@cotal-ai/seat 0.0.0-bootstrap.0 → 0.47.1

package/dist/launcher.js

@@ -0,0 +1,102 @@
+import { spawn, spawnSync } from "node:child_process";
+import { closeSync, existsSync, mkdirSync, openSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { capabilityToken, recordPath, seatId, socketPath, readRecord } from "./record.js";
+import { unsupportedTransport } from "./protocol.js";
+function packageRoot() {
+    return dirname(dirname(fileURLToPath(import.meta.url)));
+}
+/** Always the compiled entry. tsx loading `src/` must not spawn a missing `src/custodian.js`. */
+function custodianEntry() {
+    const path = join(packageRoot(), "dist", "custodian.js");
+    if (!existsSync(path))
+        throw new Error(`custodian entry missing at ${path}; build @cotal-ai/seat first`);
+    return path;
+}
+function pidLive(pid) {
+    if (typeof pid !== "number" || pid <= 0)
+        return false;
+    try {
+        const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+        const state = stat.slice(stat.lastIndexOf(") ") + 2).split(" ")[0];
+        return state !== "Z";
+    }
+    catch {
+        return false;
+    }
+}
+export function launchSeat(opts) {
+    if (process.platform !== "linux")
+        throw unsupportedTransport();
+    mkdirSync(opts.root, { recursive: true, mode: 0o700 });
+    const id = seatId();
+    const token = capabilityToken();
+    const socket = socketPath(opts.root, id);
+    const recPath = recordPath(opts.root, id);
+    mkdirSync(dirname(recPath), { recursive: true, mode: 0o700 });
+    const logPath = join(dirname(recPath), "custodian.log");
+    const payload = JSON.stringify({
+        id,
+        name: opts.name,
+        command: opts.spec.command,
+        args: opts.spec.args,
+        env: opts.spec.env ?? {},
+        cwd: opts.cwd,
+        socket,
+        token,
+        recordPath: recPath,
+        logPath,
+        confirm: Boolean(opts.spec.confirm),
+    });
+    // Payload carries spec.env (provider keys) and the capability token.
+    // argv is world-readable via /proc/<pid>/cmdline (0444). Inherit a 0600
+    // file as stdin so the JSON never appears on argv.
+    const launchPath = join(dirname(recPath), "launch.json");
+    writeFileSync(launchPath, payload, { mode: 0o600 });
+    const launchFd = openSync(launchPath, "r");
+    const child = spawn(process.execPath, [custodianEntry()], {
+        detached: true,
+        stdio: [launchFd, "ignore", "ignore"],
+        env: { PATH: process.env.PATH ?? "" },
+    });
+    closeSync(launchFd);
+    try {
+        unlinkSync(launchPath);
+    }
+    catch {
+        /* child still holds the fd */
+    }
+    child.unref();
+    const deadline = Date.now() + 10_000;
+    while (Date.now() < deadline) {
+        try {
+            const rec = readRecord(recPath);
+            if (rec.custodianPid > 0 && rec.childPid > 0) {
+                return rec;
+            }
+        }
+        catch {
+            /* record not written yet */
+        }
+        if (!pidLive(child.pid)) {
+            let err = "";
+            try {
+                err = readFileSync(logPath, "utf8").trim();
+            }
+            catch {
+                /* no log */
+            }
+            throw new Error(`custodian exited before ready: ${err || `pid ${String(child.pid)} gone`}`);
+        }
+        spawnSync("sleep", ["0.025"], { stdio: "ignore" });
+    }
+    throw new Error(`custodian did not write a seat record at ${recPath}`);
+}
+export function loadSeat(root, id) {
+    return readRecord(recordPath(root, id));
+}
+export function readSeatFile(path) {
+    return JSON.parse(readFileSync(path, "utf8"));
+}
+//# sourceMappingURL=launcher.js.map

package/dist/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../src/launcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9G,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAmB,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3G,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAgBrD,SAAS,WAAW;IAClB,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,iGAAiG;AACjG,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,8BAA8B,CAAC,CAAC;IACzG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,GAAuB;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,KAAK,KAAK,GAAG,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAoB;IAC7C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,oBAAoB,EAAE,CAAC;IAC/D,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;IACpB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1C,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,EAAE;QACF,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;QAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;QACpB,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE;QACxB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM;QACN,KAAK;QACL,UAAU,EAAE,OAAO;QACnB,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;KACpC,CAAC,CAAC;IACH,qEAAqE;IACrE,wEAAwE;IACxE,mDAAmD;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,CAAC;IACzD,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,CAAC,EAAE;QACxD,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;QACrC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE;KACtC,CAAC,CAAC;IACH,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpB,IAAI,CAAC;QACH,UAAU,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,8BAA8B;IAChC,CAAC;IACD,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,GAAG,CAAC,YAAY,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAC7C,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,SAAS,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,OAAO,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,EAAU;IAC/C,OAAO,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;AAC9D,CAAC"}

