@cluesmith/codev 3.2.3 → 3.3.0

package/dist/agent-farm/lib/reconnect-backoff.js

@@ -0,0 +1,47 @@
+/**
+ * Private reconnect-backoff copy for Tower internals (issue #1189).
+ *
+ * `@cluesmith/codev-sdk/reconnect-policy` is the canonical home of this
+ * logic, but Tower itself needs two pieces of it server-side: the backoff
+ * curve for the tunnel control channel (`tunnel-client.ts`, Tower acting as a
+ * WS client of the cloud relay) and the session-unknown close code that
+ * `tower-websocket.ts` emits. The server must not import the client sdk
+ * (the issue's isolation invariant), and putting algorithm code in
+ * `@cluesmith/codev-types` breaks its wire-contracts-only rule, so this
+ * deliberate ~50-line duplication is the recorded resolution. If you change
+ * the curve or the close code, change both copies.
+ */
+const DEFAULT_BASE_MS = 1000;
+const DEFAULT_CAP_MS = 30_000;
+/**
+ * Compute the backoff delay for a given attempt index:
+ * `min(base * 2^attempt + jitter, cap)`, with an optional floor short-circuit
+ * applied first. The `attempt` index is explicit so each call site owns its
+ * own counter and increment ordering.
+ */
+export function backoffDelayMs(attempt, opts = {}) {
+    const { floor } = opts;
+    if (floor && attempt >= floor.afterAttempts) {
+        return floor.delayMs;
+    }
+    const base = opts.baseMs ?? DEFAULT_BASE_MS;
+    const cap = opts.capMs ?? DEFAULT_CAP_MS;
+    const jitterMs = opts.jitterMs ?? 0;
+    const random = opts.random ?? Math.random;
+    const safeAttempt = Math.max(0, attempt);
+    let jitter = 0;
+    if (jitterMs > 0) {
+        jitter = Math.floor(random() * jitterMs);
+    }
+    return Math.min(base * 2 ** safeAttempt + jitter, cap);
+}
+/**
+ * Application-range WebSocket close code Tower uses to tell a browser client
+ * that the terminal session is unknown/gone. Browsers can't read a failed
+ * *upgrade*'s HTTP status (they only see close `1006`), so Tower accepts the
+ * upgrade for browser clients and immediately closes with this code, which the
+ * dashboard reads via `CloseEvent.code` (#971). In the WS-spec private range
+ * (`4000–4999`); the mnemonic `4404` echoes HTTP 404.
+ */
+export const WS_CLOSE_SESSION_UNKNOWN = 4404;
+//# sourceMappingURL=reconnect-backoff.js.map

package/dist/agent-farm/lib/reconnect-backoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconnect-backoff.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/reconnect-backoff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAwBH,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,OAAuB,EAAE;IACvE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,IAAI,KAAK,IAAI,OAAO,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,WAAW,GAAG,MAAM,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC"}

package/dist/agent-farm/lib/tower-client.d.ts

@@ -1,10 +1,20 @@
 /**
- * Tower API Client — re-exports from @cluesmith/codev-core
+ * Tower API Client — the CLI's composition of `@cluesmith/codev-sdk`.
  *
- * All implementation lives in packages/core/src/tower-client.ts.
- * This file preserves the import path for existing consumers.
+ * The sdk client is environment-agnostic and defaults to NO auth (issue
+ * #1189); this wrapper is where the CLI's Node entitlements are injected:
+ * the disk-backed local key (issuing it if missing, via codev-core) and the
+ * `BRIDGE_TOWER_HOST` environment override. Every CLI/Tower call site
+ * constructs through this module, so their behavior is identical to the
+ * pre-split client. Import path preserved for existing consumers.
  */
-export { TowerClient, getTowerClient, type TowerClientOptions, type TowerWorkspace, type TowerWorkspaceStatus, type TowerHealth, type TowerTunnelStatus, type TowerStatus, type TowerTerminal, } from '@cluesmith/codev-core/tower-client';
-export { encodeWorkspacePath, decodeWorkspacePath } from '@cluesmith/codev-core/workspace';
-export { DEFAULT_TOWER_PORT, AGENT_FARM_DIR } from '@cluesmith/codev-core/constants';
+import { TowerClient as SdkTowerClient, type TowerClientOptions } from '@cluesmith/codev-sdk/tower-client';
+export declare class TowerClient extends SdkTowerClient {
+    constructor(portOrOptions?: number | TowerClientOptions);
+}
+export { type TowerClientOptions, type TowerWorkspace, type TowerWorkspaceStatus, type TowerHealth, type TowerTunnelStatus, type TowerStatus, type TowerTerminal, type TerminalType, type HuskCandidate, type HuskPreview, type HuskSweepResult, } from '@cluesmith/codev-sdk/tower-client';
+export { encodeWorkspacePath, decodeWorkspacePath } from '@cluesmith/codev-sdk/workspace';
+export { DEFAULT_TOWER_PORT } from '@cluesmith/codev-sdk/constants';
+export { AGENT_FARM_DIR } from '@cluesmith/codev-core/constants';
+export declare function getTowerClient(port?: number): TowerClient;
 //# sourceMappingURL=tower-client.d.ts.map

