@agimon-ai/doompi-core 0.0.1-alpha.100

package/dist/src/services/toolSurface/index.cjs

@@ -0,0 +1,134 @@
+const require_index = require("../kernel/index.cjs");
+//#region src/services/toolSurface/index.ts
+/**
+* The tool surface arbiter.
+*
+* DESIGN PATTERNS:
+* - One writer. Every owner registers a restriction; only this service calls
+*   the host setter. Two owners can no longer overwrite each other's list.
+* - Removal is inherent. The surface is recomputed from the full registered
+*   tool set on every change, so dropping a restriction restores the tools it
+*   hid without any owner keeping a snapshot.
+* - Restrictions are pure and ordered by registration. The result is a
+*   function of (registered tools, active layers, registered restrictions).
+* - Application is synchronous. A tool change has to be visible to the very
+*   next line, because callers gate user-facing messages on it. The kernel's
+*   coalesced flush still drives layer switches; it just lands on the same
+*   idempotent apply.
+*
+* AVOID:
+* - Letting one broken restriction take the surface down. A throwing
+*   restriction is skipped and reported; the rest still reach the host.
+* - Returning tool names the host does not know. Unknown names are dropped so
+*   a stale restriction cannot resurrect a tool that was never registered.
+*/
+const SLOT = "tools";
+function sameList(left, right) {
+	if (left.length !== right.length) return false;
+	return left.every((name, index) => name === right[index]);
+}
+function createDoomToolSurface(options) {
+	const kernel = require_index.createDoomKernel({ activeLayers: options.activeLayers });
+	let pushed;
+	let disposed = false;
+	let inspection = [];
+	let fingerprint = "";
+	const listeners = /* @__PURE__ */ new Set();
+	const apply = (holders) => {
+		const available = [...new Set(options.allTools())];
+		const known = new Set(available);
+		let current = available;
+		for (const holder of holders) try {
+			const result = holder.restrict(current, available);
+			current = [...new Set(result)].filter((name) => known.has(name));
+		} catch (error) {
+			current = current.filter((name) => !holder.controlledTools?.includes(name));
+			options.onError?.(holder.source, error);
+		}
+		if (!sameList(options.activeTools(), current)) options.setActiveTools([...current]);
+		pushed = [...current];
+		inspection = holders.flatMap((holder) => (holder.controlledTools ?? []).filter((name) => known.has(name)).map((name) => ({
+			source: holder.source,
+			name,
+			active: current.includes(name),
+			...holder.attribution ? { attribution: { ...holder.attribution } } : {}
+		})));
+		const next = JSON.stringify([pushed, inspection]);
+		if (next !== fingerprint) {
+			fingerprint = next;
+			for (const listener of listeners) listener();
+		}
+	};
+	const slot = kernel.defineSlot(SLOT, apply);
+	const applyNow = () => {
+		if (!disposed) apply(kernel.activeValues(SLOT));
+	};
+	return Object.freeze({
+		generation: options.generation,
+		register(definition) {
+			if (disposed) throw new Error("The tool surface is disposed.");
+			if (definition.source.trim().length === 0) throw new Error("A tool restriction needs a source.");
+			const holder = {
+				source: definition.source,
+				restrict: definition.restrict,
+				controlledTools: definition.controlledTools ? [...new Set(definition.controlledTools)] : void 0,
+				attribution: definition.attribution ? { ...definition.attribution } : void 0
+			};
+			const registration = slot.contribute({
+				source: definition.source,
+				layer: definition.layer,
+				value: holder
+			});
+			applyNow();
+			let removed = false;
+			return Object.freeze({
+				update(restrict) {
+					if (removed) return;
+					holder.restrict = restrict;
+					applyNow();
+				},
+				dispose() {
+					if (removed) return;
+					removed = true;
+					registration.dispose();
+					applyNow();
+				}
+			});
+		},
+		refresh() {
+			applyNow();
+		},
+		setActiveLayers(layers) {
+			if (disposed) return;
+			kernel.setActiveLayers(layers).catch(() => void 0);
+			applyNow();
+		},
+		active() {
+			return disposed ? [] : [...pushed ?? options.activeTools()];
+		},
+		inspect() {
+			return disposed ? [] : inspection.map((entry) => ({
+				...entry,
+				...entry.attribution ? { attribution: { ...entry.attribution } } : {}
+			}));
+		},
+		subscribe(listener) {
+			if (disposed) throw new Error("The tool surface is disposed.");
+			listeners.add(listener);
+			return () => {
+				listeners.delete(listener);
+			};
+		},
+		dispose() {
+			if (disposed) return;
+			disposed = true;
+			listeners.clear();
+			inspection = [];
+			kernel.dispose();
+		}
+	});
+}
+//#endregion
+exports.createDoomToolSurface = createDoomToolSurface;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/toolSurface/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["createDoomKernel"],"sources":["../../../../src/services/toolSurface/index.ts"],"sourcesContent":["/**\n * The tool surface arbiter.\n *\n * DESIGN PATTERNS:\n * - One writer. Every owner registers a restriction; only this service calls\n *   the host setter. Two owners can no longer overwrite each other's list.\n * - Removal is inherent. The surface is recomputed from the full registered\n *   tool set on every change, so dropping a restriction restores the tools it\n *   hid without any owner keeping a snapshot.\n * - Restrictions are pure and ordered by registration. The result is a\n *   function of (registered tools, active layers, registered restrictions).\n * - Application is synchronous. A tool change has to be visible to the very\n *   next line, because callers gate user-facing messages on it. The kernel's\n *   coalesced flush still drives layer switches; it just lands on the same\n *   idempotent apply.\n *\n * AVOID:\n * - Letting one broken restriction take the surface down. A throwing\n *   restriction is skipped and reported; the rest still reach the host.\n * - Returning tool names the host does not know. Unknown names are dropped so\n *   a stale restriction cannot resurrect a tool that was never registered.\n */\n\nimport { createDoomKernel } from '../../exports/kernel';\nimport type {\n  DoomToolRestriction,\n  DoomToolRestrictionDefinition,\n  DoomToolRestrictionHandle,\n  DoomToolSurfaceService,\n  DoomToolSurfaceEntry,\n} from '../../schemas/toolSurface';\n\nconst SLOT = 'tools';\n\ninterface RestrictionHolder extends Pick<DoomToolRestrictionDefinition, 'source' | 'controlledTools' | 'attribution'> {\n  restrict: DoomToolRestriction;\n}\n\nexport interface CreateDoomToolSurfaceOptions {\n  /** Runtime generation, mirrored onto the service for diagnostics. */\n  readonly generation: string;\n  /** Every tool registered with the host, in host order. */\n  readonly allTools: () => readonly string[];\n  /** The tools the host currently exposes, in host order. */\n  readonly activeTools: () => readonly string[];\n  /** The host's whole-list setter. Called only when actual activation differs. */\n  readonly setActiveTools: (names: string[]) => void;\n  /** Layers active at creation. */\n  readonly activeLayers?: readonly string[];\n  /** Receives a restriction that threw. Defaults to silence. */\n  readonly onError?: (source: string, error: unknown) => void;\n}\n\nfunction sameList(left: readonly string[], right: readonly string[]): boolean {\n  if (left.length !== right.length) return false;\n  return left.every((name, index) => name === right[index]);\n}\n\nexport function createDoomToolSurface(options: CreateDoomToolSurfaceOptions): DoomToolSurfaceService {\n  const kernel = createDoomKernel({ activeLayers: options.activeLayers });\n  let pushed: readonly string[] | undefined;\n  let disposed = false;\n  let inspection: readonly DoomToolSurfaceEntry[] = [];\n  let fingerprint = '';\n  const listeners = new Set<() => void>();\n\n  const apply = (holders: readonly RestrictionHolder[]): void => {\n    const available = [...new Set(options.allTools())];\n    const known = new Set(available);\n    let current: readonly string[] = available;\n    for (const holder of holders) {\n      try {\n        const result = holder.restrict(current, available);\n        current = [...new Set(result)].filter((name) => known.has(name));\n      } catch (error) {\n        current = current.filter((name) => !holder.controlledTools?.includes(name));\n        options.onError?.(holder.source, error);\n      }\n    }\n    const actual = options.activeTools();\n    if (!sameList(actual, current)) options.setActiveTools([...current]);\n    pushed = [...current];\n    inspection = holders.flatMap((holder) =>\n      (holder.controlledTools ?? [])\n        .filter((name) => known.has(name))\n        .map((name) => ({\n          source: holder.source,\n          name,\n          active: current.includes(name),\n          ...(holder.attribution ? { attribution: { ...holder.attribution } } : {}),\n        })),\n    );\n    const next = JSON.stringify([pushed, inspection]);\n    if (next !== fingerprint) {\n      fingerprint = next;\n      for (const listener of listeners) listener();\n    }\n  };\n\n  const slot = kernel.defineSlot<RestrictionHolder>(SLOT, apply);\n  const applyNow = (): void => {\n    if (!disposed) apply(kernel.activeValues<RestrictionHolder>(SLOT));\n  };\n\n  return Object.freeze({\n    generation: options.generation,\n    register(definition: DoomToolRestrictionDefinition): DoomToolRestrictionHandle {\n      if (disposed) throw new Error('The tool surface is disposed.');\n      if (definition.source.trim().length === 0) throw new Error('A tool restriction needs a source.');\n      const holder: RestrictionHolder = {\n        source: definition.source,\n        restrict: definition.restrict,\n        controlledTools: definition.controlledTools ? [...new Set(definition.controlledTools)] : undefined,\n        attribution: definition.attribution ? { ...definition.attribution } : undefined,\n      };\n      const registration = slot.contribute({ source: definition.source, layer: definition.layer, value: holder });\n      applyNow();\n      let removed = false;\n      return Object.freeze({\n        update(restrict: DoomToolRestriction): void {\n          if (removed) return;\n          holder.restrict = restrict;\n          applyNow();\n        },\n        dispose(): void {\n          if (removed) return;\n          removed = true;\n          registration.dispose();\n          applyNow();\n        },\n      });\n    },\n    refresh(): void {\n      applyNow();\n    },\n    setActiveLayers(layers: readonly string[]): void {\n      if (disposed) return;\n      void kernel.setActiveLayers(layers).catch(() => undefined);\n      applyNow();\n    },\n    active(): readonly string[] {\n      return disposed ? [] : [...(pushed ?? options.activeTools())];\n    },\n    inspect(): readonly DoomToolSurfaceEntry[] {\n      return disposed\n        ? []\n        : inspection.map((entry) => ({\n            ...entry,\n            ...(entry.attribution ? { attribution: { ...entry.attribution } } : {}),\n          }));\n    },\n    subscribe(listener: () => void): () => void {\n      if (disposed) throw new Error('The tool surface is disposed.');\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    dispose(): void {\n      if (disposed) return;\n      disposed = true;\n      listeners.clear();\n      inspection = [];\n      kernel.dispose();\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAgCA,MAAM,OAAO;AAqBb,SAAS,SAAS,MAAyB,OAAmC;CAC5E,IAAI,KAAK,WAAW,MAAM,QAAQ,OAAO;CACzC,OAAO,KAAK,OAAO,MAAM,UAAU,SAAS,MAAM,MAAM;AAC1D;AAEA,SAAgB,sBAAsB,SAA+D;CACnG,MAAM,SAASA,cAAAA,iBAAiB,EAAE,cAAc,QAAQ,aAAa,CAAC;CACtE,IAAI;CACJ,IAAI,WAAW;CACf,IAAI,aAA8C,CAAC;CACnD,IAAI,cAAc;CAClB,MAAM,4BAAY,IAAI,IAAgB;CAEtC,MAAM,SAAS,YAAgD;EAC7D,MAAM,YAAY,CAAC,GAAG,IAAI,IAAI,QAAQ,SAAS,CAAC,CAAC;EACjD,MAAM,QAAQ,IAAI,IAAI,SAAS;EAC/B,IAAI,UAA6B;EACjC,KAAK,MAAM,UAAU,SACnB,IAAI;GACF,MAAM,SAAS,OAAO,SAAS,SAAS,SAAS;GACjD,UAAU,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,SAAS,MAAM,IAAI,IAAI,CAAC;EACjE,SAAS,OAAO;GACd,UAAU,QAAQ,QAAQ,SAAS,CAAC,OAAO,iBAAiB,SAAS,IAAI,CAAC;GAC1E,QAAQ,UAAU,OAAO,QAAQ,KAAK;EACxC;EAGF,IAAI,CAAC,SADU,QAAQ,YACJ,GAAG,OAAO,GAAG,QAAQ,eAAe,CAAC,GAAG,OAAO,CAAC;EACnE,SAAS,CAAC,GAAG,OAAO;EACpB,aAAa,QAAQ,SAAS,YAC3B,OAAO,mBAAmB,CAAC,EAAA,CACzB,QAAQ,SAAS,MAAM,IAAI,IAAI,CAAC,CAAC,CACjC,KAAK,UAAU;GACd,QAAQ,OAAO;GACf;GACA,QAAQ,QAAQ,SAAS,IAAI;GAC7B,GAAI,OAAO,cAAc,EAAE,aAAa,EAAE,GAAG,OAAO,YAAY,EAAE,IAAI,CAAC;EACzE,EAAE,CACN;EACA,MAAM,OAAO,KAAK,UAAU,CAAC,QAAQ,UAAU,CAAC;EAChD,IAAI,SAAS,aAAa;GACxB,cAAc;GACd,KAAK,MAAM,YAAY,WAAW,SAAS;EAC7C;CACF;CAEA,MAAM,OAAO,OAAO,WAA8B,MAAM,KAAK;CAC7D,MAAM,iBAAuB;EAC3B,IAAI,CAAC,UAAU,MAAM,OAAO,aAAgC,IAAI,CAAC;CACnE;CAEA,OAAO,OAAO,OAAO;EACnB,YAAY,QAAQ;EACpB,SAAS,YAAsE;GAC7E,IAAI,UAAU,MAAM,IAAI,MAAM,+BAA+B;GAC7D,IAAI,WAAW,OAAO,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,MAAM,oCAAoC;GAC/F,MAAM,SAA4B;IAChC,QAAQ,WAAW;IACnB,UAAU,WAAW;IACrB,iBAAiB,WAAW,kBAAkB,CAAC,GAAG,IAAI,IAAI,WAAW,eAAe,CAAC,IAAI,KAAA;IACzF,aAAa,WAAW,cAAc,EAAE,GAAG,WAAW,YAAY,IAAI,KAAA;GACxE;GACA,MAAM,eAAe,KAAK,WAAW;IAAE,QAAQ,WAAW;IAAQ,OAAO,WAAW;IAAO,OAAO;GAAO,CAAC;GAC1G,SAAS;GACT,IAAI,UAAU;GACd,OAAO,OAAO,OAAO;IACnB,OAAO,UAAqC;KAC1C,IAAI,SAAS;KACb,OAAO,WAAW;KAClB,SAAS;IACX;IACA,UAAgB;KACd,IAAI,SAAS;KACb,UAAU;KACV,aAAa,QAAQ;KACrB,SAAS;IACX;GACF,CAAC;EACH;EACA,UAAgB;GACd,SAAS;EACX;EACA,gBAAgB,QAAiC;GAC/C,IAAI,UAAU;GACd,OAAY,gBAAgB,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;GACzD,SAAS;EACX;EACA,SAA4B;GAC1B,OAAO,WAAW,CAAC,IAAI,CAAC,GAAI,UAAU,QAAQ,YAAY,CAAE;EAC9D;EACA,UAA2C;GACzC,OAAO,WACH,CAAC,IACD,WAAW,KAAK,WAAW;IACzB,GAAG;IACH,GAAI,MAAM,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,YAAY,EAAE,IAAI,CAAC;GACvE,EAAE;EACR;EACA,UAAU,UAAkC;GAC1C,IAAI,UAAU,MAAM,IAAI,MAAM,+BAA+B;GAC7D,UAAU,IAAI,QAAQ;GACtB,aAAa;IACX,UAAU,OAAO,QAAQ;GAC3B;EACF;EACA,UAAgB;GACd,IAAI,UAAU;GACd,WAAW;GACX,UAAU,MAAM;GAChB,aAAa,CAAC;GACd,OAAO,QAAQ;EACjB;CACF,CAAC;AACH"}

