negotium 0.1.7 → 0.1.8

package/dist/chunk-7xqj7aex.js

@@ -0,0 +1,77 @@
+import {
+  SESSIONS_DB
+} from "./chunk-k9z47mab.js";
+import {
+  __require,
+  __toESM
+} from "./chunk-hwy3n31w.js";
+
+// ../../packages/core/src/storage/forum-db.ts
+import { mkdirSync } from "fs";
+import { dirname } from "path";
+
+// ../../packages/core/src/storage/sqlite.ts
+var isBun = typeof process.versions.bun === "string";
+var Database;
+if (isBun) {
+  ({ Database } = await import("bun:sqlite"));
+} else {
+  const nodeSqliteSpecifier = ["node", "sqlite"].join(":");
+  const { DatabaseSync } = await import(nodeSqliteSpecifier);
+
+  class NodeDatabase {
+    #db;
+    constructor(path, options = {}) {
+      this.#db = options.readonly ? new DatabaseSync(path, { readOnly: true }) : new DatabaseSync(path);
+    }
+    query(sql) {
+      return this.#db.prepare(sql);
+    }
+    prepare(sql) {
+      return this.#db.prepare(sql);
+    }
+    exec(sql) {
+      this.#db.exec(sql);
+    }
+    run(sql, ...params) {
+      return this.#db.prepare(sql).run(...params);
+    }
+    transaction(fn) {
+      const run = (begin) => (...args) => {
+        this.#db.exec(begin);
+        try {
+          const result = fn(...args);
+          this.#db.exec("COMMIT");
+          return result;
+        } catch (err) {
+          this.#db.exec("ROLLBACK");
+          throw err;
+        }
+      };
+      const tx = run("BEGIN");
+      tx.deferred = run("BEGIN DEFERRED");
+      tx.immediate = run("BEGIN IMMEDIATE");
+      tx.exclusive = run("BEGIN EXCLUSIVE");
+      return tx;
+    }
+    close() {
+      this.#db.close();
+    }
+  }
+  Database = NodeDatabase;
+}
+
+// ../../packages/core/src/storage/forum-db.ts
+mkdirSync(dirname(SESSIONS_DB), { recursive: true });
+var db = new Database(SESSIONS_DB, { create: true });
+db.exec("PRAGMA journal_mode = WAL");
+db.exec("PRAGMA foreign_keys = ON");
+db.exec("PRAGMA busy_timeout = 5000");
+db.exec("PRAGMA wal_autocheckpoint = 1000");
+try {
+  db.exec("PRAGMA wal_checkpoint(TRUNCATE)");
+} catch {}
+
+export { Database, db };
+
+//# debugId=6EEF6536830551AA64756E2164756E21

package/dist/chunk-7xqj7aex.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../../../packages/core/src/storage/forum-db.ts", "../../../packages/core/src/storage/sqlite.ts"],
+  "sourcesContent": [
+    "import { mkdirSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\nimport { SESSIONS_DB } from \"#platform/config\";\nimport { Database } from \"#storage/sqlite\";\n\nmkdirSync(dirname(SESSIONS_DB), { recursive: true });\n\nexport const db = new Database(SESSIONS_DB, { create: true });\ndb.exec(\"PRAGMA journal_mode = WAL\");\ndb.exec(\"PRAGMA foreign_keys = ON\");\ndb.exec(\"PRAGMA busy_timeout = 5000\");\n// Auto-checkpoint every ~1000 WAL pages (~4 MB at 4KB page size) to keep the\n// WAL file from growing unbounded during long-running pm2 sessions. The\n// default is 1000 but we set it explicitly so the policy is auditable.\ndb.exec(\"PRAGMA wal_autocheckpoint = 1000\");\n// Also run a TRUNCATE checkpoint on startup to reclaim any WAL space\n// accumulated while the bot was stopped (checkpointer doesn't run when\n// no connections are open).\ntry {\n  db.exec(\"PRAGMA wal_checkpoint(TRUNCATE)\");\n} catch {\n  // Non-fatal; a concurrent writer may hold the WAL briefly.\n}\n",
+    "// Runtime-adaptive SQLite façade.\n//\n// Why this exists: Otium normally runs on bun and uses `bun:sqlite` (native,\n// fast, zero-build). But the `codex` agent's MCP servers must run on pure node\n// — codex 0.135's rmcp stdio client can't handshake with bun-spawned servers\n// (see serverLaunch in platform/mcp-config.ts). `bun:sqlite` doesn't exist\n// under node, so any MCP server that touches the DB would crash on import.\n//\n// This module picks the backend at runtime and re-exports it as `Database`:\n//   - under bun  → the real `bun:sqlite` Database (unchanged behavior)\n//   - under node → a thin shim over node:sqlite's DatabaseSync exposing the\n//     exact subset Otium uses: new Database(path, {readonly?,create?}),\n//     .query()/.prepare() → statement, .exec(), .run(), .transaction(fn),\n//     .close(); statements support positional `?` params via .run()/.get()/\n//     .all(). (No named-object params / .values()/.iterate()/.as() are used in\n//     this codebase, so the shim intentionally omits them.)\n//\n// The TYPE of the exported `Database` is bun:sqlite's own class type (imported\n// type-only, so it's erased at runtime and never resolved under node). That\n// keeps every existing call site — including generic `.query<Row, Params>()`\n// usages — type-checking exactly as before with zero changes.\n//\n// The bun branch uses a dynamic import so node never resolves the `bun:sqlite`\n// specifier (dead code under node), and the node branch's `node:sqlite` import\n// never runs under bun.\n\nimport type { Database as BunDatabase } from \"bun:sqlite\";\n\n// `mock.module()` can replace the Bun global while a test graph is being\n// evaluated. The runtime version flag is stable and is also the documented\n// cross-runtime discriminator.\nconst isBun = typeof process.versions.bun === \"string\";\n\ntype DatabaseCtor = typeof BunDatabase;\n\nlet Database: DatabaseCtor;\n\nif (isBun) {\n  ({ Database } = await import(\"bun:sqlite\"));\n} else {\n  // node:sqlite has no type declarations under our tsconfig (`types: bun-types`\n  // only), and `bun-types` doesn't ship them — so type the dynamic import\n  // locally and use a `string` specifier to keep tsc from trying to resolve it.\n  type NodeStatement = {\n    run(...params: unknown[]): unknown;\n    get(...params: unknown[]): unknown;\n    all(...params: unknown[]): unknown[];\n  };\n  type NodeDatabaseSync = {\n    prepare(sql: string): NodeStatement;\n    exec(sql: string): void;\n    close(): void;\n  };\n  type NodeSqliteModule = {\n    DatabaseSync: new (path: string, options?: { readOnly?: boolean }) => NodeDatabaseSync;\n  };\n  // Keep Bun's resolver from eagerly resolving the Node-only builtin even\n  // though this branch is dead there (notably under `bun test` + mock.module).