package/dist/agent-farm/lib/tower-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tower-client.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/tower-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,WAAW,EACX,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"tower-client.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/tower-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,WAAW,IAAI,cAAc,EAC7B,KAAK,kBAAkB,EACxB,MAAM,mCAAmC,CAAC;AAI3C,qBAAa,WAAY,SAAQ,cAAc;gBACjC,aAAa,CAAC,EAAE,MAAM,GAAG,kBAAkB;CAaxD;AAED,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,eAAe,GACrB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAMjE,wBAAgB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAKzD"}

package/dist/agent-farm/lib/tower-client.js

@@ -1,10 +1,41 @@
 /**
- * Tower API Client — re-exports from @cluesmith/codev-core
+ * Tower API Client — the CLI's composition of `@cluesmith/codev-sdk`.
  *
- * All implementation lives in packages/core/src/tower-client.ts.
- * This file preserves the import path for existing consumers.
+ * The sdk client is environment-agnostic and defaults to NO auth (issue
+ * #1189); this wrapper is where the CLI's Node entitlements are injected:
+ * the disk-backed local key (issuing it if missing, via codev-core) and the
+ * `BRIDGE_TOWER_HOST` environment override. Every CLI/Tower call site
+ * constructs through this module, so their behavior is identical to the
+ * pre-split client. Import path preserved for existing consumers.
  */
-export { TowerClient, getTowerClient, } from '@cluesmith/codev-core/tower-client';
-export { encodeWorkspacePath, decodeWorkspacePath } from '@cluesmith/codev-core/workspace';
-export { DEFAULT_TOWER_PORT, AGENT_FARM_DIR } from '@cluesmith/codev-core/constants';
+import { TowerClient as SdkTowerClient, } from '@cluesmith/codev-sdk/tower-client';
+import { DEFAULT_TOWER_PORT } from '@cluesmith/codev-sdk/constants';
+import { ensureLocalKey } from '@cluesmith/codev-core/auth';
+export class TowerClient extends SdkTowerClient {
+    constructor(portOrOptions) {
+        let options;
+        if (typeof portOrOptions === 'number') {
+            options = { port: portOrOptions };
+        }
+        else {
+            options = portOrOptions ?? {};
+        }
+        super({
+            getAuthKey: ensureLocalKey,
+            host: process.env.BRIDGE_TOWER_HOST,
+            ...options,
+        });
+    }
+}
+export { encodeWorkspacePath, decodeWorkspacePath } from '@cluesmith/codev-sdk/workspace';
+export { DEFAULT_TOWER_PORT } from '@cluesmith/codev-sdk/constants';
+export { AGENT_FARM_DIR } from '@cluesmith/codev-core/constants';
+// ── Default client ─────────────────────────────────────────────
+let defaultClient = null;
+export function getTowerClient(port) {
+    if (!defaultClient || (port && port !== DEFAULT_TOWER_PORT)) {
+        defaultClient = new TowerClient({ port });
+    }
+    return defaultClient;
+}
 //# sourceMappingURL=tower-client.js.map

package/dist/agent-farm/lib/tower-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"tower-client.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/tower-client.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,WAAW,EACX,cAAc,GAQf,MAAM,oCAAoC,CAAC;AAE5C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC"}
+{"version":3,"file":"tower-client.js","sourceRoot":"","sources":["../../../src/agent-farm/lib/tower-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,WAAW,IAAI,cAAc,GAE9B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,MAAM,OAAO,WAAY,SAAQ,cAAc;IAC7C,YAAY,aAA2C;QACrD,IAAI,OAA2B,CAAC;QAChC,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,aAAa,IAAI,EAAE,CAAC;QAChC,CAAC;QACD,KAAK,CAAC;YACJ,UAAU,EAAE,cAAc;YAC1B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;YACnC,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;CACF;AAgBD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEjE,kEAAkE;AAElE,IAAI,aAAa,GAAuB,IAAI,CAAC;AAE7C,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,kBAAkB,CAAC,EAAE,CAAC;QAC5D,aAAa,GAAG,IAAI,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/agent-farm/lib/tunnel-client.d.ts

