","digest"]),reference:s?.reference??o,repository:s?.repository??t.repository,tag:s?.tag??t.tag,pullPolicy:t.pullPolicy??"if-not-present",capabilities:t.capabilities,optionalApps:t.optionalApps,defaultEnv:t.defaultEnv,labels:t.labels,createdAt:t.createdAt,updatedAt:t.updatedAt}}(s),{reference:r,...a}=o,c=s.requestedReference??r;let d;try{d="string"==typeof c?ci(c):void 0}catch{}const l={img_default:"market_taskhandoff_browser",img_codex:"market_taskhandoff_codex",img_ai:"market_taskhandoff_ai"},u="string"==typeof s.id?s.id:"string"==typeof t?t:void 0,p="market"===s.origin\|\|u&&l[u]?"market":"custom";return void 0===s.image&&void 0===s.reference\|\|n?.({instanceId:i,field:"imageSnapshot.reference"}),{...a,id:u&&l[u]?l[u]:u,origin:p,repository:d?.repository??s.repository,tag:d?.tag??s.tag,requestedReference:d?.reference??c,resolvedDigest:s.resolvedDigest,resolvedReference:s.resolvedReference,downloadSizeBytes:s.downloadSizeBytes,market:"market"===p?_o(s.market,["catalogId","catalogRevision","publisher","version"])??{catalogId:"task_handoff_embedded",catalogRevision:"legacy",publisher:"task-handoff"}:void 0}}(n.imageSnapshot,n.imageId,t,"string"==typeof n.id?n.id:void 0);const o="string"==typeof n.imageId?{img_default:"market_taskhandoff_browser",img_codex:"market_taskhandoff_codex",img_ai:"market_taskhandoff_ai"}[n.imageId]\|\|n.imageId:void 0,r=_o(n.imageSelection,["imageId","tag"]);s.imageSelection=r\|\|(o?{imageId:o,tag:s.imageSnapshot?.tag}:void 0),s.imageProvisioning=Io(js,_o(n.imageProvisioning,["phase","requestedReference","generation","error","startedAt","updatedAt"]),"imageProvisioning",t,"string"==typeof n.id?n.id:void 0),s.runtimeVersion=function(e,t,n){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const i=e,s=e=>{if("string"!=typeof e)return;const t=e.trim();return t&&t.length<=80?t:void 0},o=s(i.desiredVersion);if(!o)return void t?.({instanceId:n,field:"runtimeVersion.desiredVersion"});const r=new Set(Wi.shape.phase.options),a="string"==typeof i.phase?i.phase:"pending",c=r.has(a)?a:{idle:"pending",queued:"pending",checking:"pending",downloading:"installing",updating:"installing",completed:"matched",succeeded:"matched",ready:"matched",error:"failed"}[a]\|\|"pending";let d;if(c!==a&&t?.({instanceId:n,field:"runtimeVersion.phase"}),i.error&&"object"==typeof i.error&&!Array.isArray(i.error)){const e=i.error,o="string"==typeof e.message?e.message.trim().slice(0,4096):"";if(o){const i=new Set(Gi.shape.code.options),r="string"==typeof e.code&&i.has(e.code)?e.code:"INSTANCE_RUNTIME_INSTALL_FAILED";r!==e.code&&t?.({instanceId:n,field:"runtimeVersion.error.code"});const a=s(e.expectedVersion),c=s(e.actualVersion);d={code:r,message:o,...a?{expectedVersion:a}:{},...c?{actualVersion:c}:{},retryable:!0===e.retryable}}else t?.({instanceId:n,field:"runtimeVersion.error"})}"string"==typeof i.error&&i.error.trim()&&(d={code:"INSTANCE_RUNTIME_INSTALL_FAILED",message:i.error.trim().slice(0,4096),expectedVersion:o,...s(i.actualVersion)?{actualVersion:s(i.actualVersion)}:{},retryable:!1});const l=s(i.actualVersion),u=Qn.safeParse(i.lastAttemptAt),p=Qn.safeParse(i.matchedAt);return void 0===i.lastAttemptAt\|\|u.success\|\|t?.({instanceId:n,field:"runtimeVersion.lastAttemptAt"}),void 0===i.matchedAt\|\|p.success\|\|t?.({instanceId:n,field:"runtimeVersion.matchedAt"}),{desiredVersion:o,...l?{actualVersion:l}:{},phase:c,attempt:"number"==typeof i.attempt&&Number.isInteger(i.attempt)&&i.attempt>=0?i.attempt:0,...u.success?{lastAttemptAt:u.data}:{},...p.success?{matchedAt:p.data}:{},...d?{error:d}:{}}}(n.runtimeVersion,t,"string"==typeof n.id?n.id:void 0),s.workspace=Io(uo,n.workspace,"workspace",t,"string"==typeof n.id?n.id:void 0)\|\|{status:"unknown"},s.environmentSource=Io(mi,n.environmentSource,"environmentSource",t,"string"==typeof n.id?n.id:void 0),s.environmentTemplateOrigin=Io(Ii,n.environmentTemplateOrigin,"environmentTemplateOrigin",t,"string"==typeof n.id?n.id:void 0),s.runtime=Io(po.shape.runtime.unwrap(),n.runtime,"runtime",t,"string"==typeof n.id?n.id:void 0)\|\|{labels:{}},s.target=Io(ao,_o(n.target??n.endpoints,["strategy","web","api","vnc","tty","logs","status"]),"target",t,"string"==typeof n.id?n.id:void 0)\|\|{strategy:"direct-port",status:"unknown"},s.access=Io(lo,_o(n.access,["strategy","web","api","ws","status"]),"access",t,"string"==typeof n.id?n.id:void 0)\|\|{strategy:"control-plane-proxy",status:"unknown"};for(const[e,i]of Object.entries(po.shape))Object.prototype.hasOwnProperty.call(s,e)&&!i.safeParse(s[e]).success&&i.safeParse(void 0).success&&(delete s[e],t?.({instanceId:"string"==typeof n.id?n.id:void 0,field:e}));return s}function Io(e,t,n,i,s){if(!t\|\|"object"!=typeof t\|\|Array.isArray(t))return;let o=structuredClone(t),r=!1;for(let t=0;t<20;t+=1){const t=e.safeParse(o);if(t.success)return r&&i?.({instanceId:s,field:n}),t.data;let a=!1;for(const e of t.error.issues){if("unrecognized_keys"!==e.code)continue;const t=Ao(o,e.path);if(t&&"object"==typeof t&&!Array.isArray(t))for(const n of e.keys)Object.prototype.hasOwnProperty.call(t,n)&&(delete t[n],a=!0,r=!0)}if(!a){const r=structuredClone(o);let a=!1;for(const e of t.error.issues){if(!e.path.length\|\|"string"!=typeof e.path.at(-1))continue;const t=Ao(r,e.path.slice(0,-1)),n=e.path.at(-1);t&&"object"==typeof t&&!Array.isArray(t)&&Object.prototype.hasOwnProperty.call(t,n)&&(delete t[n],a=!0)}if(a){const t=e.safeParse(r);if(t.success)return i?.({instanceId:s,field:n}),t.data}break}}i?.({instanceId:s,field:n})}function Ao(e,t){let n=e;for(const e of t){if(!n\|\|"object"!=typeof n)return;n=n[e]}return n}function _o(e,t){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const n=e;return Object.fromEntries(t.filter(e=>Object.prototype.hasOwnProperty.call(n,e)).map(e=>[e,n[e]]))}const Eo=a.z.object({instanceId:Jn.optional(),projectId:Jn.optional(),source:as.optional(),nodeId:Jn.optional(),runtimeId:Jn.optional(),imageSelection:pi.optional(),instanceVersion:a.z.string().trim().max(80).optional(),protocolVersion:Mn,build:Vi.optional(),controlMode:a.z.enum(["standalone","controlled"]).default("controlled"),capabilities:Gn.default(qn),appInventory:Oi.optional(),target:co.optional(),workspace:uo.default({status:"unknown"}),registrationToken:a.z.string().trim().max(240).optional(),processIncarnationId:a.z.string().trim().min(1).max(120).optional()}).strict().superRefine((e,t)=>{Ln.has(e.protocolVersion)&&!e.appInventory&&t.addIssue({code:"custom",path:["appInventory"],message:"Current protocol register payload requires appInventory."})}),wo=a.z.object({status:po.shape.status.optional(),health:po.shape.health.optional(),protocolVersion:Mn,build:Vi.optional(),capabilities:po.shape.capabilities.optional(),appInventory:Oi.optional(),apps:po.shape.apps.optional(),aiSessions:po.shape.aiSessions.optional(),triggers:po.shape.triggers.optional(),workspace:uo.optional(),target:co.optional(),processIncarnationId:a.z.string().trim().min(1).max(120).optional()}).strict().superRefine((e,t)=>{Ln.has(e.protocolVersion)&&!e.appInventory&&t.addIssue({code:"custom",path:["appInventory"],message:"Current protocol heartbeat payload requires appInventory."})}),To=a.z.enum(["web","telegram","wechat","dingding","lark"]);function bo(e,t){let n=Oo(t);for(let t=0;t<100;t+=1){const t=e.safeParse(n);if(t.success)return t;const i=So(t.error.issues);let s=!1;for(const e of i){const t=No(n,e.path);if(t&&"object"==typeof t&&!Array.isArray(t))for(const n of e.keys)Object.prototype.hasOwnProperty.call(t,n)&&(delete t[n],s=!0)}if(!s)return t}return e.safeParse(n)}function So(e,t=[]){const n=[];for(const i of e){if("unrecognized_keys"===i.code){n.push({code:"unrecognized_keys",keys:i.keys,path:[...t,...i.path]});continue}if("invalid_union"!==i.code\|\|!Array.isArray(i.errors))continue;const e=i.errors.filter(e=>Array.isArray(e));if(!e.length)continue;const s=e.reduce((e,t)=>vo(t)<vo(e)?t:e);n.push(...So(s,[...t,...i.path]))}return n}function vo(e){return e.reduce((e,t)=>{if("unrecognized_keys"===t.code)return e;if("invalid_union"!==t.code\|\|!Array.isArray(t.errors))return e+1;const n=t.errors.filter(e=>Array.isArray(e));return e+(n.length?Math.min(...n.map(vo)):1)},0)}function No(e,t){let n=e;for(const e of t){if(!n\|\|"object"!=typeof n)return;n=n[e]}return n}function Oo(e){return Array.isArray(e)?e.map(Oo):e&&"object"==typeof e?Object.getPrototypeOf(e)!==Object.prototype&&null!==Object.getPrototypeOf(e)?e:Object.fromEntries(Object.entries(e).map(([e,t])=>[e,Oo(t)])):e}function zo(e,t,n={}){return new Promise((i,s)=>{if(n.signal?.aborted)return void s(Object.assign(new Error(`${e} was aborted.`),{code:"RUNTIME_COMMAND_ABORTED"}));const o=l.spawn(e,t,{stdio:["ignore","pipe","pipe"]}),r=[],a=[];let c=!1;const d=n.timeoutMs?setTimeout(()=>{c=!0,o.kill("SIGKILL")},n.timeoutMs):void 0;let u=!1;const p=()=>{u=!0,o.kill("SIGKILL")},m=()=>{d&&clearTimeout(d),n.signal?.removeEventListener("abort",p)};n.signal?.addEventListener("abort",p,{once:!0}),d?.unref?.(),o.stdout.on("data",e=>r.push(Buffer.from(e))),o.stderr.on("data",e=>a.push(Buffer.from(e))),o.on("error",e=>{m(),s(e)}),o.on("close",t=>{m();const o={stdout:Buffer.concat(r).toString("utf8").trim(),stderr:Buffer.concat(a).toString("utf8").trim()};if(c){const t=new Error(`${e} timed out after ${n.timeoutMs}ms`);return Object.assign(t,{statusCode:504,code:"RUNTIME_COMMAND_TIMEOUT",details:o}),void s(t)}if(u)return void s(Object.assign(new Error(`${e} was aborted.`),{code:"RUNTIME_COMMAND_ABORTED",details:o}));if(0===t)return void i(o);const d=new Error(o.stderr\|\|`${e} exited with code ${t}`);Object.assign(d,{statusCode:502,code:"RUNTIME_EXECUTOR_FAILED",details:o}),s(d)})})}a.z.object({id:Jn,channel:To,name:a.z.string().trim().min(1).max(160),enabled:a.z.boolean().default(!1),token:a.z.string().trim().max(4096).optional(),defaultChatId:a.z.string().trim().max(240).optional(),allowedUserIds:a.z.array(a.z.string().trim().min(1).max(240)).default([]),pollIntervalMs:a.z.number().int().positive().max(6e4).default(3e3),settings:a.z.record(a.z.string(),a.z.unknown()).default({}),createdAt:Qn,updatedAt:Qn}).strict(),a.z.object({id:Jn,channel:To,bridgeId:Jn.optional(),chatSessionId:a.z.string().trim().min(1).max(240),userId:a.z.string().trim().max(240).optional(),activeProjectId:Jn.optional(),activeInstanceId:Jn.optional(),activeAiSessionId:a.z.string().trim().min(1).max(120).optional(),lastUsedAt:Qn,createdAt:Qn,updatedAt:Qn}).strict(),a.z.object({source:a.z.object({type:a.z.literal("chat-gateway").default("chat-gateway"),channel:To,bridgeId:Jn.optional(),chatSessionId:a.z.string().trim().min(1).max(240),userId:a.z.string().trim().max(240).optional()}).strict(),message:a.z.object({text:a.z.string().trim().max(2e4).default(""),attachments:a.z.array(Qe).max(6).default([])}).strict().superRefine((e,t)=>{e.attachments.reduce((e,t)=>e+("inline"===t.source.type?t.size:0),0)>fe&&t.addIssue({code:a.z.ZodIssueCode.custom,path:["attachments"],message:"Inline attachments must be 41943040 bytes or less in total."})}),target:a.z.object({instanceId:Jn,aiSessionId:a.z.string().trim().min(1).max(120)}).strict().optional()}).strict(),a.z.object({id:Jn,instanceId:Jn,projectId:Jn.optional(),aiSessionId:a.z.string().trim().min(1).max(120),providerSessionId:a.z.string().trim().max(240).optional(),result:a.z.string().default(""),timeoutMs:a.z.number().positive().optional(),source:a.z.string().trim().max(120).optional(),kind:a.z.enum(["task","approval"]).default("task"),status:a.z.enum(["pending","unreachable"]).default("pending"),error:a.z.string().trim().max(2048).optional(),lastSeenAt:Qn}).strict();const Co=(e,t,n={})=>new Promise((i,s)=>{if(n.signal?.aborted)return void s(Object.assign(new Error(`${e} was aborted.`),{code:"RUNTIME_COMMAND_ABORTED"}));const o=[];let r,a=!1,c=!1;try{r=u.spawn(e,t,{name:"xterm-256color",cols:n.cols\|\|120,rows:n.rows\|\|40,cwd:process.cwd(),env:process.env})}catch(e){return void s(e)}const d=n.timeoutMs?setTimeout(()=>{a=!0,r.kill("SIGKILL")},n.timeoutMs):void 0,l=()=>{c=!0;try{r.kill("SIGKILL")}catch{}};n.signal?.addEventListener("abort",l,{once:!0}),d?.unref?.(),r.onData(e=>{o.push(e),n.onData?.(e)}),r.onExit(({exitCode:t})=>{d&&clearTimeout(d),n.signal?.removeEventListener("abort",l);const r={stdout:o.join(""),stderr:""};a?s(Object.assign(new Error(`${e} timed out after ${n.timeoutMs}ms`),{statusCode:504,code:"RUNTIME_COMMAND_TIMEOUT",details:r})):c?s(Object.assign(new Error(`${e} was aborted.`),{code:"RUNTIME_COMMAND_ABORTED",details:r})):0!==t?s(Object.assign(new Error(r.stdout.replace(/\u001b\[[0-?][ -/][@-~]/g,"").split(/\r?\n/).map(e=>e.trim()).filter(Boolean).at(-1)\|\|`${e} exited with code ${t}`),{statusCode:502,code:"RUNTIME_EXECUTOR_FAILED",details:r})):i(r)})});class Ro{inFlight=new Map;runCommand;runTerminalCommand;constructor(e=zo,t){this.runCommand=e,this.runTerminalCommand=t\|\|function(e){return e===zo?Co:async(t,n,i={})=>{const s=await e(t,n,{timeoutMs:i.timeoutMs,signal:i.signal});return s.stdout&&i.onData?.(s.stdout),s.stderr&&i.onData?.(s.stderr),s}}(e)}ensure(e,t,n,i){const s=ai(e),o=this.inFlight.get(s);if(o)return t&&(o.phaseListeners.add(t),o.phase&&t(o.phase)),n&&(o.terminalListeners.add(n),o.terminalTail&&n({sequence:o.terminalSequence,data:o.terminalTail,replay:!0})),this.bindAbort(o,i),o.promise;const r=new Set,a=new Set;t&&r.add(t),n&&a.add(n);const c={promise:Promise.resolve(void 0),controller:new AbortController,abortDisposers:new Set,phaseListeners:r,terminalListeners:a,terminalSequence:0,terminalTail:""};return this.bindAbort(c,i),c.promise=this.ensureOnce(s,e=>{c.phase=e,r.forEach(t=>t(e))},e=>{c.terminalSequence+=1,c.terminalTail=`${c.terminalTail}${e}`.slice(-262144);const t={sequence:c.terminalSequence,data:e};a.forEach(e=>e(t))},c.controller.signal).finally(()=>{this.inFlight.delete(s);for(const e of c.abortDisposers)e();c.abortDisposers.clear()}),this.inFlight.set(s,c),c.promise}bindAbort(e,t){if(!t)return;if(t.aborted)return void e.controller.abort();const n=()=>e.controller.abort();t.addEventListener("abort",n,{once:!0}),e.abortDisposers.add(()=>t.removeEventListener("abort",n))}async ensureOnce(e,t,n,i){t("checking-image");let s=await this.inspect(e,i).catch(e=>{if(i.aborted)throw e}),o=!1;s\|\|(t("pulling-image"),await this.runTerminalCommand("docker",["pull",e],{cols:120,rows:40,signal:i,onData:n}),o=!0,s=await this.inspect(e,i)),t("resolving-image");const r=(a=s,Array.isArray(a.RepoDigests)?a.RepoDigests.filter(e=>"string"==typeof e):[]).find(e=>/@sha256:[a-fA-F0-9]{64}$/.test(e));var a;const c=r?.split("@").at(-1)?.toLowerCase();return{requestedReference:e,...c?{resolvedDigest:c}:{},resolvedReference:r\|\|e,pulled:o}}async inspect(e,t){const n=await this.runCommand("docker",["image","inspect",e,"--format","{{json .}}"],{signal:t});return JSON.parse(n.stdout.trim()\|\|"{}")}}function xo(e){if(!e)return;const t=/^([0-9]+(?:\.[0-9]+)?)\s(B\|kB\|MB\|GB\|TB)$/i.exec(e.trim());if(!t)return;const n=Number(t[1]){b:1,kb:1e3,mb:1e6,gb:1e9,tb:1e12}[t[2].toLowerCase()];return Number.isSafeInteger(Math.round(n))?Math.round(n):void 0}const ko="/run/task-handoff/bootstrap",Do=`${ko}/entrypoint.sh`,Po="/bin/bash",Lo=`${ko}/runtime-installer.mjs`,Mo="/opt/task-handoff/instance-runtime";function jo(e,t){return{role:"runtime",name:`${nr(e)}-runtime`,mountPath:Mo,labels:{"task-handoff.owner":"task-handoff","task-handoff.instance-id":e,"task-handoff.node-id":t,"task-handoff.volume-role":"runtime"}}}function Uo(e){return function(e,t,n){const i=nr(e);return[{role:"data",suffix:"data",mountPath:"/data"},{role:"agent-home",suffix:"agent-home",mountPath:"/home/agent"},..."local-folder"===n.type?[]:[{role:"workspace",suffix:"workspace",mountPath:"/workspace"}]].map(({role:n,suffix:s,mountPath:o})=>({role:n,name:`${i}-${s}`,mountPath:o,labels:{"task-handoff.owner":"task-handoff","task-handoff.instance-id":e,"task-handoff.node-id":t,"task-handoff.volume-role":n}}))}(e.instance.id,e.node?.id\|\|"node_unset",e.project.source)}const Fo=new Set(["TASK_HANDOFF_REGISTRATION_TOKEN","OPENAI_API_KEY","OPENAI_BASE_URL","CODEX_MODEL","TASK_HANDOFF_CODEX_BASE_URL","TASK_HANDOFF_CODEX_MODEL","TASK_HANDOFF_CODEX_MODEL_ID","ANTHROPIC_API_KEY","ANTHROPIC_BASE_URL","CLAUDE_MODEL","TASK_HANDOFF_CLAUDE_MODEL","TASK_HANDOFF_CLAUDE_MODEL_ID"]);function $o(e,t=[]){const n=e&&"object"==typeof e&&!Array.isArray(e)?e:{},i=n.Config&&"object"==typeof n.Config&&!Array.isArray(n.Config)?n.Config:n,s=new Set;for(const e of Array.isArray(i.Env)?i.Env:[]){if("string"!=typeof e)continue;const n=e.indexOf("="),i=-1===n?e:e.slice(0,n),o=-1===n?"":e.slice(n+1);Fo.has(i)&&s.add(`Config.Env.${i}`),t.some(e=>e&&o.includes(e))&&s.add(`Config.Env.${i\|\|"unknown"}`)}if(i.Labels&&"object"==typeof i.Labels&&!Array.isArray(i.Labels))for(const[e,n]of Object.entries(i.Labels))(Fo.has(e)\|\|"string"==typeof n&&t.some(e=>e&&n.includes(e)))&&s.add(`Config.Labels.${e}`);if(s.size)throw Object.assign(new Error(`Docker configuration contains instance-private values in ${[...s].sort().join(", ")}.`),{statusCode:409,code:"ENVIRONMENT_TEMPLATE_SECRET_IN_DOCKER_CONFIG",findings:[...s].sort()})}class Ho{runCommand;publishHost;images;launcherAssetsDir;portResolutionRetryDelaysMs;constructor(e=zo,t={}){this.runCommand=e,this.images=t.imageService\|\|new Ro(e),this.publishHost=t.publishHost\|\|"127.0.0.1",this.launcherAssetsDir=t.launcherAssetsDir\|\|Wo(),this.portResolutionRetryDelaysMs=t.portResolutionRetryDelaysMs?.length?t.portResolutionRetryDelaysMs:[0,100,250,500,1e3]}async start(e){or(e);const t=e.instance.runtime.containerName\|\|nr(e.instance.id),i=await this.inspectContainerForStart(t);if(i){er(t,i.id,e.instance.runtime.containerId,"before start","RUNTIME_EXECUTOR_FAILED");const s=i.labels["task-handoff.instance-id"];if(s!==e.instance.id)throw Yo("RUNTIME_EXECUTOR_FAILED",`Docker container ${t} belongs to ${s\|\|"an unknown instance"}, not ${e.instance.id}.`);const o=i.mounts.find(e=>"bind"===e.type&&e.destination===ko);if("1"!==i.labels["task-handoff.bootstrap-abi"]\|\|i.entrypoint[0]!==Po\|\|i.command[0]!==Do\|\|!o?.source\|\|n.resolve(o.source)!==n.resolve(this.launcherAssetsDir)){const n=new Set(Uo(e).flatMap(e=>i.mounts.some(t=>"volume"===t.type&&t.name===e.name&&t.destination===e.mountPath)?[e.name]:[]));return await this.createPersistentVolumes(e,n),this.recreateWithAuthoritativeBootstrap(e,t,i)}await this.createRuntimeVolume(e),await this.validatePersistentVolumes(e,i.mounts);try{await this.runCommand("docker",["start",t])}catch(e){throw Yo("RUNTIME_EXECUTOR_FAILED",`Could not start Docker container ${t}.`,e)}return this.resumedContainerResult(e,t,i.id)}if(e.instance.environmentTemplateOrigin){const t=await this.inspectEnvironmentTemplateImage(e.instance.environmentTemplateOrigin.imageId);if(t.imageId!==e.instance.environmentTemplateOrigin.imageId\|\|t.platform!==e.instance.environmentTemplateOrigin.platform\|\|t.architecture!==e.instance.environmentTemplateOrigin.architecture)throw Object.assign(new Error(`Environment template image identity or platform changed for instance ${e.instance.id}.`),{statusCode:409,code:"ENVIRONMENT_TEMPLATE_IMAGE_IDENTITY_MISMATCH"})}else await this.images.ensure(e.image.resolvedReference\|\|e.image.requestedReference);let s;await this.createPersistentVolumes(e),"local-folder"!==e.project.source.type&&await this.provisionGitWorkspace(e);try{s=await this.runCommand("docker",sr(e,t,{publishHost:this.publishHost,launcherAssetsDir:this.launcherAssetsDir}))}catch(e){throw Yo("RUNTIME_EXECUTOR_FAILED",`Could not create Docker container ${t}.`,e)}return e.completeGitWorkspaceProvisioning?.(),this.bootstrapResult(e,t,s.stdout\|\|void 0)}async provisionGitWorkspace(e){const i=e.gitWorkspaceProvisioning;if(!i)throw Yo("GIT_WORKSPACE_PROVISIONING_MISSING",`Git workspace provisioning input is missing for ${e.instance.id}.`);const s=`${nr(e.instance.id)}-git-provision`,o=t.mkdtempSync(n.join(c.tmpdir(),"task-handoff-git-auth-"));t.chmodSync(o,448);try{await this.runCommand("docker",["rm","-f",s],{timeoutMs:3e4}).catch(()=>({stdout:"",stderr:""})),this.materializeGitProvisioningAuth(o,i);const t=function(e,t,i,s={}){const o=e.gitWorkspaceProvisioning;if(!o\|\|"local-folder"===e.project.source.type)throw Object.assign(new Error("Git provisioning requires a Git source and operation input."),{code:"GIT_WORKSPACE_PROVISIONING_INVALID",statusCode:400});const r=n.resolve(s.launcherAssetsDir\|\|Wo()),a=Uo(e).find(e=>"workspace"===e.role);if(!a)throw Object.assign(new Error("Git workspace volume was not found."),{code:"GIT_WORKSPACE_VOLUME_MISSING",statusCode:409});const c=["run","--rm","--name",t,"--label","task-handoff.role=git-provisioning","--label",`task-handoff.instance-id=${e.instance.id}`,"--user","0:0","--network","bridge","--security-opt","no-new-privileges","--cap-drop","ALL","--cap-add","CHOWN","--cap-add","SETUID","--cap-add","SETGID","--cap-add","DAC_OVERRIDE","--mount",`type=volume,src=${a.name},dst=/workspace`,"--mount",`type=bind,src=${r},dst=${ko},readonly`,"--tmpfs","/run/task-handoff/git-runtime:rw,nosuid,nodev,exec,mode=0700"];o.credentials.length&&c.push("--mount",`type=bind,src=${n.resolve(i)},dst=/run/task-handoff/git-auth,readonly`);const d=(e,t)=>c.push("-e",`${e}=${t}`);return d("TASK_HANDOFF_GIT_URL",o.remoteUrl),d("TASK_HANDOFF_INSTANCE_ID",e.instance.id),"commit"===o.ref.type?d("TASK_HANDOFF_GIT_COMMIT",o.ref.commit):d("TASK_HANDOFF_GIT_REF",o.ref.name),o.clone.depth&&d("TASK_HANDOFF_GIT_DEPTH",String(o.clone.depth)),d("TASK_HANDOFF_GIT_SUBMODULES",o.clone.submodules?"true":"false"),d("TASK_HANDOFF_GIT_LFS",o.clone.lfs?"true":"false"),o.clone.subdirectory&&d("TASK_HANDOFF_WORKSPACE_SUBDIRECTORY",o.clone.subdirectory),c.push("--entrypoint","/bin/bash",e.instance.environmentTemplateOrigin?.imageId\|\|e.image.resolvedReference\|\|e.image.requestedReference,`${ko}/git-provision.sh`),c}(e,s,o,{launcherAssetsDir:this.launcherAssetsDir});await this.runCommand("docker",t,{timeoutMs:9e5,signal:e.signal})}catch(t){throw function(e,t){const n=t&&"object"==typeof t?t:void 0,i="string"==typeof n?.code?n.code:"";if("RUNTIME_COMMAND_TIMEOUT"===i)return Yo("GIT_WORKSPACE_PROVISIONING_TIMEOUT",`Git workspace provisioning timed out for ${e}.`);if("RUNTIME_COMMAND_ABORTED"===i)return Yo("GIT_WORKSPACE_PROVISIONING_CANCELLED",`Git workspace provisioning was cancelled for ${e}.`);const s=Qo(t)\|\|"",o=s.match(/TASK_HANDOFF_GIT_PROVISIONING_ERROR=([A-Z_]+)/)?.[1];return Yo(`GIT_WORKSPACE_PROVISIONING_${o&&Jo.has(o)?o:"FAILED"}`,`Could not provision Git workspace for ${e}.`)}(e.instance.id,t)}finally{await this.runCommand("docker",["rm","-f",s],{timeoutMs:3e4}).catch(()=>({stdout:"",stderr:""})),t.rmSync(o,{recursive:!0,force:!0})}}materializeGitProvisioningAuth(e,i){const s=(e,i,s)=>{const o=n.join(e,i);t.writeFileSync(o,s,{encoding:"utf8",mode:384}),t.chmodSync(o,384)};i.credentials.forEach((i,o)=>{const r=n.join(e,`credential-${o}`);if(t.mkdirSync(r,{recursive:!0,mode:448}),t.chmodSync(r,448),s(r,"scope.json",JSON.stringify(i.payload.credential.scope)),"https-token"===i.payload.secret.kind)return s(r,"username",i.payload.secret.username),void s(r,"token",i.payload.secret.token);s(r,"private-key",i.payload.secret.privateKey),s(r,"known_hosts",i.payload.secret.pinnedKnownHosts),i.payload.secret.passphrase&&s(r,"passphrase",i.payload.secret.passphrase),s(r,"ssh-askpass.sh",`#!/usr/bin/env bash\ncat /run/task-handoff/git-runtime/credential-${o}/passphrase 2>/dev/null \|\| true\n`)})}async recreateWithAuthoritativeBootstrap(e,t,n){const i=`${t}-pre-bootstrap-${n.id.slice(0,12)}`;n.running&&await this.runCommand("docker",["stop",t]);try{await this.runCommand("docker",["rename",t,i])}catch(e){throw n.running&&await this.runCommand("docker",["start",t]).catch(()=>({stdout:"",stderr:""})),Yo("RUNTIME_EXECUTOR_FAILED",`Could not preserve Docker container ${t} before bootstrap migration.`,e)}try{const s=await this.runCommand("docker",sr(e,t,{publishHost:this.publishHost,launcherAssetsDir:this.launcherAssetsDir,imageReference:n.image}));return this.bootstrapResult(e,t,s.stdout\|\|void 0,i)}catch(e){throw await this.runCommand("docker",["rm","-f",t]).catch(()=>({stdout:"",stderr:""})),await this.runCommand("docker",["rename",i,t]).catch(()=>({stdout:"",stderr:""})),n.running&&await this.runCommand("docker",["start",t]).catch(()=>({stdout:"",stderr:""})),Yo("RUNTIME_EXECUTOR_FAILED",`Could not recreate Docker container ${t} with the node-agent bootstrap.`,e)}}async inspectContainerConfigSecurity(e,t){$o(await this.runCommand("docker",["inspect","--format","{{json .}}",e]).then(e=>JSON.parse(e.stdout\|\|"{}")).catch(t=>{throw Yo("ENVIRONMENT_TEMPLATE_CONTAINER_INSPECT_FAILED",`Could not inspect Docker container ${e}.`,t)}),t)}async inspectImageConfigSecurity(e,t){$o(await this.runCommand("docker",["image","inspect","--format","{{json .}}",e]).then(e=>JSON.parse(e.stdout\|\|"{}")).catch(e=>{throw Yo("ENVIRONMENT_TEMPLATE_IMAGE_INSPECT_FAILED","Could not inspect Docker image configuration.",e)}),t)}async commitEnvironmentTemplate(e,t,n){const i=await this.inspectContainerId(e);if(!i)throw Yo("ENVIRONMENT_TEMPLATE_CONTAINER_NOT_FOUND",`Docker container ${e} does not exist.`);er(e,i,t,"before environment template commit","ENVIRONMENT_TEMPLATE_CONTAINER_IDENTITY_MISMATCH");try{const t=(await this.runCommand("docker",["commit",e,n])).stdout.trim();if(!t)throw new Error("Docker commit did not return an image id.");return t}catch(t){throw Yo("ENVIRONMENT_TEMPLATE_COMMIT_FAILED",`Could not save Docker container ${e} as an environment template.`,t)}}async inspectEnvironmentTemplateImage(e){try{const t=await this.runCommand("docker",["image","inspect","--format","{{json .}}",e]),n=JSON.parse(t.stdout\|\|"{}"),i="string"==typeof n.Id?n.Id:"",s=Ko(n.Os),o=Go(n.Architecture),r="number"==typeof n.Size?n.Size:Number.NaN;if(!/^sha256:[a-f0-9]{64}$/.test(i)\|\|!s\|\|!o\|\|!Number.isSafeInteger(r)\|\|r<0)throw new Error("Docker image inspection did not return a valid immutable identity.");return{imageId:i,platform:s,architecture:o,sizeBytes:r}}catch(e){throw Yo("ENVIRONMENT_TEMPLATE_IMAGE_INSPECT_FAILED","Could not inspect the committed environment template image.",e)}}async untagEnvironmentTemplate(e,t){try{const n=t\|\|(await this.inspectEnvironmentTemplateImage(e)).imageId;return await this.runCommand("docker",["tag",n,Xo(n)]),await this.runCommand("docker",["image","rm",e]),n}catch(e){const t=Qo(e)?.toLowerCase()\|\|"";if(t.includes("no such image")\|\|t.includes("no such object"))return;throw Yo("ENVIRONMENT_TEMPLATE_UNTAG_FAILED","Could not remove the environment template tag.",e)}}async garbageCollectEnvironmentTemplateImage(e){try{try{await this.runCommand("docker",["image","rm",Xo(e)])}catch(e){const t=Qo(e)?.toLowerCase()\|\|"";if(t.includes("being used by")\|\|t.includes("is referenced")\|\|t.includes("conflict"))return!1;if(!t.includes("no such image")&&!t.includes("no such object"))throw e}return await this.runCommand("docker",["image","rm",e]),!0}catch(e){const t=Qo(e)?.toLowerCase()\|\|"";if(t.includes("being used by")\|\|t.includes("is referenced")\|\|t.includes("conflict"))return!1;if(t.includes("no such image")\|\|t.includes("no such object"))return!0;throw Yo("ENVIRONMENT_TEMPLATE_GC_FAILED","Could not garbage collect the environment template image.",e)}}async createPersistentVolumes(e,t=new Set){const n=jo(e.instance.id,e.node?.id\|\|"node_unset");for(const i of[...Uo(e),n])await this.createVolume(i),await this.validateOwnedVolume(e.instance.id,i,t.has(i.name))}async createRuntimeVolume(e){await this.createVolume(jo(e.instance.id,e.node?.id\|\|"node_unset"))}async createVolume(e){const t=["volume","create"];for(const[n,i]of Object.entries(e.labels).sort(([e],[t])=>e.localeCompare(t)))t.push("--label",`${n}=${i}`);t.push(e.name);try{await this.runCommand("docker",t)}catch(t){throw Yo("INSTANCE_VOLUME_CREATE_FAILED",`Could not create managed volume ${e.name}.`,t)}}async validatePersistentVolumes(e,t){for(const n of Uo(e)){await this.validateOwnedVolume(e.instance.id,n);const i=t.find(e=>"volume"===e.type&&e.destination===n.mountPath);if(!i\|\|i.name!==n.name)throw Object.assign(new Error(`Docker container mount for ${n.role} does not match managed volume ${n.name}.`),{statusCode:409,code:"INSTANCE_VOLUME_MOUNT_IDENTITY_MISMATCH"})}const i=jo(e.instance.id,e.node?.id\|\|"node_unset");await this.validateOwnedVolume(e.instance.id,i);const s=t.find(e=>"volume"===e.type&&e.destination===i.mountPath);if(!s\|\|s.name!==i.name)throw Object.assign(new Error(`Docker container runtime mount does not match ${i.name}.`),{statusCode:409,code:"INSTANCE_VOLUME_MOUNT_IDENTITY_MISMATCH"});if("local-folder"===e.project.source.type){const i=t.find(t=>t.destination===(e.project.workspacePolicy.path\|\|"/workspace"));if(!i\|\|"bind"!==i.type\|\|n.resolve(i.source\|\|"")!==n.resolve(e.project.source.path))throw Object.assign(new Error(`Docker container workspace bind does not match local folder ${e.project.source.path}.`),{statusCode:409,code:"INSTANCE_WORKSPACE_MOUNT_IDENTITY_MISMATCH"})}}async validateOwnedVolume(e,t,n=!1){let i;try{i=await this.runCommand("docker",["volume","inspect","--format","{{json .}}",t.name])}catch(e){throw Yo("INSTANCE_VOLUME_INSPECT_FAILED",`Could not inspect managed volume ${t.name}.`,e)}try{const s=JSON.parse(i.stdout\|\|"{}"),o=s.Labels&&"object"==typeof s.Labels&&!Array.isArray(s.Labels)?s.Labels:{},r=s.Name===t.name&&"task-handoff"===o["task-handoff.owner"]&&o["task-handoff.instance-id"]===e&&o["task-handoff.volume-role"]===t.role,a=n&&s.Name===t.name&&0===Object.keys(o).length;if(!r&&!a)throw new Error("volume name or ownership labels do not match")}catch(n){throw Object.assign(new Error(`Managed volume ${t.name} identity does not match instance ${e}.`,{cause:n}),{statusCode:409,code:"INSTANCE_VOLUME_IDENTITY_MISMATCH"})}}async runningResult(e,t,n){const i=await this.publishedEndpoint(t),s=e.node?.id\|\|"node_unset",o=e.runtime?.id\|\|"runtime_local_docker";return{status:"registering",health:"unknown",connectionStatus:"online",agentStatus:"unknown",targetStatus:"unknown",uiAccessStatus:"unknown",target:{strategy:"direct-port",status:"reachable",...i},workspace:{mode:e.project.workspacePolicy.mode,status:"pending",path:e.project.workspacePolicy.path},runtime:{...e.instance.runtime,kind:"docker",containerName:t,...n?{containerId:n}:{},labels:{...e.instance.runtime.labels,"task-handoff.instance-id":e.instance.id,"task-handoff.project-id":e.project.id,"task-handoff.node-id":s,"task-handoff.runtime-id":o,"task-handoff.image-id":e.image.id}}}}async resumedContainerResult(e,t,n){const i=this.bootstrapResult(e,t,n);return{...i,target:{...i.target,...await this.publishedEndpoint(t)}}}async publishedEndpoint(e){const t=`http://127.0.0.1:${await this.containerPort(e,"8080/tcp")}`;return{web:t,api:`${t}/api`}}async resolveInstanceWeb(e){const t=e.instance.runtime.containerName\|\|nr(e.instance.id),n=await this.inspectContainerId(t);if(!n)throw Yo("INSTANCE_RUNTIME_ENDPOINT_UNAVAILABLE",`Docker container ${t} does not exist.`);return er(t,n,e.instance.runtime.containerId,"while resolving its web endpoint","INSTANCE_RUNTIME_ENDPOINT_UNAVAILABLE"),(await this.publishedEndpoint(t)).web}bootstrapResult(e,t,n,i){return{status:"starting",health:"unknown",connectionStatus:"unknown",agentStatus:"unknown",targetStatus:"unknown",uiAccessStatus:"unknown",target:{strategy:"direct-port",status:"unknown"},workspace:{mode:e.project.workspacePolicy.mode,status:"pending",path:e.project.workspacePolicy.path},runtime:{...e.instance.runtime,kind:"docker",containerName:t,...n?{containerId:n}:{},labels:{...e.instance.runtime.labels,"task-handoff.bootstrap-abi":"1",...i?{"task-handoff.bootstrap-backup":i}:{}}}}}async stop(e){const t=e.instance.runtime.containerName\|\|nr(e.instance.id);try{await this.runCommand("docker",["stop",t])}catch(e){if(!Zo(e))throw Yo("RUNTIME_EXECUTOR_FAILED",`Could not stop Docker container ${t}.`,e)}return{status:"stopped",health:"unknown",connectionStatus:"offline",target:{...e.instance.target,status:"unknown"},runtime:e.instance.runtime}}async restart(e,t){or(e);const n=e.instance.runtime.containerName\|\|nr(e.instance.id),i=await this.inspectContainerId(n);if(!i)throw Yo("INSTANCE_RUNTIME_RESTART_FAILED",`Docker container ${n} does not exist.`);er(n,i,t,"before restart","INSTANCE_RUNTIME_RESTART_FAILED"),await this.runCommand("docker",["restart",n]);const s=await this.inspectContainerId(n);if(!s\|\|s!==i)throw Yo("INSTANCE_RUNTIME_RESTART_FAILED",`Docker container identity changed while restarting ${n}.`);return er(n,s,t,"after restart","INSTANCE_RUNTIME_RESTART_FAILED"),this.runningResult(e,n,s)}async delete(e,t){const n=e.instance.runtime.containerName\|\|nr(e.instance.id),i=await this.inspectContainerForStart(n),s=new Set;if(i){er(n,i.id,e.instance.runtime.containerId,"before delete","RUNTIME_EXECUTOR_FAILED");const t=i.labels["task-handoff.instance-id"];if(t!==e.instance.id)throw Yo("RUNTIME_EXECUTOR_FAILED",`Docker container ${n} belongs to ${t\|\|"an unknown instance"}, not ${e.instance.id}.`);for(const t of Uo(e))i.mounts.some(e=>"volume"===e.type&&e.name===t.name&&e.destination===t.mountPath)&&s.add(t.name);try{await this.runCommand("docker",["rm","-f",i.id])}catch(e){if(!Zo(e))throw Yo("RUNTIME_EXECUTOR_FAILED",`Could not delete Docker container ${n}.`,e)}}const o=[];for(const n of Uo(e))if(t.deleteVolumes)try{const t=await this.inspectVolumeForDelete(n.name);if(!t){o.push({role:n.role,name:n.name,mountPath:n.mountPath,status:"missing"});continue}const i=t.name===n.name&&"task-handoff"===t.labels["task-handoff.owner"]&&t.labels["task-handoff.instance-id"]===e.instance.id&&t.labels["task-handoff.volume-role"]===n.role,r=s.has(n.name)&&t.name===n.name&&0===Object.keys(t.labels).length;if(!i&&!r)throw Object.assign(new Error(`Managed volume ${n.name} ownership does not match instance ${e.instance.id}.`),{code:"INSTANCE_VOLUME_IDENTITY_MISMATCH"});await this.runCommand("docker",["volume","rm",n.name]),o.push({role:n.role,name:n.name,mountPath:n.mountPath,status:"deleted"})}catch(e){o.push({role:n.role,name:n.name,mountPath:n.mountPath,status:"failed",error:{code:"object"==typeof e&&e&&"code"in e&&"string"==typeof e.code?e.code:"INSTANCE_VOLUME_DELETE_FAILED",message:e instanceof Error?e.message:String(e)}})}else o.push({role:n.role,name:n.name,mountPath:n.mountPath,status:"retained"});return await this.deleteRuntimeVolume(e),wi.parse({instanceId:e.instance.id,containerDeleted:!0,completed:o.every(e=>"failed"!==e.status),deletedVolumes:o.filter(e=>"deleted"===e.status\|\|"missing"===e.status),retainedVolumes:o.filter(e=>"retained"===e.status),volumeResults:o})}async deleteRuntimeVolume(e){const t=jo(e.instance.id,e.node?.id\|\|"node_unset"),n=await this.inspectVolumeForDelete(t.name);if(n){if(n.name!==t.name\|\|"task-handoff"!==n.labels["task-handoff.owner"]\|\|n.labels["task-handoff.instance-id"]!==e.instance.id\|\|"runtime"!==n.labels["task-handoff.volume-role"])throw Yo("INSTANCE_VOLUME_IDENTITY_MISMATCH",`Runtime volume ${t.name} ownership does not match instance ${e.instance.id}.`);try{await this.runCommand("docker",["volume","rm",t.name])}catch(e){throw Yo("INSTANCE_VOLUME_DELETE_FAILED",`Could not delete runtime volume ${t.name}.`,e)}}}async inspectVolumeForDelete(e){try{const t=await this.runCommand("docker",["volume","inspect","--format","{{json .}}",e]),n=JSON.parse(t.stdout\|\|"{}");return{name:"string"==typeof n.Name?n.Name:"",labels:n.Labels&&"object"==typeof n.Labels&&!Array.isArray(n.Labels)?Object.fromEntries(Object.entries(n.Labels).filter(e=>"string"==typeof e[1])):{}}}catch(t){if(function(e){const t=Qo(e)?.toLowerCase()\|\|"";return t.includes("no such volume")\|\|t.includes("no such object")}(t))return;throw Yo("INSTANCE_VOLUME_INSPECT_FAILED",`Could not inspect managed volume ${e}.`,t)}}async installRuntime(e){const t=await this.installRuntimeRelease(e);er(e.containerName,t,e.expectedContainerId,"before runtime restart","INSTANCE_RUNTIME_RESTART_FAILED");try{await this.runCommand("docker",["restart",t])}catch(t){throw Yo("INSTANCE_RUNTIME_RESTART_FAILED",`Could not restart Docker container ${e.containerName}.`,t)}const n=await this.inspectContainerId(e.containerName);if(!n\|\|n!==t)throw Yo("INSTANCE_RUNTIME_RESTART_FAILED",`Docker container identity changed while updating ${e.containerName}.`);return er(e.containerName,n,e.expectedContainerId,"after runtime restart","INSTANCE_RUNTIME_RESTART_FAILED"),this.inspectRuntimeVersion(e.containerName)}async installRuntimeRelease(e){const t=await this.inspectContainerId(e.containerName);if(!t)throw Yo("INSTANCE_RUNTIME_INSTALL_FAILED",`Docker container ${e.containerName} does not exist.`);er(e.containerName,t,e.expectedContainerId,"before runtime install","INSTANCE_RUNTIME_INSTALL_FAILED");const n=`/opt/task-handoff/instance-runtime/incoming/task-handoff-runtime-${i=e.identity.version,i.replace(/[^0-9A-Za-z.+_-]/g,"-")}-${e.identity.sha256.slice(0,12)}.tar.gz`;var i;await this.runCommand("docker",["exec","--user","0",t,"install","-d","-o","root","-g","root","-m","0755","/opt/task-handoff/instance-runtime/incoming"]),await this.runCommand("docker",["cp",e.artifactPath,`${t}:${n}`]);try{await this.runCommand("docker",["exec","--user","0",t,"node",Lo,"install","--artifact",n,"--version",e.identity.version,"--sha256",e.identity.sha256,"--platform",e.identity.platform,"--arch",e.identity.arch,"--launcher-abi",String(e.identity.launcherAbi)])}catch(t){throw Yo("INSTANCE_RUNTIME_INSTALL_FAILED",`Could not install controlled-instance ${e.identity.version} in ${e.containerName}.`,t)}finally{await this.runCommand("docker",["exec","--user","0",t,"rm","-f",n]).catch(()=>({stdout:"",stderr:""}))}const s=await this.inspectContainerId(e.containerName);if(!s\|\|s!==t)throw Yo("INSTANCE_RUNTIME_INSTALL_FAILED",`Docker container identity changed while installing ${e.containerName}.`);return er(e.containerName,s,e.expectedContainerId,"after runtime install","INSTANCE_RUNTIME_INSTALL_FAILED"),t}async inspectRuntimeVersion(e){const t=await this.inspectContainerId(e);if(!t)return{};const n=await this.runCommand("docker",["exec","--user","agent",e,"node",Lo,"verify-active"]).catch(()=>{});if(!n?.stdout)return{containerId:t};try{const e=bo(Ki,JSON.parse(n.stdout));return e.success?{containerId:t,...e.data}:{containerId:t}}catch{return{containerId:t}}}async removeBootstrapBackup(e,t){const n=await this.inspectContainerForStart(e);if(n){if(n.labels["task-handoff.instance-id"]!==t)throw Yo("RUNTIME_EXECUTOR_FAILED",`Docker bootstrap backup ${e} does not belong to ${t}.`);await this.runCommand("docker",["rm","-f",e])}}async inspectRuntimeTarget(e){let t,n;if(e){const i=await this.runCommand("docker",["inspect","--format","{{json .}}",e]).then(e=>JSON.parse(e.stdout.trim()\|\|"{}")).catch(()=>{});if(t=i?.Platform,"string"==typeof i?.Image&&i.Image){const e=await this.runCommand("docker",["image","inspect","--format","{{json .}}",i.Image]).then(e=>JSON.parse(e.stdout.trim()\|\|"{}")).catch(()=>{});t=e?.Os\|\|t,n=e?.Architecture}}if(!t\|\|!n){const e=await this.runCommand("docker",["info","--format","{{json .}}"]).then(e=>JSON.parse(e.stdout.trim()\|\|"{}")).catch(e=>{throw Yo("INSTANCE_BASE_RUNTIME_INCOMPATIBLE","Could not inspect the Docker runtime target.",e)});t\|\|=e.OSType,n\|\|=e.Architecture}const i=Ko(t),s=Go(n);if(!i\|\|!s)throw Yo("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Docker reported an unsupported runtime target ${String(t\|\|"unknown")}/${String(n\|\|"unknown")}.`);return{platform:i,arch:s,launcherAbi:1}}async installRuntimeReleaseWithRecovery(e){const t=e.containerName,i=await this.inspectContainerForStart(t);if(!i)throw Yo("INSTANCE_RUNTIME_INSTALL_FAILED",`Docker container ${t} does not exist.`);if(er(t,i.id,e.expectedContainerId,"before runtime install recovery","INSTANCE_RUNTIME_INSTALL_FAILED"),i.running)return await this.installRuntimeLauncher(t,i.id),void await this.installRuntimeRelease({...e,expectedContainerId:i.id});if(!i.image)throw Yo("INSTANCE_RUNTIME_INSTALL_FAILED",`Docker container ${t} does not expose its immutable image identity.`);const s="/run/task-handoff/runtime-rescue-artifact.tar.gz",o=[`test -r ${Do}`,`test -r ${ko}/instance-launcher.sh`,`test -r ${Lo}`,`install -d -o root -g root -m 0755 ${Mo} ${Mo}/releases ${Mo}/staging ${Mo}/incoming`,`chown -R root:root ${Mo}`,`chmod -R go-w ${Mo}`,`node ${Lo} install --artifact "$1" --version "$2" --sha256 "$3" --platform "$4" --arch "$5" --launcher-abi "$6"`].join("; ");try{await this.runCommand("docker",["run","--rm","--user","0:0","--volumes-from",i.id,"--mount",`type=bind,source=${n.resolve(e.artifactPath)},target=${s},readonly`,"--entrypoint",Po,i.image,"-ceu",o,"task-handoff-runtime-rescue",s,e.identity.version,e.identity.sha256,e.identity.platform,e.identity.arch,String(e.identity.launcherAbi)])}catch(n){throw Yo("INSTANCE_RUNTIME_INSTALL_FAILED",`Could not rescue controlled-instance ${e.identity.version} in stopped container ${t}.`,n)}const r=await this.inspectContainerForStart(t);if(!r)throw Yo("INSTANCE_RUNTIME_INSTALL_FAILED",`Docker container ${t} disappeared during runtime install recovery.`);if(er(t,r.id,i.id,"after runtime install recovery","INSTANCE_RUNTIME_INSTALL_FAILED"),r.running)throw Yo("INSTANCE_RUNTIME_INSTALL_FAILED",`Stopped Docker container ${t} changed lifecycle state during runtime install recovery.`)}async installRuntimeLauncher(e,t){const n=await this.inspectContainerId(e);if(!n)throw Yo("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Docker container ${e} does not exist.`);er(e,n,t,"before runtime launcher install","INSTANCE_BASE_RUNTIME_INCOMPATIBLE");try{await this.runCommand("docker",["exec","--user","0",n,"bash","-ceu",`test -r ${Do}; test -r ${ko}/instance-launcher.sh; test -r ${Lo}; install -d -o root -g root -m 0755 /opt/task-handoff/instance-runtime /opt/task-handoff/instance-runtime/releases /opt/task-handoff/instance-runtime/staging /opt/task-handoff/instance-runtime/incoming; chown -R root:root /opt/task-handoff/instance-runtime; chmod -R go-w /opt/task-handoff/instance-runtime`])}catch(t){throw Yo("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Could not install the runtime launcher in ${e}.`,t)}const i=await this.inspectContainerId(e);if(i!==n)throw Yo("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Docker container identity changed while installing the runtime launcher in ${e}.`);er(e,i,t,"after runtime launcher install","INSTANCE_BASE_RUNTIME_INCOMPATIBLE")}async inspectContainerId(e){try{return(await this.runCommand("docker",["inspect","--format","{{.Id}}",e])).stdout.trim()\|\|void 0}catch(t){if(Zo(t))return;throw Yo("RUNTIME_EXECUTOR_FAILED",`Could not inspect Docker container ${e}.`,t)}}async inspectContainerForStart(e){let t;try{t=await this.runCommand("docker",["inspect","--format","{{json .}}",e])}catch(t){if(Zo(t))return;throw Yo("RUNTIME_EXECUTOR_FAILED",`Could not inspect Docker container ${e}.`,t)}try{const e=JSON.parse(t.stdout\|\|"{}");if("string"!=typeof e.Id\|\|!e.Id)throw new Error("Docker inspect did not return a container id.");const n=e.Config?.Labels&&"object"==typeof e.Config.Labels&&!Array.isArray(e.Config.Labels)?Object.fromEntries(Object.entries(e.Config.Labels).filter(e=>"string"==typeof e[1])):{},i=Array.isArray(e.Mounts)?e.Mounts.flatMap(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const t=e,n="volume"===t.Type\|\|"bind"===t.Type?t.Type:void 0,i="string"==typeof t.Destination?t.Destination:void 0;return n&&i?[{type:n,destination:i,name:"string"==typeof t.Name?t.Name:void 0,source:"string"==typeof t.Source?t.Source:void 0}]:[]}):[],s=Array.isArray(e.Config?.Entrypoint)?e.Config.Entrypoint.filter(e=>"string"==typeof e):"string"==typeof e.Config?.Entrypoint?[e.Config.Entrypoint]:[],o=Array.isArray(e.Config?.Cmd)?e.Config.Cmd.filter(e=>"string"==typeof e):"string"==typeof e.Config?.Cmd?[e.Config.Cmd]:[];return{id:e.Id,image:"string"==typeof e.Image?e.Image:void 0,running:!0===e.State?.Running,entrypoint:s,command:o,labels:n,mounts:i}}catch(t){throw Yo("RUNTIME_EXECUTOR_FAILED",`Docker returned invalid inspection data for ${e}.`,t)}}async containerPort(e,t){let n,i=!1;for(const s of this.portResolutionRetryDelaysMs){s>0&&await Bo(s);try{const n=qo((await this.runCommand("docker",["port",e,t])).stdout);if(n)return n}catch(e){n=e}try{const n=Vo((await this.runCommand("docker",["inspect","--format","{{json .NetworkSettings.Ports}}",e])).stdout,t);if(i=!0,n)return n}catch(e){n=e}}if(i)throw Yo("RUNTIME_EXECUTOR_FAILED",`Docker container ${e} does not publish ${t}.`);throw Yo("RUNTIME_EXECUTOR_FAILED",`Could not resolve the published port for Docker container ${e}.`,n)}}function qo(e){const t=e.split(/\r?\n/).find(Boolean);return t?.match(/:(\d+)$/)?.[1]}function Vo(e,t){const n=JSON.parse(e\|\|"null");if(!n\|\|"object"!=typeof n\|\|Array.isArray(n))return;const i=n[t];if(Array.isArray(i))for(const e of i){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))continue;const t=e.HostPort;if("string"==typeof t&&/^\d+$/.test(t))return t}}function Bo(e){return new Promise(t=>setTimeout(t,e))}function Ko(e){return"linux"===e\|\|"darwin"===e?e:"windows"===e\|\|"win32"===e?"win32":void 0}function Go(e){return"amd64"===e\|\|"x86_64"===e\|\|"x64"===e?"x64":"arm64"===e\|\|"aarch64"===e?"arm64":void 0}function Wo(){const e=("undefined"==typeof document?require("url").pathToFileURL(__filename).href:O&&"SCRIPT"===O.tagName.toUpperCase()&&O.src\|\|new URL("cli.js",document.baseURI).href)?n.dirname(s.fileURLToPath("undefined"==typeof document?require("url").pathToFileURL(__filename).href:O&&"SCRIPT"===O.tagName.toUpperCase()&&O.src\|\|new URL("cli.js",document.baseURI).href)):__dirname,i=[n.resolve(e,"../../../../../docker"),n.resolve(e,"../docker"),n.resolve(e,"../../docker")];return i.find(e=>t.existsSync(n.join(e,"runtime-installer.mjs")))\|\|i[0]}function Xo(e){return`task-handoff/environment-image:${e.replace(/^sha256:/,"")}`}function Yo(e,t,n){const i=Qo(n),s=new Error(i?`${t} Cause: ${i}`:t,void 0===n?void 0:{cause:n});return Object.assign(s,{statusCode:502,code:e}),s}const Jo=new Set(["AUTHENTICATION_REJECTED","CLONE_FAILED","CREDENTIAL_AMBIGUOUS","CREDENTIAL_MISSING","HOST_KEY_REQUIRED","LFS_FAILED","REF_NOT_FOUND","REMOTE_UNSUPPORTED","SSH_AGENT_UNAVAILABLE","SUBDIRECTORY_NOT_FOUND","WORKSPACE_NOT_EMPTY","WORKSPACE_OWNERSHIP_MISMATCH"]);function Qo(e){if(!e\|\|"object"!=typeof e)return void 0===e?void 0:String(e);const t=e,n=t.details?.stderr\|\|t.details?.stdout;return"string"==typeof n&&n.trim()?n.trim():"string"==typeof t.message&&t.message.trim()?t.message.trim():void 0}function Zo(e){const t=Qo(e)?.toLowerCase()\|\|"";return t.includes("no such container")\|\|t.includes("no such object")}function er(e,t,n,i,s){if(n&&t!==n)throw Yo(s,`Docker container ${e} identity mismatch ${i}: expected ${n}, got ${t}.`)}async function tr(e=zo){return async function(e=zo){return(await e("docker",["images","--digests","--format","{{json .}}"])).stdout.split(/\r?\n/).map(e=>e.trim()).filter(Boolean).map(e=>{const t=JSON.parse(e),n=t.Repository\|\|"<none>",i=t.Tag\|\|"<none>",s=t.ID\|\|t.IDShort\|\|"",o="<none>"!==n&&"<none>"!==i?`${n}:${i}`:s,r="<none>"!==n&&t.Digest&&"<none>"!==t.Digest?[`${n}@${t.Digest}`]:[];return{repository:n,tag:i,id:s,createdSince:t.CreatedSince,size:t.Size,sizeBytes:xo(t.Size),reference:o,repoDigests:r}}).filter(e=>Boolean(e.reference))}(e)}function nr(e){return`task-handoff-${e.replace(/[^a-zA-Z0-9_.-]/g,"-")}`}function ir(e,t,n){e.push("-e",`${t}=${n}`)}function sr(e,t,i={}){const s=i.publishHost\|\|"127.0.0.1",o=n.resolve(i.launcherAssetsDir\|\|Wo()),r=e.node?.id\|\|"node_unset",a=e.runtime?.id\|\|"runtime_local_docker",c=["run","-d","--name",t,"--user","0:0","--label",`task-handoff.instance-id=${e.instance.id}`,"--label",`task-handoff.project-id=${e.project.id}`,"--label",`task-handoff.node-id=${r}`,"--label",`task-handoff.runtime-id=${a}`,"--label",`task-handoff.image-id=${e.image.id}`,"--label","task-handoff.bootstrap-abi=1","--shm-size","1gb","--security-opt","seccomp=unconfined","--network","bridge","--no-healthcheck","--add-host","host.docker.internal:host-gateway","--tmpfs","/tmp:rw,nosuid,nodev,exec,mode=1777","-p",`${s}::8080`];if(!e.privateConfigPath)throw Object.assign(new Error(`Instance ${e.instance.id} private config was not materialized.`),{statusCode:409,code:"INSTANCE_PRIVATE_CONFIG_MISSING"});c.push("--mount",`type=bind,src=${e.privateConfigPath},dst=/run/task-handoff/instance-private-config.json,readonly`,"--mount",`type=bind,src=${o},dst=${ko},readonly`,"--entrypoint",Po);for(const t of Uo(e))c.push("--mount",`type=volume,src=${t.name},dst=${t.mountPath}`);const d=jo(e.instance.id,e.node?.id\|\|"node_unset");c.push("--mount",`type=volume,src=${d.name},dst=${d.mountPath}`);const l={TASK_HANDOFF_CONTROL_MODE:"controlled",TASK_HANDOFF_NODE_AGENT_URL:e.nodeAgentUrl\|\|e.node?.endpoint\|\|"",TASK_HANDOFF_INSTANCE_ID:e.instance.id,TASK_HANDOFF_INSTANCE_NAME:e.instance.name,TASK_HANDOFF_PROJECT_ID:e.project.id,TASK_HANDOFF_NODE_ID:r,TASK_HANDOFF_RUNTIME_ID:a,TASK_HANDOFF_IMAGE_ID:e.image.id,TASK_HANDOFF_INSTANCE_LAUNCHER:`${ko}/instance-launcher.sh`,...e.image.tag?{TASK_HANDOFF_IMAGE_TAG:e.image.tag}:{},TASK_HANDOFF_CHAT_BRIDGES:"none",TASK_HANDOFF_WORKSPACE:e.project.workspacePolicy.path\|\|"/workspace",TASK_HANDOFF_WORKSPACE_MODE:e.project.workspacePolicy.mode,..."local-folder"===e.project.source.type?{}:{TASK_HANDOFF_SKIP_WORKSPACE_BOOTSTRAP:"true"}};for(const[e,t]of Object.entries(l))ir(c,e,t);"local-folder"===e.project.source.type?c.push("-v",`${e.project.source.path}:${e.project.workspacePolicy.path\|\|"/workspace"}:${e.project.workspacePolicy.readOnly?"ro":"rw"}`):(ir(c,"TASK_HANDOFF_PROJECT_SOURCE",JSON.stringify(e.project.source)),ir(c,"TASK_HANDOFF_WORKSPACE_POLICY",JSON.stringify(e.project.workspacePolicy)),ir(c,"TASK_HANDOFF_GIT_URL",e.project.source.url),"commit"===e.project.source.ref.type?ir(c,"TASK_HANDOFF_GIT_COMMIT",e.project.source.ref.commit):ir(c,"TASK_HANDOFF_GIT_REF",e.project.source.ref.name),e.project.source.clone?.depth&&ir(c,"TASK_HANDOFF_GIT_DEPTH",String(e.project.source.clone.depth)),ir(c,"TASK_HANDOFF_GIT_SUBMODULES",e.project.source.clone?.submodules?"true":"false"),ir(c,"TASK_HANDOFF_GIT_LFS",e.project.source.clone?.lfs?"true":"false"),e.project.source.clone?.subdirectory&&ir(c,"TASK_HANDOFF_WORKSPACE_SUBDIRECTORY",e.project.source.clone.subdirectory));const u={...e.image.labels["task-handoff.image.profile"]?{TASK_HANDOFF_IMAGE_PROFILE:e.image.labels["task-handoff.image.profile"]}:{},TASK_HANDOFF_IMAGE_CAPABILITIES:e.image.capabilities.join(",")};for(const[t,n]of Object.entries(e.image.defaultEnv))t in u\|\|ir(c,t,n);for(const[e,t]of Object.entries(u))ir(c,e,t);return c.push(i.imageReference\|\|e.instance.environmentTemplateOrigin?.imageId\|\|e.image.resolvedReference\|\|e.image.requestedReference,Do,"task-handoff","web"),c}function or(e){if("local-folder"===e.project.source.type&&e.project.source.ownerNodeId&&e.project.source.ownerNodeId!==e.node.id){const e=new Error("Local folder projects can only start on the node that owns the folder.");throw Object.assign(e,{statusCode:400,code:"LOCAL_FOLDER_REQUIRES_OWNER_NODE"}),e}if(!e.image.requestedReference?.trim()){const e=new Error("Image profile must reference a registered image.");throw Object.assign(e,{statusCode:400,code:"IMAGE_PROFILE_INVALID"}),e}}const rr="app.sessions";a.z.object({type:a.z.literal("snapshot"),data:a.z.string(),pendingEscape:a.z.string(),cols:a.z.number().int().positive(),rows:a.z.number().int().positive()}).passthrough();const ar="app-session.snapshot",cr="app-session.patch",dr="app-session.removed",lr=a.z.enum(["created","starting","running","stopping","stopped","exited","failed","closed","terminated","unknown"]),ur=a.z.enum(["tty","vnc","web"]);a.z.object({mode:ur,url:a.z.string().trim().min(1).max(4096),token:a.z.string().trim().min(1).max(512),expiresAt:a.z.string().datetime()}).strict(),a.z.object({revoked:a.z.boolean()}).strict();const pr=new Set(["stopped","failed","exited","closed","terminated"]),mr=a.z.object({type:a.z.enum(["app-session","provider-session","adapter-key"]),id:a.z.string().trim().min(1).max(240),agent:a.z.string().trim().min(1).max(80).optional(),adapter:a.z.string().trim().min(1).max(80).optional(),key:a.z.string().trim().min(1).max(240).optional()}).strict(),hr=a.z.record(a.z.string(),a.z.unknown()).and(a.z.object({id:a.z.string().trim().min(1).max(160),appId:a.z.string().trim().min(1).max(160).optional(),title:a.z.string().trim().max(240).optional(),kind:a.z.string().trim().max(80).optional(),status:lr.default("unknown"),bindings:a.z.array(mr).max(40).default([]),workspace:a.z.object({cwd:a.z.string().trim().max(4096).optional()}).strict().optional(),createdAt:a.z.string().datetime().optional(),updatedAt:a.z.string().datetime().optional()})),gr=a.z.object({runningCount:a.z.number().int().min(0).default(0),problemCount:a.z.number().int().min(0).default(0),sessions:a.z.array(hr).default([]),updatedAt:a.z.string().datetime()}).strict(),fr=a.z.object({streamId:a.z.string().trim().min(1).max(240),revision:a.z.number().int().min(0),lastEventAt:a.z.string().datetime(),snapshot:gr}).strict();gr.pick({runningCount:!0,problemCount:!0,updatedAt:!0}).extend({revision:a.z.number().int().min(0).optional()});const yr=a.z.enum(["app-session-created","app-session-updated","app-session-deleted","app-session-recovered","control-action","heartbeat-sync","startup"]),Ir=a.z.object({streamId:a.z.string().trim().min(1).max(240),instanceId:a.z.string().trim().min(1).max(160),nodeId:a.z.string().trim().min(1).max(160).optional(),revision:a.z.number().int().min(0),previousRevision:a.z.number().int().min(0).optional(),traceId:a.z.string().trim().min(1).max(160),generatedAt:a.z.string().datetime(),reason:yr}).strict(),Ar=a.z.object({meta:Ir,snapshot:gr}).strict(),_r=a.z.object({meta:Ir,session:hr}).strict(),Er=a.z.object({meta:Ir,sessionId:a.z.string().trim().min(1).max(160),tombstone:hr.optional(),expiresAt:a.z.string().datetime().optional()}).strict();function wr(e,t=(new Date).toISOString()){const n=e.map(e=>function(e){const t=br("string"==typeof e.status?e.status:void 0),n="string"==typeof e.id?e.id:"",i=function(e){const t=zr(e.workspace),n=zr(e.tty),i=zr(e.launch),s=zr(e.ai),o=zr(s.claude),r=Cr(t.cwd)\|\|Cr(n.cwd)\|\|Cr(o.cwd)\|\|Cr(i.cwd);return r?{cwd:r}:void 0}(e),{workspace:s,...o}=e;return hr.parse({...o,status:t,bindings:Or([...(r=e.bindings,Array.isArray(r)?r.flatMap(e=>{const t=mr.safeParse(e);return t.success?[t.data]:[]}):[]),...n?[{type:"app-session",id:n}]:[],...Nr(e)]),...i?{workspace:i}:{}});var r}(e));return gr.parse({runningCount:n.filter(e=>"running"===e.status).length,problemCount:n.filter(e=>"failed"===e.status).length,sessions:n,updatedAt:t})}function Tr(e,t=(new Date).toISOString()){return wr(e.filter(e=>Sr("string"==typeof e.status?e.status:void 0)),t)}function br(e){const t=(e\|\|"unknown").trim().toLowerCase();return"ended"===t?"closed":"terminating"===t?"stopping":lr.options.includes(t)?t:"unknown"}function Sr(e){return!pr.has(br(e))}function vr(e){return"app-session"===e.type?`app:${e.id}`:"provider-session"===e.type?`provider:${e.agent\|\|""}:${e.id}`:`adapter:${e.adapter\|\|""}:${e.key\|\|e.id}`}function Nr(e){const t=zr(e.ai),n=zr(t.claude),i=zr(t.appServer),s=zr(e.launch),o=[],r=Cr(zr(s.aiSessionResume).providerSessionId),a="codex"===e.appId\|\|"claude"===e.appId\|\|"opencode"===e.appId?e.appId:void 0;a&&r&&o.push({type:"provider-session",agent:a,id:r});const c=Cr(n.short);c&&o.push({type:"adapter-key",adapter:"claude",agent:"claude",id:`short:${c}`,key:`short:${c}`});const d=Cr(n.providerSessionId);d&&o.push({type:"provider-session",agent:"claude",id:d});const l=Array.isArray(t.threadIds)?t.threadIds.filter(e=>"string"==typeof e&&Boolean(e.trim())):[],u=Cr(t.activeThreadId);for(const e of[...new Set([u,...l].filter(Boolean))])o.push({type:"provider-session",agent:"codex",id:e});const p=Cr(i.socketPath);return p&&o.push({type:"adapter-key",adapter:"codex-app-server",agent:"codex",id:`socket:${p}`,key:`socket:${p}`}),o}function Or(e){const t=new Map;for(const n of e)t.set(vr(n),n);return[...t.values()]}function zr(e){return e&&"object"==typeof e&&!Array.isArray(e)?e:{}}function Cr(e){return"string"==typeof e&&e.trim()?e.trim():""}a.z.object({streamId:a.z.string().trim().min(1).max(240),instanceId:a.z.string().trim().min(1).max(160),sinceRevision:a.z.number().int().min(0),latestRevision:a.z.number().int().min(0),earliestRetainedRevision:a.z.number().int().min(0),syncRequired:a.z.boolean().default(!1),events:a.z.array(a.z.discriminatedUnion("type",[a.z.object({type:a.z.literal(ar),payload:Ar}).strict(),a.z.object({type:a.z.literal(cr),payload:_r}).strict(),a.z.object({type:a.z.literal(dr),payload:Er}).strict()])).default([])}).strict();const Rr="2026-08-25",xr=a.z.object({nodeId:a.z.string().optional(),instanceId:a.z.string().optional()}).passthrough(),kr=a.z.object({v:a.z.literal(1),id:a.z.string().min(1),seq:a.z.number().finite(),type:a.z.string().min(1),topic:a.z.string().min(1),createdAt:a.z.string().datetime(),payload:a.z.unknown(),replay:a.z.literal(!0).optional(),scope:xr.optional()}).passthrough(),Dr=a.z.object({v:a.z.literal(Rr),id:a.z.string().min(1),type:a.z.string().min(1),createdAt:a.z.string().datetime(),payload:a.z.unknown(),topic:a.z.string().min(1).optional(),replay:a.z.literal(!0).optional(),scope:xr.optional()}).passthrough();function Pr(e){return e.startsWith("ai-session.")