@felan-ai/daemon 0.0.0-stage → 0.1.0

package/dist/daemon/host-config.js

@@ -0,0 +1,167 @@
+import { createHash } from 'node:crypto';
+import { isUtf8 } from 'node:buffer';
+import { constants } from 'node:fs';
+import { lstat, open } from 'node:fs/promises';
+import { isAbsolute, join } from 'node:path';
+import { Type } from 'typebox';
+import { JsonValueSchema, assertJson, parseSchema, text } from '@felan-ai/session-protocol';
+import { DaemonSecurityError } from './native-ownership.js';
+const ServiceSchema = Type.Object({
+    id: Type.String({ minLength: 1, maxLength: 128, pattern: '^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$' }),
+    major: Type.Integer({ minimum: 1, maximum: 65_535 }),
+    use: text(512, 1),
+    options: Type.Optional(JsonValueSchema),
+}, { additionalProperties: false });
+const ExtensionSchema = Type.Object({
+    package: text(256, 1), grants: Type.Optional(Type.Array(Type.String({ minLength: 1, maxLength: 128 }), { uniqueItems: true })),
+}, { additionalProperties: false });
+const PolicySchema = Type.Object({
+    projectTrust: Type.Optional(Type.Union([Type.Literal('allow'), Type.Literal('ask'), Type.Literal('deny')])),
+    dependencyInstalls: Type.Optional(Type.Union([Type.Literal('allow'), Type.Literal('ask'), Type.Literal('deny')])),
+}, { additionalProperties: false });
+export const HostConfigSchema = Type.Object({
+    version: Type.Literal(1),
+    services: Type.Array(ServiceSchema),
+    extensions: Type.Array(ExtensionSchema),
+    policy: Type.Optional(PolicySchema),
+}, { additionalProperties: false });
+export async function resolveHostComposition(config, manager, resolveSpecifier = (specifier, resolveFrom) => import.meta.resolve(specifier, resolveFrom)) {
+    if (!validPackageSpecifier(manager.packageName) || manager.version.length < 1 || manager.version.length > 128) {
+        throw new DaemonSecurityError('invalid_manager', 'Managing package identity is invalid.');
+    }
+    let anchor;
+    try {
+        anchor = new URL(manager.resolveFrom);
+    }
+    catch {
+        throw new DaemonSecurityError('invalid_manager', 'Managing package resolution anchor is invalid.');
+    }
+    if (anchor.protocol !== 'file:')
+        throw new DaemonSecurityError('invalid_manager', 'Managing package resolution anchor must be a file URL.');
+    const resolved = new Map();
+    for (const service of config.config.services) {
+        if (!resolved.has(service.use)) {
+            let url;
+            try {
+                url = manager.resolveProvider ? manager.resolveProvider(service.use) : resolveSpecifier(service.use, anchor.href);
+            }
+            catch (error) {
+                const reason = error instanceof Error ? `${error.name}: ${error.message}`.replace(/[\u0000-\u001f\u007f]/gu, '?').slice(0, 512) : 'resolution failed';
+                throw new DaemonSecurityError('provider_unavailable', `Configured provider ${service.use} is not exported by the managing installation (${reason}).`);
+            }
+            if (!url.startsWith('file:'))
+                throw new DaemonSecurityError('provider_unavailable', `Configured provider ${service.use} did not resolve to an installed file.`);
+            resolved.set(service.use, url);
+        }
+    }
+    const providers = config.config.services.map(service => Object.freeze({
+        id: service.id, major: service.major, specifier: service.use, moduleUrl: resolved.get(service.use),
+        ...(service.options === undefined ? {} : { options: service.options }),
+    }));
+    const resolvedProviders = [...resolved.entries()].sort(([a], [b]) => a.localeCompare(b));
+    const providerDigest = createHash('sha256').update(JSON.stringify({ manager: [manager.packageName, manager.version], services: config.config.services, providers: resolvedProviders })).digest('hex');
+    const configDigest = createHash('sha256').update(JSON.stringify({ manager: [manager.packageName, manager.version], config: config.config, providers: resolvedProviders })).digest('hex');
+    return Object.freeze({ managerPackage: manager.packageName, managerVersion: manager.version, providerDigest, configDigest, providers: Object.freeze(providers) });
+}
+export async function loadHostConfig(options) {
+    let source;
+    if (options.explicitPath !== undefined) {
+        if (!isAbsolute(options.explicitPath))
+            throw new DaemonSecurityError('unsafe_host_config', 'Explicit host configuration must use an absolute path.');
+        source = { kind: 'explicit', path: options.explicitPath };
+    }
+    else {
+        const agentPath = join(options.agentDir, 'host.json');
+        try {
+            await lstat(agentPath);
