@code-yeongyu/senpi 2026.7.4 → 2026.7.9-2

package/dist/modes/app-server/rpc/errors.js

@@ -0,0 +1,104 @@
+export const codexErrorInfo = {
+    contextWindowExceeded: () => ({ kind: "contextWindowExceeded" }),
+    sessionBudgetExceeded: () => ({ kind: "sessionBudgetExceeded" }),
+    usageLimitExceeded: () => ({ kind: "usageLimitExceeded" }),
+    serverOverloaded: () => ({ kind: "serverOverloaded" }),
+    cyberPolicy: () => ({ kind: "cyberPolicy" }),
+    httpConnectionFailed: (httpStatusCode) => ({
+        kind: "httpConnectionFailed",
+        httpStatusCode: httpStatusCode ?? null,
+    }),
+    responseStreamConnectionFailed: (httpStatusCode) => ({
+        kind: "responseStreamConnectionFailed",
+        httpStatusCode: httpStatusCode ?? null,
+    }),
+    internalServerError: () => ({ kind: "internalServerError" }),
+    unauthorized: () => ({ kind: "unauthorized" }),
+    badRequest: () => ({ kind: "badRequest" }),
+    threadRollbackFailed: () => ({ kind: "threadRollbackFailed" }),
+    sandboxError: () => ({ kind: "sandboxError" }),
+    responseStreamDisconnected: (httpStatusCode) => ({
+        kind: "responseStreamDisconnected",
+        httpStatusCode: httpStatusCode ?? null,
+    }),
+    responseTooManyFailedAttempts: (httpStatusCode) => ({
+        kind: "responseTooManyFailedAttempts",
+        httpStatusCode: httpStatusCode ?? null,
+    }),
+    activeTurnNotSteerable: (turnKind) => ({
+        kind: "activeTurnNotSteerable",
+        turnKind,
+    }),
+    other: () => ({ kind: "other" }),
+};
+export function serializeCodexErrorInfo(info) {
+    switch (info.kind) {
+        case "contextWindowExceeded":
+        case "sessionBudgetExceeded":
+        case "usageLimitExceeded":
+        case "serverOverloaded":
+        case "cyberPolicy":
+        case "internalServerError":
+        case "unauthorized":
+        case "badRequest":
+        case "threadRollbackFailed":
+        case "sandboxError":
+        case "other":
+            return info.kind;
+        case "httpConnectionFailed":
+            return { httpConnectionFailed: { httpStatusCode: info.httpStatusCode } };
+        case "responseStreamConnectionFailed":
+            return { responseStreamConnectionFailed: { httpStatusCode: info.httpStatusCode } };
+        case "responseStreamDisconnected":
+            return { responseStreamDisconnected: { httpStatusCode: info.httpStatusCode } };
+        case "responseTooManyFailedAttempts":
+            return { responseTooManyFailedAttempts: { httpStatusCode: info.httpStatusCode } };
+        case "activeTurnNotSteerable":
+            return { activeTurnNotSteerable: { turnKind: info.turnKind } };
+        default:
+            return assertNever(info);
+    }
+}
+export function parseError() {
+    return { code: -32700, message: "Parse error" };
+}
+/**
+ * Base class for handler-thrown errors that carry an intended JSON-RPC error
+ * payload. The method registry returns `rpcError` verbatim instead of masking
+ * the failure as a -32603 internal error.
+ */
+export class RpcHandlerError extends Error {
+    constructor(error) {
+        super(error.message);
+        this.name = "RpcHandlerError";
+        this.rpcError = error;
+    }
+}
+export function invalidRequestError() {
+    return { code: -32600, message: "Invalid request" };
+}
+export function methodNotFoundError(method) {
+    return { code: -32601, message: `Method not found: ${method}` };
+}
+export function invalidParamsError() {
+    return { code: -32602, message: "Invalid params" };
+}
+export function internalError(message = "Internal error") {
+    return { code: -32603, message };
+}
+export function overloadedError() {
+    return { code: -32001, message: "Server overloaded; retry later." };
+}
+export function notInitializedError() {
+    return { code: -32000, message: "Not initialized" };
+}
+export function alreadyInitializedError() {
+    return { code: -32000, message: "Already initialized" };
+}
+export function experimentalCapabilityError(method) {
+    return { code: -32600, message: `${method} requires experimentalApi capability` };
+}
+function assertNever(value) {
+    throw new Error(`Unhandled CodexErrorInfo variant: ${JSON.stringify(value)}`);
+}
+//# sourceMappingURL=errors.js.map

