@agimon-ai/po-core 0.0.0-alpha.0

package/dist/src/constants/nativeHost.cjs

@@ -0,0 +1,56 @@
+//#region src/constants/nativeHost.ts
+/**
+* The only modules a native composition may import at runtime.
+*
+* Defined once here. The CLI native build marks exactly these as external and
+* fails on any other bare import, and the po-native shell builds a frozen module
+* map whose keys must equal this list plus the Unistyles component paths.
+*/
+/** Bare specifiers the shell provides to every native composition. */
+const NATIVE_HOST_MODULES = [
+	"react",
+	"react/jsx-runtime",
+	"react/jsx-dev-runtime",
+	"react-native",
+	"react-native-unistyles",
+	"@tanstack/store",
+	"@agimon-ai/po-core/native",
+	"@agimon-ai/po-native-components"
+];
+/** Prefix of the component imports the Unistyles Babel plugin generates. */
+const NATIVE_UNISTYLES_COMPONENT_PREFIX = "react-native-unistyles/components/native/";
+/**
+* Every component under `components/native/` in react-native-unistyles 3.5.2. The Babel plugin can emit
+* all of them, including `NativeText` and `NativeView` for the `unstable_Native*` aliases.
+*/
+const NATIVE_UNISTYLES_COMPONENTS = [
+	"ActivityIndicator",
+	"Animated",
+	"FlatList",
+	"Image",
+	"ImageBackground",
+	"KeyboardAvoidingView",
+	"NativeText",
+	"NativeView",
+	"Pressable",
+	"RefreshControl",
+	"SafeAreaView",
+	"ScrollView",
+	"SectionList",
+	"Switch",
+	"Text",
+	"TextInput",
+	"TouchableHighlight",
+	"TouchableOpacity",
+	"View",
+	"VirtualizedList"
+];
+/** The complete host module list: the bare modules plus one specifier per Unistyles component. */
+const NATIVE_HOST_MODULE_IDS = [...NATIVE_HOST_MODULES, ...NATIVE_UNISTYLES_COMPONENTS.map((name) => `${NATIVE_UNISTYLES_COMPONENT_PREFIX}${name}`)];
+//#endregion
+exports.NATIVE_HOST_MODULES = NATIVE_HOST_MODULES;
+exports.NATIVE_HOST_MODULE_IDS = NATIVE_HOST_MODULE_IDS;
+exports.NATIVE_UNISTYLES_COMPONENTS = NATIVE_UNISTYLES_COMPONENTS;
+exports.NATIVE_UNISTYLES_COMPONENT_PREFIX = NATIVE_UNISTYLES_COMPONENT_PREFIX;
+
+//# sourceMappingURL=nativeHost.cjs.map

package/dist/src/constants/nativeHost.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nativeHost.cjs","names":[],"sources":["../../../src/constants/nativeHost.ts"],"sourcesContent":["/**\n * The only modules a native composition may import at runtime.\n *\n * Defined once here. The CLI native build marks exactly these as external and\n * fails on any other bare import, and the po-native shell builds a frozen module\n * map whose keys must equal this list plus the Unistyles component paths.\n */\n\n/** Bare specifiers the shell provides to every native composition. */\nexport const NATIVE_HOST_MODULES = [\n  'react',\n  'react/jsx-runtime',\n  'react/jsx-dev-runtime',\n  'react-native',\n  'react-native-unistyles',\n  '@tanstack/store',\n  '@agimon-ai/po-core/native',\n  '@agimon-ai/po-native-components',\n] as const;\n\n/** Prefix of the component imports the Unistyles Babel plugin generates. */\nexport const NATIVE_UNISTYLES_COMPONENT_PREFIX = 'react-native-unistyles/components/native/';\n\n/**\n * Every component under `components/native/` in react-native-unistyles 3.5.2. The Babel plugin can emit\n * all of them, including `NativeText` and `NativeView` for the `unstable_Native*` aliases.\n */\nexport const NATIVE_UNISTYLES_COMPONENTS = [\n  'ActivityIndicator',\n  'Animated',\n  'FlatList',\n  'Image',\n  'ImageBackground',\n  'KeyboardAvoidingView',\n  'NativeText',\n  'NativeView',\n  'Pressable',\n  'RefreshControl',\n  'SafeAreaView',\n  'ScrollView',\n  'SectionList',\n  'Switch',\n  'Text',\n  'TextInput',\n  'TouchableHighlight',\n  'TouchableOpacity',\n  'View',\n  'VirtualizedList',\n] as const;\n\n/** The complete host module list: the bare modules plus one specifier per Unistyles component. */\nexport const NATIVE_HOST_MODULE_IDS: readonly string[] = [\n  ...NATIVE_HOST_MODULES,\n  ...NATIVE_UNISTYLES_COMPONENTS.map((name) => `${NATIVE_UNISTYLES_COMPONENT_PREFIX}${name}`),\n];\n"],"mappings":";;;;;;;;;AASA,MAAa,sBAAsB;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,oCAAoC;;;;;AAMjD,MAAa,8BAA8B;CACzC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,yBAA4C,CACvD,GAAG,qBACH,GAAG,4BAA4B,KAAK,SAAS,GAAG,oCAAoC,MAAM,CAC5F"}

package/dist/src/constants/nativeHost.d.mts

@@ -0,0 +1,21 @@
+//#region src/constants/nativeHost.d.ts
+/**
+ * The only modules a native composition may import at runtime.
+ *
+ * Defined once here. The CLI native build marks exactly these as external and
+ * fails on any other bare import, and the po-native shell builds a frozen module
+ * map whose keys must equal this list plus the Unistyles component paths.
+ */
+/** Bare specifiers the shell provides to every native composition. */
+export declare const NATIVE_HOST_MODULES: readonly ['react', 'react/jsx-runtime', 'react/jsx-dev-runtime', 'react-native', 'react-native-unistyles', '@tanstack/store', '@agimon-ai/po-core/native', '@agimon-ai/po-native-components'];
+/** Prefix of the component imports the Unistyles Babel plugin generates. */
+export declare const NATIVE_UNISTYLES_COMPONENT_PREFIX = "react-native-unistyles/components/native/";
+/**
+ * Every component under `components/native/` in react-native-unistyles 3.5.2. The Babel plugin can emit
+ * all of them, including `NativeText` and `NativeView` for the `unstable_Native*` aliases.
+ */
+export declare const NATIVE_UNISTYLES_COMPONENTS: readonly ['ActivityIndicator', 'Animated', 'FlatList', 'Image', 'ImageBackground', 'KeyboardAvoidingView', 'NativeText', 'NativeView', 'Pressable', 'RefreshControl', 'SafeAreaView', 'ScrollView', 'SectionList', 'Switch', 'Text', 'TextInput', 'TouchableHighlight', 'TouchableOpacity', 'View', 'VirtualizedList'];
+/** The complete host module list: the bare modules plus one specifier per Unistyles component. */
+export declare const NATIVE_HOST_MODULE_IDS: readonly string[];
+//#endregion
+//# sourceMappingURL=nativeHost.d.mts.map

package/dist/src/constants/nativeHost.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nativeHost.d.mts","names":[],"sources":["../../../src/constants/nativeHost.ts"],"mappings":";;;;;;;;;qBASa;;qBAYA;;;;;qBAMA;;qBAwBA"}

package/dist/src/constants/nativeHost.mjs

@@ -0,0 +1,53 @@
+//#region src/constants/nativeHost.ts
+/**
+* The only modules a native composition may import at runtime.
+*
+* Defined once here. The CLI native build marks exactly these as external and
+* fails on any other bare import, and the po-native shell builds a frozen module
+* map whose keys must equal this list plus the Unistyles component paths.
+*/
+/** Bare specifiers the shell provides to every native composition. */
+const NATIVE_HOST_MODULES = [
+	"react",
+	"react/jsx-runtime",
+	"react/jsx-dev-runtime",
+	"react-native",
+	"react-native-unistyles",
+	"@tanstack/store",
+	"@agimon-ai/po-core/native",
+	"@agimon-ai/po-native-components"
+];
+/** Prefix of the component imports the Unistyles Babel plugin generates. */
+const NATIVE_UNISTYLES_COMPONENT_PREFIX = "react-native-unistyles/components/native/";
+/**
+* Every component under `components/native/` in react-native-unistyles 3.5.2. The Babel plugin can emit
+* all of them, including `NativeText` and `NativeView` for the `unstable_Native*` aliases.
+*/
+const NATIVE_UNISTYLES_COMPONENTS = [
+	"ActivityIndicator",
+	"Animated",
+	"FlatList",
+	"Image",
+	"ImageBackground",
+	"KeyboardAvoidingView",
+	"NativeText",
+	"NativeView",
+	"Pressable",
+	"RefreshControl",
+	"SafeAreaView",
+	"ScrollView",
+	"SectionList",
+	"Switch",
+	"Text",
+	"TextInput",
+	"TouchableHighlight",
+	"TouchableOpacity",
+	"View",
+	"VirtualizedList"
+];
+/** The complete host module list: the bare modules plus one specifier per Unistyles component. */
+const NATIVE_HOST_MODULE_IDS = [...NATIVE_HOST_MODULES, ...NATIVE_UNISTYLES_COMPONENTS.map((name) => `${NATIVE_UNISTYLES_COMPONENT_PREFIX}${name}`)];
+//#endregion
+export { NATIVE_HOST_MODULES, NATIVE_HOST_MODULE_IDS, NATIVE_UNISTYLES_COMPONENTS, NATIVE_UNISTYLES_COMPONENT_PREFIX };
+
+//# sourceMappingURL=nativeHost.mjs.map

