@felan-ai/daemon 0.0.0-stage → 0.1.0

package/dist/daemon/supervisor.d.ts

@@ -0,0 +1,28 @@
+import { type DaemonIdentity } from '@felan-ai/session-protocol';
+import { type DaemonTarget } from './target.js';
+import type { DaemonOwnership } from './ownership.js';
+export interface DaemonLaunchReceipt {
+    readonly target: DaemonTarget;
+    readonly identity: DaemonIdentity;
+    readonly daemonVersion: string;
+}
+export declare function spawnDetachedDaemon(options: {
+    target: DaemonTarget;
+    entrypoint: string;
+    hostConfigPath?: string;
+    timeoutMs?: number;
+    replacing?: DaemonIdentity;
+}): Promise<DaemonLaunchReceipt>;
+export declare function publishDaemonReadiness(owner: DaemonOwnership, version: string, timeoutMs?: number): Promise<void>;
+export declare class BoundedDaemonLogs {
+    private readonly owner;
+    private readonly limitBytes;
+    private readonly files;
+    private readonly buffers;
+    private closed;
+    constructor(owner: DaemonOwnership, limitBytes?: number);
+    read(stream: 'stdout' | 'stderr'): string;
+    write(stream: 'stdout' | 'stderr', diagnostic: string): void;
+    close(): void;
+}
+//# sourceMappingURL=supervisor.d.ts.map

package/dist/daemon/supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/daemon/supervisor.ts"],"names":[],"mappings":"AAIA,OAAO,EAAe,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAG9E,OAAO,EAA8D,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC5G,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE;IACjD,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAgD/B;AAED,wBAAsB,sBAAsB,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBvH;AAED,qBAAa,iBAAiB;IAIhB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAAmB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAHhF,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsC;IAC5D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwD;IAChF,OAAO,CAAC,MAAM,CAAS;gBACM,KAAK,EAAE,eAAe,EAAmB,UAAU,SAAS;IAmBzF,IAAI,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM;IAIzC,KAAK,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAO5D,KAAK,IAAI,IAAI;CAId"}