\|\|e.startsWith("ai.session.")?"ai.sessions":e.startsWith("app-session.")?"app.sessions":e.startsWith("app.management")?"apps":e.startsWith("trigger.")?"triggers":e.startsWith("instance.")?"instances":e.startsWith("node.")?"nodes":e.startsWith("project.")?"projects":e.startsWith("model.")?"models":e.startsWith("image.")?"images":e.startsWith("market.")?"market":e.startsWith("story.")?"stories":"system"}a.z.discriminatedUnion("v",[kr,Dr]),a.z.object({v:a.z.literal(1),type:a.z.literal("ping"),sentAt:a.z.string().datetime()}).strict(),a.z.object({v:a.z.literal(1),type:a.z.literal("pong"),sentAt:a.z.string().datetime(),receivedAt:a.z.string().datetime()}).strict();const Lr=a.z.object({replaySince:a.z.string().datetime().optional(),messageDeltas:a.z.object({allInstances:a.z.boolean().default(!1),instanceIds:a.z.array(a.z.string().trim().min(1).max(160)).max(1e3).default([])}).default({allInstances:!1,instanceIds:[]}),timelineAllSessions:a.z.boolean().default(!1),timelineSessions:a.z.array(a.z.object({instanceId:a.z.string().trim().min(1).max(160),sessionId:a.z.string().trim().min(1).max(120)})).max(1e3).default([])}),Mr=a.z.enum(["ai.sessions","app.sessions"]),jr=a.z.object({topic:Mr,instanceId:a.z.string().trim().min(1).max(160),streamId:a.z.string().trim().min(1).max(240),latestRevision:a.z.number().int().min(0),earliestRetainedRevision:a.z.number().int().min(0)}).strict(),Ur=a.z.object({protocolVersion:a.z.literal(1),streams:a.z.array(jr)}).strict();function Fr(e,t=Math.random){const n=Math.max(1,Math.floor(e));if(1===n)return 0;if(2===n)return 250;const i=Math.min(6e4,2502*(n-2));return Math.min(6e4,Math.round(i(.75+.5t())))}class $r{retryNumber=0;random;constructor(e=Math.random){this.random=e}get attempts(){return this.retryNumber}next(){return this.retryNumber+=1,{attempt:this.retryNumber,delay:Fr(this.retryNumber,this.random)}}reset(){this.retryNumber=0}}class Hr{backoff;timer;constructor(e=Math.random){this.backoff=new $r(e)}get pending(){return Boolean(this.timer)}get attempts(){return this.backoff.attempts}schedule(e,t={}){if(this.timer)return;const n=this.backoff.next(),i=t.setTimeoutFn\|\|setTimeout;return this.timer=i(()=>{this.timer=void 0,e()},n.delay),n}reset(e=clearTimeout){this.timer&&e(this.timer),this.timer=void 0,this.backoff.reset()}cancel(e=clearTimeout){this.timer&&e(this.timer),this.timer=void 0}}class qr extends Hr{}function Vr(e,t=6e4){const n=[];for(let i=0;i<e.length;i+=t)n.push(e.slice(i,i+t));return n}const Br=262144,Kr=4194304;class Gr{sockets=new Map;socketUrls=new Map;retries=new Map;outputs=new Set;outputSubscriptions=new Map;outputEnvelopeVersions=new Map;outputHierarchy=new Map;outputDiagnostics=new Map;aiSessionProjectionByInstance=new Map;appSessionProjectionByInstance=new Map;sessionStreamsHelloByInstance=new Map;sessionAuthorityReplayedOutputs=new Set;pendingAiSessionAuthorityByOutput=new Map;pendingAiSessionAuthorityFlush=new Map;eventTransportCongestion;imagePullTerminalByInstance=new Map;state;token;logger;safetyIntervalMs;lastAiSessionEventByInstance=new Map;lastAppSessionEventByInstance=new Map;timer;stopped=!1;reconnectAttempts=0;safetyReconciliations=0;localSequence=0;outputSequence=0;createSocket;setIntervalFn;clearIntervalFn;setTimeoutFn;clearTimeoutFn;constructor(e,t,n={}){var i;this.state=e,this.token=t,this.logger=n.logger,this.safetyIntervalMs=(i=n.safetyIntervalMs,Math.min(6e4,Math.max(3e4,i??45e3))),this.createSocket=n.createSocket\|\|((e,t)=>new p(e,t)),this.setIntervalFn=n.setIntervalFn\|\|setInterval,this.clearIntervalFn=n.clearIntervalFn\|\|clearInterval,this.setTimeoutFn=n.setTimeoutFn\|\|setTimeout,this.clearTimeoutFn=n.clearTimeoutFn\|\|clearTimeout}start(){this.stopped=!1,this.sync(),this.timer=this.setIntervalFn(()=>{this.safetyReconciliations+=1,this.sync()},this.safetyIntervalMs)}stop(){this.stopped=!0,this.timer&&(this.clearIntervalFn(this.timer),this.timer=void 0);for(const e of this.sockets.values())e.close();this.sockets.clear(),this.socketUrls.clear();for(const e of this.retries.values())e.timer.cancel();this.retries.clear(),this.outputs.clear(),this.outputSubscriptions.clear(),this.outputEnvelopeVersions.clear(),this.outputHierarchy.clear(),this.outputDiagnostics.clear();for(const e of this.pendingAiSessionAuthorityFlush.values())this.clearTimeoutFn(e);this.pendingAiSessionAuthorityFlush.clear(),this.pendingAiSessionAuthorityByOutput.clear(),this.aiSessionProjectionByInstance.clear(),this.appSessionProjectionByInstance.clear(),this.sessionStreamsHelloByInstance.clear(),this.sessionAuthorityReplayedOutputs.clear()}addOutput(e,t={}){let n;this.outputs.add(e),this.outputDiagnostics.set(e,{outputId:"event_output_"+ ++this.outputSequence,kind:t.expectsTransientSubscription?"events-websocket":void 0!==t.legacyFallbackMs?"reverse-tunnel":"legacy"}),this.outputSubscriptions.set(e,t.expectsTransientSubscription?Lr.parse({}):void 0),this.outputEnvelopeVersions.set(e,1),this.outputHierarchy.set(e,xn.parse(void 0)),t.expectsTransientSubscription\|\|void 0===t.legacyFallbackMs\|\|(n=this.setTimeoutFn(()=>{n=void 0,this.outputs.has(e)&&void 0===this.outputSubscriptions.get(e)&&(this.replaySessionAuthority(e),this.syncNow())},t.legacyFallbackMs));let i=!1;const s=()=>{if(i)return;i=!0,this.outputs.delete(e),this.outputSubscriptions.delete(e),this.outputEnvelopeVersions.delete(e),this.outputHierarchy.delete(e),this.outputDiagnostics.delete(e),this.sessionAuthorityReplayedOutputs.delete(e);const t=this.pendingAiSessionAuthorityFlush.get(e);t&&this.clearTimeoutFn(t),this.pendingAiSessionAuthorityFlush.delete(e),this.pendingAiSessionAuthorityByOutput.delete(e),this.refreshEventTransportRecovery(),n&&clearTimeout(n),this.stopped\|\|this.syncNow()};e.on("close",s),e.on("error",s);for(const t of this.state.listInstances()){const n=Wr(t);n?this.sendForwarded(e,this.createEvent(ho,n,{instanceId:t.id})):this.logger?.warn?.({instanceId:t.id},"instance.lifecycle.snapshot.invalid")}for(const[t,n]of this.imagePullTerminalByInstance)Vr(n.tail).forEach((i,s)=>this.sendForwarded(e,this.createEvent(Us,{...n.output,sequence:n.output.sequence+s,data:i,...0===s?{replay:!0}:{}},{instanceId:t}))),n.finished&&this.sendForwarded(e,this.createEvent(Fs,n.finished,{instanceId:t}));return(t.expectsTransientSubscription\|\|void 0===t.legacyFallbackMs)&&(this.replaySessionAuthority(e),this.syncNow()),s}setOutputSubscription(e,t,n,i){if(!this.outputs.has(e))return!1;const s=Lr.safeParse(t),o=xn.safeParse(i);if(!s.success\|\|!o.success)return!1;this.outputSubscriptions.set(e,s.data),this.outputEnvelopeVersions.set(e,n===Rr?Rr:1),this.outputHierarchy.set(e,o.data),this.replaySessionAuthority(e),this.syncNow();for(const[e,t]of this.sockets)this.sendInstanceSubscription(e,t);return!0}publish(e,t,n={}){this.rememberImagePullTerminal(e,t);const i=this.createEvent(e,t,n);for(const e of this.outputs)this.sendForwarded(e,i)}rememberImagePullTerminal(e,t){if(e===Us){const e=bo(Hs,t);if(!e.success)return;const n=e.data,i=this.imagePullTerminalByInstance.get(n.instanceId);if(i&&n.generation<i.output.generation)return;const s=i?.output.generation===n.generation,o=n.replay\|\|!s?n.data:`${i.tail}${n.data}`.slice(-262144);return void this.imagePullTerminalByInstance.set(n.instanceId,{output:n,tail:o})}if(e===Fs){const e=bo(qs,t);if(!e.success)return;const n=e.data,i=this.imagePullTerminalByInstance.get(n.instanceId);i?.output.generation===n.generation&&(i.finished=n)}}publishInstanceLifecycle(e){this.publish(ho,function(e){return go.parse(Xr(e))}(e),{instanceId:e.id});const t=this.imagePullTerminalByInstance.get(e.id);"ready"===e.imageProvisioning?.phase&&"succeeded"===t?.finished?.outcome&&this.imagePullTerminalByInstance.delete(e.id)}createEvent(e,t,n){const i=++this.localSequence;return{v:1,id:`node_evt_${Date.now().toString(36)}_${i.toString(36)}`,seq:i,type:e,topic:Pr(e),createdAt:(new Date).toISOString(),payload:t,scope:n}}sendForwarded(e,t){const n=Jr(t),i=n?function(e,t){return t?.subagents\|\|e.type===_e?e:e.type===Ie?{...e,payload:{...e.payload,snapshot:Xt(e.payload.snapshot,t)}}:{...e,payload:{...e.payload,upserted:e.payload.upserted.map(e=>Wt(e,t))}}}(n,this.outputHierarchy.get(e)):void 0,s=i&&i.payload!==t.payload?{...t,payload:i.payload}:t,o=t.type===Ee?qt.safeParse(t.payload):void 0,r=t.type===Te?Bt.safeParse(t.payload):void 0,a=this.outputEnvelopeVersions.get(e)===Rr?function(e,t,n={}){const i=e.scope?n.publicScope&&e.scope.instanceId?{instanceId:e.scope.instanceId}:e.scope:void 0;return{v:Rr,id:e.id,type:e.type,createdAt:e.createdAt,payload:void 0===n.payload?e.payload:n.payload,...e.topic!==Pr(e.type)?{topic:e.topic}:{},...e.replay?{replay:!0}:{},...i&&Object.keys(i).length?{scope:i}:{}}}(s,0,{...o?.success?{payload:(c=o.data,Vt.parse({sessionId:c.sessionId,turnId:c.turnId,itemId:c.itemId,delta:c.delta,generatedAt:c.generatedAt}))}:{},...r?.success?{payload:Gt(r.data)}:{}}):s;var c;const d=JSON.stringify({type:"node-agent.event.forwarded",event:a});this.sendOutput(e,d,s)}sendOutput(e,t,n){const i=Buffer.byteLength(t,"utf8"),s=n?.topic===rr?"app-session":n?.topic===ye?"ai-session":void 0,o=s?{...this.outputDiagnostics.get(e),instanceId:n.scope?.instanceId,eventType:n.type,...Yr(n.payload)}:void 0;if(e.readyState!==p.OPEN)return o&&this.logger?.warn?.({...o,readyState:e.readyState,outcome:"not-open"},`${s}.event.output.rejected`),!1;if(n&&this.shouldCoalesceAiSessionAuthority(e,n)&&this.deferAiSessionAuthority(e,n))return!0;if(n&&Qr(n)&&i>Kr){if(n.type!==Ie&&this.deferAiSessionAuthority(e,n))return!0;this.observeEventTransportCongestion(e,!1,i),o&&this.logger?.warn?.({...o,bufferedAmount:e.bufferedAmount,bytes:i,maxBytes:Kr,outcome:"payload-too-large"},`${s}.event.output.rejected`);try{e.close(1009,"AI Session authority event exceeds the transport limit.")}catch{}return!1}if(e.bufferedAmount+i>16777216){this.observeEventTransportCongestion(e,!1),o&&this.logger?.warn?.({...o,bufferedAmount:e.bufferedAmount,outcome:"backpressure"},`${s}.event.output.rejected`);try{e.close(1013,"Event consumer is too slow.")}catch{}return!1}try{return e.send(t),o&&this.logger?.info?.({...o,bufferedAmount:e.bufferedAmount,bytes:i,outcome:"queued"},`${s}.event.output.queued`),!0}catch(t){o&&this.logger?.warn?.({...o,error:t instanceof Error?t.message:String(t),outcome:"send-failed"},`${s}.event.output.rejected`);try{e.close(1011,"Event delivery failed.")}catch{}return!1}}shouldCoalesceAiSessionAuthority(e,t){if(!Qr(t))return!1;const n=t.scope?.instanceId;return!!n&&(!!this.pendingAiSessionAuthorityByOutput.get(e)?.has(n)\|\|e.bufferedAmount>=Br)}deferAiSessionAuthority(e,t){const n=t.scope?.instanceId,i=n?this.aiSessionProjectionByInstance.get(n):void 0;if(!n\|\|!i)return!1;const s=function(e,t){const n=Jr(e);return n?n.payload.meta.streamId!==t.streamId\|\|n.payload.meta.revision!==t.revision?void 0:Ft.parse({meta:n.payload.meta,snapshot:t.snapshot}):void 0}(t,i);if(!s)return!1;const o=this.pendingAiSessionAuthorityByOutput.get(e)\|\|new Map;return o.set(n,{...t,type:Ie,topic:ye,payload:s}),this.pendingAiSessionAuthorityByOutput.set(e,o),this.observeEventTransportCongestion(e,!0),this.logger?.info?.({...this.outputDiagnostics.get(e),instanceId:n,eventType:t.type,...Yr(s),bufferedAmount:e.bufferedAmount,outcome:"coalesced-latest"},"ai-session.event.output.coalesced"),this.scheduleAiSessionAuthorityFlush(e),!0}scheduleAiSessionAuthorityFlush(e){if(this.pendingAiSessionAuthorityFlush.has(e))return;const t=this.setTimeoutFn(()=>{this.pendingAiSessionAuthorityFlush.delete(e),this.flushAiSessionAuthority(e)},25);t.unref?.(),this.pendingAiSessionAuthorityFlush.set(e,t)}flushAiSessionAuthority(e){const t=this.pendingAiSessionAuthorityByOutput.get(e);if(!t?.size)return void this.pendingAiSessionAuthorityByOutput.delete(e);if(e.readyState!==p.OPEN)return void this.pendingAiSessionAuthorityByOutput.delete(e);const[n,i]=t.entries().next().value;e.bufferedAmount>=Br?this.scheduleAiSessionAuthorityFlush(e):(t.delete(n),t.size\|\|this.pendingAiSessionAuthorityByOutput.delete(e),this.sendForwarded(e,i),this.refreshEventTransportRecovery(),t.size&&this.scheduleAiSessionAuthorityFlush(e))}observeEventTransportCongestion(e,t,n=0){const i=(new Date).toISOString(),s=Math.max(0,Math.floor(e.bufferedAmount)),o=this.eventTransportCongestion;this.eventTransportCongestion={congestedSince:o?.recoveredAt?i:o?.congestedSince\|\|i,lastCongestedAt:i,peakBufferedBytes:Math.max(o?.recoveredAt?0:o?.peakBufferedBytes\|\|0,s),coalescedEvents:(o?.recoveredAt?0:o?.coalescedEvents\|\|0)+(t?1:0),oversizedEvents:(o?.recoveredAt?0:o?.oversizedEvents\|\|0)+(n>0?1:0),peakEventBytes:Math.max(o?.recoveredAt?0:o?.peakEventBytes\|\|0,n)}}eventTransportIsCongested(){return!![...this.pendingAiSessionAuthorityByOutput.values()].some(e=>e.size>0)\|\|[...this.outputs].some(e=>e.readyState===p.OPEN&&e.bufferedAmount>=Br)}refreshEventTransportRecovery(){const e=this.eventTransportCongestion;!e\|\|e.recoveredAt\|\|this.eventTransportIsCongested()\|\|(e.recoveredAt=(new Date).toISOString())}eventTransportHealth(){this.refreshEventTransportRecovery();const e=[...this.outputs].filter(e=>e.readyState===p.OPEN),t=e.reduce((e,t)=>Math.max(e,Math.max(0,Math.floor(t.bufferedAmount))),0),n=this.eventTransportIsCongested();let i=this.eventTransportCongestion;return i?.recoveredAt&&Date.now()-Date.parse(i.recoveredAt)>3e5&&(this.eventTransportCongestion=void 0,i=void 0),{status:n?"congested":i?"recovering":"healthy",activeOutputs:e.length,bufferedBytes:t,peakBufferedBytes:i?.peakBufferedBytes\|\|t,coalescedEvents:i?.coalescedEvents\|\|0,oversizedEvents:i?.oversizedEvents\|\|0,peakEventBytes:i?.peakEventBytes\|\|0,...n&&i?{congestedSince:i.congestedSince}:{},...i?{lastCongestedAt:i.lastCongestedAt}:{}}}syncNow(){this.sync()}diagnostics(){const e=[...this.outputSubscriptions.values()];return{reconnectAttempts:this.reconnectAttempts,safetyReconciliations:this.safetyReconciliations,activeConnections:this.sockets.size,pendingRetries:[...this.retries.values()].filter(e=>e.timer.pending).length,safetyIntervalMs:this.safetyIntervalMs,eventTransport:this.eventTransportHealth(),transientDemand:{legacyOutputs:e.filter(e=>void 0===e).length,scopedOutputs:e.filter(e=>void 0!==e).length,messageDeltaAllInstances:e.some(e=>e?.messageDeltas.allInstances),messageDeltaInstanceCount:new Set(e.flatMap(e=>e?.messageDeltas.instanceIds\|\|[])).size,timelineAllSessions:e.some(e=>e?.timelineAllSessions),timelineSessionCount:new Set(e.flatMap(e=>e?.timelineSessions.map(e=>JSON.stringify([e.instanceId,e.sessionId]))\|\|[])).size}}}sync(){const e=new Set(this.state.listInstances().map(e=>e.id));for(const t of this.aiSessionProjectionByInstance.keys())e.has(t)\|\|this.aiSessionProjectionByInstance.delete(t);for(const t of this.appSessionProjectionByInstance.keys())e.has(t)\|\|this.appSessionProjectionByInstance.delete(t);for(const t of this.sessionStreamsHelloByInstance.keys())e.has(t)\|\|this.sessionStreamsHelloByInstance.delete(t);for(const t of this.imagePullTerminalByInstance.keys())e.has(t)\|\|this.imagePullTerminalByInstance.delete(t);if(!this.outputs.size){for(const e of this.sockets.values())e.close();this.sockets.clear(),this.socketUrls.clear();for(const e of this.retries.values())e.timer.cancel();return void this.retries.clear()}const t=new Set;for(const e of this.state.listInstances()){const n=Zr(e);if(!n)continue;t.add(e.id);const i=this.retries.get(e.id);i?.timer.pending&&i.url!==n&&(i.timer.cancel(),this.retries.delete(e.id)),this.socketUrls.get(e.id)!==n&&this.sockets.has(e.id)&&(this.sockets.get(e.id)?.close(),this.sockets.delete(e.id)),this.sockets.has(e.id)\|\|this.retries.get(e.id)?.timer.pending\|\|this.connect(e.id,n)}for(const[e,n]of this.sockets)if(!t.has(e)){n.close(),this.sockets.delete(e),this.socketUrls.delete(e);const t=this.retries.get(e);t?.timer.cancel(),this.retries.delete(e)}for(const[e,n]of this.retries)t.has(e)\|\|(n.timer.cancel(),this.retries.delete(e),this.socketUrls.delete(e))}connect(e,t){const n=this.token?{authorization:`Bearer ${this.token}`}:void 0,i=this.createSocket(t,{headers:n});this.sockets.set(e,i),this.socketUrls.set(e,t),i.on("open",()=>{const n=this.retries.get(e);this.retries.set(e,{timer:n?.timer\|\|new qr,url:t}),i.readyState===p.OPEN&&(this.sendInstanceSubscription(e,i),this.logger?.info?.({instanceId:e,url:t},"ai-session.event.forward.connect"),this.logger?.info?.({instanceId:e,url:t},"app-session.event.forward.connect"))}),i.on("message",t=>{const n=function(e,t){try{const n=function(e,t={}){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return;const n=e,i="string"==typeof n.type?n.type:"";if(!i)return;const s=n.scope&&"object"==typeof n.scope&&!Array.isArray(n.scope)?n.scope:{};return{v:1,id:"string"==typeof n.id?n.id:`event_${Date.now().toString(36)}`,seq:"number"==typeof n.seq&&Number.isFinite(n.seq)?n.seq:0,type:i,topic:"string"==typeof n.topic?n.topic:Pr(i),createdAt:"string"==typeof n.createdAt?n.createdAt:(new Date).toISOString(),payload:"payload"in n?n.payload:{},...!0===n.replay?{replay:!0}:{},scope:{...t,...s}}}(JSON.parse(String(e)),{instanceId:t});if(!n\|\|"events.connected"===n.type)return;if(n.type===Ee){const e=function(e,t){const n=Vt.safeParse(e);return n.success?qt.parse({instanceId:t,...n.data}):qt.parse(e)}(n.payload,t);return{...n,payload:e,scope:{...n.scope,instanceId:t}}}if(n.type===Te){const e=function(e,t){const n=Kt.safeParse(e);return n.success?Bt.parse({instanceId:t,...n.data}):Bt.parse(e)}(n.payload,t);return{...n,payload:e,scope:{...n.scope,instanceId:t}}}return{...n,scope:{...n.scope,instanceId:t}}}catch{return}}(t,e);if(n){if("streams.hello"===n.type){const t=bo(Ur,n.payload);if(!t.success)return this.logger?.warn?.({instanceId:e,issues:t.error.issues},"session-stream.handshake.invalid"),void i.close(1002,"Incompatible session stream handshake.");this.retries.get(e)?.timer.reset(),this.sessionStreamsHelloByInstance.set(e,t.data);const s=JSON.stringify({type:"node-agent.streams.hello",instanceId:e,payload:t.data});for(const e of this.outputs)this.sendOutput(e,s);return}this.recordAiSessionEvent(e,n),this.recordAppSessionEvent(e,n);for(const e of this.outputs)this.outputAccepts(e,n)&&this.sendForwarded(e,n)}}),i.on("close",()=>{this.sockets.get(e)===i&&(this.sockets.delete(e),this.socketUrls.delete(e),this.scheduleReconnect(e))}),i.on("error",()=>{this.logger?.warn?.({instanceId:e,url:t},"ai-session.event.forward.error"),this.logger?.warn?.({instanceId:e,url:t},"app-session.event.forward.error"),i.close()})}sendInstanceSubscription(e,t){if(t.readyState!==p.OPEN)return;const n=[...this.outputs].map(e=>this.outputSubscriptions.get(e));if(n.some(e=>void 0===e))return void t.send(JSON.stringify({v:1,type:"subscribe",eventEnvelopeVersion:Rr,aiSessionHierarchy:{subagents:!0},topics:[ye,"app.sessions","apps","instances"]}));const i=n.some(t=>t.messageDeltas.allInstances\|\|t.messageDeltas.instanceIds.includes(e)),s=n.some(e=>e.timelineAllSessions),o=[...new Set(n.flatMap(t=>t.timelineSessions.filter(t=>t.instanceId===e).map(e=>e.sessionId)))],r=n.map(e=>e.replaySince).filter(e=>Boolean(e)).sort()[0];t.send(JSON.stringify({v:1,type:"subscribe",eventEnvelopeVersion:Rr,aiSessionHierarchy:{subagents:!0},topics:[Ie,Ae,_e,...i?[Ee]:[],...s\|\|o.length?[we,Te]:[],"app.sessions","apps","instances"],aiSessionTransient:{...r?{replaySince:r}:{},messageDeltas:{allInstances:i,instanceIds:[]},timelineAllSessions:s,timelineSessions:o.map(t=>({instanceId:e,sessionId:t}))}}))}outputAccepts(e,t){const n=this.outputSubscriptions.get(e);return!n\|\|function(e,t){if(!e)return!0;if("ai-session.message-delta"!==t.type&&"ai-session.timeline-item"!==t.type&&"ai-session.timeline-item-delta"!==t.type)return!0;const n=t.payload&&"object"==typeof t.payload&&!Array.isArray(t.payload)?t.payload:{},i=String(n.instanceId\|\|t.scope?.instanceId\|\|"");return"ai-session.message-delta"===t.type?e.messageDeltas.allInstances\|\|e.messageDeltas.instanceIds.includes(i):e.timelineAllSessions\|\|e.timelineSessions.some(e=>e.instanceId===i&&e.sessionId===n.sessionId)}(n,t)}scheduleReconnect(e){const t=this.state.listInstances().find(t=>t.id===e),n=t&&Zr(t);if(!n\|\|!this.outputs.size)return;const i=this.retries.get(e)??{timer:new qr};if(i.timer.pending)return;i.url=n;const s=i.timer.schedule(()=>{this.sockets.has(e)\|\|this.connect(e,n)},{setTimeoutFn:this.setTimeoutFn});s&&(this.reconnectAttempts+=1,this.logger?.info?.({instanceId:e,url:n,attempt:s.attempt,delay:s.delay,reconnectAttempts:this.reconnectAttempts},"session-stream.connection.reconnect-scheduled")),this.retries.set(e,i)}recordAiSessionEvent(e,t){if(t.topic!==ye)return;if(t.type===Ee\|\|t.type===we\|\|t.type===Te)return;const n=Jr(t);if(n){const t=function(e,t){const{meta:n}=t.payload;if(t.type===Ie)return e?.streamId===n.streamId&&n.revision===e.revision?{kind:"duplicate",projection:e}:e?.streamId===n.streamId&&n.revision<e.revision?{kind:"stale",projection:e}:{kind:"applied",projection:Mt.parse({streamId:n.streamId,revision:n.revision,lastEventAt:n.generatedAt,snapshot:t.payload.snapshot})};if(!e\|\|e.streamId!==n.streamId)return{kind:"snapshot-required",projection:e,streamId:n.streamId};if(n.revision===e.revision)return{kind:"duplicate",projection:e};if(n.revision<e.revision)return{kind:"stale",projection:e};if(n.revision!==e.revision+1\|\|n.previousRevision!==e.revision)return{kind:"gap",projection:e,expectedRevision:e.revision+1,receivedRevision:n.revision};const i=new Map(e.snapshot.sessions.map(e=>[e.id,e]));if(t.type===Ae){for(const e of t.payload.upserted)i.set(e.id,e);for(const e of t.payload.removed)i.delete(e)}else for(const e of t.payload.sessionIds)i.delete(e);const s=[...i.values()],o=Lt.parse({runningCount:s.filter(e=>"running"===e.status).length,waitingCount:s.filter(e=>"waiting"===e.status).length,staleCount:e.snapshot.staleCount,sessions:s,updatedAt:n.generatedAt});return{kind:"applied",projection:Mt.parse({streamId:n.streamId,revision:n.revision,lastEventAt:n.generatedAt,snapshot:o})}}(this.aiSessionProjectionByInstance.get(e),n);"applied"!==t.kind&&"duplicate"!==t.kind&&"stale"!==t.kind\|\|this.aiSessionProjectionByInstance.set(e,t.projection)}const i=Yr(t.payload),s=this.lastAiSessionEventByInstance.get(e);s?.streamId===i.streamId&&void 0!==s.revision&&void 0!==i.revision&&i.revision>s.revision+1&&this.logger?.warn?.({instanceId:e,traceId:i.traceId,streamId:i.streamId,previousRevision:s.revision,revision:i.revision},"ai-session.event.forward.gap"),this.lastAiSessionEventByInstance.set(e,{streamId:i.streamId??s?.streamId,revision:i.revision??s?.revision}),this.logger?.info?.({instanceId:e,traceId:i.traceId,eventType:t.type,streamId:i.streamId,revision:i.revision},"ai-session.event.forward.message")}recordAppSessionEvent(e,t){if(t.topic!==rr)return;const n=function(e){const t=e.type===ar?Ar:e.type===cr?_r:e.type===dr?Er:void 0;if(!t)return;const n=bo(t,e.payload);return n.success?{type:e.type,payload:n.data}:void 0}(t);if(n){const t=function(e,t){const{meta:n}=t.payload;if(t.type===ar)return e?.streamId===n.streamId&&n.revision===e.revision?{kind:"duplicate",projection:e}:e?.streamId===n.streamId&&n.revision<e.revision?{kind:"stale",projection:e}:{kind:"applied",projection:fr.parse({streamId:n.streamId,revision:n.revision,lastEventAt:n.generatedAt,snapshot:Tr(t.payload.snapshot.sessions,t.payload.snapshot.updatedAt)})};if(!e\|\|e.streamId!==n.streamId)return{kind:"snapshot-required",projection:e,streamId:n.streamId};if(n.revision===e.revision)return{kind:"duplicate",projection:e};if(n.revision<e.revision)return{kind:"stale",projection:e};if(n.revision!==e.revision+1\|\|n.previousRevision!==e.revision)return{kind:"gap",projection:e,expectedRevision:e.revision+1,receivedRevision:n.revision};const i=[...e.snapshot.sessions];if(t.type===cr){const e=i.findIndex(e=>e.id===t.payload.session.id);Sr(t.payload.session.status)?e<0?i.push(t.payload.session):i[e]=t.payload.session:e>=0&&i.splice(e,1)}else{const e=i.findIndex(e=>e.id===t.payload.sessionId);e>=0&&i.splice(e,1)}const s=wr(i,n.generatedAt);return{kind:"applied",projection:fr.parse({streamId:n.streamId,revision:n.revision,lastEventAt:n.generatedAt,snapshot:s})}}(this.appSessionProjectionByInstance.get(e),n);"applied"!==t.kind&&"duplicate"!==t.kind&&"stale"!==t.kind\|\|this.appSessionProjectionByInstance.set(e,t.projection)}const i=Yr(t.payload),s=this.lastAppSessionEventByInstance.get(e);s?.streamId===i.streamId&&void 0!==s.revision&&void 0!==i.revision&&i.revision>s.revision+1&&this.logger?.warn?.({instanceId:e,traceId:i.traceId,streamId:i.streamId,previousRevision:s.revision,revision:i.revision},"app-session.event.forward.gap"),this.lastAppSessionEventByInstance.set(e,{streamId:i.streamId??s?.streamId,revision:i.revision??s?.revision}),this.logger?.info?.({instanceId:e,traceId:i.traceId,eventType:t.type,streamId:i.streamId,revision:i.revision},"app-session.event.forward.message")}replaySessionAuthority(e){if(!this.sessionAuthorityReplayedOutputs.has(e)&&e.readyState===p.OPEN){this.sessionAuthorityReplayedOutputs.add(e);for(const[t,n]of this.sessionStreamsHelloByInstance){const i=n.streams.map(e=>{const n=e.topic===ye?this.aiSessionProjectionByInstance.get(t):this.appSessionProjectionByInstance.get(t);return n?n.streamId!==e.streamId?{...e,streamId:n.streamId,latestRevision:n.revision,earliestRetainedRevision:n.revision}:{...e,latestRevision:Math.max(e.latestRevision,n.revision)}:e});this.sendOutput(e,JSON.stringify({type:"node-agent.streams.hello",instanceId:t,payload:{...n,streams:i}}))}for(const[t,n]of this.aiSessionProjectionByInstance)this.sendForwarded(e,this.createEvent(Ie,{meta:{streamId:n.streamId,instanceId:t,revision:n.revision,traceId:`ais_replay_${Date.now().toString(36)}`,generatedAt:n.lastEventAt,reason:"startup"},snapshot:n.snapshot},{instanceId:t}));for(const[t,n]of this.appSessionProjectionByInstance)this.sendForwarded(e,this.createEvent(ar,{meta:{streamId:n.streamId,instanceId:t,revision:n.revision,traceId:`aps_replay_${Date.now().toString(36)}`,generatedAt:n.lastEventAt,reason:"startup"},snapshot:n.snapshot},{instanceId:t}))}}}function Wr(e){const t=go.safeParse(Xr(e));return t.success?t.data:void 0}function Xr(e){return{instanceId:e.id,revision:e.stateRevision,updatedAt:e.updatedAt,status:e.status,health:e.health,connectionStatus:e.connectionStatus,accessStatus:"online"===e.connectionStatus\|\|"online"===e.agentStatus?"reachable":"endpoint-unreachable",imageProvisioning:e.imageProvisioning,workspace:e.workspace,runtime:e.runtime,runtimeVersion:e.runtimeVersion,ready:e.ready,lastHeartbeatAt:e.lastHeartbeatAt}}function Yr(e){const t=e&&"object"==typeof e&&!Array.isArray(e)?e:{},n=t.meta&&"object"==typeof t.meta&&!Array.isArray(t.meta)?t.meta:{};return{streamId:"string"==typeof n.streamId?n.streamId:void 0,revision:"number"==typeof n.revision?n.revision:void 0,traceId:"string"==typeof n.traceId?n.traceId:void 0}}function Jr(e){const t=e.type===Ie?Ft:e.type===Ae?$t:e.type===_e?Ht:void 0;if(!t)return;const n=bo(t,e.payload);return n.success?{type:e.type,payload:n.data}:void 0}function Qr(e){return e.topic===ye&&(e.type===Ie\|\|e.type===Ae\|\|e.type===_e)}function Zr(e){if(!function(e){return!1!==e.ready&&(!e.runtimeVersion\|\|["matched","failed"].includes(e.runtimeVersion.phase))}(e))return;const t=e.target?.api\|\|e.target?.web;if(t)try{const e=new URL("/api/events",t);return e.searchParams.set("aiSessionTransient","1"),e.searchParams.set("aiSessionAuthoritySnapshot","1"),e.searchParams.set("aiSessionHierarchy","subagents"),e.protocol="https:"===e.protocol?"wss:":"ws:",e.toString()}catch{return}}const ea=new Set(["provisioning","starting","registering","registered","running","unhealthy"]),ta=JSON.stringify({id:"{{.ID}}",name:"{{.Name}}",cpu:"{{.CPUPerc}}",memory:"{{.MemUsage}}",memoryPercent:"{{.MemPerc}}",network:"{{.NetIO}}",blockIo:"{{.BlockIO}}",pids:"{{.PIDs}}"});class na{snapshots=new Map;runCommand;targets;publish;intervalMs;timer;inFlight;pendingTargets=new Map;collectingTargets=new Map;constructor(e,t,n,i=3e3){this.runCommand=e,this.targets=t,this.publish=n,this.intervalMs=i}start(){this.collect().catch(()=>{}),this.timer=setInterval(()=>{this.collect().catch(()=>{})},this.intervalMs)}stop(){this.timer&&clearInterval(this.timer),this.timer=void 0}async snapshot(e){const t=this.targets().find(t=>t.id===e);if(!t)return;if(!ea.has(t.status))return ca(t.id);const n=this.snapshots.get(e);return n&&Date.now()-Date.parse(n.sampledAt)<=this.intervalMs?n:(await this.collect([t]),this.snapshots.get(e))}async collect(e){const t=e\|\|this.targets();if(!e){const e=new Set(t.map(e=>e.id));for(const t of this.snapshots.keys())e.has(t)\|\|this.snapshots.delete(t)}for(const e of t){const t=ia(e);this.collectingTargets.get(e.id)!==t&&this.pendingTargets.set(e.id,e)}this.inFlight\|\|(this.inFlight=this.drain().finally(()=>{this.inFlight=void 0})),await this.inFlight}async drain(){for(;this.pendingTargets.size;){const e=[...this.pendingTargets.values()];this.pendingTargets.clear();for(const t of e)this.collectingTargets.set(t.id,ia(t));try{await this.collectOnce(e)}finally{for(const t of e)this.collectingTargets.delete(t.id)}}}async collectOnce(e){const t=e.filter(e=>ea.has(e.status)&&(e.runtime.containerId\|\|e.runtime.containerName));for(const t of e.filter(e=>ea.has(e.status)&&!e.runtime.containerId&&!e.runtime.containerName))this.update(da(t.id));for(const t of e.filter(e=>!ea.has(e.status)))this.update(ca(t.id));if(!t.length)return;const n=t.map(e=>e.runtime.containerId\|\|e.runtime.containerName),i=(new Date).toISOString();try{const e=await this.runCommand("docker",["stats","--no-stream","--format",ta,...n],{timeoutMs:5e3});this.applyDockerOutput(t,e.stdout,i)}catch(e){if(1===t.length)return void this.update(la(t[0].id,i,e instanceof Error?e.message:String(e)));await Promise.all(t.map(async e=>{const t=e.runtime.containerId\|\|e.runtime.containerName;try{const n=await this.runCommand("docker",["stats","--no-stream","--format",ta,t],{timeoutMs:5e3});this.applyDockerOutput([e],n.stdout,i)}catch(t){this.update(la(e.id,i,t instanceof Error?t.message:String(t)))}}))}}applyDockerOutput(e,t,n){const i=function(e,t=(new Date).toISOString()){const n=new Map;for(const i of e.split(/\r?\n/).filter(Boolean)){let e;try{e=JSON.parse(i)}catch{continue}const s=aa(e.id),o=aa(e.name),r=s\|\|o;if(!r)continue;const a=sa(aa(e.memory)),c=sa(aa(e.network)),d=sa(aa(e.blockIo)),l=Xs.parse({instanceId:r,runtimeKind:"docker",state:"available",sampledAt:t,cpu:oa(e.cpu,"usagePercent"),memory:a?{usageBytes:a[0],...void 0!==a[1]?{limitBytes:a[1]}:{},...oa(e.memoryPercent,"usagePercent")}:void 0,network:c?{rxBytes:c[0],txBytes:c[1]\|\|0}:void 0,blockIo:d?{readBytes:d[0],writeBytes:d[1]\|\|0}:void 0,pids:ra(e.pids)});s&&n.set(s,l),o&&n.set(o,l)}return n}(t,n);for(const t of e){const e=[t.runtime.containerId,t.runtime.containerName].filter(Boolean),s=[...i.entries()].find(([t])=>e.some(e=>e===t\|\|e.startsWith(t)\|\|t.startsWith(e)))?.[1];this.update(s?{...s,instanceId:t.id}:la(t.id,n,"Container metrics were not returned by Docker."))}}update(e){const t=Xs.parse(e);this.snapshots.set(t.instanceId,t),this.publish?.(t)}}function ia(e){return[e.status,e.runtime.containerId\|\|"",e.runtime.containerName\|\|""].join("\0")}function sa(e){if(!e)return;const[t,n]=e.split("/").map(e=>function(e){const t=e.trim().match(/^([0-9]+(?:\.[0-9]+)?)\s([kmgtpe]?i?b)$/i);if(!t)return;const n=Number(t[1]),i=t[2].toLowerCase(),s=i.includes("i"),o="b"===i[0]?"":i[0],r=o?"kmgtpe".indexOf(o)+1:0;return Math.round(n(s?1024:1e3)r)}(e\|\|""));return void 0===t?void 0:[t,n]}function oa(e,t){const n=Number(aa(e).replace(/%$/,""));return Number.isFinite(n)&&n>=0?{[t]:n}:void 0}function ra(e){const t=Number(aa(e));return Number.isFinite(t)&&t>=0?t:void 0}function aa(e){return"string"==typeof e\|\|"number"==typeof e?String(e).trim():""}function ca(e){return{instanceId:e,runtimeKind:"docker",state:"stopped",sampledAt:(new Date).toISOString()}}function da(e){return{instanceId:e,runtimeKind:"docker",state:"pending",sampledAt:(new Date).toISOString()}}function la(e,t,n){return{instanceId:e,runtimeKind:"docker",state:"unavailable",sampledAt:t,error:n.slice(0,2048)}}function ua(e,t,n){return Object.assign(new Error(e),{statusCode:t,code:n})}function pa(e){const i=n.resolve(e);let s;try{s=t.statSync(i)}catch(e){const t=e&&"object"==typeof e?e.code:void 0;if("ENOENT"===t\|\|"ENOTDIR"===t)throw ua(`Folder ${i} was not found.`,404,"NODE_FOLDER_PATH_NOT_FOUND");throw ua(`Folder ${i} is not accessible.`,403,"NODE_FOLDER_PATH_UNREADABLE")}if(!s.isDirectory())throw ua(`Path ${i} is not a folder.`,400,"NODE_FOLDER_PATH_NOT_DIRECTORY");try{t.accessSync(i,t.constants.R_OK\|t.constants.X_OK)}catch{throw ua(`Folder ${i} is not accessible.`,403,"NODE_FOLDER_PATH_UNREADABLE")}return i}function ma(e){try{return t.statSync(e).isDirectory()}catch{return!1}}function ha(){if("win32"!==process.platform)return[n.parse(n.resolve(process.cwd())).root];const e=n.parse(n.resolve(process.cwd())).root,t=Array.from({length:26},(e,t)=>`${String.fromCharCode(65+t)}:\\`);return[...new Set([e,...t])].filter(ma)}function ga(){const e=n.resolve(c.homedir()),t=ha().map(e=>n.resolve(e));return[...ma(e)?[{kind:"home",name:n.basename(e)\|\|e,path:e}]:[],...t.map(e=>({kind:"root",name:e,path:e}))]}function fa(e,i){let s;try{s=t.statSync(e)}catch{return}if(!s.isDirectory())return;const o=n.resolve(e),r=n.basename(o)\|\|o;let a=[];try{a=i>0?t.readdirSync(o,{withFileTypes:!0}):[]}catch{a=[]}const c=i>0?a.filter(e=>e.isDirectory()\|\|e.isSymbolicLink()&&ma(n.join(o,e.name))).sort((e,t)=>e.name.localeCompare(t.name)).slice(0,80).flatMap(e=>{const t=fa(n.join(o,e.name),i-1);return t?[t]:[]}):[];return{name:r,path:o,children:c}}function ya(e){return(e.path?[pa(e.path)]:ha()).flatMap(t=>{const n=fa(t,e.depth);return n?[n]:[]})}function Ia(){return process.env.TASK_HANDOFF_NODE_AGENT_DATA_DIR\|\|n.join(c.homedir(),".config","task-handoff","node-agent")}function Aa(e=Ia()){const t=n.resolve(e);return{dataDir:t,identityPath:n.join(t,"identity.json"),settingsPath:n.join(t,"runtime-settings.json"),localFoldersDir:n.join(t,"local-folders"),nodeRuntimesDir:n.join(t,"node-runtimes"),controlledInstancesDir:n.join(t,"controlled-instances"),environmentTemplatesDir:n.join(t,"environment-templates"),instancePrivateConfigsDir:n.join(t,"instance-private-configs"),nodeModelsDir:n.join(t,"models"),modelAssignmentsDir:n.join(t,"model-assignments"),modelEnvironmentsDir:n.join(t,"model-environments"),gitCredentialPayloadsDir:n.join(t,"git-credentials","payloads"),gitCredentialAssignmentsDir:n.join(t,"git-credentials","assignments"),gitCredentialAuthorizationSetsDir:n.join(t,"git-credentials","authorization-sets"),gitWorkspaceProvisioningIntentsDir:n.join(t,"git-credentials","workspace-provisioning-intents"),updatesDir:n.join(t,"updates"),logsDir:n.join(t,"logs"),databasePath:n.join(t,"node-agent.sqlite"),storyRegistryDir:n.join(t,"story-registry"),storyAutomationsDir:n.join(t,"story-automations"),storyContentDir:n.join(t,"stories"),storyMutationsDir:n.join(t,".story-mutations"),storyTrashDir:n.join(t,".story-trash")}}function _a(e,t){const i=n.extname(e);return`${i?e.slice(0,-i.length):e}.${t}${i}`}function Ea(e,n=10485760,i=2){if(!t.existsSync(e))return!1;const s=t.lstatSync(e);if(!s.isFile()\|\|s.isSymbolicLink()\|\|s.size<=n)return!1;if(i>0){!function(e,n){if(!(n<=0)){t.rmSync(_a(e,n),{force:!0});for(let i=n-1;i>=1;i-=1){const n=_a(e,i);t.existsSync(n)&&t.renameSync(n,_a(e,i+1))}}}(e,i);const s=function(e,n){const i=t.statSync(e),s=Math.min(i.size,n),o=Buffer.allocUnsafe(s),r=t.openSync(e,"r");let a=0;try{for(;a<s;){const e=t.readSync(r,o,a,s-a,i.size-s+a);if(0===e)break;a+=e}}finally{t.closeSync(r)}return a===s?o:o.subarray(0,a)}(e,n);t.writeFileSync(_a(e,1),s,{mode:384})}return t.truncateSync(e,0),t.chmodSync(e,384),!0}class wa{logsDir;localInstancesRoot;localInstancesTrashRoot;privateConfigsDir;options;constructor(e,t={}){this.options=t,this.logsDir=e.logsDir,this.localInstancesRoot=n.join(e.dataDir,"local-instances"),this.localInstancesTrashRoot=n.join(e.dataDir,"local-instances-trash"),this.privateConfigsDir=e.instancePrivateConfigsDir}run(e){this.capNodeAgentLogs();const n=new Set(e);if(this.removeOrphanPrivateConfigs(n),t.existsSync(this.localInstancesRoot)){le(this.localInstancesRoot);for(const e of t.readdirSync(this.localInstancesRoot,{withFileTypes:!0}))e.isDirectory()&&!e.isSymbolicLink()&&(n.has(e.name)?this.capControlledInstanceLogs(e.name):this.retire(e.name))}return function(e){if(!t.existsSync(e.trashRoot))return[];const n=e.nowMs??Date.now(),i=e.retentionMs??ce,s=[];for(const o of t.readdirSync(e.trashRoot,{withFileTypes:!0})){const r=de(e.trashRoot,o.name);try{const e=Number(o.name.split("-",1)[0]);if(!Number.isFinite(e)\|\|e+i>n)continue;const a=t.lstatSync(r);a.isSymbolicLink()?t.unlinkSync(r):a.isDirectory()?t.rmSync(r,{recursive:!0,force:!0}):t.unlinkSync(r),s.push(r)}catch(t){e.logger?.("retired persistence entry cleanup failed",{path:r,error:t instanceof Error?t.message:String(t)})}}return s}({trashRoot:this.localInstancesTrashRoot,retentionMs:this.options.retentionMs??ce,nowMs:this.now(),logger:this.options.logger})}capActiveInstanceLogs(e){for(const t of e)this.capControlledInstanceLogs(t)}capNodeAgentLogs(){const e=[];for(const t of["node-agent.out.log","node-agent.err.log"]){const i=n.join(this.logsDir,t);try{Ea(i)&&e.push(i)}catch(e){this.options.logger?.("node-agent log rotation failed",{filePath:i,error:e instanceof Error?e.message:String(e)})}}return e}capControlledInstanceLogs(e){const t=n.resolve(this.localInstancesRoot,e);if(n.dirname(t)!==n.resolve(this.localInstancesRoot))return[];const i=n.join(t,"logs"),s=[];for(const t of["controlled-instance.out.log","controlled-instance.err.log"]){const o=n.join(i,t);try{Ea(o)&&s.push(o)}catch(t){this.options.logger?.("controlled instance log rotation failed",{instanceId:e,filePath:o,error:t instanceof Error?t.message:String(t)})}}return s}retire(e){try{return function(e){const n=de(e.sourceRoot,e.entryName);if(!t.existsSync(n))return;const i=t.lstatSync(n);if(!i.isDirectory()\|\|i.isSymbolicLink())throw new Error(`Retention source must be a real directory: ${n}`);le(e.trashRoot);const s=e.nowMs??Date.now();let o=0,r=`${s}-${e.entryName}`;for(;t.existsSync(de(e.trashRoot,r));)o+=1,r=`${s}-${o}-${e.entryName}`;const a=de(e.trashRoot,r);return t.renameSync(n,a),a}({sourceRoot:this.localInstancesRoot,entryName:e,trashRoot:this.localInstancesTrashRoot,nowMs:this.now()})}catch(t){return void this.options.logger?.("local instance persistence retirement failed",{instanceId:e,error:t instanceof Error?t.message:String(t)})}}removeOrphanPrivateConfigs(e){if(t.existsSync(this.privateConfigsDir))for(const i of t.readdirSync(this.privateConfigsDir,{withFileTypes:!0})){if(!i.isFile()\|\|!i.name.endsWith(".json"))continue;const s=i.name.slice(0,-5);if(e.has(s))continue;const o=n.join(this.privateConfigsDir,i.name);try{(this.options.removeFile\|\|(e=>t.rmSync(e,{force:!0})))(o)}catch(e){this.options.logger?.("orphan instance private config cleanup failed",{instanceId:s,filePath:o,error:e instanceof Error?e.message:String(e)})}}}now(){return this.options.now?.()??Date.now()}}function Ta(e,t=process.platform){const i=n.resolve(e),s=d.createHash("sha256").update(i).digest("hex").slice(0,16);return"win32"===t?`\\\\.\\pipe\\task-handoff-node-agent-${s}`:n.join("/tmp",`task-handoff-node-agent-${process.getuid?.()??"user"}`,`${s}.sock`)}async function ba(e,t,n={}){const s=n.method\|\|"GET",o="string"==typeof n.body\|\|n.body instanceof Buffer?n.body:void 0===n.body\|\|null===n.body?void 0:String(n.body),r=new Headers(n.headers\|\|{});return void 0===o\|\|r.has("content-length")\|\|r.set("content-length",String(Buffer.byteLength(o))),new Promise((a,c)=>{const d=i.request({socketPath:e,method:s,path:`/api/node-agent${t}`,headers:Object.fromEntries(r.entries())},e=>{const t=e.statusCode\|\|500;a(new Response("HEAD"!==s&&204!==t&&205!==t&&304!==t?h.Readable.toWeb(e):null,{status:t,headers:e.headers}))});d.on("error",c);const l=()=>d.destroy(new DOMException("The operation was aborted.","AbortError"));n.signal?.aborted?l():n.signal?.addEventListener("abort",l,{once:!0}),d.once("close",()=>n.signal?.removeEventListener("abort",l)),void 0!==o&&d.write(o),d.end()})}const Sa="runtime-manifest.json";class va extends Error{code;retryable;constructor(e,t,n){super(t,void 0===n?.cause?void 0:{cause:n.cause}),this.name="RuntimeArtifactError",this.code=e,this.retryable=n?.retryable??!1}}async function Na(e,t=""){const i=[],s=await g.readdir(n.join(e,t),{withFileTypes:!0});for(const o of s){const s=t?n.posix.join(t,o.name):o.name;if(!t&&s===Sa)continue;const r=n.join(e,...s.split("/"));if(o.isDirectory()){i.push(...await Na(e,s));continue}if(o.isSymbolicLink()){const t=await g.readlink(r);if(n.isAbsolute(t))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime payload symlink is absolute: ${s}`);const o=n.resolve(n.dirname(r),t),a=n.relative(n.resolve(e),o);if(!a\|\|".."===a\|\|a.startsWith(`..${n.sep}`)\|\|n.isAbsolute(a))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime payload symlink escapes the artifact: ${s}`);if(!await g.lstat(o).catch(()=>{}))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime payload symlink is broken: ${s}`);i.push({absolutePath:r,relativePath:s,kind:"symlink",target:t,size:Buffer.byteLength(t)});continue}if(!o.isFile())throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime payload contains unsupported entry: ${s}`);const a=await g.lstat(r);i.push({absolutePath:r,relativePath:s,kind:"file",size:a.size})}return i}async function Oa(e){const n=(await Na(e)).sort((e,t)=>function(e,t){return Buffer.compare(Buffer.from(e,"utf8"),Buffer.from(t,"utf8"))}(e.relativePath,t.relativePath)),i=d.createHash("sha256");for(const e of n){if(i.update("file"===e.kind?"F":"L","ascii"),i.update(Buffer.from(e.relativePath,"utf8")),i.update(Buffer.from([0])),i.update(Buffer.from(String(e.size),"ascii")),i.update(Buffer.from([0])),"file"===e.kind)for await(const n of t.createReadStream(e.absolutePath))i.update(n);else i.update(Buffer.from(e.target,"utf8"));i.update(Buffer.from([0]))}return i.digest("hex")}function za(e){for(const[t,n]of[["version",e.version],["platform",e.platform],["arch",e.arch]])if(!/^[0-9A-Za-z._-]+$/.test(n))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Invalid runtime artifact ${t}: ${n}`);return`${e.version}-${e.platform}-${e.arch}`}function Ca(e,t){return`${za(e)}-${e.sha256}-${t}`}async function Ra(e){const n=d.createHash("sha256");for await(const i of t.createReadStream(e))n.update(i);return n.digest("hex")}class xa{#e;#t;#n=new Map;constructor(e){this.#e=e.cacheDir,this.#t=e.fetchImpl??fetch}resolve(e,t){const n=Ki.parse(e);if(!/^[a-f0-9]{64}$/.test(t.archiveSha256))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID","Runtime archive SHA-256 is invalid.");if((t.archiveUrl?1:0)+(t.archivePath?1:0)!=1)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID","Runtime artifact source must specify exactly one archive location.");const i=Ca(n,t.archiveSha256),s=this.#n.get(i);if(s)return s;const o=this.#i(n,t).finally(()=>this.#n.delete(i));return this.#n.set(i,o),o}async#i(e,i){if(!/^[a-f0-9]{64}$/.test(i.archiveSha256))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID","Runtime archive SHA-256 is invalid.");const s=Ca(e,i.archiveSha256),o=n.join(this.#e,"archives"),r=n.join(o,`${s}.tar.gz`);if(await g.mkdir(o,{recursive:!0}),await this.#s(r,e,i.archiveSha256))return{identity:e,archivePath:r,cacheHit:!0};await g.rm(r,{force:!0});const a=n.join(o,`.${s}.${d.randomUUID()}.part`);try{const n=await g.open(a,"wx");if(i.archivePath)await f.pipeline(t.createReadStream(i.archivePath),n.createWriteStream());else{const e=await this.#t(i.archiveUrl);if(!e.ok\|\|!e.body)throw await n.close(),new va("INSTANCE_RUNTIME_ARTIFACT_UNAVAILABLE",`Runtime artifact download failed with HTTP ${e.status}.`,{retryable:e.status>=500});await f.pipeline(e.body,n.createWriteStream())}if(await Ra(a)!==i.archiveSha256)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID","Downloaded runtime archive SHA-256 does not match release metadata.");return await this.#o(a,e),await g.rename(a,r),{identity:e,archivePath:r,cacheHit:!1}}catch(e){if(e instanceof va)throw e;throw new va("INSTANCE_RUNTIME_ARTIFACT_UNAVAILABLE","Could not download runtime artifact.",{cause:e,retryable:!0})}finally{await g.rm(a,{force:!0})}}async#s(e,t,n){try{return await Ra(e)===n&&(await this.#o(e,t),!0)}catch{return!1}}async#o(e,t){const i=n.join(this.#e,"validation",`${za(t)}-${d.randomUUID()}`);try{await async function(e,t){await g.mkdir(t,{recursive:!0});try{await y.extract({file:e,cwd:t,strict:!0,preservePaths:!1,filter:(e,t)=>{const i=n.posix.normalize(e.replace(/^\.\//,""));if(!i\|\|".."===i\|\|i.startsWith("../")\|\|n.posix.isAbsolute(i))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime archive entry escapes the artifact root: ${e}`);const s=t.type;if("File"!==s&&"OldFile"!==s&&"Directory"!==s&&"SymbolicLink"!==s)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime archive contains unsupported entry type ${s??"unknown"}: ${e}`);return!0}})}catch(e){throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID","Could not extract runtime artifact safely.",{cause:e})}}(e,i),await async function(e,t,i){const s=await async function(e){let t;try{t=JSON.parse(await g.readFile(n.join(e,Sa),"utf8"))}catch(e){throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID","Runtime artifact manifest is missing or invalid JSON.",{cause:e})}const i=bo(Ki,t);if(!i.success)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime artifact manifest is invalid: ${i.error.message}`);return i.data}(e);if(function(e,t){for(const n of["packageName","version","platform","arch","formatVersion","launcherAbi","entrypoint","sha256"])if(e[n]!==t[n])throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime artifact ${"sha256"===n?"SHA-256":n} mismatch: expected ${t[n]}, got ${e[n]}.`)}(s,t),1!==s.formatVersion)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Unsupported runtime artifact format ${s.formatVersion}.`);if(i?.platform&&"universal"!==s.platform&&s.platform!==i.platform)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime artifact platform ${s.platform} does not match ${i.platform}.`);if(i?.arch&&"universal"!==s.arch&&s.arch!==i.arch)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime artifact architecture ${s.arch} does not match ${i.arch}.`);if(void 0!==i?.launcherAbi&&s.launcherAbi>i.launcherAbi)throw new va("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Runtime requires launcher ABI ${s.launcherAbi}, but the base runtime provides ${i.launcherAbi}.`);const o=function(e,t){if(!e\|\|e.includes("\\")\|\|n.posix.isAbsolute(e))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`${t} must be a non-empty POSIX relative path.`);const i=n.posix.normalize(e);if("."===i\|\|".."===i\|\|i.startsWith("../"))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`${t} escapes the runtime root.`);return i}(s.entrypoint,"Runtime entrypoint"),r=await g.lstat(n.join(e,...o.split("/"))).catch(()=>{});if(!r?.isFile())throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime entrypoint is missing: ${o}`);const a=await Oa(e);if(a!==s.sha256)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Runtime payload SHA-256 mismatch: expected ${s.sha256}, got ${a}.`);return s}(i,t,{platform:t.platform,arch:t.arch})}finally{await g.rm(i,{recursive:!0,force:!0})}}}async function ka(e,t,i,s=fetch){if("linux"!==t\|\|!["x64","arm64"].includes(i))throw new va("INSTANCE_BASE_RUNTIME_INCOMPATIBLE",`Managed controlled-instance updates require a Linux x64 or arm64 target, received ${t}/${i}.`);const o=await async function(e){const t=`controlled-instance-runtime-${e}-linux-universal`,i=function(){const e=process.env.TASK_HANDOFF_BUNDLED_RUNTIME_DIR?.trim();return n.resolve(e\|\|n.join(n.dirname(process.argv[1]\|\|process.cwd()),"..","runtime-artifacts"))}();try{const[s,o]=await Promise.all([g.readFile(n.join(i,`${t}.manifest.json`),"utf8"),g.readFile(n.join(i,`${t}.tar.gz.sha256`),"utf8")]),r=bo(Ki,JSON.parse(s));if(!r.success\|\|r.data.version!==e\|\|"linux"!==r.data.platform\|\|"universal"!==r.data.arch)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Bundled controlled-instance ${e} has an invalid Linux manifest.`);const a=o.trim().split(/\s+/)[0]?.toLowerCase();if(!a\|\|!/^[a-f0-9]{64}$/.test(a))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Bundled controlled-instance ${e} has an invalid archive checksum.`);return{identity:r.data,source:{archivePath:n.join(i,`${t}.tar.gz`),archiveSha256:a}}}catch(t){if("ENOENT"===t.code)return;if(t instanceof va)throw t;throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Could not read bundled controlled-instance ${e}.`,{cause:t})}}(e);if(o)return o;const r=`controlled-instance-runtime-${e}-linux-universal`,a=function(e){const t=process.env.TASK_HANDOFF_RUNTIME_RELEASE_BASE_URL?.trim();return t?t.replaceAll("{version}",e).replace(/\/$/,""):`https://github.com/edgestorage/task-handoff/releases/download/v${e}`}(e),c=`${a}/${r}.manifest.json`,d=`${a}/${r}.tar.gz`,l=`${a}/${r}.tar.gz.sha256`,[u,p]=await Promise.all([s(c),s(l)]).catch(t=>{throw new va("INSTANCE_RUNTIME_ARTIFACT_UNAVAILABLE",`Could not read release metadata for controlled-instance ${e}.`,{cause:t,retryable:!0})});if(!u.ok\|\|!p.ok)throw new va("INSTANCE_RUNTIME_ARTIFACT_UNAVAILABLE",`Release metadata for controlled-instance ${e} is unavailable (manifest HTTP ${u.status}, checksum HTTP ${p.status}).`,{retryable:u.status>=500\|\|p.status>=500});let m;try{m=await u.json()}catch(t){throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Release manifest for controlled-instance ${e} is not valid JSON.`,{cause:t})}const h=bo(Ki,m);if(!h.success)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Release manifest for controlled-instance ${e} is invalid: ${h.error.message}`);if(h.data.version!==e\|\|"linux"!==h.data.platform\|\|"universal"!==h.data.arch)throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Release identity mismatch: requested ${e}-linux-universal, received ${h.data.version}-${h.data.platform}-${h.data.arch}.`);const f=(await p.text()).trim().split(/\s+/)[0]?.toLowerCase();if(!f\|\|!/^[a-f0-9]{64}$/.test(f))throw new va("INSTANCE_RUNTIME_ARTIFACT_INVALID",`Release checksum for controlled-instance ${e} is invalid.`);return{identity:h.data,source:{archiveUrl:d,archiveSha256:f}}}class Da{store;desiredVersion;hooks;inFlight=new Map;requests=new Map;cancelled=new Set;now;delay;drainTimeoutMs;verificationTimeoutMs;pollIntervalMs;maxAttempts;retryBaseDelayMs;retryMaxDelayMs;constructor(e,t,n,i={}){this.store=e,this.desiredVersion=t,this.hooks=n,this.now=i.now\|\|(()=>new Date),this.delay=i.delay\|\|(e=>new Promise(t=>setTimeout(t,e))),this.drainTimeoutMs=i.drainTimeoutMs??3e5,this.verificationTimeoutMs=i.verificationTimeoutMs??6e4,this.pollIntervalMs=i.pollIntervalMs??250,this.maxAttempts=function(e){if(!Number.isInteger(e)\|\|e<=0)throw new TypeError("maxAttempts must be a positive integer.");return e}(i.maxAttempts??3),this.retryBaseDelayMs=qa(i.retryBaseDelayMs??1e3,"retryBaseDelayMs"),this.retryMaxDelayMs=qa(i.retryMaxDelayMs??3e4,"retryMaxDelayMs")}schedule(e,t={}){const n=this.requests.get(e)\|\|{startRequested:!1,resumeCancelled:!1};n.startRequested\|\|=!0===t.startRequested,n.resumeCancelled\|\|=!0===t.resumeCancelled\|\|!0===t.startRequested,n.resumeCancelled&&this.cancelled.delete(e),this.requests.set(e,n);const i=this.inFlight.get(e);if(i)return i;const s=Promise.resolve().then(()=>this.reconcile(e,n)).finally(()=>{this.inFlight.delete(e),this.requests.delete(e)});return this.inFlight.set(e,s),s}isRunning(e){return this.inFlight.has(e)}cancel(e){return this.cancelled.add(e),this.inFlight.get(e)}async reconcile(e,t){let n=this.requireInstance(e);const i=this.desiredVersion();if(this.cancelled.has(e)&&!t.resumeCancelled)return this.storePhase(n,"pending");if(Ma(n))return this.storePhase(n,"pending");const s=n.runtimeVersion?.desiredVersion!==i\|\|t.startRequested\|\|ja(n)?0:this.remainingRetryDelayMs(n.runtimeVersion);if(s>0&&(await this.delay(s),n=this.requireInstance(e),this.cancelled.has(e)))return this.storePhase(n,"pending");const o=Pa(n),r=o===i&&(await(this.hooks.isInstalled?.(n,i))??!0);if(this.cancelled.has(e))return this.storePhase(this.requireInstance(e),"pending");if(o===i&&r)return this.storeState(n,{desiredVersion:i,actualVersion:o,phase:"matched",attempt:n.runtimeVersion?.attempt\|\|0,matchedAt:this.timestamp()},!ja(n)&&"failed"!==n.health);if(n=this.storeState(n,function(e,t,n,i=!1){const s=e.runtimeVersion,o=s?.desiredVersion===t&&"matched"!==s.phase;return{desiredVersion:t,...n?{actualVersion:n}:{},phase:"pending",attempt:o?s.attempt:0,error:(o?s.error:void 0)\|\|(n!==t\|\|i?Ua(t,n):Fa("INSTANCE_RUNTIME_VERIFICATION_FAILED",`Controlled-instance ${t} is running, but the active runtime artifact does not match the desired release identity.`,t,n,!0))}}(n,i,o,r)),ja(n)&&!t.startRequested)return n;let a=!1,c=0;try{for(;c<this.maxAttempts;){if(this.cancelled.has(e))return this.storePhase(this.requireInstance(e),"pending");let s;try{if(n=this.storePhase(n,"draining"),await(this.hooks.beginDrain?.(n)),a=!0,n=this.requireInstance(e),La(n)){const t=await this.waitUntil(e,this.drainTimeoutMs,e=>!La(e));if(n=this.requireInstance(e),!t){if(this.cancelled.has(e))return this.storePhase(n,"pending");await(this.hooks.onForcedDrain?.(n))}}if(n=this.storePhase(this.requireInstance(e),"installing",!0),c+=1,await this.hooks.install(n,i),this.cancelled.has(e)\|\|ja(this.requireInstance(e))&&!t.startRequested)return this.storePhase(this.requireInstance(e),"pending");if(n=this.storePhase(this.requireInstance(e),"restarting"),await this.hooks.restart(n),this.cancelled.has(e))return this.storePhase(this.requireInstance(e),"pending");n=this.storePhase(this.requireInstance(e),"verifying");const s=await this.waitUntil(e,this.verificationTimeoutMs,e=>Pa(e)===i);if(this.cancelled.has(e))return this.storePhase(this.requireInstance(e),"pending");if(!s)throw Fa("INSTANCE_RUNTIME_VERIFICATION_FAILED",`Instance ${e} did not register controlled-instance ${i} after restart.`,i,Pa(this.requireInstance(e)),!0);const o=this.requireInstance(e);if(this.hooks.isInstalled&&!await this.hooks.isInstalled(o,i))throw Fa("INSTANCE_RUNTIME_VERIFICATION_FAILED",`Instance ${e} reported controlled-instance ${i}, but its active runtime release is missing.`,i,Pa(o),!0);return this.storeState(o,{desiredVersion:i,actualVersion:i,phase:"matched",attempt:o.runtimeVersion?.attempt\|\|1,matchedAt:this.timestamp()},!ja(o)&&"failed"!==o.health)}catch(t){if(this.cancelled.has(e))return this.storePhase(this.requireInstance(e),"pending");s=$a(t,i,Pa(this.store.get(e)))}n=this.requireInstance(e);const o=n.runtimeVersion?.attempt\|\|1;if(!s.retryable\|\|c>=this.maxAttempts)return this.storeBatchFailure(n,i,o>=this.maxAttempts&&s.retryable?Ha(i,Pa(n),this.maxAttempts,s):s);n=this.storeState(n,{desiredVersion:i,...Pa(n)?{actualVersion:Pa(n)}:{},phase:"pending",attempt:o,lastAttemptAt:this.timestamp(),error:s}),await this.delay(this.retryDelayMs(o))}return this.storeBatchFailure(n,i,Ha(i,Pa(n),this.maxAttempts,n.runtimeVersion?.error))}finally{a&&await(this.hooks.endDrain?.(this.requireInstance(e)))}}storeBatchFailure(e,t,n){const i=Pa(e);return this.storeState(e,{desiredVersion:t,...i?{actualVersion:i}:{},phase:"pending",attempt:e.runtimeVersion?.attempt\|\|0,lastAttemptAt:this.timestamp(),error:n})}retryDelayMs(e){return Math.min(this.retryMaxDelayMs,this.retryBaseDelayMs2*Math.max(0,e-1))}remainingRetryDelayMs(e){if(!e?.error\|\|!e.lastAttemptAt)return 0;const t=Date.parse(e.lastAttemptAt);return Number.isFinite(t)?Math.max(0,t+this.retryDelayMs(e.attempt\|\|1)-this.now().getTime()):0}storePhase(e,t,n=!1){const i=this.desiredVersion(),s=Pa(e),o=e.runtimeVersion?.desiredVersion===i?e.runtimeVersion.error:void 0;return this.storeState(e,{desiredVersion:i,...s?{actualVersion:s}:{},phase:t,attempt:(e.runtimeVersion?.attempt\|\|0)+(n?1:0),lastAttemptAt:this.timestamp(),...o?{error:o}:"pending"===t?{error:Ua(i,s)}:{}},"restarting"!==t&&void 0)}storeState(e,t,n){const i=this.store.get(e.id)\|\|e;return this.store.put(po.parse({...i,runtimeVersion:t,...void 0===n?{}:{ready:n},updatedAt:this.timestamp()}))}async waitUntil(e,t,n){const i=this.now().getTime()+t;for(;;){const t=this.store.get(e);if(t&&n(t))return!0;if(this.cancelled.has(e))return!1;if(this.now().getTime()>=i)return!1;await this.delay(Math.min(this.pollIntervalMs,Math.max(0,i-this.now().getTime())))}}requireInstance(e){const t=this.store.get(e);if(!t)throw new Error(`Instance ${e} was removed during runtime reconciliation.