@agimon-ai/po-core 0.0.0-alpha.0

package/dist/remoteRuntime.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteRuntime.mjs","names":["WebSocket"],"sources":["../src/server/remoteRuntime.ts"],"sourcesContent":["import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';\nimport { Readable } from 'node:stream';\nimport { pipeline } from 'node:stream/promises';\n\nimport { Hono } from 'hono';\nimport { getCookie } from 'hono/cookie';\nimport WebSocket, { WebSocketServer, type RawData } from 'ws';\n\nimport { DEVICE_COOKIE, REMOTE_CHANNEL_ROUTE, REMOTE_HTTP_ROUTE, STEP_UP_HEADER } from '../constants/remote';\nimport {\n  DOOM_API_CALLER_DEVICE_ID_HEADER,\n  DOOM_API_CALLER_LOCALITY_HEADER,\n  DOOM_API_CALLER_STEP_UP_HEADER,\n  parseDoomSocketPath,\n} from '../schemas/packageApi';\nimport { isDevProxyPath, parseProxyPath } from '../services/devProxyPolicy';\nimport { createDevProxyStore } from '../services/devProxyStore';\nimport { createPublicFileShares, PUBLIC_FILE_SHARE_PREFIX, type PublicFileShares } from '../services/publicFileShares';\nimport { createRemoteAccess, type RemoteAccess } from '../services/remoteAccess';\nimport { createRemoteAccessStore, defaultRemoteStateDir } from '../services/remoteAccessStore';\nimport {\n  isPublicPairingRoute,\n  originVerdict,\n  type GuardListener,\n  localOriginPolicy,\n} from '../services/remoteGuardPolicy';\nimport { createTunnelLauncher, reapStaleTunnel } from '../services/tunnelProcess';\nimport { stepUpActionFor } from '../services/webauthnPolicy';\nimport { type TunnelLauncher } from '../types/remote';\nimport { registerDevProxyRoutes } from './devProxyRoutes';\nimport { relayDevProxySocket } from './devProxySocket';\nimport { registerRemoteRoutes } from './remoteRoutes';\nimport { isPublicSessionMcpRoute, isSessionMcpHostRoute } from './sessionMcpRoutes';\n\nexport { relayDevProxySocket, type DevProxySocketInput } from './devProxySocket';\n\nconst MAX_REQUEST_BYTES = 8 * 1024 * 1024;\nconst TUNNEL_HEADERS_TIMEOUT_MS = 5_000;\nconst TUNNEL_REQUEST_TIMEOUT_MS = 10_000;\nconst TUNNEL_CONNECTION_LIMIT = 64;\nconst TUNNEL_REQUESTS_PER_SOCKET = 100;\nconst SEALED_HTTP_VERSION = 1;\nconst SEALED_HTTP_METHODS = new Set(['GET', 'HEAD', 'POST', 'PUT', 'PATCH', 'DELETE']);\n/** HMAC-authenticated peer routes are the only non-device tunnel APIs. */\nconst SESSION_PEER_INBOX_ROUTE = '/api/plugins/session-peer/inbox';\nconst VOICE_PEER_ROUTES = new Set(['/api/plugins/voice/peer', '/api/plugins/voice/peer-ownership']);\n/** The one public file share shape: a 256-bit base64url token and nothing after it. */\nconst PUBLIC_FILE_SHARE_ROUTE = /^\\/mcp-file\\/([A-Za-z0-9_-]{43})$/u;\n/** Everything under this name is reserved for shares, so a near miss never reaches another route. */\nconst PUBLIC_FILE_SHARE_NAMESPACE = PUBLIC_FILE_SHARE_PREFIX.slice(0, -1);\nconst FORBIDDEN_HEADERS = new Set([\n  'authorization',\n  'connection',\n  'content-length',\n  'cookie',\n  'forwarded',\n  'host',\n  'origin',\n  'transfer-encoding',\n  'upgrade',\n  'x-po-token',\n  'x-po-desktop',\n  DOOM_API_CALLER_LOCALITY_HEADER,\n  DOOM_API_CALLER_DEVICE_ID_HEADER,\n  DOOM_API_CALLER_STEP_UP_HEADER,\n  'x-forwarded-for',\n  'x-forwarded-host',\n  'x-forwarded-proto',\n]);\n\ninterface SealedHttpRequest {\n  v: number;\n  method: string;\n  target: string;\n  headers: Array<[string, string]>;\n  body?: string;\n}\n\nfunction sealedRequest(value: unknown): SealedHttpRequest | undefined {\n  if (typeof value !== 'object' || value === null) return undefined;\n  const request = value as Partial<SealedHttpRequest>;\n  if (\n    request.v !== SEALED_HTTP_VERSION ||\n    typeof request.method !== 'string' ||\n    !SEALED_HTTP_METHODS.has(request.method) ||\n    typeof request.target !== 'string' ||\n    !request.target.startsWith('/') ||\n    request.target.startsWith('//') ||\n    request.target.includes('#') ||\n    !Array.isArray(request.headers) ||\n    !request.headers.every(\n      (header) => Array.isArray(header) && header.length === 2 && header.every((part) => typeof part === 'string'),\n    ) ||\n    (request.body !== undefined && typeof request.body !== 'string')\n  )\n    return undefined;\n  const parsed = new URL(request.target, 'http://po.local');\n  if (parsed.pathname === REMOTE_HTTP_ROUTE || parsed.pathname === REMOTE_CHANNEL_ROUTE) return undefined;\n  return request as SealedHttpRequest;\n}\n\nfunction decodedBody(value: string | undefined): Buffer | undefined {\n  if (value === undefined) return Buffer.alloc(0);\n  if (!/^(?:[A-Za-z\\d+/]{4})*(?:[A-Za-z\\d+/]{2}==|[A-Za-z\\d+/]{3}=)?$/u.test(value)) return undefined;\n  const body = Buffer.from(value, 'base64');\n  return body.toString('base64') === value ? body : undefined;\n}\n\ninterface ListenerBindings {\n  listener: GuardListener;\n  incoming?: IncomingMessage;\n  sealedDeviceId?: string;\n  /** Whether the sealed gateway verified a step-up for this re-dispatched request. */\n  sealedStepUp?: 'verified' | 'not-required';\n}\n\nexport interface RemoteRuntimeOptions {\n  homeDirectory: string;\n  registrationToken: string;\n  bundleTrust(): { publicKey: string; revision: number } | undefined;\n  /** Signs `po/host-channel-key/v1` fields with the shell signer, for native device reconnects. */\n  attestHost?: (fields: readonly string[]) => string | undefined;\n  onNotice(message: string): void;\n  /** The listener to which a sealed, authenticated request is forwarded. */\n  forward(request: Request): Promise<Response>;\n  connectProtocol(pathname: string, deviceId?: string): WebSocket;\n  onDeviceDropped?: (deviceId: string) => void;\n  launchTunnel?: TunnelLauncher;\n  /** Ports the host itself listens on, which a dev proxy target may never name. */\n  reservedPorts?: () => readonly (number | undefined)[];\n}\n\nexport interface RemoteRuntime {\n  readonly remote: RemoteAccess;\n  /** Short-lived public links served by the tunnel listener itself, never forwarded to the hub. */\n  readonly fileShares: PublicFileShares;\n  fetchLocal(request: Request): Promise<Response>;\n  close(): Promise<void>;\n}\n\nasync function readBody(request: IncomingMessage): Promise<Buffer> {\n  const chunks: Buffer[] = [];\n  let size = 0;\n  for await (const chunk of request) {\n    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);\n    size += bytes.byteLength;\n    if (size > MAX_REQUEST_BYTES) throw new Error('The tunnel request body is too large.');\n    chunks.push(bytes);\n  }\n  return Buffer.concat(chunks);\n}\n\nasync function writeResponse(response: ServerResponse, result: Response): Promise<void> {\n  response.writeHead(result.status, Object.fromEntries(result.headers.entries()));\n  if (result.body === null) {\n    response.end();\n    return;\n  }\n  await pipeline(Readable.fromWeb(result.body as import('node:stream/web').ReadableStream), response);\n}\n\n/** One global control plane and a second socket dedicated to public tunnel traffic. */\nexport function createRemoteRuntime(options: RemoteRuntimeOptions): RemoteRuntime {\n  const store = createRemoteAccessStore({\n    stateDir: defaultRemoteStateDir(options.homeDirectory),\n    onNotice: (message) => options.onNotice(message),\n  });\n  reapStaleTunnel(store.directory, (message) => options.onNotice(message));\n  const devProxy = createDevProxyStore({ stateDir: store.directory, onNotice: (message) => options.onNotice(message) });\n  const app = new Hono<{ Bindings: ListenerBindings }>();\n  let remote: RemoteAccess;\n  let frontendOrigin: string | undefined;\n  const fileShares = createPublicFileShares({\n    publicOrigin: () => remote.publicOrigin(),\n    publicOriginRevision: () => remote.publicOriginRevision(),\n    onNotice: (message) => options.onNotice(message),\n  });\n  /** Exact share route on the decoded path, and the raw path must not have needed decoding. */\n  const publicFileShareToken = (request: Request, path: string): string | undefined =>\n    new URL(request.url).pathname === path ? PUBLIC_FILE_SHARE_ROUTE.exec(path)?.