taskflow-mcp-core 0.3.0-beta.1.1 → 1.0.0

package/dist/control/authorization.js

@@ -0,0 +1,302 @@
+/**
+ * Trusted local identity and P1/P2/P12 authorization.
+ *
+ * A protected bootstrap token proves possession of the local OS user's token,
+ * not kernel-verified per-connection peer credentials. The bootstrap owner must
+ * protect its directory/token (0700/0600); processes able to read that token act
+ * as that user. This module neither grants network/domain transfer authority nor
+ * replaces TE PathRef/permit checks. Policy callbacks must read current policy.
+ */
+import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { lstatSync, realpathSync, statSync } from "node:fs";
+import { dirname, isAbsolute, relative, resolve, sep } from "node:path";
+import { canonicalJson } from "taskflow-core/flowir/hash";
+import { ControlError } from "./errors.js";
+export const AUTHORIZATION_CAPABILITIES = [
+    "project.read", "run.submit", "run.cancel", "approval.decide", "coordinator.setMaxActiveRuns",
+    "coordinator.forceRelease", "artifact.read",
+];
+function denied(message) { throw new ControlError("TF_POLICY_DENIED", message); }
+function revoked() { throw new ControlError("TF_AUTHORITY_REVOKED", "verified context is absent, foreign, or revoked"); }
+function record(value, keys) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        denied("security object is required");
+    const object = value;
+    if (![Object.prototype, null].includes(Object.getPrototypeOf(object)))
+        denied("security object prototype is unsupported");
+    if (Object.keys(object).some((key) => !keys.includes(key)))
+        denied("unknown security field");
+    return object;
+}
+function text(value) { return typeof value === "string" && value.length > 0; }
+function kind(value) {
+    return AUTHORIZATION_CAPABILITIES.includes(value);
+}
+function contained(root, target) {
+    const suffix = relative(root, target);
+    return suffix === "" || (!isAbsolute(suffix) && suffix !== ".." && !suffix.startsWith(`..${sep}`));
+}
+/** Resolve existing ancestors too, so a symlink cannot enlarge lexical scope. */
+function canonicalPath(value) {
+    if (!text(value) || !isAbsolute(value) || value.includes("\0"))
+        denied("absolute resource scope is required");
+    let existing = resolve(value);
+    const suffix = [];
+    for (;;) {
+        try {
+            lstatSync(existing);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                denied("resource scope cannot be verified");
+            const parent = dirname(existing);
+            if (parent === existing)
+                denied("resource scope cannot be verified");
+            suffix.unshift(relative(parent, existing));
+            existing = parent;
+            continue;
+        }
+        // An existing entry whose target cannot be resolved is not a missing
+        // path: notably a dangling symlink must never inherit its parent's scope.
+        try {
+            return resolve(realpathSync(existing), ...suffix);
+        }
+        catch {
+            denied("existing resource scope or symbolic link cannot be verified");
+        }
+    }
+}
+function trustedBinding(value) {
+    const body = record(value, ["projectId", "controlDomainId", "projectRoot"]);
+    if (!text(body.projectId) || !text(body.controlDomainId))
+        denied("project/domain identity is required");
+    // A mount is an existing canonical root, not an unverified client path.
+    const root = canonicalPath(body.projectRoot);
+    try {
+        if (realpathSync(root) !== root || !statSync(root).isDirectory())
+            denied("project root is not a canonical directory");
+    }
+    catch {
+        denied("project root must exist");
+    }
+    return Object.freeze({ projectId: body.projectId, controlDomainId: body.controlDomainId, projectRoot: root });
+}
+function capability(value, root) {
+    const body = record(value, ["kind", "scopeRoot"]);
+    if (!kind(body.kind))
+        denied("unknown capability");
+    const scopeRoot = canonicalPath(body.scopeRoot);
+    if (!contained(root, scopeRoot))
+        denied("policy cannot expand project scope");
+    return { kind: body.kind, scopeRoot };
+}
+function array(value) { if (!Array.isArray(value))
+    denied("security list is required"); return value; }
+function freezePolicy(policy) {
+    function freeze(value) {
+        if (value && typeof value === "object") {
+            for (const child of Object.values(value))
+                freeze(child);
+            Object.freeze(value);
+        }
+    }
+    freeze(policy);
+    return policy;
+}
+function layer(value, root) {
+    const body = record(value, ["capabilities", "deny", "attenuate", "substitute"]);
+    const result = {};
+    for (const field of ["capabilities", "attenuate"]) {
+        if (body[field] !== undefined)
+            result[field] = array(body[field]).map((item) => capability(item, root));
+    }
+    if (body.deny !== undefined)
+        result.deny = array(body.deny).map((item) => { if (!kind(item))
+            denied("unknown denied capability"); return item; });
+    if (body.substitute !== undefined)
+        result.substitute = array(body.substitute).map((item) => {
+            const substitution = record(item, ["capability", "with"]);
+            if (!kind(substitution.capability))
+                denied("unknown substitution capability");
+            const replacement = capability(substitution.with, root);
+            if (substitution.capability !== replacement.kind)
+                denied("substitution cannot change command authority");
+            return { capability: substitution.capability, with: replacement };
+        });
+    return result;
+}
+function livePolicy(value, root) {
+    const body = record(value, ["host", "user", "project", "invocation", "revokedPrincipals"]);
+    const result = { host: layer(body.host, root) };
+    for (const field of ["user", "project", "invocation"])
+        if (body[field] !== undefined)
+            result[field] = layer(body[field], root);
+    if (body.revokedPrincipals !== undefined)
+        result.revokedPrincipals = array(body.revokedPrincipals).map((item) => { if (!text(item))
+            denied("invalid revoked principal"); return item; });
+    return result;
+}
+function requestedCapability(request) {