package/dist/modes/app-server/rpc/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../../src/modes/app-server/rpc/errors.ts"],"names":[],"mappings":"AA4CA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC7B,qBAAqB,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAChF,qBAAqB,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IAChF,kBAAkB,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC1E,gBAAgB,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACtE,WAAW,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC5D,oBAAoB,EAAE,CAAC,cAAuB,EAAkB,EAAE,CAAC,CAAC;QACnE,IAAI,EAAE,sBAAsB;QAC5B,cAAc,EAAE,cAAc,IAAI,IAAI;KACtC,CAAC;IACF,8BAA8B,EAAE,CAAC,cAAuB,EAAkB,EAAE,CAAC,CAAC;QAC7E,IAAI,EAAE,gCAAgC;QACtC,cAAc,EAAE,cAAc,IAAI,IAAI;KACtC,CAAC;IACF,mBAAmB,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IAC5E,YAAY,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC9D,UAAU,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAC1D,oBAAoB,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;IAC9E,YAAY,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC9D,0BAA0B,EAAE,CAAC,cAAuB,EAAkB,EAAE,CAAC,CAAC;QACzE,IAAI,EAAE,4BAA4B;QAClC,cAAc,EAAE,cAAc,IAAI,IAAI;KACtC,CAAC;IACF,6BAA6B,EAAE,CAAC,cAAuB,EAAkB,EAAE,CAAC,CAAC;QAC5E,IAAI,EAAE,+BAA+B;QACrC,cAAc,EAAE,cAAc,IAAI,IAAI;KACtC,CAAC;IACF,sBAAsB,EAAE,CAAC,QAA8B,EAAkB,EAAE,CAAC,CAAC;QAC5E,IAAI,EAAE,wBAAwB;QAC9B,QAAQ;KACR,CAAC;IACF,KAAK,EAAE,GAAmB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;CACvC,CAAC;AAEX,MAAM,UAAU,uBAAuB,CAAC,IAAoB;IAC3D,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,uBAAuB,CAAC;QAC7B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,oBAAoB,CAAC;QAC1B,KAAK,kBAAkB,CAAC;QACxB,KAAK,aAAa,CAAC;QACnB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY,CAAC;QAClB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,cAAc,CAAC;QACpB,KAAK,OAAO;YACX,OAAO,IAAI,CAAC,IAAI,CAAC;QAClB,KAAK,sBAAsB;YAC1B,OAAO,EAAE,oBAAoB,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1E,KAAK,gCAAgC;YACpC,OAAO,EAAE,8BAA8B,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACpF,KAAK,4BAA4B;YAChC,OAAO,EAAE,0BAA0B,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAChF,KAAK,+BAA+B;YACnC,OAAO,EAAE,6BAA6B,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACnF,KAAK,wBAAwB;YAC5B,OAAO,EAAE,sBAAsB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChE;YACC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;AACF,CAAC;AAED,MAAM,UAAU,UAAU;IACzB,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAGzC,YAAY,KAAmB;QAC9B,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IACvB,CAAC;CACD;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IACjD,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,MAAM,EAAE,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,kBAAkB;IACjC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAO,GAAG,gBAAgB;IACvD,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,eAAe;IAC9B,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,mBAAmB;IAClC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,uBAAuB;IACtC,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACzD,OAAO,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,sCAAsC,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,WAAW,CAAC,KAAY;IAChC,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC/E,CAAC","sourcesContent":["export interface JsonRpcError {\n\treadonly code: number;\n\treadonly message: string;\n\treadonly data?: unknown;\n}\n\nexport type NonSteerableTurnKind = \"review\" | \"compact\";\n\nexport type CodexErrorInfo =\n\t| { readonly kind: \"contextWindowExceeded\" }\n\t| { readonly kind: \"sessionBudgetExceeded\" }\n\t| { readonly kind: \"usageLimitExceeded\" }\n\t| { readonly kind: \"serverOverloaded\" }\n\t| { readonly kind: \"cyberPolicy\" }\n\t| { readonly kind: \"httpConnectionFailed\"; readonly httpStatusCode: number | null }\n\t| { readonly kind: \"responseStreamConnectionFailed\"; readonly httpStatusCode: number | null }\n\t| { readonly kind: \"internalServerError\" }\n\t| { readonly kind: \"unauthorized\" }\n\t| { readonly kind: \"badRequest\" }\n\t| { readonly kind: \"threadRollbackFailed\" }\n\t| { readonly kind: \"sandboxError\" }\n\t| { readonly kind: \"responseStreamDisconnected\"; readonly httpStatusCode: number | null }\n\t| { readonly kind: \"responseTooManyFailedAttempts\"; readonly httpStatusCode: number | null }\n\t| { readonly kind: \"activeTurnNotSteerable\"; readonly turnKind: NonSteerableTurnKind }\n\t| { readonly kind: \"other\" };\n\nexport type SerializedCodexErrorInfo =\n\t| \"contextWindowExceeded\"\n\t| \"sessionBudgetExceeded\"\n\t| \"usageLimitExceeded\"\n\t| \"serverOverloaded\"\n\t| \"cyberPolicy\"\n\t| \"internalServerError\"\n\t| \"unauthorized\"\n\t| \"badRequest\"\n\t| \"threadRollbackFailed\"\n\t| \"sandboxError\"\n\t| \"other\"\n\t| { readonly httpConnectionFailed: { readonly httpStatusCode: number | null } }\n\t| { readonly responseStreamConnectionFailed: { readonly httpStatusCode: number | null } }\n\t| { readonly responseStreamDisconnected: { readonly httpStatusCode: number | null } }\n\t| { readonly responseTooManyFailedAttempts: { readonly httpStatusCode: number | null } }\n\t| { readonly activeTurnNotSteerable: { readonly turnKind: NonSteerableTurnKind } };\n\nexport const codexErrorInfo = {\n\tcontextWindowExceeded: (): CodexErrorInfo => ({ kind: \"contextWindowExceeded\" }),\n\tsessionBudgetExceeded: (): CodexErrorInfo => ({ kind: \"sessionBudgetExceeded\" }),\n\tusageLimitExceeded: (): CodexErrorInfo => ({ kind: \"usageLimitExceeded\" }),\n\tserverOverloaded: (): CodexErrorInfo => ({ kind: \"serverOverloaded\" }),\n\tcyberPolicy: (): CodexErrorInfo => ({ kind: \"cyberPolicy\" }),\n\thttpConnectionFailed: (httpStatusCode?: number): CodexErrorInfo => ({\n\t\tkind: \"httpConnectionFailed\",\n\t\thttpStatusCode: httpStatusCode ?? null,\n\t}),\n\tresponseStreamConnectionFailed: (httpStatusCode?: number): CodexErrorInfo => ({\n\t\tkind: \"responseStreamConnectionFailed\",\n\t\thttpStatusCode: httpStatusCode ?? null,\n\t}),\n\tinternalServerError: (): CodexErrorInfo => ({ kind: \"internalServerError\" }),\n\tunauthorized: (): CodexErrorInfo => ({ kind: \"unauthorized\" }),\n\tbadRequest: (): CodexErrorInfo => ({ kind: \"badRequest\" }),\n\tthreadRollbackFailed: (): CodexErrorInfo => ({ kind: \"threadRollbackFailed\" }),\n\tsandboxError: (): CodexErrorInfo => ({ kind: \"sandboxError\" }),\n\tresponseStreamDisconnected: (httpStatusCode?: number): CodexErrorInfo => ({\n\t\tkind: \"responseStreamDisconnected\",\n\t\thttpStatusCode: httpStatusCode ?? null,\n\t}),\n\tresponseTooManyFailedAttempts: (httpStatusCode?: number): CodexErrorInfo => ({\n\t\tkind: \"responseTooManyFailedAttempts\",\n\t\thttpStatusCode: httpStatusCode ?? null,\n\t}),\n\tactiveTurnNotSteerable: (turnKind: NonSteerableTurnKind): CodexErrorInfo => ({\n\t\tkind: \"activeTurnNotSteerable\",\n\t\tturnKind,\n\t}),\n\tother: (): CodexErrorInfo => ({ kind: \"other\" }),\n} as const;\n\nexport function serializeCodexErrorInfo(info: CodexErrorInfo): SerializedCodexErrorInfo {\n\tswitch (info.kind) {\n\t\tcase \"contextWindowExceeded\":\n\t\tcase \"sessionBudgetExceeded\":\n\t\tcase \"usageLimitExceeded\":\n\t\tcase \"serverOverloaded\":\n\t\tcase \"cyberPolicy\":\n\t\tcase \"internalServerError\":\n\t\tcase \"unauthorized\":\n\t\tcase \"badRequest\":\n\t\tcase \"threadRollbackFailed\":\n\t\tcase \"sandboxError\":\n\t\tcase \"other\":\n\t\t\treturn info.kind;\n\t\tcase \"httpConnectionFailed\":\n\t\t\treturn { httpConnectionFailed: { httpStatusCode: info.httpStatusCode } };\n\t\tcase \"responseStreamConnectionFailed\":\n\t\t\treturn { responseStreamConnectionFailed: { httpStatusCode: info.httpStatusCode } };\n\t\tcase \"responseStreamDisconnected\":\n\t\t\treturn { responseStreamDisconnected: { httpStatusCode: info.httpStatusCode } };\n\t\tcase \"responseTooManyFailedAttempts\":\n\t\t\treturn { responseTooManyFailedAttempts: { httpStatusCode: info.httpStatusCode } };\n\t\tcase \"activeTurnNotSteerable\":\n\t\t\treturn { activeTurnNotSteerable: { turnKind: info.turnKind } };\n\t\tdefault:\n\t\t\treturn assertNever(info);\n\t}\n}\n\nexport function parseError(): JsonRpcError {\n\treturn { code: -32700, message: \"Parse error\" };\n}\n\n/**\n * Base class for handler-thrown errors that carry an intended JSON-RPC error\n * payload. The method registry returns `rpcError` verbatim instead of masking\n * the failure as a -32603 internal error.\n */\nexport class RpcHandlerError extends Error {\n\treadonly rpcError: JsonRpcError;\n\n\tconstructor(error: JsonRpcError) {\n\t\tsuper(error.message);\n\t\tthis.name = \"RpcHandlerError\";\n\t\tthis.rpcError = error;\n\t}\n}\n\nexport function invalidRequestError(): JsonRpcError {\n\treturn { code: -32600, message: \"Invalid request\" };\n}\n\nexport function methodNotFoundError(method: string): JsonRpcError {\n\treturn { code: -32601, message: `Method not found: ${method}` };\n}\n\nexport function invalidParamsError(): JsonRpcError {\n\treturn { code: -32602, message: \"Invalid params\" };\n}\n\nexport function internalError(message = \"Internal error\"): JsonRpcError {\n\treturn { code: -32603, message };\n}\n\nexport function overloadedError(): JsonRpcError {\n\treturn { code: -32001, message: \"Server overloaded; retry later.\" };\n}\n\nexport function notInitializedError(): JsonRpcError {\n\treturn { code: -32000, message: \"Not initialized\" };\n}\n\nexport function alreadyInitializedError(): JsonRpcError {\n\treturn { code: -32000, message: \"Already initialized\" };\n}\n\nexport function experimentalCapabilityError(method: string): JsonRpcError {\n\treturn { code: -32600, message: `${method} requires experimentalApi capability` };\n}\n\nfunction assertNever(value: never): never {\n\tthrow new Error(`Unhandled CodexErrorInfo variant: ${JSON.stringify(value)}`);\n}\n"]}

