@crosshands/runtime 0.1.2

package/dist/ipc/windows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows.d.ts","sourceRoot":"","sources":["../../src/ipc/windows.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,OAAO,CAAA;CAChB,CAAA;AAED,MAAM,WAAW,0BAA0B;IACzC,0BAA0B,IAAI,OAAO,CAAA;IACrC,UAAU,IAAI,eAAe,CAAA;CAC9B;AAED,wBAAgB,mBAAmB,CACjC,OAAO,CAAC,EAAE,0BAA0B,GACnC,0BAA0B,CAU5B"}

package/dist/ipc/windows.js

@@ -0,0 +1,10 @@
+export function windowsPipeSecurity(backend) {
+    if (process.platform !== 'win32') {
+        throw new Error('Windows named-pipe security is only available on Windows');
+    }
+    if (backend === undefined) {
+        throw new Error('Windows named-pipe security requires a native DACL and peer-verification backend');
+    }
+    return backend;
+}
+//# sourceMappingURL=windows.js.map

package/dist/ipc/windows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows.js","sourceRoot":"","sources":["../../src/ipc/windows.ts"],"names":[],"mappings":"AAaA,MAAM,UAAU,mBAAmB,CACjC,OAAoC;IAEpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/policy/policy.d.ts

@@ -0,0 +1,23 @@
+import type { ComputerOperationName } from '@crosshands/contract';
+export type StableAppIdentity = {
+    appId: string;
+    executableId: string;
+    publisher?: string;
+};
+export type AppClassification = 'allowed' | 'sensitive';
+export declare function classifyApp(identity: StableAppIdentity): AppClassification;
+export declare function assertAppAllowed(identity: StableAppIdentity): void;
+export declare function redactProtectedContent(value: unknown): unknown;
+export type DiagnosticEntry = {
+    event: 'operation';
+    operation: ComputerOperationName;
+} | {
+    event: 'error';
+    message: string;
+};
+export declare class SecretSafeDiagnostics {
+    readonly entries: DiagnosticEntry[];
+    operation(operation: ComputerOperationName, _input: unknown): void;
+    error(message: string, _cause?: unknown): void;
+}
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/policy/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAA;AAEjE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,WAAW,CAAA;AAYvD,wBAAgB,WAAW,CAAC,QAAQ,EAAE,iBAAiB,GAAG,iBAAiB,CAM1E;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAUlE;AAID,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAc9D;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,KAAK,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,qBAAqB,CAAA;CAAE,GACxD;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC,qBAAa,qBAAqB;IAChC,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,CAAK;IAExC,SAAS,CAAC,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI;IAIlE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI;CAG/C"}