[1] : undefined;\n  const inFileShareNamespace = (request: Request, path: string): boolean =>\n    path.startsWith(PUBLIC_FILE_SHARE_NAMESPACE) ||\n    new URL(request.url).pathname.startsWith(PUBLIC_FILE_SHARE_NAMESPACE);\n  app.use('*', async (context, next) => {\n    if (context.env.listener === 'local') return next();\n    const path = context.req.path;\n    const publicSessionMcp = isPublicSessionMcpRoute(context.req.method, path);\n    const publicSessionPeer = context.req.method === 'POST' && path === SESSION_PEER_INBOX_ROUTE;\n    const publicVoicePeer = context.req.method === 'POST' && VOICE_PEER_ROUTES.has(path);\n    const publicFileShare =\n      (context.req.method === 'GET' || context.req.method === 'HEAD') &&\n      publicFileShareToken(context.req.raw, path) !== undefined;\n    const verdict = originVerdict({\n      listener: 'tunnel',\n      // Exact OAuth, MCP, and HMAC-authenticated peer routes authenticate at the\n      // application layer. Treat an absent Origin like a server-to-server read.\n      method: publicSessionMcp || publicSessionPeer || publicVoicePeer ? 'GET' : context.req.method,\n      isUpgrade: false,\n      origin: context.req.header('origin'),\n      host: context.req.header('host'),\n      local: localOriginPolicy(0),\n      tunnel: remote.tunnelPolicy(),\n    });\n    if (verdict !== 'allow') return context.json({ error: `Tunnel request refused: ${verdict}.` }, 403);\n    // The token is the credential, so a share needs no device. Near misses never fall through.\n    if (publicFileShare) return next();\n    if (inFileShareNamespace(context.req.raw, path)) return context.json({ error: 'Not found.' }, 404);\n    if (isPublicPairingRoute(context.req.method, path) || publicSessionMcp || publicSessionPeer || publicVoicePeer)\n      return next();\n    const device = remote.authorize(getCookie(context, DEVICE_COOKIE, 'host'));\n    if (device === undefined) return context.json({ error: 'This device is not paired.' }, 401);\n    if (context.env.sealedDeviceId === device) return next();\n    // A proxied dev site issues its own subresource requests and form posts, none of which can go\n    // through a gateway that seals whole JSON responses. The same predicate the proxy route uses\n    // refuses dot segments, so a path granted here cannot resolve into /api/.\n    if (isDevProxyPath(path)) return next();\n    if (context.req.method === 'POST' && (path === REMOTE_CHANNEL_ROUTE || path === REMOTE_HTTP_ROUTE)) return next();\n    if ((context.req.method === 'GET' || context.req.method === 'HEAD') && !path.startsWith('/api/')) return next();\n    return context.json({ error: 'Remote HTTP requests must use the sealed gateway.' }, 401);\n  });\n\n  remote = createRemoteAccess({\n    store,\n    onDeviceDropped: options.onDeviceDropped,\n    launchTunnel:\n      options.launchTunnel ??\n      createTunnelLauncher({\n        stateDir: store.directory,\n        onNotice: (message) => options.onNotice(message),\n        onExit: (message) => {\n          options.onNotice(`remote access: ${message}`);\n          void remote.disable();\n        },\n      }),\n    bindListener: async () => {\n      const webSockets = new WebSocketServer({ noServer: true, maxPayload: MAX_REQUEST_BYTES });\n      const server = createServer((incoming, outgoing) => {\n        void (async () => {\n          const abort = new AbortController();\n          const disconnected = (): void => abort.abort();\n          incoming.once('aborted', disconnected);\n          outgoing.once('close', disconnected);\n          try {\n            const url = new URL(incoming.url ?? '/', `http://${incoming.headers.host ?? 'localhost'}`);\n            const headers = new Headers();\n            for (const [name, value] of Object.entries(incoming.headers))\n              if (value !== undefined) headers.set(name, Array.isArray(value) ? value.join(', ') : value);\n            const body = incoming.method === 'GET' || incoming.method === 'HEAD' ? undefined : await readBody(incoming);\n            const request = new Request(url, {\n              method: incoming.method,\n              headers,\n              signal: abort.signal,\n              ...(body === undefined ? {} : { body }),\n            });\n            await writeResponse(outgoing, await app.fetch(request, { listener: 'tunnel', incoming }));\n          } finally {\n            incoming.off('aborted', disconnected);\n            outgoing.off('close', disconnected);\n          }\n        })().catch((error: unknown) => {\n          options.onNotice(`tunnel request failed: ${String(error)}`);\n          if (!outgoing.headersSent) {\n            outgoing.writeHead(500, { 'content-type': 'application/json' });\n            outgoing.end(JSON.stringify({ error: 'The tunnel request failed.' }));\n          } else outgoing.destroy();\n        });\n      });\n      server.on('upgrade', (incoming, socket, head) => {\n        const url = new URL(incoming.url ?? '/', `http://${incoming.headers.host ?? 'localhost'}`);\n        const verdict = originVerdict({\n          listener: 'tunnel',\n          method: incoming.method ?? 'GET',\n          isUpgrade: true,\n          origin: incoming.headers.origin,\n          host: incoming.headers.host,\n          local: localOriginPolicy(0),\n          tunnel: remote.tunnelPolicy(),\n        });\n        const cookies = new Map(\n          (incoming.headers.cookie ?? '').split(';').map((part) => {\n            const at = part.indexOf('=');\n            return [part.slice(0, at).trim(), part.slice(at + 1).trim()];\n          }),\n        );\n        const device = remote.authorize(cookies.get(`__Host-${DEVICE_COOKIE}`));\n        // Hot module reload: a paired device's dev-site socket goes to the registered target.\n        if (isDevProxyPath(url.pathname) && verdict === 'allow' && device !== undefined) {\n          const parsed = parseProxyPath(url.pathname);\n          const target = parsed.kind === 'match' ? devProxy.find(parsed.name) : undefined;\n          if (parsed.kind !== 'match' || target === undefined) {\n            socket.write('HTTP/1.1 404 Not Found\\r\\n\\r\\n');\n            socket.destroy();\n            return;\n          }\n          webSockets.handleUpgrade(incoming, socket, head, (client) => {\n            const untrack = remote.trackSocket(device, (code, reason) => client.close(code, reason));\n            client.once('close', untrack);\n            relayDevProxySocket(client, {\n              port: target.port,\n              upstreamPath: `${parsed.upstreamPath}${url.search}`,\n              protocols: incoming.headers['sec-websocket-protocol'],\n              onNotice: (message) => options.onNotice(message),\n            });\n          });\n          return;\n        }\n        const channel = device === undefined ? undefined : remote.channelFor(device, 'protocol');\n        if (!parseDoomSocketPath(url.pathname) || verdict !