@wjarka/cezarion 0.10.0-pr30.54

package/dist/server/open-in-terminal.js

@@ -0,0 +1,179 @@
+import { spawn } from 'node:child_process';
+import { chmodSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { shellQuote, withEnvPrefix } from '../core/shell-env.js';
+import { isWsl, wslDistroName } from './wsl.js';
+/**
+ * Open a real terminal window at `cwd` running `command` — the "take over the
+ * agent session locally" handoff. Cross-platform strategy ported from
+ * github-janitor's `openInTerminal.ts`: macOS via osascript, Windows via
+ * cmd/start, Linux by probing common emulators with a temp launch script
+ * (which sidesteps per-emulator quoting rules). WSL (#361) reuses the Linux
+ * script but hands it to a Windows-side terminal through interop, re-entering
+ * the distro with `wsl.exe` — there is no Linux desktop of its own to open
+ * `x-terminal-emulator` etc. on.
+ *
+ * Returns true when a launcher was started without an immediate error; the
+ * caller shows a copy-the-command fallback otherwise.
+ */
+export async function openInTerminal(cwd, command, 
+/** Environment the opened shell must carry — today, the agent account's config dir (spec
+ *  2026-07-29-agent-profiles). Rendered per platform and made to PERSIST, because the window
+ *  stays open and the user types the next `claude` in it themselves. An empty/absent env
+ *  changes nothing about the command. Returns false without launching anything when the
+ *  values cannot be embedded safely: a terminal silently aimed at the wrong account is worse
+ *  than no terminal, since nothing in the window would say so. */
+env = {}) {
+    const prefixed = withEnvPrefix(command, env, process.platform);
+    if (prefixed === null)
+        return false;
+    if (process.platform === 'darwin') {
+        const script = `cd ${shellQuote(cwd)} && ${prefixed}`;
+        return runDetached('osascript', [
+            '-e',
+            'tell application "Terminal" to activate',
+            '-e',
+            `tell application "Terminal" to do script ${appleScriptQuote(script)}`,
+        ]);
+    }
+    if (process.platform === 'win32') {
+        const inner = `cd /d "${cwd}" && ${prefixed}`;
+        // Windows Terminal first, classic cmd window as fallback.
+        if (await runDetached('cmd', ['/c', 'start', '', 'wt', '-d', cwd, 'cmd', '/K', prefixed])) {
+            return true;
+        }
+        return runDetached('cmd', ['/c', 'start', '', 'cmd', '/K', inner]);
+    }
+    // Linux/other: a temp script avoids each emulator's own quoting rules. It reaps
+    // itself afterwards (#785) — see `createLaunchScript`.
+    const scriptPath = createLaunchScript(cwd, prefixed);
+    if (isWsl()) {
+        // No Linux GUI here — go through interop to a Windows terminal, which re-enters this same
+        // distro (`wsl.exe -d <distro>`) to run the script we just wrote. `scriptPath`/`cwd` stay
+        // POSIX: `wsl.exe` interprets its command line inside the distro, not on the Windows side.
+        for (const [bin, args] of wslTerminalLaunchers(scriptPath, wslDistroName())) {
+            if (await runDetached(bin, args))
+                return true;
+        }
+        return false;
+    }
+    const candidates = [
+        ['x-terminal-emulator', ['-e', scriptPath]],
+        ['gnome-terminal', ['--', scriptPath]],
+        ['konsole', ['-e', scriptPath]],
+        ['wezterm', ['start', '--', scriptPath]],
+        ['kitty', [scriptPath]],
+        ['alacritty', ['-e', scriptPath]],
+        ['xterm', ['-e', scriptPath]],
+    ];
+    for (const [bin, args] of candidates) {
+        if (await runDetached(bin, args))
+            return true;
+    }
+    return false;
+}
+/** The Windows-side (bin, args) candidates for launching `scriptPath` inside `distro` through
+ *  WSL interop, in try-order — Windows Terminal first, a classic console window as fallback. Pure
+ *  (no spawning) so the exact command line is unit-testable without a real WSL host.
+ *
+ *  Every launcher here is shell-free by construction, and must stay that way: routing through
+ *  `cmd.exe` (`/c start …`) would reintroduce BatBadBut (CVE-2024-27980, see #459). Passing an
+ *  argument array is NOT protection when the binary is a shell — libuv only quotes arguments
+ *  containing space, tab or quote, so a space-free `distro` like `a&calc&` would reach `cmd`
+ *  live and be interpreted. `wt.exe` and `conhost.exe` parse no metacharacters, so the same