`);return t}timestamp(){return this.now().toISOString()}}function Pa(e){return e?.build?.packageVersion\|\|e?.instanceVersion}function La(e){return e.apps.runningCount>0\|\|e.aiSessions.runningCount>0}function Ma(e){return Boolean(e.imageProvisioning&&"ready"!==e.imageProvisioning.phase)}function ja(e){return["created","stopped","failed"].includes(e.status)}function Ua(e,t){return Fa("INSTANCE_RUNTIME_VERSION_MISMATCH",`Expected controlled-instance ${e}, received ${t\|\|"an unknown version"}.`,e,t,!0)}function Fa(e,t,n,i,s){return{code:e,message:t,expectedVersion:n,...i?{actualVersion:i}:{},retryable:s}}function $a(e,t,n){if(e&&"object"==typeof e&&"code"in e&&"message"in e){const i=e,s=Gi.shape.code.safeParse(i.code);if(s.success&&"string"==typeof i.message)return Fa(s.data,i.message,t,n,"boolean"!=typeof i.retryable\|\|i.retryable)}return Fa("INSTANCE_RUNTIME_INSTALL_FAILED",e instanceof Error?e.message:String(e),t,n,!0)}function Ha(e,t,n,i){const s=i?.message?` Last error: ${i.message}`:"";return Fa(i?.code\|\|"INSTANCE_RUNTIME_INSTALL_FAILED",`Runtime convergence paused after ${n} attempts and will retry.${s}`,e,t,!0)}function qa(e,t){if(!Number.isFinite(e)\|\|e<0)throw new TypeError(`${t} must be a nonnegative finite number.`);return e}function Va(e,n=448){t.mkdirSync(e,{recursive:!0,mode:n}),t.chmodSync(e,n)}function Ba(e,i,s={}){const o=s.directoryMode??448,r=s.fileMode??384;Va(n.dirname(e),o),I.sync(e,`${JSON.stringify(i,null,2)}\n`,{encoding:"utf8",mode:r}),t.chmodSync(e,r)}function Ka(e,t){console.warn(JSON.stringify({message:e,...t}))}function Ga(e){return e&&"object"==typeof e&&"issues"in e?{issues:e.issues}:{error:e instanceof Error?e.message:String(e)}}function Wa(e,n){const i=n.logger\|\|Ka;let s;try{s=JSON.parse(t.readFileSync(e,"utf8"))}catch(t){if(n.rejectInvalid)throw t;return void i("stored JSON could not be read",{filePath:e,...Ga(t)})}if(!n.schema)return s;const o=n.sanitize?n.sanitize(s):s,r=n.schema.safeParse(o);if(r.success)return r.data;if(n.rejectInvalid)throw r.error;const a="strip"in n.schema&&"function"==typeof n.schema.strip?n.schema.strip().safeParse(o):void 0;if(a?.success)return i("unknown stored fields were ignored",{filePath:e,issues:r.error.issues}),a.data;i("stored record failed validation and was isolated",{filePath:e,issues:r.error.issues})}function Xa(e){return`${e}_${d.randomUUID().replace(/-/g,"").slice(0,20)}`}function Ya(){return d.randomBytes(24).toString("base64url")}class Ja{directory;options;permissionsInitialized=!1;constructor(e,t={}){this.directory=e,this.options=t}init(){if(this.permissionsInitialized&&t.existsSync(this.directory))return;Va(this.directory,this.options.directoryMode??448);const e=this.options.fileMode??384;for(const i of t.readdirSync(this.directory).filter(e=>e.endsWith(".json")))t.chmodSync(n.join(this.directory,i),e);this.permissionsInitialized=!0}filePath(e){return n.join(this.directory,`${e}.json`)}list(){return this.init(),t.readdirSync(this.directory).filter(e=>e.endsWith(".json")).sort().flatMap(e=>{const t=Wa(n.join(this.directory,e),this.options);return t?[t]:[]})}get(e){this.init();const n=this.filePath(e);return t.existsSync(n)?Wa(n,this.options):void 0}put(e){const t=this.options.sanitize?this.options.sanitize(e):e,n=this.options.schema?this.options.schema.parse(t):t;return Ba(this.filePath(n.id),n,this.options),n}patch(e,t){const n=this.get(e);if(!n)return;const i={...n,...t,id:n.id,createdAt:n.createdAt,updatedAt:(new Date).toISOString()};return this.put(i)}delete(e){const n=this.filePath(e);return!!t.existsSync(n)&&(t.unlinkSync(n),!0)}}class Qa{filePathValue;defaults;options;constructor(e,t,n={}){this.filePathValue=e,this.defaults=t,this.options=n}init(){Va(n.dirname(this.filePathValue),this.options.directoryMode??448),t.existsSync(this.filePathValue)?t.chmodSync(this.filePathValue,this.options.fileMode??384):this.put(this.defaults())}get(){return this.init(),t.existsSync(this.filePathValue)?Wa(this.filePathValue,this.options)??this.defaults():this.defaults()}put(e){const t=this.options.sanitize?this.options.sanitize(e):e,n=this.options.schema?this.options.schema.parse(t):t;return Ba(this.filePathValue,n,this.options),n}}E.sqliteTable("na_migration_ledger",{id:E.text("id").primaryKey(),checksum:E.text("checksum").notNull(),appliedAt:E.text("applied_at").notNull(),details:E.text("details",{mode:"json"}).$type().notNull()});const Za=E.sqliteTable("na_stories",{id:E.text("id").primaryKey(),title:E.text("title").notNull(),description:E.text("description"),createdAt:E.text("created_at").notNull(),updatedAt:E.text("updated_at").notNull(),archivedAt:E.text("archived_at"),maxIdleAiSessions:E.integer("max_idle_ai_sessions").notNull().default(5),nextDocumentSequence:E.integer("next_document_sequence").notNull().default(1)},e=>[E.check("na_stories_max_idle_check",_.sql`${e.maxIdleAiSessions} BETWEEN 1 AND 50`),E.check("na_stories_next_document_sequence_check",_.sql`${e.nextDocumentSequence} > 0`),E.index("na_stories_created_idx").on(e.createdAt)]),ec=E.sqliteTable("na_story_actions",{storyId:E.text("story_id").notNull().references(()=>Za.id,{onDelete:"cascade"}),id:E.text("id").notNull(),title:E.text("title").notNull(),promptTemplate:E.text("prompt_template").notNull(),targetInstanceId:E.text("target_instance_id"),sessionPreset:E.text("session_preset_json",{mode:"json"}).$type(),displayOrder:E.integer("display_order").notNull()},e=>[E.primaryKey({columns:[e.storyId,e.id]}),E.index("na_story_actions_order_idx").on(e.storyId,e.displayOrder,e.id)]),tc=E.sqliteTable("na_story_documents",{storyId:E.text("story_id").notNull().references(()=>Za.id,{onDelete:"cascade"}),storyPath:E.text("story_path").notNull(),title:E.text("title").notNull(),indexedSequence:E.integer("indexed_sequence").notNull(),displayOrder:E.integer("display_order").notNull()},e=>[E.primaryKey({columns:[e.storyId,e.storyPath]}),E.uniqueIndex("na_story_documents_sequence_uq").on(e.storyId,e.indexedSequence),E.index("na_story_documents_page_idx").on(e.storyId,e.indexedSequence,e.storyPath),E.index("na_story_documents_display_idx").on(e.storyId,e.displayOrder,e.storyPath),E.check("na_story_documents_sequence_check",_.sql`${e.indexedSequence} > 0`)]),nc=E.sqliteTable("na_story_automations",{id:E.text("id").primaryKey(),storyId:E.text("story_id").notNull(),actionId:E.text("action_id").notNull(),schedule:E.text("schedule_json",{mode:"json"}).$type().notNull(),enabled:E.integer("enabled",{mode:"boolean"}).notNull(),policy:E.text("policy_json",{mode:"json"}).$type().notNull(),scheduleAnchorAt:E.text("schedule_anchor_at").notNull(),createdAt:E.text("created_at").notNull(),updatedAt:E.text("updated_at").notNull()},e=>[E.foreignKey({columns:[e.storyId,e.actionId],foreignColumns:[ec.storyId,ec.id],name:"na_story_automations_action_fk"}).onDelete("restrict"),E.index("na_story_automations_story_idx").on(e.storyId),E.index("na_story_automations_enabled_idx").on(e.enabled)]),ic=E.sqliteTable("na_story_automation_runs",{id:E.text("id").primaryKey(),automationId:E.text("automation_id").notNull().references(()=>nc.id,{onDelete:"cascade"}),eventType:E.text("event_type",{enum:["manual","schedule"]}).notNull(),status:E.text("status",{enum:["queued","dispatching","running","completed","failed","skipped"]}).notNull(),scheduledFor:E.text("scheduled_for").notNull(),targetInstanceId:E.text("target_instance_id").notNull(),aiSessionId:E.text("ai_session_id"),error:E.text("error_json",{mode:"json"}).$type(),queuedAt:E.text("queued_at").notNull(),startedAt:E.text("started_at"),completedAt:E.text("completed_at"),executionKey:E.text("execution_key").notNull(),requestFingerprint:E.text("request_fingerprint").notNull(),executionInput:E.text("execution_input_json",{mode:"json"}).$type().notNull()},e=>[E.uniqueIndex("na_story_automation_runs_execution_key_uq").on(e.executionKey),E.index("na_story_automation_runs_automation_time_idx").on(e.automationId,e.queuedAt),E.index("na_story_automation_runs_status_idx").on(e.status,e.scheduledFor)]),sc=E.sqliteTable("na_story_file_mutations",{id:E.text("id").primaryKey(),storyId:E.text("story_id").notNull().references(()=>Za.id,{onDelete:"restrict"}),operation:E.text("operation",{enum:["write","rename","delete"]}).notNull(),storyPath:E.text("story_path").notNull(),nextStoryPath:E.text("next_story_path"),title:E.text("title"),temporaryName:E.text("temporary_name"),backupName:E.text("backup_name"),phase:E.text("phase",{enum:["receiving","prepared","files-staged","database-committed","cleanup"]}).notNull(),createdAt:E.text("created_at").notNull(),updatedAt:E.text("updated_at").notNull()},e=>[E.index("na_story_file_mutations_story_idx").on(e.storyId,e.createdAt)]),oc=E.sqliteTable("na_story_deletion_intents",{storyId:E.text("story_id").primaryKey(),phase:E.text("phase",{enum:["prepared","files-staged","database-committed","cleanup"]}).notNull(),trashName:E.text("trash_name"),createdAt:E.text("created_at").notNull(),updatedAt:E.text("updated_at").notNull()}),rc=["health","connectionStatus","agentStatus","targetStatus","uiAccessStatus","ready","protocolVersion","instanceVersion","build","runtimeVersion","capabilities","appInventory","target","access","apps","aiSessions","triggers","runtime","lastHeartbeatAt"];function ac(e){return JSON.stringify(e??null)}function cc(e){return JSON.parse(String(e))}function dc(e,t){if(e.isTransaction)return t();e.exec("BEGIN IMMEDIATE");try{const n=t();return e.exec("COMMIT"),n}catch(t){throw e.exec("ROLLBACK"),t}}class lc{client;constructor(e){this.client=e}get(){return this.client.prepare("SELECT node_id, created_at, updated_at FROM na_node_identity WHERE singleton_key = 1").get()}ensure(e,t){const n=this.get();if(n&&n.node_id!==e)throw Ac("NODE_AGENT_IDENTITY_MISMATCH",`Stored node identity ${n.node_id} does not match ${e}.`);return n\|\|this.client.prepare("INSERT INTO na_node_identity (singleton_key, node_id, created_at, updated_at) VALUES (1, ?, ?, ?)").run(e,t,t),this.get()}}class uc{client;constructor(e){this.client=e}list(){return this.client.prepare("SELECT FROM na_local_folders ORDER BY id").all().map(fc)}get(e){const t=this.client.prepare("SELECT * FROM na_local_folders WHERE id = ?").get(e);return t?fc(t):void 0}put(e){const t=rs.parse(Si(e));return this.client.prepare("INSERT INTO na_local_folders (id, node_id, name, path, labels_json, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET node_id=excluded.node_id, name=excluded.name, path=excluded.path,\n labels_json=excluded.labels_json, updated_at=excluded.updated_at").run(t.id,t.nodeId,t.name,t.path,ac(t.labels),t.createdAt,t.updatedAt),t}delete(e){return Number(this.client.prepare("DELETE FROM na_local_folders WHERE id = ?").run(e).changes)>0}}class pc{client;constructor(e){this.client=e}list(){return this.client.prepare("SELECT * FROM na_runtimes ORDER BY id").all().map(yc)}get(e){const t=this.client.prepare("SELECT * FROM na_runtimes WHERE id = ?").get(e);return t?yc(t):void 0}put(e){const t=Ws.parse(e);return this.client.prepare("INSERT INTO na_runtimes (id, node_id, name, type, status, access_strategy, capabilities_json, labels_json, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET node_id=excluded.node_id, name=excluded.name, type=excluded.type,\n status=excluded.status, access_strategy=excluded.access_strategy, capabilities_json=excluded.capabilities_json,\n labels_json=excluded.labels_json, updated_at=excluded.updated_at").run(t.id,t.nodeId,t.name,t.type,t.status,t.accessStrategy,ac(t.capabilities),ac(t.labels),t.createdAt,t.updatedAt),t}delete(e){try{return Number(this.client.prepare("DELETE FROM na_runtimes WHERE id = ?").run(e).changes)>0}catch(t){if(String(t).includes("FOREIGN KEY constraint failed"))throw Ac("NODE_RUNTIME_IN_USE",`Runtime ${e} is used by a controlled instance.`,409);throw t}}}class mc{client;constructor(e){this.client=e}list(){return this.client.prepare("SELECT i., o.health, o.connection_status, o.ready, o.observed_json,\n o.last_heartbeat_at, o.updated_at AS observation_updated_at\n FROM na_instances i LEFT JOIN na_instance_observations o ON o.instance_id = i.id ORDER BY i.id").all().map(e=>Ic(this.client,e))}get(e){const t=this.client.prepare("SELECT i., o.health, o.connection_status, o.ready, o.observed_json,\n o.last_heartbeat_at, o.updated_at AS observation_updated_at\n FROM na_instances i LEFT JOIN na_instance_observations o ON o.instance_id = i.id WHERE i.id = ?").get(e);return t?Ic(this.client,t):void 0}put(e){const t=po.parse(yo(e));return dc(this.client,()=>{const e=this.client.prepare("SELECT state_revision, registration_credential FROM na_instances WHERE id = ?").get(t.id),n=Math.max(t.stateRevision\|\|0,Number(e?.state_revision)\|\|0)+1,i=t.registrationToken\|\|e?.registration_credential,s=function(e){const t={...e};for(const e of rc)delete t[e];for(const e of["id","nodeId","runtimeId","name","status","stateRevision","processIncarnationId","registrationToken","createdAt","updatedAt"])delete t[e];return t}({...t,stateRevision:n}),o=gc(t),r="local-folder"===t.source.type?t.source.localFolderId:void 0;return this.client.prepare("INSERT INTO na_instances\n (id, node_id, runtime_id, source_local_folder_id, name, status, state_revision, process_incarnation_id,\n registration_credential, desired_json, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET node_id=excluded.node_id, runtime_id=excluded.runtime_id,\n source_local_folder_id=excluded.source_local_folder_id, name=excluded.name, status=excluded.status,\n state_revision=excluded.state_revision, process_incarnation_id=excluded.process_incarnation_id,\n registration_credential=excluded.registration_credential, desired_json=excluded.desired_json,\n updated_at=excluded.updated_at").run(t.id,t.nodeId,t.runtimeId,r??null,t.name,t.status,n,t.processIncarnationId??null,i??null,ac(s),t.createdAt,t.updatedAt),this.client.prepare("INSERT INTO na_instance_observations\n (instance_id, health, connection_status, ready, observed_json, last_heartbeat_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(instance_id) DO UPDATE SET health=excluded.health, connection_status=excluded.connection_status,\n ready=excluded.ready, observed_json=excluded.observed_json, last_heartbeat_at=excluded.last_heartbeat_at,\n updated_at=excluded.updated_at").run(t.id,t.health,t.connectionStatus,t.ready?1:0,ac(o),t.lastHeartbeatAt??null,t.updatedAt),this.get(t.id)})}putObservation(e){const t=po.parse(yo(e));return dc(this.client,()=>{const e=this.client.prepare("SELECT state_revision, registration_credential FROM na_instances WHERE id = ?").get(t.id);if(!e)throw Ac("NODE_INSTANCE_NOT_FOUND",`Instance ${t.id} was not found.`,404);const n=Math.max(t.stateRevision\|\|0,Number(e.state_revision)\|\|0)+1,i=t.registrationToken\|\|e.registration_credential;return this.client.prepare("UPDATE na_instances SET status = ?, state_revision = ?, process_incarnation_id = ?,\n registration_credential = ?, updated_at = ? WHERE id = ?").run(t.status,n,t.processIncarnationId??null,i??null,t.updatedAt,t.id),this.client.prepare("INSERT INTO na_instance_observations\n (instance_id, health, connection_status, ready, observed_json, last_heartbeat_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(instance_id) DO UPDATE SET health=excluded.health, connection_status=excluded.connection_status,\n ready=excluded.ready, observed_json=excluded.observed_json, last_heartbeat_at=excluded.last_heartbeat_at,\n updated_at=excluded.updated_at").run(t.id,t.health,t.connectionStatus,t.ready?1:0,ac(gc(t)),t.lastHeartbeatAt??null,t.updatedAt),this.get(t.id)})}delete(e){return Number(this.client.prepare("DELETE FROM na_instances WHERE id = ?").run(e).changes)>0}}function hc(e){return{nodeIdentity:new lc(e),localFolders:new uc(e),runtimes:new pc(e),instances:new mc(e)}}function gc(e){return Object.fromEntries(rc.flatMap(t=>void 0===e[t]?[]:[[t,e[t]]]))}function fc(e){return rs.parse({id:e.id,nodeId:e.node_id,name:e.name,path:e.path,labels:cc(e.labels_json),createdAt:e.created_at,updatedAt:e.updated_at})}function yc(e){return Ws.parse({id:e.id,nodeId:e.node_id,name:e.name,type:e.type,status:e.status,accessStrategy:e.access_strategy,capabilities:cc(e.capabilities_json),labels:cc(e.labels_json),createdAt:e.created_at,updatedAt:e.updated_at})}function Ic(e,t){const n=cc(t.desired_json),i=t.observed_json?cc(t.observed_json):{},s=e.prepare("SELECT * FROM na_instance_model_assignments WHERE instance_id = ?").get(String(t.id)),o=s?e.prepare("SELECT model_id FROM na_instance_model_entities WHERE instance_id = ? ORDER BY display_order").all(String(t.id)).map(e=>String(e.model_id)):void 0,r=s?{modelEntityIds:o,...s.legacy_codex_model_id?{codexModelHash:String(s.legacy_codex_model_id)}:{},...s.legacy_claude_model_id?{claudeModelHash:String(s.legacy_claude_model_id)}:{},...s.legacy_opencode_model_id?{opencodeModelHash:String(s.legacy_opencode_model_id)}:{}}:n.modelSelection;return po.parse({...n,...i,modelSelection:r,id:t.id,nodeId:t.node_id,runtimeId:t.runtime_id,name:t.name,status:t.status,stateRevision:t.state_revision,processIncarnationId:t.process_incarnation_id\|\|void 0,registrationToken:t.registration_credential\|\|void 0,health:t.health\|\|"unknown",connectionStatus:t.connection_status\|\|"unknown",ready:Boolean(t.ready),lastHeartbeatAt:t.last_heartbeat_at\|\|void 0,createdAt:t.created_at,updatedAt:t.updated_at})}function Ac(e,t,n=409){return Object.assign(new Error(t),{code:e,statusCode:n})}function _c(e){return JSON.stringify(e??null)}function Ec(e){return JSON.parse(String(e))}class wc{client;constructor(e){this.client=e}list(){return this.client.prepare("SELECT * FROM na_models ORDER BY display_order, id").all().map(Sc)}get(e){const t=this.client.prepare("SELECT * FROM na_models WHERE id = ?").get(e);return t?Sc(t):void 0}put(e){const t=hs.parse(e);return this.client.prepare("INSERT INTO na_models\n (id, name, endpoint, key, model, app, enabled, display_order, model_names_json, protocols_json, labels_json, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET name=excluded.name, endpoint=excluded.endpoint, key=excluded.key,\n model=excluded.model, app=excluded.app, enabled=excluded.enabled, display_order=excluded.display_order,\n model_names_json=excluded.model_names_json, protocols_json=excluded.protocols_json,\n labels_json=excluded.labels_json, updated_at=excluded.updated_at").run(t.id,t.name,t.endpoint,t.key,t.model,t.app,t.enabled?1:0,t.order,_c(t.modelNames),_c(t.protocols),_c(t.labels),t.createdAt,t.updatedAt),t}delete(e){try{return Number(this.client.prepare("DELETE FROM na_models WHERE id = ?").run(e).changes)>0}catch(t){if(String(t).includes("FOREIGN KEY constraint failed")){const t=this.referenceIds(e);throw Object.assign(new Error(`Model ${e} is assigned to ${t.length} instance${1===t.length?"":"s"}.`),{statusCode:409,code:"NODE_MODEL_IN_USE",instanceIds:t})}throw t}}referenceIds(e){return this.client.prepare("SELECT DISTINCT instance_id FROM (\n SELECT instance_id FROM na_instance_model_entities WHERE model_id = ?\n UNION ALL SELECT instance_id FROM na_instance_model_assignments WHERE legacy_codex_model_id = ?\n UNION ALL SELECT instance_id FROM na_instance_model_assignments WHERE legacy_claude_model_id = ?\n UNION ALL SELECT instance_id FROM na_instance_model_assignments WHERE legacy_opencode_model_id = ?\n ) ORDER BY instance_id").all(e,e,e,e).map(e=>String(e.instance_id))}}class Tc{client;constructor(e){this.client=e}get(e){const t=this.client.prepare("SELECT * FROM na_instance_model_assignments WHERE instance_id = ?").get(e);if(!t)return;const n=this.client.prepare("SELECT model_id FROM na_instance_model_entities WHERE instance_id = ? ORDER BY display_order").all(e).map(e=>String(e.model_id));return ys.parse({instanceId:e,modelEntityIds:n,codexModelHash:t.legacy_codex_model_id\|\|void 0,claudeModelHash:t.legacy_claude_model_id\|\|void 0,opencodeModelHash:t.legacy_opencode_model_id\|\|void 0,updatedAt:t.updated_at})}put(e){const t=ys.parse(e);return this.transaction(()=>{this.client.prepare("INSERT INTO na_instance_model_assignments\n (instance_id, legacy_codex_model_id, legacy_claude_model_id, legacy_opencode_model_id, updated_at)\n VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(instance_id) DO UPDATE SET legacy_codex_model_id=excluded.legacy_codex_model_id,\n legacy_claude_model_id=excluded.legacy_claude_model_id,\n legacy_opencode_model_id=excluded.legacy_opencode_model_id, updated_at=excluded.updated_at").run(t.instanceId,t.codexModelHash??null,t.claudeModelHash??null,t.opencodeModelHash??null,t.updatedAt),this.client.prepare("DELETE FROM na_instance_model_entities WHERE instance_id = ?").run(t.instanceId);const e=this.client.prepare("INSERT INTO na_instance_model_entities (instance_id, model_id, display_order) VALUES (?, ?, ?)");for(const[n,i]of t.modelEntityIds.entries())e.run(t.instanceId,i,n)}),this.get(t.instanceId)}delete(e){return Number(this.client.prepare("DELETE FROM na_instance_model_assignments WHERE instance_id = ?").run(e).changes)>0}transaction(e){if(this.client.isTransaction)return e();this.client.exec("BEGIN IMMEDIATE");try{const t=e();return this.client.exec("COMMIT"),t}catch(e){throw this.client.exec("ROLLBACK"),e}}}function bc(e){return{models:new wc(e),assignments:new Tc(e),transaction(t){if(e.isTransaction)return t();e.exec("BEGIN IMMEDIATE");try{const n=t();return e.exec("COMMIT"),n}catch(t){throw e.exec("ROLLBACK"),t}}}}function Sc(e){const t=Ec(e.model_names_json);return hs.parse({id:e.id,name:e.name,endpoint:e.endpoint,key:e.key,model:e.model,modelNames:t,protocols:Ec(e.protocols_json),app:e.app,enabled:Boolean(e.enabled),order:e.display_order,labels:Ec(e.labels_json),createdAt:e.created_at,updatedAt:e.updated_at})}class vc{client;constructor(e){this.client=e}readIdentity(){const e=this.client.prepare("SELECT node_id, created_at, updated_at FROM na_node_identity WHERE singleton_key = 1").get();if(!e)return;const t=this.client.prepare("SELECT * FROM na_control_plane_pairings ORDER BY updated_at, key_id").all().map(e=>({id:String(e.control_plane_id),keyId:String(e.key_id),...e.name?{name:String(e.name)}:{},secret:String(e.secret),pairedAt:String(e.paired_at),...e.revoked_at?{revokedAt:String(e.revoked_at)}:{},updatedAt:String(e.updated_at)})),n=this.client.prepare("SELECT * FROM na_control_plane_connections ORDER BY updated_at, id").all().map(e=>({id:String(e.id),pairingKeyId:String(e.pairing_key_id),...e.name?{name:String(e.name)}:{},url:String(e.normalized_url),enabled:Boolean(e.enabled),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}));return{nodeId:String(e.node_id),createdAt:String(e.created_at),updatedAt:String(e.updated_at),controlPlanePairings:t,controlPlaneConnections:n}}writeIdentity(e){return this.transaction(()=>{const t=this.readIdentity();if(t&&t.nodeId!==e.nodeId)throw n=`Stored node identity ${t.nodeId} does not match ${e.nodeId}.`,Object.assign(new Error(n),{code:"NODE_AGENT_IDENTITY_MISMATCH",statusCode:409});var n;this.client.prepare("INSERT INTO na_node_identity (singleton_key, node_id, created_at, updated_at) VALUES (1, ?, ?, ?)\n ON CONFLICT(singleton_key) DO UPDATE SET updated_at=excluded.updated_at").run(e.nodeId,e.createdAt,e.updatedAt);const i=(e.controlPlanePairings\|\|[]).map(e=>e.keyId),s=(e.controlPlaneConnections\|\|[]).map(e=>e.id);Oc(this.client,"na_control_plane_connections","id",s),Oc(this.client,"na_control_plane_pairings","key_id",i);const o=this.client.prepare("INSERT INTO na_control_plane_pairings\n (key_id, control_plane_id, name, secret, paired_at, revoked_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(key_id) DO UPDATE SET control_plane_id=excluded.control_plane_id, name=excluded.name,\n secret=excluded.secret, paired_at=excluded.paired_at, revoked_at=excluded.revoked_at, updated_at=excluded.updated_at");for(const t of e.controlPlanePairings\|\|[])o.run(t.keyId,t.id,t.name??null,t.secret,t.pairedAt,t.revokedAt??null,t.updatedAt);const r=this.client.prepare("INSERT INTO na_control_plane_connections\n (id, pairing_key_id, name, normalized_url, enabled, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET pairing_key_id=excluded.pairing_key_id, name=excluded.name,\n normalized_url=excluded.normalized_url, enabled=excluded.enabled, updated_at=excluded.updated_at");for(const t of e.controlPlaneConnections\|\|[])r.run(t.id,t.pairingKeyId,t.name??null,Nc(t.url),t.enabled?1:0,t.createdAt,t.updatedAt);return this.readIdentity()})}listOperations(e){return(e?.length?this.client.prepare(`SELECT * FROM na_control_plane_connection_operations WHERE phase IN (${e.map(()=>"?").join(",")}) ORDER BY created_at`).all(...e):this.client.prepare("SELECT * FROM na_control_plane_connection_operations ORDER BY created_at").all()).map(zc)}putOperation(e){return this.client.prepare("INSERT INTO na_control_plane_connection_operations\n (id, kind, phase, requested_json, pairing_key_id, connection_id, replaced_connections_json, error_json, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET phase=excluded.phase, pairing_key_id=excluded.pairing_key_id,\n connection_id=excluded.connection_id, replaced_connections_json=excluded.replaced_connections_json,\n error_json=excluded.error_json, updated_at=excluded.updated_at").run(e.id,e.kind,e.phase,JSON.stringify(e.requested),e.pairingKeyId??null,e.connectionId??null,JSON.stringify(e.replacedConnections),e.error?JSON.stringify(e.error):null,e.createdAt,e.updatedAt),e}deleteOperation(e){return Number(this.client.prepare("DELETE FROM na_control_plane_connection_operations WHERE id = ?").run(e).changes)>0}transaction(e){if(this.client.isTransaction)return e();this.client.exec("BEGIN IMMEDIATE");try{const t=e();return this.client.exec("COMMIT"),t}catch(e){throw this.client.exec("ROLLBACK"),e}}}function Nc(e){return new URL(e).toString().replace(/\/$/,"")}function Oc(e,t,n,i){i.length?e.prepare(`DELETE FROM ${t} WHERE ${n} NOT IN (${i.map(()=>"?").join(",")})`).run(...i):e.exec(`DELETE FROM ${t}`)}function zc(e){return{id:String(e.id),kind:String(e.kind),phase:e.phase,requested:JSON.parse(String(e.requested_json)),...e.pairing_key_id?{pairingKeyId:String(e.pairing_key_id)}:{},...e.connection_id?{connectionId:String(e.connection_id)}:{},replacedConnections:JSON.parse(String(e.replaced_connections_json)),...e.error_json?{error:JSON.parse(String(e.error_json))}:{},createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}const Cc=a.z.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9][a-zA-Z0-9_.:-]$/),Rc=a.z.string().datetime(),xc=a.z.number().int().nonnegative(),kc=a.z.enum(["https-token","ssh-key"]),Dc=a.z.enum(["operation-only","instance-retained"]),Pc=a.z.enum(["enabled","disabled"]),Lc=a.z.enum(["pending","synced","deferred","revoking","revoked"]),Mc=a.z.object({scheme:a.z.enum(["https","ssh"]),host:a.z.string().trim().min(1).max(253),port:a.z.number().int().min(1).max(65535).optional(),pathPrefix:a.z.string().min(1).max(2048).default("/")}).strict();function jc(e){throw new Error(`Invalid Git credential scope: ${e}`)}function Uc(e){const t=e.trim().replace(/^\[\|\]$/g,"");(!t\|\|t.includes("")\|\|/[/?#@\s]/.test(t))&&jc("host is invalid");try{const e=new URL(t.includes(":")?`http://[${t}]/`:`http://${t}/`).hostname.replace(/^\[\|\]$/g,"").toLowerCase();return(!e\|\|e.length>253\|\|e.includes(""))&&jc("host is invalid"),e}catch{jc("host is invalid")}}function Fc(e){try{return decodeURIComponent(e)}catch{jc("path contains invalid percent encoding")}}function $c(e){const t=e?.trim()\|\|"/";(t.includes("?")\|\|t.includes("#")\|\|t.includes("\\")\|\|t.includes("\0"))&&jc("path contains an unsupported delimiter");const n=(t.startsWith("/")?t:`/${t}`).split("/").filter(Boolean);for(const e of n){const t=Fc(e);("."===t\|\|".."===t\|\|t.includes("/")\|\|t.includes("\\")\|\|t.includes("\0"))&&jc("path contains an unsafe segment")}return 0===n.length?"/":`/${n.join("/")}/`}function Hc(e){const t=Mc.parse(e),n="https"===t.scheme?443:22;return Mc.parse({scheme:t.scheme,host:Uc(t.host),...void 0===t.port\|\|t.port===n?{}:{port:t.port},pathPrefix:$c(t.pathPrefix)})}function qc(e){return $c(e.replace(/\.git\/?$/,""))}const Vc=a.z.object({id:Cc,name:a.z.string().trim().min(1).max(160),kind:kc,scope:Mc,secretSet:a.z.literal(!0),status:Pc,revision:xc,createdAt:Rc,updatedAt:Rc}).strict(),Bc=a.z.object({kind:a.z.literal("https-token"),username:a.z.string().trim().min(1).max(240),token:a.z.string().min(1).max(8192)}).strict(),Kc=a.z.object({kind:a.z.literal("ssh-key"),privateKey:a.z.string().min(1).max(131072),passphrase:a.z.string().max(8192).optional(),pinnedKnownHosts:a.z.string().min(1).max(131072)}).strict(),Gc=a.z.discriminatedUnion("kind",[Bc,Kc]);a.z.object({name:a.z.string().trim().min(1).max(160),scope:Mc,secret:Gc}).strict().superRefine((e,t)=>{"https"===e.scope.scheme!=("https-token"===e.secret.kind)&&t.addIssue({code:"custom",path:["scope","scheme"],message:"Credential kind must match the remote scheme."});try{Hc(e.scope)}catch(e){t.addIssue({code:"custom",path:["scope"],message:e instanceof Error?e.message:"Invalid Git scope."})}}),a.z.object({name:a.z.string().trim().min(1).max(160).optional(),scope:Mc.optional(),secret:Gc.optional(),status:Pc.optional()}).strict().refine(e=>Object.keys(e).length>0,"At least one credential field must be updated."),a.z.object({items:a.z.array(Vc).max(1e4)}).strict();const Wc=a.z.object({instanceId:Cc,credentialId:Cc,credentialRevision:xc,assignmentRevision:xc,status:Lc,authorizedAt:Rc,updatedAt:Rc}).strict(),Xc=a.z.object({credential:Vc,secret:Gc}).strict().superRefine((e,t)=>{e.credential.kind!==e.secret.kind&&t.addIssue({code:"custom",path:["secret","kind"],message:"Credential payload kind mismatch."})}),Yc=a.z.object({instanceId:Cc,generation:xc,credentialIds:a.z.array(Cc).max(256).transform(e=>[...new Set(e)].sort()),updatedAt:Rc}).strict(),Jc=a.z.object({remoteUrl:a.z.string().trim().min(1).max(4096)}).strict(),Qc=a.z.discriminatedUnion("status",[a.z.object({status:a.z.literal("ok"),username:a.z.string().min(1).max(240),password:a.z.string().min(1).max(8192)}).strict(),a.z.object({status:a.z.enum(["none","ambiguous","unsupported","missing-host-key","rejected"])}).strict()]),Zc=a.z.object({remoteUrl:a.z.string().trim().min(1).max(4096)}).strict(),ed=a.z.discriminatedUnion("status",[a.z.object({status:a.z.literal("ok"),invocationId:Cc,publicIdentity:a.z.string().min(1).max(131072),pinnedKnownHosts:a.z.string().min(1).max(131072)}).strict(),a.z.object({status:a.z.enum(["none","ambiguous","unsupported","missing-host-key","rejected"])}).strict()]),td=a.z.object({invocationId:Cc,frame:a.z.string().min(1).max(1048576)}).strict(),nd=a.z.object({frame:a.z.string().min(1).max(1048576)}).strict(),id=a.z.object({operationId:Cc,retention:Dc,payload:Xc}).strict(),sd=a.z.object({operationId:Cc,instanceId:Cc,remoteUrl:a.z.string().trim().min(1).max(4096),ref:a.z.discriminatedUnion("type",[a.z.object({type:a.z.enum(["branch","tag"]),name:a.z.string().trim().min(1).max(240)}).strict(),a.z.object({type:a.z.literal("commit"),commit:a.z.string().trim().regex(/^[0-9a-fA-F]{4,64}$/,"commit must be a hexadecimal Git object id")}).strict()]),clone:a.z.object({depth:a.z.number().int().positive().max(1e5).optional(),submodules:a.z.boolean().default(!1),lfs:a.z.boolean().default(!1),subdirectory:a.z.string().trim().max(240).refine(e=>!e.startsWith("/")&&!e.split("/").some(e=>".."===e),"subdirectory must be a relative path within the repository").transform(e=>e.split("/").filter(e=>e&&"."!==e).join("/")).default("")}).strict(),credentials:a.z.array(id).max(256).default([])}).strict();function od(e){return e&&"object"==typeof e&&!Array.isArray(e)?e:void 0}function rd(e,t){if(e)return Object.fromEntries(t.filter(t=>Object.prototype.hasOwnProperty.call(e,t)).map(t=>[t,e[t]]))}function ad(e,t){let n;try{n=function(e){const t=e.trim();if(t&&!t.includes("\0")\|\|jc("remote is empty or invalid"),/^https?:\/\//i.test(t)\|\|/^ssh:\/\//i.test(t)){let e;$c(t.replace(/^[a-z][a-z0-9+.-]:\/\/[^/]+/i,"").split(/[?#]/,1)[0]\|\|"/");try{e=new URL(t)}catch{jc("remote URL is invalid")}"https:"!==e.protocol&&"ssh:"!==e.protocol&&jc("remote scheme is unsupported"),(e.password\|\|"https:"===e.protocol&&e.username)&&jc("HTTPS userinfo is forbidden"),(e.search\|\|e.hash)&&jc("query and fragment are forbidden");const n="https:"===e.protocol?"https":"ssh",i=e.port?Number(e.port):void 0;return{...Hc({scheme:n,host:e.hostname,port:i,pathPrefix:qc(e.pathname)}),original:t}}/^[a-z][a-z0-9+.-]:\/\//i.test(t)&&jc("remote scheme is unsupported");const n=/^(?:([^@/:\s]+)@)?([^/:\s]+):(.+)$/.exec(t);n\|\|jc("remote must use HTTPS, ssh://, or scp-like SSH syntax");const[,,i,s]=n;return(s.includes("?")\|\|s.includes("#"))&&jc("query and fragment are forbidden"),{...Hc({scheme:"ssh",host:i,pathPrefix:qc(s)}),original:t}}(e)}catch(e){return{status:"unsupported",reason:e instanceof Error?e.message:"Unsupported Git remote."}}const i=t.filter(e=>"enabled"===e.status).filter(e=>"https"===n.scheme==("https-token"===e.kind)).filter(e=>function(e,t){const n=Hc(e);return n.scheme===t.scheme&&n.host===t.host&&n.port===t.port&&("/"===n.pathPrefix\|\|t.pathPrefix.startsWith(n.pathPrefix))}(e.scope,n)).map(e=>({candidate:e,specificity:Hc(e.scope).pathPrefix.length}));if(0===i.length)return{status:"none",remote:n};const s=Math.max(...i.map(e=>e.specificity)),o=i.filter(e=>e.specificity===s).map(e=>e.candidate);if(o.length>1)return{status:"ambiguous",remote:n,credentialIds:o.map(e=>e.id).sort()};const r=o[0];return"ssh-key"===r.kind&&!0!==r.pinnedKnownHosts?{status:"missing-host-key",remote:n,credentialId:r.id}:{status:"unique",remote:n,credential:r}}class cd{client;constructor(e){this.client=e}listPayloads(){return this.client.prepare("SELECT FROM na_git_credential_payloads ORDER BY credential_id").all().map(ld)}getPayload(e){const t=this.client.prepare("SELECT * FROM na_git_credential_payloads WHERE credential_id = ?").get(e);return t?ld(t):void 0}putPayload(e){const t=Xc.parse(e.payload);return this.client.prepare("INSERT INTO na_git_credential_payloads\n (credential_id, revision, public_json, secret_json, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)\n ON CONFLICT(credential_id) DO UPDATE SET revision=excluded.revision, public_json=excluded.public_json,\n secret_json=excluded.secret_json, updated_at=excluded.updated_at").run(e.id,t.credential.revision,JSON.stringify(t.credential),JSON.stringify(t.secret),e.createdAt,e.updatedAt),{...e,payload:t}}deletePayload(e){return Number(this.client.prepare("DELETE FROM na_git_credential_payloads WHERE credential_id = ?").run(e).changes)>0}collectUnreferencedPayloads(){return Number(this.client.prepare("DELETE FROM na_git_credential_payloads\n WHERE NOT EXISTS (SELECT 1 FROM na_git_authorization_members m WHERE m.credential_id = na_git_credential_payloads.credential_id)").run().changes)}listAuthorizations(){return this.client.prepare("SELECT * FROM na_git_authorization_sets ORDER BY instance_id").all().map(e=>this.authorizationFromRow(e))}getAuthorization(e){const t=this.client.prepare("SELECT * FROM na_git_authorization_sets WHERE instance_id = ?").get(e);return t?this.authorizationFromRow(t):void 0}putAuthorization(e){const t=Yc.parse({instanceId:e.instanceId,generation:e.generation,credentialIds:e.credentialIds,updatedAt:e.updatedAt});return this.transaction(()=>{this.client.prepare("INSERT INTO na_git_authorization_sets (instance_id, generation, created_at, updated_at)\n VALUES (?, ?, ?, ?) ON CONFLICT(instance_id) DO UPDATE SET generation=excluded.generation, updated_at=excluded.updated_at").run(t.instanceId,t.generation,e.createdAt,t.updatedAt),this.client.prepare("DELETE FROM na_git_authorization_members WHERE instance_id = ?").run(t.instanceId);const n=this.client.prepare("INSERT INTO na_git_authorization_members (instance_id, credential_id, display_order) VALUES (?, ?, ?)");for(const[e,i]of t.credentialIds.entries())n.run(t.instanceId,i,e);return this.getAuthorization(t.instanceId)})}putAuthorizationCas(e){const t=Yc.parse({instanceId:e.instanceId,generation:e.generation,credentialIds:e.credentialIds,updatedAt:e.updatedAt});return this.transaction(()=>{const n=this.getAuthorization(t.instanceId);if(n&&n.generation>t.generation)throw dd("GIT_CREDENTIAL_REVISION_STALE",`Refusing stale authorization set revision for ${t.instanceId}.`);if(n&&n.generation===t.generation){if(JSON.stringify(n.credentialIds)!==JSON.stringify(t.credentialIds))throw dd("GIT_CREDENTIAL_REVISION_CONFLICT",`Refusing conflicting authorization set revision for ${t.instanceId}.`);return n}for(const e of t.credentialIds)if(!this.getPayload(e))throw dd("GIT_CREDENTIAL_PAYLOAD_MISSING",`Credential payload ${e} is not deployed.`);if(n){const e=this.client.prepare("UPDATE na_git_authorization_sets\n SET generation = ?, updated_at = ? WHERE instance_id = ? AND generation < ?").run(t.generation,t.updatedAt,t.instanceId,t.generation).changes;if(1!==Number(e))throw dd("GIT_CREDENTIAL_REVISION_STALE",`Authorization set ${t.instanceId} changed concurrently.`)}else this.client.prepare("INSERT INTO na_git_authorization_sets (instance_id, generation, created_at, updated_at)\n VALUES (?, ?, ?, ?)").run(t.instanceId,t.generation,e.createdAt,t.updatedAt);this.client.prepare("DELETE FROM na_git_authorization_members WHERE instance_id = ?").run(t.instanceId);const i=this.client.prepare("INSERT INTO na_git_authorization_members (instance_id, credential_id, display_order) VALUES (?, ?, ?)");for(const[e,n]of t.credentialIds.entries())i.run(t.instanceId,n,e);return this.getAuthorization(t.instanceId)})}deleteAuthorization(e){return Number(this.client.prepare("DELETE FROM na_git_authorization_sets WHERE instance_id = ?").run(e).changes)>0}listProvisioning(){return this.client.prepare("SELECT * FROM na_git_workspace_provisioning ORDER BY instance_id").all().map(ud)}getProvisioning(e){const t=this.client.prepare("SELECT * FROM na_git_workspace_provisioning WHERE instance_id = ?").get(e);return t?ud(t):void 0}putProvisioning(e){const t="pending"===e.status?e.input.operationId:e.operationId;return this.client.prepare("INSERT INTO na_git_workspace_provisioning\n (instance_id, status, operation_id, input_json, created_at, updated_at, expires_at) VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(instance_id) DO UPDATE SET status=excluded.status, operation_id=excluded.operation_id,\n input_json=excluded.input_json, updated_at=excluded.updated_at, expires_at=excluded.expires_at").run(e.id,e.status,t,"pending"===e.status?JSON.stringify(e.input):null,e.createdAt,e.updatedAt,e.expiresAt),this.getProvisioning(e.id)}deleteProvisioning(e){return Number(this.client.prepare("DELETE FROM na_git_workspace_provisioning WHERE instance_id = ?").run(e).changes)>0}deleteExpiredProvisioning(e){return Number(this.client.prepare("DELETE FROM na_git_workspace_provisioning WHERE expires_at <= ?").run(e).changes)}consumeProvisioning(e,t,n,i){return this.transaction(()=>{const s=this.client.prepare("UPDATE na_git_workspace_provisioning\n SET status = 'consumed', input_json = NULL, updated_at = ?, expires_at = ?\n WHERE instance_id = ? AND operation_id = ? AND status = 'pending'").run(n,i,e,t).changes;if(1===Number(s))return!0;const o=this.getProvisioning(e);return"consumed"===o?.status&&o.operationId===t})}authorizationFromRow(e){const t=this.client.prepare("SELECT credential_id FROM na_git_authorization_members WHERE instance_id = ? ORDER BY display_order").all(String(e.instance_id)).map(e=>String(e.credential_id));return{id:String(e.instance_id),instanceId:String(e.instance_id),generation:Number(e.generation),credentialIds:t,createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}transaction(e){if(this.client.isTransaction)return e();this.client.exec("BEGIN IMMEDIATE");try{const t=e();return this.client.exec("COMMIT"),t}catch(e){throw this.client.exec("ROLLBACK"),e}}}function dd(e,t){return Object.assign(new Error(t),{code:e,statusCode:409})}function ld(e){return{id:String(e.credential_id),payload:Xc.parse({credential:JSON.parse(String(e.public_json)),secret:JSON.parse(String(e.secret_json))}),createdAt:String(e.created_at),updatedAt:String(e.updated_at)}}function ud(e){const t={id:String(e.instance_id),createdAt:String(e.created_at),updatedAt:String(e.updated_at),expiresAt:String(e.expires_at)};return"pending"===e.status?{...t,status:"pending",input:sd.parse(JSON.parse(String(e.input_json)))}:{...t,status:"consumed",operationId:String(e.operation_id)}}class pd{tail=Promise.resolve();accepting=!0;run(e){if(!this.accepting)return Promise.reject(Ed("NODE_AGENT_REPOSITORY_QUIESCING","Node Agent storage is shutting down.",503));const t=this.tail.then(e,e);return this.tail=t.then(()=>{},()=>{}),t}async barrier(){await this.tail}stopAccepting(){this.accepting=!1}}function md(e){const t=e.db,n=new pd,i=new A.AsyncLocalStorage;let s=!1;const o=()=>{if(s)throw Ed("NODE_AGENT_REPOSITORY_CLOSED","Node Agent storage is closed.",503)},r=async e=>(o(),i.getStore()\|\|await n.barrier(),e()),a=async e=>(o(),i.getStore()?e():n.run(e));let c;return c={stories:hd(t,r,a),actions:gd(t,r,a),documents:fd(t,r,a),automations:yd(t,r,a),runs:Id(t,r,a),fileMutations:Ad(t,r,a),deletionIntents:_d(t,r,a),topology:hc(e.client),model:bc(e.client),access:new vc(e.client),git:new cd(e.client),transaction:async t=>i.getStore()?t(c):a(async()=>{e.client.exec("BEGIN IMMEDIATE");try{const n=await i.run(!0,()=>t(c));return e.client.exec("COMMIT"),n}catch(t){throw e.client.exec("ROLLBACK"),t}}),transactionSync:t=>{if(o(),e.client.isTransaction)return t(c);e.client.exec("BEGIN IMMEDIATE");try{const n=t(c);return e.client.exec("COMMIT"),n}catch(t){throw e.client.exec("ROLLBACK"),t}},stopAccepting(){n.stopAccepting()},async drain(){await n.barrier()},async checkpoint(){await n.barrier(),await e.checkpoint()},async close(){s\|\|(n.stopAccepting(),await n.barrier(),await e.checkpoint(),s=!0,await e.close())}},c}function hd(e,t,n){return{list:()=>t(()=>e.select().from(Za).orderBy(_.desc(Za.createdAt),_.asc(Za.id))),get:async n=>t(async()=>(await e.select().from(Za).where(_.eq(Za.id,n)).limit(1))[0]),insert:async t=>n(async()=>(await e.insert(Za).values(t),t)),update:async(t,i)=>n(async()=>(await e.update(Za).set(i).where(_.eq(Za.id,t)),(await e.select().from(Za).where(_.eq(Za.id,t)).limit(1))[0])),delete:async t=>n(async()=>Number((await e.delete(Za).where(_.eq(Za.id,t))).changes)>0)}}function gd(e,t,n){return{list:n=>t(()=>e.select().from(ec).where(_.eq(ec.storyId,n)).orderBy(_.asc(ec.displayOrder),_.asc(ec.id))),replace:async(t,i)=>n(async()=>{const n=i.map(e=>e.id);n.length?await e.delete(ec).where(_.and(_.eq(ec.storyId,t),_.notInArray(ec.id,n))):await e.delete(ec).where(_.eq(ec.storyId,t));for(const t of i)await e.insert(ec).values(t).onConflictDoUpdate({target:[ec.storyId,ec.id],set:{title:t.title,promptTemplate:t.promptTemplate,targetInstanceId:t.targetInstanceId,sessionPreset:t.sessionPreset,displayOrder:t.displayOrder}});return i})}}function fd(e,t,n){return{list:n=>t(()=>e.select().from(tc).where(_.eq(tc.storyId,n)).orderBy(_.asc(tc.displayOrder),_.asc(tc.storyPath))),get:async(n,i)=>t(async()=>(await e.select().from(tc).where(_.and(_.eq(tc.storyId,n),_.eq(tc.storyPath,i))).limit(1))[0]),page:async(n,i,s)=>t(async()=>{const t=Number((await e.select({value:_.count()}).from(tc).where(_.eq(tc.storyId,n)))[0]?.value??0);return{items:await e.select({title:tc.title,storyPath:tc.storyPath}).from(tc).where(_.eq(tc.storyId,n)).orderBy(_.desc(tc.indexedSequence),_.asc(tc.storyPath)).limit(s).offset((i-1)s),totalItems:t}}),insert:async t=>n(async()=>(await e.insert(tc).values(t),t)),update:async(t,i,s)=>n(async()=>{await e.update(tc).set(s).where(_.and(_.eq(tc.storyId,t),_.eq(tc.storyPath,i)))}),replacePath:async(t,i,s)=>n(async()=>{await e.delete(tc).where(_.and(_.eq(tc.storyId,t),_.eq(tc.storyPath,i))),await e.insert(tc).values(s)}),reorder:async(t,i)=>n(async()=>{for(const[n,s]of i.entries())await e.update(tc).set({displayOrder:n}).where(_.and(_.eq(tc.storyId,t),_.eq(tc.storyPath,s)))}),delete:async(t,i)=>n(async()=>Number((await e.delete(tc).where(_.and(_.eq(tc.storyId,t),_.eq(tc.storyPath,i)))).changes)>0)}}function yd(e,t,n){return{list:n=>t(()=>n?e.select().from(nc).where(_.eq(nc.storyId,n)).orderBy(_.asc(nc.createdAt),_.asc(nc.id)):e.select().from(nc).orderBy(_.asc(nc.createdAt),_.asc(nc.id))),get:async n=>t(async()=>(await e.select().from(nc).where(_.eq(nc.id,n)).limit(1))[0]),insert:async t=>n(async()=>(await e.insert(nc).values(t),t)),update:async(t,i)=>n(async()=>(await e.update(nc).set(i).where(_.eq(nc.id,t)),(await e.select().from(nc).where(_.eq(nc.id,t)).limit(1))[0])),referencingActions:async(n,i)=>i.length?t(()=>e.select().from(nc).where(_.and(_.eq(nc.storyId,n),_.inArray(nc.actionId,i)))):[],delete:async t=>n(async()=>Number((await e.delete(nc).where(_.eq(nc.id,t))).changes)>0),deleteForStory:async t=>n(async()=>{await e.delete(nc).where(_.eq(nc.storyId,t))})}}function Id(e,t,n){const i=["queued","dispatching","running"];return{list:n=>t(()=>e.select().from(ic).where(_.eq(ic.automationId,n)).orderBy(_.desc(ic.queuedAt))),get:async n=>t(async()=>(await e.select().from(ic).where(_.eq(ic.id,n)).limit(1))[0]),byExecutionKey:async n=>t(async()=>(await e.select().from(ic).where(_.eq(ic.executionKey,n)).limit(1))[0]),pending:()=>t(()=>e.select().from(ic).where(_.inArray(ic.status,[...i])).orderBy(_.asc(ic.queuedAt))),activeForStory:async n=>t(()=>e.select({run:ic}).from(ic).innerJoin(nc,_.eq(ic.automationId,nc.id)).where(_.and(_.eq(nc.storyId,n),_.inArray(ic.status,[...i]))).then(e=>e.map(e=>e.run))),insert:async t=>n(async()=>(await e.insert(ic).values(t),t)),update:async(t,i)=>n(async()=>(await e.update(ic).set(i).where(_.eq(ic.id,t)),(await e.select().from(ic).where(_.eq(ic.id,t)).limit(1))[0])),trimTerminal:async(t,i)=>n(async()=>{const n=await e.select({id:ic.id}).from(ic).where(_.and(_.eq(ic.automationId,t),_.inArray(ic.status,["completed","failed","skipped"]))).orderBy(_.desc(ic.queuedAt)).limit(2147483647).offset(i);n.length&&await e.delete(ic).where(_.inArray(ic.id,n.map(e=>e.id)))})}}function Ad(e,t,n){return{list:()=>t(()=>e.select().from(sc).orderBy(_.asc(sc.createdAt))),get:async n=>t(async()=>(await e.select().from(sc).where(_.eq(sc.id,n)).limit(1))[0]),insert:async t=>n(async()=>(await e.insert(sc).values(t),t)),update:async(t,i)=>n(async()=>{await e.update(sc).set(i).where(_.eq(sc.id,t))}),delete:async t=>n(async()=>{await e.delete(sc).where(_.eq(sc.id,t))})}}function _d(e,t,n){return{list:()=>t(()=>e.select().from(oc).orderBy(_.asc(oc.createdAt))),get:async n=>t(async()=>(await e.select().from(oc).where(_.eq(oc.storyId,n)).limit(1))[0]),put:async t=>n(async()=>(await e.insert(oc).values(t).onConflictDoUpdate({target:oc.storyId,set:{phase:t.phase,trashName:t.trashName,updatedAt:t.updatedAt}}),t)),delete:async t=>n(async()=>{await e.delete(oc).where(_.eq(oc.storyId,t))})}}function Ed(e,t,n){return Object.assign(new Error(t),{code:e,statusCode:n})}function wd(e,t){return{id:e,sql:t,checksum:d.createHash("sha256").update(t).digest("hex")}}const Td=[wd("0001_story_domain","\nCREATE TABLE na_stories (\n id TEXT PRIMARY KEY NOT NULL, title TEXT NOT NULL, description TEXT,\n created_at TEXT NOT NULL, updated_at TEXT NOT NULL, archived_at TEXT,\n max_idle_ai_sessions INTEGER NOT NULL DEFAULT 5 CHECK(max_idle_ai_sessions BETWEEN 1 AND 50),\n next_document_sequence INTEGER NOT NULL DEFAULT 1 CHECK(next_document_sequence > 0)\n);\nCREATE INDEX na_stories_created_idx ON na_stories(created_at);\nCREATE TABLE na_story_actions (\n story_id TEXT NOT NULL REFERENCES na_stories(id) ON DELETE CASCADE, id TEXT NOT NULL,\n title TEXT NOT NULL, prompt_template TEXT NOT NULL, target_instance_id TEXT,\n session_preset_json TEXT, display_order INTEGER NOT NULL,\n PRIMARY KEY(story_id, id)\n);\nCREATE INDEX na_story_actions_order_idx ON na_story_actions(story_id, display_order, id);\nCREATE TABLE na_story_documents (\n story_id TEXT NOT NULL REFERENCES na_stories(id) ON DELETE CASCADE, story_path TEXT NOT NULL,\n title TEXT NOT NULL, indexed_sequence INTEGER NOT NULL CHECK(indexed_sequence > 0), display_order INTEGER NOT NULL,\n PRIMARY KEY(story_id, story_path)\n);\nCREATE UNIQUE INDEX na_story_documents_sequence_uq ON na_story_documents(story_id, indexed_sequence);\nCREATE INDEX na_story_documents_page_idx ON na_story_documents(story_id, indexed_sequence, story_path);\nCREATE INDEX na_story_documents_display_idx ON na_story_documents(story_id, display_order, story_path);\nCREATE TABLE na_story_automations (\n id TEXT PRIMARY KEY NOT NULL, story_id TEXT NOT NULL, action_id TEXT NOT NULL,\n schedule_json TEXT NOT NULL, enabled INTEGER NOT NULL, policy_json TEXT NOT NULL,\n schedule_anchor_at TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL,\n CONSTRAINT na_story_automations_action_fk FOREIGN KEY(story_id, action_id)\n REFERENCES na_story_actions(story_id, id) ON DELETE RESTRICT\n);\nCREATE INDEX na_story_automations_story_idx ON na_story_automations(story_id);\nCREATE INDEX na_story_automations_enabled_idx ON na_story_automations(enabled);\nCREATE TABLE na_story_automation_runs (\n id TEXT PRIMARY KEY NOT NULL, automation_id TEXT NOT NULL REFERENCES na_story_automations(id) ON DELETE CASCADE,\n event_type TEXT NOT NULL CHECK(event_type IN ('manual','schedule')),\n status TEXT NOT NULL CHECK(status IN ('queued','dispatching','running','completed','failed','skipped')),\n scheduled_for TEXT NOT NULL, target_instance_id TEXT NOT NULL, ai_session_id TEXT, error_json TEXT,\n queued_at TEXT NOT NULL, started_at TEXT, completed_at TEXT,\n execution_key TEXT NOT NULL, request_fingerprint TEXT NOT NULL, execution_input_json TEXT NOT NULL\n);\nCREATE UNIQUE INDEX na_story_automation_runs_execution_key_uq ON na_story_automation_runs(execution_key);\nCREATE INDEX na_story_automation_runs_automation_time_idx ON na_story_automation_runs(automation_id, queued_at);\nCREATE INDEX na_story_automation_runs_status_idx ON na_story_automation_runs(status, scheduled_for);\nCREATE TABLE na_story_file_mutations (\n id TEXT PRIMARY KEY NOT NULL, story_id TEXT NOT NULL REFERENCES na_stories(id) ON DELETE RESTRICT,\n operation TEXT NOT NULL CHECK(operation IN ('write','rename','delete')), story_path TEXT NOT NULL,\n next_story_path TEXT, title TEXT, temporary_name TEXT, backup_name TEXT,\n phase TEXT NOT NULL CHECK(phase IN ('receiving','prepared','files-staged','database-committed','cleanup')),\n created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_story_file_mutations_story_idx ON na_story_file_mutations(story_id, created_at);\nCREATE TABLE na_story_deletion_intents (\n story_id TEXT PRIMARY KEY NOT NULL,\n phase TEXT NOT NULL CHECK(phase IN ('prepared','files-staged','database-committed','cleanup')),\n trash_name TEXT, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\n"),wd("0002_p0_state_domains","\nCREATE TABLE na_node_identity (\n singleton_key INTEGER PRIMARY KEY NOT NULL DEFAULT 1 CHECK(singleton_key = 1),\n node_id TEXT NOT NULL UNIQUE, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE TABLE na_local_folders (\n id TEXT PRIMARY KEY NOT NULL, node_id TEXT NOT NULL REFERENCES na_node_identity(node_id) ON DELETE RESTRICT ON UPDATE CASCADE,\n name TEXT NOT NULL, path TEXT NOT NULL, labels_json TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL,\n UNIQUE(node_id, path)\n);\nCREATE TABLE na_runtimes (\n id TEXT PRIMARY KEY NOT NULL, node_id TEXT NOT NULL REFERENCES na_node_identity(node_id) ON DELETE RESTRICT ON UPDATE CASCADE,\n name TEXT NOT NULL, type TEXT NOT NULL CHECK(type IN ('docker','kubernetes','local')),\n status TEXT NOT NULL CHECK(status IN ('unknown','online','offline','degraded')), access_strategy TEXT NOT NULL,\n capabilities_json TEXT NOT NULL, labels_json TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_runtimes_node_type_idx ON na_runtimes(node_id, type);\nCREATE TABLE na_instances (\n id TEXT PRIMARY KEY NOT NULL, node_id TEXT NOT NULL REFERENCES na_node_identity(node_id) ON DELETE RESTRICT ON UPDATE CASCADE,\n runtime_id TEXT NOT NULL REFERENCES na_runtimes(id) ON DELETE RESTRICT ON UPDATE CASCADE,\n source_local_folder_id TEXT REFERENCES na_local_folders(id) ON DELETE SET NULL ON UPDATE CASCADE,\n name TEXT NOT NULL, status TEXT NOT NULL, state_revision INTEGER NOT NULL DEFAULT 0 CHECK(state_revision >= 0),\n process_incarnation_id TEXT, registration_credential TEXT, desired_json TEXT NOT NULL,\n created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_instances_runtime_idx ON na_instances(runtime_id);\nCREATE INDEX na_instances_status_idx ON na_instances(status, updated_at);\nCREATE TABLE na_instance_observations (\n instance_id TEXT PRIMARY KEY NOT NULL REFERENCES na_instances(id) ON DELETE CASCADE ON UPDATE CASCADE,\n health TEXT NOT NULL, connection_status TEXT NOT NULL, ready INTEGER NOT NULL,\n observed_json TEXT NOT NULL, last_heartbeat_at TEXT, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_instance_observations_connection_idx ON na_instance_observations(connection_status, updated_at);\nCREATE TABLE na_models (\n id TEXT PRIMARY KEY NOT NULL, name TEXT NOT NULL, endpoint TEXT NOT NULL, key TEXT NOT NULL, model TEXT NOT NULL,\n app TEXT NOT NULL CHECK(app IN ('codex','claude','opencode')), enabled INTEGER NOT NULL,\n display_order INTEGER NOT NULL, model_names_json TEXT NOT NULL, protocols_json TEXT NOT NULL,\n labels_json TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_models_order_idx ON na_models(display_order, id);\nCREATE TABLE na_instance_model_assignments (\n instance_id TEXT PRIMARY KEY NOT NULL REFERENCES na_instances(id) ON DELETE CASCADE ON UPDATE CASCADE,\n legacy_codex_model_id TEXT REFERENCES na_models(id) ON DELETE RESTRICT ON UPDATE CASCADE,\n legacy_claude_model_id TEXT REFERENCES na_models(id) ON DELETE RESTRICT ON UPDATE CASCADE,\n legacy_opencode_model_id TEXT REFERENCES na_models(id) ON DELETE RESTRICT ON UPDATE CASCADE,\n updated_at TEXT NOT NULL\n);\nCREATE TABLE na_instance_model_entities (\n instance_id TEXT NOT NULL REFERENCES na_instance_model_assignments(instance_id) ON DELETE CASCADE ON UPDATE CASCADE,\n model_id TEXT NOT NULL REFERENCES na_models(id) ON DELETE RESTRICT ON UPDATE CASCADE,\n display_order INTEGER NOT NULL, PRIMARY KEY(instance_id, model_id), UNIQUE(instance_id, display_order)\n);\nCREATE TABLE na_control_plane_pairings (\n key_id TEXT PRIMARY KEY NOT NULL, control_plane_id TEXT NOT NULL UNIQUE, name TEXT, secret TEXT NOT NULL,\n paired_at TEXT NOT NULL, revoked_at TEXT, updated_at TEXT NOT NULL\n);\nCREATE TABLE na_control_plane_connections (\n id TEXT PRIMARY KEY NOT NULL,\n pairing_key_id TEXT NOT NULL REFERENCES na_control_plane_pairings(key_id) ON DELETE RESTRICT ON UPDATE CASCADE,\n name TEXT, normalized_url TEXT NOT NULL UNIQUE, enabled INTEGER NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE TABLE na_control_plane_connection_operations (\n id TEXT PRIMARY KEY NOT NULL, kind TEXT NOT NULL,\n phase TEXT NOT NULL CHECK(phase IN ('prepared','remote-accepted','committed','failed')),\n requested_json TEXT NOT NULL, pairing_key_id TEXT, connection_id TEXT, replaced_connections_json TEXT NOT NULL,\n error_json TEXT, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE INDEX na_control_plane_connection_operations_phase_idx ON na_control_plane_connection_operations(phase, updated_at);\nCREATE TABLE na_git_credential_payloads (\n credential_id TEXT PRIMARY KEY NOT NULL, revision INTEGER NOT NULL CHECK(revision >= 0),\n public_json TEXT NOT NULL, secret_json TEXT NOT NULL, created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE TABLE na_git_authorization_sets (\n instance_id TEXT PRIMARY KEY NOT NULL REFERENCES na_instances(id) ON DELETE CASCADE ON UPDATE CASCADE,\n generation INTEGER NOT NULL CHECK(generation >= 0), created_at TEXT NOT NULL, updated_at TEXT NOT NULL\n);\nCREATE TABLE na_git_authorization_members (\n instance_id TEXT NOT NULL REFERENCES na_git_authorization_sets(instance_id) ON DELETE CASCADE ON UPDATE CASCADE,\n credential_id TEXT NOT NULL REFERENCES na_git_credential_payloads(credential_id) ON DELETE RESTRICT ON UPDATE CASCADE,\n display_order INTEGER NOT NULL, PRIMARY KEY(instance_id, credential_id), UNIQUE(instance_id, display_order)\n);\nCREATE TABLE na_git_workspace_provisioning (\n instance_id TEXT PRIMARY KEY NOT NULL REFERENCES na_instances(id) ON DELETE CASCADE ON UPDATE CASCADE,\n status TEXT NOT NULL CHECK(status IN ('pending','consumed')), operation_id TEXT NOT NULL, input_json TEXT,\n created_at TEXT NOT NULL, updated_at TEXT NOT NULL, expires_at TEXT NOT NULL,\n CHECK((status = 'pending' AND input_json IS NOT NULL) OR (status = 'consumed' AND input_json IS NULL))\n);\nCREATE INDEX na_git_workspace_provisioning_expiry_idx ON na_git_workspace_provisioning(expires_at);\n")],bd=a.z.string().trim().min(1).max(160),Sd=a.z.string().datetime(),vd=a.z.string().min(1).max(4096),Nd=a.z.string().trim().url().max(2048),Od=a.z.object({id:bd,keyId:bd,name:a.z.string().trim().min(1).max(160).optional(),secret:vd,pairedAt:Sd,revokedAt:Sd.optional(),updatedAt:Sd}).strip(),zd=a.z.object({id:bd,pairingKeyId:bd,name:a.z.string().trim().min(1).max(160).optional(),url:Nd,enabled:a.z.boolean().default(!0),createdAt:Sd,updatedAt:Sd}).strip(),Cd=a.z.object({controlPlaneName:a.z.string().trim().min(1).max(160).optional(),controlPlaneUrl:a.z.string().trim().max(2048).optional(),expiresInMs:a.z.number().int().positive().max(36e5).optional()}).strict(),Rd=a.z.object({joinToken:a.z.string().trim().min(1).max(4096),controlPlaneId:a.z.string().trim().min(1).max(160).optional(),controlPlaneName:a.z.string().trim().min(1).max(160).optional()}).strict(),xd=a.z.object({controlPlaneUrl:a.z.string().trim().url().max(2048),joinToken:a.z.string().trim().min(1).max(4096),controlPlaneName:a.z.string().trim().min(1).max(160).optional(),activate:a.z.boolean().optional()}).strict(),kd=new Set(["nodeId","createdAt","updatedAt","pairingInvites","controlPlanePairings","controlPlaneConnections","remoteControlPlanes"]),Dd=new Set(["id","keyId","name","secret","pairedAt","revokedAt","updatedAt"]),Pd=new Set(["id","pairingKeyId","name","url","enabled","createdAt","updatedAt"]),Ld=new Set(["id","keyId","name","url","secret","pairedAt","updatedAt","active"]);function Md(e,t){console.warn(JSON.stringify({message:e,...t}))}function jd(e,t){return Object.assign(new Error(e,void 0===t?void 0:{cause:t}),{code:"NODE_AGENT_IDENTITY_INVALID"})}function Ud(e,t){return Object.keys(e).filter(e=>!t.has(e))}function Fd(e,t,n){const i=Sd.safeParse(e);return i.success?i.data:(n("invalid node agent identity timestamp was replaced",{field:t}),ae())}function $d(e,t=Md){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))throw jd("Node agent identity must be a JSON object.");const n=e,i=bd.safeParse(n.nodeId);if(!i.success)throw jd("Node agent identity has an invalid nodeId.",i.error);const s=i.data,o=Ud(n,kd);o.length&&t("unknown node agent identity fields were ignored",{fields:o}),Array.isArray(n.pairingInvites)&&n.pairingInvites.length&&t("persisted node agent pairing invites were discarded",{count:n.pairingInvites.length});const r=Array.isArray(n.remoteControlPlanes)?n.remoteControlPlanes.flatMap(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const n=e,i=Ud(n,Ld);i.length&&t("unknown legacy node agent remote control-plane fields were ignored",{fields:i});const s=Od.safeParse(n);if(!s.success)return t("invalid legacy node agent control-plane pairing was ignored",{issues:s.error.issues}),[];const o=n.url?zd.safeParse({id:`connection_${s.data.keyId}`,pairingKeyId:s.data.keyId,name:n.name,url:n.url,enabled:!1!