@eir-labs/coltrane 0.10.0 → 0.12.0

package/dist/src/server_relay.d.ts

@@ -22,8 +22,16 @@ export declare function matchServerRestart(msg: JsonRpcMessage): string | number
  */
 export declare function isToolsListResponse(msg: JsonRpcMessage): boolean;
 /**
- * In-place augment a `tools/list` response so it carries an extra entry for
- * `server_restart`. Returns the mutated message for convenience.
+ * In-place augment a `tools/list` response so it carries the relay's `server_restart` entry.
+ * Returns the mutated message for convenience.
+ *
+ * The relay is the TRUE owner of this tool — it intercepts `tools/call server_restart` and never
+ * lets it reach the child. So the schema the client discovers must be the relay's, which advertises
+ * the `force` restart-guard override (venue/8) the relay itself reads. The child's registry entry
+ * (src/mcp.ts) is an argument-free introspection stub that exists only so tool_inspect/system_audit
+ * see the tool; if it slipped into the client's list it would hide `force`. So we REPLACE any child
+ * entry with the relay's authoritative one, rather than defer to a stub that advertises less than
+ * the relay honours. The result carries exactly one `server_restart`, and it is the relay's.
  */
 export declare function augmentToolsList(msg: JsonRpcMessage): JsonRpcMessage;
 /**
@@ -48,6 +56,36 @@ export declare function buildRestartError(id: string | number | null, reason: st
  * discarded and the caller waits forever.
  */
 export declare function buildNoChildError(id: string | number | null, method: string): JsonRpcMessage;
+/** Reserved relay→child method: "which gigs are running right now?" → { running: string[] }. */
+export declare const RUNNING_GIGS_METHOD = "coltrane/relay/running_gigs";
+/** Reserved relay→child method (force path only): abort each running gig and LEDGER the abort,
+ *  BEFORE the child is killed, so a killed gig is a recorded fact rather than an absence. */
+export declare const ABORT_FOR_RESTART_METHOD = "coltrane/relay/abort_for_restart";
+/** How long the child gets to answer the pre-restart gig check before the relay refuses. A child
+ *  that does not answer is treated as UNHEALTHY — never assumed idle — because an unresponsive
+ *  child is exactly when a silent kill would destroy the most work and when a restart is most
+ *  likely to be issued (acceptance criterion 4). */
+export declare const PREFLIGHT_TIMEOUT_MS = 3000;
+/** Read the operator's explicit override off a server_restart tools/call. Deny-by-default: absent,
+ *  non-boolean, or false all mean "no override" — only a literal `force: true` unlocks the kill. */
+export declare function parseForceFlag(msg: JsonRpcMessage): boolean;
+/** Pull the running-gig ids out of the child's preflight answer, defensively. A child that answers
+ *  a wrong-shaped result is read as "reported nothing running" and is NEVER trusted into a kill. */
+export declare function extractRunningGigs(msg: JsonRpcMessage | null): string[];
+/**
+ * Build the JSON-RPC ERROR the relay returns when a restart is issued while gigs are in flight and
+ * no override was given. It NAMES each running gig — the whole point of the guard is that a killed
+ * gig stops being an absence, so the refusal that PREVENTS the kill must itself name what it saved.
+ */
+export declare function buildRestartRefusalError(id: string | number | null, gigIds: string[]): JsonRpcMessage;
+/**
+ * Build the JSON-RPC ERROR the relay returns when the child did not answer the pre-restart gig
+ * check in time. The relay holds no gig state, so a silent child means it cannot tell whether a
+ * restart would kill work — and it REFUSES rather than assume-healthy-and-kill, because an
+ * unresponsive child (hung, crashed mid-request, mid-swap) is precisely when a silent kill destroys
+ * the most and when a restart is most likely to be reached for (acceptance criterion 4). No SIGTERM.
+ */
+export declare function buildUnresponsiveChildError(id: string | number | null): JsonRpcMessage;
 /** How long a fresh child gets to answer the replayed `initialize` before the restart FAILS. */
 export declare const HANDSHAKE_REPLAY_TIMEOUT_MS = 10000;
 /** How long the OUTGOING child gets to honour SIGTERM before the relay escalates to SIGKILL. */