+    if (request.commandKind !== undefined && !["run.submit", "run.cancel", "approval.decide", "coordinator.setMaxActiveRuns", "coordinator.forceRelease"].includes(request.commandKind))
+        denied("unknown command class");
+    if (request.operation === "read")
+        return "project.read";
+    if (request.operation === "artifact")
+        return "artifact.read";
+    if ((request.operation === "submit" || request.operation === "replay") && request.commandKind !== undefined)
+        return request.commandKind;
+    return denied("unknown operation or command class");
+}
+/** Shared core canonical serialization, full SHA256 for wire audit fields. */
+export function authorizationAuditHash(value) {
+    return createHash("sha256").update(canonicalJson(value), "utf8").digest("hex");
+}
+/** Client helper: caller obtains secret from protected bootstrap storage. */
+export function answerAuthorizationChallenge(secret, challenge) {
+    return createHmac("sha256", secret).update(canonicalJson(challenge), "utf8").digest("hex");
+}
+export function createAuthorizationAuthority(options) {
+    if (!Number.isSafeInteger(options.ownerUid) || options.ownerUid < 0 || !process.getuid || options.ownerUid !== process.getuid()) {
+        throw new ControlError("TF_BOOTSTRAP_FAILED", "local authorization requires the actual process OS uid");
+    }
+    if (!(options.bootstrapSecret instanceof Uint8Array) || options.bootstrapSecret.byteLength < 32)
+        denied("protected bootstrap secret must have at least 256 bits");
+    const secret = Buffer.from(options.bootstrapSecret);
+    const baseline = new Set(array([...options.hostBaseline]).map((value) => { if (!kind(value))
+        denied("unknown host baseline capability"); return value; }));
+    if (options.credentialIssuerId !== undefined && !/^[a-zA-Z0-9._-]{1,64}$/.test(options.credentialIssuerId))
+        denied("invalid trusted credential issuer");
+    const principal = `os-user:${options.ownerUid}${options.credentialIssuerId === undefined ? "" : `/credential:${options.credentialIssuerId}`}`;
+    const now = options.now ?? Date.now;
+    const ttl = options.challengeTtlMs ?? 5_000;
+    if (!Number.isSafeInteger(ttl) || ttl < 1 || ttl > 60_000)
+        denied("challenge lifetime must be bounded");
+    const contexts = new WeakMap();
+    const challenges = new Map();
+    function issue(binding) {
+        const context = Object.freeze(Object.create(null));
+        contexts.set(context, Object.freeze({ principal, binding }));
+        return context;
+    }
+    function identity(context) {
+        if (context === null || typeof context !== "object")
+            return revoked();
+        const verified = contexts.get(context);
+        if (!verified)
+            return revoked();
+        return verified;
+    }
+    return {
+        issueStandalone: (binding) => issue(trustedBinding(binding)),
+        createChallenge(binding) {
+            const time = now();
+            for (const [id, pending] of challenges)
+                if (pending.expiresAt <= time)
+                    challenges.delete(id);
+            if (challenges.size >= 256)
+                denied("too many pending authentication challenges");
+            const challenge = Object.freeze({ purpose: "taskflow.control.authentication", version: 1, id: randomUUID(), nonce: randomBytes(32).toString("hex"), expiresAt: time + ttl, principal, binding: trustedBinding(binding) });
+            challenges.set(challenge.id, challenge);
+            return challenge;
+        },
+        authenticate(id, proof) {
+            const challenge = challenges.get(id);
+            challenges.delete(id);
+            if (!challenge || challenge.expiresAt <= now() || typeof proof !== "string" || !/^[a-f0-9]{64}$/.test(proof))
+                denied("authentication challenge is absent, expired, or invalid");
+            const expected = Buffer.from(answerAuthorizationChallenge(secret, challenge), "hex");
+            if (!timingSafeEqual(expected, Buffer.from(proof, "hex")))
+                denied("bootstrap token proof failed");
+            return issue(challenge.binding);
+        },
+        identity,
+        revokeContext(context) { contexts.delete(context); },
+        async authorize(context, request) {
+            const verified = identity(context);
+            const body = { ...record(request, ["operation", "commandKind", "resourcePath", "artifactDigest", "projectId", "controlDomainId", "projectRoot"]) };
+            if (body.projectId !== verified.binding.projectId || body.controlDomainId !== verified.binding.controlDomainId
+                || canonicalPath(body.projectRoot) !== verified.binding.projectRoot)
+                denied("verified context does not authorize this project/domain");
+            const operation = body.operation;
+            const commandKind = body.commandKind;
+            const requested = requestedCapability({ ...verified.binding, operation, commandKind });
+            if (operation === "artifact" && commandKind === undefined)
+                denied("artifact authorization requires its ledger command class");
+            const requiredCapabilities = operation === "artifact" ? [requested, commandKind] : [requested];
+            for (const required of requiredCapabilities)
+                if (!baseline.has(required))
+                    denied("capability is outside the explicit host baseline");
+            let path = canonicalPath(body.resourcePath ?? verified.binding.projectRoot);
+            if (!contained(verified.binding.projectRoot, path))
+                denied("resource is outside the verified project");
+            if (operation === "artifact") {
+                if (!text(body.artifactDigest) || !options.verifyArtifactReachability)
+                    denied("artifact digest is not bearer authorization");
+                try {
+                    if (!await options.verifyArtifactReachability(verified.principal, verified.binding, body.artifactDigest, commandKind))
+                        denied("artifact is not reachable from an authorized ledger entry");
+                }
+                catch {
+                    denied("artifact reachability is unavailable or denied");
+                }
+            }
+            // The policy read comes after any asynchronous reachability check, so a
+            // revocation during that check cannot expose historical artifact bytes.