==n.active,createdAt:s.data.pairedAt,updatedAt:s.data.updatedAt}):void 0;return[{pairing:s.data,...o?.success?{connection:o.data}:{}}]}):[],a=(e,n,i,s)=>Array.isArray(e)?e.flatMap(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return t(`invalid node agent ${s} was ignored`,{}),[];const o=Ud(e,n);o.length&&t(`unknown node agent ${s} fields were ignored`,{fields:o});const r=i.safeParse(e);return r.success?[r.data]:(t(`invalid node agent ${s} was ignored`,{issues:r.error.issues}),[])}):[];return{nodeId:s,createdAt:Fd(n.createdAt,"createdAt",t),updatedAt:Fd(n.updatedAt,"updatedAt",t),controlPlanePairings:n.controlPlanePairings?a(n.controlPlanePairings,Dd,Od,"control-plane pairing"):r.map(e=>e.pairing),controlPlaneConnections:n.controlPlaneConnections?a(n.controlPlaneConnections,Pd,zd,"control-plane connection"):r.flatMap(e=>e.connection?[e.connection]:[])}}const Hd="1000_import_v0_0_28_p0",qd=d.createHash("sha256").update(JSON.stringify({sourceTag:"v0.0.28",plannerVersion:3,domains:["identity","folders","runtimes","instances","models","assignments","model-environments","git"],transaction:"begin-immediate"})).digest("hex"),Vd=["id","nodeId","name","path","defaultImageSelection","labels","createdAt","updatedAt"],Bd=["id","nodeId","name","type","status","accessStrategy","capabilities","labels","createdAt","updatedAt"],Kd=["id","name","endpoint","key","model","modelNames","protocols","app","enabled","order","labels","createdAt","updatedAt"],Gd=["instanceId","modelEntityIds","codexModelHash","claudeModelHash","opencodeModelHash","updatedAt"],Wd=["id","payload","createdAt","updatedAt"],Xd=["id","instanceId","generation","credentialIds","createdAt","updatedAt"],Yd=["id","instanceId","credentialId","credentialRevision","assignmentRevision","status","authorizedAt","createdAt","updatedAt"],Jd=["id","status","operationId","input","createdAt","updatedAt","expiresAt"];function Qd(e,i,s={}){const o=e.prepare("SELECT checksum FROM na_migration_ledger WHERE id = ?").get(Hd);if(o){if(o.checksum!==qd)throw ll("ledger","Legacy P0 migration checksum mismatch.");return void sl(i,s.rename)}const r=[],c=function(e,i){const s=[],o=new Set,r=(e,o)=>function(e,i,s,o){return t.existsSync(e)?t.readdirSync(e).filter(e=>e.endsWith(".json")).sort().flatMap(r=>{const a=n.join(e,r);let c;try{c=t.readFileSync(a,"utf8")}catch(e){throw ll(a,"Legacy JSON could not be accessed.",e)}const l={filePath:a,value:void 0,digest:d.createHash("sha256").update(c).digest("hex")};s.push(l);try{return l.value=JSON.parse(c),[l]}catch{return i.push({source:a,field:"unreadable-record"}),o?.(a),[]}}):[]}(e,i,s,o);return{...{folders:r(e.localFoldersDir),runtimes:r(e.nodeRuntimesDir),instances:r(e.controlledInstancesDir,e=>o.add(n.basename(e,".json"))),privateConfigs:r(e.instancePrivateConfigsDir),models:r(e.nodeModelsDir),assignments:r(e.modelAssignmentsDir),modelEnvironments:r(e.modelEnvironmentsDir),gitPayloads:r(e.gitCredentialPayloadsDir),gitAssignments:r(e.gitCredentialAssignmentsDir),gitAuthorizations:r(e.gitCredentialAuthorizationSetsDir),gitProvisioning:r(e.gitWorkspaceProvisioningIntentsDir)},allFiles:s,isolatedInstanceIds:o}}(i,r),l=c.allFiles.length>0,u=function(e){let n;try{n=t.lstatSync(e)}catch(t){if("ENOENT"===t.code)return;throw ll(e,"Legacy JSON could not be accessed.",t)}if(!n.isFile())throw ll(e,"Legacy JSON must be a regular file.");return function(e){try{const n=t.readFileSync(e,"utf8");return{filePath:e,value:JSON.parse(n),digest:d.createHash("sha256").update(n).digest("hex")}}catch(t){throw ll(e,"Legacy JSON could not be read.",t)}}(e)}(i.identityPath);if(l&&!u)throw ll(i.identityPath,"Legacy P0 data requires a node identity.");try{const t=u?$d(u.value,(e,t)=>r.push({source:i.identityPath,field:String(t.field\|\|t.fields\|\|"legacy")})):void 0,s=c.folders.map(e=>(dl(e,Vd,r),el(e,rs,Si(e.value)))),o=c.runtimes.map(e=>(dl(e,Bd,r),el(e,Ws.strip(),e.value))),d=new Map(Zd(c.privateConfigs,c.isolatedInstanceIds,r).map(e=>{const t=rl(e.value);return[n.basename(e.filePath,".json"),al(t.instanceCredential??t.registrationToken)]})),l=c.instances.map(e=>{const t=fo(e.value,t=>r.push({source:e.filePath,field:t.field}));if(!t.success)throw tl(e,t.error);return{...t.data,registrationToken:t.data.registrationToken\|\|d.get(t.data.id)}}),p=c.models.flatMap(e=>{const t=rl(e.value);dl(e,Kd,r);const i=el(e,hs,cl(t,["id","name","endpoint","key","model","modelNames","protocols","app","enabled","order","labels","createdAt","updatedAt"]));return n.basename(e.filePath,".json")!==i.id\|\|Ss(i)!==i.id?(r.push({source:e.filePath,field:"identity-or-content-hash"}),[]):[hs.parse({...i,modelNames:i.modelNames.length?i.modelNames:[{name:i.model,order:0}],protocols:i.protocols.length?i.protocols:[(s=i.app,"claude"===s?"anthropic-messages":"opencode"===s?"openai-chat-completions":"openai-responses")]})];var s}),m=Zd(c.assignments,c.isolatedInstanceIds,r).map(e=>{const t=rl(e.value);return dl(e,Gd,r),el(e,ys,cl(t,["instanceId","modelEntityIds","codexModelHash","claudeModelHash","opencodeModelHash","updatedAt"]))});!function(e,t,i,s){const o=new Set(t.map(e=>e.id)),r=new Map(s.map(e=>[e.instanceId,e])),c=new Map(i.map(e=>[e.id,e]));let d=i.reduce((e,t)=>Math.max(e,t.order),0)+100;for(const l of e){const e=n.basename(l.filePath,".json");if(!o.has(e))throw ll(l.filePath,`Legacy model environment references missing instance ${e}.`);if(r.has(e))continue;const u=a.z.record(a.z.string(),a.z.string()).safeParse(l.value);if(!u.success)throw tl(l,u.error);const p=u.data,m=new Set(["OPENAI_API_KEY","OPENAI_BASE_URL","CODEX_MODEL","TASK_HANDOFF_CODEX_BASE_URL","TASK_HANDOFF_CODEX_MODEL","ANTHROPIC_API_KEY","ANTHROPIC_BASE_URL","CLAUDE_MODEL","TASK_HANDOFF_CLAUDE_MODEL"]);if(Object.keys(p).some(e=>!m.has(e)))throw ll(l.filePath,"Legacy model environment contains an unknown field.");const h=[],g={};for(const n of["codex","claude"]){const s=p["codex"===n?"OPENAI_API_KEY":"ANTHROPIC_API_KEY"],o="codex"===n?p.TASK_HANDOFF_CODEX_BASE_URL\|\|p.OPENAI_BASE_URL:p.ANTHROPIC_BASE_URL,r="codex"===n?p.TASK_HANDOFF_CODEX_MODEL\|\|p.CODEX_MODEL:p.TASK_HANDOFF_CLAUDE_MODEL\|\|p.CLAUDE_MODEL;if(!s&&!o&&!r)continue;if(!s\|\|!o\|\|!r)throw ll(l.filePath,`Legacy ${n} model environment is incomplete.`);const a=Ss({app:n,endpoint:o,key:s,model:r});if(!c.has(a)){const l=t.find(t=>t.id===e).updatedAt,u=hs.parse({id:a,name:`Migrated ${"codex"===n?"Codex":"Claude"} model`,endpoint:o,key:s,model:r,app:n,enabled:!0,order:d,labels:{migratedFrom:"instance-model-environment"},createdAt:l,updatedAt:l});d+=100,i.push(u),c.set(a,u)}h.push(a),"codex"===n?g.codexModelHash=a:g.claudeModelHash=a}if(!h.length)throw ll(l.filePath,"Legacy model environment has no complete model configuration.");const f=ys.parse({instanceId:e,modelEntityIds:h,...g,updatedAt:t.find(t=>t.id===e).updatedAt});s.push(f),r.set(e,f)}}(Zd(c.modelEnvironments,c.isolatedInstanceIds,r),l,p,m);const h=c.gitPayloads.map(e=>{const t=rl(e.value);return dl(e,Wd,r),{id:al(t.id),payload:el(e,Xc,t.payload),createdAt:al(t.createdAt),updatedAt:al(t.updatedAt)}}),g=function(e,t){const n=new Map(e.map(e=>[e.instanceId,e]));for(const e of new Set(t.map(e=>e.instanceId))){if(n.has(e))continue;const i=t.filter(t=>t.instanceId===e).sort((e,t)=>e.credentialId.localeCompare(t.credentialId)),s=i.map(e=>e.updatedAt).sort().at(-1);n.set(e,{id:e,instanceId:e,generation:Math.max(0,...i.map(e=>e.assignmentRevision)),credentialIds:i.filter(e=>"revoking"!==e.status&&"revoked"!==e.status).map(e=>e.credentialId),createdAt:s,updatedAt:s})}return[...n.values()].sort((e,t)=>e.instanceId.localeCompare(t.instanceId))}(Zd(c.gitAuthorizations,c.isolatedInstanceIds,r).map(e=>{const t=rl(e.value);dl(e,Xd,r);const n=el(e,Yc,cl(t,["instanceId","generation","credentialIds","updatedAt"]));return{...n,id:n.instanceId,createdAt:al(t.createdAt)}}),Zd(c.gitAssignments,c.isolatedInstanceIds,r).map(e=>{const t=rl(e.value);return dl(e,Yd,r),el(e,Wc,cl(t,["instanceId","credentialId","credentialRevision","assignmentRevision","status","authorizedAt","updatedAt"]))})),f=Zd(c.gitProvisioning,c.isolatedInstanceIds,r).map(e=>(dl(e,Jd,r),function(e){const t=rl(e.value),n={id:al(t.id),createdAt:al(t.createdAt),updatedAt:al(t.updatedAt),expiresAt:al(t.expiresAt)};if("consumed"===t.status)return{...n,status:"consumed",operationId:al(t.operationId)};const i=function(e){const t=od(e),n=od(t?.ref),i=od(t?.clone),s=Array.isArray(t?.credentials)?t.credentials.map(e=>{const t=od(e),n=od(t?.payload),i=function(e){const t=od(e),n=od(t?.scope);return Vc.safeParse({...rd(t,["id","name","kind","secretSet","status","revision","createdAt","updatedAt"]),scope:rd(n,["scheme","host","port","pathPrefix"])})}(n?.credential),s=od(n?.secret);return{...rd(t,["operationId","retention"]),payload:{credential:i.success?i.data:n?.credential,secret:rd(s,"https-token"===s?.kind?["kind","username","token"]:["kind","privateKey","passphrase","pinnedKnownHosts"])}}}):t?.credentials;return sd.safeParse({...rd(t,["operationId","instanceId","remoteUrl"]),ref:rd(n,["type","name","commit"]),clone:rd(i,["depth","submodules","lfs","subdirectory"]),credentials:s})}(t.input);if(!i.success)throw tl(e,i.error);const s=sd.parse(i.data);return{...n,id:s.instanceId,status:"pending",input:s}}(e)));!function(e){const t=e.identity?.nodeId,n=nl("local folder",e.folders.map(e=>e.id)),i=nl("runtime",e.runtimes.map(e=>e.id)),s=nl("instance",e.instances.map(e=>e.id)),o=nl("model",e.models.map(e=>e.id)),r=nl("Git credential payload",e.payloads.map(e=>e.id));nl("model assignment",e.assignments.map(e=>e.instanceId)),nl("Git authorization",e.authorizations.map(e=>e.instanceId)),nl("Git provisioning",e.provisioning.map(e=>e.id));for(const n of[...e.folders,...e.runtimes])if(!t\|\|n.nodeId!==t)throw il("node-identity",n.id,n.nodeId,"Legacy topology record references a different or missing node identity.");for(const s of e.instances){if(!t\|\|s.nodeId!==t)throw il("node-identity",s.id,s.nodeId,"Legacy instance references a different or missing node identity.");if(!i.has(s.runtimeId))throw il("runtime",s.id,s.runtimeId,"Legacy instance references a missing runtime.");if("local-folder"===s.source.type&&s.source.localFolderId&&!n.has(s.source.localFolderId))throw il("local-folder",s.id,s.source.localFolderId,"Legacy instance references a missing local folder.")}for(const t of e.privateConfigInstanceIds)if(!s.has(t))throw il("instance",t,t,"Legacy private config references a missing instance.");for(const t of e.assignments){if(!s.has(t.instanceId))throw il("instance",t.instanceId,t.instanceId,"Legacy model assignment references a missing instance.");for(const e of new Set([...t.modelEntityIds,t.codexModelHash,t.claudeModelHash,t.opencodeModelHash].filter(e=>Boolean(e))))if(!o.has(e))throw il("model",t.instanceId,e,"Legacy model assignment references a missing model.")}for(const t of e.payloads)if(t.id!==t.payload.credential.id)throw il("Git credential payload",t.id,t.payload.credential.id,"Legacy Git credential wrapper and payload ids do not match.");for(const t of e.authorizations){if(!s.has(t.instanceId))throw il("instance",t.instanceId,t.instanceId,"Legacy Git authorization references a missing instance.");for(const e of t.credentialIds)if(!r.has(e))throw il("Git credential payload",t.instanceId,e,"Legacy Git authorization references a missing credential payload.")}for(const t of e.provisioning)if(!s.has(t.id))throw il("instance",t.id,t.id,"Legacy Git provisioning references a missing instance.");if(e.identity){const t=nl("Control Plane pairing",e.identity.controlPlanePairings.map(e=>e.keyId));nl("Control Plane connection",e.identity.controlPlaneConnections.map(e=>e.id));const n=new Set;for(const i of e.identity.controlPlaneConnections){if(!t.has(i.pairingKeyId))throw il("Control Plane pairing",i.id,i.pairingKeyId,"Legacy connection references a missing pairing.");const e=new URL(i.url).toString().replace(/\/$/,"");if(n.has(e))throw il("Control Plane URL",i.id,e,"Legacy connections contain a duplicate normalized URL.");n.add(e)}}}({identity:t,folders:s,runtimes:o,instances:l,privateConfigInstanceIds:[...d.keys()],models:p,assignments:m,payloads:h,authorizations:g,provisioning:f}),e.exec("BEGIN IMMEDIATE");try{const n=new vc(e),i=hc(e),a=bc(e),d=new cd(e);t&&n.writeIdentity(t);for(const e of s)i.localFolders.put(e);for(const e of o)i.runtimes.put(e);for(const e of l)i.instances.put(e);for(const e of p)a.models.put(e);for(const e of m)a.assignments.put(e);for(const e of h)d.putPayload(e);for(const e of g)d.putAuthorization(e);for(const e of f)d.putProvisioning(e);const y={sourceTag:"v0.0.28",counts:{identities:t?1:0,folders:s.length,runtimes:o.length,instances:l.length,models:p.length,assignments:m.length,pairings:t?.controlPlanePairings?.length\|\|0,connections:t?.controlPlaneConnections?.length\|\|0,gitPayloads:h.length,gitAuthorizations:g.length,gitProvisioning:f.length},inputDigest:ol([...u?[u]:[],...c.allFiles]),warningCount:r.length};e.prepare("INSERT INTO na_migration_ledger (id, checksum, applied_at, details) VALUES (?, ?, ?, ?)").run(Hd,qd,(new Date).toISOString(),JSON.stringify(y)),e.exec("COMMIT")}catch(t){throw e.exec("ROLLBACK"),t}}catch(e){if(e&&"object"==typeof e&&"code"in e&&"NODE_AGENT_LEGACY_MIGRATION_FAILED"===e.code)throw e;throw ll("p0","Legacy P0 data failed validation.",e)}sl(i,s.rename);for(const e of r)console.warn(JSON.stringify({message:"legacy node agent field was ignored",...e}))}function Zd(e,t,i){return e.filter(e=>{const s=rl(e.value),o="string"==typeof s.instanceId?s.instanceId:n.basename(e.filePath,".json");return!t.has(o)\|\|(i.push({source:e.filePath,field:"isolated-instance-owner"}),!1)})}function el(e,t,n){const i=t.safeParse(n);if(!i.success)throw tl(e,i.error);return i.data}function tl(e,t){return ll(e.filePath,"Legacy record is missing a required field or has an invalid type.",void 0,{issues:t.issues.map(e=>({path:e.path.join("."),code:e.code}))})}function nl(e,t){const n=new Set;for(const i of t){if(n.has(i))throw ll(e,`Legacy ${e} id is duplicated.`,void 0,{recordId:i});n.add(i)}return n}function il(e,t,n,i){return ll(e,i,void 0,{relation:e,recordId:t,referencedId:n})}function sl(e,n=t.renameSync){const i=[e.identityPath,e.localFoldersDir,e.nodeRuntimesDir,e.controlledInstancesDir,e.nodeModelsDir,e.modelAssignmentsDir,e.gitCredentialPayloadsDir,e.modelEnvironmentsDir,e.gitCredentialAssignmentsDir,e.gitCredentialAuthorizationSetsDir,e.gitWorkspaceProvisioningIntentsDir];for(const e of i){if(!t.existsSync(e))continue;const i=`${e}.migrated-v0.0.28`;let s=i;for(let e=1;t.existsSync(s);e+=1)s=`${i}.${e}`;try{n(e,s)}catch(t){console.warn(JSON.stringify({message:"legacy node agent persistence archive failed",source:e,target:s,error:t instanceof Error?t.message:String(t)}))}}}function ol(e){const t=d.createHash("sha256");for(const i of[...e].sort((e,t)=>e.filePath.localeCompare(t.filePath)))t.update(n.basename(i.filePath)),t.update(i.digest);return t.digest("hex")}function rl(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))throw ll("record","Legacy record must be an object.");return e}function al(e){if("string"!=typeof e\|\|!e)throw ll("record","Legacy record is missing a required string.");return e}function cl(e,t){return Object.fromEntries(t.flatMap(t=>Object.prototype.hasOwnProperty.call(e,t)?[[t,e[t]]]:[]))}function dl(e,t,n){const i=rl(e.value),s=new Set(t);for(const t of Object.keys(i).filter(e=>!s.has(e)).sort())n.push({source:e.filePath,field:t})}function ll(e,t,n,i={}){return Object.assign(new Error(t,void 0===n?void 0:{cause:n}),{code:"NODE_AGENT_LEGACY_MIGRATION_FAILED",statusCode:500,details:{source:e,...i}})}function ul(e,t){return Object.assign(new Error(`Node Agent database ${e} failed: ${t instanceof Error?t.message:String(t)}`,{cause:t}),{code:"NODE_AGENT_DATABASE_STARTUP_FAILED",statusCode:500,details:{phase:e,recovery:"Restore or remove the invalid node-agent.sqlite before restarting the Node Agent."}})}function pl(e,t){const n=e.prepare(t).get();return n?Object.values(n)[0]:void 0}function ml(e){for(const n of[e.databasePath,`${e.databasePath}-wal`,`${e.databasePath}-shm`])t.existsSync(n)&&t.chmodSync(n,384)}function hl(e,i={}){try{!function(e=process.versions.node){const[t,n]=e.split(".").map(Number);if(24!==t\|\|n<15)throw new Error(`Node.js 24.15 or newer within the Node.js 24 release line is required; received ${e}.`)}()}catch(e){throw ul("runtime",e)}let s;t.mkdirSync(n.dirname(e.databasePath),{recursive:!0,mode:448}),t.chmodSync(n.dirname(e.databasePath),448);try{if(s=new w.DatabaseSync(e.databasePath),function(e,t){e.exec("PRAGMA foreign_keys = ON"),e.exec("PRAGMA busy_timeout = 5000"),e.exec("PRAGMA journal_mode = WAL"),e.exec("PRAGMA synchronous = FULL");const n=Number(pl(e,"PRAGMA application_id"));if(0===n)e.exec("PRAGMA application_id = 1414024769");else if(1414024769!==n)throw new Error(`Unexpected application_id ${n}.`);if(1!==Number(pl(e,"PRAGMA foreign_keys")))throw new Error("foreign_keys could not be enabled.");if("wal"!==String(pl(e,"PRAGMA journal_mode")).toLowerCase())throw new Error("WAL could not be enabled.");if(5e3!==Number(pl(e,"PRAGMA busy_timeout")))throw new Error("busy_timeout=5000 could not be enabled.");if(2!==Number(pl(e,"PRAGMA synchronous")))throw new Error("synchronous=FULL could not be enabled.");if("ok"!==String(pl(e,"PRAGMA quick_check")))throw new Error("quick_check failed.");ml(t)}(s,e),function(e){e.exec("CREATE TABLE IF NOT EXISTS na_migration_ledger (\n id TEXT PRIMARY KEY NOT NULL, checksum TEXT NOT NULL, applied_at TEXT NOT NULL, details TEXT NOT NULL\n )"),e.exec("BEGIN IMMEDIATE");try{const t=e.prepare("SELECT checksum FROM na_migration_ledger WHERE id = ?"),n=e.prepare("INSERT INTO na_migration_ledger (id, checksum, applied_at, details) VALUES (?, ?, ?, ?)");for(const i of Td){const s=t.get(i.id);if(s){if(s.checksum!==i.checksum)throw new Error(`Migration checksum mismatch for ${i.id}.`)}else e.exec(i.sql),n.run(i.id,i.checksum,(new Date).toISOString(),JSON.stringify({domain:"node-agent-story"}))}e.exec("COMMIT")}catch(t){throw e.exec("ROLLBACK"),t}}(s),Qd(s,e,i.legacyMigration),"ok"!==String(pl(s,"PRAGMA quick_check")))throw new Error("post-migration quick_check failed.");ml(e);const t=T.drizzle({client:s});let n=!1;return{db:t,client:s,async checkpoint(){n\|\|(s.exec("PRAGMA wal_checkpoint(TRUNCATE)"),ml(e))},async close(){n\|\|(n=!0,s.close())}}}catch(e){try{s?.close()}catch{}throw ul(s?"initialize":"connect",e)}}const gl=a.z.enum(["openai-responses","openai-chat-completions","anthropic-messages"]),fl=a.z.object({protocolVersion:a.z.literal("2026-08-27"),instanceId:a.z.string().trim().min(1).max(120),entities:a.z.array(a.z.object({id:a.z.string().trim().min(1).max(120),endpoint:a.z.string().trim().min(1).max(2048),key:a.z.string().trim().min(1).max(4096),protocols:a.z.array(gl).min(1).max(3),modelNames:a.z.array(a.z.object({name:a.z.string().trim().min(1).max(240),order:a.z.number().int().min(0).max(1e6)}).strip()).min(1).max(256)}).strip()).max(64),updatedAt:a.z.string().datetime()}).strip();function yl(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e;return{protocolVersion:t.protocolVersion,instanceId:t.instanceId,entities:Array.isArray(t.entities)?t.entities.map(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e;return{id:t.id,endpoint:t.endpoint,key:t.key,protocols:t.protocols,modelNames:Array.isArray(t.modelNames)?t.modelNames.map(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e;return{name:t.name,order:t.order}}):t.modelNames}}):t.entities,updatedAt:t.updatedAt}}class Il{models;assignments;transaction;nodeId;instances;constructor(e,t,n,i){this.nodeId=t,this.instances=n;const s=i\|\|md(hl(e)).model;this.models=s.models,this.assignments=s.assignments,this.transaction=s.transaction.bind(s)}init(){}list(){const e=new Map;for(const t of this.instances.list()){const n=this.assignments.get(t.id);for(const t of new Set([...n?.modelEntityIds\|\|[],n?.codexModelHash,n?.claudeModelHash,n?.opencodeModelHash]))t&&e.set(t,(e.get(t)\|\|0)+1)}return this.models.list().map(t=>this.toPublic(t,e.get(t.id)\|\|0))}create(e){const t=ae(),n=El(e.modelNames,e.model),i={...e,model:n[0].name,modelNames:n,protocols:e.protocols?.length?e.protocols:_l(e.app)},s=Ss(i),o=this.models.get(s),r=hs.parse({...i,id:s,enabled:e.enabled??!0,order:e.order??this.nextOrder(),labels:e.labels\|\|{},createdAt:o?.createdAt\|\|t,updatedAt:t});return this.toPublic(this.models.put(r),this.referenceIds(s).length)}deploy(e){const t=Ss(e);if(e.id!==t)throw Object.assign(new Error(`Model content hash ${t} does not match ${e.id}.`),{statusCode:400,code:"NODE_MODEL_HASH_MISMATCH"});const n=El(e.modelNames,e.model),i=this.models.get(e.id)\|\|this.models.put(hs.parse({...e,model:n[0].name,modelNames:n,protocols:e.protocols?.length?e.protocols:_l(e.app)}));return this.toPublic(i,this.referenceIds(i.id).length)}update(e,t){const n=this.requireModel(e),i=t.modelNames?.length?El(t.modelNames,t.model\|\|n.model):t.model?El(void 0,t.model):El(n.modelNames,n.model),s=t.protocols?.length?t.protocols:n.protocols?.length?n.protocols:_l(t.app\|\|n.app),o=hs.parse({...n,...t,key:t.key?.trim()?t.key:n.key,protocols:s,model:i[0].name,modelNames:i,createdAt:n.createdAt,updatedAt:ae()}),r=Ss(o),a=this.models.put(hs.parse({...o,id:r}));return this.toPublic(a,this.referenceIds(r).length)}delete(e){this.requireModel(e);const t=this.referenceIds(e);if(t.length)throw Object.assign(new Error(`Model ${e} is assigned to ${t.length} instance${1===t.length?"":"s"}.`),{statusCode:409,code:"NODE_MODEL_IN_USE",instanceIds:t});return this.models.delete(e)}resolveProbeKey(e,t){const n=t?.trim()\|\|(e?this.requireModel(e).key:"");if(!n)throw Object.assign(new Error("An API key is required to contact the model endpoint."),{statusCode:400,code:"MODEL_API_KEY_REQUIRED"});return n}assign(e,t){const n=this.instances.require(e);for(const e of t.modelEntityIds)this.validateEntityRef(e);if(void 0!==t.modelSelection.modelEntityIds&&JSON.stringify(t.modelSelection.modelEntityIds)!==JSON.stringify(t.modelEntityIds))throw Object.assign(new Error("Ordered model entity selection does not match its node assignment."),{statusCode:400,code:"NODE_MODEL_SELECTION_MISMATCH"});if(this.validateRef("codex",t.codexModelHash),this.validateRef("claude",t.claudeModelHash),this.validateRef("opencode",t.opencodeModelHash),void 0!==t.modelSelection.codexModelHash&&(t.modelSelection.codexModelHash??void 0)!==t.codexModelHash)throw Object.assign(new Error("Codex model selection does not match its node assignment."),{statusCode:400,code:"NODE_MODEL_SELECTION_MISMATCH"});if(void 0!==t.modelSelection.claudeModelHash&&(t.modelSelection.claudeModelHash??void 0)!==t.claudeModelHash)throw Object.assign(new Error("Claude model selection does not match its node assignment."),{statusCode:400,code:"NODE_MODEL_SELECTION_MISMATCH"});if(void 0!==t.modelSelection.opencodeModelHash&&(t.modelSelection.opencodeModelHash??void 0)!==t.opencodeModelHash)throw Object.assign(new Error("OpenCode model selection does not match its node assignment."),{statusCode:400,code:"NODE_MODEL_SELECTION_MISMATCH"});const i=ys.parse({instanceId:e,modelEntityIds:t.modelEntityIds,codexModelHash:t.codexModelHash,claudeModelHash:t.claudeModelHash,opencodeModelHash:t.opencodeModelHash,updatedAt:ae()});return this.transaction(()=>({assignment:this.assignments.put(i),instance:this.instances.put(po.parse({...n,modelSelection:t.modelSelection,updatedAt:ae()}))}))}resolvedEnvironment(e){const t=this.assignments.get(e);if(!t)return{};const n=e=>t.modelEntityIds.find(t=>this.modelSupportsApp(this.requireModel(t),e));return{...this.environmentForRef("codex",n("codex")\|\|t.codexModelHash),...this.environmentForRef("claude",n("claude")\|\|t.claudeModelHash),...this.environmentForOpenCode(t)}}privateCatalog(e){const t=this.assignments.get(e);return fl.parse({protocolVersion:"2026-08-27",instanceId:e,entities:(t?.modelEntityIds\|\|[]).map(e=>{const t=this.requireModel(e);return this.validateEntityRef(e),{id:t.id,endpoint:t.endpoint,key:t.key,protocols:t.protocols?.length?t.protocols:_l(t.app),modelNames:El(t.modelNames,t.model)}}),updatedAt:t?.updatedAt\|\|ae()})}privateSecretValues(e){return[...new Set(this.privateCatalog(e).entities.map(e=>e.key))]}deleteInstanceMetadata(e){this.assignments.delete(e)}validateRef(e,t){if(!t)return;const n=this.requireModel(t);if(!this.modelSupportsApp(n,e))throw Object.assign(new Error(`Model ${n.id} does not support the ${e} runtime protocol.`),{statusCode:400,code:"NODE_MODEL_APP_MISMATCH"});if(!n.enabled)throw Object.assign(new Error(`Model ${n.id} is disabled.`),{statusCode:409,code:"NODE_MODEL_DISABLED"})}modelSupportsApp(e,t){const n="claude"===t?"anthropic-messages":"opencode"===t?"openai-chat-completions":"openai-responses";return e.protocols?.length?e.protocols.includes(n):e.app===t}validateEntityRef(e){const t=this.requireModel(e);if(!t.enabled)throw Object.assign(new Error(`Model ${t.id} is disabled.`),{statusCode:409,code:"NODE_MODEL_DISABLED"});if(!t.protocols?.length&&!_l(t.app).length)throw Object.assign(new Error(`Model ${t.id} does not expose a supported protocol.`),{statusCode:400,code:"NODE_MODEL_PROTOCOL_UNSUPPORTED"})}environmentForRef(e,t){if(!t)return{};this.validateRef(e,t);const n=this.requireModel(t);return"codex"===e?{OPENAI_API_KEY:n.key,OPENAI_BASE_URL:n.endpoint,TASK_HANDOFF_CODEX_BASE_URL:n.endpoint,TASK_HANDOFF_CODEX_MODEL:n.model}:{ANTHROPIC_API_KEY:n.key,ANTHROPIC_BASE_URL:n.endpoint,TASK_HANDOFF_CLAUDE_MODEL:n.model}}environmentForOpenCode(e){const t=e.modelEntityIds.map(e=>this.requireModel(e)).filter(e=>this.modelSupportsApp(e,"opencode"));if(!t.length)return{};const n=t[0],i=El(n.modelNames,n.model)[0].name,s=Object.fromEntries(t.map(e=>[`task-handoff-${e.id}`,Al(e,El(e.modelNames,e.model).map(e=>e.name))]));if(e.opencodeModelHash){const t=this.requireModel(e.opencodeModelHash);s["task-handoff"]=Al(t,[t.model])}return{TASK_HANDOFF_OPENCODE_CONFIG_CONTENT:JSON.stringify({$schema:"https://opencode.ai/config.json",model:`task-handoff-${n.id}/${i}`,provider:s})}}requireModel(e){const t=this.models.get(e);if(!t)throw Object.assign(new Error(`Model ${e} was not found on node ${this.nodeId}.`),{statusCode:404,code:"NODE_MODEL_NOT_FOUND"});if(Ss(t)!==t.id)throw Object.assign(new Error(`Stored model ${e} does not match its content hash.`),{statusCode:409,code:"NODE_MODEL_HASH_INVALID"});return t}referenceIds(e){return this.instances.list().filter(t=>{const n=this.assignments.get(t.id);return n?.modelEntityIds.includes(e)\|\|n?.codexModelHash===e\|\|n?.claudeModelHash===e\|\|n?.opencodeModelHash===e}).map(e=>e.id)}toPublic(e,t){const{key:n,...i}=e;return fs.parse({...i,keyPreview:n.length<=8?"set":`${n.slice(0,4)}...${n.slice(-4)}`,keySet:!0,referenceCount:t})}nextOrder(){return this.models.list().reduce((e,t)=>Math.max(e,t.order),0)+100}}function Al(e,t){return{npm:"@ai-sdk/openai-compatible",name:e.name,options:{baseURL:e.endpoint,apiKey:e.key},models:Object.fromEntries(t.map(t=>[t,{name:e.name,variants:Object.fromEntries(["none","minimal","low","medium","high","xhigh","max","ultra"].map(e=>[e,{reasoningEffort:e}]))}]))}}function _l(e){return"claude"===e?["anthropic-messages"]:"opencode"===e?["openai-chat-completions"]:["openai-responses"]}function El(e,t){const n=e?.length?e:[{name:t,order:100}],i=new Set;return n.map(e=>({name:e.name.trim(),order:e.order})).filter(e=>!(!e.name\|\|i.has(e.name)\|\|(i.add(e.name),0))).sort((e,t)=>e.order-t.order\|\|e.name.localeCompare(t.name)).map((e,t)=>({name:e.name,order:100(t+1)}))}function wl(e,t){if(!e)return!0;const n=b.valid(e),i=b.valid(t);return n&&i?b.gt(i,n):e!==t}function Tl(){return process.env.TASK_HANDOFF_NPM_COMMAND\|\|"npm"}function bl(e,i){const s=n.join(e,...i.split("/"),"package.json");try{const e=JSON.parse(t.readFileSync(s,"utf8"));if(e.name!==i\|\|"string"!=typeof e.version\|\|!e.version.trim())throw new Error(`Installed package manifest is invalid: ${s}`);return{name:i,version:e.version.trim()}}catch(e){if("ENOENT"===e.code)return;throw e}}async function Sl(e,i){const s=i?function(e){const i=function(e){let t=n.resolve(e);for(;t!==n.dirname(t);){if("node_modules"===n.basename(t)&&"lib"===n.basename(n.dirname(t)))return n.dirname(n.dirname(t));t=n.dirname(t)}}(e);if(!i)return;let s,o=n.resolve(e);for(;o!==n.dirname(o);){try{const e=JSON.parse(t.readFileSync(n.join(o,"package.json"),"utf8"));if("@task-handoff/node-agent"===e.name&&"string"==typeof e.version&&e.version.trim()&&(s=e.version.trim()),"@task-handoff/server"===e.name&&"string"==typeof e.version&&e.version.trim())return{packageName:"@task-handoff/server",currentVersion:e.version.trim(),relatedCurrentVersions:s?[s]:[],installPrefix:i}}catch(e){if("ENOENT"!==e.code)throw e}o=n.dirname(o)}return s?{packageName:"@task-handoff/node-agent",currentVersion:s,relatedCurrentVersions:[],installPrefix:i}:void 0}(i):void 0;if(s)return s;const o=(await e(Tl(),["root","--global"])).stdout.trim();if(!o)throw new Error("npm did not return its global module root.");const r=(await e(Tl(),["prefix","--global"])).stdout.trim();if(!n.isAbsolute(r))throw new Error(`npm did not return an absolute global prefix: ${r\|\|"empty"}`);const a=bl(o,"@task-handoff/server"),c=bl(o,"@task-handoff/node-agent");return a?{packageName:"@task-handoff/server",currentVersion:a.version,relatedCurrentVersions:c?[c.version]:[],installPrefix:r}:{packageName:"@task-handoff/node-agent",currentVersion:c?.version,relatedCurrentVersions:[],installPrefix:r}}function vl(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e,n="string"==typeof t.updatedAt?t.updatedAt:ae(),i=t.target&&"object"==typeof t.target&&!Array.isArray(t.target)?t.target:void 0,s="controlled-instance"===i?.component,o={updating:"updating-node",downloading:"updating-node",installing:"updating-node",restarting:"restarting-node",completed:"succeeded",success:"succeeded",error:"failed"},r=new Set(["queued","updating-node","restarting-node","converging-instances","succeeded","degraded","failed"]),a="string"==typeof t.status?t.status:"queued",c=s?"failed":r.has(a)?a:o[a]\|\|"failed",d="string"==typeof t.toVersion&&t.toVersion?t.toVersion:"unknown",l=Xi.strip().safeParse(t.impact).success?Xi.strip().parse(t.impact):{runningInstanceCount:0,stoppedInstanceCount:0,activeInstanceCount:0,restartInstanceCount:0,runningInstanceIds:[],stoppedInstanceIds:[],activeInstanceIds:[]},u=s?{code:"LEGACY_INSTANCE_UPDATE_RETIRED",message:"Independent controlled-instance update jobs were retired in favor of Node reconciliation.",retryable:!1}:"failed"!==c\|\|t.error\|\|r.has(a)\|\|a in o?"string"==typeof t.error?{code:"NODE_UPDATE_FAILED",message:t.error,retryable:!1}:Gi.strip().safeParse(t.error).success?Gi.strip().parse(t.error):t.error&&"object"==typeof t.error?{code:"NODE_UPDATE_FAILED",message:"string"==typeof t.error.message?t.error.message:"Stored update job contained an unknown error.",retryable:!1}:void 0:{code:"NODE_UPDATE_FAILED",message:`Stored update job used an unknown status: ${a}.`,retryable:!1},{target:p,error:m,...h}=t,g={phase:"succeeded"===c?"succeeded":"failed"===c?"failed":c\|\|"queued",desiredVersion:d,expectedInstanceIds:[],expectedInstanceCount:0,matchedInstanceCount:0,pendingInstanceCount:0,failedInstanceCount:s\|\|"failed"===c?1:0,deferredInstanceCount:0},f=Yi.strip().safeParse(t.rollout);return{...h,source:"npm",status:c,impact:l,runtimeArtifacts:Array.isArray(t.runtimeArtifacts)?t.runtimeArtifacts.flatMap(e=>{const t=Ki.strip().safeParse(e);return t.success?[t.data]:[]}):[],rollout:f.success?f.data:g,...u?{error:u}:{},...s?{completedAt:t.completedAt\|\|n}:{}}}class Nl{records;constructor(e){this.records=new Ja(e.updatesDir,{schema:Zi,sanitize:vl})}init(){this.records.init()}list(){return this.records.list().sort((e,t)=>t.createdAt.localeCompare(e.createdAt))}create(e,t){const n=ae();return this.records.put(Zi.parse({id:Xa("update"),nodeId:e,source:t.source,channel:t.channel,fromVersion:t.currentVersion,toVersion:t.availableVersion,artifactRef:t.artifactRef,runtimeArtifacts:t.runtimeArtifacts,impact:t.impact,status:"queued",rollout:{phase:"queued",desiredVersion:t.availableVersion,expectedInstanceIds:t.impact.runningInstanceIds,expectedInstanceCount:t.impact.runningInstanceCount,matchedInstanceCount:0,pendingInstanceCount:t.impact.runningInstanceCount,failedInstanceCount:0,deferredInstanceCount:t.impact.stoppedInstanceCount},createdAt:n,updatedAt:n}))}patch(e,t){const n=this.records.get(e);if(!n)throw Object.assign(new Error(`Update job ${e} was not found.`),{statusCode:404,code:"UPDATE_JOB_NOT_FOUND"});return this.records.put(Zi.parse({...n,...t,id:e,createdAt:n.createdAt,updatedAt:ae()}))}reconcileRollouts(e,t,n={}){const i=new Map(e.map(e=>[e.id,e]));if(n.processStarted)for(const e of this.list().filter(e=>"queued"===e.status))this.patch(e.id,{status:"failed",rollout:{...e.rollout,phase:"failed"},error:{code:"NODE_UPDATE_FAILED",message:"The node agent restarted before the update worker claimed this job.",retryable:!0},completedAt:ae()});for(const e of this.list().filter(e=>["updating-node","restarting-node","converging-instances"].includes(e.status))){if(n.processStarted&&"restarting-node"===e.status&&t!==e.toVersion){this.patch(e.id,{status:"failed",rollout:{...e.rollout,phase:"failed",nodeVersion:t},error:{code:"NODE_UPDATE_FAILED",message:`Node agent restarted with version ${t}, expected ${e.toVersion}.`,retryable:!1},completedAt:ae()});continue}const s="converging-instances"!==e.status&&t===e.toVersion?this.patch(e.id,{status:"converging-instances",rollout:{...e.rollout,phase:"converging-instances",nodeVersion:t}}):e;if("converging-instances"!==s.status)continue;const o=s.rollout.expectedInstanceIds,r=o.map(e=>i.get(e)),a=r.filter(e=>e?.ready&&"matched"===e.runtimeVersion?.phase&&e.runtimeVersion.actualVersion===s.toVersion).length,c=r.filter(e=>e&&["created","stopped","failed"].includes(e.status\|\|"")&&"failed"!==e.runtimeVersion?.phase).length,d=r.filter(e=>!e\|\|"failed"===e.runtimeVersion?.phase).length,l=Math.max(0,o.length-a-d-c),u=d>0?"degraded":0===l?"succeeded":"converging-instances";this.patch(s.id,{status:u,rollout:{...s.rollout,phase:u,nodeVersion:t,expectedInstanceCount:o.length,matchedInstanceCount:a,pendingInstanceCount:l,failedInstanceCount:d,deferredInstanceCount:s.impact.stoppedInstanceCount+c},..."succeeded"===u\|\|"degraded"===u?{completedAt:ae()}:{}})}}run(e,t){(async()=>{this.patch(e.id,{status:"updating-node",rollout:{...e.rollout,phase:"updating-node"},startedAt:ae(),error:void 0});try{await t(e),this.patch(e.id,{status:"succeeded",completedAt:ae()})}catch(t){this.patch(e.id,{status:"failed",rollout:{...e.rollout,phase:"failed"},error:{code:"NODE_UPDATE_FAILED",message:t instanceof Error?t.message:String(t),retryable:!1},completedAt:ae()})}})()}}class Ol{records;constructor(e){this.records=new Ja(e.environmentTemplatesDir,{schema:zi,sanitize:e=>function(e,t){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const n=e,i=new Set(["id","name","sourceInstanceId","nodeId","imageId","internalTag","platform","architecture","sizeBytes","status","error","createdAt","updatedAt"]),s="string"==typeof n.id?n.id:void 0;for(const e of Object.keys(n))i.has(e)\|\|t?.({templateId:s,field:e});const o=_o(n,[...i]);if(n.error&&"object"==typeof n.error&&!Array.isArray(n.error)){const e=n.error;for(const n of Object.keys(e))["code","message","phase"].includes(n)\|\|t?.({templateId:s,field:`error.${n}`});o.error=_o(e,["code","message","phase"])}return o}(e,e=>{console.warn(JSON.stringify({message:"unknown stored environment template field was ignored",...e}))})})}init(){this.records.init();for(const e of this.records.list())"creating"===e.status&&this.records.put(zi.parse({...e,status:"failed",error:{code:"ENVIRONMENT_TEMPLATE_CREATION_INTERRUPTED",message:"Environment template creation was interrupted by a node-agent restart.",phase:"recovery"},updatedAt:ae()}))}list(){return this.records.list()}get(e){return this.records.get(e)}put(e){return this.records.put(zi.parse(e))}patch(e,t){return this.records.patch(e,t)}delete(e){return this.records.delete(e)}}const zl=a.z.record(a.z.string().regex(/^[A-Za-z_][A-Za-z0-9_]$/),a.z.string()),Cl=a.z.object({version:a.z.literal(1),instanceId:a.z.string().trim().min(1).max(120),instanceCredential:a.z.string().trim().min(1).max(240),environment:zl,modelCatalog:fl.optional(),codexSettings:Hn.optional(),updatedAt:a.z.string().datetime()}).strict();class Rl{directory;constructor(e){this.directory=e.instancePrivateConfigsDir}init(){t.mkdirSync(this.directory,{recursive:!0,mode:448}),t.chmodSync(this.directory,448);for(const e of t.readdirSync(this.directory).filter(e=>e.endsWith(".json")))t.chmodSync(n.join(this.directory,e),384)}filePath(e){return n.join(this.directory,`${e}.json`)}inspectMaterialized(e){const n=this.filePath(e);if(!t.existsSync(n))return;const i=JSON.parse(t.readFileSync(n,"utf8")),s=i&&"object"==typeof i&&!Array.isArray(i)?i:{},o=Cl.parse({version:s.version,instanceId:s.instanceId,instanceCredential:s.instanceCredential??s.registrationToken,environment:s.environment,modelCatalog:void 0===s.modelCatalog?void 0:yl(s.modelCatalog),codexSettings:void 0===s.codexSettings?void 0:(r=s.codexSettings,Hn.parse(function(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e,n=t.multiAgent,i=!n\|\|"object"!=typeof n\|\|Array.isArray(n)?n:(()=>{const e=n,t=e.defaultModel;return{...void 0===e.enabled?{}:{enabled:e.enabled},...void 0===e.maxConcurrentThreads?{}:{maxConcurrentThreads:e.maxConcurrentThreads},...void 0===t?{}:{defaultModel:!t\|\|"object"!=typeof t\|\|Array.isArray(t)?t:{modelEntityId:t.modelEntityId,modelName:t.modelName}},...void 0===e.defaultReasoningEffort?{}:{defaultReasoningEffort:e.defaultReasoningEffort}}})();return{...void 0===t.modelVerbosity?{}:{modelVerbosity:t.modelVerbosity},...void 0===t.personality?{}:{personality:t.personality},...void 0===n?{}:{multiAgent:i}}}(r))),updatedAt:s.updatedAt});var r;if(o.instanceId!==e)throw Object.assign(new Error(`Private config identity mismatch for instance ${e}.`),{statusCode:409,code:"INSTANCE_PRIVATE_CONFIG_IDENTITY_MISMATCH"});return o}put(e){const n=Cl.parse(e);this.init();const i=this.filePath(n.instanceId);return I.sync(i,`${JSON.stringify(n,null,2)}\n`,{encoding:"utf8",mode:384}),t.chmodSync(i,384),n}materialize(e,t,n,i,s){if(!t)throw Object.assign(new Error(`Instance ${e} does not have a long-lived credential.`),{statusCode:409,code:"INSTANCE_PRIVATE_CONFIG_CREDENTIAL_MISSING"});return this.put({version:1,instanceId:e,instanceCredential:t,environment:n,...i?{modelCatalog:i}:{},...s?{codexSettings:s}:{},updatedAt:(new Date).toISOString()})}delete(e){t.rmSync(this.filePath(e),{force:!0})}}const xl=a.z.object({id:a.z.string().trim().min(1).max(120),status:a.z.literal("pending"),input:sd,createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime(),expiresAt:a.z.string().datetime()}).strict();class kl{repository;workspaceProvisioningTtlMs;workspaceProvisioningCleanupTimer;constructor(e,t={}){this.workspaceProvisioningTtlMs=t.workspaceProvisioningTtlMs??864e5,this.repository=t.repository\|\|md(hl(e)).git}init(){this.repository.deleteExpiredProvisioning((new Date).toISOString()),this.scheduleWorkspaceProvisioningCleanup()}putPayload(e){const t=Xc.parse(e),n=this.repository.getPayload(t.credential.id);if(n&&n.payload.credential.revision>t.credential.revision)throw i=t.credential.id,Object.assign(new Error(`Refusing stale payload revision for ${i}.`),{code:"GIT_CREDENTIAL_REVISION_STALE",statusCode:409});var i;if(n&&n.payload.credential.revision===t.credential.revision&&JSON.stringify(n.payload)!==JSON.stringify(t))throw function(e,t){return Object.assign(new Error(`Refusing conflicting payload revision for ${t}.`),{code:"GIT_CREDENTIAL_REVISION_CONFLICT",statusCode:409})}(0,t.credential.id);const s=(new Date).toISOString();return this.repository.putPayload({id:t.credential.id,payload:t,createdAt:n?.createdAt\|\|s,updatedAt:s}).payload}getPayload(e){return this.repository.getPayload(e)?.payload}putAuthorizationSet(e){const t=Yc.parse(e),n=this.repository.getAuthorization(t.instanceId),i=(new Date).toISOString();return this.publicAuthorizationSet(this.repository.putAuthorizationCas({id:t.instanceId,...t,createdAt:n?.createdAt\|\|i}))}getAuthorizationSet(e){const t=this.repository.getAuthorization(e);return t?this.publicAuthorizationSet(t):{instanceId:e,generation:0,credentialIds:[],updatedAt:new Date(0).toISOString()}}resolve(e,t){const n=this.getAuthorizationSet(e).credentialIds.flatMap(e=>{const t=this.getPayload(e);return t?[t]:[]}),i=ad(t,n.map(e=>({id:e.credential.id,kind:e.credential.kind,scope:e.credential.scope,status:e.credential.status,pinnedKnownHosts:"ssh-key"===e.secret.kind&&Boolean(e.secret.pinnedKnownHosts.trim())}))),s="unique"===i.status?n.find(e=>e.credential.id===i.credential.id):void 0;return{match:i,payload:s}}removePayload(e){if(this.repository.listAuthorizations().some(t=>t.credentialIds.includes(e)))throw Object.assign(new Error(`Credential payload ${e} is still authorized.`),{code:"GIT_CREDENTIAL_PAYLOAD_IN_USE",statusCode:409});return this.repository.deletePayload(e)}collectUnreferencedPayloads(){return this.repository.collectUnreferencedPayloads()}removeInstance(e){const t=this.repository.deleteAuthorization(e)?1:0;return this.repository.deleteProvisioning(e),this.scheduleWorkspaceProvisioningCleanup(),t}putWorkspaceProvisioning(e){const t=sd.parse(e);if(!Dl(t))throw Object.assign(new Error("Only operation-only Git provisioning may be persisted."),{code:"GIT_CREDENTIAL_PROVISIONING_RETENTION_INVALID",statusCode:400});const n=this.repository.getProvisioning(t.instanceId);if("consumed"===n?.status&&n.operationId===t.operationId)return t;const i=(new Date).toISOString(),s=xl.parse(this.repository.putProvisioning({id:t.instanceId,status:"pending",input:t,createdAt:n?.createdAt\|\|i,updatedAt:i,expiresAt:new Date(Date.now()+this.workspaceProvisioningTtlMs).toISOString()})).input;return this.scheduleWorkspaceProvisioningCleanup(),s}getWorkspaceProvisioning(e){const t=this.repository.getProvisioning(e);if(t&&"pending"===t.status)return!Dl(t.input)\|\|Date.parse(t.expiresAt)<=Date.now()?(this.repository.deleteProvisioning(e),void this.scheduleWorkspaceProvisioningCleanup()):t.input}removeWorkspaceProvisioning(e){const t=this.repository.deleteProvisioning(e);return this.scheduleWorkspaceProvisioningCleanup(),t}discardPendingWorkspaceProvisioning(e){const t=this.repository.getProvisioning(e);return!(!t\|\|"pending"!==t.status)&&this.removeWorkspaceProvisioning(e)}completeWorkspaceProvisioning(e,t){const n=(new Date).toISOString(),i=this.repository.consumeProvisioning(e,t,n,new Date(Date.now()+6048e5).toISOString());return this.scheduleWorkspaceProvisioningCleanup(),i}workspaceProvisioningStatus(e){const t=this.repository.getProvisioning(e);if(t){if(!(Date.parse(t.expiresAt)<=Date.now()))return"pending"===t.status?{status:t.status,operationId:t.input.operationId}:{status:t.status,operationId:t.operationId};this.removeWorkspaceProvisioning(e)}}scheduleWorkspaceProvisioningCleanup(){this.workspaceProvisioningCleanupTimer&&clearTimeout(this.workspaceProvisioningCleanupTimer),this.workspaceProvisioningCleanupTimer=void 0;const e=Math.min(...this.repository.listProvisioning().map(e=>Date.parse(e.expiresAt)));Number.isFinite(e)&&(this.workspaceProvisioningCleanupTimer=setTimeout(()=>{this.workspaceProvisioningCleanupTimer=void 0;const e=Date.now();this.repository.deleteExpiredProvisioning(new Date(e).toISOString()),this.scheduleWorkspaceProvisioningCleanup()},Math.min(2147483647,Math.max(0,e-Date.now()))),this.workspaceProvisioningCleanupTimer.unref?.())}publicAuthorizationSet(e){const{id:t,createdAt:n,...i}=e;return Yc.parse(i)}}function Dl(e){return e.credentials.length>0&&e.credentials.every(e=>"operation-only"===e.retention)}const Pl=function(e,t=process.env,n=e){let i;return()=>{const s=t.TASK_HANDOFF_VERSION?.trim();return s\|\|(i\|\|=R(e,t,n),i)}}("@task-handoff/node-agent",process.env,"@task-handoff/control-plane");function Ll(){return Pl()}function Ml(e,t){return{code:"INSTANCE_RUNTIME_VERSION_MISMATCH",message:`Expected controlled-instance ${e}, received ${t\|\|"an unknown version"}.`,expectedVersion:e,...t?{actualVersion:t}:{},retryable:!0}}function jl(e){const t=Ll();return e===t?{desiredVersion:t,actualVersion:e,phase:"matched",attempt:0,matchedAt:(new Date).toISOString()}:{desiredVersion:t,...e?{actualVersion:e}:{},phase:"pending",attempt:0,error:Ml(t,e)}}function Ul(e,t,n=!0){if(!n){const n=Ll(),i=e.runtimeVersion;return"matched"===i?.phase&&i.desiredVersion===n&&i.actualVersion===t?i:jl(t)}const i=Ll(),s=e.runtimeVersion;if(!s\|\|s.desiredVersion!==i)return jl(t);const o="INSTANCE_RUNTIME_VERSION_MISMATCH"!==s.error?.code?s.error:t===i?void 0:Ml(i,t);return Wi.parse({...s,desiredVersion:i,...t?{actualVersion:t}:{actualVersion:void 0},..."pending"===s.phase?{error:o\|\|(t!==i?Ml(i,t):void 0)}:{}})}const Fl="runtime_local_host",$l="task-handoff.node-agent.builtin";function Hl(e){const t={...e};return delete t[$l],t}function ql(e){return"local-folder"===e.type?cs.parse({mode:"local-bind",path:"/workspace",readOnly:!1}):cs.parse({mode:"git-clone",path:"/workspace",readOnly:!1})}function Vl(e){const t=as.parse(e.source),n=e.projectId\|\|("local-folder"===t.type?t.localFolderId:void 0)\|\|("git-repository"===t.type?t.repositoryId:void 0)\|\|("git-template"===t.type?t.templateId:void 0)\|\|`project_${e.id}`;return ps.parse({id:n,name:"string"==typeof e.sourceSnapshot.name?e.sourceSnapshot.name:e.name,source:t,defaultImageSelection:e.imageSelection,defaultNodeId:e.nodeId,workspacePolicy:ql(t),labels:{},createdAt:e.createdAt,updatedAt:e.updatedAt})}function Bl(e,t){throw Object.assign(new Error(t),{statusCode:403,code:e})}function Kl(e,t){e!==Pn&&console.warn(JSON.stringify({message:"protocol version mismatch",peer:t,expectedProtocolVersion:Pn,actualProtocolVersion:e\|\|"missing",errorCode:"PROTOCOL_VERSION_MISMATCH"}))}function Gl(e){return"none"!==e.capabilities.artifactKind}function Wl(e={}){return{...e,requiresImage:!1,supportsControlledInstanceApi:!0,supportsContainerLifecycle:!1,supportsAppSessions:!0,supportsHostSessions:!0,artifactKind:"none",isolation:"none"}}class Xl{onStored;records;constructor(e){this.records=e}init(){}setOnStored(e){this.onStored=e}put(e){const t=this.records.put(po.parse(e));return this.onStored?.(t),t}putObservation(e){const t=this.records.putObservation(po.parse(e));return this.onStored?.(t),t}get(e){return this.records.get(e)}list(){return this.records.list()}delete(e){return this.records.delete(e)}}class Yl{nodeId;paths;persistence;localFolders;nodeRuntimes;controlledInstances;environmentTemplates;instancePrivateConfigs;modelRegistry;gitCredentials;updateJobs;node;listenerPort;containerUrlOverride;platform;constructor(e,t,n,i,s,o,r){this.paths=e,this.nodeId=t;const a=r\|\|md(hl(e));this.persistence=a,a.topology.nodeIdentity.ensure(t,ae()),this.localFolders=a.topology.localFolders,this.nodeRuntimes=a.topology.runtimes,this.instancePrivateConfigs=new Rl(e),this.controlledInstances=new Xl(a.topology.instances),this.environmentTemplates=new Ol(e),this.gitCredentials=new kl(e,{repository:a.git}),this.modelRegistry=new Il(e,t,{has:e=>Boolean(this.controlledInstances.get(e)),list:()=>this.listInstances(),require:e=>this.requireInstance(e),put:e=>this.controlledInstances.put(e)},a.model),this.updateJobs=new Nl(e),this.listenerPort=s,this.platform=o,this.containerUrlOverride=i;const c=ae();this.node=Gs.parse({id:t,name:t,connectionMode:"direct-http",endpoint:n,controlEndpoint:n,containerEndpoint:this.containerUrl,publicWebBase:n?n.replace(/:\d+$/,""):void 0,status:"online",health:"ok",capabilities:{},labels:{},createdAt:c,updatedAt:c})}init(){for(const e of this.localFolders.list())this.localFolders.put(e);if(this.instancePrivateConfigs.init(),this.controlledInstances.init(),this.environmentTemplates.init(),this.gitCredentials.init(),this.modelRegistry.init(),this.updateJobs.init(),this.updateJobs.reconcileRollouts(this.controlledInstances.list(),Ll(),{processStarted:!0}),!this.nodeRuntimes.get("runtime_local_docker")){const e=ae();this.nodeRuntimes.put(Ws.parse({id:"runtime_local_docker",nodeId:this.nodeId,name:"Local Docker",type:"docker",status:"unknown",accessStrategy:"direct-port",capabilities:{},labels:{},createdAt:e,updatedAt:e}))}if("win32"!==this.platform){const e=this.nodeRuntimes.get(Fl),t=ae();this.nodeRuntimes.put(Ws.parse({id:Fl,nodeId:this.nodeId,name:"Local Runtime",type:"local",status:e?.status\|\|"unknown",accessStrategy:"node-proxy",capabilities:Wl(e?.capabilities),labels:{...e?.labels,[$l]:"true"},createdAt:e?.createdAt\|\|t,updatedAt:e?.updatedAt\|\|t}))}for(const e of this.nodeRuntimes.list())e.nodeId!==this.nodeId&&this.nodeRuntimes.put(Ws.parse({...e,nodeId:this.nodeId,updatedAt:ae()}));for(const e of this.localFolders.list())e.nodeId!==this.nodeId&&this.localFolders.put(rs.parse({...e,nodeId:this.nodeId,updatedAt:ae()}));this.normalizeInstanceRuntimeVersions()}normalizeInstanceRuntimeVersions(){for(const e of this.controlledInstances.list()){const t=jl(e.build?.packageVersion\|\|e.instanceVersion),n=Gl(this.requireRuntime(e.runtimeId)),i=["created","stopped","failed"].includes(e.status),s=n&&e.runtimeVersion?.desiredVersion===t.desiredVersion?e.runtimeVersion:void 0,o=n?"matched"===t.phase?i?t:{...t,phase:"verifying",matchedAt:void 0}:{...t,phase:"pending",attempt:s?.attempt\|\|0,lastAttemptAt:s?.lastAttemptAt,error:s?.error\|\|t.error}:t;this.controlledInstances.put(po.parse({...e,ready:!1,runtimeVersion:o,updatedAt:ae()}))}}get localNodeAgentUrl(){return`http://127.0.0.1:${this.listenerPort}`}get currentListenerPort(){return this.listenerPort}get containerUrl(){return this.containerUrlOverride\|\|`http://host.docker.internal:${this.listenerPort}`}setListenerPort(e){this.listenerPort=e,this.node.containerEndpoint=this.containerUrl,this.node.updatedAt=ae()}runningInstanceCount(){const e=new Set(["created","stopped","failed"]);return this.listInstances().filter(t=>!e.has(t.status)).length}createLocalFolder(e){const t=ae(),i=pa(e.path),s=rs.parse({...e,name:e.name.trim()\|\|n.basename(i),path:i,id:e.id\|\|Xa("folder"),nodeId:this.nodeId,labels:e.labels\|\|{},createdAt:t,updatedAt:t});return this.localFolders.put(s)}updateLocalFolder(e,t){const i=this.localFolders.get(e);if(!i){const t=new Error(`Local folder ${e} was not found.`);throw Object.assign(t,{statusCode:404,code:"NODE_LOCAL_FOLDER_NOT_FOUND"})}return this.localFolders.put(rs.parse({...i,name:t.name.trim()\|\|n.basename(i.path),updatedAt:ae()}))}createRuntime(e){if("local"===e.type){const e="win32"===this.platform,t=new Error(e?"Local Runtime is not supported on Windows.":"Local Runtime is built in and cannot be added manually.");throw Object.assign(t,{statusCode:e?400:409,code:e?"LOCAL_RUNTIME_UNSUPPORTED":"LOCAL_RUNTIME_BUILTIN"}),t}const t=ae(),n=Ws.parse({...e,id:e.id\|\|Xa("runtime"),nodeId:this.nodeId,accessStrategy:e.accessStrategy\|\|(i=e.type,"docker"===i?"direct-port":"node-proxy"),capabilities:e.capabilities\|\|{},labels:Hl(e.labels),createdAt:t,updatedAt:t});var i;return this.nodeRuntimes.put(n)}updateRuntime(e,t){const n=this.requireRuntime(e);if("true"===n.labels[$l]){const t=new Error(`Built-in runtime ${e} cannot be modified.`);throw Object.assign(t,{statusCode:400,code:"NODE_RUNTIME_BUILTIN"}),t}if("local"===n.type\|\|"local"===t.type){const e="win32"===this.platform,t=new Error(e?"Local Runtime is not supported on Windows.":"Local Runtime is built in and cannot be configured manually.");throw Object.assign(t,{statusCode:e?400:409,code:e?"LOCAL_RUNTIME_UNSUPPORTED":"LOCAL_RUNTIME_BUILTIN"}),t}const i=Ws.parse({...n,...t,id:n.id,nodeId:this.nodeId,accessStrategy:t.accessStrategy\|\|n.accessStrategy,capabilities:t.capabilities\|\|n.capabilities,labels:t.labels?Hl(t.labels):n.labels,createdAt:n.createdAt,updatedAt:ae()});return this.nodeRuntimes.put(i)}deleteRuntime(e){if("true"===this.requireRuntime(e).labels[$l]){const t=new Error(`Built-in runtime ${e} cannot be deleted.`);throw Object.assign(t,{statusCode:400,code:"NODE_RUNTIME_BUILTIN"}),t}const t=this.listInstances().filter(t=>t.runtimeId===e);if(t.length){const n=new Error(`Runtime ${e} is used by ${t.length} instance${1===t.length?"":"s"}.`);throw Object.assign(n,{statusCode:409,code:"NODE_RUNTIME_IN_USE"}),n}return this.nodeRuntimes.delete(e)}checkRuntime(e,t){const n=this.requireRuntime(e);return t.check?t.check(n).then(e=>{const t=Ws.parse({...n,...e,id:n.id,nodeId:this.nodeId,createdAt:n.createdAt,updatedAt:ae()});return this.nodeRuntimes.put(t)}):this.nodeRuntimes.put(Ws.parse({...n,status:"unknown",updatedAt:ae()}))}requireRuntime(e){const t=this.nodeRuntimes.get(e);if(!t){const t=new Error(`Node runtime ${e} was not found.`);throw Object.assign(t,{statusCode:404,code:"NODE_RUNTIME_NOT_FOUND"}),t}return t}requireInstance(e){const t=this.controlledInstances.get(e);if(!t){const t=new Error(`Instance ${e} was not found on node ${this.nodeId}.`);throw Object.assign(t,{statusCode:404,code:"NODE_INSTANCE_NOT_FOUND"}),t}const n=fo(t);if(!n.success)throw function(e,t){const n=t.map(e=>`${e.path.join(".")\|\|"body"}: ${e.message}`).join("; ");return Object.assign(new Error(`Stored instance ${e} is not compatible with protocol ${Pn}: ${n}`),{statusCode:409,code:"NODE_INSTANCE_PAYLOAD_INVALID"})}(e,n.error.issues);return n.data}applyInstanceLifecycle(e,t){return this.controlledInstances.put(function(e,t,n=(new Date).toISOString()){switch(t.type){case"start-requested":return po.parse({...e,status:"starting",ready:!1,updatedAt:n});case"stop-requested":return po.parse({...e,status:"stopping",ready:!1,updatedAt:n});case"stop-failed":return"stopping"!==e.status?e:po.parse({...e,status:t.baseline.status,health:t.baseline.health,connectionStatus:t.baseline.connectionStatus,agentStatus:t.baseline.agentStatus,targetStatus:t.baseline.targetStatus,uiAccessStatus:t.baseline.uiAccessStatus,ready:t.baseline.ready,target:{...e.target,status:t.baseline.target.status},updatedAt:n});case"convergence-restart-requested":return po.parse({...e,build:void 0,instanceVersion:void 0,ready:!1,updatedAt:n});case"runtime-lifecycle-completed":return function(e,t,n,i){if(t.stateRevision>e.stateRevision&&["failed","stopping","stopped","deleting"].includes(t.status))return t;const s=t.stateRevision>e.stateRevision&&t.lastHeartbeatAt!==e.lastHeartbeatAt&&"online"===t.agentStatus;return po.parse({...t,...n,...s?{status:t.status,health:t.health,connectionStatus:t.connectionStatus,agentStatus:t.agentStatus,targetStatus:t.targetStatus,uiAccessStatus:t.uiAccessStatus}:{},ready:!!s&&t.ready,target:n.target?