package/dist/src/services/toolSurface/index.d.mts

@@ -0,0 +1,19 @@
+import { DoomToolSurfaceService } from "../../schemas/toolSurface.mjs";
+//#region src/services/toolSurface/index.d.ts
+export interface CreateDoomToolSurfaceOptions {
+  /** Runtime generation, mirrored onto the service for diagnostics. */
+  readonly generation: string;
+  /** Every tool registered with the host, in host order. */
+  readonly allTools: () => readonly string[];
+  /** The tools the host currently exposes, in host order. */
+  readonly activeTools: () => readonly string[];
+  /** The host's whole-list setter. Called only when actual activation differs. */
+  readonly setActiveTools: (names: string[]) => void;
+  /** Layers active at creation. */
+  readonly activeLayers?: readonly string[];
+  /** Receives a restriction that threw. Defaults to silence. */
+  readonly onError?: (source: string, error: unknown) => void;
+}
+export declare function createDoomToolSurface(options: CreateDoomToolSurfaceOptions): DoomToolSurfaceService;
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/services/toolSurface/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/toolSurface/index.ts"],"mappings":";;iBAsCiB;;WAEN;;WAEA;;WAEA;;WAEA,iBAAiB;;WAEjB;;WAEA,WAAW,gBAAgB;;wBAQtB,sBAAsB,SAAS,+BAA+B"}

