@agent-vm/agent-portal-sdk 0.0.118 → 0.0.120

package/dist/gateway-runtime-local-exec-transport-B1hy2A3Q.js

@@ -1,427 +0,0 @@
-import { chmod, mkdtemp, rm } from "node:fs/promises";
-import { join } from "node:path";
-import { createServer } from "node:net";
-import { randomBytes } from "node:crypto";
-import { fileURLToPath } from "node:url";
-//#region src/gateway-runtime-local-exec/gateway-runtime-local-exec-protocol.ts
-const MAXIMUM_LOCAL_EXEC_FRAME_BYTES = 128 * 1024;
-const MAXIMUM_LOCAL_EXEC_STREAM_CHUNK_BYTES = 64 * 1024;
-const MAXIMUM_LOCAL_EXEC_TOKEN_BYTES = 256;
-var GatewayRuntimeLocalExecProtocolError = class extends Error {
-	constructor(message) {
-		super(message);
-		this.name = "GatewayRuntimeLocalExecProtocolError";
-	}
-};
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function requireExactKeys(value, keys) {
-	const actualKeys = Object.keys(value).toSorted();
-	const expectedKeys = keys.toSorted();
-	if (actualKeys.length !== expectedKeys.length || actualKeys.some((key, index) => key !== expectedKeys[index])) throw new GatewayRuntimeLocalExecProtocolError("Local exec frame contains unexpected fields.");
-}
-function requireString(value, fieldName) {
-	if (typeof value !== "string" || value.length === 0) throw new GatewayRuntimeLocalExecProtocolError(`Local exec frame field '${fieldName}' must be a non-empty string.`);
-	return value;
-}
-function requireBoundedToken(value) {
-	const token = requireString(value, "token");
-	if (Buffer.byteLength(token, "utf8") > MAXIMUM_LOCAL_EXEC_TOKEN_BYTES) throw new GatewayRuntimeLocalExecProtocolError("Local exec reservation token exceeds the byte limit.");
-	return token;
-}
-function requireCanonicalBase64(value) {
-	const encoded = requireString(value, "contentBase64");
-	const decoded = Buffer.from(encoded, "base64");
-	if (decoded.byteLength > MAXIMUM_LOCAL_EXEC_STREAM_CHUNK_BYTES || decoded.toString("base64") !== encoded) throw new GatewayRuntimeLocalExecProtocolError("Local exec stream content must be canonical bounded base64.");
-	return encoded;
-}
-function requireTerminalDimension(value, fieldName) {
-	if (!Number.isSafeInteger(value) || value <= 0 || value > 1e3) throw new GatewayRuntimeLocalExecProtocolError(`Local exec frame field '${fieldName}' must be a bounded positive integer.`);
-	return value;
-}
-function parseJsonObject(line) {
-	if (Buffer.byteLength(line, "utf8") > MAXIMUM_LOCAL_EXEC_FRAME_BYTES) throw new GatewayRuntimeLocalExecProtocolError("Local exec frame exceeds the byte limit.");
-	let value;
-	try {
-		value = JSON.parse(line);
-	} catch (error) {
-		throw new GatewayRuntimeLocalExecProtocolError(error instanceof Error ? `Local exec frame is not valid JSON: ${error.message}` : "Local exec frame is not valid JSON.");
-	}
-	if (!isRecord(value)) throw new GatewayRuntimeLocalExecProtocolError("Local exec frame must be an object.");
-	return value;
-}
-function encodeGatewayRuntimeLocalExecFrame(frame) {
-	return `${JSON.stringify(frame)}\n`;
-}
-function parseGatewayRuntimeLocalExecClientFrame(line) {
-	const value = parseJsonObject(line);
-	const kind = requireString(value.kind, "kind");
-	switch (kind) {
-		case "authenticate":
-			requireExactKeys(value, ["kind", "token"]);
-			return {
-				kind,
-				token: requireBoundedToken(value.token)
-			};
-		case "cancel":
-		case "stdin-end":
-			requireExactKeys(value, ["kind"]);
-			return { kind };
-		case "stdin-chunk":
-			requireExactKeys(value, ["contentBase64", "kind"]);
-			return {
-				contentBase64: requireCanonicalBase64(value.contentBase64),
-				kind
-			};
-		case "terminal-resize":
-			requireExactKeys(value, [
-				"columns",
-				"kind",
-				"rows"
-			]);
-			return {
-				columns: requireTerminalDimension(value.columns, "columns"),
-				kind,
-				rows: requireTerminalDimension(value.rows, "rows")
-			};
-		default: throw new GatewayRuntimeLocalExecProtocolError(`Unknown local exec client frame '${kind}'.`);
-	}
-}
-function parseGatewayRuntimeLocalExecServerFrame(line) {
-	const value = parseJsonObject(line);
-	const kind = requireString(value.kind, "kind");
-	switch (kind) {
-		case "accepted":
-		case "stderr-end":
-		case "stdout-end":
-			requireExactKeys(value, ["kind"]);
-			return { kind };
-		case "stderr-chunk":
-		case "stdout-chunk":
-			requireExactKeys(value, ["contentBase64", "kind"]);
-			return {
-				contentBase64: requireCanonicalBase64(value.contentBase64),
-				kind
-			};
-		case "exited":
-			requireExactKeys(value, ["exitCode", "kind"]);
-			if (value.exitCode !== null && (!Number.isSafeInteger(value.exitCode) || value.exitCode < 0 || value.exitCode > 255)) throw new GatewayRuntimeLocalExecProtocolError("Local exec frame field 'exitCode' must be null or an integer from 0 through 255.");
-			return {
-				exitCode: value.exitCode,
-				kind
-			};
-		case "rejected":
-			requireExactKeys(value, ["kind", "message"]);
-			return {
-				kind,
-				message: requireString(value.message, "message")
-			};
-		default: throw new GatewayRuntimeLocalExecProtocolError(`Unknown local exec server frame '${kind}'.`);
-	}
-}
-var GatewayRuntimeLocalExecLineDecoder = class {
-	#buffer = Buffer.alloc(0);
-	push(chunk) {
-		if (chunk.byteLength + this.#buffer.byteLength > MAXIMUM_LOCAL_EXEC_FRAME_BYTES) throw new GatewayRuntimeLocalExecProtocolError("Local exec frame batch exceeds the byte limit.");
-		this.#buffer = Buffer.concat([this.#buffer, chunk]);
-		const lines = [];
-		let newlineIndex = this.#buffer.indexOf(10);
-		while (newlineIndex >= 0) {
-			const line = this.#buffer.subarray(0, newlineIndex).toString("utf8");
-			this.#buffer = this.#buffer.subarray(newlineIndex + 1);
-			if (Buffer.byteLength(line, "utf8") > MAXIMUM_LOCAL_EXEC_FRAME_BYTES) throw new GatewayRuntimeLocalExecProtocolError("Local exec frame exceeds the byte limit.");
-			if (line.length > 0) lines.push(line);
-			newlineIndex = this.#buffer.indexOf(10);
-		}
-		if (this.#buffer.byteLength > MAXIMUM_LOCAL_EXEC_FRAME_BYTES) throw new GatewayRuntimeLocalExecProtocolError("Local exec frame exceeds the byte limit.");
-		return lines;
-	}
-};
-//#endregion
-//#region src/gateway-runtime-local-exec/gateway-runtime-local-exec-transport.ts
-const GATEWAY_RUNTIME_LOCAL_EXEC_SOCKET_ENV = "AGENT_VM_LOCAL_EXEC_SOCKET";
-const GATEWAY_RUNTIME_LOCAL_EXEC_TOKEN_ENV = "AGENT_VM_LOCAL_EXEC_TOKEN";
-const DEFAULT_RESERVATION_TIMEOUT_MS = 15e3;
-const DEFAULT_TEMPORARY_DIRECTORY = "/tmp";
-const MAXIMUM_STREAM_CHUNK_BYTES = 64 * 1024;
-const defaultReservationScheduler = { schedule(callback, delayMs) {
-	const timeout = setTimeout(callback, delayMs);
-	return { cancel: () => clearTimeout(timeout) };
-} };
-function validateReservationTimeout(timeoutMs) {
-	if (!Number.isSafeInteger(timeoutMs) || timeoutMs <= 0 || timeoutMs > 6e4) throw new RangeError("Local exec reservation timeout must be an integer from 1 through 60000.");
-	return timeoutMs;
-}
-async function closeServer(server) {
-	if (!server.listening) return;
-	await new Promise((resolve, reject) => {
-		server.close((error) => error === void 0 ? resolve() : reject(error));
-	});
-}
-async function writeFrame(socket, frame) {
-	const encodedFrame = encodeGatewayRuntimeLocalExecFrame(frame);