package/dist/modes/app-server/rpc/ndjson.d.ts

@@ -0,0 +1,10 @@
+import type { Readable } from "node:stream";
+import type { ClassifiedIncoming, RpcErrorResponse, RpcNotification, RpcRequest, RpcResponse } from "./envelope.ts";
+export type NdjsonRpcEmission = ClassifiedIncoming | {
+    readonly kind: "parse-error";
+    readonly message: RpcErrorResponse;
+};
+export declare function serializeNdjsonMessage(message: RpcRequest | RpcResponse | RpcNotification): string;
+export declare function parseNdjsonLine(line: string): NdjsonRpcEmission;
+export declare function attachNdjsonRpcReader(stream: Readable, onMessage: (message: NdjsonRpcEmission) => void): () => void;
+//# sourceMappingURL=ndjson.d.ts.map

package/dist/modes/app-server/rpc/ndjson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ndjson.d.ts","sourceRoot":"","sources":["../../../../src/modes/app-server/rpc/ndjson.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,KAAK,EACX,kBAAkB,EAElB,gBAAgB,EAChB,eAAe,EACf,UAAU,EACV,WAAW,EACX,MAAM,eAAe,CAAC;AAGvB,MAAM,MAAM,iBAAiB,GAC1B,kBAAkB,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAyBxE,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,UAAU,GAAG,WAAW,GAAG,eAAe,GAAG,MAAM,CASlG;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAS/D;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,IAAI,GAAG,MAAM,IAAI,CAInH"}

package/dist/modes/app-server/rpc/ndjson.js

@@ -0,0 +1,48 @@
+import { attachJsonlLineReader } from "../../rpc/jsonl.js";
+import { classifyIncoming } from "./envelope.js";
+function messageWithoutJsonrpc(message) {
+    if ("method" in message) {
+        if ("id" in message) {
+            return "params" in message
+                ? { id: message.id, method: message.method, params: message.params }
+                : { id: message.id, method: message.method };
+        }
+        return "params" in message ? { method: message.method, params: message.params } : { method: message.method };
+    }
+    if ("result" in message) {
+        return { id: message.id, result: message.result };
+    }
+    return {
+        id: message.id,
+        error: "data" in message.error
+            ? { code: message.error.code, message: message.error.message, data: message.error.data }
+            : { code: message.error.code, message: message.error.message },
+    };
+}
+export function serializeNdjsonMessage(message) {
+    const serialized = JSON.stringify(messageWithoutJsonrpc(message));
+    if (serialized === undefined) {
+        throw new Error("JSON-RPC message did not serialize to an object");
+    }
+    if (serialized.includes("\n")) {
+        throw new Error("JSON-RPC NDJSON payload must not contain a raw newline");
+    }
+    return `${serialized}\n`;
+}
+export function parseNdjsonLine(line) {
+    try {
+        return classifyIncoming(JSON.parse(line));
+    }
+    catch (error) {
+        if (error instanceof SyntaxError) {
+            return { kind: "parse-error", message: { id: null, error: { code: -32700, message: "Parse error" } } };
+        }
+        throw error;
+    }
+}
+export function attachNdjsonRpcReader(stream, onMessage) {
+    return attachJsonlLineReader(stream, (line) => {
+        onMessage(parseNdjsonLine(line));
+    });
+}
+//# sourceMappingURL=ndjson.js.map

package/dist/modes/app-server/rpc/ndjson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ndjson.js","sourceRoot":"","sources":["../../../../src/modes/app-server/rpc/ndjson.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAS3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAMjD,SAAS,qBAAqB,CAAC,OAAoB;IAClD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YACrB,OAAO,QAAQ,IAAI,OAAO;gBACzB,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;gBACpE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC9G,CAAC;IAED,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACnD,CAAC;IAED,OAAO;QACN,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,KAAK,EACJ,MAAM,IAAI,OAAO,CAAC,KAAK;YACtB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;YACxF,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE;KAChE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAmD;IACzF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,UAAU,IAAI,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC3C,IAAI,CAAC;QACJ,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YAClC,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QACxG,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAgB,EAAE,SAA+C;IACtG,OAAO,qBAAqB,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC7C,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import type { Readable } from \"node:stream\";\nimport { attachJsonlLineReader } from \"../../rpc/jsonl.ts\";\nimport type {\n\tClassifiedIncoming,\n\tRpcEnvelope,\n\tRpcErrorResponse,\n\tRpcNotification,\n\tRpcRequest,\n\tRpcResponse,\n} from \"./envelope.ts\";\nimport { classifyIncoming } from \"./envelope.ts\";\n\nexport type NdjsonRpcEmission =\n\t| ClassifiedIncoming\n\t| { readonly kind: \"parse-error\"; readonly message: RpcErrorResponse };\n\nfunction messageWithoutJsonrpc(message: RpcEnvelope): RpcEnvelope {\n\tif (\"method\" in message) {\n\t\tif (\"id\" in message) {\n\t\t\treturn \"params\" in message\n\t\t\t\t? { id: message.id, method: message.method, params: message.params }\n\t\t\t\t: { id: message.id, method: message.method };\n\t\t}\n\t\treturn \"params\" in message ? { method: message.method, params: message.params } : { method: message.method };\n\t}\n\n\tif (\"result\" in message) {\n\t\treturn { id: message.id, result: message.result };\n\t}\n\n\treturn {\n\t\tid: message.id,\n\t\terror:\n\t\t\t\"data\" in message.error\n\t\t\t\t? { code: message.error.code, message: message.error.message, data: message.error.data }\n\t\t\t\t: { code: message.error.code, message: message.error.message },\n\t};\n}\n\nexport function serializeNdjsonMessage(message: RpcRequest | RpcResponse | RpcNotification): string {\n\tconst serialized = JSON.stringify(messageWithoutJsonrpc(message));\n\tif (serialized === undefined) {\n\t\tthrow new Error(\"JSON-RPC message did not serialize to an object\");\n\t}\n\tif (serialized.includes(\"\\n\")) {\n\t\tthrow new Error(\"JSON-RPC NDJSON payload must not contain a raw newline\");\n\t}\n\treturn `${serialized}\\n`;\n}\n\nexport function parseNdjsonLine(line: string): NdjsonRpcEmission {\n\ttry {\n\t\treturn classifyIncoming(JSON.parse(line));\n\t} catch (error) {\n\t\tif (error instanceof SyntaxError) {\n\t\t\treturn { kind: \"parse-error\", message: { id: null, error: { code: -32700, message: \"Parse error\" } } };\n\t\t}\n\t\tthrow error;\n\t}\n}\n\nexport function attachNdjsonRpcReader(stream: Readable, onMessage: (message: NdjsonRpcEmission) => void): () => void {\n\treturn attachJsonlLineReader(stream, (line) => {\n\t\tonMessage(parseNdjsonLine(line));\n\t});\n}\n"]}