package/dist/daemon/supervisor.js

@@ -0,0 +1,159 @@
+import { spawn } from 'node:child_process';
+import { closeSync, fstatSync, ftruncateSync, readSync, realpathSync, writeSync } from 'node:fs';
+import { Socket } from 'node:net';
+import { isAbsolute, join } from 'node:path';
+import { encodeFrame } from '@felan-ai/session-protocol';
+import { DaemonSecurityError } from './native-ownership.js';
+import { probeDaemon, readControlFrame, readinessResponse } from './ipc.js';
+import { assertTargetIdentity, openPrivateFile, resolveDaemonTarget } from './target.js';
+export async function spawnDetachedDaemon(options) {
+    const target = resolveDaemonTarget(options.target);
+    const executable = realpathSync(process.execPath);
+    const entrypoint = realpathSync(options.entrypoint);
+    const timeoutMs = options.timeoutMs ?? 10_000;
+    if (!Number.isFinite(timeoutMs) || timeoutMs < 100 || timeoutMs > 60_000)
+        throw new DaemonSecurityError('invalid_launch', 'Readiness deadline must be between 100 and 60000 milliseconds.');
+    if (options.hostConfigPath !== undefined && (!isAbsolute(options.hostConfigPath) || Buffer.byteLength(options.hostConfigPath) > 4096 || options.hostConfigPath.includes('\0')))
+        throw new DaemonSecurityError('invalid_launch', 'Explicit host configuration must be a bounded absolute path.');
+    if (options.replacing)
+        assertTargetIdentity(target, options.replacing, options.replacing);
+    const child = spawn(executable, [entrypoint, JSON.stringify(options.target), ...(options.hostConfigPath ? ['--host-config', options.hostConfigPath] : []),
+        ...(options.replacing ? ['--replace', JSON.stringify(options.replacing)] : [])], {
+        cwd: process.cwd(),
+        env: process.env,
+        detached: true,
+        windowsHide: true,
+        stdio: ['ignore', 'ignore', 'ignore', 'pipe'],
+    });
+    const deadline = performance.now() + timeoutMs;
+    const channel = child.stdio[3];
+    let exitError;
+    const exited = new Promise((_resolve, reject) => { exitError = reject; });
+    const onError = () => exitError?.(new DaemonSecurityError('launch_failed', 'Could not spawn the resolved Node executable.'));
+    const onExit = (code) => exitError?.(new DaemonSecurityError('launch_failed', `Daemon child exited before authenticated readiness (exit ${code ?? 'signal'}). Inspect its bounded runtime diagnostics.`));
+    child.once('error', onError);
+    child.once('exit', onExit);
+    channel.on('error', () => { });
+    try {
+        const ready = await Promise.race([readControlFrame(channel, timeoutMs), exited]);
+        assertTargetIdentity(target, ready.identity, ready.identity);
+        if (ready.re !== 'launch' || ready.state !== 'ready' || ready.outcome !== 'accepted')
+            throw new DaemonSecurityError('invalid_readiness', 'Child did not report an available daemon.');
+        const remaining = deadline - performance.now();
+        if (remaining <= 0)
+            throw new DaemonSecurityError('readiness_timeout', 'Daemon did not become ready before the deadline.');
+        await probeDaemon(target, ready.identity, Math.min(remaining, 2_000));
+        await new Promise((resolve, reject) => channel.write(Buffer.from([1]), error => error ? reject(error) : resolve()));
+        channel.end();
+        channel.unref();
+        child.unref();
+        return Object.freeze({ target: options.target, identity: ready.identity, daemonVersion: ready.daemonVersion });
+    }
+    catch (error) {
+        if (error instanceof DaemonSecurityError && error.code === 'unavailable' && channel.readableEnded) {
+            let timer;
+            try {
+                await Promise.race([exited, new Promise(resolve => { timer = setTimeout(resolve, Math.max(0, Math.min(100, deadline - performance.now()))); })]);
+            }
+            finally {
+                clearTimeout(timer);
+            }
+        }
+        throw error;
+    }
+    finally {
+        child.off('error', onError);
+        child.off('exit', onExit);
+        // Closing the launch channel aborts an unacknowledged cooperative child. Never signal a PID from a receipt.
+        if (!channel.writableEnded)
+            channel.destroy();
+        child.unref();
+    }
+}
+export async function publishDaemonReadiness(owner, version, timeoutMs = 10_000) {
+    owner.assertCurrent();
+    const channel = new Socket({ fd: 3, readable: true, writable: true });
+    try {
+        await new Promise((resolve, reject) => {
+            const timeout = setTimeout(() => reject(new DaemonSecurityError('launch_aborted', 'Launcher did not acknowledge readiness.')), timeoutMs);
+            const settle = (error) => {
+                clearTimeout(timeout);
+                channel.removeAllListeners('data');
+                channel.removeAllListeners('end');
+                channel.removeAllListeners('error');
+                if (error)
+                    reject(error);
+                else
+                    resolve();
+            };
+            channel.once('data', (bytes) => settle(bytes.length === 1 && bytes[0] === 1 ? undefined : new DaemonSecurityError('launch_aborted', 'Invalid readiness acknowledgement.')));
+            channel.once('end', () => settle(new DaemonSecurityError('launch_aborted', 'Launcher left before readiness.')));
+            channel.once('error', () => settle(new DaemonSecurityError('launch_aborted', 'Launch channel failed.')));
+            channel.write(encodeFrame(readinessResponse(owner, version, 'launch')));
+        });
+        owner.assertCurrent();
+    }
+    finally {
+        channel.destroy();
+    }
+}
+export class BoundedDaemonLogs {
+    owner;
+    limitBytes;
+    files;
+    buffers = { stdout: Buffer.alloc(0), stderr: Buffer.alloc(0) };
+    closed = false;
+    constructor(owner, limitBytes = 32_768) {
+        this.owner = owner;
+        this.limitBytes = limitBytes;
+        owner.assertCurrent();
+        if (!Number.isInteger(limitBytes) || limitBytes < 128 || limitBytes > 1_048_576)
+            throw new DaemonSecurityError('invalid_logs', 'Diagnostic capacity must be between 128 and 1048576 bytes.');
+        const stdout = openPrivateFile(join(owner.target.runtimeDirectory, 'stdout.log'), owner.target.uid);
+        let stderr;
+        try {
+            stderr = openPrivateFile(join(owner.target.runtimeDirectory, 'stderr.log'), owner.target.uid);
+            this.files = { stdout, stderr };
+            for (const stream of ['stdout', 'stderr']) {
+                const size = fstatSync(this.files[stream]).size;
+                if (!Number.isSafeInteger(size))
+                    throw new DaemonSecurityError('invalid_logs', 'Diagnostic size is unsafe.');
+                const tail = Buffer.alloc(Math.min(size, limitBytes));
+                const bytes = readSync(this.files[stream], tail, 0, tail.length, size - tail.length);
+                this.buffers[stream] = tail.subarray(0, bytes);
+                ftruncateSync(this.files[stream], bytes);
+                if (bytes)
+                    writeSync(this.files[stream], this.buffers[stream], 0, bytes, 0);
+            }
+        }
+        catch (error) {
+            closeSync(stdout);
+            if (stderr !== undefined)
+                closeSync(stderr);
+            throw error;
+        }
+    }
+    read(stream) {
+        if (this.closed)
+            throw new DaemonSecurityError('logs_closed', 'Daemon diagnostic sink is closed.');
+        this.owner.assertCurrent();
+        return this.buffers[stream].toString('utf8');
+    }
+    write(stream, diagnostic) {
+        if (this.closed)
+            throw new DaemonSecurityError('logs_closed', 'Daemon diagnostic sink is closed.');
+        this.owner.assertCurrent();
+        const bytes = Buffer.from(`${diagnostic.slice(-this.limitBytes).replace(/[\u0000-\u0008\u000b-\u001f\u007f]/g, '?')}\n`);
+        this.buffers[stream] = Buffer.concat([this.buffers[stream], bytes.subarray(-this.limitBytes)]).subarray(-this.limitBytes);
+        ftruncateSync(this.files[stream], 0);
+        writeSync(this.files[stream], this.buffers[stream], 0, this.buffers[stream].length, 0);
+    }
+    close() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        closeSync(this.files.stdout);
+        closeSync(this.files.stderr);
+    }
+}
+//# sourceMappingURL=supervisor.js.map