== 'allow' || !device || !channel) {\n          socket.write('HTTP/1.1 403 Forbidden\\r\\n\\r\\n');\n          socket.destroy();\n          return;\n        }\n        webSockets.handleUpgrade(incoming, socket, head, (client) => {\n          let upstream: WebSocket;\n          try {\n            upstream = options.connectProtocol(url.pathname, device);\n          } catch (error) {\n            options.onNotice(`remote protocol could not connect: ${String(error)}`);\n            client.close(1011, 'protocol unavailable');\n            return;\n          }\n          const pending: Buffer[] = [];\n          let pendingBytes = 0;\n          let closed = false;\n          const untrack = remote.trackSocket(device, (code, reason) => client.close(code, reason));\n          const close = (): void => {\n            if (closed) return;\n            closed = true;\n            untrack();\n            client.close();\n            upstream.close();\n          };\n          client.on('message', (raw: RawData) => {\n            if (closed) return;\n            if (!remote.isDeviceAuthorized(device)) {\n              close();\n              return;\n            }\n            const bytes = Array.isArray(raw) ? Buffer.concat(raw) : Buffer.from(raw as Buffer);\n            let envelope: unknown;\n            try {\n              envelope = JSON.parse(bytes.toString('utf8')) as unknown;\n            } catch {\n              close();\n              return;\n            }\n            const opened = channel.open(envelope);\n            if (!opened.ok) {\n              close();\n              return;\n            }\n            const plain = Buffer.from(opened.plaintext);\n            if (upstream.readyState === WebSocket.OPEN) upstream.send(plain);\n            else {\n              pendingBytes += plain.byteLength;\n              if (pendingBytes > MAX_REQUEST_BYTES) close();\n              else pending.push(plain);\n            }\n          });\n          upstream.on('open', () => {\n            for (const bytes of pending) upstream.send(bytes);\n            pending.length = 0;\n            pendingBytes = 0;\n          });\n          upstream.on('message', (raw: RawData) => {\n            if (closed) return;\n            const plain = Array.isArray(raw) ? Buffer.concat(raw) : Buffer.from(raw as Buffer);\n            const sealed = channel.seal(plain);\n            if (!sealed.ok) {\n              close();\n              return;\n            }\n            client.send(Buffer.from(JSON.stringify(sealed.envelope)));\n          });\n          client.on('close', close);\n          client.on('error', close);\n          upstream.on('close', close);\n          upstream.on('error', (error) => {\n            options.onNotice(`remote protocol failed: ${error.message}`);\n            close();\n          });\n        });\n      });\n      server.headersTimeout = TUNNEL_HEADERS_TIMEOUT_MS;\n      server.requestTimeout = TUNNEL_REQUEST_TIMEOUT_MS;\n      server.maxConnections = TUNNEL_CONNECTION_LIMIT;\n      server.maxRequestsPerSocket = TUNNEL_REQUESTS_PER_SOCKET;\n      await new Promise<void>((resolve, reject) => {\n        server.once('error', reject);\n        server.listen(0, '127.0.0.1', resolve);\n      });\n      const address = server.address();\n      if (!address || typeof address === 'string') throw new Error('The tunnel listener has no TCP address.');\n      return {\n        port: address.port,\n        close: async () => {\n          for (const client of webSockets.clients) client.terminate();\n          webSockets.close();\n          server.closeAllConnections();\n          await new Promise<void>((resolve, reject) => server.close((error) => (error ? reject(error) : resolve())));\n        },\n      };\n    },\n    bundleTrust: () => options.bundleTrust(),\n    attestHost: (fields) => options.attestHost?.(fields),\n    onNotice: (message) => options.onNotice(message),\n  });\n  registerRemoteRoutes(app as unknown as Hono, {\n    remote,\n    listenerOf: (context) => (context.env as ListenerBindings).listener,\n  });\n  registerDevProxyRoutes(app as unknown as Hono, {\n    store: devProxy,\n    listenerOf: (context) => (context.env as ListenerBindings).listener,\n    // Read per call: the tunnel port exists only while remote access is on, and a target checked\n    // against a stale list could end up aimed at the cockpit itself.\n    reservedPorts: () => [\n      remote.tunnelPort(),\n      frontendOrigin === undefined ? undefined : Number(new URL(frontendOrigin).port),\n      ...(options.reservedPorts?.() ?? []),\n    ],\n    onNotice: (message) => options.onNotice(message),\n  });\n  app.post('/api/remote/frontend', async (context) => {\n    if (context.env.listener !== 'local')\n      return context.json({ error: 'This action is only available on the host.' }, 403);\n    if (context.req.header('x-po-web-registration') !== options.registrationToken)\n      return context.json({ error: 'The web presentation server was not authenticated.' }, 403);\n    let body: unknown;\n    try {\n      body = await context.req.json();\n    } catch {\n      return context.json({ error: 'A loopback web origin is required.' }, 400);\n    }\n    const origin = typeof body === 'object' && body !== null && 'origin' in body ? body.origin : undefined;\n    if (typeof origin !== 'string') return context.json({ error: 'A loopback web origin is required.' }, 400);\n    let parsed: URL;\n    try {\n      parsed = new URL(origin);\n    } catch {\n      return context.json({ error: 'The web origin is invalid.' }, 400);\n    }\n    if (\n      parsed.protocol !== 'http:' ||\n      !['127.0.0.1', 'localhost', '[::1]'].includes(parsed.hostname) ||\n      parsed.pathname !== '/' ||\n      parsed.search !== '' ||\n      parsed.hash !== '' ||\n      !parsed.port\n    )\n      return context.json({ error: 'The web origin must be a loopback HTTP listener.' }, 400);\n    frontendOrigin = parsed.origin;\n    return context.json({ ok: true });\n  });\n  app.post(REMOTE_HTTP_ROUTE, async (context) => {\n    const device = remote.authorize(getCookie(context, DEVICE_COOKIE, 'host'));\n    const channel = device === undefined ? undefined : remote.channelFor(device, 'http');\n    if (!device || !channel) return context.json({ error: 'A sealed paired device is required.' }, 401);\n    let envelope: unknown;\n    try {\n      envelope = await context.req.json();\n    } catch {\n      return context.json({ error: 'The sealed request envelope was malformed.' }, 400);\n    }\n    const opened = channel.open(envelope);\n    if (!opened.ok) return context.json({ error: `The sealed request was refused: ${opened.failure}.` }, 400);\n    let decoded: unknown;\n    try {\n      decoded = JSON.parse(new TextDecoder().decode(opened.plaintext)) as unknown;\n    } catch {\n      return context.json({ error: 'The sealed HTTP request was malformed.' }, 400);\n    }\n    const inner = sealedRequest(decoded);\n    const body = decodedBody(inner?.body);\n    if (!inner || !body) return context.json({ error: 'The sealed HTTP request was invalid.' }, 400);\n    const target = new URL(inner.target, 'http://po.local');\n    const headers = new Headers();\n    for (const [name, value] of inner.headers) {\n      const normalized = name.toLowerCase();\n      if (FORBIDDEN_HEADERS.has(normalized) || normalized.startsWith('sec-')) continue;\n      headers.append(name, value);\n    }\n    const action = stepUpActionFor(inner.method, target.pathname);\n    const stepUpKind = remote.trustKind(device) === 'device-key' ? 'device-key' : 'passkey';\n    const stepUpNeeded = action !