@corenel/harness 0.20.0 → 0.22.0

package/dist/sidecar/askUserBroker.js

@@ -0,0 +1,103 @@
+/** One seat's delivery; a dead connection must not stop the others'. */
+function deliver(seat, prompt) {
+    try {
+        seat.ask(prompt);
+    }
+    catch {
+        // The seat's own connection is gone; its leave follows.
+    }
+}
+export class AskUserBroker {
+    constructor() {
+        Object.defineProperty(this, "seq", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 0
+        });
+        Object.defineProperty(this, "seats", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: new Set()
+        });
+        Object.defineProperty(this, "open", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: new Map()
+        });
+    }
+    /** Seat a connection. Asks still open for its user are delivered to it at
+     * once, so a reconnecting device picks up a question already showing
+     * elsewhere. Returns the leave function. */
+    join(seat) {
+        this.seats.add(seat);
+        for (const a of this.open.values()) {
+            if (!a.users.has(seat.userId) || a.shown.has(seat))
+                continue;
+            a.shown.add(seat);
+            deliver(seat, a.prompt);
+        }
+        return () => {
+            this.seats.delete(seat);
+            for (const a of this.open.values())
+                a.shown.delete(seat);
+        };
+    }
+    /** Ask `users`. Resolves with the first answer from a seat it was shown to,
+     * or null once `signal` ends. Nobody seated yet is not an answer: the ask
+     * waits for one of them to join or for the signal. */
+    ask(q, signal) {
+        if (signal.aborted)
+            return Promise.resolve(null);
+        const users = new Set(q.users.filter((u) => typeof u === 'string' && u !== ''));
+        const id = ++this.seq;
+        const prompt = { id, runId: q.runId, agent: q.agent, questions: q.questions, deadline: q.deadline };
+        return new Promise((resolve) => {
+            const onAbort = () => { this.finish(id, null, 'timeout', null); };
+            const entry = {
+                prompt, users, shown: new Set(),
+                settle: (answers) => {
+                    signal.removeEventListener('abort', onAbort);
+                    resolve(answers);
+                },
+            };
+            this.open.set(id, entry);
+            signal.addEventListener('abort', onAbort, { once: true });
+            for (const seat of this.seats) {
+                if (!users.has(seat.userId))
+                    continue;
+                entry.shown.add(seat);
+                deliver(seat, prompt);
+            }
+        });
+    }
+    /** `seat` answers ask `id`. Ignored, returning false, for an unknown or
+     * settled id or a seat the ask was never shown to. */
+    answer(id, seat, answers) {
+        const a = this.open.get(id);
+        if (!a || !a.shown.has(seat) || !this.seats.has(seat))
+            return false;
+        this.finish(id, answers, 'client', seat);
+        return true;
+    }
+    finish(id, answers, by, answeredBy) {
+        const a = this.open.get(id);
+        if (!a)
+            return;
+        this.open.delete(id);
+        a.settle(answers);
+        for (const seat of a.shown) {
+            if (seat === answeredBy)
+                continue;
+            try {
+                seat.resolved(id, by);
+            }
+            catch {
+                // One dead connection must not keep the others' prompts up.
