@burtson-labs/host-kit 0.4.28 → 0.4.30

package/dist/index.d.ts

@@ -1,6 +1,9 @@
 export { loadMemory, loadCombinedMemory, appendMemory, consolidateMemory, type MemoryBundle, type ConsolidationStrategy, type ConsolidationResult } from './memory';
 export { loadMemoryIndex, renderMemoryIndexBlock, writeMemoryTopic, migrateMemoryToBanditDir, MAX_INDEX_BYTES, MAX_MEMORY_FILE_BYTES, MEMORY_DIR, MEMORY_INDEX_FILE, BANDIT_DIR, BANDIT_MEMORY_DIR, BANDIT_MEMORY_INDEX_FILE, type MemoryIndex, type MemoryIndexEntry, type MemoryWarnFn } from './memoryIndex';
 export { buildReadMemoryTool } from './tools/readMemoryTool';
+export { RUNNER_PROTOCOL_VERSION, type RemoteRunMode, type RemoteTask, type RunnerEvent, type RunnerGateway } from './runner/contract';
+export { HttpRunnerGateway, type HttpGatewayOptions } from './runner/httpGateway';
+export { RemoteSession, type RemoteSessionOptions } from './runner/remoteSession';
 export { loadMcpServersConfig, registerMcpServersFromDisk, globalMcpServersPath, persistMcpActivation, addMcpServerToConfig } from './mcp';
 export { buildGitHubServerConfig, looksLikeGitHubToken, buildSlackServerConfig, looksLikeSlackToken, looksLikeSlackTeamId, buildGitLabServerConfig, looksLikeGitLabToken, buildGmailServerConfig, looksLikeGmailCredentialsPath, buildCustomServerConfig } from './mcpConnectors';
 export { loadApprovedMcpFingerprints, approveMcpFingerprint, revokeMcpFingerprint, mcpTrustPath } from './mcpTrust';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,qBAAqB,EACrB,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,OAAO,CAAC;AACf,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,EACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,QAAQ,EACR,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACtB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,YAAY,EACZ,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC/G,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,aAAa,EACb,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,gBAAgB,EAChB,wBAAwB,EACxB,eAAe,EACf,qBAAqB,EACrB,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,iBAAiB,EACjB,wBAAwB,EACxB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAI7D,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,OAAO,CAAC;AACf,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,6BAA6B,EAC7B,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,YAAY,EACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,QAAQ,EACR,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACtB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,YAAY,EACZ,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,gBAAgB,EAChB,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,iBAAiB,EAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC/G,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,uBAAuB,EACvB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACxB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,aAAa,EACb,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.decidePermission = exports.shouldAutoApprove = exports.resolvePermissionMode = exports.policyIncludes = exports.commandSignature = exports.grantRuleFor = exports.classifyRisk = exports.evaluateSecurityGuard = exports.runHooks = exports.persistAllowEntry = exports.loadHookSettings = exports.mcpToolCachePath = exports.pruneMcpToolCache = exports.saveMcpToolEntry = exports.loadMcpToolCache = exports.mcpTrustPath = exports.revokeMcpFingerprint = exports.approveMcpFingerprint = exports.loadApprovedMcpFingerprints = exports.buildCustomServerConfig = exports.looksLikeGmailCredentialsPath = exports.buildGmailServerConfig = exports.looksLikeGitLabToken = exports.buildGitLabServerConfig = exports.looksLikeSlackTeamId = exports.looksLikeSlackToken = exports.buildSlackServerConfig = exports.looksLikeGitHubToken = exports.buildGitHubServerConfig = exports.addMcpServerToConfig = exports.persistMcpActivation = exports.globalMcpServersPath = exports.registerMcpServersFromDisk = exports.loadMcpServersConfig = exports.buildReadMemoryTool = exports.BANDIT_MEMORY_INDEX_FILE = exports.BANDIT_MEMORY_DIR = exports.BANDIT_DIR = exports.MEMORY_INDEX_FILE = exports.MEMORY_DIR = exports.MAX_MEMORY_FILE_BYTES = exports.MAX_INDEX_BYTES = exports.migrateMemoryToBanditDir = exports.writeMemoryTopic = exports.renderMemoryIndexBlock = exports.loadMemoryIndex = exports.consolidateMemory = exports.appendMemory = exports.loadCombinedMemory = exports.loadMemory = void 0;
-exports.CheckpointStore = exports.isChatCapable = exports.suggestOllamaMatch = exports.listInstalledOllamaModels = exports.formatTurnTraceMarkdown = exports.summarizeTurnTrace = exports.parseTurnLog = exports.readTurnTraceById = exports.readTurnTrace = exports.listTurnTraces = exports.listTurnTraceFiles = exports.previewText = exports.openTurnLog = exports.SessionPermissionStore = exports.mergePolicies = exports.emptyPolicy = exports.evaluatePermission = exports.InMemoryBackgroundTaskStore = exports.buildInsightsAiCallback = exports.buildAiInput = exports.writeInsightsReport = exports.renderInsightsHtml = exports.computeInsights = exports.parseTestOutput = exports.buildTestCommand = exports.detectTestFramework = exports.buildTestRunTool = exports.buildListTasksTool = exports.buildCheckTaskTool = exports.buildTaskTool = exports.buildRememberTool = exports.buildWebSearchTool = exports.buildWebFetchTool = exports.buildTodoWriteTool = exports.TodoStore = exports.expandMentions = exports.CYCLE_MODES = exports.PERMISSION_MODES = exports.AutoApprovalLedger = exports.nextCycleMode = exports.isPermissionMode = void 0;
+exports.policyIncludes = exports.commandSignature = exports.grantRuleFor = exports.classifyRisk = exports.evaluateSecurityGuard = exports.runHooks = exports.persistAllowEntry = exports.loadHookSettings = exports.mcpToolCachePath = exports.pruneMcpToolCache = exports.saveMcpToolEntry = exports.loadMcpToolCache = exports.mcpTrustPath = exports.revokeMcpFingerprint = exports.approveMcpFingerprint = exports.loadApprovedMcpFingerprints = exports.buildCustomServerConfig = exports.looksLikeGmailCredentialsPath = exports.buildGmailServerConfig = exports.looksLikeGitLabToken = exports.buildGitLabServerConfig = exports.looksLikeSlackTeamId = exports.looksLikeSlackToken = exports.buildSlackServerConfig = exports.looksLikeGitHubToken = exports.buildGitHubServerConfig = exports.addMcpServerToConfig = exports.persistMcpActivation = exports.globalMcpServersPath = exports.registerMcpServersFromDisk = exports.loadMcpServersConfig = exports.RemoteSession = exports.HttpRunnerGateway = exports.RUNNER_PROTOCOL_VERSION = exports.buildReadMemoryTool = exports.BANDIT_MEMORY_INDEX_FILE = exports.BANDIT_MEMORY_DIR = exports.BANDIT_DIR = exports.MEMORY_INDEX_FILE = exports.MEMORY_DIR = exports.MAX_MEMORY_FILE_BYTES = exports.MAX_INDEX_BYTES = exports.migrateMemoryToBanditDir = exports.writeMemoryTopic = exports.renderMemoryIndexBlock = exports.loadMemoryIndex = exports.consolidateMemory = exports.appendMemory = exports.loadCombinedMemory = exports.loadMemory = void 0;