+ *  input is inert. `distro` is additionally validated at the source (`wslDistroName`). */
+export function wslTerminalLaunchers(scriptPath, distro) {
+    return [
+        ['wt.exe', ['wsl.exe', '-d', distro, '--', scriptPath]],
+        ['conhost.exe', ['wsl.exe', '-d', distro, '--', scriptPath]],
+    ];
+}
+/** Grace period before a launch script's directory is removed. Generous next to the
+ *  ~250 ms each emulator candidate is given, because the cost of being early is a
+ *  window that never opens, and the cost of being late is a few hundred bytes. */
+export const LAUNCH_SCRIPT_TTL_MS = 60_000;
+/**
+ * Writes the temp launch script shared by the plain-Linux and WSL branches — `cd` into
+ * the worktree, run `command`, then drop into an interactive shell so the window stays
+ * open — and schedules its own removal (#785).
+ *
+ * Every "open in terminal" used to leave its `cez-term-*` directory behind forever. On a
+ * host whose `/tmp` is a tmpfs that never reboots, cezar's own litter is part of what
+ * exhausts the directory the agents' output capture depends on, so the opener cleans up
+ * after itself. Deleting the script mid-run is safe: the emulator has already `exec`'d
+ * bash on it, and POSIX keeps an unlinked file's inode alive for every open descriptor.
+ * The timer is `unref`'d — a pending cleanup must never be the reason `cezar serve`
+ * refuses to exit.
+ *
+ * Exported for the regression test, which must prove the directory does not survive
+ * without spawning a real terminal emulator.
+ */
+export function createLaunchScript(cwd, command, ttlMs = LAUNCH_SCRIPT_TTL_MS) {
+    const dir = mkdtempSync(join(tmpdir(), 'cez-term-'));
+    const scriptPath = join(dir, 'launch.sh');
+    writeFileSync(scriptPath, `#!/usr/bin/env bash\ncd ${shellQuote(cwd)}\n${command}\nexec bash\n`, 'utf8');
+    chmodSync(scriptPath, 0o755);
+    const timer = setTimeout(() => {
+        try {
+            rmSync(dir, { recursive: true, force: true });
+        }
+        catch {
+            // best-effort: a launch script we cannot remove is litter, not a failure.
+        }
+    }, ttlMs);
+    timer.unref?.();
+    return scriptPath;
+}
+/**
+ * A test that reaches a real launcher opens a window on the developer's machine — a Terminal on
+ * macOS, a `cmd` window on Windows, an emulator on Linux — and #820 is what that looks like: a
+ * suite run left a Terminal sitting in a `cez-profiles-home-*` fixture directory the same run had
+ * already deleted. Throwing beats returning `false`: a silent refusal would let the omission
+ * survive as a passing test, and the fix is always the same one line — inject the launcher seam
+ * (`openTerminal` / `openFile` / `openApp` on `ServerDeps`) instead of reaching the real one.
+ *
+ * `CEZ_ALLOW_TEST_SPAWN=1` is the deliberate exception, for a file that has replaced
+ * `node:child_process` with a mock: nothing reaches a real process there, and asserting the argv a
+ * launcher WOULD pass is exactly how the Windows launcher-safety cases (#469, BatBadBut) are
+ * pinned. Set it around those tests, never process-wide.
+ *
+ * Exported so `open-in-app.ts` shares this one definition rather than keeping a second copy that
+ * could drift.
+ */
+export function refuseSpawnUnderTest(bin, args) {
+    if (!process.env.VITEST || process.env.CEZ_ALLOW_TEST_SPAWN === '1')
+        return;
+    throw new Error(`refusing to spawn a launcher from a test: ${[bin, ...args].join(' ')}\n` +
+        'Inject the launcher (ServerDeps.openTerminal / openFile / openApp) instead of calling the real one.');
+}
+/** Spawn detached; success = no error within a short settle window. */
+function runDetached(bin, args) {
+    return new Promise((resolve) => {
+        refuseSpawnUnderTest(bin, args);
+        let child;
+        try {
+            child = spawn(bin, args, { stdio: 'ignore', detached: true });
+        }
+        catch {
+            resolve(false);
+            return;
+        }
+        let settled = false;
+        const settle = (ok) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(ok);
+        };
+        child.once('error', () => settle(false));
+        setTimeout(() => {
+            child.unref();
+            settle(true);
+        }, 250);
+    });
+}
+function appleScriptQuote(s) {
+    return `"${s.replaceAll('\\', '\\\\').replaceAll('"', '\\"')}"`;
+}
+//# sourceMappingURL=open-in-terminal.js.map