package/dist/modes/app-server/rpc/registry.d.ts

@@ -0,0 +1,39 @@
+import { type JsonRpcError } from "./errors.ts";
+export type RequestId = string | number | null;
+export interface RpcRequest {
+    readonly id: RequestId;
+    readonly method: string;
+    readonly params?: unknown;
+}
+export type RpcResponse = {
+    readonly id: RequestId;
+    readonly result: unknown;
+} | {
+    readonly id: RequestId;
+    readonly error: JsonRpcError;
+};
+export interface ConnectionCapabilities {
+    readonly experimentalApi?: boolean;
+}
+export interface RegistryConnection {
+    readonly initialized: boolean;
+    readonly capabilities?: ConnectionCapabilities;
+}
+export type MethodScope = "thread" | "global" | "none";
+export interface MethodHandlerContext {
+    readonly connection: RegistryConnection;
+    readonly request: RpcRequest;
+}
+export type MethodHandler = (context: MethodHandlerContext) => Promise<unknown> | unknown;
+export interface MethodRegistration {
+    readonly handler: MethodHandler;
+    readonly experimental?: boolean;
+    readonly requiresInit?: boolean;
+    readonly scope?: MethodScope;
+}
+export interface MethodRegistry {
+    register(method: string, registration: MethodRegistration): void;
+    dispatch(connection: RegistryConnection, request: RpcRequest): Promise<RpcResponse>;
+}
+export declare function createRegistry(): MethodRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/modes/app-server/rpc/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/modes/app-server/rpc/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAIN,KAAK,YAAY,EAIjB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;AAE/C,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,WAAW,GACpB;IAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,sBAAsB,CAAC;CAC/C;AAED,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEvD,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAE1F,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACjE,QAAQ,CAAC,UAAU,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACpF;AAED,wBAAgB,cAAc,IAAI,cAAc,CAE/C"}

package/dist/modes/app-server/rpc/registry.js

@@ -0,0 +1,41 @@
+import { alreadyInitializedError, experimentalCapabilityError, internalError, methodNotFoundError, notInitializedError, RpcHandlerError, } from "./errors.js";
+export function createRegistry() {
+    return new InMemoryMethodRegistry();
+}
+class InMemoryMethodRegistry {
+    constructor() {
+        this.methods = new Map();
+    }
+    register(method, registration) {
+        this.methods.set(method, registration);
+    }
+    async dispatch(connection, request) {
+        if (!connection.initialized) {
+            const registration = this.methods.get(request.method);
+            if (request.method !== "initialize" || registration?.requiresInit !== false) {
+                return { id: request.id, error: notInitializedError() };
+            }
+        }
+        if (connection.initialized && request.method === "initialize") {
+            return { id: request.id, error: alreadyInitializedError() };
+        }
+        const registration = this.methods.get(request.method);
+        if (!registration) {
+            return { id: request.id, error: methodNotFoundError(request.method) };
+        }
+        if (registration.experimental === true && connection.capabilities?.experimentalApi !== true) {
+            return { id: request.id, error: experimentalCapabilityError(request.method) };
+        }
+        try {
+            const result = await registration.handler({ connection, request });
+            return { id: request.id, result };
+        }
+        catch (error) {
+            if (error instanceof RpcHandlerError) {
+                return { id: request.id, error: error.rpcError };
+            }
+            return { id: request.id, error: internalError(error instanceof Error ? error.message : String(error)) };
+        }
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/modes/app-server/rpc/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/modes/app-server/rpc/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,uBAAuB,EACvB,2BAA2B,EAC3B,aAAa,EAEb,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,GACf,MAAM,aAAa,CAAC;AA4CrB,MAAM,UAAU,cAAc;IAC7B,OAAO,IAAI,sBAAsB,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,sBAAsB;IAA5B;QACkB,YAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IAqClE,CAAC;IAnCA,QAAQ,CAAC,MAAc,EAAE,YAAgC;QACxD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,UAA8B,EAAE,OAAmB;QACjE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,IAAI,YAAY,EAAE,YAAY,KAAK,KAAK,EAAE,CAAC;gBAC7E,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,CAAC;YACzD,CAAC;QACF,CAAC;QAED,IAAI,UAAU,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,CAAC;QAC7D,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvE,CAAC;QAED,IAAI,YAAY,CAAC,YAAY,KAAK,IAAI,IAAI,UAAU,CAAC,YAAY,EAAE,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7F,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/E,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;YACnE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACtC,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClD,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACzG,CAAC;IACF,CAAC;CACD","sourcesContent":["import {\n\talreadyInitializedError,\n\texperimentalCapabilityError,\n\tinternalError,\n\ttype JsonRpcError,\n\tmethodNotFoundError,\n\tnotInitializedError,\n\tRpcHandlerError,\n} from \"./errors.ts\";\n\nexport type RequestId = string | number | null;\n\nexport interface RpcRequest {\n\treadonly id: RequestId;\n\treadonly method: string;\n\treadonly params?: unknown;\n}\n\nexport type RpcResponse =\n\t| { readonly id: RequestId; readonly result: unknown }\n\t| { readonly id: RequestId; readonly error: JsonRpcError };\n\nexport interface ConnectionCapabilities {\n\treadonly experimentalApi?: boolean;\n}\n\nexport interface RegistryConnection {\n\treadonly initialized: boolean;\n\treadonly capabilities?: ConnectionCapabilities;\n}\n\nexport type MethodScope = \"thread\" | \"global\" | \"none\";\n\nexport interface MethodHandlerContext {\n\treadonly connection: RegistryConnection;\n\treadonly request: RpcRequest;\n}\n\nexport type MethodHandler = (context: MethodHandlerContext) => Promise<unknown> | unknown;\n\nexport interface MethodRegistration {\n\treadonly handler: MethodHandler;\n\treadonly experimental?: boolean;\n\treadonly requiresInit?: boolean;\n\treadonly scope?: MethodScope;\n}\n\nexport interface MethodRegistry {\n\tregister(method: string, registration: MethodRegistration): void;\n\tdispatch(connection: RegistryConnection, request: RpcRequest): Promise<RpcResponse>;\n}\n\nexport function createRegistry(): MethodRegistry {\n\treturn new InMemoryMethodRegistry();\n}\n\nclass InMemoryMethodRegistry implements MethodRegistry {\n\tprivate readonly methods = new Map<string, MethodRegistration>();\n\n\tregister(method: string, registration: MethodRegistration): void {\n\t\tthis.methods.set(method, registration);\n\t}\n\n\tasync dispatch(connection: RegistryConnection, request: RpcRequest): Promise<RpcResponse> {\n\t\tif (!connection.initialized) {\n\t\t\tconst registration = this.methods.get(request.method);\n\t\t\tif (request.method !== \"initialize\" || registration?.requiresInit !== false) {\n\t\t\t\treturn { id: request.id, error: notInitializedError() };\n\t\t\t}\n\t\t}\n\n\t\tif (connection.initialized && request.method === \"initialize\") {\n\t\t\treturn { id: request.id, error: alreadyInitializedError() };\n\t\t}\n\n\t\tconst registration = this.methods.get(request.method);\n\t\tif (!registration) {\n\t\t\treturn { id: request.id, error: methodNotFoundError(request.method) };\n\t\t}\n\n\t\tif (registration.experimental === true && connection.capabilities?.experimentalApi !== true) {\n\t\t\treturn { id: request.id, error: experimentalCapabilityError(request.method) };\n\t\t}\n\n\t\ttry {\n\t\t\tconst result = await registration.handler({ connection, request });\n\t\t\treturn { id: request.id, result };\n\t\t} catch (error) {\n\t\t\tif (error instanceof RpcHandlerError) {\n\t\t\t\treturn { id: request.id, error: error.rpcError };\n\t\t\t}\n\t\t\treturn { id: request.id, error: internalError(error instanceof Error ? error.message : String(error)) };\n\t\t}\n\t}\n}\n"]}