+            source = { kind: 'agent-directory', path: agentPath };
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+            if (!options.packagedDefaultPath || !isAbsolute(options.packagedDefaultPath)) {
+                throw new DaemonSecurityError('host_config_missing', 'No host.json exists and the managing package supplied no default configuration.');
+            }
+            source = { kind: 'packaged-default', path: options.packagedDefaultPath };
+        }
+    }
+    const bytes = await readTrustedConfigFile(source);
+    let raw;
+    try {
+        raw = JSON.parse(bytes.toString('utf8'));
+    }
+    catch {
+        throw new DaemonSecurityError('invalid_host_config', 'host.json is not valid JSON.');
+    }
+    let config;
+    try {
+        config = parseSchema(HostConfigSchema, raw);
+    }
+    catch (error) {
+        throw new DaemonSecurityError('invalid_host_config', error instanceof Error ? error.message : 'host.json does not match the supported schema.');
+    }
+    const providers = new Set();
+    for (const service of config.services) {
+        if (!validPackageSpecifier(service.use))
+            throw new DaemonSecurityError('invalid_host_config', `Service ${service.id}@${service.major} must name an installed package export.`);
+        const key = `${service.id}@${service.major}`;
+        if (providers.has(key))
+            throw new DaemonSecurityError('invalid_host_config', `Service ${key} has more than one configured provider.`);
+        providers.add(key);
+    }
+    const extensions = new Set();
+    for (const extension of config.extensions) {
+        if (!validPackageSpecifier(extension.package))
+            throw new DaemonSecurityError('invalid_host_config', 'Extensions must name installed package exports.');
+        if (extensions.has(extension.package))
+            throw new DaemonSecurityError('invalid_host_config', `Extension ${extension.package} is duplicated.`);
+        extensions.add(extension.package);
+        if (extension.grants?.some(grant => !/^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*@[1-9][0-9]{0,4}$/u.test(grant))) {
+            throw new DaemonSecurityError('invalid_host_config', `Extension ${extension.package} has an invalid service grant.`);
+        }
+    }
+    assertJson(config);
+    rejectCredentialValues(config);
+    const normalized = Buffer.from(JSON.stringify(config));
+    return Object.freeze({ config, source, digest: createHash('sha256').update(normalized).digest('hex') });
+}
+const CREDENTIAL_KEY = /^(?:password|passphrase|secret|client.?secret|(?:access|refresh|auth|bearer|api).?token|token|api.?key|private.?key|credentials?)$/iu;
+function rejectCredentialValues(value) {
+    if (value === null || typeof value !== 'object')
+        return;
+    for (const [key, child] of Object.entries(value)) {
+        if (CREDENTIAL_KEY.test(key)) {
+            throw new DaemonSecurityError('invalid_host_config', 'host.json cannot contain credential values; configure a host-owned secret service.');
+        }
+        rejectCredentialValues(child);
+    }
+}
+export function validPackageSpecifier(specifier) {
+    if (specifier.length > 512 || specifier.startsWith('.') || specifier.startsWith('/') || specifier.includes('\\') || specifier.includes(':'))
+        return false;
+    const segments = specifier.split('/');
+    if (segments.some(segment => segment === '.' || segment === '..' || segment.length === 0))
+        return false;
+    if (specifier.startsWith('@'))
+        return segments.length >= 2 && /^@[A-Za-z0-9._-]+$/u.test(segments[0]) && /^[A-Za-z0-9._-]+$/u.test(segments[1]) && segments.slice(2).every(isExportSegment);
+    return /^[A-Za-z0-9._-]+$/u.test(segments[0]) && segments.slice(1).every(isExportSegment);
+}
+function isExportSegment(value) { return /^[A-Za-z0-9._~-]+$/u.test(value); }
+/** host.json selects executable providers, so only its owner may be able to change it. */
+async function readTrustedConfigFile(source) {
+    let bytes;
+    const handle = await open(source.path, constants.O_RDONLY).catch(() => { throw new DaemonSecurityError('unsafe_host_config', 'host.json path is unavailable.'); });
+    try {
+        const stat = await handle.stat();
+        if (!stat.isFile() || (stat.mode & 0o022) !== 0)
+            throw new DaemonSecurityError('unsafe_host_config', 'host.json must be a regular file that is not group or world writable.');
+        bytes = await handle.readFile();
+    }
+    finally {
+        await handle.close();
+    }
+    if (!isUtf8(bytes))
+        throw new DaemonSecurityError('invalid_host_config', 'host.json must be valid UTF-8.');
+    return bytes;
+}
+//# sourceMappingURL=host-config.js.map