package/dist/server/open-in-terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-in-terminal.js","sourceRoot":"","sources":["../../src/server/open-in-terminal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,OAAe;AACf;;;;;kEAKkE;AAClE,GAAG,GAA2B,EAAE;IAEhC,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEpC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,OAAO,QAAQ,EAAE,CAAC;QACtD,OAAO,WAAW,CAAC,WAAW,EAAE;YAC9B,IAAI;YACJ,yCAAyC;YACzC,IAAI;YACJ,4CAA4C,gBAAgB,CAAC,MAAM,CAAC,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,GAAG,QAAQ,QAAQ,EAAE,CAAC;QAC9C,0DAA0D;QAC1D,IAAI,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC1F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,gFAAgF;IAChF,uDAAuD;IACvD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAErD,IAAI,KAAK,EAAE,EAAE,CAAC;QACZ,0FAA0F;QAC1F,0FAA0F;QAC1F,2FAA2F;QAC3F,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,oBAAoB,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YAC5E,IAAI,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QAChD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAA8B;QAC5C,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC,gBAAgB,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACtC,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/B,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACxC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;QACvB,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACjC,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;KAC9B,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;QACrC,IAAI,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;0FAS0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,MAAc;IACrE,OAAO;QACL,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACvD,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED;;kFAEkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,OAAe,EACf,KAAK,GAAW,oBAAoB;IAEpC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1C,aAAa,CAAC,UAAU,EAAE,2BAA2B,UAAU,CAAC,GAAG,CAAC,KAAK,OAAO,eAAe,EAAE,MAAM,CAAC,CAAC;IACzG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;IACH,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,IAAuB;IACvE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,GAAG;QAAE,OAAO;IAC5E,MAAM,IAAI,KAAK,CACb,6CAA6C,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;QACvE,qGAAqG,CACxG,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,SAAS,WAAW,CAAC,GAAW,EAAE,IAAc;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,EAAW,EAAE,EAAE;YAC7B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,UAAU,CAAC,GAAG,EAAE;YACd,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAS;IACjC,OAAO,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;AAClE,CAAC"}

package/dist/server/pr.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Thin delegate — draft-PR creation (review gate, spec 009) moved behind the
+ * forge-driver seam (`src/server/forge/github.ts`, cockpit-ui redesign spec
+ * §"Forge-driver seam"). Kept so existing imports keep working.
+ */
+export { buildPrBody, createDraftPr } from './forge/github.ts';
+export type { DraftPrInput, DraftPrOutcome } from './forge/types.ts';

package/dist/server/pr.js

@@ -0,0 +1,7 @@
+/**
+ * Thin delegate — draft-PR creation (review gate, spec 009) moved behind the
+ * forge-driver seam (`src/server/forge/github.ts`, cockpit-ui redesign spec
+ * §"Forge-driver seam"). Kept so existing imports keep working.
+ */
+export { buildPrBody, createDraftPr } from './forge/github.js';
+//# sourceMappingURL=pr.js.map

package/dist/server/pr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr.js","sourceRoot":"","sources":["../../src/server/pr.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/server/project-context.d.ts