package/dist/policy/policy.js

@@ -0,0 +1,53 @@
+const SENSITIVE_IDENTIFIERS = [
+    '1password',
+    'bitwarden',
+    'keychainaccess',
+    'keepass',
+    'lastpass',
+    'proton.pass',
+    'secrets'
+];
+export function classifyApp(identity) {
+    const stableIdentity = `${identity.appId}\n${identity.executableId}\n${identity.publisher ?? ''}`.toLowerCase();
+    return SENSITIVE_IDENTIFIERS.some((identifier) => stableIdentity.includes(identifier))
+        ? 'sensitive'
+        : 'allowed';
+}
+export function assertAppAllowed(identity) {
+    if (classifyApp(identity) === 'sensitive') {
+        const error = new Error('Sensitive applications are blocked by default');
+        Object.assign(error, {
+            code: 'app_blocked',
+            retry: false,
+            remediation: 'choose_non_sensitive_target'
+        });
+        throw error;
+    }
+}
+const PROTECTED_ROLES = new Set(['password', 'securetext', 'secret', 'credential']);
+export function redactProtectedContent(value) {
+    if (Array.isArray(value))
+        return value.map(redactProtectedContent);
+    if (value === null || typeof value !== 'object')
+        return value;
+    const record = value;
+    if (record.protected === true)
+        return '[REDACTED]';
+    const protectedRole = typeof record.role === 'string' && PROTECTED_ROLES.has(record.role.toLowerCase());
+    const result = {};
+    for (const [key, entry] of Object.entries(record)) {
+        const sensitiveKey = /^(value|text|password|secret|token|clipboard|data)$/i.test(key);
+        result[key] = protectedRole && sensitiveKey ? '[REDACTED]' : redactProtectedContent(entry);
+    }
+    return result;
+}
+export class SecretSafeDiagnostics {
+    entries = [];
+    operation(operation, _input) {
+        this.entries.push({ event: 'operation', operation });
+    }
+    error(message, _cause) {
+        this.entries.push({ event: 'error', message });
+    }
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/policy/policy.ts"],"names":[],"mappings":"AAUA,MAAM,qBAAqB,GAAG;IAC5B,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,SAAS;IACT,UAAU;IACV,aAAa;IACb,SAAS;CACD,CAAA;AAEV,MAAM,UAAU,WAAW,CAAC,QAA2B;IACrD,MAAM,cAAc,GAClB,GAAG,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,YAAY,KAAK,QAAQ,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAA;IAC1F,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACpF,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,SAAS,CAAA;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAA2B;IAC1D,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,WAAW,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;QACxE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;YACnB,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,6BAA6B;SAC3C,CAAC,CAAA;QACF,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAA;AAEnF,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAE7D,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,YAAY,CAAA;IAClD,MAAM,aAAa,GACjB,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACnF,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,YAAY,GAAG,sDAAsD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACrF,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,IAAI,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC5F,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAMD,MAAM,OAAO,qBAAqB;IACvB,OAAO,GAAsB,EAAE,CAAA;IAExC,SAAS,CAAC,SAAgC,EAAE,MAAe;QACzD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,MAAgB;QACrC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IAChD,CAAC;CACF"}

package/dist/providers/supervisor.d.ts

@@ -0,0 +1,17 @@
+import { type ComputerProvider, type ProviderHandshake, type ProviderRequest, type ProviderResponse } from '@crosshands/contract';
+export type ProviderSupervisorOptions = {
+    providerFactory: () => ComputerProvider;
+    graphicalSessionId: string;
+    maxInFlight?: number;
+};
+export declare class ProviderSupervisor {
+    #private;
+    constructor(options: ProviderSupervisorOptions);
+    get generation(): string | undefined;
+    start(): Promise<ProviderHandshake>;
+    dispatch(request: ProviderRequest): Promise<ProviderResponse>;
+    cancel(requestId: string): Promise<void>;
+    restart(): Promise<ProviderHandshake>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=supervisor.d.ts.map

package/dist/providers/supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/providers/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAA;AAE7B,MAAM,MAAM,yBAAyB,GAAG;IACtC,eAAe,EAAE,MAAM,gBAAgB,CAAA;IACvC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,qBAAa,kBAAkB;;gBASjB,OAAO,EAAE,yBAAyB;IAO9C,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAEK,KAAK,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAyCnC,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmC7D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxC,OAAO,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAKrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAiB7B"}