package/dist/daemon/host-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-config.js","sourceRoot":"","sources":["../../src/daemon/host-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAe,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAC5F,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAChG,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACpD,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACjB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;CACxC,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AACpC,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;CAC/H,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AACpC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/B,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3G,kBAAkB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;CAClH,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AACpC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;IACnC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;IACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;CACpC,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AAuCpC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAwB,EAAE,OAAoB,EACzF,mBAAuE,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC;IAC9I,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC9G,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,uCAAuC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;IAAC,CAAC;IAC5J,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,wDAAwD,CAAC,CAAC;IAC5I,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBAAC,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAC1H,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;gBACtJ,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,EAAE,uBAAuB,OAAO,CAAC,GAAG,kDAAkD,MAAM,IAAI,CAAC,CAAC;YACxJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,EAAE,uBAAuB,OAAO,CAAC,GAAG,wCAAwC,CAAC,CAAC;YAChK,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACpE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAE;QACnG,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KACvE,CAAC,CAAC,CAAC;IACJ,MAAM,iBAAiB,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtM,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzL,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AACpK,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAIpC;IACC,IAAI,MAAwB,CAAC;IAC7B,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,EAAE,wDAAwD,CAAC,CAAC;QACrJ,MAAM,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;YACvB,MAAM,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;YACpE,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC7E,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,iFAAiF,CAAC,CAAC;YAC1I,CAAC;YACD,MAAM,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IACjD,MAAM,CAAC;QAAC,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,8BAA8B,CAAC,CAAC;IAAC,CAAC;IAC/F,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QAAC,MAAM,GAAG,WAAW,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAAC,CAAC;IACpD,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC;IAAC,CAAC;IAClK,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,WAAW,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,yCAAyC,CAAC,CAAC;QAC/K,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAC7C,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,WAAW,GAAG,yCAAyC,CAAC,CAAC;QACtI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1C,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,iDAAiD,CAAC,CAAC;QACvJ,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,aAAa,SAAS,CAAC,OAAO,iBAAiB,CAAC,CAAC;QAC7I,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,qDAAqD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACxG,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,aAAa,SAAS,CAAC,OAAO,gCAAgC,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IACD,UAAU,CAAC,MAAM,CAAC,CAAC;IACnB,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAC1G,CAAC;AAED,MAAM,cAAc,GAAG,sIAAsI,CAAC;AAE9J,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IACxD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,oFAAoF,CAAC,CAAC;QAC7I,CAAC;QACD,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1J,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxG,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC9L,OAAO,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,IAAa,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAE9F,0FAA0F;AAC1F,KAAK,UAAU,qBAAqB,CAAC,MAAwB;IAC3D,IAAI,KAAa,CAAC;IAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnK,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,EAAE,uEAAuE,CAAC,CAAC;QAC9K,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,qBAAqB,EAAE,gCAAgC,CAAC,CAAC;IAC3G,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/daemon/host-services.d.ts