\n  const nodeSqliteSpecifier = [\"node\", \"sqlite\"].join(\":\");\n  const { DatabaseSync } = (await import(nodeSqliteSpecifier)) as NodeSqliteModule;\n\n  type DbOptions = { readonly?: boolean; create?: boolean };\n\n  class NodeDatabase {\n    #db: NodeDatabaseSync;\n\n    constructor(path: string, options: DbOptions = {}) {\n      // node:sqlite opens read-write and creates-if-missing by default, which\n      // matches bun's `{create:true}`. For readonly we must not create.\n      this.#db = options.readonly\n        ? new DatabaseSync(path, { readOnly: true })\n        : new DatabaseSync(path);\n    }\n\n    query(sql: string) {\n      return this.#db.prepare(sql);\n    }\n\n    prepare(sql: string) {\n      return this.#db.prepare(sql);\n    }\n\n    exec(sql: string): void {\n      this.#db.exec(sql);\n    }\n\n    run(sql: string, ...params: unknown[]) {\n      return this.#db.prepare(sql).run(...params);\n    }\n\n    transaction<Args extends unknown[], R>(fn: (...args: Args) => R): (...args: Args) => R {\n      // bun's db.transaction(fn) returns a function that runs fn inside a\n      // transaction when called. node:sqlite has no helper, so emulate with\n      // BEGIN/COMMIT/ROLLBACK. It also exposes deferred/immediate/exclusive\n      // variants; mirror those so Node-launched MCP servers can share call\n      // sites with Bun.\n      const run =\n        (begin: \"BEGIN\" | \"BEGIN DEFERRED\" | \"BEGIN IMMEDIATE\" | \"BEGIN EXCLUSIVE\") =>\n        (...args: Args): R => {\n          this.#db.exec(begin);\n          try {\n            const result = fn(...args);\n            this.#db.exec(\"COMMIT\");\n            return result;\n          } catch (err) {\n            this.#db.exec(\"ROLLBACK\");\n            throw err;\n          }\n        };\n      const tx = run(\"BEGIN\") as ((...args: Args) => R) & {\n        deferred: (...args: Args) => R;\n        immediate: (...args: Args) => R;\n        exclusive: (...args: Args) => R;\n      };\n      tx.deferred = run(\"BEGIN DEFERRED\");\n      tx.immediate = run(\"BEGIN IMMEDIATE\");\n      tx.exclusive = run(\"BEGIN EXCLUSIVE\");\n      return tx;\n    }\n\n    close(): void {\n      this.#db.close();\n    }\n  }\n\n  Database = NodeDatabase as unknown as DatabaseCtor;\n}\n\nexport { Database };\n"
+  ],
+  "mappings": ";;;;;;;;;AAAA;AACA;;;AC8BA,IAAM,QAAQ,OAAO,QAAQ,SAAS,QAAQ;AAI9C,IAAI;AAEJ,IAAI,OAAO;AAAA,GACR,EAAE,SAAS,IAAI,MAAa;AAC/B,EAAO;AAAA,EAmBL,MAAM,sBAAsB,CAAC,QAAQ,QAAQ,EAAE,KAAK,GAAG;AAAA,EACvD,QAAQ,iBAAkB,MAAa;AAAA;AAAA,EAIvC,MAAM,aAAa;AAAA,IACjB;AAAA,IAEA,WAAW,CAAC,MAAc,UAAqB,CAAC,GAAG;AAAA,MAGjD,KAAK,MAAM,QAAQ,WACf,IAAI,aAAa,MAAM,EAAE,UAAU,KAAK,CAAC,IACzC,IAAI,aAAa,IAAI;AAAA;AAAA,IAG3B,KAAK,CAAC,KAAa;AAAA,MACjB,OAAO,KAAK,IAAI,QAAQ,GAAG;AAAA;AAAA,IAG7B,OAAO,CAAC,KAAa;AAAA,MACnB,OAAO,KAAK,IAAI,QAAQ,GAAG;AAAA;AAAA,IAG7B,IAAI,CAAC,KAAmB;AAAA,MACtB,KAAK,IAAI,KAAK,GAAG;AAAA;AAAA,IAGnB,GAAG,CAAC,QAAgB,QAAmB;AAAA,MACrC,OAAO,KAAK,IAAI,QAAQ,GAAG,EAAE,IAAI,GAAG,MAAM;AAAA;AAAA,IAG5C,WAAsC,CAAC,IAAgD;AAAA,MAMrF,MAAM,MACJ,CAAC,UACD,IAAI,SAAkB;AAAA,QACpB,KAAK,IAAI,KAAK,KAAK;AAAA,QACnB,IAAI;AAAA,UACF,MAAM,SAAS,GAAG,GAAG,IAAI;AAAA,UACzB,KAAK,IAAI,KAAK,QAAQ;AAAA,UACtB,OAAO;AAAA,UACP,OAAO,KAAK;AAAA,UACZ,KAAK,IAAI,KAAK,UAAU;AAAA,UACxB,MAAM;AAAA;AAAA;AAAA,MAGZ,MAAM,KAAK,IAAI,OAAO;AAAA,MAKtB,GAAG,WAAW,IAAI,gBAAgB;AAAA,MAClC,GAAG,YAAY,IAAI,iBAAiB;AAAA,MACpC,GAAG,YAAY,IAAI,iBAAiB;AAAA,MACpC,OAAO;AAAA;AAAA,IAGT,KAAK,GAAS;AAAA,MACZ,KAAK,IAAI,MAAM;AAAA;AAAA,EAEnB;AAAA,EAEA,WAAW;AAAA;;;ADxHb,UAAU,QAAQ,WAAW,GAAG,EAAE,WAAW,KAAK,CAAC;AAE5C,IAAM,KAAK,IAAI,SAAS,aAAa,EAAE,QAAQ,KAAK,CAAC;AAC5D,GAAG,KAAK,2BAA2B;AACnC,GAAG,KAAK,0BAA0B;AAClC,GAAG,KAAK,4BAA4B;AAIpC,GAAG,KAAK,kCAAkC;AAI1C,IAAI;AAAA,EACF,GAAG,KAAK,iCAAiC;AAAA,EACzC,MAAM;",
+  "debugId": "6EEF6536830551AA64756E2164756E21",
+  "names": []
+}

package/dist/chunk-9p0ww3tk.js

@@ -0,0 +1,41 @@
+// @bun
+import {
+  getRegistry
+} from "./chunk-5ahkew9c.js";
+import"./chunk-6cpn7ht2.js";
+import {
+  logger
+} from "./chunk-k9z47mab.js";
+import"./chunk-hwy3n31w.js";
+
+// ../../packages/core/src/agents/fork.ts
+import { existsSync, unlinkSync } from "fs";
+async function forkAgentSession(opts) {
+  const { forkId, rolloutPath } = await getRegistry(opts.agent).forkSession({
+    parentSessionId: opts.parentSessionId,
+    cwd: opts.cwd,
+    userId: opts.userId,
+    topicName: opts.topicName,
+    ...opts.title ? { title: opts.title } : {},
+    ...opts.model ? { model: opts.model } : {},
+    ...opts.effort ? { effort: opts.effort } : {}
+  });
+  return { agent: opts.agent, forkId, rolloutPath };
+}
+function cleanupAgentFork(handle) {
+  try {
+    if (existsSync(handle.rolloutPath)) {
+      unlinkSync(handle.rolloutPath);
+    }
+  } catch (err) {
+    logger.warn({ err, agent: handle.agent, forkId: handle.forkId, rolloutPath: handle.rolloutPath }, "cleanupAgentFork: failed to remove rollout");
+  }
+}
+export {
+  forkAgentSession,
+  cleanupAgentFork
+};
+
+export { forkAgentSession, cleanupAgentFork };
+
+//# debugId=F6D753EECB8A5F7C64756E2164756E21

package/dist/chunk-9p0ww3tk.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../../../packages/core/src/agents/fork.ts"],
+  "sourcesContent": [