package/dist/src/services/toolSurface/index.mjs

@@ -0,0 +1,134 @@
+import { createDoomKernel } from "../kernel/index.mjs";
+//#region src/services/toolSurface/index.ts
+/**
+* The tool surface arbiter.
+*
+* DESIGN PATTERNS:
+* - One writer. Every owner registers a restriction; only this service calls
+*   the host setter. Two owners can no longer overwrite each other's list.
+* - Removal is inherent. The surface is recomputed from the full registered
+*   tool set on every change, so dropping a restriction restores the tools it
+*   hid without any owner keeping a snapshot.
+* - Restrictions are pure and ordered by registration. The result is a
+*   function of (registered tools, active layers, registered restrictions).
+* - Application is synchronous. A tool change has to be visible to the very
+*   next line, because callers gate user-facing messages on it. The kernel's
+*   coalesced flush still drives layer switches; it just lands on the same
+*   idempotent apply.
+*
+* AVOID:
+* - Letting one broken restriction take the surface down. A throwing
+*   restriction is skipped and reported; the rest still reach the host.
+* - Returning tool names the host does not know. Unknown names are dropped so
+*   a stale restriction cannot resurrect a tool that was never registered.
+*/
+const SLOT = "tools";
+function sameList(left, right) {
+	if (left.length !== right.length) return false;
+	return left.every((name, index) => name === right[index]);
+}
+function createDoomToolSurface(options) {
+	const kernel = createDoomKernel({ activeLayers: options.activeLayers });
+	let pushed;
+	let disposed = false;
+	let inspection = [];
+	let fingerprint = "";
+	const listeners = /* @__PURE__ */ new Set();
+	const apply = (holders) => {
+		const available = [...new Set(options.allTools())];
+		const known = new Set(available);
+		let current = available;
+		for (const holder of holders) try {
+			const result = holder.restrict(current, available);
+			current = [...new Set(result)].filter((name) => known.has(name));
+		} catch (error) {
+			current = current.filter((name) => !holder.controlledTools?.includes(name));
+			options.onError?.(holder.source, error);
+		}
+		if (!sameList(options.activeTools(), current)) options.setActiveTools([...current]);
+		pushed = [...current];
+		inspection = holders.flatMap((holder) => (holder.controlledTools ?? []).filter((name) => known.has(name)).map((name) => ({
+			source: holder.source,
+			name,
+			active: current.includes(name),
+			...holder.attribution ? { attribution: { ...holder.attribution } } : {}
+		})));
+		const next = JSON.stringify([pushed, inspection]);
+		if (next !== fingerprint) {
+			fingerprint = next;
+			for (const listener of listeners) listener();
+		}
+	};
+	const slot = kernel.defineSlot(SLOT, apply);
+	const applyNow = () => {
+		if (!disposed) apply(kernel.activeValues(SLOT));
+	};
+	return Object.freeze({
+		generation: options.generation,
+		register(definition) {
+			if (disposed) throw new Error("The tool surface is disposed.");
+			if (definition.source.trim().length === 0) throw new Error("A tool restriction needs a source.");
+			const holder = {
+				source: definition.source,
+				restrict: definition.restrict,
+				controlledTools: definition.controlledTools ? [...new Set(definition.controlledTools)] : void 0,
+				attribution: definition.attribution ? { ...definition.attribution } : void 0
+			};
+			const registration = slot.contribute({
+				source: definition.source,
+				layer: definition.layer,
+				value: holder
+			});
+			applyNow();
+			let removed = false;
+			return Object.freeze({
+				update(restrict) {
+					if (removed) return;
+					holder.restrict = restrict;
+					applyNow();
+				},
+				dispose() {
+					if (removed) return;
+					removed = true;
+					registration.dispose();
+					applyNow();
+				}
+			});
+		},
+		refresh() {
+			applyNow();
+		},
+		setActiveLayers(layers) {
+			if (disposed) return;
+			kernel.setActiveLayers(layers).catch(() => void 0);
+			applyNow();
+		},
+		active() {
+			return disposed ? [] : [...pushed ?? options.activeTools()];
+		},
+		inspect() {
+			return disposed ? [] : inspection.map((entry) => ({
+				...entry,
+				...entry.attribution ? { attribution: { ...entry.attribution } } : {}
+			}));
+		},
+		subscribe(listener) {
+			if (disposed) throw new Error("The tool surface is disposed.");
+			listeners.add(listener);
+			return () => {
+				listeners.delete(listener);
+			};
+		},
+		dispose() {
+			if (disposed) return;
+			disposed = true;
+			listeners.clear();
+			inspection = [];
+			kernel.dispose();
+		}
+	});
+}
+//#endregion
+export { createDoomToolSurface };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/toolSurface/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/toolSurface/index.ts"],"sourcesContent":["/**\n * The tool surface arbiter.\n *\n * DESIGN PATTERNS:\n * - One writer. Every owner registers a restriction; only this service calls\n *   the host setter. Two owners can no longer overwrite each other's list.\n * - Removal is inherent. The surface is recomputed from the full registered\n *   tool set on every change, so dropping a restriction restores the tools it\n *   hid without any owner keeping a snapshot.\n * - Restrictions are pure and ordered by registration. The result is a\n *   function of (registered tools, active layers, registered restrictions).\n * - Application is synchronous. A tool change has to be visible to the very\n *   next line, because callers gate user-facing messages on it. The kernel's\n *   coalesced flush still drives layer switches; it just lands on the same\n *   idempotent apply.\n *\n * AVOID:\n * - Letting one broken restriction take the surface down. A throwing\n *   restriction is skipped and reported; the rest still reach the host.\n * - Returning tool names the host does not know. Unknown names are dropped so\n *   a stale restriction cannot resurrect a tool that was never registered.\n */\n\nimport { createDoomKernel } from '../../exports/kernel';\nimport type {\n  DoomToolRestriction,\n  DoomToolRestrictionDefinition,\n  DoomToolRestrictionHandle,\n  DoomToolSurfaceService,\n  DoomToolSurfaceEntry,\n} from '../../schemas/toolSurface';\n\nconst SLOT = 'tools';\n\ninterface RestrictionHolder extends Pick<DoomToolRestrictionDefinition, 'source' | 'controlledTools' | 'attribution'> {\n  restrict: DoomToolRestriction;\n}\n\nexport interface CreateDoomToolSurfaceOptions {\n  /** Runtime generation, mirrored onto the service for diagnostics. */\n  readonly generation: string;\n  /** Every tool registered with the host, in host order. */\n  readonly allTools: () => readonly string[];\n  /** The tools the host currently exposes, in host order. */\n  readonly activeTools: () => readonly string[];\n  /** The host's whole-list setter. Called only when actual activation differs. */\n  readonly setActiveTools: (names: string[]) => void;\n  /** Layers active at creation. */\n  readonly activeLayers?: readonly string[];\n  /** Receives a restriction that threw. Defaults to silence. */\n  readonly onError?: (source: string, error: unknown) => void;\n}\n\nfunction sameList(left: readonly string[], right: readonly string[]): boolean {\n  if (left.length !