package/dist/src/server_relay.js

@@ -28,10 +28,15 @@ import { spawn } from "node:child_process";
 import { createInterface } from "node:readline";
 const SERVER_RESTART_TOOL = {
     name: "server_restart",
-    description: "Restart the Coltrane MCP server child process in place. Picks up new bytes after npm run build without ending the Claude Code conversation. Returns when the new child is up.",
+    description: "Restart the Coltrane MCP server child process in place. Picks up new bytes after npm run build without ending the Claude Code conversation. Refuses if a gig is still in flight (naming it) unless force=true, in which case each running gig is aborted and recorded in the ledger before the swap. Returns when the new child is up.",
     inputSchema: {
         type: "object",
-        properties: {},
+        properties: {
+            // The explicit override. Absent/false = deny-by-default: a restart with gigs in flight is
+            // REFUSED, naming them, so nothing is killed silently. `force: true` aborts + ledgers each
+            // running gig, then swaps — a killed gig is a recorded fact, never an absence.
+            force: { type: "boolean" },
+        },
         additionalProperties: false,
     },
 };
@@ -70,15 +75,21 @@ export function isToolsListResponse(msg) {
     return Array.isArray(result?.tools);
 }
 /**
- * In-place augment a `tools/list` response so it carries an extra entry for
- * `server_restart`. Returns the mutated message for convenience.
+ * In-place augment a `tools/list` response so it carries the relay's `server_restart` entry.
+ * Returns the mutated message for convenience.
+ *
+ * The relay is the TRUE owner of this tool — it intercepts `tools/call server_restart` and never
+ * lets it reach the child. So the schema the client discovers must be the relay's, which advertises
+ * the `force` restart-guard override (venue/8) the relay itself reads. The child's registry entry
+ * (src/mcp.ts) is an argument-free introspection stub that exists only so tool_inspect/system_audit
+ * see the tool; if it slipped into the client's list it would hide `force`. So we REPLACE any child
+ * entry with the relay's authoritative one, rather than defer to a stub that advertises less than
+ * the relay honours. The result carries exactly one `server_restart`, and it is the relay's.
  */
 export function augmentToolsList(msg) {
     const result = msg.result;
-    // Don't double-insert if the child already advertises it.
-    const existing = result.tools.some((t) => t.name === SERVER_RESTART_TOOL.name);
-    if (!existing)
-        result.tools.push(SERVER_RESTART_TOOL);
+    result.tools = result.tools.filter((t) => t.name !== SERVER_RESTART_TOOL.name);
+    result.tools.push(SERVER_RESTART_TOOL);
     return msg;
 }
 /**
@@ -140,6 +151,86 @@ export function buildNoChildError(id, method) {
         },
     };
 }
+// ────────────────────────────────────────────────────────────────────────────
+// Restart guard (venue/8) — a restart must never SILENTLY kill a running gig.
+//
+// THE DEFECT: `server_restart` used to SIGTERM its child with no preflight. Gigs run inside
+// that child and chairs are spawned as its children, so the kill was total — every in-flight
+// gig and seated chair died mid-phase, sealed outputs banked, and NO record saying they were
+// killed. Two publish seats died exactly this way (gigs 8146142e and 18726459): a passing
+// verdict, and no `result` event, because a killed gig leaves no trace. It was fail-OPEN on a
+// destructive path — the same class as `void venue;`: the destructive action was the quiet one.
+//
+// THE WRINKLE: the relay holds NO gig state (grep this file — zero references to gigs, outputs
+// or the runtime). It cannot know what a restart would destroy without ASKING the child. These
+// two reserved JSON-RPC methods carry that conversation; the child answers them (src/server.ts).
+// They are deliberately NOT MCP tools — they never appear in tools/list, so Claude Code cannot
+// call them and the relay's blindness stays structural: it asks, then acts on the answer.
+/** Reserved relay→child method: "which gigs are running right now?" → { running: string[] }. */
+export const RUNNING_GIGS_METHOD = "coltrane/relay/running_gigs";
+/** Reserved relay→child method (force path only): abort each running gig and LEDGER the abort,
+ *  BEFORE the child is killed, so a killed gig is a recorded fact rather than an absence. */
+export const ABORT_FOR_RESTART_METHOD = "coltrane/relay/abort_for_restart";
+/** How long the child gets to answer the pre-restart gig check before the relay refuses. A child
+ *  that does not answer is treated as UNHEALTHY — never assumed idle — because an unresponsive
+ *  child is exactly when a silent kill would destroy the most work and when a restart is most
+ *  likely to be issued (acceptance criterion 4). */
+export const PREFLIGHT_TIMEOUT_MS = 3_000;
+/** Read the operator's explicit override off a server_restart tools/call. Deny-by-default: absent,
+ *  non-boolean, or false all mean "no override" — only a literal `force: true` unlocks the kill. */
+export function parseForceFlag(msg) {
+    const args = msg.params?.["arguments"];
+    return args?.force === true;
+}
+/** Pull the running-gig ids out of the child's preflight answer, defensively. A child that answers
+ *  a wrong-shaped result is read as "reported nothing running" and is NEVER trusted into a kill. */
+export function extractRunningGigs(msg) {
+    const running = msg?.result?.running;
+    if (!Array.isArray(running))
+        return [];
+    return running.filter((g) => typeof g === "string" && g.length > 0);
+}
+/**
+ * Build the JSON-RPC ERROR the relay returns when a restart is issued while gigs are in flight and
+ * no override was given. It NAMES each running gig — the whole point of the guard is that a killed
+ * gig stops being an absence, so the refusal that PREVENTS the kill must itself name what it saved.
+ */
+export function buildRestartRefusalError(id, gigIds) {
+    return {
+        jsonrpc: "2.0",
+        id,
+        error: {
+            code: RELAY_ERROR_CODE,
+            message: `Coltrane MCP server restart REFUSED — ${gigIds.length} gig(s) still in flight: ` +
+                `${gigIds.join(", ")}. Restarting now kills the server child, and every running gig and ` +
+                "seated chair is a child of it, so they would die mid-phase with their sealed outputs " +
+                "banked and NO record that they were killed. Re-issue with `force: true` to abort the " +
+                "running gig(s) first — each abort is written to the ledger — then restart.",
+        },
+    };
+}
+/**
+ * Build the JSON-RPC ERROR the relay returns when the child did not answer the pre-restart gig
+ * check in time. The relay holds no gig state, so a silent child means it cannot tell whether a
+ * restart would kill work — and it REFUSES rather than assume-healthy-and-kill, because an
+ * unresponsive child (hung, crashed mid-request, mid-swap) is precisely when a silent kill destroys
+ * the most and when a restart is most likely to be reached for (acceptance criterion 4). No SIGTERM.
+ */
+export function buildUnresponsiveChildError(id) {
+    return {
+        jsonrpc: "2.0",
+        id,
+        error: {
+            code: RELAY_ERROR_CODE,
+            message: "Coltrane MCP server restart REFUSED — the server child did not answer the pre-restart " +
+                `gig check within ${PREFLIGHT_TIMEOUT_MS}ms (it may be hung, crashed mid-request, or ` +
+                "mid-swap). The relay holds no gig state, so it cannot know whether a restart would kill " +
+                "work in flight; assuming the child is idle and killing it anyway is the silent kill this " +
+                "guard exists to prevent. No SIGTERM was sent — check the relay's stderr and the child's " +
+                "health, or restart the MCP client.",
+        },
+    };
+}
 /** How long a fresh child gets to answer the replayed `initialize` before the restart FAILS. */
 export const HANDSHAKE_REPLAY_TIMEOUT_MS = 10_000;
 /** How long the OUTGOING child gets to honour SIGTERM before the relay escalates to SIGKILL. */
@@ -181,6 +272,13 @@ export async function runRelay(opts) {
     // the client already got one from the prior child, so the forwarder must swallow this dup.
     let replayInitId = undefined;
     let onInitReplayed = null;
+    // Reserved relay↔child requests (the pre-restart gig check + the force-path abort). Each is sent
+    // under a reserved STRING id the client never issues, so the forwarder can recognise the child's
+    // reply, resolve the waiting relay call, and NEVER forward it — these introspection messages stay
+    // invisible to Claude Code. Mirrors the `replayInitId` convention (one reserved id withheld from
+    // the forward loop), generalised to many concurrent reserved ids.
+    const pendingRelayRequests = new Map();
+    let relayReqSeq = 0;
     const forwardChildToParent = (c) => {
         // A write into a child that has already exited raises EPIPE as an 'error' event; unhandled,
         // that takes the whole relay down and severs the client pipe the relay exists to protect.
@@ -197,6 +295,16 @@ export async function runRelay(opts) {
                 process.stdout.write(line + "\n");
                 return;
             }
+            // A reply to a reserved relay↔child request (pre-restart gig check / abort-for-restart). A
+            // response has no method, and its id is one the relay minted and the client never issued.
+            // Resolve the waiting relay call and NEVER forward it — the relay holds no gig state; it only
+            // asks and acts on the answer, and these messages must stay invisible to Claude Code.
+            if (msg && msg.method === undefined && msg.id != null && pendingRelayRequests.has(msg.id)) {
+                const resolveRelay = pendingRelayRequests.get(msg.id);
+                pendingRelayRequests.delete(msg.id);
+                resolveRelay(msg);
+                return;
+            }
             // Swallow the replayed-handshake `initialize` response (a response = no method, and its
             // id matches the captured initialize). Then send `notifications/initialized` so the new
             // child reaches serving state, and signal the restart to complete.
@@ -322,6 +430,74 @@ export async function runRelay(opts) {
         }
         process.stderr.write("[coltrane-relay] dropped a message: no live server child\n");
     };
+    /**
+     * Send one reserved relay→child request and await its reply, or `null` if the child does not
+     * answer within `timeoutMs` (or there is no live child to ask). The reserved string id is
+     * withheld from the forward loop by the `pendingRelayRequests` branch above, so the client never
+     * sees this traffic. `null` is the load-bearing return: it is how "the child is unhealthy" reaches
+     * the caller, which is exactly the case a restart guard must not mistake for "nothing running".
+     */
+    const relayRequest = (method, timeoutMs) => {
+        if (!childAlive())
+            return Promise.resolve(null);
+        const target = child;
+        const id = `__coltrane_relay:${++relayReqSeq}`;
+        return new Promise((resolve) => {
+            let done = false;
+            const finish = (m) => {
+                if (done)
+                    return;
+                done = true;
+                clearTimeout(timer);
+                pendingRelayRequests.delete(id);
+                resolve(m);
+            };
+            const timer = setTimeout(() => finish(null), timeoutMs);
+            pendingRelayRequests.set(id, (m) => finish(m));
+            target.stdin.write(JSON.stringify({ jsonrpc: "2.0", id, method }) + "\n");
+        });
+    };
+    /**
+     * The restart guard. The relay holds no gig state, so it asks the child what a restart would
+     * destroy BEFORE any SIGTERM, and branches on the answer:
+     *   • child does not answer  → REFUSE (unresponsive), no SIGTERM — never assume an idle child.
+     *   • nothing running        → restart as today; the client's connection survives the swap.
+     *   • running, no force       → REFUSE, naming the running gig(s); the child is left untouched.
+     *   • running, force=true     → instruct the child to abort + LEDGER each running gig, THEN swap,
+     *                               so a killed gig is a recorded fact rather than an absence.
+     */
+    const handleRestart = async (restartId, force) => {
+        const answer = (reply) => { process.stdout.write(JSON.stringify(reply) + "\n"); };
+        const pre = await relayRequest(RUNNING_GIGS_METHOD, PREFLIGHT_TIMEOUT_MS);
+        if (pre === null) {
+            process.stderr.write("[coltrane-relay] restart refused: child did not answer the pre-restart gig check\n");
+            answer(buildUnresponsiveChildError(restartId));
+            return;
+        }
+        const running = extractRunningGigs(pre);
+        if (running.length > 0) {
+            if (!force) {
+                process.stderr.write(`[coltrane-relay] restart refused: ${running.length} gig(s) in flight: ${running.join(", ")}\n`);
+                answer(buildRestartRefusalError(restartId, running));
+                return;
+            }
+            // Force: the child records the abort of every running gig BEFORE it dies. Await the child's
+            // confirmation; if it does not answer, treat it as unresponsive and send NO SIGTERM.
+            const ack = await relayRequest(ABORT_FOR_RESTART_METHOD, PREFLIGHT_TIMEOUT_MS);
+            if (ack === null) {
+                process.stderr.write("[coltrane-relay] restart refused: child did not confirm the abort-for-restart\n");
+                answer(buildUnresponsiveChildError(restartId));
+                return;
+            }
+            process.stderr.write(`[coltrane-relay] force restart: aborted + ledgered ${running.length} gig(s): ${running.join(", ")}\n`);
+        }
+        // Reply only after the new child is up AND re-initialized, so the client's next tool call lands
+        // on a serving child rather than hanging — and reply with an ERROR when it did not (#260).
+        const outcome = await restartChild();
+        if (!outcome.ok)
+            process.stderr.write(`[coltrane-relay] restart failed: ${outcome.reason}\n`);
+        answer(outcome.ok ? buildRestartResponse(restartId) : buildRestartError(restartId, outcome.reason));
+    };
     const parentIn = createInterface({ input: process.stdin });
     parentIn.on("line", (line) => {
         let msg = null;
@@ -340,17 +516,8 @@ export async function runRelay(opts) {
                 storedInitialized = line;
             const restartId = matchServerRestart(msg);
             if (restartId !== undefined) {
-                // Handle locally. Reply only after the new child is up AND re-initialized, so the
-                // client's next tool call lands on a serving child rather than hanging — and reply
-                // with an ERROR when it did not, so a failed swap is diagnosable instead of silent.
-                void restartChild().then((outcome) => {
-                    const reply = outcome.ok
-                        ? buildRestartResponse(restartId)
-                        : buildRestartError(restartId, outcome.reason);
-                    if (!outcome.ok)
-                        process.stderr.write(`[coltrane-relay] restart failed: ${outcome.reason}\n`);
-                    process.stdout.write(JSON.stringify(reply) + "\n");
-                });
+                // Handle locally, through the guard — a silent kill must no longer be possible.
+                void handleRestart(restartId, parseForceFlag(msg));
                 return;
             }
         }

