happy2 0.0.5 → 0.0.11

package/packages/happy2-server/dist/modules/setup/setupGetCombinedStatus.js

@@ -0,0 +1,73 @@
+import { SERVER_SETUP_STEPS, USER_ONBOARDING_STEPS, } from "./types.js";
+import {} from "../drizzle.js";
+import { accounts, users } from "../schema.js";
+import { and, eq, isNull } from "drizzle-orm";
+import { emptyUserSteps } from "./impl/emptyUserSteps.js";
+import { publicStatus } from "./impl/publicStatus.js";
+import { redactServerSteps } from "./impl/redactServerSteps.js";
+import { readServerSnapshot } from "./impl/readServerSnapshot.js";
+import { readUserSteps } from "./impl/readUserSteps.js";
+/**
+ * Derives the authenticated account's next onboarding route from server and user step state.
+ * It also centralizes setup-management eligibility and redaction so incomplete accounts cannot infer protected server details.
+ */
+export async function setupGetCombinedStatus(executor, accountId) {
+    const snapshot = await readServerSnapshot(executor);
+    const [user] = await executor
+        .select({
+        id: users.id,
+        role: users.role,
+    })
+        .from(users)
+        .innerJoin(accounts, eq(accounts.id, users.accountId))
+        .where(and(eq(users.accountId, accountId), eq(users.kind, "human"), isNull(users.deletedAt), eq(accounts.active, 1), isNull(accounts.bannedAt), isNull(accounts.deletedAt)))
+        .limit(1);
+    const canManage = user
+        ? user.role === "admin"
+        : !snapshot.bootstrapAdminUserId && snapshot.bootstrapAccountId === accountId;
+    const userSteps = user ? await readUserSteps(executor, user.id) : emptyUserSteps();
+    const serverComplete = snapshot.steps.server_setup_complete.state === "complete";
+    const userComplete = Boolean(user) &&
+        USER_ONBOARDING_STEPS.every((step) => userSteps[step].state === "complete" || userSteps[step].state === "skipped");
+    const route = !user
+        ? {
+            scope: "profile",
+            step: "profile",
+        }
+        : !serverComplete
+            ? canManage
+                ? {
+                    scope: "server",
+                    step: SERVER_SETUP_STEPS.find((step) => snapshot.steps[step].state !== "complete"),
+                }
+                : {
+                    scope: "waiting",
+                    step: "server_setup",
+                }
+            : !userComplete
+                ? {
+                    scope: "user",
+                    step: USER_ONBOARDING_STEPS.find((step) => userSteps[step].state !== "complete" &&
+                        userSteps[step].state !== "skipped"),
+                }
+                : {
+                    scope: "complete",
+                };
+    return {
+        server: {
+            schemaVersion: snapshot.schemaVersion,
+            complete: serverComplete,
+            canManage,
+            registration: publicStatus(snapshot).registration,
+            steps: redactServerSteps(snapshot.steps, canManage),
+        },
+        user: {
+            profile: user ? "complete" : "pending",
+            complete: userComplete,
+            steps: userSteps,
+        },
+        route,
+        complete: serverComplete && userComplete,
+    };
+}
+//# sourceMappingURL=setupGetCombinedStatus.js.map

package/packages/happy2-server/dist/modules/setup/setupGetCombinedStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupGetCombinedStatus.js","sourceRoot":"","sources":["../../../sources/modules/setup/setupGetCombinedStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,kBAAkB,EAClB,qBAAqB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAwB,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,QAAyB,EACzB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,QAAQ;SACxB,MAAM,CAAC;QACJ,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;KACnB,CAAC;SACD,IAAI,CAAC,KAAK,CAAC;SACX,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;SACrD,KAAK,CACF,GAAG,CACC,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,EAC9B,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EACvB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACvB,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EACtB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EACzB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAC7B,CACJ;SACA,KAAK,CAAC,CAAC,CAAC,CAAC;IACd,MAAM,SAAS,GAAG,IAAI;QAClB,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO;QACvB,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,IAAI,QAAQ,CAAC,kBAAkB,KAAK,SAAS,CAAC;IAClF,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IACnF,MAAM,cAAc,GAAG,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,KAAK,KAAK,UAAU,CAAC;IACjF,MAAM,YAAY,GACd,OAAO,CAAC,IAAI,CAAC;QACb,qBAAqB,CAAC,KAAK,CACvB,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CACxF,CAAC;IACN,MAAM,KAAK,GAAG,CAAC,IAAI;QACf,CAAC,CAAE;YACG,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,SAAS;SACR;QACb,CAAC,CAAC,CAAC,cAAc;YACf,CAAC,CAAC,SAAS;gBACP,CAAC,CAAE;oBACG,KAAK,EAAE,QAAQ;oBACf,IAAI,EAAE,kBAAkB,CAAC,IAAI,CACzB,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU,CACrD;iBACK;gBACb,CAAC,CAAE;oBACG,KAAK,EAAE,SAAS;oBAChB,IAAI,EAAE,cAAc;iBACb;YACjB,CAAC,CAAC,CAAC,YAAY;gBACb,CAAC,CAAE;oBACG,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,qBAAqB,CAAC,IAAI,CAC5B,CAAC,IAAI,EAAE,EAAE,CACL,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU;wBACpC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CACzC;iBACK;gBACb,CAAC,CAAE;oBACG,KAAK,EAAE,UAAU;iBACV,CAAC;IACtB,OAAO;QACH,MAAM,EAAE;YACJ,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,QAAQ,EAAE,cAAc;YACxB,SAAS;YACT,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,YAAY;YACjD,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;SACtD;QACD,IAAI,EAAE;YACF,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YACtC,QAAQ,EAAE,YAAY;YACtB,KAAK,EAAE,SAAS;SACnB;QACD,KAAK;QACL,QAAQ,EAAE,cAAc,IAAI,YAAY;KAC3C,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/setup/setupGetCurrentSyncHint.d.ts