@@ -30,11 +30,50 @@ export interface TowerMetadata {
         workspacePath: string;
     }>;
 }
-type StateChangeCallback = (state: TunnelState, previousState: TunnelState) => void;
+type StateChangeCallback = (state: TunnelState, previousState: TunnelState, reason?: string) => void;
+/**
+ * Header stamped on every request this client proxies in from the cloud (#1370).
+ *
+ * Requests reaching Tower through the tunnel arrive over localhost, so the
+ * socket address alone cannot tell them apart from a genuinely local caller.
+ * This marker makes the distinction explicit — Tower uses it both for source
+ * attribution in the log and to refuse cloud-originated management calls.
+ *
+ * Any inbound copy is stripped before stamping, so a cloud-side actor cannot
+ * forge or suppress it.
+ */
+export declare const TUNNEL_PROXY_HEADER = "x-codev-tunnel-proxy";
 /** Heartbeat ping interval — send a WebSocket ping every 30 seconds */
 export declare const PING_INTERVAL_MS = 30000;
 /** Pong timeout — if no pong received within 10 seconds, declare connection dead */
 export declare const PONG_TIMEOUT_MS = 10000;
+/**
+ * Connect watchdog (#1372) — maximum time the client may sit in `connecting`.
+ *
+ * Neither the WebSocket handshake nor the auth-response wait has a deadline of
+ * its own: `ws` only enforces one when `handshakeTimeout` is passed, and Node
+ * applies no socket timeout by default. After an uplink flap a half-open path
+ * (stale NAT/conntrack entry) accepts the TCP connection and then goes silent,
+ * so no `error` or `close` event ever fires. The heartbeat can't help — it is
+ * armed only after `connected`. Without this watchdog the client parks in
+ * `connecting` forever and only a brand-new TunnelClient recovers it.
+ */
+export declare const CONNECT_TIMEOUT_MS = 20000;
+/**
+ * Auth circuit-breaker half-open interval (#1372).
+ *
+ * `invalid_api_key` used to be terminal, which turns any misclassified auth
+ * error during a network blip into a permanent cloud outage. Retrying at a long
+ * interval costs one cheap round-trip every 15 minutes; a genuinely revoked key
+ * just fails again and re-parks.
+ */
+export declare const AUTH_RETRY_INTERVAL_MS: number;
+/**
+ * Marks an `auth_failed` transition as a *repeat* park after a half-open retry
+ * (#1372). `tower-tunnel.ts` keys its "log the alarm once" rule off this, so it
+ * is a shared contract, not a free-form string — do not inline the literal.
+ */
+export declare const AUTH_RETRY_FAILED_MARKER = "half-open retry failed";
 /**
  * Calculate reconnection backoff with exponential increase and jitter.
  * Exported for unit testing.
@@ -60,6 +99,14 @@ export declare function isBlockedPath(path: string): boolean;
  * Exported for unit testing.
  */
 export declare function filterHopByHopHeaders(headers: Record<string, string | string[] | undefined>): Record<string, string | string[]>;
+/**
+ * Make any relay-supplied text safe to log: strip control characters (a
+ * newline would otherwise forge a tower log entry) and cap the length (an
+ * oversized payload would otherwise inflate the log). Every externally derived
+ * string that reaches a state-change reason must pass through here.
+ * Exported for testing.
+ */
+export declare function sanitizeRemoteDetail(text: string): string;
 export declare class TunnelClient {
     private options;
     private state;
@@ -70,6 +117,7 @@ export declare class TunnelClient {
     private h2Server;
     private h2Session;
     private reconnectTimer;
+    private connectTimeout;
     private consecutiveFailures;
     private rateLimitCount;
     private destroyed;
@@ -77,6 +125,8 @@ export declare class TunnelClient {
     private pongTimeout;
     private pongReceived;
     private heartbeatWs;
+    /** Suppresses repeat auth-failure alarms while the breaker half-opens (#1372) */
+    private authFailureLogged;
     constructor(options: TunnelClientOptions);
     getState(): TunnelState;
     getUptime(): number | null;
@@ -114,13 +164,31 @@ export declare class TunnelClient {
      */
     private pushMetadataViaHttp;
     private clearReconnectTimer;
+    /**
+     * Schedule the next connect attempt.
+     *
+     * Callers increment `consecutiveFailures` *before* calling this (#1372).
+     * Previously the pong-timeout and close paths incremented first while the
+     * error and auth paths incremented after, so the same failure drew a
+     * different delay depending on which event happened to surface it — and for
+     * a WebSocket an `error` is always followed by a `close`, making that
+     * arbitrary. Unified on increment-first (what the majority of paths already
+     * did); the error path's first retry moves ~1.5s → ~2.5s.
+     */
     private scheduleReconnect;
+    private clearConnectTimeout;
     private cleanup;
     private startHeartbeat;
     private stopHeartbeat;
     private doConnect;
     private onWsOpen;
     private handleAuthError;
+    /**
+     * Half-open the auth circuit breaker (#1372): after AUTH_RETRY_INTERVAL_MS,
+     * leave `auth_failed` and try once more. A genuinely revoked key fails again
+     * and re-parks here, so the cost is one round-trip per interval.
+     */
+    private scheduleAuthRetry;
     private handleConnectionError;
     private startH2Server;
     private handleH2Stream;