package/dist/src/server_relay.js.map

@@ -1 +1 @@
-{"version":3,"file":"server_relay.js","sourceRoot":"","sources":["../../src/server_relay.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,gBAAgB;AAChB,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,+CAA+C;AAC/C,EAAE;AACF,cAAc;AACd,qEAAqE;AACrE,qCAAqC;AACrC,2EAA2E;AAC3E,8EAA8E;AAC9E,qCAAqC;AACrC,yEAAyE;AACzE,2DAA2D;AAC3D,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,mDAAmD;AAEnD,OAAO,EAAE,KAAK,EAA4B,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKhD,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,+KAA+K;IACjL,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE;QACd,oBAAoB,EAAE,KAAK;KAC5B;CACF,CAAC;AAWF;;;;GAIG;AACH,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE;QAC1C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;QAClC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE;KACrD,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAmB;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,gBAAgB;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAmB;IACrD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,2BAA2B;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,MAA2C,CAAC;IAC/D,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAmB;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,MAA8B,CAAC;IAClD,0DAA0D;IAC1D,MAAM,QAAQ,GAAI,MAAM,CAAC,KAA6B,CAAC,IAAI,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,IAAI,CAC3C,CAAC;IACF,IAAI,CAAC,QAAQ;QAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAA0B;IAC7D,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM,EAAE;YACN,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,qEAAqE;iBAC5E;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAA0B,EAAE,MAAc;IAC1E,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,wCAAwC,MAAM,mCAAmC;gBACjF,oFAAoF;gBACpF,gDAAgD;SACnD;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAA0B,EAAE,MAAc;IAC1E,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,kDAAkD,MAAM,wBAAwB;gBAChF,uEAAuE;gBACvE,+CAA+C;SAClD;KACF,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAElD,gGAAgG;AAChG,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAK9C,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QAAC,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC,EAAE,IAAI,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC7F,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAA2B;IACxD,IAAI,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEvC,yEAAyE;IACzE,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAC5C,0FAA0F;IAC1F,2FAA2F;IAC3F,IAAI,YAAY,GAAuC,SAAS,CAAC;IACjE,IAAI,cAAc,GAAwB,IAAI,CAAC;IAE/C,MAAM,oBAAoB,GAAG,CAAC,CAAa,EAAE,EAAE;QAC7C,4FAA4F;QAC5F,0FAA0F;QAC1F,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,IAAI,GAAG,GAA0B,IAAI,CAAC;YACtC,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,wFAAwF;YACxF,wFAAwF;YACxF,mEAAmE;YACnE,IAAI,GAAG,IAAI,YAAY,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;gBAC7F,IAAI,iBAAiB;oBAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;gBAC/D,YAAY,GAAG,SAAS,CAAC;gBACzB,MAAM,IAAI,GAAG,cAAc,CAAC;gBAC5B,cAAc,GAAG,IAAI,CAAC;gBACtB,IAAI,EAAE,EAAE,CAAC;gBACT,OAAO,CAAC,4CAA4C;YACtD,CAAC;YACD,IAAI,GAAG,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,mEAAmE;YACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,IAAI,IAAI,MAAM,IAAI,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAE5B,MAAM,YAAY,GAAG,KAAK,IAA6B,EAAE;QACvD,qFAAqF;QACrF,wFAAwF;QACxF,EAAE;QACF,2FAA2F;QAC3F,0FAA0F;QAC1F,oFAAoF;QACpF,sFAAsF;QACtF,2FAA2F;QAC3F,gDAAgD;QAChD,EAAE;QACF,wFAAwF;QACxF,2FAA2F;QAC3F,uFAAuF;QACvF,oFAAoF;QACpF,uDAAuD;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,iDAAiD;YACjD,IAAI,QAAmD,CAAC;YACxD,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3D,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE;oBACxB,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;wBACzB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;4BAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAChF,GAAG,EAAE,CAAC;oBACR,CAAC,EAAE,wBAAwB,CAAC,CAAC;gBAC/B,CAAC,CAAC;aACH,CAAC,CAAC;YACH,kFAAkF;YAClF,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5B,2FAA2F;QAC3F,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrC,wFAAwF;QACxF,wFAAwF;QACxF,EAAE;QACF,0FAA0F;QAC1F,uFAAuF;QACvF,qFAAqF;QACrF,0FAA0F;QAC1F,yDAAyD;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,OAAO,MAAM,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;YACnD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,OAAuB,EAAQ,EAAE;gBAC/C,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAC/B,YAAY,GAAG,SAAS,CAAC;gBACzB,cAAc,GAAG,IAAI,CAAC;gBACtB,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,CAAC,CAAC;YACF,mFAAmF;YACnF,kDAAkD;YAClD,MAAM,WAAW,GAAG,CAAC,IAAmB,EAAE,MAA6B,EAAQ,EAAE;gBAC/E,MAAM,CAAC;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EACJ,8BAA8B,IAAI,IAAI,MAAM,YAAY,MAAM,IAAI,MAAM,IAAI;wBAC5E,qCAAqC;iBACxC,CAAC,CAAC;YACL,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,mEAAmE,2BAA2B,IAAI;iBAC3G,CAAC,CAAC;YACL,CAAC,EAAE,2BAA2B,CAAC,CAAC;YAChC,cAAc,GAAG,GAAS,EAAE,GAAG,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,YAAY,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAChC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,sEAAsE;IACtE,MAAM,UAAU,GAAG,GAAY,EAAE,CAC/B,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;IAE/E;;;;OAIG;IACH,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,GAA0B,EAAQ,EAAE;QACxE,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,2FAA2F;QAC3F,IAAI,GAAG,EAAE,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACrF,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC3B,IAAI,GAAG,GAA0B,IAAI,CAAC;QACtC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;YACR,mFAAmF;YACnF,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY;gBAAE,UAAU,GAAG,IAAI,CAAC;iBAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,2BAA2B;gBAAE,iBAAiB,GAAG,IAAI,CAAC;YAE9E,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,kFAAkF;gBAClF,mFAAmF;gBACnF,oFAAoF;gBACpF,KAAK,YAAY,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;oBACnC,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE;wBACtB,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC;wBACjC,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBACjD,IAAI,CAAC,OAAO,CAAC,EAAE;wBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;oBAC9F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;gBACrD,CAAC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QACD,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,MAAM,IAAI,OAAO,CAAO,GAAG,EAAE;QAC3B,4CAA4C;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"server_relay.js","sourceRoot":"","sources":["../../src/server_relay.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,gBAAgB;AAChB,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,+CAA+C;AAC/C,EAAE;AACF,cAAc;AACd,qEAAqE;AACrE,qCAAqC;AACrC,2EAA2E;AAC3E,8EAA8E;AAC9E,qCAAqC;AACrC,yEAAyE;AACzE,2DAA2D;AAC3D,EAAE;AACF,6EAA6E;AAC7E,0EAA0E;AAC1E,mDAAmD;AAEnD,OAAO,EAAE,KAAK,EAA4B,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKhD,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,wUAAwU;IAC1U,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,0FAA0F;YAC1F,2FAA2F;YAC3F,+EAA+E;YAC/E,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC3B;QACD,oBAAoB,EAAE,KAAK;KAC5B;CACF,CAAC;AAWF;;;;GAIG;AACH,SAAS,UAAU,CAAC,SAAiB;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE;QAC1C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC;QAClC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE;KACrD,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAmB;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,KAAK,gBAAgB;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAmB;IACrD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,2BAA2B;IACvE,MAAM,MAAM,GAAG,GAAG,CAAC,MAA2C,CAAC;IAC/D,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAmB;IAClD,MAAM,MAAM,GAAG,GAAG,CAAC,MAA8B,CAAC;IAClD,MAAM,CAAC,KAAK,GAAI,MAAM,CAAC,KAA6B,CAAC,MAAM,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,IAAI,CAC3C,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAA0B;IAC7D,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,MAAM,EAAE;YACN,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