package/dist/src/constants/nativeHost.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nativeHost.mjs","names":[],"sources":["../../../src/constants/nativeHost.ts"],"sourcesContent":["/**\n * The only modules a native composition may import at runtime.\n *\n * Defined once here. The CLI native build marks exactly these as external and\n * fails on any other bare import, and the po-native shell builds a frozen module\n * map whose keys must equal this list plus the Unistyles component paths.\n */\n\n/** Bare specifiers the shell provides to every native composition. */\nexport const NATIVE_HOST_MODULES = [\n  'react',\n  'react/jsx-runtime',\n  'react/jsx-dev-runtime',\n  'react-native',\n  'react-native-unistyles',\n  '@tanstack/store',\n  '@agimon-ai/po-core/native',\n  '@agimon-ai/po-native-components',\n] as const;\n\n/** Prefix of the component imports the Unistyles Babel plugin generates. */\nexport const NATIVE_UNISTYLES_COMPONENT_PREFIX = 'react-native-unistyles/components/native/';\n\n/**\n * Every component under `components/native/` in react-native-unistyles 3.5.2. The Babel plugin can emit\n * all of them, including `NativeText` and `NativeView` for the `unstable_Native*` aliases.\n */\nexport const NATIVE_UNISTYLES_COMPONENTS = [\n  'ActivityIndicator',\n  'Animated',\n  'FlatList',\n  'Image',\n  'ImageBackground',\n  'KeyboardAvoidingView',\n  'NativeText',\n  'NativeView',\n  'Pressable',\n  'RefreshControl',\n  'SafeAreaView',\n  'ScrollView',\n  'SectionList',\n  'Switch',\n  'Text',\n  'TextInput',\n  'TouchableHighlight',\n  'TouchableOpacity',\n  'View',\n  'VirtualizedList',\n] as const;\n\n/** The complete host module list: the bare modules plus one specifier per Unistyles component. */\nexport const NATIVE_HOST_MODULE_IDS: readonly string[] = [\n  ...NATIVE_HOST_MODULES,\n  ...NATIVE_UNISTYLES_COMPONENTS.map((name) => `${NATIVE_UNISTYLES_COMPONENT_PREFIX}${name}`),\n];\n"],"mappings":";;;;;;;;;AASA,MAAa,sBAAsB;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,oCAAoC;;;;;AAMjD,MAAa,8BAA8B;CACzC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,yBAA4C,CACvD,GAAG,qBACH,GAAG,4BAA4B,KAAK,SAAS,GAAG,oCAAoC,MAAM,CAC5F"}