package/dist/daemon/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../../src/daemon/supervisor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAuB,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC5E,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,mBAAmB,EAAqB,MAAM,aAAa,CAAC;AAS5G,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAMzC;IACC,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,GAAG,IAAI,SAAS,GAAG,MAAM;QAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,gEAAgE,CAAC,CAAC;IAC5L,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5K,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,8DAA8D,CAAC,CAAC;IAClH,IAAI,OAAO,CAAC,SAAS;QAAE,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvJ,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QACjF,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;KAC9C,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC;IACzC,IAAI,SAA+C,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,mBAAmB,CAAC,eAAe,EAAE,+CAA+C,CAAC,CAAC,CAAC;IAC7H,MAAM,MAAM,GAAG,CAAC,IAAmB,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,mBAAmB,CAAC,eAAe,EAAE,4DAA4D,IAAI,IAAI,QAAQ,6CAA6C,CAAC,CAAC,CAAC;IACzN,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU;YAAE,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,2CAA2C,CAAC,CAAC;QACtL,MAAM,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC/C,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,kDAAkD,CAAC,CAAC;QAC3H,MAAM,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC1H,OAAO,CAAC,GAAG,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IACjH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAClG,IAAI,KAAiC,CAAC;YACtC,IAAI,CAAC;gBAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;oBACvJ,CAAC;gBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QAClC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,4GAA4G;QAC5G,IAAI,CAAC,OAAO,CAAC,aAAa;YAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9C,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAsB,EAAE,OAAe,EAAE,SAAS,GAAG,MAAM;IACtG,KAAK,CAAC,aAAa,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC1I,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;gBAC/B,YAAY,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBAClI,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;oBAAM,OAAO,EAAE,CAAC;YAC3C,CAAC,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC,CAAC,CAAC;YACpL,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,CAAC,CAAC,CAAC;YAChH,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC;YACzG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,aAAa,EAAE,CAAC;IACxB,CAAC;YAAS,CAAC;QAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAClC,CAAC;AAED,MAAM,OAAO,iBAAiB;IAIC;IAAyC;IAHrD,KAAK,CAAsC;IAC3C,OAAO,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,GAAG,KAAK,CAAC;IACvB,YAA6B,KAAsB,EAAmB,aAAa,MAAM;QAA5D,UAAK,GAAL,KAAK,CAAiB;QAAmB,eAAU,GAAV,UAAU,CAAS;QACvF,KAAK,CAAC,aAAa,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,GAAG,IAAI,UAAU,GAAG,SAAS;YAAE,MAAM,IAAI,mBAAmB,CAAC,cAAc,EAAE,4DAA4D,CAAC,CAAC;QAC7L,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpG,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9F,IAAI,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;YAChC,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU,EAAE,CAAC;gBACnD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,mBAAmB,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;gBAC7G,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;gBACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC/C,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;gBACzC,IAAI,KAAK;oBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,MAAM,KAAK,SAAS;gBAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,MAA2B;QAC9B,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;QACnG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,CAAC,MAA2B,EAAE,UAAkB;QACnD,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;QACnG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,qCAAqC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACzH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1H,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/H,CAAC;IACD,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjF,CAAC;CACF"}