+            let policy;
+            try {
+                policy = livePolicy(await options.loadLivePolicy(verified.principal, verified.binding), verified.binding.projectRoot);
+            }
+            catch (error) {
+                if (error instanceof ControlError)
+                    throw error;
+                return denied("current policy is unavailable");
+            }
+            identity(context); // Revocation while awaiting a policy read must also deny.
+            path = canonicalPath(body.resourcePath ?? verified.binding.projectRoot);
+            if (canonicalPath(verified.binding.projectRoot) !== verified.binding.projectRoot || !contained(verified.binding.projectRoot, path))
+                denied("project/resource scope changed during authorization");
+            if (policy.revokedPrincipals?.includes(verified.principal))
+                return revoked();
+            let scopeRoot = verified.binding.projectRoot;
+            for (const required of requiredCapabilities) {
+                let substitution;
+                for (const current of [policy.host, policy.user, policy.project, policy.invocation]) {
+                    if (!current)
+                        continue;
+                    if (current.deny?.includes(required))
+                        denied("capability is denied by current policy");
+                    const attenuation = current.attenuate?.filter((entry) => entry.kind === required);
+                    for (const grant of [current.capabilities, attenuation?.length ? attenuation : undefined]) {
+                        if (grant === undefined)
+                            continue;
+                        // No attenuation entry for this kind means inheritance; an explicit
+                        // capabilities: [] always means deny everything.
+                        const candidates = grant.filter((entry) => entry.kind === required && contained(entry.scopeRoot, path));
+                        if (candidates.length === 0)
+                            denied("capability scope is absent or attenuated");
+                        const widest = candidates.sort((a, b) => a.scopeRoot.length - b.scopeRoot.length)[0];
+                        if (contained(scopeRoot, widest.scopeRoot))
+                            scopeRoot = widest.scopeRoot;
+                    }
+                    for (const replacement of current.substitute ?? []) {
+                        if (replacement.capability !== required)
+                            continue;
+                        if (substitution !== undefined && substitution !== replacement.with.scopeRoot)
+                            denied("substitution conflict");
+                        substitution = replacement.with.scopeRoot;
+                        if (!contained(scopeRoot, substitution) || !contained(substitution, path))
+                            denied("substitution cannot expand effective scope");
+                        scopeRoot = substitution;
+                    }
+                }
+            }
+            const effectiveCapability = Object.freeze({ kind: requested, scopeRoot });
+            freezePolicy(policy);
+            return Object.freeze({ principal: verified.principal, callerPrincipal: verified.principal,
+                authorizationContextHash: authorizationAuditHash({ principal: verified.principal, binding: verified.binding, hostBaseline: [...baseline].sort(), policy, operation, commandKind, scopeRoot }),
+                capability: effectiveCapability,
+                effectivePolicy: Object.freeze({ hostBaseline: Object.freeze([...baseline].sort()), layers: policy, capability: effectiveCapability }) });
+        },
+    };
+}
+//# sourceMappingURL=authorization.js.map

package/dist/control/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../../taskflow-control/src/authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACzC,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,8BAA8B;IAC7F,0BAA0B,EAAE,eAAe;CAClC,CAAC;AA+DX,SAAS,MAAM,CAAC,OAAe,IAAW,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAChG,SAAS,OAAO,KAAY,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,iDAAiD,CAAC,CAAC,CAAC,CAAC;AAChI,SAAS,MAAM,CAAC,KAAc,EAAE,IAAuB;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,6BAA6B,CAAC,CAAC;IAC/G,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,CAAC,0CAA0C,CAAC,CAAC;IAC1H,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC;AACf,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,IAAqB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AACxG,SAAS,IAAI,CAAC,KAAc;IAC3B,OAAQ,0BAAiD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC3E,CAAC;AACD,SAAS,SAAS,CAAC,IAAY,EAAE,MAAc;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC;AACD,iFAAiF;AACjF,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,qCAAqC,CAAC,CAAC;IAC9G,IAAI,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,SAAS,CAAC;QACT,IAAI,CAAC;YAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAC5B,OAAO,KAAK,EAAE,CAAC;YACd,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,mCAAmC,CAAC,CAAC;YACpG,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM,CAAC,mCAAmC,CAAC,CAAC;YACrE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAAC,QAAQ,GAAG,MAAM,CAAC;YAC9D,SAAS;QACV,CAAC;QACD,qEAAqE;QACrE,0EAA0E;QAC1E,IAAI,CAAC;YAAC,OAAO,