{...t.target,...n.target}:t.target,workspace:n.workspace?s?{...n.workspace,...t.workspace}:{...t.workspace,...n.workspace}:t.workspace,runtime:n.runtime?{...t.runtime,...n.runtime}:t.runtime,updatedAt:i})}(t.baseline,e,t.observation,n);case"stop-completed":return po.parse({...e,status:"stopped",health:"unknown",connectionStatus:"offline",ready:!1,agentStatus:"offline",targetStatus:"unknown",uiAccessStatus:"unknown",target:{...e.target,status:"unknown"},updatedAt:n});case"runtime-exited":case"start-failed":return po.parse({...e,status:"failed",ready:!1,health:"failed",connectionStatus:"offline",agentStatus:"offline",targetStatus:"unknown",uiAccessStatus:"unknown",workspace:{...e.workspace,error:(i=t.error,i instanceof Error?i.message:String(i))},updatedAt:n})}var i}(this.requireInstance(e),t))}listInstances(){return this.controlledInstances.list().flatMap(e=>{const t=fo(e);return t.success?[t.data]:[]})}resolvedAssignedModelEnvironment(e){return this.modelRegistry.resolvedEnvironment(e)}createInstance(e){const t=this.requireRuntime(e.runtimeId),i=ae(),s=e.id\|\|Xa("inst"),o=function(e){const t=as.parse(e);return"local-folder"===t.type?t:as.parse({...t,auth:{type:"none"}})}(e.source),r=e.environmentSource\|\|(e.imageSelection?{type:"image",imageSelection:e.imageSelection}:void 0);if("template"===r?.type&&"docker"!==t.type){const e=new Error(`Runtime ${t.name} does not support environment templates.`);throw Object.assign(e,{statusCode:409,code:"ENVIRONMENT_TEMPLATE_RUNTIME_UNSUPPORTED"}),e}const a="template"===r?.type?this.environmentTemplates.get(r.environmentTemplateId):void 0;if("template"===r?.type&&(!a\|\|"ready"!==a.status)){const e=new Error(`Environment template ${r.environmentTemplateId} is not ready on node ${this.nodeId}.`);throw Object.assign(e,{statusCode:a?409:404,code:a?"ENVIRONMENT_TEMPLATE_NOT_READY":"ENVIRONMENT_TEMPLATE_NOT_FOUND"}),e}if(a&&a.nodeId!==this.nodeId){const e=new Error(`Environment template ${a.id} belongs to node ${a.nodeId}, not ${this.nodeId}.`);throw Object.assign(e,{statusCode:409,code:"ENVIRONMENT_TEMPLATE_NODE_MISMATCH"}),e}if(function(e){return"boolean"==typeof e.capabilities.requiresImage?e.capabilities.requiresImage:"local"!==e.type}(t)&&(!r\|\|"image"===r.type&&!e.image)){const e=new Error(`Runtime ${t.name} requires an image.`);throw Object.assign(e,{statusCode:400,code:"NODE_RUNTIME_IMAGE_REQUIRED"}),e}if("local"===t.type&&"local-folder"!==o.type){const e=new Error("Localhost runtime currently supports local folder sources only.");throw Object.assign(e,{statusCode:400,code:"LOCAL_RUNTIME_REQUIRES_LOCAL_FOLDER"}),e}if("local"===t.type&&this.listInstances().some(e=>"local"===this.requireRuntime(e.runtimeId).type)){const e=new Error("A localhost instance already exists on this node.");throw Object.assign(e,{statusCode:409,code:"LOCAL_RUNTIME_INSTANCE_EXISTS"}),e}const c=a?Ms.parse({id:a.id,origin:"custom",name:a.name,repository:"task-handoff/environment-template",tag:a.id.toLowerCase().replace(/[^a-z0-9_.-]/g,"-"),requestedReference:a.internalTag,resolvedDigest:a.imageId,resolvedReference:a.internalTag,downloadSizeBytes:a.sizeBytes\|\|void 0,pullPolicy:"if-not-present",capabilities:[],optionalApps:[],defaultEnv:{},labels:{},createdAt:a.createdAt,updatedAt:a.updatedAt}):e.image?Ms.parse(e.image):void 0,d="local"===t.type&&"local-folder"===o.type?n.resolve(o.path):void 0,l=po.parse({id:s,name:e.name\|\|`instance-${s.replace(/^inst_?/,"").slice(0,6)}`,source:o,sourceSnapshot:e.sourceSnapshot\|\|{},modelSelection:e.modelSelection,projectId:e.projectId,nodeId:this.nodeId,runtimeId:t.id,imageSelection:"image"===r?.type?r.imageSelection:void 0,environmentSource:r,environmentTemplateOrigin:a?{templateId:a.id,nodeId:a.nodeId,imageId:a.imageId,name:a.name,platform:a.platform,architecture:a.architecture}:void 0,imageSnapshot:c,imageProvisioning:c&&"docker"===t.type&&"template"!==r?.type?{phase:"checking-image",requestedReference:c.requestedReference,generation:0,startedAt:i,updatedAt:i}:void 0,status:c&&"docker"===t.type&&"template"!==r?.type?"provisioning":"created",health:"unknown",connectionStatus:"unknown",agentStatus:"unknown",targetStatus:"unknown",uiAccessStatus:"unknown",controlMode:"controlled",ready:!1,runtimeVersion:jl(),capabilities:{},config:{autoImportAgentConfigs:e.config?.autoImportAgentConfigs??!0,codexConfigEnabled:e.config?.codexConfigEnabled??!0,codexHomeMode:e.config?.codexHomeMode??("local"===t.type?"taskhandoff":"default"),defaultCodexPermissionMode:e.config?.defaultCodexPermissionMode??("docker"===t.type?"full-access":"ask"),...e.config?.codexSettings?{codexSettings:e.config.codexSettings}:{},aiSessionHistoryLimit:e.config?.aiSessionHistoryLimit??50,aiSessionAttachmentRetentionDays:e.config?.aiSessionAttachmentRetentionDays??30,aiSessionMaxFileAttachmentBytes:e.config?.aiSessionMaxFileAttachmentBytes??he},workspace:"local"===t.type?{mode:"local-bind",status:"unknown",path:d}:{status:"unknown"},target:{strategy:"node-proxy",status:"unknown"},runtime:"local"===t.type?{kind:"local",workspacePath:d,labels:{"task-handoff.runtime-kind":"local"}}:{labels:{}},registrationToken:Ya(),createdAt:i,updatedAt:i}),u=this.persistence.transactionSync(()=>{let t=this.controlledInstances.put(l);const n=e.modelSelection;return n&&Object.values(n).some(e=>Array.isArray(e)?e.length>0:Boolean(e))&&(t=this.modelRegistry.assign(s,{modelSelection:n,modelEntityIds:n.modelEntityIds,codexModelHash:n.codexModelHash,claudeModelHash:n.claudeModelHash,opencodeModelHash:n.opencodeModelHash}).instance),e.gitWorkspaceProvisioning?.credentials.every(e=>"operation-only"===e.retention)&&this.gitCredentials.putWorkspaceProvisioning(e.gitWorkspaceProvisioning),t});return this.instancePrivateConfigs.materialize(u.id,u.registrationToken,this.resolvedAssignedModelEnvironment(u.id),this.modelRegistry.privateCatalog(u.id),u.config.codexSettings),u}takeGitWorkspaceProvisioning(e){const t=this.gitCredentials.getWorkspaceProvisioning(e);return this.gitCredentials.removeWorkspaceProvisioning(e),t}setGitWorkspaceProvisioning(e){const t=this.requireInstance(e.instanceId);if("local-folder"===t.source.type\|\|t.source.url!==e.remoteUrl)throw Object.assign(new Error(`Git provisioning does not match instance ${t.id}.`),{code:"GIT_WORKSPACE_PROVISIONING_INSTANCE_MISMATCH",statusCode:409});this.gitCredentials.putWorkspaceProvisioning(e)}gitWorkspaceProvisioningFor(e){if("local-folder"===e.source.type)return;const t=this.gitCredentials.getWorkspaceProvisioning(e.id);if(t)return t;const n=this.gitCredentials.getAuthorizationSet(e.id).credentialIds.flatMap(e=>{const t=this.gitCredentials.getPayload(e);return t?[t]:[]}),i=n.map(e=>({id:e.credential.id,kind:e.credential.kind,scope:e.credential.scope,status:e.credential.status,pinnedKnownHosts:"ssh-key"===e.secret.kind&&Boolean(e.secret.pinnedKnownHosts.trim())})),s=ad(e.source.url,i);if("ambiguous"===s.status\|\|"missing-host-key"===s.status)throw Object.assign(new Error(`Git credential resolution failed for instance ${e.id}: ${s.status}.`),{code:`GIT_CREDENTIAL_${s.status.replace(/-/g,"_").toUpperCase()}`,statusCode:409});return{operationId:`gitop_${e.id}_${e.stateRevision}`,instanceId:e.id,remoteUrl:e.source.url,ref:e.source.ref,clone:e.source.clone,credentials:n.map((t,n)=>({operationId:`gitcredop_${e.id}_${e.stateRevision}_${n}`,retention:"instance-retained",payload:t}))}}discardGitWorkspaceProvisioning(e){return this.gitCredentials.discardPendingWorkspaceProvisioning(e)}gitWorkspaceProvisioningStatus(e){return this.gitCredentials.workspaceProvisioningStatus(e)}registerInstance(e,t,n){const i=Eo.parse(t),s=ae(),o=this.controlledInstances.get(e);if(!o){const t=new Error(`Instance ${e} was not found on node ${this.nodeId}.`);throw Object.assign(t,{statusCode:404,code:"NODE_INSTANCE_NOT_FOUND"}),t}if(this.validateInstanceReport(o,i,n),i.processIncarnationId&&i.processIncarnationId===o.processIncarnationId)return o;Kl(i.protocolVersion,`Instance ${e}`);const r=i.build?.packageVersion\|\|i.instanceVersion,a=Gl(this.requireRuntime(o.runtimeId)),c=Ul(o,r,a),d=po.parse({...o,status:"registered",health:r===Ll()?"ok":"degraded",ready:!a&&r===Ll(),connectionStatus:"online",agentStatus:"online",targetStatus:o.targetStatus,uiAccessStatus:o.uiAccessStatus,controlMode:i.controlMode,protocolVersion:i.protocolVersion,instanceVersion:i.instanceVersion,build:i.build,runtimeVersion:c,processIncarnationId:i.processIncarnationId\|\|o.processIncarnationId,capabilities:i.capabilities,appInventory:i.appInventory,workspace:i.workspace,target:o.target,registrationToken:o.registrationToken\|\|i.registrationToken,lastHeartbeatAt:s,updatedAt:s});return this.controlledInstances.putObservation(d)}heartbeatInstance(e,t,n){const i=this.requireInstance(e);this.validateInstanceToken(i,n);const s=wo.parse(t);i.processIncarnationId&&s.processIncarnationId&&s.processIncarnationId!==i.processIncarnationId&&function(e,t){throw Object.assign(new Error(t),{statusCode:409,code:"INSTANCE_PROCESS_INCARNATION_MISMATCH"})}(0,`Instance ${e} report belongs to an obsolete controlled-instance process.`),Kl(s.protocolVersion,`Instance ${e}`);const o=ae(),r=i.target,a=i.targetStatus,c=Ul(i,s.build?.packageVersion\|\|i.build?.packageVersion\|\|i.instanceVersion,Gl(this.requireRuntime(i.runtimeId))),d=s.health\|\|i.health,l="running"===(s.status\|\|i.status)&&"failed"!==d,u=po.parse({...i,...s,target:r,ready:l,health:d,runtimeVersion:c,processIncarnationId:s.processIncarnationId\|\|i.processIncarnationId,agentStatus:"online",targetStatus:a,uiAccessStatus:a,connectionStatus:"online",build:s.build\|\|i.build,lastHeartbeatAt:o,updatedAt:o});return this.controlledInstances.putObservation(u)}validateInstanceReport(e,t,n){this.validateInstanceToken(e,n\|\|t.registrationToken),t.instanceId&&t.instanceId!==e.id&&Bl("INSTANCE_ID_MISMATCH",`Instance ${t.instanceId} cannot register as ${e.id}.`),t.nodeId&&t.nodeId!==this.nodeId&&Bl("INSTANCE_NODE_MISMATCH",`Instance ${e.id} belongs to node ${this.nodeId}.`),t.runtimeId&&t.runtimeId!==e.runtimeId&&Bl("INSTANCE_RUNTIME_MISMATCH",`Instance ${e.id} belongs to runtime ${e.runtimeId}.`),t.imageSelection&&t.imageSelection.imageId!==e.imageSelection?.imageId&&Bl("INSTANCE_IMAGE_MISMATCH",`Instance ${e.id} belongs to image ${e.imageSelection?.imageId}.`)}validateInstanceToken(e,t){e.registrationToken&&t===e.registrationToken\|\|Bl("INSTANCE_REGISTRATION_TOKEN_INVALID",`Invalid registration token for instance ${e.id}.`)}authenticateInstance(e,t){const n=this.requireInstance(e);return this.validateInstanceToken(n,t),n}context(e,t=this.resolvedAssignedModelEnvironment(e.id)){const n=t,i=e.imageSnapshot\|\|Ms.parse({id:"img_localhost",origin:"custom",name:"Localhost",repository:"localhost",tag:"local",requestedReference:"localhost:local",pullPolicy:"if-not-present",capabilities:[],optionalApps:[],defaultEnv:{},labels:{},createdAt:e.createdAt,updatedAt:e.updatedAt}),s=this.instancePrivateConfigs.materialize(e.id,e.registrationToken,n,this.modelRegistry.privateCatalog(e.id),e.config.codexSettings),o=this.gitWorkspaceProvisioningFor(e);return{project:Vl(e),image:i,node:this.node,runtime:this.requireRuntime(e.runtimeId),instance:e,nodeAgentUrl:this.containerUrl,modelEnv:n,privateConfigPath:this.instancePrivateConfigs.filePath(s.instanceId),...o?{gitWorkspaceProvisioning:o,completeGitWorkspaceProvisioning:()=>this.gitCredentials.completeWorkspaceProvisioning(e.id,o.operationId)}:{}}}}async function Jl(e,t){const n=function(e){const t=tu(e),n=[],i=t.pathname.split("/").filter(Boolean).at(-1)\|\|"";return ru(n,Zl(t.toString(),/^v\d+$/.test(i)?"models":"v1/models")),ru(n,new URL("/v1/models",t.origin).toString()),ru(n,new URL("/models",t.origin).toString()),n}(t.endpoint),i=Date.now();let s;for(const o of n){const n=await nu(e,o,{method:"GET",headers:{accept:"application/json",authorization:`Bearer ${t.key}`}});if(404===n.status\|\|405===n.status){s=n.status;continue}if(!n.ok)throw su("MODEL_DISCOVERY_FAILED",n.status);const r=await iu(n,"MODEL_DISCOVERY_RESPONSE_INVALID"),a=Array.isArray(r.data)?r.data:void 0;if(!a)throw ou("MODEL_DISCOVERY_RESPONSE_INVALID","The model endpoint returned an invalid model list.",502);return{models:au(a.flatMap(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const t=e,n="string"==typeof t.id?t.id.trim():"";if(!n)return[];const i="string"==typeof t.owned_by?t.owned_by.trim():"";return[{id:n,...i?{ownedBy:i}:{}}]}).sort((e,t)=>e.id.localeCompare(t.id))),latencyMs:Date.now()-i}}throw ou("MODEL_DISCOVERY_UNSUPPORTED","No compatible model-list endpoint was found for this endpoint.",502,s)}async function Ql(e,t){const n=Date.now(),i=t.protocol\|\|("claude"===t.app?"anthropic-messages":"opencode"===t.app?"openai-chat-completions":"openai-responses"),s="openai-responses"===i?await nu(e,eu(t.endpoint,"responses"),{method:"POST",headers:{accept:"application/json",authorization:`Bearer ${t.key}`,"content-type":"application/json"},body:JSON.stringify({model:t.model,input:"Reply with OK.",max_output_tokens:32,stream:!1})}):"openai-chat-completions"===i?await nu(e,eu(t.endpoint,"chat/completions"),{method:"POST",headers:{accept:"application/json",authorization:`Bearer ${t.key}`,"content-type":"application/json"},body:JSON.stringify({model:t.model,messages:[{role:"user",content:"Reply with OK."}],max_tokens:32,stream:!1})}):await nu(e,function(e){const t=tu(e);if(/\/messages\/?$/.test(t.pathname))return t.toString();const n=t.pathname.split("/").filter(Boolean).at(-1)\|\|"";return Zl(t.toString(),/^v\d+$/.test(n)?"messages":"v1/messages")}(t.endpoint),{method:"POST",headers:{accept:"application/json","anthropic-version":"2023-06-01","content-type":"application/json","x-api-key":t.key},body:JSON.stringify({model:t.model,max_tokens:8,messages:[{role:"user",content:"Reply with OK."}]})});if(!s.ok)throw su("MODEL_TEST_FAILED",s.status);if((await iu(s,"MODEL_TEST_RESPONSE_INVALID")).error)throw ou("MODEL_TEST_RESPONSE_INVALID","The model endpoint returned an error payload.",502);return{success:!0,latencyMs:Date.now()-n}}function Zl(e,t){const n=tu(e);return n.pathname=`${n.pathname.replace(/\/+$/,"")}/${t.replace(/^\/+/,"")}`,n.search="",n.hash="",n.toString()}function eu(e,t){const n=tu(e);return n.pathname.replace(/\/+$/,"").endsWith(`/${t}`)?n.toString():Zl(n.toString(),t)}function tu(e){let t;try{t=new URL(e.trim())}catch{throw ou("MODEL_ENDPOINT_INVALID","The model endpoint must be a valid HTTP or HTTPS URL.",400)}if("http:"!==t.protocol&&"https:"!==t.protocol\|\|t.username\|\|t.password)throw ou("MODEL_ENDPOINT_INVALID","The model endpoint must be an HTTP or HTTPS URL without embedded credentials.",400);return t}async function nu(e,t,n){try{return await e(t,{...n,redirect:"error",signal:AbortSignal.timeout(15e3)})}catch(e){const t=e&&"object"==typeof e&&"name"in e&&"TimeoutError"===e.name;throw ou(t?"MODEL_ENDPOINT_TIMEOUT":"MODEL_ENDPOINT_UNREACHABLE",t?"The model endpoint timed out.":"The model endpoint could not be reached.",t?504:502)}}async function iu(e,t){const n=await e.text();if(n.length>1e6)throw ou(t,"The model endpoint response was too large.",502);try{const e=JSON.parse(n);if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))throw new Error("not an object");return e}catch{throw ou(t,"The model endpoint returned invalid JSON.",502)}}function su(e,t){return ou(e,401===t\|\|403===t?"The model endpoint rejected the API key.":"The model endpoint rejected the request.",502,t)}function ou(e,t,n,i){return Object.assign(new Error(t),{code:e,statusCode:n,...i?{details:{upstreamStatus:i}}:{}})}function ru(e,t){e.includes(t)\|\|e.push(t)}function au(e){const t=new Set;return e.filter(e=>!t.has(e.id)&&(t.add(e.id),!0))}const cu=a.z.object({endpoint:a.z.string().trim().url().max(2048),key:a.z.string().trim().min(1).max(4096).optional(),existingModelId:a.z.string().trim().min(1).max(120).optional()}).strict(),du=cu.extend({model:a.z.string().trim().min(1).max(240),app:a.z.enum(["codex","claude","opencode"]).optional(),protocol:a.z.enum(["openai-responses","openai-chat-completions","anthropic-messages"]).optional()}).strict().refine(e=>Boolean(e.protocol\|\|e.app),{message:"A model protocol is required.",path:["protocol"]});class lu{invocations=new Map;store;idleTtlMs;maxTtlMs;cleanupTimer;constructor(e,t={}){this.store=e,this.idleTtlMs=t.idleTtlMs??6e4,this.maxTtlMs=t.maxTtlMs??3e5}resolveHttps(e,t){const{match:n,payload:i}=this.store.resolve(e,t);return"unique"!==n.status\|\|"https-token"!==i?.secret.kind?{status:n.status}:{status:"ok",username:i.secret.username,password:i.secret.token}}async prepareSsh(e,i){this.cleanupExpired();const{match:s,payload:o}=this.store.resolve(e,i);if("unique"!==s.status\|\|"ssh-key"!==o?.secret.kind)return{status:s.status};const r=`gitssh_${d.randomUUID()}`,a=t.mkdtempSync(n.join(c.tmpdir(),"task-handoff-node-git-ssh-"));t.chmodSync(a,448);const l=n.join(a,"agent.sock"),u=n.join(a,"askpass.sh");let p;t.writeFileSync(u,"#!/bin/sh\nprintf '%s' \"${TASK_HANDOFF_SSH_KEY_PASSPHRASE:-}\"\n",{mode:448});try{const n=await pu("ssh-agent",["-s","-a",l]);if(p=Number(/SSH_AGENT_PID=(\d+)/.exec(n)?.[1]),!Number.isInteger(p)\|\|p<=0)throw new Error("ssh-agent did not report a process id.");const s={...process.env,SSH_AUTH_SOCK:l,SSH_ASKPASS:u,SSH_ASKPASS_REQUIRE:"force",DISPLAY:process.env.DISPLAY\|\|":0",TASK_HANDOFF_SSH_KEY_PASSPHRASE:o.secret.passphrase\|\|""};await mu("ssh-add",["-"],o.secret.privateKey,s);const c=await pu("ssh-add",["-L"],s);t.rmSync(u,{force:!0});const d=Date.now();return this.invocations.set(r,{instanceId:e,remoteUrl:i,credentialId:o.credential.id,credentialRevision:o.credential.revision,socketPath:l,agentPid:p,directory:a,idleExpiresAt:d+this.idleTtlMs,absoluteExpiresAt:d+this.maxTtlMs}),this.scheduleCleanup(),{status:"ok",invocationId:r,publicIdentity:c,pinnedKnownHosts:o.secret.pinnedKnownHosts}}catch(e){if(p)try{process.kill(p,"SIGTERM")}catch{}throw t.rmSync(a,{recursive:!0,force:!0}),e}}async exchangeAgentFrame(e,t,n){this.cleanupExpired();const i=this.invocations.get(t);if(!i\|\|i.instanceId!==e)throw uu("GIT_CREDENTIAL_SSH_INVOCATION_INVALID",404);const{match:s,payload:o}=this.store.resolve(e,i.remoteUrl);if("unique"!==s.status\|\|"ssh-key"!==o?.secret.kind\|\|o.credential.id!==i.credentialId\|\|o.credential.revision!==i.credentialRevision)throw this.release(t,e),uu("GIT_CREDENTIAL_SSH_INVOCATION_REVOKED",403);const r=Buffer.from(n,"base64");if(r.length<5\|\|r.length>1048576\|\|r.readUInt32BE(0)!==r.length-4)throw uu("GIT_CREDENTIAL_SSH_AGENT_FRAME_INVALID",400);i.idleExpiresAt=Math.min(i.absoluteExpiresAt,Date.now()+this.idleTtlMs),this.scheduleCleanup();const a=Math.max(1,Math.min(i.idleExpiresAt,i.absoluteExpiresAt)-Date.now());try{const e=await function(e,t,n){return new Promise((i,s)=>{const o=m.createConnection(e),r=[];let a=0,c=!1;const d=(e,t)=>{c\|\|(c=!0,o.destroy(),e?s(e):i(t))};o.setTimeout(n),o.once("timeout",()=>d(new Error("Managed Git SSH agent exchange timed out."))),o.once("error",e=>d(e)),o.once("end",()=>d(new Error("Managed Git SSH agent closed before returning a complete frame."))),o.once("close",()=>d(new Error("Managed Git SSH agent closed before returning a complete frame."))),o.on("data",e=>{r.push(e);const t=Buffer.concat(r);!a&&t.length>=4&&(a=t.readUInt32BE(0)+4,a<5\|\|a>1048576)?d(new Error("Managed Git SSH agent returned an invalid frame length.")):a&&t.length>=a&&d(void 0,t.subarray(0,a))}),o.once("connect",()=>o.write(t,e=>{e&&d(e)}))})}(i.socketPath,r,a);return{frame:e.toString("base64")}}catch{throw this.release(t,e),uu("GIT_CREDENTIAL_SSH_AGENT_UNAVAILABLE",502)}}release(e,n){const i=this.invocations.get(e);if(!i\|\|void 0!==n&&i.instanceId!==n)return!1;this.invocations.delete(e);try{process.kill(i.agentPid,"SIGTERM")}catch{}return t.rmSync(i.directory,{recursive:!0,force:!0}),this.scheduleCleanup(),!0}close(){this.cleanupTimer&&clearTimeout(this.cleanupTimer),this.cleanupTimer=void 0;for(const e of[...this.invocations.keys()])this.release(e)}cleanupExpired(){const e=Date.now();for(const[t,n]of this.invocations)(n.idleExpiresAt<=e\|\|n.absoluteExpiresAt<=e)&&this.release(t)}scheduleCleanup(){this.cleanupTimer&&clearTimeout(this.cleanupTimer),this.cleanupTimer=void 0;const e=Math.min(...[...this.invocations.values()].map(e=>Math.min(e.idleExpiresAt,e.absoluteExpiresAt)));Number.isFinite(e)&&(this.cleanupTimer=setTimeout(()=>{this.cleanupTimer=void 0,this.cleanupExpired(),this.scheduleCleanup()},Math.max(0,e-Date.now())),this.cleanupTimer.unref?.())}}function uu(e,t){return Object.assign(new Error("Managed Git broker request was rejected."),{code:e,statusCode:t})}function pu(e,t,n=process.env){return mu(e,t,void 0,n)}function mu(e,t,n,i){return new Promise((s,o)=>{const r=l.spawn(e,t,{shell:!1,env:i,stdio:[void 0===n?"ignore":"pipe","pipe","pipe"]}),a=[];r.stdout.on("data",e=>a.push(e)),r.once("error",()=>o(new Error(`Managed Git SSH broker could not start ${e}.`))),r.once("close",t=>0===t?s(Buffer.concat(a).toString("utf8")):o(new Error(`Managed Git SSH broker command ${e} failed.`))),void 0!==n&&r.stdin.end(n)})}const hu=a.z.object({credentialId:a.z.string().trim().min(1).max(120)}).strict(),gu=a.z.object({id:a.z.string().trim().min(1).max(120)}).strict(),fu=gu.extend({invocationId:a.z.string().trim().min(1).max(120)}).strict();function yu(e){const t=e.authorization;return"string"==typeof t&&t.startsWith("Bearer ")?t.slice(7).trim():void 0}const Iu=a.z.object({maxIdleAiSessions:a.z.number().int().min(1).max(50).default(5)}).strict(),Au=a.z.string().trim().min(1).max(1024).refine(e=>!e.startsWith("/")&&!e.includes("\\")&&e.split("/").every(e=>e.length>0&&"."!==e&&".."!==e),"Story paths must be normalized relative POSIX paths."),_u=a.z.string().regex(/^[a-f0-9]{64}$/),Eu=a.z.object({title:a.z.string().trim().min(1).max(240),storyPath:Au,revision:_u}).strict(),wu=a.z.object({agent:be.optional(),mode:tt.optional(),permissionMode:nt.optional(),modelSelection:ht.optional(),reasoningEffort:gt.optional(),cwdFolderId:a.z.string().trim().min(1).max(120).optional(),gitSelection:ft.optional()}).strict(),Tu=a.z.object({id:a.z.string().trim().min(1).max(120),title:a.z.string().trim().min(1).max(120),promptTemplate:a.z.string().trim().min(1).max(32e3),targetInstanceId:a.z.string().trim().min(1).max(120).optional(),sessionPreset:wu.optional()}).strict(),bu=Tu.omit({id:!0}).strict(),Su=bu.extend({id:Tu.shape.id.optional()}).strict(),vu=a.z.discriminatedUnion("scheduleKind",[a.z.object({scheduleKind:a.z.literal("interval"),intervalMs:a.z.number().int().min(6e4)}).strict(),a.z.object({scheduleKind:a.z.literal("daily"),timeOfDay:a.z.string().regex(/^([01]\d\|2[0-3]):[0-5]\d$/),timezone:a.z.string().trim().min(1).max(120)}).strict(),a.z.object({scheduleKind:a.z.literal("weekly"),weekdays:a.z.array(a.z.number().int().min(0).max(6)).min(1).max(7).refine(e=>new Set(e).size===e.length,"Weekdays must be unique."),timeOfDay:a.z.string().regex(/^([01]\d\|2[0-3]):[0-5]\d$/),timezone:a.z.string().trim().min(1).max(120)}).strict(),a.z.object({scheduleKind:a.z.literal("monthly"),dayOfMonth:a.z.number().int().min(-3).max(31).refine(e=>0!==e,"Day of month must not be zero."),timeOfDay:a.z.string().regex(/^([01]\d\|2[0-3]):[0-5]\d$/),timezone:a.z.string().trim().min(1).max(120)}).strict()]),Nu=a.z.object({cooldownMs:a.z.number().int().min(0).max(864e5).optional(),maxConcurrentRuns:a.z.number().int().min(1).max(20).default(1),whenBusy:a.z.enum(["skip","queue"]).default("skip")}).strict(),Ou=a.z.object({id:a.z.string().trim().min(1).max(120),storyId:ue,actionId:Tu.shape.id,schedule:vu,enabled:a.z.boolean().default(!0),policy:Nu.default({maxConcurrentRuns:1,whenBusy:"skip"}),createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime()}).strict(),zu=Ou.omit({id:!0,createdAt:!0,updatedAt:!0}).strict(),Cu=a.z.object({action:Tu,automation:zu.omit({storyId:!0,actionId:!0}).strict()}).strict(),Ru=a.z.object({actionId:Ou.shape.actionId.optional(),schedule:vu.optional(),enabled:a.z.boolean().optional(),policy:Nu.optional()}).strict().refine(e=>Object.keys(e).length>0,"At least one Automation field is required."),xu=a.z.object({code:a.z.string().trim().min(1).max(120),message:a.z.string().trim().min(1).max(2e3)}).strict(),ku=a.z.enum(["queued","dispatching","running","completed","failed","skipped"]),Du=a.z.object({id:a.z.string().trim().min(1).max(160),automationId:Ou.shape.id,eventType:a.z.enum(["manual","schedule"]),status:ku,scheduledFor:a.z.string().datetime(),targetInstanceId:a.z.string().trim().min(1).max(120),aiSessionId:a.z.string().trim().min(1).max(120).optional(),error:xu.optional(),queuedAt:a.z.string().datetime(),startedAt:a.z.string().datetime().optional(),completedAt:a.z.string().datetime().optional()}).strict(),Pu=a.z.enum(["disabled","blocked","scheduled","running","error"]),Lu=a.z.object({automation:Ou,effectiveStatus:Pu,blockedReason:xu.optional(),nextRunAt:a.z.string().datetime().optional(),currentRuns:a.z.array(Du).max(20).default([]),lastRun:Du.optional()}).strict(),Mu=a.z.object({automations:a.z.array(Lu).default([])}).strict(),ju=a.z.object({runs:a.z.array(Du).max(120).default([])}).strict(),Uu=a.z.object({clientRequestId:a.z.string().trim().min(1).max(160)}).strict(),Fu="story.automation.changed";a.z.object({storyId:ue,automationId:Ou.shape.id,change:a.z.enum(["created","updated","deleted","status","run"]),status:Lu.optional(),run:Du.optional()}).strict();const $u=a.z.object({id:ue,ownerNodeId:a.z.string().trim().min(1).max(120),title:a.z.string().trim().min(1).max(240),description:a.z.string().trim().max(4e3).optional(),documents:a.z.array(Eu).max(500).default([]),actions:a.z.array(Tu).max(50).default([]),createdAt:a.z.string().datetime(),updatedAt:a.z.string().datetime(),archivedAt:a.z.string().datetime().optional()}).strict();a.z.object({stories:a.z.array($u).default([])}).strict();const Hu=a.z.object({title:$u.shape.title,description:$u.shape.description,actions:a.z.array(bu).max(50).optional(),maxIdleAiSessions:Iu.shape.maxIdleAiSessions.optional()}).strict(),qu=a.z.object({title:$u.shape.title.optional(),description:$u.shape.description.nullable().optional(),actions:a.z.array(Su).max(50).optional(),maxIdleAiSessions:Iu.shape.maxIdleAiSessions.optional()}).strict().refine(e=>Object.keys(e).length>0,"At least one Story field is required."),Vu=a.z.object({title:Eu.shape.title.optional(),storyPath:Au.optional()}).strict().refine(e=>Object.keys(e).length>0,"At least one document field is required."),Bu=a.z.object({storyPaths:a.z.array(Au).max(500)}).strict();a.z.object({storyPath:Au,title:Eu.shape.title.optional(),expectedRevision:_u.optional()}).strict();const Ku=a.z.object({documents:a.z.array(Eu).max(500)}).strict(),Gu=a.z.union([a.z.number(),a.z.string().regex(/^\d+$/).transform(Number)]),Wu=a.z.object({page:Gu.pipe(a.z.number().int().min(1).max(500)).default(1),pageSize:Gu.pipe(a.z.number().int().min(1).max(100)).default(20)}).strict(),Xu=a.z.object({title:Eu.shape.title,storyPath:Au}).strict(),Yu=a.z.object({page:a.z.number().int().min(1).max(500),pageSize:a.z.number().int().min(1).max(100),totalItems:a.z.number().int().nonnegative(),totalPages:a.z.number().int().nonnegative(),hasMore:a.z.boolean()}).strict(),Ju=a.z.object({storyCreatedAt:$u.shape.createdAt,documents:a.z.array(Xu).max(100),pagination:Yu}).strict();a.z.object({storyCreatedAt:$u.shape.createdAt,documents:a.z.array(Xu.strip()).max(100),pagination:Yu.strip()}).strip(),a.z.object({storyPath:Au,revision:_u,content:a.z.string(),size:a.z.number().int().nonnegative()}).strict(),a.z.object({storyPaths:a.z.array(Au).min(1).max(20),destinationPath:a.z.string().trim().min(1).max(4096)}).strict(),a.z.object({storyPath:Au,title:Eu.shape.title.optional(),sourcePath:a.z.string().trim().min(1).max(4096),expectedRevision:_u.optional()}).strict();const Qu=a.z.object({storyPath:Au,path:a.z.string().trim().min(1).max(4096).optional(),revision:_u.optional(),error:a.z.object({code:a.z.string().trim().min(1).max(120),message:a.z.string().trim().min(1).max(2e3)}).strict().optional()}).strict();a.z.object({items:a.z.array(Qu).min(1).max(20)}).strict(),a.z.object({storyId:ue,nodeId:a.z.string().trim().min(1).max(120),change:a.z.enum(["created","updated","archived","restored","deleted","content.written","document.updated","document.reordered","document.deleted"]).optional(),storyPath:Au.optional()}).strict();const Zu=a.z.object({storyId:ue}).strict(),ep=Zu.extend({storyPath:a.z.string().min(1).max(2048)}).strict(),tp=Zu.extend({automationId:a.z.string().trim().min(1).max(120)}).strict(),np=a.z.object({id:a.z.string().trim().min(1).max(120),sessionId:a.z.string().trim().min(1).max(120)}).strict(),ip=a.z.object({storyPath:Au}).strict(),sp=ip.extend({title:a.z.string().trim().min(1).max(240).optional(),expectedRevision:a.z.string().regex(/^[a-f0-9]{64}$/).optional()}).strict();function op(e){const t=e.authorization;return"string"==typeof t&&t.startsWith("Bearer ")?t.slice(7).trim():void 0}async function rp(e,t,n,i,s){const o=e.authenticateInstance(n,s).aiSessions.sessions.find(e=>e.id===i);if(!o)throw Object.assign(new Error("AI Session was not found in the authoritative instance snapshot."),{code:"AI_SESSION_NOT_FOUND",statusCode:404});if(!o.storyId)throw Object.assign(new Error("AI Session is not assigned to a Story."),{code:"STORY_CONTEXT_REQUIRED",statusCode:409});return await t.get(o.storyId)\|\|(()=>{throw Object.assign(new Error("Story was not found."),{code:"STORY_NOT_FOUND",statusCode:404})})()}function ap(e,t,n,i){return e.header("content-type","application/octet-stream"),e.header("content-length",String(i)),e.header("x-story-revision",n),e.send(t)}class cp{tails=new Map;accepting=!0;async acquire(e){if(!this.accepting)throw Object.assign(new Error("Story storage is shutting down."),{code:"STORY_STORAGE_QUIESCING",statusCode:503});const t=this.tails.get(e)??Promise.resolve();let n;const i=new Promise(e=>{n=e}),s=t.catch(()=>{}).then(()=>i);this.tails.set(e,s),await t.catch(()=>{});let o=!1;return()=>{o\|\|(o=!0,n(),s.finally(()=>{this.tails.get(e)===s&&this.tails.delete(e)}))}}async run(e,t){const n=await this.acquire(e);try{return await t()}finally{n()}}stopAccepting(){this.accepting=!1}async drain(){await Promise.all([...this.tails.values()])}pendingStoryIds(){return[...this.tails.keys()]}}class dp{coordinator;paths;ownerNodeId;repository;maxFileBytes;onChange;constructor(e,t,n,i=33554432,s){this.paths=e,this.ownerNodeId=t,this.repository=n,this.maxFileBytes=i,this.onChange=s,this.coordinator=new cp}async init(){t.mkdirSync(this.paths.storyMutationsDir,{recursive:!0,mode:448}),t.mkdirSync(this.paths.storyTrashDir,{recursive:!0,mode:448}),t.chmodSync(this.paths.storyMutationsDir,448),t.chmodSync(this.paths.storyTrashDir,448),await this.recoverFileMutations()}setOnChange(e){this.onChange=e}async list(){const e=await this.repository.stories.list();return Promise.all(e.map(e=>this.project(e)))}async get(e){const t=await this.repository.stories.get(e);return t?this.project(t):void 0}async require(e){const t=await this.repository.stories.get(e);if(!t)throw lp("STORY_NOT_FOUND","Story was not found.",404);return t}async exists(e){return Boolean(await this.repository.stories.get(e))}async automationContext(e){const t=await this.repository.stories.get(e);if(!t)return;if(await this.repository.deletionIntents.get(e))throw lp("STORY_DELETING","Story is being deleted.",409);const n=(await this.repository.actions.list(e)).map(({storyId:e,displayOrder:t,sessionPreset:n,...i})=>Tu.parse({...i,sessionPreset:n\|\|void 0}));return{id:t.id,archivedAt:t.archivedAt\|\|void 0,actions:n}}async create(e){const t=Hu.parse(e),n=(new Date).toISOString(),i=await this.repository.transaction(async e=>{const i=await e.stories.insert({id:Xa("story"),title:t.title,description:t.description,createdAt:n,updatedAt:n,maxIdleAiSessions:t.maxIdleAiSessions??5,nextDocumentSequence:1}),s=(t.actions\|\|[]).map((e,t)=>({storyId:i.id,id:Xa("story_action"),title:e.title,promptTemplate:e.promptTemplate,targetInstanceId:e.targetInstanceId,sessionPreset:e.sessionPreset,displayOrder:t}));return await e.actions.replace(i.id,s),i}),s=await this.project(i);return this.onChange?.("created",s),s}async retentionSettings(e){return Iu.parse({maxIdleAiSessions:(await this.require(e)).maxIdleAiSessions})}async update(e,t,n=!0){const i=qu.parse(t),s=(new Date).toISOString(),o=await this.repository.transaction(async t=>{if(!await t.stories.get(e))throw lp("STORY_NOT_FOUND","Story was not found.",404);if(await t.deletionIntents.get(e))throw lp("STORY_DELETING","Story is being deleted.",409);if(void 0!==i.actions){const n=await t.actions.list(e),s=new Set(i.actions.flatMap(e=>e.id?[e.id]:[])),o=n.map(e=>e.id).filter(e=>!s.has(e)),r=await t.automations.referencingActions(e,o);if(r.length)throw lp("STORY_ACTION_AUTOMATION_IN_USE","Story Action is referenced by an Automation.",409,{automationIds:r.map(e=>e.id)});await t.actions.replace(e,i.actions.map((t,n)=>({storyId:e,id:t.id\|\|Xa("story_action"),title:t.title,promptTemplate:t.promptTemplate,targetInstanceId:t.targetInstanceId,sessionPreset:t.sessionPreset,displayOrder:n})))}return t.stories.update(e,{...void 0!==i.title?{title:i.title}:{},...void 0!==i.description?{description:i.description\|\|null}:{},...void 0!==i.maxIdleAiSessions?{maxIdleAiSessions:i.maxIdleAiSessions}:{},updatedAt:s})}),r=await this.project(o);return n&&this.onChange?.("updated",r),r}async archive(e){return this.setArchived(e,!0)}async restore(e){return this.setArchived(e,!1)}async setArchived(e,t){await this.require(e);const n=(new Date).toISOString(),i=await this.repository.stories.update(e,{archivedAt:t?n:null,updatedAt:n}),s=await this.project(i);return this.onChange?.(t?"archived":"restored",s),s}async deleteRecord(e){const t=await this.get(e);if(!t)return!1;const n=await this.repository.stories.delete(e);return n&&this.onChange?.("deleted",t),n}notifyDeleted(e){this.onChange?.("deleted",e)}notifyUpdated(e){this.onChange?.("updated",e)}async listContent(e){const t=await this.require(e);return(await this.project(t)).documents}async pageContent(e,t,n){const i=await this.require(e),{items:s,totalItems:o}=await this.repository.documents.page(e,t,n),r=Math.ceil(o/n);return{storyCreatedAt:i.createdAt,documents:s,pagination:{page:t,pageSize:n,totalItems:o,totalPages:r,hasMore:tn<o}}}async readContent(e,n){const i=await this.coordinator.acquire(e);try{await this.require(e);const s=Au.parse(n);if(!await this.repository.documents.get(e,s))throw lp("STORY_CONTENT_NOT_INDEXED","Story content is not indexed.",404);const o=this.openRegularFileWithinRoot(e,s),r=t.createReadStream("",{fd:o.fd,autoClose:!0});let a=!1;const c=()=>{a\|\|(a=!0,i())};return r.once("close",c),r.once("error",c),{stream:r,size:o.size,revision:o.revision}}catch(t){if(i(),"ENOENT"===t.code)throw await this.removeMissingDocument(e,n),lp("STORY_CONTENT_NOT_FOUND","Story content file was not found.",404);throw t}}async writeContent(e,i){return this.coordinator.run(e,async()=>{if((await this.require(e)).archivedAt)throw lp("STORY_ARCHIVED","Archived Story content is read-only.",409);const s=Au.parse(i.storyPath),o=await this.repository.documents.get(e,s);if(o){if(!i.expectedRevision)throw lp("STORY_REVISION_REQUIRED","expectedRevision is required when replacing Story content.",409);const n=this.openRegularFileWithinRoot(e,s);if(t.closeSync(n.fd),n.revision!==i.expectedRevision)throw lp("STORY_REVISION_CONFLICT","Story content changed since it was read.",409)}else if(!i.title?.trim())throw lp("STORY_CONTENT_TITLE_REQUIRED","A title is required for new Story content.",400);this.ensureStoryParent(e,s);const r=Xa("story_file_mutation"),a=this.filePath(e,s),c=`${a}.${r}.tmp`,d=`${a}.${r}.bak`,l=(new Date).toISOString();if(!o&&t.existsSync(a))throw lp("STORY_PATH_CONFLICT","Story path already exists on disk.",409);await this.repository.fileMutations.insert({id:r,storyId:e,operation:"write",storyPath:s,title:i.title?.trim(),temporaryName:c,backupName:d,phase:"receiving",createdAt:l,updatedAt:l});let u=0,p=!1;try{const l=new h.Transform({transform:(e,t,n)=>{u+=e.byteLength,n(u>this.maxFileBytes?lp("STORY_FILE_TOO_LARGE","Story content exceeds the node limit.",413):null,e)}});await f.pipeline(i.stream,l,t.createWriteStream(c,{flags:"wx",mode:384})),this.fsyncFile(c),await this.repository.fileMutations.update(r,{phase:"prepared",updatedAt:(new Date).toISOString()}),o&&t.renameSync(a,d),t.renameSync(c,a),this.fsyncDirectory(n.dirname(a)),await this.repository.fileMutations.update(r,{phase:"files-staged",updatedAt:(new Date).toISOString()}),await this.repository.transaction(async t=>{const n=await t.stories.get(e);if(!n)throw lp("STORY_NOT_FOUND","Story was not found.",404);if(o)await t.documents.update(e,s,{title:i.title?.trim()\|\|o.title});else{const o=await t.documents.list(e);await t.documents.insert({storyId:e,storyPath:s,title:i.title.trim(),indexedSequence:n.nextDocumentSequence,displayOrder:o.length}),await t.stories.update(e,{nextDocumentSequence:n.nextDocumentSequence+1,updatedAt:(new Date).toISOString()})}o&&await t.stories.update(e,{updatedAt:(new Date).toISOString()}),await t.fileMutations.update(r,{phase:"database-committed",updatedAt:(new Date).toISOString()})}),p=!0,t.rmSync(d,{force:!0}),await this.repository.fileMutations.update(r,{phase:"cleanup",updatedAt:(new Date).toISOString()}),await this.repository.fileMutations.delete(r);const m=this.openRegularFileWithinRoot(e,s);t.closeSync(m.fd);const g=await this.get(e);return g&&this.onChange?.("content.written",g),{storyPath:s,revision:m.revision,size:u}}catch(e){throw p\|\|await this.rollbackFileMutation(r,a,c,d,Boolean(o)),e}})}async updateDocument(e,i,s){return this.coordinator.run(e,async()=>{if((await this.require(e)).archivedAt)throw lp("STORY_ARCHIVED","Archived Story content is read-only.",409);const o=Au.parse(i),r=await this.repository.documents.get(e,o);if(!r)throw lp("STORY_CONTENT_NOT_INDEXED","Story content is not indexed.",404);const a=s.storyPath?Au.parse(s.storyPath):o;if(a!==o&&await this.repository.documents.get(e,a))throw lp("STORY_PATH_CONFLICT","Story path is already indexed.",409);if(a===o)await this.repository.transaction(async t=>{await t.documents.update(e,o,{title:s.title?.trim()\|\|r.title}),await t.stories.update(e,{updatedAt:(new Date).toISOString()})});else{this.openAndClose(e,o),this.ensureStoryParent(e,a);const i=this.filePath(e,o),c=this.filePath(e,a);if(t.existsSync(c))throw lp("STORY_PATH_CONFLICT","Story path already exists on disk.",409);const d=Xa("story_file_mutation"),l=(new Date).toISOString();await this.repository.fileMutations.insert({id:d,storyId:e,operation:"rename",storyPath:o,nextStoryPath:a,title:s.title?.trim(),temporaryName:i,backupName:c,phase:"prepared",createdAt:l,updatedAt:l});let u=!1;try{t.renameSync(i,c),this.fsyncDirectory(n.dirname(i)),n.dirname(i)!==n.dirname(c)&&this.fsyncDirectory(n.dirname(c)),await this.repository.fileMutations.update(d,{phase:"files-staged",updatedAt:(new Date).toISOString()}),await this.repository.transaction(async t=>{await t.documents.replacePath(e,o,{...r,storyPath:a,title:s.title?.trim()\|\|r.title}),await t.stories.update(e,{updatedAt:(new Date).toISOString()}),await t.fileMutations.update(d,{phase:"database-committed",updatedAt:(new Date).toISOString()})}),u=!0,await this.repository.fileMutations.update(d,{phase:"cleanup",updatedAt:(new Date).toISOString()}),await this.repository.fileMutations.delete(d)}catch(e){throw u\|\|(t.existsSync(c)&&!t.existsSync(i)&&t.renameSync(c,i),await this.repository.fileMutations.delete(d)),e}}const c=await this.get(e);return this.onChange?.("document.updated",c),c})}async reorderDocuments(e,t){const{storyPaths:n}=Bu.parse(t),i=(await this.repository.documents.list(e)).map(e=>e.storyPath);if(n.length!==i.length\|\|new Set(n).size!==n.length\|\|i.some(e=>!n.includes(e)))throw lp("STORY_DOCUMENT_ORDER_INVALID","Document order must contain every indexed storyPath exactly once.",400);await this.repository.transaction(async t=>{await t.documents.reorder(e,n),await t.stories.update(e,{updatedAt:(new Date).toISOString()})});const s=await this.get(e);return this.onChange?.("document.reordered",s),s}async deleteDocument(e,i){return this.coordinator.run(e,async()=>{if((await this.require(e)).archivedAt)throw lp("STORY_ARCHIVED","Archived Story content is read-only.",409);const s=Au.parse(i);if(!await this.repository.documents.get(e,s))return!1;const o=this.filePath(e,s),r=`${o}.${Xa("story_file_mutation")}.deleted`,a=Xa("story_file_mutation"),c=(new Date).toISOString();await this.repository.fileMutations.insert({id:a,storyId:e,operation:"delete",storyPath:s,backupName:r,phase:"prepared",createdAt:c,updatedAt:c});let d=!1;try{this.openAndClose(e,s),t.renameSync(o,r),this.fsyncDirectory(n.dirname(o)),await this.repository.fileMutations.update(a,{phase:"files-staged",updatedAt:(new Date).toISOString()}),await this.repository.transaction(async t=>{await t.documents.delete(e,s),await t.stories.update(e,{updatedAt:(new Date).toISOString()}),await t.fileMutations.update(a,{phase:"database-committed",updatedAt:(new Date).toISOString()})}),d=!0,t.rmSync(r,{force:!0}),await this.repository.fileMutations.update(a,{phase:"cleanup",updatedAt:(new Date).toISOString()}),await this.repository.fileMutations.delete(a)}catch(e){throw d\|\|(t.existsSync(r)&&!t.existsSync(o)&&t.renameSync(r,o),await this.repository.fileMutations.delete(a)),e}const l=await this.get(e);return l&&this.onChange?.("document.deleted",l),!0})}stopAccepting(){this.coordinator.stopAccepting()}drain(){return this.coordinator.drain()}async project(e){const n=(await this.repository.actions.list(e.id)).map(({storyId:e,displayOrder:t,sessionPreset:n,...i})=>Tu.parse({...i,sessionPreset:n\|\|void 0})),i=await this.repository.documents.list(e.id),s=[];for(const n of i)try{const i=this.openRegularFileWithinRoot(e.id,n.storyPath);t.closeSync(i.fd),s.push({title:n.title,storyPath:n.storyPath,revision:i.revision})}catch(t){if("ENOENT"!==t.code)throw t;await this.removeMissingDocument(e.id,n.storyPath)}return $u.parse({id:e.id,ownerNodeId:this.ownerNodeId,title:e.title,description:e.description\|\|void 0,actions:n,documents:s,createdAt:e.createdAt,updatedAt:e.updatedAt,archivedAt:e.archivedAt\|\|void 0})}storyRoot(e){return n.resolve(this.paths.storyContentDir,$u.shape.id.parse(e))}filePath(e,t){const i=this.storyRoot(e),s=n.resolve(i,...Au.parse(t).split("/"));if(s===i\|\|!s.startsWith(`${i}${n.sep}`))throw lp("STORY_PATH_OUTSIDE_ROOT","Story path is outside the Story directory.",400);return s}ensureStoryParent(e,i){const s=this.filePath(e,i);try{const e=t.lstatSync(this.paths.storyContentDir);if(e.isSymbolicLink()\|\|!e.isDirectory())throw lp("STORY_PATH_UNSAFE","Story content root must be a real directory.",409)}catch(e){if("ENOENT"!==e.code)throw e;t.mkdirSync(this.paths.storyContentDir,{recursive:!0,mode:448})}t.chmodSync(this.paths.storyContentDir,448);let o=this.paths.storyContentDir;for(const e of n.relative(this.paths.storyContentDir,n.dirname(s)).split(n.sep).filter(Boolean)){o=n.join(o,e);try{const e=t.lstatSync(o);if(e.isSymbolicLink()\|\|!e.isDirectory())throw lp("STORY_PATH_UNSAFE","Story path parent must be a real directory.",409)}catch(e){if("ENOENT"!==e.code)throw e;t.mkdirSync(o,{mode:448})}t.chmodSync(o,448)}}openRegularFileWithinRoot(e,i){const s=this.filePath(e,i);this.assertExistingParentsSafe(this.storyRoot(e),n.dirname(s));const o="number"==typeof t.constants.O_NOFOLLOW?t.constants.O_NOFOLLOW:0;if(!o)throw lp("STORY_NOFOLLOW_UNAVAILABLE","Safe no-follow file access is unavailable on this platform.",500);const r=t.openSync(s,t.constants.O_RDONLY\|o);try{const e=t.fstatSync(r);if(!e.isFile())throw lp("STORY_CONTENT_NOT_FILE","Story content must be a regular file.",409);if(e.size>this.maxFileBytes)throw lp("STORY_FILE_TOO_LARGE","Story content exceeds the node limit.",413);const n=d.createHash("sha256"),i=Buffer.allocUnsafe(65536);let s=0;for(;s<e.size;){const o=t.readSync(r,i,0,Math.min(i.length,e.size-s),s);if(!o)break;n.update(i.subarray(0,o)),s+=o}return{fd:r,size:e.size,revision:n.digest("hex")}}catch(e){throw t.closeSync(r),e}}assertExistingParentsSafe(e,i){const s=n.relative(this.paths.storyContentDir,i);let o=this.paths.storyContentDir;for(const e of s.split(n.sep).filter(Boolean)){o=n.join(o,e);const i=t.lstatSync(o);if(i.isSymbolicLink()\|\|!i.isDirectory())throw lp("STORY_PATH_UNSAFE","Story path parent must be a real directory.",409)}if(!i.startsWith(e))throw lp("STORY_PATH_OUTSIDE_ROOT","Story path is outside the Story directory.",400)}openAndClose(e,n){const i=this.openRegularFileWithinRoot(e,n);t.closeSync(i.fd)}fsyncFile(e){const n=t.openSync(e,"r");try{t.fsyncSync(n)}finally{t.closeSync(n)}}fsyncDirectory(e){if("win32"===process.platform)return;const n=t.openSync(e,"r");try{t.fsyncSync(n)}finally{t.closeSync(n)}}async removeMissingDocument(e,t){if(!await this.repository.documents.get(e,t))return;await this.repository.transaction(async n=>{await n.documents.delete(e,t),await n.stories.update(e,{updatedAt:(new Date).toISOString()})});const n=await this.get(e);n&&this.onChange?.("document.deleted",n)}async rollbackFileMutation(e,n,i,s,o){t.rmSync(i,{force:!0}),o&&t.existsSync(s)?(t.rmSync(n,{force:!0}),t.renameSync(s,n)):o\|\|t.rmSync(n,{force:!0}),await this.repository.fileMutations.delete(e)}async recoverFileMutations(){for(const e of await this.repository.fileMutations.list())await this.coordinator.run(e.storyId,async()=>{const n=this.filePath(e.storyId,e.nextStoryPath\|\|e.storyPath);if("database-committed"===e.phase\|\|"cleanup"===e.phase)"write"===e.operation?(e.temporaryName&&t.rmSync(e.temporaryName,{force:!0}),e.backupName&&t.rmSync(e.backupName,{force:!0})):"delete"===e.operation&&e.backupName&&t.rmSync(e.backupName,{force:!0});else if("write"===e.operation){const i=Boolean(e.temporaryName&&t.existsSync(e.temporaryName)),s=Boolean(await this.repository.documents.get(e.storyId,e.storyPath));e.backupName&&t.existsSync(e.backupName)?(t.rmSync(n,{force:!0}),t.renameSync(e.backupName,n)):s\|\|"files-staged"!==e.phase&&("prepared"!==e.phase\|\|i)\|\|t.rmSync(n,{force:!0}),e.temporaryName&&t.rmSync(e.temporaryName,{force:!0})}else"rename"===e.operation&&e.temporaryName&&t.existsSync(n)&&!t.existsSync(e.temporaryName)?t.renameSync(n,e.temporaryName):"delete"===e.operation&&e.backupName&&t.existsSync(e.backupName)&&!t.existsSync(n)&&t.renameSync(e.backupName,n);await this.repository.fileMutations.delete(e.id)})}}function lp(e,t,n,i){return Object.assign(new Error(t),{code:e,statusCode:n,...void 0===i?{}:{details:i}})}const up=a.z.object({storyId:a.z.string().trim().min(1).max(120),actionId:a.z.string().trim().min(1).max(120),targetInstanceId:a.z.string().trim().min(1).max(120),prompt:a.z.string().trim().min(1).max(32e3),sessionPreset:wu.optional(),cwd:a.z.string().trim().min(1).max(4096)}).strict(),pp=vu,mp=Nu,hp=xu,gp=Du.extend({executionKey:a.z.string().trim().min(1).max(160),requestFingerprint:a.z.string().regex(/^[a-f0-9]{64}$/),executionInput:up}).strict(),fp=new Set(["completed","failed","skipped"]),yp={queued:["dispatching","skipped"],dispatching:["running","failed"],running:["completed","failed"],completed:[],failed:[],skipped:[]};class Ip{repository;now;constructor(e,t=()=>new Date){this.repository=e,this.now=t}async init(){}async list(e){return(await this.repository.automations.list(e)).map(Ap)}async stored(e){const t=await this.repository.automations.get(e);return t?function(e){return{...Ap(e),scheduleAnchorAt:e.scheduleAnchorAt}}(t):void 0}async get(e){const t=await this.repository.automations.get(e);return t?Ap(t):void 0}async create(e){const t=zu.parse(e),n=this.now().toISOString();return Ap(await this.repository.automations.insert({id:Xa("story_automation"),storyId:t.storyId,actionId:t.actionId,schedule:pp.parse(t.schedule),enabled:t.enabled,policy:mp.parse(t.policy),scheduleAnchorAt:n,createdAt:n,updatedAt:n}))}async update(e,t){const n=Ru.parse(t),i=await this.repository.automations.get(e);if(!i)return;const s=this.now().toISOString(),o=void 0!==n.schedule\|\|!0===n.enabled&&!i.enabled,r=await this.repository.automations.update(e,{...n,...o?{scheduleAnchorAt:s}:{},updatedAt:s});return r?Ap(r):void 0}referencingActions(e,t){return this.repository.automations.referencingActions(e,[...t])}async hasActiveRuns(e){return(await this.repository.runs.list(e)).some(e=>!fp.has(e.status))}activeRunsForStory(e){return this.repository.runs.activeForStory(e).then(e=>e.map(_p))}async delete(e){if(!await this.repository.automations.get(e))return!1;if(await this.hasActiveRuns(e))throw wp("STORY_AUTOMATION_RUN_ACTIVE","Automation has a non-terminal run.",409);return this.repository.automations.delete(e)}async deleteForStory(e){if((await this.activeRunsForStory(e)).length)throw wp("STORY_AUTOMATION_RUN_ACTIVE","Story has a non-terminal Automation run.",409);await this.repository.automations.deleteForStory(e)}async createRun(e){const t=up.parse(e.executionInput);return this.repository.transaction(async n=>{const i=await n.runs.byExecutionKey(e.executionKey);if(i)return _p(i);const s=await n.runs.insert({...e,executionInput:t,id:Xa("story_automation_run"),status:"queued",targetInstanceId:t.targetInstanceId,queuedAt:this.now().toISOString()});return await n.runs.trimTerminal(e.automationId,100),_p(s)})}async transition(e,t,n={}){return this.repository.transaction(async i=>{const s=await i.runs.get(e);if(!s)throw wp("STORY_AUTOMATION_RUN_NOT_FOUND","Automation run was not found.",404);const o=_p(s);if(o.status===t)return o;if(!yp[o.status].includes(t))throw wp("STORY_AUTOMATION_RUN_TRANSITION_INVALID",`Cannot transition run from ${o.status} to ${t}.`,409);const r=this.now().toISOString(),a=await i.runs.update(e,{...n,status:t,..."dispatching"===t?{startedAt:r}:{},...fp.has(t)?{completedAt:r}:{}});return await i.runs.trimTerminal(o.automationId,100),_p(a)})}async runsFor(e){return(await this.repository.runs.list(e)).map(Ep)}async run(e){const t=await this.repository.runs.get(e);return t?Ep(t):void 0}async runByExecutionKey(e){const t=await this.repository.runs.byExecutionKey(e);return t?_p(t):void 0}async pendingRuns(){return(await this.repository.runs.pending()).map(_p)}}function Ap(e){return Ou.parse({id:e.id,storyId:e.storyId,actionId:e.actionId,schedule:pp.parse(e.schedule),enabled:e.enabled,policy:mp.parse(e.policy),createdAt:e.createdAt,updatedAt:e.updatedAt})}function _p(e){return gp.parse({...e,aiSessionId:e.aiSessionId\|\|void 0,startedAt:e.startedAt\|\|void 0,completedAt:e.completedAt\|\|void 0,error:e.error?hp.parse(e.error):void 0,executionInput:up.parse(e.executionInput)})}function Ep(e){const{executionKey:t,requestFingerprint:n,executionInput:i,...s}=_p(e);return Du.parse(s)}function wp(e,t,n){return Object.assign(new Error(t),{code:e,statusCode:n})}class Tp{state;stories;automations;scheduler;repository;constructor(e,t,n,i,s){this.state=e,this.stories=t,this.automations=n,this.scheduler=i,this.repository=s}async init(){t.mkdirSync(this.state.paths.storyTrashDir,{recursive:!0,mode:448});for(const e of await this.repository.deletionIntents.list()){const i=await this.repository.stories.get(e.storyId),s=this.storyRoot(e.storyId),o=e.trashName?n.join(this.state.paths.storyTrashDir,e.trashName):void 0;i?o&&t.existsSync(o)&&!t.existsSync(s)&&t.renameSync(o,s):o&&t.rmSync(o,{recursive:!0,force:!0}),await this.repository.deletionIntents.delete(e.storyId)}}async update(e,t){const n=qu.parse(t),i=await this.stories.update(e,n);return await this.scheduler.refresh(),i}async createAutomationWithAction(e,t){const n=Cu.parse(t),i=await this.stories.automationContext(e);if(!i)throw bp("STORY_NOT_FOUND","Story was not found.",404);if(i.archivedAt)throw bp("STORY_ARCHIVED","Archived Story cannot create an Automation.",409);if(i.actions.some(e=>e.id===n.action.id))throw bp("STORY_ACTION_ID_CONFLICT","Story Action id already exists.",409);const s={storyId:e,actionId:n.action.id,...n.automation};await this.scheduler.validateCreate(s,{...i,actions:[...i.actions,n.action]});let o="";await this.repository.transaction(async t=>{await t.actions.replace(e,[...i.actions,n.action].map((t,n)=>({storyId:e,id:t.id,title:t.title,promptTemplate:t.promptTemplate,targetInstanceId:t.targetInstanceId,sessionPreset:t.sessionPreset,displayOrder:n}))),await t.stories.update(e,{updatedAt:(new Date).toISOString()}),o=(await this.automations.create(s)).id});const r=await this.stories.get(e);return r&&this.stories.notifyUpdated(r),this.scheduler.activateCreated(o)}async archive(e){const t=await this.stories.archive(e);return await this.scheduler.refresh(),t}async restore(e){const t=await this.stories.restore(e);return await this.scheduler.refresh(),t}async delete(e){return this.stories.coordinator.run(e,async()=>{const t=await this.stories.get(e);return!!t&&(await this.assertStoryCanBeDeleted(e),this.deleteCoordinated(t))})}async assertStoryCanBeDeleted(e){const t=this.state.listInstances().flatMap(t=>t.aiSessions.sessions.filter(t=>t.storyId===e).map(e=>({instanceId:t.id,aiSessionId:e.id})));if(t.length)throw bp("STORY_IN_USE","Story is still referenced by an AI Session.",409,{sessions:t});const n=await this.automations.activeRunsForStory(e);if(n.length)throw bp("STORY_AUTOMATION_RUN_ACTIVE","Story has a non-terminal Automation run.",409,{runIds:n.map(e=>e.id)})}async deleteCoordinated(e){const i=e.id;await this.scheduler.clearStory(i);const s=this.storyRoot(i),o=`${i}-${Date.now()}-${Math.random().toString(16).slice(2)}`,r=n.join(this.state.paths.storyTrashDir,o),a=(new Date).toISOString();await this.repository.deletionIntents.put({storyId:i,phase:"prepared",trashName:null,createdAt:a,updatedAt:a});try{let c=!1;return t.existsSync(s)&&(t.renameSync(s,r),this.fsyncDirectory(n.dirname(s)),this.fsyncDirectory(n.dirname(r)),c=!0),await this.repository.deletionIntents.put({storyId:i,phase:"files-staged",trashName:c?o:null,createdAt:a,updatedAt:(new Date).toISOString()}),await this.repository.transaction(async e=>{const t=await e.runs.activeForStory(i);if(t.length)throw bp("STORY_AUTOMATION_RUN_ACTIVE","Story has a non-terminal Automation run.",409,{runIds:t.map(e=>e.id)});await e.automations.deleteForStory(i),await e.stories.delete(i),await e.deletionIntents.put({storyId:i,phase:"database-committed",trashName:c?o:null,createdAt:a,updatedAt:(new Date).toISOString()})}),c&&t.rmSync(r,{recursive:!0,force:!0}),await this.repository.deletionIntents.put({storyId:i,phase:"cleanup",trashName:c?o:null,createdAt:a,updatedAt:(new Date).toISOString()}),await this.repository.deletionIntents.delete(i),this.stories.notifyDeleted(e),!0}catch(e){throw await this.repository.stories.get(i)&&(t.existsSync(r)&&!t.existsSync(s)&&t.renameSync(r,s),await this.repository.deletionIntents.delete(i)),e}}storyRoot(e){return n.join(this.state.paths.storyContentDir,ue.parse(e))}fsyncDirectory(e){if("win32"===process.platform)return;const n=t.openSync(e,"r");try{t.fsyncSync(n)}finally{t.closeSync(n)}}}function bp(e,t,n,i){return Object.assign(new Error(t),{code:e,statusCode:n,details:i})}class Sp{timers=new Map;running=new Map;queued=new Map;lastStartedAt=new Map;accepting=!0;adapter;maxQueuedPerJob;now;constructor(e,t=100,n=Date.now){this.adapter=e,this.maxQueuedPerJob=t,this.now=n}start(){this.accepting=!0}setTimer(e,t){const n=this.timers.get(e);n&&clearTimeout(n),this.timers.set(e,t)}clearTimer(e){const t=this.timers.get(e);t&&clearTimeout(t),this.timers.delete(e)}clearQueued(e,t="job-disabled"){const n=this.queued.get(e);if(n){for(const e of n)this.adapter.skipped(e.event,t);this.queued.delete(e)}}submit(e,t,n){if(!this.accepting)return this.adapter.skipped(t,"scheduler-stopped"),"skipped";const i=this.now(),s=this.lastStartedAt.get(e);if(n.cooldownMs&&void 0!==s&&i-s<n.cooldownMs)return this.adapter.skipped(t,"cooldown"),"skipped";if((this.running.get(e)??0)>=n.maxConcurrentRuns){if("skip"===n.whenBusy)return this.adapter.skipped(t,"busy"),"skipped";const i=this.queued.get(e)??[];return i.length>=this.maxQueuedPerJob?