package/dist/daemon/target.d.ts

@@ -0,0 +1,55 @@
+import { type BigIntStats } from 'node:fs';
+import type { DaemonIdentity, DaemonTarget as ProtocolDaemonTarget } from '@felan-ai/session-protocol';
+export type DaemonTarget = {
+    readonly kind: 'production';
+    readonly agentDir: string;
+    readonly storeRoots: readonly string[];
+} | {
+    readonly kind: 'isolated';
+    readonly directory: string;
+    readonly namespaceId: string;
+    readonly storeRoots?: readonly string[];
+};
+export interface PathIdentity {
+    readonly path: string;
+    readonly dev: bigint;
+    readonly ino: bigint;
+    readonly mode: bigint;
+    readonly uid: bigint;
+    readonly links: bigint;
+}
+export interface ResolvedDaemonTarget {
+    readonly kind: DaemonTarget['kind'];
+    readonly namespaceId: string;
+    readonly uid: number;
+    readonly accountDirectory: string;
+    readonly runtimeDirectory: string;
+    readonly endpoint: string;
+    readonly agentDir: string;
+    readonly rootSet: readonly string[];
+    readonly pins: readonly PathIdentity[];
+}
+export declare function pathInside(parent: string, child: string): boolean;
+export declare function pathsOverlap(a: string, b: string): boolean;
+export declare function pathIdentity(path: string): PathIdentity;
+export declare function assertPathIdentity(pin: PathIdentity): void;
+export declare function assertPrivateStat(stat: BigIntStats, uid: number, directory: boolean): void;
+export declare function privateDirectory(path: string, uid: number): string;
+/** Creates a store directory without imposing permissions on an existing user directory. */
+export declare function storeDirectory(path: string): string;
+export declare function pinPathChain(path: string, uid: number): PathIdentity[];
+export declare function pinPathAncestry(path: string): PathIdentity[];
+export declare function openPrivateFile(path: string, uid: number): number;
+export declare function realAccountLocation(): {
+    uid: number;
+    home: string;
+    directory: string;
+};
+export declare function resolveDaemonTarget(target: DaemonTarget): ResolvedDaemonTarget;
+export declare function prepareDaemonTarget(target: ResolvedDaemonTarget): ResolvedDaemonTarget;
+export declare function canonicalProspectivePath(path: string): string;
+export declare function identityFor(target: ResolvedDaemonTarget, instanceId: string): DaemonIdentity;
+export declare function protocolTarget(target: ResolvedDaemonTarget): ProtocolDaemonTarget;
+/** Store roots are excluded: a daemon may own more roots than a client declared. */
+export declare function assertTargetIdentity(target: ResolvedDaemonTarget, expected: DaemonIdentity, actual: DaemonIdentity): void;
+//# sourceMappingURL=target.d.ts.map

package/dist/daemon/target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.d.ts","sourceRoot":"","sources":["../../src/daemon/target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiF,KAAK,WAAW,EAAE,MAAM,SAAS,CAAC;AAG1H,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,IAAI,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAGvG,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAClG;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAErI,MAAM,WAAW,YAAY;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACxK,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,SAAS,YAAY,EAAE,CAAC;CACxC;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAGjE;AACD,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAiD;AAC5G,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAGvD;AACD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAM1D;AACD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,CAI1F;AACD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAOlE;AACD,4FAA4F;AAC5F,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGnD;AAGD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,YAAY,EAAE,CAWtE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,EAAE,CAO5D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CASjE;AAED,wBAAgB,mBAAmB,IAAI;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAMtF;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,oBAAoB,CAgC9E;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,oBAAoB,GAAG,oBAAoB,CAMtF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,GAAG,cAAc,CAE5F;AACD,wBAAgB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,oBAAoB,CAEjF;AACD,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,cAAc,GAAG,IAAI,CAIzH"}