@@ -0,0 +1,11 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Snapshots the current global sequence into a setup-related realtime reconciliation hint.
+ * The supplied areas are copied so callers can safely publish the result without sharing mutable input state.
+ */
+export declare function setupGetCurrentSyncHint(executor: DrizzleExecutor, areas: readonly string[]): Promise<{
+    sequence: string;
+    chats: [];
+    areas: string[];
+}>;
+//# sourceMappingURL=setupGetCurrentSyncHint.d.ts.map

package/packages/happy2-server/dist/modules/setup/setupGetCurrentSyncHint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupGetCurrentSyncHint.d.ts","sourceRoot":"","sources":["../../../sources/modules/setup/setupGetCurrentSyncHint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAGrD;;;GAGG;AACH,wBAAsB,uBAAuB,CACzC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,SAAS,MAAM,EAAE,GACzB,OAAO,CAAC;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,EAAE,CAAC;IACV,KAAK,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC,CAaD"}

package/packages/happy2-server/dist/modules/setup/setupGetCurrentSyncHint.js

@@ -0,0 +1,23 @@
+import {} from "../drizzle.js";
+import { eq } from "drizzle-orm";
+import { serverSyncState } from "../schema.js";
+/**
+ * Snapshots the current global sequence into a setup-related realtime reconciliation hint.
+ * The supplied areas are copied so callers can safely publish the result without sharing mutable input state.
+ */
+export async function setupGetCurrentSyncHint(executor, areas) {
+    const [state] = await executor
+        .select({
+        sequence: serverSyncState.sequence,
+    })
+        .from(serverSyncState)
+        .where(eq(serverSyncState.id, 1));
+    if (!state)
+        throw new Error("Sync state is not initialized");
+    return {
+        sequence: String(state.sequence),
+        chats: [],
+        areas: [...areas],
+    };
+}
+//# sourceMappingURL=setupGetCurrentSyncHint.js.map

package/packages/happy2-server/dist/modules/setup/setupGetCurrentSyncHint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupGetCurrentSyncHint.js","sourceRoot":"","sources":["../../../sources/modules/setup/setupGetCurrentSyncHint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,QAAyB,EACzB,KAAwB;IAMxB,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,QAAQ;SACzB,MAAM,CAAC;QACJ,QAAQ,EAAE,eAAe,CAAC,QAAQ;KACrC,CAAC;SACD,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC7D,OAAO;QACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;KACpB,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/setup/setupGetPublicStatus.d.ts

@@ -0,0 +1,8 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type PublicServerSetupStatus } from "./types.js";
+/**
+ * Derives the public bootstrap, configuration, or complete phase and registration availability from the validated durable setup snapshot.
+ * Publishing only this reduced status lets unauthenticated clients choose the correct entry flow without exposing setup metadata or errors.
+ */
+export declare function setupGetPublicStatus(executor: DrizzleExecutor): Promise<PublicServerSetupStatus>;
+//# sourceMappingURL=setupGetPublicStatus.d.ts.map

package/packages/happy2-server/dist/modules/setup/setupGetPublicStatus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupGetPublicStatus.d.ts","sourceRoot":"","sources":["../../../sources/modules/setup/setupGetPublicStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAG1D;;;GAGG;AACH,wBAAsB,oBAAoB,CACtC,QAAQ,EAAE,eAAe,GAC1B,OAAO,CAAC,uBAAuB,CAAC,CAGlC"}

package/packages/happy2-server/dist/modules/setup/setupGetPublicStatus.js

@@ -0,0 +1,13 @@
+import {} from "../drizzle.js";
+import {} from "./types.js";
+import { publicStatus } from "./impl/publicStatus.js";
+import { readServerSnapshot } from "./impl/readServerSnapshot.js";
+/**
+ * Derives the public bootstrap, configuration, or complete phase and registration availability from the validated durable setup snapshot.
+ * Publishing only this reduced status lets unauthenticated clients choose the correct entry flow without exposing setup metadata or errors.
+ */
+export async function setupGetPublicStatus(executor) {
+    const snapshot = await readServerSnapshot(executor);
+    return publicStatus(snapshot);
+}
+//# sourceMappingURL=setupGetPublicStatus.js.map

package/packages/happy2-server/dist/modules/setup/setupGetPublicStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupGetPublicStatus.js","sourceRoot":"","sources":["../../../sources/modules/setup/setupGetPublicStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAgC,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,QAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/packages/happy2-server/dist/modules/setup/setupGetRegistrationAvailability.d.ts

