@agimon-ai/po 0.0.0-alpha.2 → 0.0.0-alpha.21

package/dist/src/builders/server/backgroundSync.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"backgroundSync.mjs","names":["spawnProcess"],"sources":["../../../../src/builders/server/backgroundSync.ts"],"sourcesContent":["import { type ChildProcess, spawn as spawnProcess, type SpawnOptions } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { HARNESS_STATE_KEYS, HARNESS_STATE_POINTER } from '../../composition/harnessState';\nimport { packageCatalogHash } from '../../composition/layerPackageInstaller';\nimport {\n  readSyncLastAttempt,\n  readSyncPointer,\n  rootSelectionFingerprint,\n  SYNC_EXIT_BUSY,\n  SYNC_EXIT_OK,\n  type SyncPointer,\n  syncHostIdentity,\n} from '../../composition/syncService';\nimport { poPackageRoot } from '../cli/entryResolution';\n\n/**\n * Background sync: hosts that only read what sync prepared start `po sync --json --global` as\n * a child process when a root is out of date, and pick its artifacts up when it exits. The\n * terminal app instead syncs from its repository without `--global`, which registers it.\n *\n * At most one job runs per host. Requests that arrive while it runs merge into one rerun, and\n * nothing waits on a job, so admission and session open never block on sync.\n *\n * ponytail: there is no fs.watch on `.po`, so a config edit syncs at the next checkpoint\n * (server start, admission, session open). Add a watcher if edits must apply sooner.\n */\n\n/** Set on every background sync child to the pid of the host that started it. */\nexport const SYNC_PARENT_PID_ENV = 'PO_SYNC_PARENT_PID';\n/** `PO_AUTO_SYNC=0` turns background sync off, for CI and the system test. */\nexport const AUTO_SYNC_ENV = 'PO_AUTO_SYNC';\nconst AUTO_SYNC_OFF = '0';\nconst ROOT_ENV = 'PO_ROOT';\nconst SYNC_ARGS = ['sync', '--json'] as const;\nconst GLOBAL_OPTION = '--global';\nconst CLI_ENTRY_SEGMENTS = ['dist', 'bin', 'cli.mjs'] as const;\n\n/** The host pid a sync child was started by, or undefined when this process is not one. */\nexport function syncParentPid(environment: NodeJS.ProcessEnv): number | undefined {\n  const pid = Number(environment[SYNC_PARENT_PID_ENV]);\n  return Number.isInteger(pid) && pid > 0 ? pid : undefined;\n}\n\n/**\n * The environment a sync child runs under, and the one a host compares root fingerprints\n * with: no harness state and no root of the host's own, so both resolve every root alike.\n */\nexport function syncEnvironment(environment: NodeJS.ProcessEnv): NodeJS.ProcessEnv {\n  const scoped = { ...environment };\n  for (const key of [ROOT_ENV, HARNESS_STATE_POINTER, ...Object.values(HARNESS_STATE_KEYS)]) delete scoped[key];\n  return scoped;\n}\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport interface BackgroundSyncOptions {\n  environment: NodeJS.ProcessEnv;\n  onNotice: (message: string) => void;\n  /** Runs after each job's child exits, before a merged rerun starts. */\n  onExit?: (code: number | null) => void | Promise<void>;\n  /** Lets the child outlive this process, for a terminal app that exits before sync finishes. */\n  detached?: boolean;\n  /**\n   * The repository the child syncs from, without `--global`, so sync registers it as a workspace.\n   * Without one the child runs with `--global` and registers nothing.\n   */\n  repoRoot?: string;\n  /** Test seams. */\n  spawn?: (command: string, args: readonly string[], options: SpawnOptions) => ChildProcess;\n  cliEntry?: string;\n  parentPid?: number;\n}\n\nexport interface BackgroundSync {\n  /** Starts a job, or merges into the rerun of the running one. False when background sync is off. */\n  request(reason: string): boolean;\n  /** Whether a job runs or a rerun is queued. */\n  readonly syncing: boolean;\n  /** Resolves once no job runs and none is queued. */\n  idle(): Promise<void>;\n}\n\n/** Whether this host may start background sync: on unless `PO_AUTO_SYNC=0`, and never inside a sync child. */\nexport function autoSyncEnabled(environment: NodeJS.ProcessEnv): boolean {\n  return environment[AUTO_SYNC_ENV] !== AUTO_SYNC_OFF && syncParentPid(environment) === undefined;\n}\n\nexport function createBackgroundSync(options: BackgroundSyncOptions): BackgroundSync {\n  const enabled = autoSyncEnabled(options.environment);\n  let running = false;\n  let rerun = false;\n  const waiters: (() => void)[] = [];\n  const settle = (): void => {\n    if (!running) for (const resolve of waiters.splice(0)) resolve();\n  };\n  const start = (): boolean => {\n    const entry = options.cliEntry ?? path.join(poPackageRoot(), ...CLI_ENTRY_SEGMENTS);\n    if (!fs.existsSync(entry)) {\n      options.onNotice(`Background sync is unavailable because '${entry}' is missing; run po sync.`);\n      return false;\n    }\n    let child: ChildProcess;\n    try {\n      // On desktop the child inherits ELECTRON_RUN_AS_NODE, so the app binary runs it as node.\n      const scope = options.repoRoot === undefined ? [GLOBAL_OPTION] : [];\n      child = (options.spawn ?? spawnProcess)(process.execPath, [...process.execArgv, entry, ...SYNC_ARGS, ...scope], {\n        ...(options.repoRoot === undefined ? {} : { cwd: options.repoRoot }),\n        env: {\n          ...syncEnvironment(options.environment),\n          [SYNC_PARENT_PID_ENV]: String(options.parentPid ?? process.pid),\n        },\n        stdio: 'ignore',\n        detached: options.detached === true,\n        windowsHide: true,\n      });\n    } catch (error) {\n      options.onNotice(`Background sync could not start: ${errorMessage(error)}`);\n      return false;\n    }\n    running = true;\n    if (options.detached === true) child.unref();\n    let finished = false;\n    const finish = (code: number | null): void => {\n      if (finished) return;\n      finished = true;\n      if (code !== null && code !== SYNC_EXIT_OK && code !== SYNC_EXIT_BUSY)\n        options.onNotice(`Background sync exited with code ${String(code)}.`);\n      void Promise.resolve()\n        .then(() => options.onExit?.(code))\n        .catch((error: unknown) => options.onNotice(`Picking up background sync failed: ${errorMessage(error)}`))\n        .finally(() => {\n          running = false;\n          if (rerun) {\n            rerun = false;\n            start();\n          }\n          settle();\n        });\n    };\n    child.once('error', (error) => {\n      options.onNotice(`Background sync could not start: ${error.message}`);\n      finish(null);\n    });\n    child.once('exit', (code) => finish(code));\n    return true;\n  };\n  return {\n    request(): boolean {\n      if (!enabled) return false;\n      if (running) {\n        rerun = true;\n        return true;\n      }\n      return start();\n    },\n    get syncing() {\n      return running || rerun;\n    },\n    idle() {\n      return new Promise<void>((resolve) => {\n        waiters.push(resolve);\n        settle();\n      });\n    },\n  };\n}\n\n/**\n * Publishes a build only when the key it is given differs from the last one published, so a\n * sync that changed nothing republishes nothing. A key whose build cannot be read is skipped.\n */\nexport function createKeyedPickup<T>(\n  read: (key: string) => T | undefined,\n  publish: (build: T, key: string) => void,\n): (key: string | null | undefined) => 'published' | 'unchanged' | 'missing' {\n  let current: string | undefined;\n  return (key) => {\n    if (key === null || key === undefined || key === current) return 'unchanged';\n    const build = read(key);\n    if (build === undefined) return 'missing';\n    current = key;\n    publish(build, key);\n    return 'published';\n  };\n}\n\nexport interface SyncedBuildKeys {\n  webKey: string | null | undefined;\n  nativeKey: string | null | undefined;\n}\n\nexport interface SyncedBuildKeysInput {\n  pointer: SyncPointer | undefined;\n  /** Whether this host's own Po install wrote `pointer`. */\n  ownsPointer: boolean;\n  /** The kinds this host already publishes. */\n  published: { web: boolean; native: boolean };\n  /** The keys this install derives the way sync does, each only when its build exists. */\n  ownKeys: () => { webKey?: string; nativeKey?: string };\n  /** The newest web build in the Po home, whichever install made it. */\n  newestWebKey: () => string | undefined;\n}\n\n/**\n * The build keys a host publishes. Its own pointer names them. Before sync ever wrote one (the\n * first start after an upgrade), this install's derived keys, else the newest web build. A\n * pointer another Po install wrote is refused: what the host already publishes stays (an\n * undefined key changes nothing), and a kind it has not published yet takes only this\n * install's own build while its own sync runs, never the other install's.\n */\nexport function syncedBuildKeys(input: SyncedBuildKeysInput): SyncedBuildKeys {\n  const { pointer, published } = input;\n  if (input.ownsPointer && pointer !== undefined) return { webKey: pointer.webKey, nativeKey: pointer.nativeKey };\n  if (pointer === undefined) {\n    const own = input.ownKeys();\n    return { webKey: own.webKey ?? input.newestWebKey(), nativeKey: own.nativeKey };\n  }\n  if (published.web && published.native) return { webKey: undefined, nativeKey: undefined };\n  const own = input.ownKeys();\n  return {\n    webKey: published.web ? undefined : own.webKey,\n    nativeKey: published.native ? undefined : own.nativeKey,\n  };\n}\n\nexport interface SyncCheckpointsInput {\n  globalRoot: string;\n  homeDirectory: string;\n  environment: NodeJS.ProcessEnv;\n  background: BackgroundSync;\n  onNotice: (message: string) => void;\n}\n\nexport interface RootSyncCheck {\n  root: string;\n  /** How the root is named in a warning, such as `Workspace 'po'`. */\n  label: string;\n  /** The selectors this host left out because they are not synced. */\n  unsynced: readonly string[];\n}\n\nexport interface RootSyncStatus {\n  syncing: boolean;\n  /** One line per unsynced selector: why sync could not prepare it, or that it is still syncing. */\n  reasons: string[];\n}\n\n/**\n * The checkpoints a host runs when it admits a root or opens a session: request a background\n * job when the root changed since the last sync, and warn about what it opened without. Each\n * root's warning is emitted once until it changes.\n */\nexport function createSyncCheckpoints(input: SyncCheckpointsInput) {\n  const fingerprintEnvironment = syncEnvironment(input.environment);\n  const warned = new Map<string, string>();\n  /** The state each root last requested a sync for: pointer generation, catalogue and selection. */\n  const requested = new Map<string, string>();\n  /** This host's install, compared with the one that wrote the pointer. */\n  const host = (): string => syncHostIdentity(input.globalRoot, fingerprintEnvironment);\n  /** The last foreign pointer (install and generation) this host warned about. */\n  let warnedTakeover: string | undefined;\n  /**\n   * The root's state when it is stale (no pointer, a pointer another Po install wrote, a changed\n   * catalogue, or a selection that differs from the pointer's), else undefined.\n   *\n   * A foreign pointer's state includes its generation, which every sync moves, so each takeover\n   * of the shared runtime is one new stale state and gets one resync. That settles: the resync\n   * writes this host's own pointer, which is never stale for being foreign.\n   */\n  const staleState = (root: string): string | undefined => {\n    const pointer = readSyncPointer(input.globalRoot);\n    const catalogueHash = packageCatalogHash(input.environment);\n    const fingerprint = rootSelectionFingerprint(root, input.homeDirectory, fingerprintEnvironment);\n    if (pointer !== undefined && pointer.host !== host())\n      return JSON.stringify(['host', pointer.host ?? null, pointer.generation, catalogueHash, fingerprint]);\n    if (pointer?.catalogueHash === catalogueHash && pointer.fingerprints?.[root] === fingerprint) return undefined;\n    return JSON.stringify([pointer?.generation ?? null, catalogueHash, fingerprint]);\n  };\n  const stale = (root: string): boolean => staleState(root) !== undefined;\n  /**\n   * Requests one sync per stale state of a root. A sync that ran and could not change the\n   * pointer (it failed) is not requested again until the root, the catalogue or the pointer\n   * moves, so a broken root never makes every checkpoint start another full sync.\n   */\n  const requestIfStale = (check: RootSyncCheck): boolean => {\n    const state = staleState(check.root);\n    if (state === undefined) return false;\n    if (requested.get(check.root) === state) return true;\n    if (!input.background.request(`${check.label} changed since the last sync`)) return false;\n    requested.set(check.root, state);\n    return true;\n  };\n  /** The missing artifacts a sync was requested for, each with the pointer state it was missing under. */\n  const requestedMissing = new Set<string>();\n  /** Why the last attempt, or failing that the pointer, could not prepare each selector. */\n  const failures = (root: string): Map<string, string> => {\n    const reports = [readSyncLastAttempt(input.globalRoot), readSyncPointer(input.globalRoot)];\n    const reasons = new Map<string, string>();\n    for (const report of reports)\n      for (const entry of report?.roots.find((candidate) => candidate.root === root)?.unsynced ?? [])\n        if (!reasons.has(entry.selector)) reasons.set(entry.selector, entry.reason);\n    return reasons;\n  };\n  return {\n    stale,\n    /**\n     * Whether this host may publish the builds `pointer` names: only when its own Po install wrote\n     * it. Every pointer another install writes (each sync moves its generation) is refused, and\n     * gets one background sync of the global root and one warning, so this host keeps its previous\n     * publication until its own sync replaces the pointer.\n     */\n    ownsPointer(pointer: SyncPointer | undefined): pointer is SyncPointer {\n      if (pointer === undefined) return false;\n      const own = host();\n      if (pointer.host === own) return true;\n      const foreign = pointer.host ?? 'an older Po';\n      const resyncing = requestIfStale({ root: input.globalRoot, label: 'The global scope', unsynced: [] });\n      const takeover = JSON.stringify([foreign, pointer.generation]);\n      if (warnedTakeover !== takeover) {\n        warnedTakeover = takeover;\n        input.onNotice(\n          `Another Po install (${foreign}) replaced the shared packages; ${resyncing ? `resyncing with this install (${own})` : 'run po sync from this install to resync'}. Use one Po install so they stop replacing each other.`,\n        );\n      }\n      return false;\n    },\n    /**\n     * Requests one sync per missing artifact (such as an MCP app build key) and pointer state,\n     * the same limit stale roots get: a sync that ran and still did not produce it is not\n     * requested again until the pointer or the catalogue moves.\n     */\n    requestMissing(artifact: string, reason: string): boolean {\n      const pointer = readSyncPointer(input.globalRoot);\n      const state = JSON.stringify([artifact, pointer?.generation ?? null, packageCatalogHash(input.environment)]);\n      if (requestedMissing.has(state) || !input.background.request(reason)) return false;\n      requestedMissing.add(state);\n      return true;\n    },\n    /** Requests a job when `request` allows and the root is stale, then warns about `unsynced`. */\n    check(check: RootSyncCheck, request = true): RootSyncStatus {\n      if (request) requestIfStale(check);\n      const syncing = input.background.syncing;\n      if (check.unsynced.length === 0) {\n        warned.delete(check.root);\n        return { syncing, reasons: [] };\n      }\n      const known = failures(check.root);\n      const count = check.unsynced.length;\n      const noun = count === 1 ? 