package/dist/daemon/target.js

@@ -0,0 +1,191 @@
+import { constants, fstatSync, lstatSync, mkdirSync, openSync, closeSync, realpathSync } from 'node:fs';
+import { userInfo } from 'node:os';
+import { dirname, isAbsolute, join, parse, relative, resolve, sep } from 'node:path';
+import { DaemonSecurityError, requireOwnershipPlatform, socketPathLimit } from './native-ownership.js';
+export function pathInside(parent, child) {
+    const rel = relative(parent, child);
+    return rel === '' || (!rel.startsWith(`..${sep}`) && rel !== '..' && !isAbsolute(rel));
+}
+export function pathsOverlap(a, b) { return pathInside(a, b) || pathInside(b, a); }
+export function pathIdentity(path) {
+    const stat = lstatSync(path, { bigint: true });
+    return { path, dev: stat.dev, ino: stat.ino, mode: stat.mode, uid: stat.uid, links: stat.isDirectory() ? 0n : stat.nlink };
+}
+export function assertPathIdentity(pin) {
+    try {
+        const current = pathIdentity(pin.path);
+        if (current.dev === pin.dev && current.ino === pin.ino)
+            return;
+    }
+    catch { /* Missing paths are ownership loss, not permission to recreate them. */ }
+    throw new DaemonSecurityError('ownership_lost', 'A daemon-owned path was replaced or removed. Stop this instance before recovery.');
+}
+export function assertPrivateStat(stat, uid, directory) {
+    if ((directory ? !stat.isDirectory() : !stat.isFile()) || stat.uid !== BigInt(uid) || (stat.mode & 63n) !== 0n || (!directory && stat.nlink !== 1n)) {
+        throw new DaemonSecurityError('unsafe_path', 'Daemon path must be owner-only, non-symlink and owned by the real OS account (regular files require one link).');
+    }
+}
+export function privateDirectory(path, uid) {
+    if (!isAbsolute(path) || path.includes('\0'))
+        throw new DaemonSecurityError('unsafe_path', 'Daemon directories must be absolute paths without NUL.');
+    const parent = dirname(path);
+    if (parent !== path && !exists(parent))
+        privateDirectory(parent, uid);
+    try {
+        mkdirSync(path, { mode: 0o700 });
+    }
+    catch (error) {
+        if (error.code !== 'EEXIST')
+            throw error;
+    }
+    assertPrivateStat(lstatSync(path, { bigint: true }), uid, true);
+    return realpathSync(path);
+}
+/** Creates a store directory without imposing permissions on an existing user directory. */
+export function storeDirectory(path) {
+    mkdirSync(path, { recursive: true, mode: 0o700 });
+    return realpathSync(path);
+}
+function exists(path) { try {
+    lstatSync(path);
+    return true;
+}
+catch (error) {
+    if (error.code === 'ENOENT')
+        return false;
+    throw error;
+} }
+export function pinPathChain(path, uid) {
+    const pins = [];
+    for (let at = path;; at = dirname(at)) {
+        const stat = lstatSync(at, { bigint: true });
+        if (!stat.isDirectory() || (stat.uid !== 0n && stat.uid !== BigInt(uid)) || ((stat.mode & 18n) !== 0n && !(stat.uid === 0n && (stat.mode & 512n) !== 0n))) {
+            throw new DaemonSecurityError('unsafe_path', 'Daemon path has an untrusted or writable non-sticky ancestor.');
+        }
+        pins.push(pathIdentity(at));
+        if (dirname(at) === at)
+            break;
+    }
+    return pins;
+}
+export function pinPathAncestry(path) {
+    const pins = [];
+    for (let at = path;; at = dirname(at)) {
+        pins.push(pathIdentity(at));
+        if (dirname(at) === at)
+            break;
+    }
+    return pins;
+}
+export function openPrivateFile(path, uid) {
+    const fd = openSync(path, constants.O_RDWR | constants.O_CREAT | constants.O_NOFOLLOW, 0o600);
+    try {
+        const stat = fstatSync(fd, { bigint: true });
+        assertPrivateStat(stat, uid, false);
+        const pin = pathIdentity(path);
+        if (stat.dev !== pin.dev || stat.ino !== pin.ino)
+            throw new DaemonSecurityError('unsafe_path', 'Daemon file changed while opening.');
+        return fd;
+    }
+    catch (error) {
+        closeSync(fd);
+        throw error;
+    }
+}
+export function realAccountLocation() {
+    const platform = requireOwnershipPlatform();
+    const account = userInfo();
+    const home = realpathSync(account.homedir);
+    const temp = realpathSync(platform === 'darwin' ? '/private/tmp' : '/tmp');
+    return { uid: account.uid, home, directory: join(temp, `felan-${account.uid}-daemon-v1`) };
+}
+export function resolveDaemonTarget(target) {
+    if (!target || (target.kind !== 'production' && target.kind !== 'isolated'))
+        throw new DaemonSecurityError('invalid_target', 'An explicit production or isolated target is required.');
+    if (target.kind === 'production' && !Array.isArray(target.storeRoots))
+        throw new DaemonSecurityError('invalid_target', 'Production targets require an explicit store-root array.');
+    if (target.storeRoots !== undefined && (!Array.isArray(target.storeRoots) || target.storeRoots.some(root => typeof root !== 'string')))
+        throw new DaemonSecurityError('invalid_target', 'Store roots must be an array of absolute paths.');
+    const account = realAccountLocation();
+    let agentDir;
+    let runtimeDirectory;
+    let namespaceId;
+    let roots;
+    let fixtureDirectory;
+    if (target.kind === 'isolated') {
+        if (typeof target.namespaceId !== 'string' || !/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/.test(target.namespaceId) || target.namespaceId === 'production')