package/dist/src/constants/remote.cjs

@@ -0,0 +1,132 @@
+//#region src/constants/remote.ts
+/**
+* Wire vocabulary for remote access, shared by the hub routes and the cockpit.
+*
+* Remote access binds a second loopback listener that a tunnel points at, and
+* everything arriving there must prove it holds a paired session. The
+* discriminator is the listening socket, not a header: a tunnel connects from
+* 127.0.0.1 like every local client, and there is no header a remote caller
+* cannot forge.
+*/
+/** REST surface for the remote-access control plane; local callers only, except turn-off and revoke. */
+const REMOTE_API_ROUTE = "/api/remote";
+/** Dev proxy control plane: list targets anywhere, register or remove them only on the host. */
+const DEV_PROXY_TARGETS_ROUTE = `${REMOTE_API_ROUTE}/dev-proxy/targets`;
+/**
+* The path every proxied dev-server request lives under. Both slashes matter: the leading one
+* anchors it at the root, and the trailing one keeps `/devproxyevil` from matching.
+*/
+const DEV_PROXY_PREFIX = "/devproxy/";
+/** Direct endpoint that establishes one scoped end-to-end channel. */
+const REMOTE_CHANNEL_ROUTE = `${REMOTE_API_ROUTE}/channel`;
+/** The only authenticated HTTP gateway exposed on the tunnel listener. */
+const REMOTE_HTTP_ROUTE = `${REMOTE_API_ROUTE}/request`;
+/** Device-bound, sealed routes for ephemeral live Web Push registration. */
+const REMOTE_PUSH_ROUTE = `${REMOTE_API_ROUTE}/push`;
+`${REMOTE_PUSH_ROUTE}`;
+/** The pairing page a scanned QR opens. Unauthenticated on the tunnel listener. */
+const PAIRING_PAGE_ROUTE = "/pair";
+/** Where the pairing page posts the scanned code. Unauthenticated on the tunnel listener. */
+const PAIRING_CLAIM_ROUTE = "/api/remote/pair";
+/** Polled until the host approves or denies. Unauthenticated on the tunnel listener. */
+const PAIRING_STATUS_ROUTE = "/api/remote/pair/status";
+/** Query parameter naming the pairing request; a path parameter would force a wildcard into the allowlist. */
+const PAIRING_STATUS_QUERY = "request";
+/**
+* Session cookie base name. Rendered `__Host-po_device` by hono's `host`
+* prefix, which refuses the cookie unless it is Secure, Path=/, and
+* Domain-less, so a sibling subdomain can neither read nor overwrite it.
+*/
+const DEVICE_COOKIE = "po_device";
+/**
+* Passkey ceremonies exposed directly on the pairing surface.
+*
+* Sign-in is unauthenticated because it creates a session. Registration requires
+* the paired device cookie issued after host approval, but remains direct so the
+* self-contained pairing page can offer enrolment before loading the cockpit.
+*/
+const PASSKEY_AUTH_BEGIN_ROUTE = "/api/remote/passkeys/authenticate/begin";
+const PASSKEY_AUTH_FINISH_ROUTE = "/api/remote/passkeys/authenticate/finish";
+const PASSKEY_REGISTER_BEGIN_ROUTE = "/api/remote/passkeys/register/begin";
+const PASSKEY_REGISTER_FINISH_ROUTE = "/api/remote/passkeys/register/finish";
+/** Header carrying a step-up assertion for an action that needs more than a live session. */
+const STEP_UP_HEADER = "x-po-assertion";
+/** The vite dev server port; the origin allowlist and vite.config.ts share this. */
+const WEB_DEV_SERVER_PORT = 7534;
+/** How long a scanned pairing code stays claimable. */
+const PAIRING_CODE_TTL_MS = 12e4;
+/** How long the host has to approve or deny a claimed request. */
+const PAIRING_REQUEST_TTL_MS = 18e4;
+/** Cookie lifetime when session expiry is switched off; a session cookie can outlive the laptop. */
+const COOKIE_CEILING_SECONDS = 2592e3;
+/** Hub frame announcing remote-access state; sent to local and remote pages. */
+const REMOTE_STATE_TYPE = "remote_state";
+/** Hub frame announcing a device waiting for approval; sent to local pages only. */
+const REMOTE_PAIRING_REQUEST_TYPE = "remote_pairing_request";
+/**
+* Native device trust. A phone paired by QR registers an identity key and a biometric step-up key over
+* the sealed gateway, then reconnects with the identity key and no host approval.
+*/
+const DEVICE_AUTH_CHALLENGE_ROUTE = `${REMOTE_API_ROUTE}/device-auth/challenge`;
+const DEVICE_AUTH_AUTHENTICATE_ROUTE = `${REMOTE_API_ROUTE}/device-auth/authenticate`;
+/** Sealed only: registration bodies never travel where the relay can read them. */
+const TRUSTED_DEVICES_ROUTE = `${REMOTE_API_ROUTE}/trusted-devices`;
+const DEVICE_AUTH_AUTHENTICATE_BODY_BYTES = 1024;
+const TRUSTED_DEVICE_REGISTER_BODY_BYTES = 2048;
+/** A reconnect challenge has to survive a slow network and a cold app start. */
+const DEVICE_AUTH_CHALLENGE_TTL_MS = 12e4;
+/** Matches the passkey step-up window: long enough for Face ID, short enough to be useless when captured. */
+const DEVICE_STEP_UP_CHALLENGE_TTL_MS = 6e4;
+/** Upper bound on outstanding device challenges; the oldest is dropped first. */
+const DEVICE_CHALLENGE_LIMIT = 1024;
+/** Signed by the host bundle signer: `origin`, `hostPublicKey`, `deviceNonce`. */
+const HOST_CHANNEL_KEY_TAG = "po/host-channel-key/v1";
+/**
+* Signed by the identity key and separately by the step-up key: `origin`, `hostPublicKey`,
+* `sessionDeviceId`, `identityPublicKey`, `stepUpPublicKey`, `platform`.
+*/
+const DEVICE_REGISTER_TAG = "po/device-register/v1";
+/**
+* Signed by the identity key: `origin`, `challenge`, `hostPublicKey`, `trustedDeviceId`, `sessionKey`,
+* `protocolKey`, `httpKey`.
+*/
+const DEVICE_AUTH_TAG = "po/device-auth/v1";
+/** Signed by the biometric step-up key: `origin`, `action`, `sessionDeviceId`, `challengeId`, `challenge`. */
+const DEVICE_STEP_UP_TAG = "po/device-step-up/v1";
+//#endregion
+exports.COOKIE_CEILING_SECONDS = COOKIE_CEILING_SECONDS;
+exports.DEVICE_AUTH_AUTHENTICATE_BODY_BYTES = DEVICE_AUTH_AUTHENTICATE_BODY_BYTES;
+exports.DEVICE_AUTH_AUTHENTICATE_ROUTE = DEVICE_AUTH_AUTHENTICATE_ROUTE;
+exports.DEVICE_AUTH_CHALLENGE_ROUTE = DEVICE_AUTH_CHALLENGE_ROUTE;
+exports.DEVICE_AUTH_CHALLENGE_TTL_MS = DEVICE_AUTH_CHALLENGE_TTL_MS;
+exports.DEVICE_AUTH_TAG = DEVICE_AUTH_TAG;
+exports.DEVICE_CHALLENGE_LIMIT = DEVICE_CHALLENGE_LIMIT;
+exports.DEVICE_COOKIE = DEVICE_COOKIE;
+exports.DEVICE_REGISTER_TAG = DEVICE_REGISTER_TAG;
+exports.DEVICE_STEP_UP_CHALLENGE_TTL_MS = DEVICE_STEP_UP_CHALLENGE_TTL_MS;
+exports.DEVICE_STEP_UP_TAG = DEVICE_STEP_UP_TAG;
+exports.DEV_PROXY_PREFIX = DEV_PROXY_PREFIX;
+exports.DEV_PROXY_TARGETS_ROUTE = DEV_PROXY_TARGETS_ROUTE;
+exports.HOST_CHANNEL_KEY_TAG = HOST_CHANNEL_KEY_TAG;
+exports.PAIRING_CLAIM_ROUTE = PAIRING_CLAIM_ROUTE;
+exports.PAIRING_CODE_TTL_MS = PAIRING_CODE_TTL_MS;
+exports.PAIRING_PAGE_ROUTE = PAIRING_PAGE_ROUTE;
+exports.PAIRING_REQUEST_TTL_MS = PAIRING_REQUEST_TTL_MS;
+exports.PAIRING_STATUS_QUERY = PAIRING_STATUS_QUERY;
+exports.PAIRING_STATUS_ROUTE = PAIRING_STATUS_ROUTE;
+exports.PASSKEY_AUTH_BEGIN_ROUTE = PASSKEY_AUTH_BEGIN_ROUTE;
+exports.PASSKEY_AUTH_FINISH_ROUTE = PASSKEY_AUTH_FINISH_ROUTE;
+exports.PASSKEY_REGISTER_BEGIN_ROUTE = PASSKEY_REGISTER_BEGIN_ROUTE;
+exports.PASSKEY_REGISTER_FINISH_ROUTE = PASSKEY_REGISTER_FINISH_ROUTE;
+exports.REMOTE_API_ROUTE = REMOTE_API_ROUTE;
+exports.REMOTE_CHANNEL_ROUTE = REMOTE_CHANNEL_ROUTE;
+exports.REMOTE_HTTP_ROUTE = REMOTE_HTTP_ROUTE;
+exports.REMOTE_PAIRING_REQUEST_TYPE = REMOTE_PAIRING_REQUEST_TYPE;
+exports.REMOTE_PUSH_ROUTE = REMOTE_PUSH_ROUTE;
+exports.REMOTE_STATE_TYPE = REMOTE_STATE_TYPE;
+exports.STEP_UP_HEADER = STEP_UP_HEADER;
+exports.TRUSTED_DEVICES_ROUTE = TRUSTED_DEVICES_ROUTE;
+exports.TRUSTED_DEVICE_REGISTER_BODY_BYTES = TRUSTED_DEVICE_REGISTER_BODY_BYTES;
+exports.WEB_DEV_SERVER_PORT = WEB_DEV_SERVER_PORT;
+
+//# sourceMappingURL=remote.cjs.map