== right.length) return false;\n  return left.every((name, index) => name === right[index]);\n}\n\nexport function createDoomToolSurface(options: CreateDoomToolSurfaceOptions): DoomToolSurfaceService {\n  const kernel = createDoomKernel({ activeLayers: options.activeLayers });\n  let pushed: readonly string[] | undefined;\n  let disposed = false;\n  let inspection: readonly DoomToolSurfaceEntry[] = [];\n  let fingerprint = '';\n  const listeners = new Set<() => void>();\n\n  const apply = (holders: readonly RestrictionHolder[]): void => {\n    const available = [...new Set(options.allTools())];\n    const known = new Set(available);\n    let current: readonly string[] = available;\n    for (const holder of holders) {\n      try {\n        const result = holder.restrict(current, available);\n        current = [...new Set(result)].filter((name) => known.has(name));\n      } catch (error) {\n        current = current.filter((name) => !holder.controlledTools?.includes(name));\n        options.onError?.(holder.source, error);\n      }\n    }\n    const actual = options.activeTools();\n    if (!sameList(actual, current)) options.setActiveTools([...current]);\n    pushed = [...current];\n    inspection = holders.flatMap((holder) =>\n      (holder.controlledTools ?? [])\n        .filter((name) => known.has(name))\n        .map((name) => ({\n          source: holder.source,\n          name,\n          active: current.includes(name),\n          ...(holder.attribution ? { attribution: { ...holder.attribution } } : {}),\n        })),\n    );\n    const next = JSON.stringify([pushed, inspection]);\n    if (next !== fingerprint) {\n      fingerprint = next;\n      for (const listener of listeners) listener();\n    }\n  };\n\n  const slot = kernel.defineSlot<RestrictionHolder>(SLOT, apply);\n  const applyNow = (): void => {\n    if (!disposed) apply(kernel.activeValues<RestrictionHolder>(SLOT));\n  };\n\n  return Object.freeze({\n    generation: options.generation,\n    register(definition: DoomToolRestrictionDefinition): DoomToolRestrictionHandle {\n      if (disposed) throw new Error('The tool surface is disposed.');\n      if (definition.source.trim().length === 0) throw new Error('A tool restriction needs a source.');\n      const holder: RestrictionHolder = {\n        source: definition.source,\n        restrict: definition.restrict,\n        controlledTools: definition.controlledTools ? [...new Set(definition.controlledTools)] : undefined,\n        attribution: definition.attribution ? { ...definition.attribution } : undefined,\n      };\n      const registration = slot.contribute({ source: definition.source, layer: definition.layer, value: holder });\n      applyNow();\n      let removed = false;\n      return Object.freeze({\n        update(restrict: DoomToolRestriction): void {\n          if (removed) return;\n          holder.restrict = restrict;\n          applyNow();\n        },\n        dispose(): void {\n          if (removed) return;\n          removed = true;\n          registration.dispose();\n          applyNow();\n        },\n      });\n    },\n    refresh(): void {\n      applyNow();\n    },\n    setActiveLayers(layers: readonly string[]): void {\n      if (disposed) return;\n      void kernel.setActiveLayers(layers).catch(() => undefined);\n      applyNow();\n    },\n    active(): readonly string[] {\n      return disposed ? [] : [...(pushed ?? options.activeTools())];\n    },\n    inspect(): readonly DoomToolSurfaceEntry[] {\n      return disposed\n        ? []\n        : inspection.map((entry) => ({\n            ...entry,\n            ...(entry.attribution ? { attribution: { ...entry.attribution } } : {}),\n          }));\n    },\n    subscribe(listener: () => void): () => void {\n      if (disposed) throw new Error('The tool surface is disposed.');\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    dispose(): void {\n      if (disposed) return;\n      disposed = true;\n      listeners.clear();\n      inspection = [];\n      kernel.dispose();\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAgCA,MAAM,OAAO;AAqBb,SAAS,SAAS,MAAyB,OAAmC;CAC5E,IAAI,KAAK,WAAW,MAAM,QAAQ,OAAO;CACzC,OAAO,KAAK,OAAO,MAAM,UAAU,SAAS,MAAM,MAAM;AAC1D;AAEA,SAAgB,sBAAsB,SAA+D;CACnG,MAAM,SAAS,iBAAiB,EAAE,cAAc,QAAQ,aAAa,CAAC;CACtE,IAAI;CACJ,IAAI,WAAW;CACf,IAAI,aAA8C,CAAC;CACnD,IAAI,cAAc;CAClB,MAAM,4BAAY,IAAI,IAAgB;CAEtC,MAAM,SAAS,YAAgD;EAC7D,MAAM,YAAY,CAAC,GAAG,IAAI,IAAI,QAAQ,SAAS,CAAC,CAAC;EACjD,MAAM,QAAQ,IAAI,IAAI,SAAS;EAC/B,IAAI,UAA6B;EACjC,KAAK,MAAM,UAAU,SACnB,IAAI;GACF,MAAM,SAAS,OAAO,SAAS,SAAS,SAAS;GACjD,UAAU,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,SAAS,MAAM,IAAI,IAAI,CAAC;EACjE,SAAS,OAAO;GACd,UAAU,QAAQ,QAAQ,SAAS,CAAC,OAAO,iBAAiB,SAAS,IAAI,CAAC;GAC1E,QAAQ,UAAU,OAAO,QAAQ,KAAK;EACxC;EAGF,IAAI,CAAC,SADU,QAAQ,YACJ,GAAG,OAAO,GAAG,QAAQ,eAAe,CAAC,GAAG,OAAO,CAAC;EACnE,SAAS,CAAC,GAAG,OAAO;EACpB,aAAa,QAAQ,SAAS,YAC3B,OAAO,mBAAmB,CAAC,EAAA,CACzB,QAAQ,SAAS,MAAM,IAAI,IAAI,CAAC,CAAC,CACjC,KAAK,UAAU;GACd,QAAQ,OAAO;GACf;GACA,QAAQ,QAAQ,SAAS,IAAI;GAC7B,GAAI,OAAO,cAAc,EAAE,aAAa,EAAE,GAAG,OAAO,YAAY,EAAE,IAAI,CAAC;EACzE,EAAE,CACN;EACA,MAAM,OAAO,KAAK,UAAU,CAAC,QAAQ,UAAU,CAAC;EAChD,IAAI,SAAS,aAAa;GACxB,cAAc;GACd,KAAK,MAAM,YAAY,WAAW,SAAS;EAC7C;CACF;CAEA,MAAM,OAAO,OAAO,WAA8B,MAAM,KAAK;CAC7D,MAAM,iBAAuB;EAC3B,IAAI,CAAC,UAAU,MAAM,OAAO,aAAgC,IAAI,CAAC;CACnE;CAEA,OAAO,OAAO,OAAO;EACnB,YAAY,QAAQ;EACpB,SAAS,YAAsE;GAC7E,IAAI,UAAU,MAAM,IAAI,MAAM,+BAA+B;GAC7D,IAAI,WAAW,OAAO,KAAK,CAAC,CAAC,WAAW,GAAG,MAAM,IAAI,MAAM,oCAAoC;GAC/F,MAAM,SAA4B;IAChC,QAAQ,WAAW;IACnB,UAAU,WAAW;IACrB,iBAAiB,WAAW,kBAAkB,CAAC,GAAG,IAAI,IAAI,WAAW,eAAe,CAAC,IAAI,KAAA;IACzF,aAAa,WAAW,cAAc,EAAE,GAAG,WAAW,YAAY,IAAI,KAAA;GACxE;GACA,MAAM,eAAe,KAAK,WAAW;IAAE,QAAQ,WAAW;IAAQ,OAAO,WAAW;IAAO,OAAO;GAAO,CAAC;GAC1G,SAAS;GACT,IAAI,UAAU;GACd,OAAO,OAAO,OAAO;IACnB,OAAO,UAAqC;KAC1C,IAAI,SAAS;KACb,OAAO,WAAW;KAClB,SAAS;IACX;IACA,UAAgB;KACd,IAAI,SAAS;KACb,UAAU;KACV,aAAa,QAAQ;KACrB,SAAS;IACX;GACF,CAAC;EACH;EACA,UAAgB;GACd,SAAS;EACX;EACA,gBAAgB,QAAiC;GAC/C,IAAI,UAAU;GACd,OAAY,gBAAgB,MAAM,CAAC,CAAC,YAAY,KAAA,CAAS;GACzD,SAAS;EACX;EACA,SAA4B;GAC1B,OAAO,WAAW,CAAC,IAAI,CAAC,GAAI,UAAU,QAAQ,YAAY,CAAE;EAC9D;EACA,UAA2C;GACzC,OAAO,WACH,CAAC,IACD,WAAW,KAAK,WAAW;IACzB,GAAG;IACH,GAAI,MAAM,cAAc,EAAE,aAAa,EAAE,GAAG,MAAM,YAAY,EAAE,IAAI,CAAC;GACvE,EAAE;EACR;EACA,UAAU,UAAkC;GAC1C,IAAI,UAAU,MAAM,IAAI,MAAM,+BAA+B;GAC7D,UAAU,IAAI,QAAQ;GACtB,aAAa;IACX,UAAU,OAAO,QAAQ;GAC3B;EACF;EACA,UAAgB;GACd,IAAI,UAAU;GACd,WAAW;GACX,UAAU,MAAM;GAChB,aAAa,CAAC;GACd,OAAO,QAAQ;EACjB;CACF,CAAC;AACH"}