@@ -0,0 +1,120 @@
+import { AutomationStore } from '../automations/store.ts';
+import { RunStore } from '../runs/store.ts';
+import { WorkspaceSemaphore } from '../workspace/semaphore.ts';
+import { RunManager } from '../workflows/run.ts';
+/**
+ * Per-project server context (spec 2026-07-20-multi-project-workspace,
+ * "Project contexts" + "Boot flow"): one `{store, manager, dataDir,
+ * launchKey}` bundle per registered project, built lazily on first access.
+ *
+ * Building a context mirrors what `serveCommand` does for the boot project
+ * today — `RunStore.open(dataDir, { keepLive: true })`, `new RunManager`,
+ * orphan-worktree prune + count-based retention when the root is a git repo,
+ * then `manager.recover()` — so a project opened from the sidebar gets the
+ * exact same crash recovery the boot project gets. A registry entry whose
+ * root is gone (`status: 'missing'`) is never instantiated; `context()`
+ * throws a typed `ProjectContextError` the route layer maps to 409 (and
+ * `unknown-project` to 404).
+ */
+/** The per-project bundle the routes operate on. */
+export interface ProjectContext {
+    /** Registry project id (slug). */
+    id: string;
+    /** Realpath'd repo root the registry holds for this project. */
+    root: string;
+    /** `<root>/.ai/cezar` — all of this project's on-disk state. */
+    dataDir: string;
+    store: RunStore;
+    manager: RunManager;
+    automationStore: AutomationStore;
+    /** Bookmarklet auto-start secret (spec 011), ensured at context build. */
+    launchKey: string;
+}
+/** Minimal registry shape the context map needs — matches
+ *  `workspace/projects.ts` `ProjectListEntry` structurally, but injected so
+ *  tests stay hermetic (no `~/.cezar` reads). */
+export interface ProjectContextSource {
+    id: string;
+    root: string;
+    /** `missing` roots are never instantiated; `ok`/`not-git` both build. */
+    status: 'ok' | 'missing' | 'not-git';
+}
+export interface ProjectContextDeps {
+    /** Registry lookup — the workspace `listProjects()` in production. */
+    listProjects: () => Promise<readonly ProjectContextSource[]>;
+    /** Resolve the one automation store owned by this project. Production
+     *  injects the workspace automation coordinator's cached store so API
+     *  mutations and scheduler reads share the same in-memory state. */
+    automationStore?: (projectId: string, root: string) => AutomationStore;
+    /** Workspace-wide parallel-cap semaphore (spec 2026-07-20, step 2.5). Boot
+     *  passes the ONE instance it already gave the boot manager, so every
+     *  project's RunManager counts against the same `resources.maxParallel`.
+     *  When omitted, the map still shares one private instance across the
+     *  managers it builds (workspace defaults, never refreshed). */
+    semaphore?: WorkspaceSemaphore;
+}
+export type ProjectContextFailure = 'unknown-project' | 'missing-root';
+/** Typed failure so the route layer can map reasons to statuses (404/409)
+ *  without string matching. */
+export declare class ProjectContextError extends Error {
+    readonly reason: ProjectContextFailure;
+    readonly projectId: string;
+    constructor(reason: ProjectContextFailure, projectId: string);
+}
+/**
+ * Lazy `Map<projectId, ProjectContext>`. Nothing is instantiated at
+ * construction — the boot project is built eagerly by the caller via
+ * `context(bootId)`; every other project on first API touch. Concurrent
+ * `context()` calls for the same id share one build (the in-flight promise is
+ * cached), so recovery never runs twice for a project.
+ */
+export declare class ProjectContexts {
+    private readonly deps;
+    private readonly contexts;
+    private readonly building;
+    /** Live store-created subscribers; invoked before RunManager recovery. */
+    private readonly storeListeners;
+    /** Live `onContextBuilt` subscribers (workspace SSE, step 2.8). */
+    private readonly builtListeners;
+    /** One semaphore for every manager this map builds — injected by boot,
+     *  private-but-shared otherwise. */
+    private readonly semaphore;
+    constructor(deps: ProjectContextDeps);
+    /** The built context for `projectId`, building it on first access.
+     *  Throws `ProjectContextError` for unknown ids and missing roots. */
+    context(projectId: string): Promise<ProjectContext>;
+    /**
+     * Subscribe to future context builds (multi-project spec, step 2.8): the
+     * workspace SSE stream attaches to every already-built context at connect
+     * and uses this hook to pick up contexts built LATER — so subscribing never
+     * force-instantiates a project, yet a project's first API touch makes its
+     * events flow to already-open workspace streams. Returns an unsubscribe.
+     */
+    onContextBuilt(listener: (ctx: ProjectContext) => void): () => void;
+    /**
+     * Subscribe at the earliest RunStore lifecycle point: immediately after a
+     * lazy project's store opens and before its manager can recover runs. This
+     * stays generic so backend-specific observers do not leak into the context
+     * map. Returns an unsubscribe.
+     */
+    onStoreCreated(listener: (store: RunStore) => void): () => void;
+    /** A listener throwing must never fail the build (its store is usable). */
+    private notifyStoreCreated;
+    /** A listener throwing must never fail the build (its context is fine). */
+    private notifyBuilt;
+    /** Already-built context, without triggering a build. */
+    peek(projectId: string): ProjectContext | undefined;
+    /** Ids of every built context (dispose bookkeeping, shutdown flush). */
+    ids(): string[];
+    /**
+     * Tear down one project's context (project removal): the manager stops
+     * making moves on its own (`RunManager.dispose()` — usage-sampler
+     * unsubscribe, timers, queued state) and the store is closed — index
+     * flushed to disk, every event-bus subscriber detached. Returns false when
+     * nothing was built for `projectId`.
+     */
+    dispose(projectId: string): boolean;
+    /** Tear down every built context (process shutdown). */
+    disposeAll(): void;
+    private build;
+}