== undefined && remote.stepUpRequired(action, device);\n    let stepUpDenied = false;\n    if (action && stepUpNeeded) {\n      const assertion = headers.get(STEP_UP_HEADER);\n      let credential: unknown;\n      try {\n        credential = assertion ? JSON.parse(Buffer.from(assertion, 'base64url').toString('utf8')) : undefined;\n      } catch {\n        credential = undefined;\n      }\n      const ceremony = credential as { ceremonyId?: unknown; response?: unknown; signature?: unknown } | undefined;\n      if (stepUpKind === 'device-key') {\n        // A device-key session proves the gesture with its biometric key, never a passkey.\n        stepUpDenied = !remote.finishDeviceStepUp(device, action, ceremony?.ceremonyId, ceremony?.signature);\n      } else if (\n        typeof ceremony?.ceremonyId !== 'string' ||\n        !(await remote.passkeys().finishStepUp(ceremony.ceremonyId, `device:${device}`, action, ceremony.response))\n      )\n        stepUpDenied = true;\n    }\n    headers.delete(STEP_UP_HEADER);\n    const sealedStepUp = stepUpNeeded && !stepUpDenied ? 'verified' : 'not-required';\n    // Caller stamps are assigned after the sealed request is opened. They never\n    // originate from browser-controlled sealed headers.\n    headers.set(DOOM_API_CALLER_LOCALITY_HEADER, 'remote');\n    headers.set(DOOM_API_CALLER_DEVICE_ID_HEADER, device);\n    headers.set(DOOM_API_CALLER_STEP_UP_HEADER, sealedStepUp);\n    let response: Response;\n    if (stepUpDenied) {\n      const gesture = stepUpKind === 'device-key' ? 'biometric confirmation' : 'passkey gesture';\n      response = context.json({ error: `This action needs a fresh ${gesture}.`, action, kind: stepUpKind }, 401);\n    } else if (isSessionMcpHostRoute(target.pathname)) {\n      response = context.json({ error: 'Session MCP management is only available on the host.' }, 403);\n    } else {\n      const internal = new Request(target, {\n        method: inner.method,\n        headers,\n        ...(inner.method === 'GET' || inner.method === 'HEAD' ? {} : { body }),\n      });\n      if (target.pathname === '/api/remote' || target.pathname.startsWith('/api/remote/')) {\n        headers.set('cookie', context.req.header('cookie') ?? '');\n        headers.set('host', context.req.header('host') ?? '');\n        headers.set('origin', context.req.header('origin') ?? '');\n        response = await app.fetch(new Request(internal, { headers }), {\n          listener: 'tunnel',\n          sealedDeviceId: device,\n          sealedStepUp,\n        });\n      } else response = await options.forward(internal);\n    }\n    const responseBody = Buffer.from(await response.arrayBuffer());\n    const sealed = channel.seal(\n      new TextEncoder().encode(\n        JSON.stringify({\n          v: SEALED_HTTP_VERSION,\n          status: response.status,\n          headers: [...response.headers.entries()],\n          body: responseBody.toString('base64'),\n        }),\n      ),\n    );\n    return sealed.ok\n      ? context.json(sealed.envelope)\n      : context.json({ error: `The sealed response failed: ${sealed.failure}.` }, 503);\n  });\n  app.on(['POST', 'DELETE'], '*', async (context) => {\n    if (\n      !isPublicSessionMcpRoute(context.req.method, context.req.path) &&\n      !(context.req.method === 'POST' && context.req.path === SESSION_PEER_INBOX_ROUTE) &&\n      !(context.req.method === 'POST' && VOICE_PEER_ROUTES.has(context.req.path))\n    )\n      return context.notFound();\n    return options.forward(context.req.raw);\n  });\n  app.on(['GET', 'HEAD'], '*', async (context) => {\n    // Served here and never through forward(), which would attach the host token.\n    if (inFileShareNamespace(context.req.raw, context.req.path)) {\n      const token = publicFileShareToken(context.req.raw, context.req.path);\n      return context.env.listener === 'tunnel' && token !== undefined\n        ? fileShares.serve(token, context.req.method)\n        : context.json({ error: 'Not found.' }, 404);\n    }\n    if (isPublicSessionMcpRoute(context.req.method, context.req.path)) return options.forward(context.req.raw);\n    if (context.req.path.startsWith('/api/')) return context.json({ error: 'Not found.' }, 404);\n    if (context.req.path === '/' && remote.authorize(getCookie(context, DEVICE_COOKIE, 'host')) === undefined)\n      return context.redirect('/pair');\n    if (context.req.path === '/bundle-manifest.json' || context.req.path.startsWith('/bundle-assets/')) {\n      const from = new URL(context.req.url);\n      return await options.forward(\n        new Request(new URL(`${from.pathname}${from.search}`, 'http://po.local'), {\n          method: context.req.method,\n        }),\n      );\n    }\n    if (!frontendOrigin) return context.json({ error: 'The web presentation server is unavailable.' }, 503);\n    const from = new URL(context.req.url);\n    const target = new URL(`${from.pathname}${from.search}`, frontendOrigin);\n    const result = await fetch(target, { method: context.req.method, redirect: 'manual' });\n    const headers = new Headers(result.headers);\n    headers.delete('set-cookie');\n    return new Response(result.body, { status: result.status, headers });\n  });\n\n  return {\n    remote,\n    fileShares,\n    fetchLocal: async (request) => app.fetch(request, { listener: 'local' }),\n    close: async () => remote.close(),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAoCA,MAAM,oBAAoB;AAC1B,MAAM,4BAA4B;AAClC,MAAM,4BAA4B;AAClC,MAAM,0BAA0B;AAChC,MAAM,6BAA6B;AACnC,MAAM,sBAAsB;AAC5B,MAAM,sCAAsB,IAAI,IAAI;CAAC;CAAO;CAAQ;CAAQ;CAAO;CAAS;AAAQ,CAAC;;AAErF,MAAM,2BAA2B;AACjC,MAAM,oCAAoB,IAAI,IAAI,CAAC,2BAA2B,mCAAmC,CAAC;;AAElG,MAAM,0BAA0B;;AAEhC,MAAM,8BAA8B,yBAAyB,MAAM,GAAG,EAAE;AACxE,MAAM,oCAAoB,IAAI,IAAI;CAChC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;AAUD,SAAS,cAAc,OAA+C;CACpE,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM,OAAO,KAAA;CACxD,MAAM,UAAU;CAChB,IACE,QAAQ,MAAM,uBACd,OAAO,QAAQ,WAAW,YAC1B,CAAC,oBAAoB,IAAI,QAAQ,MAAM,KACvC,OAAO,QAAQ,WAAW,YAC1B,CAAC,QAAQ,OAAO,WAAW,GAAG,KAC9B,QAAQ,OAAO,WAAW,IAAI,KAC9B,QAAQ,OAAO,SAAS,GAAG,KAC3B,CAAC,MAAM,QAAQ,QAAQ,OAAO,KAC9B,CAAC,QAAQ,QAAQ,OACd,WAAW,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,KAAK,OAAO,OAAO,SAAS,OAAO,SAAS,QAAQ,CAC7G,KACC,QAAQ,SAAS,KAAA,KAAa,OAAO,QAAQ,SAAS,UAEvD,OAAO,KAAA;CACT,MAAM,SAAS,IAAI,IAAI,QAAQ,QAAQ,iBAAiB;CACxD,IAAI,OAAO,aAAa,qBAAqB,OAAO,aAAa,sBAAsB,OAAO,KAAA;CAC9F,OAAO;AACT;AAEA,SAAS,YAAY,OAA+C;CAClE,IAAI,UAAU,KAAA,GAAW,OAAO,OAAO,MAAM,CAAC;CAC9C,IAAI,CAAC,iEAAiE,KAAK,KAAK,GAAG,OAAO,KAAA;CAC1F,MAAM,OAAO,OAAO,KAAK,OAAO,QAAQ;CACxC,OAAO,KAAK,SAAS,QAAQ,MAAM,QAAQ,OAAO,KAAA;AACpD;AAkCA,eAAe,SAAS,SAA2C;CACjE,MAAM,SAAmB,CAAC;CAC1B,IAAI,OAAO;CACX,WAAW,MAAM,SAAS,SAAS;EACjC,MAAM,QAAQ,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK;EAChE,QAAQ,MAAM;EACd,IAAI,OAAO,mBAAmB,MAAM,IAAI,MAAM,uCAAuC;EACrF,OAAO,KAAK,KAAK;CACnB;CACA,OAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,eAAe,cAAc,UAA0B,QAAiC;CACtF,SAAS,UAAU,OAAO,QAAQ,OAAO,YAAY,OAAO,QAAQ,QAAQ,CAAC,CAAC;CAC9E,IAAI,OAAO,SAAS,MAAM;EACxB,SAAS,IAAI;EACb;CACF;CACA,MAAM,SAAS,SAAS,QAAQ,OAAO,IAAgD,GAAG,QAAQ;AACpG;;AAGA,SAAgB,oBAAoB,SAA8C;CAChF,MAAM,QAAQ,wBAAwB;EACpC,UAAU,sBAAsB,QAAQ,aAAa;EACrD,WAAW,YAAY,QAAQ,SAAS,OAAO;CACjD,CAAC;CACD,gBAAgB,MAAM,YAAY,YAAY,QAAQ,SAAS,OAAO,CAAC;CACvE,MAAM,WAAW,oBAAoB;EAAE,UAAU,MAAM;EAAW,WAAW,YAAY,QAAQ,SAAS,OAAO;CAAE,CAAC;CACpH,MAAM,MAAM,IAAI,KAAqC;CACrD,IAAI;CACJ,IAAI;CACJ,MAAM,aAAa,uBAAuB;EACxC,oBAAoB,OAAO,aAAa;EACxC,4BAA4B,OAAO,qBAAqB;EACxD,WAAW,YAAY,QAAQ,SAAS,OAAO;CACjD,CAAC;;CAED,MAAM,wBAAwB,SAAkB,SAC9C,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,aAAa,OAAO,wBAAwB,KAAK,IAAI,CAAC,GAAG,KAAK,KAAA;CACrF