package/dist/peercred.d.ts

@@ -0,0 +1,12 @@
+import type { Socket } from "node:net";
+export interface PeerCredentials {
+    pid: number;
+    uid: number;
+    gid: number;
+}
+export declare const LINUX_NATIVE_ARCHES: readonly ["x64", "arm64"];
+export declare function nativeHelperPath(arch?: string): string;
+export declare function unsupportedNativeArch(platform: string, arch: string): Error;
+export declare function socketFd(sock: Socket): number;
+export declare function peerCredentials(sock: Socket): PeerCredentials;
+//# sourceMappingURL=peercred.d.ts.map

package/dist/peercred.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"peercred.d.ts","sourceRoot":"","sources":["../src/peercred.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAGvC,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAID,eAAO,MAAM,mBAAmB,2BAA4B,CAAC;AAI7D,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,CAGpE;AAMD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,CAI3E;AAqBD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK7C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAE7D"}

package/dist/peercred.js

@@ -0,0 +1,49 @@
+import { createRequire } from "node:module";
+import { existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { unsupportedTransport } from "./protocol.js";
+export const LINUX_NATIVE_ARCHES = ["x64", "arm64"];
+let loaded;
+export function nativeHelperPath(arch = process.arch) {
+    const here = dirname(fileURLToPath(import.meta.url));
+    return join(here, "..", "build", "Release", `linux-${arch}`, "peercred.node");
+}
+function isLinuxNativeArch(arch) {
+    return LINUX_NATIVE_ARCHES.includes(arch);
+}
+export function unsupportedNativeArch(platform, arch) {
+    return new Error(`@cotal-ai/seat: SO_PEERCRED native helper unsupported on ${platform}-${arch} (supported: linux-x64, linux-arm64)`);
+}
+function loadNative() {
+    if (loaded)
+        return loaded;
+    if (process.platform !== "linux")
+        throw unsupportedTransport();
+    const platformArch = `${process.platform}-${process.arch}`;
+    if (!isLinuxNativeArch(process.arch))
+        throw unsupportedNativeArch(process.platform, process.arch);
+    const path = nativeHelperPath(process.arch);
+    if (!existsSync(path))
+        throw new Error(`@cotal-ai/seat: SO_PEERCRED native helper missing at ${path}`);
+    const require = createRequire(import.meta.url);
+    try {
+        loaded = require(path);
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        throw new Error(`@cotal-ai/seat: SO_PEERCRED native helper failed to load at ${path} for ${platformArch}: ${detail}`);
+    }
+    return loaded;
+}
+export function socketFd(sock) {
+    const handle = sock._handle;
+    const fd = handle?.fd;
+    if (typeof fd !== "number" || fd < 0)
+        throw new Error("unix socket has no file descriptor");
+    return fd;
+}
+export function peerCredentials(sock) {
+    return loadNative().peercred(socketFd(sock));
+}
+//# sourceMappingURL=peercred.js.map

package/dist/peercred.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peercred.js","sourceRoot":"","sources":["../src/peercred.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAUrD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,OAAO,CAAU,CAAC;AAE7D,IAAI,MAAkC,CAAC;AAEvC,MAAM,UAAU,gBAAgB,CAAC,OAAe,OAAO,CAAC,IAAI;IAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,IAAI,EAAE,EAAE,eAAe,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAQ,mBAAyC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,IAAY;IAClE,OAAO,IAAI,KAAK,CACd,4DAA4D,QAAQ,IAAI,IAAI,sCAAsC,CACnH,CAAC;AACJ,CAAC;AAED,SAAS,UAAU;IACjB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,oBAAoB,EAAE,CAAC;IAC/D,MAAM,YAAY,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,IAAI,EAAE,CAAC,CAAC;IACvG,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,OAAO,CAAC,IAAI,CAAmB,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,+DAA+D,IAAI,QAAQ,YAAY,KAAK,MAAM,EAAE,CACrG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,MAAM,GAAI,IAAiD,CAAC,OAAO,CAAC;IAC1E,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;IACtB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC5F,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/protocol.d.ts