(this.adapter.skipped(t,"queue-full"),"skipped"):(i.push({event:t,policy:n}),this.queued.set(e,i),"queued")}return this.begin(e,t,n),"started"}stop(){this.accepting=!1;for(const e of this.timers.values())clearTimeout(e);this.timers.clear();for(const e of this.queued.values())for(const t of e)this.adapter.skipped(t.event,"scheduler-stopped");this.queued.clear()}begin(e,t,n){this.running.set(e,(this.running.get(e)??0)+1),this.lastStartedAt.set(e,this.now());const i=()=>{const t=(this.running.get(e)??1)-1;t>0?this.running.set(e,t):this.running.delete(e),this.drain(e)};this.adapter.execute(t).then(i,i)}drain(e){if(!this.accepting)return;const t=this.queued.get(e);if(!t?.length)return;const n=t[0];(this.running.get(e)??0)>=n.policy.maxConcurrentRuns\|\|(t.shift(),t.length\|\|this.queued.delete(e),this.begin(e,n.event,n.policy))}}function vp(e,t){return new Date(Date.UTC(e,t+1,0)).getUTCDate()}function Np(e,t,n,i,s,o){return S.CronExpressionParser.parse(`0 ${i} ${n} ${e} ${t} `,{currentDate:o,strict:!0,tz:s}).next().toDate()}function Op(e,t,n){return`sch_${d.createHash("sha256").update(`${e}\0${t}\0${n}`).digest("hex").slice(0,32)}`}a.z.object({agent:be,cwd:mt,cwdFolderId:a.z.string().trim().min(1).max(120).optional(),gitSelection:ft.optional(),message:a.z.string().trim().min(1).max(32e3),permissionMode:nt.optional(),clientRequestId:a.z.string().trim().min(1).max(160),modelSelection:ht.optional(),reasoningEffort:gt.optional(),storyId:ue}).strict();const zp=a.z.object({disposition:a.z.enum(["created","already-created"]),aiSessionId:a.z.string().trim().min(1).max(120)}).strict();class Cp{runtime;nextRunAt=new Map;completion=new Map;registeredAutomationIds=new Set;backgroundMutations=new Set;state;stories;automations;fetchImpl;resolveInstanceWeb;publish;now;constructor(e,t,n,i,s,o,r=()=>new Date){this.state=e,this.stories=t,this.automations=n,this.fetchImpl=i,this.resolveInstanceWeb=s,this.publish=o,this.now=r,this.runtime=new Sp({execute:({runId:e})=>this.executeRun(e),skipped:({runId:e},t)=>this.trackMutation(this.skipRun(e,t))})}async start(){this.runtime.stop(),this.runtime.start(),this.nextRunAt.clear(),this.registeredAutomationIds.clear();for(const e of await this.automations.list())await this.register(e);for(const e of await this.automations.pendingRuns())await this.resume(e);await this.reconcileInstances()}async stop(){this.runtime.stop(),this.nextRunAt.clear(),await Promise.allSettled([...this.backgroundMutations])}async refresh(){for(const e of this.registeredAutomationIds)this.runtime.clearTimer(e);this.registeredAutomationIds.clear(),this.nextRunAt.clear();for(const e of await this.automations.list())e.enabled&&!await this.blockedReason(e)\|\|this.runtime.clearQueued(e.id),await this.register(e)}async clearStory(e){for(const t of await this.automations.list(e))this.runtime.clearTimer(t.id),this.runtime.clearQueued(t.id),this.registeredAutomationIds.delete(t.id),this.nextRunAt.delete(t.id)}async status(e){const t=await this.requireAutomation(e),n=await this.automations.runsFor(e),i=n.filter(e=>!xp(e.status)),s=await this.blockedReason(t),o=n.find(e=>xp(e.status)),r=t.enabled?s?"blocked":i.length?"running":"failed"===o?.status?"error":"scheduled":"disabled";return Lu.parse({automation:t,effectiveStatus:r,blockedReason:s,nextRunAt:this.nextRunAt.get(e),currentRuns:i.slice(0,20),lastRun:o})}async list(e){return Promise.all((await this.automations.list(e)).map(e=>this.status(e.id)))}async create(e){const t=await this.validateInput(e),n=await this.automations.create(t);return await this.register(n),await this.publishStatus(n.id,"created"),this.status(n.id)}async validateCreate(e,t){const n=zu.parse(e);return await this.validateReferences({...n,id:"validation",createdAt:this.now().toISOString(),updatedAt:this.now().toISOString()},t),n}async activateCreated(e){const t=await this.requireAutomation(e);return await this.register(t),await this.publishStatus(e,"created"),this.status(e)}async update(e,t){const n={...await this.requireAutomation(e),...t};if(await this.validateReferences(n),await this.automations.update(e,t))return await this.refresh(),await this.publishStatus(e,"updated"),this.status(e)}setEnabled(e,t){return this.update(e,{enabled:t})}async delete(e){const t=await this.requireAutomation(e),n=await this.automations.delete(e);return n&&(this.runtime.clearTimer(e),this.nextRunAt.delete(e),this.publish?.(Fu,{storyId:t.storyId,automationId:e,change:"deleted"},{nodeId:this.state.node.id})),n}async manualRun(e,t){const n=await this.requireAutomation(e),i=this.now().toISOString(),s=Op(e,"manual",t.clientRequestId),o=await this.automations.runByExecutionKey(s);if(o)return this.automations.run(o.id);const r=await this.prepareRun(n,"manual",i,s);return this.runtime.submit(e,{runId:r.id},n.policy),this.automations.run(r.id)}async runs(e){return await this.requireAutomation(e),this.automations.runsFor(e)}async reconcileInstances(e){for(const t of(await this.automations.pendingRuns()).filter(e=>"running"===e.status&&e.aiSessionId)){if(e&&t.targetInstanceId!==e)continue;const n=this.state.listInstances().find(e=>e.id===t.targetInstanceId),i=n?.aiSessions.sessions.find(e=>e.id===t.aiSessionId);if(!i&&e!==t.targetInstanceId)continue;if(i&&"idle"!==i.status&&"failed"!==i.status)continue;const s="failed"===i?.status?"failed":"completed",o="failed"===s?{code:"AI_SESSION_FAILED",message:"The automated AI Session failed."}:void 0,r=await this.automations.transition(t.id,s,o?{error:o}:{});this.resolveCompletion(t.id),await this.publishRun(r),await this.publishStatus(t.automationId,"status")}}async register(e){if(!e.enabled\|\|await this.blockedReason(e))return;const t=await this.automations.stored(e.id);if(!t)return;const n=function(e){const t=e.schedule;if("interval"===t.scheduleKind)return{type:"interval",intervalMs:t.intervalMs};if("daily"===t.scheduleKind)return{type:"daily",timeOfDay:t.timeOfDay,timezone:t.timezone};if("weekly"===t.scheduleKind)return{type:"weekly",weekdays:t.weekdays,timeOfDay:t.timeOfDay,timezone:t.timezone};if("monthly"===t.scheduleKind)return{type:"monthly",dayOfMonth:t.dayOfMonth,timeOfDay:t.timeOfDay,timezone:t.timezone};throw new Error(`Unsupported Story automation schedule kind: ${t.schedule.scheduleKind}`)}(e),i=function(e,t,n=t){if("interval"===e.type){const i=Math.max(0,t.getTime()-n.getTime()),s=Math.floor(i/e.intervalMs)+1;return new Date(n.getTime()+se.intervalMs)}const[i,s]=e.timeOfDay.split(":").map(Number);if("monthly"===e.type&&e.dayOfMonth<0)return function(e,t,n,i,s){const o=function(e,t){const n=new Intl.DateTimeFormat("en-US",{timeZone:t,year:"numeric",month:"2-digit",day:"2-digit"}).formatToParts(e),i=e=>Number(n.find(t=>t.type===e)?.value);return{year:i("year"),month:i("month")-1,day:i("day")}}(s,i),r=[];for(let a=0;a<12;a+=1){const c=new Date(Date.UTC(o.year,o.month+a,1)),d=c.getUTCFullYear(),l=c.getUTCMonth(),u=vp(d,l)+e+1;r.push(Np(u,l+1,t,n,i,s))}return r.sort((e,t)=>e.getTime()-t.getTime()),r[0]}(e.dayOfMonth,i,s,e.timezone,t);const o="weekly"===e.type?[...new Set(e.weekdays)].sort((e,t)=>e-t).join(","):"",r="monthly"===e.type?String(e.dayOfMonth):"";return S.CronExpressionParser.parse(`0 ${s} ${i} ${r} * ${o}`,{currentDate:t,strict:!0,tz:e.timezone}).next().toDate()}(n,this.now(),new Date(t.scheduleAnchorAt));this.nextRunAt.set(e.id,i.toISOString()),this.registeredAutomationIds.add(e.id);const s=setTimeout(()=>{this.trackMutation(this.handleTimer(e.id,i))},Math.max(1,i.getTime()-this.now().getTime()));s.unref?.(),this.runtime.setTimer(e.id,s)}async handleTimer(e,t){const n=await this.automations.get(e);if(!n?.enabled\|\|await this.blockedReason(n))return;const i=t.toISOString();try{const e=await this.prepareRun(n,"schedule",i,Op(n.id,"schedule",i));this.runtime.submit(n.id,{runId:e.id},n.policy)}catch{await this.publishStatus(n.id,"status")}await this.register(n),await this.publishStatus(n.id,"status")}async prepareRun(e,t,n,i){const s=await this.executionInput(e),o=Rp(s,i);return this.automations.createRun({automationId:e.id,eventType:t,scheduledFor:n,executionKey:i,requestFingerprint:(r=o,d.createHash("sha256").update(JSON.stringify(r)).digest("hex")),executionInput:s});var r}async resume(e){const t=await this.automations.get(e.automationId);t&&(e.status,this.runtime.submit(t.id,{runId:e.id},t.policy))}async executeRun(e){let t=(await this.automations.pendingRuns()).find(t=>t.id===e);if(t){if("queued"===t.status&&(t=await this.automations.transition(t.id,"dispatching")),"dispatching"===t.status)try{const e=this.state.requireInstance(t.targetInstanceId);if(!e.registrationToken)throw Pp("STORY_AUTOMATION_INSTANCE_CREDENTIAL_MISSING","Target instance has no registration credential.",503);const n=`${await this.resolveInstanceWeb(e)}/api/internal/node-agent/story-automation/ai-sessions`;let i;try{i=await this.fetchImpl(n,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${e.registrationToken}`},body:JSON.stringify(Rp(t.executionInput,t.executionKey))})}catch{return void await this.publishStatus(t.automationId,"status")}const s=await i.json().catch(()=>({}));if(!i.ok)throw Pp(s.error?.code\|\|"STORY_AUTOMATION_DISPATCH_FAILED",s.error?.message\|\|`Target instance returned HTTP ${i.status}.`,i.status);const o=zp.parse(s.data);t=await this.automations.transition(t.id,"running",{aiSessionId:o.aiSessionId}),await this.publishRun(t)}catch(e){const n=await this.automations.transition(t.id,"failed",{error:kp(e)});return await this.publishRun(n),void await this.publishStatus(t.automationId,"status")}await this.completionFor(t.id).promise}}async skipRun(e,t){const n=await this.automations.run(e);if(!n\|\|"queued"!==n.status)return;const i=await this.automations.transition(e,"skipped",{error:{code:`STORY_AUTOMATION_${t.replaceAll("-","_").toUpperCase()}`,message:Dp(t)}});await this.publishRun(i)}async executionInput(e,t){const n=t?.id===e.storyId?t:await this.stories.automationContext(e.storyId);if(!n)throw Pp("STORY_NOT_FOUND","Story was not found.",404);if(n.archivedAt)throw Pp("STORY_ARCHIVED","Archived Story cannot run Automation.",409);const i=n.actions.find(t=>t.id===e.actionId);if(!i)throw Pp("STORY_ACTION_NOT_FOUND","Story Action was not found.",404);if(!i.targetInstanceId)throw Pp("STORY_ACTION_TARGET_REQUIRED","Automated Story Action requires a target instance.",409);const s=this.state.requireInstance(i.targetInstanceId);return{storyId:n.id,actionId:i.id,targetInstanceId:s.id,prompt:i.promptTemplate,sessionPreset:i.sessionPreset,cwd:this.runtimeCwd(s,i.sessionPreset?.cwdFolderId)}}runtimeCwd(e,t){if(!t)return e.runtime.workspacePath\|\|e.workspace.path\|\|"/workspace";const i=this.state.localFolders.get(t);if(!i)throw Pp("NODE_LOCAL_FOLDER_NOT_FOUND","Story Action working folder was not found.",404);if("local"===this.state.requireRuntime(e.runtimeId).type)return n.resolve(i.path);if("local-folder"!==e.source.type)throw Pp("AI_SESSION_CWD_UNAVAILABLE","Working folder is unavailable for this instance source.",409);const s=n.relative(n.resolve(e.source.path),n.resolve(i.path));if(".."===s\|\|s.startsWith(`..${n.sep}`)\|\|n.isAbsolute(s))throw Pp("AI_SESSION_CWD_OUTSIDE_WORKSPACE","Working folder is outside the instance workspace.",409);const o=e.runtime.workspacePath\|\|e.workspace.path\|\|"/workspace";return s?n.posix.join(o,...s.split(n.sep)):o}async validateInput(e){const t=zu.parse(e);return await this.validateReferences({...t,id:"validation",createdAt:this.now().toISOString(),updatedAt:this.now().toISOString()}),t}async validateReferences(e,t){await this.executionInput(e,t)}async blockedReason(e){try{return void await this.executionInput(e)}catch(e){const t=kp(e);return["STORY_ARCHIVED","STORY_DELETING","STORY_NOT_FOUND","STORY_ACTION_NOT_FOUND","STORY_ACTION_TARGET_REQUIRED","NODE_INSTANCE_NOT_FOUND","STORY_NODE_MISMATCH"].includes(t.code)?t:void 0}}async requireAutomation(e){const t=await this.automations.get(e);if(!t)throw Pp("STORY_AUTOMATION_NOT_FOUND","Story Automation was not found.",404);return t}completionFor(e){const t=this.completion.get(e);if(t)return t;let n;const i={promise:new Promise(e=>{n=e}),resolve:n};return this.completion.set(e,i),i}resolveCompletion(e){this.completion.get(e)?.resolve(),this.completion.delete(e)}trackMutation(e){return this.backgroundMutations.add(e),e.finally(()=>this.backgroundMutations.delete(e)),e}async publishRun(e){const t=await this.automations.run(e.id),n=await this.automations.get(e.automationId);t&&n&&this.publish?.(Fu,{storyId:n.storyId,automationId:n.id,change:"run",run:t},{nodeId:this.state.node.id,instanceId:e.targetInstanceId})}async publishStatus(e,t){const n=await this.status(e);this.publish?.(Fu,{storyId:n.automation.storyId,automationId:e,change:t,status:n},{nodeId:this.state.node.id})}}function Rp(e,t){const n=e.sessionPreset;return{agent:n?.agent\|\|"codex",cwd:{type:"runtime-path",path:e.cwd},cwdFolderId:n?.cwdFolderId,gitSelection:n?.gitSelection,message:e.prompt,permissionMode:n?.permissionMode\|\|"ask",clientRequestId:t,modelSelection:n?.modelSelection,reasoningEffort:n?.reasoningEffort,storyId:e.storyId}}function xp(e){return"completed"===e\|\|"failed"===e\|\|"skipped"===e}function kp(e){const t=e&&"object"==typeof e?e:void 0;return{code:"string"==typeof t?.code?t.code:"STORY_AUTOMATION_FAILED",message:"string"==typeof t?.message?t.message:String(e)}}function Dp(e){return{cooldown:"Skipped by cooldown policy.",busy:"Skipped because the concurrency limit was reached.","queue-full":"Skipped because the queue is full.","scheduler-stopped":"Skipped because the scheduler stopped.","job-disabled":"Skipped because the Automation was disabled or blocked."}[e]}function Pp(e,t,n){return Object.assign(new Error(t),{code:e,statusCode:n})}class Lp{closed=new Set;pending=new Set;reconciliation;state;stories;fetchImpl;resolveInstanceWeb;warn;constructor(e,t,n,i,s){this.state=e,this.stories=t,this.fetchImpl=n,this.resolveInstanceWeb=i,this.warn=s}reconcile(){if(this.reconciliation)return this.reconciliation;const e=this.reconcileOnce().finally(()=>{this.reconciliation===e&&(this.reconciliation=void 0)});return this.reconciliation=e,e}async reconcileOnce(){const e=new Map,t=new Set,n=[];for(const n of this.state.listInstances()){if(!n.registrationToken)continue;let i;try{i=await this.fetchImpl(`${await this.resolveInstanceWeb(n)}/api/internal/node-agent/ai-sessions/idle-retention`,{headers:{authorization:`Bearer ${n.registrationToken}`}})}catch(e){this.warn({instanceId:n.id,error:e instanceof Error?e.message:String(e)},"could not inspect Story idle sessions");continue}if(!i.ok)continue;const s=await i.json().catch(()=>({}));if(Array.isArray(s.data))for(const i of s.data){if(!i\|\|"object"!=typeof i)continue;const s=i;if("string"!=typeof s.sessionId\|\|"string"!=typeof s.storyId\|\|"idle"!==s.status)continue;if(void 0===jp(s))continue;if(!await this.stories.exists(s.storyId))continue;const o=`${n.id}:${s.sessionId}`;if(t.add(o),this.closed.has(o))continue;const r=e.get(s.storyId)\|\|[];r.push({instance:n,sessionId:s.sessionId,storyId:s.storyId,status:"idle",completedAt:s.completedAt,updatedAt:s.updatedAt}),e.set(s.storyId,r)}}for(const[t,i]of e){const e=(await this.stories.retentionSettings(t)).maxIdleAiSessions;for(;i.length>e;){i.sort((e,t)=>jp(e)-jp(t)\|\|`${e.instance.id}:${e.sessionId}`.localeCompare(`${t.instance.id}:${t.sessionId}`));const e=i.shift(),s=`${e.instance.id}:${e.sessionId}`;this.pending.has(s)\|\|(this.pending.add(s),n.push(this.close(e,s).catch(n=>{this.warn({storyId:t,instanceId:e.instance.id,sessionId:e.sessionId,error:n instanceof Error?n.message:String(n)},"Story idle Session retention close failed"),setTimeout(()=>{this.reconcile()},5e3).unref?.()})))}}await Promise.all(n);for(const e of this.closed)t.has(e)\|\|this.closed.delete(e)}async close(e,t){try{if(!await this.isUnchangedCandidate(e))return;const n=await this.fetchImpl(`${await this.resolveInstanceWeb(e.instance)}/api/internal/node-agent/ai-sessions/${encodeURIComponent(e.sessionId)}/close`,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${e.instance.registrationToken}`},body:JSON.stringify({clientRequestId:d.randomUUID()})});if(204===n.status)return;if(!n.ok)throw new Error(`HTTP ${n.status}`);this.closed.add(t)}finally{this.pending.delete(t)}}async isUnchangedCandidate(e){const t=await this.fetchImpl(`${await this.resolveInstanceWeb(e.instance)}/api/internal/node-agent/ai-sessions/idle-retention`,{headers:{authorization:`Bearer ${e.instance.registrationToken}`}});if(!t.ok)throw new Error(`HTTP ${t.status}`);const n=await t.json().catch(()=>({}));if(!Array.isArray(n.data))return!1;const i=n.data.find(t=>{if(!t\|\|"object"!=typeof t)return!1;const n=t;return n.sessionId===e.sessionId&&n.storyId===e.storyId&&"idle"===n.status});return void 0!==i&&jp(i)===jp(e)}}class Mp{closed=new Set;pending=new Set;reconciliation;state;fetchImpl;resolveInstanceWeb;warn;constructor(e,t,n,i){this.state=e,this.fetchImpl=t,this.resolveInstanceWeb=n,this.warn=i}reconcile(){if(this.reconciliation)return this.reconciliation;const e=this.reconcileOnce().finally(()=>{this.reconciliation===e&&(this.reconciliation=void 0)});return this.reconciliation=e,e}async reconcileOnce(){const e=new Map,t=new Set,n=[];for(const n of this.state.listInstances()){if(!n.registrationToken)continue;let i;try{i=await this.fetchImpl(`${await this.resolveInstanceWeb(n)}/api/internal/node-agent/ai-sessions/instance-idle-retention`,{headers:{authorization:`Bearer ${n.registrationToken}`}})}catch(e){this.warn({instanceId:n.id,error:e instanceof Error?e.message:String(e)},"could not inspect instance idle sessions");continue}if(!i.ok)continue;const s=await i.json().catch(()=>({}));if(Array.isArray(s.data))for(const i of s.data){if(!i\|\|"object"!=typeof i)continue;const s=i;if("string"!=typeof s.sessionId\|\|"idle"!==s.status)continue;if(void 0===jp(s))continue;const o=`${n.id}:${s.sessionId}`;if(t.add(o),this.closed.has(o))continue;const r=e.get(n.id)\|\|[];r.push({instance:n,sessionId:s.sessionId,status:"idle",completedAt:s.completedAt,updatedAt:s.updatedAt}),e.set(n.id,r)}}for(const[t,i]of e)for(;i.length>100;){i.sort((e,t)=>jp(e)-jp(t)\|\|`${e.instance.id}:${e.sessionId}`.localeCompare(`${t.instance.id}:${t.sessionId}`));const e=i.shift(),s=`${e.instance.id}:${e.sessionId}`;this.pending.has(s)\|\|(this.pending.add(s),n.push(this.close(e,s).catch(n=>{this.warn({instanceId:t,sessionId:e.sessionId,error:n instanceof Error?n.message:String(n)},"Instance idle Session retention close failed"),setTimeout(()=>{this.reconcile()},5e3).unref?.()})))}await Promise.all(n);for(const e of this.closed)t.has(e)\|\|this.closed.delete(e)}async close(e,t){try{const n=await this.fetchImpl(`${await this.resolveInstanceWeb(e.instance)}/api/internal/node-agent/ai-sessions/${encodeURIComponent(e.sessionId)}/close`,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${e.instance.registrationToken}`},body:JSON.stringify({clientRequestId:d.randomUUID()})});if(204===n.status)return;if(!n.ok)throw new Error(`HTTP ${n.status}`);this.closed.add(t)}finally{this.pending.delete(t)}}}function jp(e){return Up(e.completedAt)??Up(e.updatedAt)}function Up(e){const t=e?Date.parse(e):Number.NEGATIVE_INFINITY;return Number.isFinite(t)?t:void 0}const Fp=a.z.object({path:a.z.string().trim().min(1).max(2048),method:a.z.string().trim().min(1).max(20).default("GET"),headers:a.z.record(a.z.string(),a.z.string()).default({}),body:a.z.string().optional(),bodyBase64:a.z.string().optional()}).strict(),$p=a.z.object({id:a.z.string().trim().min(1).max(120).optional(),name:a.z.string().trim().max(160),path:a.z.string().trim().min(1).max(4096),defaultImageSelection:pi.optional(),labels:a.z.record(a.z.string(),a.z.string()).default({})}).strict(),Hp=a.z.object({name:a.z.string().trim().max(160)}).strict(),qp=a.z.object({path:a.z.string().trim().min(1).max(4096).optional(),depth:a.z.coerce.number().int().min(0).max(1).default(0)}).strict(),Vp=a.z.object({id:a.z.string().trim().min(1).max(120).optional(),name:a.z.string().trim().min(1).max(160).optional(),runtimeId:a.z.string().trim().min(1).max(120),imageSelection:pi.optional(),environmentSource:mi.optional(),projectId:a.z.string().trim().min(1).max(120).optional(),image:Ms.optional(),source:as,sourceSnapshot:a.z.record(a.z.string(),a.z.unknown()).default({}),config:a.z.object({autoImportAgentConfigs:a.z.boolean().optional(),codexConfigEnabled:a.z.boolean().optional(),codexHomeMode:a.z.enum(["default","taskhandoff"]).optional(),defaultCodexPermissionMode:nt.optional(),codexSettings:Hn.optional(),aiSessionHistoryLimit:a.z.number().int().min(1).max(500).optional(),aiSessionAttachmentRetentionDays:a.z.number().int().min(0).max(365).optional(),aiSessionMaxFileAttachmentBytes:a.z.number().int().positive().max(ge).optional()}).strict().optional(),modelSelection:po.shape.modelSelection,gitWorkspaceProvisioning:sd.optional()}).strict().superRefine((e,t)=>{e.environmentSource&&e.imageSelection&&t.addIssue({code:"custom",path:["environmentSource"],message:"environmentSource and imageSelection are mutually exclusive."}),"template"===e.environmentSource?.type&&e.image&&t.addIssue({code:"custom",path:["image"],message:"Template environment source is resolved by the node-agent and cannot include an image snapshot."}),e.gitWorkspaceProvisioning&&"local-folder"===e.source.type&&t.addIssue({code:"custom",path:["gitWorkspaceProvisioning"],message:"Git provisioning requires a Git source."})}),Bp=a.z.object({name:a.z.string().trim().min(1).max(160).optional(),config:a.z.object({autoImportAgentConfigs:a.z.boolean().optional(),codexConfigEnabled:a.z.boolean().optional(),codexHomeMode:a.z.enum(["default","taskhandoff"]).optional(),defaultCodexPermissionMode:nt.optional(),codexSettings:Hn.optional(),aiSessionHistoryLimit:a.z.number().int().min(1).max(500).optional(),aiSessionAttachmentRetentionDays:a.z.number().int().min(0).max(365).optional(),aiSessionMaxFileAttachmentBytes:a.z.number().int().positive().max(ge).optional()}).strict().optional(),modelSelection:po.shape.modelSelection.optional()}).strict(),Kp=a.z.object({id:a.z.string().trim().min(1).max(120).optional(),name:a.z.string().trim().min(1).max(160),type:a.z.enum(["docker","kubernetes","local"]),status:a.z.enum(["unknown","online","offline","degraded"]).default("unknown"),accessStrategy:a.z.enum(["node-proxy","direct-port","kubernetes-ingress","kubernetes-port-forward"]).optional(),capabilities:a.z.record(a.z.string(),a.z.unknown()).default({}),labels:a.z.record(a.z.string(),a.z.string()).default({})}).strict(),Gp=Kp.omit({id:!0}).partial().strict();function Wp(e){const t=e.authorization;return"string"==typeof t&&t.startsWith("Bearer ")?t.slice(7).trim():void 0}class Xp{operations=new Map;intents=new Map;intent(e){const t=this.intents.get(e);if(t)return t;const n={controller:new AbortController};return this.intents.set(e,n),n}invalidate(e){this.intents.get(e)?.controller.abort();const t={controller:new AbortController};return this.intents.set(e,t),t}isIntentCurrent(e,t){return this.intents.get(e)===t}signal(e,t){const n=this.intents.get(e);return n===t?n.controller.signal:AbortSignal.abort()}clearIntent(e){this.intents.delete(e)}async run(e,t){const n=this.operations.get(e)\|\|Promise.resolve();let i;const s=new Promise(e=>{i=e});this.operations.set(e,s),await n;try{return await t()}finally{i(),this.operations.get(e)===s&&this.operations.delete(e)}}}const Yp=a.z.object({gitWorkspaceProvisioning:sd.optional()}).strict().default({});class Jp{state;images;options;inFlight=new Map;abortController=new AbortController;stopped=!1;constructor(e,t,n){this.state=e,this.images=t,this.options=n}retry(e){const t=this.state.requireInstance(e);if("docker"!==this.state.requireRuntime(t.runtimeId).type\|\|!t.imageSnapshot)throw Object.assign(new Error(`Instance ${e} does not use a Docker image.`),{statusCode:400,code:"INSTANCE_IMAGE_PROVISIONING_UNSUPPORTED"});if("failed"!==t.status\|\|"failed"!==t.imageProvisioning?.phase)throw Object.assign(new Error(`Instance ${e} does not have failed image provisioning to retry.`),{statusCode:409,code:"INSTANCE_IMAGE_PROVISIONING_NOT_FAILED"});const n=ae();return this.state.controlledInstances.put(po.parse({...t,status:"provisioning",health:"unknown",imageProvisioning:{phase:"checking-image",requestedReference:t.imageSnapshot.requestedReference,generation:(t.imageProvisioning?.generation\|\|0)+1,startedAt:n,updatedAt:n},updatedAt:n}))}provision(e,t){if(this.stopped)return Promise.resolve();const n=e.imageProvisioning?.generation;if(void 0===n)return Promise.resolve();const i=`${e.id}:${n}`,s=this.inFlight.get(i);if(s)return s;const o=this.provisionGeneration(e,n,t).finally(()=>{this.inFlight.get(i)===o&&this.inFlight.delete(i)});return this.inFlight.set(i,o),o}async stop(){this.stopped=!0,this.abortController.abort(),await Promise.allSettled([...this.inFlight.values()])}async provisionGeneration(e,t,n){const i=this.currentGeneration(e.id,t,!0,e.createdAt);if(!i)return;let s,o=0,r=!1,a=Promise.resolve();try{const c=await this.images.ensure(i.imageSnapshot.requestedReference,n=>{a=a.then(async()=>{if(!s)try{await this.updatePhase(e.id,t,n,e.createdAt)}catch(e){s={error:e}}})},n=>{this.stopped\|\|(r=!0,o=n.sequence,this.publishTerminalOutput(e,t,n))},this.abortController.signal);if(await a,s)throw s.error;if(this.stopped)return;r&&this.publishFinished(e,t,o+1,"succeeded");const d=async()=>{if(this.stopped)return;const i=this.currentGeneration(e.id,t,!0,e.createdAt);if(!i)return;const s=this.state.controlledInstances.put(po.parse({...i,status:"provisioning"===i.status?"created":i.status,health:"unknown",imageSnapshot:{...i.imageSnapshot,requestedReference:c.requestedReference,resolvedDigest:c.resolvedDigest,resolvedReference:c.resolvedReference},imageProvisioning:{...i.imageProvisioning,phase:"ready",error:void 0,updatedAt:ae()},updatedAt:ae()}));this.options.sync(),this.options.diagnostic({instanceId:e.id,action:"image.provision",reference:c.requestedReference,digest:c.resolvedDigest,pulled:c.pulled},"node instance image provisioning completed"),"starting"===s.status&&await(n?.())};await(this.options.runInstanceOperation?.(e.id,d)??d())}catch(n){if(await a,s&&(n=s.error),this.stopped)return;r&&this.publishFinished(e,t,o+1,"failed");const i=n instanceof Error?n.message:String(n),c=async()=>{if(this.stopped)return;const n=this.currentGeneration(e.id,t,!1,e.createdAt);n?.imageProvisioning&&["provisioning","starting"].includes(n.status)&&(this.state.controlledInstances.put(po.parse({...n,status:"failed",health:"failed",imageProvisioning:{...n.imageProvisioning,phase:"failed",error:i,updatedAt:ae()},updatedAt:ae()})),this.options.sync(),this.options.warn({instanceId:e.id,action:"image.provision",reference:n.imageProvisioning.requestedReference,error:i},"node instance image provisioning failed"))};await(this.options.runInstanceOperation?.(e.id,c)??c())}}currentGeneration(e,t,n=!0,i){const s=this.state.controlledInstances.get(e);if(!(!s\|\|i&&s.createdAt!==i\|\|s.imageProvisioning?.generation!==t\|\|n&&!s.imageSnapshot))return s}async updatePhase(e,t,n,i){if(this.stopped)return;const s=async()=>{if(this.stopped)return;const s=this.currentGeneration(e,t,!0,i);s&&["provisioning","starting"].includes(s.status)&&(this.state.controlledInstances.put(po.parse({...s,status:"starting"===s.status?"starting":"provisioning",imageProvisioning:{...s.imageProvisioning,phase:n,error:void 0,updatedAt:ae()},updatedAt:ae()})),this.options.sync())};await(this.options.runInstanceOperation?.(e,s)??s())}eventBase(e,t){return{instanceId:e.id,generation:t,requestedReference:e.imageProvisioning.requestedReference,observedAt:ae()}}publishTerminalOutput(e,t,n){for(const[i,s]of function(e,t=6e4){const n=[];for(let i=0;i<e.length;i+=t)n.push(e.slice(i,i+t));return n}(n.data).entries())this.options.publish(Us,{...this.eventBase(e,t),sequence:1e3n.sequence+i,data:s,...n.replay?{replay:!0}:{}},e.id)}publishFinished(e,t,n,i){this.options.publish(Fs,{...this.eventBase(e,t),sequence:1e3n,outcome:i},e.id)}}const Qp=a.z.object({name:a.z.string().trim().min(1).max(160)}).strict();function Zp(e,t,n){return{code:"object"==typeof e&&e&&"code"in e&&"string"==typeof e.code?e.code:t,message:e instanceof Error?e.message:String(e),phase:n}}class em{templateOperations=new Xp;store;docker;requireInstanceValue;requireRuntimeValue;runInstanceOperationValue;privateSecretValues;isImageReferencedValue;constructor(e,t,n,i,s,o,r=()=>!1){this.store=e,this.docker=t,this.requireInstanceValue=n,this.requireRuntimeValue=i,this.runInstanceOperationValue=s,this.privateSecretValues=o,this.isImageReferencedValue=r}list(){return this.store.list()}require(e){const t=this.store.get(e);if(!t)throw Object.assign(new Error(`Environment template ${e} was not found.`),{statusCode:404,code:"ENVIRONMENT_TEMPLATE_NOT_FOUND"});return t}runTemplateOperation(e,t){return this.templateOperations.run(e,async()=>t())}async create(e,t){const n=Qp.parse(t),i=this.requireInstanceValue(e),s=this.requireRuntimeValue(i.runtimeId);if("docker"!==s.type)throw Object.assign(new Error(`Runtime ${s.name} does not support environment templates.`),{statusCode:409,code:"ENVIRONMENT_TEMPLATE_RUNTIME_UNSUPPORTED"});if(!i.runtime.containerName)throw Object.assign(new Error(`Instance ${i.id} does not have a Docker container.`),{statusCode:409,code:"ENVIRONMENT_TEMPLATE_CONTAINER_NOT_FOUND"});const o=ae(),r=Xa("envtpl"),a=`task-handoff/environment-template:${r.toLowerCase().replace(/[^a-z0-9_.-]/g,"-")}`;return this.store.put(zi.parse({id:r,name:n.name,sourceInstanceId:i.id,nodeId:i.nodeId,internalTag:a,status:"creating",createdAt:o,updatedAt:o})),this.runInstanceOperationValue(i.id,async()=>{let e,t=!1;try{const n=this.requireInstanceValue(i.id);if("docker"!==this.requireRuntimeValue(n.runtimeId).type\|\|!n.runtime.containerName)throw Object.assign(new Error(`Instance ${i.id} is no longer a valid Docker template source.`),{code:"ENVIRONMENT_TEMPLATE_SOURCE_CHANGED"});const s=this.privateSecretValues(n);await this.docker.inspectContainerConfigSecurity(n.runtime.containerName,s),e=await this.docker.commitEnvironmentTemplate(n.runtime.containerName,n.runtime.containerId,a),t=!0;const o=await this.docker.inspectEnvironmentTemplateImage(a);return await this.docker.inspectImageConfigSecurity(a,s),this.store.put(zi.parse({...this.require(r),...o,status:"ready",error:void 0,updatedAt:ae()}))}catch(n){return t&&(await this.docker.untagEnvironmentTemplate(a,e).catch(()=>!1),e&&await this.docker.garbageCollectEnvironmentTemplateImage(e).catch(()=>!1)),this.store.put(zi.parse({...this.require(r),status:"failed",error:Zp(n,"ENVIRONMENT_TEMPLATE_CREATE_FAILED","commit"),updatedAt:ae()}))}})}async delete(e){return this.runTemplateOperation(e,async()=>{const t=this.require(e);this.store.put(zi.parse({...t,status:"deleting",error:void 0,updatedAt:ae()}));try{const n=t.internalTag?await this.docker.untagEnvironmentTemplate(t.internalTag,t.imageId):void 0,i=t.imageId\|\|n;return i&&!this.isImageReferencedValue(i)&&await this.docker.garbageCollectEnvironmentTemplateImage(i),this.store.delete(e),{deleted:!0,templateId:e}}catch(e){throw this.store.put(zi.parse({...t,status:"failed",error:Zp(e,"ENVIRONMENT_TEMPLATE_DELETE_FAILED","delete"),updatedAt:ae()})),e}})}async releaseUnusedImage(e){return!this.store.list().some(t=>t.imageId===e)&&!this.isImageReferencedValue(e)&&this.docker.garbageCollectEnvironmentTemplateImage(e)}}const tm=new Set(["content-encoding","content-length","transfer-encoding"]),nm=67108864;function im(e){return Object.fromEntries([...e.entries()].filter(([e])=>!tm.has(e.toLowerCase())))}function sm(e){return e.bodyBase64?Buffer.from(e.bodyBase64,"base64"):e.body}function om(){const e=Number(process.env.TASK_HANDOFF_INSTANCE_PROXY_MAX_RESPONSE_BYTES);return Number.isSafeInteger(e)&&e>0?e:67108864}const rm="x-task-handoff-trace-id";function am(e){return e.startsWith("/")?e:`/${e}`}function cm(e,t){return e.code(502).send({error:{code:"INSTANCE_PROXY_RESPONSE_TOO_LARGE",message:`Instance response exceeds ${t} bytes.`}})}async function dm(e,t,n,i){try{return await e(t,n)}catch(e){if(n.signal?.aborted)throw e;throw i.diagnostic({instanceId:i.instanceId,action:"proxy.upstream.failed",method:i.method,path:i.path,error:e instanceof Error?e.message:String(e)},"node instance proxy upstream unavailable"),Object.assign(new Error(`Instance ${i.instanceId} web endpoint is not reachable.`),{statusCode:502,code:"INSTANCE_PROXY_UPSTREAM_UNREACHABLE",retryable:!0,cause:e})}}function lm(e,t){return Object.assign(new Error(`Instance ${e.id} has an invalid node-owned web endpoint: ${t}`),{statusCode:409,code:"NODE_INSTANCE_WEB_ENDPOINT_INVALID"})}function um(e,t){const n=t\|\|("local"===e.runtime?.kind&&e.runtime.port?`http://127.0.0.1:${e.runtime.port}`:void 0);if(!n){const t=new Error(`Instance ${e.id} does not have a web endpoint.`);throw Object.assign(t,{statusCode:409,code:"NODE_INSTANCE_WEB_ENDPOINT_MISSING"}),t}let i;try{i=new URL(n)}catch{throw lm(e,"endpoint is not a URL")}if("http:"!==i.protocol\|\|"127.0.0.1"!==i.hostname\|\|!i.port\|\|i.username\|\|i.password\|\|"/"!==i.pathname&&""!==i.pathname\|\|i.search\|\|i.hash)throw lm(e,"endpoint must be an origin-only http://127.0.0.1:<port> URL");return i.origin}const pm=a.z.object({version:a.z.literal(1),externalListener:to}).strict();function mm(e){return"all-ipv4"===e?"0.0.0.0":"127.0.0.1"}function hm(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const t=e,n=t.externalListener&&"object"==typeof t.externalListener&&!Array.isArray(t.externalListener)?t.externalListener:{},i=Object.keys(t).filter(e=>"version"!==e&&"externalListener"!==e),s=Object.keys(n).filter(e=>"bindScope"!==e&&"port"!==e);return(i.length\|\|s.length)&&console.warn(JSON.stringify({message:"unknown stored node agent runtime setting fields were ignored",filePath:"runtime-settings.json",fields:[...i,...s.map(e=>`externalListener.${e}`)]})),{version:t.version,externalListener:{bindScope:n.bindScope,port:n.port}}}async function gm(e){const t=mm(e.bindScope);return!await new Promise(t=>{const n=m.createConnection({host:"127.0.0.1",port:e.port}),i=e=>{n.removeAllListeners(),n.destroy(),t(e)};n.once("connect",()=>i(!0)),n.once("error",()=>i(!1)),n.setTimeout(250,()=>i(!1))})&&new Promise(n=>{const i=m.createServer();i.once("error",()=>n(!1)),i.listen({host:t,port:e.port,exclusive:!0},()=>i.close(()=>n(!0)))})}class fm{app;state;settings;sockets=new Set;config;source;status="error";error;onActiveListener;validateUpdate;synchronizeUpdate;updateQueue=Promise.resolve();constructor(e){this.app=e.app,this.state=e.state,this.settings=e.settings,this.config=e.config,this.source=e.source,this.onActiveListener=e.onActiveListener,this.validateUpdate=e.validateUpdate,this.synchronizeUpdate=e.synchronizeUpdate,this.app.server.on("connection",e=>{this.sockets.add(e),e.once("close",()=>this.sockets.delete(e))})}current(){return no.parse({...this.config,host:mm(this.config.bindScope),status:this.status,source:this.source,...this.error?{error:this.error}:{}})}async start(){try{await this.listen(this.config),this.status="listening",this.error=void 0,this.state.setListenerPort(this.config.port)}catch(e){throw this.status="error",this.error=e instanceof Error?e.message:String(e),this.app.log.error({host:mm(this.config.bindScope),port:this.config.port,error:this.error},"node agent TCP listener failed to start"),Object.assign(new Error(`Failed to bind node agent TCP listener at ${mm(this.config.bindScope)}:${this.config.port}: ${this.error}`),{statusCode:409,code:"NODE_AGENT_LISTENER_BIND_FAILED"})}const e=this.current();return this.onActiveListener?.(e),e}update(e){const t=this.updateQueue.then(()=>this.updateOnce(e));return this.updateQueue=t.then(()=>{},()=>{}),t}async updateOnce(e){const t=io.parse(e);if(t.bindScope===this.config.bindScope&&t.port===this.config.port)return this.current();if(t.port!==this.config.port){const e=this.state.runningInstanceCount();if(e>0&&!this.synchronizeUpdate)throw Object.assign(new Error(`Cannot change the node agent port while ${e} controlled instance(s) are running.`),{statusCode:409,code:"NODE_AGENT_LISTENER_PORT_IN_USE_BY_INSTANCES",blockingInstanceCount:e});await(this.validateUpdate?.(t))}const n=this.snapshot();await this.stop();try{await this.listen(t)}catch(e){throw await this.restore(n),Object.assign(new Error(`Failed to bind node agent TCP listener at ${mm(t.bindScope)}:${t.port}: ${e instanceof Error?e.message:String(e)}`),{statusCode:409,code:"NODE_AGENT_LISTENER_BIND_FAILED"})}this.state.setListenerPort(t.port);try{await(this.synchronizeUpdate?.(t))}catch(e){throw await this.stop(),await this.restore(n),await Promise.resolve(this.synchronizeUpdate?.(n.config)).catch(e=>{this.app.log.error({error:e instanceof Error?e.message:String(e)},"node agent listener instance endpoint rollback failed")}),Object.assign(new Error(`Failed to switch controlled instances to node agent port ${t.port}: ${e instanceof Error?e.message:String(e)}`),{statusCode:409,code:"NODE_AGENT_LISTENER_INSTANCE_SYNC_FAILED"})}try{this.settings.put({version:1,externalListener:t})}catch(e){throw await this.stop(),await this.restore(n),await Promise.resolve(this.synchronizeUpdate?.(n.config)).catch(e=>{this.app.log.error({error:e instanceof Error?e.message:String(e)},"node agent listener persistence rollback failed")}),Object.assign(new Error(`Failed to persist node agent TCP listener: ${e instanceof Error?e.message:String(e)}`),{statusCode:500,code:"NODE_AGENT_LISTENER_PERSIST_FAILED"})}this.config=t,this.source="persisted",this.status="listening",this.error=void 0;const i=this.current();return this.onActiveListener?.(i),i}async shutdown(){await this.updateQueue,await this.stop()}snapshot(){return{config:this.config,source:this.source,status:this.status,error:this.error}}async restore(e){if(this.config=e.config,this.source=e.source,this.status=e.status,this.error=e.error,"listening"===e.status)try{await this.listen(e.config)}catch(e){this.status="error",this.error=`Failed to restore previous listener: ${e instanceof Error?e.message:String(e)}`,this.app.log.error({error:this.error},"node agent TCP listener rollback failed")}this.state.setListenerPort(e.config.port),"listening"===this.status&&this.onActiveListener?.(this.current())}async listen(e){await new Promise((t,n)=>{const i=e=>{this.app.server.off("listening",s),n(e)},s=()=>{this.app.server.off("error",i),t()};this.app.server.once("error",i),this.app.server.once("listening",s),this.app.server.listen({host:mm(e.bindScope),port:e.port})})}async stop(){this.app.server.listening&&await new Promise((e,t)=>{this.app.server.close(n=>n?t(n):e());for(const e of this.sockets)e.destroy()})}}const ym="TASK_HANDOFF_NODE_AGENT_V1",Im="/api/node-tunnel";function Am(e=""){return d.createHash("sha256").update(e).digest("hex")}function _m(e,t){return d.createHmac("sha256",e).update(function(e){return[ym,e.keyId,e.method.toUpperCase(),e.pathWithQuery,e.timestamp,e.nonce,e.bodySha256].join("\n")}(t)).digest("hex")}function Em(e){const t=e.timestamp\|\|(new Date).toISOString(),n=e.nonce\|\|d.randomBytes(18).toString("base64url"),i=Am(e.body\|\|""),s=_m(e.secret,{keyId:e.keyId,method:e.method,pathWithQuery:e.pathWithQuery,timestamp:t,nonce:n,bodySha256:i});return{"x-taskhandoff-node-id":e.nodeId,"x-taskhandoff-key-id":e.keyId,"x-taskhandoff-timestamp":t,"x-taskhandoff-nonce":n,"x-taskhandoff-body-sha256":i,"x-taskhandoff-signature":s}}class wm{usedNonces=new Map;identity;nodeId;overrideSecret;overrideKeyId;nowMs;constructor(e,t,n,i,s=Date.now){this.identity=e,this.nodeId=t,this.overrideSecret=n,this.overrideKeyId=i,this.nowMs=s}hasRemoteSecrets(){return this.identity.remoteSecrets(this.overrideSecret,this.overrideKeyId).length>0}verify(e){const t=function(e){const t=new Map;for(const[n,i]of Object.entries(e)){const e=Array.isArray(i)?i.join(","):"string"==typeof i?i:void 0===i?"":String(i);t.set(n.toLowerCase(),e)}return{nodeId:t.get("x-taskhandoff-node-id")\|\|"",keyId:t.get("x-taskhandoff-key-id")\|\|"",timestamp:t.get("x-taskhandoff-timestamp")\|\|"",nonce:t.get("x-taskhandoff-nonce")\|\|"",bodySha256:t.get("x-taskhandoff-body-sha256")\|\|"",signature:t.get("x-taskhandoff-signature")\|\|""}}(e.headers);if(!t.nodeId&&!t.signature)return!1;const n="DELETE"===e.method&&"/api/node-agent/pairing/current"===e.url.split("?")[0],i=this.identity.remoteSecrets(this.overrideSecret,this.overrideKeyId,n);if(!i.length)return!1;if(t.nodeId!==this.nodeId)throw Object.assign(new Error("Invalid node agent HMAC node id."),{statusCode:401,code:"NODE_AGENT_HMAC_NODE_MISMATCH"});if(!t.keyId)throw Object.assign(new Error("Node agent HMAC key id is missing."),{statusCode:401,code:"NODE_AGENT_HMAC_KEY_MISSING"});const s=i.filter(e=>t.keyId===e.keyId);if(!s.length)throw Object.assign(new Error("Invalid node agent HMAC key id."),{statusCode:401,code:"NODE_AGENT_HMAC_KEY_INVALID"});const o=Date.parse(t.timestamp);if(!Number.isFinite(o)\|\|Math.abs(this.nowMs()-o)>6e4)throw Object.assign(new Error("Node agent HMAC timestamp is outside the allowed window."),{statusCode:401,code:"NODE_AGENT_HMAC_TIMESTAMP_INVALID"});if(!t.nonce)throw Object.assign(new Error("Node agent HMAC nonce is missing."),{statusCode:401,code:"NODE_AGENT_HMAC_NONCE_MISSING"});this.pruneNonces();const r=`${t.nodeId}:${t.keyId}:${t.nonce}`;if(this.usedNonces.has(r))throw Object.assign(new Error("Node agent HMAC nonce was already used."),{statusCode:401,code:"NODE_AGENT_HMAC_NONCE_REPLAY"});const a=Am(null==(c=e.body)?"":"string"==typeof c\|\|Buffer.isBuffer(c)?c:JSON.stringify(c));var c;if(t.bodySha256!==a)throw Object.assign(new Error("Node agent HMAC body hash mismatch."),{statusCode:401,code:"NODE_AGENT_HMAC_BODY_HASH_INVALID"});if(!s.some(n=>function(e,t){const n=Buffer.from(e,"hex"),i=Buffer.from(t,"hex");return n.length===i.length&&d.timingSafeEqual(n,i)}(t.signature,_m(n.secret,{keyId:t.keyId,method:e.method,pathWithQuery:e.url,timestamp:t.timestamp,nonce:t.nonce,bodySha256:a}))))throw Object.assign(new Error("Invalid node agent HMAC signature."),{statusCode:401,code:"NODE_AGENT_HMAC_SIGNATURE_INVALID"});return this.usedNonces.set(r,o+6e4+1),t.keyId}pruneNonces(){const e=this.nowMs();for(const[t,n]of this.usedNonces)n<=e&&this.usedNonces.delete(t)}}function Tm(e,t){console.warn(JSON.stringify({message:e,...t}))}class bm{repository;logger;constructor(e,t,n={}){const i=t&&"readIdentity"in t?t:void 0,s=i?n:t\|\|n;this.repository=i\|\|md(hl(e)).access,this.logger=s.logger\|\|Tm}read(){const e=this.repository.readIdentity();return e?$d(e,this.logger):void 0}init(){}write(e){const t=$d({...e,updatedAt:ae()},this.logger);return this.repository.writeIdentity(t)}}class Sm{values=new Map;put(e,t,n=Date.now()){this.prune(n),this.values.set(e,t)}take(e,t=Date.now()){this.prune(t);const n=this.values.get(e);return n&&this.values.delete(e),n}peek(e,t=Date.now()){return this.prune(t),this.values.get(e)}delete(e,t=Date.now()){this.prune(t);const n=this.values.get(e);return n&&this.values.delete(e),n}list(e=Date.now()){return this.prune(e),[...this.values.values()]}prune(e=Date.now()){for(const[t,n]of this.values)Date.parse(n.expiresAt)<=e&&this.values.delete(t)}}class vm{store;repository;pairingInvites=new Sm;controlPlaneConnectionOperations=new Map;constructor(e,t){this.repository=t\|\|md(hl(e)).access,this.store=new bm(e,this.repository),this.store.init(),this.recoverControlPlaneConnectionOperations()}async runControlPlaneConnectionOperation(e,t){const n=e.replace(/\/$/,""),i=this.controlPlaneConnectionOperations.get(n)\|\|Promise.resolve();let s;const o=new Promise(e=>{s=e});this.controlPlaneConnectionOperations.set(n,o),await i;try{return await t()}finally{s(),this.controlPlaneConnectionOperations.get(n)===o&&this.controlPlaneConnectionOperations.delete(n)}}resolveNodeId(e){if(e?.trim())return this.writeNodeId(e.trim()),e.trim();const t=this.store.read();if(t?.nodeId)return t.nodeId;const n=Xa("node");return this.writeNodeId(n),n}createPairingInvite(e){const t=ae(),n=new Date(Date.now()+(e.expiresInMs\|\|6e5)).toISOString(),i=Ya(),s={tokenHash:Am(i),createdAt:t,expiresAt:n,...e.controlPlaneName?{controlPlaneName:e.controlPlaneName}:{}};return this.pairingInvites.put(s.tokenHash,s),{...s,token:i}}completePairingInvite(e){const t=this.store.read()\|\|this.newIdentity(),n=Am(e.joinToken),i=this.pairingInvites.take(n);if(!i){const e=new Error("Node agent pairing invite is invalid or expired.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_PAIRING_INVITE_INVALID"}),e}const s=ae(),o={id:e.controlPlaneId\|\|Xa("cp"),keyId:Xa("key"),...e.controlPlaneName\|\|i.controlPlaneName?{name:e.controlPlaneName\|\|i.controlPlaneName}:{},secret:Ya(),pairedAt:s,updatedAt:s};return this.store.write({...t,controlPlanePairings:[...(t.controlPlanePairings\|\|[]).filter(e=>e.id!==o.id),o]}),o}stageControlPlaneConnection(e){const{pairing:t,connection:n}=this.createControlPlaneConnection(e),i=this.store.read()\|\|this.newIdentity(),s=n.url.replace(/\/$/,""),o=(i.controlPlaneConnections\|\|[]).filter(e=>e.id===n.id\|\|e.url.replace(/\/$/,"")===s),r={operationId:Xa("connection_operation"),pairing:t,connection:n,replacedConnections:o},a=ae();return this.repository.transaction(()=>{this.store.write({...i,controlPlanePairings:[...(i.controlPlanePairings\|\|[]).filter(e=>e.keyId!==t.keyId),t],controlPlaneConnections:[...(i.controlPlaneConnections\|\|[]).filter(e=>e.id!==n.id&&e.url.replace(/\/$/,"")!==s),n]}),this.repository.putOperation({id:r.operationId,kind:"create-connection",phase:"prepared",requested:r,pairingKeyId:t.keyId,connectionId:n.id,replacedConnections:o,createdAt:a,updatedAt:a})}),r}markControlPlaneConnectionRemoteAccepted(e){const t=this.repository.listOperations().find(t=>t.id===e.operationId);if(!t)throw Object.assign(new Error("Control-plane connection operation was not found."),{code:"NODE_AGENT_CONNECTION_OPERATION_NOT_FOUND",statusCode:409});this.repository.putOperation({...t,phase:"remote-accepted",updatedAt:ae()})}commitControlPlaneConnection(e,t={}){const n=this.store.read()\|\|this.newIdentity(),i={...e.pairing,...t.name?{name:t.name}:{}},s={...e.connection,...t.name?{name:t.name}:{}},o=new Set((n.controlPlaneConnections\|\|[]).map(e=>e.pairingKeyId)),r=new Set(e.replacedConnections.map(e=>e.pairingKeyId));return this.repository.transaction(()=>{this.store.write({...n,controlPlanePairings:[...(n.controlPlanePairings\|\|[]).filter(e=>e.keyId!==i.keyId&&(!r.has(e.keyId)\|\|o.has(e.keyId))),i],controlPlaneConnections:[...(n.controlPlaneConnections\|\|[]).filter(e=>e.id!==s.id),s]});const t=this.repository.listOperations().find(t=>t.id===e.operationId);t&&this.repository.putOperation({...t,phase:"committed",updatedAt:ae()}),this.repository.deleteOperation(e.operationId)}),{pairing:i,connection:s}}rollbackControlPlaneConnection(e){const t=this.store.read();if(!t)return;const n=new Set(e.replacedConnections.map(e=>e.id));this.repository.transaction(()=>{this.store.write({...t,controlPlanePairings:(t.controlPlanePairings\|\|[]).filter(t=>t.keyId!==e.pairing.keyId),controlPlaneConnections:[...(t.controlPlaneConnections\|\|[]).filter(t=>t.id!==e.connection.id&&!n.has(t.id)),...e.replacedConnections]}),this.repository.deleteOperation(e.operationId)})}recoverControlPlaneConnectionOperations(){for(const e of this.repository.listOperations(["prepared","remote-accepted"])){const t=e.requested;t?.pairing?.keyId&&t?.connection?.id?"remote-accepted"===e.phase?(this.repository.putOperation({...e,phase:"committed",updatedAt:ae()}),this.repository.deleteOperation(e.id)):this.rollbackControlPlaneConnection(t):this.repository.putOperation({...e,phase:"failed",error:{code:"NODE_AGENT_CONNECTION_OPERATION_INVALID"},updatedAt:ae()})}}createControlPlaneConnection(e){const t=ae(),n={id:Xa("cp"),keyId:Xa("key"),...e.name?{name:e.name}:{},secret:Ya(),pairedAt:t,updatedAt:t};return{pairing:n,connection:{id:Xa("connection"),pairingKeyId:n.keyId,...e.name?{name:e.name}:{},url:e.url,enabled:!1!==e.enabled,createdAt:t,updatedAt:t}}}resolvedControlPlaneAccess(){const e=this.store.read(),t=new Map((e?.controlPlanePairings\|\|[]).filter(e=>!e.revokedAt).map(e=>[e.keyId,e])),n=e?.controlPlaneConnections\|\|[];return{hasPersistedAccess:n.length>0\|\|t.size>0,connections:n.map(e=>({connection:e,pairing:t.get(e.pairingKeyId)}))}}listControlPlanePairings(e=""){return(this.store.read()?.controlPlanePairings\|\|[]).filter(e=>!e.revokedAt).map(({secret:t,...n})=>({...n,current:Boolean(e&&n.keyId===e)})).sort((e,t)=>Number(t.current)-Number(e.current)\|\|t.updatedAt.localeCompare(e.updatedAt))}listControlPlaneConnections(){return[...this.store.read()?.controlPlaneConnections\|\|[]].sort((e,t)=>t.updatedAt.localeCompare(e.updatedAt))}deleteControlPlanePairing(e,t=""){if(t&&e===t){const e=new Error("Cannot delete the pairing used to authenticate the current request.");throw Object.assign(e,{statusCode:409,code:"NODE_AGENT_PAIRING_CURRENT_REQUEST"}),e}const n=this.store.read();if(!n)return!1;if((n.controlPlaneConnections\|\|[]).some(t=>t.pairingKeyId===e))throw Object.assign(new Error("Cannot delete a pairing used by a configured control-plane connection."),{statusCode:409,code:"NODE_AGENT_PAIRING_IN_USE"});const i=(n.controlPlanePairings\|\|[]).filter(t=>t.keyId!==e);return i.length!==(n.controlPlanePairings\|\|[]).length&&(this.store.write({...n,controlPlanePairings:i}),!0)}revokeCurrentControlPlanePairing(e){if(!e)throw Object.assign(new Error("Current paired-HMAC authentication is required to revoke this pairing."),{statusCode:403,code:"NODE_AGENT_PAIRING_SELF_REVOKE_HMAC_REQUIRED"});const t=this.store.read(),n=t?.controlPlanePairings?.find(t=>t.keyId===e);if(!t\|\|!n)throw Object.assign(new Error("The current control-plane pairing no longer exists."),{statusCode:404,code:"NODE_AGENT_PAIRING_NOT_FOUND"});if(n.revokedAt)return{keyId:e,revoked:!0,revokedAt:n.revokedAt};if((t.controlPlaneConnections\|\|[]).some(t=>t.pairingKeyId===e))throw Object.assign(new Error("Cannot revoke a pairing used by a configured control-plane connection."),{statusCode:409,code:"NODE_AGENT_PAIRING_IN_USE"});const i=ae();return this.store.write({...t,controlPlanePairings:t.controlPlanePairings.map(t=>t.keyId===e?{...t,revokedAt:i,updatedAt:i}:t)}),{keyId:e,revoked:!0,revokedAt:i}}deleteControlPlaneConnection(e){const t=this.store.read();if(!t)return!1;const n=(t.controlPlaneConnections\|\|[]).filter(t=>t.id!==e);return n.length!==(t.controlPlaneConnections\|\|[]).length&&(this.store.write({...t,controlPlaneConnections:n}),!0)}remoteSecrets(e,t,n=!1){return[...(this.store.read()?.controlPlanePairings\|\|[]).filter(e=>n\|\|!e.revokedAt).map(e=>({keyId:e.keyId,secret:e.secret})),...e&&t?[{keyId:t,secret:e}]:[]]}isRevokedPairing(e){return Boolean(this.store.read()?.controlPlanePairings?.some(t=>t.keyId===e&&t.revokedAt))}reverseTunnelSecret(e,t,n){if(t&&n)return{keyId:n,secret:t};const i=this.store.read(),s=(i?.controlPlanePairings\|\|[]).filter(e=>!e.revokedAt);if(!s.length)return;if(e){const t=e.replace(/\/$/,""),n=(i?.controlPlaneConnections\|\|[]).find(e=>e.url.replace(/\/$/,"")===t),o=n&&s.find(e=>e.keyId===n.pairingKeyId);if(o)return{keyId:o.keyId,secret:o.secret}}const o=[...s].sort((e,t)=>t.updatedAt.localeCompare(e.updatedAt))[0];return o?{keyId:o.keyId,secret:o.secret}:void 0}newIdentity(){return{nodeId:this.resolveNodeId(),createdAt:ae(),updatedAt:ae(),controlPlanePairings:[],controlPlaneConnections:[]}}writeNodeId(e){const t=this.store.read();this.store.write({...t\|\|{createdAt:ae()},nodeId:e,updatedAt:ae(),controlPlanePairings:t?.controlPlanePairings\|\|[],controlPlaneConnections:t?.controlPlaneConnections\|\|[]})}}const Nm=a.z.string().trim().min(1).max(160);const Om=es.strict();function zm(e){const t=e.filter(e=>!["created","stopped","failed"].includes(e.status)),n=new Set(t.map(e=>e.id)),i=t.filter(e=>e.apps.runningCount>0\|\|e.aiSessions.runningCount>0);return{runningInstanceCount:t.length,stoppedInstanceCount:e.length-t.length,activeInstanceCount:i.length,restartInstanceCount:t.length,runningInstanceIds:t.map(e=>e.id).sort(),stoppedInstanceIds:e.filter(e=>!n.has(e.id)).map(e=>e.id).sort(),activeInstanceIds:i.map(e=>e.id).sort()}}class Cm{preflights=new Map;options;applying=!1;constructor(e){this.options=e}async check(e){const t=Ji.parse(e),n=zm(this.options.listInstances()),i=await Sl(this.options.runCommand,this.options.moduleDir),s=this.options.currentRuntimeVersion(),o=this.options.managedUpdateSupport?.(i)\|\|{supported:!0};if(!o.supported)return Qi.parse({source:"npm",channel:t.channel,currentVersion:i.currentVersion\|\|s,availableVersion:i.currentVersion\|\|s\|\|"unavailable",impact:n,updateAvailable:!1,supported:!1,reason:o.reason\|\|"Managed updates are unavailable on this node.",checkedAt:(new Date).toISOString()});const r="@task-handoff/server"===i.packageName?[...new Set([...i.relatedCurrentVersions,s])]:i.relatedCurrentVersions,a=await async function(e){const t=e.packageName\|\|"@task-handoff/node-agent",n=await async function(e,t,n){const i=function(e){return"stable"===e?"latest":e}(n),s=await e(Tl(),["view",`${t}@${i}`,"version","--json"]).catch(e=>{if(!function(e){if(!e\|\|"object"!=typeof e)return!1;const t=e,n=[t.message,t.details?.stdout,t.details?.stderr].filter(e=>"string"==typeof e).join("\n");return/\bE404\b/i.test(n)}(e))throw e});if(!s)return;const o=JSON.parse(s.stdout);if("string"!=typeof o)throw new Error(`npm did not resolve ${t}@${i} to one version.`);return o}(e.runCommand,t,e.channel);if(!n)return function(e){return Qi.parse({source:"npm",channel:e.channel,currentVersion:e.currentVersion,availableVersion:e.currentVersion\|\|"unavailable",impact:e.impact\|\|{runningInstanceCount:0,stoppedInstanceCount:0,activeInstanceCount:0,restartInstanceCount:0,runningInstanceIds:[],stoppedInstanceIds:[],activeInstanceIds:[]},updateAvailable:!1,reason:`No ${e.channel} release is currently published.`,checkedAt:ae()})}({channel:e.channel,currentVersion:e.currentVersion,impact:e.impact});const i=wl(e.currentVersion,n)\|\|(e.relatedCurrentVersions\|\|[]).some(e=>wl(e,n)),s=i?await async function(e,t,n){const i=await e(Tl(),["view",`${t}@${n}`,"dist.integrity","--json"]),s=JSON.parse(i.stdout);if("string"!=typeof s\|\|!/^sha(?:256\|384\|512)-[A-Za-z0-9+/=]+$/.test(s))throw Object.assign(new Error(`npm did not return immutable integrity metadata for ${t}@${n}.`),{statusCode:502,code:"NODE_UPDATE_PREFLIGHT_FAILED",retryable:!0});return s}(e.runCommand,t,n):void 0;return Qi.parse({source:"npm",channel:e.channel,currentVersion:e.currentVersion,availableVersion:n,...s?{artifactRef:`npm:${t}@${n}#${s}`}:{},runtimeArtifacts:e.runtimeArtifacts\|\|[],impact:e.impact\|\|{runningInstanceCount:0,stoppedInstanceCount:0,activeInstanceCount:0,restartInstanceCount:0,runningInstanceIds:[],stoppedInstanceIds:[],activeInstanceIds:[]},updateAvailable:i,checkedAt:ae()})}({channel:t.channel,currentVersion:i.currentVersion\|\|s,runCommand:this.options.runCommand,packageName:i.packageName,relatedCurrentVersions:r,impact:n});if(!a.updateAvailable)return a;const c={...a,runtimeArtifacts:await this.options.resolveRuntimeArtifacts(a.availableVersion),preflightToken:Ya()};return this.preflights.set(c.preflightToken,{result:c,expiresAt:Date.now()+6e5}),c}async apply(e){const i=Om.parse(e),s=this.preflights.get(i.preflightToken);(!s\|\|s.expiresAt<=Date.now())&&await this.consumePreflight(i),this.applying&&this.throwAlreadyRunning(),this.applying=!0;try{const{check:e,selection:s}=await this.consumePreflight(i);if(this.options.jobs.list().some(e=>!["succeeded","degraded","failed"].includes(e.status))&&this.throwAlreadyRunning(),!e.supported)throw Object.assign(new Error(e.reason\|\|"The requested update is not supported."),{statusCode:400,code:"UPDATE_UNSUPPORTED"});if(!e.updateAvailable)throw Object.assign(new Error(e.reason\|\|"No update is available for the selected channel."),{statusCode:409,code:"UPDATE_NOT_AVAILABLE"});const o=this.options.jobs.create(this.options.nodeId,e),{worker:r,packaged:a,expectedWorker:c}=function(e,i=t.existsSync){const s=[n.resolve(e,"..","bin","task-handoff-node-update-worker"),n.resolve(e,"..","..","bin","task-handoff-node-update-worker")],o=s.find(i),r=n.resolve(e,"..","..","..","..","scripts","node-update-worker.cts");return o?{worker:o,packaged:!0,expectedWorker:s[0]}:i(r)?{worker:r,packaged:!1,expectedWorker:s[0]}:{worker:void 0,packaged:!1,expectedWorker:s[0]}}(this.options.moduleDir);if(!r)throw this.options.jobs.patch(o.id,{status:"failed",rollout:{...o.rollout,phase:"failed"},error:{code:"NODE_UPDATE_FAILED",message:`Update worker was not found: ${c}`,retryable:!1},completedAt:(new Date).toISOString()}),Object.assign(new Error(`Node agent update worker was not found: ${c}`),{statusCode:500,code:"UPDATE_WORKER_NOT_FOUND"});const d=process.env.TASK_HANDOFF_CONTROL_PLANE_HEALTH_URL?.trim();try{await this.options.runCommand("systemd-run",["--unit",`task-handoff-update-${o.id}`,"--collect","--property=Type=exec",...a?[r]:[process.execPath,r],"--job-file",this.options.jobs.records.filePath(o.id),"--target-version",o.toVersion,"--npm-command",Tl(),"--install-prefix",s.installPrefix,...process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH?.trim()?["--node-agent-ipc-path",process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH.trim()]:[],...d?["--control-plane-health-url",d]:[]])}catch(e){const t=e instanceof Error?e.message:String(e);throw this.options.jobs.patch(o.id,{status:"failed",rollout:{...o.rollout,phase:"failed"},error:{code:"NODE_UPDATE_FAILED",message:`Failed to launch the node update worker: ${t}`,retryable:!0},completedAt:(new Date).toISOString()}),Object.assign(new Error(`Failed to launch the node update worker: ${t}`),{statusCode:500,code:"NODE_UPDATE_WORKER_LAUNCH_FAILED",cause:e})}return await this.waitForWorkerClaim(o)}finally{this.applying=!1}}async consumePreflight(e){const t=this.preflights.get(e.preflightToken);if(this.preflights.delete(e.preflightToken),!t\|\|t.expiresAt<=Date.now())throw Object.assign(new Error("The update preflight is missing or expired. Check for updates again."),{statusCode:409,code:"UPDATE_PREFLIGHT_EXPIRED"});const n=t.result,i=await Sl(this.options.runCommand,this.options.moduleDir);n.channel===e.channel&&n.availableVersion===e.targetVersion&&n.currentVersion===(i.currentVersion\|\|this.options.currentRuntimeVersion())&&!0===n.artifactRef?.startsWith(`npm:${i.packageName}@`)&&JSON.stringify(n.impact)===JSON.stringify(zm(this.options.listInstances()))\|\|this.throwStale();const s=await this.options.resolveRuntimeArtifacts(n.availableVersion);return JSON.stringify(n.runtimeArtifacts)!