+exports.CheckpointStore = exports.isChatCapable = exports.suggestOllamaMatch = exports.listInstalledOllamaModels = exports.formatTurnTraceMarkdown = exports.summarizeTurnTrace = exports.parseTurnLog = exports.readTurnTraceById = exports.readTurnTrace = exports.listTurnTraces = exports.listTurnTraceFiles = exports.previewText = exports.openTurnLog = exports.SessionPermissionStore = exports.mergePolicies = exports.emptyPolicy = exports.evaluatePermission = exports.InMemoryBackgroundTaskStore = exports.buildInsightsAiCallback = exports.buildAiInput = exports.writeInsightsReport = exports.renderInsightsHtml = exports.computeInsights = exports.parseTestOutput = exports.buildTestCommand = exports.detectTestFramework = exports.buildTestRunTool = exports.buildListTasksTool = exports.buildCheckTaskTool = exports.buildTaskTool = exports.buildRememberTool = exports.buildWebSearchTool = exports.buildWebFetchTool = exports.buildTodoWriteTool = exports.TodoStore = exports.expandMentions = exports.CYCLE_MODES = exports.PERMISSION_MODES = exports.AutoApprovalLedger = exports.nextCycleMode = exports.isPermissionMode = exports.decidePermission = exports.shouldAutoApprove = exports.resolvePermissionMode = void 0;
 var memory_1 = require("./memory");
 Object.defineProperty(exports, "loadMemory", { enumerable: true, get: function () { return memory_1.loadMemory; } });
 Object.defineProperty(exports, "loadCombinedMemory", { enumerable: true, get: function () { return memory_1.loadCombinedMemory; } });
@@ -21,6 +21,15 @@ Object.defineProperty(exports, "BANDIT_MEMORY_DIR", { enumerable: true, get: fun
 Object.defineProperty(exports, "BANDIT_MEMORY_INDEX_FILE", { enumerable: true, get: function () { return memoryIndex_1.BANDIT_MEMORY_INDEX_FILE; } });
 var readMemoryTool_1 = require("./tools/readMemoryTool");
 Object.defineProperty(exports, "buildReadMemoryTool", { enumerable: true, get: function () { return readMemoryTool_1.buildReadMemoryTool; } });
+// Remote control: the local-runner ↔ gateway transport + live-session driver.
+// Host-agnostic (only fetch + ReadableStream), so BOTH the CLI and the VS Code
+// extension import the SAME RemoteSession — one proven mechanism, not two copies.
+var contract_1 = require("./runner/contract");
+Object.defineProperty(exports, "RUNNER_PROTOCOL_VERSION", { enumerable: true, get: function () { return contract_1.RUNNER_PROTOCOL_VERSION; } });
+var httpGateway_1 = require("./runner/httpGateway");
+Object.defineProperty(exports, "HttpRunnerGateway", { enumerable: true, get: function () { return httpGateway_1.HttpRunnerGateway; } });
+var remoteSession_1 = require("./runner/remoteSession");
+Object.defineProperty(exports, "RemoteSession", { enumerable: true, get: function () { return remoteSession_1.RemoteSession; } });
 var mcp_1 = require("./mcp");
 Object.defineProperty(exports, "loadMcpServersConfig", { enumerable: true, get: function () { return mcp_1.loadMcpServersConfig; } });
 Object.defineProperty(exports, "registerMcpServersFromDisk", { enumerable: true, get: function () { return mcp_1.registerMcpServersFromDisk; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,mCAQkB;AAPhB,oGAAA,UAAU,OAAA;AACV,4GAAA,kBAAkB,OAAA;AAClB,sGAAA,YAAY,OAAA;AACZ,2GAAA,iBAAiB,OAAA;AAKnB,6CAeuB;AAdrB,8GAAA,eAAe,OAAA;AACf,qHAAA,sBAAsB,OAAA;AACtB,+GAAA,gBAAgB,OAAA;AAChB,uHAAA,wBAAwB,OAAA;AACxB,8GAAA,eAAe,OAAA;AACf,oHAAA,qBAAqB,OAAA;AACrB,yGAAA,UAAU,OAAA;AACV,gHAAA,iBAAiB,OAAA;AACjB,yGAAA,UAAU,OAAA;AACV,gHAAA,iBAAiB,OAAA;AACjB,uHAAA,wBAAwB,OAAA;AAK1B,yDAA6D;AAApD,qHAAA,mBAAmB,OAAA;AAC5B,6BAMe;AALb,2GAAA,oBAAoB,OAAA;AACpB,iHAAA,0BAA0B,OAAA;AAC1B,2GAAA,oBAAoB,OAAA;AACpB,2GAAA,oBAAoB,OAAA;AACpB,2GAAA,oBAAoB,OAAA;AAEtB,iDAWyB;AAVvB,wHAAA,uBAAuB,OAAA;AACvB,qHAAA,oBAAoB,OAAA;AACpB,uHAAA,sBAAsB,OAAA;AACtB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,wHAAA,uBAAuB,OAAA;AACvB,qHAAA,oBAAoB,OAAA;AACpB,uHAAA,sBAAsB,OAAA;AACtB,8HAAA,6BAA6B,OAAA;AAC7B,wHAAA,uBAAuB,OAAA;AAEzB,uCAKoB;AAJlB,uHAAA,2BAA2B,OAAA;AAC3B,iHAAA,qBAAqB,OAAA;AACrB,gHAAA,oBAAoB,OAAA;AACpB,wGAAA,YAAY,OAAA;AAEd,+CAKwB;AAJtB,gHAAA,gBAAgB,OAAA;AAChB,gHAAA,gBAAgB,OAAA;AAChB,iHAAA,iBAAiB,OAAA;AACjB,gHAAA,gBAAgB,OAAA;AAElB,iCAUiB;AATf,yGAAA,gBAAgB,OAAA;AAChB,0GAAA,iBAAiB,OAAA;AACjB,iGAAA,QAAQ,OAAA;AAQV,iDAKyB;AAJvB,sHAAA,qBAAqB,OAAA;AAKvB,yCAKqB;AAJnB,yGAAA,YAAY,OAAA;AAKd,2CAOsB;AANpB,0GAAA,YAAY,OAAA;AACZ,8GAAA,gBAAgB,OAAA;AAChB,4GAAA,cAAc,OAAA;AAKhB,mDAgB0B;AAfxB,uHAAA,qBAAqB,OAAA;AACrB,mHAAA,iBAAiB,OAAA;AACjB,kHAAA,gBAAgB,OAAA;AAChB,kHAAA,gBAAgB,OAAA;AAChB,+GAAA,aAAa,OAAA;AACb,oHAAA,kBAAkB,OAAA;AAClB,kHAAA,gBAAgB,OAAA;AAChB,6GAAA,WAAW,OAAA;AASb,uCAAiE;AAAxD,0GAAA,cAAc,OAAA;AACvB,iDAO4B;AAN1B,uGAAA,SAAS,OAAA;AACT,gHAAA,kBAAkB,OAAA;AAClB,+GAAA,iBAAiB,OAAA;AACjB,gHAAA,kBAAkB,OAAA;AAElB,+GAAA,iBAAiB,OAAA;AAEnB,6CAA+G;AAAtG,yGAAA,aAAa,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAC9D,mDAO6B;AAN3B,+GAAA,gBAAgB,OAAA;AAChB,kHAAA,mBAAmB,OAAA;AACnB,+GAAA,gBAAgB,OAAA;AAChB,8GAAA,eAAe,OAAA;AAIjB,uCAaoB;AAZlB,2GAAA,eAAe,OAAA;AACf,8GAAA,kBAAkB,OAAA;AAClB,+GAAA,mBAAmB,OAAA;AACnB,wGAAA,YAAY,OAAA;AACZ,mHAAA,uBAAuB,OAAA;AASzB,qDAM2B;AALzB,8HAAA,2BAA2B,OAAA;AAM7B,6CAOuB;AANrB,iHAAA,kBAAkB,OAAA;AAClB,0GAAA,WAAW,OAAA;AACX,4GAAA,aAAa,OAAA;AACb,qHAAA,sBAAsB,OAAA;AAIxB,qCAgBmB;AAfjB,sGAAA,WAAW,OAAA;AACX,sGAAA,WAAW,OAAA;AACX,6GAAA,kBAAkB,OAAA;AAClB,yGAAA,cAAc,OAAA;AACd,wGAAA,aAAa,OAAA;AACb,4GAAA,iBAAiB,OAAA;AACjB,uGAAA,YAAY,OAAA;AACZ,6GAAA,kBAAkB,OAAA;AAClB,kHAAA,uBAAuB,OAAA;AAQzB,+CAKwB;AAJtB,yHAAA,yBAAyB,OAAA;AACzB,kHAAA,kBAAkB,OAAA;AAClB,6GAAA,aAAa,OAAA;AAGf,6CAKuB;AAJrB,8GAAA,eAAe,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;AAAA,mCAQkB;AAPhB,oGAAA,UAAU,OAAA;AACV,4GAAA,kBAAkB,OAAA;AAClB,sGAAA,YAAY,OAAA;AACZ,2GAAA,iBAAiB,OAAA;AAKnB,6CAeuB;AAdrB,8GAAA,eAAe,OAAA;AACf,qHAAA,sBAAsB,OAAA;AACtB,+GAAA,gBAAgB,OAAA;AAChB,uHAAA,wBAAwB,OAAA;AACxB,8GAAA,eAAe,OAAA;AACf,oHAAA,qBAAqB,OAAA;AACrB,yGAAA,UAAU,OAAA;AACV,gHAAA,iBAAiB,OAAA;AACjB,yGAAA,UAAU,OAAA;AACV,gHAAA,iBAAiB,OAAA;AACjB,uHAAA,wBAAwB,OAAA;AAK1B,yDAA6D;AAApD,qHAAA,mBAAmB,OAAA;AAC5B,8EAA8E;AAC9E,+EAA+E;AAC/E,kFAAkF;AAClF,8CAM2B;AALzB,mHAAA,uBAAuB,OAAA;AAMzB,oDAAkF;AAAzE,gHAAA,iBAAiB,OAAA;AAC1B,wDAAkF;AAAzE,8GAAA,aAAa,OAAA;AACtB,6BAMe;AALb,2GAAA,oBAAoB,OAAA;AACpB,iHAAA,0BAA0B,OAAA;AAC1B,2GAAA,oBAAoB,OAAA;AACpB,2GAAA,oBAAoB,OAAA;AACpB,2GAAA,oBAAoB,OAAA;AAEtB,iDAWyB;AAVvB,wHAAA,uBAAuB,OAAA;AACvB,qHAAA,oBAAoB,OAAA;AACpB,uHAAA,sBAAsB,OAAA;AACtB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,wHAAA,uBAAuB,OAAA;AACvB,qHAAA,oBAAoB,OAAA;AACpB,uHAAA,sBAAsB,OAAA;AACtB,8HAAA,6BAA6B,OAAA;AAC7B,wHAAA,uBAAuB,OAAA;AAEzB,uCAKoB;AAJlB,uHAAA,2BAA2B,OAAA;AAC3B,iHAAA,qBAAqB,OAAA;AACrB,gHAAA,oBAAoB,OAAA;AACpB,wGAAA,YAAY,OAAA;AAEd,+CAKwB;AAJtB,gHAAA,gBAAgB,OAAA;AAChB,gHAAA,gBAAgB,OAAA;AAChB,iHAAA,iBAAiB,OAAA;AACjB,gHAAA,gBAAgB,OAAA;AAElB,iCAUiB;AATf,yGAAA,gBAAgB,OAAA;AAChB,0GAAA,iBAAiB,OAAA;AACjB,iGAAA,QAAQ,OAAA;AAQV,iDAKyB;AAJvB,sHAAA,qBAAqB,OAAA;AAKvB,yCAKqB;AAJnB,yGAAA,YAAY,OAAA;AAKd,2CAOsB;AANpB,0GAAA,YAAY,OAAA;AACZ,8GAAA,gBAAgB,OAAA;AAChB,4GAAA,cAAc,OAAA;AAKhB,mDAgB0B;AAfxB,uHAAA,qBAAqB,OAAA;AACrB,mHAAA,iBAAiB,OAAA;AACjB,kHAAA,gBAAgB,OAAA;AAChB,kHAAA,gBAAgB,OAAA;AAChB,+GAAA,aAAa,OAAA;AACb,oHAAA,kBAAkB,OAAA;AAClB,kHAAA,gBAAgB,OAAA;AAChB,6GAAA,WAAW,OAAA;AASb,uCAAiE;AAAxD,0GAAA,cAAc,OAAA;AACvB,iDAO4B;AAN1B,uGAAA,SAAS,OAAA;AACT,gHAAA,kBAAkB,OAAA;AAClB,+GAAA,iBAAiB,OAAA;AACjB,gHAAA,kBAAkB,OAAA;AAElB,+GAAA,iBAAiB,OAAA;AAEnB,6CAA+G;AAAtG,yGAAA,aAAa,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAAE,8GAAA,kBAAkB,OAAA;AAC9D,mDAO6B;AAN3B,+GAAA,gBAAgB,OAAA;AAChB,kHAAA,mBAAmB,OAAA;AACnB,+GAAA,gBAAgB,OAAA;AAChB,8GAAA,eAAe,OAAA;AAIjB,uCAaoB;AAZlB,2GAAA,eAAe,OAAA;AACf,8GAAA,kBAAkB,OAAA;AAClB,+GAAA,mBAAmB,OAAA;AACnB,wGAAA,YAAY,OAAA;AACZ,mHAAA,uBAAuB,OAAA;AASzB,qDAM2B;AALzB,8HAAA,2BAA2B,OAAA;AAM7B,6CAOuB;AANrB,iHAAA,kBAAkB,OAAA;AAClB,0GAAA,WAAW,OAAA;AACX,4GAAA,aAAa,OAAA;AACb,qHAAA,sBAAsB,OAAA;AAIxB,qCAgBmB;AAfjB,sGAAA,WAAW,OAAA;AACX,sGAAA,WAAW,OAAA;AACX,6GAAA,kBAAkB,OAAA;AAClB,yGAAA,cAAc,OAAA;AACd,wGAAA,aAAa,OAAA;AACb,4GAAA,iBAAiB,OAAA;AACjB,uGAAA,YAAY,OAAA;AACZ,6GAAA,kBAAkB,OAAA;AAClB,kHAAA,uBAAuB,OAAA;AAQzB,+CAKwB;AAJtB,yHAAA,yBAAyB,OAAA;AACzB,kHAAA,kBAAkB,OAAA;AAClB,6GAAA,aAAa,OAAA;AAGf,6CAKuB;AAJrB,8GAAA,eAAe,OAAA"}