package/dist/src/constants/remote.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.cjs","names":[],"sources":["../../../src/constants/remote.ts"],"sourcesContent":["/**\n * Wire vocabulary for remote access, shared by the hub routes and the cockpit.\n *\n * Remote access binds a second loopback listener that a tunnel points at, and\n * everything arriving there must prove it holds a paired session. The\n * discriminator is the listening socket, not a header: a tunnel connects from\n * 127.0.0.1 like every local client, and there is no header a remote caller\n * cannot forge.\n */\n\n/** REST surface for the remote-access control plane; local callers only, except turn-off and revoke. */\nexport const REMOTE_API_ROUTE = '/api/remote';\n\n/** Dev proxy control plane: list targets anywhere, register or remove them only on the host. */\nexport const DEV_PROXY_TARGETS_ROUTE = `${REMOTE_API_ROUTE}/dev-proxy/targets`;\n\n/**\n * The path every proxied dev-server request lives under. Both slashes matter: the leading one\n * anchors it at the root, and the trailing one keeps `/devproxyevil` from matching.\n */\nexport const DEV_PROXY_PREFIX = '/devproxy/';\n\n/** Direct endpoint that establishes one scoped end-to-end channel. */\nexport const REMOTE_CHANNEL_ROUTE = `${REMOTE_API_ROUTE}/channel`;\n\n/** The only authenticated HTTP gateway exposed on the tunnel listener. */\nexport const REMOTE_HTTP_ROUTE = `${REMOTE_API_ROUTE}/request`;\n\n/** Device-bound, sealed routes for ephemeral live Web Push registration. */\nexport const REMOTE_PUSH_ROUTE = `${REMOTE_API_ROUTE}/push`;\n\nexport const REMOTE_PUSH_KEY_ROUTE = `${REMOTE_PUSH_ROUTE}/key`;\n\nexport const PROTOCOL_SOCKET_ROUTE = '/api/ws';\n\n/** The pairing page a scanned QR opens. Unauthenticated on the tunnel listener. */\nexport const PAIRING_PAGE_ROUTE = '/pair';\n\n/** Where the pairing page posts the scanned code. Unauthenticated on the tunnel listener. */\nexport const PAIRING_CLAIM_ROUTE = '/api/remote/pair';\n\n/** Polled until the host approves or denies. Unauthenticated on the tunnel listener. */\nexport const PAIRING_STATUS_ROUTE = '/api/remote/pair/status';\n\n/** Query parameter naming the pairing request; a path parameter would force a wildcard into the allowlist. */\nexport const PAIRING_STATUS_QUERY = 'request';\n\n/** URL-fragment fields authenticated by seeing the host's physical QR. */\nexport const BUNDLE_SIGNING_KEY_PARAM = 's';\n\nexport const BUNDLE_MINIMUM_REVISION_PARAM = 'r';\n\n/**\n * Session cookie base name. Rendered `__Host-po_device` by hono's `host`\n * prefix, which refuses the cookie unless it is Secure, Path=/, and\n * Domain-less, so a sibling subdomain can neither read nor overwrite it.\n */\nexport const DEVICE_COOKIE = 'po_device';\n\n/**\n * Passkey ceremonies exposed directly on the pairing surface.\n *\n * Sign-in is unauthenticated because it creates a session. Registration requires\n * the paired device cookie issued after host approval, but remains direct so the\n * self-contained pairing page can offer enrolment before loading the cockpit.\n */\nexport const PASSKEY_AUTH_BEGIN_ROUTE = '/api/remote/passkeys/authenticate/begin';\n\nexport const PASSKEY_AUTH_FINISH_ROUTE = '/api/remote/passkeys/authenticate/finish';\n\nexport const PASSKEY_REGISTER_BEGIN_ROUTE = '/api/remote/passkeys/register/begin';\n\nexport const PASSKEY_REGISTER_FINISH_ROUTE = '/api/remote/passkeys/register/finish';\n\n/** Header carrying a step-up assertion for an action that needs more than a live session. */\nexport const STEP_UP_HEADER = 'x-po-assertion';\n\n/** The vite dev server port; the origin allowlist and vite.config.ts share this. */\nexport const WEB_DEV_SERVER_PORT = 7534;\n\n/** How long a scanned pairing code stays claimable. */\nexport const PAIRING_CODE_TTL_MS = 120_000;\n\n/** How long the host has to approve or deny a claimed request. */\nexport const PAIRING_REQUEST_TTL_MS = 180_000;\n\n/** Cookie lifetime when session expiry is switched off; a session cookie can outlive the laptop. */\nexport const COOKIE_CEILING_SECONDS = 2_592_000;\n\n/** Hub frame announcing remote-access state; sent to local and remote pages. */\nexport const REMOTE_STATE_TYPE = 'remote_state';\n\n/** Hub frame announcing a device waiting for approval; sent to local pages only. */\nexport const REMOTE_PAIRING_REQUEST_TYPE = 'remote_pairing_request';\n\n/**\n * Native device trust. A phone paired by QR registers an identity key and a biometric step-up key over\n * the sealed gateway, then reconnects with the identity key and no host approval.\n */\nexport const DEVICE_AUTH_CHALLENGE_ROUTE = `${REMOTE_API_ROUTE}/device-auth/challenge`;\n\nexport const DEVICE_AUTH_AUTHENTICATE_ROUTE = `${REMOTE_API_ROUTE}/device-auth/authenticate`;\n\n/** Sealed only: registration bodies never travel where the relay can read them. */\nexport const TRUSTED_DEVICES_ROUTE = `${REMOTE_API_ROUTE}/trusted-devices`;\n\nexport const DEVICE_AUTH_CHALLENGE_BODY_BYTES = 256;\n\nexport const DEVICE_AUTH_AUTHENTICATE_BODY_BYTES = 1024;\n\nexport const TRUSTED_DEVICE_REGISTER_BODY_BYTES = 2 * 1024;\n\n/** Most trusted native devices the host keeps on disk. */\nexport const TRUSTED_DEVICE_LIMIT = 32;\n\n/** A reconnect challenge has to survive a slow network and a cold app start. */\nexport const DEVICE_AUTH_CHALLENGE_TTL_MS = 120_000;\n\n/** Matches the passkey step-up window: long enough for Face ID, short enough to be useless when captured. */\nexport const DEVICE_STEP_UP_CHALLENGE_TTL_MS = 60_000;\n\n/** Upper bound on outstanding device challenges; the oldest is dropped first. */\nexport const DEVICE_CHALLENGE_LIMIT = 1024;\n\n/** Signed by the host bundle signer: `origin`, `hostPublicKey`, `deviceNonce`. */\nexport const HOST_CHANNEL_KEY_TAG = 'po/host-channel-key/v1';\n\n/**\n * Signed by the identity key and separately by the step-up key: `origin`, `hostPublicKey`,\n * `sessionDeviceId`, `identityPublicKey`, `stepUpPublicKey`, `platform`.\n */\nexport const DEVICE_REGISTER_TAG = 'po/device-register/v1';\n\n/**\n * Signed by the identity key: `origin`, `challenge`, `hostPublicKey`, `trustedDeviceId`, `sessionKey`,\n * `protocolKey`, `httpKey`.\n */\nexport const DEVICE_AUTH_TAG = 'po/device-auth/v1';\n\n/** Signed by the biometric step-up key: `origin`, `action`, `sessionDeviceId`, `challengeId`, `challenge`. */\nexport const DEVICE_STEP_UP_TAG = 'po/device-step-up/v1';\n"],"mappings":";;;;;;;;;;;AAWA,MAAa,mBAAmB;;AAGhC,MAAa,0BAA0B,GAAG,iBAAiB;;;;;AAM3D,MAAa,mBAAmB;;AAGhC,MAAa,uBAAuB,GAAG,iBAAiB;;AAGxD,MAAa,oBAAoB,GAAG,iBAAiB;;AAGrD,MAAa,oBAAoB,GAAG,iBAAiB;AAEhB,GAAG,kBAAH;;AAKrC,MAAa,qBAAqB;;AAGlC,MAAa,sBAAsB;;AAGnC,MAAa,uBAAuB;;AAGpC,MAAa,uBAAuB;;;;;;AAYpC,MAAa,gBAAgB;;;;;;;;AAS7B,MAAa,2BAA2B;AAExC,MAAa,4BAA4B;AAEzC,MAAa,+BAA+B;AAE5C,MAAa,gCAAgC;;AAG7C,MAAa,iBAAiB;;AAG9B,MAAa,sBAAsB;;AAGnC,MAAa,sBAAsB;;AAGnC,MAAa,yBAAyB;;AAGtC,MAAa,yBAAyB;;AAGtC,MAAa,oBAAoB;;AAGjC,MAAa,8BAA8B;;;;;AAM3C,MAAa,8BAA8B,GAAG,iBAAiB;AAE/D,MAAa,iCAAiC,GAAG,iBAAiB;;AAGlE,MAAa,wBAAwB,GAAG,iBAAiB;AAIzD,MAAa,sCAAsC;AAEnD,MAAa,qCAAqC;;AAMlD,MAAa,+BAA+B;;AAG5C,MAAa,kCAAkC;;AAG/C,MAAa,yBAAyB;;AAGtC,MAAa,uBAAuB;;;;;AAMpC,MAAa,sBAAsB;;;;;AAMnC,MAAa,kBAAkB;;AAG/B,MAAa,qBAAqB"}