@@ -0,0 +1,61 @@
+import type { AgentRuntime, ExtensionConfigDefinition, ExtensionConfigOverride, ModelRuntime, RuntimeDependencyInstallResult } from '@felan-ai/agent-core';
+import type { JsonValue, OperationParams, OperationResult, SetupCatalog, SetupJob, SetupStart } from '@felan-ai/session-protocol';
+import type { InteractionBroker } from './broker.js';
+export interface HostConfiguration {
+    get(scope: OperationParams<'config.get'>['scope'], model?: {
+        provider: string;
+        id: string;
+    }): Promise<OperationResult<'config.get'>>;
+    set(scope: OperationParams<'config.set'>['scope'], input: unknown): Promise<void>;
+    prepare(scope: OperationParams<'config.set'>['scope'], input: unknown): void;
+    sessionOverrides(input: unknown, previous?: readonly ExtensionConfigOverride[]): {
+        extensionId: string;
+        source: string;
+        values: Record<string, JsonValue>;
+    }[];
+    sessionValues(overrides: readonly ExtensionConfigOverride[]): Promise<OperationResult<'config.get'>>;
+}
+export interface HostSetup {
+    dependency(id: string): {
+        readonly label: string;
+        readonly description: string;
+    } | undefined;
+    installApprovedDependency(id: string, signal?: AbortSignal): Promise<RuntimeDependencyInstallResult>;
+    catalog(): Promise<SetupCatalog>;
+    validateStart(value: SetupStart): void;
+    start(request: SetupStart, client: string): SetupJob;
+    read(id: string, client: string): SetupJob;
+    answer(id: string, promptId: string, text: string, client: string): Promise<void>;
+    cancel(id: string, client: string): void;
+    prepareOpenLink(id: string, index: number, client: string): () => Promise<void>;
+    disconnected(client: string): void;
+    beginDrain(): void;
+    /** Accepts new jobs again after an abandoned drain. */
+    endDrain?(): void;
+    drain(): Promise<void>;
+}
+export interface HostServices {
+    readonly configuration: HostConfiguration;
+    readonly setup: HostSetup;
+    prepareRoot?(request: {
+        cwd: string;
+        extensions?: readonly string[];
+    }, caller: {
+        recipient?: string;
+        signal: AbortSignal;
+    }): Promise<{
+        cwd: string;
+        extensionPaths: readonly string[];
+    }>;
+}
+export interface HostServicesRequest {
+    readonly agentDir: string;
+    readonly homeDir: string;
+    readonly runtime: AgentRuntime;
+    readonly models: ModelRuntime;
+    readonly definitions: readonly ExtensionConfigDefinition[];
+    readonly interactions: Pick<InteractionBroker, 'request'>;
+    refreshModelAvailability(signal: AbortSignal): Promise<void>;
+    assertCurrent(): void;
+}
+//# sourceMappingURL=host-services.d.ts.map

package/dist/daemon/host-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-services.d.ts","sourceRoot":"","sources":["../../src/daemon/host-services.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,YAAY,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAC3J,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAClI,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;IACrI,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7E,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;KAAE,EAAE,CAAC;IAC9J,aAAa,CAAC,SAAS,EAAE,SAAS,uBAAuB,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;CACtG;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC7F,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACrG,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IACjC,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IACvC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IACrD,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC3C,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,IAAI,IAAI,CAAC;IACnB,uDAAuD;IACvD,QAAQ,CAAC,IAAI,IAAI,CAAC;IAClB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,aAAa,EAAE,iBAAiB,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,WAAW,CAAC,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,EAAE,MAAM,EAAE;QAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAC;KACzC,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC3D,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAC1D,wBAAwB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,aAAa,IAAI,IAAI,CAAC;CACvB"}

package/dist/daemon/host-services.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=host-services.js.map

package/dist/daemon/host-services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-services.js","sourceRoot":"","sources":["../../src/daemon/host-services.ts"],"names":[],"mappings":""}

package/dist/daemon/ipc.d.ts

@@ -0,0 +1,14 @@
+import { type Socket } from 'node:net';
+import { type ControlResponse, type DaemonIdentity } from '@felan-ai/session-protocol';
+import { type ResolvedDaemonTarget } from './target.js';
+import type { DaemonOwnership } from './ownership.js';
+export interface LocalIpcListener {
+    close(): void;
+}
+export declare function listenLocalIpc(owner: DaemonOwnership, onConnection: (socket: Socket) => void): Promise<LocalIpcListener>;
+export declare function connectLocalIpc(target: ResolvedDaemonTarget): Promise<Socket>;
+export declare function readinessResponse(owner: DaemonOwnership, version: string, re: string): ControlResponse;
+export declare function serveReadiness(owner: DaemonOwnership, version: string, socket: Socket): void;
+export declare function readControlFrame(socket: Socket, timeoutMs: number): Promise<ControlResponse>;
+export declare function probeDaemon(target: ResolvedDaemonTarget, expected: DaemonIdentity, timeoutMs?: number): Promise<ControlResponse>;
+//# sourceMappingURL=ipc.d.ts.map