,qEAAqE;iBAC5E;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC;AAEhC;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAA0B,EAAE,MAAc;IAC1E,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,wCAAwC,MAAM,mCAAmC;gBACjF,oFAAoF;gBACpF,gDAAgD;SACnD;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAA0B,EAAE,MAAc;IAC1E,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,kDAAkD,MAAM,wBAAwB;gBAChF,uEAAuE;gBACvE,+CAA+C;SAClD;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,EAAE;AACF,4FAA4F;AAC5F,6FAA6F;AAC7F,6FAA6F;AAC7F,0FAA0F;AAC1F,8FAA8F;AAC9F,gGAAgG;AAChG,EAAE;AACF,+FAA+F;AAC/F,+FAA+F;AAC/F,iGAAiG;AACjG,+FAA+F;AAC/F,0FAA0F;AAE1F,gGAAgG;AAChG,MAAM,CAAC,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AACjE;6FAC6F;AAC7F,MAAM,CAAC,MAAM,wBAAwB,GAAG,kCAAkC,CAAC;AAE3E;;;oDAGoD;AACpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAE1C;oGACoG;AACpG,MAAM,UAAU,cAAc,CAAC,GAAmB;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,WAAW,CAAoC,CAAC;IAC1E,OAAO,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC;AAC9B,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,kBAAkB,CAAC,GAA0B;IAC3D,MAAM,OAAO,GAAI,GAAG,EAAE,MAA4C,EAAE,OAAO,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,EAA0B,EAAE,MAAgB;IACnF,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,yCAAyC,MAAM,CAAC,MAAM,2BAA2B;gBACjF,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qEAAqE;gBACzF,uFAAuF;gBACvF,uFAAuF;gBACvF,4EAA4E;SAC/E;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,EAA0B;IACpE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE;QACF,KAAK,EAAE;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,wFAAwF;gBACxF,oBAAoB,oBAAoB,8CAA8C;gBACtF,0FAA0F;gBAC1F,2FAA2F;gBAC3F,0FAA0F;gBAC1F,oCAAoC;SACvC;KACF,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAElD,gGAAgG;AAChG,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAK9C,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QAAC,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC,EAAE,IAAI,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC7F,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAA2B;IACxD,IAAI,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEvC,yEAAyE;IACzE,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAC5C,0FAA0F;IAC1F,2FAA2F;IAC3F,IAAI,YAAY,GAAuC,SAAS,CAAC;IACjE,IAAI,cAAc,GAAwB,IAAI,CAAC;IAE/C,iGAAiG;IACjG,iGAAiG;IACjG,kGAAkG;IAClG,iGAAiG;IACjG,kEAAkE;IAClE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAgD,CAAC;IACrF,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,MAAM,oBAAoB,GAAG,CAAC,CAAa,EAAE,EAAE;QAC7C,4FAA4F;QAC5F,0FAA0F;QAC1F,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAQ,EAAE,EAAE;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACrB,IAAI,GAAG,GAA0B,IAAI,CAAC;YACtC,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,2FAA2F;YAC3F,0FAA0F;YAC1F,8FAA8F;YAC9F,sFAAsF;YACtF,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1F,MAAM,YAAY,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;gBACvD,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAClB,OAAO;YACT,CAAC;YACD,wFAAwF;YACxF,wFAAwF;YACxF,mEAAmE;YACnE,IAAI,GAAG,IAAI,YAAY,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,YAAY,EAAE,CAAC;gBAC7F,IAAI,iBAAiB;oBAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;gBAC/D,YAAY,GAAG,SAAS,CAAC;gBACzB,MAAM,IAAI,GAAG,cAAc,CAAC;gBAC5B,cAAc,GAAG,IAAI,CAAC;gBACtB,IAAI,EAAE,EAAE,CAAC;gBACT,OAAO,CAAC,4CAA4C;YACtD,CAAC;YACD,IAAI,GAAG,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,mEAAmE;YACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,IAAI,IAAI,MAAM,IAAI,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAE5B,MAAM,YAAY,GAAG,KAAK,IAA6B,EAAE;QACvD,qFAAqF;QACrF,wFAAwF;QACxF,EAAE;QACF,2FAA2F;QAC3F,0FAA0F;QAC1F,oFAAoF;QACpF,sFAAsF;QACtF,2FAA2F;QAC3F,gDAAgD;QAChD,EAAE;QACF,wFAAwF;QACxF,2FAA2F;QAC3F,uFAAuF;QACvF,oFAAoF;QACpF,uDAAuD;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,iDAAiD;YACjD,IAAI,QAAmD,CAAC;YACxD,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3D,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE;oBACxB,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;wBACzB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;4BAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBAChF,GAAG,EAAE,CAAC;oBACR,CAAC,EAAE,wBAAwB,CAAC,CAAC;gBAC/B,CAAC,CAAC;aACH,CAAC,CAAC;YACH,kFAAkF;YAClF,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5B,2FAA2F;QAC3F,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrC,wFAAwF;QACxF,wFAAwF;QACxF,EAAE;QACF,0FAA0F;QAC1F,uFAAuF;QACvF,qFAAqF;QACrF,0FAA0F;QAC1F,yDAAyD;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC;QACpB,OAAO,MAAM,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,EAAE;YACnD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,OAAuB,EAAQ,EAAE;gBAC/C,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAC/B,YAAY,GAAG,SAAS,CAAC;gBACzB,cAAc,GAAG,IAAI,CAAC;gBACtB,OAAO,CAAC,OAAO,CAAC,CAAC;YACnB,CAAC,CAAC;YACF,mFAAmF;YACnF,kDAAkD;YAClD,MAAM,WAAW,GAAG,CAAC,IAAmB,EAAE,MAA6B,EAAQ,EAAE;gBAC/E,MAAM,CAAC;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EACJ,8BAA8B,IAAI,IAAI,MAAM,YAAY,MAAM,IAAI,MAAM,IAAI;wBAC5E,qCAAqC;iBACxC,CAAC,CAAC;YACL,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,MAAM,CAAC;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,mEAAmE,2BAA2B,IAAI;iBAC3G,CAAC,CAAC;YACL,CAAC,EAAE,2BAA2B,CAAC,CAAC;YAChC,cAAc,GAAG,GAAS,EAAE,GAAG,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,YAAY,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAChC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,sEAAsE;IACtE,MAAM,UAAU,GAAG,GAAY,EAAE,CAC/B,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC;IAE/E;;;;OAIG;IACH,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,GAA0B,EAAQ,EAAE;QACxE,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,2FAA2F;QAC3F,IAAI,GAAG,EAAE,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACnF,OAAO;QACT,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACrF,CAAC,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,SAAiB,EAAkC,EAAE;QACzF,IAAI,CAAC,UAAU,EAAE;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,KAAK,CAAC;QACrB,MAAM,EAAE,GAAG,oBAAoB,EAAE,WAAW,EAAE,CAAC;QAC/C,OAAO,IAAI,OAAO,CAAwB,CAAC,OAAO,EAAE,EAAE;YACpD,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,CAAwB,EAAQ,EAAE;gBAChD,IAAI,IAAI;oBAAE,OAAO;gBACjB,IAAI,GAAG,IAAI,CAAC;gBACZ,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,OAAO,CAAC,CAAC,CAAC,CAAC;YACb,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;YACxD,oBAAoB,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF;;;;;;;;OAQG;IACH,MAAM,aAAa,GAAG,KAAK,EAAE,SAAiC,EAAE,KAAc,EAAiB,EAAE;QAC/F,MAAM,MAAM,GAAG,CAAC,KAAqB,EAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAExG,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;QAC1E,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oFAAoF,CAAC,CAAC;YAC3G,MAAM,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,OAAO,CAAC,MAAM,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtH,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,4FAA4F;YAC5F,qFAAqF;YACrF,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,wBAAwB,EAAE,oBAAoB,CAAC,CAAC;YAC/E,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAC;gBACxG,MAAM,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC/C,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,OAAO,CAAC,MAAM,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/H,CAAC;QACD,gGAAgG;QAChG,2FAA2F;QAC3F,MAAM,OAAO,GAAG,MAAM,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAC9F,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACtG,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QAC3B,IAAI,GAAG,GAA0B,IAAI,CAAC;QACtC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;YACR,mFAAmF;YACnF,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY;gBAAE,UAAU,GAAG,IAAI,CAAC;iBAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,2BAA2B;gBAAE,iBAAiB,GAAG,IAAI,CAAC;YAE9E,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,gFAAgF;gBAChF,KAAK,aAAa,CAAC,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;QACH,CAAC;QACD,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,MAAM,IAAI,OAAO,CAAO,GAAG,EAAE;QAC3B,4CAA4C;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/tool_providers.d.ts