package/dist/server/project-context.js

@@ -0,0 +1,182 @@
+import { join } from 'node:path';
+import { AutomationStore } from '../automations/store.js';
+import { reconcileAutomationReceipts } from '../automations/task-template.js';
+import { DEFAULT_WORKTREE_RETENTION, resolveWorktreeRetention } from '../config.js';
+import { pruneOrphans } from '../git-worktree.js';
+import { reclaimWorktrees } from '../runs/retention.js';
+import { RunStore } from '../runs/store.js';
+import { WorkspaceSemaphore } from '../workspace/semaphore.js';
+import { RunManager } from '../workflows/run.js';
+import { ensureLaunchKey } from './launch-key.js';
+import { getRepoInfo } from './git.js';
+/** Typed failure so the route layer can map reasons to statuses (404/409)
+ *  without string matching. */
+export class ProjectContextError extends Error {
+    reason;
+    projectId;
+    constructor(reason, projectId) {
+        super(reason === 'unknown-project'
+            ? `unknown project: ${projectId}`
+            : `project root is missing: ${projectId}`);
+        this.reason = reason;
+        this.projectId = projectId;
+        this.name = 'ProjectContextError';
+    }
+}
+/**
+ * Lazy `Map<projectId, ProjectContext>`. Nothing is instantiated at
+ * construction — the boot project is built eagerly by the caller via
+ * `context(bootId)`; every other project on first API touch. Concurrent
+ * `context()` calls for the same id share one build (the in-flight promise is
+ * cached), so recovery never runs twice for a project.
+ */
+export class ProjectContexts {
+    deps;
+    contexts = new Map();
+    building = new Map();
+    /** Live store-created subscribers; invoked before RunManager recovery. */
+    storeListeners = new Set();
+    /** Live `onContextBuilt` subscribers (workspace SSE, step 2.8). */
+    builtListeners = new Set();
+    /** One semaphore for every manager this map builds — injected by boot,
+     *  private-but-shared otherwise. */
+    semaphore;
+    constructor(deps) {
+        this.deps = deps;
+        this.semaphore = deps.semaphore ?? new WorkspaceSemaphore();
+    }
+    /** The built context for `projectId`, building it on first access.
+     *  Throws `ProjectContextError` for unknown ids and missing roots. */
+    async context(projectId) {
+        const existing = this.contexts.get(projectId);
+        if (existing)
+            return existing;
+        const inFlight = this.building.get(projectId);
+        if (inFlight)
+            return inFlight;
+        const build = this.build(projectId);
+        this.building.set(projectId, build);
+        try {
+            const ctx = await build;
+            this.contexts.set(projectId, ctx);
+            this.notifyBuilt(ctx);
+            return ctx;
+        }
+        finally {
+            this.building.delete(projectId);
+        }
+    }
+    /**
+     * Subscribe to future context builds (multi-project spec, step 2.8): the
+     * workspace SSE stream attaches to every already-built context at connect
+     * and uses this hook to pick up contexts built LATER — so subscribing never
+     * force-instantiates a project, yet a project's first API touch makes its
+     * events flow to already-open workspace streams. Returns an unsubscribe.
+     */
+    onContextBuilt(listener) {
+        this.builtListeners.add(listener);
+        return () => this.builtListeners.delete(listener);
+    }
+    /**
+     * Subscribe at the earliest RunStore lifecycle point: immediately after a
+     * lazy project's store opens and before its manager can recover runs. This
+     * stays generic so backend-specific observers do not leak into the context
+     * map. Returns an unsubscribe.
+     */
+    onStoreCreated(listener) {
+        this.storeListeners.add(listener);
+        return () => this.storeListeners.delete(listener);
+    }
+    /** A listener throwing must never fail the build (its store is usable). */