-	if (socket.write(encodedFrame)) return;
-	await new Promise((resolve, reject) => {
-		const cleanup = () => {
-			socket.off("drain", handleDrain);
-			socket.off("error", handleError);
-		};
-		const handleDrain = () => {
-			cleanup();
-			resolve();
-		};
-		const handleError = (error) => {
-			cleanup();
-			reject(error);
-		};
-		socket.once("drain", handleDrain);
-		socket.once("error", handleError);
-	});
-}
-var GatewayRuntimeLocalExecFrameWriter = class {
-	#pendingWrite = Promise.resolve();
-	#socket;
-	constructor(socket) {
-		this.#socket = socket;
-	}
-	async write(frame) {
-		const write = this.#pendingWrite.then(async () => await writeFrame(this.#socket, frame));
-		this.#pendingWrite = write.catch(() => void 0);
-		await write;
-	}
-};
-async function endSocket(socket) {
-	if (socket.destroyed) return;
-	await new Promise((resolve) => socket.end(resolve));
-}
-async function pumpOutput(props) {
-	const read = props.kind === "stdout" ? props.operation.readStdout.bind(props.operation) : props.operation.readStderr.bind(props.operation);
-	if (props.socket.destroyed) return;
-	const result = await read(MAXIMUM_STREAM_CHUNK_BYTES);
-	if (result.kind === "end") {
-		await props.frameWriter.write({ kind: `${props.kind}-end` });
-		return;
-	}
-	await props.frameWriter.write({
-		contentBase64: Buffer.from(result.content).toString("base64"),
-		kind: `${props.kind}-chunk`
-	});
-	await pumpOutput(props);
-}
-var GatewayRuntimeLocalExecTransport = class {
-	#helperArgv;
-	#reservationScheduler;
-	#reservationTimeoutMs;
-	#reservations = /* @__PURE__ */ new Map();
-	#temporaryDirectory;
-	constructor(options = {}) {
-		this.#helperArgv = options.helperArgv ?? Object.freeze([process.execPath, fileURLToPath(new URL("./gateway-runtime-local-exec/gateway-runtime-local-exec-helper.js", import.meta.url))]);
-		if (this.#helperArgv.length === 0) throw new TypeError("Local exec helper argv cannot be empty.");
-		this.#reservationScheduler = options.reservationScheduler ?? defaultReservationScheduler;
-		this.#reservationTimeoutMs = validateReservationTimeout(options.reservationTimeoutMs ?? DEFAULT_RESERVATION_TIMEOUT_MS);
-		this.#temporaryDirectory = options.temporaryDirectory ?? DEFAULT_TEMPORARY_DIRECTORY;
-	}
-	async reserve(operation) {
-		const reservationId = randomBytes(16).toString("hex");
-		const token = randomBytes(32).toString("base64url");
-		const reservationDirectory = await mkdtemp(join(this.#temporaryDirectory, "agent-vm-local-exec-"));
-		await chmod(reservationDirectory, 448);
-		const socketPath = join(reservationDirectory, "relay.sock");
-		const server = createServer();
-		const reservation = {
-			cancelExpiry: this.#reservationScheduler.schedule(() => {
-				this.#expireReservation(reservationId).catch(() => void 0);
-			}, this.#reservationTimeoutMs).cancel,
-			consumed: false,
-			finalized: false,
-			operation,
-			reservationDirectory,
-			reservationId,
-			server,
-			socketPath,
-			token
-		};
-		this.#reservations.set(reservationId, reservation);
-		server.on("connection", (socket) => this.#acceptConnection(reservation, socket));
-		try {
-			await new Promise((resolve, reject) => {
-				server.once("error", reject);
-				server.listen(socketPath, () => {
-					server.off("error", reject);
-					resolve();
-				});
-			});
-			await chmod(socketPath, 384);
-		} catch (error) {
-			await this.#disposeReservation(reservation, true);
-			throw error;
-		}
-		return {
-			argv: [...this.#helperArgv],
-			env: {
-				[GATEWAY_RUNTIME_LOCAL_EXEC_SOCKET_ENV]: socketPath,
-				[GATEWAY_RUNTIME_LOCAL_EXEC_TOKEN_ENV]: token
-			},
-			finalizeToken: {
-				kind: "gateway-runtime-local-exec",
-				reservationId
-			},
-			stdinMode: "pipe-open"
-		};
-	}
-	async finalize(token) {
-		const reservationId = typeof token === "object" && token !== null ? Reflect.get(token, "reservationId") : void 0;
-		if (typeof token !== "object" || token === null || Reflect.get(token, "kind") !== "gateway-runtime-local-exec" || typeof reservationId !== "string") return;
-		const reservation = this.#reservations.get(reservationId);
-		if (reservation === void 0) return;
-		await this.#disposeReservation(reservation, !reservation.consumed);
-	}
-	async close() {
-		await Promise.all([...this.#reservations.values()].map(async (reservation) => await this.#disposeReservation(reservation, true)));
-	}
-	async #expireReservation(reservationId) {
-		const reservation = this.#reservations.get(reservationId);
-		if (reservation === void 0 || reservation.consumed) return;
-		await this.#disposeReservation(reservation, true);
-	}
-	#acceptConnection(reservation, socket) {
-		if (reservation.finalized || reservation.consumed) {
-			writeFrame(socket, {
-				kind: "rejected",
-				message: "Reservation already consumed."
-			}).catch(() => void 0).finally(() => socket.destroy());
-			return;
-		}
-		const decoder = new GatewayRuntimeLocalExecLineDecoder();
-		const connectionState = { authenticated: false };
-		socket.once("close", () => {
-			if (connectionState.authenticated && !reservation.finalized) this.#disposeReservation(reservation, true).catch(() => void 0);
-		});
-		socket.on("data", (chunk) => {
-			socket.pause();
-			this.#processClientFrames({
-				chunk,
-				connectionState,
-				decoder,
-				reservation,
-				socket
-			}).then(() => {
-				if (!socket.destroyed) socket.resume();
-			}).catch((error) => {
-				writeFrame(socket, {
-					kind: "rejected",
-					message: error instanceof Error ? error.message : "Invalid local exec frame."
-				}).catch(() => void 0).finally(() => socket.destroy());
-			});
-		});
-	}
-	async #processClientFrames(props) {
-		for (const line of props.decoder.push(props.chunk)) {
-			const frame = parseGatewayRuntimeLocalExecClientFrame(line);
-			if (!props.connectionState.authenticated) {
-				if (frame.kind !== "authenticate" || frame.token !== props.reservation.token || props.reservation.consumed) {
-					await writeFrame(props.socket, {
-						kind: "rejected",
-						message: frame.kind === "authenticate" && frame.token === props.reservation.token ? "Reservation already consumed." : "Invalid reservation token."
-					});
-					props.socket.destroy();
-					return;
-				}
-				props.connectionState.authenticated = true;
-				props.reservation.consumed = true;
-				props.reservation.cancelExpiry();
-				props.reservation.socket = props.socket;
-				props.reservation.server.close();
-				await writeFrame(props.socket, { kind: "accepted" });
-				this.#runAuthenticatedOperation(props.reservation, props.socket).catch(() => void 0);
-				continue;
-			}
-			switch (frame.kind) {
-				case "authenticate": throw new GatewayRuntimeLocalExecProtocolError("Duplicate authentication frame.");
-				case "cancel":
-					await props.reservation.operation.cancel();
-					return;
-				case "stdin-chunk":
-					await props.reservation.operation.writeStdin(Buffer.from(frame.contentBase64, "base64"));
-					continue;
-				case "stdin-end":
-					await props.reservation.operation.closeStdin();
-					continue;
-				case "terminal-resize":
-					if (props.reservation.operation.resizeTerminal === void 0) throw new GatewayRuntimeLocalExecProtocolError("Terminal resize is unavailable.");