+            throw new DaemonSecurityError('invalid_target', 'An isolated target requires a non-production namespace ID.');
+        // Resolve existing ancestors before creating anything, so an alias cannot redirect a fixture into production.
+        const directory = canonicalProspectivePath(target.directory);
+        fixtureDirectory = directory;
+        if (pathsOverlap(directory, canonicalProspectivePath(join(account.home, '.felan'))) || pathsOverlap(directory, account.directory) || directory === parse(directory).root)
+            throw new DaemonSecurityError('invalid_target', 'An isolated target cannot contain or use production paths.');
+        agentDir = join(directory, 'agent');
+        runtimeDirectory = join(directory, 'runtime');
+        namespaceId = target.namespaceId;
+        roots = target.storeRoots ?? [join(agentDir, 'storage')];
+        if (roots.some(root => !pathInside(directory, canonicalProspectivePath(root))))
+            throw new DaemonSecurityError('invalid_target', 'All isolated stores must remain inside the explicit fixture directory.');
+    }
+    else {
+        agentDir = target.agentDir;
+        runtimeDirectory = join(account.directory, 'production');
+        namespaceId = 'production';
+        roots = target.storeRoots;
+    }
+    agentDir = canonicalProspectivePath(agentDir);
+    const allRoots = [...new Set([agentDir, ...roots.map(canonicalProspectivePath)])].sort();
+    const rootSet = allRoots.filter((root, i) => !allRoots.some((parent, j) => j !== i && pathInside(parent, root)));
+    runtimeDirectory = canonicalProspectivePath(runtimeDirectory);
+    if (fixtureDirectory && runtimeDirectory !== join(fixtureDirectory, 'runtime'))
+        throw new DaemonSecurityError('invalid_target', 'The isolated runtime directory must not be a symlink.');
+    if (fixtureDirectory && [agentDir, runtimeDirectory, ...rootSet].some(path => !pathInside(fixtureDirectory, path)))
+        throw new DaemonSecurityError('invalid_target', 'Isolated agent, runtime and stores must remain inside the canonical fixture directory.');
+    if (!fixtureDirectory && !pathInside(account.directory, runtimeDirectory))
+        throw new DaemonSecurityError('invalid_target', 'Production runtime cannot be redirected outside the account coordinator.');
+    if (rootSet.some(root => pathsOverlap(root, account.directory)))
+        throw new DaemonSecurityError('invalid_target', 'Store roots cannot overlap the account coordinator.');
+    if (exists(runtimeDirectory))
+        assertPrivateStat(lstatSync(runtimeDirectory, { bigint: true }), account.uid, true);
+    const nearest = (path) => { while (!exists(path))
+        path = dirname(path); return path; };
+    const pins = [...pinPathChain(nearest(runtimeDirectory), account.uid), ...rootSet.flatMap(root => pinPathAncestry(nearest(root)))];
+    const endpoint = join(runtimeDirectory, 'ipc.sock');
+    if (Buffer.byteLength(endpoint) > socketPathLimit())
+        throw new DaemonSecurityError('invalid_endpoint', `Use a shorter explicit runtime directory: endpoint exceeds ${socketPathLimit()} bytes.`);
+    return Object.freeze({ kind: target.kind, uid: account.uid, namespaceId, accountDirectory: account.directory, runtimeDirectory, endpoint, agentDir, rootSet: Object.freeze(rootSet), pins: Object.freeze(pins) });
+}
+export function prepareDaemonTarget(target) {
+    for (const pin of target.pins)
+        assertPathIdentity(pin);
+    for (const root of [target.agentDir, ...target.rootSet])
+        storeDirectory(root);
+    privateDirectory(target.runtimeDirectory, target.uid);
+    for (const pin of target.pins)
+        assertPathIdentity(pin);
+    return Object.freeze({ ...target, pins: Object.freeze([...pinPathChain(target.runtimeDirectory, target.uid), ...target.rootSet.flatMap(pinPathAncestry)]) });
+}
+export function canonicalProspectivePath(path) {
+    if (typeof path !== 'string' || !isAbsolute(path) || path.includes('\0') || Buffer.byteLength(path) > 4096)
+        throw new DaemonSecurityError('invalid_target', 'Target paths must be bounded absolute paths without NUL.');
+    let at = resolve(path);
+    const tail = [];
+    while (!exists(at)) {
+        tail.unshift(at.slice(dirname(at).length + (dirname(at) === sep ? 0 : 1)));
+        at = dirname(at);
+    }
+    return join(realpathSync(at), ...tail);
+}
+export function identityFor(target, instanceId) {
+    return { namespaceId: target.namespaceId, instanceId, agentDir: target.agentDir, rootSet: [...target.rootSet] };
+}
+export function protocolTarget(target) {
+    return target.kind === 'production' ? { kind: 'production' } : { kind: 'isolated', runtimeDir: target.runtimeDirectory, fixtureRoot: dirname(target.runtimeDirectory) };
+}
+/** Store roots are excluded: a daemon may own more roots than a client declared. */
+export function assertTargetIdentity(target, expected, actual) {
+    if ([expected, actual].some(identity => identity.namespaceId !== target.namespaceId || identity.agentDir !== target.agentDir) || expected.instanceId !== actual.instanceId) {
+        throw new DaemonSecurityError('target_mismatch', 'Daemon namespace, agent directory or instance differs from the pinned target.');
+    }
+}
+//# sourceMappingURL=target.js.map