+    "import { existsSync, unlinkSync } from \"node:fs\";\nimport { getRegistry } from \"#agents/registry\";\nimport { logger } from \"#platform/logger\";\nimport type { AgentKind, EffortLevel } from \"#types\";\n\n/**\n * Agent-aware fork primitives.\n *\n * Strategy lives in each agent's registry (`*-registry.ts:forkSession`).\n * Claude uses the SDK's native `forkSession` (byte-equivalent rollout copy);\n * Codex synthesizes a rollout from the provider-agnostic conversation log\n * because the SDK has no fork API. Both surfaces converge on `ForkHandle`.\n */\n\nexport interface ForkAgentSessionOptions {\n  agent: AgentKind;\n  /** Parent session/thread id to clone from. */\n  parentSessionId: string;\n  /** Workspace directory the resumed fork will report. Claude also writes\n   *  the rollout file under this directory. */\n  cwd: string;\n  /** Used to locate the conversation log for codex synthesis. */\n  userId: number | string;\n  /** Used to locate the conversation log for codex synthesis. */\n  topicName: string;\n  /** Optional title forwarded to Claude SDK forkSession; ignored by Codex. */\n  title?: string;\n  /** Effective model/effort the fork will use when it resumes. */\n  model?: string;\n  effort?: EffortLevel;\n}\n\nexport interface ForkHandle {\n  agent: AgentKind;\n  forkId: string;\n  /** Absolute path of the rollout file to remove on cleanup. */\n  rolloutPath: string;\n}\n\nexport async function forkAgentSession(opts: ForkAgentSessionOptions): Promise<ForkHandle> {\n  const { forkId, rolloutPath } = await getRegistry(opts.agent).forkSession({\n    parentSessionId: opts.parentSessionId,\n    cwd: opts.cwd,\n    userId: opts.userId,\n    topicName: opts.topicName,\n    ...(opts.title ? { title: opts.title } : {}),\n    ...(opts.model ? { model: opts.model } : {}),\n    ...(opts.effort ? { effort: opts.effort } : {}),\n  });\n  return { agent: opts.agent, forkId, rolloutPath };\n}\n\n/** Best-effort cleanup of a fork's rollout file. Errors are logged, never thrown. */\nexport function cleanupAgentFork(handle: ForkHandle): void {\n  try {\n    if (existsSync(handle.rolloutPath)) {\n      unlinkSync(handle.rolloutPath);\n    }\n  } catch (err) {\n    logger.warn(\n      { err, agent: handle.agent, forkId: handle.forkId, rolloutPath: handle.rolloutPath },\n      \"cleanupAgentFork: failed to remove rollout\",\n    );\n  }\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;AAAA;AAuCA,eAAsB,gBAAgB,CAAC,MAAoD;AAAA,EACzF,QAAQ,QAAQ,gBAAgB,MAAM,YAAY,KAAK,KAAK,EAAE,YAAY;AAAA,IACxE,iBAAiB,KAAK;AAAA,IACtB,KAAK,KAAK;AAAA,IACV,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK;AAAA,OACZ,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,OACtC,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,OACtC,KAAK,SAAS,EAAE,QAAQ,KAAK,OAAO,IAAI,CAAC;AAAA,EAC/C,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,KAAK,OAAO,QAAQ,YAAY;AAAA;AAI3C,SAAS,gBAAgB,CAAC,QAA0B;AAAA,EACzD,IAAI;AAAA,IACF,IAAI,WAAW,OAAO,WAAW,GAAG;AAAA,MAClC,WAAW,OAAO,WAAW;AAAA,IAC/B;AAAA,IACA,OAAO,KAAK;AAAA,IACZ,OAAO,KACL,EAAE,KAAK,OAAO,OAAO,OAAO,QAAQ,OAAO,QAAQ,aAAa,OAAO,YAAY,GACnF,4CACF;AAAA;AAAA;",
+  "debugId": "F6D753EECB8A5F7C64756E2164756E21",
+  "names": []
+}

package/dist/chunk-a92a7nrk.js

@@ -0,0 +1,252 @@
+import {
+  assertSecureCentralUrl,
+  assertSecureRelayUrl,
+  isJoinPersisted,
+  joinCredentialDigest,
+  saveJoinWhileLocked,
+  withJoinCredentialLock
+} from "./chunk-e5pbggsh.js";
+import {
+  DATA_DIR
+} from "./chunk-k9z47mab.js";
+
+// ../../adapters/otium/src/enrollment.ts
+import {
+  createDecipheriv,
+  createPrivateKey,
+  createPublicKey,
+  diffieHellman,
+  generateKeyPairSync,
+  hkdfSync,
+  randomUUID
+} from "crypto";
+import {
+  chmodSync,
+  closeSync,
+  existsSync,
+  fsyncSync,
+  linkSync,
+  mkdirSync,
+  openSync,
+  readFileSync,
+  renameSync,
+  unlinkSync,
+  writeFileSync
+} from "fs";
+import { dirname, resolve } from "path";
+var INFO = Buffer.from("otium-node-enrollment-v1", "utf8");
+function parseEnrollmentInvite(code) {
+  let parsed;
+  try {
+    parsed = JSON.parse(Buffer.from(code.trim(), "base64url").toString("utf8"));
+  } catch {
+    throw new Error("production invite must be base64url JSON");
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("production invite must decode to an object");
+  }
+  const raw = parsed;
+  const central = typeof raw.central === "string" ? raw.central.trim().replace(/\/+$/, "") : "";
+  const token = typeof raw.token === "string" ? raw.token.trim() : "";
+  if (raw.v !== 2 || !central || !token.startsWith("nei_")) {
+    throw new Error("production invite requires {v:2, central:http(s), token:nei_\u2026}");
+  }
+  assertSecureCentralUrl(central);
+  return { v: 2, central, token };
+}
+function pendingEnrollmentPath() {
+  return resolve(DATA_DIR, "otium-enrollment-pending.json");
+}
+function isEnrollmentPending(invite) {
+  const path = pendingEnrollmentPath();
+  if (!existsSync(path))
+    return false;
+  try {
+    const saved = JSON.parse(readFileSync(path, "utf8"));
+    return saved.central === invite.central && saved.token === invite.token;
+  } catch {
+    return false;
+  }
+}
+function loadOrCreatePending(invite, nodeName) {
+  const path = pendingEnrollmentPath();
+  if (existsSync(path)) {
+    const saved = JSON.parse(readFileSync(path, "utf8"));
+    if (saved.central === invite.central && saved.token === invite.token)
+      return saved;
+    throw new Error(`another Otium enrollment is pending at ${path}`);
+  }
+  const pair = generateKeyPairSync("x25519");
+  const pending = {
+    ...invite,
+    idempotencyKey: randomUUID(),
+    privateKey: pair.privateKey.export({ format: "der", type: "pkcs8" }).toString("base64url"),
+    publicKey: pair.publicKey.export({ format: "der", type: "spki" }).toString("base64url"),
+    ...nodeName ? { nodeName } : {}
+  };
+  mkdirSync(dirname(path), { recursive: true });
+  const temporaryPath = resolve(dirname(path), `.otium-enrollment-pending.json.${process.pid}.${randomUUID()}.tmp`);
+  let fd;
+  try {
+    fd = openSync(temporaryPath, "wx", 384);
+    writeFileSync(fd, `${JSON.stringify(pending, null, 2)}
+`, "utf8");
+    fsyncSync(fd);
+    closeSync(fd);
+    fd = undefined;
+    linkSync(temporaryPath, path);
+    unlinkSync(temporaryPath);
+    chmodSync(path, 384);
+    const directoryFd = openSync(dirname(path), "r");
+    try {
+      fsyncSync(directoryFd);
+    } finally {
+      closeSync(directoryFd);
+    }
+  } catch (error) {
+    if (fd !== undefined)
+      closeSync(fd);