-					await props.reservation.operation.resizeTerminal({
-						columns: frame.columns,
-						rows: frame.rows
-					});
-			}
-		}
-	}
-	async #runAuthenticatedOperation(reservation, socket) {
-		try {
-			const frameWriter = new GatewayRuntimeLocalExecFrameWriter(socket);
-			const [waitResult] = await Promise.all([
-				reservation.operation.wait(),
-				pumpOutput({
-					frameWriter,
-					kind: "stdout",
-					operation: reservation.operation,
-					socket
-				}),
-				pumpOutput({
-					frameWriter,
-					kind: "stderr",
-					operation: reservation.operation,
-					socket
-				})
-			]);
-			if (!socket.destroyed) {
-				await frameWriter.write({
-					exitCode: waitResult.exitCode,
-					kind: "exited"
-				});
-				await endSocket(socket);
-			}
-		} catch {
-			socket.destroy();
-		} finally {
-			await this.#disposeReservation(reservation, false);
-		}
-	}
-	async #disposeReservation(reservation, cancel) {
-		if (reservation.disposal !== void 0) return await reservation.disposal;
-		reservation.disposal = this.#disposeReservationOnce(reservation, cancel);
-		await reservation.disposal;
-	}
-	async #disposeReservationOnce(reservation, cancel) {
-		if (reservation.finalized) return;
-		reservation.finalized = true;
-		reservation.cancelExpiry();
-		let cancellationError;
-		if (cancel) try {
-			await reservation.operation.cancel();
-		} catch (error) {
-			cancellationError = error;
-		}
-		let cleanupError;
-		try {
-			reservation.socket?.destroy();
-			await closeServer(reservation.server).catch(() => void 0);
-			await rm(reservation.reservationDirectory, {
-				force: true,
-				recursive: true
-			});
-		} catch (error) {
-			cleanupError = error;
-		} finally {
-			this.#reservations.delete(reservation.reservationId);
-		}
-		if (cancellationError !== void 0 && cleanupError !== void 0) throw new AggregateError([cancellationError, cleanupError], "Local exec cancellation and cleanup both failed.");
-		if (cancellationError !== void 0) throw cancellationError;
-		if (cleanupError !== void 0) throw cleanupError;
-	}
-};
-//#endregion
-export { encodeGatewayRuntimeLocalExecFrame as a, GatewayRuntimeLocalExecLineDecoder as i, GATEWAY_RUNTIME_LOCAL_EXEC_TOKEN_ENV as n, parseGatewayRuntimeLocalExecServerFrame as o, GatewayRuntimeLocalExecTransport as r, GATEWAY_RUNTIME_LOCAL_EXEC_SOCKET_ENV as t };
-
-//# sourceMappingURL=gateway-runtime-local-exec-transport-B1hy2A3Q.js.map

package/dist/gateway-runtime-local-exec-transport-B1hy2A3Q.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateway-runtime-local-exec-transport-B1hy2A3Q.js","names":["#buffer","#socket","#pendingWrite","#helperArgv","#reservationScheduler","#reservationTimeoutMs","#reservations","#temporaryDirectory","#expireReservation","#acceptConnection","#disposeReservation","#processClientFrames","#runAuthenticatedOperation","#disposeReservationOnce"],"sources":["../src/gateway-runtime-local-exec/gateway-runtime-local-exec-protocol.ts","../src/gateway-runtime-local-exec/gateway-runtime-local-exec-transport.ts"],"sourcesContent":["const MAXIMUM_LOCAL_EXEC_FRAME_BYTES = 128 * 1024;\nconst MAXIMUM_LOCAL_EXEC_STREAM_CHUNK_BYTES = 64 * 1024;\nconst MAXIMUM_LOCAL_EXEC_TOKEN_BYTES = 256;\n\nexport type GatewayRuntimeLocalExecClientFrame =\n\t| { readonly kind: 'authenticate'; readonly token: string }\n\t| { readonly kind: 'cancel' }\n\t| { readonly contentBase64: string; readonly kind: 'stdin-chunk' }\n\t| { readonly kind: 'stdin-end' }\n\t| { readonly columns: number; readonly kind: 'terminal-resize'; readonly rows: number };\n\nexport type GatewayRuntimeLocalExecServerFrame =\n\t| { readonly kind: 'accepted' }\n\t| { readonly contentBase64: string; readonly kind: 'stderr-chunk' }\n\t| { readonly kind: 'stderr-end' }\n\t| { readonly exitCode: number | null; readonly kind: 'exited' }\n\t| { readonly message: string; readonly kind: 'rejected' }\n\t| { readonly contentBase64: string; readonly kind: 'stdout-chunk' }\n\t| { readonly kind: 'stdout-end' };\n\nexport class GatewayRuntimeLocalExecProtocolError extends Error {\n\tconstructor(message: string) {\n\t\tsuper(message);\n\t\tthis.name = 'GatewayRuntimeLocalExecProtocolError';\n\t}\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n\treturn typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction requireExactKeys(value: Readonly<Record<string, unknown>>, keys: readonly string[]): void {\n\tconst actualKeys = Object.keys(value).toSorted();\n\tconst expectedKeys = keys.toSorted();\n\tif (\n\t\tactualKeys.length !== expectedKeys.length ||\n\t\tactualKeys.some((key, index) => key !== expectedKeys[index])\n\t) {\n\t\tthrow new GatewayRuntimeLocalExecProtocolError('Local exec frame contains unexpected fields.');\n\t}\n}\n\nfunction requireString(value: unknown, fieldName: string): string {\n\tif (typeof value !== 'string' || value.length === 0) {\n\t\tthrow new GatewayRuntimeLocalExecProtocolError(\n\t\t\t`Local exec frame field '${fieldName}' must be a non-empty string.`,\n\t\t);\n\t}\n\treturn value;\n}\n\nfunction requireBoundedToken(value: unknown): string {\n\tconst token = requireString(value, 'token');\n\tif (Buffer.byteLength(token, 'utf8') > MAXIMUM_LOCAL_EXEC_TOKEN_BYTES) {\n\t\tthrow new GatewayRuntimeLocalExecProtocolError(\n\t\t\t'Local exec reservation token exceeds the byte limit.',\n\t\t);\n\t}\n\treturn token;\n}\n\nfunction requireCanonicalBase64(value: unknown): string {\n\tconst encoded = requireString(value, 'contentBase64');\n\tconst decoded = Buffer.from(encoded, 'base64');\n\tif (\n\t\tdecoded.byteLength > MAXIMUM_LOCAL_EXEC_STREAM_CHUNK_BYTES ||\n\t\tdecoded.toString('base64') !== encoded\n\t) {\n\t\tthrow new GatewayRuntimeLocalExecProtocolError(\n\t\t\t'Local exec stream content must be canonical bounded base64.',\n\t\t);\n\t}\n\treturn encoded;\n}\n\nfunction requireTerminalDimension(value: unknown, fieldName: string): number {\n\tif (!Number.isSafeInteger(value) || (value as number) <= 0 || (value as number) > 1_000) {\n\t\tthrow new GatewayRuntimeLocalExecProtocolError(\n\t\t\t`Local exec frame field '${fieldName}' must be a bounded positive integer.`,\n\t\t);\n\t}\n\treturn value as number;\n}\n\nfunction parseJsonObject(line: string): Readonly<Record<string, unknown>> {\n\tif (Buffer.byteLength(line, 'utf8') > MAXIMUM_LOCAL_EXEC_FRAME_BYTES) {\n\t\tthrow new GatewayRuntimeLocalExecProtocolError('Local exec frame exceeds the byte limit.');\n\t}\n\tlet value: unknown;\n\ttry {\n\t\tvalue = JSON.parse(line);\n\t} catch (error: unknown) {\n\t\tthrow new GatewayRuntimeLocalExecProtocolError(\n\t\t\terror instanceof Error\n\t\t\t\t? `Local exec frame is not valid JSON: ${error.message}`\n\t\t\t\t: 'Local exec frame is not valid JSON.',\n\t\t);\n\t}\n\tif (!isRecord(value)) {\n\t\tthrow new GatewayRuntimeLocalExecProtocolError('Local exec frame must be an object.');\n\t}\n\treturn value;\n}\n\nexport function encodeGatewayRuntimeLocalExecFrame(\n\tframe: GatewayRuntimeLocalExecClientFrame | GatewayRuntimeLocalExecServerFrame,\n): string {\n\treturn `${JSON.stringify(frame)}\\n`;\n}\n\nexport function parseGatewayRuntimeLocalExecClientFrame(\n\tline: string,\n): GatewayRuntimeLocalExecClientFrame {\n\tconst value = parseJsonObject(line);\n\tconst kind = requireString(value.kind, 'kind');\n\tswitch (kind) {\n\t\tcase 'authenticate':\n\t\t\trequireExactKeys(value, ['kind', 'token']);\n\t\t\treturn { kind, token: requireBoundedToken(value.token) };\n\t\tcase 'cancel':\n\t\tcase 'stdin-end':\n\t\t\trequireExactKeys(value, ['kind']);\n\t\t\treturn { kind };\n\t\tcase 'stdin-chunk':\n\t\t\trequireExactKeys(value, ['contentBase64', 'kind']);\n\t\t\treturn { contentBase64: requireCanonicalBase64(value.contentBase64), kind };\n\t\tcase 'terminal-resize':\n\t\t\trequireExactKeys(value, ['columns', 'kind', 'rows']);\n\t\t\treturn {\n\t\t\t\tcolumns: requireTerminalDimension(value.columns, 'columns'),\n\t\t\t\tkind,\n\t\t\t\trows: requireTerminalDimension(value.rows, 'rows'),\n\t\t\t};\n\t\tdefault:\n\t\t\tthrow new GatewayRuntimeLocalExecProtocolError(`Unknown local exec client frame '${kind}'.