'extension' : 'extensions';\n      const reasons = check.unsynced.map((selector) => {\n        const reason = known.get(selector);\n        if (syncing || reason === undefined) return `${selector} is not synced yet`;\n        return `Sync could not prepare ${selector}: ${reason}.`;\n      });\n      const message = syncing\n        ? `${check.label} opened without ${String(count)} ${noun} that ${count === 1 ? 'is' : 'are'} still syncing: ${check.unsynced.join(', ')}. ${count === 1 ? 'It loads' : 'They load'} when sync finishes.`\n        : check.unsynced.every((selector) => known.has(selector))\n          ? reasons.join(' ')\n          : `${check.label} opened without ${String(count)} ${noun} that ${count === 1 ? 'is' : 'are'} not synced: ${check.unsynced.join(', ')}. Run po sync to prepare them.`;\n      if (warned.get(check.root) !== message) {\n        warned.set(check.root, message);\n        input.onNotice(message);\n      }\n      return { syncing, reasons };\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8BA,MAAa,sBAAsB;;AAEnC,MAAa,gBAAgB;AAC7B,MAAM,gBAAgB;AACtB,MAAM,WAAW;AACjB,MAAM,YAAY,CAAC,QAAQ,QAAQ;AACnC,MAAM,gBAAgB;AACtB,MAAM,qBAAqB;CAAC;CAAQ;CAAO;AAAS;;AAGpD,SAAgB,cAAc,aAAoD;CAChF,MAAM,MAAM,OAAO,YAAY,oBAAoB;CACnD,OAAO,OAAO,UAAU,GAAG,KAAK,MAAM,IAAI,MAAM,KAAA;AAClD;;;;;AAMA,SAAgB,gBAAgB,aAAmD;CACjF,MAAM,SAAS,EAAE,GAAG,YAAY;CAChC,KAAK,MAAM,OAAO;EAAC;EAAU;EAAuB,GAAG,OAAO,OAAO,kBAAkB;CAAC,GAAG,OAAO,OAAO;CACzG,OAAO;AACT;AAEA,SAAS,aAAa,OAAwB;CAC5C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;;AA8BA,SAAgB,gBAAgB,aAAyC;CACvE,OAAO,YAAA,oBAA+B,iBAAiB,cAAc,WAAW,MAAM,KAAA;AACxF;AAEA,SAAgB,qBAAqB,SAAgD;CACnF,MAAM,UAAU,gBAAgB,QAAQ,WAAW;CACnD,IAAI,UAAU;CACd,IAAI,QAAQ;CACZ,MAAM,UAA0B,CAAC;CACjC,MAAM,eAAqB;EACzB,IAAI,CAAC,SAAS,KAAK,MAAM,WAAW,QAAQ,OAAO,CAAC,GAAG,QAAQ;CACjE;CACA,MAAM,cAAuB;EAC3B,MAAM,QAAQ,QAAQ,YAAY,KAAK,KAAK,cAAc,GAAG,GAAG,kBAAkB;EAClF,IAAI,CAAC,GAAG,WAAW,KAAK,GAAG;GACzB,QAAQ,SAAS,2CAA2C,MAAM,2BAA2B;GAC7F,OAAO;EACT;EACA,IAAI;EACJ,IAAI;GAEF,MAAM,QAAQ,QAAQ,aAAa,KAAA,IAAY,CAAC,aAAa,IAAI,CAAC;GAClE,SAAS,QAAQ,SAASA,MAAAA,CAAc,QAAQ,UAAU;IAAC,GAAG,QAAQ;IAAU;IAAO,GAAG;IAAW,GAAG;GAAK,GAAG;IAC9G,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK,QAAQ,SAAS;IAClE,KAAK;KACH,GAAG,gBAAgB,QAAQ,WAAW;MACrC,sBAAsB,OAAO,QAAQ,aAAa,QAAQ,GAAG;IAChE;IACA,OAAO;IACP,UAAU,QAAQ,aAAa;IAC/B,aAAa;GACf,CAAC;EACH,SAAS,OAAO;GACd,QAAQ,SAAS,oCAAoC,aAAa,KAAK,GAAG;GAC1E,OAAO;EACT;EACA,UAAU;EACV,IAAI,QAAQ,aAAa,MAAM,MAAM,MAAM;EAC3C,IAAI,WAAW;EACf,MAAM,UAAU,SAA8B;GAC5C,IAAI,UAAU;GACd,WAAW;GACX,IAAI,SAAS,QAAQ,SAAA,KAAyB,SAAA,IAC5C,QAAQ,SAAS,oCAAoC,OAAO,IAAI,EAAE,EAAE;GACtE,QAAa,QAAQ,CAAC,CACnB,WAAW,QAAQ,SAAS,IAAI,CAAC,CAAC,CAClC,OAAO,UAAmB,QAAQ,SAAS,sCAAsC,aAAa,KAAK,GAAG,CAAC,CAAC,CACxG,cAAc;IACb,UAAU;IACV,IAAI,OAAO;KACT,QAAQ;KACR,MAAM;IACR;IACA,OAAO;GACT,CAAC;EACL;EACA,MAAM,KAAK,UAAU,UAAU;GAC7B,QAAQ,SAAS,oCAAoC,MAAM,SAAS;GACpE,OAAO,IAAI;EACb,CAAC;EACD,MAAM,KAAK,SAAS,SAAS,OAAO,IAAI,CAAC;EACzC,OAAO;CACT;CACA,OAAO;EACL,UAAmB;GACjB,IAAI,CAAC,SAAS,OAAO;GACrB,IAAI,SAAS;IACX,QAAQ;IACR,OAAO;GACT;GACA,OAAO,MAAM;EACf;EACA,IAAI,UAAU;GACZ,OAAO,WAAW;EACpB;EACA,OAAO;GACL,OAAO,IAAI,SAAe,YAAY;IACpC,QAAQ,KAAK,OAAO;IACpB,OAAO;GACT,CAAC;EACH;CACF;AACF;;;;;AAMA,SAAgB,kBACd,MACA,SAC2E;CAC3E,IAAI;CACJ,QAAQ,QAAQ;EACd,IAAI,QAAQ,QAAQ,QAAQ,KAAA,KAAa,QAAQ,SAAS,OAAO;EACjE,MAAM,QAAQ,KAAK,GAAG;EACtB,IAAI,UAAU,KAAA,GAAW,OAAO;EAChC,UAAU;EACV,QAAQ,OAAO,GAAG;EAClB,OAAO;CACT;AACF;;;;;;;;AA0BA,SAAgB,gBAAgB,OAA8C;CAC5E,MAAM,EAAE,SAAS,cAAc;CAC/B,IAAI,MAAM,eAAe,YAAY,KAAA,GAAW,OAAO;EAAE,QAAQ,QAAQ;EAAQ,WAAW,QAAQ;CAAU;CAC9G,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,MAAM,MAAM,QAAQ;EAC1B,OAAO;GAAE,QAAQ,IAAI,UAAU,MAAM,aAAa;GAAG,WAAW,IAAI;EAAU;CAChF;CACA,IAAI,UAAU,OAAO,UAAU,QAAQ,OAAO;EAAE,QAAQ,KAAA;EAAW,WAAW,KAAA;CAAU;CACxF,MAAM,MAAM,MAAM,QAAQ;CAC1B,OAAO;EACL,QAAQ,UAAU,MAAM,KAAA,IAAY,IAAI;EACxC,WAAW,UAAU,SAAS,KAAA,IAAY,IAAI;CAChD;AACF;;;;;;AA6BA,SAAgB,sBAAsB,OAA6B;CACjE,MAAM,yBAAyB,gBAAgB,MAAM,WAAW;CAChE,MAAM,yBAAS,IAAI,IAAoB;;CAEvC,MAAM,4BAAY,IAAI,IAAoB;;CAE1C,MAAM,aAAqB,iBAAiB,MAAM,YAAY,sBAAsB;;CAEpF,IAAI;;;;;;;;;CASJ,MAAM,cAAc,SAAqC;EACvD,MAAM,UAAU,gBAAgB,MAAM,UAAU;EAChD,MAAM,gBAAgB,mBAAmB,MAAM,WAAW;EAC1D,MAAM,cAAc,yBAAyB,MAAM,MAAM,eAAe,sBAAsB;EAC9F,IAAI,YAAY,KAAA,KAAa,QAAQ,SAAS,KAAK,GACjD,OAAO,KAAK,UAAU;GAAC;GAAQ,QAAQ,QAAQ;GAAM,QAAQ;GAAY;GAAe;EAAW,CAAC;EACtG,IAAI,SAAS,kBAAkB,iBAAiB,QAAQ,eAAe,UAAU,aAAa,OAAO,KAAA;EACrG,OAAO,KAAK,UAAU;GAAC,SAAS,cAAc;GAAM;GAAe;EAAW,CAAC;CACjF;CACA,MAAM,SAAS,SAA0B,WAAW,IAAI,MAAM,KAAA;;;;;;CAM9D,MAAM,kBAAkB,UAAkC;EACxD,MAAM,QAAQ,WAAW,MAAM,IAAI;EACnC,IAAI,UAAU,KAAA,GAAW,OAAO;EAChC,IAAI,UAAU,IAAI,MAAM,IAAI,MAAM,OAAO,OAAO;EAChD,IAAI,CAAC,MAAM,WAAW,QAAQ,GAAG,MAAM,MAAM,6BAA6B,GAAG,OAAO;EACpF,UAAU,IAAI,MAAM,MAAM,KAAK;EAC/B,OAAO;CACT;;CAEA,MAAM,mCAAmB,IAAI,IAAY;;CAEzC,MAAM,YAAY,SAAsC;EACtD,MAAM,UAAU,CAAC,oBAAoB,MAAM,UAAU,GAAG,gBAAgB,MAAM,UAAU,CAAC;EACzF,MAAM,0BAAU,IAAI,IAAoB;EACxC,KAAK,MAAM,UAAU,SACnB,KAAK,MAAM,SAAS,QAAQ,MAAM,MAAM,cAAc,UAAU,SAAS,IAAI,CAAC,EAAE,YAAY,CAAC,GAC3F,IAAI,CAAC,QAAQ,IAAI,MAAM,QAAQ,GAAG,QAAQ,IAAI,MAAM,UAAU,MAAM,MAAM;EAC9E,OAAO;CACT;CACA,OAAO;EACL;;;;;;;EAOA,YAAY,SAA0D;GACpE,IAAI,YAAY,KAAA,GAAW,OAAO;GAClC,MAAM,MAAM,KAAK;GACjB,IAAI,QAAQ,SAAS,KAAK,OAAO;GACjC,MAAM,UAAU,QAAQ,QAAQ;GAChC,MAAM,YAAY,eAAe;IAAE,MAAM,MAAM;IAAY,OAAO;IAAoB,UAAU,CAAC;GAAE,CAAC;GACpG,MAAM,WAAW,KAAK,UAAU,CAAC,SAAS,QAAQ,UAAU,CAAC;GAC7D,IAAI,mBAAmB,UAAU;IAC/B,iBAAiB;IACjB,MAAM,SACJ,uBAAuB,QAAQ,kCAAkC,YAAY,gCAAgC,IAAI,KAAK,0CAA0C,wDAClK;GACF;GACA,OAAO;EACT;;;;;;EAMA,eAAe,UAAkB,QAAyB;GACxD,MAAM,UAAU,gBAAgB,MAAM,UAAU;GAChD,MAAM,QAAQ,KAAK,UAAU;IAAC;IAAU,SAAS,cAAc;IAAM,mBAAmB,MAAM,WAAW;GAAC,CAAC;GAC3G,IAAI,iBAAiB,IAAI,KAAK,KAAK,CAAC,MAAM,WAAW,QAAQ,MAAM,GAAG,OAAO;GAC7E,iBAAiB,IAAI,KAAK;GAC1B,OAAO;EACT;;EAEA,MAAM,OAAsB,UAAU,MAAsB;GAC1D,IAAI,SAAS,eAAe,KAAK;GACjC,MAAM,UAAU,MAAM,WAAW;GACjC,IAAI,MAAM,SAAS,WAAW,GAAG;IAC/B,OAAO,OAAO,MAAM,IAAI;IACxB,OAAO;KAAE;KAAS,SAAS,CAAC;IAAE;GAChC;GACA,MAAM,QAAQ,SAAS,MAAM,IAAI;GACjC,MAAM,QAAQ,MAAM,SAAS;GAC7B,MAAM,OAAO,UAAU,IAAI,cAAc;GACzC,MAAM,UAAU,MAAM,SAAS,KAAK,aAAa;IAC/C,MAAM,SAAS,MAAM,IAAI,QAAQ;IACjC,IAAI,WAAW,WAAW,KAAA,GAAW,OAAO,GAAG,SAAS;IACxD,OAAO,0BAA0B,SAAS,IAAI,OAAO;GACvD,CAAC;GACD,MAAM,UAAU,UACZ,GAAG,MAAM,MAAM,kBAAkB,OAAO,KAAK,EAAE,GAAG,KAAK,QAAQ,UAAU,IAAI,OAAO,MAAM,kBAAkB,MAAM,SAAS,KAAK,IAAI,EAAE,IAAI,UAAU,IAAI,aAAa,YAAY,wBACjL,MAAM,SAAS,OAAO,aAAa,MAAM,IAAI,QAAQ,CAAC,IACpD,QAAQ,KAAK,GAAG,IAChB,GAAG,MAAM,MAAM,kBAAkB,OAAO,KAAK,EAAE,GAAG,KAAK,QAAQ,UAAU,IAAI,OAAO,MAAM,eAAe,MAAM,SAAS,KAAK,IAAI,EAAE;GACzI,IAAI,OAAO,IAAI,MAAM,IAAI,MAAM,SAAS;IACtC,OAAO,IAAI,MAAM,MAAM,OAAO;IAC9B,MAAM,SAAS,OAAO;GACxB;GACA,OAAO;IAAE;IAAS;GAAQ;EAC5B;CACF;AACF"}
+{"version":3,"file":"backgroundSync.mjs","names":["spawnProcess"],"sources":["../../../../src/builders/server/backgroundSync.ts"],"sourcesContent":["import { type ChildProcess, spawn as spawnProcess, type SpawnOptions } from 'node:child_process';\nimport fs from 'node:fs';\nimport path from 'node:path';\n\nimport { HARNESS_STATE_KEYS, HARNESS_STATE_POINTER } from '../../composition/harnessState';\nimport { packageCatalogHash } from '../../composition/layerPackageInstaller';\nimport {\n  readSyncLastAttempt,\n  readSyncPointer,\n  rootSelectionFingerprint,\n  SYNC_EXIT_BUSY,\n  SYNC_EXIT_OK,\n  type SyncPointer,\n  syncHostIdentity,\n} from '../../composition/syncService';\nimport { poPackageRoot } from '../cli/entryResolution';\n\n/**\n * Background sync: hosts that only read what sync prepared start `po sync --json --global` as\n * a child process when a root is out of date, and pick its artifacts up when it exits. The\n * terminal app instead syncs from its repository without `--global`, which registers it.\n *\n * At most one job runs per host. Requests that arrive while it runs merge into one rerun, and\n * nothing waits on a job, so admission and session open never block on sync.\n *\n * ponytail: there is no fs.watch on `.po`, so a config edit syncs at the next checkpoint\n * (server start, admission, session open). Add a watcher if edits must apply sooner.\n */\n\n/** Set on every background sync child to the pid of the host that started it. */\nexport const SYNC_PARENT_PID_ENV = 'PO_SYNC_PARENT_PID';\n/** `PO_AUTO_SYNC=0` turns background sync off, for CI and the system test. */\nexport const AUTO_SYNC_ENV = 'PO_AUTO_SYNC';\nconst AUTO_SYNC_OFF = '0';\nconst ROOT_ENV = 'PO_ROOT';\nconst SYNC_ARGS = ['sync', '--json'] as const;\nconst GLOBAL_OPTION = '--global';\nconst CLI_ENTRY_SEGMENTS = ['dist', 'bin', 'cli.mjs'] as const;\n\n/** The host pid a sync child was started by, or undefined when this process is not one. */\nexport function syncParentPid(environment: NodeJS.ProcessEnv): number | undefined {\n  const pid = Number(environment[SYNC_PARENT_PID_ENV]);\n  return Number.isInteger(pid) && pid > 0 ? pid : undefined;\n}\n\n/**\n * The environment a sync child runs under, and the one a host compares root fingerprints\n * with: no harness state and no root of the host's own, so both resolve every root alike.\n */\nexport function syncEnvironment(environment: NodeJS.ProcessEnv): NodeJS.ProcessEnv {\n  const scoped = { ...environment };\n  for (const key of [ROOT_ENV, HARNESS_STATE_POINTER, ...Object.values(HARNESS_STATE_KEYS)]) delete scoped[key];\n  return scoped;\n}\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport interface BackgroundSyncOptions {\n  environment: NodeJS.ProcessEnv;\n  onNotice: (message: string) => void;\n  /** Runs after each job's child exits, before a merged rerun starts. */\n  onExit?: (code: number | null) => void | Promise<void>;\n  /** Lets the child outlive this process, for a terminal app that exits before sync finishes. */\n  detached?: boolean;\n  /**\n   * The repository the child syncs from, without `--global`, so sync registers it as a workspace.\n   * Without one the child runs with `--global` and registers nothing.\n   */\n  repoRoot?: string;\n  /** Test seams. */\n  spawn?: (command: string, args: readonly string[], options: SpawnOptions) => ChildProcess;\n  cliEntry?: string;\n  parentPid?: number;\n}\n\nexport interface BackgroundSync {\n  /** Starts a job, or merges into the rerun of the running one. False when background sync is off. */\n  request(reason: string): boolean;\n  /** Whether a job runs or a rerun is queued. */\n  readonly syncing: boolean;\n  /** Resolves once no job runs and none is queued. */\n  idle(): Promise<void>;\n}\n\n/** Whether this host may start background sync: on unless `PO_AUTO_SYNC=0`, and never inside a sync child. */\nexport function autoSyncEnabled(environment: NodeJS.ProcessEnv): boolean {\n  return environment[AUTO_SYNC_ENV] !== AUTO_SYNC_OFF && syncParentPid(environment) === undefined;\n}\n\nexport function createBackgroundSync(options: BackgroundSyncOptions): BackgroundSync {\n  const enabled = autoSyncEnabled(options.environment);\n  let running = false;\n  let rerun = false;\n  const waiters: (() => void)[] = [];\n  const settle = (): void => {\n    if (!running) for (const resolve of waiters.splice(0)) resolve();\n  };\n  const start = (): boolean => {\n    const entry = options.cliEntry ?? path.join(poPackageRoot(), ...CLI_ENTRY_SEGMENTS);\n    if (!fs.existsSync(entry)) {\n      options.onNotice(`Background sync is unavailable because '${entry}' is missing; run po sync.`);\n      return false;\n    }\n    let child: ChildProcess;\n    try {\n      // On desktop the child inherits ELECTRON_RUN_AS_NODE, so the app binary runs it as node.\n      const scope = options.repoRoot === undefined ? [GLOBAL_OPTION] : [];\n      child = (options.spawn ?? spawnProcess)(process.execPath, [...process.execArgv, entry, ...SYNC_ARGS, ...scope], {\n        ...(options.repoRoot === undefined ? {} : { cwd: options.repoRoot }),\n        env: {\n          ...syncEnvironment(options.environment),\n          [SYNC_PARENT_PID_ENV]: String(options.parentPid ?? process.pid),\n        },\n        stdio: 'ignore',\n        detached: options.detached === true,\n        windowsHide: true,\n      });\n    } catch (error) {\n      options.onNotice(`Background sync could not start: ${errorMessage(error)}`);\n      return false;\n    }\n    running = true;\n    if (options.detached === true) child.unref();\n    let finished = false;\n    const finish = (code: number | null): void => {\n      if (finished) return;\n      finished = true;\n      if (code !== null && code !== SYNC_EXIT_OK && code !== SYNC_EXIT_BUSY)\n        options.onNotice(`Background sync exited with code ${String(code)}.`);\n      void Promise.resolve()\n        .then(() => options.onExit?.(code))\n        .catch((error: unknown) => options.onNotice(`Picking up background sync failed: ${errorMessage(error)}`))\n        .finally(() => {\n          running = false;\n          if (rerun) {\n            rerun = false;\n            start();\n          }\n          settle();\n        });\n    };\n    child.once('error', (error) => {\n      options.onNotice(`Background sync could not start: ${error.message}`);\n      finish(null);\n    });\n    child.once('exit', (code) => finish(code));\n    return true;\n  };\n  return {\n    request(): boolean {\n      if (!enabled) return false;\n      if (running) {\n        rerun = true;\n        return true;\n      }\n      return start();\n    },\n    get syncing() {\n      return running || rerun;\n    },\n    idle() {\n      return new Promise<void>((resolve) => {\n        waiters.push(resolve);\n        settle();\n      });\n    },\n  };\n}\n\n/**\n * Publishes a build only when the key it is given differs from the last one published, so a\n * sync that changed nothing republishes nothing. A key whose build cannot be read is skipped.\n */\nexport function createKeyedPickup<T>(\n  read: (key: string) => T | undefined,\n  publish: (build: T, key: string) => void,\n): (key: string | null | undefined) => 'published' | 'unchanged' | 'missing' {\n  let current: string | undefined;\n  return (key) => {\n    if (key === null || key === undefined || key === current) return 'unchanged';\n    const build = read(key);\n    if (build === undefined) return 'missing';\n    current = key;\n    publish(build, key);\n    return 'published';\n  };\n}\n\nexport interface SyncedBuildKeys {\n  webKey: string | null | undefined;\n  nativeKey: string | null | undefined;\n}\n\nexport interface SyncedBuildKeysInput {\n  pointer: SyncPointer | undefined;\n  /** Whether this host's own Po install wrote `pointer`. */\n  ownsPointer: boolean;\n  /** The kinds this host already publishes. */\n  published: { web: boolean; native: boolean };\n  /** The keys this install derives the way sync does, each only when its build exists. */\n  ownKeys: () => { webKey?: string; nativeKey?: string };\n  /** The newest web build in the Po home, whichever install made it. */\n  newestWebKey: () => string | undefined;\n}\n\n/**\n * The build keys a host publishes. Its own pointer names them. Before sync ever wrote one (the\n * first start after an upgrade), this install's derived keys, else the newest web build. A\n * pointer another Po install wrote is refused: what the host already publishes stays (an\n * undefined key changes nothing), and a kind it has not published yet takes only this\n * install's own build while its own sync runs, never the other install's.