package/dist/daemon/ipc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc.d.ts","sourceRoot":"","sources":["../../src/daemon/ipc.ts"],"names":[],"mappings":"AACA,OAAO,EAA6B,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AAElE,OAAO,EAA8G,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAEnM,OAAO,EAAwE,KAAK,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC9H,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAUtD,MAAM,WAAW,gBAAgB;IAAG,KAAK,IAAI,IAAI,CAAA;CAAE;AACnD,wBAAsB,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmE9H;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAKnF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,eAAe,CAGtG;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAgB5F;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAoBlG;AAED,wBAAsB,WAAW,CAAC,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAUrI"}

package/dist/daemon/ipc.js

@@ -0,0 +1,233 @@
+import { closeSync, lstatSync, unlinkSync } from 'node:fs';
+import { createServer } from 'node:net';
+import { randomUUID } from 'node:crypto';
+import { CONTROL_VERSION, PROTOCOL_VERSION, JsonLineDecoder, encodeFrame, parseControlRequest, parseControlResponse } from '@felan-ai/session-protocol';
+import { connectUnix, DaemonSecurityError, listenUnix, peerUid, protectSocket } from './native-ownership.js';
+import { assertPathIdentity, assertTargetIdentity, pathIdentity, pinPathChain } from './target.js';
+function endpointExists(path) { try {
+    lstatSync(path);
+    return true;
+}
+catch (error) {
+    if (error.code === 'ENOENT')
+        return false;
+    throw error;
+} }
+function validateSocket(target) {
+    const stat = lstatSync(target.endpoint, { bigint: true });
+    if (!stat.isSocket() || stat.uid !== BigInt(target.uid) || (stat.mode & 63n) !== 0n)
+        throw new DaemonSecurityError('unsafe_endpoint', 'Endpoint must be an owner-only Unix socket, never a symlink or other file.');
+    for (const pin of pinPathChain(target.runtimeDirectory, target.uid))
+        assertPathIdentity(pin);
+    return pathIdentity(target.endpoint);
+}
+export async function listenLocalIpc(owner, onConnection) {
+    owner.assertCurrent();
+    const target = owner.target;
+    if (endpointExists(target.endpoint)) {
+        const stale = validateSocket(target);
+        try {
+            const live = await connectUnix(target.endpoint, target.uid, 200);
+            live.destroy();
+            throw new DaemonSecurityError('endpoint_live', 'A live endpoint exists; never unlink it to force startup.');
+        }
+        catch (error) {
+            if (!(error instanceof DaemonSecurityError) || error.code !== 'stale_endpoint')
+                throw error;
+        }
+        owner.assertCurrent();
+        assertPathIdentity(stale);
+        unlinkSync(target.endpoint);
+    }
+    owner.assertCurrent();
+    const fd = listenUnix(target.endpoint);
+    let closed = false;
+    const connections = new Set();
+    let pin;
+    let server;
+    let transferred = false;
+    let unwatch = () => { };
+    let unsubscribe = () => { };
+    function close() {
+        unsubscribe();
+        if (closed) {
+            unwatch();
+            return;
+        }
+        closed = true;
+        // Once listen({ fd }) adopts the descriptor, only libuv may close it.
+        if (transferred)
+            server.close();
+        else
+            closeSync(fd);
+        for (const socket of connections)
+            socket.destroy();
+        connections.clear();
+        try {
+            owner.assertCurrent();
+            if (pin) {
+                assertPathIdentity(pin);
+                unwatch();
+                unlinkSync(target.endpoint);
+            }
+        }
+        catch { /* Never remove a replacement endpoint or clean up after ownership loss. */ }
+        finally {
+            unwatch();
+        }
+    }
+    function acceptConnection(socket) {
+        socket.on('error', () => { });
+        socket.once('close', () => connections.delete(socket));
+        if (closed) {
+            socket.destroy();
+            return;
+        }
+        try {
+            owner.assertCurrent();
+            // libuv's uv__accept sets O_NONBLOCK and FD_CLOEXEC before Node emits a connection.
+            const peerFd = socket._handle?.fd;
+            if (typeof peerFd !== 'number' || !Number.isInteger(peerFd) || peerFd < 0) {
+                socket.destroy();
+                return;
+            }
+            try {
+                if (peerUid(peerFd) !== target.uid) {
+                    socket.destroy();
+                    return;
+                }
+            }
+            catch {
+                socket.destroy();
+                return;
+            }
+            owner.assertCurrent();
+            if (connections.size >= 64) {
+                socket.destroy();
+                return;
+            }
+            connections.add(socket);