+    notifyStoreCreated(store) {
+        for (const listener of [...this.storeListeners]) {
+            try {
+                listener(store);
+            }
+            catch {
+                // subscriber's problem — context construction can continue
+            }
+        }
+    }
+    /** A listener throwing must never fail the build (its context is fine). */
+    notifyBuilt(ctx) {
+        for (const listener of [...this.builtListeners]) {
+            try {
+                listener(ctx);
+            }
+            catch {
+                // subscriber's problem — the build succeeded
+            }
+        }
+    }
+    /** Already-built context, without triggering a build. */
+    peek(projectId) {
+        return this.contexts.get(projectId);
+    }
+    /** Ids of every built context (dispose bookkeeping, shutdown flush). */
+    ids() {
+        return [...this.contexts.keys()];
+    }
+    /**
+     * Tear down one project's context (project removal): the manager stops
+     * making moves on its own (`RunManager.dispose()` — usage-sampler
+     * unsubscribe, timers, queued state) and the store is closed — index
+     * flushed to disk, every event-bus subscriber detached. Returns false when
+     * nothing was built for `projectId`.
+     */
+    dispose(projectId) {
+        const ctx = this.contexts.get(projectId);
+        if (!ctx)
+            return false;
+        this.contexts.delete(projectId);
+        teardown(ctx);
+        return true;
+    }
+    /** Tear down every built context (process shutdown). */
+    disposeAll() {
+        for (const id of this.ids())
+            this.dispose(id);
+    }
+    async build(projectId) {
+        const projects = await this.deps.listProjects();
+        const project = projects.find((p) => p.id === projectId);
+        if (!project)
+            throw new ProjectContextError('unknown-project', projectId);
+        if (project.status === 'missing')
+            throw new ProjectContextError('missing-root', projectId);
+        const dataDir = join(project.root, '.ai/cezar');
+        // keepLive + recover() (#367), same as serveCommand: runs that were live
+        // when this project's context last existed are re-queued or resumed.
+        const store = RunStore.open(dataDir, { keepLive: true });
+        const automationStore = this.deps.automationStore?.(project.id, project.root)
+            ?? AutomationStore.open(dataDir);
+        reconcileAutomationReceipts(automationStore, store);
+        this.notifyStoreCreated(store);
+        const manager = new RunManager(store, project.root, { semaphore: this.semaphore });
+        try {
+            const launchKey = ensureLaunchKey(dataDir);
+            // Startup reconcile (spec 006) + count-based retention (#483) — the same
+            // best-effort sweeps serveCommand runs for the boot project, gated on the
+            // root actually being a git repo.
+            if (await getRepoInfo(project.root)) {
+                await pruneOrphans(project.root, new Set(store.listRuns().map((r) => r.id))).catch(() => []);
+                const keep = await resolveWorktreeRetention(project.root).catch(() => DEFAULT_WORKTREE_RETENTION);
+                await reclaimWorktrees(project.root, store, keep).catch(() => []);
+            }
+            await manager.recover();
+            return { id: project.id, root: project.root, dataDir, store, manager, automationStore, launchKey };
+        }
+        catch (err) {
+            // A failed build must not leak the half-built context's subscriptions.
+            teardown({ store, manager });
+            throw err;
+        }
+    }
+}
+/** Shared teardown for built and half-built contexts. */
+function teardown(ctx) {
+    ctx.manager.dispose();
+    ctx.store.flush();
+    ctx.store.removeAllListeners();
+}
+//# sourceMappingURL=project-context.js.map