@@ -17,6 +17,33 @@ export type ToolProviderRegistry = ReadonlyMap<string, ToolProvider>;
 export declare const ENGINE_MCP_SERVER = "coltrane";
 /** A scoped grant like `Bash(npx vitest run:*)` resolves on its base tool name (`Bash`). */
 export declare function toolBaseName(grant: string): string;
+/**
+ * The host builtins to DENY for a seat whose effective allow set is `effectiveAllowed`: every
+ * HOST_BUILTINS member whose base name is absent from that set.
+ *
+ * This is the complement that makes the tool ceiling BIND by enforcement. `--allowedTools` is
+ * advisory for host builtins — a seat granted only `type_browse` still called `Bash` and `Read`,
+ * unrefused and unrecorded (gig 782e89d8, room-prober, twice) — and only `--disallowedTools`
+ * removes a builtin. So the ungranted host builtins must be enumerated into the deny list.
+ *
+ * HOST_BUILTINS stays UNEXPORTED: the 14-tool universe lives in one home, reachable only through
+ * this function, so no call site re-inlines it (the change request forbids re-inlining the oracles).
+ * Deterministic order (HOST_BUILTINS insertion order) so the emitted flag is stable.
+ */
+/**
+ * Is `name` one of the host builtins the runtime provides?
+ *
+ * A SECOND ACCESSOR over the same single home, deliberately — not a second copy. HOST_BUILTINS
+ * stays unexported for the reason stated above (one universe, no re-inlined oracles), and callers
+ * that need to ASK about a name rather than compute a complement now have a way to do it without
+ * copying the set. The player compiler is the first such caller: it prefixed every declared tool
+ * with `mcp__coltrane__` unconditionally, so a player could not name `Read` without compiling it
+ * into `mcp__coltrane__Read` — a dead name that binds to nothing and fails silently.
+ *
+ * Takes a BASE name; pass `toolBaseName(grant)` for a scoped grant like `Bash(git add:*)`.
+ */
+export declare function isHostBuiltin(name: string): boolean;
+export declare function hostBuiltinDenials(effectiveAllowed: Iterable<string>): string[];
 export interface ResolvedGrants {
     /** MCP server slug → its --mcp-config entry, deduped across all grants that share a server. */
     mcpServers: Record<string, unknown>;