package/dist/providers/supervisor.js

@@ -0,0 +1,122 @@
+import { CONTRACT_VERSIONS, ProviderHandshakeSchema, createComputerError } from '@crosshands/contract';
+export class ProviderSupervisor {
+    #providerFactory;
+    #graphicalSessionId;
+    #maxInFlight;
+    #inFlight = new Set();
+    #provider;
+    #handshake;
+    #retirement = Promise.resolve();
+    constructor(options) {
+        this.#providerFactory = options.providerFactory;
+        this.#graphicalSessionId = options.graphicalSessionId;
+        this.#maxInFlight = options.maxInFlight ?? 16;
+        if (this.#maxInFlight <= 0)
+            throw new RangeError('maxInFlight must be positive');
+    }
+    get generation() {
+        return this.#handshake?.generation;
+    }
+    async start() {
+        await this.#retirement;
+        if (this.#handshake !== undefined)
+            return this.#handshake;
+        const provider = this.#providerFactory();
+        let handshake;
+        try {
+            handshake = ProviderHandshakeSchema.parse(await provider.start());
+        }
+        catch (cause) {
+            await provider.close().catch(() => undefined);
+            throw createComputerError('provider_unavailable', 'Provider handshake was malformed', {
+                cause: cause instanceof Error ? cause.name : 'unknown'
+            });
+        }
+        if (handshake.providerProtocol !== CONTRACT_VERSIONS.providerProtocol ||
+            handshake.publicContract !== CONTRACT_VERSIONS.publicContract) {
+            await provider.close().catch(() => undefined);
+            throw createComputerError('version_incompatible', 'Provider protocol is incompatible', {
+                expectedProviderProtocol: CONTRACT_VERSIONS.providerProtocol,
+                receivedProviderProtocol: handshake.providerProtocol,
+                expectedPublicContract: CONTRACT_VERSIONS.publicContract,
+                receivedPublicContract: handshake.publicContract
+            });
+        }
+        if (handshake.graphicalSessionId !== this.#graphicalSessionId) {
+            await provider.close().catch(() => undefined);
+            throw createComputerError('session_unavailable', 'Provider is attached to a different graphical session');
+        }
+        if (handshake.generation !== provider.generation) {
+            await provider.close().catch(() => undefined);
+            throw createComputerError('provider_unavailable', 'Provider generation handshake mismatch');
+        }
+        this.#provider = provider;
+        this.#handshake = handshake;
+        return handshake;
+    }
+    async dispatch(request) {
+        const provider = this.#provider ?? (await this.start(), this.#provider);
+        if (provider === undefined)
+            throw createComputerError('provider_unavailable', 'Provider failed to start');
+        if (this.#inFlight.size >= this.#maxInFlight) {
+            throw createComputerError('provider_unavailable', 'Provider backpressure limit reached');
+        }
+        if (request.deadlineAt <= Date.now()) {
+            throw createComputerError('timeout', 'Provider request deadline elapsed before dispatch');
+        }
+        this.#inFlight.add(request.requestId);
+        let timer;
+        let timedOut = false;
+        try {
+            const timeout = new Promise((_, reject) => {
+                timer = setTimeout(() => {
+                    timedOut = true;
+                    this.#retirement = this.#retire(provider, request.requestId);
+                    reject(createComputerError('timeout', 'Provider request deadline elapsed'));
+                }, request.deadlineAt - Date.now());
+                timer.unref();
+            });
+            return await Promise.race([provider.dispatch(request), timeout]);
+        }
+        catch (cause) {
+            if (timedOut)
+                await this.#retirement;
+            if (typeof cause === 'object' && cause !== null && 'code' in cause)
+                throw cause;
+            throw createComputerError('provider_crashed', 'Provider crashed or disconnected', {
+                cause: cause instanceof Error ? cause.message : 'unknown'
+            });
+        }
+        finally {
+            if (timer !== undefined)
+                clearTimeout(timer);
+            this.#inFlight.delete(request.requestId);
+        }
+    }
+    async cancel(requestId) {
+        if (!this.#inFlight.has(requestId))
+            return;
+        await this.#provider?.cancel(requestId);
+    }
+    async restart() {
+        await this.close();
+        return this.start();
+    }
+    async close() {
+        await this.#retirement;
+        const provider = this.#provider;
+        this.#provider = undefined;
+        this.#handshake = undefined;
+        this.#inFlight.clear();
+        await provider?.close();
+    }
+    async #retire(provider, requestId) {
+        if (this.#provider === provider) {
+            this.#provider = undefined;
+            this.#handshake = undefined;
+        }
+        await provider.cancel(requestId).catch(() => undefined);
+        await provider.close().catch(() => undefined);
+    }
+}
+//# sourceMappingURL=supervisor.js.map