package/dist/modes/app-server/server/approval-bridge.d.ts

@@ -0,0 +1,22 @@
+import { type ApprovalKind, type ApprovalOutcome, type ApprovalPayload, type ApprovalResponse, type SendToThreadSubscribers } from "./approval-types.ts";
+export declare class ApprovalBridge {
+    private nextServerRequestId;
+    private readonly pending;
+    private readonly sessionAllows;
+    private readonly sendToThreadSubscribers;
+    constructor(sendToThreadSubscribers: SendToThreadSubscribers);
+    get pendingCount(): number;
+    requestApproval(threadId: string, kind: ApprovalKind, payload: ApprovalPayload): Promise<ApprovalOutcome>;
+    resolveResponse(response: ApprovalResponse): boolean;
+    /**
+     * Re-sends every pending approval request for a thread to its current
+     * subscribers. Wired to thread subscription (resume/start) so a client that
+     * reconnects mid-approval receives the blocking request again instead of the
+     * turn hanging forever with nobody able to answer. Duplicate deliveries are
+     * safe: responses resolve first-responder-wins and late ones are ignored.
+     */
+    replayPendingForThread(threadId: string): number;
+    cancelPendingForThread(threadId: string): number;
+    private emitResolved;
+}
+//# sourceMappingURL=approval-bridge.d.ts.map

package/dist/modes/app-server/server/approval-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-bridge.d.ts","sourceRoot":"","sources":["../../../../src/modes/app-server/server/approval-bridge.ts"],"names":[],"mappings":"AACA,OAAO,EAGN,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAIrB,KAAK,uBAAuB,EAC5B,MAAM,qBAAqB,CAAC;AAS7B,qBAAa,cAAc;IAC1B,OAAO,CAAC,mBAAmB,CAAK;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyC;IACjE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAA0B;IAElE,YAAY,uBAAuB,EAAE,uBAAuB,EAE3D;IAED,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAgBxG;IAED,eAAe,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAanD;IAED;;;;;;OAMG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAU/C;IAED,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAY/C;IAED,OAAO,CAAC,YAAY;CAMpB"}

package/dist/modes/app-server/server/approval-bridge.js

@@ -0,0 +1,135 @@
+import { APPROVAL_DECISIONS, CANCEL_REASON, NO_SUBSCRIBER_REASON, } from "./approval-types.js";
+export class ApprovalBridge {
+    constructor(sendToThreadSubscribers) {
+        this.nextServerRequestId = 0;
+        this.pending = new Map();
+        this.sessionAllows = new Set();
+        this.sendToThreadSubscribers = sendToThreadSubscribers;
+    }
+    get pendingCount() {
+        return this.pending.size;
+    }
+    requestApproval(threadId, kind, payload) {
+        const allowKey = createAllowKey(threadId, kind, payload);
+        if (allowKey && this.sessionAllows.has(allowKey)) {
+            return Promise.resolve({ allow: true, decision: "acceptForSession" });
+        }
+        const requestId = this.nextServerRequestId;
+        this.nextServerRequestId += 1;
+        const request = buildApprovalRequest(threadId, requestId, kind, payload);
+        return new Promise((resolve) => {
+            this.pending.set(requestId, { threadId, request, allowKey, resolve });
+            if (this.sendToThreadSubscribers(threadId, request) > 0) {
+                return;
+            }
+            this.pending.delete(requestId);
+            resolve({ allow: false, decision: "decline", reason: NO_SUBSCRIBER_REASON });
+        });
+    }
+    resolveResponse(response) {
+        const pending = this.pending.get(response.id);
+        if (!pending) {
+            return false;
+        }
+        const decision = readDecision(response);
+        this.pending.delete(response.id);
+        if (decision === "acceptForSession" && pending.allowKey) {
+            this.sessionAllows.add(pending.allowKey);
+        }
+        this.emitResolved(pending.threadId, response.id);
+        pending.resolve(decisionToOutcome(decision, readReason(response)));
+        return true;
+    }
+    /**
+     * Re-sends every pending approval request for a thread to its current
+     * subscribers. Wired to thread subscription (resume/start) so a client that
+     * reconnects mid-approval receives the blocking request again instead of the
+     * turn hanging forever with nobody able to answer. Duplicate deliveries are
+     * safe: responses resolve first-responder-wins and late ones are ignored.
+     */
+    replayPendingForThread(threadId) {
+        let replayed = 0;
+        for (const pending of this.pending.values()) {
+            if (pending.threadId !== threadId) {
+                continue;
+            }
+            this.sendToThreadSubscribers(threadId, pending.request);
+            replayed += 1;
+        }
+        return replayed;
+    }
+    cancelPendingForThread(threadId) {
+        let cancelled = 0;
+        for (const [requestId, pending] of Array.from(this.pending.entries())) {
+            if (pending.threadId !== threadId) {
+                continue;
+            }
+            this.pending.delete(requestId);
+            this.emitResolved(threadId, requestId);
+            pending.resolve({ allow: false, decision: "cancel", reason: CANCEL_REASON });
+            cancelled += 1;
+        }
+        return cancelled;
+    }
+    emitResolved(threadId, requestId) {
+        this.sendToThreadSubscribers(threadId, {
+            method: "serverRequest/resolved",
+            params: { threadId, requestId },
+        });
+    }
+}
+function buildApprovalRequest(threadId, requestId, kind, payload) {
+    const base = {
+        threadId,
+        turnId: payload.turnId ?? "turn-approval",
+        itemId: payload.itemId ?? (kind === "commandExecution" ? "approval-command" : "approval-file-change"),
+        startedAtMs: Date.now(),
+    };
+    if (kind === "fileChange") {
+        return {
+            id: requestId,
+            method: "item/fileChange/requestApproval",
+            params: { ...base, reason: payload.reason ?? null, grantRoot: payload.grantRoot ?? null },
+        };
+    }
+    return {
+        id: requestId,
+        method: "item/commandExecution/requestApproval",
+        params: {
+            ...base,
+            approvalId: payload.approvalId ?? null,
+            environmentId: payload.environmentId ?? null,
+            reason: payload.reason ?? null,
+            command: payload.command ?? null,
+            cwd: payload.cwd ?? null,
+            availableDecisions: [...APPROVAL_DECISIONS],
+        },
+    };
+}
+function decisionToOutcome(decision, reason) {
+    if (decision === "accept" || decision === "acceptForSession")
+        return { allow: true, decision };
+    return reason ? { allow: false, decision, reason } : { allow: false, decision };
+}
+function readDecision(response) {
+    const decision = isRecord(response.result) ? response.result.decision : undefined;
+    return isApprovalDecision(decision) ? decision : "cancel";
+}
+function readReason(response) {
+    const resultReason = isRecord(response.result) ? (response.result.reason ?? response.result.message) : undefined;
+    const errorReason = isRecord(response.error) ? response.error.message : undefined;
+    const reason = typeof resultReason === "string" ? resultReason : errorReason;
+    return typeof reason === "string" && reason.length > 0 ? reason : undefined;
+}
+function createAllowKey(threadId, kind, payload) {
+    if (!payload.toolName || typeof payload.command !== "string")
+        return undefined;
+    return `${threadId}\0${kind}\0${payload.toolName}\0${payload.command}`;
+}
+function isApprovalDecision(value) {
+    return value === "accept" || value === "acceptForSession" || value === "decline" || value === "cancel";
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=approval-bridge.js.map