==JSON.stringify(s)&&this.throwStale(),{check:n,selection:i}}throwStale(){throw Object.assign(new Error("The update target or affected instances changed after preflight. Check for updates again."),{statusCode:409,code:"UPDATE_PREFLIGHT_STALE"})}throwAlreadyRunning(){throw Object.assign(new Error("Another server update is already running on this node."),{statusCode:409,code:"SERVER_UPDATE_ALREADY_RUNNING"})}async waitForWorkerClaim(e){const t=this.options.workerClaimTimeoutMs??5e3,n=this.options.workerClaimPollMs??50,i=Date.now()+t;for(;Date.now()<=i;){const t=this.options.jobs.records.get(e.id);if(!t)throw Object.assign(new Error(`Update job ${e.id} disappeared before the worker claimed it.`),{statusCode:500,code:"UPDATE_JOB_NOT_FOUND"});if("queued"!==t.status)return t;if(Date.now()>=i)break;await new Promise(e=>setTimeout(e,Math.max(1,Math.min(n,i-Date.now()))))}const s=this.options.jobs.records.get(e.id);if("queued"!==s?.status)return s\|\|e;throw this.options.jobs.patch(e.id,{status:"failed",rollout:{...s.rollout,phase:"failed"},error:{code:"NODE_UPDATE_FAILED",message:"The node update worker did not claim the queued job after systemd accepted it.",retryable:!0},completedAt:(new Date).toISOString()}),Object.assign(new Error("The node update worker did not start after systemd accepted the update job."),{statusCode:500,code:"NODE_UPDATE_WORKER_START_TIMEOUT"})}}const Rm=new Set(["provisioning","starting","registering","registered","running"]);function xm(e){return Rm.has(e.status)&&!Ma(e)}function km(e){return po.parse({...e,health:"unknown",connectionStatus:"offline",agentStatus:"offline",targetStatus:"unknown",uiAccessStatus:"unknown",target:{...e.target,status:"unknown"},updatedAt:ae()})}class Dm{options;restoredInstances=new Set;restoreErrors=new Map;unexpectedExitRetries=new Map;suppressedInstances=new Set;pendingUnexpectedExits=new Map;activeRestores=new Map;timer;activeCycle;cycleRequested=!1;cycleRequestDelayMs;started=!1;stopped=!1;constructor(e){this.options=e}markRestored(e){const t=this.options.state.requireInstance(e);return!["failed","stopping","stopped"].includes(t.status)&&!Ma(t)&&(this.restoredInstances.add(e),this.restoreErrors.delete(e),!0)}allowRecovery(e){this.suppressedInstances.delete(e);const t=this.pendingUnexpectedExits.get(e);void 0!==t&&(this.pendingUnexpectedExits.delete(e),this.applyUnexpectedLocalExit(e,t))}completeSuppressedOperation(e){this.pendingUnexpectedExits.delete(e),this.restoredInstances.delete(e),this.restoreErrors.delete(e),this.unexpectedExitRetries.delete(e)}forgetInstance(e){this.restoredInstances.delete(e),this.restoreErrors.delete(e),this.unexpectedExitRetries.delete(e),this.suppressedInstances.delete(e),this.activeRestores.delete(e),this.pendingUnexpectedExits.delete(e)}async suppressRecovery(e){this.suppressedInstances.add(e),await(this.activeRestores.get(e)?.catch(()=>{}))}handleUnexpectedLocalExit(e,t){this.stopped\|\|(this.suppressedInstances.has(e)?this.pendingUnexpectedExits.set(e,t):this.applyUnexpectedLocalExit(e,t))}applyUnexpectedLocalExit(e,t){const n=this.options.state.requireInstance(e);if("local"!==this.options.state.requireRuntime(n.runtimeId).type)return;this.restoredInstances.delete(e);const i=this.options.nowMs?.()??Date.now(),s=this.unexpectedExitRetries.get(e),o=this.options.crashStableWindowMs??3e4,r=s&&i-s.lastExitAt<o?s.attempt+1:1;this.unexpectedExitRetries.set(e,{attempt:r,lastExitAt:i});const a=this.options.retryBaseDelayMs??1e3,c=1===r?0:Math.min(this.options.retryMaxDelayMs??3e4,a2Math.min(r-2,10)),d=t instanceof Error?t.message:String(t);this.restoreErrors.set(e,{message:d,attempt:r,nextAttemptAt:i+c}),this.options.state.applyInstanceLifecycle(e,{type:"runtime-exited",error:t}),this.requestCycle(c)}async restoreManagedInstances(){if(this.stopped)return;const{state:e}=this.options;for(const t of e.listInstances()){if(this.stopped)return;"docker"===e.requireRuntime(t.runtimeId).type&&["provisioning","starting"].includes(t.status)&&"ready"!==t.imageProvisioning?.phase&&this.options.provisionImage(t)}const t=e.listInstances().filter(t=>{if(this.restoredInstances.has(t.id))return!1;if(this.suppressedInstances.has(t.id))return!1;const n=e.requireRuntime(t.runtimeId);if("local"===n.type){const e=this.restoreErrors.get(t.id);return(Rm.has(t.status)\|\|"failed"===t.status)&&(!e\|\|e.nextAttemptAt<=(this.options.nowMs?.()??Date.now()))}return"docker"===n.type&&xm(t)});await Promise.all(t.map(async t=>{if(this.stopped)return;const n=async()=>{if(this.stopped)return;const n=e.listInstances().find(e=>e.id===t.id);if(!n)return;if(!this.isRestoreCandidate(n))return;const i=this.restoreErrors.get(n.id);try{const t=this.options.restoreInstance(n.id);this.activeRestores.set(n.id,t);try{await t}finally{this.activeRestores.get(n.id)===t&&this.activeRestores.delete(n.id)}if(this.stopped\|\|this.suppressedInstances.has(n.id))return;if(await this.options.autoImport(e.requireInstance(n.id)),this.stopped\|\|this.suppressedInstances.has(n.id))return;if(this.restoreErrors.get(n.id)!==i)return;if(!this.markRestored(n.id))throw new Error(`Restored instance ${n.id} did not reach a recoverable running state.`)}catch(t){if(this.stopped\|\|this.suppressedInstances.has(n.id))return;"local"===e.requireRuntime(n.runtimeId).type&&e.applyInstanceLifecycle(n.id,{type:"start-failed",error:t});const i=t instanceof Error?t.message:String(t),s=this.restoreErrors.get(n.id),o=(s?.attempt??0)+1,r=this.options.retryBaseDelayMs??1e3,a=Math.min(this.options.retryMaxDelayMs??3e4,r2*Math.min(o-1,10)),c=(this.options.nowMs?.()??Date.now())+a;this.restoreErrors.set(n.id,{message:i,attempt:o,nextAttemptAt:c}),s?.message===i&&s.attempt===o\|\|this.options.warn({instanceId:n.id,action:"restore",runtimeId:n.runtimeId,error:i,attempt:o,nextAttemptAt:new Date(c).toISOString()},"node instance restore failed; recovery will retry")}};await(this.options.runInstanceOperation?.(t.id,n)??n())}))}isRestoreCandidate(e){if(this.restoredInstances.has(e.id)\|\|this.suppressedInstances.has(e.id))return!1;const t=this.options.state.requireRuntime(e.runtimeId);if("local"===t.type){const t=this.restoreErrors.get(e.id);return(Rm.has(e.status)\|\|"failed"===e.status)&&(!t\|\|t.nextAttemptAt<=(this.options.nowMs?.()??Date.now()))}return"docker"===t.type&&xm(e)}async recoverManagedInstances(){if(this.stopped)return;const{state:e,convergence:t}=this.options,n=e.listInstances().filter(e=>this.options.usesManagedArtifact(e)&&!t.isRunning(e.id)&&(this.restoredInstances.has(e.id)\|\|"unknown"!==e.target.status)&&(!e.ready\|\|"matched"!==e.runtimeVersion?.phase)&&!Ma(e)&&!["created","stopped","failed","provisioning","stopping"].includes(e.status));await Promise.all(n.map(async e=>{if(!this.stopped)try{await t.schedule(e.id)}catch(t){this.options.error({instanceId:e.id,error:t},"runtime convergence recovery failed")}}))}start(){this.started\|\|this.stopped\|\|(this.started=!0,this.runAndContinue())}async stop(){this.stopped=!0,this.timer&&clearTimeout(this.timer),this.timer=void 0;const e=this.options.stopImageProvisioning(),t=this.options.state.listInstances().map(e=>this.options.convergence.cancel(e.id));await Promise.all(t),await this.activeCycle,await e,await this.options.runtimeAdapters.stopAll();for(const e of this.options.state.listInstances())"local"===this.options.state.requireRuntime(e.runtimeId).type&&this.options.state.controlledInstances.put(km(e))}async runCycle(){await this.restoreManagedInstances(),this.stopped\|\|await this.recoverManagedInstances()}runAndContinue(){if(this.stopped)return;const e=this.runCycle().catch(e=>this.options.error({error:e},"node agent startup recovery cycle failed"));this.activeCycle=e,e.finally(()=>{this.activeCycle===e&&(this.activeCycle=void 0),this.cycleRequested?(this.cycleRequested=!1,this.cycleRequestDelayMs=void 0,this.scheduleNext()):this.scheduleNext()})}scheduleNext(){if(this.stopped)return;const e=this.options.nowMs?.()??Date.now(),t=new Map(this.options.state.listInstances().map(e=>[e.id,e])),n=[...this.restoreErrors.entries()].reduce((e,[n,i])=>{const s=t.get(n);return!s\|\|this.restoredInstances.has(n)\|\|this.suppressedInstances.has(n)\|\|"local"!==this.options.state.requireRuntime(s.runtimeId).type?e:Rm.has(s.status)\|\|"failed"===s.status?Math.min(e,i.nextAttemptAt):e},Number.POSITIVE_INFINITY),i=Math.min(this.options.intervalMs??1e4,Math.max(0,n-e));this.timer=setTimeout(()=>{this.timer=void 0,this.runAndContinue()},i),this.timer.unref?.()}requestCycle(e=0){if(this.started&&!this.stopped){if(this.activeCycle)return this.cycleRequested=!0,void(this.cycleRequestDelayMs=void 0===this.cycleRequestDelayMs?e:Math.min(this.cycleRequestDelayMs,e));this.timer&&clearTimeout(this.timer),this.timer=setTimeout(()=>{this.timer=void 0,this.runAndContinue()},e),this.timer.unref?.()}}}const Pm=new Set(["DELETE","GET","HEAD","PATCH","POST","PUT","OPTIONS"]);function Lm(e){return"string"==typeof e&&Pm.has(e.toUpperCase())?e.toUpperCase():"GET"}function Mm(e,t){const n=new URL(t.tunnelUrl);n.searchParams.set("nodeId",t.nodeId);const i=t.secret?Em({nodeId:t.nodeId,keyId:t.keyId,secret:t.secret,method:"GET",pathWithQuery:`${n.pathname}${n.search}`}):{},s=new p(n,{headers:i}),o=new Map,r=new Map,a=new Map;let c;s.on("error",i=>{e.log.warn({nodeId:t.nodeId,tunnelUrl:`${n.origin}${n.pathname}`,error:i instanceof Error?i.message:String(i)},"node agent reverse tunnel connection failed")});const d=e=>{const n=e.startsWith("/")?e:`/${e}`,i="function"==typeof t.port?t.port():t.port,s=new URL(`/api/node-agent${n}`,`http://127.0.0.1:${i}`);return s.protocol="ws:",s},l=(e,n,i,s={})=>{const o=e.startsWith("/")?e:`/${e}`;return{...s,...t.secret&&t.keyId?Em({nodeId:t.nodeId,keyId:t.keyId,secret:t.secret,method:n,pathWithQuery:`/api/node-agent${o}`,body:i}):t.token?{authorization:`Bearer ${t.token}`}:{}}},u=e=>t.secret?Em({nodeId:t.nodeId,keyId:t.keyId,secret:t.secret,method:"GET",pathWithQuery:`${e.pathname}${e.search}`}):{},m=(e,t,n)=>{const i=o.get(e);o.delete(e),i?.upstream&&L(i.upstream,t,n),i?.tunnel&&L(i.tunnel,t,n)},h=(e,t,n=!1)=>new Promise((i,s)=>{e.send(t,{binary:n,compress:!1},e=>e?s(e):i())});s.on("open",()=>{s.send(JSON.stringify({type:"node-agent.identify",nodeId:t.nodeId,serverTime:(new Date).toISOString()})),c=e.nodeAgentEventForwarder?.addOutput(s,{legacyFallbackMs:1e3})}),s.on("close",()=>{for(const e of o.keys())m(e,1001,"Reverse tunnel disconnected.");for(const[e,t]of r)r.delete(e),t.controller.abort(),L(t.tunnel,1001,"Reverse tunnel disconnected.");for(const[e,t]of a)a.delete(e),t.abort();c?.(),c=void 0});return s.on("message",i=>{(async i=>{let c;try{c=JSON.parse(String(i))}catch{return void s.send(JSON.stringify({type:"node-agent.error",code:"INVALID_JSON"}))}const g=c&&"object"==typeof c?c:{};if("control-plane.event-subscribe"!==g.type){if("control-plane.http.open"===g.type){const i="string"==typeof g.streamId?g.streamId:"",o="string"==typeof g.route&&g.route.startsWith("/")?g.route:"/health",a=g.init&&"object"==typeof g.init?g.init:{},c=a.headers&&"object"==typeof a.headers?a.headers:{},d=Lm(a.method);let m;try{m=ni(a.body)}catch(n){return e.log.warn({nodeId:t.nodeId,messageType:g.type,streamId:i,error:n instanceof Error?n.message:String(n)},"node agent reverse tunnel request body rejected"),void s.send(JSON.stringify({type:"node-agent.error",code:"NODE_TUNNEL_REQUEST_BODY_INVALID",streamId:i}))}const f=new AbortController,y=(e=>{const t=new URL(n);return t.pathname=`${t.pathname.replace(/\/$/,"")}/http-streams/${encodeURIComponent(e)}`,t})(i),I=new p(y,{headers:u(y)});return r.set(i,{tunnel:I,controller:f}),I.on("open",async()=>{try{const e=await fetch((e=>{const n=e.startsWith("/")?e:`/${e}`,i="function"==typeof t.port?t.port():t.port;return new URL(`/api/node-agent${n}`,`http://127.0.0.1:${i}`)})(o),{method:d,headers:l(o,d,m,c),body:Buffer.isBuffer(m)?new Uint8Array(m):m,signal:f.signal});if(await h(I,JSON.stringify({type:"node-agent.http.head",streamId:i,status:e.status,headers:Object.fromEntries(e.headers.entries())})),e.body){const t=e.body.getReader();for(;;){const{done:e,value:n}=await t.read();if(e)break;await h(I,Buffer.from(n),!0)}}await h(I,JSON.stringify({type:"node-agent.http.end",streamId:i})),I.close(1e3,"HTTP stream completed.")}catch(e){I.readyState===p.OPEN&&(await h(I,JSON.stringify({type:"node-agent.http.error",streamId:i,message:e instanceof Error?e.message:String(e)})).catch(()=>{}),I.close(1011,"HTTP stream failed."))}finally{r.delete(i)}}),I.on("close",()=>{f.abort(),r.delete(i)}),void I.on("error",()=>f.abort())}if("control-plane.http.cancel"===g.type){const e="string"==typeof g.streamId?g.streamId:"",t=r.get(e);if(!t)return;return r.delete(e),t.controller.abort(),void L(t.tunnel,1e3,"string"==typeof g.reason?g.reason:"HTTP stream canceled.")}if("control-plane.websocket.open"===g.type){const e="string"==typeof g.streamId?g.streamId:"",t="string"==typeof g.route?g.route:"",i=Array.isArray(g.protocols)?g.protocols.filter(e=>"string"==typeof e):void 0;try{const r=l(t,"GET",void 0),a=i?.length?new p(d(t),i,{headers:r}):new p(d(t),{headers:r}),c=(e=>{const t=new URL(n);return t.pathname=`${t.pathname.replace(/\/$/,"")}/streams/${encodeURIComponent(e)}`,t})(e),m=new p(c,{headers:u(c)});o.set(e,{upstream:a,tunnel:m,close:(e=1e3,t="")=>{L(a,e,t),L(m,e,t)}}),a.on("open",()=>{s.send(JSON.stringify({type:"node-agent.websocket.open",streamId:e,protocol:a.protocol}))}),j(m,a,{pendingFrameLimit:256,upstreamOpenTimeoutMs:1e4,onClientClose:()=>{o.delete(e)},onClientError:t=>{o.delete(e),s.send(JSON.stringify({type:"node-agent.websocket.error",streamId:e,message:t instanceof Error?t.message:String(t)}))},onUpstreamClose:(t,n)=>{o.delete(e);const i=P(t),r=D(n);s.send(JSON.stringify({type:"node-agent.websocket.close",streamId:e,...void 0===i?{}:{code:i},...r?{reason:r}:{}}))},onUpstreamError:t=>{o.delete(e),s.send(JSON.stringify({type:"node-agent.websocket.error",streamId:e,message:t instanceof Error?t.message:String(t)}))}})}catch(t){s.send(JSON.stringify({type:"node-agent.websocket.error",streamId:e,message:t instanceof Error?t.message:String(t)}))}return}if("control-plane.websocket.close"===g.type){const e="string"==typeof g.streamId?g.streamId:"";return void m(e,"number"==typeof g.code?g.code:1e3,"string"==typeof g.reason?g.reason:"")}if("control-plane.request.cancel"===g.type){const e="string"==typeof g.requestId?g.requestId:"";return a.get(e)?.abort(),void a.delete(e)}if("control-plane.request"===g.type){const n="string"==typeof g.requestId?g.requestId:"",i=g.init&&"object"==typeof g.init?g.init:{},o="string"==typeof g.route&&g.route.startsWith("/")?g.route:"/health",r=i.headers&&"object"==typeof i.headers?i.headers:{},c=Lm(i.method);let d;try{d=ni(i.body)}catch(i){return e.log.warn({nodeId:t.nodeId,messageType:g.type,requestId:n,error:i instanceof Error?i.message:String(i)},"node agent reverse tunnel request body rejected"),void s.send(JSON.stringify({type:"node-agent.response",requestId:n,status:400,error:{code:"NODE_TUNNEL_REQUEST_BODY_INVALID",message:"Reverse tunnel request body does not match the negotiated protocol."}}))}const u=new AbortController;a.set(n,u);try{const t=await e.inject({method:c,url:`/api/node-agent${o}`,headers:l(o,c,d,r),payload:d,signal:u.signal});if(u.signal.aborted)return;s.send(JSON.stringify({type:"node-agent.response",requestId:n,status:t.statusCode,headers:t.headers,body:t.body}))}catch(e){if(u.signal.aborted)return;s.send(JSON.stringify({type:"node-agent.response",requestId:n,status:502,error:{code:"NODE_AGENT_REVERSE_INJECT_FAILED",message:e instanceof Error?e.message:String(e)}}))}finally{a.delete(n)}}}else e.nodeAgentEventForwarder?.setOutputSubscription?.(s,g.aiSessionTransient,g.eventEnvelopeVersion,g.aiSessionHierarchy)})(i).catch(n=>{e.log.warn({nodeId:t.nodeId,error:n instanceof Error?n.message:String(n)},"node agent reverse tunnel message rejected");try{s.send(JSON.stringify({type:"node-agent.error",code:"INVALID_TUNNEL_MESSAGE"}))}catch{}})}),s}function jm(e,t){return Number.isFinite(e)&&Number(e)>0?Number(e):t}function Um(e){if(!e.length)return;const t=[...e].sort((e,t)=>e-t);return t[Math.ceil(.95t.length)-1]}function Fm(e){return e.unref?.(),e}class $m{connectTimeoutMs;handshakeTimeoutMs;heartbeatIntervalMs;heartbeatTimeoutMs;heartbeatMissThreshold;stableThresholdMs;now;setTimeoutFn;clearTimeoutFn;ping;onTimeout;onStable;onPhase;connectTimer;handshakeTimer;heartbeatTimer;stableTimer;awaitingPongSince;consecutiveHeartbeatMisses=0;stable=!1;stopped=!1;currentPhase="connecting";lastActivityAt;lastPongAt;pingRttMs;recentPingRttMs=[];constructor(e){this.connectTimeoutMs=jm(e.connectTimeoutMs,1e4),this.handshakeTimeoutMs=jm(e.handshakeTimeoutMs,1e4),this.heartbeatIntervalMs=jm(e.heartbeatIntervalMs,25e3),this.heartbeatTimeoutMs=jm(e.heartbeatTimeoutMs,15e3),this.heartbeatMissThreshold=Math.max(1,Math.floor(jm(e.heartbeatMissThreshold,2))),this.stableThresholdMs=jm(e.stableThresholdMs,6e4),this.now=e.now\|\|Date.now,this.setTimeoutFn=e.setTimeoutFn\|\|setTimeout,this.clearTimeoutFn=e.clearTimeoutFn\|\|clearTimeout,this.ping=e.ping,this.onTimeout=e.onTimeout,this.onStable=e.onStable,this.onPhase=e.onPhase}get phase(){return this.currentPhase}start(){this.stopped=!1,this.setPhase("connecting"),this.clearTimer("connectTimer"),this.connectTimer=Fm(this.setTimeoutFn(()=>this.timeout("connect"),this.connectTimeoutMs))}opened(){this.stopped\|\|(this.clearTimer("connectTimer"),this.setPhase("handshaking"),this.handshakeTimer=Fm(this.setTimeoutFn(()=>this.timeout("handshake"),this.handshakeTimeoutMs)),this.scheduleHeartbeat(this.heartbeatIntervalMs))}healthy(){this.stopped\|\|(this.clearTimer("handshakeTimer"),this.activity(),this.setPhase("healthy"),this.stable\|\|this.stableTimer\|\|(this.stableTimer=Fm(this.setTimeoutFn(()=>{this.stableTimer=void 0,this.stopped\|\|"healthy"!==this.currentPhase\|\|(this.stable=!0,this.onStable?.())},this.stableThresholdMs))))}activity(){this.stopped\|\|(this.lastActivityAt=this.now(),this.awaitingPongSince=void 0,this.consecutiveHeartbeatMisses=0,"handshaking"!==this.currentPhase&&"healthy"!==this.currentPhase\|\|this.scheduleHeartbeat(this.heartbeatIntervalMs))}pong(){if(this.stopped)return;const e=this.now();void 0!==this.awaitingPongSince&&(this.pingRttMs=Math.max(0,e-this.awaitingPongSince),this.recentPingRttMs.push(this.pingRttMs),this.recentPingRttMs.length>20&&this.recentPingRttMs.shift()),this.awaitingPongSince=void 0,this.consecutiveHeartbeatMisses=0,this.lastPongAt=e,this.lastActivityAt=e,this.scheduleHeartbeat(this.heartbeatIntervalMs)}close(){this.stopped\|\|(this.stopped=!0,this.clearTimers(),this.awaitingPongSince=void 0,this.setPhase("closed"))}diagnostics(){return{phase:this.currentPhase,stable:this.stable,...void 0===this.pingRttMs?{}:{pingRttMs:this.pingRttMs},...this.recentPingRttMs.length?{pingRttP95Ms:Um(this.recentPingRttMs)}:{},...void 0===this.lastActivityAt?{}:{lastActivityAt:new Date(this.lastActivityAt).toISOString()},...void 0===this.lastPongAt?{}:{lastPongAt:new Date(this.lastPongAt).toISOString()},...this.consecutiveHeartbeatMisses?{consecutiveHeartbeatMisses:this.consecutiveHeartbeatMisses}:{}}}scheduleHeartbeat(e){this.stopped\|\|(this.clearTimer("heartbeatTimer"),this.heartbeatTimer=Fm(this.setTimeoutFn(()=>{if(this.heartbeatTimer=void 0,!this.stopped){if(void 0!==this.awaitingPongSince){const e=Math.max(0,this.now()-this.awaitingPongSince);return e>=this.heartbeatTimeoutMs?(this.consecutiveHeartbeatMisses+=1,this.awaitingPongSince=void 0,this.consecutiveHeartbeatMisses>=this.heartbeatMissThreshold?void this.timeout("heartbeat"):void this.sendHeartbeatProbe()):void this.scheduleHeartbeat(this.heartbeatTimeoutMs-e)}this.sendHeartbeatProbe()}},e)))}sendHeartbeatProbe(){this.awaitingPongSince=this.now();try{this.ping()}catch{if(this.consecutiveHeartbeatMisses+=1,this.awaitingPongSince=void 0,this.consecutiveHeartbeatMisses>=this.heartbeatMissThreshold)return void this.timeout("heartbeat")}this.scheduleHeartbeat(this.heartbeatTimeoutMs)}timeout(e){this.stopped\|\|(this.clearTimers(),this.setPhase("failed"),this.onTimeout(e))}setPhase(e){this.currentPhase!==e&&(this.currentPhase=e,this.onPhase?.(e))}clearTimers(){this.clearTimer("connectTimer"),this.clearTimer("handshakeTimer"),this.clearTimer("heartbeatTimer"),this.clearTimer("stableTimer")}clearTimer(e){const t=this[e];t&&this.clearTimeoutFn(t),this[e]=void 0}}function Hm(e){const t=new URL(Im,e);return t.protocol="https:"===t.protocol?"wss:":"ws:",t.toString()}const qm=new Set(["linux","darwin","win32","freebsd","openbsd","aix","sunos"]);function Vm(e){return qm.has(e)?e:"unknown"}function Bm(e){return!0===e.managedArtifacts}class Km{managedArtifacts=!0;executor;runCommand;platform;arch;constructor(e,t,n,i){this.executor=e,this.runCommand=t,this.platform=n,this.arch=i}artifactTarget(e){return this.executor.inspectRuntimeTarget(e?.instance.runtime.containerName)}resolveInstanceWeb(e){return this.executor.resolveInstanceWeb(e)}async installRuntime(e,t){const n=e.instance.runtime.containerName;if(!n)throw Object.assign(new Error(`Instance ${e.instance.id} does not have a Docker container.`),{code:"INSTANCE_RUNTIME_INSTALL_FAILED"});await this.executor.installRuntimeReleaseWithRecovery({containerName:n,expectedContainerId:e.instance.runtime.containerId,artifactPath:t.archivePath,identity:t.identity})}async inspectRuntime(e,t){const n=e.instance.runtime.containerName;if(!n)return!1;const i=function(e,t){return e.packageName===t.packageName&&e.version===t.version&&e.platform===t.platform&&e.arch===t.arch&&e.formatVersion===t.formatVersion&&e.launcherAbi===t.launcherAbi&&e.entrypoint===t.entrypoint&&e.sha256===t.sha256}(await this.executor.inspectRuntimeVersion(n),t),s=e.instance.runtime.labels["task-handoff.bootstrap-backup"];return i&&s&&await this.executor.removeBootstrapBackup(s,e.instance.id),i}start(e){return this.executor.start(e)}stop(e){return this.executor.stop(e)}restart(e){return this.executor.restart(e,e.instance.runtime.containerId)}delete(e,t){return this.executor.delete(e,t)}async check(e){try{const t=(await this.runCommand("docker",["version","--format","{{.Server.Version}}"],{timeoutMs:5e3})).stdout.trim();return{status:"online",capabilities:{...e.capabilities,daemon:{status:"online",hostPlatform:Vm(this.platform),...t?{serverVersion:t}:{}}}}}catch(t){return{status:"offline",capabilities:{...e.capabilities,daemon:{status:"offline",hostPlatform:Vm(this.platform),error:t instanceof Error?t.message:String(t)}}}}}}class Gm{docker;local;constructor(e,t){this.docker=e,this.local=t}forRuntime(e){if("docker"===e.type)return this.docker;if("local"===e.type)return this.local;throw Object.assign(new Error(`Runtime type ${e.type} is not supported by this node agent.`),{statusCode:400,code:"NODE_RUNTIME_TYPE_UNSUPPORTED"})}managedAdapters(){return[this.docker,this.local].filter(Bm)}async stopAll(){await(this.local.stopAll?.())}}const Wm="task-handoff.local-process-nonce",Xm=1e3,Ym=1e4,Jm=2e3;function Qm(e,t){try{e?.(t)}catch{}}function Zm(e){return e.runtime.port?`http://127.0.0.1:${e.runtime.port}`:void 0}async function eh(e,t){try{const n=await fetch(`${e}/api/internal/node-agent/process-identity`,{headers:{authorization:`Bearer ${t}`},signal:AbortSignal.timeout(Xm)});if(!n.ok)return;const i=(await n.json()).data;if("string"!=typeof i?.instanceId\|\|"number"!=typeof i.pid\|\|"string"!=typeof i.processNonce)return;return{instanceId:i.instanceId,pid:i.pid,processNonce:i.processNonce,startIdentity:"string"==typeof i.startIdentity?i.startIdentity:void 0}}catch{return}}async function th(e,t){if($.processStartIdentity(e)!==t)return!1;try{process.kill(e,"SIGTERM")}catch{return!0}const n=Date.now()+Ym;for(;Date.now()<n;){try{process.kill(e,0)}catch{return!0}await new Promise(e=>setTimeout(e,50))}try{process.kill(e,"SIGKILL")}catch{}const i=Date.now()+Jm;for(;Date.now()<i;){try{process.kill(e,0)}catch{return!0}await new Promise(e=>setTimeout(e,50))}return!1}function nh(e,t){return Object.assign(new Error(t),{statusCode:503,code:"LOCAL_INSTANCE_STOP_UNCONFIRMED",instanceId:e.id})}async function ih(e){return!await function(e){return new Promise(t=>{const n=m.createConnection({host:"127.0.0.1",port:e}),i=e=>{n.removeAllListeners(),n.destroy(),t(e)};n.once("connect",()=>i(!0)),n.once("error",()=>i(!1)),n.setTimeout(250,()=>i(!1))})}(e)&&new Promise(t=>{const n=m.createServer();n.once("error",()=>t(!1)),n.listen({host:"127.0.0.1",port:e,exclusive:!0},()=>n.close(()=>t(!0)))})}const sh=ih;function oh(e,t){return null!==e.exitCode\|\|null!==e.signalCode?Promise.resolve(!0):new Promise(n=>{const i=setTimeout(()=>{e.off("exit",s),n(null!==e.exitCode\|\|null!==e.signalCode)},t);i.unref();const s=()=>{clearTimeout(i),n(!0)};e.once("exit",s)})}async function rh(e,t=1e4,n=2e3,i){if(await oh(e,t))return;Qm(i,{stage:"graceful-timeout",pid:e.pid,timeoutMs:t});let s=!1;if(null===e.exitCode&&null===e.signalCode&&(e.kill("SIGKILL"),s=!0,Qm(i,{stage:"force-signal-sent",pid:e.pid,signal:"SIGKILL"})),!await oh(e,n))throw Qm(i,{stage:"force-exit-unconfirmed",pid:e.pid,signal:"SIGKILL",timeoutMs:n}),Object.assign(new Error(`Controlled instance process pid=${e.pid??"unknown"} did not exit after SIGKILL.`),{statusCode:503,code:"LOCAL_INSTANCE_PROCESS_EXIT_UNCONFIRMED",pid:e.pid});s&&Qm(i,{stage:"force-exit-confirmed",pid:e.pid,signal:"SIGKILL"})}class ah{children=new Map;readyChildren=new WeakSet;expectedExits=new WeakSet;lifecycleReporters=new WeakMap;lockPath;onUnexpectedExit;onUnexpectedExitError;constructor(e,t,n){this.lockPath=e,this.onUnexpectedExit=t,this.onUnexpectedExitError=n}track(e,t,n){this.children.set(e,t),n&&this.lifecycleReporters.set(t,n),t.once("exit",(n,i)=>{if(this.release(e,t),this.readyChildren.has(t)&&!this.expectedExits.has(t)){const s={instanceId:e,pid:t.pid,code:n,signal:i},o=e=>{try{this.onUnexpectedExitError?.(e,s)}catch{}};try{Promise.resolve(this.onUnexpectedExit?.(s)).catch(o)}catch(e){o(e)}}}),t.unref()}markReady(e,t){return this.children.get(e)===t&&null===t.exitCode&&null===t.signalCode&&(this.readyChildren.add(t),!0)}release(e,t){this.children.get(e)===t&&this.children.delete(e)}async stop(e){const t=this.children.get(e.id);if(t){this.expectedExits.add(t);const n=this.lifecycleReporters.get(t);return t.killed\|\|(t.kill("SIGTERM"),Qm(n,{stage:"graceful-signal-sent",pid:t.pid,signal:"SIGTERM"})),this.children.delete(e.id),void await rh(t,Ym,Jm,n)}const i=await async function(e){const t=Zm(e),n=e.runtime.labels?.[Wm];if(!t\|\|!n\|\|!e.registrationToken)return;const i=await eh(t,e.registrationToken);if(i&&i.instanceId===e.id&&i.processNonce===n)try{return(await fetch(`${t}/api/internal/node-agent/shutdown`,{method:"POST",headers:{authorization:`Bearer ${e.registrationToken}`},signal:AbortSignal.timeout(Xm)})).ok?i:void 0}catch{return}}(e);if(i){const t=Zm(e),n=Date.now()+Ym;for(;t&&Date.now()<n;){if(!await eh(t,e.registrationToken))return;await new Promise(e=>setTimeout(e,50))}const s=t?await eh(t,e.registrationToken):void 0;if(s&&s.instanceId===i.instanceId&&s.pid===i.pid&&s.processNonce===i.processNonce&&s.startIdentity===i.startIdentity&&s.startIdentity&&await th(s.pid,s.startIdentity))return;throw nh(e,`Controlled instance ${e.id} accepted shutdown but its exit could not be confirmed.`)}const s=function(e=function(){const e="win32"===process.platform?c.tmpdir():"/tmp";return n.join(e,`task-handoff-local-controlled-instance-${function(){const e=process.getuid?.();return void 0!==e?String(e):c.userInfo().username.replace(/[^a-zA-Z0-9_.-]/g,"_")}()}.lock`)}()){return G(e)}(this.lockPath),o=await async function(e){const t=Zm(e);if(t)try{const[n,i]=await Promise.all([fetch(`${t}/api/instance/status`,{signal:AbortSignal.timeout(Xm)}),fetch(`${t}/api/diagnostics`,{signal:AbortSignal.timeout(Xm)})]);if(!n.ok\|\|!i.ok)return;const s=await n.json(),o=await i.json(),r=o.data?.runtime?.pid;if(s.data?.id!==e.id\|\|"controlled"!==s.data.controlMode\|\|"number"!=typeof r\|\|!Number.isInteger(r)\|\|r<=0)return;const a=$.processStartIdentity(r);return a?{pid:r,startIdentity:a}:void 0}catch{return}}(e);if(o){if(await th(o.pid,o.startIdentity))return;throw nh(e,`Legacy controlled instance ${e.id} did not exit after termination.`)}if(s?.instanceId===e.id&&Y(s))throw nh(e,`Local controlled instance ${e.id} is still owned by pid ${s.pid}, but its process identity could not be verified.`)}async waitUntilHealthy(e,t,n,i,s=function(e=process.env.TASK_HANDOFF_LOCAL_PROCESS_READY_TIMEOUT_MS){const t=Number(e);return Number.isFinite(t)&&t>0?t:3e4}()){const o=Date.now()+s;for(;Date.now()<o;){if(null!==n.exitCode\|\|null!==n.signalCode)return!1;const s=await eh(e,i);if(s&&s.instanceId===t.instanceId&&s.pid===t.pid&&s.processNonce===t.processNonce&&s.startIdentity===t.startIdentity)return!0;await new Promise(e=>setTimeout(e,100))}return!1}async stopAll(){const e=Array.from(this.children.values());for(const t of e){this.expectedExits.add(t);const e=this.lifecycleReporters.get(t);t.killed\|\|(t.kill("SIGTERM"),Qm(e,{stage:"graceful-signal-sent",pid:t.pid,signal:"SIGTERM"}))}this.children.clear(),await Promise.all(e.map(e=>rh(e,Ym,Jm,this.lifecycleReporters.get(e))))}}async function ch(e,t){try{const n=await e(t,["--version"]);return{available:!0,command:t,version:(n.stdout\|\|n.stderr).split(/\r?\n/)[0]?.trim()\|\|void 0}}catch{return{available:!1}}}class dh{runCommand;paths;nodeAgentUrl;processSupervisor;async resolveInstanceWeb(e){const t=e.instance.runtime.port;if(!t)throw Object.assign(new Error(`Instance ${e.instance.id} does not have a node-owned local runtime port.`),{statusCode:409,code:"INSTANCE_RUNTIME_ENDPOINT_UNAVAILABLE"});return`http://127.0.0.1:${t}`}commandOverride;lockPath;constructor(e,t,n,i,s,o,r){this.runCommand=e,this.paths=t,this.nodeAgentUrl=n,this.commandOverride=i,this.lockPath=s,this.processSupervisor=new ah(s,o,r)}async start(e){await this.processSupervisor.stop(e.instance);const i=function(e){if("local-folder"!==e.source.type){const e=new Error("Localhost runtime currently supports local folder sources only.");throw Object.assign(e,{statusCode:400,code:"LOCAL_RUNTIME_REQUIRES_LOCAL_FOLDER"}),e}return n.resolve(e.source.path)}(e.instance),s=e.instance.runtime.port,o=!!s&&await ih(s),r="allocate"===process.env.TASK_HANDOFF_LOCAL_INSTANCE_PORT_CONFLICT;if(s&&!o&&!r)throw Object.assign(new Error(`Local controlled instance port 127.0.0.1:${s} is already in use.`),{statusCode:409,code:"LOCAL_INSTANCE_PORT_IN_USE"});const a=s&&o?s:await async function(){const e=Number(process.env.TASK_HANDOFF_LOCAL_INSTANCE_PORT_START\|\|19e3),t=Number.isInteger(e)&&e>0?e:19e3;for(let e=t;e<t+1e3&&e<=65535;e+=1)if(await sh(e))return e;throw Object.assign(new Error(`No free localhost port found in range ${t}-${Math.min(t+999,65535)}.`),{statusCode:503,code:"LOCAL_INSTANCE_PORT_UNAVAILABLE"})}(),u=n.join(this.paths.dataDir,"local-instances",e.instance.id),p=n.join(u,"logs"),m=(e.instance.config?.codexConfigEnabled??1)&&"taskhandoff"===(e.instance.config?.codexHomeMode??"taskhandoff")?n.join(u,"configs","codex"):void 0;t.mkdirSync(p,{recursive:!0,mode:448}),m&&t.mkdirSync(m,{recursive:!0,mode:448}),t.chmodSync(u,448),t.chmodSync(p,448),m&&t.chmodSync(m,448);const[h,...g]=function(e){if(e)return e;const i=n.resolve(process.cwd(),"bin","task-handoff.js");if(t.existsSync(i))return[process.execPath,i,"web"];throw Object.assign(new Error("The bundled controlled-instance command is unavailable."),{statusCode:500,code:"LOCAL_CONTROLLED_COMMAND_MISSING"})}(this.commandOverride),f=[...g,"--host","127.0.0.1","--port",String(a)],y=d.randomUUID(),I=n.join(p,"controlled-instance.out.log"),A=n.join(p,"controlled-instance.err.log");Ea(I),Ea(A);const _=t.mkdtempSync(function(e,t=process.platform,i=c.tmpdir()){const s="darwin"===t?"/private/tmp":i,o=d.createHash("sha256").update(e).digest("hex").slice(0,12);return n.join(s,`th-git-${o}-`)}(e.instance.id));t.chmodSync(_,448);const E=t.openSync(I,"a",384),w=t.openSync(A,"a",384),T=l.spawn(h,f,{cwd:i,detached:!1,stdio:["ignore",E,w],env:{...process.env,TASK_HANDOFF_CONTROL_MODE:"controlled",TASK_HANDOFF_RUNTIME_KIND:"local",TASK_HANDOFF_CONTROLLED_INSTANCE_VERSION:Ll(),...this.lockPath?{TASK_HANDOFF_LOCAL_CONTROLLED_INSTANCE_LOCK_PATH:this.lockPath}:{},TASK_HANDOFF_NODE_AGENT_URL:this.nodeAgentUrl(),TASK_HANDOFF_INSTANCE_ID:e.instance.id,TASK_HANDOFF_INSTANCE_NAME:e.instance.name,TASK_HANDOFF_REGISTRATION_TOKEN:e.instance.registrationToken\|\|"",TASK_HANDOFF_PROJECT_ID:e.project.id,TASK_HANDOFF_NODE_ID:e.node.id,TASK_HANDOFF_RUNTIME_ID:e.runtime.id,TASK_HANDOFF_LOCAL_PROCESS_NONCE:y,TASK_HANDOFF_WORKSPACE:i,TASK_HANDOFF_WORKSPACE_MODE:"local-bind",TASK_HANDOFF_DATA_DIR:u,TASK_HANDOFF_INSTANCE_PRIVATE_CONFIG_PATH:e.privateConfigPath\|\|"",TASK_HANDOFF_LOG_DIR:p,TASK_HANDOFF_APP_SESSION_PERSIST:"1",TASK_HANDOFF_CODEX_APP_SERVER:process.env.TASK_HANDOFF_CODEX_APP_SERVER\|\|"1",TASK_HANDOFF_WEB_PORT:String(a),TASK_HANDOFF_WEB_HOST:"127.0.0.1",TASK_HANDOFF_GIT_CREDENTIAL_SOCKET:n.join(_,"broker.sock"),...e.modelEnv\|\|{},CODEX_HOME:m}});t.closeSync(E),t.closeSync(w);try{await function(e){return new Promise((t,n)=>{const i=()=>{e.off("error",s),t()},s=t=>{e.off("spawn",i),n(t)};e.once("spawn",i),e.once("error",s)})}(T)}catch(e){t.rmSync(_,{recursive:!0,force:!0});const s=e instanceof Error?e.message:String(e);try{t.appendFileSync(n.join(p,"controlled-instance.lifecycle.log"),`[${(new Date).toISOString()}] spawn failed command=${h} cwd=${i} error=${s}\n`)}catch{}throw Object.assign(new Error(`Controlled instance process could not start with command ${h} in ${i}: ${s}`),{statusCode:500,code:"LOCAL_INSTANCE_PROCESS_SPAWN_FAILED"})}const b=n.join(p,"controlled-instance.lifecycle.log");this.processSupervisor.track(e.instance.id,T,e=>{t.appendFileSync(b,`[${(new Date).toISOString()}] shutdown stage=${e.stage} pid=${e.pid??""} signal=${e.signal??""} timeoutMs=${e.timeoutMs??""}\n`)}),T.on("error",e=>{try{t.appendFileSync(b,`[${(new Date).toISOString()}] process error pid=${T.pid??""} error=${e.message}\n`)}catch{}}),T.once("exit",(e,n)=>{t.rmSync(_,{recursive:!0,force:!0});try{t.appendFileSync(b,`[${(new Date).toISOString()}] exited pid=${T.pid??""} code=${e??""} signal=${n??""}\n`)}catch{}});const S=`http://127.0.0.1:${a}`,v=T.pid?$.processStartIdentity(T.pid):void 0;if(!(T.pid&&e.instance.registrationToken&&await this.processSupervisor.waitUntilHealthy(S,{instanceId:e.instance.id,pid:T.pid,processNonce:y,startIdentity:v},T,e.instance.registrationToken)&&this.processSupervisor.markReady(e.instance.id,T)))throw this.processSupervisor.release(e.instance.id,T),null===T.exitCode&&null===T.signalCode&&T.kill("SIGTERM"),await rh(T),Object.assign(new Error(`Controlled instance process did not become ready for instance ${e.instance.id} on ${S}.`),{statusCode:503,code:"LOCAL_INSTANCE_PROCESS_NOT_READY"});return{status:"registering",health:"unknown",connectionStatus:"online",agentStatus:"unknown",targetStatus:"unknown",uiAccessStatus:"unknown",target:{strategy:"direct-port",status:"unknown",web:S,api:`${S}/api`},workspace:{mode:"local-bind",status:"pending",path:i},runtime:{kind:"local",workspacePath:i,pid:T.pid,port:a,labels:{...e.instance.runtime.labels,"task-handoff.runtime-kind":"local",[Wm]:y}}}}async stop(e){return await this.processSupervisor.stop(e.instance),{status:"stopped",health:"unknown",connectionStatus:"offline",agentStatus:"offline",targetStatus:"unknown",uiAccessStatus:"unknown",target:{...e.instance.target,status:"unknown"},runtime:e.instance.runtime}}async restart(e){return this.start(e)}async delete(e,t){return await this.stop(e),wi.parse({instanceId:e.instance.id,containerDeleted:!0,completed:!0,deletedVolumes:[],retainedVolumes:[],volumeResults:[]})}async check(e){const[t,n]=await Promise.all([ch(this.runCommand,"codex"),ch(this.runCommand,"claude")]);return{status:"online",capabilities:Wl({...e.capabilities,apps:{terminal:!0,codex:t,claude:n}})}}async stopAll(){await this.processSupervisor.stopAll()}}const lh=["codex","claude"],uh=5e3,ph=$.processStartIdentity(process.pid);function mh(e){const t=process.env[e]?.trim();return t\|\|void 0}function hh(e){const t=e.authorization;return"string"==typeof t&&t.startsWith("Bearer ")?t.slice(7).trim():void 0}function gh(e){if("string"!=typeof e)return!1;const t=e.trim().toLowerCase();return"localhost"===t\|\|"127.0.0.1"===t\|\|"::1"===t\|\|"::ffff:127.0.0.1"===t}function fh(e){return!e.ip&&!e.socket.remoteAddress&&!e.socket.remoteFamily}async function yh(e,t,n){const i=new AbortController,s=setTimeout(()=>i.abort(),2e3);try{return(await e(`${await n(t)}/api/health`,{signal:i.signal})).ok?"reachable":"endpoint-unreachable"}catch{return"endpoint-unreachable"}finally{clearTimeout(s)}}async function Ih(e,t,n,i){const s=new AbortController,o=setTimeout(()=>s.abort(),i);try{return await e(t,{...n,signal:s.signal})}finally{clearTimeout(o)}}async function Ah(e,t,n,i=async e=>um(e)){if(!t.registrationToken)return"unavailable";const s=Wn.parse({nodeAgentUrl:n}),o=await Ih(e,`${await i(t)}/api/internal/node-agent-connection`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${t.registrationToken}`},body:JSON.stringify(s)},5e3);if(404===o.status)return"unsupported";if(!o.ok)throw Object.assign(new Error(`Controlled instance rejected the node-agent connection update (HTTP ${o.status}).`),{code:"NODE_AGENT_CONNECTION_UPDATE_FAILED",statusCode:o.status});return"applied"}async function _h(e,t,n,i,s){if(!t.config.autoImportAgentConfigs)return void i.diagnostic({instanceId:t.id,action:n},"node instance config auto-import skipped");if("reachable"!==t.targetStatus)return;const o=await s(t),r=Number(process.env.TASK_HANDOFF_CONFIG_AUTO_IMPORT_TIMEOUT_MS\|\|uh);for(const s of lh)try{const a=await Ih(e,`${o}/api/config-sync/import/${encodeURIComponent(s)}`,{method:"POST"},Number.isFinite(r)&&r>0?r:uh);if(!a.ok){i.warn({instanceId:t.id,action:n,preset:s,statusCode:a.status},"node instance config auto-import failed");continue}i.diagnostic({instanceId:t.id,action:n,preset:s},"node instance config auto-import completed")}catch(e){i.warn({instanceId:t.id,action:n,preset:s,error:e instanceof Error?e.message:String(e)},"node instance config auto-import failed")}}async function Eh(e,t,n,i,s=async e=>um(e)){const o=t.requireInstance(n),r=t.resolvedAssignedModelEnvironment(n),a=t.modelRegistry.privateCatalog(n);if(t.instancePrivateConfigs.materialize(o.id,o.registrationToken,r,a,o.config.codexSettings),"reachable"!==o.targetStatus)return!1;let c;try{c=await Ih(e,`${await s(o)}/api/internal/model-environment`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${o.registrationToken}`},body:JSON.stringify(r)},uh)}catch(e){return i?.({instanceId:n,targetWeb:o.target.web,error:e instanceof Error?e.message:String(e)},"node instance model environment live sync deferred"),!1}if(!c.ok)return i?.({instanceId:n,targetWeb:o.target.web,statusCode:c.status},"node instance model environment live sync deferred"),!1;if(!Xn(o.capabilities).features.privateModelCatalog)return!0;try{const t=await Ih(e,`${await s(o)}/api/internal/model-catalog`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${o.registrationToken}`},body:JSON.stringify(a)},uh);t.ok\|\|404===t.status\|\|i?.({instanceId:n,statusCode:t.status},"node instance model catalog live sync deferred")}catch(e){i?.({instanceId:n,error:e instanceof Error?e.message:String(e)},"node instance model catalog live sync deferred")}return!0}async function wh(e,t,n,i,s,o,r="request",a){const c=e.requireInstance(i);if(c.imageProvisioning&&"ready"!==c.imageProvisioning.phase&&"docker"===e.requireRuntime(c.runtimeId).type)return s.diagnostic({instanceId:i,action:"start",reason:r,runtimeId:c.runtimeId,imageId:c.imageSelection?.imageId,imagePhase:c.imageProvisioning.phase},"node instance start queued until image provisioning completes"),e.controlledInstances.put(po.parse({...c,status:"starting",updatedAt:ae()}));s.diagnostic({instanceId:i,action:"start",reason:r,runtimeId:c.runtimeId,imageId:c.imageSelection?.imageId},"node instance start requested");const d=e.applyInstanceLifecycle(i,{type:"start-requested"}),l=t.forRuntime(e.requireRuntime(d.runtimeId)),u=await l.start({...e.context(d),signal:a}),p=po.parse({...d,...u,target:{...d.target,...u.target},workspace:u.workspace?{...d.workspace,error:void 0,...u.workspace}:d.workspace,runtime:u.runtime?{...d.runtime,...u.runtime}:d.runtime,updatedAt:ae()}),m=u.target?.web?await yh(n,p,o):"unknown";"docker"===e.requireRuntime(d.runtimeId).type&&"reachable"===m&&Ah(n,p,e.containerUrl,o).then(t=>{s.diagnostic({instanceId:i,action:"node-agent-connection.sync",reason:r,syncStatus:t,nodeAgentUrl:e.containerUrl},"node instance connection endpoint synchronized")}).catch(e=>{s.warn({instanceId:i,action:"node-agent-connection.sync",reason:r,error:e instanceof Error?e.message:String(e)},"node instance connection endpoint sync deferred")});const h=e.applyInstanceLifecycle(i,{type:"runtime-lifecycle-completed",baseline:d,observation:{...u,target:u.target?{...u.target,status:m}:void 0,workspace:u.workspace?{error:void 0,...u.workspace}:void 0,targetStatus:m,uiAccessStatus:m}});return s.diagnostic({instanceId:i,action:"start",reason:r,status:h.status,connectionStatus:h.connectionStatus,targetStatus:h.targetStatus,targetWeb:h.target.web,containerName:h.runtime.containerName},"node instance start completed"),h}async function Th(e={}){const i=e.token\|\|process.env.TASK_HANDOFF_NODE_AGENT_TOKEN,c=Number(e.port\|\|process.env.TASK_HANDOFF_NODE_AGENT_PORT\|\|"8091"),d=`http://127.0.0.1:${c}`,l=e.containerUrl\|\|process.env.TASK_HANDOFF_NODE_AGENT_CONTAINER_URL,u=Aa(e.dataDir),m=await async function(e){return hl(e)}(u);try{const f=md(m),y=e.remoteSecret\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_SECRET,I=e.remoteKeyId\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_KEY_ID,A=new vm(u,f.access),_=A.resolveNodeId(e.nodeId\|\|process.env.TASK_HANDOFF_NODE_ID),E=e.connectionMode\|\|("local-ipc"===process.env.TASK_HANDOFF_NODE_AGENT_CONNECTION_MODE?"local-ipc":"local-loopback"),w=e.ipcPath\|\|process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH\|\|Ta(u.dataDir),T="local-ipc"===E?`ipc://${encodeURIComponent(w)}`:d,b=e.platform\|\|process.platform,S=e.arch\|\|process.arch,v=new Yl(u,_,d,l,c,b,f);v.node.connectionMode=E,v.node.controlEndpoint=T,v.node.endpoint=T,v.init();const N=new dp(u,_,f);await N.init();const z=new Ip(f);await z.init();const C=e.dockerCommandRunner\|\|zo,R=new Ro(C,e.dockerTerminalCommandRunner),k=new Ho(C,{publishHost:"127.0.0.1",imageService:R});let D;const P=new Gm(new Km(k,C,b,S),new dh(e.dockerCommandRunner\|\|zo,u,()=>v.localNodeAgentUrl,function(){const e=process.env.TASK_HANDOFF_LOCAL_CONTROLLED_COMMAND_ARGV?.trim();if(!e){const e=process.env.TASK_HANDOFF_LOCAL_CONTROLLED_COMMAND?.trim();return e?e.split(/\s+/):void 0}let t;try{t=JSON.parse(e)}catch{throw Object.assign(new Error("TASK_HANDOFF_LOCAL_CONTROLLED_COMMAND_ARGV must be valid JSON."),{code:"LOCAL_CONTROLLED_COMMAND_INVALID"})}if(!Array.isArray(t)\|\|!t.length\|\|t.some(e=>"string"!=typeof e\|\|!e))throw Object.assign(new Error("TASK_HANDOFF_LOCAL_CONTROLLED_COMMAND_ARGV must be a non-empty string array."),{code:"LOCAL_CONTROLLED_COMMAND_INVALID"});return t}(),e.localControlledInstanceLockPath\|\|process.env.TASK_HANDOFF_LOCAL_CONTROLLED_INSTANCE_LOCK_PATH,e=>D.handleUnexpectedLocalExit(e.instanceId,new Error(`Local controlled instance exited unexpectedly (pid=${e.pid??"unknown"}, code=${e.code??"none"}, signal=${e.signal??"none"}).`)),(e,t)=>te.log.error({error:e,instanceId:t.instanceId,pid:t.pid},"local controlled instance exit recovery failed"))),L=async e=>um(e,await P.forRuntime(v.requireRuntime(e.runtimeId)).resolveInstanceWeb(v.context(e))),M=e.updateCommandRunner\|\|e.dockerCommandRunner\|\|zo,U=e.fetchImpl\|\|fetch,F=new Lp(v,N,U,L,(e,t)=>te.log.warn(e,t)),$=new Mp(v,U,L,(e,t)=>te.log.warn(e,t)),H=new Map,q=new Map,V=e=>{if("endpoint-unreachable"!==e.targetStatus\|\|"online"!==e.connectionStatus\|\|"online"!==e.agentStatus\|\|!e.target.web\|\|q.has(e.id))return;const t=e.processIncarnationId,n=(async()=>{if("reachable"!==await yh(U,e,L))return;const n=v.requireInstance(e.id);n.processIncarnationId===t&&"online"===n.connectionStatus&&"online"===n.agentStatus&&(v.controlledInstances.put(po.parse({...n,target:{...n.target,status:"reachable"},targetStatus:"reachable",uiAccessStatus:"reachable",updatedAt:ae()})),le.syncNow())})().catch(t=>{te.log.debug({instanceId:e.id,error:t},"node instance endpoint reconciliation probe failed")}).finally(()=>{q.delete(e.id)});q.set(e.id,n)},B=async e=>{const t=v.requireInstance(e);if(!Xn(t.capabilities).features.aiSessionPersistenceSettings\|\|"reachable"!==t.targetStatus\|\|!t.registrationToken)return!1;const n=function(e){return Yn(e).retentionSettings}(t.capabilities),i=function(e){return!0===Yn(e).fileSizeLimitSettings}(t.capabilities),s=`${t.processIncarnationId\|\|"unknown"}:${t.config.aiSessionHistoryLimit}:${n?t.config.aiSessionAttachmentRetentionDays:"unsupported"}:${i?t.config.aiSessionMaxFileAttachmentBytes:"unsupported"}`;if(H.get(e)===s)return!0;let o;try{o=await Ih(U,`${await L(t)}/api/internal/ai-session-persistence-settings`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${t.registrationToken}`},body:JSON.stringify({historyLimit:t.config.aiSessionHistoryLimit,...n?{attachmentRetentionDays:t.config.aiSessionAttachmentRetentionDays}:{},...i?{maxFileAttachmentBytes:t.config.aiSessionMaxFileAttachmentBytes}:{}})},uh)}catch(t){return Ae.warn({instanceId:e,error:t instanceof Error?t.message:String(t)},"node instance AI session persistence settings live sync deferred"),!1}return o.ok?(H.set(e,s),!0):(Ae.warn({instanceId:e,statusCode:o.status},"node instance AI session persistence settings live sync deferred"),!1)},K=async e=>{const t=v.requireInstance(e);if(v.instancePrivateConfigs.materialize(t.id,t.registrationToken,v.resolvedAssignedModelEnvironment(e),v.modelRegistry.privateCatalog(e),t.config.codexSettings),!t.config.codexSettings)return!0;if(!Xn(t.capabilities).features.codexManagedSettings\|\|"reachable"!==t.targetStatus\|\|!t.registrationToken)return!1;try{const n=await Ih(U,`${await L(t)}/api/internal/codex-settings`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${t.registrationToken}`},body:JSON.stringify(t.config.codexSettings\|\|{})},uh);return!!n.ok\|\|(Ae.warn({instanceId:e,statusCode:n.status},"node instance Codex settings live sync deferred"),!1)}catch(t){return Ae.warn({instanceId:e,error:t instanceof Error?t.message:String(t)},"node instance Codex settings live sync deferred"),!1}},G=new xa({cacheDir:n.join(u.dataDir,"runtime-artifacts"),fetchImpl:U}),W=e.resolveRuntimeArtifactRelease\|\|((e,t,n)=>ka(e,t,n,U)),X=async(t,n,i)=>{const s=await n.artifactTarget(i);if(e.resolveRuntimeArtifact)return e.resolveRuntimeArtifact(t,s.platform,s.arch);const o=await W(t,s.platform,s.arch);if(o.identity.launcherAbi>s.launcherAbi)throw Object.assign(new Error(`Runtime requires launcher ABI ${o.identity.launcherAbi}, but ${s.platform}-${s.arch} provides ABI ${s.launcherAbi}.`),{code:"INSTANCE_BASE_RUNTIME_INCOMPATIBLE",retryable:!1});return G.resolve(o.identity,o.source)},Y=e=>P.forRuntime(v.requireRuntime(e.runtimeId)),J=e=>{const t=Y(e);return Bm(t)?t:void 0},Q=e=>{const t=J(e);if(t)return t;throw Object.assign(new Error(`Runtime for instance ${e.id} does not use managed artifacts.`),{code:"INSTANCE_RUNTIME_ARTIFACT_UNMANAGED",retryable:!1})},Z=e=>Boolean(J(e)),ee=(e,t)=>{const n=v.context(e);return X(t,Q(e),n)},te=o({logger:e.logger??!0}),ne=new wa(u,{logger:(e,t)=>te.log.warn(t,e)}),ie=()=>v.listInstances().map(e=>e.id),se=()=>{try{ne.run(ie())}catch(e){te.log.warn({error:e},"node-agent persistence maintenance failed")}},oe=()=>{try{ne.capNodeAgentLogs(),ne.capActiveInstanceLogs(ie())}catch(e){te.log.warn({error:e},"node-agent open log maintenance failed")}};se();const re=setInterval(()=>{se()},216e5);re.unref();const ce=setInterval(()=>{oe()},6e4);ce.unref();const de={requests:0,active:0,completed:0,aborted:0,limitRejected:0,responseBytes:0,totalDurationMs:0,maxResponseBytes:om()};te.decorate("nodeAgentState",v),te.decorate("nodeAgentIdentityService",A),await te.register(r,{options:x});const le=new Gr(v,i,{logger:te.log,safetyIntervalMs:Number(process.env.TASK_HANDOFF_EVENT_CONNECTION_SAFETY_INTERVAL_MS)\|\|void 0}),pe=new Da(v.controlledInstances,Ll,{isInstalled:async(e,t)=>{const n=await ee(e,t),i=await Q(e).inspectRuntime(v.context(e),n.identity);if(i&&e.runtime.labels["task-handoff.bootstrap-backup"]){const t=v.requireInstance(e.id),n={...t.runtime.labels};delete n["task-handoff.bootstrap-backup"],v.controlledInstances.put(po.parse({...t,runtime:{...t.runtime,labels:n},updatedAt:ae()}))}return i},beginDrain:async e=>{try{const t=await async function(e,t,n=async e=>um(e)){const i=await n(t);if(t.registrationToken&&(await Ih(e,`${i}/api/internal/node-agent/drain`,{method:"POST",headers:{authorization:`Bearer ${t.registrationToken}`}},1e4)).ok)return{requested:t.apps.runningCount,failures:[]};const s=await Ih(e,`${i}/api/apps/sessions`,{method:"GET",headers:{"cache-control":"no-cache"}},5e3);if(!s.ok)throw new Error(`Could not list app sessions for runtime drain (HTTP ${s.status}).`);const o=function(e){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const t=e.data;if(Array.isArray(t))return t;if(!t\|\|"object"!=typeof t\|\|Array.isArray(t))return[];const n=t.snapshot,i=(n&&"object"==typeof n&&!Array.isArray(n)?n:t).sessions;return Array.isArray(i)?i:[]}(await s.json()).flatMap(e=>{if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return[];const t=e;return"running"===t.status&&"string"==typeof t.id&&t.id?[t.id]:[]}),r=await Promise.all(o.map(async t=>{try{const n=await Ih(e,`${i}/api/apps/sessions/${encodeURIComponent(t)}/stop`,{method:"POST"},5e3);return n.ok?void 0:{sessionId:t,error:`HTTP ${n.status}`}}catch(e){return{sessionId:t,error:e instanceof Error?e.message:String(e)}}}));return{requested:o.length,failures:r.filter(e=>Boolean(e))}}(U,e,L);t.failures.length?te.log.warn({instanceId:e.id,requested:t.requested,failures:t.failures},"runtime convergence could not stop every app session"):te.log.info({instanceId:e.id,requested:t.requested},"runtime convergence requested app session drain")}catch(t){te.log.warn({instanceId:e.id,error:t instanceof Error?t.message:String(t)},"runtime convergence could not request app session drain")}},endDrain:async e=>{try{await async function(e,t,n=async e=>um(e)){return!!t.registrationToken&&(await Ih(e,`${await n(t)}/api/internal/node-agent/resume`,{method:"POST",headers:{authorization:`Bearer ${t.registrationToken}`}},5e3)).ok}(U,e,L)&&te.log.info({instanceId:e.id},"runtime convergence released app session drain")}catch(t){te.log.warn({instanceId:e.id,error:t instanceof Error?t.message:String(t)},"runtime convergence could not release app session drain")}},install:async(e,t)=>{const n=Q(e);await n.installRuntime(v.context(e),await ee(e,t))},restart:async e=>{const t=Y(e),n=v.applyInstanceLifecycle(e.id,{type:"convergence-restart-requested"}),i=await t.restart(v.context(n)),s=po.parse({...n,...i,target:i.target?{...n.target,...i.target}:n.target,runtime:i.runtime?{...n.runtime,...i.runtime}:n.runtime,updatedAt:ae()}),o=await yh(U,s,L);v.applyInstanceLifecycle(e.id,{type:"runtime-lifecycle-completed",baseline:n,observation:{...i,target:i.target?{...i.target,status:o}:void 0,targetStatus:o,uiAccessStatus:o}})},onForcedDrain:e=>te.log.warn({instanceId:e.id},"runtime convergence drain deadline reached; restarting instance")},{drainTimeoutMs:Number(process.env.TASK_HANDOFF_RUNTIME_DRAIN_TIMEOUT_MS)\|\|void 0,verificationTimeoutMs:Number(process.env.TASK_HANDOFF_RUNTIME_VERIFY_TIMEOUT_MS)\|\|void 0,maxAttempts:Number(process.env.TASK_HANDOFF_RUNTIME_MAX_ATTEMPTS)\|\|void 0});v.controlledInstances.setOnStored(e=>{le.publishInstanceLifecycle(e),v.updateJobs.reconcileRollouts(v.listInstances(),Ll())}),le.start(),te.decorate("nodeAgentEventForwarder",le);const me=new Cp(v,N,z,U,L,(e,t,n)=>le.publish(e,t,n)),he=new Tp(v,N,z,me,f);await he.init(),await me.start(),N.setOnChange((e,t)=>{le.publish("story.changed",{storyId:t.id,nodeId:t.ownerNodeId,change:e},{nodeId:t.ownerNodeId}),F.reconcile()});const ge=new na(C,()=>v.listInstances().filter(e=>"docker"===v.requireRuntime(e.runtimeId).type),e=>le.publish("instance.metrics.snapshot",e,{instanceId:e.instanceId}));ge.start(),te.decorate("nodeAgentRuntimeMetrics",ge);const fe=(g=process.env.TASK_HANDOFF_DIAGNOSTIC_LOGS,["1","true","yes","on"].includes(String(g\|\|"").trim().toLowerCase())),ye=new wm(A,_,y,I),Ie=(e,t)=>{fe&&te.log.info(e,t)},Ae={diagnostic:Ie,warn:(e,t)=>te.log.warn(e,t)},_e=new Xp,Ee=new em(v.environmentTemplates,k,e=>v.requireInstance(e),e=>v.requireRuntime(e),(e,t)=>_e.run(e,t),e=>[e.registrationToken,...v.modelRegistry.privateSecretValues(e.id)].filter(e=>Boolean(e)),e=>v.listInstances().some(t=>t.environmentTemplateOrigin?.imageId===e)),we=(e,t,n)=>{const i=n&&"object"==typeof n&&!Array.isArray(n)?n.protocolVersion:void 0;if("string"!=typeof i\|\|i===Pn)return n;const s=({field:n,action:s})=>te.log.warn({instanceId:e,report:t,protocolVersion:i,expectedProtocolVersion:Pn,field:n,action:s},"cross-version controlled instance report sanitized");return"register"===t?function(e,t){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const n=e,i=["instanceId","projectId","source","nodeId","runtimeId","imageSelection","instanceVersion","protocolVersion","build","controlMode","capabilities","appInventory","target","workspace","registrationToken","processIncarnationId"],s=new Set([...i,"imageId"]);for(const e of Object.keys(n))s.has(e)\|\|t?.({field:e,action:"ignored"});return Object.prototype.hasOwnProperty.call(n,"imageId")&&t?.({field:"imageId",action:"migrated"}),{..._o(n,i),imageSelection:bi(n.imageSelection,n.imageId)}}(n,s):function(e,t){if(!e\|\|"object"!=typeof e\|\|Array.isArray(e))return e;const n=["status","health","protocolVersion","build","capabilities","appInventory","apps","aiSessions","triggers","workspace","target","processIncarnationId"],i=new Set(n);for(const n of Object.keys(e))i.has(n)\|\|t?.({field:n,action:"ignored"});return _o(e,n)}(n,s)},Te=async(e,t,n=()=>!0,i)=>{try{if(!n())return v.requireInstance(e);let s=v.requireInstance(e);"failed"===s.runtimeVersion?.phase&&Z(s)&&(s=v.controlledInstances.put(po.parse({...s,ready:!1,runtimeVersion:jl(Pa(s)),updatedAt:ae()})));const o=v.requireRuntime(s.runtimeId);await wh(v,P,U,e,Ae,L,t,i);const r=v.requireInstance(e);if("docker"===o.type&&r.imageProvisioning&&"ready"!==r.imageProvisioning.phase)return le.syncNow(),r;if(!n())return v.requireInstance(e);D.markRestored(e);let a=v.requireInstance(e);if(Z(a)){try{a=await pe.schedule(e,{startRequested:!0})}catch(n){a=v.requireInstance(e),Ae.warn({instanceId:e,action:"runtime.converge",reason:t,error:n instanceof Error?n.message:String(n)},"node instance runtime convergence failed after start")}"matched"!==a.runtimeVersion?.phase&&a.runtimeVersion?.error&&Ae.warn({instanceId:e,action:"runtime.converge",reason:t,error:a.runtimeVersion.error},"node instance started with pending runtime convergence")}return"docker"===o.type&&"reachable"===a.targetStatus&&Ah(U,a,v.containerUrl,L).then(n=>{Ae.diagnostic({instanceId:e,action:"node-agent-connection.sync",reason:t,syncStatus:n,nodeAgentUrl:v.containerUrl},"node instance connection endpoint synchronized after runtime convergence")}).catch(n=>{Ae.warn({instanceId:e,action:"node-agent-connection.sync",reason:t,error:n instanceof Error?n.message:String(n)},"node instance connection endpoint sync after runtime convergence deferred")}),n()?(await _h(U,a,"start",Ae,L),le.syncNow(),a):v.requireInstance(e)}catch(n){throw v.applyInstanceLifecycle(e,{type:"start-failed",error:n}),le.syncNow(),Ae.warn({instanceId:e,action:"start",reason:t,error:n instanceof Error?n.message:String(n)},"node instance start failed"),n}},be=new Jp(v,R,{sync:()=>le.syncNow(),diagnostic:Ae.diagnostic,warn:Ae.warn,publish:(e,t,n)=>le.publish(e,t,{instanceId:n}),runInstanceOperation:(e,t)=>_e.run(e,t)}),Se=e=>{const t=_e.intent(e.id);be.provision(e,async()=>{await Te(e.id,"image-ready",()=>_e.isIntentCurrent(e.id,t),_e.signal(e.id,t)).catch(()=>{})})};D=new Dm({state:v,runtimeAdapters:P,convergence:pe,restoreInstance:e=>wh(v,P,U,e,Ae,L,"restore"),autoImport:e=>_h(U,e,"start",Ae,L),provisionImage:Se,stopImageProvisioning:()=>be.stop(),usesManagedArtifact:Z,warn:Ae.warn,error:(e,t)=>te.log.error(e,t),runInstanceOperation:(e,t)=>_e.run(e,t)});const ve=async e=>{const t=new Map;for(const e of P.managedAdapters()){const n=await e.artifactTarget();t.set(`${n.platform}-${n.arch}`,{adapter:e})}for(const e of v.listInstances()){const n=J(e);if(!n)continue;const i=v.context(e),s=await n.artifactTarget(i);t.set(`${s.platform}-${s.arch}`,{adapter:n,context:i})}return(await Promise.all([...t.values()].map(({adapter:t,context:n})=>X(e,t,n)))).sort((e,t)=>`${e.identity.platform}/${e.identity.arch}`.localeCompare(`${t.identity.platform}/${t.identity.arch}`))},Ne=new Cm({nodeId:_,jobs:v.updateJobs,runCommand:M,currentRuntimeVersion:Ll,listInstances:()=>v.listInstances(),resolveRuntimeArtifacts:async e=>(await ve(e)).map(e=>e.identity),moduleDir:("undefined"==typeof document?require("url").pathToFileURL(__filename).href:O&&"SCRIPT"===O.tagName.toUpperCase()&&O.src\|\|new URL("cli.js",document.baseURI).href)?n.dirname(s.fileURLToPath("undefined"==typeof document?require("url").pathToFileURL(__filename).href:O&&"SCRIPT"===O.tagName.toUpperCase()&&O.src\|\|new URL("cli.js",document.baseURI).href)):__dirname,managedUpdateSupport:e.managedUpdateSupport\|\|(n=>"linux"!