@@ -0,0 +1,8 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type RegistrationAvailability } from "./types.js";
+/**
+ * Returns bootstrap, open, or closed registration availability after applying the complete server-setup state machine.
+ * Reusing the public-status derivation prevents authentication providers from interpreting incomplete onboarding differently from setup routes.
+ */
+export declare function setupGetRegistrationAvailability(executor: DrizzleExecutor): Promise<RegistrationAvailability>;
+//# sourceMappingURL=setupGetRegistrationAvailability.d.ts.map

package/packages/happy2-server/dist/modules/setup/setupGetRegistrationAvailability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupGetRegistrationAvailability.d.ts","sourceRoot":"","sources":["../../../sources/modules/setup/setupGetRegistrationAvailability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,KAAK,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D;;;GAGG;AACH,wBAAsB,gCAAgC,CAClD,QAAQ,EAAE,eAAe,GAC1B,OAAO,CAAC,wBAAwB,CAAC,CAEnC"}

package/packages/happy2-server/dist/modules/setup/setupGetRegistrationAvailability.js

@@ -0,0 +1,11 @@
+import {} from "../drizzle.js";
+import {} from "./types.js";
+import { setupGetPublicStatus } from "./setupGetPublicStatus.js";
+/**
+ * Returns bootstrap, open, or closed registration availability after applying the complete server-setup state machine.
+ * Reusing the public-status derivation prevents authentication providers from interpreting incomplete onboarding differently from setup routes.
+ */
+export async function setupGetRegistrationAvailability(executor) {
+    return (await setupGetPublicStatus(executor)).registration;
+}
+//# sourceMappingURL=setupGetRegistrationAvailability.js.map

package/packages/happy2-server/dist/modules/setup/setupGetRegistrationAvailability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupGetRegistrationAvailability.js","sourceRoot":"","sources":["../../../sources/modules/setup/setupGetRegistrationAvailability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,MAAM,eAAe,CAAC;AACrD,OAAO,EAAiC,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAClD,QAAyB;IAEzB,OAAO,CAAC,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/D,CAAC"}

package/packages/happy2-server/dist/modules/setup/setupRecordOperationalStep.d.ts

@@ -0,0 +1,14 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type OperationalServerSetupStep, type SafeSetupMetadata, type ServerSetupStepState, type SetupSyncHint } from "./types.js";
+/**
+ * Applies a valid lifecycle transition to serverSetupSteps after checking prerequisites and normalizing metadata or failure details.
+ * Inserting syncEvents with the transition lets setup clients resume from the exact durable progress recorded by background work.
+ */
+export declare function setupRecordOperationalStep(executor: DrizzleExecutor, input: {
+    step: OperationalServerSetupStep;
+    state: ServerSetupStepState;
+    actorUserId?: string;
+    metadata?: SafeSetupMetadata;
+    lastError?: string;
+}): Promise<SetupSyncHint | undefined>;
+//# sourceMappingURL=setupRecordOperationalStep.d.ts.map

package/packages/happy2-server/dist/modules/setup/setupRecordOperationalStep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupRecordOperationalStep.d.ts","sourceRoot":"","sources":["../../../sources/modules/setup/setupRecordOperationalStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AACtE,OAAO,EAEH,KAAK,0BAA0B,EAC/B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EAEzB,KAAK,aAAa,EACrB,MAAM,YAAY,CAAC;AAapB;;;GAGG;AACH,wBAAsB,0BAA0B,CAC5C,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,IAAI,EAAE,0BAA0B,CAAC;IACjC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,GACF,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA4CpC"}