+            onConnection(socket);
+        }
+        catch {
+            socket.destroy();
+            close();
+        }
+    }
+    try {
+        protectSocket(target.endpoint);
+        pin = validateSocket(target);
+        unwatch = owner.watchPath(target.endpoint);
+        unsubscribe = owner.onLost(close);
+        owner.assertCurrent();
+        assertPathIdentity(pin);
+        await new Promise((resolve, reject) => {
+            server = createServer(acceptConnection);
+            server.on('error', error => { reject(error); close(); });
+            server.listen({ fd, exclusive: true, backlog: 64 }, resolve);
+            transferred = true;
+        });
+        owner.assertCurrent();
+        assertPathIdentity(pin);
+        return { close };
+    }
+    catch (error) {
+        close();
+        throw error;
+    }
+}
+export async function connectLocalIpc(target) {
+    const pins = [...pinPathChain(target.runtimeDirectory, target.uid), validateSocket(target)];
+    const socket = await connectUnix(target.endpoint, target.uid);
+    try {
+        for (const pin of pins)
+            assertPathIdentity(pin);
+        return socket;
+    }
+    catch (error) {
+        socket.destroy();
+        throw error;
+    }
+}
+export function readinessResponse(owner, version, re) {
+    owner.assertCurrent();
+    return { control: CONTROL_VERSION, re, identity: owner.identity, daemonVersion: version, supportedProtocol: PROTOCOL_VERSION, state: 'ready', outcome: 'accepted' };
+}
+export function serveReadiness(owner, version, socket) {
+    const decoder = new JsonLineDecoder();
+    let bytes = 0;
+    const timeout = setTimeout(() => socket.destroy(), 2_000);
+    socket.once('close', () => clearTimeout(timeout));
+    socket.on('data', (chunk) => {
+        try {
+            owner.assertCurrent();
+            bytes += chunk.length;
+            if (bytes > 16_384)
+                throw new Error('oversize');
+            for (const frame of decoder.push(chunk)) {
+                const request = parseControlRequest(frame);
+                if (request.op !== 'host.status')
+                    throw new Error('readiness is read-only');
+                assertTargetIdentity(owner.target, request.params.expected, owner.identity);
+                socket.end(encodeFrame(readinessResponse(owner, version, request.id)));
+            }
+        }
+        catch {
+            socket.destroy();
+        }
+    });
+}
+export async function readControlFrame(socket, timeoutMs) {
+    return new Promise((resolve, reject) => {
+        const decoder = new JsonLineDecoder();
+        let bytes = 0;
+        const timeout = setTimeout(() => finish(new DaemonSecurityError('readiness_timeout', 'Daemon did not become ready before the deadline.')), timeoutMs);
+        function finish(error, response) {
+            clearTimeout(timeout);
+            socket.off('data', onData);
+            socket.off('error', onError);
+            socket.off('end', onEnd);
+            if (error)
+                reject(error);
+            else
+                resolve(response);
+        }
+        function onError() { finish(new DaemonSecurityError('unavailable', 'Daemon readiness connection failed.')); }
+        function onEnd() { finish(new DaemonSecurityError('unavailable', 'Daemon closed before readiness.')); }
+        function onData(chunk) {
+            try {
+                bytes += chunk.length;
+                if (bytes > 16_384)
+                    throw new Error('oversize');
+                const frames = decoder.push(chunk);
+                if (frames.length > 1)
+                    throw new Error('multiple readiness frames');
+                if (frames.length === 1)
+                    finish(undefined, parseControlResponse(frames[0]));
+            }
+            catch {
+                finish(new DaemonSecurityError('invalid_readiness', 'Malformed or oversized daemon readiness response.'));
+            }
+        }
+        socket.on('data', onData);
+        socket.once('error', onError);
+        socket.once('end', onEnd);
+    });
+}
+export async function probeDaemon(target, expected, timeoutMs = 2_000) {
+    const socket = await connectLocalIpc(target);
+    try {
+        const id = randomUUID();
+        const response = readControlFrame(socket, timeoutMs);
+        socket.write(encodeFrame({ control: CONTROL_VERSION, id, op: 'host.status', params: { expected } }));
+        const ready = await response;
+        assertTargetIdentity(target, expected, ready.identity);
+        if (ready.re !== id || ready.outcome !== 'accepted' || ready.state !== 'ready' || ready.supportedProtocol !== PROTOCOL_VERSION)
+            throw new DaemonSecurityError('invalid_readiness', 'Daemon is not ready for this protocol.');
+        return ready;
+    }
+    finally {
+        socket.destroy();
+    }
+}
+//# sourceMappingURL=ipc.js.map