package/dist/server/project-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-context.js","sourceRoot":"","sources":["../../src/server/project-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AA2DvC;+BAC+B;AAC/B,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAEjC,MAAM;IACN,SAAS;IAFpB,YACW,MAA6B,EAC7B,SAAiB;QAE1B,KAAK,CACH,MAAM,KAAK,iBAAiB;YAC1B,CAAC,CAAC,oBAAoB,SAAS,EAAE;YACjC,CAAC,CAAC,4BAA4B,SAAS,EAAE,CAC5C,CAAC;sBAPO,MAAM;yBACN,SAAS;QAOlB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IAWG,IAAI;IAVhB,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC7C,QAAQ,GAAG,IAAI,GAAG,EAAmC,CAAC;IACvE,0EAA0E;IACzD,cAAc,GAAG,IAAI,GAAG,EAA6B,CAAC;IACvE,mEAAmE;IAClD,cAAc,GAAG,IAAI,GAAG,EAAiC,CAAC;IAC3E;wCACoC;IACnB,SAAS,CAAqB;IAE/C,YAA6B,IAAwB;oBAAxB,IAAI;QAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,kBAAkB,EAAE,CAAC;IAC9D,CAAC;IAED;0EACsE;IACtE,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,GAAG,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,cAAc,CAAC,QAAuC;QACpD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,QAAmC;QAChD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,2EAA2E;IACnE,kBAAkB,CAAC,KAAe;QACxC,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,2EAA2E;IACnE,WAAW,CAAC,GAAmB;QACrC,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC;gBACH,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,SAAiB;QACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED,wEAAwE;IACxE,GAAG;QACD,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,SAAiB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wDAAwD;IACxD,UAAU;QACR,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,SAAiB;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,mBAAmB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QAE3F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChD,yEAAyE;QACzE,qEAAqE;QACrE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC;eACxE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,2BAA2B,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YAC3C,yEAAyE;YACzE,0EAA0E;YAC1E,kCAAkC;YAClC,IAAI,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAChF,GAAG,EAAE,CAAC,EAAc,CACrB,CAAC;gBACF,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAC7D,GAAG,EAAE,CAAC,0BAA0B,CACjC,CAAC;gBACF,MAAM,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,QAAQ,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7B,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF;AAED,yDAAyD;AACzD,SAAS,QAAQ,CAAC,GAA6C;IAC7D,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAClB,GAAG,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;AACjC,CAAC"}

package/dist/server/provider-action-gate.d.ts

@@ -0,0 +1,8 @@
+import type { ProviderId, ProviderStatusResponse } from '../core/provider-auth.ts';
+import type { RunRecord } from '../runs/store.ts';
+import { type WorkflowDef } from '../workflows/types.ts';
+export declare function providersRequiredByWorkflow(workflow: WorkflowDef, fallback: ProviderId): ProviderId[];
+export declare function providerForExistingRun(run: RunRecord, override?: ProviderId): ProviderId;
+/** The provider that owns a currently live session, when the record is attributed. */
+export declare function providerForActiveRun(run: RunRecord): ProviderId;
+export declare function unavailableProviderMessage(required: readonly ProviderId[], response: ProviderStatusResponse): string | null;