\n */\nexport function syncedBuildKeys(input: SyncedBuildKeysInput): SyncedBuildKeys {\n  const { pointer, published } = input;\n  if (input.ownsPointer && pointer !== undefined) return { webKey: pointer.webKey, nativeKey: pointer.nativeKey };\n  if (pointer === undefined) {\n    const own = input.ownKeys();\n    return { webKey: own.webKey ?? input.newestWebKey(), nativeKey: own.nativeKey };\n  }\n  if (published.web && published.native) return { webKey: undefined, nativeKey: undefined };\n  const own = input.ownKeys();\n  return {\n    webKey: published.web ? undefined : own.webKey,\n    nativeKey: published.native ? undefined : own.nativeKey,\n  };\n}\n\nexport interface SyncCheckpointsInput {\n  globalRoot: string;\n  homeDirectory: string;\n  environment: NodeJS.ProcessEnv;\n  background: BackgroundSync;\n  onNotice: (message: string) => void;\n}\n\nexport interface RootSyncCheck {\n  root: string;\n  /** How the root is named in a warning, such as `Workspace 'po'`. */\n  label: string;\n  /** The selectors this host left out because they are not synced. */\n  unsynced: readonly string[];\n}\n\nexport interface RootSyncStatus {\n  syncing: boolean;\n  /** One line per unsynced selector: why sync could not prepare it, or that it is still syncing. */\n  reasons: string[];\n}\n\n/**\n * The checkpoints a host runs when it admits a root or opens a session: request a background\n * job when the root changed since the last sync, and warn about what it opened without. Each\n * root's warning is emitted once until it changes.\n */\nexport function createSyncCheckpoints(input: SyncCheckpointsInput) {\n  const fingerprintEnvironment = syncEnvironment(input.environment);\n  const warned = new Map<string, string>();\n  /** The state each root last requested a sync for: pointer generation, catalogue and selection. */\n  const requested = new Map<string, string>();\n  /** This host's install, compared with the one that wrote the pointer. */\n  const host = (): string => syncHostIdentity(input.globalRoot, fingerprintEnvironment);\n  /** The last foreign pointer (install and generation) this host warned about. */\n  let warnedTakeover: string | undefined;\n  /** Each root's selection fingerprint, kept until `invalidate`: resolving it composes every mode. */\n  const fingerprints = new Map<string, string>();\n  const fingerprintFor = (root: string): string => {\n    let fingerprint = fingerprints.get(root);\n    if (fingerprint === undefined) {\n      fingerprint = rootSelectionFingerprint(root, input.homeDirectory, fingerprintEnvironment);\n      fingerprints.set(root, fingerprint);\n    }\n    return fingerprint;\n  };\n  /**\n   * The root's state when it is stale (no pointer, a pointer another Po install wrote, a changed\n   * catalogue, or a selection that differs from the pointer's), else undefined.\n   *\n   * A foreign pointer's state includes its generation, which every sync moves, so each takeover\n   * of the shared runtime is one new stale state and gets one resync. That settles: the resync\n   * writes this host's own pointer, which is never stale for being foreign.\n   */\n  const staleState = (root: string): string | undefined => {\n    const pointer = readSyncPointer(input.globalRoot);\n    const catalogueHash = packageCatalogHash(input.environment);\n    const fingerprint = fingerprintFor(root);\n    if (pointer !== undefined && pointer.host !== host())\n      return JSON.stringify(['host', pointer.host ?? null, pointer.generation, catalogueHash, fingerprint]);\n    if (pointer?.catalogueHash === catalogueHash && pointer.fingerprints?.[root] === fingerprint) return undefined;\n    return JSON.stringify([pointer?.generation ?? null, catalogueHash, fingerprint]);\n  };\n  const stale = (root: string): boolean => staleState(root) !== undefined;\n  /**\n   * Requests one sync per stale state of a root. A sync that ran and could not change the\n   * pointer (it failed) is not requested again until the root, the catalogue or the pointer\n   * moves, so a broken root never makes every checkpoint start another full sync.\n   */\n  const requestIfStale = (check: RootSyncCheck): boolean => {\n    const state = staleState(check.root);\n    if (state === undefined) return false;\n    if (requested.get(check.root) === state) return true;\n    if (!input.background.request(`${check.label} changed since the last sync`)) return false;\n    requested.set(check.root, state);\n    return true;\n  };\n  /** The missing artifacts a sync was requested for, each with the pointer state it was missing under. */\n  const requestedMissing = new Set<string>();\n  /** Why the last attempt, or failing that the pointer, could not prepare each selector. */\n  const failures = (root: string): Map<string, string> => {\n    const reports = [readSyncLastAttempt(input.globalRoot), readSyncPointer(input.globalRoot)];\n    const reasons = new Map<string, string>();\n    for (const report of reports)\n      for (const entry of report?.roots.find((candidate) => candidate.root === root)?.unsynced ?? [])\n        if (!reasons.has(entry.selector)) reasons.set(entry.selector, entry.reason);\n    return reasons;\n  };\n  return {\n    stale,\n    /** Forgets every root's fingerprint; the caller runs it when a root's selection may have moved. */\n    invalidate: (): void => fingerprints.clear(),\n    /**\n     * Whether this host may publish the builds `pointer` names: only when its own Po install wrote\n     * it. Every pointer another install writes (each sync moves its generation) is refused, and\n     * gets one background sync of the global root and one warning, so this host keeps its previous\n     * publication until its own sync replaces the pointer.\n     */\n    ownsPointer(pointer: SyncPointer | undefined): pointer is SyncPointer {\n      if (pointer === undefined) return false;\n      const own = host();\n      if (pointer.host === own) return true;\n      const foreign = pointer.host ?? 'an older Po';\n      const resyncing = requestIfStale({ root: input.globalRoot, label: 'The global scope', unsynced: [] });\n      const takeover = JSON.stringify([foreign, pointer.generation]);\n      if (warnedTakeover !== takeover) {\n        warnedTakeover = takeover;\n        input.onNotice(\n          `Another Po install (${foreign}) replaced the shared packages; ${resyncing ? `resyncing with this install (${own})` : 'run po sync from this install to resync'}. Use one Po install so they stop replacing each other.`,\n        );\n      }\n      return false;\n    },\n    /**\n     * Requests one sync per missing artifact (such as an MCP app build key) and pointer state,\n     * the same limit stale roots get: a sync that ran and still did not produce it is not\n     * requested again until the pointer or the catalogue moves.\n     */\n    requestMissing(artifact: string, reason: string): boolean {\n      const pointer = readSyncPointer(input.globalRoot);\n      const state = JSON.stringify([artifact, pointer?.generation ?? null, packageCatalogHash(input.environment)]);\n      if (requestedMissing.has(state) || !input.background.request(reason)) return false;\n      requestedMissing.add(state);\n      return true;\n    },\n    /** Requests a job when `request` allows and the root is stale, then warns about `unsynced`. */\n    check(check: RootSyncCheck, request = true): RootSyncStatus {\n      if (request) requestIfStale(check);\n      const syncing = input.background.syncing;\n      if (check.unsynced.length === 0) {\n        warned.delete(check.root);\n        return { syncing, reasons: [] };\n      }\n      const known = failures(check.root);\n      const count = check.unsynced.length;\n      const noun = count === 1 ? 'extension' : 'extensions';\n      const reasons = check.unsynced.map((selector) => {\n        const reason = known.get(selector);\n        if (syncing || reason === undefined) return `${selector} is not synced yet`;\n        return `Sync could not prepare ${selector}: ${reason}.`;\n      });\n      const message = syncing\n        ? `${check.label} opened without ${String(count)} ${noun} that ${count === 1 ? 'is' : 'are'} still syncing: ${check.unsynced.join(', ')}. ${count === 1 ? 'It loads' : 'They load'} when sync finishes.`\n        : check.unsynced.every((selector) => known.has(selector))\n          ? reasons.join(' ')\n          : `${check.label} opened without ${String(count)} ${noun} that ${count === 1 ? 'is' : 'are'} not synced: ${check.unsynced.join(', ')}. Run po sync to prepare them.`;\n      if (warned.get(check.root) !== message) {\n        warned.set(check.root, message);\n        input.onNotice(message);\n      }\n      return { syncing, reasons };\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA8BA,MAAa,sBAAsB;;AAEnC,MAAa,gBAAgB;AAC7B,MAAM,gBAAgB;AACtB,MAAM,WAAW;AACjB,MAAM,YAAY,CAAC,QAAQ,QAAQ;AACnC,MAAM,gBAAgB;AACtB,MAAM,qBAAqB;CAAC;CAAQ;CAAO;AAAS;;AAGpD,SAAgB,cAAc,aAAoD;CAChF,MAAM,MAAM,OAAO,YAAY,oBAAoB;CACnD,OAAO,OAAO,UAAU,GAAG,KAAK,MAAM,IAAI,MAAM,KAAA;AAClD;;;;;AAMA,SAAgB,gBAAgB,aAAmD;CACjF,MAAM,SAAS,EAAE,GAAG,YAAY;CAChC,KAAK,MAAM,OAAO;EAAC;EAAU;EAAuB,GAAG,OAAO,OAAO,kBAAkB;CAAC,GAAG,OAAO,OAAO;CACzG,OAAO;AACT;AAEA,SAAS,aAAa,OAAwB;CAC5C,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;;AA8BA,SAAgB,gBAAgB,aAAyC;CACvE,OAAO,YAAA,oBAA+B,iBAAiB,cAAc,WAAW,MAAM,KAAA;AACxF;AAEA,SAAgB,qBAAqB,SAAgD;CACnF,MAAM,UAAU,gBAAgB,QAAQ,WAAW;CACnD,IAAI,UAAU;CACd,IAAI,QAAQ;CACZ,MAAM,UAA0B,CAAC;CACjC,MAAM,eAAqB;EACzB,IAAI,CAAC,SAAS,KAAK,MAAM,WAAW,QAAQ,OAAO,CAAC,GAAG,QAAQ;CACjE;CACA,MAAM,cAAuB;EAC3B,MAAM,QAAQ,QAAQ,YAAY,KAAK,KAAK,cAAc,GAAG,GAAG,kBAAkB;EAClF,IAAI,CAAC,GAAG,WAAW,KAAK,GAAG;GACzB,QAAQ,SAAS,2CAA2C,MAAM,2BAA2B;GAC7F,OAAO;EACT;EACA,IAAI;EACJ,IAAI;GAEF,MAAM,QAAQ,QAAQ,aAAa,KAAA,IAAY,CAAC,aAAa,IAAI,CAAC;GAClE,SAAS,QAAQ,SAASA,MAAAA,CAAc,QAAQ,UAAU;IAAC,GAAG,QAAQ;IAAU;IAAO,GAAG;IAAW,GAAG;GAAK,GAAG;IAC9G,GAAI,QAAQ,aAAa,KAAA,IAAY,CAAC,IAAI,EAAE,KAAK,QAAQ,SAAS;IAClE,KAAK;KACH,GAAG,gBAAgB,QAAQ,WAAW;MACrC,sBAAsB,OAAO,QAAQ,aAAa,QAAQ,GAAG;IAChE;IACA,OAAO;IACP,UAAU,QAAQ,aAAa;IAC/B,aAAa;GACf,CAAC;EACH,SAAS,OAAO;GACd,QAAQ,SAAS,oCAAoC,aAAa,KAAK,GAAG;GAC1E,OAAO;EACT;EACA,UAAU;EACV,IAAI,QAAQ,aAAa,MAAM,MAAM,MAAM;EAC3C,IAAI,WAAW;EACf,MAAM,UAAU,SAA8B;GAC5C,IAAI,UAAU;GACd,WAAW;GACX,IAAI,SAAS,QAAQ,SAAA,KAAyB,SAAA,IAC5C,QAAQ,SAAS,oCAAoC,OAAO,IAAI,EAAE,EAAE;GACtE,QAAa,QAAQ,CAAC,CACnB,WAAW,QAAQ,SAAS,IAAI,CAAC,CAAC,CAClC,OAAO,UAAmB,QAAQ,SAAS,sCAAsC,aAAa,KAAK,GAAG,CAAC,CAAC,CACxG,cAAc;IACb,UAAU;IACV,IAAI,OAAO;KACT,QAAQ;KACR,MAAM;IACR;IACA,OAAO;GACT,CAAC;EACL;EACA,MAAM,KAAK,UAAU,UAAU;GAC7B,QAAQ,SAAS,oCAAoC,MAAM,SAAS;GACpE,OAAO,IAAI;EACb,CAAC;EACD,MAAM,KAAK,SAAS,SAAS,OAAO,IAAI,CAAC;EACzC,OAAO;CACT;CACA,OAAO;EACL,UAAmB;GACjB,IAAI,CAAC,SAAS,OAAO;GACrB,IAAI,SAAS;IACX,QAAQ;IACR,OAAO;GACT;GACA,OAAO,MAAM;EACf;EACA,IAAI,UAAU;GACZ,OAAO,WAAW;EACpB;EACA,OAAO;GACL,OAAO,IAAI,SAAe,YAAY;IACpC,QAAQ,KAAK,OAAO;IACpB,OAAO;GACT,CAAC;EACH;CACF;AACF;;;;;AAMA,SAAgB,kBACd,MACA,SAC2E;CAC3E,IAAI;CACJ,QAAQ,QAAQ;EACd,IAAI,QAAQ,QAAQ,QAAQ,KAAA,KAAa,QAAQ,SAAS,OAAO;EACjE,MAAM,QAAQ,KAAK,GAAG;EACtB,IAAI,UAAU,KAAA,GAAW,OAAO;EAChC,UAAU;EACV,QAAQ,OAAO,GAAG;EAClB,OAAO;CACT;AACF;;;;;;;;AA0BA,SAAgB,gBAAgB,OAA8C;CAC5E,MAAM,EAAE,SAAS,cAAc;CAC/B,IAAI,MAAM,eAAe,YAAY,KAAA,GAAW,OAAO;EAAE,QAAQ,QAAQ;EAAQ,WAAW,QAAQ;CAAU;CAC9G,IAAI,YAAY,KAAA,GAAW;EACzB,MAAM,MAAM,MAAM,QAAQ;EAC1B,OAAO;GAAE,QAAQ,IAAI,UAAU,MAAM,aAAa;GAAG,WAAW,IAAI;EAAU;CAChF;CACA,IAAI,UAAU,OAAO,UAAU,QAAQ,OAAO;EAAE,QAAQ,KAAA;EAAW,WAAW,KAAA;CAAU;CACxF,MAAM,MAAM,MAAM,QAAQ;CAC1B,OAAO;EACL,QAAQ,UAAU,MAAM,KAAA,IAAY,IAAI;EACxC,WAAW,UAAU,SAAS,KAAA,IAAY,IAAI;CAChD;AACF;;;;;;AA6BA,SAAgB,sBAAsB,OAA6B;CACjE,MAAM,yBAAyB,gBAAgB,MAAM,WAAW;CAChE,MAAM,yBAAS,IAAI,IAAoB;;CAEvC,MAAM,4BAAY,IAAI,IAAoB;;CAE1C,MAAM,aAAqB,iBAAiB,MAAM,YAAY,sBAAsB;;CAEpF,IAAI;;CAEJ,MAAM,+BAAe,IAAI,IAAoB;CAC7C,MAAM,kBAAkB,SAAyB;EAC/C,IAAI,cAAc,aAAa,IAAI,IAAI;EACvC,IAAI,gBAAgB,KAAA,GAAW;GAC7B,cAAc,yBAAyB,MAAM,MAAM,eAAe,sBAAsB;GACxF,aAAa,IAAI,MAAM,WAAW;EACpC;EACA,OAAO;CACT;;;;;;;;;CASA,MAAM,cAAc,SAAqC;EACvD,MAAM,UAAU,gBAAgB,MAAM,UAAU;EAChD,MAAM,gBAAgB,mBAAmB,MAAM,WAAW;EAC1D,MAAM,cAAc,eAAe,IAAI;EACvC,IAAI,YAAY,KAAA,KAAa,QAAQ,SAAS,KAAK,GACjD,OAAO,KAAK,UAAU;GAAC;GAAQ,QAAQ,QAAQ;GAAM,QAAQ;GAAY;GAAe;EAAW,CAAC;EACtG,IAAI,SAAS,kBAAkB,iBAAiB,QAAQ,eAAe,UAAU,aAAa,OAAO,KAAA;EACrG,OAAO,KAAK,UAAU;GAAC,SAAS,cAAc;GAAM;GAAe;EAAW,CAAC;CACjF;CACA,MAAM,SAAS,SAA0B,WAAW,IAAI,MAAM,KAAA;;;;;;CAM9D,MAAM,kBAAkB,UAAkC;EACxD,MAAM,QAAQ,WAAW,MAAM,IAAI;EACnC,IAAI,UAAU,KAAA,GAAW,OAAO;EAChC,IAAI,UAAU,IAAI,MAAM,IAAI,MAAM,OAAO,OAAO;EAChD,IAAI,CAAC,MAAM,WAAW,QAAQ,GAAG,MAAM,MAAM,6BAA6B,GAAG,OAAO;EACpF,UAAU,IAAI,MAAM,MAAM,KAAK;EAC/B,OAAO;CACT;;CAEA,MAAM,mCAAmB,IAAI,IAAY;;CAEzC,MAAM,YAAY,SAAsC;EACtD,MAAM,UAAU,CAAC,oBAAoB,MAAM,UAAU,GAAG,gBAAgB,MAAM,UAAU,CAAC;EACzF,MAAM,0BAAU,IAAI,IAAoB;EACxC,KAAK,MAAM,UAAU,SACnB,KAAK,MAAM,SAAS,QAAQ,MAAM,MAAM,cAAc,UAAU,SAAS,IAAI,CAAC,EAAE,YAAY,CAAC,GAC3F,IAAI,CAAC,QAAQ,IAAI,MAAM,QAAQ,GAAG,QAAQ,IAAI,MAAM,UAAU,MAAM,MAAM;EAC9E,OAAO;CACT;CACA,OAAO;EACL;;EAEA,kBAAwB,aAAa,MAAM;;;;;;;EAO3C,YAAY,SAA0D;GACpE,IAAI,YAAY,KAAA,GAAW,OAAO;GAClC,MAAM,MAAM,KAAK;GACjB,IAAI,QAAQ,SAAS,KAAK,OAAO;GACjC,MAAM,UAAU,QAAQ,QAAQ;GAChC,MAAM,YAAY,eAAe;IAAE,MAAM,MAAM;IAAY,OAAO;IAAoB,UAAU,CAAC;GAAE,CAAC;GACpG,MAAM,WAAW,KAAK,UAAU,CAAC,SAAS,QAAQ,UAAU,CAAC;GAC7D,IAAI,mBAAmB,UAAU;IAC/B,iBAAiB;IACjB,MAAM,SACJ,uBAAuB,QAAQ,kCAAkC,YAAY,gCAAgC,IAAI,KAAK,0CAA0C,wDAClK;GACF;GACA,OAAO;EACT;;;;;;EAMA,eAAe,UAAkB,QAAyB;GACxD,MAAM,UAAU,gBAAgB,MAAM,UAAU;GAChD,MAAM,QAAQ,KAAK,UAAU;IAAC;IAAU,SAAS,cAAc;IAAM,mBAAmB,MAAM,WAAW;GAAC,CAAC;GAC3G,IAAI,iBAAiB,IAAI,KAAK,KAAK,CAAC,MAAM,WAAW,QAAQ,MAAM,GAAG,OAAO;GAC7E,iBAAiB,IAAI,KAAK;GAC1B,OAAO;EACT;;EAEA,MAAM,OAAsB,UAAU,MAAsB;GAC1D,IAAI,SAAS,eAAe,KAAK;GACjC,MAAM,UAAU,MAAM,WAAW;GACjC,IAAI,MAAM,SAAS,WAAW,GAAG;IAC/B,OAAO,OAAO,MAAM,IAAI;IACxB,OAAO;KAAE;KAAS,SAAS,CAAC;IAAE;GAChC;GACA,MAAM,QAAQ,SAAS,MAAM,IAAI;GACjC,MAAM,QAAQ,MAAM,SAAS;GAC7B,MAAM,OAAO,UAAU,IAAI,cAAc;GACzC,MAAM,UAAU,MAAM,SAAS,KAAK,aAAa;IAC/C,MAAM,SAAS,MAAM,IAAI,QAAQ;IACjC,IAAI,WAAW,WAAW,KAAA,GAAW,OAAO,GAAG,SAAS;IACxD,OAAO,0BAA0B,SAAS,IAAI,OAAO;GACvD,CAAC;GACD,MAAM,UAAU,UACZ,GAAG,MAAM,MAAM,kBAAkB,OAAO,KAAK,EAAE,GAAG,KAAK,QAAQ,UAAU,IAAI,OAAO,MAAM,kBAAkB,MAAM,SAAS,KAAK,IAAI,EAAE,IAAI,UAAU,IAAI,aAAa,YAAY,wBACjL,MAAM,SAAS,OAAO,aAAa,MAAM,IAAI,QAAQ,CAAC,IACpD,QAAQ,KAAK,GAAG,IAChB,GAAG,MAAM,MAAM,kBAAkB,OAAO,KAAK,EAAE,GAAG,KAAK,QAAQ,UAAU,IAAI,OAAO,MAAM,eAAe,MAAM,SAAS,KAAK,IAAI,EAAE;GACzI,IAAI,OAAO,IAAI,MAAM,IAAI,MAAM,SAAS;IACtC,OAAO,IAAI,MAAM,MAAM,OAAO;IAC9B,MAAM,SAAS,OAAO;GACxB;GACA,OAAO;IAAE;IAAS;GAAQ;EAC5B;CACF;AACF"}

package/dist/src/builders/server/bundlerService.cjs

@@ -0,0 +1,151 @@
+const require_packageUrl = require("./packageUrl.cjs");
+const require_index = require("../web/index.cjs");
+const require_sessionComposition = require("../cli/sessionComposition.cjs");
+const require_mcpBundle = require("./mcpBundle.cjs");
+const require_index$1 = require("./index.cjs");
+const require_packageReloadCheck = require("./packageReloadCheck.cjs");
+let _agimon_ai_po_config_majorModes = require("@agimon-ai/po-config/majorModes");
+//#region src/builders/server/bundlerService.ts
+/**
+* Process-level owner of what Po compiles and loads: content-addressed package URLs, the
+* live module cache, the poison set, per-scope reload tracking, and a per-root memo of the
+* compositions and entries a root selects. Every reader shares one computation until
+* `invalidate`; the caller decides when (a finished sync or a watched change).