+            }
+        }
+    }
+}
+//# sourceMappingURL=askUserBroker.js.map

package/dist/sidecar/askUserBroker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"askUserBroker.js","sourceRoot":"","sources":["../../sidecar/askUserBroker.ts"],"names":[],"mappings":"AAqCA,wEAAwE;AACxE,SAAS,OAAO,CAAC,IAAiB,EAAE,MAAqB;IACvD,IAAI,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,OAAO,aAAa;IAA1B;QACU;;;;mBAAM,CAAC;WAAC;QACC;;;;mBAAQ,IAAI,GAAG,EAAe;WAAC;QAC/B;;;;mBAAO,IAAI,GAAG,EAAmB;WAAC;IAoErD,CAAC;IAlEC;;gDAE4C;IAC5C,IAAI,CAAC,IAAiB;QACpB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7D,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,CAAC,CAAC;IACJ,CAAC;IAED;;0DAEsD;IACtD,GAAG,CAAC,CAAyG,EAAE,MAAmB;QAChI,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC;QACtB,MAAM,MAAM,GAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnH,OAAO,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;YAChD,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACxE,MAAM,KAAK,GAAY;gBACrB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE;gBAC/B,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE;oBAClB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC7C,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnB,CAAC;aACF,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACzB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,SAAS;gBACtC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;0DACsD;IACtD,MAAM,CAAC,EAAU,EAAE,IAAiB,EAAE,OAA0B;QAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,MAAM,CAAC,EAAU,EAAE,OAA0B,EAAE,EAAwB,EAAE,UAA8B;QAC7G,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,IAAI,KAAK,UAAU;gBAAE,SAAS;YAClC,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/sidecar/fleetJwe.d.ts

@@ -0,0 +1,25 @@
+import type { EcPublicJwk } from '@corenel/protocol';
+export interface EncryptionKeyPair {
+    publicJwk: EcPublicJwk;
+    privateKey: CryptoKey;
+}
+export declare const JWE_ALG = "ECDH-ES";
+export declare const JWE_ENC = "A256GCM";
+/** The Concat KDF of RFC 7518 4.6.2 (NIST SP 800-56A, SHA-256) for a key of at
+ * most 256 bits, so one hash round: SHA-256(counter 1 || Z || OtherInfo). For
+ * ECDH-ES direct agreement `algorithmId` is the `enc` value. */
+export declare function concatKdf(z: Uint8Array, algorithmId: string, keyBits: number, apu?: Uint8Array, apv?: Uint8Array): Promise<Uint8Array<ArrayBuffer>>;
+/** A fresh encryption key pair. The private JWK is for the caller to store
+ * (mode 0600, like the node signing key); load it back with importEncryptionPrivateKey. */
+export declare function generateEncryptionKey(): Promise<{
+    publicJwk: EcPublicJwk;
+    privateJwk: JsonWebKey;
+}>;
+/** The stored private JWK as a non-extractable ECDH key that can only derive bits. */
+export declare function importEncryptionPrivateKey(privateJwk: JsonWebKey): Promise<CryptoKey>;
+/** `plaintext` sealed to `recipient`: compact JWE with header { alg: ECDH-ES, enc: A256GCM, typ, epk } and an empty encrypted key. */
+export declare function sealJwe(recipient: EcPublicJwk, typ: string, plaintext: string): Promise<string>;
+/** The plaintext if `jwe` is a compact JWE of purpose `typ` sealed to `privateKey`, else null. Never throws:
+ * a wrong key, a wrong typ, any other header member, a changed byte, or a malformed token is null. */
+export declare function openJwe(privateKey: CryptoKey, typ: string, jwe: string): Promise<string | null>;
+//# sourceMappingURL=fleetJwe.d.ts.map

package/dist/sidecar/fleetJwe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleetJwe.d.ts","sourceRoot":"","sources":["../../sidecar/fleetJwe.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,MAAM,WAAW,iBAAiB;IAAG,SAAS,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,SAAS,CAAA;CAAE;AAEpF,eAAO,MAAM,OAAO,YAAY,CAAC;AACjC,eAAO,MAAM,OAAO,YAAY,CAAC;AA0BjC;;gEAEgE;AAChE,wBAAsB,SAAS,CAC7B,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,UAA8B,EAAE,GAAG,GAAE,UAA8B,GAC5H,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAKlC;AAQD;2FAC2F;AAC3F,wBAAsB,qBAAqB,IAAI,OAAO,CAAC;IAAE,SAAS,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CAAC,CAMzG;AAED,sFAAsF;AACtF,wBAAsB,0BAA0B,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAO3F;AAED,sIAAsI;AACtI,wBAAsB,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBrG;AAED;sGACsG;AACtG,wBAAsB,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAwBrG"}