+    if (existsSync(temporaryPath))
+      unlinkSync(temporaryPath);
+    if (error.code === "EEXIST" && existsSync(path)) {
+      const saved = JSON.parse(readFileSync(path, "utf8"));
+      if (saved.central === invite.central && saved.token === invite.token)
+        return saved;
+    }
+    throw error;
+  }
+  return pending;
+}
+function replacePendingEnrollment(pending) {
+  const path = pendingEnrollmentPath();
+  const directory = dirname(path);
+  const temporaryPath = resolve(directory, `.otium-enrollment-pending.json.${process.pid}.${randomUUID()}.tmp`);
+  let fd;
+  try {
+    fd = openSync(temporaryPath, "wx", 384);
+    writeFileSync(fd, `${JSON.stringify(pending, null, 2)}
+`, "utf8");
+    fsyncSync(fd);
+    closeSync(fd);
+    fd = undefined;
+    renameSync(temporaryPath, path);
+    const directoryFd = openSync(directory, "r");
+    try {
+      fsyncSync(directoryFd);
+    } finally {
+      closeSync(directoryFd);
+    }
+  } catch (error) {
+    if (fd !== undefined)
+      closeSync(fd);
+    if (existsSync(temporaryPath))
+      unlinkSync(temporaryPath);
+    throw error;
+  }
+}
+function recordClaimedCredential(pending, join) {
+  withJoinCredentialLock(() => {
+    const current = JSON.parse(readFileSync(pendingEnrollmentPath(), "utf8"));
+    if (current.central !== pending.central || current.token !== pending.token || current.idempotencyKey !== pending.idempotencyKey || current.publicKey !== pending.publicKey) {
+      throw new Error("pending Otium enrollment changed while its claim was in flight");
+    }
+    const claimed = { digest: joinCredentialDigest(join), cellId: join.cellId };
+    if (current.claimed && (current.claimed.digest !== claimed.digest || current.claimed.cellId !== claimed.cellId)) {
+      throw new Error("central returned different credentials for an idempotent enrollment claim");
+    }
+    replacePendingEnrollment({ ...current, claimed });
+  });
+}
+function openCredential(envelope, privateKeyDer) {
+  if (envelope.v !== 1 || envelope.algorithm !== "X25519-HKDF-SHA256-AES-256-GCM") {
+    throw new Error("unsupported enrollment credential envelope");
+  }
+  const privateKey = createPrivateKey({
+    key: Buffer.from(privateKeyDer, "base64url"),
+    format: "der",
+    type: "pkcs8"
+  });
+  const ephemeral = createPublicKey({
+    key: Buffer.from(envelope.ephemeralPublicKey, "base64url"),
+    format: "der",
+    type: "spki"
+  });
+  const shared = diffieHellman({ privateKey, publicKey: ephemeral });
+  const key = Buffer.from(hkdfSync("sha256", shared, Buffer.from(envelope.salt, "base64url"), INFO, 32));
+  const decipher = createDecipheriv("aes-256-gcm", key, Buffer.from(envelope.nonce, "base64url"));
+  decipher.setAAD(INFO);
+  decipher.setAuthTag(Buffer.from(envelope.tag, "base64url"));
+  return Buffer.concat([
+    decipher.update(Buffer.from(envelope.ciphertext, "base64url")),
+    decipher.final()
+  ]).toString("utf8");
+}
+async function postJson(url, body, headers) {
+  const response = await fetch(url, {
+    method: "POST",
+    headers: { "content-type": "application/json", ...headers },
+    body: JSON.stringify(body)
+  });
+  const result = await response.json();
+  if (!response.ok)
+    throw new Error(String(result.error || `request failed (${response.status})`));
+  return result;
+}
+async function previewEnrollment(invite) {
+  return postJson(`${invite.central}/api/v1/node-enrollments/preview`, {
+    token: invite.token
+  });
+}
+async function claimEnrollment(invite, nodeName) {
+  const pending = loadOrCreatePending(invite, nodeName);
+  const response = await postJson(`${invite.central}/api/v1/node-enrollments/claim`, {
+    token: invite.token,
+    credentialPublicKey: pending.publicKey,
+    ...pending.nodeName ? { nodeName: pending.nodeName } : {}
+  }, { "idempotency-key": pending.idempotencyKey });
+  const credential = response.credential;
+  const secret = openCredential(credential, pending.privateKey);
+  if (!secret.startsWith("rcs_"))
+    throw new Error("central returned an invalid runtime credential");
+  const join = {
+    v: 2,
+    central: invite.central,
+    relay: String(response.relayUrl),
+    cellId: String(response.cell?.id),
+    secret
+  };
+  if (!join.relay || !join.cellId || join.cellId === "undefined") {
+    throw new Error("central returned an incomplete enrollment response");
+  }
+  assertSecureRelayUrl(join.relay);
+  recordClaimedCredential(pending, join);
+  return join;
+}
+function commitEnrollment(join, options = {}) {
+  return withJoinCredentialLock(() => {
+    const pendingPath = pendingEnrollmentPath();
+    const pending = existsSync(pendingPath) ? JSON.parse(readFileSync(pendingPath, "utf8")) : null;
+    const digest = joinCredentialDigest(join);
+    if (pending && (!pending.claimed || pending.claimed.digest !== digest || pending.claimed.cellId !== join.cellId)) {
+      throw new Error(`pending Otium enrollment at ${pendingPath} does not match these credentials`);
+    }
+    const path = saveJoinWhileLocked(join, options);
+    if (!isJoinPersisted(join)) {
+      throw new Error("Otium join credentials were not durably persisted");
+    }
+    if (!pending)
+      return path;
+    unlinkSync(pendingPath);
+    const directoryFd = openSync(dirname(pendingPath), "r");
+    try {
+      fsyncSync(directoryFd);
+    } finally {
+      closeSync(directoryFd);
+    }
+    return path;
+  });
+}
+
+export { parseEnrollmentInvite, pendingEnrollmentPath, isEnrollmentPending, previewEnrollment, claimEnrollment, commitEnrollment };
+
+//# debugId=3E67B5DF4109FD5964756E2164756E21

package/dist/chunk-a92a7nrk.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../../../adapters/otium/src/enrollment.ts"],
+  "sourcesContent": [