package/dist/daemon/ipc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipc.js","sourceRoot":"","sources":["../../src/daemon/ipc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,YAAY,EAA4B,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,mBAAmB,EAAE,oBAAoB,EAA6C,MAAM,4BAA4B,CAAC;AACnM,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC7G,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,YAAY,EAAE,YAAY,EAA6B,MAAM,aAAa,CAAC;AAG9H,SAAS,cAAc,CAAC,IAAY,IAAa,IAAI,CAAC;IAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,IAAI,CAAC;AAAC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAAC,MAAM,KAAK,CAAC;AAAC,CAAC,CAAC,CAAC;AAC7L,SAAS,cAAc,CAAC,MAA4B;IAClD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAM,CAAC,KAAK,EAAE;QAAE,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,4EAA4E,CAAC,CAAC;IACvN,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC;QAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC7F,OAAO,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAsB,EAAE,YAAsC;IACjG,KAAK,CAAC,aAAa,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,2DAA2D,CAAC,CAAC;QAC9G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,mBAAmB,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;gBAAE,MAAM,KAAK,CAAC;QAC9F,CAAC;QACD,KAAK,CAAC,aAAa,EAAE,CAAC;QAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,CAAC,aAAa,EAAE,CAAC;IACtB,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,IAAI,GAAgD,CAAC;IACrD,IAAI,MAA0B,CAAC;IAC/B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,OAAO,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IACvB,IAAI,WAAW,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;IAC3B,SAAS,KAAK;QACZ,WAAW,EAAE,CAAC;QACd,IAAI,MAAM,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAClC,MAAM,GAAG,IAAI,CAAC;QACd,sEAAsE;QACtE,IAAI,WAAW;YAAE,MAAO,CAAC,KAAK,EAAE,CAAC;;YAAM,SAAS,CAAC,EAAE,CAAC,CAAC;QACrD,KAAK,MAAM,MAAM,IAAI,WAAW;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACnD,WAAW,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,GAAG,EAAE,CAAC;gBAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,EAAE,CAAC;gBAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC,CAAC,2EAA2E,CAAC,CAAC;gBAC/E,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACxB,CAAC;IACD,SAAS,gBAAgB,CAAC,MAAc;QACtC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACrF,IAAI,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QACzC,IAAI,CAAC;YACH,KAAK,CAAC,aAAa,EAAE,CAAC;YACtB,oFAAoF;YACpF,MAAM,MAAM,GAAI,MAAiD,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACxG,IAAI,CAAC;gBAAC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC;oBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC;YAAC,CAAC;YACzE,MAAM,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACnC,KAAK,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,WAAW,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzD,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxB,YAAY,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IACxC,CAAC;IACD,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAC,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,KAAK,CAAC,aAAa,EAAE,CAAC;QAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;YACxC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;YAC7D,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,aAAa,EAAE,CAAC;QAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAA4B;IAChE,MAAM,IAAI,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC;QAAC,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAAC,CAAC;IACvE,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAsB,EAAE,OAAe,EAAE,EAAU;IACnF,KAAK,CAAC,aAAa,EAAE,CAAC;IACtB,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACtK,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAsB,EAAE,OAAe,EAAE,MAAc;IACpF,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAClC,IAAI,CAAC;YACH,KAAK,CAAC,aAAa,EAAE,CAAC;YAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YAC7C,IAAI,KAAK,GAAG,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;YAChD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;gBAC3C,IAAI,OAAO,CAAC,EAAE,KAAK,aAAa;oBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC5E,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC5E,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,SAAiB;IACtE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,kDAAkD,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtJ,SAAS,MAAM,CAAC,KAAa,EAAE,QAA0B;YACvD,YAAY,CAAC,OAAO,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1G,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAAM,OAAO,CAAC,QAAS,CAAC,CAAC;QACpD,CAAC;QACD,SAAS,OAAO,KAAK,MAAM,CAAC,IAAI,mBAAmB,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7G,SAAS,KAAK,KAAK,MAAM,CAAC,IAAI,mBAAmB,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvG,SAAS,MAAM,CAAC,KAAa;YAC3B,IAAI,CAAC;gBACH,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBAAC,IAAI,KAAK,GAAG,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;gBACvE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBACpE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,mDAAmD,CAAC,CAAC,CAAC;YAAC,CAAC;QACxH,CAAC;QACD,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAA4B,EAAE,QAAwB,EAAE,SAAS,GAAG,KAAK;IACzG,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QAAC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC;QAC7B,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,iBAAiB,KAAK,gBAAgB;YAAE,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,wCAAwC,CAAC,CAAC;QAC7N,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACjC,CAAC"}