package/dist/modes/app-server/server/approval-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-bridge.js","sourceRoot":"","sources":["../../../../src/modes/app-server/server/approval-bridge.ts"],"names":[],"mappings":"AACA,OAAO,EACN,kBAAkB,EAOlB,aAAa,EACb,oBAAoB,GAEpB,MAAM,qBAAqB,CAAC;AAS7B,MAAM,OAAO,cAAc;IAM1B,YAAY,uBAAgD;QALpD,wBAAmB,GAAG,CAAC,CAAC;QACf,YAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;QAChD,kBAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QAIlD,IAAI,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;IACxD,CAAC;IAED,IAAI,YAAY;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1B,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,IAAkB,EAAE,OAAwB;QAC7E,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,QAAQ,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC;QAC3C,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YACtE,IAAI,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzD,OAAO;YACR,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,QAA0B;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,QAAQ,KAAK,kBAAkB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;OAMG;IACH,sBAAsB,CAAC,QAAgB;QACtC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnC,SAAS;YACV,CAAC;YACD,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACxD,QAAQ,IAAI,CAAC,CAAC;QACf,CAAC;QACD,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,sBAAsB,CAAC,QAAgB;QACtC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnC,SAAS;YACV,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACvC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YAC7E,SAAS,IAAI,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,YAAY,CAAC,QAAgB,EAAE,SAAoB;QAC1D,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE;YACtC,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;SAC/B,CAAC,CAAC;IACJ,CAAC;CACD;AAED,SAAS,oBAAoB,CAC5B,QAAgB,EAChB,SAAoB,EACpB,IAAkB,EAClB,OAAwB;IAExB,MAAM,IAAI,GAAG;QACZ,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,eAAe;QACzC,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC;QACrG,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAC;IACF,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC3B,OAAO;YACN,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,iCAAiC;YACzC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE;SACzF,CAAC;IACH,CAAC;IACD,OAAO;QACN,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,uCAAuC;QAC/C,MAAM,EAAE;YACP,GAAG,IAAI;YACP,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;YACtC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;YAC5C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;YAChC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI;YACxB,kBAAkB,EAAE,CAAC,GAAG,kBAAkB,CAAC;SAC3C;KACD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA0B,EAAE,MAA0B;IAChF,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,kBAAkB;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC/F,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,YAAY,CAAC,QAA0B;IAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,QAA0B;IAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjH,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,MAAM,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IAC7E,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,IAAkB,EAAE,OAAwB;IACrF,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/E,OAAO,GAAG,QAAQ,KAAK,IAAI,KAAK,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;AACxE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,kBAAkB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,CAAC;AACxG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["import type { RequestId } from \"../protocol/index.ts\";\nimport {\n\tAPPROVAL_DECISIONS,\n\ttype ApprovalDecision,\n\ttype ApprovalKind,\n\ttype ApprovalOutcome,\n\ttype ApprovalPayload,\n\ttype ApprovalResponse,\n\ttype AppServerApprovalRequest,\n\tCANCEL_REASON,\n\tNO_SUBSCRIBER_REASON,\n\ttype SendToThreadSubscribers,\n} from \"./approval-types.ts\";\n\ntype PendingApproval = Readonly<{\n\tthreadId: string;\n\trequest: AppServerApprovalRequest;\n\tallowKey: string | undefined;\n\tresolve: (outcome: ApprovalOutcome) => void;\n}>;\n\nexport class ApprovalBridge {\n\tprivate nextServerRequestId = 0;\n\tprivate readonly pending = new Map<RequestId, PendingApproval>();\n\tprivate readonly sessionAllows = new Set<string>();\n\tprivate readonly sendToThreadSubscribers: SendToThreadSubscribers;\n\n\tconstructor(sendToThreadSubscribers: SendToThreadSubscribers) {\n\t\tthis.sendToThreadSubscribers = sendToThreadSubscribers;\n\t}\n\n\tget pendingCount(): number {\n\t\treturn this.pending.size;\n\t}\n\n\trequestApproval(threadId: string, kind: ApprovalKind, payload: ApprovalPayload): Promise<ApprovalOutcome> {\n\t\tconst allowKey = createAllowKey(threadId, kind, payload);\n\t\tif (allowKey && this.sessionAllows.has(allowKey)) {\n\t\t\treturn Promise.resolve({ allow: true, decision: \"acceptForSession\" });\n\t\t}\n\t\tconst requestId = this.nextServerRequestId;\n\t\tthis.nextServerRequestId += 1;\n\t\tconst request = buildApprovalRequest(threadId, requestId, kind, payload);\n\t\treturn new Promise((resolve) => {\n\t\t\tthis.pending.set(requestId, { threadId, request, allowKey, resolve });\n\t\t\tif (this.sendToThreadSubscribers(threadId, request) > 0) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tthis.pending.delete(requestId);\n\t\t\tresolve({ allow: false, decision: \"decline\", reason: NO_SUBSCRIBER_REASON });\n\t\t});\n\t}\n\n\tresolveResponse(response: ApprovalResponse): boolean {\n\t\tconst pending = this.pending.get(response.id);\n\t\tif (!pending) {\n\t\t\treturn false;\n\t\t}\n\t\tconst decision = readDecision(response);\n\t\tthis.pending.delete(response.id);\n\t\tif (decision === \"acceptForSession\" && pending.allowKey) {\n\t\t\tthis.sessionAllows.add(pending.allowKey);\n\t\t}\n\t\tthis.emitResolved(pending.threadId, response.id);\n\t\tpending.resolve(decisionToOutcome(decision, readReason(response)));\n\t\treturn true;\n\t}\n\n\t/**\n\t * Re-sends every pending approval request for a thread to its current\n\t * subscribers. Wired to thread subscription (resume/start) so a client that\n\t * reconnects mid-approval receives the blocking request again instead of the\n\t * turn hanging forever with nobody able to answer. Duplicate deliveries are\n\t * safe: responses resolve first-responder-wins and late ones are ignored.\n\t */\n\treplayPendingForThread(threadId: string): number {\n\t\tlet replayed = 0;\n\t\tfor (const pending of this.pending.values()) {\n\t\t\tif (pending.threadId !== threadId) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tthis.sendToThreadSubscribers(threadId, pending.request);\n\t\t\treplayed += 1;\n\t\t}\n\t\treturn replayed;\n\t}\n\n\tcancelPendingForThread(threadId: string): number {\n\t\tlet cancelled = 0;\n\t\tfor (const [requestId, pending] of Array.from(this.pending.entries())) {\n\t\t\tif (pending.threadId !== threadId) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tthis.pending.delete(requestId);\n\t\t\tthis.emitResolved(threadId, requestId);\n\t\t\tpending.resolve({ allow: false, decision: \"cancel\", reason: CANCEL_REASON });\n\t\t\tcancelled += 1;\n\t\t}\n\t\treturn cancelled;\n\t}\n\n\tprivate emitResolved(threadId: string, requestId: RequestId): void {\n\t\tthis.sendToThreadSubscribers(threadId, {\n\t\t\tmethod: \"serverRequest/resolved\",\n\t\t\tparams: { threadId, requestId },\n\t\t});\n\t}\n}\n\nfunction buildApprovalRequest(\n\tthreadId: string,\n\trequestId: RequestId,\n\tkind: ApprovalKind,\n\tpayload: ApprovalPayload,\n): AppServerApprovalRequest {\n\tconst base = {\n\t\tthreadId,\n\t\tturnId: payload.turnId ?? \"turn-approval\",\n\t\titemId: payload.itemId ?? (kind === \"commandExecution\" ? \"approval-command\" : \"approval-file-change\"),\n\t\tstartedAtMs: Date.now(),\n\t};\n\tif (kind === \"fileChange\") {\n\t\treturn {\n\t\t\tid: requestId,\n\t\t\tmethod: \"item/fileChange/requestApproval\",\n\t\t\tparams: { ...base, reason: payload.reason ?? null, grantRoot: payload.grantRoot ?? null },\n\t\t};\n\t}\n\treturn {\n\t\tid: requestId,\n\t\tmethod: \"item/commandExecution/requestApproval\",\n\t\tparams: {\n\t\t\t...base,\n\t\t\tapprovalId: payload.approvalId ?? null,\n\t\t\tenvironmentId: payload.environmentId ?? null,\n\t\t\treason: payload.reason ?? null,\n\t\t\tcommand: payload.command ?? null,\n\t\t\tcwd: payload.cwd ?? null,\n\t\t\tavailableDecisions: [...APPROVAL_DECISIONS],\n\t\t},\n\t};\n}\n\nfunction decisionToOutcome(decision: ApprovalDecision, reason: string | undefined): ApprovalOutcome {\n\tif (decision === \"accept\" || decision === \"acceptForSession\") return { allow: true, decision };\n\treturn reason ? { allow: false, decision, reason } : { allow: false, decision };\n}\n\nfunction readDecision(response: ApprovalResponse): ApprovalDecision {\n\tconst decision = isRecord(response.result) ? response.result.decision : undefined;\n\treturn isApprovalDecision(decision) ? decision : \"cancel\";\n}\n\nfunction readReason(response: ApprovalResponse): string | undefined {\n\tconst resultReason = isRecord(response.result) ? (response.result.reason ?? response.result.message) : undefined;\n\tconst errorReason = isRecord(response.error) ? response.error.message : undefined;\n\tconst reason = typeof resultReason === \"string\" ? resultReason : errorReason;\n\treturn typeof reason === \"string\" && reason.length > 0 ? reason : undefined;\n}\n\nfunction createAllowKey(threadId: string, kind: ApprovalKind, payload: ApprovalPayload): string | undefined {\n\tif (!payload.toolName || typeof payload.command !== \"string\") return undefined;\n\treturn `${threadId}\\0${kind}\\0${payload.toolName}\\0${payload.command}`;\n}\n\nfunction isApprovalDecision(value: unknown): value is ApprovalDecision {\n\treturn value === \"accept\" || value === \"acceptForSession\" || value === \"decline\" || value === \"cancel\";\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/modes/app-server/server/approval-redaction.d.ts