`);\n\t}\n}\n\nexport function parseGatewayRuntimeLocalExecServerFrame(\n\tline: string,\n): GatewayRuntimeLocalExecServerFrame {\n\tconst value = parseJsonObject(line);\n\tconst kind = requireString(value.kind, 'kind');\n\tswitch (kind) {\n\t\tcase 'accepted':\n\t\tcase 'stderr-end':\n\t\tcase 'stdout-end':\n\t\t\trequireExactKeys(value, ['kind']);\n\t\t\treturn { kind };\n\t\tcase 'stderr-chunk':\n\t\tcase 'stdout-chunk':\n\t\t\trequireExactKeys(value, ['contentBase64', 'kind']);\n\t\t\treturn { contentBase64: requireCanonicalBase64(value.contentBase64), kind };\n\t\tcase 'exited':\n\t\t\trequireExactKeys(value, ['exitCode', 'kind']);\n\t\t\tif (\n\t\t\t\tvalue.exitCode !== null &&\n\t\t\t\t(!Number.isSafeInteger(value.exitCode) ||\n\t\t\t\t\t(value.exitCode as number) < 0 ||\n\t\t\t\t\t(value.exitCode as number) > 255)\n\t\t\t) {\n\t\t\t\tthrow new GatewayRuntimeLocalExecProtocolError(\n\t\t\t\t\t\"Local exec frame field 'exitCode' must be null or an integer from 0 through 255.\",\n\t\t\t\t);\n\t\t\t}\n\t\t\treturn { exitCode: value.exitCode as number | null, kind };\n\t\tcase 'rejected':\n\t\t\trequireExactKeys(value, ['kind', 'message']);\n\t\t\treturn { kind, message: requireString(value.message, 'message') };\n\t\tdefault:\n\t\t\tthrow new GatewayRuntimeLocalExecProtocolError(`Unknown local exec server frame '${kind}'.`);\n\t}\n}\n\nexport class GatewayRuntimeLocalExecLineDecoder {\n\t#buffer = Buffer.alloc(0);\n\n\tpush(chunk: Uint8Array): readonly string[] {\n\t\tif (chunk.byteLength + this.#buffer.byteLength > MAXIMUM_LOCAL_EXEC_FRAME_BYTES) {\n\t\t\tthrow new GatewayRuntimeLocalExecProtocolError(\n\t\t\t\t'Local exec frame batch exceeds the byte limit.',\n\t\t\t);\n\t\t}\n\t\tthis.#buffer = Buffer.concat([this.#buffer, chunk]);\n\t\tconst lines: string[] = [];\n\t\tlet newlineIndex = this.#buffer.indexOf(0x0a);\n\t\twhile (newlineIndex >= 0) {\n\t\t\tconst line = this.#buffer.subarray(0, newlineIndex).toString('utf8');\n\t\t\tthis.#buffer = this.#buffer.subarray(newlineIndex + 1);\n\t\t\tif (Buffer.byteLength(line, 'utf8') > MAXIMUM_LOCAL_EXEC_FRAME_BYTES) {\n\t\t\t\tthrow new GatewayRuntimeLocalExecProtocolError('Local exec frame exceeds the byte limit.');\n\t\t\t}\n\t\t\tif (line.length > 0) lines.push(line);\n\t\t\tnewlineIndex = this.#buffer.indexOf(0x0a);\n\t\t}\n\t\tif (this.#buffer.byteLength > MAXIMUM_LOCAL_EXEC_FRAME_BYTES) {\n\t\t\tthrow new GatewayRuntimeLocalExecProtocolError('Local exec frame exceeds the byte limit.');\n\t\t}\n\t\treturn lines;\n\t}\n}\n","import { randomBytes } from 'node:crypto';\nimport { chmod, mkdtemp, rm } from 'node:fs/promises';\nimport { createServer, type Server, type Socket } from 'node:net';\nimport { join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\n\nimport {\n\tGatewayRuntimeLocalExecLineDecoder,\n\tGatewayRuntimeLocalExecProtocolError,\n\tencodeGatewayRuntimeLocalExecFrame,\n\tparseGatewayRuntimeLocalExecClientFrame,\n\ttype GatewayRuntimeLocalExecServerFrame,\n} from './gateway-runtime-local-exec-protocol.js';\n\nexport const GATEWAY_RUNTIME_LOCAL_EXEC_SOCKET_ENV = 'AGENT_VM_LOCAL_EXEC_SOCKET';\nexport const GATEWAY_RUNTIME_LOCAL_EXEC_TOKEN_ENV = 'AGENT_VM_LOCAL_EXEC_TOKEN';\n\nconst DEFAULT_RESERVATION_TIMEOUT_MS = 15_000;\nconst DEFAULT_TEMPORARY_DIRECTORY = '/tmp';\nconst MAXIMUM_STREAM_CHUNK_BYTES = 64 * 1024;\n\nexport type GatewayRuntimeLocalExecReadResult =\n\t| { readonly content: Uint8Array; readonly kind: 'chunk' }\n\t| { readonly kind: 'end' };\n\nexport interface GatewayRuntimeLocalExecOperation {\n\treadonly cancel: () => Promise<void>;\n\treadonly closeStdin: () => Promise<void>;\n\treadonly readStderr: (maximumBytes: number) => Promise<GatewayRuntimeLocalExecReadResult>;\n\treadonly readStdout: (maximumBytes: number) => Promise<GatewayRuntimeLocalExecReadResult>;\n\treadonly resizeTerminal?: (size: {\n\t\treadonly columns: number;\n\t\treadonly rows: number;\n\t}) => Promise<void>;\n\treadonly wait: () => Promise<{ readonly exitCode: number | null }>;\n\treadonly writeStdin: (content: Uint8Array) => Promise<void>;\n}\n\nexport interface GatewayRuntimeLocalExecReservationScheduler {\n\treadonly schedule: (callback: () => void, delayMs: number) => { readonly cancel: () => void };\n}\n\nexport interface GatewayRuntimeLocalExecFinalizeToken {\n\treadonly kind: 'gateway-runtime-local-exec';\n\treadonly reservationId: string;\n}\n\nexport interface GatewayRuntimeLocalExecSpec {\n\treadonly argv: readonly string[];\n\treadonly env: Readonly<Record<string, string>>;\n\treadonly finalizeToken: GatewayRuntimeLocalExecFinalizeToken;\n\treadonly stdinMode: 'pipe-open';\n}\n\nexport interface GatewayRuntimeLocalExecTransportOptions {\n\treadonly helperArgv?: readonly string[];\n\treadonly reservationScheduler?: GatewayRuntimeLocalExecReservationScheduler;\n\treadonly reservationTimeoutMs?: number;\n\treadonly temporaryDirectory?: string;\n}\n\ninterface ReservationRecord {\n\treadonly cancelExpiry: () => void;\n\treadonly operation: GatewayRuntimeLocalExecOperation;\n\treadonly reservationDirectory: string;\n\treadonly reservationId: string;\n\treadonly server: Server;\n\treadonly socketPath: string;\n\treadonly token: string;\n\tconsumed: boolean;\n\tdisposal?: Promise<void>;\n\tfinalized: boolean;\n\tsocket?: Socket;\n}\n\nconst defaultReservationScheduler: GatewayRuntimeLocalExecReservationScheduler = {\n\tschedule(callback, delayMs) {\n\t\tconst timeout = setTimeout(callback, delayMs);\n\t\treturn { cancel: () => clearTimeout(timeout) };\n\t},\n};\n\nfunction validateReservationTimeout(timeoutMs: number): number {\n\tif (!Number.isSafeInteger(timeoutMs) || timeoutMs <= 0 || timeoutMs > 60_000) {\n\t\tthrow new RangeError('Local exec reservation timeout must be an integer from 1 through 60000.');\n\t}\n\treturn timeoutMs;\n}\n\nasync function closeServer(server: Server): Promise<void> {\n\tif (!server.listening) return;\n\tawait new Promise<void>((resolve, reject) => {\n\t\tserver.close((error?: Error) => (error === undefined ? resolve() : reject(error)));\n\t});\n}\n\nasync function writeFrame(\n\tsocket: Socket,\n\tframe: GatewayRuntimeLocalExecServerFrame,\n): Promise<void> {\n\tconst encodedFrame = encodeGatewayRuntimeLocalExecFrame(frame);\n\tif (socket.write(encodedFrame)) return;\n\tawait new Promise<void>((resolve, reject) => {\n\t\tconst cleanup = (): void => {\n\t\t\tsocket.off('drain', handleDrain);\n\t\t\tsocket.off('error', handleError);\n\t\t};\n\t\tconst handleDrain = (): void => {\n\t\t\tcleanup();\n\t\t\tresolve();\n\t\t};\n\t\tconst handleError = (error: Error): void => {\n\t\t\tcleanup();\n\t\t\treject(error);\n\t\t};\n\t\tsocket.once('drain', handleDrain);\n\t\tsocket.once('error', handleError);\n\t});\n}\n\nclass GatewayRuntimeLocalExecFrameWriter {\n\t#pendingWrite = Promise.resolve();\n\treadonly #socket: Socket;\n\n\tconstructor(socket: Socket) {\n\t\tthis.