package/dist/src/tool_providers.js

@@ -7,6 +7,20 @@ const HOST_BUILTINS = new Set([
     "Glob", "Grep", "LS",
     "WebFetch", "WebSearch",
     "Task", "TodoWrite",
+    // Added 2026-08-20, after they were OBSERVED escaping. Gig 34ff466b's review chair is
+    // `spec-reviewer`, whose record declares allowed_tools: [] and code_tool_access: "none" — a seat
+    // entitled to nothing. It called Monitor x13, LSP x6, ScheduleWakeup x2, ListAgents x1 and with
+    // them read the working tree, producing a verdict citing exact assertion counts and file sizes.
+    // It did not fabricate; it reached capabilities its grant never mentioned, because a tool absent
+    // from THIS SET is never in the complement below, so it is never denied. Monitor executes shell
+    // (`until <check>; do sleep 2; done`); LSP reads code; ListAgents discloses peer sessions;
+    // ScheduleWakeup schedules future work.
+    "Monitor", "LSP", "ListAgents", "ScheduleWakeup",
+    // DELIBERATELY ABSENT: ToolSearch. It is not a capability over the world — it is the loader a
+    // chair uses to reach the tools it WAS granted, including the engine's own output_write. Across
+    // the gig logs, 226 of 289 ToolSearch calls were loading output_write; denying it would sever the
+    // seal path for every model chair, which is the failure LAW 2 exists to prevent. It is governed
+    // by what it can load, not by whether it can run.
 ]);
 /** The engine's own MCP server slug — the key the repo's .mcp.json ships it under, and the prefix
  *  its tools are advertised behind (mcp__coltrane__<tool>). In-house engine tools are bridged through
@@ -17,6 +31,40 @@ export function toolBaseName(grant) {
     const paren = grant.indexOf("(");
     return (paren >= 0 ? grant.slice(0, paren) : grant).trim();
 }
+/**
+ * The host builtins to DENY for a seat whose effective allow set is `effectiveAllowed`: every
+ * HOST_BUILTINS member whose base name is absent from that set.
+ *
+ * This is the complement that makes the tool ceiling BIND by enforcement. `--allowedTools` is
+ * advisory for host builtins — a seat granted only `type_browse` still called `Bash` and `Read`,
+ * unrefused and unrecorded (gig 782e89d8, room-prober, twice) — and only `--disallowedTools`
+ * removes a builtin. So the ungranted host builtins must be enumerated into the deny list.
+ *
+ * HOST_BUILTINS stays UNEXPORTED: the 14-tool universe lives in one home, reachable only through
+ * this function, so no call site re-inlines it (the change request forbids re-inlining the oracles).
+ * Deterministic order (HOST_BUILTINS insertion order) so the emitted flag is stable.
+ */
+/**
+ * Is `name` one of the host builtins the runtime provides?
+ *
+ * A SECOND ACCESSOR over the same single home, deliberately — not a second copy. HOST_BUILTINS
+ * stays unexported for the reason stated above (one universe, no re-inlined oracles), and callers
+ * that need to ASK about a name rather than compute a complement now have a way to do it without
+ * copying the set. The player compiler is the first such caller: it prefixed every declared tool
+ * with `mcp__coltrane__` unconditionally, so a player could not name `Read` without compiling it
+ * into `mcp__coltrane__Read` — a dead name that binds to nothing and fails silently.
+ *
+ * Takes a BASE name; pass `toolBaseName(grant)` for a scoped grant like `Bash(git add:*)`.
+ */
+export function isHostBuiltin(name) {
+    return HOST_BUILTINS.has(name);
+}
+export function hostBuiltinDenials(effectiveAllowed) {
+    const granted = new Set();
+    for (const g of effectiveAllowed)
+        granted.add(toolBaseName(g));
+    return [...HOST_BUILTINS].filter((b) => !granted.has(b));
+}
 /** Claude Code MCP tools follow the `mcp__<server>__<tool>` naming convention. Extract the server
  *  slug so an MCP grant resolves to its server by convention — no per-tool registration needed. */
 export function mcpServerOf(grant) {