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;QAAC,CAAC;QAC1D,MAAM,CAAC;YAAC,MAAM,CAAC,6DAA6D,CAAC,CAAC;QAAC,CAAC;IACjF,CAAC;AACF,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;QAAE,MAAM,CAAC,qCAAqC,CAAC,CAAC;IACxG,wEAAwE;IACxE,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC;QAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,CAAC,2CAA2C,CAAC,CAAC;IAAC,CAAC;IAC9H,MAAM,CAAC;QAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/G,CAAC;AACD,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC;QAAE,MAAM,CAAC,oCAAoC,CAAC,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,IAAe,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAAE,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC;AAC3H,SAAS,YAAY,CAAC,MAA+B;IACpD,SAAS,MAAM,CAAC,KAAc;QAC7B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IACD,MAAM,CAAC,MAAM,CAAC,CAAC;IAAC,OAAO,MAAM,CAAC;AAC/B,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,IAAY;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAChF,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,WAAW,CAAU,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClJ,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1F,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;gBAAE,MAAM,CAAC,iCAAiC,CAAC,CAAC;YAC9E,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxD,IAAI,YAAY,CAAC,UAAU,KAAK,WAAW,CAAC,IAAI;gBAAE,MAAM,CAAC,8CAA8C,CAAC,CAAC;YACzG,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACnE,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AACf,CAAC;AACD,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC3F,MAAM,MAAM,GAA4B,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;IACzE,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAU;QAAE,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;IACxI,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS;QAAE,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzL,OAAO,MAAM,CAAC;AACf,CAAC;AACD,SAAS,mBAAmB,CAAC,OAA6B;IACzD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,8BAA8B,EAAE,0BAA0B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACrN,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC;IACxD,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU;QAAE,OAAO,eAAe,CAAC;IAC7D,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,WAAW,CAAC;IACxI,OAAO,MAAM,CAAC,oCAAoC,CAAC,CAAC;AACrD,CAAC;AACD,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACpD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AACD,6EAA6E;AAC7E,MAAM,UAAU,4BAA4B,CAAC,MAAkB,EAAE,SAAiC;IACjG,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAsC;IAClF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACjI,MAAM,IAAI,YAAY,CAAC,qBAAqB,EAAE,wDAAwD,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,YAAY,UAAU,CAAC,IAAI,OAAO,CAAC,eAAe,CAAC,UAAU,GAAG,EAAE;QAAE,MAAM,CAAC,wDAAwD,CAAC,CAAC;IAClK,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,kCAAkC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3J,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAAE,MAAM,CAAC,mCAAmC,CAAC,CAAC;IACxJ,MAAM,SAAS,GAAG,WAAW,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;IAC9I,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,MAAM;QAAE,MAAM,CAAC,oCAAoC,CAAC,CAAC;IACxG,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAoF,CAAC;IACjH,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC7D,SAAS,KAAK,CAAC,OAAuC;QACrD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAoB,CAAC;QACtE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC;IAC9E,CAAC;IACD,SAAS,QAAQ,CAAC,OAAwB;QACzC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,OAAO,EAAE,CAAC;QAAC,OAAO,QAAQ,CAAC;IAC1F,CAAC;IACD,OAAO;QACN,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC5D,eAAe,CAAC,OAAO;YACtB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;YACnB,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,UAAU;gBAAE,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI;oBAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7F,IAAI,UAAU,CAAC,IAAI,IAAI,GAAG;gBAAE,MAAM,CAAC,4CAA4C,CAAC,CAAC;YACjF,MAAM,SAAS,GAA2B,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,GAAG,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAClP,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAAC,OAAO,SAAS,CAAC;QAC3D,CAAC;QACD,YAAY,CAAC,EAAE,EAAE,KAAK;YACrB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,IAAI,GAAG,EAAE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,yDAAyD,CAAC,CAAC;YAChL,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;YACrF,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAAE,MAAM,CAAC,8BAA8B,CAAC,CAAC;YAClG,OAAO,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,QAAQ;QACR,aAAa,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpD,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO;YAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YACnJ,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,OAAO,CAAC,eAAe;mBAC1G,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;gBAAE,MAAM,CAAC,yDAAyD,CAAC,CAAC;YACxI,MAAM,SAAS,GAAG,IAAI,CAAC,SAA+B,CAAC;YACvD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAmD,CAAC;YAC7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;YACvF,IAAI,SAAS,KAAK,UAAU,IAAI,WAAW,KAAK,SAAS;gBAAE,MAAM,CAAC,0DAA0D,CAAC,CAAC;YAC9H,MAAM,oBAAoB,GAAkC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,WAAY,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC/H,KAAK,MAAM,QAAQ,IAAI,oBAAoB;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,MAAM,CAAC,kDAAkD,CAAC,CAAC;YACrI,IAAI,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC5E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC;gBAAE,MAAM,CAAC,0CAA0C,CAAC,CAAC;YACvG,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,0BAA0B;oBAAE,MAAM,CAAC,6CAA6C,CAAC,CAAC;gBAC7H,IAAI,CAAC;oBAAC,IAAI,CAAC,MAAM,OAAO,CAAC,0BAA0B,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC;wBAAE,MAAM,CAAC,2DAA2D,CAAC,CAAC;gBAAC,CAAC;gBACnM,MAAM,CAAC;oBAAC,MAAM,CAAC,gDAAgD,CAAC,CAAC;gBAAC,CAAC;YACpE,CAAC;YACD,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,MAA+B,CAAC;YACpC,IAAI,CAAC;gBAAC,MAAM,GAAG,UAAU,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAAC,CAAC;YAC9H,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,KAAK,YAAY,YAAY;oBAAE,MAAM,KAAK,CAAC;gBAAC,OAAO,MAAM,CAAC,+BAA+B,CAAC,CAAC;YAAC,CAAC;YACjH,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,0DAA0D;YAC7E,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,IAAI,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACxE,IAAI,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC;gBAAE,MAAM,CAAC,qDAAqD,CAAC,CAAC;YAClM,IAAI,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,OAAO,OAAO,EAAE,CAAC;YAC7E,IAAI,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC;YAC7C,KAAK,MAAM,QAAQ,IAAI,oBAAoB,EAAE,CAAC;gBAC7C,IAAI,YAAgC,CAAC;gBACrC,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBACrF,IAAI,CAAC,OAAO;wBAAE,SAAS;oBACvB,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC;wBAAE,MAAM,CAAC,wCAAwC,CAAC,CAAC;oBACvF,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;oBAClF,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC3F,IAAI,KAAK,KAAK,SAAS;4BAAE,SAAS;wBAClC,oEAAoE;wBACpE,iDAAiD;wBACjD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;wBACxG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;4BAAE,MAAM,CAAC,0CAA0C,CAAC,CAAC;wBAChF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,CAAC;wBACtF,IAAI,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;4BAAE,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;oBAC1E,CAAC;oBACD,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;wBACpD,IAAI,WAAW,CAAC,UAAU,KAAK,QAAQ;4BAAE,SAAS;wBAClD,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,WAAW,CAAC,IAAI,CAAC,SAAS;4BAAE,MAAM,CAAC,uBAAuB,CAAC,CAAC;wBAC/G,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC;wBAC1C,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC;4BAAE,MAAM,CAAC,4CAA4C,CAAC,CAAC;wBAChI,SAAS,GAAG,YAAY,CAAC;oBAC1B,CAAC;gBACF,CAAC;YACF,CAAC;YACD,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1E,YAAY,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,eAAe,EAAE,QAAQ,CAAC,SAAS;gBACxF,wBAAwB,EAAE,sBAAsB,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;gBAC7L,UAAU,EAAE,mBAAmB;gBAC/B,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5I,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/control/control-cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export declare function runControlCli(argv?: string[]): Promise<number>;
+//# sourceMappingURL=control-cli.d.ts.map

package/dist/control/control-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-cli.d.ts","sourceRoot":"","sources":["../../../taskflow-control/src/control-cli.ts"],"names":[],"mappings":";AAuEA,wBAAsB,aAAa,CAAC,IAAI,WAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyIjF"}

package/dist/control/control-cli.js

@@ -0,0 +1,279 @@
+#!/usr/bin/env node
+/** Explicit local entrypoint; auto never falls back to standalone. */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { pathToFileURL } from "node:url";
+import { randomUUID } from "node:crypto";
+import { ControlHost, defaultServerHello } from "./control-host.js";
+import { ProjectRegistry } from "./project-registry.js";
+import { RuntimeTeExecutionProvider } from "./runtime-provider.js";
+import { answerAuthorizationChallenge } from "./authorization.js";
+import { bootstrapLocalAuthority, createPrivateFileOnce, ensurePrivateDirectory, provisionLocalOperator, readPrivateFile } from "./local-bootstrap.js";
+import { createControlEvidenceStore, readControlEvidence } from "./store/evidence-adapter.js";
+import { launchControlConsole } from "./control-console.js";
+import { serveControlMcp } from "./control-mcp.js";
+import { singletonPaths } from "./singleton.js";
+import { ControlError } from "./errors.js";
+import { Value } from "typebox/value";
+import { registerGracefulSignalOwner } from "taskflow-core/control-execution";
+import { ControlStoreHeaderSchema } from "./schema/header.js";
+const HELP = `taskflow-control run --root DIR --flow FILE [--args JSON] [--mode auto|coordinated|standalone]
+taskflow-control status --root DIR [--run UUID]
+taskflow-control serve --root DIR [--root DIR ...] [--console] [--port NUMBER]
+taskflow-control mcp --root DIR [--mode auto|coordinated|standalone] [--operator]
+taskflow-control operator-provision --root DIR --control-home DIR
+taskflow-control coordinator-status --root DIR [--operator]
+taskflow-control set-max-active-runs --root DIR --operator --command-id UUID --max-active-runs NUMBER
+taskflow-control force-release --root DIR --operator --command-id UUID --reservation UUID --acknowledge-risk --reason TEXT
+Common: --control-home DIR (defaults to TASKFLOW_HOME/control or ~/.taskflow/control).