package/dist/daemon/target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target.js","sourceRoot":"","sources":["../../src/daemon/target.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAoB,MAAM,SAAS,CAAC;AAC1H,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErF,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAmBvG,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,KAAa;IACtD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACzF,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,CAAS,EAAE,CAAS,IAAa,OAAO,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5G,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;AAC7H,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,GAAiB;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG;YAAE,OAAO;IACjE,CAAC;IAAC,MAAM,CAAC,CAAC,wEAAwE,CAAC,CAAC;IACpF,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,kFAAkF,CAAC,CAAC;AACtI,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,IAAiB,EAAE,GAAW,EAAE,SAAkB;IAClF,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,GAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,EAAE,CAAC;QACvJ,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAE,gHAAgH,CAAC,CAAC;IACjK,CAAC;AACH,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAW;IACxD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAE,wDAAwD,CAAC,CAAC;IACrJ,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACtE,IAAI,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IAChI,iBAAiB,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAChE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AACD,4FAA4F;AAC5F,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AACD,SAAS,MAAM,CAAC,IAAY,IAAa,IAAI,CAAC;IAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,IAAI,CAAC;AAAC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAAC,MAAM,KAAK,CAAC;AAAC,CAAC,CAAC,CAAC;AAErL,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,IAAI,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,GAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;YAChK,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAE,+DAA+D,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;YAAE,MAAM;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,IAAI,EAAE,GAAG,IAAI,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,IAAI,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;YAAE,MAAM;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAW;IACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9F,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG;YAAE,MAAM,IAAI,mBAAmB,CAAC,aAAa,EAAE,oCAAoC,CAAC,CAAC;QACrI,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3E,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,OAAO,CAAC,GAAG,YAAY,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;IACvL,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,0DAA0D,CAAC,CAAC;IACnL,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;IAC3O,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;IACtC,IAAI,QAAgB,CAAC;IAAC,IAAI,gBAAwB,CAAC;IAAC,IAAI,WAAmB,CAAC;IAAC,IAAI,KAAwB,CAAC;IAAC,IAAI,gBAAoC,CAAC;IACpJ,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,WAAW,KAAK,YAAY;YAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,4DAA4D,CAAC,CAAC;QACjQ,8GAA8G;QAC9G,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7D,gBAAgB,GAAG,SAAS,CAAC;QAC7B,IAAI,YAAY,CAAC,SAAS,EAAE,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI;YAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,4DAA4D,CAAC,CAAC;QACxR,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAAC,gBAAgB,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACrH,KAAK,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,EAAE,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,wEAAwE,CAAC,CAAC;IAC5M,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAAC,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAAC,WAAW,GAAG,YAAY,CAAC;QAAC,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC;IAC9I,CAAC;IACD,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACjH,gBAAgB,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAC9D,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,uDAAuD,CAAC,CAAC;IACzL,IAAI,gBAAgB,IAAI,CAAC,QAAQ,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,wFAAwF,CAAC,CAAC;IAC9P,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,0EAA0E,CAAC,CAAC;IACvM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,qDAAqD,CAAC,CAAC;IACxK,IAAI,MAAM,CAAC,gBAAgB,CAAC;QAAE,iBAAiB,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClH,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnI,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,eAAe,EAAE;QAAE,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,EAAE,8DAA8D,eAAe,EAAE,SAAS,CAAC,CAAC;IACjM,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,CAAC,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACpN,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAA4B;IAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI;QAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;QAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAC9E,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI;QAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/J,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY;IACnD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI;QAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,EAAE,0DAA0D,CAAC,CAAC;IACxN,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,MAAM,IAAI,GAAa,EAAE,CAAC;IAClD,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IACrH,OAAO,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAA4B,EAAE,UAAkB;IAC1E,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AAClH,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,MAA4B;IACzD,OAAO,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,gBAAgB,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;AAC1K,CAAC;AACD,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,MAA4B,EAAE,QAAwB,EAAE,MAAsB;IACjH,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QAC3K,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,+EAA+E,CAAC,CAAC;IACpI,CAAC;AACH,CAAC"}