package/dist/runner/contract.d.ts

@@ -0,0 +1,113 @@
+/**
+ * Local-runner ↔ gateway contract for REMOTE CONTROL.
+ *
+ * This is the seam that lets Bandit Stealth Web (or any cloud client) drive the
+ * agent running on the user's OWN machine — the local filesystem, the local
+ * uncommitted changes — instead of a cloud GitHub clone. It mirrors the
+ * cloud-runner seam in `services/agent-runner` (task in → event stream out) but
+ * INVERTS the transport: a local process can't be reached by an inbound HTTP
+ * POST (it's behind NAT), so the runner reaches OUT to the gateway — subscribes
+ * to an inbox of tasks assigned to this device, and pushes events back.
+ *
+ * Design rules (same spirit as the cloud contract):
+ *  - The runner treats `taskId` as opaque and echoes it on every event.
+ *  - The runner never learns about accounts, credits, or billing. It receives
+ *    a prompt + a mode and returns events. That's all.
+ *  - Additive-only within a protocol version.
+ *
+ * SAFETY: unlike the cloud runner (where every change is reviewed as a PR
+ * before it touches anything real), a local runner is editing the user's actual
+ * working tree with nobody at the keyboard. So a remote task defaults to
+ * `plan` mode — read-only — and produces a plan, not silent edits. See
+ * planModeGate.ts; the boundary is host-kit's `decidePermission`.
+ */
+export declare const RUNNER_PROTOCOL_VERSION: 1;
+/** The permission mode a remote task runs under. Defaults to `plan` (read-only)
+ *  for safety — the gateway may request a looser mode only with explicit,
+ *  per-device authorization (a later phase). */
+export type RemoteRunMode = 'plan' | 'ask' | 'auto';
+/** A task handed to the local runner over the inbox. */
+export interface RemoteTask {
+    protocol: typeof RUNNER_PROTOCOL_VERSION;
+    /** Gateway task id — opaque, echoed on every event. */
+    taskId: string;
+    /** The user's goal for this task. */
+    prompt: string;
+    /** Permission mode for this task. Absent ⇒ `plan` (the safe default). */
+    mode?: RemoteRunMode;
+    /** Optional hard cap on tool-loop iterations. */
+    maxIterations?: number;
+    /** When set, this is a turn in a LIVE session (remote control): the host
+     *  runs it in that session's ongoing conversation and mirrors to the session
+     *  id, rather than as an isolated one-shot task. */
+    sessionId?: string;
+}
+/**
+ * Events the runner streams back to the gateway for a task. Intentionally the
+ * SAME vocabulary as the cloud runner (`services/agent-runner` RunnerEvent) so
+ * the gateway's existing StealthEventBus / SSE / web task UI relays them with
+ * no new event handling — a local task looks like any other task to the web.
+ *
+ * `blocked` is the one addition remote control needs: in plan mode a mutating
+ * tool is refused, and the web user should see WHAT the agent wanted to do
+ * (that's the "proposed change" a later phase turns into an apply-gate).
+ */
+export type RunnerEvent = {
+    type: 'turn.started';
+    taskId: string;
+    protocol: number;
+    runnerVersion: string;
+    mode: RemoteRunMode;
+} | {
+    type: 'assistant.delta';
+    taskId: string;
+    text: string;
+} | {
+    type: 'tool.call';
+    taskId: string;
+    tool: string;
+    params: Record<string, string>;
+} | {
+    type: 'tool.result';
+    taskId: string;
+    tool: string;
+    ok: boolean;
+    summary: string;
+} | {
+    type: 'tool.blocked';
+    taskId: string;
+    tool: string;
+    reason: string;
+} | {
+    type: 'artifact.changed';
+    taskId: string;
+    path: string;
+    kind: 'created' | 'modified' | 'deleted';
+} | {
+    type: 'turn.completed';
+    taskId: string;
+    artifacts: number;
+    noChangeReason?: string;
+    assistantText: string;
+} | {
+    type: 'turn.error';
+    taskId: string;
+    code: string;
+    message: string;
+};
+/**
+ * The transport the engine talks to. Injected so the engine is pure and
+ * testable with an in-memory fake — the HTTP implementation (inbox SSE + event
+ * POST) is one concrete `RunnerGateway`, a fake in tests is another.
+ */
+export interface RunnerGateway {
+    /**
+     * Stream of tasks assigned to this device. Yields until `signal` aborts or
+     * the connection ends. Implementations reconnect internally; a return means
+     * "stop the runner" (shutdown), not "transient blip".
+     */
+    inbox(signal: AbortSignal): AsyncIterable<RemoteTask>;
+    /** Push one event for a task back to the gateway. Best-effort ordered. */
+    publish(taskId: string, event: RunnerEvent): Promise<void>;
+}
+//# sourceMappingURL=contract.d.ts.map

package/dist/runner/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/runner/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,eAAO,MAAM,uBAAuB,EAAG,CAAU,CAAC;AAElD;;gDAEgD;AAChD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAEpD,wDAAwD;AACxD,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,OAAO,uBAAuB,CAAC;IACzC,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;wDAEoD;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GACtG;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAA;CAAE,GACpG;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC7G;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1E;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACtD,0EAA0E;IAC1E,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D"}

package/dist/runner/contract.js

@@ -0,0 +1,28 @@
+"use strict";
+/**
+ * Local-runner ↔ gateway contract for REMOTE CONTROL.
+ *
+ * This is the seam that lets Bandit Stealth Web (or any cloud client) drive the
+ * agent running on the user's OWN machine — the local filesystem, the local
+ * uncommitted changes — instead of a cloud GitHub clone. It mirrors the
+ * cloud-runner seam in `services/agent-runner` (task in → event stream out) but
+ * INVERTS the transport: a local process can't be reached by an inbound HTTP
+ * POST (it's behind NAT), so the runner reaches OUT to the gateway — subscribes
+ * to an inbox of tasks assigned to this device, and pushes events back.
+ *
+ * Design rules (same spirit as the cloud contract):
+ *  - The runner treats `taskId` as opaque and echoes it on every event.
+ *  - The runner never learns about accounts, credits, or billing. It receives
+ *    a prompt + a mode and returns events. That's all.
+ *  - Additive-only within a protocol version.
+ *
+ * SAFETY: unlike the cloud runner (where every change is reviewed as a PR
+ * before it touches anything real), a local runner is editing the user's actual
+ * working tree with nobody at the keyboard. So a remote task defaults to
+ * `plan` mode — read-only — and produces a plan, not silent edits. See
+ * planModeGate.ts; the boundary is host-kit's `decidePermission`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RUNNER_PROTOCOL_VERSION = void 0;
+exports.RUNNER_PROTOCOL_VERSION = 1;
+//# sourceMappingURL=contract.js.map

package/dist/runner/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/runner/contract.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAEU,QAAA,uBAAuB,GAAG,CAAU,CAAC"}

package/dist/runner/httpGateway.d.ts

@@ -0,0 +1,40 @@
+/**
+ * HTTP implementation of the RunnerGateway seam.
+ *
+ * Inbox: a long-lived SSE stream (`GET {base}/api/stealth/runner/inbox`) — the
+ * device reaches OUT to the gateway (so no inbound port / NAT hole is needed),
+ * and tasks assigned to it arrive as `data:` lines. Reconnects with backoff on
+ * a dropped stream; the async iterator only returns when `signal` aborts.
+ *
+ * Publish: `POST {base}/api/stealth/tasks/{taskId}/events` — one event per call.
+ *
+ * Both carry the Bandit cloud JWT as a bearer token and a stable device id, so
+ * the gateway can authorize the device and scope tasks to its owner. This file
+ * is the WIRE CONTRACT the gateway side must implement; it has no tests here
+ * because it only exercises against a live gateway (the engine is what's unit-
+ * tested, with a fake gateway).
+ */
+import type { RemoteTask, RunnerEvent, RunnerGateway } from './contract';
+export interface HttpGatewayOptions {
+    /** Gateway base URL, e.g. https://gateway.burtson.ai (no trailing slash). */
+    baseUrl: string;
+    /** Bandit cloud JWT / API key for the signed-in account. */
+    token: string;
+    /** Stable id for this device (so the gateway can target it + show presence). */
+    deviceId: string;
+    /** Human label shown in the web device picker (hostname by default). */
+    deviceLabel?: string;
+    /** Injectable for tests / non-global-fetch runtimes. Defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+    /** Reconnect backoff ceiling (ms). */
+    maxBackoffMs?: number;
+}
+export declare class HttpRunnerGateway implements RunnerGateway {
+    private readonly opts;
+    private readonly fetchImpl;
+    constructor(opts: HttpGatewayOptions);
+    private headers;
+    inbox(signal: AbortSignal): AsyncIterable<RemoteTask>;
+    publish(taskId: string, event: RunnerEvent): Promise<void>;
+}
+//# sourceMappingURL=httpGateway.d.ts.map