#socket = socket;\n\t}\n\n\tasync write(frame: GatewayRuntimeLocalExecServerFrame): Promise<void> {\n\t\tconst write = this.#pendingWrite.then(async () => await writeFrame(this.#socket, frame));\n\t\tthis.#pendingWrite = write.catch(() => undefined);\n\t\tawait write;\n\t}\n}\n\nasync function endSocket(socket: Socket): Promise<void> {\n\tif (socket.destroyed) return;\n\tawait new Promise<void>((resolve) => socket.end(resolve));\n}\n\nasync function pumpOutput(props: {\n\treadonly frameWriter: GatewayRuntimeLocalExecFrameWriter;\n\treadonly kind: 'stderr' | 'stdout';\n\treadonly operation: GatewayRuntimeLocalExecOperation;\n\treadonly socket: Socket;\n}): Promise<void> {\n\tconst read =\n\t\tprops.kind === 'stdout'\n\t\t\t? props.operation.readStdout.bind(props.operation)\n\t\t\t: props.operation.readStderr.bind(props.operation);\n\tif (props.socket.destroyed) return;\n\tconst result = await read(MAXIMUM_STREAM_CHUNK_BYTES);\n\tif (result.kind === 'end') {\n\t\tawait props.frameWriter.write({ kind: `${props.kind}-end` });\n\t\treturn;\n\t}\n\tawait props.frameWriter.write({\n\t\tcontentBase64: Buffer.from(result.content).toString('base64'),\n\t\tkind: `${props.kind}-chunk`,\n\t});\n\tawait pumpOutput(props);\n}\n\nexport class GatewayRuntimeLocalExecTransport {\n\treadonly #helperArgv: readonly string[];\n\treadonly #reservationScheduler: GatewayRuntimeLocalExecReservationScheduler;\n\treadonly #reservationTimeoutMs: number;\n\treadonly #reservations = new Map<string, ReservationRecord>();\n\treadonly #temporaryDirectory: string;\n\n\tconstructor(options: GatewayRuntimeLocalExecTransportOptions = {}) {\n\t\tthis.#helperArgv =\n\t\t\toptions.helperArgv ??\n\t\t\tObject.freeze([\n\t\t\t\tprocess.execPath,\n\t\t\t\tfileURLToPath(\n\t\t\t\t\tnew URL(\n\t\t\t\t\t\t'./gateway-runtime-local-exec/gateway-runtime-local-exec-helper.js',\n\t\t\t\t\t\timport.meta.url,\n\t\t\t\t\t),\n\t\t\t\t),\n\t\t\t]);\n\t\tif (this.#helperArgv.length === 0)\n\t\t\tthrow new TypeError('Local exec helper argv cannot be empty.');\n\t\tthis.#reservationScheduler = options.reservationScheduler ?? defaultReservationScheduler;\n\t\tthis.#reservationTimeoutMs = validateReservationTimeout(\n\t\t\toptions.reservationTimeoutMs ?? DEFAULT_RESERVATION_TIMEOUT_MS,\n\t\t);\n\t\tthis.#temporaryDirectory = options.temporaryDirectory ?? DEFAULT_TEMPORARY_DIRECTORY;\n\t}\n\n\tasync reserve(operation: GatewayRuntimeLocalExecOperation): Promise<GatewayRuntimeLocalExecSpec> {\n\t\tconst reservationId = randomBytes(16).toString('hex');\n\t\tconst token = randomBytes(32).toString('base64url');\n\t\tconst reservationDirectory = await mkdtemp(\n\t\t\tjoin(this.#temporaryDirectory, 'agent-vm-local-exec-'),\n\t\t);\n\t\tawait chmod(reservationDirectory, 0o700);\n\t\tconst socketPath = join(reservationDirectory, 'relay.sock');\n\t\tconst server = createServer();\n\t\tconst expiry = this.#reservationScheduler.schedule(() => {\n\t\t\tvoid this.#expireReservation(reservationId).catch(() => undefined);\n\t\t}, this.#reservationTimeoutMs);\n\t\tconst reservation: ReservationRecord = {\n\t\t\tcancelExpiry: expiry.cancel,\n\t\t\tconsumed: false,\n\t\t\tfinalized: false,\n\t\t\toperation,\n\t\t\treservationDirectory,\n\t\t\treservationId,\n\t\t\tserver,\n\t\t\tsocketPath,\n\t\t\ttoken,\n\t\t};\n\t\tthis.#reservations.set(reservationId, reservation);\n\t\tserver.on('connection', (socket) => this.#acceptConnection(reservation, socket));\n\t\ttry {\n\t\t\tawait new Promise<void>((resolve, reject) => {\n\t\t\t\tserver.once('error', reject);\n\t\t\t\tserver.listen(socketPath, () => {\n\t\t\t\t\tserver.off('error', reject);\n\t\t\t\t\tresolve();\n\t\t\t\t});\n\t\t\t});\n\t\t\tawait chmod(socketPath, 0o600);\n\t\t} catch (error: unknown) {\n\t\t\tawait this.#disposeReservation(reservation, true);\n\t\t\tthrow error;\n\t\t}\n\t\treturn {\n\t\t\targv: [...this.#helperArgv],\n\t\t\tenv: {\n\t\t\t\t[GATEWAY_RUNTIME_LOCAL_EXEC_SOCKET_ENV]: socketPath,\n\t\t\t\t[GATEWAY_RUNTIME_LOCAL_EXEC_TOKEN_ENV]: token,\n\t\t\t},\n\t\t\tfinalizeToken: { kind: 'gateway-runtime-local-exec', reservationId },\n\t\t\tstdinMode: 'pipe-open',\n\t\t};\n\t}\n\n\tasync finalize(token: unknown): Promise<void> {\n\t\tconst reservationId =\n\t\t\ttypeof token === 'object' && token !== null ? Reflect.get(token, 'reservationId') : undefined;\n\t\tif (\n\t\t\ttypeof token !== 'object' ||\n\t\t\ttoken === null ||\n\t\t\tReflect.get(token, 'kind') !== 'gateway-runtime-local-exec' ||\n\t\t\ttypeof reservationId !== 'string'\n\t\t) {\n\t\t\treturn;\n\t\t}\n\t\tconst reservation = this.#reservations.get(reservationId);\n\t\tif (reservation === undefined) return;\n\t\tawait this.#disposeReservation(reservation, !reservation.consumed);\n\t}\n\n\tasync close(): Promise<void> {\n\t\tawait Promise.all(\n\t\t\t[...this.#reservations.values()].map(\n\t\t\t\tasync (reservation) => await this.#disposeReservation(reservation, true),\n\t\t\t),\n\t\t);\n\t}\n\n\tasync #expireReservation(reservationId: string): Promise<void> {\n\t\tconst reservation = this.#reservations.get(reservationId);\n\t\tif (reservation === undefined || reservation.consumed) return;\n\t\tawait this.#disposeReservation(reservation, true);\n\t}\n\n\t#acceptConnection(reservation: ReservationRecord, socket: Socket): void {\n\t\tif (reservation.finalized || reservation.consumed) {\n\t\t\tvoid writeFrame(socket, {\n\t\t\t\tkind: 'rejected',\n\t\t\t\tmessage: 'Reservation already consumed.',\n\t\t\t})\n\t\t\t\t.catch(() => undefined)\n\t\t\t\t.finally(() => socket.destroy());\n\t\t\treturn;\n\t\t}\n\t\tconst decoder = new GatewayRuntimeLocalExecLineDecoder();\n\t\tconst connectionState = { authenticated: false };\n\t\tsocket.once('close', () => {\n\t\t\tif (connectionState.authenticated && !reservation.finalized) {\n\t\t\t\tvoid this.#disposeReservation(reservation, true).catch(() => undefined);\n\t\t\t}\n\t\t});\n\t\tsocket.on('data', (chunk: Buffer) => {\n\t\t\tsocket.pause();\n\t\t\tvoid this.#processClientFrames({\n\t\t\t\tchunk,\n\t\t\t\tconnectionState,\n\t\t\t\tdecoder,\n\t\t\t\treservation,\n\t\t\t\tsocket,\n\t\t\t})\n\t\t\t\t.then(() => {\n\t\t\t\t\tif (!socket.destroyed) socket.resume();\n\t\t\t\t})\n\t\t\t\t.catch((error: unknown) => {\n\t\t\t\t\tvoid writeFrame(socket, {\n\t\t\t\t\t\tkind: 'rejected',\n\t\t\t\t\t\tmessage: error instanceof Error ? error.message : 'Invalid local exec frame.',\n\t\t\t\t\t})\n\t\t\t\t\t\t.catch(() => undefined)\n\t\t\t\t\t\t.finally(() => socket.destroy());\n\t\t\t\t});\n\t\t});\n\t}\n\n\tasync #processClientFrames(props: {\n\t\treadonly chunk: Buffer;\n\t\treadonly connectionState: { authenticated: boolean };\n\t\treadonly decoder: GatewayRuntimeLocalExecLineDecoder;\n\t\treadonly reservation: ReservationRecord;\n\t\treadonly socket: Socket;\n\t}): Promise<void> {\n\t\t// oxlint-disable no-await-in-loop -- input frames must preserve order and backpressure.