+*/
+function createBundlerService(options) {
+	/** Content-addressed import URLs for every Po package entry this server loads. */
+	const packageUrls = require_packageUrl.createPackageUrls();
+	/** URLs whose live import timed out or threw; skipped by every loader until the content changes. */
+	const poisoned = /* @__PURE__ */ new Set();
+	/** Imports each content-addressed URL once, so a reload imports only what changed. */
+	const importer = require_packageReloadCheck.createLiveModuleCache();
+	/** The package identities each mounted global and workspace scope last loaded. */
+	const reloadCheck = require_packageReloadCheck.createPackageReloadCheck();
+	const memos = /* @__PURE__ */ new Map();
+	const memoFor = (root) => {
+		let memo = memos.get(root);
+		if (memo === void 0) {
+			memo = {};
+			memos.set(root, memo);
+		}
+		return memo;
+	};
+	/** A pending load shared by every reader; a failed one is dropped so the next reader retries. */
+	const shared = (read, write, load) => {
+		const existing = read();
+		if (existing !== void 0) return existing;
+		const loading = load();
+		write(loading);
+		loading.catch(() => {
+			if (read() === loading) write(void 0);
+		});
+		return loading;
+	};
+	/**
+	* Every composition the root's config can select, one per major mode, resolved live.
+	* A package sync has not prepared yet is left out with a diagnostic.
+	*/
+	const compositions = (root) => {
+		const memo = memoFor(root);
+		if (memo.compositions === void 0) {
+			memo.compositions = require_sessionComposition.rootCompositions({
+				root,
+				homeDirectory: options.homeDirectory,
+				environment: options.environment,
+				tolerateUnsynced: true
+			});
+			options.onCompositions?.(root, memo.compositions);
+		}
+		return memo.compositions;
+	};
+	const defaultSelection = (root) => {
+		const memo = memoFor(root);
+		if (memo.selection === void 0) {
+			const config = (0, _agimon_ai_po_config_majorModes.loadMajorModesConfig)(root, options.homeDirectory, options.environment);
+			const majorMode = config.defaultMajorMode;
+			memo.selection = {
+				root,
+				majorMode,
+				activeLayers: (0, _agimon_ai_po_config_majorModes.resolveLayers)(config, majorMode)
+			};
+		}
+		return memo.selection;
+	};
+	/** The root's server package entries, each with the URL its current package content imports from. */
+	const packageEntries = (root) => {
+		const memo = memoFor(root);
+		return shared(() => memo.packageEntries, (value) => memo.packageEntries = value, async () => {
+			const entries = [];
+			for (const { declaration, module, owners } of require_index$1.serverPackageCandidates(compositions(root))) entries.push({
+				packageName: declaration.packageName,
+				entry: declaration.entry,
+				module,
+				url: await packageUrls.urlFor(module),
+				scopes: declaration.scopes,
+				owners,
+				required: declaration.required === true
+			});
+			return entries;
+		});
+	};
+	/** The root's MCP plugin candidates and their entries with current URLs. */
+	const mcpEntries = (root) => {
+		const memo = memoFor(root);
+		return shared(() => memo.mcp, (value) => memo.mcp = value, async () => {
+			const candidates = require_mcpBundle.mcpPluginCandidates(compositions(root));
+			const entries = [];
+			for (const { declaration, module, owners } of candidates) entries.push({
+				packageName: declaration.packageName,
+				...declaration.ui === void 0 ? {} : { widgets: declaration.ui.widgets },
+				entry: declaration.entry,
+				module,
+				url: await packageUrls.urlFor(module),
+				owners
+			});
+			return {
+				candidates,
+				entries
+			};
+		});
+	};
+	/**
+	* What a global or workspace scope loads: one identity per server package entry in that scope.
+	* The URL changes with package content; `selection` carries ownership and the root's
+	* default mode, so a modes.yaml change that selects a package in or out is reloaded too.
+	*/
+	const scopeIdentities = (root, scope, entries) => {
+		const { majorMode, activeLayers } = defaultSelection(root);
+		return entries.filter((entry) => entry.scopes.includes(scope)).map((entry) => ({
+			module: entry.module,
+			url: entry.url,
+			selection: JSON.stringify([
+				entry.owners,
+				entry.required === true,
+				majorMode,
+				activeLayers
+			])
+		}));
+	};
+	return {
+		packageUrls,
+		poisoned,
+		importer,
+		compositions,
+		defaultSelection,
+		packageEntries,
+		mcpEntries,
+		/** Every package root the root's config can select, over all its major modes or only `majorMode`'s. */
+		packageRoots: (root, majorMode) => require_index.compositionPackageRoots(compositions(root).filter((composition) => majorMode === void 0 || composition.majorMode?.name === majorMode)),
+		/** How the scope's current entries differ from what it last committed. */
+		diffScope: async (key, root, scope) => reloadCheck.diff(key, scopeIdentities(root, scope, await packageEntries(root))),
+		/** Records what a scope installed, so the next diff compares against it. */
+		commitScope: (key, root, scope, entries) => reloadCheck.commit(key, scopeIdentities(root, scope, entries)),
+		forgetScope: (key) => reloadCheck.forget(key),
+		/** Drops every root's memo; the next reader recomputes from disk. */
+		invalidate: () => memos.clear()
+	};
+}
+//#endregion
+exports.createBundlerService = createBundlerService;
+
+//# sourceMappingURL=bundlerService.cjs.map

package/dist/src/builders/server/bundlerService.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundlerService.cjs","names":["createPackageUrls","createLiveModuleCache","createPackageReloadCheck","rootCompositions","loadMajorModesConfig","resolveLayers","serverPackageCandidates","mcpPluginCandidates","compositionPackageRoots"],"sources":["../../../../src/builders/server/bundlerService.ts"],"sourcesContent":["import { loadMajorModesConfig, resolveLayers } from '@agimon-ai/po-config/majorModes';\nimport type { LiveMcpPluginEntry } from '@agimon-ai/po-core/mcpFacet';\nimport type { PoApiScope } from '@agimon-ai/po-core/packageApi';\nimport type { LiveServerPackageEntry } from '@agimon-ai/po-core/serverPlugin';\n\nimport type { ExtensionComposition } from '../cli/extensionAssembler';\nimport { rootCompositions } from '../cli/sessionComposition';\nimport { compositionPackageRoots } from '../web';\nimport { serverPackageCandidates } from './index';\nimport { type McpPluginCandidate, mcpPluginCandidates } from './mcpBundle';\nimport { createLiveModuleCache, createPackageReloadCheck, type ScopeChange } from './packageReloadCheck';\nimport { createPackageUrls } from './packageUrl';\n\nexport interface BundlerServiceOptions {\n  readonly homeDirectory: string;\n  readonly environment: NodeJS.ProcessEnv;\n  /** Called after a root's compositions are resolved, so the caller can watch what they read. */\n  readonly onCompositions?: (root: string, compositions: readonly ExtensionComposition[]) => void;\n}\n\nexport interface RootSelection {\n  readonly root: string;\n  readonly majorMode: string;\n  readonly activeLayers: string[];\n}\n\ninterface RootMcp {\n  readonly candidates: McpPluginCandidate[];\n  readonly entries: LiveMcpPluginEntry[];\n}\n\ninterface RootMemo {\n  compositions?: ExtensionComposition[];\n  selection?: RootSelection;\n  packageEntries?: Promise<LiveServerPackageEntry[]>;\n  mcp?: Promise<RootMcp>;\n}\n\n/**\n * Process-level owner of what Po compiles and loads: content-addressed package URLs, the\n * live module cache, the poison set, per-scope reload tracking, and a per-root memo of the\n * compositions and entries a root selects. Every reader shares one computation until\n * `invalidate`; the caller decides when (a finished sync or a watched change).\n */\nexport function createBundlerService(options: BundlerServiceOptions) {\n  /** Content-addressed import URLs for every Po package entry this server loads. */\n  const packageUrls = createPackageUrls();\n  /** URLs whose live import timed out or threw; skipped by every loader until the content changes. */\n  const poisoned = new Set<string>();\n  /** Imports each content-addressed URL once, so a reload imports only what changed. */\n  const importer = createLiveModuleCache();\n  /** The package identities each mounted global and workspace scope last loaded. */\n  const reloadCheck = createPackageReloadCheck();\n  const memos = new Map<string, RootMemo>();\n  const memoFor = (root: string): RootMemo => {\n    let memo = memos.get(root);\n    if (memo === undefined) {\n      memo = {};\n      memos.set(root, memo);\n    }\n    return memo;\n  };\n  /** A pending load shared by every reader; a failed one is dropped so the next reader retries. */\n  const shared = <T>(\n    read: () => Promise<T> | undefined,\n    write: (value: Promise<T> | undefined) => void,\n    load: () => Promise<T>,\n  ) => {\n    const existing = read();\n    if (existing !== undefined) return existing;\n    const loading = load();\n    write(loading);\n    loading.catch(() => {\n      if (read() === loading) write(undefined);\n    });\n    return loading;\n  };\n\n  /**\n   * Every composition the root's config can select, one per major mode, resolved live.\n   * A package sync has not prepared yet is left out with a diagnostic.\n   */\n  const compositions = (root: string): ExtensionComposition[] => {\n    const memo = memoFor(root);\n    if (memo.compositions === undefined) {\n      memo.compositions = rootCompositions({\n        root,\n        homeDirectory: options.homeDirectory,\n        environment: options.environment,\n        tolerateUnsynced: true,\n      });\n      options.onCompositions?.(root, memo.compositions);\n    }\n    return memo.compositions;\n  };\n\n  const defaultSelection = (root: string): RootSelection => {\n    const memo = memoFor(root);\n    if (memo.selection === undefined) {\n      const config = loadMajorModesConfig(root, options.homeDirectory, options.environment);\n      const majorMode = config.defaultMajorMode;\n      memo.selection = { root, majorMode, activeLayers: resolveLayers(config, majorMode) };\n    }\n    return memo.selection;\n  };\n\n  /** The root's server package entries, each with the URL its current package content imports from. */\n  const packageEntries = (root: string): Promise<LiveServerPackageEntry[]> => {\n    const memo = memoFor(root);\n    return shared(\n      () => memo.packageEntries,\n      (value) => (memo.packageEntries = value),\n      async () => {\n        const entries: LiveServerPackageEntry[] = [];\n        for (const { declaration, module, owners } of serverPackageCandidates(compositions(root)))\n          entries.push({\n            packageName: declaration.packageName,\n            entry: declaration.entry,\n            module,\n            url: await packageUrls.urlFor(module),\n            scopes: declaration.scopes,\n            owners,\n            required: declaration.required === true,\n          });\n        return entries;\n      },\n    );\n  };\n\n  /** The root's MCP plugin candidates and their entries with current URLs. */\n  const mcpEntries = (root: string): Promise<RootMcp> => {\n    const memo = memoFor(root);\n    return shared(\n      () => memo.mcp,\n      (value) => (memo.mcp = value),\n      async () => {\n        const candidates = mcpPluginCandidates(compositions(root));\n        const entries: LiveMcpPluginEntry[] = [];\n        for (const { declaration, module, owners } of candidates)\n          entries.push({\n            packageName: declaration.packageName,\n            ...(declaration.ui === undefined ? {} : { widgets: declaration.ui.widgets }),\n            entry: declaration.entry,\n            module,\n            url: await packageUrls.urlFor(module),\n            owners,\n          });\n        return { candidates, entries };\n      },\n    );\n  };\n\n  /**\n   * What a global or workspace scope loads: one identity per server package entry in that scope.\n   * The URL changes with package content; `selection` carries ownership and the root's\n   * default mode, so a modes.yaml change that selects a package in or out is reloaded too.\n   */\n  const scopeIdentities = (root: string, scope: PoApiScope, entries: readonly LiveServerPackageEntry[]) => {\n    const { majorMode, activeLayers } = defaultSelection(root);\n    return entries\n      .filter((entry) => entry.scopes.includes(scope))\n      .map((entry) => ({\n        module: entry.module,\n        url: entry.url,\n        selection: JSON.stringify([entry.owners, entry.required === true, majorMode, activeLayers]),\n      }));\n  };\n\n  return {\n    packageUrls,\n    poisoned,\n    importer,\n    compositions,\n    defaultSelection,\n    packageEntries,\n    mcpEntries,\n    /** Every package root the root's config can select, over all its major modes or only `majorMode`'s. */\n    packageRoots: (root: string, majorMode?: string): string[] =>\n      compositionPackageRoots(\n        compositions(root).filter(\n          (composition) => majorMode === undefined || composition.majorMode?.name === majorMode,\n        ),\n      ),\n    /** How the scope's current entries differ from what it last committed. */\n    diffScope: async (key: string, root: string, scope: PoApiScope): Promise<ScopeChange> =>\n      reloadCheck.diff(key, scopeIdentities(root, scope, await packageEntries(root))),\n    /** Records what a scope installed, so the next diff compares against it. */\n    commitScope: (key: string, root: string, scope: PoApiScope, entries: readonly LiveServerPackageEntry[]): void =>\n      reloadCheck.commit(key, scopeIdentities(root, scope, entries)),\n    forgetScope: (key: string): void => reloadCheck.forget(key),\n    /** Drops every root's memo; the next reader recomputes from disk. */\n    invalidate: (): void => memos.clear(),\n  };\n}\n\nexport type BundlerService = ReturnType<typeof createBundlerService>;\n"],"mappings":";;;;;;;;;;;;;;AA4CA,SAAgB,qBAAqB,SAAgC;;CAEnE,MAAM,cAAcA,mBAAAA,kBAAkB;;CAEtC,MAAM,2BAAW,IAAI,IAAY;;CAEjC,MAAM,WAAWC,2BAAAA,sBAAsB;;CAEvC,MAAM,cAAcC,2BAAAA,yBAAyB;CAC7C,MAAM,wBAAQ,IAAI,IAAsB;CACxC,MAAM,WAAW,SAA2B;EAC1C,IAAI,OAAO,MAAM,IAAI,IAAI;EACzB,IAAI,SAAS,KAAA,GAAW;GACtB,OAAO,CAAC;GACR,MAAM,IAAI,MAAM,IAAI;EACtB;EACA,OAAO;CACT;;CAEA,MAAM,UACJ,MACA,OACA,SACG;EACH,MAAM,WAAW,KAAK;EACtB,IAAI,aAAa,KAAA,GAAW,OAAO;EACnC,MAAM,UAAU,KAAK;EACrB,MAAM,OAAO;EACb,QAAQ,YAAY;GAClB,IAAI,KAAK,MAAM,SAAS,MAAM,KAAA,CAAS;EACzC,CAAC;EACD,OAAO;CACT;;;;;CAMA,MAAM,gBAAgB,SAAyC;EAC7D,MAAM,OAAO,QAAQ,IAAI;EACzB,IAAI,KAAK,iBAAiB,KAAA,GAAW;GACnC,KAAK,eAAeC,2BAAAA,iBAAiB;IACnC;IACA,eAAe,QAAQ;IACvB,aAAa,QAAQ;IACrB,kBAAkB;GACpB,CAAC;GACD,QAAQ,iBAAiB,MAAM,KAAK,YAAY;EAClD;EACA,OAAO,KAAK;CACd;CAEA,MAAM,oBAAoB,SAAgC;EACxD,MAAM,OAAO,QAAQ,IAAI;EACzB,IAAI,KAAK,cAAc,KAAA,GAAW;GAChC,MAAM,UAAA,GAASC,gCAAAA,qBAAAA,CAAqB,MAAM,QAAQ,eAAe,QAAQ,WAAW;GACpF,MAAM,YAAY,OAAO;GACzB,KAAK,YAAY;IAAE;IAAM;IAAW,eAAA,GAAcC,gCAAAA,cAAAA,CAAc,QAAQ,SAAS;GAAE;EACrF;EACA,OAAO,KAAK;CACd;;CAGA,MAAM,kBAAkB,SAAoD;EAC1E,MAAM,OAAO,QAAQ,IAAI;EACzB,OAAO,aACC,KAAK,iBACV,UAAW,KAAK,iBAAiB,OAClC,YAAY;GACV,MAAM,UAAoC,CAAC;GAC3C,KAAK,MAAM,EAAE,aAAa,QAAQ,YAAYC,gBAAAA,wBAAwB,aAAa,IAAI,CAAC,GACtF,QAAQ,KAAK;IACX,aAAa,YAAY;IACzB,OAAO,YAAY;IACnB;IACA,KAAK,MAAM,YAAY,OAAO,MAAM;IACpC,QAAQ,YAAY;IACpB;IACA,UAAU,YAAY,aAAa;GACrC,CAAC;GACH,OAAO;EACT,CACF;CACF;;CAGA,MAAM,cAAc,SAAmC;EACrD,MAAM,OAAO,QAAQ,IAAI;EACzB,OAAO,aACC,KAAK,MACV,UAAW,KAAK,MAAM,OACvB,YAAY;GACV,MAAM,aAAaC,kBAAAA,oBAAoB,aAAa,IAAI,CAAC;GACzD,MAAM,UAAgC,CAAC;GACvC,KAAK,MAAM,EAAE,aAAa,QAAQ,YAAY,YAC5C,QAAQ,KAAK;IACX,aAAa,YAAY;IACzB,GAAI,YAAY,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,YAAY,GAAG,QAAQ;IAC1E,OAAO,YAAY;IACnB;IACA,KAAK,MAAM,YAAY,OAAO,MAAM;IACpC;GACF,CAAC;GACH,OAAO;IAAE;IAAY;GAAQ;EAC/B,CACF;CACF;;;;;;CAOA,MAAM,mBAAmB,MAAc,OAAmB,YAA+C;EACvG,MAAM,EAAE,WAAW,iBAAiB,iBAAiB,IAAI;EACzD,OAAO,QACJ,QAAQ,UAAU,MAAM,OAAO,SAAS,KAAK,CAAC,CAAC,CAC/C,KAAK,WAAW;GACf,QAAQ,MAAM;GACd,KAAK,MAAM;GACX,WAAW,KAAK,UAAU;IAAC,MAAM;IAAQ,MAAM,aAAa;IAAM;IAAW;GAAY,CAAC;EAC5F,EAAE;CACN;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA,eAAe,MAAc,cAC3BC,cAAAA,wBACE,aAAa,IAAI,CAAC,CAAC,QAChB,gBAAgB,cAAc,KAAA,KAAa,YAAY,WAAW,SAAS,SAC9E,CACF;;EAEF,WAAW,OAAO,KAAa,MAAc,UAC3C,YAAY,KAAK,KAAK,gBAAgB,MAAM,OAAO,MAAM,eAAe,IAAI,CAAC,CAAC;;EAEhF,cAAc,KAAa,MAAc,OAAmB,YAC1D,YAAY,OAAO,KAAK,gBAAgB,MAAM,OAAO,OAAO,CAAC;EAC/D,cAAc,QAAsB,YAAY,OAAO,GAAG;;EAE1D,kBAAwB,MAAM,MAAM;CACtC;AACF"}

package/dist/src/builders/server/bundlerService.mjs

@@ -0,0 +1,151 @@
+import { createPackageUrls } from "./packageUrl.mjs";
+import { compositionPackageRoots } from "../web/index.mjs";
+import { rootCompositions } from "../cli/sessionComposition.mjs";
+import { mcpPluginCandidates } from "./mcpBundle.mjs";
+import { serverPackageCandidates } from "./index.mjs";
+import { createLiveModuleCache, createPackageReloadCheck } from "./packageReloadCheck.mjs";
+import { loadMajorModesConfig, resolveLayers } from "@agimon-ai/po-config/majorModes";
+//#region src/builders/server/bundlerService.ts
+/**
+* Process-level owner of what Po compiles and loads: content-addressed package URLs, the
+* live module cache, the poison set, per-scope reload tracking, and a per-root memo of the
+* compositions and entries a root selects. Every reader shares one computation until
+* `invalidate`; the caller decides when (a finished sync or a watched change).