package/dist/runner/httpGateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpGateway.d.ts","sourceRoot":"","sources":["../../src/runner/httpGateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEzE,MAAM,WAAW,kBAAkB;IACjC,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,qBAAa,iBAAkB,YAAW,aAAa;IAEzC,OAAO,CAAC,QAAQ,CAAC,IAAI;IADjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBACZ,IAAI,EAAE,kBAAkB;IAIrD,OAAO,CAAC,OAAO;IASR,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,aAAa,CAAC,UAAU,CAAC;IA+BtD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAWjE"}

package/dist/runner/httpGateway.js

@@ -0,0 +1,118 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpRunnerGateway = void 0;
+class HttpRunnerGateway {
+    constructor(opts) {
+        this.opts = opts;
+        this.fetchImpl = opts.fetchImpl ?? fetch;
+    }
+    headers(extra) {
+        return {
+            authorization: `Bearer ${this.opts.token}`,
+            'x-bandit-device-id': this.opts.deviceId,
+            'x-bandit-device-label': this.opts.deviceLabel ?? this.opts.deviceId,
+            ...extra
+        };
+    }
+    async *inbox(signal) {
+        const url = `${this.opts.baseUrl}/api/stealth/runner/inbox`;
+        const ceil = this.opts.maxBackoffMs ?? 30000;
+        let backoff = 1000;
+        while (!signal.aborted) {
+            try {
+                const res = await this.fetchImpl(url, {
+                    method: 'GET',
+                    headers: this.headers({ accept: 'text/event-stream' }),
+                    signal
+                });
+                if (!res.ok || !res.body) {
+                    throw new Error(`inbox ${res.status} ${res.statusText}`);
+                }
+                backoff = 1000; // healthy connection resets the backoff
+                for await (const data of readSseData(res.body, signal)) {
+                    const task = parseTask(data);
+                    if (task)
+                        yield task;
+                }
+                // Stream ended cleanly (server closed) — reconnect after a short pause.
+            }
+            catch (err) {
+                if (signal.aborted)
+                    return;
+                // Surface nothing to the model — this is runner plumbing. Backoff+retry.
+                void err;
+            }
+            if (signal.aborted)
+                return;
+            await delay(backoff, signal);
+            backoff = Math.min(ceil, backoff * 2);
+        }
+    }
+    async publish(taskId, event) {
+        const url = `${this.opts.baseUrl}/api/stealth/tasks/${encodeURIComponent(taskId)}/events`;
+        const res = await this.fetchImpl(url, {
+            method: 'POST',
+            headers: this.headers({ 'content-type': 'application/json' }),
+            body: JSON.stringify(event)
+        });
+        if (!res.ok) {
+            throw new Error(`publish ${res.status} ${res.statusText}`);
+        }
+    }
+}
+exports.HttpRunnerGateway = HttpRunnerGateway;
+function parseTask(data) {
+    try {
+        const obj = JSON.parse(data);
+        if (obj && typeof obj.taskId === 'string' && typeof obj.prompt === 'string')
+            return obj;
+    }
+    catch {
+        /* keep-alive comment or malformed line — ignore */
+    }
+    return null;
+}
+/**
+ * Minimal SSE reader over a fetch ReadableStream: yields the `data:` payload of
+ * each event (concatenating multi-line data blocks), ignoring comments and
+ * other fields. Enough for the inbox, which only sends `data:` task JSON +
+ * keep-alive comments.
+ */
+async function* readSseData(body, signal) {
+    const reader = body.getReader();
+    const decoder = new TextDecoder();
+    let buffer = '';
+    try {
+        while (!signal.aborted) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            buffer += decoder.decode(value, { stream: true });
+            let sep;
+            // Events are separated by a blank line.
+            while ((sep = buffer.indexOf('\n\n')) !== -1) {
+                const rawEvent = buffer.slice(0, sep);
+                buffer = buffer.slice(sep + 2);
+                const dataLines = rawEvent
+                    .split('\n')
+                    .filter((l) => l.startsWith('data:'))
+                    .map((l) => l.slice(5).replace(/^ /, ''));
+                if (dataLines.length)
+                    yield dataLines.join('\n');
+            }
+        }
+    }
+    finally {
+        try {
+            await reader.cancel();
+        }
+        catch { /* already closed */ }
+    }
+}
+function delay(ms, signal) {
+    return new Promise((resolve) => {
+        const t = setTimeout(resolve, ms);
+        signal.addEventListener('abort', () => { clearTimeout(t); resolve(); }, { once: true });
+    });
+}
+//# sourceMappingURL=httpGateway.js.map