+Operator provisioning is an explicit OS-owner action; a separate credential and live project policy grant operations.
+maxActiveRuns is user-global. Force release does not stop execution and marks the concurrency guarantee operator-overridden.
+Local owner grants are persisted under CONTROL_HOME/policies and reread per operation.
+The CLI executes script flows directly; agent execution requires an embedded configured runner.
+Console's one-use browser token is saved to a 0600 local file, never printed or put in URLs.
+`;
+function fail(message) { throw new ControlError("TF_BOOTSTRAP_FAILED", message); }
+function parse(argv) {
+    const command = argv[0];
+    if (!["run", "status", "serve", "mcp", "operator-provision", "coordinator-status", "set-max-active-runs", "force-release"].includes(command))
+        fail(HELP);
+    const flags = new Map();
+    for (let i = 1; i < argv.length; i++) {
+        const flag = argv[i];
+        if (!["--root", "--flow", "--args", "--mode", "--control-home", "--run", "--console", "--port", "--operator", "--command-id", "--max-active-runs", "--reservation", "--acknowledge-risk", "--reason"].includes(flag))
+            fail(`unknown option ${flag}`);
+        const value = ["--console", "--operator", "--acknowledge-risk"].includes(flag) ? "true" : argv[++i];
+        if (!value || value.startsWith("--"))
+            fail(`value required for ${flag}`);
+        if (flag !== "--root" && flags.has(flag))
+            fail(`duplicate option ${flag}`);
+        flags.set(flag, [...(flags.get(flag) ?? []), value]);
+    }
+    const roots = (flags.get("--root") ?? [process.cwd()]).map(root => fs.realpathSync(root));
+    if (roots.some(root => !fs.statSync(root).isDirectory()))
+        fail("project root must be a directory");
+    if (command !== "serve" && roots.length !== 1)
+        fail("multiple roots require serve");
+    const get = (key) => flags.get(key)?.[0];
+    const mode = get("--mode") ?? (["status", "coordinator-status", "set-max-active-runs", "force-release"].includes(command) ? "coordinated" : "auto");
+    if (!["auto", "coordinated", "standalone"].includes(mode))
+        fail("invalid control mode");
+    const port = get("--port") === undefined ? undefined : Number(get("--port"));
+    if (port !== undefined && (!Number.isInteger(port) || port < 0 || port > 65535))
+        fail("invalid console port");
+    if (command !== "serve" && (get("--console") || port !== undefined))
+        fail("console options require serve");
+    if (get("--operator") && !["mcp", "status", "coordinator-status", "set-max-active-runs", "force-release"].includes(command))
+        fail("--operator requires an explicit operator-capable client command");
+    if (["set-max-active-runs", "force-release"].includes(command) && !get("--command-id"))
+        fail("operator mutations require --command-id UUID for durable retries");
+    if (command === "set-max-active-runs" && (!Number.isSafeInteger(Number(get("--max-active-runs"))) || Number(get("--max-active-runs")) < 1))
+        fail("--max-active-runs must be a positive safe integer");
+    if (command === "force-release" && (!get("--reservation") || !get("--acknowledge-risk") || !get("--reason")?.trim()))
+        fail("force-release requires --reservation, --acknowledge-risk and a nonempty --reason");
+    return { operator: !!get("--operator"), commandId: get("--command-id"), maxActiveRuns: Number(get("--max-active-runs")), reservationId: get("--reservation"), reason: get("--reason"), command, roots, mode: mode, controlHome: path.resolve(singletonPaths(get("--control-home")).controlHome), flow: get("--flow"), args: get("--args"), runId: get("--run"), console: !!get("--console"), port };
+}
+function readHeader(root) {
+    const file = path.join(root, ".taskflow", "control", "header");
+    if (fs.lstatSync(file).isSymbolicLink())
+        fail("project header cannot be a symbolic link");
+    const header = JSON.parse(fs.readFileSync(file, "utf8"));
+    if (!Value.Check(ControlStoreHeaderSchema, header))
+        fail("project header is invalid");
+    const directory = fs.realpathSync(path.dirname(file)), stat = fs.statSync(directory);
+    if (header.directoryBinding.canonicalPath !== directory || header.directoryBinding.device !== String(stat.dev) || header.directoryBinding.inode !== String(stat.ino))
+        fail("project store identity mismatch");
+    return header;
+}
+export async function runControlCli(argv = process.argv.slice(2)) {
+    if (argv.length === 0 || argv.includes("--help")) {
+        process.stdout.write(HELP);
+        return 0;
+    }
+    const config = parse(argv);
+    for (const root of config.roots) {
+        const suffix = path.relative(root, config.controlHome);
+        if (suffix === "" || (!path.isAbsolute(suffix) && suffix !== ".." && !suffix.startsWith(`..${path.sep}`)))
+            fail("control home must be outside every project root; TE authority storage cannot overlap the execution workspace");
+    }
+    // Reject unreadable input before opening an owner. Runtime validates its schema.