package/packages/happy2-server/dist/modules/setup/setupRecordOperationalStep.js

@@ -0,0 +1,55 @@
+import { withTransaction } from "../drizzle.js";
+import { OPERATIONAL_SERVER_SETUP_STEPS, SetupError, } from "./types.js";
+import { allowedServerTransition } from "./impl/allowedServerTransition.js";
+import { encodedMetadata } from "./impl/encodedMetadata.js";
+import { eq } from "drizzle-orm";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { requirePrerequisitesDb } from "./impl/requirePrerequisitesDb.js";
+import { serverSetupSteps, syncEvents } from "../schema.js";
+import { serverStepDb } from "./impl/serverStepDb.js";
+import { setupHint } from "./impl/setupHint.js";
+import { validatedLastError } from "./impl/validatedLastError.js";
+/**
+ * Applies a valid lifecycle transition to serverSetupSteps after checking prerequisites and normalizing metadata or failure details.
+ * Inserting syncEvents with the transition lets setup clients resume from the exact durable progress recorded by background work.
+ */
+export async function setupRecordOperationalStep(executor, input) {
+    if (!OPERATIONAL_SERVER_SETUP_STEPS.includes(input.step))
+        throw new SetupError("invalid", "Unsupported operational setup step");
+    const metadataJson = encodedMetadata(input.metadata);
+    const lastError = validatedLastError(input.state, input.lastError);
+    return withTransaction(executor, async (tx) => {
+        await requirePrerequisitesDb(tx, input.step);
+        const current = await serverStepDb(tx, input.step);
+        const sameState = current.state === input.state;
+        if (sameState &&
+            current.metadataJson === metadataJson &&
+            current.lastError === (lastError ?? null))
+            return undefined;
+        if (sameState && input.state === "complete")
+            throw new SetupError("conflict", `Completed setup step ${input.step} is immutable`);
+        if (!sameState && !allowedServerTransition(current.state, input.state))
+            throw new SetupError("conflict", `Cannot transition ${input.step} from ${current.state} to ${input.state}`);
+        const now = new Date().toISOString();
+        await tx
+            .update(serverSetupSteps)
+            .set({
+            state: input.state,
+            metadataJson,
+            lastError: lastError ?? null,
+            startedAt: input.state === "in_progress" && !current.startedAt ? now : current.startedAt,
+            completedAt: input.state === "complete" ? now : null,
+            updatedAt: now,
+        })
+            .where(eq(serverSetupSteps.step, input.step));
+        const sequence = await syncSequenceNext(tx);
+        await tx.insert(syncEvents).values({
+            sequence,
+            kind: `setup.${input.step}.${input.state}`,
+            entityId: input.step,
+            actorUserId: input.actorUserId ?? null,
+        });
+        return setupHint(sequence);
+    });
+}
+//# sourceMappingURL=setupRecordOperationalStep.js.map

package/packages/happy2-server/dist/modules/setup/setupRecordOperationalStep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupRecordOperationalStep.js","sourceRoot":"","sources":["../../../sources/modules/setup/setupRecordOperationalStep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EACH,8BAA8B,EAI9B,UAAU,GAEb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,QAAyB,EACzB,KAMC;IAED,IAAI,CAAC,8BAA8B,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,SAAS,EAAE,oCAAoC,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACnE,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,sBAAsB,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,CAAC;QAChD,IACI,SAAS;YACT,OAAO,CAAC,YAAY,KAAK,YAAY;YACrC,OAAO,CAAC,SAAS,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;YAEzC,OAAO,SAAS,CAAC;QACrB,IAAI,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU;YACvC,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,wBAAwB,KAAK,CAAC,IAAI,eAAe,CAAC,CAAC;QACxF,IAAI,CAAC,SAAS,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;YAClE,MAAM,IAAI,UAAU,CAChB,UAAU,EACV,qBAAqB,KAAK,CAAC,IAAI,SAAS,OAAO,CAAC,KAAK,OAAO,KAAK,CAAC,KAAK,EAAE,CAC5E,CAAC;QACN,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,EAAE;aACH,MAAM,CAAC,gBAAgB,CAAC;aACxB,GAAG,CAAC;YACD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,YAAY;YACZ,SAAS,EAAE,SAAS,IAAI,IAAI;YAC5B,SAAS,EACL,KAAK,CAAC,KAAK,KAAK,aAAa,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS;YACjF,WAAW,EAAE,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;YACpD,SAAS,EAAE,GAAG;SACjB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;YAC/B,QAAQ;YACR,IAAI,EAAE,SAAS,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE;YAC1C,QAAQ,EAAE,KAAK,CAAC,IAAI;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;SACzC,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/setup/setupSandboxProviderGetSelected.d.ts

@@ -0,0 +1,10 @@
+import type { DrizzleExecutor } from "../drizzle.js";
+/**
+ * Resolves the provider whose selection and validation are both complete in serverSetupSteps without mutating durable state.
+ * Keeping this strict read boundary separate prevents agent operations from trusting incomplete or mismatched setup metadata after restart.
+ */
+export declare function setupSandboxProviderGetSelected(executor: DrizzleExecutor): Promise<{
+    id: string;
+    version?: string;
+} | undefined>;
+//# sourceMappingURL=setupSandboxProviderGetSelected.d.ts.map

package/packages/happy2-server/dist/modules/setup/setupSandboxProviderGetSelected.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupSandboxProviderGetSelected.d.ts","sourceRoot":"","sources":["../../../sources/modules/setup/setupSandboxProviderGetSelected.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAIrD;;;GAGG;AACH,wBAAsB,+BAA+B,CACjD,QAAQ,EAAE,eAAe,GAC1B,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAoCvD"}

package/packages/happy2-server/dist/modules/setup/setupSandboxProviderGetSelected.js