package/dist/daemon/legacy-sessions.d.ts

@@ -0,0 +1,48 @@
+import type { ControlSession } from './control-state.js';
+import type { DaemonOwnership } from './ownership.js';
+/** An unregistered pre-daemon transcript; `LegacySessionIndex.summary` supplies its title and preview. */
+export interface LegacySession {
+    readonly id: string;
+    readonly cwd: string;
+    readonly path: string;
+    readonly modifiedAt: number;
+}
+/** Display snippets of the latest Pi session name and the first user message. */
+export interface LegacySummary {
+    readonly title: string;
+    readonly preview: string;
+}
+type Owner = Pick<DaemonOwnership, 'target'>;
+export declare function legacySessionDirectoryName(cwd: string): string;
+/**
+ * Finds unregistered Pi transcripts in the pre-daemon layouts of the owned stores: the per-cwd
+ * directories under agentDir/sessions and the top level of each store root (custom session
+ * directories). Discovery reads only header lines. A summary needs the whole file, like Pi's
+ * session list, so it is read on request. Both are cached until the file changes.
+ */
+export declare class LegacySessionIndex {
+    private readonly owner;
+    private readonly headers;
+    private readonly summaries;
+    private readonly reading;
+    private readonly reads;
+    constructor(owner: Owner);
+    /** Newest first. Malformed and registered files are skipped; a duplicated ID keeps only its newest file. */
+    discover(registered: readonly Pick<ControlSession, 'id' | 'piPath'>[], options?: {
+        cwd?: string;
+        signal?: AbortSignal;
+    }): Promise<LegacySession[]>;
+    /** Empty when the file is gone, unreadable or no longer holds this session. */
+    summary(session: Pick<LegacySession, 'id' | 'path'>): Promise<LegacySummary>;
+    /** Reads summaries in the given order, a few at a time, so listings rarely wait for a whole transcript. */
+    warm(sessions: readonly LegacySession[], signal: AbortSignal): Promise<void>;
+    private header;
+}
+/** Whether a transcript holds a conversation message. Unreadable files count as conversations, so they are kept. */
+export declare function transcriptHasConversation(path: string): Promise<boolean>;
+/** First user message of a transcript file; empty when absent or unreadable. */
+export declare function readTranscriptPreview(path: string): Promise<string>;
+/** First user message among in-memory Pi session entries. */
+export declare function transcriptPreview(entries: Iterable<unknown>): string;
+export {};
+//# sourceMappingURL=legacy-sessions.d.ts.map

package/dist/daemon/legacy-sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-sessions.d.ts","sourceRoot":"","sources":["../../src/daemon/legacy-sessions.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGtD,0GAA0G;AAC1G,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/F;AACD,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAAG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAEnF,KAAK,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AAY7C,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED;;;;;GAKG;AACH,qBAAa,kBAAkB;IAOjB,OAAO,CAAC,QAAQ,CAAC,KAAK;IANlC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsE;IAC9F,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8E;IACxG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsD;IAE9E,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;gBAErB,KAAK,EAAE,KAAK;IAEzC,4GAA4G;IACtG,QAAQ,CAAC,UAAU,EAAE,SAAS,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAiC5J,+EAA+E;IACzE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAmBlF,2GAA2G;IACrG,IAAI,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;YAIpE,MAAM;CAUrB;AAED,oHAAoH;AACpH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAW9E;AAED,gFAAgF;AAChF,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEzE;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,MAAM,CAIpE"}