package/dist/src/constants/remote.mjs

@@ -0,0 +1,99 @@
+//#region src/constants/remote.ts
+/**
+* Wire vocabulary for remote access, shared by the hub routes and the cockpit.
+*
+* Remote access binds a second loopback listener that a tunnel points at, and
+* everything arriving there must prove it holds a paired session. The
+* discriminator is the listening socket, not a header: a tunnel connects from
+* 127.0.0.1 like every local client, and there is no header a remote caller
+* cannot forge.
+*/
+/** REST surface for the remote-access control plane; local callers only, except turn-off and revoke. */
+const REMOTE_API_ROUTE = "/api/remote";
+/** Dev proxy control plane: list targets anywhere, register or remove them only on the host. */
+const DEV_PROXY_TARGETS_ROUTE = `${REMOTE_API_ROUTE}/dev-proxy/targets`;
+/**
+* The path every proxied dev-server request lives under. Both slashes matter: the leading one
+* anchors it at the root, and the trailing one keeps `/devproxyevil` from matching.
+*/
+const DEV_PROXY_PREFIX = "/devproxy/";
+/** Direct endpoint that establishes one scoped end-to-end channel. */
+const REMOTE_CHANNEL_ROUTE = `${REMOTE_API_ROUTE}/channel`;
+/** The only authenticated HTTP gateway exposed on the tunnel listener. */
+const REMOTE_HTTP_ROUTE = `${REMOTE_API_ROUTE}/request`;
+/** Device-bound, sealed routes for ephemeral live Web Push registration. */
+const REMOTE_PUSH_ROUTE = `${REMOTE_API_ROUTE}/push`;
+`${REMOTE_PUSH_ROUTE}`;
+/** The pairing page a scanned QR opens. Unauthenticated on the tunnel listener. */
+const PAIRING_PAGE_ROUTE = "/pair";
+/** Where the pairing page posts the scanned code. Unauthenticated on the tunnel listener. */
+const PAIRING_CLAIM_ROUTE = "/api/remote/pair";
+/** Polled until the host approves or denies. Unauthenticated on the tunnel listener. */
+const PAIRING_STATUS_ROUTE = "/api/remote/pair/status";
+/** Query parameter naming the pairing request; a path parameter would force a wildcard into the allowlist. */
+const PAIRING_STATUS_QUERY = "request";
+/**
+* Session cookie base name. Rendered `__Host-po_device` by hono's `host`
+* prefix, which refuses the cookie unless it is Secure, Path=/, and
+* Domain-less, so a sibling subdomain can neither read nor overwrite it.
+*/
+const DEVICE_COOKIE = "po_device";
+/**
+* Passkey ceremonies exposed directly on the pairing surface.
+*
+* Sign-in is unauthenticated because it creates a session. Registration requires
+* the paired device cookie issued after host approval, but remains direct so the
+* self-contained pairing page can offer enrolment before loading the cockpit.
+*/
+const PASSKEY_AUTH_BEGIN_ROUTE = "/api/remote/passkeys/authenticate/begin";
+const PASSKEY_AUTH_FINISH_ROUTE = "/api/remote/passkeys/authenticate/finish";
+const PASSKEY_REGISTER_BEGIN_ROUTE = "/api/remote/passkeys/register/begin";
+const PASSKEY_REGISTER_FINISH_ROUTE = "/api/remote/passkeys/register/finish";
+/** Header carrying a step-up assertion for an action that needs more than a live session. */
+const STEP_UP_HEADER = "x-po-assertion";
+/** The vite dev server port; the origin allowlist and vite.config.ts share this. */
+const WEB_DEV_SERVER_PORT = 7534;
+/** How long a scanned pairing code stays claimable. */
+const PAIRING_CODE_TTL_MS = 12e4;
+/** How long the host has to approve or deny a claimed request. */
+const PAIRING_REQUEST_TTL_MS = 18e4;
+/** Cookie lifetime when session expiry is switched off; a session cookie can outlive the laptop. */
+const COOKIE_CEILING_SECONDS = 2592e3;
+/** Hub frame announcing remote-access state; sent to local and remote pages. */
+const REMOTE_STATE_TYPE = "remote_state";
+/** Hub frame announcing a device waiting for approval; sent to local pages only. */
+const REMOTE_PAIRING_REQUEST_TYPE = "remote_pairing_request";
+/**
+* Native device trust. A phone paired by QR registers an identity key and a biometric step-up key over
+* the sealed gateway, then reconnects with the identity key and no host approval.
+*/
+const DEVICE_AUTH_CHALLENGE_ROUTE = `${REMOTE_API_ROUTE}/device-auth/challenge`;
+const DEVICE_AUTH_AUTHENTICATE_ROUTE = `${REMOTE_API_ROUTE}/device-auth/authenticate`;
+/** Sealed only: registration bodies never travel where the relay can read them. */
+const TRUSTED_DEVICES_ROUTE = `${REMOTE_API_ROUTE}/trusted-devices`;
+const DEVICE_AUTH_AUTHENTICATE_BODY_BYTES = 1024;
+const TRUSTED_DEVICE_REGISTER_BODY_BYTES = 2048;
+/** A reconnect challenge has to survive a slow network and a cold app start. */
+const DEVICE_AUTH_CHALLENGE_TTL_MS = 12e4;
+/** Matches the passkey step-up window: long enough for Face ID, short enough to be useless when captured. */
+const DEVICE_STEP_UP_CHALLENGE_TTL_MS = 6e4;
+/** Upper bound on outstanding device challenges; the oldest is dropped first. */
+const DEVICE_CHALLENGE_LIMIT = 1024;
+/** Signed by the host bundle signer: `origin`, `hostPublicKey`, `deviceNonce`. */
+const HOST_CHANNEL_KEY_TAG = "po/host-channel-key/v1";
+/**
+* Signed by the identity key and separately by the step-up key: `origin`, `hostPublicKey`,
+* `sessionDeviceId`, `identityPublicKey`, `stepUpPublicKey`, `platform`.
+*/
+const DEVICE_REGISTER_TAG = "po/device-register/v1";
+/**
+* Signed by the identity key: `origin`, `challenge`, `hostPublicKey`, `trustedDeviceId`, `sessionKey`,
+* `protocolKey`, `httpKey`.
+*/
+const DEVICE_AUTH_TAG = "po/device-auth/v1";
+/** Signed by the biometric step-up key: `origin`, `action`, `sessionDeviceId`, `challengeId`, `challenge`. */
+const DEVICE_STEP_UP_TAG = "po/device-step-up/v1";
+//#endregion
+export { COOKIE_CEILING_SECONDS, DEVICE_AUTH_AUTHENTICATE_BODY_BYTES, DEVICE_AUTH_AUTHENTICATE_ROUTE, DEVICE_AUTH_CHALLENGE_ROUTE, DEVICE_AUTH_CHALLENGE_TTL_MS, DEVICE_AUTH_TAG, DEVICE_CHALLENGE_LIMIT, DEVICE_COOKIE, DEVICE_REGISTER_TAG, DEVICE_STEP_UP_CHALLENGE_TTL_MS, DEVICE_STEP_UP_TAG, DEV_PROXY_PREFIX, DEV_PROXY_TARGETS_ROUTE, HOST_CHANNEL_KEY_TAG, PAIRING_CLAIM_ROUTE, PAIRING_CODE_TTL_MS, PAIRING_PAGE_ROUTE, PAIRING_REQUEST_TTL_MS, PAIRING_STATUS_QUERY, PAIRING_STATUS_ROUTE, PASSKEY_AUTH_BEGIN_ROUTE, PASSKEY_AUTH_FINISH_ROUTE, PASSKEY_REGISTER_BEGIN_ROUTE, PASSKEY_REGISTER_FINISH_ROUTE, REMOTE_API_ROUTE, REMOTE_CHANNEL_ROUTE, REMOTE_HTTP_ROUTE, REMOTE_PAIRING_REQUEST_TYPE, REMOTE_PUSH_ROUTE, REMOTE_STATE_TYPE, STEP_UP_HEADER, TRUSTED_DEVICES_ROUTE, TRUSTED_DEVICE_REGISTER_BODY_BYTES, WEB_DEV_SERVER_PORT };
+
+//# sourceMappingURL=remote.mjs.map