package/dist/server/provider-action-gate.js

@@ -0,0 +1,56 @@
+import { PROVIDER_IDS } from '../core/provider-auth.js';
+import { stepKind } from '../workflows/types.js';
+const ORDER = PROVIDER_IDS;
+const LABEL = {
+    claude: 'Claude Code',
+    codex: 'Codex',
+    opencode: 'OpenCode',
+    pi: 'pi',
+};
+export function providersRequiredByWorkflow(workflow, fallback) {
+    const required = new Set();
+    for (const step of workflow.steps) {
+        if (stepKind(step) === 'agent')
+            required.add(step.runner ?? fallback);
+    }
+    return ORDER.filter((provider) => required.has(provider));
+}
+export function providerForExistingRun(run, override) {
+    if (override)
+        return override;
+    return run.runner ?? 'claude';
+}
+/** The provider that owns a currently live session, when the record is attributed. */
+export function providerForActiveRun(run) {
+    const current = run.currentStepId
+        ? run.steps.find((step) => step.id === run.currentStepId)
+        : undefined;
+    if (current?.backend)
+        return current.backend;
+    // `execute()` persists the task backend before it starts a step. This is the
+    // conservative fallback for older records whose current step lacks affinity.
+    if (run.runner)
+        return run.runner;
+    // Pre-affinity records can still carry a prior attributed session. It is a
+    // better fallback than guessing Claude, but never outranks the live step or
+    // the run's current runner.
+    for (let index = run.steps.length - 1; index >= 0; index -= 1) {
+        const backend = run.steps[index]?.backend;
+        if (backend)
+            return backend;
+    }
+    return 'claude';
+}
+export function unavailableProviderMessage(required, response) {
+    for (const provider of required) {
+        const row = response.providers.find(({ provider: id }) => id === provider);
+        if (row?.enabled === false) {
+            return `${LABEL[provider]} is disabled. Enable it in Settings → Agents → Providers.`;
+        }
+        if (row?.status !== 'connected') {
+            return `${LABEL[provider]} credentials are unavailable. Authorize it in Settings → Agents → Providers.`;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=provider-action-gate.js.map

package/dist/server/provider-action-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-action-gate.js","sourceRoot":"","sources":["../../src/server/provider-action-gate.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EAAE,QAAQ,EAAoB,MAAM,uBAAuB,CAAC;AAEnE,MAAM,KAAK,GAA0B,YAAY,CAAC;AAClD,MAAM,KAAK,GAA+B;IACxC,MAAM,EAAE,aAAa;IACrB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,EAAE,EAAE,IAAI;CACT,CAAC;AAEF,MAAM,UAAU,2BAA2B,CACzC,QAAqB,EACrB,QAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAc,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAc,EACd,QAAqB;IAErB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC;AAChC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,GAAc;IACjD,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa;QAC/B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,aAAa,CAAC;QACzD,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,OAAO,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC;IAE7C,6EAA6E;IAC7E,6EAA6E;IAC7E,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC;IAElC,2EAA2E;IAC3E,4EAA4E;IAC5E,4BAA4B;IAC5B,KAAK,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAC1C,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAA+B,EAC/B,QAAgC;IAEhC,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;QAC3E,IAAI,GAAG,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YAC3B,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,2DAA2D,CAAC;QACvF,CAAC;QACD,IAAI,GAAG,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;YAChC,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,8EAA8E,CAAC;QAC1G,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/server/provider-auth-runtime.d.ts

@@ -0,0 +1,21 @@
+import { type ProviderAuthService, type ProviderStatus } from '../core/provider-auth.ts';
+import type { RunStore } from '../runs/store.ts';
+export declare function watchProviderRuntimeAuthFailures(store: RunStore, providerAuth: ProviderAuthService, onInvalidated: (status: ProviderStatus) => void): () => void;
+/**
+ * Process-wide dedupe for store observation. The same boot store is wired
+ * before recovery and again when the HTTP app is constructed; lazy stores are
+ * wired both at creation and at the existing context-built hook. One listener
+ * per RunStore keeps those lifecycle overlaps harmless.
+ */
+export declare class ProviderRuntimeAuthObserver {
+    private readonly providerAuth;
+    private readonly onInvalidated;
+    private readonly watched;
+    constructor(providerAuth: ProviderAuthService, onInvalidated: (status: ProviderStatus) => void);
+    watch(store: RunStore): void;
+}
+/**
+ * Boot ordering seam: observation must exist before recovery starts because a
+ * resumed runner can emit its first normalized error before recover() returns.
+ */
+export declare function recoverWithProviderRuntimeAuthObservation(store: RunStore, recover: () => Promise<void>, observer: ProviderRuntimeAuthObserver): Promise<void>;