package/dist/providers/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../src/providers/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,mBAAmB,EAKpB,MAAM,sBAAsB,CAAA;AAQ7B,MAAM,OAAO,kBAAkB;IACpB,gBAAgB,CAAwB;IACxC,mBAAmB,CAAQ;IAC3B,YAAY,CAAQ;IACpB,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACtC,SAAS,CAA8B;IACvC,UAAU,CAA+B;IACzC,WAAW,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;IAE9C,YAAY,OAAkC;QAC5C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAA;QAC/C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAA;QACrD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAA;QAC7C,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,8BAA8B,CAAC,CAAA;IAClF,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,UAAU,EAAE,UAAU,CAAA;IACpC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,WAAW,CAAA;QACtB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,UAAU,CAAA;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAA;QACxC,IAAI,SAA4B,CAAA;QAChC,IAAI,CAAC;YACH,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC7C,MAAM,mBAAmB,CAAC,sBAAsB,EAAE,kCAAkC,EAAE;gBACpF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aACvD,CAAC,CAAA;QACJ,CAAC;QACD,IACE,SAAS,CAAC,gBAAgB,KAAK,iBAAiB,CAAC,gBAAgB;YACjE,SAAS,CAAC,cAAc,KAAK,iBAAiB,CAAC,cAAc,EAC7D,CAAC;YACD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC7C,MAAM,mBAAmB,CAAC,sBAAsB,EAAE,mCAAmC,EAAE;gBACrF,wBAAwB,EAAE,iBAAiB,CAAC,gBAAgB;gBAC5D,wBAAwB,EAAE,SAAS,CAAC,gBAAgB;gBACpD,sBAAsB,EAAE,iBAAiB,CAAC,cAAc;gBACxD,sBAAsB,EAAE,SAAS,CAAC,cAAc;aACjD,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,kBAAkB,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9D,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC7C,MAAM,mBAAmB,CACvB,qBAAqB,EACrB,uDAAuD,CACxD,CAAA;QACH,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YACjD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YAC7C,MAAM,mBAAmB,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAA;QAC7F,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;QACzB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC3B,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAwB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QACvE,IAAI,QAAQ,KAAK,SAAS;YACxB,MAAM,mBAAmB,CAAC,sBAAsB,EAAE,0BAA0B,CAAC,CAAA;QAC/E,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,mBAAmB,CAAC,sBAAsB,EAAE,qCAAqC,CAAC,CAAA;QAC1F,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACrC,MAAM,mBAAmB,CAAC,SAAS,EAAE,mDAAmD,CAAC,CAAA;QAC3F,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACrC,IAAI,KAAiC,CAAA;QACrC,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,QAAQ,GAAG,IAAI,CAAA;oBACf,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;oBAC5D,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC,CAAA;gBAC7E,CAAC,EAAE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;gBACnC,KAAK,CAAC,KAAK,EAAE,CAAA;YACf,CAAC,CAAC,CAAA;YACF,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,MAAM,IAAI,CAAC,WAAW,CAAA;YACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK;gBAAE,MAAM,KAAK,CAAA;YAC/E,MAAM,mBAAmB,CAAC,kBAAkB,EAAE,kCAAkC,EAAE;gBAChF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;aAC1D,CAAC,CAAA;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK,KAAK,SAAS;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAA;YAC5C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAM;QAC1C,MAAM,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAClB,OAAO,IAAI,CAAC,KAAK,EAAE,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,WAAW,CAAA;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC3B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;QACtB,MAAM,QAAQ,EAAE,KAAK,EAAE,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAA0B,EAAE,SAAiB;QACzD,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;YAC1B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC7B,CAAC;QACD,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACvD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC;CACF"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@crosshands/runtime",
+  "version": "0.1.2",
+  "description": "Local broker, policy, provider supervision, and protected IPC for CrossHands",
+  "license": "MIT",
+  "files": [
+    "dist",
+    "src"
+  ],
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./src/index.ts",
+      "development": "./src/index.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@crosshands/contract": "0.1.2"
+  },
+  "devDependencies": {
+    "@types/node": "24.10.1",
+    "typescript": "5.9.3",
+    "vitest": "4.1.5"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run test"
+  }
+}