+    "import {\n  createDecipheriv,\n  createPrivateKey,\n  createPublicKey,\n  diffieHellman,\n  generateKeyPairSync,\n  hkdfSync,\n  randomUUID,\n} from \"node:crypto\";\nimport {\n  chmodSync,\n  closeSync,\n  existsSync,\n  fsyncSync,\n  linkSync,\n  mkdirSync,\n  openSync,\n  readFileSync,\n  renameSync,\n  unlinkSync,\n  writeFileSync,\n} from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { DATA_DIR } from \"@negotium/core\";\nimport {\n  isJoinPersisted,\n  joinCredentialDigest,\n  type OtiumJoin,\n  type SaveJoinOptions,\n  saveJoinWhileLocked,\n  withJoinCredentialLock,\n} from \"@/join\";\nimport { assertSecureCentralUrl, assertSecureRelayUrl } from \"@/secure-transport\";\n\nconst INFO = Buffer.from(\"otium-node-enrollment-v1\", \"utf8\");\n\nexport interface EnrollmentInvite {\n  v: 2;\n  central: string;\n  token: string;\n}\n\ninterface PendingEnrollment extends EnrollmentInvite {\n  idempotencyKey: string;\n  privateKey: string;\n  publicKey: string;\n  /** Frozen with the idempotency key so retries replay the same claim body. */\n  nodeName?: string;\n  claimed?: {\n    digest: string;\n    cellId: string;\n  };\n}\n\nexport interface EnrollmentCredentialEnvelope {\n  v: 1;\n  algorithm: \"X25519-HKDF-SHA256-AES-256-GCM\";\n  ephemeralPublicKey: string;\n  salt: string;\n  nonce: string;\n  ciphertext: string;\n  tag: string;\n}\n\nexport interface EnrollmentPreviewResponse {\n  ok: true;\n  preview: {\n    workspace: { id: string; slug: string; name: string };\n    suggestedNodeName: string | null;\n    transport: \"relay\";\n    relayUrl: string;\n    expiresAt: string;\n    status: string;\n    topics: string;\n  };\n}\n\ninterface EnrollmentClaimResponse {\n  ok: true;\n  relayUrl: string;\n  cell: { id: string; baseUrl: string };\n  credential: EnrollmentCredentialEnvelope;\n}\n\nexport function parseEnrollmentInvite(code: string): EnrollmentInvite {\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(Buffer.from(code.trim(), \"base64url\").toString(\"utf8\"));\n  } catch {\n    throw new Error(\"production invite must be base64url JSON\");\n  }\n  if (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n    throw new Error(\"production invite must decode to an object\");\n  }\n  const raw = parsed as Record<string, unknown>;\n  const central = typeof raw.central === \"string\" ? raw.central.trim().replace(/\\/+$/, \"\") : \"\";\n  const token = typeof raw.token === \"string\" ? raw.token.trim() : \"\";\n  if (raw.v !== 2 || !central || !token.startsWith(\"nei_\")) {\n    throw new Error(\"production invite requires {v:2, central:http(s), token:nei_…}\");\n  }\n  assertSecureCentralUrl(central);\n  return { v: 2, central, token };\n}\n\nexport function pendingEnrollmentPath(): string {\n  return resolve(DATA_DIR, \"otium-enrollment-pending.json\");\n}\n\nexport function isEnrollmentPending(invite: EnrollmentInvite): boolean {\n  const path = pendingEnrollmentPath();\n  if (!existsSync(path)) return false;\n  try {\n    const saved = JSON.parse(readFileSync(path, \"utf8\")) as PendingEnrollment;\n    return saved.central === invite.central && saved.token === invite.token;\n  } catch {\n    return false;\n  }\n}\n\nfunction loadOrCreatePending(invite: EnrollmentInvite, nodeName?: string): PendingEnrollment {\n  const path = pendingEnrollmentPath();\n  if (existsSync(path)) {\n    const saved = JSON.parse(readFileSync(path, \"utf8\")) as PendingEnrollment;\n    if (saved.central === invite.central && saved.token === invite.token) return saved;\n    throw new Error(`another Otium enrollment is pending at ${path}`);\n  }\n  const pair = generateKeyPairSync(\"x25519\");\n  const pending: PendingEnrollment = {\n    ...invite,\n    idempotencyKey: randomUUID(),\n    privateKey: pair.privateKey.export({ format: \"der\", type: \"pkcs8\" }).toString(\"base64url\"),\n    publicKey: pair.publicKey.export({ format: \"der\", type: \"spki\" }).toString(\"base64url\"),\n    ...(nodeName ? { nodeName } : {}),\n  };\n  mkdirSync(dirname(path), { recursive: true });\n  const temporaryPath = resolve(\n    dirname(path),\n    `.otium-enrollment-pending.json.${process.pid}.${randomUUID()}.tmp`,\n  );\n  let fd: number | undefined;\n  try {\n    fd = openSync(temporaryPath, \"wx\", 0o600);\n    writeFileSync(fd, `${JSON.stringify(pending, null, 2)}\\n`, \"utf8\");\n    fsyncSync(fd);\n    closeSync(fd);\n    fd = undefined;\n    // Publish only the completely written key material and never overwrite a\n    // concurrent enrollment created by another process.\n    linkSync(temporaryPath, path);\n    unlinkSync(temporaryPath);\n    chmodSync(path, 0o600);\n    const directoryFd = openSync(dirname(path), \"r\");\n    try {\n      fsyncSync(directoryFd);\n    } finally {\n      closeSync(directoryFd);\n    }\n  } catch (error) {\n    if (fd !== undefined) closeSync(fd);\n    if (existsSync(temporaryPath)) unlinkSync(temporaryPath);\n    if ((error as NodeJS.ErrnoException).code === \"EEXIST\" && existsSync(path)) {\n      const saved = JSON.parse(readFileSync(path, \"utf8\")) as PendingEnrollment;\n      if (saved.central === invite.central && saved.token === invite.token) return saved;\n    }\n    throw error;\n  }\n  return pending;\n}\n\nfunction replacePendingEnrollment(pending: PendingEnrollment): void {\n  const path = pendingEnrollmentPath();\n  const directory = dirname(path);\n  const temporaryPath = resolve(\n    directory,\n    `.otium-enrollment-pending.json.${process.pid}.${randomUUID()}.tmp`,\n  );\n  let fd: number | undefined;\n  try {\n    fd = openSync(temporaryPath, \"wx\", 0o600);\n    writeFileSync(fd, `${JSON.stringify(pending, null, 2)}\\n`, \"utf8\");\n    fsyncSync(fd);\n    closeSync(fd);\n    fd = undefined;\n    renameSync(temporaryPath, path);\n    const directoryFd = openSync(directory, \"r\");\n    try {\n      fsyncSync(directoryFd);\n    } finally {\n      closeSync(directoryFd);\n    }\n  } catch (error) {\n    if (fd !== undefined) closeSync(fd);\n    if (existsSync(temporaryPath)) unlinkSync(temporaryPath);\n    throw error;\n  }\n}\n\nfunction recordClaimedCredential(pending: PendingEnrollment, join: OtiumJoin): void {\n  withJoinCredentialLock(() => {\n    const current = JSON.parse(readFileSync(pendingEnrollmentPath(), \"utf8\")) as PendingEnrollment;\n    if (\n      current.central !