\n\t\tfor (const line of props.decoder.push(props.chunk)) {\n\t\t\tconst frame = parseGatewayRuntimeLocalExecClientFrame(line);\n\t\t\tif (!props.connectionState.authenticated) {\n\t\t\t\tif (\n\t\t\t\t\tframe.kind !== 'authenticate' ||\n\t\t\t\t\tframe.token !== props.reservation.token ||\n\t\t\t\t\tprops.reservation.consumed\n\t\t\t\t) {\n\t\t\t\t\tawait writeFrame(props.socket, {\n\t\t\t\t\t\tkind: 'rejected',\n\t\t\t\t\t\tmessage:\n\t\t\t\t\t\t\tframe.kind === 'authenticate' && frame.token === props.reservation.token\n\t\t\t\t\t\t\t\t? 'Reservation already consumed.'\n\t\t\t\t\t\t\t\t: 'Invalid reservation token.',\n\t\t\t\t\t});\n\t\t\t\t\tprops.socket.destroy();\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tprops.connectionState.authenticated = true;\n\t\t\t\tprops.reservation.consumed = true;\n\t\t\t\tprops.reservation.cancelExpiry();\n\t\t\t\tprops.reservation.socket = props.socket;\n\t\t\t\tprops.reservation.server.close();\n\t\t\t\tawait writeFrame(props.socket, { kind: 'accepted' });\n\t\t\t\tvoid this.#runAuthenticatedOperation(props.reservation, props.socket).catch(\n\t\t\t\t\t() => undefined,\n\t\t\t\t);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tswitch (frame.kind) {\n\t\t\t\tcase 'authenticate':\n\t\t\t\t\tthrow new GatewayRuntimeLocalExecProtocolError('Duplicate authentication frame.');\n\t\t\t\tcase 'cancel':\n\t\t\t\t\tawait props.reservation.operation.cancel();\n\t\t\t\t\treturn;\n\t\t\t\tcase 'stdin-chunk':\n\t\t\t\t\tawait props.reservation.operation.writeStdin(Buffer.from(frame.contentBase64, 'base64'));\n\t\t\t\t\tcontinue;\n\t\t\t\tcase 'stdin-end':\n\t\t\t\t\tawait props.reservation.operation.closeStdin();\n\t\t\t\t\tcontinue;\n\t\t\t\tcase 'terminal-resize':\n\t\t\t\t\tif (props.reservation.operation.resizeTerminal === undefined) {\n\t\t\t\t\t\tthrow new GatewayRuntimeLocalExecProtocolError('Terminal resize is unavailable.');\n\t\t\t\t\t}\n\t\t\t\t\tawait props.reservation.operation.resizeTerminal({\n\t\t\t\t\t\tcolumns: frame.columns,\n\t\t\t\t\t\trows: frame.rows,\n\t\t\t\t\t});\n\t\t\t}\n\t\t}\n\t\t// oxlint-enable no-await-in-loop\n\t}\n\n\tasync #runAuthenticatedOperation(reservation: ReservationRecord, socket: Socket): Promise<void> {\n\t\ttry {\n\t\t\tconst frameWriter = new GatewayRuntimeLocalExecFrameWriter(socket);\n\t\t\tconst [waitResult] = await Promise.all([\n\t\t\t\treservation.operation.wait(),\n\t\t\t\tpumpOutput({ frameWriter, kind: 'stdout', operation: reservation.operation, socket }),\n\t\t\t\tpumpOutput({ frameWriter, kind: 'stderr', operation: reservation.operation, socket }),\n\t\t\t]);\n\t\t\tif (!socket.destroyed) {\n\t\t\t\tawait frameWriter.write({ exitCode: waitResult.exitCode, kind: 'exited' });\n\t\t\t\tawait endSocket(socket);\n\t\t\t}\n\t\t} catch {\n\t\t\tsocket.destroy();\n\t\t} finally {\n\t\t\tawait this.#disposeReservation(reservation, false);\n\t\t}\n\t}\n\n\tasync #disposeReservation(reservation: ReservationRecord, cancel: boolean): Promise<void> {\n\t\tif (reservation.disposal !== undefined) return await reservation.disposal;\n\t\treservation.disposal = this.#disposeReservationOnce(reservation, cancel);\n\t\tawait reservation.disposal;\n\t}\n\n\tasync #disposeReservationOnce(reservation: ReservationRecord, cancel: boolean): Promise<void> {\n\t\tif (reservation.finalized) return;\n\t\treservation.finalized = true;\n\t\treservation.cancelExpiry();\n\t\tlet cancellationError: unknown;\n\t\tif (cancel) {\n\t\t\ttry {\n\t\t\t\tawait reservation.operation.cancel();\n\t\t\t} catch (error: unknown) {\n\t\t\t\tcancellationError = error;\n\t\t\t}\n\t\t}\n\t\tlet cleanupError: unknown;\n\t\ttry {\n\t\t\treservation.socket?.destroy();\n\t\t\tawait closeServer(reservation.server).catch(() => undefined);\n\t\t\tawait rm(reservation.reservationDirectory, { force: true, recursive: true });\n\t\t} catch (error: unknown) {\n\t\t\tcleanupError = error;\n\t\t} finally {\n\t\t\tthis.#reservations.delete(reservation.reservationId);\n\t\t}\n\t\tif (cancellationError !== undefined && cleanupError !== undefined) {\n\t\t\tthrow new AggregateError(\n\t\t\t\t[cancellationError, cleanupError],\n\t\t\t\t'Local exec cancellation and cleanup both failed.',\n\t\t\t);\n\t\t}\n\t\tif (cancellationError !== undefined) throw cancellationError;\n\t\tif (cleanupError !== undefined) throw cleanupError;\n\t}\n}\n"],"mappings":";;;;;;AAAA,MAAM,iCAAiC,MAAM;AAC7C,MAAM,wCAAwC,KAAK;AACnD,MAAM,iCAAiC;AAkBvC,IAAa,uCAAb,cAA0D,MAAM;CAC/D,YAAY,SAAiB;EAC5B,MAAM,QAAQ;EACd,KAAK,OAAO;;;AAId,SAAS,SAAS,OAA4D;CAC7E,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG5E,SAAS,iBAAiB,OAA0C,MAA+B;CAClG,MAAM,aAAa,OAAO,KAAK,MAAM,CAAC,UAAU;CAChD,MAAM,eAAe,KAAK,UAAU;CACpC,IACC,WAAW,WAAW,aAAa,UACnC,WAAW,MAAM,KAAK,UAAU,QAAQ,aAAa,OAAO,EAE5D,MAAM,IAAI,qCAAqC,+CAA+C;;AAIhG,SAAS,cAAc,OAAgB,WAA2B;CACjE,IAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GACjD,MAAM,IAAI,qCACT,2BAA2B,UAAU,+BACrC;CAEF,OAAO;;AAGR,SAAS,oBAAoB,OAAwB;CACpD,MAAM,QAAQ,cAAc,OAAO,QAAQ;CAC3C,IAAI,OAAO,WAAW,OAAO,OAAO,GAAG,gCACtC,MAAM,IAAI,qCACT,uDACA;CAEF,OAAO;;AAGR,SAAS,uBAAuB,OAAwB;CACvD,MAAM,UAAU,cAAc,OAAO,gBAAgB;CACrD,MAAM,UAAU,OAAO,KAAK,SAAS,SAAS;CAC9C,IACC,QAAQ,aAAa,yCACrB,QAAQ,SAAS,SAAS,KAAK,SAE/B,MAAM,IAAI,qCACT,8DACA;CAEF,OAAO;;AAGR,SAAS,yBAAyB,OAAgB,WAA2B;CAC5E,IAAI,CAAC,OAAO,cAAc,MAAM,IAAK,SAAoB,KAAM,QAAmB,KACjF,MAAM,IAAI,qCACT,2BAA2B,UAAU,uCACrC;CAEF,OAAO;;AAGR,SAAS,gBAAgB,MAAiD;CACzE,IAAI,OAAO,WAAW,MAAM,OAAO,GAAG,gCACrC,MAAM,IAAI,qCAAqC,2CAA2C;CAE3F,IAAI;CACJ,IAAI;EACH,QAAQ,KAAK,MAAM,KAAK;UAChB,OAAgB;EACxB,MAAM,IAAI,qCACT,iBAAiB,QACd,uCAAuC,MAAM,YAC7C,sCACH;;CAEF,IAAI,CAAC,SAAS,MAAM,EACnB,MAAM,IAAI,qCAAqC,sCAAsC;CAEtF,OAAO;;AAGR,SAAgB,mCACf,OACS;CACT,OAAO,GAAG,KAAK,UAAU,MAAM,CAAC;;AAGjC,SAAgB,wCACf,MACqC;CACrC,MAAM,QAAQ,gBAAgB,KAAK;CACnC,MAAM,OAAO,cAAc,MAAM,MAAM,OAAO;CAC9C,QAAQ,MAAR;EACC,KAAK;GACJ,iBAAiB,OAAO,CAAC,QAAQ,QAAQ,CAAC;GAC1C,OAAO;IAAE;IAAM,OAAO,oBAAoB,MAAM,MAAM;IAAE;EACzD,KAAK;EACL,KAAK;GACJ,iBAAiB,OAAO,CAAC,OAAO,CAAC;GACjC,OAAO,EAAE,MAAM;EAChB,KAAK;GACJ,iBAAiB,OAAO,CAAC,iBAAiB,OAAO,CAAC;GAClD,OAAO;IAAE,eAAe,uBAAuB,MAAM,cAAc;IAAE;IAAM;EAC5E,KAAK;GACJ,iBAAiB,OAAO;IAAC;IAAW;IAAQ;IAAO,CAAC;GACpD,OAAO;IACN,SAAS,yBAAyB,MAAM,SAAS,UAAU;IAC3D;IACA,MAAM,yBAAyB,MAAM,MAAM,OAAO;IAClD;EACF,SACC,MAAM,IAAI,qCAAqC,oCAAoC,KAAK,IAAI;;;AAI/F,SAAgB,wCACf,MACqC;CACrC,MAAM,QAAQ,gBAAgB,KAAK;CACnC,MAAM,OAAO,cAAc,MAAM,MAAM,OAAO;CAC9C,QAAQ,MAAR;EACC,KAAK;EACL,KAAK;EACL,KAAK;GACJ,iBAAiB,OAAO,CAAC,OAAO,CAAC;GACjC,OAAO,EAAE,MAAM;EAChB,KAAK;EACL,KAAK;GACJ,iBAAiB,OAAO,CAAC,iBAAiB,OAAO,CAAC;GAClD,OAAO;IAAE,eAAe,uBAAuB,MAAM,cAAc;IAAE;IAAM;EAC5E,KAAK;GACJ,iBAAiB,OAAO,CAAC,YAAY,OAAO,CAAC;GAC7C,IACC,MAAM,aAAa,SAClB,CAAC,OAAO,cAAc,MAAM,SAAS,IACpC,MAAM,WAAsB,KAC5B,MAAM,WAAsB,MAE9B,MAAM,IAAI,qCACT,mFACA;GAEF,OAAO;IAAE,UAAU,MAAM;IAA2B;IAAM;EAC3D,KAAK;GACJ,iBAAiB,OAAO,CAAC,QAAQ,UAAU,CAAC;GAC5C,OAAO;IAAE;IAAM,SAAS,cAAc,MAAM,SAAS,UAAU;IAAE;EAClE,SACC,MAAM,IAAI,qCAAqC,oCAAoC,KAAK,IAAI;;;AAI/F,IAAa,qCAAb,MAAgD;CAC/C,UAAU,OAAO,MAAM,EAAE;CAEzB,KAAK,OAAsC;EAC1C,IAAI,MAAM,aAAa,KAAKA,QAAQ,aAAa,gCAChD,MAAM,IAAI,qCACT,iDACA;EAEF,KAAKA,UAAU,OAAO,OAAO,CAAC,KAAKA,SAAS,MAAM,CAAC;EACnD,MAAM,QAAkB,