==(e.platform\|\|process.platform)?{supported:!1,reason:"Managed server updates require Linux and systemd."}:"function"==typeof process.getuid&&0!==process.getuid()?{supported:!1,reason:"Managed server updates require the node agent to run as root."}:t.existsSync("/run/systemd/system")?"@task-handoff/server"!==n.packageName\|\|process.env.TASK_HANDOFF_CONTROL_PLANE_HEALTH_URL?.trim()?process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH?.trim()?{supported:!0}:{supported:!1,reason:"Managed server updates require the node-agent IPC readiness endpoint."}:{supported:!1,reason:"Managed server updates require a local control-plane health URL."}:{supported:!1,reason:"Managed server updates require an active systemd host."})});return te.setErrorHandler((e,t,n)=>{const i=function(e){if(e instanceof a.z.ZodError)return{statusCode:400,code:"VALIDATION_ERROR",message:e.issues.map(e=>`${e.path.join(".")\|\|"body"}: ${e.message}`).join("; "),details:{issues:e.issues.map(e=>({path:e.path.map(String),code:e.code,message:e.message}))}};const t=e&&"object"==typeof e?e:{};return{statusCode:"number"==typeof t.statusCode?t.statusCode:500,code:"string"==typeof t.code?t.code:"NODE_AGENT_ERROR",message:e instanceof Error?e.message:String(e),...t.details&&"object"==typeof t.details&&!Array.isArray(t.details)?{details:t.details}:{},..."boolean"==typeof t.retryable?{retryable:t.retryable}:{}}}(e);(fe\|\|i.statusCode>=500)&&(i.statusCode>=500?te.log.error.bind(te.log):te.log.warn.bind(te.log))({method:t.method,url:t.url,statusCode:i.statusCode,errorCode:i.code,error:i.message},"node agent request failed"),n.code(i.statusCode).send({error:{code:i.code,message:i.message,...i.details?{details:i.details}:{},...e&&"object"==typeof e&&"string"==typeof e.expectedVersion?{expectedVersion:e.expectedVersion}:{},...e&&"object"==typeof e&&"string"==typeof e.actualVersion?{actualVersion:e.actualVersion}:{},...e&&"object"==typeof e&&"string"==typeof e.phase?{phase:e.phase}:{},...e&&"object"==typeof e&&"boolean"==typeof e.retryable?{retryable:e.retryable}:{},...e&&"object"==typeof e&&"number"==typeof e.blockingInstanceCount?{blockingInstanceCount:e.blockingInstanceCount}:{}}})}),te.addHook("preHandler",async e=>{const t=ye.verify(e);if(t){if(A.isRevokedPairing(t)&&"/api/node-agent/pairing/current"!==e.url.split("?")[0]){const e=new Error("The node agent pairing used for this request has been revoked.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_HMAC_KEY_REVOKED"}),e}e.nodeAgentAuthKeyId=t}else if(fh(e)){if(i&&hh(e.headers)!==i){const e=new Error("Invalid node agent token.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_UNAUTHORIZED"}),e}}else if("/api/node-agent/pairing/complete"!==e.url.split("?")[0]&&!function(e){const t=e.split("?")[0];return/^\/api\/node-agent\/instances\/[^/]+\/(register\|heartbeat)$/.test(t)\|\|/^\/api\/node-agent\/instances\/[^/]+\/git-credentials\//.test(t)\|\|/^\/api\/node-agent\/instances\/[^/]+\/ai-sessions\/[^/]+\/story-content(?:\/\|$)/.test(t)}(e.url)){if(ye.hasRemoteSecrets()){const e=new Error("Node agent HMAC signature is required.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_HMAC_SIGNATURE_REQUIRED"}),e}if(!function(e){return gh(e.ip)\|\|gh(e.socket.remoteAddress)\|\|!e.ip&&!e.socket.remoteAddress&&!e.socket.remoteFamily}(e)){const e=new Error("Local node agent access is only accepted from loopback or local IPC connections.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_LOCAL_TOKEN_REQUIRES_LOOPBACK"}),e}if(i&&hh(e.headers)!==i){const e=new Error("Invalid node agent token.");throw Object.assign(e,{statusCode:401,code:"NODE_AGENT_UNAUTHORIZED"}),e}}}),te.addHook("onClose",async()=>{N.stopAccepting(),f.stopAccepting();const e=Number(process.env.TASK_HANDOFF_STORY_DRAIN_DIAGNOSTIC_MS)\|\|3e4,t=setTimeout(()=>{te.log.warn({pendingStoryIds:N.coordinator.pendingStoryIds()},"Story storage drain deadline reached; waiting for accepted operations and preserving recovery intents")},e);t.unref();try{await me.stop(),clearInterval(re),clearInterval(ce),ge.stop(),le.stop(),await D.stop(),await N.drain(),await f.close()}finally{clearTimeout(t)}}),te.decorate("nodeAgentRestoreManagedInstances",()=>D.restoreManagedInstances()),te.decorate("nodeAgentRecoverManagedInstances",()=>D.recoverManagedInstances()),te.decorate("nodeAgentStartRecoverySupervisor",()=>D.start()),te.get("/api/node-agent/health",async()=>{return{data:{ok:!0,role:"node-agent",process:{pid:process.pid,...ph?{startIdentity:ph}:{}},listener:{host:"127.0.0.1",port:v.currentListenerPort},nodeId:_,platform:Vm(b),arch:process.arch,protocolVersion:Pn,capabilities:{modelEndpointProbe:!0,managedModels:{multiEntityAssignment:!0,privateModelCatalog:!0},aiSessionHistoryLimit:!0,aiSessionAttachmentRetention:!0,aiSessionFileAttachmentLimit:!0,codexManagedSettings:!0,folderPlaces:!0,localFolderNameUpdate:!0,managedGitCredentials:{registry:!0,runtimeBroker:!0,workspaceProvisioning:{docker:!0,kubernetes:!1,local:!1}},stories:{enabled:!0,agentTools:!0,sessionRetention:!0,maxFileBytes:33554432,maxBatchPaths:20}},build:(e="node-agent",{component:e,packageName:"@task-handoff/node-agent",packageVersion:Ll(),protocolVersion:Pn,buildId:mh("TASK_HANDOFF_BUILD_ID"),builtAt:mh("TASK_HANDOFF_BUILT_AT"),gitCommit:mh("TASK_HANDOFF_GIT_COMMIT"),imageRef:mh("TASK_HANDOFF_IMAGE_REF"),imageDigest:mh("TASK_HANDOFF_IMAGE_DIGEST")}),instanceProxy:{...de},eventTransport:le.eventTransportHealth(),serverTime:(new Date).toISOString()}};var e}),function(e,t){e.get("/api/node-agent/settings/external-listener",async e=>({data:t(e).current()})),e.patch("/api/node-agent/settings/external-listener",async e=>({data:await t(e).update(e.body)}))}(te,e=>{if(!fh(e)){const e=new Error("Node agent TCP listener settings are available only over local Unix IPC.");throw Object.assign(e,{statusCode:403,code:"NODE_AGENT_LISTENER_LOCAL_IPC_ONLY"}),e}if(!te.nodeAgentListenerManager){const e=new Error("Node agent TCP listener manager is not initialized.");throw Object.assign(e,{statusCode:503,code:"NODE_AGENT_LISTENER_UNAVAILABLE"}),e}return te.nodeAgentListenerManager}),function(e,t,n){e.get("/api/node-agent/updates/jobs",async()=>({data:n.list()})),e.post("/api/node-agent/updates/check",async e=>({data:await t.check(e.body)})),e.post("/api/node-agent/updates/apply",async(e,n)=>n.code(202).send({data:await t.apply(e.body)}))}(te,Ne,v.updateJobs),function(e,t){const{identity:n,nodeId:i,fetchImpl:s}=t;e.post("/api/node-agent/pairing/invites",async(e,t)=>{const s=n.createPairingInvite(Cd.parse(e.body\|\|{}));return t.code(201).send({data:{nodeId:i,joinToken:s.token,expiresAt:s.expiresAt}})}),e.post("/api/node-agent/pairing/complete",async(e,t)=>{const s=n.completePairingInvite(Rd.parse(e.body));return t.code(201).send({data:{nodeId:i,keyId:s.keyId,secret:s.secret,pairedAt:s.pairedAt}})}),e.get("/api/node-agent/control-plane-pairings",async e=>({data:n.listControlPlanePairings(e.nodeAgentAuthKeyId)})),e.delete("/api/node-agent/control-plane-pairings/:keyId",async e=>{const t=Nm.parse(e.params.keyId);return{data:{deleted:n.deleteControlPlanePairing(t,e.nodeAgentAuthKeyId)}}}),e.delete("/api/node-agent/pairing/current",async e=>({data:n.revokeCurrentControlPlanePairing(e.nodeAgentAuthKeyId\|\|"")})),e.get("/api/node-agent/control-plane-connections",async()=>({data:n.listControlPlaneConnections().map(e=>({...e,...t.reverseTunnels()?.state(e.id)\|\|{status:e.enabled?"connecting":"disabled"}}))})),e.delete("/api/node-agent/control-plane-connections/:connectionId",async e=>{const i=Nm.parse(e.params.connectionId),s=n.deleteControlPlaneConnection(i);return s&&t.reverseTunnels()?.connectConfigured(),{data:{deleted:s}}}),e.post("/api/node-agent/control-plane-connections",async(e,o)=>{const r=xd.parse(e.body),a=function(e){const t=new URL(e);if("http:"!==t.protocol&&"https:"!==t.protocol){const e=new Error("Control-plane URL must use http or https.");throw Object.assign(e,{statusCode:400,code:"NODE_AGENT_REMOTE_CONTROL_PLANE_URL_INVALID"}),e}return t.toString().replace(/\/$/,"")}(r.controlPlaneUrl);return n.runControlPlaneConnectionOperation(a,async()=>{const e=n.stageControlPlaneConnection({url:a,...r.controlPlaneName?{name:r.controlPlaneName}:{},enabled:!1!==r.activate});let c;try{c=await async function(e,t,n){const i=await e(new URL("/api/node-join/complete",t).toString(),{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(n)}),s=await i.json().catch(()=>({}));if(!i.ok){const e=new Error(s.error?.message\|\|`Control-plane node join failed with HTTP ${i.status}.`);throw Object.assign(e,{statusCode:i.status,code:s.error?.code\|\|"NODE_AGENT_REMOTE_JOIN_FAILED"}),e}return s.data\|\|{}}(s,a,{joinToken:r.joinToken,nodeId:i,nodeName:t.nodeName(),keyId:e.pairing.keyId,secret:e.pairing.secret,pairedAt:e.pairing.pairedAt})}catch(t){throw n.rollbackControlPlaneConnection(e),t}n.markControlPlaneConnectionRemoteAccepted(e);const d=n.commitControlPlaneConnection(e,{name:r.controlPlaneName\|\|("string"==typeof c.name&&c.name?c.name:void 0)});let l,u=d.connection.enabled?"saved":"disabled";const p=t.reverseTunnels();if(p)try{p.connectConfigured(),d.connection.enabled&&(u="connecting")}catch(e){u="failed",l=e instanceof Error?e.message:String(e)}return o.code(201).send({data:{pairing:n.listControlPlanePairings().find(e=>e.keyId===d.pairing.keyId),connection:d.connection,tunnel:{status:u,...l?{error:l}:{}}}})})})}(te,{identity:A,nodeId:_,nodeName:()=>v.node.name,fetchImpl:U,reverseTunnels:()=>te.nodeAgentReverseTunnels}),function(e,t){e.get("/api/node-agent/runtimes",async()=>({data:t.listRuntimes()})),e.post("/api/node-agent/runtimes",async(e,n)=>n.code(201).send({data:t.createRuntime(Kp.parse(e.body))})),e.patch("/api/node-agent/runtimes/:id",async e=>({data:t.updateRuntime(e.params.id,Gp.parse(e.body))})),e.delete("/api/node-agent/runtimes/:id",async e=>({data:{deleted:t.deleteRuntime(e.params.id)}})),e.post("/api/node-agent/runtimes/:id/check",async e=>({data:await t.checkRuntime(e.params.id)})),e.get("/api/node-agent/local-folders",async()=>({data:t.listLocalFolders()})),e.get("/api/node-agent/folders/places",async()=>({data:t.listFolderPlaces()})),e.get("/api/node-agent/folders/tree",async e=>({data:t.listFolderTree(qp.parse(e.query))})),e.post("/api/node-agent/local-folders",async(e,n)=>n.code(201).send({data:t.createLocalFolder($p.parse(e.body))})),e.patch("/api/node-agent/local-folders/:id",async e=>({data:t.updateLocalFolder(e.params.id,Hp.parse(e.body))})),e.delete("/api/node-agent/local-folders/:id",async e=>({data:{deleted:t.deleteLocalFolder(e.params.id)}}))}(te,{listRuntimes:()=>v.nodeRuntimes.list(),createRuntime:e=>v.createRuntime(e),updateRuntime:(e,t)=>v.updateRuntime(e,t),deleteRuntime:e=>v.deleteRuntime(e),checkRuntime:async e=>{const t=v.requireRuntime(e);return v.checkRuntime(e,P.forRuntime(t))},listLocalFolders:()=>v.localFolders.list(),listFolderPlaces:ga,listFolderTree:ya,createLocalFolder:e=>v.createLocalFolder(e),updateLocalFolder:(e,t)=>v.updateLocalFolder(e,t),deleteLocalFolder:e=>v.localFolders.delete(e)}),function(e,t,n,i){e.get("/api/node-agent/models",async()=>({data:t.list()})),e.post("/api/node-agent/models",async(e,n)=>n.code(201).send({data:t.create(Es.parse(e.body))})),e.post("/api/node-agent/models/discover",async e=>{const n=cu.parse(e.body);return{data:await Jl(i,{...n,key:t.resolveProbeKey(n.existingModelId,n.key)})}}),e.post("/api/node-agent/models/test",async e=>{const n=du.parse(e.body);return{data:await Ql(i,{...n,key:t.resolveProbeKey(n.existingModelId,n.key)})}}),e.put("/api/node-agent/models/:id/deploy",async e=>{const n=e.params.id,i=Ts.parse(e.body);if(i.id!==n)throw Object.assign(new Error(`Model payload id ${i.id} does not match route id ${n}.`),{statusCode:400,code:"NODE_MODEL_ID_MISMATCH"});return{data:t.deploy(i)}}),e.patch("/api/node-agent/models/:id",async e=>({data:t.update(e.params.id,ws.parse(e.body))})),e.delete("/api/node-agent/models/:id",async e=>({data:{deleted:t.delete(e.params.id)}})),e.put("/api/node-agent/instances/:id/model-assignment",async e=>{const i=e.params.id,s=e.body&&"object"==typeof e.body&&!Array.isArray(e.body)&&Object.prototype.hasOwnProperty.call(e.body,"modelEntityIds"),o=t.assign(i,bs.parse(e.body));if(await n(i),s)return{data:o};const{modelEntityIds:r,...a}=o.assignment;return{data:{...o,assignment:a}}})}(te,v.modelRegistry,e=>Eh(U,v,e,Ae.warn,L),U),function(e,t){const n=new lu(t.gitCredentials);e.addHook("onClose",async()=>n.close()),e.put("/api/node-agent/git-credentials/:credentialId",async e=>{const n=hu.parse(e.params),i=Xc.parse(e.body);if(i.credential.id!==n.credentialId)throw Object.assign(new Error("Credential payload identity mismatch."),{code:"GIT_CREDENTIAL_IDENTITY_MISMATCH",statusCode:409});return{data:t.gitCredentials.putPayload(i).credential}}),e.delete("/api/node-agent/git-credentials/:credentialId",async e=>({data:{deleted:t.gitCredentials.removePayload(hu.parse(e.params).credentialId)}})),e.get("/api/node-agent/instances/:id/git-credential-authorizations",async e=>{const{id:n}=gu.parse(e.params);return t.requireInstance(n),{data:t.gitCredentials.getAuthorizationSet(n)}}),e.put("/api/node-agent/instances/:id/git-credential-authorizations",async e=>{const{id:n}=gu.parse(e.params);t.requireInstance(n);const i=Yc.parse(e.body);if(i.instanceId!==n)throw Object.assign(new Error("Git credential authorization identity mismatch."),{code:"GIT_CREDENTIAL_AUTHORIZATION_IDENTITY_MISMATCH",statusCode:409});return{data:t.gitCredentials.putAuthorizationSet(i)}}),e.post("/api/node-agent/instances/:id/git-credentials/https",async e=>{const{id:i}=gu.parse(e.params);t.authenticateInstance(i,yu(e.headers));const s=Jc.parse(e.body);return{data:Qc.parse(n.resolveHttps(i,s.remoteUrl))}}),e.post("/api/node-agent/instances/:id/git-credentials/ssh/prepare",async e=>{const{id:i}=gu.parse(e.params);t.authenticateInstance(i,yu(e.headers));const s=Zc.parse(e.body);return{data:ed.parse(await n.prepareSsh(i,s.remoteUrl))}}),e.post("/api/node-agent/instances/:id/git-credentials/ssh/agent",async e=>{const{id:i}=gu.parse(e.params);t.authenticateInstance(i,yu(e.headers));const s=td.parse(e.body);return{data:nd.parse(await n.exchangeAgentFrame(i,s.invocationId,s.frame))}}),e.delete("/api/node-agent/instances/:id/git-credentials/ssh/:invocationId",async e=>{const{id:i,invocationId:s}=fu.parse(e.params);return t.authenticateInstance(i,yu(e.headers)),{data:{deleted:n.release(s,i)}}})}(te,v),function(e,t,n,i={}){if(e.hasContentTypeParser("application/octet-stream")\|\|e.addContentTypeParser("application/octet-stream",(e,t,n)=>n(null,t)),e.get("/api/node-agent/stories",async()=>({data:{stories:await n.list()}})),e.post("/api/node-agent/stories",async(e,t)=>{const s=await n.create(Hu.parse(e.body));return i.onRetentionSettingsChanged?.(),t.code(201).send({data:s})}),e.get("/api/node-agent/stories/:storyId",async e=>{const{storyId:t}=Zu.parse(e.params);return{data:await n.get(t)\|\|(()=>{throw Object.assign(new Error("Story was not found."),{code:"STORY_NOT_FOUND",statusCode:404})})()}}),e.patch("/api/node-agent/stories/:storyId",async e=>{const{storyId:t}=Zu.parse(e.params),s=qu.parse(e.body),o=i.commands?await i.commands.update(t,s):await n.update(t,s);return void 0!==s.maxIdleAiSessions&&i.onRetentionSettingsChanged?.(),{data:o}}),e.get("/api/node-agent/stories/:storyId/settings",async e=>{const{storyId:t}=Zu.parse(e.params);return{data:await n.retentionSettings(t)}}),e.post("/api/node-agent/stories/:storyId/archive",async e=>({data:i.commands?await i.commands.archive(Zu.parse(e.params).storyId):await n.archive(Zu.parse(e.params).storyId)})),e.post("/api/node-agent/stories/:storyId/restore",async e=>({data:i.commands?await i.commands.restore(Zu.parse(e.params).storyId):await n.restore(Zu.parse(e.params).storyId)})),e.delete("/api/node-agent/stories/:storyId",async e=>{const{storyId:t}=Zu.parse(e.params);if(!i.commands)throw Object.assign(new Error("Story command service is unavailable."),{code:"STORY_COMMAND_UNAVAILABLE",statusCode:503});return{data:{deleted:await i.commands.delete(t)}}}),i.scheduler){const t=i.scheduler,s=async(e,n)=>{const i=await t.status(n);if(i.automation.storyId!==e)throw Object.assign(new Error("Story Automation belongs to another Story."),{code:"STORY_AUTOMATION_STORY_MISMATCH",statusCode:409});return i};e.get("/api/node-agent/stories/:storyId/automations",async e=>{const{storyId:i}=Zu.parse(e.params);return await n.require(i),{data:Mu.parse({automations:await t.list(i)})}}),e.post("/api/node-agent/stories/:storyId/automations",async(e,n)=>{const{storyId:i}=Zu.parse(e.params),s=zu.parse(e.body);if(s.storyId!==i)throw Object.assign(new Error("Automation storyId does not match the route."),{code:"STORY_AUTOMATION_STORY_MISMATCH",statusCode:409});return n.code(201).send({data:Lu.parse(await t.create(s))})}),e.post("/api/node-agent/stories/:storyId/automations/with-action",async(e,t)=>{const{storyId:n}=Zu.parse(e.params);if(!i.commands)throw Object.assign(new Error("Story command service is unavailable."),{code:"STORY_COMMAND_UNAVAILABLE",statusCode:503});const s=Cu.parse(e.body);return t.code(201).send({data:Lu.parse(await i.commands.createAutomationWithAction(n,s))})}),e.get("/api/node-agent/stories/:storyId/automations/:automationId",async e=>{const{storyId:t,automationId:n}=tp.parse(e.params);return{data:Lu.parse(await s(t,n))}}),e.patch("/api/node-agent/stories/:storyId/automations/:automationId",async e=>{const{storyId:n,automationId:i}=tp.parse(e.params);return await s(n,i),{data:Lu.parse(await t.update(i,Ru.parse(e.body)))}}),e.delete("/api/node-agent/stories/:storyId/automations/:automationId",async e=>{const{storyId:n,automationId:i}=tp.parse(e.params);return await s(n,i),{data:{deleted:await t.delete(i)}}});for(const n of["enable","disable"])e.post(`/api/node-agent/stories/:storyId/automations/:automationId/${n}`,async e=>{const{storyId:i,automationId:o}=tp.parse(e.params);return await s(i,o),{data:Lu.parse(await t.setEnabled(o,"enable"===n))}});e.post("/api/node-agent/stories/:storyId/automations/:automationId/run",async e=>{const{storyId:n,automationId:i}=tp.parse(e.params);return await s(n,i),{data:await t.manualRun(i,Uu.parse(e.body))}}),e.get("/api/node-agent/stories/:storyId/automations/:automationId/runs",async e=>{const{storyId:n,automationId:i}=tp.parse(e.params);return await s(n,i),{data:ju.parse({runs:await t.runs(i)})}})}e.get("/api/node-agent/stories/:storyId/content",async e=>{const{storyId:t}=Zu.parse(e.params);return{data:Ku.parse({documents:await n.listContent(t)})}}),e.get("/api/node-agent/stories/:storyId/content/file",async(e,t)=>{const{storyId:i}=Zu.parse(e.params),{storyPath:s}=ip.parse(e.query),o=await n.readContent(i,s);return ap(t,o.stream,o.revision,o.size)}),e.put("/api/node-agent/stories/:storyId/content/file",{bodyLimit:33555456},async e=>{const{storyId:t}=Zu.parse(e.params),i=sp.parse(e.query);return{data:await n.writeContent(t,{...i,stream:e.body})}}),e.patch("/api/node-agent/stories/:storyId/documents/:storyPath",async e=>{const t=ep.parse(e.params),i=Au.parse(decodeURIComponent(t.storyPath));return{data:await n.updateDocument(t.storyId,i,Vu.parse(e.body))}}),e.delete("/api/node-agent/stories/:storyId/documents/:storyPath",async e=>{const t=ep.parse(e.params);return{data:{deleted:await n.deleteDocument(t.storyId,Au.parse(decodeURIComponent(t.storyPath)))}}}),e.post("/api/node-agent/stories/:storyId/documents/order",async e=>{const{storyId:t}=Zu.parse(e.params);return{data:await n.reorderDocuments(t,e.body)}}),e.get("/api/node-agent/instances/:id/ai-sessions/:sessionId/story-content",async e=>{const{id:i,sessionId:s}=np.parse(e.params),o=await rp(t,n,i,s,op(e.headers)),{page:r,pageSize:a}=Wu.parse(e.query\|\|{});return{data:Ju.parse(await n.pageContent(o.id,r,a))}}),e.get("/api/node-agent/instances/:id/ai-sessions/:sessionId/story-content/file",async(e,i)=>{const{id:s,sessionId:o}=np.parse(e.params),r=await rp(t,n,s,o,op(e.headers)),{storyPath:a}=ip.parse(e.query),c=await n.readContent(r.id,a);return ap(i,c.stream,c.revision,c.size)}),e.put("/api/node-agent/instances/:id/ai-sessions/:sessionId/story-content/file",{bodyLimit:33555456},async e=>{const{id:i,sessionId:s}=np.parse(e.params),o=await rp(t,n,i,s,op(e.headers)),r=sp.parse(e.query);return{data:await n.writeContent(o.id,{...r,stream:e.body})}}),e.put("/api/node-agent/instances/:id/ai-sessions/:sessionId/story",async e=>{const{id:s,sessionId:o}=np.parse(e.params),r=t.requireInstance(s),c=a.z.object({storyId:ue.nullable()}).strict().parse(e.body\|\|{});if(c.storyId){const e=await n.get(c.storyId);if(!e)throw Object.assign(new Error("Story belongs to another node or was not found."),{code:"STORY_NODE_MISMATCH",statusCode:409});if(e.archivedAt)throw Object.assign(new Error("Archived Story cannot receive new Session associations."),{code:"STORY_ARCHIVED",statusCode:409})}if(!i.fetchImpl\|\|!i.resolveInstanceWeb\|\|!r.registrationToken)throw Object.assign(new Error("Managed instance Session association is unavailable."),{code:"STORY_SESSION_ASSOCIATION_UNAVAILABLE",statusCode:503});const d=await i.resolveInstanceWeb(r),l=await i.fetchImpl(`${d}/api/ai-sessions/${encodeURIComponent(o)}/story`,{method:"PUT",headers:{"content-type":"application/json",authorization:`Bearer ${r.registrationToken}`},body:JSON.stringify(c)}),u=await l.json().catch(()=>({}));if(!l.ok)throw Object.assign(new Error(u.error?.message\|\|"Controlled instance rejected Story association."),{code:u.error?.code\|\|"STORY_SESSION_ASSOCIATION_FAILED",statusCode:l.status});return u})}(te,v,N,{fetchImpl:U,resolveInstanceWeb:L,onRetentionSettingsChanged:()=>F.reconcile(),commands:he,scheduler:me}),function(e,t){e.get("/api/node-agent/environment-templates",async()=>({data:t.list()})),e.get("/api/node-agent/environment-templates/:id",async e=>({data:zi.parse(t.require(e.params.id))})),e.post("/api/node-agent/instances/:id/environment-templates",async(e,n)=>{const i=await t.create(e.params.id,e.body);return n.code(201).send({data:i})}),e.delete("/api/node-agent/environment-templates/:id",async e=>({data:await t.delete(e.params.id)}))}(te,Ee),function(e,t){e.get("/api/node-agent/instances",async()=>({data:t.list()})),e.post("/api/node-agent/instances",async(e,n)=>{const i=await t.create(Vp.parse(e.body));return t.afterCreate(i),n.code(201).send({data:i})}),e.post("/api/node-agent/instances/:id/image-provisioning/retry",async e=>{const n=t.retryImageProvisioning(e.params.id);return t.afterImageRetry(n),{data:n}}),e.patch("/api/node-agent/instances/:id",async e=>{const n=t.update(e.params.id,Bp.parse(e.body));return await t.afterUpdate(n),{data:n}}),e.post("/api/node-agent/instances/:id/register",async(e,n)=>{const i=e.params.id,s=t.sanitizeReport(i,"register",e.body),o=t.register(i,Eo.parse(s),Wp(e.headers));return t.afterReport(o,"register"),n.code(201).send({data:o})}),e.post("/api/node-agent/instances/:id/heartbeat",async e=>{const n=e.params.id,i=t.sanitizeReport(n,"heartbeat",e.body),s=t.heartbeat(n,wo.parse(i),Wp(e.headers));return t.afterReport(s,"heartbeat"),{data:s}})}(te,{list:()=>v.listInstances(),create:e=>"template"===e.environmentSource?.type?Ee.runTemplateOperation(e.environmentSource.environmentTemplateId,()=>v.createInstance(e)):v.createInstance(e),retryImageProvisioning:e=>be.retry(e),update:(e,t)=>{const n=v.requireInstance(e),i=t.config?.codexSettings?.multiAgent.defaultModel;if(i){const t=v.modelRegistry.privateCatalog(e).entities.find(e=>e.id===i.modelEntityId&&e.protocols.includes("openai-responses"));if(!t?.modelNames.some(e=>e.name===i.modelName))throw Object.assign(new Error("The Codex subagent model must be assigned to this instance."),{statusCode:400,code:"CODEX_SUBAGENT_MODEL_UNAVAILABLE"})}return v.controlledInstances.put(po.parse({...n,...t,...t.config?{config:{...n.config,...t.config}}:{},updatedAt:ae()}))},register:(e,t,n)=>v.registerInstance(e,t,n),heartbeat:(e,t,n)=>v.heartbeatInstance(e,t,n),sanitizeReport:we,afterCreate:e=>{le.syncNow(),e.imageProvisioning&&Se(e)},afterImageRetry:e=>{le.syncNow(),Se(e)},afterUpdate:async e=>{le.syncNow(),await Promise.all([B(e.id),K(e.id)])},afterReport:(e,t)=>{le.syncNow(),me.reconcileInstances("heartbeat"===t?e.id:void 0).catch(t=>te.log.warn({error:t,instanceId:e.id},"Story scheduler reconciliation failed")),V(e),B(e.id),K(e.id),F.reconcile(),$.reconcile(),"register"===t?Ie({instanceId:e.id,action:t,protocolVersion:e.protocolVersion,build:e.build,targetStatus:e.targetStatus,targetStrategy:e.target.strategy},"node instance registered"):Ie({instanceId:e.id,action:t,status:e.status,health:e.health,protocolVersion:e.protocolVersion,build:e.build,targetStatus:e.targetStatus,apps:e.apps.runningCount},"node instance heartbeat accepted"),!Z(e)\|\|e.ready&&"matched"===e.runtimeVersion?.phase\|\|pe.schedule(e.id).catch(n=>te.log.error({instanceId:e.id,error:n},`runtime convergence after ${t} failed`))}}),te.get("/api/node-agent/events",{websocket:!0},(e,t)=>{const n=e;n.send(JSON.stringify({type:"node-agent.events.connected",nodeId:_,serverTime:(new Date).toISOString()}));const i=t.query,s=le.addOutput(n,{expectsTransientSubscription:"1"===i.aiSessionTransient});n.on("message",e=>{try{const t=JSON.parse(String(e));"subscribe"===t.type&&void 0!==t.aiSessionTransient&&le.setOutputSubscription(n,t.aiSessionTransient,t.eventEnvelopeVersion,t.aiSessionHierarchy)}catch{}}),n.on("close",s),n.on("error",s)}),te.get("/api/node-agent/docker/images",async()=>({data:await tr(e.dockerCommandRunner)})),te.get("/api/node-agent/instances/:id/metrics",async e=>{const t=e.params.id,n=v.requireInstance(t);if("docker"!==v.requireRuntime(n.runtimeId).type){const e=new Error(`Runtime type ${v.requireRuntime(n.runtimeId).type} does not provide resource metrics.`);throw Object.assign(e,{statusCode:409,code:"INSTANCE_METRICS_UNSUPPORTED"}),e}return{data:await ge.snapshot(t)}}),function(e,t,n,i,s,o=new Xp){const r=e=>o.intent(e),a=e=>Promise.resolve(i.cancel(e)).then(()=>({ok:!0}),e=>({ok:!1,error:e})),c=(e,t)=>{if(!o.isIntentCurrent(e,t))throw Object.assign(new Error(`Instance operation for ${e} was superseded by stop or delete.`),{statusCode:409,code:"INSTANCE_OPERATION_SUPERSEDED"})},d=(e,t)=>{const n=o.signal;return"function"==typeof n?n.call(o,e,t):void 0},l=(e,n)=>{if(n){if(n.instanceId!==e)throw Object.assign(new Error(`Git provisioning belongs to ${n.instanceId}, not ${e}.`),{code:"GIT_WORKSPACE_PROVISIONING_INSTANCE_MISMATCH",statusCode:409});t.setGitWorkspaceProvisioning(n)}},u=(e,n)=>{if(!n)return e;const i=t.gitWorkspaceProvisioningStatus(e.id);return"consumed"===i?.status&&i.operationId===n.operationId?{instance:e,gitWorkspaceProvisioningOperationId:n.operationId}:e};e.post("/api/node-agent/instances/:id/start",async e=>{const t=Yp.parse(e.body),n=e.params.id,i=r(n);return o.run(n,async()=>(c(n,i),l(n,t.gitWorkspaceProvisioning),s.allowRecovery(n),{data:u(await s.start(n,()=>o.isIntentCurrent(n,i),d(n,i)),t.gitWorkspaceProvisioning)}))}),e.post("/api/node-agent/instances/:id/runtime/reconcile",async e=>{const n=e.params.id;Yp.parse(e.body);const a=r(n);return o.run(n,async()=>{c(n,a);const e=t.requireInstance(n);t.putInstance(po.parse({...e,ready:!1,runtimeVersion:jl(Pa(e)),updatedAt:ae()})),c(n,a);const o=await i.schedule(n,{startRequested:!["created","stopped"].includes(e.status),resumeCancelled:!0});return c(n,a),s.sync(),{data:o}})}),e.post("/api/node-agent/instances/:id/stop",async e=>{const i=e.params.id;t.requireInstance(i),t.discardGitWorkspaceProvisioning(i),o.invalidate(i);const r=a(i);return o.run(i,async()=>{const e=t.requireInstance(i);t.applyLifecycle(i,{type:"stop-requested"});try{await s.suppressRecovery(i);const e=await r;if("error"in e)throw e.error;const o=t.requireInstance(i);s.diagnostic({instanceId:i,action:"stop",runtimeId:o.runtimeId,containerName:o.runtime.containerName},"node instance stop requested"),await n.forRuntime(t.requireRuntime(o.runtimeId)).stop(t.context(o))}catch(n){try{t.applyLifecycle(i,{type:"stop-failed",baseline:e}),s.sync()}finally{s.allowRecovery(i)}throw n}const o=t.applyLifecycle(i,{type:"stop-completed"});return s.completeSuppressedRecovery(i),s.sync(),s.diagnostic({instanceId:i,action:"stop",status:o.status,connectionStatus:o.connectionStatus,containerName:o.runtime.containerName},"node instance stop completed"),{data:o}})}),e.post("/api/node-agent/instances/:id/restart",async e=>{const a=e.params.id,d=Yp.parse(e.body),p=r(a);return o.run(a,async()=>{c(a,p),l(a,d.gitWorkspaceProvisioning),s.allowRecovery(a);let e=t.requireInstance(a);if(s.isManaged(e)&&(!e.ready\|\|"matched"!==e.runtimeVersion?.phase)){"failed"===e.runtimeVersion?.phase&&(e=t.putInstance(po.parse({...e,runtimeVersion:jl(Pa(e)),updatedAt:ae()}))),c(a,p);const n=await i.schedule(a,{startRequested:!0});return c(a,p),s.sync(),{data:u(n,d.gitWorkspaceProvisioning)}}s.diagnostic({instanceId:a,action:"restart",runtimeId:e.runtimeId,imageId:e.imageSelection?.imageId,containerName:e.runtime.containerName},"node instance restart requested");const o=await n.forRuntime(t.requireRuntime(e.runtimeId)).restart(t.context(e));let r=t.applyLifecycle(a,{type:"runtime-lifecycle-completed",baseline:e,observation:{...o,target:o.target?{...e.target,...o.target}:void 0}});s.markRestarted(a),c(a,p);const m=po.parse({...r,updatedAt:ae()}),h=await s.probe(m);return c(a,p),r=t.applyLifecycle(a,{type:"runtime-lifecycle-completed",baseline:r,observation:{target:{...r.target,status:h},targetStatus:h,uiAccessStatus:h}}),await s.autoImport(r),s.sync(),s.diagnostic({instanceId:a,action:"restart",status:r.status,connectionStatus:r.connectionStatus,targetStatus:r.targetStatus,targetWeb:r.target.web,containerName:r.runtime.containerName},"node instance restart completed"),{data:u(r,d.gitWorkspaceProvisioning)}})}),e.post("/api/node-agent/instances/:id/delete",async e=>{const i=e.params.id,r=_i.parse(e.body);t.requireInstance(i),o.invalidate(i);const c=a(i);return o.run(i,async()=>{const e=t.requireInstance(i);"deleting"!==e.status&&t.applyLifecycle(i,{type:"stop-requested"});try{await s.suppressRecovery(i);const e=await c;if("error"in e)throw e.error;const a=t.requireInstance(i);t.putInstance(po.parse({...a,status:"deleting",ready:!1,updatedAt:ae()})),s.diagnostic({instanceId:i,action:"delete",runtimeId:a.runtimeId,containerName:a.runtime.containerName},"node instance delete requested");const d=await n.forRuntime(t.requireRuntime(a.runtimeId)).delete(t.context(a,{}),r);if(!d.completed)return s.diagnostic({instanceId:i,action:"delete",volumeResults:d.volumeResults},"node instance delete requires retry"),s.sync(),{data:d};s.diagnostic({instanceId:i,action:"delete"},"node instance delete completed");const l=t.deleteInstance(i);return l&&(s.forgetRecovery(i),o.clearIntent(i)),s.deleteMetadata(i),l&&s.retireInstanceData(i),l&&a.environmentTemplateOrigin?.imageId&&s.releaseEnvironmentImage&&await s.releaseEnvironmentImage(a.environmentTemplateOrigin.imageId).catch(e=>{s.diagnostic({instanceId:i,action:"release-environment-image",error:e instanceof Error?e.message:String(e)},"environment image cleanup deferred after instance deletion")}),s.sync(),{data:d}}catch(n){try{t.putInstance(po.parse({...e,updatedAt:ae()})),s.sync()}finally{s.allowRecovery(i)}throw n}})})}(te,{requireInstance:e=>v.requireInstance(e),requireRuntime:e=>v.requireRuntime(e),putInstance:e=>v.controlledInstances.put(e),deleteInstance:e=>v.controlledInstances.delete(e),applyLifecycle:(e,t)=>v.applyInstanceLifecycle(e,t),context:(e,t)=>v.context(e,t),setGitWorkspaceProvisioning:e=>v.setGitWorkspaceProvisioning(e),discardGitWorkspaceProvisioning:e=>v.discardGitWorkspaceProvisioning(e),gitWorkspaceProvisioningStatus:e=>v.gitWorkspaceProvisioningStatus(e)},P,pe,{start:(e,t,n)=>Te(e,"request",t,n),sync:()=>le.syncNow(),isManaged:Z,probe:e=>yh(U,e,L),autoImport:e=>_h(U,e,"restart",Ae,L),markRestarted:e=>D.markRestored(e),allowRecovery:e=>D.allowRecovery(e),suppressRecovery:e=>D.suppressRecovery(e),forgetRecovery:e=>D.forgetInstance(e),completeSuppressedRecovery:e=>D.completeSuppressedOperation(e),deleteMetadata:e=>{H.delete(e),v.modelRegistry.deleteInstanceMetadata(e),v.gitCredentials.removeInstance(e),v.gitCredentials.collectUnreferencedPayloads(),v.discardGitWorkspaceProvisioning(e),v.instancePrivateConfigs.delete(e)},retireInstanceData:e=>{ne.retire(e)},releaseEnvironmentImage:e=>Ee.releaseUnusedImage(e),diagnostic:Ie},_e),function(e,t){const{fetchImpl:n,metrics:i,diagnostic:s}=t;e.post("/api/node-agent/instances/:id/proxy",async(e,i)=>{const o=performance.now(),r=e.params.id,a=Fp.parse(e.body),c=await t.instanceBase(r),d=am(a.path);"POST"===a.method&&"/api/apps/sessions"===d&&await t.syncModelEnvironment(r),s({instanceId:r,action:"proxy",method:a.method,path:d,instanceBase:c},"node instance proxy requested");const l=await dm(n,`${c}${d}`,{method:a.method,headers:{...a.headers},body:sm(a)},{instanceId:r,method:a.method,path:d,diagnostic:s}),u=l.headers.get("content-type")\|\|"application/octet-stream",p=await l.text(),m=performance.now()-o,h=l.headers.get(rm)\|\|a.headers[rm],g=function(...e){return e.map(e=>String(e\|\|"").trim()).filter(Boolean).join(", ")}(l.headers.get("server-timing"),function(e,t){return`node_proxy;dur=${(Number.isFinite(t)?Math.max(0,t):0).toFixed(1)}`}(0,m));i.header("server-timing",g),h&&i.header(rm,h),s({instanceId:r,action:"proxy",method:a.method,path:d,statusCode:l.status,contentType:u,durationMs:m,traceId:h},"node instance proxy completed"),i.code(l.status).type(u).send(p)}),e.post("/api/node-agent/instances/:id/proxy/stream",{bodyLimit:nm},async(e,o)=>{const r=Date.now();i.requests+=1,i.active+=1;const a=new AbortController;let c=0,d=!1,l=!1;const u=e=>{l\|\|(l=!0,i.active-=1,i.totalDurationMs+=Date.now()-r,i.responseBytes+=c,i[e]+=1)},p=()=>{a.abort(),d&&u("aborted")};e.raw.once("aborted",p),o.raw.once("close",p);try{const r=e.params.id,l=Fp.parse(e.body),p=await t.instanceBase(r),m=am(l.path);s({instanceId:r,action:"proxy.stream",method:l.method,path:m,instanceBase:p},"node instance streaming proxy requested");const g=await dm(n,`${p}${m}`,{method:l.method,headers:{...l.headers},body:sm(l),signal:a.signal},{instanceId:r,method:l.method,path:m,diagnostic:s}),f=Number(g.headers.get("content-length"));if(Number.isFinite(f)&&f>i.maxResponseBytes)return i.limitRejected+=1,a.abort(),cm(o,i.maxResponseBytes);o.code(g.status);for(const[e,t]of Object.entries(im(g.headers)))o.header(e,t);if(!g.body\|\|"HEAD"===l.method)return u("completed"),o.send();const y=new h.Transform({transform(e,t,n){if(c+=e.length,c>i.maxResponseBytes)return i.limitRejected+=1,a.abort(),void n(Object.assign(new Error("Instance proxy response limit exceeded."),{code:"INSTANCE_PROXY_RESPONSE_TOO_LARGE"}));n(null,e)}});return d=!0,y.once("end",()=>u("completed")),y.once("error",()=>u("aborted")),o.send(h.Readable.fromWeb(g.body).pipe(y))}catch(e){throw u("aborted"),e}finally{e.raw.off("aborted",p),d\|\|u("completed")}}),e.post("/api/node-agent/instances/:id/proxy/raw",{bodyLimit:nm},async(e,o)=>{const r=e.params.id,a=Fp.parse(e.body),c=await t.instanceBase(r),d=am(a.path);s({instanceId:r,action:"proxy.raw",method:a.method,path:d,instanceBase:c},"node instance raw proxy requested");const l=await dm(n,`${c}${d}`,{method:a.method,headers:{...a.headers},body:sm(a)},{instanceId:r,method:a.method,path:d,diagnostic:s}),u=Number(l.headers.get("content-length"));if(Number.isFinite(u)&&u>i.maxResponseBytes)return i.limitRejected+=1,await(l.body?.cancel("Instance proxy response limit exceeded.").catch(()=>{})),cm(o,i.maxResponseBytes);let p;try{p=await async function(e,t){if(!e.body)return Buffer.alloc(0);const n=[];let i=0;const s=e.body.getReader();for(;;){const{done:e,value:o}=await s.read();if(e)break;if(i+=o.byteLength,i>t)throw await s.cancel("Instance proxy response limit exceeded.").catch(()=>{}),Object.assign(new Error("Instance proxy response limit exceeded."),{code:"INSTANCE_PROXY_RESPONSE_TOO_LARGE"});n.push(Buffer.from(o))}return Buffer.concat(n,i)}(l,i.maxResponseBytes)}catch(e){if(!(e instanceof Error)\|\|"INSTANCE_PROXY_RESPONSE_TOO_LARGE"!==e.code)throw e;return i.limitRejected+=1,cm(o,i.maxResponseBytes)}return s({instanceId:r,action:"proxy.raw",method:a.method,path:d,statusCode:l.status,byteLength:p.length},"node instance raw proxy completed"),{data:{status:l.status,headers:im(l.headers),bodyBase64:p.toString("base64")}}}),e.get("/api/node-agent/instances/:id/proxy/ws/",{websocket:!0},async(e,n)=>{const i=n.params.id,o=n.params[""]\|\|"",r=n.url.indexOf("?"),a=r>=0?n.url.slice(r):"";let c;try{const r=await t.instanceBase(i),d=new URL(`/${o}${a}`,`${r}/`);d.protocol="https:"===d.protocol?"wss:":"ws:";const l=function(e){const t=Object.entries(e).find(([e])=>"sec-websocket-protocol"===e.toLowerCase()),n=t?.[1],i=(Array.isArray(n)?n.join(","):"string"==typeof n?n:"").split(",").map(e=>e.trim()).filter(Boolean);return i.length?i:void 0}(n.headers);s({instanceId:i,action:"proxy.ws",path:`/${o}${a}`,upstreamUrl:d.toString(),protocols:l\|\|[]},"node instance websocket proxy opening"),c=l?new p(d,l,{perMessageDeflate:!1}):new p(d,{perMessageDeflate:!1}),c.on("open",()=>{s({instanceId:i,action:"proxy.ws",path:`/${o}${a}`},"node instance websocket proxy opened")}),c.on("close",()=>{s({instanceId:i,action:"proxy.ws",path:`/${o}${a}`},"node instance websocket proxy closed")}),c.on("error",e=>{s({instanceId:i,action:"proxy.ws",path:`/${o}${a}`,error:e instanceof Error?e.message:String(e)},"node instance websocket proxy failed")}),j(e,c,{upstreamOpenTimeoutMs:1e4})}catch(t){s({instanceId:i,action:"proxy.ws",path:`/${o}${a}`,error:t instanceof Error?t.message:String(t)},"node instance websocket endpoint unavailable"),c?.close(),e.close(1011,"Instance websocket endpoint is not reachable.")}})}(te,{fetchImpl:U,metrics:de,instanceBase:e=>L(v.requireInstance(e)),syncModelEnvironment:e=>Eh(U,v,e,Ae.warn,L),diagnostic:Ie}),te}catch(e){throw await m.close(),e}var g}async function bh(e){const s=Aa(e.dataDir),o=function(e,i={}){return function(e,i={}){t.mkdirSync(n.dirname(e),{recursive:!0});const s=$.processStartIdentity(process.pid),o={pid:process.pid,hostname:c.hostname(),command:process.argv.join(" "),acquiredAt:(new Date).toISOString(),token:d.randomUUID(),...void 0!==i.component?{component:i.component}:{},...s?{startIdentity:s}:{},...void 0!==i.dataDir?{dataDir:i.dataDir}:{},...void 0!==i.host?{host:i.host}:{},...void 0!==i.port?{port:i.port}:{},...void 0!==i.instanceId?{instanceId:i.instanceId}:{}};for(let n=0;n<5;n+=1)try{return t.mkdirSync(e),t.writeFileSync(V(e),`${JSON.stringify({token:o.token,pid:o.pid,startIdentity:o.startIdentity,startedAt:(new Date).toISOString()})}\n`,{encoding:"utf8",mode:384,flag:"wx"}),J(e,o),{lockPath:e,owner:o,updateDetails:t=>Q(e,o,t),release(){const n=W(e);n?.token===o.token&&t.rmSync(e,{recursive:!0,force:!0})}}}catch(s){if("EEXIST"!==s.code)throw s;const o=W(e);if(Y(o))throw new H(e,o,i.error);if(!o&&(ee(e)\|\|ie(e)<(i.incompleteLockStaleMs??2e3))){if(n+1<5){ne();continue}throw new H(e,void 0,i.error)}const r=d.randomUUID();if(!se(e,r)){if(n+1<5){ne();continue}throw new H(e,W(e),i.error)}const a=W(e);if(Y(a))throw te(B(e)),new H(e,a,i.error);if(o?.token&&a?.token!==o.token){te(B(e));continue}if(!re(e,r))continue;t.rmSync(e,{recursive:!0,force:!0})}const r=W(e);throw new H(e,r,i.error)}(e,{...i,component:"node-agent",error:{label:"Node agent",code:"NODE_AGENT_ALREADY_RUNNING"}})}(function(){const e=process.env.TASK_HANDOFF_NODE_AGENT_LOCK_PATH?.trim();return e?n.resolve(e):n.join(c.tmpdir(),`task-handoff-node-agent-${process.getuid?.()??"user"}.lock`)}(),{dataDir:s.dataDir});try{const c=(r=e.host,a=e.port,to.parse({bindScope:"0.0.0.0"===r.trim()?"all-ipv4":"loopback",port:a})),d=t.existsSync(s.settingsPath),l=function(e,t){return new Qa(e.settingsPath,()=>({version:1,externalListener:t}),{schema:pm,sanitize:hm})}(s,c);let u=l.get().externalListener;"allocate"===process.env.TASK_HANDOFF_NODE_AGENT_PORT_CONFLICT&&(u=await async function(e,t=20){for(let n=0;n<t&&e.port+n<=65535;n+=1){const t={...e,port:e.port+n};if(await gm(t))return t}throw Object.assign(new Error(`No available node-agent port found starting at ${e.port}.`),{statusCode:503,code:"NODE_AGENT_LISTENER_PORT_UNAVAILABLE"})}(u));const p=e=>{if(!o.updateDetails({dataDir:s.dataDir,host:e.host,port:e.port,instanceId:void 0}))throw new Error("Node agent singleton ownership changed while publishing listener state.")},m={...e,port:u.port},h=await Th(m),g=h.nodeAgentState;if(!g)throw new Error("Node agent state was not initialized.");const f=h.nodeAgentIdentityService;if(!f)throw new Error("Node agent identity service was not initialized.");const y=f.resolveNodeId(e.nodeId\|\|process.env.TASK_HANDOFF_NODE_ID),I=function(e,t,n,i,s){const o=t.token\|\|process.env.TASK_HANDOFF_NODE_AGENT_TOKEN,r=s\|\|new vm(n),a=new Map;let c=!1;const d=(t,n)=>{if(c\|\|n.retry.pending\|\|a.get(t)!==n)return;const s=n.retry.schedule(()=>{c\|\|a.get(t)!==n\|\|n.socket\|\|l(t,n)});s&&(n.status="reconnecting",n.nextRetryAt=new Date(Date.now()+s.delay).toISOString(),e.log.info({nodeId:i,tunnelUrl:new URL(n.config.tunnelUrl).origin,attempt:s.attempt,delay:s.delay},"node agent reverse tunnel reconnect scheduled"))},l=(n,s)=>{let r;s.status=s.lastDisconnectedAt?"reconnecting":"connecting",s.error=void 0,s.failureReason=void 0,s.nextRetryAt=void 0;try{r=Mm(e,{...s.config,nodeId:i,port:()=>e.nodeAgentState.currentListenerPort,token:o})}catch(e){return s.status="failed",s.lastDisconnectedAt=(new Date).toISOString(),s.error=e instanceof Error?e.message:String(e),void d(n,s)}s.socket=r;const l=new $m({connectTimeoutMs:t.connectTimeoutMs,handshakeTimeoutMs:t.handshakeTimeoutMs,heartbeatIntervalMs:t.heartbeatIntervalMs,heartbeatTimeoutMs:t.heartbeatTimeoutMs,heartbeatMissThreshold:t.heartbeatMissThreshold,stableThresholdMs:t.stableThresholdMs,ping:()=>r.ping(),onTimeout:e=>{a.get(n)===s&&s.socket===r&&(s.status="failed",s.failureReason=`Reverse tunnel ${e} timeout.`,s.error=s.failureReason,r.terminate())},onStable:()=>s.retry.reset()});return s.supervisor=l,l.start(),r.on("open",()=>{a.get(n)===s&&s.socket===r&&(s.status="connecting",l.opened())}),r.on("message",t=>{if(a.get(n)!==s\|\|s.socket!==r)return;if(l.activity(),"connected"===s.status)return;let o;try{o=JSON.parse(String(t))}catch{return}const c=o&&"object"==typeof o?o.type:void 0;"control-plane.hello"!==c&&"control-plane.identified"!==c\|\|(l.activity(),l.healthy(),s.status="connected",s.lastConnectedAt=(new Date).toISOString(),s.nextRetryAt=void 0,s.error=void 0,e.log.info({nodeId:i,tunnelUrl:new URL(s.config.tunnelUrl).origin},"node agent reverse tunnel connected"))}),r.on("pong",()=>l.pong()),r.on("close",(t,o)=>{if(a.get(n)!==s\|\|s.socket!==r)return;l.close(),s.socket=void 0,s.lastDisconnectedAt=(new Date).toISOString();const u=`WebSocket closed${t?` (${t})`:""}${o?`: ${Buffer.isBuffer(o)?o.toString("utf8"):String(o)}`:""}`;s.error=s.failureReason\|\|u,c\|\|(e.log.warn({nodeId:i,tunnelUrl:new URL(s.config.tunnelUrl).origin,code:t,reason:Buffer.isBuffer(o)?o.toString("utf8"):String(o\|\|""),error:s.error,closeOrigin:s.failureReason?"supervisor":"transport"},"node agent reverse tunnel disconnected"),d(n,s))}),r.on("error",e=>{a.get(n)===s&&s.socket===r&&(s.status="failed",s.failureReason=e instanceof Error?e.message:String(e),s.error=s.failureReason,r.terminate())}),r},u=(e,t)=>{const n=a.get(e);n?.retry.cancel(),n?.supervisor?.close();const i={config:t,retry:new qr,status:"connecting"};return a.set(e,i),n?.socket?.close(1e3,"Reverse tunnel reconnecting."),l(e,i)},p=(e,t)=>e.tunnelUrl===t.tunnelUrl&&e.keyId===t.keyId&&e.secret===t.secret;return{connectConfigured:()=>{c=!1;const n=new Map,s=r.resolvedControlPlaneAccess(),o=new Set;for(const{connection:t,pairing:r}of s.connections){if(!t.enabled)continue;if(!r){e.log.warn({nodeId:i,connectionId:t.id,pairingKeyId:t.pairingKeyId},"node agent control-plane connection has no pairing");continue}const s=Hm(t.url);n.set(t.id,{tunnelUrl:s,keyId:r.keyId,secret:r.secret}),o.add(s)}const d=function(e){const t=e.controlPlaneTunnelUrl\|\|process.env.TASK_HANDOFF_CONTROL_PLANE_TUNNEL_URL;return t?new URL(t).toString():void 0}(t);if(d&&!o.has(d)){const e=r.reverseTunnelSecret(process.env.TASK_HANDOFF_CONTROL_PLANE_URL,t.remoteSecret\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_SECRET,t.remoteKeyId\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_KEY_ID);n.set(`explicit:${d}`,{tunnelUrl:d,keyId:e?.keyId,secret:e?.secret}),o.add(d)}const l=s.hasPersistedAccess?void 0:function(){const e=process.env.TASK_HANDOFF_CONTROL_PLANE_URL;if(!e)return;const t=new URL(Im,e);return t.protocol="https:"===t.protocol?"wss:":"ws:",t.toString()}();if(l&&!o.has(l)){const e=r.reverseTunnelSecret(process.env.TASK_HANDOFF_CONTROL_PLANE_URL,t.remoteSecret\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_SECRET,t.remoteKeyId\|\|process.env.TASK_HANDOFF_NODE_AGENT_REMOTE_KEY_ID);n.set(`bootstrap:${l}`,{tunnelUrl:l,keyId:e?.keyId,secret:e?.secret})}(e=>{for(const[t,n]of a)e.has(t)\|\|(n.retry.cancel(),n.supervisor?.close(),a.delete(t),n.socket?.close(1e3,"Reverse tunnel configuration removed."));for(const[t,n]of e){const e=a.get(t);e&&p(e.config,n)\|\|u(t,n)}})(n)},state:e=>{const t=a.get(e);if(!t)return;const n=t.supervisor?.diagnostics();return{status:t.status,...void 0===n?.pingRttMs?{}:{pingRttMs:n.pingRttMs},...void 0===n?.pingRttP95Ms?{}:{pingRttP95Ms:n.pingRttP95Ms},consecutiveReconnects:t.retry.attempts,...t.lastConnectedAt?{lastConnectedAt:t.lastConnectedAt}:{},...t.lastDisconnectedAt?{lastDisconnectedAt:t.lastDisconnectedAt}:{},...t.nextRetryAt?{nextRetryAt:t.nextRetryAt}:{},...t.error?{error:t.error}:{}}},closeAll:()=>{c=!0;for(const e of a.values())e.retry.cancel(),e.supervisor?.close(),e.socket?.close(1001,"Node agent shutting down.");a.clear()}}}({log:h.log,inject:e=>h.inject(e),nodeAgentEventForwarder:h.nodeAgentEventForwarder,nodeAgentState:g},m,s,y,f);h.decorate("nodeAgentReverseTunnels",I);const A=new fm({app:h,state:g,settings:l,config:u,source:d?"persisted":"bootstrap",onActiveListener:p,validateUpdate:()=>{const e=g.listInstances().filter(e=>!["created","stopped","failed"].includes(e.status)).filter(e=>"reachable"!==e.targetStatus\|\|!Xn(e.capabilities).features.nodeAgentConnectionUpdate);if(e.length)throw Object.assign(new Error(`Cannot change the node agent port while ${e.length} controlled instance(s) cannot switch endpoints live.`),{statusCode:409,code:"NODE_AGENT_LISTENER_LIVE_UPDATE_UNSUPPORTED",details:{instanceIds:e.map(e=>e.id)}})},synchronizeUpdate:async()=>{const t=g.listInstances().filter(e=>!["created","stopped","failed"].includes(e.status));await Promise.all(t.map(t=>{const n="docker"===g.requireRuntime(t.runtimeId).type?g.containerUrl:g.localNodeAgentUrl;return Ah(e.fetchImpl\|\|fetch,t,n).then(e=>{if("applied"!==e)throw new Error(`Controlled instance ${t.id} did not apply the node-agent endpoint update (${e}).`)})}))}});let _;h.decorate("nodeAgentListenerManager",A),function(e){let t=!1;const n=async n=>{if(!t){t=!0,I.closeAll(),_?.close();try{await e.close()}finally{process.exitCode=n?0:process.exitCode}}},i=()=>{n("SIGINT")},s=()=>{n("SIGTERM")};process.once("SIGINT",i),process.once("SIGTERM",s),e.addHook("onClose",async()=>{process.off("SIGINT",i),process.off("SIGTERM",s)})}(h),h.addHook("onClose",async()=>{_?.close(),o.release()});try{await h.ready();const o=e.ipcPath\|\|process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH\|\|Ta(s.dataDir);_=await async function(e,s){!function(e,i=process.platform){if("win32"!==i){t.mkdirSync(n.dirname(e),{recursive:!0,mode:448});try{t.chmodSync(n.dirname(e),448)}catch{}try{t.unlinkSync(e)}catch(e){if("ENOENT"!==e.code)throw e}}}(s);const o=i.createServer((t,n)=>{e.server.emit("request",t,n)});return o.on("upgrade",(t,n,i)=>{e.server.emit("upgrade",t,n,i)}),await new Promise((e,t)=>{o.once("error",t),o.listen(s,()=>{o.off("error",t),e()})}),o}(h,o),await A.start(),I.connectConfigured(),h.nodeAgentStartRecoverySupervisor?.()}catch(e){throw await h.close(),e}}catch(e){throw o.release(),e}var r,a}const Sh="task-handoff-node-agent.service",vh=`/etc/systemd/system/${Sh}`,Nh="/etc/task-handoff/node-agent.env",Oh=["@task-handoff/node-agent","@task-handoff/controlled-instance"];function zh(e,t,n){const i=e.run(t,n);if(0!==i.status){const e=function(e){return[e.stdout,e.stderr].filter(Boolean).map(e=>String(e).trim()).filter(Boolean).join("\n")}(i);throw new Error(`${t} ${n.join(" ")} failed${e?`:\n${e}`:""}`)}}function Ch(e,t){for(const n of e.split(/\r?\n/)){const e=n.indexOf("=");if(!(e<0\|\|n.slice(0,e).trim()!==t))return n.slice(e+1).trim()}}const Rh={getuid:()=>process.getuid?.(),exists:t.existsSync,readText:e=>t.readFileSync(e,"utf8"),remove:(e,n)=>t.rmSync(e,n),run:(e,t)=>l.spawnSync(e,t,{encoding:"utf8"}),confirmDeleteData:async function(e){if(!N.stdin.isTTY\|\|!N.stdout.isTTY)return!1;const t=v.createInterface({input:N.stdin,output:N.stdout});try{const n=await t.question(`Delete Node Agent data at ${e}? This removes identity, configuration, logs, and managed-instance metadata. Docker volumes are preserved. [y/N] `);return/^(?:y\|yes)$/i.test(n.trim())}finally{t.close()}},log:e=>console.log(e)};function xh(e){const t=Number(e);if(!Number.isInteger(t)\|\|t<=0\|\|t>65535)throw new Error("Port must be a valid TCP port.");return t}function kh(e){if("local-ipc"!==e&&"local-loopback"!==e)throw new Error("Connection mode must be local-ipc or local-loopback.");return e}function Dh(e){const t=Number(e);if(!Number.isInteger(t)\|\|t<=0)throw new Error("Expiry must be a positive integer.");return t}(async function(){const t=new e.Command;t.name("task-handoff-node-agent").description("Run a TaskHandoff node agent.").version(R("@task-handoff/cli")).option("--host <host>","Node agent host",process.env.TASK_HANDOFF_NODE_AGENT_HOST\|\|"127.0.0.1").option("-p, --port <port>","Node agent port",xh,Number(process.env.TASK_HANDOFF_NODE_AGENT_PORT)\|\|8091).option("--data-dir <path>","Node agent data directory").option("--token <token>","Bearer token required by the control plane").option("--connection-mode <mode>","Local control connection mode",kh).option("--ipc-path <path>","Unix socket path used by local-ipc mode").option("--control-plane-tunnel-url <url>","Control plane reverse WebSocket tunnel URL").action(async e=>{await bh({host:e.host,port:e.port,dataDir:e.dataDir,token:e.token,connectionMode:e.connectionMode,ipcPath:e.ipcPath,controlPlaneTunnelUrl:e.controlPlaneTunnelUrl})}),t.command("invite").description("Create a one-time token for pairing this node agent with a control plane.").option("--endpoint <url>","Use the node-agent HTTP endpoint instead of its local IPC socket").option("--ipc-path <path>","Local node-agent IPC socket path").option("--data-dir <path>","Node-agent data directory used to locate its IPC socket").option("--token <token>","Bearer token for local node-agent access",process.env.TASK_HANDOFF_NODE_AGENT_TOKEN).option("--expires-in-ms <ms>","Invite expiry in milliseconds",Dh).option("--json","Print raw JSON output").action(async e=>{const n=t.opts(),i=e.ipcPath\|\|n.ipcPath\|\|process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH,s=e.dataDir\|\|n.dataDir\|\|process.env.TASK_HANDOFF_NODE_AGENT_DATA_DIR,o=e.endpoint?void 0:i\|\|Ta(s\|\|Ia()),r=await async function(e){const t={"content-type":"application/json",...e.token?{authorization:`Bearer ${e.token}`}:{}},n=JSON.stringify({...e.expiresInMs?{expiresInMs:e.expiresInMs}:{}}),i=e.endpoint?await fetch(`${e.endpoint.replace(/\/$/,"")}/api/node-agent/pairing/invites`,{method:"POST",headers:t,body:n}):await ba(e.ipcPath,"/pairing/invites",{method:"POST",headers:t,body:n}),s=await i.json().catch(()=>({}));if(!i.ok)throw new Error(s.error?.message\|\|`Node agent pairing invite failed with HTTP ${i.status}`);const o="string"==typeof s.data?.joinToken?s.data.joinToken:"";if(!o)throw new Error("Node agent pairing invite response did not include a join token.");return{nodeId:"string"==typeof s.data?.nodeId?s.data.nodeId:"",joinToken:o,expiresAt:"string"==typeof s.data?.expiresAt?s.data.expiresAt:""}}({endpoint:e.endpoint,ipcPath:o,token:e.token,expiresInMs:e.expiresInMs});e.json?console.log(JSON.stringify(r,null,2)):(r.nodeId&&console.log(`Node: ${r.nodeId}`),console.log(`Join token: ${r.joinToken}`),r.expiresAt&&console.log(`Expires: ${r.expiresAt}`))}),t.command("connect").description("Connect this Node Agent to a reachable Control Plane.").requiredOption("--control-plane <url>","Public Control Plane base URL").requiredOption("--join-token <token>","One-time join token issued by the Control Plane").option("--control-plane-name <name>","Control Plane display name").option("--endpoint <url>","Use the Node Agent HTTP endpoint instead of its local IPC socket").option("--ipc-path <path>","Local Node Agent IPC socket path").option("--data-dir <path>","Node Agent data directory used to locate its IPC socket").option("--token <token>","Bearer token for local Node Agent access",process.env.TASK_HANDOFF_NODE_AGENT_TOKEN).option("--json","Print raw JSON output").action(async e=>{const n=t.opts(),i=e.ipcPath\|\|n.ipcPath\|\|process.env.TASK_HANDOFF_NODE_AGENT_IPC_PATH,s=e.dataDir\|\|n.dataDir\|\|process.env.TASK_HANDOFF_NODE_AGENT_DATA_DIR,o=e.endpoint?void 0:i\|\|Ta(s\|\|Ia()),r=await async function(e){const t={"content-type":"application/json",...e.token?{authorization:`Bearer ${e.token}`}:{}},n=JSON.stringify({controlPlaneUrl:e.controlPlane,joinToken:e.joinToken,...e.controlPlaneName?{controlPlaneName:e.controlPlaneName}:{},activate:!0}),i=e.endpoint?await fetch(`${e.endpoint.replace(/\/$/,"")}/api/node-agent/control-plane-connections`,{method:"POST",headers:t,body:n}):await ba(e.ipcPath,"/control-plane-connections",{method:"POST",headers:t,body:n}),s=await i.json().catch(()=>({}));if(!i.ok)throw new Error(s.error?.message\|\|`Node Agent connection failed with HTTP ${i.status}`);return s.data}({controlPlane:e.controlPlane,joinToken:e.joinToken,controlPlaneName:e.controlPlaneName,endpoint:e.endpoint,ipcPath:o,token:e.token});e.json?console.log(JSON.stringify(r,null,2)):(console.log(`Control Plane: ${String(r?.connection?.url\|\|e.controlPlane)}`),console.log(`Connection: ${String(r?.tunnel?.status\|\|"saved")}`))}),t.command("uninstall").description("Uninstall the Node Agent service and packages; data is preserved by default.").option("--data-dir <path>","Override the installed Node Agent data directory").option("--delete-data","Delete Node Agent data without prompting").option("--keep-data","Preserve Node Agent data without prompting").action(async e=>{await async function(e,t=Rh){if(e.deleteData&&e.keepData)throw new Error("--delete-data and --keep-data cannot be used together.");if(0!==t.getuid())throw new Error("Run this command as root so the Node Agent service and packages can be removed.");const i=t.exists(Nh)?t.readText(Nh):"",s=function(e,t){if(e.dataDir?.trim())return n.resolve(e.dataDir.trim());if(t.exists(Nh)){const e=Ch(t.readText(Nh),"TASK_HANDOFF_NODE_AGENT_DATA_DIR");if(e)return n.resolve(e)}return n.resolve(Ia())}(e,{exists:e=>e===Nh&&Boolean(i),readText:()=>i});if(s===n.parse(s).root)throw new Error(`Refusing to use a filesystem root as the Node Agent data directory: ${s}`);const o=Ch(i,"TASK_HANDOFF_NPM_COMMAND")\|\|process.env.TASK_HANDOFF_NPM_COMMAND\|\|"npm";if(t.exists(vh)){const e=t.readText(vh);if(!/^ExecStart=\S*task-handoff-node-agent(?:\s\|$)/m.test(e))throw new Error(`Refusing to remove ${Sh} because it is not owned by a standalone Node Agent installation.`);zh(t,"systemctl",["disable","--now",Sh]),t.remove(vh,{force:!0}),zh(t,"systemctl",["daemon-reload"])}zh(t,o,["uninstall","--global",...Oh]),t.remove(Nh,{force:!0}),t.log("TaskHandoff Node Agent service and packages were removed.");const r=!!e.deleteData\|\|!e.keepData&&await t.confirmDeleteData(s);return r?(t.remove(s,{recursive:!0,force:!0}),t.log(`Node Agent data was deleted from ${s}.`)):t.log(`Node Agent data was preserved at ${s}.`),{dataDir:s,dataDeleted:r}}(e)}),await t.parseAsync(process.argv)})().catch(e=>{console.error(e instanceof Error?e.message:String(e)),process.exitCode=1});