@@ -0,0 +1,3 @@
+export declare function readSecretQuestionIds(params: unknown): ReadonlySet<string>;
+export declare function redactSecretAnswers(response: unknown, secretQuestionIds: ReadonlySet<string>): unknown;
+//# sourceMappingURL=approval-redaction.d.ts.map

package/dist/modes/app-server/server/approval-redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-redaction.d.ts","sourceRoot":"","sources":["../../../../src/modes/app-server/server/approval-redaction.ts"],"names":[],"mappings":"AAAA,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAU1E;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAStG"}

package/dist/modes/app-server/server/approval-redaction.js

@@ -0,0 +1,34 @@
+export function readSecretQuestionIds(params) {
+    const questions = isRecord(params) && Array.isArray(params.questions) ? params.questions : [];
+    const ids = questions.flatMap((question) => {
+        if (!isRecord(question) || (question.isSecret !== true && question.is_secret !== true)) {
+            return [];
+        }
+        const id = readString(question, "id");
+        return id ? [id] : [];
+    });
+    return new Set(ids);
+}
+export function redactSecretAnswers(response, secretQuestionIds) {
+    if (secretQuestionIds.size === 0 || !isRecord(response) || !isRecord(response.answers)) {
+        return response;
+    }
+    const redactedAnswers = {};
+    for (const [questionId, answer] of Object.entries(response.answers)) {
+        redactedAnswers[questionId] = secretQuestionIds.has(questionId) ? redactAnswer(answer) : answer;
+    }
+    return { ...response, answers: redactedAnswers };
+}
+function redactAnswer(answer) {
+    return isRecord(answer) && Array.isArray(answer.answers)
+        ? { ...answer, answers: answer.answers.map(() => "[REDACTED]") }
+        : answer;
+}
+function readString(input, key) {
+    const value = input[key];
+    return typeof value === "string" ? value : undefined;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=approval-redaction.js.map

package/dist/modes/app-server/server/approval-redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-redaction.js","sourceRoot":"","sources":["../../../../src/modes/app-server/server/approval-redaction.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,qBAAqB,CAAC,MAAe;IACpD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC1C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,EAAE,CAAC;YACxF,OAAO,EAAE,CAAC;QACX,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAiB,EAAE,iBAAsC;IAC5F,IAAI,iBAAiB,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxF,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,MAAM,eAAe,GAA4B,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACrE,eAAe,CAAC,UAAU,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjG,CAAC;IACD,OAAO,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,MAAe;IACpC,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QACvD,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE;QAChE,CAAC,CAAC,MAAM,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,KAAwC,EAAE,GAAW;IACxE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC","sourcesContent":["export function readSecretQuestionIds(params: unknown): ReadonlySet<string> {\n\tconst questions = isRecord(params) && Array.isArray(params.questions) ? params.questions : [];\n\tconst ids = questions.flatMap((question) => {\n\t\tif (!isRecord(question) || (question.isSecret !== true && question.is_secret !== true)) {\n\t\t\treturn [];\n\t\t}\n\t\tconst id = readString(question, \"id\");\n\t\treturn id ? [id] : [];\n\t});\n\treturn new Set(ids);\n}\n\nexport function redactSecretAnswers(response: unknown, secretQuestionIds: ReadonlySet<string>): unknown {\n\tif (secretQuestionIds.size === 0 || !isRecord(response) || !isRecord(response.answers)) {\n\t\treturn response;\n\t}\n\tconst redactedAnswers: Record<string, unknown> = {};\n\tfor (const [questionId, answer] of Object.entries(response.answers)) {\n\t\tredactedAnswers[questionId] = secretQuestionIds.has(questionId) ? redactAnswer(answer) : answer;\n\t}\n\treturn { ...response, answers: redactedAnswers };\n}\n\nfunction redactAnswer(answer: unknown): unknown {\n\treturn isRecord(answer) && Array.isArray(answer.answers)\n\t\t? { ...answer, answers: answer.answers.map(() => \"[REDACTED]\") }\n\t\t: answer;\n}\n\nfunction readString(input: Readonly<Record<string, unknown>>, key: string): string | undefined {\n\tconst value = input[key];\n\treturn typeof value === \"string\" ? value : undefined;\n}\n\nfunction isRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/modes/app-server/server/approval-types.d.ts