EAAE;EAC1B,IAAI,eAAe,KAAKA,QAAQ,QAAQ,GAAK;EAC7C,OAAO,gBAAgB,GAAG;GACzB,MAAM,OAAO,KAAKA,QAAQ,SAAS,GAAG,aAAa,CAAC,SAAS,OAAO;GACpE,KAAKA,UAAU,KAAKA,QAAQ,SAAS,eAAe,EAAE;GACtD,IAAI,OAAO,WAAW,MAAM,OAAO,GAAG,gCACrC,MAAM,IAAI,qCAAqC,2CAA2C;GAE3F,IAAI,KAAK,SAAS,GAAG,MAAM,KAAK,KAAK;GACrC,eAAe,KAAKA,QAAQ,QAAQ,GAAK;;EAE1C,IAAI,KAAKA,QAAQ,aAAa,gCAC7B,MAAM,IAAI,qCAAqC,2CAA2C;EAE3F,OAAO;;;;;ACxLT,MAAa,wCAAwC;AACrD,MAAa,uCAAuC;AAEpD,MAAM,iCAAiC;AACvC,MAAM,8BAA8B;AACpC,MAAM,6BAA6B,KAAK;AAwDxC,MAAM,8BAA2E,EAChF,SAAS,UAAU,SAAS;CAC3B,MAAM,UAAU,WAAW,UAAU,QAAQ;CAC7C,OAAO,EAAE,cAAc,aAAa,QAAQ,EAAE;GAE/C;AAED,SAAS,2BAA2B,WAA2B;CAC9D,IAAI,CAAC,OAAO,cAAc,UAAU,IAAI,aAAa,KAAK,YAAY,KACrE,MAAM,IAAI,WAAW,0EAA0E;CAEhG,OAAO;;AAGR,eAAe,YAAY,QAA+B;CACzD,IAAI,CAAC,OAAO,WAAW;CACvB,MAAM,IAAI,SAAe,SAAS,WAAW;EAC5C,OAAO,OAAO,UAAmB,UAAU,KAAA,IAAY,SAAS,GAAG,OAAO,MAAM,CAAE;GACjF;;AAGH,eAAe,WACd,QACA,OACgB;CAChB,MAAM,eAAe,mCAAmC,MAAM;CAC9D,IAAI,OAAO,MAAM,aAAa,EAAE;CAChC,MAAM,IAAI,SAAe,SAAS,WAAW;EAC5C,MAAM,gBAAsB;GAC3B,OAAO,IAAI,SAAS,YAAY;GAChC,OAAO,IAAI,SAAS,YAAY;;EAEjC,MAAM,oBAA0B;GAC/B,SAAS;GACT,SAAS;;EAEV,MAAM,eAAe,UAAuB;GAC3C,SAAS;GACT,OAAO,MAAM;;EAEd,OAAO,KAAK,SAAS,YAAY;EACjC,OAAO,KAAK,SAAS,YAAY;GAChC;;AAGH,IAAM,qCAAN,MAAyC;CACxC,gBAAgB,QAAQ,SAAS;CACjC;CAEA,YAAY,QAAgB;EAC3B,KAAKC,UAAU;;CAGhB,MAAM,MAAM,OAA0D;EACrE,MAAM,QAAQ,KAAKC,cAAc,KAAK,YAAY,MAAM,WAAW,KAAKD,SAAS,MAAM,CAAC;EACxF,KAAKC,gBAAgB,MAAM,YAAY,KAAA,EAAU;EACjD,MAAM;;;AAIR,eAAe,UAAU,QAA+B;CACvD,IAAI,OAAO,WAAW;CACtB,MAAM,IAAI,SAAe,YAAY,OAAO,IAAI,QAAQ,CAAC;;AAG1D,eAAe,WAAW,OAKR;CACjB,MAAM,OACL,MAAM,SAAS,WACZ,MAAM,UAAU,WAAW,KAAK,MAAM,UAAU,GAChD,MAAM,UAAU,WAAW,KAAK,MAAM,UAAU;CACpD,IAAI,MAAM,OAAO,WAAW;CAC5B,MAAM,SAAS,MAAM,KAAK,2BAA2B;CACrD,IAAI,OAAO,SAAS,OAAO;EAC1B,MAAM,MAAM,YAAY,MAAM,EAAE,MAAM,GAAG,MAAM,KAAK,OAAO,CAAC;EAC5D;;CAED,MAAM,MAAM,YAAY,MAAM;EAC7B,eAAe,OAAO,KAAK,OAAO,QAAQ,CAAC,SAAS,SAAS;EAC7D,MAAM,GAAG,MAAM,KAAK;EACpB,CAAC;CACF,MAAM,WAAW,MAAM;;AAGxB,IAAa,mCAAb,MAA8C;CAC7C;CACA;CACA;CACA,gCAAyB,IAAI,KAAgC;CAC7D;CAEA,YAAY,UAAmD,EAAE,EAAE;EAClE,KAAKC,cACJ,QAAQ,cACR,OAAO,OAAO,CACb,QAAQ,UACR,cACC,IAAI,IACH,qEACA,OAAO,KAAK,IACZ,CACD,CACD,CAAC;EACH,IAAI,KAAKA,YAAY,WAAW,GAC/B,MAAM,IAAI,UAAU,0CAA0C;EAC/D,KAAKC,wBAAwB,QAAQ,wBAAwB;EAC7D,KAAKC,wBAAwB,2BAC5B,QAAQ,wBAAwB,+BAChC;EACD,KAAKE,sBAAsB,QAAQ,sBAAsB;;CAG1D,MAAM,QAAQ,WAAmF;EAChG,MAAM,gBAAgB,YAAY,GAAG,CAAC,SAAS,MAAM;EACrD,MAAM,QAAQ,YAAY,GAAG,CAAC,SAAS,YAAY;EACnD,MAAM,uBAAuB,MAAM,QAClC,KAAK,KAAKA,qBAAqB,uBAAuB,CACtD;EACD,MAAM,MAAM,sBAAsB,IAAM;EACxC,MAAM,aAAa,KAAK,sBAAsB,aAAa;EAC3D,MAAM,SAAS,cAAc;EAI7B,MAAM,cAAiC;GACtC,cAJc,KAAKH,sBAAsB,eAAe;IACxD,KAAUI,mBAAmB,cAAc,CAAC,YAAY,KAAA,EAAU;MAChE,KAAKH,sBAEa,CAAC;GACrB,UAAU;GACV,WAAW;GACX;GACA;GACA;GACA;GACA;GACA;GACA;EACD,KAAKC,cAAc,IAAI,eAAe,YAAY;EAClD,OAAO,GAAG,eAAe,WAAW,KAAKG,kBAAkB,aAAa,OAAO,CAAC;EAChF,IAAI;GACH,MAAM,IAAI,SAAe,SAAS,WAAW;IAC5C,OAAO,KAAK,SAAS,OAAO;IAC5B,OAAO,OAAO,kBAAkB;KAC/B,OAAO,IAAI,SAAS,OAAO;KAC3B,SAAS;MACR;KACD;GACF,MAAM,MAAM,YAAY,IAAM;WACtB,OAAgB;GACxB,MAAM,KAAKC,oBAAoB,aAAa,KAAK;GACjD,MAAM;;EAEP,OAAO;GACN,MAAM,CAAC,GAAG,KAAKP,YAAY;GAC3B,KAAK;KACH,wCAAwC;KACxC,uCAAuC;IACxC;GACD,eAAe;IAAE,MAAM;IAA8B;IAAe;GACpE,WAAW;GACX;;CAGF,MAAM,SAAS,OAA+B;EAC7C,MAAM,gBACL,OAAO,UAAU,YAAY,UAAU,OAAO,QAAQ,IAAI,OAAO,gBAAgB,GAAG,KAAA;EACrF,IACC,OAAO,UAAU,YACjB,UAAU,QACV,QAAQ,IAAI,OAAO,OAAO,KAAK,gCAC/B,OAAO,kBAAkB,UAEzB;EAED,MAAM,cAAc,KAAKG,cAAc,IAAI,cAAc;EACzD,IAAI,gBAAgB,KAAA,GAAW;EAC/B,MAAM,KAAKI,oBAAoB,aAAa,CAAC,YAAY,SAAS;;CAGnE,MAAM,QAAuB;EAC5B,MAAM,QAAQ,IACb,CAAC,GAAG,KAAKJ,cAAc,QAAQ,CAAC,CAAC,IAChC,OAAO,gBAAgB,MAAM,KAAKI,oBAAoB,aAAa,KAAK,CACxE,CACD;;CAGF,MAAMF,mBAAmB,eAAsC;EAC9D,MAAM,cAAc,KAAKF,cAAc,IAAI,cAAc;EACzD,IAAI,gBAAgB,KAAA,KAAa,YAAY,UAAU;EACvD,MAAM,KAAKI,oBAAoB,aAAa,KAAK;;CAGlD,kBAAkB,aAAgC,QAAsB;EACvE,IAAI,YAAY,aAAa,YAAY,UAAU;GAClD,WAAgB,QAAQ;IACvB,MAAM;IACN,SAAS;IACT,CAAC,CACA,YAAY,KAAA,EAAU,CACtB,cAAc,OAAO,SAAS,CAAC;GACjC;;EAED,MAAM,UAAU,IAAI,oCAAoC;EACxD,MAAM,kBAAkB,EAAE,eAAe,OAAO;EAChD,OAAO,KAAK,eAAe;GAC1B,IAAI,gBAAgB,iBAAiB,CAAC,YAAY,WACjD,KAAUA,oBAAoB,aAAa,KAAK,CAAC,YAAY,KAAA,EAAU;IAEvE;EACF,OAAO,GAAG,SAAS,UAAkB;GACpC,OAAO,OAAO;GACd,KAAUC,qBAAqB;IAC9B;IACA;IACA;IACA;IACA;IACA,CAAC,CACA,WAAW;IACX,IAAI,CAAC,OAAO,WAAW,OAAO,QAAQ;KACrC,CACD,OAAO,UAAmB;IAC1B,WAAgB,QAAQ;KACvB,MAAM;KACN,SAAS,iBAAiB,QAAQ,MAAM,UAAU;KAClD,CAAC,CACA,YAAY,KAAA,EAAU,CACtB,cAAc,OAAO,SAAS,CAAC;KAChC;IACF;;CAGH,MAAMA,qBAAqB,OAMT;EAEjB,KAAK,MAAM,QAAQ,MAAM,QAAQ,KAAK,MAAM,MAAM,EAAE;GACnD,MAAM,QAAQ,wCAAwC,KAAK;GAC3D,IAAI,CAAC,MAAM,gBAAgB,eAAe;IACzC,IACC,MAAM,SAAS,kBACf,MAAM,UAAU,MAAM,YAAY,SAClC,MAAM,YAAY,UACjB;KACD,MAAM,WAAW,MAAM,QAAQ;MAC9B,MAAM;MACN,SACC,MAAM,SAAS,kBAAkB,MAAM,UAAU,MAAM,YAAY,QAChE,kCACA;MACJ,CAAC;KACF,MAAM,OAAO,SAAS;KACtB;;IAED,MAAM,gBAAgB,gBAAgB;IACtC,MAAM,YAAY,WAAW;IAC7B,MAAM,YAAY,cAAc;IAChC,MAAM,YAAY,SAAS,MAAM;IACjC,MAAM,YAAY,OAAO,OAAO;IAChC,MAAM,WAAW,MAAM,QAAQ,EAAE,MAAM,YAAY,CAAC;IACpD,KAAUC,2BAA2B,MAAM,aAAa,MAAM,OAAO,CAAC,YAC/D,KAAA,EACN;IACD;;GAED,QAAQ,MAAM,MAAd;IACC,KAAK,gBACJ,MAAM,IAAI,qCAAqC,kCAAkC;IAClF,KAAK;KACJ,MAAM,MAAM,YAAY,UAAU,QAAQ;KAC1C;IACD,KAAK;KACJ,MAAM,MAAM,YAAY,UAAU,WAAW,OAAO,KAAK,MAAM,eAAe,SAAS,CAAC;KACxF;IACD,KAAK;KACJ,MAAM,MAAM,YAAY,UAAU,YAAY;KAC9C;IACD,KAAK;KACJ,IAAI,MAAM,YAAY,UAAU,mBAAmB,KAAA,GAClD,MAAM,IAAI,qCAAqC,kCAAkC;KAElF,MAAM,MAAM,YAAY,UAAU,eAAe;MAChD,SAAS,MAAM;MACf,MAAM,MAAM;MACZ,CAAC;;;;CAMN,MAAMA,2BAA2B,aAAgC,QAA+B;EAC/F,IAAI;GACH,MAAM,cAAc,IAAI,mCAAmC,OAAO;GAClE,MAAM,CAAC,cAAc,MAAM,QAAQ,IAAI;IACtC,YAAY,UAAU,MAAM;IAC5B,WAAW;KAAE;KAAa,MAAM;KAAU,WAAW,YAAY;KAAW;KAAQ,CAAC;IACrF,WAAW;KAAE;KAAa,MAAM;KAAU,WAAW,YAAY;KAAW;KAAQ,CAAC;IACrF,CAAC;GACF,IAAI,CAAC,OAAO,WAAW;IACtB,MAAM,YAAY,MAAM;KAAE,UAAU,WAAW;KAAU,MAAM;KAAU,CAAC;IAC1E,MAAM,UAAU,OAAO;;UAEjB;GACP,OAAO,SAAS;YACP;GACT,MAAM,KAAKF,oBAAoB,aAAa,MAAM;;;CAIpD,MAAMA,oBAAoB,aAAgC,QAAgC;EACzF,IAAI,YAAY,aAAa,KAAA,GAAW,OAAO,MAAM,YAAY;EACjE,YAAY,WAAW,KAAKG,wBAAwB,aAAa,OAAO;EACxE,MAAM,YAAY;;CAGnB,MAAMA,wBAAwB,aAAgC,QAAgC;EAC7F,IAAI,YAAY,WAAW;EAC3B,YAAY,YAAY;EACxB,YAAY,cAAc;EAC1B,IAAI;EACJ,IAAI,QACH,IAAI;GACH,MAAM,YAAY,UAAU,QAAQ;WAC5B,OAAgB;GACxB,oBAAoB;;EAGtB,IAAI;EACJ,IAAI;GACH,YAAY,QAAQ,SAAS;GAC7B,MAAM,YAAY,YAAY,OAAO,CAAC,YAAY,KAAA,EAAU;GAC5D,MAAM,GAAG,YAAY,sBAAsB;IAAE,OAAO;IAAM,WAAW;IAAM,CAAC;WACpE,OAAgB;GACxB,eAAe;YACN;GACT,KAAKP,cAAc,OAAO,YAAY,cAAc;;EAErD,IAAI,sBAAsB,KAAA,KAAa,iBAAiB,KAAA,GACvD,MAAM,IAAI,eACT,CAAC,mBAAmB,aAAa,EACjC,mDACA;EAEF,IAAI,sBAAsB,KAAA,GAAW,MAAM;EAC3C,IAAI,iBAAiB,KAAA,GAAW,MAAM"}

package/dist/index-B5hgm1KH.d.ts

@@ -1,84 +0,0 @@
-import { l as JsonValue } from "./json-value-schema-M87sjwWL.js";
-import { z } from "zod";
-
-//#region src/artifact-surface/models/portal-artifact-contract-schema.d.ts
-declare const PortalArtifactRecordSchema: z.ZodObject<{
-  metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<JsonValue, unknown, z.core.$ZodTypeInternals<JsonValue, unknown>>>>;
-  reference: z.ZodObject<{
-    byteLength: z.ZodNumber;
-    expiresAt: z.ZodString;
-    fingerprint: z.ZodString;
-    id: z.ZodString;
-    mediaType: z.ZodOptional<z.ZodString>;
-  }, z.core.$strict>;
-  redactionProfile: z.ZodString;
-}, z.core.$strict>;
-type PortalArtifactRecord = z.infer<typeof PortalArtifactRecordSchema>;
-declare const PortalArtifactReadRequestSchema: z.ZodObject<{
-  maxBytes: z.ZodNumber;
-  offsetBytes: z.ZodDefault<z.ZodNumber>;
-  reference: z.ZodObject<{
-    byteLength: z.ZodNumber;