package/dist/sidecar/fleetJwe.js

@@ -0,0 +1,115 @@
+import { asEcPublicJwk, b64urlToBytes, bytesToB64url } from './deviceKeys.js';
+export const JWE_ALG = 'ECDH-ES';
+export const JWE_ENC = 'A256GCM';
+const ECDH = { name: 'ECDH', namedCurve: 'P-256' };
+const HEADER_KEYS = ['alg', 'enc', 'typ', 'epk'];
+const IV_BYTES = 12;
+const TAG_BYTES = 16;
+const B64URL = /^[A-Za-z0-9_-]+$/;
+const te = new TextEncoder();
+const isObj = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+function concat(...parts) {
+    const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let at = 0;
+    for (const p of parts) {
+        out.set(p, at);
+        at += p.length;
+    }
+    return out;
+}
+function u32(n) {
+    const out = new Uint8Array(4);
+    new DataView(out.buffer).setUint32(0, n);
+    return out;
+}
+const lengthPrefixed = (b) => concat(u32(b.length), b);
+/** The Concat KDF of RFC 7518 4.6.2 (NIST SP 800-56A, SHA-256) for a key of at
+ * most 256 bits, so one hash round: SHA-256(counter 1 || Z || OtherInfo). For
+ * ECDH-ES direct agreement `algorithmId` is the `enc` value. */
+export async function concatKdf(z, algorithmId, keyBits, apu = new Uint8Array(0), apv = new Uint8Array(0)) {
+    if (!Number.isInteger(keyBits) || keyBits < 8 || keyBits > 256 || keyBits % 8 !== 0)
+        throw new Error('concatKdf derives 8 to 256 bits, in whole bytes');
+    const otherInfo = concat(lengthPrefixed(te.encode(algorithmId)), lengthPrefixed(apu), lengthPrefixed(apv), u32(keyBits));
+    const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', concat(u32(1), z, otherInfo)));
+    return digest.slice(0, keyBits / 8);
+}
+async function contentKey(privateKey, peer, usage) {
+    const pub = await crypto.subtle.importKey('jwk', { kty: peer.kty, crv: peer.crv, x: peer.x, y: peer.y }, ECDH, false, []);
+    const z = new Uint8Array(await crypto.subtle.deriveBits({ name: 'ECDH', public: pub }, privateKey, 256));
+    return crypto.subtle.importKey('raw', await concatKdf(z, JWE_ENC, 256), { name: 'AES-GCM' }, false, [usage]);
+}
+/** A fresh encryption key pair. The private JWK is for the caller to store
+ * (mode 0600, like the node signing key); load it back with importEncryptionPrivateKey. */
+export async function generateEncryptionKey() {
+    const pair = await crypto.subtle.generateKey(ECDH, true, ['deriveBits']);
+    const privateJwk = { ...(await crypto.subtle.exportKey('jwk', pair.privateKey)), key_ops: ['deriveBits'] };
+    const publicJwk = asEcPublicJwk({ kty: privateJwk.kty, crv: privateJwk.crv, x: privateJwk.x, y: privateJwk.y });
+    if (!publicJwk || typeof privateJwk.d !== 'string')
+        throw new Error('not a P-256 key');
+    return { publicJwk, privateJwk };
+}
+/** The stored private JWK as a non-extractable ECDH key that can only derive bits. */
+export async function importEncryptionPrivateKey(privateJwk) {
+    const pub = asEcPublicJwk({ kty: privateJwk.kty, crv: privateJwk.crv, x: privateJwk.x, y: privateJwk.y });
+    if (!pub || typeof privateJwk.d !== 'string')
+        throw new Error('not a P-256 private key');
+    /* Only a key stored as an encryption key imports. The node signing key is stored as bare { kty, crv, x, y, d } with
+     * no key_ops, so a missing key_ops is refused too: a signing key never doubles as a key-agreement key. */
+    if (!privateJwk.key_ops?.includes('deriveBits'))
+        throw new Error('not an encryption key');
+    return crypto.subtle.importKey('jwk', { kty: 'EC', crv: 'P-256', x: pub.x, y: pub.y, d: privateJwk.d }, ECDH, false, ['deriveBits']);
+}
+/** `plaintext` sealed to `recipient`: compact JWE with header { alg: ECDH-ES, enc: A256GCM, typ, epk } and an empty encrypted key. */
+export async function sealJwe(recipient, typ, plaintext) {
+    const to = asEcPublicJwk(recipient);
+    if (!to)
+        throw new Error('the recipient is not a P-256 public key');
+    const eph = await crypto.subtle.generateKey(ECDH, true, ['deriveBits']);
+    const e = await crypto.subtle.exportKey('jwk', eph.publicKey);
+    const epk = asEcPublicJwk({ kty: e.kty, crv: e.crv, x: e.x, y: e.y });