@@ -0,0 +1,137 @@
+/** Protocol version this process speaks. Additive later; M2 is a single implicit controller. */
+export declare const PROTOCOL_VERSION = 1;
+export declare const DEFAULT_COLS = 120;
+export declare const DEFAULT_ROWS = 32;
+export declare const SCROLLBACK_ROWS = 1000;
+export declare const CONFIRM_INTERVAL_MS = 1000;
+export declare const MAX_CONFIRMS = 5;
+export declare const GRACE_MS = 3000;
+/**
+ * Max JSON body the local protocol accepts in one frame.
+ * A 1000-row, 120-col 16-color serialize is ~744 KiB, and JSON-escaping that
+ * snapshot is 1_365_109 bytes. Truecolor fg+bg per cell is 4_876_998. 8 MiB
+ * covers both so adopt can return scrollback; a 500 MiB claimed length still
+ * fails the per-frame check.
+ */
+export declare const MAX_FRAME_SIZE: number;
+/** Max undecoded residual AFTER complete frames have been drained. */
+export declare const MAX_BUFFER_SIZE: number;
+export type StopMode = "graceful" | "hard";
+export type ClientRequest = {
+    id: number;
+    op: "hello";
+    token: string;
+} | {
+    id: number;
+    op: "snapshot";
+} | {
+    id: number;
+    op: "subscribe-output";
+} | {
+    id: number;
+    op: "unsubscribe-output";
+    sub: number;
+} | {
+    id: number;
+    op: "write";
+    data: string;
+} | {
+    id: number;
+    op: "resize";
+    cols: number;
+    rows: number;
+} | {
+    id: number;
+    op: "interrupt";
+} | {
+    id: number;
+    op: "stop";
+    mode: StopMode;
+} | {
+    id: number;
+    op: "wait-exit";
+} | {
+    id: number;
+    op: "health";
+};
+export type ServerEvent = {
+    event: "output";
+    sub: number;
+    data: string;
+} | {
+    event: "exit";
+    sub?: number;
+};
+export type ServerReply = {
+    id: number;
+    ok: true;
+    op: "hello";
+    name: string;
+    pid: number;
+    cols: number;
+    rows: number;
+    status: "running" | "exited";
+    exit?: {
+        code?: number;
+        signal?: number;
+    };
+} | {
+    id: number;
+    ok: true;
+    op: "snapshot";
+    data: string;
+    cols: number;
+    rows: number;
+} | {
+    id: number;
+    ok: true;
+    op: "subscribe-output";
+    sub: number;
+} | {
+    id: number;
+    ok: true;
+    op: "unsubscribe-output";
+} | {
+    id: number;
+    ok: true;
+    op: "write";
+} | {
+    id: number;
+    ok: true;
+    op: "resize";
+} | {
+    id: number;
+    ok: true;
+    op: "interrupt";
+} | {
+    id: number;
+    ok: true;
+    op: "stop";
+} | {
+    id: number;
+    ok: true;
+    op: "wait-exit";
+    exit?: {
+        code?: number;
+        signal?: number;
+    };
+} | {
+    id: number;
+    ok: true;
+    op: "health";
+    pid: number;
+    status: "running" | "exited";
+    protocol: number;
+} | {
+    id: number;
+    ok: false;
+    error: string;
+};
+export type ServerMessage = ServerReply | ServerEvent;
+export declare function encodeFrame(value: unknown): Buffer;
+export declare class FrameReader {
+    private buf;
+    push(chunk: Buffer): unknown[];
+}
+export declare function unsupportedTransport(platform?: string): Error;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,eAAO,MAAM,YAAY,KAAK,CAAC;AAC/B,eAAO,MAAM,eAAe,OAAO,CAAC;AACpC,eAAO,MAAM,mBAAmB,OAAQ,CAAC;AACzC,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,QAAQ,OAAQ,CAAC;AAC9B;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,QAAkB,CAAC;AAC9C,sEAAsE;AACtE,eAAO,MAAM,eAAe,QAAqB,CAAC;AAElD,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;AAE3C,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,UAAU,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,kBAAkB,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,oBAAoB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,WAAW,CAAA;CAAE,GAC/B;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,WAAW,CAAA;CAAE,GAC/B;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,WAAW,GACnB;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9C;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC,MAAM,MAAM,WAAW,GACnB;IACE,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,IAAI,CAAC;IACT,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C,GACD;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,oBAAoB,CAAA;CAAE,GAClD;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,OAAO,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,QAAQ,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,WAAW,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,WAAW,CAAC;IAAC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACpF;IACE,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,IAAI,CAAC;IACT,EAAE,EAAE,QAAQ,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;CAClB,GACD;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,WAAW,CAAC;AAEtD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQlD;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,GAAG,CAA2B;IAEtC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE;CAoB/B;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,GAAE,MAAyB,GAAG,KAAK,CAE/E"}