,MAAM,wBAAwB,SAAkB,SAC9C,KAAK,WAAW,2BAA2B,KAC3C,IAAI,IAAI,QAAQ,GAAG,CAAC,CAAC,SAAS,WAAW,2BAA2B;CACtE,IAAI,IAAI,KAAK,OAAO,SAAS,SAAS;EACpC,IAAI,QAAQ,IAAI,aAAa,SAAS,OAAO,KAAK;EAClD,MAAM,OAAO,QAAQ,IAAI;EACzB,MAAM,mBAAmB,wBAAwB,QAAQ,IAAI,QAAQ,IAAI;EACzE,MAAM,oBAAoB,QAAQ,IAAI,WAAW,UAAU,SAAS;EACpE,MAAM,kBAAkB,QAAQ,IAAI,WAAW,UAAU,kBAAkB,IAAI,IAAI;EACnF,MAAM,mBACH,QAAQ,IAAI,WAAW,SAAS,QAAQ,IAAI,WAAW,WACxD,qBAAqB,QAAQ,IAAI,KAAK,IAAI,MAAM,KAAA;EAClD,MAAM,UAAU,cAAc;GAC5B,UAAU;GAGV,QAAQ,oBAAoB,qBAAqB,kBAAkB,QAAQ,QAAQ,IAAI;GACvF,WAAW;GACX,QAAQ,QAAQ,IAAI,OAAO,QAAQ;GACnC,MAAM,QAAQ,IAAI,OAAO,MAAM;GAC/B,OAAO,kBAAkB,CAAC;GAC1B,QAAQ,OAAO,aAAa;EAC9B,CAAC;EACD,IAAI,YAAY,SAAS,OAAO,QAAQ,KAAK,EAAE,OAAO,2BAA2B,QAAQ,GAAG,GAAG,GAAG;EAElG,IAAI,iBAAiB,OAAO,KAAK;EACjC,IAAI,qBAAqB,QAAQ,IAAI,KAAK,IAAI,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,aAAa,GAAG,GAAG;EACjG,IAAI,qBAAqB,QAAQ,IAAI,QAAQ,IAAI,KAAK,oBAAoB,qBAAqB,iBAC7F,OAAO,KAAK;EACd,MAAM,SAAS,OAAO,UAAU,UAAU,SAAS,eAAe,MAAM,CAAC;EACzE,IAAI,WAAW,KAAA,GAAW,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;EAC1F,IAAI,QAAQ,IAAI,mBAAmB,QAAQ,OAAO,KAAK;EAIvD,IAAI,eAAe,IAAI,GAAG,OAAO,KAAK;EACtC,IAAI,QAAQ,IAAI,WAAW,WAAW,SAAS,wBAAwB,SAAS,oBAAoB,OAAO,KAAK;EAChH,KAAK,QAAQ,IAAI,WAAW,SAAS,QAAQ,IAAI,WAAW,WAAW,CAAC,KAAK,WAAW,OAAO,GAAG,OAAO,KAAK;EAC9G,OAAO,QAAQ,KAAK,EAAE,OAAO,oDAAoD,GAAG,GAAG;CACzF,CAAC;CAED,SAAS,mBAAmB;EAC1B;EACA,iBAAiB,QAAQ;EACzB,cACE,QAAQ,gBACR,qBAAqB;GACnB,UAAU,MAAM;GAChB,WAAW,YAAY,QAAQ,SAAS,OAAO;GAC/C,SAAS,YAAY;IACnB,QAAQ,SAAS,kBAAkB,SAAS;IAC5C,OAAY,QAAQ;GACtB;EACF,CAAC;EACH,cAAc,YAAY;GACxB,MAAM,aAAa,IAAI,gBAAgB;IAAE,UAAU;IAAM,YAAY;GAAkB,CAAC;GACxF,MAAM,SAAS,cAAc,UAAU,aAAa;IAClD,CAAM,YAAY;KAChB,MAAM,QAAQ,IAAI,gBAAgB;KAClC,MAAM,qBAA2B,MAAM,MAAM;KAC7C,SAAS,KAAK,WAAW,YAAY;KACrC,SAAS,KAAK,SAAS,YAAY;KACnC,IAAI;MACF,MAAM,MAAM,IAAI,IAAI,SAAS,OAAO,KAAK,UAAU,SAAS,QAAQ,QAAQ,aAAa;MACzF,MAAM,UAAU,IAAI,QAAQ;MAC5B,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,SAAS,OAAO,GACzD,IAAI,UAAU,KAAA,GAAW,QAAQ,IAAI,MAAM,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK;MAC5F,MAAM,OAAO,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,KAAA,IAAY,MAAM,SAAS,QAAQ;MAC1G,MAAM,UAAU,IAAI,QAAQ,KAAK;OAC/B,QAAQ,SAAS;OACjB;OACA,QAAQ,MAAM;OACd,GAAI,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK;MACvC,CAAC;MACD,MAAM,cAAc,UAAU,MAAM,IAAI,MAAM,SAAS;OAAE,UAAU;OAAU;MAAS,CAAC,CAAC;KAC1F,UAAU;MACR,SAAS,IAAI,WAAW,YAAY;MACpC,SAAS,IAAI,SAAS,YAAY;KACpC;IACF,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;KAC7B,QAAQ,SAAS,0BAA0B,OAAO,KAAK,GAAG;KAC1D,IAAI,CAAC,SAAS,aAAa;MACzB,SAAS,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;MAC9D,SAAS,IAAI,KAAK,UAAU,EAAE,OAAO,6BAA6B,CAAC,CAAC;KACtE,OAAO,SAAS,QAAQ;IAC1B,CAAC;GACH,CAAC;GACD,OAAO,GAAG,YAAY,UAAU,QAAQ,SAAS;IAC/C,MAAM,MAAM,IAAI,IAAI,SAAS,OAAO,KAAK,UAAU,SAAS,QAAQ,QAAQ,aAAa;IACzF,MAAM,UAAU,cAAc;KAC5B,UAAU;KACV,QAAQ,SAAS,UAAU;KAC3B,WAAW;KACX,QAAQ,SAAS,QAAQ;KACzB,MAAM,SAAS,QAAQ;KACvB,OAAO,kBAAkB,CAAC;KAC1B,QAAQ,OAAO,aAAa;IAC9B,CAAC;IACD,MAAM,UAAU,IAAI,KACjB,SAAS,QAAQ,UAAU,GAAA,CAAI,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS;KACvD,MAAM,KAAK,KAAK,QAAQ,GAAG;KAC3B,OAAO,CAAC,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,KAAK,MAAM,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7D,CAAC,CACH;IACA,MAAM,SAAS,OAAO,UAAU,QAAQ,IAAI,UAAU,eAAe,CAAC;IAEtE,IAAI,eAAe,IAAI,QAAQ,KAAK,YAAY,WAAW,WAAW,KAAA,GAAW;KAC/E,MAAM,SAAS,eAAe,IAAI,QAAQ;KAC1C,MAAM,SAAS,OAAO,SAAS,UAAU,SAAS,KAAK,OAAO,IAAI,IAAI,KAAA;KACtE,IAAI,OAAO,SAAS,WAAW,WAAW,KAAA,GAAW;MACnD,OAAO,MAAM,gCAAgC;MAC7C,OAAO,QAAQ;MACf;KACF;KACA,WAAW,cAAc,UAAU,QAAQ,OAAO,WAAW;MAC3D,MAAM,UAAU,OAAO,YAAY,SAAS,MAAM,WAAW,OAAO,MAAM,MAAM,MAAM,CAAC;MACvF,OAAO,KAAK,SAAS,OAAO;MAC5B,oBAAoB,QAAQ;OAC1B,MAAM,OAAO;OACb,cAAc,GAAG,OAAO,eAAe,IAAI;OAC3C,WAAW,SAAS,QAAQ;OAC5B,WAAW,YAAY,QAAQ,SAAS,OAAO;MACjD,CAAC;KACH,CAAC;KACD;IACF;IACA,MAAM,UAAU,WAAW,KAAA,IAAY,KAAA,IAAY,OAAO,WAAW,QAAQ,UAAU;IACvF,IAAI,CAAC,oBAAoB,IAAI,QAAQ,KAAK,YAAY,WAAW,CAAC,UAAU,CAAC,SAAS;KACpF,OAAO,MAAM,gCAAgC;KAC7C,OAAO,QAAQ;KACf;IACF;IACA,WAAW,cAAc,UAAU,QAAQ,OAAO,WAAW;KAC3D,IAAI;KACJ,IAAI;MACF,WAAW,QAAQ,gBAAgB,IAAI,UAAU,MAAM;KACzD,SAAS,OAAO;MACd,QAAQ,SAAS,sCAAsC,OAAO,KAAK,GAAG;MACtE,OAAO,MAAM,MAAM,sBAAsB;MACzC;KACF;KACA,MAAM,UAAoB,CAAC;KAC3B,IAAI,eAAe;KACnB,IAAI,SAAS;KACb,MAAM,UAAU,OAAO,YAAY,SAAS,MAAM,WAAW,OAAO,MAAM,MAAM,MAAM,CAAC;KACvF,MAAM,cAAoB;MACxB,IAAI,QAAQ;MACZ,SAAS;MACT,QAAQ;MACR,OAAO,MAAM;MACb,SAAS,MAAM;KACjB;KACA,OAAO,GAAG,YAAY,QAAiB;MACrC,IAAI,QAAQ;MACZ,IAAI,CAAC,OAAO,mBAAmB,MAAM,GAAG;OACtC,MAAM;OACN;MACF;MACA,MAAM,QAAQ,MAAM,QAAQ,GAAG,IAAI,OAAO,OAAO,GAAG,IAAI,OAAO,KAAK,GAAa;MACjF,IAAI;MACJ,IAAI;OACF,WAAW,KAAK,MAAM,MAAM,SAAS,MAAM,CAAC;MAC9C,QAAQ;OACN,MAAM;OACN;MACF;MACA,MAAM,SAAS,QAAQ,KAAK,QAAQ;MACpC,IAAI,CAAC,OAAO,IAAI;OACd,MAAM;OACN;MACF;MACA,MAAM,QAAQ,OAAO,KAAK,OAAO,SAAS;MAC1C,IAAI,SAAS,eAAeA,YAAU,MAAM,SAAS,KAAK,KAAK;WAC1D;OACH,gBAAgB,MAAM;OACtB,IAAI,eAAe,mBAAmB,MAAM;YACvC,QAAQ,KAAK,KAAK;MACzB;KACF,CAAC;KACD,SAAS,GAAG,cAAc;MACxB,KAAK,MAAM,SAAS,SAAS,SAAS,KAAK,KAAK;MAChD,QAAQ,SAAS;MACjB,eAAe;KACjB,CAAC;KACD,SAAS,GAAG,YAAY,QAAiB;MACvC,IAAI,QAAQ;MACZ,MAAM,QAAQ,MAAM,QAAQ,GAAG,IAAI,OAAO,OAAO,GAAG,IAAI,OAAO,KAAK,GAAa;MACjF,MAAM,SAAS,QAAQ,KAAK,KAAK;MACjC,IAAI,CAAC,OAAO,IAAI;OACd,MAAM;OACN;MACF;MACA,OAAO,KAAK,OAAO,KAAK,KAAK,UAAU,OAAO,QAAQ,CAAC,CAAC;KAC1D,CAAC;KACD,OAAO,GAAG,SAAS,KAAK;KACxB,OAAO,GAAG,SAAS,KAAK;KACxB,SAAS,GAAG,SAAS,KAAK;KAC1B,SAAS,GAAG,UAAU,UAAU;MAC9B,QAAQ,SAAS,2BAA2B,MAAM,SAAS;MAC3D,MAAM;KACR,CAAC;IACH,CAAC;GACH,CAAC;GACD,OAAO,iBAAiB;GACxB,OAAO,iBAAiB;GACxB,OAAO,iBAAiB;GACxB,OAAO,uBAAuB;GAC9B,MAAM,IAAI,SAAe,SAAS,WAAW;IAC3C,OAAO,KAAK,SAAS,MAAM;IAC3B,OAAO,OAAO,GAAG,aAAa,OAAO;GACvC,CAAC;GACD,MAAM,UAAU,OAAO,QAAQ;GAC/B,IAAI,CAAC,WAAW,OAAO,YAAY,UAAU,MAAM,IAAI,MAAM,yCAAyC;GACtG,OAAO;IACL,MAAM,QAAQ;IACd,OAAO,YAAY;KACjB,KAAK,MAAM,UAAU,WAAW,SAAS,OAAO,UAAU;KAC1D,WAAW,MAAM;KACjB,OAAO,oBAAoB;KAC3B,MAAM,IAAI,SAAe,SAAS,WAAW,OAAO,OAAO,UAAW,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAAE,CAAC;IAC3G;GACF;EACF;EACA,mBAAmB,QAAQ,YAAY;EACvC,aAAa,WAAW,QAAQ,aAAa,MAAM;EACnD,WAAW,YAAY,QAAQ,SAAS,OAAO;CACjD,CAAC;CACD,qBAAqB,KAAwB;EAC3C;EACA,aAAa,YAAa,QAAQ,IAAyB;CAC7D,CAAC;CACD,uBAAuB,KAAwB;EAC7C,OAAO;EACP,aAAa,YAAa,QAAQ,IAAyB;EAG3D,qBAAqB;GACnB,OAAO,WAAW;GAClB,mBAAmB,KAAA,IAAY,KAAA,IAAY,OAAO,IAAI,IAAI,cAAc,CAAC,CAAC,IAAI;GAC9E,GAAI,QAAQ,gBAAgB,KAAK,CAAC;EACpC;EACA,WAAW,YAAY,QAAQ,SAAS,OAAO;CACjD,CAAC;CACD,IAAI,KAAK,wBAAwB,OAAO,YAAY;EAClD,IAAI,QAAQ,IAAI,aAAa,SAC3B,OAAO,QAAQ,KAAK,EAAE,OAAO,6CAA6C,GAAG,GAAG;EAClF,IAAI,QAAQ,IAAI,OAAO,uBAAuB,MAAM,QAAQ,mBAC1D,OAAO,QAAQ,KAAK,EAAE,OAAO,qDAAqD,GAAG,GAAG;EAC1F,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,QAAQ,IAAI,KAAK;EAChC,QAAQ;GACN,OAAO,QAAQ,KAAK,EAAE,OAAO,qCAAqC,GAAG,GAAG;EAC1E;EACA,MAAM,SAAS,OAAO,SAAS,YAAY,SAAS,QAAQ,YAAY,OAAO,KAAK,SAAS,KAAA;EAC7F,IAAI,OAAO,WAAW,UAAU,OAAO,QAAQ,KAAK,EAAE,OAAO,qCAAqC,GAAG,GAAG;EACxG,IAAI;EACJ,IAAI;GACF,SAAS,IAAI,IAAI,MAAM;EACzB,QAAQ;GACN,OAAO,QAAQ,KAAK,EAAE,OAAO,6BAA6B,GAAG,GAAG;EAClE;EACA,IACE,OAAO,aAAa,WACpB,CAAC;GAAC;GAAa;GAAa;EAAO,CAAC,CAAC,SAAS,OAAO,QAAQ,KAC7D,OAAO,aAAa,OACpB,OAAO,WAAW,MAClB,OAAO,SAAS,MAChB,CAAC,OAAO,MAER,OAAO,QAAQ,KAAK,EAAE,OAAO,mDAAmD,GAAG,GAAG;EACxF,iBAAiB,OAAO;EACxB,OAAO,QAAQ,KAAK,EAAE,IAAI,KAAK,CAAC;CAClC,CAAC;CACD,IAAI,KAAK,mBAAmB,OAAO,YAAY;EAC7C,MAAM,SAAS,OAAO,UAAU,UAAU,SAAS,eAAe,MAAM,CAAC;EACzE,MAAM,UAAU,WAAW,KAAA,IAAY,KAAA,IAAY,OAAO,WAAW,QAAQ,MAAM;EACnF,IAAI,CAAC,UAAU,CAAC,SAAS,OAAO,QAAQ,KAAK,EAAE,OAAO,sCAAsC,GAAG,GAAG;EAClG,IAAI;EACJ,IAAI;GACF,WAAW,MAAM,QAAQ,IAAI,KAAK;EACpC,QAAQ;GACN,OAAO,QAAQ,KAAK,EAAE,OAAO,6CAA6C,GAAG,GAAG;EAClF;EACA,MAAM,SAAS,QAAQ,KAAK,QAAQ;EACpC,IAAI,CAAC,OAAO,IAAI,OAAO,QAAQ,KAAK,EAAE,OAAO,mCAAmC,OAAO,QAAQ,GAAG,GAAG,GAAG