@@ -0,0 +1,35 @@
+import { and, eq, inArray } from "drizzle-orm";
+import { serverSetupSteps } from "../schema.js";
+import { safeMetadata } from "./impl/safeMetadata.js";
+/**
+ * Resolves the provider whose selection and validation are both complete in serverSetupSteps without mutating durable state.
+ * Keeping this strict read boundary separate prevents agent operations from trusting incomplete or mismatched setup metadata after restart.
+ */
+export async function setupSandboxProviderGetSelected(executor) {
+    const rows = await executor
+        .select({
+        step: serverSetupSteps.step,
+        state: serverSetupSteps.state,
+        metadataJson: serverSetupSteps.metadataJson,
+    })
+        .from(serverSetupSteps)
+        .where(and(inArray(serverSetupSteps.step, [
+        "sandbox_provider_selected",
+        "sandbox_provider_validated",
+    ]), eq(serverSetupSteps.state, "complete")));
+    if (rows.length !== 2)
+        return undefined;
+    const selected = safeMetadata(rows.find(({ step }) => step === "sandbox_provider_selected")?.metadataJson);
+    const validated = safeMetadata(rows.find(({ step }) => step === "sandbox_provider_validated")?.metadataJson);
+    const selectedId = selected?.providerId;
+    const validatedId = validated?.providerId;
+    if (typeof selectedId !== "string" ||
+        typeof validatedId !== "string" ||
+        selectedId !== validatedId)
+        return undefined;
+    return {
+        id: selectedId,
+        ...(typeof validated?.version === "string" ? { version: validated.version } : {}),
+    };
+}
+//# sourceMappingURL=setupSandboxProviderGetSelected.js.map

package/packages/happy2-server/dist/modules/setup/setupSandboxProviderGetSelected.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupSandboxProviderGetSelected.js","sourceRoot":"","sources":["../../../sources/modules/setup/setupSandboxProviderGetSelected.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACjD,QAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM,QAAQ;SACtB,MAAM,CAAC;QACJ,IAAI,EAAE,gBAAgB,CAAC,IAAI;QAC3B,KAAK,EAAE,gBAAgB,CAAC,KAAK;QAC7B,YAAY,EAAE,gBAAgB,CAAC,YAAY;KAC9C,CAAC;SACD,IAAI,CAAC,gBAAgB,CAAC;SACtB,KAAK,CACF,GAAG,CACC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE;QAC3B,2BAA2B;QAC3B,4BAA4B;KAC/B,CAAC,EACF,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CACzC,CACJ,CAAC;IACN,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,QAAQ,GAAG,YAAY,CACzB,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,2BAA2B,CAAC,EAAE,YAAY,CAC9E,CAAC;IACF,MAAM,SAAS,GAAG,YAAY,CAC1B,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,4BAA4B,CAAC,EAAE,YAAY,CAC/E,CAAC;IACF,MAAM,UAAU,GAAG,QAAQ,EAAE,UAAU,CAAC;IACxC,MAAM,WAAW,GAAG,SAAS,EAAE,UAAU,CAAC;IAC1C,IACI,OAAO,UAAU,KAAK,QAAQ;QAC9B,OAAO,WAAW,KAAK,QAAQ;QAC/B,UAAU,KAAK,WAAW;QAE1B,OAAO,SAAS,CAAC;IACrB,OAAO;QACH,EAAE,EAAE,UAAU;QACd,GAAG,CAAC,OAAO,SAAS,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC;AACN,CAAC"}

package/packages/happy2-server/dist/modules/setup/setupSandboxProviderSelect.d.ts

@@ -0,0 +1,11 @@
+import { type DrizzleExecutor } from "../drizzle.js";
+import { type SetupSyncHint } from "./types.js";
+/**
+ * Atomically commits the healthy provider to sandbox_provider_selected and sandbox_provider_validated in serverSetupSteps and appends one syncEvents hint.
+ * This administrator-only boundary makes the durable choice restart-safe and prevents agent execution from observing a selected but unvalidated provider.
+ */
+export declare function setupSandboxProviderSelect(executor: DrizzleExecutor, actorUserId: string, provider: {
+    id: string;
+    version?: string;
+}): Promise<SetupSyncHint | undefined>;
+//# sourceMappingURL=setupSandboxProviderSelect.d.ts.map

package/packages/happy2-server/dist/modules/setup/setupSandboxProviderSelect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupSandboxProviderSelect.d.ts","sourceRoot":"","sources":["../../../sources/modules/setup/setupSandboxProviderSelect.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,eAAe,EAAmB,MAAM,eAAe,CAAC;AAStE,OAAO,EAAc,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAE5D;;;GAGG;AACH,wBAAsB,0BAA0B,CAC5C,QAAQ,EAAE,eAAe,EACzB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAyDpC"}