+*/
+function createBundlerService(options) {
+	/** Content-addressed import URLs for every Po package entry this server loads. */
+	const packageUrls = createPackageUrls();
+	/** URLs whose live import timed out or threw; skipped by every loader until the content changes. */
+	const poisoned = /* @__PURE__ */ new Set();
+	/** Imports each content-addressed URL once, so a reload imports only what changed. */
+	const importer = createLiveModuleCache();
+	/** The package identities each mounted global and workspace scope last loaded. */
+	const reloadCheck = createPackageReloadCheck();
+	const memos = /* @__PURE__ */ new Map();
+	const memoFor = (root) => {
+		let memo = memos.get(root);
+		if (memo === void 0) {
+			memo = {};
+			memos.set(root, memo);
+		}
+		return memo;
+	};
+	/** A pending load shared by every reader; a failed one is dropped so the next reader retries. */
+	const shared = (read, write, load) => {
+		const existing = read();
+		if (existing !== void 0) return existing;
+		const loading = load();
+		write(loading);
+		loading.catch(() => {
+			if (read() === loading) write(void 0);
+		});
+		return loading;
+	};
+	/**
+	* Every composition the root's config can select, one per major mode, resolved live.
+	* A package sync has not prepared yet is left out with a diagnostic.
+	*/
+	const compositions = (root) => {
+		const memo = memoFor(root);
+		if (memo.compositions === void 0) {
+			memo.compositions = rootCompositions({
+				root,
+				homeDirectory: options.homeDirectory,
+				environment: options.environment,
+				tolerateUnsynced: true
+			});
+			options.onCompositions?.(root, memo.compositions);
+		}
+		return memo.compositions;
+	};
+	const defaultSelection = (root) => {
+		const memo = memoFor(root);
+		if (memo.selection === void 0) {
+			const config = loadMajorModesConfig(root, options.homeDirectory, options.environment);
+			const majorMode = config.defaultMajorMode;
+			memo.selection = {
+				root,
+				majorMode,
+				activeLayers: resolveLayers(config, majorMode)
+			};
+		}
+		return memo.selection;
+	};
+	/** The root's server package entries, each with the URL its current package content imports from. */
+	const packageEntries = (root) => {
+		const memo = memoFor(root);
+		return shared(() => memo.packageEntries, (value) => memo.packageEntries = value, async () => {
+			const entries = [];
+			for (const { declaration, module, owners } of serverPackageCandidates(compositions(root))) entries.push({
+				packageName: declaration.packageName,
+				entry: declaration.entry,
+				module,
+				url: await packageUrls.urlFor(module),
+				scopes: declaration.scopes,
+				owners,
+				required: declaration.required === true
+			});
+			return entries;
+		});
+	};
+	/** The root's MCP plugin candidates and their entries with current URLs. */
+	const mcpEntries = (root) => {
+		const memo = memoFor(root);
+		return shared(() => memo.mcp, (value) => memo.mcp = value, async () => {
+			const candidates = mcpPluginCandidates(compositions(root));
+			const entries = [];
+			for (const { declaration, module, owners } of candidates) entries.push({
+				packageName: declaration.packageName,
+				...declaration.ui === void 0 ? {} : { widgets: declaration.ui.widgets },
+				entry: declaration.entry,
+				module,
+				url: await packageUrls.urlFor(module),
+				owners
+			});
+			return {
+				candidates,
+				entries
+			};
+		});
+	};
+	/**
+	* What a global or workspace scope loads: one identity per server package entry in that scope.
+	* The URL changes with package content; `selection` carries ownership and the root's
+	* default mode, so a modes.yaml change that selects a package in or out is reloaded too.
+	*/
+	const scopeIdentities = (root, scope, entries) => {
+		const { majorMode, activeLayers } = defaultSelection(root);
+		return entries.filter((entry) => entry.scopes.includes(scope)).map((entry) => ({
+			module: entry.module,
+			url: entry.url,
+			selection: JSON.stringify([
+				entry.owners,
+				entry.required === true,
+				majorMode,
+				activeLayers
+			])
+		}));
+	};
+	return {
+		packageUrls,
+		poisoned,
+		importer,
+		compositions,
+		defaultSelection,
+		packageEntries,
+		mcpEntries,
+		/** Every package root the root's config can select, over all its major modes or only `majorMode`'s. */
+		packageRoots: (root, majorMode) => compositionPackageRoots(compositions(root).filter((composition) => majorMode === void 0 || composition.majorMode?.name === majorMode)),
+		/** How the scope's current entries differ from what it last committed. */
+		diffScope: async (key, root, scope) => reloadCheck.diff(key, scopeIdentities(root, scope, await packageEntries(root))),
+		/** Records what a scope installed, so the next diff compares against it. */
+		commitScope: (key, root, scope, entries) => reloadCheck.commit(key, scopeIdentities(root, scope, entries)),
+		forgetScope: (key) => reloadCheck.forget(key),
+		/** Drops every root's memo; the next reader recomputes from disk. */
+		invalidate: () => memos.clear()
+	};
+}
+//#endregion
+export { createBundlerService };
+
+//# sourceMappingURL=bundlerService.mjs.map

package/dist/src/builders/server/bundlerService.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundlerService.mjs","names":[],"sources":["../../../../src/builders/server/bundlerService.ts"],"sourcesContent":["import { loadMajorModesConfig, resolveLayers } from '@agimon-ai/po-config/majorModes';\nimport type { LiveMcpPluginEntry } from '@agimon-ai/po-core/mcpFacet';\nimport type { PoApiScope } from '@agimon-ai/po-core/packageApi';\nimport type { LiveServerPackageEntry } from '@agimon-ai/po-core/serverPlugin';\n\nimport type { ExtensionComposition } from '../cli/extensionAssembler';\nimport { rootCompositions } from '../cli/sessionComposition';\nimport { compositionPackageRoots } from '../web';\nimport { serverPackageCandidates } from './index';\nimport { type McpPluginCandidate, mcpPluginCandidates } from './mcpBundle';\nimport { createLiveModuleCache, createPackageReloadCheck, type ScopeChange } from './packageReloadCheck';\nimport { createPackageUrls } from './packageUrl';\n\nexport interface BundlerServiceOptions {\n  readonly homeDirectory: string;\n  readonly environment: NodeJS.ProcessEnv;\n  /** Called after a root's compositions are resolved, so the caller can watch what they read. */\n  readonly onCompositions?: (root: string, compositions: readonly ExtensionComposition[]) => void;\n}\n\nexport interface RootSelection {\n  readonly root: string;\n  readonly majorMode: string;\n  readonly activeLayers: string[];\n}\n\ninterface RootMcp {\n  readonly candidates: McpPluginCandidate[];\n  readonly entries: LiveMcpPluginEntry[];\n}\n\ninterface RootMemo {\n  compositions?: ExtensionComposition[];\n  selection?: RootSelection;\n  packageEntries?: Promise<LiveServerPackageEntry[]>;\n  mcp?: Promise<RootMcp>;\n}\n\n/**\n * Process-level owner of what Po compiles and loads: content-addressed package URLs, the\n * live module cache, the poison set, per-scope reload tracking, and a per-root memo of the\n * compositions and entries a root selects. Every reader shares one computation until\n * `invalidate`; the caller decides when (a finished sync or a watched change).\n */\nexport function createBundlerService(options: BundlerServiceOptions) {\n  /** Content-addressed import URLs for every Po package entry this server loads. */\n  const packageUrls = createPackageUrls();\n  /** URLs whose live import timed out or threw; skipped by every loader until the content changes. */\n  const poisoned = new Set<string>();\n  /** Imports each content-addressed URL once, so a reload imports only what changed. */\n  const importer = createLiveModuleCache();\n  /** The package identities each mounted global and workspace scope last loaded. */\n  const reloadCheck = createPackageReloadCheck();\n  const memos = new Map<string, RootMemo>();\n  const memoFor = (root: string): RootMemo => {\n    let memo = memos.get(root);\n    if (memo === undefined) {\n      memo = {};\n      memos.set(root, memo);\n    }\n    return memo;\n  };\n  /** A pending load shared by every reader; a failed one is dropped so the next reader retries. */\n  const shared = <T>(\n    read: () => Promise<T> | undefined,\n    write: (value: Promise<T> | undefined) => void,\n    load: () => Promise<T>,\n  ) => {\n    const existing = read();\n    if (existing !== undefined) return existing;\n    const loading = load();\n    write(loading);\n    loading.catch(() => {\n      if (read() === loading) write(undefined);\n    });\n    return loading;\n  };\n\n  /**\n   * Every composition the root's config can select, one per major mode, resolved live.\n   * A package sync has not prepared yet is left out with a diagnostic.\n   */\n  const compositions = (root: string): ExtensionComposition[] => {\n    const memo = memoFor(root);\n    if (memo.compositions === undefined) {\n      memo.compositions = rootCompositions({\n        root,\n        homeDirectory: options.homeDirectory,\n        environment: options.environment,\n        tolerateUnsynced: true,\n      });\n      options.onCompositions?.(root, memo.compositions);\n    }\n    return memo.compositions;\n  };\n\n  const defaultSelection = (root: string): RootSelection => {\n    const memo = memoFor(root);\n    if (memo.selection === undefined) {\n      const config = loadMajorModesConfig(root, options.homeDirectory, options.environment);\n      const majorMode = config.defaultMajorMode;\n      memo.selection = { root, majorMode, activeLayers: resolveLayers(config, majorMode) };\n    }\n    return memo.selection;\n  };\n\n  /** The root's server package entries, each with the URL its current package content imports from. */\n  const packageEntries = (root: string): Promise<LiveServerPackageEntry[]> => {\n    const memo = memoFor(root);\n    return shared(\n      () => memo.packageEntries,\n      (value) => (memo.packageEntries = value),\n      async () => {\n        const entries: LiveServerPackageEntry[] = [];\n        for (const { declaration, module, owners } of serverPackageCandidates(compositions(root)))\n          entries.push({\n            packageName: declaration.packageName,\n            entry: declaration.entry,\n            module,\n            url: await packageUrls.urlFor(module),\n            scopes: declaration.scopes,\n            owners,\n            required: declaration.required === true,\n          });\n        return entries;\n      },\n    );\n  };\n\n  /** The root's MCP plugin candidates and their entries with current URLs. */\n  const mcpEntries = (root: string): Promise<RootMcp> => {\n    const memo = memoFor(root);\n    return shared(\n      () => memo.mcp,\n      (value) => (memo.mcp = value),\n      async () => {\n        const candidates = mcpPluginCandidates(compositions(root));\n        const entries: LiveMcpPluginEntry[] = [];\n        for (const { declaration, module, owners } of candidates)\n          entries.push({\n            packageName: declaration.packageName,\n            ...(declaration.ui === undefined ? {} : { widgets: declaration.ui.widgets }),\n            entry: declaration.entry,\n            module,\n            url: await packageUrls.urlFor(module),\n            owners,\n          });\n        return { candidates, entries };\n      },\n    );\n  };\n\n  /**\n   * What a global or workspace scope loads: one identity per server package entry in that scope.\n   * The URL changes with package content; `selection` carries ownership and the root's\n   * default mode, so a modes.yaml change that selects a package in or out is reloaded too.\n   */\n  const scopeIdentities = (root: string, scope: PoApiScope, entries: readonly LiveServerPackageEntry[]) => {\n    const { majorMode, activeLayers } = defaultSelection(root);\n    return entries\n      .filter((entry) => entry.scopes.includes(scope))\n      .map((entry) => ({\n        module: entry.module,\n        url: entry.url,\n        selection: JSON.stringify([entry.owners, entry.required === true, majorMode, activeLayers]),\n      }));\n  };\n\n  return {\n    packageUrls,\n    poisoned,\n    importer,\n    compositions,\n    defaultSelection,\n    packageEntries,\n    mcpEntries,\n    /** Every package root the root's config can select, over all its major modes or only `majorMode`'s. */\n    packageRoots: (root: string, majorMode?: string): string[] =>\n      compositionPackageRoots(\n        compositions(root).filter(\n          (composition) => majorMode === undefined || composition.majorMode?.name === majorMode,\n        ),\n      ),\n    /** How the scope's current entries differ from what it last committed. */\n    diffScope: async (key: string, root: string, scope: PoApiScope): Promise<ScopeChange> =>\n      reloadCheck.diff(key, scopeIdentities(root, scope, await packageEntries(root))),\n    /** Records what a scope installed, so the next diff compares against it. */\n    commitScope: (key: string, root: string, scope: PoApiScope, entries: readonly LiveServerPackageEntry[]): void =>\n      reloadCheck.commit(key, scopeIdentities(root, scope, entries)),\n    forgetScope: (key: string): void => reloadCheck.forget(key),\n    /** Drops every root's memo; the next reader recomputes from disk. */\n    invalidate: (): void => memos.clear(),\n  };\n}\n\nexport type BundlerService = ReturnType<typeof createBundlerService>;\n"],"mappings":";;;;;;;;;;;;;;AA4CA,SAAgB,qBAAqB,SAAgC;;CAEnE,MAAM,cAAc,kBAAkB;;CAEtC,MAAM,2BAAW,IAAI,IAAY;;CAEjC,MAAM,WAAW,sBAAsB;;CAEvC,MAAM,cAAc,yBAAyB;CAC7C,MAAM,wBAAQ,IAAI,IAAsB;CACxC,MAAM,WAAW,SAA2B;EAC1C,IAAI,OAAO,MAAM,IAAI,IAAI;EACzB,IAAI,SAAS,KAAA,GAAW;GACtB,OAAO,CAAC;GACR,MAAM,IAAI,MAAM,IAAI;EACtB;EACA,OAAO;CACT;;CAEA,MAAM,UACJ,MACA,OACA,SACG;EACH,MAAM,WAAW,KAAK;EACtB,IAAI,aAAa,KAAA,GAAW,OAAO;EACnC,MAAM,UAAU,KAAK;EACrB,MAAM,OAAO;EACb,QAAQ,YAAY;GAClB,IAAI,KAAK,MAAM,SAAS,MAAM,KAAA,CAAS;EACzC,CAAC;EACD,OAAO;CACT;;;;;CAMA,MAAM,gBAAgB,SAAyC;EAC7D,MAAM,OAAO,QAAQ,IAAI;EACzB,IAAI,KAAK,iBAAiB,KAAA,GAAW;GACnC,KAAK,eAAe,iBAAiB;IACnC;IACA,eAAe,QAAQ;IACvB,aAAa,QAAQ;IACrB,kBAAkB;GACpB,CAAC;GACD,QAAQ,iBAAiB,MAAM,KAAK,YAAY;EAClD;EACA,OAAO,KAAK;CACd;CAEA,MAAM,oBAAoB,SAAgC;EACxD,MAAM,OAAO,QAAQ,IAAI;EACzB,IAAI,KAAK,cAAc,KAAA,GAAW;GAChC,MAAM,SAAS,qBAAqB,MAAM,QAAQ,eAAe,QAAQ,WAAW;GACpF,MAAM,YAAY,OAAO;GACzB,KAAK,YAAY;IAAE;IAAM;IAAW,cAAc,cAAc,QAAQ,SAAS;GAAE;EACrF;EACA,OAAO,KAAK;CACd;;CAGA,MAAM,kBAAkB,SAAoD;EAC1E,MAAM,OAAO,QAAQ,IAAI;EACzB,OAAO,aACC,KAAK,iBACV,UAAW,KAAK,iBAAiB,OAClC,YAAY;GACV,MAAM,UAAoC,CAAC;GAC3C,KAAK,MAAM,EAAE,aAAa,QAAQ,YAAY,wBAAwB,aAAa,IAAI,CAAC,GACtF,QAAQ,KAAK;IACX,aAAa,YAAY;IACzB,OAAO,YAAY;IACnB;IACA,KAAK,MAAM,YAAY,OAAO,MAAM;IACpC,QAAQ,YAAY;IACpB;IACA,UAAU,YAAY,aAAa;GACrC,CAAC;GACH,OAAO;EACT,CACF;CACF;;CAGA,MAAM,cAAc,SAAmC;EACrD,MAAM,OAAO,QAAQ,IAAI;EACzB,OAAO,aACC,KAAK,MACV,UAAW,KAAK,MAAM,OACvB,YAAY;GACV,MAAM,aAAa,oBAAoB,aAAa,IAAI,CAAC;GACzD,MAAM,UAAgC,CAAC;GACvC,KAAK,MAAM,EAAE,aAAa,QAAQ,YAAY,YAC5C,QAAQ,KAAK;IACX,aAAa,YAAY;IACzB,GAAI,YAAY,OAAO,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,YAAY,GAAG,QAAQ;IAC1E,OAAO,YAAY;IACnB;IACA,KAAK,MAAM,YAAY,OAAO,MAAM;IACpC;GACF,CAAC;GACH,OAAO;IAAE;IAAY;GAAQ;EAC/B,CACF;CACF;;;;;;CAOA,MAAM,mBAAmB,MAAc,OAAmB,YAA+C;EACvG,MAAM,EAAE,WAAW,iBAAiB,iBAAiB,IAAI;EACzD,OAAO,QACJ,QAAQ,UAAU,MAAM,OAAO,SAAS,KAAK,CAAC,CAAC,CAC/C,KAAK,WAAW;GACf,QAAQ,MAAM;GACd,KAAK,MAAM;GACX,WAAW,KAAK,UAAU;IAAC,MAAM;IAAQ,MAAM,aAAa;IAAM;IAAW;GAAY,CAAC;EAC5F,EAAE;CACN;CAEA,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;;EAEA,eAAe,MAAc,cAC3B,wBACE,aAAa,IAAI,CAAC,CAAC,QAChB,gBAAgB,cAAc,KAAA,KAAa,YAAY,WAAW,SAAS,SAC9E,CACF;;EAEF,WAAW,OAAO,KAAa,MAAc,UAC3C,YAAY,KAAK,KAAK,gBAAgB,MAAM,OAAO,MAAM,eAAe,IAAI,CAAC,CAAC;;EAEhF,cAAc,KAAa,MAAc,OAAmB,YAC1D,YAAY,OAAO,KAAK,gBAAgB,MAAM,OAAO,OAAO,CAAC;EAC/D,cAAc,QAAsB,YAAY,OAAO,GAAG;;EAE1D,kBAAwB,MAAM,MAAM;CACtC;AACF"}