@@ -0,0 +1,42 @@
+import type { JsonValue, RequestId } from "../protocol/index.ts";
+export type ApprovalKind = "commandExecution" | "fileChange";
+export type ApprovalDecision = "accept" | "acceptForSession" | "decline" | "cancel";
+export type ApprovalOutcome = {
+    readonly allow: boolean;
+    readonly decision: ApprovalDecision;
+    readonly reason?: string;
+};
+export type ApprovalPayload = Readonly<{
+    turnId?: string;
+    itemId?: string;
+    approvalId?: string | null;
+    environmentId?: string | null;
+    reason?: string | null;
+    toolName?: string;
+    command?: string | null;
+    cwd?: string | null;
+    grantRoot?: string | null;
+}>;
+export type AppServerApprovalRequest = Readonly<{
+    id: RequestId;
+    method: "item/commandExecution/requestApproval" | "item/fileChange/requestApproval";
+    params: JsonValue;
+}>;
+export type AppServerOutboundMessage = AppServerApprovalRequest | {
+    readonly method: "serverRequest/resolved";
+    readonly params: {
+        readonly threadId: string;
+        readonly requestId: RequestId;
+    };
+};
+export type SendToThreadSubscribers = (threadId: string, message: AppServerOutboundMessage) => number;
+export type ApprovalResponse = {
+    readonly id: RequestId;
+    readonly result?: unknown;
+    readonly error?: unknown;
+};
+export declare const APPROVAL_DECISIONS: readonly ["accept", "acceptForSession", "decline", "cancel"];
+export declare const PERMISSION_OPTIONS: readonly ["Allow once", "Allow always", "Deny", "Deny with feedback"];
+export declare const CANCEL_REASON = "approval request was cancelled because the turn ended";
+export declare const NO_SUBSCRIBER_REASON = "no client connected to approve";
+//# sourceMappingURL=approval-types.d.ts.map

package/dist/modes/app-server/server/approval-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-types.d.ts","sourceRoot":"","sources":["../../../../src/modes/app-server/server/approval-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjE,MAAM,MAAM,YAAY,GAAG,kBAAkB,GAAG,YAAY,CAAC;AAC7D,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,kBAAkB,GAAG,SAAS,GAAG,QAAQ,CAAC;AACpF,MAAM,MAAM,eAAe,GAAG;IAC7B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AACF,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC,CAAC;AACH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC/C,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,uCAAuC,GAAG,iCAAiC,CAAC;IACpF,MAAM,EAAE,SAAS,CAAC;CAClB,CAAC,CAAC;AACH,MAAM,MAAM,wBAAwB,GACjC,wBAAwB,GACxB;IACA,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;KAAE,CAAC;CAC7E,CAAC;AACL,MAAM,MAAM,uBAAuB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,KAAK,MAAM,CAAC;AACtG,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/G,eAAO,MAAM,kBAAkB,YAAI,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAC/F,eAAO,MAAM,kBAAkB,YAAI,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,oBAAoB,CAAU,CAAC;AACxG,eAAO,MAAM,aAAa,0DAA0D,CAAC;AACrF,eAAO,MAAM,oBAAoB,mCAAmC,CAAC"}

package/dist/modes/app-server/server/approval-types.js

@@ -0,0 +1,5 @@
+export const APPROVAL_DECISIONS = ["accept", "acceptForSession", "decline", "cancel"];
+export const PERMISSION_OPTIONS = ["Allow once", "Allow always", "Deny", "Deny with feedback"];
+export const CANCEL_REASON = "approval request was cancelled because the turn ended";
+export const NO_SUBSCRIBER_REASON = "no client connected to approve";
+//# sourceMappingURL=approval-types.js.map

package/dist/modes/app-server/server/approval-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-types.js","sourceRoot":"","sources":["../../../../src/modes/app-server/server/approval-types.ts"],"names":[],"mappings":"AAkCA,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAC/F,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,oBAAoB,CAAU,CAAC;AACxG,MAAM,CAAC,MAAM,aAAa,GAAG,uDAAuD,CAAC;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,gCAAgC,CAAC","sourcesContent":["import type { JsonValue, RequestId } from \"../protocol/index.ts\";\n\nexport type ApprovalKind = \"commandExecution\" | \"fileChange\";\nexport type ApprovalDecision = \"accept\" | \"acceptForSession\" | \"decline\" | \"cancel\";\nexport type ApprovalOutcome = {\n\treadonly allow: boolean;\n\treadonly decision: ApprovalDecision;\n\treadonly reason?: string;\n};\nexport type ApprovalPayload = Readonly<{\n\tturnId?: string;\n\titemId?: string;\n\tapprovalId?: string | null;\n\tenvironmentId?: string | null;\n\treason?: string | null;\n\ttoolName?: string;\n\tcommand?: string | null;\n\tcwd?: string | null;\n\tgrantRoot?: string | null;\n}>;\nexport type AppServerApprovalRequest = Readonly<{\n\tid: RequestId;\n\tmethod: \"item/commandExecution/requestApproval\" | \"item/fileChange/requestApproval\";\n\tparams: JsonValue;\n}>;\nexport type AppServerOutboundMessage =\n\t| AppServerApprovalRequest\n\t| {\n\t\t\treadonly method: \"serverRequest/resolved\";\n\t\t\treadonly params: { readonly threadId: string; readonly requestId: RequestId };\n\t  };\nexport type SendToThreadSubscribers = (threadId: string, message: AppServerOutboundMessage) => number;\nexport type ApprovalResponse = { readonly id: RequestId; readonly result?: unknown; readonly error?: unknown };\n\nexport const APPROVAL_DECISIONS = [\"accept\", \"acceptForSession\", \"decline\", \"cancel\"] as const;\nexport const PERMISSION_OPTIONS = [\"Allow once\", \"Allow always\", \"Deny\", \"Deny with feedback\"] as const;\nexport const CANCEL_REASON = \"approval request was cancelled because the turn ended\";\nexport const NO_SUBSCRIBER_REASON = \"no client connected to approve\";\n"]}

package/dist/modes/app-server/server/approval-ui-context.d.ts

@@ -0,0 +1,4 @@
+import type { ExtensionUIContext } from "../../../core/extensions/index.ts";
+import type { ApprovalBridge } from "./approval-bridge.ts";
+export declare function createAppServerUIContext(bridge: ApprovalBridge, threadId: string): ExtensionUIContext;
+//# sourceMappingURL=approval-ui-context.d.ts.map

package/dist/modes/app-server/server/approval-ui-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-ui-context.d.ts","sourceRoot":"","sources":["../../../../src/modes/app-server/server/approval-ui-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAE5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAK3D,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,kBAAkB,CA4FrG"}