package/dist/src/tool_providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool_providers.js","sourceRoot":"","sources":["../../src/tool_providers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AA6B3D,mGAAmG;AACnG,kGAAkG;AAClG,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc;IACpD,MAAM,EAAE,YAAY,EAAE,WAAW;IACjC,MAAM,EAAE,MAAM,EAAE,IAAI;IACpB,UAAU,EAAE,WAAW;IACvB,MAAM,EAAE,WAAW;CACpB,CAAC,CAAC;AAEH;;+DAE+D;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE5C,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAkBD;mGACmG;AACnG,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1B,CAAC;AAED;;;sFAGsF;AACtF,MAAM,UAAU,iBAAiB,CAC/B,OAA0B,EAC1B,QAA8B,EAC9B,mBAAsD,EAAE;IAExD,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kDAAkD;YAChF,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;oBAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;gBACrE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,iCAAiC;YAC1F,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,2FAA2F;gBAC3F,2FAA2F;gBAC3F,0FAA0F;gBAC1F,6FAA6F;gBAC7F,wFAAwF;gBACxF,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACxD,gBAAgB,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;gBACxD,CAAC;qBAAM,CAAC;oBACN,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnE,UAAU,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBAC9C,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,wCAAwC;YACxE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kEAAkE;YACzF,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;uDAMuD;AACvD,MAAM,UAAU,kBAAkB,CAChC,KAAkG,EAClG,QAA8B,EAC9B,mBAAsD,EAAE;IAExD,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,WAAW;QAClC,CAAC,CAAC,EAAE,GAAG,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE;QAClD,CAAC,CAAC,gBAAgB,CAAC;IACrB,OAAO,iBAAiB,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAClF,CAAC;AAED;;kGAEkG;AAClG,MAAM,UAAU,0BAA0B,CACxC,SAAiB,EACjB,OAA0B,EAC1B,QAA8B,EAC9B,mBAAsD,EAAE;IAExD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACxE,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,UAAU,SAAS,kCAAkC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B;YAC3G,2FAA2F,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"tool_providers.js","sourceRoot":"","sources":["../../src/tool_providers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AA6B3D,mGAAmG;AACnG,kGAAkG;AAClG,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACjD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc;IACpD,MAAM,EAAE,YAAY,EAAE,WAAW;IACjC,MAAM,EAAE,MAAM,EAAE,IAAI;IACpB,UAAU,EAAE,WAAW;IACvB,MAAM,EAAE,WAAW;IACnB,sFAAsF;IACtF,iGAAiG;IACjG,gGAAgG;IAChG,gGAAgG;IAChG,iGAAiG;IACjG,gGAAgG;IAChG,2FAA2F;IAC3F,wCAAwC;IACxC,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,gBAAgB;IAChD,8FAA8F;IAC9F,gGAAgG;IAChG,kGAAkG;IAClG,gGAAgG;IAChG,kDAAkD;CACnD,CAAC,CAAC;AAEH;;+DAE+D;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AAE5C,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,gBAAkC;IACnE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,gBAAgB;QAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAkBD;mGACmG;AACnG,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACrD,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1B,CAAC;AAED;;;sFAGsF;AACtF,MAAM,UAAU,iBAAiB,CAC/B,OAA0B,EAC1B,QAA8B,EAC9B,mBAAsD,EAAE;IAExD,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kDAAkD;YAChF,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACvC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;oBAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;gBACrE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,iCAAiC;YAC1F,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,2FAA2F;gBAC3F,2FAA2F;gBAC3F,0FAA0F;gBAC1F,6FAA6F;gBAC7F,wFAAwF;gBACxF,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvF,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACxD,gBAAgB,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;gBACxD,CAAC;qBAAM,CAAC;oBACN,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnE,UAAU,CAAC,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;gBAC9C,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,wCAAwC;YACxE,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kEAAkE;YACzF,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;uDAMuD;AACvD,MAAM,UAAU,kBAAkB,CAChC,KAAkG,EAClG,QAA8B,EAC9B,mBAAsD,EAAE;IAExD,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,WAAW;QAClC,CAAC,CAAC,EAAE,GAAG,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE;QAClD,CAAC,CAAC,gBAAgB,CAAC;IACrB,OAAO,iBAAiB,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAClF,CAAC;AAED;;kGAEkG;AAClG,MAAM,UAAU,0BAA0B,CACxC,SAAiB,EACjB,OAA0B,EAC1B,QAA8B,EAC9B,mBAAsD,EAAE;IAExD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACxE,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,UAAU,SAAS,kCAAkC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B;YAC3G,2FAA2F,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/src/venue_credential.d.ts

@@ -0,0 +1,41 @@
+/** The worker environment a venue needs, canonical names only. Every one of these must arrive with a
+ *  truthy value from a single mint — a grant missing any of them is refused, not forwarded, because a
+ *  half-set moves the assembly problem to the caller while looking like success. This is the "always"
+ *  + "venue"-scoped core of the worker environment contract (SPEC-worker-contract.md), not the full
+ *  table: the conditional and tuning variables (COLTRANE_GIT_CREDENTIALS_URL, the bounded overrides)
+ *  are not required for a box to stand up, so their absence is not an incomplete grant. */
+export declare const REQUIRED_WORKER_ENV: readonly ["COLTRANE_STORE_URL", "COLTRANE_STORE_ANON", "COLTRANE_SERVICE_URL", "COLTRANE_DRAIN_KEY", "COLTRANE_INSTANCE"];
+/** The three reasons a mint cannot proceed, as an EXACT list — a refusal code is a contract with
+ *  clients, so a fourth appearing silently is a client branch nobody wrote. Sorted, this is
+ *  ['gig_scoped_token','incomplete_env','no_backend'] (spec_venue_credential_mint.test.ts). */
+export declare const VENUE_CREDENTIAL_REFUSALS: readonly ["gig_scoped_token", "no_backend", "incomplete_env"];
+export type VenueCredentialRefusal = (typeof VENUE_CREDENTIAL_REFUSALS)[number];
+/** Who is asking to mint. `kind` is the credential class the caller presented; `gig_id` is carried
+ *  only for a gig-scoped caller, and only so a refusal can be specific. This is NOT an authorization
+ *  principal — the engine reads exactly one thing off it (is this a gig token?), which is a
+ *  credential-scope fact, and forwards every other who-may-mint question to the store. */
+export interface CallerIdentity {
+    kind: "member" | "player" | "venue" | "gig";
+    gig_id?: string;
+}
+/** What a deployment's minting backend answers with. `credential_classes` is in
+ *  `VenueSchema.credential_surface` vocabulary — the room's own word for what may legitimately be
+ *  present — because that is the contract the provisioned box is then judged against by `realize`.
+ *  CLASSES, never material: a class name is what a `credential_surface` declares, never a field a
+ *  secret could occupy. */
+export interface VenueCredentialGrant {
+    instance: string;
+    env: Record<string, string>;
+    credential_classes: string[];
+    expires_at?: string | null;
+}
+/** The structural escalation check, decided from caller identity ALONE, before any backend is
+ *  reached. Returns the refusal code when the caller is gig-scoped, else null. This is credential
+ *  SCOPE, not policy: a gig token outliving its lease as a venue key is an escalation no store-side
+ *  gate catches, because the store sees a valid org-scoped request from a credential it issued. */
+export declare function gigScopeRefusal(caller: CallerIdentity | undefined): VenueCredentialRefusal | null;
+/** Which required worker-env variables the grant failed to supply a truthy value for. An empty array
+ *  means the environment is complete; a non-empty one is exactly what an `incomplete_env` refusal
+ *  names, so the caller learns what is missing instead of discovering it from a status code at first
+ *  write. */
+export declare function missingWorkerEnv(env: Record<string, string> | undefined): string[];