package/dist/agent-farm/lib/tunnel-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tunnel-client.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/tunnel-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,YAAY,GAAG,WAAW,GAAG,aAAa,CAAC;AAEtF,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,SAAS,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzD;AAED,KAAK,mBAAmB,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,KAAK,IAAI,CAAC;AAiBpF,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC,oFAAoF;AACpF,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,MAAoB,GAAG,MAAM,CAQ9F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAWnD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAQnC;AAYD,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,SAAS,CAAyC;IAC1D,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,YAAY,CAA+C;IACnE,OAAO,CAAC,WAAW,CAA8C;IACjE,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,WAAW,CAA0B;gBAEjC,OAAO,EAAE,mBAAmB;IAIxC,QAAQ,IAAI,WAAW;IAIvB,SAAS,IAAI,MAAM,GAAG,IAAI;IAK1B,aAAa,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAIlD,OAAO,CAAC,QAAQ;IAwBhB;;OAEG;IACH,OAAO,IAAI,IAAI;IAOf;;OAEG;IACH,UAAU,IAAI,IAAI;IAQlB;;;OAGG;IACH,mBAAmB,IAAI,IAAI;IAS3B;;;;;;;;OAQG;IACH,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAQ3C,4DAA4D;IAC5D,OAAO,CAAC,gBAAgB,CAA8B;IAEtD;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IA4B3B,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,OAAO;IAwBf,OAAO,CAAC,cAAc;IAoCtB,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,SAAS;IA8BjB,OAAO,CAAC,QAAQ;IA2BhB,OAAO,CAAC,eAAe;IA6BvB,OAAO,CAAC,qBAAqB;IAQ7B,OAAO,CAAC,aAAa;IA+BrB,OAAO,CAAC,cAAc;IAqCtB,OAAO,CAAC,sBAAsB;IAsE9B,OAAO,CAAC,gBAAgB;CA2DzB"}
+{"version":3,"file":"tunnel-client.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/lib/tunnel-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,YAAY,GAAG,WAAW,GAAG,aAAa,CAAC;AAEtF,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClD,SAAS,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzD;AAED,KAAK,mBAAmB,GAAG,CACzB,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,WAAW,EAC1B,MAAM,CAAC,EAAE,MAAM,KACZ,IAAI,CAAC;AA6BV;;;;;;;;;;GAUG;AACH,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAU1D,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC,oFAAoF;AACpF,eAAO,MAAM,eAAe,QAAS,CAAC;AAEtC;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,QAAc,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,2BAA2B,CAAC;AAEjE;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,MAAoB,GAAG,MAAM,CAQ9F;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAWnD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GACrD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAQnC;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMzD;AAYD,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAAsB;IACrC,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,SAAS,CAAyC;IAC1D,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,cAAc,CAA8C;IACpE,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,YAAY,CAA+C;IACnE,OAAO,CAAC,WAAW,CAA8C;IACjE,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,WAAW,CAA0B;IAC7C,iFAAiF;IACjF,OAAO,CAAC,iBAAiB,CAAS;gBAEtB,OAAO,EAAE,mBAAmB;IAIxC,QAAQ,IAAI,WAAW;IAIvB,SAAS,IAAI,MAAM,GAAG,IAAI;IAK1B,aAAa,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAIlD,OAAO,CAAC,QAAQ;IA2BhB;;OAEG;IACH,OAAO,IAAI,IAAI;IAOf;;OAEG;IACH,UAAU,IAAI,IAAI;IAQlB;;;OAGG;IACH,mBAAmB,IAAI,IAAI;IAe3B;;;;;;;;OAQG;IACH,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAQ3C,4DAA4D;IAC5D,OAAO,CAAC,gBAAgB,CAA8B;IAEtD;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IA4B3B,OAAO,CAAC,mBAAmB;IAO3B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,iBAAiB;IAYzB,OAAO,CAAC,mBAAmB;IAO3B,OAAO,CAAC,OAAO;IAiCf,OAAO,CAAC,cAAc;IAoCtB,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,SAAS;IAwDjB,OAAO,CAAC,QAAQ;IAwChB,OAAO,CAAC,eAAe;IA4CvB;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,qBAAqB;IAU7B,OAAO,CAAC,aAAa;IAwCrB,OAAO,CAAC,cAAc;IAqCtB,OAAO,CAAC,sBAAsB;IAuE9B,OAAO,CAAC,gBAAgB;CA4DzB"}