package/packages/happy2-server/dist/modules/setup/setupSandboxProviderSelect.js

@@ -0,0 +1,72 @@
+import { eq } from "drizzle-orm";
+import { withTransaction } from "../drizzle.js";
+import { serverSetupSteps, syncEvents } from "../schema.js";
+import { syncSequenceNext } from "../sync/syncSequenceNext.js";
+import { encodedMetadata } from "./impl/encodedMetadata.js";
+import { requireActiveAdministratorDb } from "./impl/requireActiveAdministratorDb.js";
+import { requirePrerequisitesDb } from "./impl/requirePrerequisitesDb.js";
+import { safeMetadata } from "./impl/safeMetadata.js";
+import { serverStepDb } from "./impl/serverStepDb.js";
+import { setupHint } from "./impl/setupHint.js";
+import { SetupError } from "./types.js";
+/**
+ * Atomically commits the healthy provider to sandbox_provider_selected and sandbox_provider_validated in serverSetupSteps and appends one syncEvents hint.
+ * This administrator-only boundary makes the durable choice restart-safe and prevents agent execution from observing a selected but unvalidated provider.
+ */
+export async function setupSandboxProviderSelect(executor, actorUserId, provider) {
+    if (!/^[a-z][a-z0-9_-]{0,63}$/.test(provider.id))
+        throw new SetupError("invalid", "Invalid sandbox provider id");
+    if (provider.version !== undefined && Buffer.byteLength(provider.version) > 512)
+        throw new SetupError("invalid", "Sandbox provider version exceeds 512 bytes");
+    return withTransaction(executor, async (tx) => {
+        await requireActiveAdministratorDb(tx, actorUserId);
+        await requirePrerequisitesDb(tx, "sandbox_provider_selected");
+        const selected = await serverStepDb(tx, "sandbox_provider_selected");
+        const validated = await serverStepDb(tx, "sandbox_provider_validated");
+        const selectedMetadata = safeMetadata(selected.metadataJson);
+        const validatedMetadata = safeMetadata(validated.metadataJson);
+        if (selected.state === "complete" || validated.state === "complete") {
+            if (selected.state === "complete" &&
+                validated.state === "complete" &&
+                selectedMetadata?.providerId === provider.id &&
+                validatedMetadata?.providerId === provider.id)
+                return undefined;
+            throw new SetupError("conflict", "A sandbox provider was already selected");
+        }
+        const now = new Date().toISOString();
+        await tx
+            .update(serverSetupSteps)
+            .set({
+            state: "complete",
+            metadataJson: encodedMetadata({ providerId: provider.id }),
+            lastError: null,
+            startedAt: selected.startedAt ?? now,
+            completedAt: now,
+            updatedAt: now,
+        })
+            .where(eq(serverSetupSteps.step, "sandbox_provider_selected"));
+        await tx
+            .update(serverSetupSteps)
+            .set({
+            state: "complete",
+            metadataJson: encodedMetadata({
+                providerId: provider.id,
+                ...(provider.version ? { version: provider.version } : {}),
+            }),
+            lastError: null,
+            startedAt: validated.startedAt ?? now,
+            completedAt: now,
+            updatedAt: now,
+        })
+            .where(eq(serverSetupSteps.step, "sandbox_provider_validated"));
+        const sequence = await syncSequenceNext(tx);
+        await tx.insert(syncEvents).values({
+            sequence,
+            kind: "setup.sandboxProvider.selected",
+            entityId: provider.id,
+            actorUserId,
+        });
+        return setupHint(sequence);
+    });
+}
+//# sourceMappingURL=setupSandboxProviderSelect.js.map

package/packages/happy2-server/dist/modules/setup/setupSandboxProviderSelect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupSandboxProviderSelect.js","sourceRoot":"","sources":["../../../sources/modules/setup/setupSandboxProviderSelect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAwB,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,4BAA4B,EAAE,MAAM,wCAAwC,CAAC;AACtF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAsB,MAAM,YAAY,CAAC;AAE5D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,QAAyB,EACzB,WAAmB,EACnB,QAA0C;IAE1C,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,UAAU,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,GAAG;QAC3E,MAAM,IAAI,UAAU,CAAC,SAAS,EAAE,4CAA4C,CAAC,CAAC;IAClF,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,MAAM,4BAA4B,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QACpD,MAAM,sBAAsB,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,2BAA2B,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAC;QACvE,MAAM,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU,IAAI,SAAS,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAClE,IACI,QAAQ,CAAC,KAAK,KAAK,UAAU;gBAC7B,SAAS,CAAC,KAAK,KAAK,UAAU;gBAC9B,gBAAgB,EAAE,UAAU,KAAK,QAAQ,CAAC,EAAE;gBAC5C,iBAAiB,EAAE,UAAU,KAAK,QAAQ,CAAC,EAAE;gBAE7C,OAAO,SAAS,CAAC;YACrB,MAAM,IAAI,UAAU,CAAC,UAAU,EAAE,yCAAyC,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,EAAE;aACH,MAAM,CAAC,gBAAgB,CAAC;aACxB,GAAG,CAAC;YACD,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,eAAe,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC1D,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,GAAG;YACpC,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,GAAG;SACjB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC,CAAC;QACnE,MAAM,EAAE;aACH,MAAM,CAAC,gBAAgB,CAAC;aACxB,GAAG,CAAC;YACD,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,eAAe,CAAC;gBAC1B,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D,CAAC;YACF,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,GAAG;YACrC,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,GAAG;SACjB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;YAC/B,QAAQ;YACR,IAAI,EAAE,gCAAgC;YACtC,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACrB,WAAW;SACd,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACP,CAAC"}