+    if (!epk)
+        throw new Error('not a P-256 key');
+    const header = bytesToB64url(te.encode(JSON.stringify({ alg: JWE_ALG, enc: JWE_ENC, typ, epk })));
+    const iv = new Uint8Array(IV_BYTES);
+    crypto.getRandomValues(iv);
+    const key = await contentKey(eph.privateKey, to, 'encrypt');
+    const sealed = new Uint8Array(await crypto.subtle.encrypt({ name: 'AES-GCM', iv, additionalData: te.encode(header), tagLength: TAG_BYTES * 8 }, key, te.encode(plaintext)));
+    const ct = sealed.slice(0, sealed.length - TAG_BYTES);
+    const tag = sealed.slice(sealed.length - TAG_BYTES);
+    return `${header}..${bytesToB64url(iv)}.${bytesToB64url(ct)}.${bytesToB64url(tag)}`;
+}
+/** The plaintext if `jwe` is a compact JWE of purpose `typ` sealed to `privateKey`, else null. Never throws:
+ * a wrong key, a wrong typ, any other header member, a changed byte, or a malformed token is null. */
+export async function openJwe(privateKey, typ, jwe) {
+    try {
+        if (typeof jwe !== 'string')
+            return null;
+        const parts = jwe.split('.');
+        if (parts.length !== 5)
+            return null;
+        const [h, encryptedKey, ivPart, ctPart, tagPart] = parts;
+        if (encryptedKey !== '' || !B64URL.test(h) || !B64URL.test(ivPart) || !B64URL.test(tagPart))
+            return null;
+        if (ctPart !== '' && !B64URL.test(ctPart))
+            return null;
+        const header = JSON.parse(new TextDecoder().decode(b64urlToBytes(h)));
+        if (!isObj(header) || Object.keys(header).some((k) => !HEADER_KEYS.includes(k)))
+            return null;
+        if (header.alg !== JWE_ALG || header.enc !== JWE_ENC || header.typ !== typ)
+            return null;
+        const epk = asEcPublicJwk(header.epk);
+        if (!epk)
+            return null;
+        const iv = new Uint8Array(b64urlToBytes(ivPart));
+        const tag = b64urlToBytes(tagPart);
+        if (iv.length !== IV_BYTES || tag.length !== TAG_BYTES)
+            return null;
+        const key = await contentKey(privateKey, epk, 'decrypt');
+        const plain = await crypto.subtle.decrypt({ name: 'AES-GCM', iv, additionalData: te.encode(h), tagLength: TAG_BYTES * 8 }, key, concat(b64urlToBytes(ctPart), tag));
+        return new TextDecoder('utf-8', { fatal: true }).decode(plain);
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=fleetJwe.js.map

package/dist/sidecar/fleetJwe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleetJwe.js","sourceRoot":"","sources":["../../sidecar/fleetJwe.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAI3E,MAAM,CAAC,MAAM,OAAO,GAAG,SAAS,CAAC;AACjC,MAAM,CAAC,MAAM,OAAO,GAAG,SAAS,CAAC;AAEjC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAW,CAAC;AAC5D,MAAM,WAAW,GAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACpE,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAClC,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAC;AAE7B,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAErH,SAAS,MAAM,CAAC,GAAG,KAAmB;IACpC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAAC,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;IAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,CAAa,EAAc,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AAE/E;;gEAEgE;AAChE,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,CAAa,EAAE,WAAmB,EAAE,OAAe,EAAE,MAAkB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,MAAkB,IAAI,UAAU,CAAC,CAAC,CAAC;IAE7H,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACxJ,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACzH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,UAAqB,EAAE,IAAiB,EAAE,KAA4B;IAC9F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1H,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IACzG,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/G,CAAC;AAED;2FAC2F;AAC3F,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IACzE,MAAM,UAAU,GAAe,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;IACvH,MAAM,SAAS,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;IAChH,IAAI,CAAC,SAAS,IAAI,OAAO,UAAU,CAAC,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACvF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,UAAsB;IACrE,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC,GAAG,IAAI,OAAO,UAAU,CAAC,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACzF;8GAC0G;IAC1G,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1F,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;AACvI,CAAC;AAED,sIAAsI;AACtI,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,SAAsB,EAAE,GAAW,EAAE,SAAiB;IAClF,MAAM,EAAE,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAClG,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACvD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAChH,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD,OAAO,GAAG,MAAM,KAAK,aAAa,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;AACtF,CAAC;AAED;sGACsG;AACtG,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,UAAqB,EAAE,GAAW,EAAE,GAAW;IAC3E,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,KAAiD,CAAC;QACrG,IAAI,YAAY,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACzG,IAAI,MAAM,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7F,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxF,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACvC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CACzH,CAAC;QACF,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/sidecar/fsChanges.d.ts

@@ -0,0 +1,23 @@
+import type { SidecarFsChange } from '@corenel/protocol';
+/** One published change: what changed, and which connection changed it, so
+ * that connection is not told about its own write. */
+export interface FsChangeEvent extends SidecarFsChange {
+    by: string;
+}
+export interface SidecarFsChanges {
+    publish(change: FsChangeEvent): void;
+    subscribe(cb: (change: FsChangeEvent) => void): () => void;
+}
+export declare class FsChangeBus implements SidecarFsChanges {
+    private readonly subs;
+    publish(change: FsChangeEvent): void;
+    subscribe(cb: (change: FsChangeEvent) => void): () => void;
+}
+/** What a file tool's `{ root?, path }` changed, said the way every client
+ * reads it: the path is resolved the way the tools confine it (against the
+ * named root, or the primary one, so `../other/x` and an absolute path both
+ * land where the tool wrote), then reported for each shared root that holds
+ * it, with the daemon's spelling of that root and the path under it in
+ * forward slashes. Nothing when no root holds it. */
+export declare function fsChangesFor(roots: string[], primary: string | undefined, rootArg: unknown, path: string): SidecarFsChange[];
+//# sourceMappingURL=fsChanges.d.ts.map

package/dist/sidecar/fsChanges.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fsChanges.d.ts","sourceRoot":"","sources":["../../sidecar/fsChanges.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEzD;sDACsD;AACtD,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;CAC5D;AAED,qBAAa,WAAY,YAAW,gBAAgB;IAClD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA8C;IAEnE,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAQpC,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GAAG,MAAM,IAAI;CAI3D;AA6BD;;;;;qDAKqD;AACrD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAgB5H"}

package/dist/sidecar/fsChanges.js

@@ -0,0 +1,77 @@
+export class FsChangeBus {
+    constructor() {
+        Object.defineProperty(this, "subs", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: new Set()
+        });
+    }
+    publish(change) {
+        // A copy, so a subscriber that unsubscribes (a connection closing) while
+        // this runs cannot skip the one after it.
+        for (const cb of [...this.subs]) {
+            try {
+                cb(change);
+            }
+            catch { /* one connection's failure must not stop the rest hearing it */ }
+        }
+    }
+    subscribe(cb) {
+        this.subs.add(cb);
+        return () => { this.subs.delete(cb); };
+    }
+}
+function lexical(p) {
+    const s = p.replace(/\\/g, '/');
+    const drive = /^([A-Za-z]):(\/|$)/.exec(s);
+    const head = drive ? `${drive[1].toUpperCase()}:` : s.startsWith('//') ? '//' : s.startsWith('/') ? '/' : null;
+    if (head === null)
+        return null;
+    const parts = [];
+    for (const seg of s.slice(drive ? 2 : head.length).split('/')) {
+        if (seg === '' || seg === '.')
+            continue;
+        if (seg === '..')