package/dist/src/builders/server/computerUseBinding.cjs

@@ -30,11 +30,11 @@ async function createComputerUseBinding(transport = process, remotePolicy = {})
 		return available && /^[a-f0-9]{64}$/u.test(proof) && (0, node_crypto.timingSafeEqual)(Buffer.from(proof), Buffer.from(token));
 	};
 	const remoteCaller = (headers) => {
-		const caller = (0, _agimon_ai_po_core_packageApi.doomApiCallerFrom)(headers);
+		const caller = (0, _agimon_ai_po_core_packageApi.poApiCallerFrom)(headers);
 		return caller?.locality === "remote" && remotePolicy.isDeviceAuthorized?.(caller.deviceId) === true ? caller : void 0;
 	};
 	const notify = (sessionId) => {
-		for (const [listener, session] of listeners) if (sessionId === void 0 || session === sessionId) listener();
+		for (const [listener, session] of listeners) if (sessionId === void 0 || session === void 0 || session === sessionId) listener();
 	};
 	const revoke = (sessionId, retainRecording = false) => {
 		const delegated = delegations.get(sessionId);

package/dist/src/builders/server/computerUseBinding.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"computerUseBinding.cjs","names":["ComputerUseRecordingStore","fs","path","os","timingSafeEqual","doomApiCallerFrom","randomUUID"],"sources":["../../../../src/builders/server/computerUseBinding.ts"],"sourcesContent":["import { randomUUID, timingSafeEqual } from 'node:crypto';\nimport fs from 'node:fs/promises';\nimport os from 'node:os';\nimport path from 'node:path';\n\nimport type { DoomComputerUseHostBinding } from '@agimon-ai/po-core/hubChannel';\nimport { doomApiCallerFrom } from '@agimon-ai/po-core/packageApi';\n\nimport { ComputerUseRecordingStore } from './computerUseRecordings';\n\nconst VERSION = 1;\nconst MAX_BYTES = 8 * 1024 * 1024;\nconst DESKTOP_HEADER = 'x-po-desktop';\ntype Transport = Pick<NodeJS.Process, 'send' | 'connected' | 'on' | 'off'>;\n\n/** The capability is discovered over the inherited Desktop IPC channel, never from environment flags. */\nexport async function createComputerUseBinding(\n  transport: Transport = process,\n  remotePolicy: {\n    isDeviceAuthorized?: (deviceId: string) => boolean;\n    stepUpRequired?: () => boolean;\n  } = {},\n): Promise<DoomComputerUseHostBinding | undefined> {\n  if (!transport.send || !transport.connected) return undefined;\n  const recordings = new ComputerUseRecordingStore(await fs.mkdtemp(path.join(os.tmpdir(), 'po-recordings-')));\n  let available = false;\n  let enabled = false;\n  let closed = false;\n  let token = '';\n  let generation: string | undefined;\n  const ownedSessions = new Set<string>();\n  const revokedSessions = new Set<string>();\n  const listeners = new Map<() => void, string | undefined>();\n  const delegations = new Map<\n    string,\n    { deviceId: string; approved: boolean; abort: AbortController; grantId?: string; expiresAt?: number }\n  >();\n  const nativeAuthorized = (headers: Headers): boolean => {\n    const proof = headers.get(DESKTOP_HEADER) ?? '';\n    return available && /^[a-f0-9]{64}$/u.test(proof) && timingSafeEqual(Buffer.from(proof), Buffer.from(token));\n  };\n  const remoteCaller = (headers: Headers) => {\n    const caller = doomApiCallerFrom(headers);\n    return caller?.locality === 'remote' && remotePolicy.isDeviceAuthorized?.(caller.deviceId) === true\n      ? caller\n      : undefined;\n  };\n  const notify = (sessionId?: string): void => {\n    for (const [listener, session] of listeners) if (sessionId === undefined || session === sessionId) listener();\n  };\n  const revoke = (sessionId: string, retainRecording = false): void => {\n    const delegated = delegations.get(sessionId);\n    if (delegated === undefined) return;\n    if (!retainRecording) delegations.delete(sessionId);\n    delegated.expiresAt = undefined;\n    delegated.abort.abort();\n    revokedSessions.add(sessionId);\n    if (delegated.grantId !== undefined && available) {\n      void exchange(\n        { type: 'po:computer-use:request', sessionId, operation: 'stop', payload: { grantId: delegated.grantId } },\n        30_000,\n      )\n        .then((result) => recordings.importStop(sessionId, delegated.grantId!, result.result))\n        .catch(() => close());\n    }\n    notify(sessionId);\n  };\n  const pending = new Map<string, { finish: (value?: Record<string, unknown>, error?: Error) => void }>();\n  const send = (value: object): void => {\n    if (closed || !transport.connected) throw new Error('Desktop computer use is disconnected.');\n    transport.send!(value, (error: Error | null) => {\n      if (error) close();\n    });\n  };\n  const close = (): void => {\n    if (closed) return;\n    closed = true;\n    available = false;\n    token = '';\n    transport.off('message', onMessage);\n    transport.off('disconnect', close);\n    transport.off('exit', close);\n    for (const request of pending.values())\n      request.finish(undefined, new Error('Desktop computer use is disconnected.'));\n    pending.clear();\n    for (const sessionId of delegations.keys()) revoke(sessionId);\n    notify();\n    listeners.clear();\n    void recordings.close().catch(() => process.emitWarning('Computer-use recording cleanup failed.'));\n    // Keep ownership pinned while the server is alive, including after Desktop disconnects.\n  };\n  const onMessage = (value: unknown): void => {\n    if (!value || typeof value !== 'object' || Array.isArray(value)) return;\n    const message = value as Record<string, unknown>;\n    if (message.version !== VERSION) return;\n    if (message.type === 'po:computer-use:availability' && typeof message.enabled === 'boolean') {\n      enabled = message.enabled;\n      // Native stop/expiry also notifies availability without changing the global setting.\n      for (const sessionId of delegations.keys()) revoke(sessionId, true);\n      notify();\n      return;\n    }\n    if (typeof message.requestId !== 'string') return;\n    if (message.type !== 'po:computer-use:ready' && message.type !== 'po:computer-use:response') return;\n    if (Buffer.byteLength(JSON.stringify(message)) > MAX_BYTES) {\n      close();\n      return;\n    }\n    pending.get(message.requestId)?.finish(message);\n  };\n  transport.on('message', onMessage);\n  transport.on('disconnect', close);\n  transport.on('exit', close);\n\n  const exchange = (\n    value: Record<string, unknown>,\n    timeoutMs: number,\n    signal?: AbortSignal,\n  ): Promise<Record<string, unknown>> =>\n    new Promise((resolve, reject) => {\n      signal?.throwIfAborted();\n      if (closed || pending.size >= 128) throw new Error('Desktop computer-use transport is unavailable or busy.');\n      const requestId = randomUUID();\n      const cancel = (): void => {\n        try {\n          send({ type: 'po:computer-use:cancel', version: VERSION, requestId });\n        } catch {\n          /* Already disconnected. */\n        }\n      };\n      const finish = (result?: Record<string, unknown>, error?: Error): void => {\n        if (!pending.delete(requestId)) return;\n        clearTimeout(timer);\n        signal?.removeEventListener('abort', onAbort);\n        if (error) reject(error);\n        else resolve(result!);\n      };\n      const onAbort = (): void => {\n        cancel();\n        finish(undefined, new Error('Desktop computer-use request was cancelled.'));\n      };\n      const timer = setTimeout(() => {\n        cancel();\n        finish(undefined, new Error('Desktop computer-use request timed out.'));\n      }, timeoutMs);\n      pending.set(requestId, { finish });\n      signal?.addEventListener('abort', onAbort, { once: true });\n      try {\n        const message = { ...value, version: VERSION, requestId };\n        if (Buffer.byteLength(JSON.stringify(message)) > MAX_BYTES)\n          throw new Error('Desktop computer-use request is too large.');\n        send(message);\n      } catch (error) {\n        finish(undefined, error instanceof Error ? error : new Error(String(error)));\n      }\n    });\n\n  try {\n    const ready = await exchange({ type: 'po:computer-use:hello' }, 1_500);\n    if (\n      ready.type !== 'po:computer-use:ready' ||\n      typeof ready.token !== 'string' ||\n      !/^[a-f0-9]{64}$/u.test(ready.token)\n    ) {\n      throw new Error('Invalid Desktop capability handshake.');\n    }\n    token = ready.token;\n    available = true;\n    enabled = ready.enabled === true;\n  } catch {\n    close();\n    return undefined;\n  }\n\n  return {\n    get available() {\n      return available;\n    },\n    get enabled() {\n      return available && enabled;\n    },\n    authorize: nativeAuthorized,\n    readRecording: (scope, artifactId, range) => recordings.read(scope.sessionId, artifactId, range),\n    authorizeActivation(headers) {\n      if (!available || !enabled) return false;\n      if (nativeAuthorized(headers)) return true;\n      const caller = remoteCaller(headers);\n      return (\n        caller !== undefined &&\n        (remotePolicy.stepUpRequired?.() === true ? caller.stepUp === 'verified' : caller.stepUp === 'not-required')\n      );\n    },\n    authorizePending(sessionId, headers) {\n      if (nativeAuthorized(headers)) return true;\n      const caller = remoteCaller(headers);\n      const delegated = delegations.get(sessionId);\n      return (\n        available &&\n        enabled &&\n        caller !== undefined &&\n        delegated !== undefined &&\n        delegated.deviceId === caller.deviceId &&\n        delegated.expiresAt === undefined &&\n        !delegated.abort.signal.aborted\n      );\n    },\n    authorizeRecording(sessionId, headers) {\n      if (nativeAuthorized(headers)) return true;\n      const caller = remoteCaller(headers);\n      const delegated = delegations.get(sessionId);\n      return (\n        available && caller !== undefined && delegated?.approved === true && delegated.deviceId === caller.deviceId\n      );\n    },\n    authorizeSession(sessionId, headers) {\n      if (nativeAuthorized(headers)) return true;\n      const caller = remoteCaller(headers);\n      const delegated = delegations.get(sessionId);\n      if (available && enabled && caller !== undefined && !ownedSessions.has(sessionId)) return true;\n      return (\n        available &&\n        enabled &&\n        caller !== undefined &&\n        delegated?.approved === true &&\n        delegated.expiresAt !== undefined &&\n        delegated.expiresAt > Date.now() &&\n        delegated.deviceId === caller.deviceId &&\n        !delegated.abort.signal.aborted\n      );\n    },\n    claimSession(sessionId, headers) {\n      if (!available || !enabled) throw new Error('Desktop computer use is unavailable.');\n      const caller = headers === undefined ? undefined : remoteCaller(headers);\n      if (caller !== undefined) {\n        const previous = delegations.get(sessionId);\n        if (previous !== undefined && previous.deviceId !== caller.deviceId)\n          throw new Error('This session belongs to another paired device.');\n        if (previous?.abort.signal.aborted) {\n          previous.abort = new AbortController();\n          previous.grantId = undefined;\n        }\n        if (previous === undefined)\n          delegations.set(sessionId, {\n            deviceId: caller.deviceId,\n            approved: false,\n            abort: new AbortController(),\n          });\n      } else if (headers !== undefined && !nativeAuthorized(headers)) {\n        throw new Error('Native or paired authorization is required.');\n      }\n      revokedSessions.delete(sessionId);\n      ownedSessions.add(sessionId);\n    },\n    revokeDevice(deviceId) {\n      for (const [sessionId, delegated] of delegations) if (delegated.deviceId === deviceId) revoke(sessionId);\n    },\n    ownsSession: (sessionId) => ownedSessions.has(sessionId),\n    forgetSession: (sessionId) => {\n      revoke(sessionId);\n      void recordings\n        .forgetSession(sessionId)\n        .catch(() => process.emitWarning('Computer-use recording cleanup failed.'));\n      // Keep private history pinned to Desktop, but never replay device approval after restart.\n    },\n    subscribe(listener, sessionId) {\n      listeners.set(listener, sessionId);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    async request(scope, request) {\n      if (!available) throw new Error('Desktop computer use is unavailable.');\n      if (revokedSessions.has(scope.sessionId) && request.operation !== 'stop' && request.operation !== 'status')\n        throw new Error('Computer-use delegation was revoked.');\n      if (request.operation !== 'status' && request.operation !== 'targets' && !ownedSessions.has(scope.sessionId)) {\n        throw new Error('This session has not been authorized by Desktop.');\n      }\n      const delegated = delegations.get(scope.sessionId);\n      if (delegated !== undefined && remotePolicy.isDeviceAuthorized?.(delegated.deviceId) !== true) {\n        revoke(scope.sessionId);\n        if (request.operation !== 'stop') throw new Error('The paired device was revoked.');\n      }\n      if (request.operation === 'stop' && delegated !== undefined) {\n        delegated.expiresAt = undefined;\n        delegated.abort.abort();\n      }\n      const signal =\n        delegated === undefined || request.operation === 'stop'\n          ? request.signal\n          : request.signal === undefined\n            ? delegated.abort.signal\n            : AbortSignal.any([request.signal, delegated.abort.signal]);\n      const result = await exchange(\n        {\n          type: 'po:computer-use:request',\n          sessionId: scope.sessionId,\n          operation: request.operation,\n          ...(request.payload === undefined ? {} : { payload: request.payload }),\n        },\n        request.operation === 'activate' ? 120_000 : 30_000,\n        signal,\n      );\n      if (\n        typeof result.hostGeneration !== 'string' ||\n        (generation !== undefined && generation !== result.hostGeneration)\n      ) {\n        close();\n        throw new Error('Desktop generation changed. Authorize a new session.');\n      }\n      generation = result.hostGeneration;\n      if (result.ok !== true)\n        throw new Error(typeof result.error === 'string' ? result.error : 'Desktop request failed.');\n      if (request.operation === 'activate' && delegated !== undefined) {\n        if (\n          delegations.get(scope.sessionId) !== delegated ||\n          delegated.abort.signal.aborted ||\n          remotePolicy.isDeviceAuthorized?.(delegated.deviceId) !== true\n        )\n          throw new Error('The paired activation was revoked.');\n        delegated.approved = true;\n        const grant = result.result as { grantId?: unknown; expiresAt?: unknown } | undefined;\n        if (typeof grant?.expiresAt === 'number') delegated.expiresAt = grant.expiresAt;\n        if (typeof grant?.grantId === 'string') delegated.grantId = grant.grantId;\n      }\n      if (request.operation === 'stop') {\n        if (delegated !