package/packages/happy2-server/dist/modules/setup/types.d.ts

@@ -0,0 +1,70 @@
+export declare const SERVER_SETUP_SCHEMA_VERSION = 1;
+export declare const SERVER_SETUP_STEPS: readonly ["bootstrap_administrator", "sandbox_provider_selected", "sandbox_provider_validated", "base_image_selected", "base_image_build_requested", "base_image_ready", "default_agent_created", "registration_policy_selected", "server_setup_complete"];
+export type ServerSetupStep = (typeof SERVER_SETUP_STEPS)[number];
+export type ServerSetupStepState = "pending" | "in_progress" | "complete" | "failed";
+export declare const OPERATIONAL_SERVER_SETUP_STEPS: readonly ["sandbox_provider_selected", "sandbox_provider_validated", "base_image_selected", "base_image_build_requested", "base_image_ready"];
+export type OperationalServerSetupStep = (typeof OPERATIONAL_SERVER_SETUP_STEPS)[number];
+export declare const USER_ONBOARDING_STEPS: readonly ["avatar", "desktop_notifications"];
+export type UserOnboardingStep = (typeof USER_ONBOARDING_STEPS)[number];
+export type UserOnboardingStepState = "pending" | "complete" | "skipped";
+export type SafeSetupMetadataValue = string | number | boolean | null;
+export type SafeSetupMetadata = Readonly<Record<string, SafeSetupMetadataValue>>;
+export type SetupBaseImageBuildMode = "build" | "download_and_build";
+export type SetupBaseImageSource = "builtin" | "custom";
+export interface SetupStepStatus<State extends string> {
+    state: State;
+    metadata?: SafeSetupMetadata;
+    lastError?: string;
+    startedAt?: string;
+    completedAt?: string;
+    updatedAt: string;
+}
+export type RegistrationAvailability = "bootstrap" | "open" | "closed";
+export type PublicServerSetupPhase = "bootstrap_required" | "configuration_required" | "complete";
+export interface PublicServerSetupStatus {
+    schemaVersion: number;
+    phase: PublicServerSetupPhase;
+    registration: RegistrationAvailability;
+}
+export type OnboardingRoute = {
+    scope: "profile";
+    step: "profile";
+} | {
+    scope: "server";
+    step: ServerSetupStep;
+} | {
+    scope: "waiting";
+    step: "server_setup";
+} | {
+    scope: "user";
+    step: UserOnboardingStep;
+} | {
+    scope: "complete";
+};
+export interface CombinedOnboardingStatus {
+    server: {
+        schemaVersion: number;
+        complete: boolean;
+        canManage: boolean;
+        registration: RegistrationAvailability;
+        steps: Record<ServerSetupStep, SetupStepStatus<ServerSetupStepState>>;
+    };
+    user: {
+        profile: "pending" | "complete";
+        complete: boolean;
+        steps: Record<UserOnboardingStep, SetupStepStatus<UserOnboardingStepState>>;
+    };
+    route: OnboardingRoute;
+    complete: boolean;
+}
+export interface SetupSyncHint {
+    sequence: string;
+    chats: [];
+    areas: ["setup"] | ["user-onboarding"];
+}
+export type SetupErrorCode = "invalid" | "forbidden" | "not_found" | "conflict";
+export declare class SetupError extends Error {
+    readonly code: SetupErrorCode;
+    constructor(code: SetupErrorCode, message: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/packages/happy2-server/dist/modules/setup/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../sources/modules/setup/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C,eAAO,MAAM,kBAAkB,YAC3B,yBAAyB,EACzB,2BAA2B,EAC3B,4BAA4B,EAC5B,qBAAqB,EACrB,4BAA4B,EAC5B,kBAAkB,EAClB,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,CACjB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAClE,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,QAAQ,CAAC;AAErF,eAAO,MAAM,8BAA8B,YACvC,2BAA2B,EAC3B,4BAA4B,EAC5B,qBAAqB,EACrB,4BAA4B,EAC5B,kBAAkB,CACZ,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzF,eAAO,MAAM,qBAAqB,YAAI,QAAQ,EAAE,uBAAuB,CAAU,CAAC;AAClF,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AACxE,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAEzE,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AACtE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAEjF,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,oBAAoB,CAAC;AACrE,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAExD,MAAM,WAAW,eAAe,CAAC,KAAK,SAAS,MAAM;IACjD,KAAK,EAAE,KAAK,CAAC;IACb,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,wBAAwB,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;AACvE,MAAM,MAAM,sBAAsB,GAAG,oBAAoB,GAAG,wBAAwB,GAAG,UAAU,CAAC;AAElG,MAAM,WAAW,uBAAuB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,sBAAsB,CAAC;IAC9B,YAAY,EAAE,wBAAwB,CAAC;CAC1C;AAED,MAAM,MAAM,eAAe,GACrB;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GACrC;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GAC1C;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GAC1C;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAA;CAAE,GAC3C;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC;AAE5B,MAAM,WAAW,wBAAwB;IACrC,MAAM,EAAE;QACJ,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,EAAE,wBAAwB,CAAC;QACvC,KAAK,EAAE,MAAM,CAAC,eAAe,EAAE,eAAe,CAAC,oBAAoB,CAAC,CAAC,CAAC;KACzE,CAAC;IACF,IAAI,EAAE;QACF,OAAO,EAAE,SAAS,GAAG,UAAU,CAAC;QAChC,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC,uBAAuB,CAAC,CAAC,CAAC;KAC/E,CAAC;IACF,KAAK,EAAE,eAAe,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,EAAE,CAAC;IACV,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;CAC1C;AAED,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,CAAC;AAEhF,qBAAa,UAAW,SAAQ,KAAK;IAE7B,QAAQ,CAAC,IAAI,EAAE,cAAc;IADjC,YACa,IAAI,EAAE,cAAc,EAC7B,OAAO,EAAE,MAAM,EAIlB;CACJ"}