package/dist/runner/httpGateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpGateway.js","sourceRoot":"","sources":["../../src/runner/httpGateway.ts"],"names":[],"mappings":";;;AAiCA,MAAa,iBAAiB;IAE5B,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAEO,OAAO,CAAC,KAA8B;QAC5C,OAAO;YACL,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;YAC1C,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;YACxC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ;YACpE,GAAG,KAAK;SACT,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,KAAK,CAAC,MAAmB;QAC9B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,2BAA2B,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,KAAM,CAAC;QAC9C,IAAI,OAAO,GAAG,IAAK,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;oBACpC,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;oBACtD,MAAM;iBACP,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,GAAG,IAAK,CAAC,CAAC,wCAAwC;gBACzD,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;oBACvD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;oBAC7B,IAAI,IAAI;wBAAE,MAAM,IAAI,CAAC;gBACvB,CAAC;gBACD,wEAAwE;YAC1E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,MAAM,CAAC,OAAO;oBAAE,OAAO;gBAC3B,yEAAyE;gBACzE,KAAK,GAAG,CAAC;YACX,CAAC;YACD,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO;YAC3B,MAAM,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,KAAkB;QAC9C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,sBAAsB,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC;QAC1F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YAC7D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF;AAzDD,8CAyDC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;QAC3C,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,KAAK,SAAS,CAAC,CAAC,WAAW,CAAC,IAAgC,EAAE,MAAmB;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,GAAW,CAAC;YAChB,wCAAwC;YACxC,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACtC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;gBAC/B,MAAM,SAAS,GAAG,QAAQ;qBACvB,KAAK,CAAC,IAAI,CAAC;qBACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;qBACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;gBAC5C,IAAI,SAAS,CAAC,MAAM;oBAAE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAmB;IAC5C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runner/remoteSession.d.ts

@@ -0,0 +1,51 @@
+import type { RemoteRunMode } from './contract';
+export interface RemoteSessionOptions {
+    /** Gateway base URL (no trailing slash). */
+    gatewayBase: string;
+    /** Bandit cloud JWT / API key. */
+    token: string;
+    deviceId: string;
+    deviceLabel: string;
+    /** Web base for the "continue at" URL shown in the banner. */
+    webBase: string;
+    /** Session title (project folder / first prompt). */
+    title: string;
+    /** Permission mode for remote turns. */
+    mode: RemoteRunMode;
+    /** Called when a remote turn arrives — the host enqueues it as the next
+     *  prompt in the live conversation. */
+    onRemoteTurn: (prompt: string) => void;
+    /** Runner plumbing logs (not conversation). */
+    onStatus?: (message: string) => void;
+}
+export declare class RemoteSession {
+    private readonly opts;
+    private sessionId;
+    private readonly gateway;
+    private readonly controller;
+    private inboxLoop;
+    private readonly fetchImpl;
+    constructor(opts: RemoteSessionOptions, fetchImpl?: typeof fetch);
+    get id(): string | null;
+    get active(): boolean;
+    get continueUrl(): string;
+    /** Register the session and start receiving remote turns. Returns the
+     *  continue URL, or throws if registration fails. */
+    start(): Promise<string>;
+    private consumeInbox;
+    /** Mirror the user side of a turn (a prompt) into the session stream. */
+    mirrorUser(prompt: string): Promise<void>;
+    /** Mirror a structured turn event (tool.call / tool.result /
+     *  reasoning.text) so remote viewers see the turn's anatomy, not just
+     *  its final text. */
+    mirrorEvent(evt: {
+        type: string;
+    } & Record<string, unknown>): Promise<void>;
+    /** Mirror the assistant side of a turn (the final response). We deliberately
+     *  DON'T emit turn.completed here — that would flip the session container's
+     *  status; the gateway keeps a "live" task live. */
+    mirrorAssistant(response: string): Promise<void>;
+    private post;
+    stop(): void;
+}
+//# sourceMappingURL=remoteSession.d.ts.map

package/dist/runner/remoteSession.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteSession.d.ts","sourceRoot":"","sources":["../../src/runner/remoteSession.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,IAAI,EAAE,aAAa,CAAC;IACpB;2CACuC;IACvC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,qBAAa,aAAa;IAOZ,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAyB;IACpD,OAAO,CAAC,SAAS,CAA8B;IAC/C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAEZ,IAAI,EAAE,oBAAoB,EAAE,SAAS,CAAC,EAAE,OAAO,KAAK;IAWjF,IAAI,EAAE,IAAI,MAAM,GAAG,IAAI,CAA2B;IAClD,IAAI,MAAM,IAAI,OAAO,CAAoC;IACzD,IAAI,WAAW,IAAI,MAAM,CAExB;IAED;yDACqD;IAC/C,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;YAqBhB,YAAY;IAe1B,yEAAyE;IACnE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C;;0BAEsB;IAChB,WAAW,CAAC,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjF;;wDAEoD;IAC9C,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAIxC,IAAI;IAiBlB,IAAI,IAAI,IAAI;CAcb"}