package/dist/protocol.js

@@ -0,0 +1,55 @@
+/** Protocol version this process speaks. Additive later; M2 is a single implicit controller. */
+export const PROTOCOL_VERSION = 1;
+export const DEFAULT_COLS = 120;
+export const DEFAULT_ROWS = 32;
+export const SCROLLBACK_ROWS = 1000;
+export const CONFIRM_INTERVAL_MS = 1_000;
+export const MAX_CONFIRMS = 5;
+export const GRACE_MS = 3_000;
+/**
+ * Max JSON body the local protocol accepts in one frame.
+ * A 1000-row, 120-col 16-color serialize is ~744 KiB, and JSON-escaping that
+ * snapshot is 1_365_109 bytes. Truecolor fg+bg per cell is 4_876_998. 8 MiB
+ * covers both so adopt can return scrollback; a 500 MiB claimed length still
+ * fails the per-frame check.
+ */
+export const MAX_FRAME_SIZE = 8 * 1024 * 1024;
+/** Max undecoded residual AFTER complete frames have been drained. */
+export const MAX_BUFFER_SIZE = MAX_FRAME_SIZE + 4;
+export function encodeFrame(value) {
+    const body = Buffer.from(JSON.stringify(value), "utf8");
+    if (body.length > MAX_FRAME_SIZE) {
+        throw new Error(`frame length ${body.length} exceeds ${MAX_FRAME_SIZE} bytes`);
+    }
+    const header = Buffer.allocUnsafe(4);
+    header.writeUInt32BE(body.length, 0);
+    return Buffer.concat([header, body]);
+}
+export class FrameReader {
+    buf = Buffer.alloc(0);
+    push(chunk) {
+        this.buf = Buffer.concat([this.buf, chunk]);
+        const out = [];
+        while (this.buf.length >= 4) {
+            const size = this.buf.readUInt32BE(0);
+            if (size > MAX_FRAME_SIZE) {
+                this.buf = Buffer.alloc(0);
+                throw new Error(`frame length ${size} exceeds ${MAX_FRAME_SIZE} bytes`);
+            }
+            if (this.buf.length < 4 + size)
+                break;
+            const body = this.buf.subarray(4, 4 + size);
+            this.buf = this.buf.subarray(4 + size);
+            out.push(JSON.parse(body.toString("utf8")));
+        }
+        if (this.buf.length > MAX_BUFFER_SIZE) {
+            this.buf = Buffer.alloc(0);
+            throw new Error(`frame buffer exceeds ${MAX_BUFFER_SIZE} bytes`);
+        }
+        return out;
+    }
+}
+export function unsupportedTransport(platform = process.platform) {
+    return new Error(`custody transport unsupported on ${platform}`);
+}
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAElC,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAChC,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAC/B,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AACpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AACzC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC;AAC9B;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9C,sEAAsE;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,cAAc,GAAG,CAAC,CAAC;AAoDlD,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,MAAM,YAAY,cAAc,QAAQ,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,OAAO,WAAW;IACd,GAAG,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEtC,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAc,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;gBAC1B,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,YAAY,cAAc,QAAQ,CAAC,CAAC;YAC1E,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI;gBAAE,MAAM;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACvC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,wBAAwB,eAAe,QAAQ,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,WAAmB,OAAO,CAAC,QAAQ;IACtE,OAAO,IAAI,KAAK,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;AACnE,CAAC"}

package/dist/record.d.ts

@@ -0,0 +1,17 @@
+export declare const RECORD_VERSION = 1;
+export interface SeatRecord {
+    version: number;
+    id: string;
+    name: string;
+    socket: string;
+    token: string;
+    custodianPid: number;
+    childPid: number;
+}
+export declare function seatId(): string;
+export declare function capabilityToken(): string;
+export declare function recordPath(root: string, id: string): string;
+export declare function socketPath(root: string, id: string): string;
+export declare function writeRecord(path: string, record: SeatRecord): void;
+export declare function readRecord(path: string): SeatRecord;
+//# sourceMappingURL=record.d.ts.map