package/dist/src/services/traceContext/index.cjs

@@ -0,0 +1,13 @@
+//#region src/services/traceContext/index.ts
+const TRACEPARENT = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/u;
+/** Accepts only a valid W3C traceparent and never forwards tracestate or baggage. */
+function validatedTraceContext(value) {
+	if (typeof value !== "string") return void 0;
+	const match = TRACEPARENT.exec(value);
+	if (!match || /^0+$/u.test(match[1] ?? "") || /^0+$/u.test(match[2] ?? "")) return void 0;
+	return { traceparent: value };
+}
+//#endregion
+exports.validatedTraceContext = validatedTraceContext;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/traceContext/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../../src/services/traceContext/index.ts"],"sourcesContent":["import type { DoomTraceContext } from '@agimon-ai/doompi-telemetry';\n\nconst TRACEPARENT = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/u;\n\n/** Accepts only a valid W3C traceparent and never forwards tracestate or baggage. */\nexport function validatedTraceContext(value: unknown): DoomTraceContext | undefined {\n  if (typeof value !== 'string') return undefined;\n  const match = TRACEPARENT.exec(value);\n  if (!match || /^0+$/u.test(match[1] ?? '') || /^0+$/u.test(match[2] ?? '')) return undefined;\n  return { traceparent: value };\n}\n"],"mappings":";AAEA,MAAM,cAAc;;AAGpB,SAAgB,sBAAsB,OAA8C;CAClF,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;CACtC,MAAM,QAAQ,YAAY,KAAK,KAAK;CACpC,IAAI,CAAC,SAAS,QAAQ,KAAK,MAAM,MAAM,EAAE,KAAK,QAAQ,KAAK,MAAM,MAAM,EAAE,GAAG,OAAO,KAAA;CACnF,OAAO,EAAE,aAAa,MAAM;AAC9B"}

package/dist/src/services/traceContext/index.mjs

@@ -0,0 +1,13 @@
+//#region src/services/traceContext/index.ts
+const TRACEPARENT = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/u;
+/** Accepts only a valid W3C traceparent and never forwards tracestate or baggage. */
+function validatedTraceContext(value) {
+	if (typeof value !== "string") return void 0;
+	const match = TRACEPARENT.exec(value);
+	if (!match || /^0+$/u.test(match[1] ?? "") || /^0+$/u.test(match[2] ?? "")) return void 0;
+	return { traceparent: value };
+}
+//#endregion
+export { validatedTraceContext };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/traceContext/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/traceContext/index.ts"],"sourcesContent":["import type { DoomTraceContext } from '@agimon-ai/doompi-telemetry';\n\nconst TRACEPARENT = /^00-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/u;\n\n/** Accepts only a valid W3C traceparent and never forwards tracestate or baggage. */\nexport function validatedTraceContext(value: unknown): DoomTraceContext | undefined {\n  if (typeof value !== 'string') return undefined;\n  const match = TRACEPARENT.exec(value);\n  if (!match || /^0+$/u.test(match[1] ?? '') || /^0+$/u.test(match[2] ?? '')) return undefined;\n  return { traceparent: value };\n}\n"],"mappings":";AAEA,MAAM,cAAc;;AAGpB,SAAgB,sBAAsB,OAA8C;CAClF,IAAI,OAAO,UAAU,UAAU,OAAO,KAAA;CACtC,MAAM,QAAQ,YAAY,KAAK,KAAK;CACpC,IAAI,CAAC,SAAS,QAAQ,KAAK,MAAM,MAAM,EAAE,KAAK,QAAQ,KAAK,MAAM,MAAM,EAAE,GAAG,OAAO,KAAA;CACnF,OAAO,EAAE,aAAa,MAAM;AAC9B"}