+            parts.pop();
+        else
+            parts.push(seg);
+    }
+    return { head, parts, drive: drive !== null };
+}
+/** `abs` lies inside `root`: the same head and root's segments as its prefix,
+ * without regard to letter case on a drive (a Windows root). */
+function inside(root, abs) {
+    if (root.head !== abs.head || abs.parts.length <= root.parts.length)
+        return false;
+    const same = root.drive ? (a, b) => a.toLowerCase() === b.toLowerCase() : (a, b) => a === b;
+    return root.parts.every((seg, i) => same(seg, abs.parts[i]));
+}
+/** What a file tool's `{ root?, path }` changed, said the way every client
+ * reads it: the path is resolved the way the tools confine it (against the
+ * named root, or the primary one, so `../other/x` and an absolute path both
+ * land where the tool wrote), then reported for each shared root that holds
+ * it, with the daemon's spelling of that root and the path under it in
+ * forward slashes. Nothing when no root holds it. */
+export function fsChangesFor(roots, primary, rootArg, path) {
+    if (!path)
+        return [];
+    let abs = lexical(path);
+    if (!abs) {
+        const named = typeof rootArg === 'string' && rootArg !== '' ? lexical(rootArg) : null;
+        const base = named ?? (primary ? lexical(primary) : null);
+        if (!base)
+            return [];
+        abs = lexical(`${base.head}${base.head.endsWith('/') ? '' : '/'}${[...base.parts, path.replace(/\\/g, '/')].join('/')}`);
+        if (!abs)
+            return [];
+    }
+    const out = [];
+    for (const root of roots) {
+        const r = lexical(root);
+        if (r && inside(r, abs))
+            out.push({ root, path: abs.parts.slice(r.parts.length).join('/') });
+    }
+    return out;
+}
+//# sourceMappingURL=fsChanges.js.map

package/dist/sidecar/fsChanges.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fsChanges.js","sourceRoot":"","sources":["../../sidecar/fsChanges.ts"],"names":[],"mappings":"AAoBA,MAAM,OAAO,WAAW;IAAxB;QACmB;;;;mBAAO,IAAI,GAAG,EAAmC;WAAC;IAcrE,CAAC;IAZC,OAAO,CAAC,MAAqB;QAC3B,yEAAyE;QACzE,0CAA0C;QAC1C,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,gEAAgE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IAED,SAAS,CAAC,EAAmC;QAC3C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;CACF;AAOD,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/G,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QACxC,IAAI,GAAG,KAAK,IAAI;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;;YACzB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC;AAChD,CAAC;AAED;gEACgE;AAChE,SAAS,MAAM,CAAC,IAAiB,EAAE,GAAgB;IACjD,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAClF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5H,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;qDAKqD;AACrD,MAAM,UAAU,YAAY,CAAC,KAAe,EAAE,OAA2B,EAAE,OAAgB,EAAE,IAAY;IACvG,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/sidecar/host.d.ts

@@ -1,4 +1,6 @@
-import type { AgentTool, IMemoryProvider, IKeyValueStore, ISearchProvider, ISessionStore, PermissionRequest, AskQuestion, AskAnswers, AgentEvent, PermissionDecision, DaemonRunActivity, DaemonRegistration, AgentPause, HostSummary, ProcInfo, RunRecordInfo, RunHistoryCrew, SessionInfo, SessionRepoSpec, SessionSnapshotInfo, CrewMemoryInfo, SidecarConfigEntry, WebPushSubscription, ChecksState, WorkspaceLockRef, TaskSpec, TaskAutonomy, RunPlanView, DaemonApprovalChoice, DaemonApprovalOffer, DaemonApprovalsState, CrewAgentRef, CrewDeployReply, DeviceSummary, AccessReply, NodeEvent, PeerMcpToolDecl, MemberReply, AccessOverviewReply, AgentCredReply, AgentCredStatusReply, AgentRunsReply, PeerReply, AgentCredHeader, McpBinding } from '@corenel/protocol';