== undefined) delegated.expiresAt = undefined;\n        const grantId = (request.payload as { grantId?: unknown } | undefined)?.grantId;\n        if (typeof grantId !== 'string') throw new Error('Recording finalization requires its grant.');\n        return recordings.importStop(scope.sessionId, grantId, result.result);\n      }\n      return result.result;\n    },\n    close() {\n      if (closed) return;\n      try {\n        send({ type: 'po:computer-use:close', version: VERSION });\n      } finally {\n        close();\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;AAUA,MAAM,UAAU;AAChB,MAAM,YAAY;AAClB,MAAM,iBAAiB;;AAIvB,eAAsB,yBACpB,YAAuB,SACvB,eAGI,CAAC,GAC4C;CACjD,IAAI,CAAC,UAAU,QAAQ,CAAC,UAAU,WAAW,OAAO,KAAA;CACpD,MAAM,aAAa,IAAIA,8BAAAA,0BAA0B,MAAMC,iBAAAA,QAAG,QAAQC,UAAAA,QAAK,KAAKC,QAAAA,QAAG,OAAO,GAAG,gBAAgB,CAAC,CAAC;CAC3G,IAAI,YAAY;CAChB,IAAI,UAAU;CACd,IAAI,SAAS;CACb,IAAI,QAAQ;CACZ,IAAI;CACJ,MAAM,gCAAgB,IAAI,IAAY;CACtC,MAAM,kCAAkB,IAAI,IAAY;CACxC,MAAM,4BAAY,IAAI,IAAoC;CAC1D,MAAM,8BAAc,IAAI,IAGtB;CACF,MAAM,oBAAoB,YAA8B;EACtD,MAAM,QAAQ,QAAQ,IAAI,cAAc,KAAK;EAC7C,OAAO,aAAa,kBAAkB,KAAK,KAAK,MAAA,GAAKC,YAAAA,gBAAAA,CAAgB,OAAO,KAAK,KAAK,GAAG,OAAO,KAAK,KAAK,CAAC;CAC7G;CACA,MAAM,gBAAgB,YAAqB;EACzC,MAAM,UAAA,GAASC,8BAAAA,kBAAAA,CAAkB,OAAO;EACxC,OAAO,QAAQ,aAAa,YAAY,aAAa,qBAAqB,OAAO,QAAQ,MAAM,OAC3F,SACA,KAAA;CACN;CACA,MAAM,UAAU,cAA6B;EAC3C,KAAK,MAAM,CAAC,UAAU,YAAY,WAAW,IAAI,cAAc,KAAA,KAAa,YAAY,WAAW,SAAS;CAC9G;CACA,MAAM,UAAU,WAAmB,kBAAkB,UAAgB;EACnE,MAAM,YAAY,YAAY,IAAI,SAAS;EAC3C,IAAI,cAAc,KAAA,GAAW;EAC7B,IAAI,CAAC,iBAAiB,YAAY,OAAO,SAAS;EAClD,UAAU,YAAY,KAAA;EACtB,UAAU,MAAM,MAAM;EACtB,gBAAgB,IAAI,SAAS;EAC7B,IAAI,UAAU,YAAY,KAAA,KAAa,WACrC,SACE;GAAE,MAAM;GAA2B;GAAW,WAAW;GAAQ,SAAS,EAAE,SAAS,UAAU,QAAQ;EAAE,GACzG,GACF,CAAC,CACE,MAAM,WAAW,WAAW,WAAW,WAAW,UAAU,SAAU,OAAO,MAAM,CAAC,CAAC,CACrF,YAAY,MAAM,CAAC;EAExB,OAAO,SAAS;CAClB;CACA,MAAM,0BAAU,IAAI,IAAkF;CACtG,MAAM,QAAQ,UAAwB;EACpC,IAAI,UAAU,CAAC,UAAU,WAAW,MAAM,IAAI,MAAM,uCAAuC;EAC3F,UAAU,KAAM,QAAQ,UAAwB;GAC9C,IAAI,OAAO,MAAM;EACnB,CAAC;CACH;CACA,MAAM,cAAoB;EACxB,IAAI,QAAQ;EACZ,SAAS;EACT,YAAY;EACZ,QAAQ;EACR,UAAU,IAAI,WAAW,SAAS;EAClC,UAAU,IAAI,cAAc,KAAK;EACjC,UAAU,IAAI,QAAQ,KAAK;EAC3B,KAAK,MAAM,WAAW,QAAQ,OAAO,GACnC,QAAQ,OAAO,KAAA,mBAAW,IAAI,MAAM,uCAAuC,CAAC;EAC9E,QAAQ,MAAM;EACd,KAAK,MAAM,aAAa,YAAY,KAAK,GAAG,OAAO,SAAS;EAC5D,OAAO;EACP,UAAU,MAAM;EAChB,WAAgB,MAAM,CAAC,CAAC,YAAY,QAAQ,YAAY,wCAAwC,CAAC;CAEnG;CACA,MAAM,aAAa,UAAyB;EAC1C,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;EACjE,MAAM,UAAU;EAChB,IAAI,QAAQ,YAAY,SAAS;EACjC,IAAI,QAAQ,SAAS,kCAAkC,OAAO,QAAQ,YAAY,WAAW;GAC3F,UAAU,QAAQ;GAElB,KAAK,MAAM,aAAa,YAAY,KAAK,GAAG,OAAO,WAAW,IAAI;GAClE,OAAO;GACP;EACF;EACA,IAAI,OAAO,QAAQ,cAAc,UAAU;EAC3C,IAAI,QAAQ,SAAS,2BAA2B,QAAQ,SAAS,4BAA4B;EAC7F,IAAI,OAAO,WAAW,KAAK,UAAU,OAAO,CAAC,IAAI,WAAW;GAC1D,MAAM;GACN;EACF;EACA,QAAQ,IAAI,QAAQ,SAAS,CAAC,EAAE,OAAO,OAAO;CAChD;CACA,UAAU,GAAG,WAAW,SAAS;CACjC,UAAU,GAAG,cAAc,KAAK;CAChC,UAAU,GAAG,QAAQ,KAAK;CAE1B,MAAM,YACJ,OACA,WACA,WAEA,IAAI,SAAS,SAAS,WAAW;EAC/B,QAAQ,eAAe;EACvB,IAAI,UAAU,QAAQ,QAAQ,KAAK,MAAM,IAAI,MAAM,wDAAwD;EAC3G,MAAM,aAAA,GAAYC,YAAAA,WAAAA,CAAW;EAC7B,MAAM,eAAqB;GACzB,IAAI;IACF,KAAK;KAAE,MAAM;KAA0B,SAAS;KAAS;IAAU,CAAC;GACtE,QAAQ,CAER;EACF;EACA,MAAM,UAAU,QAAkC,UAAwB;GACxE,IAAI,CAAC,QAAQ,OAAO,SAAS,GAAG;GAChC,aAAa,KAAK;GAClB,QAAQ,oBAAoB,SAAS,OAAO;GAC5C,IAAI,OAAO,OAAO,KAAK;QAClB,QAAQ,MAAO;EACtB;EACA,MAAM,gBAAsB;GAC1B,OAAO;GACP,OAAO,KAAA,mBAAW,IAAI,MAAM,6CAA6C,CAAC;EAC5E;EACA,MAAM,QAAQ,iBAAiB;GAC7B,OAAO;GACP,OAAO,KAAA,mBAAW,IAAI,MAAM,yCAAyC,CAAC;EACxE,GAAG,SAAS;EACZ,QAAQ,IAAI,WAAW,EAAE,OAAO,CAAC;EACjC,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;EACzD,IAAI;GACF,MAAM,UAAU;IAAE,GAAG;IAAO,SAAS;IAAS;GAAU;GACxD,IAAI,OAAO,WAAW,KAAK,UAAU,OAAO,CAAC,IAAI,WAC/C,MAAM,IAAI,MAAM,4CAA4C;GAC9D,KAAK,OAAO;EACd,SAAS,OAAO;GACd,OAAO,KAAA,GAAW,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;EAC7E;CACF,CAAC;CAEH,IAAI;EACF,MAAM,QAAQ,MAAM,SAAS,EAAE,MAAM,wBAAwB,GAAG,IAAK;EACrE,IACE,MAAM,SAAS,2BACf,OAAO,MAAM,UAAU,YACvB,CAAC,kBAAkB,KAAK,MAAM,KAAK,GAEnC,MAAM,IAAI,MAAM,uCAAuC;EAEzD,QAAQ,MAAM;EACd,YAAY;EACZ,UAAU,MAAM,YAAY;CAC9B,QAAQ;EACN,MAAM;EACN;CACF;CAEA,OAAO;EACL,IAAI,YAAY;GACd,OAAO;EACT;EACA,IAAI,UAAU;GACZ,OAAO,aAAa;EACtB;EACA,WAAW;EACX,gBAAgB,OAAO,YAAY,UAAU,WAAW,KAAK,MAAM,WAAW,YAAY,KAAK;EAC/F,oBAAoB,SAAS;GAC3B,IAAI,CAAC,aAAa,CAAC,SAAS,OAAO;GACnC,IAAI,iBAAiB,OAAO,GAAG,OAAO;GACtC,MAAM,SAAS,aAAa,OAAO;GACnC,OACE,WAAW,KAAA,MACV,aAAa,iBAAiB,MAAM,OAAO,OAAO,WAAW,aAAa,OAAO,WAAW;EAEjG;EACA,iBAAiB,WAAW,SAAS;GACnC,IAAI,iBAAiB,OAAO,GAAG,OAAO;GACtC,MAAM,SAAS,aAAa,OAAO;GACnC,MAAM,YAAY,YAAY,IAAI,SAAS;GAC3C,OACE,aACA,WACA,WAAW,KAAA,KACX,cAAc,KAAA,KACd,UAAU,aAAa,OAAO,YAC9B,UAAU,cAAc,KAAA,KACxB,CAAC,UAAU,MAAM,OAAO;EAE5B;EACA,mBAAmB,WAAW,SAAS;GACrC,IAAI,iBAAiB,OAAO,GAAG,OAAO;GACtC,MAAM,SAAS,aAAa,OAAO;GACnC,MAAM,YAAY,YAAY,IAAI,SAAS;GAC3C,OACE,aAAa,WAAW,KAAA,KAAa,WAAW,aAAa,QAAQ,UAAU,aAAa,OAAO;EAEvG;EACA,iBAAiB,WAAW,SAAS;GACnC,IAAI,iBAAiB,OAAO,GAAG,OAAO;GACtC,MAAM,SAAS,aAAa,OAAO;GACnC,MAAM,YAAY,YAAY,IAAI,SAAS;GAC3C,IAAI,aAAa,WAAW,WAAW,KAAA,KAAa,CAAC,cAAc,IAAI,SAAS,GAAG,OAAO;GAC1F,OACE,aACA,WACA,WAAW,KAAA,KACX,WAAW,aAAa,QACxB,UAAU,cAAc,KAAA,KACxB,UAAU,YAAY,KAAK,IAAI,KAC/B,UAAU,aAAa,OAAO,YAC9B,CAAC,UAAU,MAAM,OAAO;EAE5B;EACA,aAAa,WAAW,SAAS;GAC/B,IAAI,CAAC,aAAa,CAAC,SAAS,MAAM,IAAI,MAAM,sCAAsC;GAClF,MAAM,SAAS,YAAY,KAAA,IAAY,KAAA,IAAY,aAAa,OAAO;GACvE,IAAI,WAAW,KAAA,GAAW;IACxB,MAAM,WAAW,YAAY,IAAI,SAAS;IAC1C,IAAI,aAAa,KAAA,KAAa,SAAS,aAAa,OAAO,UACzD,MAAM,IAAI,MAAM,gDAAgD;IAClE,IAAI,UAAU,MAAM,OAAO,SAAS;KAClC,SAAS,QAAQ,IAAI,gBAAgB;KACrC,SAAS,UAAU,KAAA;IACrB;IACA,IAAI,aAAa,KAAA,GACf,YAAY,IAAI,WAAW;KACzB,UAAU,OAAO;KACjB,UAAU;KACV,OAAO,IAAI,gBAAgB;IAC7B,CAAC;GACL,OAAO,IAAI,YAAY,KAAA,KAAa,CAAC,iBAAiB,OAAO,GAC3D,MAAM,IAAI,MAAM,6CAA6C;GAE/D,gBAAgB,OAAO,SAAS;GAChC,cAAc,IAAI,SAAS;EAC7B;EACA,aAAa,UAAU;GACrB,KAAK,MAAM,CAAC,WAAW,cAAc,aAAa,IAAI,UAAU,aAAa,UAAU,OAAO,SAAS;EACzG;EACA,cAAc,cAAc,cAAc,IAAI,SAAS;EACvD,gBAAgB,cAAc;GAC5B,OAAO,SAAS;GAChB,WACG,cAAc,SAAS,CAAC,CACxB,YAAY,QAAQ,YAAY,wCAAwC,CAAC;EAE9E;EACA,UAAU,UAAU,WAAW;GAC7B,UAAU,IAAI,UAAU,SAAS;GACjC,aAAa;IACX,UAAU,OAAO,QAAQ;GAC3B;EACF;EACA,MAAM,QAAQ,OAAO,SAAS;GAC5B,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,sCAAsC;GACtE,IAAI,gBAAgB,IAAI,MAAM,SAAS,KAAK,QAAQ,cAAc,UAAU,QAAQ,cAAc,UAChG,MAAM,IAAI,MAAM,sCAAsC;GACxD,IAAI,QAAQ,cAAc,YAAY,QAAQ,cAAc,aAAa,CAAC,cAAc,IAAI,MAAM,SAAS,GACzG,MAAM,IAAI,MAAM,kDAAkD;GAEpE,MAAM,YAAY,YAAY,IAAI,MAAM,SAAS;GACjD,IAAI,cAAc,KAAA,KAAa,aAAa,qBAAqB,UAAU,QAAQ,MAAM,MAAM;IAC7F,OAAO,MAAM,SAAS;IACtB,IAAI,QAAQ,cAAc,QAAQ,MAAM,IAAI,MAAM,gCAAgC;GACpF;GACA,IAAI,QAAQ,cAAc,UAAU,cAAc,KAAA,GAAW;IAC3D,UAAU,YAAY,KAAA;IACtB,UAAU,MAAM,MAAM;GACxB;GACA,MAAM,SACJ,cAAc,KAAA,KAAa,QAAQ,cAAc,SAC7C,QAAQ,SACR,QAAQ,WAAW,KAAA,IACjB,UAAU,MAAM,SAChB,YAAY,IAAI,CAAC,QAAQ,QAAQ,UAAU,MAAM,MAAM,CAAC;GAChE,MAAM,SAAS,MAAM,SACnB;IACE,MAAM;IACN,WAAW,MAAM;IACjB,WAAW,QAAQ;IACnB,GAAI,QAAQ,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,QAAQ,QAAQ;GACtE,GACA,QAAQ,cAAc,aAAa,OAAU,KAC7C,MACF;GACA,IACE,OAAO,OAAO,mBAAmB,YAChC,eAAe,KAAA,KAAa,eAAe,OAAO,gBACnD;IACA,MAAM;IACN,MAAM,IAAI,MAAM,sDAAsD;GACxE;GACA,aAAa,OAAO;GACpB,IAAI,OAAO,OAAO,MAChB,MAAM,IAAI,MAAM,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ,yBAAyB;GAC7F,IAAI,QAAQ,cAAc,cAAc,cAAc,KAAA,GAAW;IAC/D,IACE,YAAY,IAAI,MAAM,SAAS,MAAM,aACrC,UAAU,MAAM,OAAO,WACvB,aAAa,qBAAqB,UAAU,QAAQ,MAAM,MAE1D,MAAM,IAAI,MAAM,oCAAoC;IACtD,UAAU,WAAW;IACrB,MAAM,QAAQ,OAAO;IACrB,IAAI,OAAO,OAAO,cAAc,UAAU,UAAU,YAAY,MAAM;IACtE,IAAI,OAAO,OAAO,YAAY,UAAU,UAAU,UAAU,MAAM;GACpE;GACA,IAAI,QAAQ,cAAc,QAAQ;IAChC,IAAI,cAAc,KAAA,GAAW,UAAU,YAAY,KAAA;IACnD,MAAM,UAAW,QAAQ,SAA+C;IACxE,IAAI,OAAO,YAAY,UAAU,MAAM,IAAI,MAAM,4CAA4C;IAC7F,OAAO,WAAW,WAAW,MAAM,WAAW,SAAS,OAAO,MAAM;GACtE;GACA,OAAO,OAAO;EAChB;EACA,QAAQ;GACN,IAAI,QAAQ;GACZ,IAAI;IACF,KAAK;KAAE,MAAM;KAAyB,SAAS;IAAQ,CAAC;GAC1D,UAAU;IACR,MAAM;GACR;EACF;CACF;AACF"}
+{"version":3,"file":"computerUseBinding.cjs","names":["ComputerUseRecordingStore","fs","path","os","timingSafeEqual","poApiCallerFrom","randomUUID"],"sources":["../../../../src/builders/server/computerUseBinding.ts"],"sourcesContent":["import { randomUUID, timingSafeEqual } from 'node:crypto';\nimport fs from 'node:fs/promises';\nimport os from 'node:os';\nimport path from 'node:path';\n\nimport type { PoComputerUseHostBinding } from '@agimon-ai/po-core/hubChannel';\nimport { poApiCallerFrom } from '@agimon-ai/po-core/packageApi';\n\nimport { ComputerUseRecordingStore } from './computerUseRecordings';\n\nconst VERSION = 1;\nconst MAX_BYTES = 8 * 1024 * 1024;\nconst DESKTOP_HEADER = 'x-po-desktop';\ntype Transport = Pick<NodeJS.Process, 'send' | 'connected' | 'on' | 'off'>;\n\n/** The capability is discovered over the inherited Desktop IPC channel, never from environment flags. */\nexport async function createComputerUseBinding(\n  transport: Transport = process,\n  remotePolicy: {\n    isDeviceAuthorized?: (deviceId: string) => boolean;\n    stepUpRequired?: () => boolean;\n  } = {},\n): Promise<PoComputerUseHostBinding | undefined> {\n  if (!transport.send || !transport.connected) return undefined;\n  const recordings = new ComputerUseRecordingStore(await fs.mkdtemp(path.join(os.tmpdir(), 'po-recordings-')));\n  let available = false;\n  let enabled = false;\n  let closed = false;\n  let token = '';\n  let generation: string | undefined;\n  const ownedSessions = new Set<string>();\n  const revokedSessions = new Set<string>();\n  const listeners = new Map<() => void, string | undefined>();\n  const delegations = new Map<\n    string,\n    { deviceId: string; approved: boolean; abort: AbortController; grantId?: string; expiresAt?: number }\n  >();\n  const nativeAuthorized = (headers: Headers): boolean => {\n    const proof = headers.get(DESKTOP_HEADER) ?? '';\n    return available && /^[a-f0-9]{64}$/u.test(proof) && timingSafeEqual(Buffer.from(proof), Buffer.from(token));\n  };\n  const remoteCaller = (headers: Headers) => {\n    const caller = poApiCallerFrom(headers);\n    return caller?.locality === 'remote' && remotePolicy.isDeviceAuthorized?.(caller.deviceId) === true\n      ? caller\n      : undefined;\n  };\n  const notify = (sessionId?: string): void => {\n    for (const [listener, session] of listeners)\n      if (sessionId === undefined || session === undefined || session === sessionId) listener();\n  };\n  const revoke = (sessionId: string, retainRecording = false): void => {\n    const delegated = delegations.get(sessionId);\n    if (delegated === undefined) return;\n    if (!retainRecording) delegations.delete(sessionId);\n    delegated.expiresAt = undefined;\n    delegated.abort.abort();\n    revokedSessions.add(sessionId);\n    if (delegated.grantId !== undefined && available) {\n      void exchange(\n        { type: 'po:computer-use:request', sessionId, operation: 'stop', payload: { grantId: delegated.grantId } },\n        30_000,\n      )\n        .then((result) => recordings.importStop(sessionId, delegated.grantId!, result.result))\n        .catch(() => close());\n    }\n    notify(sessionId);\n  };\n  const pending = new Map<string, { finish: (value?: Record<string, unknown>, error?: Error) => void }>();\n  const send = (value: object): void => {\n    if (closed || !transport.connected) throw new Error('Desktop computer use is disconnected.');\n    transport.send!(value, (error: Error | null) => {\n      if (error) close();\n    });\n  };\n  const close = (): void => {\n    if (closed) return;\n    closed = true;\n    available = false;\n    token = '';\n    transport.off('message', onMessage);\n    transport.off('disconnect', close);\n    transport.off('exit', close);\n    for (const request of pending.values())\n      request.finish(undefined, new Error('Desktop computer use is disconnected.'));\n    pending.clear();\n    for (const sessionId of delegations.keys()) revoke(sessionId);\n    notify();\n    listeners.clear();\n    void recordings.close().catch(() => process.emitWarning('Computer-use recording cleanup failed.'));\n    // Keep ownership pinned while the server is alive, including after Desktop disconnects.\n  };\n  const onMessage = (value: unknown): void => {\n    if (!value || typeof value !== 'object' || Array.isArray(value)) return;\n    const message = value as Record<string, unknown>;\n    if (message.version !== VERSION) return;\n    if (message.type === 'po:computer-use:availability' && typeof message.enabled === 'boolean') {\n      enabled = message.enabled;\n      // Native stop/expiry also notifies availability without changing the global setting.\n      for (const sessionId of delegations.keys()) revoke(sessionId, true);\n      notify();\n      return;\n    }\n    if (typeof message.requestId !== 'string') return;\n    if (message.type !== 'po:computer-use:ready' && message.type !== 'po:computer-use:response') return;\n    if (Buffer.byteLength(JSON.stringify(message)) > MAX_BYTES) {\n      close();\n      return;\n    }\n    pending.get(message.requestId)?.finish(message);\n  };\n  transport.on('message', onMessage);\n  transport.on('disconnect', close);\n  transport.on('exit', close);\n\n  const exchange = (\n    value: Record<string, unknown>,\n    timeoutMs: number,\n    signal?: AbortSignal,\n  ): Promise<Record<string, unknown>> =>\n    new Promise((resolve, reject) => {\n      signal?.throwIfAborted();\n      if (closed || pending.size >= 128) throw new Error('Desktop computer-use transport is unavailable or busy.');\n      const requestId = randomUUID();\n      const cancel = (): void => {\n        try {\n          send({ type: 'po:computer-use:cancel', version: VERSION, requestId });\n        } catch {\n          /* Already disconnected. */\n        }\n      };\n      const finish = (result?: Record<string, unknown>, error?: Error): void => {\n        if (!pending.delete(requestId)) return;\n        clearTimeout(timer);\n        signal?.removeEventListener('abort', onAbort);\n        if (error) reject(error);\n        else resolve(result!);\n      };\n      const onAbort = (): void => {\n        cancel();\n        finish(undefined, new Error('Desktop computer-use request was cancelled.'));\n      };\n      const timer = setTimeout(() => {\n        cancel();\n        finish(undefined, new Error('Desktop computer-use request timed out.'));\n      }, timeoutMs);\n      pending.set(requestId, { finish });\n      signal?.addEventListener('abort', onAbort, { once: true });\n      try {\n        const message = { ...value, version: VERSION, requestId };\n        if (Buffer.byteLength(JSON.stringify(message)) > MAX_BYTES)\n          throw new Error('Desktop computer-use request is too large.');\n        send(message);\n      } catch (error) {\n        finish(undefined, error instanceof Error ? error : new Error(String(error)));\n      }\n    });\n\n  try {\n    const ready = await exchange({ type: 'po:computer-use:hello' }, 1_500);\n    if (\n      ready.type !== 'po:computer-use:ready' ||\n      typeof ready.token !== 'string' ||\n      !/^[a-f0-9]{64}$/u.test(ready.token)\n    ) {\n      throw new Error('Invalid Desktop capability handshake.');\n    }\n    token = ready.token;\n    available = true;\n    enabled = ready.enabled === true;\n  } catch {\n    close();\n    return undefined;\n  }\n\n  return {\n    get available() {\n      return available;\n    },\n    get enabled() {\n      return available && enabled;\n    },\n    authorize: nativeAuthorized,\n    readRecording: (scope, artifactId, range) => recordings.read(scope.sessionId, artifactId, range),\n    authorizeActivation(headers) {\n      if (!available || !enabled) return false;\n      if (nativeAuthorized(headers)) return true;\n      const caller = remoteCaller(headers);\n      return (\n        caller !