package/dist/src/services/transcriptPages/index.cjs

@@ -0,0 +1,74 @@
+//#region src/services/transcriptPages/index.ts
+const PAGE_SIZE = 100;
+function transcriptCursor(sessionId, lane, generation, seq) {
+	return Buffer.from(JSON.stringify([
+		sessionId,
+		lane,
+		generation,
+		seq
+	])).toString("base64url");
+}
+/** Branch-relative keyset reads never materialize the complete conversation. */
+async function readTranscriptPage(runtime, request, generation, context) {
+	const limit = request.limit ?? PAGE_SIZE;
+	if (!Number.isInteger(limit) || limit < 1 || limit > PAGE_SIZE) throw new Error("Transcript page limit must be between 1 and 100");
+	const newer = request.direction === "newer";
+	if (request.direction !== void 0 && !["older", "newer"].includes(request.direction)) throw new Error("Invalid transcript direction");
+	let seq;
+	if (request.cursor !== void 0) {
+		if (typeof request.cursor !== "string" || request.cursor.length > 1024) throw new Error("Invalid transcript cursor");
+		let cursor;
+		try {
+			cursor = JSON.parse(Buffer.from(request.cursor, "base64url").toString("utf8"));
+		} catch {
+			throw new Error("Invalid transcript cursor");
+		}
+		if (!Array.isArray(cursor) || cursor.length !== 4 || cursor[0] !== runtime.sessionId || cursor[1] !== runtime.laneName || !Number.isSafeInteger(cursor[3]) || cursor[3] < 0) throw new Error("Invalid transcript cursor");
+		if (cursor[2] !== generation) throw new Error("STALE_TRANSCRIPT_CURSOR");
+		seq = cursor[3];
+	} else if (newer) throw new Error("Loading newer entries requires a cursor");
+	const tip = await runtime.lane.getTipId(context);
+	if (!tip) return {
+		entries: [],
+		context: [],
+		startCursor: null,
+		endCursor: null,
+		olderCursor: null,
+		newerCursor: null,
+		generation
+	};
+	const rows = await runtime.lane.findEntries({
+		start: tip,
+		order: newer ? "oldestFirst" : "newestFirst",
+		limit: limit + 1,
+		...seq === void 0 ? {} : { cursor: { seq } }
+	}, context);
+	const more = rows.length > limit;
+	const entries = rows.slice(0, limit);
+	if (!newer) entries.reverse();
+	const encode = (position) => transcriptCursor(runtime.sessionId, runtime.laneName, generation, position);
+	const first = entries[0];
+	const last = entries.at(-1);
+	const identities = first ? await runtime.lane.findEntries({
+		start: tip,
+		type: "custom",
+		customType: "doom-profile-identity",
+		order: "newestFirst",
+		limit: 1,
+		cursor: { seq: first.seq }
+	}, context) : [];
+	return {
+		entries: JSON.parse(JSON.stringify(entries)),
+		context: JSON.parse(JSON.stringify(identities)),
+		startCursor: first ? encode(first.seq) : null,
+		endCursor: last ? encode(last.seq) : null,
+		olderCursor: first && (newer ? seq !== void 0 : more) ? encode(first.seq) : null,
+		newerCursor: last && (newer ? more : seq !== void 0) ? encode(last.seq) : null,
+		generation
+	};
+}
+//#endregion
+exports.readTranscriptPage = readTranscriptPage;
+exports.transcriptCursor = transcriptCursor;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/transcriptPages/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../../src/services/transcriptPages/index.ts"],"sourcesContent":["import type { Context } from '@earendil-works/chord';\n\nimport type { JsonValue, TranscriptPage, TranscriptPageRequest } from '../../exports/sessionProtocol';\nimport type { DirectHarnessRuntime } from '../../types/server/directHarnessRuntime';\n\nconst PAGE_SIZE = 100;\n\nexport function transcriptCursor(sessionId: string, lane: string, generation: number, seq: number): string {\n  return Buffer.from(JSON.stringify([sessionId, lane, generation, seq])).toString('base64url');\n}\n\n/** Branch-relative keyset reads never materialize the complete conversation. */\nexport async function readTranscriptPage(\n  runtime: Pick<DirectHarnessRuntime, 'sessionId' | 'laneName'> & {\n    lane: Pick<DirectHarnessRuntime['lane'], 'getTipId' | 'findEntries'>;\n  },\n  request: TranscriptPageRequest,\n  generation: number,\n  context: Context,\n): Promise<Omit<TranscriptPage, 'revision' | 'drafts'>> {\n  const limit = request.limit ?? PAGE_SIZE;\n  if (!Number.isInteger(limit) || limit < 1 || limit > PAGE_SIZE)\n    throw new Error('Transcript page limit must be between 1 and 100');\n  const newer = request.direction === 'newer';\n  if (request.direction !== undefined && !['older', 'newer'].includes(request.direction))\n    throw new Error('Invalid transcript direction');\n  let seq: number | undefined;\n  if (request.cursor !== undefined) {\n    if (typeof request.cursor !== 'string' || request.cursor.length > 1024)\n      throw new Error('Invalid transcript cursor');\n    let cursor: unknown;\n    try {\n      cursor = JSON.parse(Buffer.from(request.cursor, 'base64url').toString('utf8'));\n    } catch {\n      throw new Error('Invalid transcript cursor');\n    }\n    if (\n      !Array.isArray(cursor) ||\n      cursor.length !== 4 ||\n      cursor[0] !== runtime.sessionId ||\n      cursor[1] !== runtime.laneName ||\n      !Number.isSafeInteger(cursor[3]) ||\n      cursor[3] < 0\n    )\n      throw new Error('Invalid transcript cursor');\n    if (cursor[2] !== generation) throw new Error('STALE_TRANSCRIPT_CURSOR');\n    seq = cursor[3] as number;\n  } else if (newer) throw new Error('Loading newer entries requires a cursor');\n  const tip = await runtime.lane.getTipId(context);\n  if (!tip)\n    return {\n      entries: [],\n      context: [],\n      startCursor: null,\n      endCursor: null,\n      olderCursor: null,\n      newerCursor: null,\n      generation,\n    };\n  const rows = await runtime.lane.findEntries(\n    {\n      start: tip,\n      order: newer ? 'oldestFirst' : 'newestFirst',\n      limit: limit + 1,\n      ...(seq === undefined ? {} : { cursor: { seq } }),\n    },\n    context,\n  );\n  const more = rows.length > limit;\n  const entries = rows.slice(0, limit);\n  if (!newer) entries.reverse();\n  const encode = (position: number): string =>\n    transcriptCursor(runtime.sessionId, runtime.laneName, generation, position);\n  const first = entries[0];\n  const last = entries.at(-1);\n  const identities = first\n    ? await runtime.lane.findEntries(\n        {\n          start: tip,\n          type: 'custom',\n          customType: 'doom-profile-identity',\n          order: 'newestFirst',\n          limit: 1,\n          cursor: { seq: first.seq },\n        },\n        context,\n      )\n    : [];\n  return {\n    entries: JSON.parse(JSON.stringify(entries)) as JsonValue[],\n    context: JSON.parse(JSON.stringify(identities)) as JsonValue[],\n    startCursor: first ? encode(first.seq) : null,\n    endCursor: last ? encode(last.seq) : null,\n    olderCursor: first && (newer ? seq !== undefined : more) ? encode(first.seq) : null,\n    newerCursor: last && (newer ? more : seq !== undefined) ? encode(last.seq) : null,\n    generation,\n  };\n}\n"],"mappings":";AAKA,MAAM,YAAY;AAElB,SAAgB,iBAAiB,WAAmB,MAAc,YAAoB,KAAqB;CACzG,OAAO,OAAO,KAAK,KAAK,UAAU;EAAC;EAAW;EAAM;EAAY;CAAG,CAAC,CAAC,CAAC,CAAC,SAAS,WAAW;AAC7F;;AAGA,eAAsB,mBACpB,SAGA,SACA,YACA,SACsD;CACtD,MAAM,QAAQ,QAAQ,SAAS;CAC/B,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,WACnD,MAAM,IAAI,MAAM,iDAAiD;CACnE,MAAM,QAAQ,QAAQ,cAAc;CACpC,IAAI,QAAQ,cAAc,KAAA,KAAa,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,SAAS,QAAQ,SAAS,GACnF,MAAM,IAAI,MAAM,8BAA8B;CAChD,IAAI;CACJ,IAAI,QAAQ,WAAW,KAAA,GAAW;EAChC,IAAI,OAAO,QAAQ,WAAW,YAAY,QAAQ,OAAO,SAAS,MAChE,MAAM,IAAI,MAAM,2BAA2B;EAC7C,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EAC/E,QAAQ;GACN,MAAM,IAAI,MAAM,2BAA2B;EAC7C;EACA,IACE,CAAC,MAAM,QAAQ,MAAM,KACrB,OAAO,WAAW,KAClB,OAAO,OAAO,QAAQ,aACtB,OAAO,OAAO,QAAQ,YACtB,CAAC,OAAO,cAAc,OAAO,EAAE,KAC/B,OAAO,KAAK,GAEZ,MAAM,IAAI,MAAM,2BAA2B;EAC7C,IAAI,OAAO,OAAO,YAAY,MAAM,IAAI,MAAM,yBAAyB;EACvE,MAAM,OAAO;CACf,OAAO,IAAI,OAAO,MAAM,IAAI,MAAM,yCAAyC;CAC3E,MAAM,MAAM,MAAM,QAAQ,KAAK,SAAS,OAAO;CAC/C,IAAI,CAAC,KACH,OAAO;EACL,SAAS,CAAC;EACV,SAAS,CAAC;EACV,aAAa;EACb,WAAW;EACX,aAAa;EACb,aAAa;EACb;CACF;CACF,MAAM,OAAO,MAAM,QAAQ,KAAK,YAC9B;EACE,OAAO;EACP,OAAO,QAAQ,gBAAgB;EAC/B,OAAO,QAAQ;EACf,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;CACjD,GACA,OACF;CACA,MAAM,OAAO,KAAK,SAAS;CAC3B,MAAM,UAAU,KAAK,MAAM,GAAG,KAAK;CACnC,IAAI,CAAC,OAAO,QAAQ,QAAQ;CAC5B,MAAM,UAAU,aACd,iBAAiB,QAAQ,WAAW,QAAQ,UAAU,YAAY,QAAQ;CAC5E,MAAM,QAAQ,QAAQ;CACtB,MAAM,OAAO,QAAQ,GAAG,EAAE;CAC1B,MAAM,aAAa,QACf,MAAM,QAAQ,KAAK,YACjB;EACE,OAAO;EACP,MAAM;EACN,YAAY;EACZ,OAAO;EACP,OAAO;EACP,QAAQ,EAAE,KAAK,MAAM,IAAI;CAC3B,GACA,OACF,IACA,CAAC;CACL,OAAO;EACL,SAAS,KAAK,MAAM,KAAK,UAAU,OAAO,CAAC;EAC3C,SAAS,KAAK,MAAM,KAAK,UAAU,UAAU,CAAC;EAC9C,aAAa,QAAQ,OAAO,MAAM,GAAG,IAAI;EACzC,WAAW,OAAO,OAAO,KAAK,GAAG,IAAI;EACrC,aAAa,UAAU,QAAQ,QAAQ,KAAA,IAAY,QAAQ,OAAO,MAAM,GAAG,IAAI;EAC/E,aAAa,SAAS,QAAQ,OAAO,QAAQ,KAAA,KAAa,OAAO,KAAK,GAAG,IAAI;EAC7E;CACF;AACF"}