+import type { AgentTool, IMemoryProvider, IKeyValueStore, ISearchProvider, ISessionStore, PermissionRequest, AskQuestion, AskAnswers, AgentEvent, PermissionDecision, DaemonRunActivity, DaemonRegistration, AgentPause, HostSummary, ProcInfo, RunRecordInfo, RunHistoryCrew, SessionInfo, SessionRepoSpec, SessionSnapshotInfo, CrewMemoryInfo, SidecarConfigEntry, WebPushSubscription, ChecksState, WorkspaceLockRef, TaskSpec, TaskAutonomy, RunPlanView, DaemonApprovalChoice, DaemonApprovalOffer, DaemonApprovalsState, CrewAgentRef, CrewDeployReply, DeviceSummary, AccessReply, NodeEvent, PeerMcpToolDecl, MemberReply, AccessOverviewReply, AgentCredReply, AgentCredStatusReply, AgentRunsReply, PeerReply, AgentCredHeader, McpBinding, ChatSummary, ChatTurnSpec, StoredChat } from '@corenel/protocol';
+import { type SidecarFsChange } from '@corenel/protocol';
+import type { ChatTurnResult } from '../chat/types';
 import type { DontAsk, FileService } from '@corenel/protocol';
 import { type KeySigner } from './deviceKeys';
 import { type SpeechStreamMsg, type SidecarChannel, type SidecarMsg, type SidecarInfo, type AcpPromptPart, type AcpModeInfo, type AcpStartOptions, type RoomOpenRequest, type RoomSummary, type RoomFinding, type RoomFindingEdit, type DeployRef, type WorkflowRef, type WorkflowPackagePut, type WorkflowPackageReply, type WorkflowResultsListReply, type WorkflowResultsTakeReply, type WorkflowResultsAckReply, type WorkflowStopReply } from '@corenel/protocol';
@@ -176,6 +178,24 @@ export interface SidecarHostOptions {
         meta?: Record<string, string>;
     }) => void;
 }
+/** One chat ask_user prompt from the daemon (Harness Chat Plan 2, R8). */
+export interface SidecarAskUser {
+    id: number;
+    runId: string;
+    agent: string;
+    questions: AskQuestion[];
+    deadline: number;
+}
+/** How one daemon chat turn ended. A refused or failed turn resolves too;
+ * only a dropped connection rejects. */
+export interface SidecarChatRunResult {
+    runId: string | null;
+    conversationId: string | null;
+    text: string;
+    stopReason: string;
+    outcome: ChatTurnResult['outcome'];
+    error?: string;
+}
 /** `mcp-call` resolves `ok: false` for a policy refusal (`mcp-error`) rather
  * than rejecting -- see the field comment on `mcpCallPending` above for why. A
  * reject here is reserved for the transport dropping mid-call. */
@@ -220,6 +240,9 @@ export interface ProcWatcher {
         signal?: string;
     }) => void;
 }
+/** An `fs-changed` message's change, or null when it is not one: a root and a
+ * path, each a non-empty string within MAX_FS_CHANGE_LEN with no NUL. */
+export declare function fsChangeOf(m: unknown): SidecarFsChange | null;
 /** Prefix of the error a connection rejects with when the daemon's key is not
  * the one this client pinned (or it cannot prove it holds it). A caller shows
  * this state as its own, never as a generic connection failure, and never
@@ -251,6 +274,9 @@ export declare function isSidecarAccountRefusal(e: unknown): boolean;
  * (slice 4). The device is fine and stays paired; retrying changes nothing
  * until a fleet admin changes the policy. */
 export declare function isFleetLoginsRefusal(e: unknown): boolean;
+/** The sidecar's fleet sign-in is paused for a reason that clears by itself (SIGN_IN_PAUSED_DENIED). The device is
+ * fine and stays paired, and unlike every other account refusal a retry is expected to succeed later. */
+export declare function isSignInPausedRefusal(e: unknown): boolean;
 export declare class SidecarHost {
     private readonly ch;
     private readonly opts;
@@ -262,6 +288,16 @@ export declare class SidecarHost {
     private readonly runPending;
     private cancelSeq;
     private readonly cancelPending;
+    /** Daemon chat (Harness Chat Plan 2): run-inject, chat-list and chat-get replies, by request id. */
+    private chatSeq;
+    private readonly injectPending;
+    private readonly chatListPending;
+    private readonly chatGetPending;
+    /** Chat ask_user prompts not yet answered or resolved, by the daemon's ask id,
+     * so a handler registered after one arrived still sees it. */
+    private readonly askUserOpen;
+    private readonly askUserHandlers;
+    private readonly askUserResolvedHandlers;
     private acpSeq;
     private readonly acpPending;
     private syncSeq;
@@ -330,6 +366,9 @@ export declare class SidecarHost {