;EACxG,IAAI;EACJ,IAAI;GACF,UAAU,KAAK,MAAM,IAAI,YAAY,CAAC,CAAC,OAAO,OAAO,SAAS,CAAC;EACjE,QAAQ;GACN,OAAO,QAAQ,KAAK,EAAE,OAAO,yCAAyC,GAAG,GAAG;EAC9E;EACA,MAAM,QAAQ,cAAc,OAAO;EACnC,MAAM,OAAO,YAAY,OAAO,IAAI;EACpC,IAAI,CAAC,SAAS,CAAC,MAAM,OAAO,QAAQ,KAAK,EAAE,OAAO,uCAAuC,GAAG,GAAG;EAC/F,MAAM,SAAS,IAAI,IAAI,MAAM,QAAQ,iBAAiB;EACtD,MAAM,UAAU,IAAI,QAAQ;EAC5B,KAAK,MAAM,CAAC,MAAM,UAAU,MAAM,SAAS;GACzC,MAAM,aAAa,KAAK,YAAY;GACpC,IAAI,kBAAkB,IAAI,UAAU,KAAK,WAAW,WAAW,MAAM,GAAG;GACxE,QAAQ,OAAO,MAAM,KAAK;EAC5B;EACA,MAAM,SAAS,gBAAgB,MAAM,QAAQ,OAAO,QAAQ;EAC5D,MAAM,aAAa,OAAO,UAAU,MAAM,MAAM,eAAe,eAAe;EAC9E,MAAM,eAAe,WAAW,KAAA,KAAa,OAAO,eAAe,QAAQ,MAAM;EACjF,IAAI,eAAe;EACnB,IAAI,UAAU,cAAc;GAC1B,MAAM,YAAY,QAAQ,IAAI,cAAc;GAC5C,IAAI;GACJ,IAAI;IACF,aAAa,YAAY,KAAK,MAAM,OAAO,KAAK,WAAW,WAAW,CAAC,CAAC,SAAS,MAAM,CAAC,IAAI,KAAA;GAC9F,QAAQ;IACN,aAAa,KAAA;GACf;GACA,MAAM,WAAW;GACjB,IAAI,eAAe,cAEjB,eAAe,CAAC,OAAO,mBAAmB,QAAQ,QAAQ,UAAU,YAAY,UAAU,SAAS;QAC9F,IACL,OAAO,UAAU,eAAe,YAChC,CAAE,MAAM,OAAO,SAAS,CAAC,CAAC,aAAa,SAAS,YAAY,UAAU,UAAU,QAAQ,SAAS,QAAQ,GAEzG,eAAe;EACnB;EACA,QAAQ,OAAO,cAAc;EAC7B,MAAM,eAAe,gBAAgB,CAAC,eAAe,aAAa;EAGlE,QAAQ,IAAI,iCAAiC,QAAQ;EACrD,QAAQ,IAAI,kCAAkC,MAAM;EACpD,QAAQ,IAAI,gCAAgC,YAAY;EACxD,IAAI;EACJ,IAAI,cAAc;GAChB,MAAM,UAAU,eAAe,eAAe,2BAA2B;GACzE,WAAW,QAAQ,KAAK;IAAE,OAAO,6BAA6B,QAAQ;IAAI;IAAQ,MAAM;GAAW,GAAG,GAAG;EAC3G,OAAO,IAAI,sBAAsB,OAAO,QAAQ,GAC9C,WAAW,QAAQ,KAAK,EAAE,OAAO,wDAAwD,GAAG,GAAG;OAC1F;GACL,MAAM,WAAW,IAAI,QAAQ,QAAQ;IACnC,QAAQ,MAAM;IACd;IACA,GAAI,MAAM,WAAW,SAAS,MAAM,WAAW,SAAS,CAAC,IAAI,EAAE,KAAK;GACtE,CAAC;GACD,IAAI,OAAO,aAAa,iBAAiB,OAAO,SAAS,WAAW,cAAc,GAAG;IACnF,QAAQ,IAAI,UAAU,QAAQ,IAAI,OAAO,QAAQ,KAAK,EAAE;IACxD,QAAQ,IAAI,QAAQ,QAAQ,IAAI,OAAO,MAAM,KAAK,EAAE;IACpD,QAAQ,IAAI,UAAU,QAAQ,IAAI,OAAO,QAAQ,KAAK,EAAE;IACxD,WAAW,MAAM,IAAI,MAAM,IAAI,QAAQ,UAAU,EAAE,QAAQ,CAAC,GAAG;KAC7D,UAAU;KACV,gBAAgB;KAChB;IACF,CAAC;GACH,OAAO,WAAW,MAAM,QAAQ,QAAQ,QAAQ;EAClD;EACA,MAAM,eAAe,OAAO,KAAK,MAAM,SAAS,YAAY,CAAC;EAC7D,MAAM,SAAS,QAAQ,KACrB,IAAI,YAAY,CAAC,CAAC,OAChB,KAAK,UAAU;GACb,GAAG;GACH,QAAQ,SAAS;GACjB,SAAS,CAAC,GAAG,SAAS,QAAQ,QAAQ,CAAC;GACvC,MAAM,aAAa,SAAS,QAAQ;EACtC,CAAC,CACH,CACF;EACA,OAAO,OAAO,KACV,QAAQ,KAAK,OAAO,QAAQ,IAC5B,QAAQ,KAAK,EAAE,OAAO,+BAA+B,OAAO,QAAQ,GAAG,GAAG,GAAG;CACnF,CAAC;CACD,IAAI,GAAG,CAAC,QAAQ,QAAQ,GAAG,KAAK,OAAO,YAAY;EACjD,IACE,CAAC,wBAAwB,QAAQ,IAAI,QAAQ,QAAQ,IAAI,IAAI,KAC7D,EAAE,QAAQ,IAAI,WAAW,UAAU,QAAQ,IAAI,SAAS,6BACxD,EAAE,QAAQ,IAAI,WAAW,UAAU,kBAAkB,IAAI,QAAQ,IAAI,IAAI,IAEzE,OAAO,QAAQ,SAAS;EAC1B,OAAO,QAAQ,QAAQ,QAAQ,IAAI,GAAG;CACxC,CAAC;CACD,IAAI,GAAG,CAAC,OAAO,MAAM,GAAG,KAAK,OAAO,YAAY;EAE9C,IAAI,qBAAqB,QAAQ,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG;GAC3D,MAAM,QAAQ,qBAAqB,QAAQ,IAAI,KAAK,QAAQ,IAAI,IAAI;GACpE,OAAO,QAAQ,IAAI,aAAa,YAAY,UAAU,KAAA,IAClD,WAAW,MAAM,OAAO,QAAQ,IAAI,MAAM,IAC1C,QAAQ,KAAK,EAAE,OAAO,aAAa,GAAG,GAAG;EAC/C;EACA,IAAI,wBAAwB,QAAQ,IAAI,QAAQ,QAAQ,IAAI,IAAI,GAAG,OAAO,QAAQ,QAAQ,QAAQ,IAAI,GAAG;EACzG,IAAI,QAAQ,IAAI,KAAK,WAAW,OAAO,GAAG,OAAO,QAAQ,KAAK,EAAE,OAAO,aAAa,GAAG,GAAG;EAC1F,IAAI,QAAQ,IAAI,SAAS,OAAO,OAAO,UAAU,UAAU,SAAA,aAAwB,MAAM,CAAC,MAAM,KAAA,GAC9F,OAAO,QAAQ,SAAS,OAAO;EACjC,IAAI,QAAQ,IAAI,SAAS,2BAA2B,QAAQ,IAAI,KAAK,WAAW,iBAAiB,GAAG;GAClG,MAAM,OAAO,IAAI,IAAI,QAAQ,IAAI,GAAG;GACpC,OAAO,MAAM,QAAQ,QACnB,IAAI,QAAQ,IAAI,IAAI,GAAG,KAAK,WAAW,KAAK,UAAU,iBAAiB,GAAG,EACxE,QAAQ,QAAQ,IAAI,OACtB,CAAC,CACH;EACF;EACA,IAAI,CAAC,gBAAgB,OAAO,QAAQ,KAAK,EAAE,OAAO,8CAA8C,GAAG,GAAG;EACtG,MAAM,OAAO,IAAI,IAAI,QAAQ,IAAI,GAAG;EACpC,MAAM,SAAS,IAAI,IAAI,GAAG,KAAK,WAAW,KAAK,UAAU,cAAc;EACvE,MAAM,SAAS,MAAM,MAAM,QAAQ;GAAE,QAAQ,QAAQ,IAAI;GAAQ,UAAU;EAAS,CAAC;EACrF,MAAM,UAAU,IAAI,QAAQ,OAAO,OAAO;EAC1C,QAAQ,OAAO,YAAY;EAC3B,OAAO,IAAI,SAAS,OAAO,MAAM;GAAE,QAAQ,OAAO;GAAQ;EAAQ,CAAC;CACrE,CAAC;CAED,OAAO;EACL;EACA;EACA,YAAY,OAAO,YAAY,IAAI,MAAM,SAAS,EAAE,UAAU,QAAQ,CAAC;EACvE,OAAO,YAAY,OAAO,MAAM;CAClC;AACF"}

package/dist/runtimeConfig.cjs

@@ -0,0 +1,232 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let typebox = require("typebox");
+//#region src/schemas/config.ts
+/**
+* Configuration surfaces, contributed by every extension that owns settings.
+*
+* Doom settings live in one YAML file but are owned by many extensions, and for
+* a long time the only way to change any of them was to edit that file by hand.
+* The one exception, an editor-command prompt, asked for a value with no way to
+* see what a valid one looked like.
+*
+* So configuration is published rather than centralised: an extension describes
+* its own fields, one renderer draws them all, and the extension still performs
+* every write. Nothing here knows what a voice model or an editor command is.
+*
+* Deliberately the same shape as the mode and footer contracts next door, since
+* the problem is the same one: several extensions sharing one surface. The UI
+* hub invokes an owner's registered action directly, because unlike a status
+* strip this surface is written to as well as read.
+*/
+/** Canonical Cordis key for the session-owned Doom configuration service. */
+const DOOM_CONFIG_SERVICE = "doom/config";
+/** Matches the leader contract's source rule: package names, addressable and spoof-checkable. */
+const ConfigSourceSchema = typebox.Type.String({
+	minLength: 1,
+	maxLength: 128,
+	pattern: "^[A-Za-z0-9@][A-Za-z0-9@/._:-]*$"
+});
+const ConfigIdSchema = typebox.Type.String({
+	minLength: 1,
+	maxLength: 128,
+	pattern: "^[a-z0-9][a-z0-9._:-]*$"
+});
+/**
+* How ready a value is to be used, as opposed to whether it is merely set.
+* `blocked` covers a choice that needs something else first, such as a model
+* whose engine is not installed.
+*/
+const ConfigStatusSchema = typebox.Type.Union([
+	typebox.Type.Literal("ready"),
+	typebox.Type.Literal("available"),
+	typebox.Type.Literal("blocked")
+]);
+const ConfigFieldKindSchema = typebox.Type.Union([
+	typebox.Type.Literal("text"),
+	typebox.Type.Literal("enum"),
+	typebox.Type.Literal("choice"),
+	typebox.Type.Literal("info")
+]);
+/**
+* A key the renderer offers on the focused field, sent back verbatim as an
+* action. Owners use this for confirmations, so the pending question survives a
+* panel that is closed and reopened.
+*/
+const ConfigActionSchema = typebox.Type.Object({
+	key: typebox.Type.String({
+		minLength: 1,
+		maxLength: 1
+	}),
+	label: typebox.Type.String({
+		minLength: 1,
+		maxLength: 24
+	}),
+	action: ConfigIdSchema
+}, { additionalProperties: false });
+const ConfigChoiceSchema = typebox.Type.Object({
+	id: typebox.Type.String({
+		minLength: 1,
+		maxLength: 256
+	}),
+	label: typebox.Type.String({
+		minLength: 1,
+		maxLength: 96
+	}),
+	/** Right-aligned by the renderer. Sizes, ids, anything narrow. */
+	detail: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 96
+	})),
+	/** Groups entries under a heading the cursor skips over. */
+	group: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 48
+	})),
+	status: typebox.Type.Optional(ConfigStatusSchema),
+	statusText: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 96
+	})),
+	/**
+	* What enter does on this entry. Carrying it per-entry is what lets one list
+	* hold both an installed model that only needs selecting and an absent one
+	* that needs fetching, without the renderer knowing the difference.
+	*/
+	action: typebox.Type.Optional(ConfigIdSchema)
+}, { additionalProperties: false });
+/**
+* One line of a multi-step operation.
+*
+* Published as a list rather than a single "current step" string so the panel can
+* show what already ran alongside what is left. During an install that is the
+* difference between "something is happening" and knowing a package manager
+* already finished and a download is now underway.