package/dist/src/services/transcriptPages/index.mjs

@@ -0,0 +1,73 @@
+//#region src/services/transcriptPages/index.ts
+const PAGE_SIZE = 100;
+function transcriptCursor(sessionId, lane, generation, seq) {
+	return Buffer.from(JSON.stringify([
+		sessionId,
+		lane,
+		generation,
+		seq
+	])).toString("base64url");
+}
+/** Branch-relative keyset reads never materialize the complete conversation. */
+async function readTranscriptPage(runtime, request, generation, context) {
+	const limit = request.limit ?? PAGE_SIZE;
+	if (!Number.isInteger(limit) || limit < 1 || limit > PAGE_SIZE) throw new Error("Transcript page limit must be between 1 and 100");
+	const newer = request.direction === "newer";
+	if (request.direction !== void 0 && !["older", "newer"].includes(request.direction)) throw new Error("Invalid transcript direction");
+	let seq;
+	if (request.cursor !== void 0) {
+		if (typeof request.cursor !== "string" || request.cursor.length > 1024) throw new Error("Invalid transcript cursor");
+		let cursor;
+		try {
+			cursor = JSON.parse(Buffer.from(request.cursor, "base64url").toString("utf8"));
+		} catch {
+			throw new Error("Invalid transcript cursor");
+		}
+		if (!Array.isArray(cursor) || cursor.length !== 4 || cursor[0] !== runtime.sessionId || cursor[1] !== runtime.laneName || !Number.isSafeInteger(cursor[3]) || cursor[3] < 0) throw new Error("Invalid transcript cursor");
+		if (cursor[2] !== generation) throw new Error("STALE_TRANSCRIPT_CURSOR");
+		seq = cursor[3];
+	} else if (newer) throw new Error("Loading newer entries requires a cursor");
+	const tip = await runtime.lane.getTipId(context);
+	if (!tip) return {
+		entries: [],
+		context: [],
+		startCursor: null,
+		endCursor: null,
+		olderCursor: null,
+		newerCursor: null,
+		generation
+	};
+	const rows = await runtime.lane.findEntries({
+		start: tip,
+		order: newer ? "oldestFirst" : "newestFirst",
+		limit: limit + 1,
+		...seq === void 0 ? {} : { cursor: { seq } }
+	}, context);
+	const more = rows.length > limit;
+	const entries = rows.slice(0, limit);
+	if (!newer) entries.reverse();
+	const encode = (position) => transcriptCursor(runtime.sessionId, runtime.laneName, generation, position);
+	const first = entries[0];
+	const last = entries.at(-1);
+	const identities = first ? await runtime.lane.findEntries({
+		start: tip,
+		type: "custom",
+		customType: "doom-profile-identity",
+		order: "newestFirst",
+		limit: 1,
+		cursor: { seq: first.seq }
+	}, context) : [];
+	return {
+		entries: JSON.parse(JSON.stringify(entries)),
+		context: JSON.parse(JSON.stringify(identities)),
+		startCursor: first ? encode(first.seq) : null,
+		endCursor: last ? encode(last.seq) : null,
+		olderCursor: first && (newer ? seq !== void 0 : more) ? encode(first.seq) : null,
+		newerCursor: last && (newer ? more : seq !== void 0) ? encode(last.seq) : null,
+		generation
+	};
+}
+//#endregion
+export { readTranscriptPage, transcriptCursor };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/transcriptPages/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/transcriptPages/index.ts"],"sourcesContent":["import type { Context } from '@earendil-works/chord';\n\nimport type { JsonValue, TranscriptPage, TranscriptPageRequest } from '../../exports/sessionProtocol';\nimport type { DirectHarnessRuntime } from '../../types/server/directHarnessRuntime';\n\nconst PAGE_SIZE = 100;\n\nexport function transcriptCursor(sessionId: string, lane: string, generation: number, seq: number): string {\n  return Buffer.from(JSON.stringify([sessionId, lane, generation, seq])).toString('base64url');\n}\n\n/** Branch-relative keyset reads never materialize the complete conversation. */\nexport async function readTranscriptPage(\n  runtime: Pick<DirectHarnessRuntime, 'sessionId' | 'laneName'> & {\n    lane: Pick<DirectHarnessRuntime['lane'], 'getTipId' | 'findEntries'>;\n  },\n  request: TranscriptPageRequest,\n  generation: number,\n  context: Context,\n): Promise<Omit<TranscriptPage, 'revision' | 'drafts'>> {\n  const limit = request.limit ?? PAGE_SIZE;\n  if (!Number.isInteger(limit) || limit < 1 || limit > PAGE_SIZE)\n    throw new Error('Transcript page limit must be between 1 and 100');\n  const newer = request.direction === 'newer';\n  if (request.direction !== undefined && !['older', 'newer'].includes(request.direction))\n    throw new Error('Invalid transcript direction');\n  let seq: number | undefined;\n  if (request.cursor !== undefined) {\n    if (typeof request.cursor !== 'string' || request.cursor.length > 1024)\n      throw new Error('Invalid transcript cursor');\n    let cursor: unknown;\n    try {\n      cursor = JSON.parse(Buffer.from(request.cursor, 'base64url').toString('utf8'));\n    } catch {\n      throw new Error('Invalid transcript cursor');\n    }\n    if (\n      !Array.isArray(cursor) ||\n      cursor.length !== 4 ||\n      cursor[0] !== runtime.sessionId ||\n      cursor[1] !== runtime.laneName ||\n      !Number.isSafeInteger(cursor[3]) ||\n      cursor[3] < 0\n    )\n      throw new Error('Invalid transcript cursor');\n    if (cursor[2] !== generation) throw new Error('STALE_TRANSCRIPT_CURSOR');\n    seq = cursor[3] as number;\n  } else if (newer) throw new Error('Loading newer entries requires a cursor');\n  const tip = await runtime.lane.getTipId(context);\n  if (!tip)\n    return {\n      entries: [],\n      context: [],\n      startCursor: null,\n      endCursor: null,\n      olderCursor: null,\n      newerCursor: null,\n      generation,\n    };\n  const rows = await runtime.lane.findEntries(\n    {\n      start: tip,\n      order: newer ? 'oldestFirst' : 'newestFirst',\n      limit: limit + 1,\n      ...(seq === undefined ? {} : { cursor: { seq } }),\n    },\n    context,\n  );\n  const more = rows.length > limit;\n  const entries = rows.slice(0, limit);\n  if (!newer) entries.reverse();\n  const encode = (position: number): string =>\n    transcriptCursor(runtime.sessionId, runtime.laneName, generation, position);\n  const first = entries[0];\n  const last = entries.at(-1);\n  const identities = first\n    ? await runtime.lane.findEntries(\n        {\n          start: tip,\n          type: 'custom',\n          customType: 'doom-profile-identity',\n          order: 'newestFirst',\n          limit: 1,\n          cursor: { seq: first.seq },\n        },\n        context,\n      )\n    : [];\n  return {\n    entries: JSON.parse(JSON.stringify(entries)) as JsonValue[],\n    context: JSON.parse(JSON.stringify(identities)) as JsonValue[],\n    startCursor: first ? encode(first.seq) : null,\n    endCursor: last ? encode(last.seq) : null,\n    olderCursor: first && (newer ? seq !== undefined : more) ? encode(first.seq) : null,\n    newerCursor: last && (newer ? more : seq !== undefined) ? encode(last.seq) : null,\n    generation,\n  };\n}\n"],"mappings":";AAKA,MAAM,YAAY;AAElB,SAAgB,iBAAiB,WAAmB,MAAc,YAAoB,KAAqB;CACzG,OAAO,OAAO,KAAK,KAAK,UAAU;EAAC;EAAW;EAAM;EAAY;CAAG,CAAC,CAAC,CAAC,CAAC,SAAS,WAAW;AAC7F;;AAGA,eAAsB,mBACpB,SAGA,SACA,YACA,SACsD;CACtD,MAAM,QAAQ,QAAQ,SAAS;CAC/B,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,KAAK,QAAQ,WACnD,MAAM,IAAI,MAAM,iDAAiD;CACnE,MAAM,QAAQ,QAAQ,cAAc;CACpC,IAAI,QAAQ,cAAc,KAAA,KAAa,CAAC,CAAC,SAAS,OAAO,CAAC,CAAC,SAAS,QAAQ,SAAS,GACnF,MAAM,IAAI,MAAM,8BAA8B;CAChD,IAAI;CACJ,IAAI,QAAQ,WAAW,KAAA,GAAW;EAChC,IAAI,OAAO,QAAQ,WAAW,YAAY,QAAQ,OAAO,SAAS,MAChE,MAAM,IAAI,MAAM,2BAA2B;EAC7C,IAAI;EACJ,IAAI;GACF,SAAS,KAAK,MAAM,OAAO,KAAK,QAAQ,QAAQ,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC;EAC/E,QAAQ;GACN,MAAM,IAAI,MAAM,2BAA2B;EAC7C;EACA,IACE,CAAC,MAAM,QAAQ,MAAM,KACrB,OAAO,WAAW,KAClB,OAAO,OAAO,QAAQ,aACtB,OAAO,OAAO,QAAQ,YACtB,CAAC,OAAO,cAAc,OAAO,EAAE,KAC/B,OAAO,KAAK,GAEZ,MAAM,IAAI,MAAM,2BAA2B;EAC7C,IAAI,OAAO,OAAO,YAAY,MAAM,IAAI,MAAM,yBAAyB;EACvE,MAAM,OAAO;CACf,OAAO,IAAI,OAAO,MAAM,IAAI,MAAM,yCAAyC;CAC3E,MAAM,MAAM,MAAM,QAAQ,KAAK,SAAS,OAAO;CAC/C,IAAI,CAAC,KACH,OAAO;EACL,SAAS,CAAC;EACV,SAAS,CAAC;EACV,aAAa;EACb,WAAW;EACX,aAAa;EACb,aAAa;EACb;CACF;CACF,MAAM,OAAO,MAAM,QAAQ,KAAK,YAC9B;EACE,OAAO;EACP,OAAO,QAAQ,gBAAgB;EAC/B,OAAO,QAAQ;EACf,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;CACjD,GACA,OACF;CACA,MAAM,OAAO,KAAK,SAAS;CAC3B,MAAM,UAAU,KAAK,MAAM,GAAG,KAAK;CACnC,IAAI,CAAC,OAAO,QAAQ,QAAQ;CAC5B,MAAM,UAAU,aACd,iBAAiB,QAAQ,WAAW,QAAQ,UAAU,YAAY,QAAQ;CAC5E,MAAM,QAAQ,QAAQ;CACtB,MAAM,OAAO,QAAQ,GAAG,EAAE;CAC1B,MAAM,aAAa,QACf,MAAM,QAAQ,KAAK,YACjB;EACE,OAAO;EACP,MAAM;EACN,YAAY;EACZ,OAAO;EACP,OAAO;EACP,QAAQ,EAAE,KAAK,MAAM,IAAI;CAC3B,GACA,OACF,IACA,CAAC;CACL,OAAO;EACL,SAAS,KAAK,MAAM,KAAK,UAAU,OAAO,CAAC;EAC3C,SAAS,KAAK,MAAM,KAAK,UAAU,UAAU,CAAC;EAC9C,aAAa,QAAQ,OAAO,MAAM,GAAG,IAAI;EACzC,WAAW,OAAO,OAAO,KAAK,GAAG,IAAI;EACrC,aAAa,UAAU,QAAQ,QAAQ,KAAA,IAAY,QAAQ,OAAO,MAAM,GAAG,IAAI;EAC/E,aAAa,SAAS,QAAQ,OAAO,QAAQ,KAAA,KAAa,OAAO,KAAK,GAAG,IAAI;EAC7E;CACF;AACF"}