     /** Per-request consent-URL listeners, cleared when the request settles. */
     private readonly mcpLoginUrlWaiters;
     private features;
+    /** Who hears another client's file changes (`fs-changed`), for the life of
+     * this connection. */
+    private readonly fsChangeSubs;
     private sttSeq;
     private readonly sttStreams;
     private vapidKey;
@@ -655,6 +694,50 @@ export declare class SidecarHost {
         ok: boolean;
         reason?: 'no-such-run' | 'unsupported' | 'not-allowed';
     }>;
+    /** True when the connected daemon holds chats (Harness Chat Plan 2):
+     * `runChat`, `injectRun`, `listChats`, `getChat` and ask_user prompts. An
+     * older daemon would run a chat turn as a plain one-shot run, so check this
+     * before calling any of them. */
+    supportsChat(): boolean;
+    /** One turn of a daemon chat. `chat.conversationId` absent starts a new
+     * chat; the daemon mints its id and hands it to `onAccepted` with the run
+     * id. Resolves with how the turn ended, a refused or failed one included
+     * (with `error`); rejects only when the connection drops mid-turn. */
+    runChat(agent: string, text: string, chat: ChatTurnSpec, onEvent: (e: AgentEvent) => void, opts?: {
+        onAccepted?: (runId: string, conversationId: string) => void;
+    }): Promise<SidecarChatRunResult>;
+    /** Messages typed while a chat turn runs; `hard` interrupts it. Never
+     * rejects: a refusal or a dropped connection answers `ok: false`. */
+    injectRun(runId: string, messages: {
+        id: string;
+        text: string;
+    }[], hard: boolean): Promise<{
+        ok: boolean;
+        reason?: string;
+    }>;
+    /** This user's chats with `agent`; the admin may name a `member`. Rejects
+     * with the daemon's refusal. */
+    listChats(agent: string, opts?: {
+        ref?: CrewAgentRef;
+        member?: string;
+    }): Promise<ChatSummary[]>;
+    /** One conversation, to its member or the admin. Rejects with the daemon's
+     * refusal (CHAT_NOT_YOURS, CHAT_NOT_FOUND). */
+    getChat(agent: string, conversationId: string, opts?: {
+        ref?: CrewAgentRef;
+        member?: string;
+    }): Promise<StoredChat>;
+    /** Chat ask_user prompts for this user. Prompts still open when the handler
+     * is added are handed to it at once. Returns the unsubscribe function. */
+    onAskUser(handler: (ask: SidecarAskUser) => void): () => void;
+    /** A prompt was answered on another connection, or timed out: drop it. */
+    onAskUserResolved(handler: (r: {
+        id: number;
+        by: 'client' | 'timeout';
+    }) => void): () => void;
+    /** Answer prompt `id`; null declines. The first answer from any of this
+     * user's or the admin's connections wins; a late one is ignored. */
+    answerAskUser(id: number, answers: AskAnswers | null): void;
     /** True when the connected sidecar's runner supports cancelling a run. */
     supportsRunCancel(): boolean;
     /** True when the connected daemon fans a delegated callee's own node events
@@ -746,6 +829,13 @@ export declare class SidecarHost {
      * and every room-* message is refused server-side; feature-detecting here means
      * the browser never sends one it already knows will be refused. */
     supportsRooms(): boolean;
+    /** True when the sidecar announces other clients' file changes (`fs-changed`).
+     * An older one never does, and a listener here simply never fires. */
+    supportsFsChanged(): boolean;
+    /** Hear every file change another client of this daemon makes through its
+     * file tools: the root the tool used and the root-relative path. Never this
+     * client's own changes (the daemon leaves the writer out). */
+    onFsChanged(cb: (change: SidecarFsChange) => void): () => void;
     /** True when the connected daemon HOLDS agent pauses. Feature-detected from
      * the welcome, so a client offers "Pause" only where pausing would actually
      * stop the agent rather than reporting a success the daemon ignores. */