+*/
+const ConfigStepSchema = typebox.Type.Object({
+	label: typebox.Type.String({
+		minLength: 1,
+		maxLength: 96
+	}),
+	state: typebox.Type.Union([
+		typebox.Type.Literal("pending"),
+		typebox.Type.Literal("satisfied"),
+		typebox.Type.Literal("running"),
+		typebox.Type.Literal("done"),
+		typebox.Type.Literal("failed")
+	]),
+	detail: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 160
+	}))
+}, { additionalProperties: false });
+const ConfigProgressSchema = typebox.Type.Object({
+	label: typebox.Type.String({
+		minLength: 1,
+		maxLength: 96
+	}),
+	/** 0 to 1. Omitted when the work has no measurable total. */
+	ratio: typebox.Type.Optional(typebox.Type.Number({
+		minimum: 0,
+		maximum: 1
+	}))
+}, { additionalProperties: false });
+const ConfigFieldSchema = typebox.Type.Object({
+	id: ConfigIdSchema,
+	label: typebox.Type.String({
+		minLength: 1,
+		maxLength: 48
+	}),
+	kind: ConfigFieldKindSchema,
+	/** Absent means unset; the renderer shows `placeholder` instead. */
+	value: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 4096
+	})),
+	placeholder: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 96
+	})),
+	/** One line of help for the focused field. */
+	detail: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 240
+	})),
+	/** The config key this writes, shown under the focused field so the file stays legible. */
+	keyPath: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 128
+	})),
+	status: typebox.Type.Optional(ConfigStatusSchema),
+	/** Doubles as the error line: a rejected edit comes back as the old value plus this. */
+	statusText: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 240
+	})),
+	choices: typebox.Type.Optional(typebox.Type.Array(ConfigChoiceSchema, { maxItems: 128 })),
+	actions: typebox.Type.Optional(typebox.Type.Array(ConfigActionSchema, { maxItems: 4 })),
+	/** Work is running; the renderer dims the field and offers abort. */
+	busy: typebox.Type.Optional(typebox.Type.Boolean()),
+	progress: typebox.Type.Optional(ConfigProgressSchema),
+	steps: typebox.Type.Optional(typebox.Type.Array(ConfigStepSchema, { maxItems: 24 })),
+	/**
+	* The tail of a running command's terminal output.
+	*
+	* A tail rather than the whole scrollback: the field is a few rows of a
+	* shared pane, and what matters is the question a package manager just
+	* asked, not what it printed a minute ago.
+	*/
+	output: typebox.Type.Optional(typebox.Type.Array(typebox.Type.String({ maxLength: 512 }), { maxItems: 64 })),
+	/**
+	* The command is waiting on the user. The renderer offers a line to type
+	* into, which comes back as an owner-defined action carrying the text.
+	*/
+	awaitingInput: typebox.Type.Optional(typebox.Type.Boolean())
+}, { additionalProperties: false });
+const ConfigSectionSchema = typebox.Type.Object({
+	id: ConfigIdSchema,
+	title: typebox.Type.String({
+		minLength: 1,
+		maxLength: 32
+	}),
+	detail: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 96
+	})),
+	order: typebox.Type.Integer({
+		minimum: 0,
+		maximum: 1e3
+	}),
+	/** Section-wide state: readiness, or why a write failed. */
+	notice: typebox.Type.Optional(typebox.Type.String({
+		minLength: 1,
+		maxLength: 240
+	})),
+	noticeLevel: typebox.Type.Optional(typebox.Type.Union([typebox.Type.Literal("info"), typebox.Type.Literal("error")])),
+	fields: typebox.Type.Array(ConfigFieldSchema, { maxItems: 64 })
+}, { additionalProperties: false });
+const ConfigSourceRefSchema = typebox.Type.Object({
+	source: ConfigSourceSchema,
+	generation: typebox.Type.String({ minLength: 1 })
+}, { additionalProperties: false });
+typebox.Type.Object({
+	...ConfigSourceRefSchema.properties,
+	sections: typebox.Type.Array(ConfigSectionSchema, { maxItems: 32 })
+}, { additionalProperties: false });
+const CONFIG_ACTION = {
+	set: "set",
+	clear: "clear"
+};
+//#endregion
+exports.CONFIG_ACTION = CONFIG_ACTION;
+exports.ConfigActionSchema = ConfigActionSchema;
+exports.ConfigChoiceSchema = ConfigChoiceSchema;
+exports.ConfigFieldKindSchema = ConfigFieldKindSchema;
+exports.ConfigFieldSchema = ConfigFieldSchema;
+exports.ConfigProgressSchema = ConfigProgressSchema;
+exports.ConfigSectionSchema = ConfigSectionSchema;
+exports.ConfigSourceSchema = ConfigSourceSchema;
+exports.ConfigStatusSchema = ConfigStatusSchema;
+exports.ConfigStepSchema = ConfigStepSchema;
+exports.DOOM_CONFIG_SERVICE = DOOM_CONFIG_SERVICE;
+
+//# sourceMappingURL=runtimeConfig.cjs.map

package/dist/runtimeConfig.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeConfig.cjs","names":["Type"],"sources":["../src/schemas/config.ts"],"sourcesContent":["/**\n * Configuration surfaces, contributed by every extension that owns settings.\n *\n * Doom settings live in one YAML file but are owned by many extensions, and for\n * a long time the only way to change any of them was to edit that file by hand.\n * The one exception, an editor-command prompt, asked for a value with no way to\n * see what a valid one looked like.\n *\n * So configuration is published rather than centralised: an extension describes\n * its own fields, one renderer draws them all, and the extension still performs\n * every write. Nothing here knows what a voice model or an editor command is.\n *\n * Deliberately the same shape as the mode and footer contracts next door, since\n * the problem is the same one: several extensions sharing one surface. The UI\n * hub invokes an owner's registered action directly, because unlike a status\n * strip this surface is written to as well as read.\n */\n\nimport { type Static, Type } from 'typebox';\n\n/** Canonical Cordis key for the session-owned Doom configuration service. */\nexport const DOOM_CONFIG_SERVICE = 'doom/config';\n\n/** Matches the leader contract's source rule: package names, addressable and spoof-checkable. */\nexport const ConfigSourceSchema = Type.String({\n  minLength: 1,\n  maxLength: 128,\n  pattern: '^[A-Za-z0-9@][A-Za-z0-9@/._:-]*$',\n});\n\nconst ConfigIdSchema = Type.String({ minLength: 1, maxLength: 128, pattern: '^[a-z0-9][a-z0-9._:-]*$' });\n\n/**\n * How ready a value is to be used, as opposed to whether it is merely set.\n * `blocked` covers a choice that needs something else first, such as a model\n * whose engine is not installed.\n */\nexport const ConfigStatusSchema = Type.Union([\n  Type.Literal('ready'),\n  Type.Literal('available'),\n  Type.Literal('blocked'),\n]);\nexport type ConfigStatus = Static<typeof ConfigStatusSchema>;\n\nexport const ConfigFieldKindSchema = Type.Union([\n  /** Free text, edited in place. */\n  Type.Literal('text'),\n  /** A short closed set, cycled in place. */\n  Type.Literal('enum'),\n  /** A long set worth its own screen, with per-entry status and actions. */\n  Type.Literal('choice'),\n  /** Read-only. Resolution results, derived values, preflight checks. */\n  Type.Literal('info'),\n]);\nexport type ConfigFieldKind = Static<typeof ConfigFieldKindSchema>;\n\n/**\n * A key the renderer offers on the focused field, sent back verbatim as an\n * action. Owners use this for confirmations, so the pending question survives a\n * panel that is closed and reopened.\n */\nexport const ConfigActionSchema = Type.Object(\n  {\n    key: Type.String({ minLength: 1, maxLength: 1 }),\n    label: Type.String({ minLength: 1, maxLength: 24 }),\n    action: ConfigIdSchema,\n  },\n  { additionalProperties: false },\n);\nexport type ConfigAction = Static<typeof ConfigActionSchema>;\n\nexport const ConfigChoiceSchema = Type.Object(\n  {\n    id: Type.String({ minLength: 1, maxLength: 256 }),\n    label: Type.String({ minLength: 1, maxLength: 96 }),\n    /** Right-aligned by the renderer. Sizes, ids, anything narrow. */\n    detail: Type.Optional(Type.String({ minLength: 1, maxLength: 96 })),\n    /** Groups entries under a heading the cursor skips over. */\n    group: Type.Optional(Type.String({ minLength: 1, maxLength: 48 })),\n    status: Type.Optional(ConfigStatusSchema),\n    statusText: Type.Optional(Type.String({ minLength: 1, maxLength: 96 })),\n    /**\n     * What enter does on this entry. Carrying it per-entry is what lets one list\n     * hold both an installed model that only needs selecting and an absent one\n     * that needs fetching, without the renderer knowing the difference.\n     */\n    action: Type.Optional(ConfigIdSchema),\n  },\n  { additionalProperties: false },\n);\nexport type ConfigChoice = Static<typeof ConfigChoiceSchema>;\n\n/**\n * One line of a multi-step operation.\n *\n * Published as a list rather than a single \"current step\" string so the panel can\n * show what already ran alongside what is left. During an install that is the\n * difference between \"something is happening\" and knowing a package manager\n * already finished and a download is now underway.