-    expiresAt: z.ZodString;
-    fingerprint: z.ZodString;
-    id: z.ZodString;
-    mediaType: z.ZodOptional<z.ZodString>;
-  }, z.core.$strict>;
-}, z.core.$strict>;
-type PortalArtifactReadRequest = z.infer<typeof PortalArtifactReadRequestSchema>;
-declare const PortalArtifactReadResultSchema: z.ZodObject<{
-  contentBase64: z.ZodString;
-  mediaType: z.ZodOptional<z.ZodString>;
-  offsetBytes: z.ZodNumber;
-  reference: z.ZodObject<{
-    byteLength: z.ZodNumber;
-    expiresAt: z.ZodString;
-    fingerprint: z.ZodString;
-    id: z.ZodString;
-    mediaType: z.ZodOptional<z.ZodString>;
-  }, z.core.$strict>;
-  truncated: z.ZodDefault<z.ZodBoolean>;
-}, z.core.$strict>;
-type PortalArtifactReadResult = z.infer<typeof PortalArtifactReadResultSchema>;
-declare const PortalArtifactRedactorSchema: z.ZodObject<{
-  maxModelVisibleBytes: z.ZodNumber;
-  profile: z.ZodString;
-}, z.core.$strict>;
-type PortalArtifactRedactor = z.infer<typeof PortalArtifactRedactorSchema>;
-//#endregion
-//#region src/artifact-surface/artifact-read-resource-uri.d.ts
-declare const PORTAL_ARTIFACT_READ_REQUEST_META_KEY = "agent-vm/artifact-read-request";
-declare const PortalArtifactReadResourceRequestSchema: z.ZodObject<{
-  _meta: z.ZodObject<{
-    "agent-vm/artifact-read-request": z.ZodObject<{
-      maxBytes: z.ZodNumber;
-      offsetBytes: z.ZodDefault<z.ZodNumber>;
-      reference: z.ZodObject<{
-        byteLength: z.ZodNumber;
-        expiresAt: z.ZodString;
-        fingerprint: z.ZodString;
-        id: z.ZodString;
-        mediaType: z.ZodOptional<z.ZodString>;
-      }, z.core.$strict>;
-    }, z.core.$strict>;
-  }, z.core.$strict>;
-  uri: z.ZodString;
-}, z.core.$strict>;
-type PortalArtifactReadResourceRequest = z.infer<typeof PortalArtifactReadResourceRequestSchema>;
-/** Build one standard MCP read request whose URI exposes only the opaque artifact ID. */
-declare function createPortalArtifactReadResourceRequest(request: PortalArtifactReadRequest): PortalArtifactReadResourceRequest;
-/** Recover and validate the complete public read request from standard MCP params. */
-declare function parsePortalArtifactReadResourceRequest(resourceRequest: unknown): PortalArtifactReadRequest;
-//#endregion
-//#region src/artifact-surface/models/artifact-reference-schema.d.ts
-declare const ArtifactReferenceSchema: z.ZodObject<{
-  byteLength: z.ZodNumber;
-  expiresAt: z.ZodString;
-  fingerprint: z.ZodString;
-  id: z.ZodString;
-  mediaType: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-type ArtifactReference = z.infer<typeof ArtifactReferenceSchema>;
-//#endregion
-export { PortalArtifactReadResourceRequestSchema as a, PortalArtifactReadRequest as c, PortalArtifactReadResultSchema as d, PortalArtifactRecord as f, PortalArtifactRedactorSchema as h, PortalArtifactReadResourceRequest as i, PortalArtifactReadRequestSchema as l, PortalArtifactRedactor as m, ArtifactReferenceSchema as n, createPortalArtifactReadResourceRequest as o, PortalArtifactRecordSchema as p, PORTAL_ARTIFACT_READ_REQUEST_META_KEY as r, parsePortalArtifactReadResourceRequest as s, ArtifactReference as t, PortalArtifactReadResult as u };
-//# sourceMappingURL=index-B5hgm1KH.d.ts.map

package/dist/index-B5hgm1KH.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-B5hgm1KH.d.ts","names":[],"sources":["../src/artifact-surface/models/portal-artifact-contract-schema.ts","../src/artifact-surface/artifact-read-resource-uri.ts","../src/artifact-surface/models/artifact-reference-schema.ts"],"mappings":";;;;cAKa,0BAAA,EAA0B,CAAA,CAAA,SAAA;;;;;;;;;;;KAQ3B,oBAAA,GAAuB,CAAA,CAAE,KAAA,QAAa,0BAAA;AAAA,cAErC,+BAAA,EAA+B,CAAA,CAAA,SAAA;;;;;;;;;;;KAYhC,yBAAA,GAA4B,CAAA,CAAE,KAAA,QAAa,+BAAA;AAAA,cAE1C,8BAAA,EAA8B,CAAA,CAAA,SAAA;;;;;;;;;;;;;KAU/B,wBAAA,GAA2B,CAAA,CAAE,KAAA,QAAa,8BAAA;AAAA,cAEzC,4BAAA,EAA4B,CAAA,CAAA,SAAA;;;;KAO7B,sBAAA,GAAyB,CAAA,CAAE,KAAA,QAAa,4BAAA;;;cCzCvC,qCAAA;AAAA,cAKA,uCAAA,EAAuC,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;KAWxC,iCAAA,GAAoC,CAAA,CAAE,KAAA,QAC1C,uCAAA;;iBA+BQ,uCAAA,CACf,OAAA,EAAS,yBAAA,GACP,iCAAA;;iBASa,sCAAA,CACf,eAAA,YACE,yBAAA;;;cClEU,uBAAA,EAAuB,CAAA,CAAA,SAAA;;;;;;;KAUxB,iBAAA,GAAoB,CAAA,CAAE,KAAA,QAAa,uBAAA"}

package/dist/index-BWE2_BcN.d.ts

@@ -1,64 +0,0 @@
-import { z } from "zod";
-
-//#region src/approval-surface/models/approval-decision-reference-schema.d.ts
-declare const ApprovalDecisionReferenceSchema: z.ZodObject<{
-  approvalId: z.ZodString;
-  callId: z.ZodString;
-  expiresAt: z.ZodString;
-  status: z.ZodEnum<{
-    approved: "approved";
-    denied: "denied";
-    expired: "expired";
-  }>;
-}, z.core.$strict>;
-type ApprovalDecisionReference = z.infer<typeof ApprovalDecisionReferenceSchema>;
-declare const ApprovalRequiredResultSchema: z.ZodObject<{
-  approvalChallenge: z.ZodObject<{
-    challengeId: z.ZodString;
-    expiresAt: z.ZodString;
-  }, z.core.$strict>;
-  error: z.ZodObject<{
-    message: z.ZodString;
-    retryable: z.ZodOptional<z.ZodBoolean>;
-    safeDiagnostic: z.ZodOptional<z.ZodObject<{
-      code: z.ZodEnum<{
-        approval_required: "approval_required";
-        capability_denied: "capability_denied";
-        validation_failed: "validation_failed";
-        provider_unavailable: "provider_unavailable";
-        execution_failed: "execution_failed";
-        cancelled: "cancelled";
-        timeout: "timeout";
-        output_truncated: "output_truncated";
-        artifact_unavailable: "artifact_unavailable";
-      }>;
-      level: z.ZodEnum<{
-        error: "error";
-        debug: "debug";
-        info: "info";
-        warn: "warn";
-      }>;
-      safeMessage: z.ZodString;
-      safeParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
-    }, z.core.$strict>>;
-    code: z.ZodLiteral<"approval_required">;
-  }, z.core.$strict>;
-  id: z.ZodString;
-  operationId: z.ZodString;
-  outcome: z.ZodObject<{
-    certainty: z.ZodLiteral<"proven">;
-    kind: z.ZodLiteral<"not-dispatched">;
-    retryClass: z.ZodLiteral<"safe-before-dispatch">;
-  }, z.core.$strict>;
-  owningGeneration: z.ZodString;
-  status: z.ZodLiteral<"approval_required">;
-}, z.core.$strict>;
-declare const ApprovalChallengeReferenceSchema: z.ZodObject<{
-  challengeId: z.ZodString;
-  expiresAt: z.ZodString;
-}, z.core.$strict>;
-type ApprovalRequiredResult = z.infer<typeof ApprovalRequiredResultSchema>;
-type ApprovalChallengeReference = z.infer<typeof ApprovalChallengeReferenceSchema>;
-//#endregion
-export { ApprovalRequiredResult as a, ApprovalDecisionReferenceSchema as i, ApprovalChallengeReferenceSchema as n, ApprovalRequiredResultSchema as o, ApprovalDecisionReference as r, ApprovalChallengeReference as t };
-//# sourceMappingURL=index-BWE2_BcN.d.ts.map

package/dist/index-BWE2_BcN.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index-BWE2_BcN.d.ts","names":[],"sources":["../src/approval-surface/models/approval-decision-reference-schema.ts"],"mappings":";;;cAQa,+BAAA,EAA+B,CAAA,CAAA,SAAA;;;;;;;;;;KAShC,yBAAA,GAA4B,CAAA,CAAE,KAAA,QAAa,+BAAA;AAAA,cAE1C,4BAAA,EAA4B,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAE5B,gCAAA,EAAgC,CAAA,CAAA,SAAA;;;;KAEjC,sBAAA,GAAyB,CAAA,CAAE,KAAA,QAAa,4BAAA;AAAA,KACxC,0BAAA,GAA6B,CAAA,CAAE,KAAA,QAAa,gCAAA"}