package/packages/happy2-server/dist/modules/setup/types.js

@@ -0,0 +1,29 @@
+export const SERVER_SETUP_SCHEMA_VERSION = 1;
+export const SERVER_SETUP_STEPS = [
+    "bootstrap_administrator",
+    "sandbox_provider_selected",
+    "sandbox_provider_validated",
+    "base_image_selected",
+    "base_image_build_requested",
+    "base_image_ready",
+    "default_agent_created",
+    "registration_policy_selected",
+    "server_setup_complete",
+];
+export const OPERATIONAL_SERVER_SETUP_STEPS = [
+    "sandbox_provider_selected",
+    "sandbox_provider_validated",
+    "base_image_selected",
+    "base_image_build_requested",
+    "base_image_ready",
+];
+export const USER_ONBOARDING_STEPS = ["avatar", "desktop_notifications"];
+export class SetupError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "SetupError";
+    }
+}
+//# sourceMappingURL=types.js.map

package/packages/happy2-server/dist/modules/setup/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../sources/modules/setup/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAE7C,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAC9B,yBAAyB;IACzB,2BAA2B;IAC3B,4BAA4B;IAC5B,qBAAqB;IACrB,4BAA4B;IAC5B,kBAAkB;IAClB,uBAAuB;IACvB,8BAA8B;IAC9B,uBAAuB;CACjB,CAAC;AAKX,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC1C,2BAA2B;IAC3B,4BAA4B;IAC5B,qBAAqB;IACrB,4BAA4B;IAC5B,kBAAkB;CACZ,CAAC;AAIX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,uBAAuB,CAAU,CAAC;AA4DlF,MAAM,OAAO,UAAW,SAAQ,KAAK;IAEpB,IAAI;IADjB,YACa,IAAoB,EAC7B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;oBAHN,IAAI;QAIb,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC7B,CAAC;CACJ"}

package/packages/happy2-server/dist/modules/sync/chatSyncGetDifference.d.ts

@@ -0,0 +1,33 @@
+import { type ChatSummary, type MessageSummary } from "../chat/types.js";
+import { type DrizzleExecutor } from "../drizzle.js";
+/**
+ * Reconciles one accessible chat from a membership epoch and points cursor, including affected message projections.
+ * Reset, retention, slicing, and future-cursor decisions live here so clients advance chat state without skipping durable updates.
+ */
+export declare function chatSyncGetDifference(executor: DrizzleExecutor, input: {
+    userId: string;
+    chatId: string;
+    membershipEpoch: string;
+    fromPts: number;
+    untilPts?: number;
+    limit: number;
+}): Promise<{
+    kind: "empty" | "difference" | "slice" | "reset" | "tooLong";
+    updates: Array<{
+        pts: string;
+        ptsCount: 1;
+        kind: string;
+        entityId?: string;
+    }>;
+    messages: MessageSummary[];
+    chat: ChatSummary;
+    state: {
+        membershipEpoch: string;
+        pts: string;
+    };
+    targetState: {
+        membershipEpoch: string;
+        pts: string;
+    };
+}>;
+//# sourceMappingURL=chatSyncGetDifference.d.ts.map

package/packages/happy2-server/dist/modules/sync/chatSyncGetDifference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatSyncGetDifference.d.ts","sourceRoot":"","sources":["../../../sources/modules/sync/chatSyncGetDifference.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,WAAW,EAAsB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE7F,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAWrD;;;GAGG;AACH,wBAAsB,qBAAqB,CACvC,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE;IACH,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACjB,GACF,OAAO,CAAC;IACP,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IAC7D,OAAO,EAAE,KAAK,CAAC;QACX,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,CAAC,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE;QACH,eAAe,EAAE,MAAM,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC;KACf,CAAC;IACF,WAAW,EAAE;QACT,eAAe,EAAE,MAAM,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC;KACf,CAAC;CACL,CAAC,CAkGD"}