\n */\nexport const ConfigStepSchema = Type.Object(\n  {\n    label: Type.String({ minLength: 1, maxLength: 96 }),\n    state: Type.Union([\n      Type.Literal('pending'),\n      /** Already true of this machine, so nothing will run for it. */\n      Type.Literal('satisfied'),\n      Type.Literal('running'),\n      Type.Literal('done'),\n      Type.Literal('failed'),\n    ]),\n    detail: Type.Optional(Type.String({ minLength: 1, maxLength: 160 })),\n  },\n  { additionalProperties: false },\n);\nexport type ConfigStep = Static<typeof ConfigStepSchema>;\n\nexport const ConfigProgressSchema = Type.Object(\n  {\n    label: Type.String({ minLength: 1, maxLength: 96 }),\n    /** 0 to 1. Omitted when the work has no measurable total. */\n    ratio: Type.Optional(Type.Number({ minimum: 0, maximum: 1 })),\n  },\n  { additionalProperties: false },\n);\nexport type ConfigProgress = Static<typeof ConfigProgressSchema>;\n\nexport const ConfigFieldSchema = Type.Object(\n  {\n    id: ConfigIdSchema,\n    label: Type.String({ minLength: 1, maxLength: 48 }),\n    kind: ConfigFieldKindSchema,\n    /** Absent means unset; the renderer shows `placeholder` instead. */\n    value: Type.Optional(Type.String({ minLength: 1, maxLength: 4096 })),\n    placeholder: Type.Optional(Type.String({ minLength: 1, maxLength: 96 })),\n    /** One line of help for the focused field. */\n    detail: Type.Optional(Type.String({ minLength: 1, maxLength: 240 })),\n    /** The config key this writes, shown under the focused field so the file stays legible. */\n    keyPath: Type.Optional(Type.String({ minLength: 1, maxLength: 128 })),\n    status: Type.Optional(ConfigStatusSchema),\n    /** Doubles as the error line: a rejected edit comes back as the old value plus this. */\n    statusText: Type.Optional(Type.String({ minLength: 1, maxLength: 240 })),\n    choices: Type.Optional(Type.Array(ConfigChoiceSchema, { maxItems: 128 })),\n    actions: Type.Optional(Type.Array(ConfigActionSchema, { maxItems: 4 })),\n    /** Work is running; the renderer dims the field and offers abort. */\n    busy: Type.Optional(Type.Boolean()),\n    progress: Type.Optional(ConfigProgressSchema),\n    steps: Type.Optional(Type.Array(ConfigStepSchema, { maxItems: 24 })),\n    /**\n     * The tail of a running command's terminal output.\n     *\n     * A tail rather than the whole scrollback: the field is a few rows of a\n     * shared pane, and what matters is the question a package manager just\n     * asked, not what it printed a minute ago.\n     */\n    output: Type.Optional(Type.Array(Type.String({ maxLength: 512 }), { maxItems: 64 })),\n    /**\n     * The command is waiting on the user. The renderer offers a line to type\n     * into, which comes back as an owner-defined action carrying the text.\n     */\n    awaitingInput: Type.Optional(Type.Boolean()),\n  },\n  { additionalProperties: false },\n);\nexport type ConfigField = Static<typeof ConfigFieldSchema>;\n\nexport const ConfigSectionSchema = Type.Object(\n  {\n    id: ConfigIdSchema,\n    title: Type.String({ minLength: 1, maxLength: 32 }),\n    detail: Type.Optional(Type.String({ minLength: 1, maxLength: 96 })),\n    order: Type.Integer({ minimum: 0, maximum: 1000 }),\n    /** Section-wide state: readiness, or why a write failed. */\n    notice: Type.Optional(Type.String({ minLength: 1, maxLength: 240 })),\n    noticeLevel: Type.Optional(Type.Union([Type.Literal('info'), Type.Literal('error')])),\n    fields: Type.Array(ConfigFieldSchema, { maxItems: 64 }),\n  },\n  { additionalProperties: false },\n);\nexport type ConfigSection = Static<typeof ConfigSectionSchema>;\n\nconst ConfigSourceRefSchema = Type.Object(\n  { source: ConfigSourceSchema, generation: Type.String({ minLength: 1 }) },\n  { additionalProperties: false },\n);\n\nconst ConfigSnapshotSchema = Type.Object(\n  { ...ConfigSourceRefSchema.properties, sections: Type.Array(ConfigSectionSchema, { maxItems: 32 }) },\n  { additionalProperties: false },\n);\nexport type ConfigSnapshot = Static<typeof ConfigSnapshotSchema>;\nexport type ConfigSourceRef = Static<typeof ConfigSourceRefSchema>;\n\nexport const CONFIG_ACTION = {\n  set: 'set',\n  clear: 'clear',\n} as const;\n\nexport interface DoomExtensionContext {\n  sessionManager: { getSessionId(): string };\n}\n\nexport interface DoomConfigSectionView extends ConfigSection {\n  source: string;\n}\n\nexport interface DoomConfigInvocation {\n  source: string;\n  sectionId: string;\n  fieldId: string;\n  action: string;\n  value?: string;\n}\n\nexport interface DoomConfigActionInput<Context extends DoomExtensionContext = DoomExtensionContext> {\n  ctx: Context;\n  sectionId: string;\n  fieldId: string;\n  value?: string;\n}\n\nexport interface DoomConfigContributionOptions<Context extends DoomExtensionContext = DoomExtensionContext> {\n  source: string;\n  listSections: () => readonly ConfigSection[];\n  handlers: Readonly<Record<string, (input: DoomConfigActionInput<Context>) => void | Promise<void>>>;\n  onError: (error: unknown, actionName: string, ctx: Context) => void;\n}\n\nexport interface DoomConfigContributionHandle {\n  update(): void;\n  dispose(): void;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqBA,MAAa,sBAAsB;;AAGnC,MAAa,qBAAqBA,QAAAA,KAAK,OAAO;CAC5C,WAAW;CACX,WAAW;CACX,SAAS;AACX,CAAC;AAED,MAAM,iBAAiBA,QAAAA,KAAK,OAAO;CAAE,WAAW;CAAG,WAAW;CAAK,SAAS;AAA0B,CAAC;;;;;;AAOvG,MAAa,qBAAqBA,QAAAA,KAAK,MAAM;CAC3CA,QAAAA,KAAK,QAAQ,OAAO;CACpBA,QAAAA,KAAK,QAAQ,WAAW;CACxBA,QAAAA,KAAK,QAAQ,SAAS;AACxB,CAAC;AAGD,MAAa,wBAAwBA,QAAAA,KAAK,MAAM;CAE9CA,QAAAA,KAAK,QAAQ,MAAM;CAEnBA,QAAAA,KAAK,QAAQ,MAAM;CAEnBA,QAAAA,KAAK,QAAQ,QAAQ;CAErBA,QAAAA,KAAK,QAAQ,MAAM;AACrB,CAAC;;;;;;AAQD,MAAa,qBAAqBA,QAAAA,KAAK,OACrC;CACE,KAAKA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAE,CAAC;CAC/C,OAAOA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC;CAClD,QAAQ;AACV,GACA,EAAE,sBAAsB,MAAM,CAChC;AAGA,MAAa,qBAAqBA,QAAAA,KAAK,OACrC;CACE,IAAIA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAI,CAAC;CAChD,OAAOA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC;;CAElD,QAAQA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC,CAAC;;CAElE,OAAOA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC,CAAC;CACjE,QAAQA,QAAAA,KAAK,SAAS,kBAAkB;CACxC,YAAYA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC,CAAC;;;;;;CAMtE,QAAQA,QAAAA,KAAK,SAAS,cAAc;AACtC,GACA,EAAE,sBAAsB,MAAM,CAChC;;;;;;;;;AAWA,MAAa,mBAAmBA,QAAAA,KAAK,OACnC;CACE,OAAOA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC;CAClD,OAAOA,QAAAA,KAAK,MAAM;EAChBA,QAAAA,KAAK,QAAQ,SAAS;EAEtBA,QAAAA,KAAK,QAAQ,WAAW;EACxBA,QAAAA,KAAK,QAAQ,SAAS;EACtBA,QAAAA,KAAK,QAAQ,MAAM;EACnBA,QAAAA,KAAK,QAAQ,QAAQ;CACvB,CAAC;CACD,QAAQA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAI,CAAC,CAAC;AACrE,GACA,EAAE,sBAAsB,MAAM,CAChC;AAGA,MAAa,uBAAuBA,QAAAA,KAAK,OACvC;CACE,OAAOA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC;;CAElD,OAAOA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,SAAS;EAAG,SAAS;CAAE,CAAC,CAAC;AAC9D,GACA,EAAE,sBAAsB,MAAM,CAChC;AAGA,MAAa,oBAAoBA,QAAAA,KAAK,OACpC;CACE,IAAI;CACJ,OAAOA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC;CAClD,MAAM;;CAEN,OAAOA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAK,CAAC,CAAC;CACnE,aAAaA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC,CAAC;;CAEvE,QAAQA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAI,CAAC,CAAC;;CAEnE,SAASA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAI,CAAC,CAAC;CACpE,QAAQA,QAAAA,KAAK,SAAS,kBAAkB;;CAExC,YAAYA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAI,CAAC,CAAC;CACvE,SAASA,QAAAA,KAAK,SAASA,QAAAA,KAAK,MAAM,oBAAoB,EAAE,UAAU,IAAI,CAAC,CAAC;CACxE,SAASA,QAAAA,KAAK,SAASA,QAAAA,KAAK,MAAM,oBAAoB,EAAE,UAAU,EAAE,CAAC,CAAC;;CAEtE,MAAMA,QAAAA,KAAK,SAASA,QAAAA,KAAK,QAAQ,CAAC;CAClC,UAAUA,QAAAA,KAAK,SAAS,oBAAoB;CAC5C,OAAOA,QAAAA,KAAK,SAASA,QAAAA,KAAK,MAAM,kBAAkB,EAAE,UAAU,GAAG,CAAC,CAAC;;;;;;;;CAQnE,QAAQA,QAAAA,KAAK,SAASA,QAAAA,KAAK,MAAMA,QAAAA,KAAK,OAAO,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,CAAC,CAAC;;;;;CAKnF,eAAeA,QAAAA,KAAK,SAASA,QAAAA,KAAK,QAAQ,CAAC;AAC7C,GACA,EAAE,sBAAsB,MAAM,CAChC;AAGA,MAAa,sBAAsBA,QAAAA,KAAK,OACtC;CACE,IAAI;CACJ,OAAOA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC;CAClD,QAAQA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC,CAAC;CAClE,OAAOA,QAAAA,KAAK,QAAQ;EAAE,SAAS;EAAG,SAAS;CAAK,CAAC;;CAEjD,QAAQA,QAAAA,KAAK,SAASA,QAAAA,KAAK,OAAO;EAAE,WAAW;EAAG,WAAW;CAAI,CAAC,CAAC;CACnE,aAAaA,QAAAA,KAAK,SAASA,QAAAA,KAAK,MAAM,CAACA,QAAAA,KAAK,QAAQ,MAAM,GAAGA,QAAAA,KAAK,QAAQ,OAAO,CAAC,CAAC,CAAC;CACpF,QAAQA,QAAAA,KAAK,MAAM,mBAAmB,EAAE,UAAU,GAAG,CAAC;AACxD,GACA,EAAE,sBAAsB,MAAM,CAChC;AAGA,MAAM,wBAAwBA,QAAAA,KAAK,OACjC;CAAE,QAAQ;CAAoB,YAAYA,QAAAA,KAAK,OAAO,EAAE,WAAW,EAAE,CAAC;AAAE,GACxE,EAAE,sBAAsB,MAAM,CAChC;AAE6BA,QAAAA,KAAK,OAChC;CAAE,GAAG,sBAAsB;CAAY,UAAUA,QAAAA,KAAK,MAAM,qBAAqB,EAAE,UAAU,GAAG,CAAC;AAAE,GACnG,EAAE,sBAAsB,MAAM,CAChC;AAIA,MAAa,gBAAgB;CAC3B,KAAK;CACL,OAAO;AACT"}