package/dist/src/constants/remote.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.mjs","names":[],"sources":["../../../src/constants/remote.ts"],"sourcesContent":["/**\n * Wire vocabulary for remote access, shared by the hub routes and the cockpit.\n *\n * Remote access binds a second loopback listener that a tunnel points at, and\n * everything arriving there must prove it holds a paired session. The\n * discriminator is the listening socket, not a header: a tunnel connects from\n * 127.0.0.1 like every local client, and there is no header a remote caller\n * cannot forge.\n */\n\n/** REST surface for the remote-access control plane; local callers only, except turn-off and revoke. */\nexport const REMOTE_API_ROUTE = '/api/remote';\n\n/** Dev proxy control plane: list targets anywhere, register or remove them only on the host. */\nexport const DEV_PROXY_TARGETS_ROUTE = `${REMOTE_API_ROUTE}/dev-proxy/targets`;\n\n/**\n * The path every proxied dev-server request lives under. Both slashes matter: the leading one\n * anchors it at the root, and the trailing one keeps `/devproxyevil` from matching.\n */\nexport const DEV_PROXY_PREFIX = '/devproxy/';\n\n/** Direct endpoint that establishes one scoped end-to-end channel. */\nexport const REMOTE_CHANNEL_ROUTE = `${REMOTE_API_ROUTE}/channel`;\n\n/** The only authenticated HTTP gateway exposed on the tunnel listener. */\nexport const REMOTE_HTTP_ROUTE = `${REMOTE_API_ROUTE}/request`;\n\n/** Device-bound, sealed routes for ephemeral live Web Push registration. */\nexport const REMOTE_PUSH_ROUTE = `${REMOTE_API_ROUTE}/push`;\n\nexport const REMOTE_PUSH_KEY_ROUTE = `${REMOTE_PUSH_ROUTE}/key`;\n\nexport const PROTOCOL_SOCKET_ROUTE = '/api/ws';\n\n/** The pairing page a scanned QR opens. Unauthenticated on the tunnel listener. */\nexport const PAIRING_PAGE_ROUTE = '/pair';\n\n/** Where the pairing page posts the scanned code. Unauthenticated on the tunnel listener. */\nexport const PAIRING_CLAIM_ROUTE = '/api/remote/pair';\n\n/** Polled until the host approves or denies. Unauthenticated on the tunnel listener. */\nexport const PAIRING_STATUS_ROUTE = '/api/remote/pair/status';\n\n/** Query parameter naming the pairing request; a path parameter would force a wildcard into the allowlist. */\nexport const PAIRING_STATUS_QUERY = 'request';\n\n/** URL-fragment fields authenticated by seeing the host's physical QR. */\nexport const BUNDLE_SIGNING_KEY_PARAM = 's';\n\nexport const BUNDLE_MINIMUM_REVISION_PARAM = 'r';\n\n/**\n * Session cookie base name. Rendered `__Host-po_device` by hono's `host`\n * prefix, which refuses the cookie unless it is Secure, Path=/, and\n * Domain-less, so a sibling subdomain can neither read nor overwrite it.\n */\nexport const DEVICE_COOKIE = 'po_device';\n\n/**\n * Passkey ceremonies exposed directly on the pairing surface.\n *\n * Sign-in is unauthenticated because it creates a session. Registration requires\n * the paired device cookie issued after host approval, but remains direct so the\n * self-contained pairing page can offer enrolment before loading the cockpit.\n */\nexport const PASSKEY_AUTH_BEGIN_ROUTE = '/api/remote/passkeys/authenticate/begin';\n\nexport const PASSKEY_AUTH_FINISH_ROUTE = '/api/remote/passkeys/authenticate/finish';\n\nexport const PASSKEY_REGISTER_BEGIN_ROUTE = '/api/remote/passkeys/register/begin';\n\nexport const PASSKEY_REGISTER_FINISH_ROUTE = '/api/remote/passkeys/register/finish';\n\n/** Header carrying a step-up assertion for an action that needs more than a live session. */\nexport const STEP_UP_HEADER = 'x-po-assertion';\n\n/** The vite dev server port; the origin allowlist and vite.config.ts share this. */\nexport const WEB_DEV_SERVER_PORT = 7534;\n\n/** How long a scanned pairing code stays claimable. */\nexport const PAIRING_CODE_TTL_MS = 120_000;\n\n/** How long the host has to approve or deny a claimed request. */\nexport const PAIRING_REQUEST_TTL_MS = 180_000;\n\n/** Cookie lifetime when session expiry is switched off; a session cookie can outlive the laptop. */\nexport const COOKIE_CEILING_SECONDS = 2_592_000;\n\n/** Hub frame announcing remote-access state; sent to local and remote pages. */\nexport const REMOTE_STATE_TYPE = 'remote_state';\n\n/** Hub frame announcing a device waiting for approval; sent to local pages only. */\nexport const REMOTE_PAIRING_REQUEST_TYPE = 'remote_pairing_request';\n\n/**\n * Native device trust. A phone paired by QR registers an identity key and a biometric step-up key over\n * the sealed gateway, then reconnects with the identity key and no host approval.\n */\nexport const DEVICE_AUTH_CHALLENGE_ROUTE = `${REMOTE_API_ROUTE}/device-auth/challenge`;\n\nexport const DEVICE_AUTH_AUTHENTICATE_ROUTE = `${REMOTE_API_ROUTE}/device-auth/authenticate`;\n\n/** Sealed only: registration bodies never travel where the relay can read them. */\nexport const TRUSTED_DEVICES_ROUTE = `${REMOTE_API_ROUTE}/trusted-devices`;\n\nexport const DEVICE_AUTH_CHALLENGE_BODY_BYTES = 256;\n\nexport const DEVICE_AUTH_AUTHENTICATE_BODY_BYTES = 1024;\n\nexport const TRUSTED_DEVICE_REGISTER_BODY_BYTES = 2 * 1024;\n\n/** Most trusted native devices the host keeps on disk. */\nexport const TRUSTED_DEVICE_LIMIT = 32;\n\n/** A reconnect challenge has to survive a slow network and a cold app start. */\nexport const DEVICE_AUTH_CHALLENGE_TTL_MS = 120_000;\n\n/** Matches the passkey step-up window: long enough for Face ID, short enough to be useless when captured. */\nexport const DEVICE_STEP_UP_CHALLENGE_TTL_MS = 60_000;\n\n/** Upper bound on outstanding device challenges; the oldest is dropped first. */\nexport const DEVICE_CHALLENGE_LIMIT = 1024;\n\n/** Signed by the host bundle signer: `origin`, `hostPublicKey`, `deviceNonce`. */\nexport const HOST_CHANNEL_KEY_TAG = 'po/host-channel-key/v1';\n\n/**\n * Signed by the identity key and separately by the step-up key: `origin`, `hostPublicKey`,\n * `sessionDeviceId`, `identityPublicKey`, `stepUpPublicKey`, `platform`.\n */\nexport const DEVICE_REGISTER_TAG = 'po/device-register/v1';\n\n/**\n * Signed by the identity key: `origin`, `challenge`, `hostPublicKey`, `trustedDeviceId`, `sessionKey`,\n * `protocolKey`, `httpKey`.\n */\nexport const DEVICE_AUTH_TAG = 'po/device-auth/v1';\n\n/** Signed by the biometric step-up key: `origin`, `action`, `sessionDeviceId`, `challengeId`, `challenge`. */\nexport const DEVICE_STEP_UP_TAG = 'po/device-step-up/v1';\n"],"mappings":";;;;;;;;;;;AAWA,MAAa,mBAAmB;;AAGhC,MAAa,0BAA0B,GAAG,iBAAiB;;;;;AAM3D,MAAa,mBAAmB;;AAGhC,MAAa,uBAAuB,GAAG,iBAAiB;;AAGxD,MAAa,oBAAoB,GAAG,iBAAiB;;AAGrD,MAAa,oBAAoB,GAAG,iBAAiB;AAEhB,GAAG,kBAAH;;AAKrC,MAAa,qBAAqB;;AAGlC,MAAa,sBAAsB;;AAGnC,MAAa,uBAAuB;;AAGpC,MAAa,uBAAuB;;;;;;AAYpC,MAAa,gBAAgB;;;;;;;;AAS7B,MAAa,2BAA2B;AAExC,MAAa,4BAA4B;AAEzC,MAAa,+BAA+B;AAE5C,MAAa,gCAAgC;;AAG7C,MAAa,iBAAiB;;AAG9B,MAAa,sBAAsB;;AAGnC,MAAa,sBAAsB;;AAGnC,MAAa,yBAAyB;;AAGtC,MAAa,yBAAyB;;AAGtC,MAAa,oBAAoB;;AAGjC,MAAa,8BAA8B;;;;;AAM3C,MAAa,8BAA8B,GAAG,iBAAiB;AAE/D,MAAa,iCAAiC,GAAG,iBAAiB;;AAGlE,MAAa,wBAAwB,GAAG,iBAAiB;AAIzD,MAAa,sCAAsC;AAEnD,MAAa,qCAAqC;;AAMlD,MAAa,+BAA+B;;AAG5C,MAAa,kCAAkC;;AAG/C,MAAa,yBAAyB;;AAGtC,MAAa,uBAAuB;;;;;AAMpC,MAAa,sBAAsB;;;;;AAMnC,MAAa,kBAAkB;;AAG/B,MAAa,qBAAqB"}

package/dist/src/constants/sessionFiles.cjs

@@ -0,0 +1,27 @@
+//#region src/constants/sessionFiles.ts
+/** Largest session file the host reads into a response or publishes at a share link. */
+const MAX_SESSION_FILE_BYTES = 26214400;
+/** Media types for session files a browser may render; anything else is served as bytes. */
+const SESSION_FILE_CONTENT_TYPES = {
+	".avif": "image/avif",
+	".bmp": "image/bmp",
+	".gif": "image/gif",
+	".jpeg": "image/jpeg",
+	".jpg": "image/jpeg",
+	".png": "image/png",
+	".svg": "image/svg+xml",
+	".webp": "image/webp",
+	".m4v": "video/mp4",
+	".mov": "video/quicktime",
+	".mp4": "video/mp4",
+	".webm": "video/webm",
+	".pdf": "application/pdf"
+};
+/** The fallback media type for a session file whose extension is not listed above. */
+const SESSION_FILE_DEFAULT_CONTENT_TYPE = "application/octet-stream";
+//#endregion
+exports.MAX_SESSION_FILE_BYTES = MAX_SESSION_FILE_BYTES;
+exports.SESSION_FILE_CONTENT_TYPES = SESSION_FILE_CONTENT_TYPES;
+exports.SESSION_FILE_DEFAULT_CONTENT_TYPE = SESSION_FILE_DEFAULT_CONTENT_TYPE;
+
+//# sourceMappingURL=sessionFiles.cjs.map