package/dist/src/venue_credential.js

@@ -0,0 +1,57 @@
+// THE VENUE CREDENTIAL SEAM — the engine ships the verb, its shape validation, and its refusals;
+// a deployment wires the minting backend. See SPEC-worker-contract.md §"Gap 1".
+//
+// A venue is any host that runs `coltrane work`. To stand one up you need an org-scoped,
+// instance-bound drain key plus the complete set of worker-environment variables. This file is the
+// engine half of `venue_credential_mint`: the required-env contract, the three typed refusals, and
+// the pure shape checks the surface handler (src/server.ts callSurfaceTool) applies around whatever
+// backend a deployment injects on ToolSurfaceDeps.mintVenueCredential.
+//
+// TWO THINGS DELIBERATELY ABSENT, each a design decision a later reader will be tempted to "fix":
+//   * NO read-back verb. The credential is answered exactly once and is never retrievable; there is
+//     no venue_credential_read and the engine does not persist the grant. Adding one would make
+//     every credential readable by anything holding the surface — the same widening the gig-scope
+//     refusal exists to prevent.
+//   * NO authorization policy. The engine has no opinion about WHO may run a venue and no way to
+//     check one — that rule lives in the store. The one caller check here (the gig-scope refusal) is
+//     a structural fact about credential SCOPE, not a who-may-mint decision: a gig credential expires
+//     with one gig's lease and a venue credential outlives every gig, so letting the first mint the
+//     second turns the narrowest credential in the system into the broadest. Every other question
+//     about who may mint belongs to a deployment this engine cannot see. No policy hook, allowlist,
+//     or role check lives here, and their absence is the design.
+/** The worker environment a venue needs, canonical names only. Every one of these must arrive with a
+ *  truthy value from a single mint — a grant missing any of them is refused, not forwarded, because a
+ *  half-set moves the assembly problem to the caller while looking like success. This is the "always"
+ *  + "venue"-scoped core of the worker environment contract (SPEC-worker-contract.md), not the full
+ *  table: the conditional and tuning variables (COLTRANE_GIT_CREDENTIALS_URL, the bounded overrides)
+ *  are not required for a box to stand up, so their absence is not an incomplete grant. */
+export const REQUIRED_WORKER_ENV = [
+    "COLTRANE_STORE_URL",
+    "COLTRANE_STORE_ANON",
+    "COLTRANE_SERVICE_URL",
+    "COLTRANE_DRAIN_KEY",
+    "COLTRANE_INSTANCE",
+];
+/** The three reasons a mint cannot proceed, as an EXACT list — a refusal code is a contract with
+ *  clients, so a fourth appearing silently is a client branch nobody wrote. Sorted, this is
+ *  ['gig_scoped_token','incomplete_env','no_backend'] (spec_venue_credential_mint.test.ts). */
+export const VENUE_CREDENTIAL_REFUSALS = [
+    "gig_scoped_token",
+    "no_backend",
+    "incomplete_env",
+];
+/** The structural escalation check, decided from caller identity ALONE, before any backend is
+ *  reached. Returns the refusal code when the caller is gig-scoped, else null. This is credential
+ *  SCOPE, not policy: a gig token outliving its lease as a venue key is an escalation no store-side
+ *  gate catches, because the store sees a valid org-scoped request from a credential it issued. */
+export function gigScopeRefusal(caller) {
+    return caller?.kind === "gig" ? "gig_scoped_token" : null;
+}
+/** Which required worker-env variables the grant failed to supply a truthy value for. An empty array
+ *  means the environment is complete; a non-empty one is exactly what an `incomplete_env` refusal
+ *  names, so the caller learns what is missing instead of discovering it from a status code at first
+ *  write. */
+export function missingWorkerEnv(env) {
+    return REQUIRED_WORKER_ENV.filter((key) => !env?.[key]);
+}
+//# sourceMappingURL=venue_credential.js.map

package/dist/src/venue_credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"venue_credential.js","sourceRoot":"","sources":["../../src/venue_credential.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,gFAAgF;AAChF,EAAE;AACF,yFAAyF;AACzF,mGAAmG;AACnG,mGAAmG;AACnG,oGAAoG;AACpG,uEAAuE;AACvE,EAAE;AACF,kGAAkG;AAClG,oGAAoG;AACpG,gGAAgG;AAChG,kGAAkG;AAClG,iCAAiC;AACjC,iGAAiG;AACjG,qGAAqG;AACrG,sGAAsG;AACtG,oGAAoG;AACpG,kGAAkG;AAClG,oGAAoG;AACpG,iEAAiE;AAEjE;;;;;2FAK2F;AAC3F,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,oBAAoB;IACpB,qBAAqB;IACrB,sBAAsB;IACtB,oBAAoB;IACpB,mBAAmB;CACX,CAAC;AAEX;;+FAE+F;AAC/F,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,kBAAkB;IAClB,YAAY;IACZ,gBAAgB;CACR,CAAC;AAyBX;;;mGAGmG;AACnG,MAAM,UAAU,eAAe,CAAC,MAAkC;IAChE,OAAO,MAAM,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED;;;aAGa;AACb,MAAM,UAAU,gBAAgB,CAAC,GAAuC;IACtE,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/src/venue_realize.d.ts

@@ -71,6 +71,29 @@ export interface RealizationRefusal extends RealizationSurface {
     };
 }
 export type Realization = RealizationOk | RealizationRefusal;
+/**
+ * The env keys a seat may carry from the ambient environment — the minimum a process needs to
+ * EXECUTE: PATH so the OS can locate its binary, HOME so the binary can resolve its own config. An
+ * explicit ALLOWLIST, not a deny-list: a key absent from this list never reaches the seat, so a
+ * credential added to the container later is excluded by default rather than by anyone remembering
+ * to strip it. This is the deny-by-default posture held unconditionally — it does not depend on the
+ * completeness of any strip-list (`withoutBoxCredentials`'s `BOX_CREDENTIAL_ENV` is a floor for the
+ * paths that never reach here, not the control).
+ *
+ * Why it is not `[]`: the seat env was `{}` (deny EVERYTHING), which is airtight but unspawnable —
+ * a `claude -p` child with no PATH cannot find its binary and dies with `spawn claude ENOENT`
+ * (measured, gig 87cffa2c), so no venue-confined seat ever ran. `['PATH','HOME']` is the
+ * minimum-viable widening: enough to start, no credential material.
+ *
+ * Why USER is admitted: on a macOS host with no `~/.claude/.credentials.json`, Claude auth is
+ * keychain-backed (a `Claude Code-credentials` keychain entry), and the keychain lookup needs USER
+ * to resolve the account. Measured: `claude -p` under {PATH,HOME} exits 1 with 'Not logged in ·
+ * Please run /login'; under {PATH,HOME,USER} it exits 0 and reaches the MCP server (gig 4506b567).
+ * On a Linux drain, credentials are file-based under HOME, so PATH+HOME already suffices and this
+ * key is inert. USER is a USERNAME, not a credential — admitting it carries no secret material, so
+ * the deny-by-default posture is unweakened; the allowlist grows by exactly one non-secret key.
+ */
+export declare const SEAT_ENV_ALLOWLIST: readonly ["PATH", "HOME", "USER"];
 /**
  * Realize a Venue contract into an enforced, observable performance space.
  *