== pending.central ||\n      current.token !== pending.token ||\n      current.idempotencyKey !== pending.idempotencyKey ||\n      current.publicKey !== pending.publicKey\n    ) {\n      throw new Error(\"pending Otium enrollment changed while its claim was in flight\");\n    }\n    const claimed = { digest: joinCredentialDigest(join), cellId: join.cellId };\n    if (\n      current.claimed &&\n      (current.claimed.digest !== claimed.digest || current.claimed.cellId !== claimed.cellId)\n    ) {\n      throw new Error(\"central returned different credentials for an idempotent enrollment claim\");\n    }\n    replacePendingEnrollment({ ...current, claimed });\n  });\n}\n\nfunction openCredential(envelope: EnrollmentCredentialEnvelope, privateKeyDer: string): string {\n  if (envelope.v !== 1 || envelope.algorithm !== \"X25519-HKDF-SHA256-AES-256-GCM\") {\n    throw new Error(\"unsupported enrollment credential envelope\");\n  }\n  const privateKey = createPrivateKey({\n    key: Buffer.from(privateKeyDer, \"base64url\"),\n    format: \"der\",\n    type: \"pkcs8\",\n  });\n  const ephemeral = createPublicKey({\n    key: Buffer.from(envelope.ephemeralPublicKey, \"base64url\"),\n    format: \"der\",\n    type: \"spki\",\n  });\n  const shared = diffieHellman({ privateKey, publicKey: ephemeral });\n  const key = Buffer.from(\n    hkdfSync(\"sha256\", shared, Buffer.from(envelope.salt, \"base64url\"), INFO, 32),\n  );\n  const decipher = createDecipheriv(\"aes-256-gcm\", key, Buffer.from(envelope.nonce, \"base64url\"));\n  decipher.setAAD(INFO);\n  decipher.setAuthTag(Buffer.from(envelope.tag, \"base64url\"));\n  return Buffer.concat([\n    decipher.update(Buffer.from(envelope.ciphertext, \"base64url\")),\n    decipher.final(),\n  ]).toString(\"utf8\");\n}\n\nasync function postJson<T>(\n  url: string,\n  body: unknown,\n  headers?: Record<string, string>,\n): Promise<T> {\n  const response = await fetch(url, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\", ...headers },\n    body: JSON.stringify(body),\n  });\n  const result = (await response.json()) as Record<string, unknown>;\n  if (!response.ok) throw new Error(String(result.error || `request failed (${response.status})`));\n  return result as T;\n}\n\nexport async function previewEnrollment(\n  invite: EnrollmentInvite,\n): Promise<EnrollmentPreviewResponse> {\n  return postJson<EnrollmentPreviewResponse>(`${invite.central}/api/v1/node-enrollments/preview`, {\n    token: invite.token,\n  });\n}\n\nexport async function claimEnrollment(\n  invite: EnrollmentInvite,\n  nodeName?: string,\n): Promise<OtiumJoin> {\n  const pending = loadOrCreatePending(invite, nodeName);\n  const response = await postJson<EnrollmentClaimResponse>(\n    `${invite.central}/api/v1/node-enrollments/claim`,\n    {\n      token: invite.token,\n      credentialPublicKey: pending.publicKey,\n      ...(pending.nodeName ? { nodeName: pending.nodeName } : {}),\n    },\n    { \"idempotency-key\": pending.idempotencyKey },\n  );\n  const credential = response.credential as EnrollmentCredentialEnvelope;\n  const secret = openCredential(credential, pending.privateKey);\n  if (!secret.startsWith(\"rcs_\")) throw new Error(\"central returned an invalid runtime credential\");\n  const join: OtiumJoin = {\n    v: 2,\n    central: invite.central,\n    relay: String(response.relayUrl),\n    cellId: String(response.cell?.id),\n    secret,\n  };\n  if (!join.relay || !join.cellId || join.cellId === \"undefined\") {\n    throw new Error(\"central returned an incomplete enrollment response\");\n  }\n  assertSecureRelayUrl(join.relay);\n  recordClaimedCredential(pending, join);\n  return join;\n}\n\n/**\n * Durably commit a claimed enrollment. The retry key is deliberately removed\n * only after the atomic join-file save is fsynced and verified. A crash before\n * that point leaves enough key material to replay the idempotent claim.\n */\nexport function commitEnrollment(join: OtiumJoin, options: SaveJoinOptions = {}): string {\n  return withJoinCredentialLock(() => {\n    const pendingPath = pendingEnrollmentPath();\n    const pending = existsSync(pendingPath)\n      ? (JSON.parse(readFileSync(pendingPath, \"utf8\")) as PendingEnrollment)\n      : null;\n    const digest = joinCredentialDigest(join);\n    if (\n      pending &&\n      (!pending.claimed ||\n        pending.claimed.digest !== digest ||\n        pending.claimed.cellId !== join.cellId)\n    ) {\n      throw new Error(\n        `pending Otium enrollment at ${pendingPath} does not match these credentials`,\n      );\n    }\n\n    const path = saveJoinWhileLocked(join, options);\n    if (!isJoinPersisted(join)) {\n      throw new Error(\"Otium join credentials were not durably persisted\");\n    }\n    if (!pending) return path;\n\n    // The same lock protects save→verification→pending deletion from a\n    // concurrent explicit replacement through saveJoin().