package/dist/src/constants/sessionFiles.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionFiles.cjs","names":[],"sources":["../../../src/constants/sessionFiles.ts"],"sourcesContent":["/** Largest session file the host reads into a response or publishes at a share link. */\nexport const MAX_SESSION_FILE_BYTES = 25 * 1024 * 1024;\n\n/** Media types for session files a browser may render; anything else is served as bytes. */\nexport const SESSION_FILE_CONTENT_TYPES: Readonly<Record<string, string>> = {\n  '.avif': 'image/avif',\n  '.bmp': 'image/bmp',\n  '.gif': 'image/gif',\n  '.jpeg': 'image/jpeg',\n  '.jpg': 'image/jpeg',\n  '.png': 'image/png',\n  '.svg': 'image/svg+xml',\n  '.webp': 'image/webp',\n  '.m4v': 'video/mp4',\n  '.mov': 'video/quicktime',\n  '.mp4': 'video/mp4',\n  '.webm': 'video/webm',\n  '.pdf': 'application/pdf',\n};\n\n/** The fallback media type for a session file whose extension is not listed above. */\nexport const SESSION_FILE_DEFAULT_CONTENT_TYPE = 'application/octet-stream';\n"],"mappings":";;AACA,MAAa,yBAAyB;;AAGtC,MAAa,6BAA+D;CAC1E,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;AACV;;AAGA,MAAa,oCAAoC"}

package/dist/src/constants/sessionFiles.mjs

@@ -0,0 +1,25 @@
+//#region src/constants/sessionFiles.ts
+/** Largest session file the host reads into a response or publishes at a share link. */
+const MAX_SESSION_FILE_BYTES = 26214400;
+/** Media types for session files a browser may render; anything else is served as bytes. */
+const SESSION_FILE_CONTENT_TYPES = {
+	".avif": "image/avif",
+	".bmp": "image/bmp",
+	".gif": "image/gif",
+	".jpeg": "image/jpeg",
+	".jpg": "image/jpeg",
+	".png": "image/png",
+	".svg": "image/svg+xml",
+	".webp": "image/webp",
+	".m4v": "video/mp4",
+	".mov": "video/quicktime",
+	".mp4": "video/mp4",
+	".webm": "video/webm",
+	".pdf": "application/pdf"
+};
+/** The fallback media type for a session file whose extension is not listed above. */
+const SESSION_FILE_DEFAULT_CONTENT_TYPE = "application/octet-stream";
+//#endregion
+export { MAX_SESSION_FILE_BYTES, SESSION_FILE_CONTENT_TYPES, SESSION_FILE_DEFAULT_CONTENT_TYPE };
+
+//# sourceMappingURL=sessionFiles.mjs.map

package/dist/src/constants/sessionFiles.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionFiles.mjs","names":[],"sources":["../../../src/constants/sessionFiles.ts"],"sourcesContent":["/** Largest session file the host reads into a response or publishes at a share link. */\nexport const MAX_SESSION_FILE_BYTES = 25 * 1024 * 1024;\n\n/** Media types for session files a browser may render; anything else is served as bytes. */\nexport const SESSION_FILE_CONTENT_TYPES: Readonly<Record<string, string>> = {\n  '.avif': 'image/avif',\n  '.bmp': 'image/bmp',\n  '.gif': 'image/gif',\n  '.jpeg': 'image/jpeg',\n  '.jpg': 'image/jpeg',\n  '.png': 'image/png',\n  '.svg': 'image/svg+xml',\n  '.webp': 'image/webp',\n  '.m4v': 'video/mp4',\n  '.mov': 'video/quicktime',\n  '.mp4': 'video/mp4',\n  '.webm': 'video/webm',\n  '.pdf': 'application/pdf',\n};\n\n/** The fallback media type for a session file whose extension is not listed above. */\nexport const SESSION_FILE_DEFAULT_CONTENT_TYPE = 'application/octet-stream';\n"],"mappings":";;AACA,MAAa,yBAAyB;;AAGtC,MAAa,6BAA+D;CAC1E,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,SAAS;CACT,QAAQ;AACV;;AAGA,MAAa,oCAAoC"}

package/dist/src/constants/voiceReloadHandoff.cjs

@@ -0,0 +1,12 @@
+//#region src/constants/voiceReloadHandoff.ts
+const VOICE_RELOAD_HANDOFF_REGISTRY_KEY = "@agimon-ai/po-core.voice-reload-handoff.v1";
+const VOICE_RELOAD_HANDOFF_TTL_MS = 3e4;
+const MAX_SESSION_ID_LENGTH = 256;
+const MAX_TOKEN_LENGTH = 512;
+//#endregion
+exports.MAX_SESSION_ID_LENGTH = MAX_SESSION_ID_LENGTH;
+exports.MAX_TOKEN_LENGTH = MAX_TOKEN_LENGTH;
+exports.VOICE_RELOAD_HANDOFF_REGISTRY_KEY = VOICE_RELOAD_HANDOFF_REGISTRY_KEY;
+exports.VOICE_RELOAD_HANDOFF_TTL_MS = VOICE_RELOAD_HANDOFF_TTL_MS;
+
+//# sourceMappingURL=voiceReloadHandoff.cjs.map

package/dist/src/constants/voiceReloadHandoff.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"voiceReloadHandoff.cjs","names":[],"sources":["../../../src/constants/voiceReloadHandoff.ts"],"sourcesContent":["export const VOICE_RELOAD_HANDOFF_REGISTRY_KEY = '@agimon-ai/po-core.voice-reload-handoff.v1' as const;\nexport const VOICE_RELOAD_HANDOFF_TTL_MS = 30_000;\nexport const MAX_SESSION_ID_LENGTH = 256;\nexport const MAX_TOKEN_LENGTH = 512;\n"],"mappings":";AAAA,MAAa,oCAAoC;AACjD,MAAa,8BAA8B;AAC3C,MAAa,wBAAwB;AACrC,MAAa,mBAAmB"}

package/dist/src/constants/voiceReloadHandoff.d.mts

@@ -0,0 +1,7 @@
+//#region src/constants/voiceReloadHandoff.d.ts
+export declare const VOICE_RELOAD_HANDOFF_REGISTRY_KEY: '@agimon-ai/po-core.voice-reload-handoff.v1';
+export declare const VOICE_RELOAD_HANDOFF_TTL_MS = 30000;
+export declare const MAX_SESSION_ID_LENGTH = 256;
+export declare const MAX_TOKEN_LENGTH = 512;
+//#endregion
+//# sourceMappingURL=voiceReloadHandoff.d.mts.map

package/dist/src/constants/voiceReloadHandoff.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"voiceReloadHandoff.d.mts","names":[],"sources":["../../../src/constants/voiceReloadHandoff.ts"],"mappings":";qBAAa;qBACA;qBACA;qBACA"}

package/dist/src/constants/voiceReloadHandoff.mjs

@@ -0,0 +1,9 @@
+//#region src/constants/voiceReloadHandoff.ts
+const VOICE_RELOAD_HANDOFF_REGISTRY_KEY = "@agimon-ai/po-core.voice-reload-handoff.v1";
+const VOICE_RELOAD_HANDOFF_TTL_MS = 3e4;
+const MAX_SESSION_ID_LENGTH = 256;
+const MAX_TOKEN_LENGTH = 512;
+//#endregion
+export { MAX_SESSION_ID_LENGTH, MAX_TOKEN_LENGTH, VOICE_RELOAD_HANDOFF_REGISTRY_KEY, VOICE_RELOAD_HANDOFF_TTL_MS };
+
+//# sourceMappingURL=voiceReloadHandoff.mjs.map

package/dist/src/constants/voiceReloadHandoff.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"voiceReloadHandoff.mjs","names":[],"sources":["../../../src/constants/voiceReloadHandoff.ts"],"sourcesContent":["export const VOICE_RELOAD_HANDOFF_REGISTRY_KEY = '@agimon-ai/po-core.voice-reload-handoff.v1' as const;\nexport const VOICE_RELOAD_HANDOFF_TTL_MS = 30_000;\nexport const MAX_SESSION_ID_LENGTH = 256;\nexport const MAX_TOKEN_LENGTH = 512;\n"],"mappings":";AAAA,MAAa,oCAAoC;AACjD,MAAa,8BAA8B;AAC3C,MAAa,wBAAwB;AACrC,MAAa,mBAAmB"}