package/dist/record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../src/record.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,MAAM,IAAI,MAAM,CAE/B;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAKlE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAkBnD"}

package/dist/record.js

@@ -0,0 +1,49 @@
+import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { randomBytes } from "node:crypto";
+export const RECORD_VERSION = 1;
+export function seatId() {
+    return randomBytes(16).toString("hex");
+}
+export function capabilityToken() {
+    return randomBytes(32).toString("hex");
+}
+export function recordPath(root, id) {
+    return join(root, id, "record.json");
+}
+export function socketPath(root, id) {
+    return join(root, id, "seat.sock");
+}
+export function writeRecord(path, record) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    writeFileSync(path, `${JSON.stringify(record)}\n`, { mode: 0o600, flag: "w" });
+    chmodSync(path, 0o600);
+    chmodSync(dirname(path), 0o700);
+}
+export function readRecord(path) {
+    const raw = JSON.parse(readFileSync(path, "utf8"));
+    if (raw.version !== RECORD_VERSION)
+        throw new Error(`unsupported seat record version ${String(raw.version)}`);
+    if (typeof raw.id !== "string" || raw.id.length === 0)
+        throw new Error("seat record missing id");
+    if (typeof raw.name !== "string" || raw.name.length === 0)
+        throw new Error("seat record missing name");
+    if (typeof raw.socket !== "string" || raw.socket.length === 0)
+        throw new Error("seat record missing socket");
+    if (typeof raw.token !== "string" || raw.token.length === 0)
+        throw new Error("seat record missing token");
+    if (typeof raw.custodianPid !== "number" || !Number.isInteger(raw.custodianPid))
+        throw new Error("seat record missing custodianPid");
+    if (typeof raw.childPid !== "number" || !Number.isInteger(raw.childPid))
+        throw new Error("seat record missing childPid");
+    return {
+        version: RECORD_VERSION,
+        id: raw.id,
+        name: raw.name,
+        socket: raw.socket,
+        token: raw.token,
+        custodianPid: raw.custodianPid,
+        childPid: raw.childPid,
+    };
+}
+//# sourceMappingURL=record.js.map

package/dist/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../src/record.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAYhC,MAAM,UAAU,MAAM;IACpB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,EAAU;IACjD,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,EAAU;IACjD,OAAO,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAkB;IAC1D,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/E,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAwB,CAAC;IAC1E,IAAI,GAAG,CAAC,OAAO,KAAK,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9G,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACjG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACvG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC7G,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC1G,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACrI,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACzH,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,22 +1,38 @@
 {
   "name": "@cotal-ai/seat",
-  "version": "0.0.0-bootstrap.0",
-  "description": "Bootstrap placeholder for configuring npm trusted publishing. Not a functional release.",
+  "description": "Local PTY seat custody: one detached custodian process per seat, a one-shot launcher, and the authenticated local protocol a manager worker uses to adopt the handle. Depends on nothing else in the repo.",
+  "version": "0.47.1",
   "license": "Apache-2.0",
-  "type": "module",
-  "main": "index.js",
-  "files": [
-    "index.js",
-    "README.md"
-  ],
   "repository": {
     "type": "git",
     "url": "https://github.com/Cotal-AI/Cotal.git",
     "directory": "packages/seat"
   },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@lydell/node-pty": "1.2.0-beta.12",
+    "@xterm/addon-serialize": "^0.13.0",
+    "@xterm/headless": "^5.5.0"
+  },
+  "files": [
+    "dist",
+    "build"
+  ],
   "publishConfig": {
-    "access": "public",
-    "registry": "https://registry.npmjs.org/",
-    "tag": "bootstrap"
+    "access": "public"
+  },
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.check.json",
+    "build": "node scripts/build-native.mjs && tsc -p tsconfig.json",
+    "build:native": "node scripts/build-native.mjs",
+    "test": "pnpm run build && tsx smoke/platform.smoke.ts && tsx smoke/protocol.smoke.ts && tsx smoke/lifecycle.smoke.ts && tsx smoke/isolation.smoke.ts"
   }
-}
+}

package/index.js

@@ -1 +0,0 @@
-throw new Error("@cotal-ai/seat bootstrap placeholder: this version provides no runtime implementation. Install an official release after trusted publishing is configured.");