\n    unlinkSync(pendingPath);\n    const directoryFd = openSync(dirname(pendingPath), \"r\");\n    try {\n      fsyncSync(directoryFd);\n    } finally {\n      closeSync(directoryFd);\n    }\n    return path;\n  });\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAaA;AAYA,IAAM,OAAO,OAAO,KAAK,4BAA4B,MAAM;AAkDpD,SAAS,qBAAqB,CAAC,MAAgC;AAAA,EACpE,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,SAAS,KAAK,MAAM,OAAO,KAAK,KAAK,KAAK,GAAG,WAAW,EAAE,SAAS,MAAM,CAAC;AAAA,IAC1E,MAAM;AAAA,IACN,MAAM,IAAI,MAAM,0CAA0C;AAAA;AAAA,EAE5D,KAAK,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAAA,IAClE,MAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAAA,EACA,MAAM,MAAM;AAAA,EACZ,MAAM,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,QAAQ,KAAK,EAAE,QAAQ,QAAQ,EAAE,IAAI;AAAA,EAC3F,MAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,IAAI,MAAM,KAAK,IAAI;AAAA,EACjE,IAAI,IAAI,MAAM,MAAM,YAAY,MAAM,WAAW,MAAM,GAAG;AAAA,IACxD,MAAM,IAAI,MAAM,qEAA+D;AAAA,EACjF;AAAA,EACA,uBAAuB,OAAO;AAAA,EAC9B,OAAO,EAAE,GAAG,GAAG,SAAS,MAAM;AAAA;AAGzB,SAAS,qBAAqB,GAAW;AAAA,EAC9C,OAAO,QAAQ,UAAU,+BAA+B;AAAA;AAGnD,SAAS,mBAAmB,CAAC,QAAmC;AAAA,EACrE,MAAM,OAAO,sBAAsB;AAAA,EACnC,KAAK,WAAW,IAAI;AAAA,IAAG,OAAO;AAAA,EAC9B,IAAI;AAAA,IACF,MAAM,QAAQ,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,IACnD,OAAO,MAAM,YAAY,OAAO,WAAW,MAAM,UAAU,OAAO;AAAA,IAClE,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,SAAS,mBAAmB,CAAC,QAA0B,UAAsC;AAAA,EAC3F,MAAM,OAAO,sBAAsB;AAAA,EACnC,IAAI,WAAW,IAAI,GAAG;AAAA,IACpB,MAAM,QAAQ,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,IACnD,IAAI,MAAM,YAAY,OAAO,WAAW,MAAM,UAAU,OAAO;AAAA,MAAO,OAAO;AAAA,IAC7E,MAAM,IAAI,MAAM,0CAA0C,MAAM;AAAA,EAClE;AAAA,EACA,MAAM,OAAO,oBAAoB,QAAQ;AAAA,EACzC,MAAM,UAA6B;AAAA,OAC9B;AAAA,IACH,gBAAgB,WAAW;AAAA,IAC3B,YAAY,KAAK,WAAW,OAAO,EAAE,QAAQ,OAAO,MAAM,QAAQ,CAAC,EAAE,SAAS,WAAW;AAAA,IACzF,WAAW,KAAK,UAAU,OAAO,EAAE,QAAQ,OAAO,MAAM,OAAO,CAAC,EAAE,SAAS,WAAW;AAAA,OAClF,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,EACjC;AAAA,EACA,UAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,EAC5C,MAAM,gBAAgB,QACpB,QAAQ,IAAI,GACZ,kCAAkC,QAAQ,OAAO,WAAW,OAC9D;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,KAAK,SAAS,eAAe,MAAM,GAAK;AAAA,IACxC,cAAc,IAAI,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC;AAAA,GAAO,MAAM;AAAA,IACjE,UAAU,EAAE;AAAA,IACZ,UAAU,EAAE;AAAA,IACZ,KAAK;AAAA,IAGL,SAAS,eAAe,IAAI;AAAA,IAC5B,WAAW,aAAa;AAAA,IACxB,UAAU,MAAM,GAAK;AAAA,IACrB,MAAM,cAAc,SAAS,QAAQ,IAAI,GAAG,GAAG;AAAA,IAC/C,IAAI;AAAA,MACF,UAAU,WAAW;AAAA,cACrB;AAAA,MACA,UAAU,WAAW;AAAA;AAAA,IAEvB,OAAO,OAAO;AAAA,IACd,IAAI,OAAO;AAAA,MAAW,UAAU,EAAE;AAAA,IAClC,IAAI,WAAW,aAAa;AAAA,MAAG,WAAW,aAAa;AAAA,IACvD,IAAK,MAAgC,SAAS,YAAY,WAAW,IAAI,GAAG;AAAA,MAC1E,MAAM,QAAQ,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,MACnD,IAAI,MAAM,YAAY,OAAO,WAAW,MAAM,UAAU,OAAO;AAAA,QAAO,OAAO;AAAA,IAC/E;AAAA,IACA,MAAM;AAAA;AAAA,EAER,OAAO;AAAA;AAGT,SAAS,wBAAwB,CAAC,SAAkC;AAAA,EAClE,MAAM,OAAO,sBAAsB;AAAA,EACnC,MAAM,YAAY,QAAQ,IAAI;AAAA,EAC9B,MAAM,gBAAgB,QACpB,WACA,kCAAkC,QAAQ,OAAO,WAAW,OAC9D;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,KAAK,SAAS,eAAe,MAAM,GAAK;AAAA,IACxC,cAAc,IAAI,GAAG,KAAK,UAAU,SAAS,MAAM,CAAC;AAAA,GAAO,MAAM;AAAA,IACjE,UAAU,EAAE;AAAA,IACZ,UAAU,EAAE;AAAA,IACZ,KAAK;AAAA,IACL,WAAW,eAAe,IAAI;AAAA,IAC9B,MAAM,cAAc,SAAS,WAAW,GAAG;AAAA,IAC3C,IAAI;AAAA,MACF,UAAU,WAAW;AAAA,cACrB;AAAA,MACA,UAAU,WAAW;AAAA;AAAA,IAEvB,OAAO,OAAO;AAAA,IACd,IAAI,OAAO;AAAA,MAAW,UAAU,EAAE;AAAA,IAClC,IAAI,WAAW,aAAa;AAAA,MAAG,WAAW,aAAa;AAAA,IACvD,MAAM;AAAA;AAAA;AAIV,SAAS,uBAAuB,CAAC,SAA4B,MAAuB;AAAA,EAClF,uBAAuB,MAAM;AAAA,IAC3B,MAAM,UAAU,KAAK,MAAM,aAAa,sBAAsB,GAAG,MAAM,CAAC;AAAA,IACxE,IACE,QAAQ,YAAY,QAAQ,WAC5B,QAAQ,UAAU,QAAQ,SAC1B,QAAQ,mBAAmB,QAAQ,kBACnC,QAAQ,cAAc,QAAQ,WAC9B;AAAA,MACA,MAAM,IAAI,MAAM,gEAAgE;AAAA,IAClF;AAAA,IACA,MAAM,UAAU,EAAE,QAAQ,qBAAqB,IAAI,GAAG,QAAQ,KAAK,OAAO;AAAA,IAC1E,IACE,QAAQ,YACP,QAAQ,QAAQ,WAAW,QAAQ,UAAU,QAAQ,QAAQ,WAAW,QAAQ,SACjF;AAAA,MACA,MAAM,IAAI,MAAM,2EAA2E;AAAA,IAC7F;AAAA,IACA,yBAAyB,KAAK,SAAS,QAAQ,CAAC;AAAA,GACjD;AAAA;AAGH,SAAS,cAAc,CAAC,UAAwC,eAA+B;AAAA,EAC7F,IAAI,SAAS,MAAM,KAAK,SAAS,cAAc,kCAAkC;AAAA,IAC/E,MAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAAA,EACA,MAAM,aAAa,iBAAiB;AAAA,IAClC,KAAK,OAAO,KAAK,eAAe,WAAW;AAAA,IAC3C,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AAAA,EACD,MAAM,YAAY,gBAAgB;AAAA,IAChC,KAAK,OAAO,KAAK,SAAS,oBAAoB,WAAW;AAAA,IACzD,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AAAA,EACD,MAAM,SAAS,cAAc,EAAE,YAAY,WAAW,UAAU,CAAC;AAAA,EACjE,MAAM,MAAM,OAAO,KACjB,SAAS,UAAU,QAAQ,OAAO,KAAK,SAAS,MAAM,WAAW,GAAG,MAAM,EAAE,CAC9E;AAAA,EACA,MAAM,WAAW,iBAAiB,eAAe,KAAK,OAAO,KAAK,SAAS,OAAO,WAAW,CAAC;AAAA,EAC9F,SAAS,OAAO,IAAI;AAAA,EACpB,SAAS,WAAW,OAAO,KAAK,SAAS,KAAK,WAAW,CAAC;AAAA,EAC1D,OAAO,OAAO,OAAO;AAAA,IACnB,SAAS,OAAO,OAAO,KAAK,SAAS,YAAY,WAAW,CAAC;AAAA,IAC7D,SAAS,MAAM;AAAA,EACjB,CAAC,EAAE,SAAS,MAAM;AAAA;AAGpB,eAAe,QAAW,CACxB,KACA,MACA,SACY;AAAA,EACZ,MAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,uBAAuB,QAAQ;AAAA,IAC1D,MAAM,KAAK,UAAU,IAAI;AAAA,EAC3B,CAAC;AAAA,EACD,MAAM,SAAU,MAAM,SAAS,KAAK;AAAA,EACpC,KAAK,SAAS;AAAA,IAAI,MAAM,IAAI,MAAM,OAAO,OAAO,SAAS,mBAAmB,SAAS,SAAS,CAAC;AAAA,EAC/F,OAAO;AAAA;AAGT,eAAsB,iBAAiB,CACrC,QACoC;AAAA,EACpC,OAAO,SAAoC,GAAG,OAAO,2CAA2C;AAAA,IAC9F,OAAO,OAAO;AAAA,EAChB,CAAC;AAAA;AAGH,eAAsB,eAAe,CACnC,QACA,UACoB;AAAA,EACpB,MAAM,UAAU,oBAAoB,QAAQ,QAAQ;AAAA,EACpD,MAAM,WAAW,MAAM,SACrB,GAAG,OAAO,yCACV;AAAA,IACE,OAAO,OAAO;AAAA,IACd,qBAAqB,QAAQ;AAAA,OACzB,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,EAC3D,GACA,EAAE,mBAAmB,QAAQ,eAAe,CAC9C;AAAA,EACA,MAAM,aAAa,SAAS;AAAA,EAC5B,MAAM,SAAS,eAAe,YAAY,QAAQ,UAAU;AAAA,EAC5D,KAAK,OAAO,WAAW,MAAM;AAAA,IAAG,MAAM,IAAI,MAAM,gDAAgD;AAAA,EAChG,MAAM,OAAkB;AAAA,IACtB,GAAG;AAAA,IACH,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO,SAAS,QAAQ;AAAA,IAC/B,QAAQ,OAAO,SAAS,MAAM,EAAE;AAAA,IAChC;AAAA,EACF;AAAA,EACA,KAAK,KAAK,UAAU,KAAK,UAAU,KAAK,WAAW,aAAa;AAAA,IAC9D,MAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AAAA,EACA,qBAAqB,KAAK,KAAK;AAAA,EAC/B,wBAAwB,SAAS,IAAI;AAAA,EACrC,OAAO;AAAA;AAQF,SAAS,gBAAgB,CAAC,MAAiB,UAA2B,CAAC,GAAW;AAAA,EACvF,OAAO,uBAAuB,MAAM;AAAA,IAClC,MAAM,cAAc,sBAAsB;AAAA,IAC1C,MAAM,UAAU,WAAW,WAAW,IACjC,KAAK,MAAM,aAAa,aAAa,MAAM,CAAC,IAC7C;AAAA,IACJ,MAAM,SAAS,qBAAqB,IAAI;AAAA,IACxC,IACE,aACE,QAAQ,WACR,QAAQ,QAAQ,WAAW,UAC3B,QAAQ,QAAQ,WAAW,KAAK,SAClC;AAAA,MACA,MAAM,IAAI,MACR,+BAA+B,8CACjC;AAAA,IACF;AAAA,IAEA,MAAM,OAAO,oBAAoB,MAAM,OAAO;AAAA,IAC9C,KAAK,gBAAgB,IAAI,GAAG;AAAA,MAC1B,MAAM,IAAI,MAAM,mDAAmD;AAAA,IACrE;AAAA,IACA,KAAK;AAAA,MAAS,OAAO;AAAA,IAIrB,WAAW,WAAW;AAAA,IACtB,MAAM,cAAc,SAAS,QAAQ,WAAW,GAAG,GAAG;AAAA,IACtD,IAAI;AAAA,MACF,UAAU,WAAW;AAAA,cACrB;AAAA,MACA,UAAU,WAAW;AAAA;AAAA,IAEvB,OAAO;AAAA,GACR;AAAA;",
+  "debugId": "3E67B5DF4109FD5964756E2164756E21",
+  "names": []
+}

package/dist/chunk-c500xe9z.js

@@ -0,0 +1,33 @@
+// ../../adapters/otium/src/protocol.ts
+var PEER_PROTOCOL_VERSION = 1;
+var MAX_PEER_MESSAGE_LENGTH = 1e4;