+    const flow = config.command === "run" ? JSON.parse(fs.readFileSync(config.flow ?? fail("run requires --flow FILE"), "utf8")) : undefined;
+    const args = JSON.parse(config.args ?? "{}");
+    ensurePrivateDirectory(config.controlHome);
+    if (config.command === "operator-provision") {
+        process.stdout.write(JSON.stringify(provisionLocalOperator(config.controlHome, config.roots[0])) + "\n");
+        return 0;
+    }
+    const registry = new ProjectRegistry(path.join(config.controlHome, "registry.json"));
+    const { authorization, secret } = bootstrapLocalAuthority(config.controlHome, config.roots, {
+        verifyArtifactReachability: (_principal, binding, digest, commandKind) => {
+            const mount = registry.resolve(binding.projectId);
+            if (mount.projectRoot !== binding.projectRoot || mount.store.header.controlDomainId !== binding.controlDomainId)
+                return false;
+            const ledger = readControlEvidence(mount.store);
+            if (commandKind === "run.submit") {
+                for (const run of Object.values(ledger.runs))
+                    if (run.artifactRefs.some(ref => ref.digest === digest))
+                        return true;
+                for (const refs of Object.values(ledger.receipts))
+                    if (refs.receiptRef.digest === digest || refs.manifestProofRef.digest === digest)
+                        return true;
+            }
+            if (ledger.events.some(({ event }) => event.payload.kind === "artifact.recorded" && event.payload.commandKind === commandKind && event.payload.artifact.digest === digest))
+                return true;
+            return mount.store.readJournal().some(batch => batch.command?.kind === commandKind && batch.command?.responseArtifactRef?.digest === digest);
+        },
+    });
+    const credentialSecret = config.operator ? readPrivateFile(path.join(config.controlHome, "operator.key")) : secret;
+    const host = new ControlHost({ mode: config.mode, controlHome: config.controlHome, registry, authorization, trustedInProcessFeatures: ["durable-approval"],
+        projectRoot: config.roots[0], projectStorePath: path.join(config.roots[0], ".taskflow", "control"),
+        projectMounts: config.roots.slice(1).map(projectRoot => ({ projectRoot, storePath: path.join(projectRoot, ".taskflow", "control") })),
+        evidenceFactory: (mount, verify) => createControlEvidenceStore(mount.store, {
+            terminalEvidence: { verify },
+            authorize: async (actor, scope) => {
+                const context = actor;
+                authorization.identity(context);
+                const header = mount.store.header;
+                if (scope.projectId !== header.projectId || scope.controlDomainId !== header.controlDomainId)
+                    fail("evidence request does not match the mounted project");
+                let commandKind = "run.submit";
+                if (scope.target.kind === "command") {
+                    const command = mount.store.readJournal().find(batch => batch.command?.commandId === scope.target.id)?.command;
+                    if (!command)
+                        fail("evidence command is absent from the mounted ledger");
+                    commandKind = command.kind;
+                }
+                else {
+                    if (!mount.store.readRun(scope.target.id))
+                        fail("evidence run is absent from the mounted ledger");
+                    if (scope.artifactRef) {
+                        const recorded = readControlEvidence(mount.store).events.find(({ event }) => event.payload.kind === "artifact.recorded"
+                            && event.payload.runId === scope.target.id && event.payload.artifact.digest === scope.artifactRef.digest)?.event;
+                        if (recorded?.payload.kind === "artifact.recorded")
+                            commandKind = recorded.payload.commandKind;
+                    }
+                }
+                return authorization.authorize(context, { projectId: header.projectId, controlDomainId: header.controlDomainId, projectRoot: mount.projectRoot,
+                    operation: scope.artifactRef ? "artifact" : "replay", commandKind, ...(scope.artifactRef ? { artifactDigest: scope.artifactRef.digest } : {}) });
+            },
+        }),
+        provider: new RuntimeTeExecutionProvider(path.join(config.controlHome, "provider"), { agents: [], usageAccounting: "unavailable" }), });
+    let consoleServer;
+    let handoffPath;
+    let interrupted = false;
+    const interrupt = () => { interrupted = true; };
+    const releaseSignalOwner = registerGracefulSignalOwner(interrupt);
+    process.on("SIGINT", interrupt);
+    process.on("SIGTERM", interrupt);
+    try {
+        await host.start();
+        host.hello(defaultServerHello());
+        const header = readHeader(config.roots[0]);
+        let context;
+        if (host.status.singleton === "attached") {
+            const challenge = await host.dispatch("auth.challenge", { projectId: header.projectId, ...(config.operator ? { credential: "operator" } : {}) }, { fencingEpoch: host.status.fencingEpoch });
+            if (challenge.binding.projectRoot !== config.roots[0] || challenge.binding.projectId !== header.projectId || challenge.binding.controlDomainId !== header.controlDomainId)
+                fail("host challenge does not match the configured project");
+            await host.dispatch("auth.authenticate", { challengeId: challenge.id, proof: answerAuthorizationChallenge(credentialSecret, challenge) }, { fencingEpoch: host.status.fencingEpoch });
+        }
+        else {
+            const binding = { projectId: header.projectId, controlDomainId: header.controlDomainId, projectRoot: config.roots[0] };
+            context = config.operator ? authorization.issueOperatorStandalone(binding) : authorization.issueStandalone(binding);
+        }
+        const call = (method, params) => context ? host.dispatchAuthenticated(context, method, params) : host.dispatch(method, params, { fencingEpoch: host.status.fencingEpoch });
+        if (config.command === "mcp") {
+            const stopInput = () => process.stdin.destroy();
+            process.on("SIGINT", stopInput);
+            process.on("SIGTERM", stopInput);
+            try {
+                await serveControlMcp({ call, projectId: header.projectId, operator: config.operator });
+            }
+            finally {
+                process.off("SIGINT", stopInput);
+                process.off("SIGTERM", stopInput);
+            }
+            return 0;
+        }
+        if (["coordinator-status", "set-max-active-runs", "force-release"].includes(config.command)) {
+            const method = config.command === "coordinator-status" ? "coordinator.status" : config.command === "set-max-active-runs" ? "coordinator.setMaxActiveRuns" : "coordinator.forceRelease";
+            const params = { projectId: header.projectId, ...(config.command === "set-max-active-runs" ? { commandId: config.commandId, maxActiveRuns: config.maxActiveRuns } : config.command === "force-release" ? { commandId: config.commandId, reservationId: config.reservationId, riskAcknowledgement: true, reason: config.reason } : {}) };
+            process.stdout.write(JSON.stringify(await call(method, params)) + "\n");
+            return 0;
+        }
+        if (config.command === "run") {
+            const accepted = await call("commands.submit", { projectId: header.projectId, commandId: randomUUID(), kind: "run.submit", flow, args });
+            // Keep individual RPCs bounded; an approval can remain parked until another
+            // authenticated client resolves it. SIGINT retains durable reconciliation facts.