package/dist/src/constants/voiceTools.cjs

@@ -0,0 +1,96 @@
+//#region src/constants/voiceTools.ts
+const DOOM_VOICE_TOOLS_SERVICE = "doom/voice-tools";
+const VOICE_DESCRIBE_TOOL_NAME = "describe_voice_tools";
+const VOICE_USE_TOOL_NAME = "use_voice_tools";
+const VOICE_FACADE_TOOL_NAMES = [VOICE_DESCRIBE_TOOL_NAME, VOICE_USE_TOOL_NAME];
+const VOICE_NARRATE_TOOL_NAME = "narrate";
+const VOICE_MODE_TOOL_NAMES = [...VOICE_FACADE_TOOL_NAMES, VOICE_NARRATE_TOOL_NAME];
+const VOICE_TOOL_DEFAULT_TIMEOUT_MS = 1e4;
+const VOICE_TOOL_MAX_TIMEOUT_MS = 3e4;
+const VOICE_TOOL_MAX_BATCH_ITEMS = 16;
+const VOICE_TOOL_MAX_INPUT_BYTES = 65536;
+const VOICE_TOOL_MAX_BATCH_BYTES = 262144;
+const VOICE_TOOL_MAX_SCHEMA_BYTES = 32768;
+const VOICE_TOOL_MAX_JSON_DEPTH = 16;
+const VOICE_TOOL_TERMINAL_OPERATION_LIMIT = 256;
+const VOICE_TOOL_MAX_IDENTIFIER_LENGTH = 128;
+const VOICE_TOOL_MAX_LABEL_LENGTH = 96;
+const VOICE_TOOL_MAX_DESCRIPTION_LENGTH = 240;
+const VOICE_TOOL_MAX_ERROR_MESSAGE_LENGTH = 240;
+const VOICE_TOOL_MAX_DOMAIN_COUNT = 32;
+const SAFE_IDENTIFIER = /^[A-Za-z0-9@][A-Za-z0-9@/._:-]*$/u;
+const SAFE_NAME = /^[a-z][a-z0-9_:-]*$/u;
+const MAX_ORDER = 1e3;
+const VOICE_TOOL_ERROR_CODE = {
+	hostUnavailable: "VOICE_TOOL_HOST_UNAVAILABLE",
+	inactive: "VOICE_TOOL_INACTIVE",
+	staleSession: "VOICE_TOOL_STALE_SESSION",
+	staleCatalog: "VOICE_TOOL_STALE_CATALOG",
+	notFound: "VOICE_TOOL_NOT_FOUND",
+	nameConflict: "VOICE_TOOL_NAME_CONFLICT",
+	invalidInput: "VOICE_TOOL_INVALID_INPUT",
+	invalidResult: "VOICE_TOOL_INVALID_RESULT",
+	executionFailed: "VOICE_TOOL_EXECUTION_FAILED",
+	timeout: "VOICE_TOOL_TIMEOUT",
+	aborted: "VOICE_TOOL_ABORTED",
+	cancelled: "VOICE_TOOL_CANCELLED",
+	registrationDisposed: "VOICE_TOOL_REGISTRATION_DISPOSED",
+	sessionShutdown: "VOICE_TOOL_SESSION_SHUTDOWN",
+	batchStopped: "VOICE_TOOL_BATCH_STOPPED",
+	reloadQueued: "VOICE_TOOL_RELOAD_QUEUED",
+	invalidRequest: "VOICE_TOOL_INVALID_REQUEST"
+};
+const VOICE_TOOL_HOST_UNAVAILABLE = VOICE_TOOL_ERROR_CODE.hostUnavailable;
+const VOICE_TOOL_INACTIVE = VOICE_TOOL_ERROR_CODE.inactive;
+const VOICE_TOOL_STALE_SESSION = VOICE_TOOL_ERROR_CODE.staleSession;
+const VOICE_TOOL_STALE_CATALOG = VOICE_TOOL_ERROR_CODE.staleCatalog;
+const VOICE_TOOL_NOT_FOUND = VOICE_TOOL_ERROR_CODE.notFound;
+const VOICE_TOOL_NAME_CONFLICT = VOICE_TOOL_ERROR_CODE.nameConflict;
+const VOICE_TOOL_INVALID_INPUT = VOICE_TOOL_ERROR_CODE.invalidInput;
+const VOICE_TOOL_INVALID_RESULT = VOICE_TOOL_ERROR_CODE.invalidResult;
+const VOICE_TOOL_TIMEOUT = VOICE_TOOL_ERROR_CODE.timeout;
+const VOICE_TOOL_ABORTED = VOICE_TOOL_ERROR_CODE.aborted;
+const VOICE_TOOL_EXECUTION_FAILED = VOICE_TOOL_ERROR_CODE.executionFailed;
+const VOICE_TOOL_BATCH_STOPPED = VOICE_TOOL_ERROR_CODE.batchStopped;
+const DOOM_VOICE_SOURCE = "@agimon-ai/po-voice";
+const DOOM_VOICE_AUTO_MODE_ID = "voice-auto";
+//#endregion
+exports.DOOM_VOICE_AUTO_MODE_ID = DOOM_VOICE_AUTO_MODE_ID;
+exports.DOOM_VOICE_SOURCE = DOOM_VOICE_SOURCE;
+exports.DOOM_VOICE_TOOLS_SERVICE = DOOM_VOICE_TOOLS_SERVICE;
+exports.MAX_ORDER = MAX_ORDER;
+exports.SAFE_IDENTIFIER = SAFE_IDENTIFIER;
+exports.SAFE_NAME = SAFE_NAME;
+exports.VOICE_DESCRIBE_TOOL_NAME = VOICE_DESCRIBE_TOOL_NAME;
+exports.VOICE_FACADE_TOOL_NAMES = VOICE_FACADE_TOOL_NAMES;
+exports.VOICE_MODE_TOOL_NAMES = VOICE_MODE_TOOL_NAMES;
+exports.VOICE_NARRATE_TOOL_NAME = VOICE_NARRATE_TOOL_NAME;
+exports.VOICE_TOOL_ABORTED = VOICE_TOOL_ABORTED;
+exports.VOICE_TOOL_BATCH_STOPPED = VOICE_TOOL_BATCH_STOPPED;
+exports.VOICE_TOOL_DEFAULT_TIMEOUT_MS = VOICE_TOOL_DEFAULT_TIMEOUT_MS;
+exports.VOICE_TOOL_ERROR_CODE = VOICE_TOOL_ERROR_CODE;
+exports.VOICE_TOOL_EXECUTION_FAILED = VOICE_TOOL_EXECUTION_FAILED;
+exports.VOICE_TOOL_HOST_UNAVAILABLE = VOICE_TOOL_HOST_UNAVAILABLE;
+exports.VOICE_TOOL_INACTIVE = VOICE_TOOL_INACTIVE;
+exports.VOICE_TOOL_INVALID_INPUT = VOICE_TOOL_INVALID_INPUT;
+exports.VOICE_TOOL_INVALID_RESULT = VOICE_TOOL_INVALID_RESULT;
+exports.VOICE_TOOL_MAX_BATCH_BYTES = VOICE_TOOL_MAX_BATCH_BYTES;
+exports.VOICE_TOOL_MAX_BATCH_ITEMS = VOICE_TOOL_MAX_BATCH_ITEMS;
+exports.VOICE_TOOL_MAX_DESCRIPTION_LENGTH = VOICE_TOOL_MAX_DESCRIPTION_LENGTH;
+exports.VOICE_TOOL_MAX_DOMAIN_COUNT = VOICE_TOOL_MAX_DOMAIN_COUNT;
+exports.VOICE_TOOL_MAX_ERROR_MESSAGE_LENGTH = VOICE_TOOL_MAX_ERROR_MESSAGE_LENGTH;
+exports.VOICE_TOOL_MAX_IDENTIFIER_LENGTH = VOICE_TOOL_MAX_IDENTIFIER_LENGTH;
+exports.VOICE_TOOL_MAX_INPUT_BYTES = VOICE_TOOL_MAX_INPUT_BYTES;
+exports.VOICE_TOOL_MAX_JSON_DEPTH = VOICE_TOOL_MAX_JSON_DEPTH;
+exports.VOICE_TOOL_MAX_LABEL_LENGTH = VOICE_TOOL_MAX_LABEL_LENGTH;
+exports.VOICE_TOOL_MAX_SCHEMA_BYTES = VOICE_TOOL_MAX_SCHEMA_BYTES;
+exports.VOICE_TOOL_MAX_TIMEOUT_MS = VOICE_TOOL_MAX_TIMEOUT_MS;
+exports.VOICE_TOOL_NAME_CONFLICT = VOICE_TOOL_NAME_CONFLICT;
+exports.VOICE_TOOL_NOT_FOUND = VOICE_TOOL_NOT_FOUND;
+exports.VOICE_TOOL_STALE_CATALOG = VOICE_TOOL_STALE_CATALOG;
+exports.VOICE_TOOL_STALE_SESSION = VOICE_TOOL_STALE_SESSION;
+exports.VOICE_TOOL_TERMINAL_OPERATION_LIMIT = VOICE_TOOL_TERMINAL_OPERATION_LIMIT;
+exports.VOICE_TOOL_TIMEOUT = VOICE_TOOL_TIMEOUT;
+exports.VOICE_USE_TOOL_NAME = VOICE_USE_TOOL_NAME;
+
+//# sourceMappingURL=voiceTools.cjs.map