+var MAX_PEER_INPUT_FILE_BYTES = 2 * 1024 * 1024 * 1024;
+var MAX_PEER_INPUT_REQUEST_BYTES = MAX_PEER_INPUT_FILE_BYTES + 8 * 1024 * 1024;
+function str(body, field) {
+  const value = body[field];
+  return typeof value === "string" && value.trim() ? value : null;
+}
+function parseExecutionSpec(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    return null;
+  const raw = value;
+  const agent = str(raw, "agent");
+  const model = str(raw, "model");
+  const effort = str(raw, "effort");
+  const rawMcp = raw.mcp;
+  if (!agent || !model || !effort || !Array.isArray(rawMcp) || !rawMcp.every((entry) => typeof entry === "string" && entry.trim().length > 0) || typeof raw.canSpawnSubagents !== "boolean") {
+    return null;
+  }
+  return {
+    agent,
+    model,
+    effort,
+    ...str(raw, "description") ? { description: str(raw, "description") } : {},
+    mcp: [...new Set(rawMcp.map((entry) => entry.trim()))],
+    canSpawnSubagents: raw.canSpawnSubagents
+  };
+}
+
+export { PEER_PROTOCOL_VERSION, MAX_PEER_MESSAGE_LENGTH, MAX_PEER_INPUT_FILE_BYTES, MAX_PEER_INPUT_REQUEST_BYTES, parseExecutionSpec };
+
+//# debugId=536F85318EA03AF964756E2164756E21

package/dist/chunk-c500xe9z.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../../../adapters/otium/src/protocol.ts"],
+  "sourcesContent": [
+    "/**\n * otium peer protocol — payload shapes exchanged between workspace runtime\n * nodes. Field-for-field copy of otium's\n * `apps/runtime-api/src/peer/protocol.ts` (PEER_PROTOCOL_VERSION 1): the hub\n * trusts these shapes without schema validation, so this file must track the\n * otium side exactly.\n */\n\nexport const PEER_PROTOCOL_VERSION = 1;\n\nexport interface PeerFeatureCapabilities {\n  remoteAsk: boolean;\n  inputFiles: boolean;\n  outputFiles: boolean;\n  visualBridge: boolean;\n}\n\nexport const MAX_PEER_MESSAGE_LENGTH = 10_000;\nexport const MAX_PEER_INPUT_FILE_BYTES = 2 * 1024 * 1024 * 1024;\nexport const MAX_PEER_INPUT_REQUEST_BYTES = MAX_PEER_INPUT_FILE_BYTES + 8 * 1024 * 1024;\n\nexport interface PeerSessionEntry {\n  topicId: string;\n  name: string;\n  agent: string | null;\n  hasSession: boolean;\n  description?: string;\n}\n\n/** Fully-resolved room configuration pinned by the hub for one worker turn.\n *  The worker must not re-resolve these values from its hidden mirror topic. */\nexport interface PlacedTopicExecutionSpec {\n  agent: string;\n  model: string;\n  effort: string;\n  description?: string;\n  /** Optional MCP whitelist after hub-side topic override resolution. */\n  mcp: string[];\n  /** Preserves the host room's real top-level delegation capability. */\n  canSpawnSubagents: boolean;\n}\n\n/** Hub → worker: run one turn of a hub-hosted agent room. */\nexport interface PeerTurnRequest {\n  v: number;\n  requestId: string;\n  userId: string;\n  /** The hub's canonical topic id — the worker keys its hidden topic on it. */\n  hostTopicId: string;\n  /** Room title, mirrored onto the hidden topic so tell/ask by title works. */\n  topicTitle: string;\n  execution?: PlacedTopicExecutionSpec;\n  /** Legacy additive fields accepted during rolling upgrades. */\n  agent?: string;\n  model?: string;\n  effort?: string;\n  /** File ids already copied into the worker hidden topic's upload store. */\n  attachments?: string[];\n  message: string;\n}\n\n/** Hub → worker: create/update the hidden mirror before the first turn. */\nexport interface PeerProvisionRequest {\n  v: number;\n  userId: string;\n  hostTopicId: string;\n  topicTitle: string;\n  execution: PlacedTopicExecutionSpec;\n}\n\n/** Worker → hub: one coarse turn event, ordered by seq per requestId. */\nexport interface PeerEventRequest {\n  v: number;\n  requestId: string;\n  seq: number;\n  event: Record<string, unknown>;\n}\n\nfunction str(body: Record<string, unknown>, field: string): string | null {\n  const value = body[field];\n  return typeof value === \"string\" && value.trim() ? value : null;\n}\n\n/** Parse and normalize an inbound execution spec (mirrors otium routes.ts). */\nexport function parseExecutionSpec(value: unknown): PlacedTopicExecutionSpec | null {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n  const raw = value as Record<string, unknown>;\n  const agent = str(raw, \"agent\");\n  const model = str(raw, \"model\");\n  const effort = str(raw, \"effort\");\n  const rawMcp = raw.mcp;\n  if (\n    !agent ||\n    !model ||\n    !effort ||\n    !Array.isArray(rawMcp) ||\n    !rawMcp.every((entry) => typeof entry === \"string\" && entry.trim().length > 0) ||\n    typeof raw.canSpawnSubagents !== \"boolean\"\n  ) {\n    return null;\n  }\n  return {\n    agent,\n    model,\n    effort,\n    ...(str(raw, \"description\") ? { description: str(raw, \"description\") as string } : {}),\n    mcp: [...new Set(rawMcp.map((entry) => entry.trim()))],\n    canSpawnSubagents: raw.canSpawnSubagents,\n  };\n}\n"
+  ],
+  "mappings": ";AAQO,IAAM,wBAAwB;AAS9B,IAAM,0BAA0B;AAChC,IAAM,4BAA4B,IAAI,OAAO,OAAO;AACpD,IAAM,+BAA+B,4BAA4B,IAAI,OAAO;AA2DnF,SAAS,GAAG,CAAC,MAA+B,OAA8B;AAAA,EACxE,MAAM,QAAQ,KAAK;AAAA,EACnB,OAAO,OAAO,UAAU,YAAY,MAAM,KAAK,IAAI,QAAQ;AAAA;AAItD,SAAS,kBAAkB,CAAC,OAAiD;AAAA,EAClF,KAAK,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK;AAAA,IAAG,OAAO;AAAA,EACxE,MAAM,MAAM;AAAA,EACZ,MAAM,QAAQ,IAAI,KAAK,OAAO;AAAA,EAC9B,MAAM,QAAQ,IAAI,KAAK,OAAO;AAAA,EAC9B,MAAM,SAAS,IAAI,KAAK,QAAQ;AAAA,EAChC,MAAM,SAAS,IAAI;AAAA,EACnB,KACG,UACA,UACA,WACA,MAAM,QAAQ,MAAM,MACpB,OAAO,MAAM,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,KAAK,EAAE,SAAS,CAAC,KAC7E,OAAO,IAAI,sBAAsB,WACjC;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,OAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,OACI,IAAI,KAAK,aAAa,IAAI,EAAE,aAAa,IAAI,KAAK,aAAa,EAAY,IAAI,CAAC;AAAA,IACpF,KAAK,CAAC,GAAG,IAAI,IAAI,OAAO,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,CAAC,CAAC;AAAA,IACrD,mBAAmB,IAAI;AAAA,EACzB;AAAA;",
+  "debugId": "536F85318EA03AF964756E2164756E21",
+  "names": []
+}