+            let run;
+            for (;;) {
+                run = await call("runs.status", { projectId: header.projectId, runId: accepted.runId });
+                if (interrupted && !["completed", "failed", "blocked", "cancelled"].includes(run.status)) {
+                    try {
+                        await call("runs.cancel", { projectId: header.projectId, runId: accepted.runId, commandId: randomUUID(), expectedRunVersion: run.runVersion });
+                        interrupted = false;
+                    }
+                    catch (error) {
+                        if (!(error instanceof ControlError) || error.code !== "TF_STALE_VERSION")
+                            throw error;
+                        continue;
+                    }
+                    run = await call("runs.status", { projectId: header.projectId, runId: accepted.runId });
+                }
+                if (["completed", "failed", "blocked", "cancelled", "unknown"].includes(run.status) || run.needsOperator)
+                    break;
+                await new Promise(resolve => setTimeout(resolve, 100));
+            }
+            const result = run.status === "unknown" ? undefined : await call("runs.result", { projectId: header.projectId, runId: accepted.runId });
+            process.stdout.write(JSON.stringify({ ...accepted, run, ...(result ? { result } : {}) }) + "\n");
+            return run.status === "completed" ? 0 : 1;
+        }
+        if (config.command === "status") {
+            const result = await call(config.runId ? "runs.status" : "runs.list", { projectId: header.projectId, ...(config.runId ? { runId: config.runId } : {}) });
+            process.stdout.write(JSON.stringify({ control: host.status, result }) + "\n");
+            return 0;
+        }
+        if (!context)
+            fail("serve requires ownership; a host already owns this control home (use status/run to attach)");
+        if (config.console) {
+            const contexts = new Map();
+            for (const root of config.roots) {
+                const h = readHeader(root);
+                contexts.set(h.projectId, authorization.issueStandalone({ projectId: h.projectId, controlDomainId: h.controlDomainId, projectRoot: root }));
+            }
+            consoleServer = await launchControlConsole({ host, authorization, registry, contexts, port: config.port });
+            handoffPath = path.join(config.controlHome, `console-handoff-${randomUUID()}.json`);
+            createPrivateFileOnce(handoffPath, Buffer.from(JSON.stringify({ url: consoleServer.url, token: consoleServer.bootstrapToken }) + "\n"));
+        }
+        process.stdout.write(JSON.stringify({ control: host.status, projects: registry.list(), ...(consoleServer ? { consoleUrl: consoleServer.url, browserHandoffFile: handoffPath } : {}) }) + "\n");
+        if (!interrupted)
+            await new Promise(resolve => {
+                const stop = () => { process.off("SIGINT", stop); process.off("SIGTERM", stop); resolve(); };
+                process.on("SIGINT", stop);
+                process.on("SIGTERM", stop);
+            });
+        return 0;
+    }
+    finally {
+        releaseSignalOwner();
+        process.off("SIGINT", interrupt);
+        process.off("SIGTERM", interrupt);
+        await consoleServer?.close();
+        if (handoffPath) {
+            try {
+                fs.unlinkSync(handoffPath);
+            }
+            catch { /* preserve primary shutdown error */ }
+        }
+        host.stop();
+        registry.close();
+        secret.fill(0);
+        credentialSecret.fill(0);
+    }
+}
+if (process.argv[1] && fs.existsSync(process.argv[1]) && import.meta.url === pathToFileURL(fs.realpathSync(process.argv[1])).href) {
+    runControlCli().then(code => { process.exitCode = code; }, error => {
+        process.stderr.write(JSON.stringify({ error: error instanceof ControlError ? error.code : "TF_BOOTSTRAP_FAILED", message: error instanceof Error ? error.message : "local control failed" }) + "\n");
+        process.exitCode = 1;
+    });
+}
+//# sourceMappingURL=control-cli.js.map