package/dist/runner/remoteSession.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemoteSession = void 0;
+/**
+ * Live-session remote control for the interactive REPL — the "continue on your
+ * phone / the web" experience.
+ *
+ * When enabled, the running `bandit` session registers itself as a controllable
+ * session with the gateway and:
+ *   - MIRRORS every turn (local or remote) to the session stream, so another
+ *     surface can watch the conversation live;
+ *   - RECEIVES remote turns over the same inbox the one-shot runner uses, and
+ *     hands them to the host to run as the next prompt IN THE SAME conversation
+ *     (full context), then mirrors the result back.
+ *
+ * It reuses the deployed relay (HttpRunnerGateway inbox + the task event
+ * ingest) — the only new gateway surface is session register/input. Safety is
+ * unchanged: remote turns run under the session's permission mode (plan by
+ * default), enforced by the same host-kit boundary.
+ */
+const httpGateway_1 = require("./httpGateway");
+class RemoteSession {
+    constructor(opts, fetchImpl) {
+        this.opts = opts;
+        this.sessionId = null;
+        this.controller = new AbortController();
+        this.inboxLoop = null;
+        this.fetchImpl = fetchImpl ?? fetch;
+        this.gateway = new httpGateway_1.HttpRunnerGateway({
+            baseUrl: opts.gatewayBase,
+            token: opts.token,
+            deviceId: opts.deviceId,
+            deviceLabel: opts.deviceLabel,
+            fetchImpl: this.fetchImpl
+        });
+    }
+    get id() { return this.sessionId; }
+    get active() { return this.sessionId !== null; }
+    get continueUrl() {
+        return this.sessionId ? `${this.opts.webBase.replace(/\/$/, '')}/remote/${this.sessionId}` : '';
+    }
+    /** Register the session and start receiving remote turns. Returns the
+     *  continue URL, or throws if registration fails. */
+    async start() {
+        const res = await this.fetchImpl(`${this.opts.gatewayBase}/api/stealth/runner/session`, {
+            method: 'POST',
+            headers: {
+                authorization: `Bearer ${this.opts.token}`,
+                'content-type': 'application/json',
+                'x-bandit-device-id': this.opts.deviceId,
+                'x-bandit-device-label': this.opts.deviceLabel
+            },
+            body: JSON.stringify({ deviceId: this.opts.deviceId, title: this.opts.title, mode: this.opts.mode })
+        });
+        if (!res.ok) {
+            throw new Error(`register session failed: HTTP ${res.status}`);
+        }
+        const body = (await res.json());
+        if (!body.sessionId)
+            throw new Error('register session: no sessionId returned');
+        this.sessionId = body.sessionId;
+        this.inboxLoop = this.consumeInbox();
+        return this.continueUrl;
+    }
+    async consumeInbox() {
+        try {
+            for await (const task of this.gateway.inbox(this.controller.signal)) {
+                // A delivery task carrying OUR session id is a remote turn for this
+                // session. (The interactive REPL only handles its own session.)
+                if (task.sessionId && task.sessionId === this.sessionId) {
+                    this.opts.onStatus?.('remote turn received');
+                    this.opts.onRemoteTurn(task.prompt);
+                }
+            }
+        }
+        catch (err) {
+            this.opts.onStatus?.(`inbox stopped: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    /** Mirror the user side of a turn (a prompt) into the session stream. */
+    async mirrorUser(prompt) {
+        await this.post({ type: 'user.message', text: prompt });
+    }
+    /** Mirror a structured turn event (tool.call / tool.result /
+     *  reasoning.text) so remote viewers see the turn's anatomy, not just
+     *  its final text. */
+    async mirrorEvent(evt) {
+        await this.post(evt);
+    }
+    /** Mirror the assistant side of a turn (the final response). We deliberately
+     *  DON'T emit turn.completed here — that would flip the session container's
+     *  status; the gateway keeps a "live" task live. */
+    async mirrorAssistant(response) {
+        await this.post({ type: 'assistant.delta', text: response });
+    }
+    async post(event) {
+        if (!this.sessionId)
+            return;
+        try {
+            const res = await this.fetchImpl(`${this.opts.gatewayBase}/api/stealth/tasks/${encodeURIComponent(this.sessionId)}/events`, {
+                method: 'POST',
+                headers: { authorization: `Bearer ${this.opts.token}`, 'content-type': 'application/json' },
+                body: JSON.stringify({ ...event, taskId: this.sessionId })
+            });
+            if (!res.ok)
+                this.opts.onStatus?.(`mirror ${event.type} failed: HTTP ${res.status}`);
+        }
+        catch (err) {
+            this.opts.onStatus?.(`mirror ${event.type} failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    stop() {
+        const id = this.sessionId;
+        this.controller.abort();
+        this.sessionId = null;
+        // Tell the gateway, best-effort — without this every /remote off (and
+        // every closed terminal) left a zombie 'live' session in listings and
+        // a continue link that only fails on first send.
+        if (id) {
+            void this.fetchImpl(`${this.opts.gatewayBase}/api/stealth/runner/session/${encodeURIComponent(id)}/end`, { method: 'POST', headers: { authorization: `Bearer ${this.opts.token}` } }).catch(() => { });
+        }
+    }
+}
+exports.RemoteSession = RemoteSession;
+//# sourceMappingURL=remoteSession.js.map

package/dist/runner/remoteSession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteSession.js","sourceRoot":"","sources":["../../src/runner/remoteSession.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,+CAAkD;AAuBlD,MAAa,aAAa;IAOxB,YAA6B,IAA0B,EAAE,SAAwB;QAApD,SAAI,GAAJ,IAAI,CAAsB;QAN/C,cAAS,GAAkB,IAAI,CAAC;QAEvB,eAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QAC5C,cAAS,GAAyB,IAAI,CAAC;QAI7C,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,KAAK,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,IAAI,+BAAiB,CAAC;YACnC,OAAO,EAAE,IAAI,CAAC,WAAW;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,EAAE,KAAoB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,IAAI,MAAM,KAAc,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC;IACzD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,CAAC;IAED;yDACqD;IACrD,KAAK,CAAC,KAAK;QACT,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,6BAA6B,EAAE;YACtF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;gBAC1C,cAAc,EAAE,kBAAkB;gBAClC,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;gBACxC,uBAAuB,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;aAC/C;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SACrG,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2B,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,oEAAoE;gBACpE,gEAAgE;gBAChE,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;oBACxD,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,sBAAsB,CAAC,CAAC;oBAC7C,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;0BAEsB;IACtB,KAAK,CAAC,WAAW,CAAC,GAA+C;QAC/D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAED;;wDAEoD;IACpD,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,KAA8B;QAC/C,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAC9B,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EACzF;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC3F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;aAC3D,CACF,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,KAAK,CAAC,IAAI,iBAAiB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,UAAU,KAAK,CAAC,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,IAAI;QACF,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,sEAAsE;QACtE,sEAAsE;QACtE,iDAAiD;QACjD,IAAI,EAAE,EAAE,CAAC;YACP,KAAK,IAAI,CAAC,SAAS,CACjB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,+BAA+B,kBAAkB,CAAC,EAAE,CAAC,MAAM,EACnF,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,CAC5E,CAAC,KAAK,CAAC,GAAG,EAAE,GAAkD,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;CACF;AAhHD,sCAgHC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@burtson-labs/host-kit",
-  "version": "0.4.28",
+  "version": "0.4.30",
   "author": {
     "name": "Burtson Labs",
     "email": "team@burtson.ai",
@@ -22,7 +22,7 @@
     "dist"
   ],
   "dependencies": {
-    "@burtson-labs/agent-core": "1.6.45"
+    "@burtson-labs/agent-core": "1.6.47"
   },
   "devDependencies": {
     "@types/node": "^20.11.0",