package/dist/src/services/tunnelOutput/index.cjs

@@ -0,0 +1,58 @@
+//#region src/services/tunnelOutput/index.ts
+/**
+* A trycloudflare hostname, and nothing that merely ends near one.
+*
+* The trailing lookahead is the whole point. Without it,
+* `https://evil.trycloudflare.com.attacker.tld` printed by a confused or
+* hostile process would match, and the extracted value becomes the origin the
+* guard then trusts for every subsequent request.
+*/
+const QUICK_TUNNEL_URL = /https:\/\/[a-z0-9][a-z0-9-]*(?:\.[a-z0-9-]+)*\.trycloudflare\.com(?![a-z0-9.-])/iu;
+/** Cloudflare reports a connection registered; readiness waits for this as well as a URL. */
+const CONNECTION_READY = /registered tunnel connection|connection .* registered/iu;
+function tunnelTarget(port) {
+	return `http://127.0.0.1:${String(port)}`;
+}
+/**
+* The cloudflared argument vector.
+*
+* `--url` is a flag on the `tunnel` command rather than on `run`, so it comes
+* before the subcommand in both shapes. `--token-file` belongs to `run`.
+*
+* Flag placement here follows cloudflared's documented usage and local help.
+*/
+function tunnelArgs(config, port, tokenFile) {
+	const args = ["tunnel", "--no-autoupdate"];
+	if (config.kind === "named" && config.configFile !== void 0) args.push("--config", config.configFile);
+	args.push("--url", tunnelTarget(port));
+	if (config.kind === "quick") return args;
+	args.push("run");
+	if (tokenFile !== void 0 && tokenFile !== "") args.push("--token-file", tokenFile);
+	if (config.name !== void 0) args.push(config.name);
+	return args;
+}
+/** The public origin a quick tunnel announced, or undefined if this output does not carry one. */
+function extractTunnelUrl(text) {
+	return QUICK_TUNNEL_URL.exec(text)?.[0].toLowerCase();
+}
+function mentionsRegisteredConnection(text) {
+	return CONNECTION_READY.test(text);
+}
+/** Operator-facing copy for a failure, with the cause appended by the caller. */
+function describeTunnelFailure(failure) {
+	switch (failure) {
+		case "not_installed": return "cloudflared is not installed. Install it (brew install cloudflared) or set DOOMPI_CLOUDFLARED.";
+		case "spawn_failed": return "cloudflared could not be started.";
+		case "timeout": return "cloudflared did not report a public URL in time.";
+		case "self_test_failed": return "The tunnel came up unguarded and was closed immediately.";
+		case "exited": return "cloudflared stopped on its own.";
+	}
+}
+//#endregion
+exports.describeTunnelFailure = describeTunnelFailure;
+exports.extractTunnelUrl = extractTunnelUrl;
+exports.mentionsRegisteredConnection = mentionsRegisteredConnection;
+exports.tunnelArgs = tunnelArgs;
+exports.tunnelTarget = tunnelTarget;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/tunnelOutput/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":[],"sources":["../../../../src/services/tunnelOutput/index.ts"],"sourcesContent":["/**\n * Turning a tunnel configuration into a command line, and cloudflared's output\n * back into a public origin.\n *\n * The parsing half only exists for quick tunnels. A named tunnel is configured\n * with its hostname, so nothing has to be scraped and the origin is known\n * before the process starts. That difference is the strongest practical\n * argument for named mode: the banner cloudflared prints is an undocumented\n * detail of its logging, and a release that reformats it breaks quick mode\n * until the readiness deadline fires.\n */\n\nimport type { TunnelConfig, TunnelFailure } from '../../types/remote';\n\n/**\n * A trycloudflare hostname, and nothing that merely ends near one.\n *\n * The trailing lookahead is the whole point. Without it,\n * `https://evil.trycloudflare.com.attacker.tld` printed by a confused or\n * hostile process would match, and the extracted value becomes the origin the\n * guard then trusts for every subsequent request.\n */\nconst QUICK_TUNNEL_URL = /https:\\/\\/[a-z0-9][a-z0-9-]*(?:\\.[a-z0-9-]+)*\\.trycloudflare\\.com(?![a-z0-9.-])/iu;\n\n/** Cloudflare reports a connection registered; readiness waits for this as well as a URL. */\nconst CONNECTION_READY = /registered tunnel connection|connection .* registered/iu;\n\nexport function tunnelTarget(port: number): string {\n  return `http://127.0.0.1:${String(port)}`;\n}\n\n/**\n * The cloudflared argument vector.\n *\n * `--url` is a flag on the `tunnel` command rather than on `run`, so it comes\n * before the subcommand in both shapes. `--token-file` belongs to `run`.\n *\n * Flag placement here follows cloudflared's documented usage and local help.\n */\nexport function tunnelArgs(config: TunnelConfig, port: number, tokenFile?: string): string[] {\n  const args = ['tunnel', '--no-autoupdate'];\n  if (config.kind === 'named' && config.configFile !== undefined) args.push('--config', config.configFile);\n  args.push('--url', tunnelTarget(port));\n  if (config.kind === 'quick') return args;\n  args.push('run');\n  if (tokenFile !== undefined && tokenFile !== '') args.push('--token-file', tokenFile);\n  if (config.name !== undefined) args.push(config.name);\n  return args;\n}\n\n/** The public origin a quick tunnel announced, or undefined if this output does not carry one. */\nexport function extractTunnelUrl(text: string): string | undefined {\n  return QUICK_TUNNEL_URL.exec(text)?.[0].toLowerCase();\n}\n\nexport function mentionsRegisteredConnection(text: string): boolean {\n  return CONNECTION_READY.test(text);\n}\n\n/** Operator-facing copy for a failure, with the cause appended by the caller. */\nexport function describeTunnelFailure(failure: TunnelFailure): string {\n  switch (failure) {\n    case 'not_installed':\n      return 'cloudflared is not installed. Install it (brew install cloudflared) or set DOOMPI_CLOUDFLARED.';\n    case 'spawn_failed':\n      return 'cloudflared could not be started.';\n    case 'timeout':\n      return 'cloudflared did not report a public URL in time.';\n    case 'self_test_failed':\n      return 'The tunnel came up unguarded and was closed immediately.';\n    case 'exited':\n      return 'cloudflared stopped on its own.';\n  }\n}\n"],"mappings":";;;;;;;;;AAsBA,MAAM,mBAAmB;;AAGzB,MAAM,mBAAmB;AAEzB,SAAgB,aAAa,MAAsB;CACjD,OAAO,oBAAoB,OAAO,IAAI;AACxC;;;;;;;;;AAUA,SAAgB,WAAW,QAAsB,MAAc,WAA8B;CAC3F,MAAM,OAAO,CAAC,UAAU,iBAAiB;CACzC,IAAI,OAAO,SAAS,WAAW,OAAO,eAAe,KAAA,GAAW,KAAK,KAAK,YAAY,OAAO,UAAU;CACvG,KAAK,KAAK,SAAS,aAAa,IAAI,CAAC;CACrC,IAAI,OAAO,SAAS,SAAS,OAAO;CACpC,KAAK,KAAK,KAAK;CACf,IAAI,cAAc,KAAA,KAAa,cAAc,IAAI,KAAK,KAAK,gBAAgB,SAAS;CACpF,IAAI,OAAO,SAAS,KAAA,GAAW,KAAK,KAAK,OAAO,IAAI;CACpD,OAAO;AACT;;AAGA,SAAgB,iBAAiB,MAAkC;CACjE,OAAO,iBAAiB,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY;AACtD;AAEA,SAAgB,6BAA6B,MAAuB;CAClE,OAAO,iBAAiB,KAAK,IAAI;AACnC;;AAGA,SAAgB,sBAAsB,SAAgC;CACpE,QAAQ,SAAR;EACE,KAAK,iBACH,OAAO;EACT,KAAK,gBACH,OAAO;EACT,KAAK,WACH,OAAO;EACT,KAAK,oBACH,OAAO;EACT,KAAK,UACH,OAAO;CACX;AACF"}