== undefined &&\n        (remotePolicy.stepUpRequired?.() === true ? caller.stepUp === 'verified' : caller.stepUp === 'not-required')\n      );\n    },\n    authorizePending(sessionId, headers) {\n      if (nativeAuthorized(headers)) return true;\n      const caller = remoteCaller(headers);\n      const delegated = delegations.get(sessionId);\n      return (\n        available &&\n        enabled &&\n        caller !== undefined &&\n        delegated !== undefined &&\n        delegated.deviceId === caller.deviceId &&\n        delegated.expiresAt === undefined &&\n        !delegated.abort.signal.aborted\n      );\n    },\n    authorizeRecording(sessionId, headers) {\n      if (nativeAuthorized(headers)) return true;\n      const caller = remoteCaller(headers);\n      const delegated = delegations.get(sessionId);\n      return (\n        available && caller !== undefined && delegated?.approved === true && delegated.deviceId === caller.deviceId\n      );\n    },\n    authorizeSession(sessionId, headers) {\n      if (nativeAuthorized(headers)) return true;\n      const caller = remoteCaller(headers);\n      const delegated = delegations.get(sessionId);\n      if (available && enabled && caller !== undefined && !ownedSessions.has(sessionId)) return true;\n      return (\n        available &&\n        enabled &&\n        caller !== undefined &&\n        delegated?.approved === true &&\n        delegated.expiresAt !== undefined &&\n        delegated.expiresAt > Date.now() &&\n        delegated.deviceId === caller.deviceId &&\n        !delegated.abort.signal.aborted\n      );\n    },\n    claimSession(sessionId, headers) {\n      if (!available || !enabled) throw new Error('Desktop computer use is unavailable.');\n      const caller = headers === undefined ? undefined : remoteCaller(headers);\n      if (caller !== undefined) {\n        const previous = delegations.get(sessionId);\n        if (previous !== undefined && previous.deviceId !== caller.deviceId)\n          throw new Error('This session belongs to another paired device.');\n        if (previous?.abort.signal.aborted) {\n          previous.abort = new AbortController();\n          previous.grantId = undefined;\n        }\n        if (previous === undefined)\n          delegations.set(sessionId, {\n            deviceId: caller.deviceId,\n            approved: false,\n            abort: new AbortController(),\n          });\n      } else if (headers !== undefined && !nativeAuthorized(headers)) {\n        throw new Error('Native or paired authorization is required.');\n      }\n      revokedSessions.delete(sessionId);\n      ownedSessions.add(sessionId);\n    },\n    revokeDevice(deviceId) {\n      for (const [sessionId, delegated] of delegations) if (delegated.deviceId === deviceId) revoke(sessionId);\n    },\n    ownsSession: (sessionId) => ownedSessions.has(sessionId),\n    forgetSession: (sessionId) => {\n      revoke(sessionId);\n      void recordings\n        .forgetSession(sessionId)\n        .catch(() => process.emitWarning('Computer-use recording cleanup failed.'));\n      // Keep private history pinned to Desktop, but never replay device approval after restart.\n    },\n    subscribe(listener, sessionId) {\n      listeners.set(listener, sessionId);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    async request(scope, request) {\n      if (!available) throw new Error('Desktop computer use is unavailable.');\n      if (revokedSessions.has(scope.sessionId) && request.operation !== 'stop' && request.operation !== 'status')\n        throw new Error('Computer-use delegation was revoked.');\n      if (request.operation !== 'status' && request.operation !== 'targets' && !ownedSessions.has(scope.sessionId)) {\n        throw new Error('This session has not been authorized by Desktop.');\n      }\n      const delegated = delegations.get(scope.sessionId);\n      if (delegated !== undefined && remotePolicy.isDeviceAuthorized?.(delegated.deviceId) !== true) {\n        revoke(scope.sessionId);\n        if (request.operation !== 'stop') throw new Error('The paired device was revoked.');\n      }\n      if (request.operation === 'stop' && delegated !== undefined) {\n        delegated.expiresAt = undefined;\n        delegated.abort.abort();\n      }\n      const signal =\n        delegated === undefined || request.operation === 'stop'\n          ? request.signal\n          : request.signal === undefined\n            ? delegated.abort.signal\n            : AbortSignal.any([request.signal, delegated.abort.signal]);\n      const result = await exchange(\n        {\n          type: 'po:computer-use:request',\n          sessionId: scope.sessionId,\n          operation: request.operation,\n          ...(request.payload === undefined ? {} : { payload: request.payload }),\n        },\n        request.operation === 'activate' ? 120_000 : 30_000,\n        signal,\n      );\n      if (\n        typeof result.hostGeneration !== 'string' ||\n        (generation !== undefined && generation !== result.hostGeneration)\n      ) {\n        close();\n        throw new Error('Desktop generation changed. Authorize a new session.');\n      }\n      generation = result.hostGeneration;\n      if (result.ok !== true)\n        throw new Error(typeof result.error === 'string' ? result.error : 'Desktop request failed.');\n      if (request.operation === 'activate' && delegated !== undefined) {\n        if (\n          delegations.get(scope.sessionId) !== delegated ||\n          delegated.abort.signal.aborted ||\n          remotePolicy.isDeviceAuthorized?.(delegated.deviceId) !== true\n        )\n          throw new Error('The paired activation was revoked.');\n        delegated.approved = true;\n        const grant = result.result as { grantId?: unknown; expiresAt?: unknown } | undefined;\n        if (typeof grant?.expiresAt === 'number') delegated.expiresAt = grant.expiresAt;\n        if (typeof grant?.grantId === 'string') delegated.grantId = grant.grantId;\n      }\n      if (request.operation === 'stop') {\n        if (delegated !== undefined) delegated.expiresAt = undefined;\n        const grantId = (request.payload as { grantId?: unknown } | undefined)?.grantId;\n        if (typeof grantId !== 'string') throw new Error('Recording finalization requires its grant.');\n        return recordings.importStop(scope.sessionId, grantId, result.result);\n      }\n      return result.result;\n    },\n    close() {\n      if (closed) return;\n      try {\n        send({ type: 'po:computer-use:close', version: VERSION });\n      } finally {\n        close();\n      }\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;AAUA,MAAM,UAAU;AAChB,MAAM,YAAY;AAClB,MAAM,iBAAiB;;AAIvB,eAAsB,yBACpB,YAAuB,SACvB,eAGI,CAAC,GAC0C;CAC/C,IAAI,CAAC,UAAU,QAAQ,CAAC,UAAU,WAAW,OAAO,KAAA;CACpD,MAAM,aAAa,IAAIA,8BAAAA,0BAA0B,MAAMC,iBAAAA,QAAG,QAAQC,UAAAA,QAAK,KAAKC,QAAAA,QAAG,OAAO,GAAG,gBAAgB,CAAC,CAAC;CAC3G,IAAI,YAAY;CAChB,IAAI,UAAU;CACd,IAAI,SAAS;CACb,IAAI,QAAQ;CACZ,IAAI;CACJ,MAAM,gCAAgB,IAAI,IAAY;CACtC,MAAM,kCAAkB,IAAI,IAAY;CACxC,MAAM,4BAAY,IAAI,IAAoC;CAC1D,MAAM,8BAAc,IAAI,IAGtB;CACF,MAAM,oBAAoB,YAA8B;EACtD,MAAM,QAAQ,QAAQ,IAAI,cAAc,KAAK;EAC7C,OAAO,aAAa,kBAAkB,KAAK,KAAK,MAAA,GAAKC,YAAAA,gBAAAA,CAAgB,OAAO,KAAK,KAAK,GAAG,OAAO,KAAK,KAAK,CAAC;CAC7G;CACA,MAAM,gBAAgB,YAAqB;EACzC,MAAM,UAAA,GAASC,8BAAAA,gBAAAA,CAAgB,OAAO;EACtC,OAAO,QAAQ,aAAa,YAAY,aAAa,qBAAqB,OAAO,QAAQ,MAAM,OAC3F,SACA,KAAA;CACN;CACA,MAAM,UAAU,cAA6B;EAC3C,KAAK,MAAM,CAAC,UAAU,YAAY,WAChC,IAAI,cAAc,KAAA,KAAa,YAAY,KAAA,KAAa,YAAY,WAAW,SAAS;CAC5F;CACA,MAAM,UAAU,WAAmB,kBAAkB,UAAgB;EACnE,MAAM,YAAY,YAAY,IAAI,SAAS;EAC3C,IAAI,cAAc,KAAA,GAAW;EAC7B,IAAI,CAAC,iBAAiB,YAAY,OAAO,SAAS;EAClD,UAAU,YAAY,KAAA;EACtB,UAAU,MAAM,MAAM;EACtB,gBAAgB,IAAI,SAAS;EAC7B,IAAI,UAAU,YAAY,KAAA,KAAa,WACrC,SACE;GAAE,MAAM;GAA2B;GAAW,WAAW;GAAQ,SAAS,EAAE,SAAS,UAAU,QAAQ;EAAE,GACzG,GACF,CAAC,CACE,MAAM,WAAW,WAAW,WAAW,WAAW,UAAU,SAAU,OAAO,MAAM,CAAC,CAAC,CACrF,YAAY,MAAM,CAAC;EAExB,OAAO,SAAS;CAClB;CACA,MAAM,0BAAU,IAAI,IAAkF;CACtG,MAAM,QAAQ,UAAwB;EACpC,IAAI,UAAU,CAAC,UAAU,WAAW,MAAM,IAAI,MAAM,uCAAuC;EAC3F,UAAU,KAAM,QAAQ,UAAwB;GAC9C,IAAI,OAAO,MAAM;EACnB,CAAC;CACH;CACA,MAAM,cAAoB;EACxB,IAAI,QAAQ;EACZ,SAAS;EACT,YAAY;EACZ,QAAQ;EACR,UAAU,IAAI,WAAW,SAAS;EAClC,UAAU,IAAI,cAAc,KAAK;EACjC,UAAU,IAAI,QAAQ,KAAK;EAC3B,KAAK,MAAM,WAAW,QAAQ,OAAO,GACnC,QAAQ,OAAO,KAAA,mBAAW,IAAI,MAAM,uCAAuC,CAAC;EAC9E,QAAQ,MAAM;EACd,KAAK,MAAM,aAAa,YAAY,KAAK,GAAG,OAAO,SAAS;EAC5D,OAAO;EACP,UAAU,MAAM;EAChB,WAAgB,MAAM,CAAC,CAAC,YAAY,QAAQ,YAAY,wCAAwC,CAAC;CAEnG;CACA,MAAM,aAAa,UAAyB;EAC1C,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;EACjE,MAAM,UAAU;EAChB,IAAI,QAAQ,YAAY,SAAS;EACjC,IAAI,QAAQ,SAAS,kCAAkC,OAAO,QAAQ,YAAY,WAAW;GAC3F,UAAU,QAAQ;GAElB,KAAK,MAAM,aAAa,YAAY,KAAK,GAAG,OAAO,WAAW,IAAI;GAClE,OAAO;GACP;EACF;EACA,IAAI,OAAO,QAAQ,cAAc,UAAU;EAC3C,IAAI,QAAQ,SAAS,2BAA2B,QAAQ,SAAS,4BAA4B;EAC7F,IAAI,OAAO,WAAW,KAAK,UAAU,OAAO,CAAC,IAAI,WAAW;GAC1D,MAAM;GACN;EACF;EACA,QAAQ,IAAI,QAAQ,SAAS,CAAC,EAAE,OAAO,OAAO;CAChD;CACA,UAAU,GAAG,WAAW,SAAS;CACjC,UAAU,GAAG,cAAc,KAAK;CAChC,UAAU,GAAG,QAAQ,KAAK;CAE1B,MAAM,YACJ,OACA,WACA,WAEA,IAAI,SAAS,SAAS,WAAW;EAC/B,QAAQ,eAAe;EACvB,IAAI,UAAU,QAAQ,QAAQ,KAAK,MAAM,IAAI,MAAM,wDAAwD;EAC3G,MAAM,aAAA,GAAYC,YAAAA,WAAAA,CAAW;EAC7B,MAAM,eAAqB;GACzB,IAAI;IACF,KAAK;KAAE,MAAM;KAA0B,SAAS;KAAS;IAAU,CAAC;GACtE,QAAQ,CAER;EACF;EACA,MAAM,UAAU,QAAkC,UAAwB;GACxE,IAAI,CAAC,QAAQ,OAAO,SAAS,GAAG;GAChC,aAAa,KAAK;GAClB,QAAQ,oBAAoB,SAAS,OAAO;GAC5C,IAAI,OAAO,OAAO,KAAK;QAClB,QAAQ,MAAO;EACtB;EACA,MAAM,gBAAsB;GAC1B,OAAO;GACP,OAAO,KAAA,mBAAW,IAAI,MAAM,6CAA6C,CAAC;EAC5E;EACA,MAAM,QAAQ,iBAAiB;GAC7B,OAAO;GACP,OAAO,KAAA,mBAAW,IAAI,MAAM,yCAAyC,CAAC;EACxE,GAAG,SAAS;EACZ,QAAQ,IAAI,WAAW,EAAE,OAAO,CAAC;EACjC,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;EACzD,IAAI;GACF,MAAM,UAAU;IAAE,GAAG;IAAO,SAAS;IAAS;GAAU;GACxD,IAAI,OAAO,WAAW,KAAK,UAAU,OAAO,CAAC,IAAI,WAC/C,MAAM,IAAI,MAAM,4CAA4C;GAC9D,KAAK,OAAO;EACd,SAAS,OAAO;GACd,OAAO,KAAA,GAAW,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC;EAC7E;CACF,CAAC;CAEH,IAAI;EACF,MAAM,QAAQ,MAAM,SAAS,EAAE,MAAM,wBAAwB,GAAG,IAAK;EACrE,IACE,MAAM,SAAS,2BACf,OAAO,MAAM,UAAU,YACvB,CAAC,kBAAkB,KAAK,MAAM,KAAK,GAEnC,MAAM,IAAI,MAAM,uCAAuC;EAEzD,QAAQ,MAAM;EACd,YAAY;EACZ,UAAU,MAAM,YAAY;CAC9B,QAAQ;EACN,MAAM;EACN;CACF;CAEA,OAAO;EACL,IAAI,YAAY;GACd,OAAO;EACT;EACA,IAAI,UAAU;GACZ,OAAO,aAAa;EACtB;EACA,WAAW;EACX,gBAAgB,OAAO,YAAY,UAAU,WAAW,KAAK,MAAM,WAAW,YAAY,KAAK;EAC/F,oBAAoB,SAAS;GAC3B,IAAI,CAAC,aAAa,CAAC,SAAS,OAAO;GACnC,IAAI,iBAAiB,OAAO,GAAG,OAAO;GACtC,MAAM,SAAS,aAAa,OAAO;GACnC,OACE,WAAW,KAAA,MACV,aAAa,iBAAiB,MAAM,OAAO,OAAO,WAAW,aAAa,OAAO,WAAW;EAEjG;EACA,iBAAiB,WAAW,SAAS;GACnC,IAAI,iBAAiB,OAAO,GAAG,OAAO;GACtC,MAAM,SAAS,aAAa,OAAO;GACnC,MAAM,YAAY,YAAY,IAAI,SAAS;GAC3C,OACE,aACA,WACA,WAAW,KAAA,KACX,cAAc,KAAA,KACd,UAAU,aAAa,OAAO,YAC9B,UAAU,cAAc,KAAA,KACxB,CAAC,UAAU,MAAM,OAAO;EAE5B;EACA,mBAAmB,WAAW,SAAS;GACrC,IAAI,iBAAiB,OAAO,GAAG,OAAO;GACtC,MAAM,SAAS,aAAa,OAAO;GACnC,MAAM,YAAY,YAAY,IAAI,SAAS;GAC3C,OACE,aAAa,WAAW,KAAA,KAAa,WAAW,aAAa,QAAQ,UAAU,aAAa,OAAO;EAEvG;EACA,iBAAiB,WAAW,SAAS;GACnC,IAAI,iBAAiB,OAAO,GAAG,OAAO;GACtC,MAAM,SAAS,aAAa,OAAO;GACnC,MAAM,YAAY,YAAY,IAAI,SAAS;GAC3C,IAAI,aAAa,WAAW,WAAW,KAAA,KAAa,CAAC,cAAc,IAAI,SAAS,GAAG,OAAO;GAC1F,OACE,aACA,WACA,WAAW,KAAA,KACX,WAAW,aAAa,QACxB,UAAU,cAAc,KAAA,KACxB,UAAU,YAAY,KAAK,IAAI,KAC/B,UAAU,aAAa,OAAO,YAC9B,CAAC,UAAU,MAAM,OAAO;EAE5B;EACA,aAAa,WAAW,SAAS;GAC/B,IAAI,CAAC,aAAa,CAAC,SAAS,MAAM,IAAI,MAAM,sCAAsC;GAClF,MAAM,SAAS,YAAY,KAAA,IAAY,KAAA,IAAY,aAAa,OAAO;GACvE,IAAI,WAAW,KAAA,GAAW;IACxB,MAAM,WAAW,YAAY,IAAI,SAAS;IAC1C,IAAI,aAAa,KAAA,KAAa,SAAS,aAAa,OAAO,UACzD,MAAM,IAAI,MAAM,gDAAgD;IAClE,IAAI,UAAU,MAAM,OAAO,SAAS;KAClC,SAAS,QAAQ,IAAI,gBAAgB;KACrC,SAAS,UAAU,KAAA;IACrB;IACA,IAAI,aAAa,KAAA,GACf,YAAY,IAAI,WAAW;KACzB,UAAU,OAAO;KACjB,UAAU;KACV,OAAO,IAAI,gBAAgB;IAC7B,CAAC;GACL,OAAO,IAAI,YAAY,KAAA,KAAa,CAAC,iBAAiB,OAAO,GAC3D,MAAM,IAAI,MAAM,6CAA6C;GAE/D,gBAAgB,OAAO,SAAS;GAChC,cAAc,IAAI,SAAS;EAC7B;EACA,aAAa,UAAU;GACrB,KAAK,MAAM,CAAC,WAAW,cAAc,aAAa,IAAI,UAAU,aAAa,UAAU,OAAO,SAAS;EACzG;EACA,cAAc,cAAc,cAAc,IAAI,SAAS;EACvD,gBAAgB,cAAc;GAC5B,OAAO,SAAS;GAChB,WACG,cAAc,SAAS,CAAC,CACxB,YAAY,QAAQ,YAAY,wCAAwC,CAAC;EAE9E;EACA,UAAU,UAAU,WAAW;GAC7B,UAAU,IAAI,UAAU,SAAS;GACjC,aAAa;IACX,UAAU,OAAO,QAAQ;GAC3B;EACF;EACA,MAAM,QAAQ,OAAO,SAAS;GAC5B,IAAI,CAAC,WAAW,MAAM,IAAI,MAAM,sCAAsC;GACtE,IAAI,gBAAgB,IAAI,MAAM,SAAS,KAAK,QAAQ,cAAc,UAAU,QAAQ,cAAc,UAChG,MAAM,IAAI,MAAM,sCAAsC;GACxD,IAAI,QAAQ,cAAc,YAAY,QAAQ,cAAc,aAAa,CAAC,cAAc,IAAI,MAAM,SAAS,GACzG,MAAM,IAAI,MAAM,kDAAkD;GAEpE,MAAM,YAAY,YAAY,IAAI,MAAM,SAAS;GACjD,IAAI,cAAc,KAAA,KAAa,aAAa,qBAAqB,UAAU,QAAQ,MAAM,MAAM;IAC7F,OAAO,MAAM,SAAS;IACtB,IAAI,QAAQ,cAAc,QAAQ,MAAM,IAAI,MAAM,gCAAgC;GACpF;GACA,IAAI,QAAQ,cAAc,UAAU,cAAc,KAAA,GAAW;IAC3D,UAAU,YAAY,KAAA;IACtB,UAAU,MAAM,MAAM;GACxB;GACA,MAAM,SACJ,cAAc,KAAA,KAAa,QAAQ,cAAc,SAC7C,QAAQ,SACR,QAAQ,WAAW,KAAA,IACjB,UAAU,MAAM,SAChB,YAAY,IAAI,CAAC,QAAQ,QAAQ,UAAU,MAAM,MAAM,CAAC;GAChE,MAAM,SAAS,MAAM,SACnB;IACE,MAAM;IACN,WAAW,MAAM;IACjB,WAAW,QAAQ;IACnB,GAAI,QAAQ,YAAY,KAAA,IAAY,CAAC,IAAI,EAAE,SAAS,QAAQ,QAAQ;GACtE,GACA,QAAQ,cAAc,aAAa,OAAU,KAC7C,MACF;GACA,IACE,OAAO,OAAO,mBAAmB,YAChC,eAAe,KAAA,KAAa,eAAe,OAAO,gBACnD;IACA,MAAM;IACN,MAAM,IAAI,MAAM,sDAAsD;GACxE;GACA,aAAa,OAAO;GACpB,IAAI,OAAO,OAAO,MAChB,MAAM,IAAI,MAAM,OAAO,OAAO,UAAU,WAAW,OAAO,QAAQ,yBAAyB;GAC7F,IAAI,QAAQ,cAAc,cAAc,cAAc,KAAA,GAAW;IAC/D,IACE,YAAY,IAAI,MAAM,SAAS,MAAM,aACrC,UAAU,MAAM,OAAO,WACvB,aAAa,qBAAqB,UAAU,QAAQ,MAAM,MAE1D,MAAM,IAAI,MAAM,oCAAoC;IACtD,UAAU,WAAW;IACrB,MAAM,QAAQ,OAAO;IACrB,IAAI,OAAO,OAAO,cAAc,UAAU,UAAU,YAAY,MAAM;IACtE,IAAI,OAAO,OAAO,YAAY,UAAU,UAAU,UAAU,MAAM;GACpE;GACA,IAAI,QAAQ,cAAc,QAAQ;IAChC,IAAI,cAAc,KAAA,GAAW,UAAU,YAAY,KAAA;IACnD,MAAM,UAAW,QAAQ,SAA+C;IACxE,IAAI,OAAO,YAAY,UAAU,MAAM,IAAI,MAAM,4CAA4C;IAC7F,OAAO,WAAW,WAAW,MAAM,WAAW,SAAS,OAAO,MAAM;GACtE;GACA,OAAO,OAAO;EAChB;EACA,QAAQ;GACN,IAAI,QAAQ;GACZ,IAAI;IACF,KAAK;KAAE,MAAM;KAAyB,SAAS;IAAQ,CAAC;GAC1D,UAAU;IACR,MAAM;GACR;EACF;CACF;AACF"}

package/dist/src/builders/server/computerUseBinding.mjs

@@ -2,7 +2,7 @@ import { ComputerUseRecordingStore } from "./computerUseRecordings.mjs";
 import path from "node:path";
 import os from "node:os";
 import { randomUUID, timingSafeEqual } from "node:crypto";
-import { doomApiCallerFrom } from "@agimon-ai/po-core/packageApi";
+import { poApiCallerFrom } from "@agimon-ai/po-core/packageApi";
 import fs from "node:fs/promises";
 //#region src/builders/server/computerUseBinding.ts
 const VERSION = 1;
@@ -26,11 +26,11 @@ async function createComputerUseBinding(transport = process, remotePolicy = {})
 		return available && /^[a-f0-9]{64}$/u.test(proof) && timingSafeEqual(Buffer.from(proof), Buffer.from(token));
 	};
 	const remoteCaller = (headers) => {
-		const caller = doomApiCallerFrom(headers);
+		const caller = poApiCallerFrom(headers);
 		return caller?.locality === "remote" && remotePolicy.isDeviceAuthorized?.(caller.deviceId) === true ? caller : void 0;
 	};
 	const notify = (sessionId) => {
-		for (const [listener, session] of listeners) if (sessionId === void 0 || session === sessionId) listener();
+		for (const [listener, session] of listeners) if (sessionId === void 0 || session === void 0 || session === sessionId) listener();
 	};
 	const revoke = (sessionId, retainRecording = false) => {
 		const delegated = delegations.get(sessionId);