package/dist/daemon/tree.d.ts

@@ -0,0 +1,7 @@
+import type { SessionManager } from '@earendil-works/pi-coding-agent';
+import { type OperationResult } from '@felan-ai/session-protocol';
+type TreeEntry = OperationResult<'session.tree'>['entries'][number];
+/** Entries are emitted in Pi's tree order (roots, then children sorted by timestamp) so clients render the same rows. */
+export declare function projectTreeEntries(manager: SessionManager): TreeEntry[];
+export {};
+//# sourceMappingURL=tree.d.ts.map

package/dist/daemon/tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree.d.ts","sourceRoot":"","sources":["../../src/daemon/tree.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAgB,cAAc,EAAmB,MAAM,iCAAiC,CAAC;AACrG,OAAO,EAAgB,KAAK,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAGhF,KAAK,SAAS,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAKpE,yHAAyH;AACzH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,EAAE,CAUvE"}

package/dist/daemon/tree.js

@@ -0,0 +1,126 @@
+import { homedir } from 'node:os';
+import { stopReasonOf } from '@felan-ai/session-protocol';
+import { boundedText } from './projection.js';
+const maxTextBytes = 16_384;
+/** Entries are emitted in Pi's tree order (roots, then children sorted by timestamp) so clients render the same rows. */
+export function projectTreeEntries(manager) {
+    const calls = toolCalls(manager.getEntries());
+    const result = [];
+    const stack = [...manager.getTree()].reverse();
+    while (stack.length) {
+        const node = stack.pop();
+        result.push(treeEntry(manager, node, calls));
+        for (let index = node.children.length - 1; index >= 0; index--)
+            stack.push(node.children[index]);
+    }
+    return result;
+}
+function toolCalls(entries) {
+    const calls = new Map();
+    for (const entry of entries) {
+        if (entry.type !== 'message' || entry.message.role !== 'assistant' || !Array.isArray(entry.message.content))
+            continue;
+        for (const block of entry.message.content) {
+            if (block.type === 'toolCall')
+                calls.set(block.id, { name: block.name, arguments: block.arguments });
+        }
+    }
+    return calls;
+}
+function treeEntry(manager, node, calls) {
+    const entry = node.entry;
+    const parent = entry.parentId && entry.parentId !== entry.id && manager.getEntry(entry.parentId) ? entry.parentId : undefined;
+    const labelTimestamp = node.labelTimestamp ? Date.parse(node.labelTimestamp) : NaN;
+    const { role, title, stopReason, errorMessage } = display(entry, calls);
+    return {
+        id: entry.id,
+        ...(parent ? { parent } : {}),
+        kind: entry.type,
+        ...(role ? { role } : {}),
+        ...(node.label ? { label: node.label } : {}),
+        ...(Number.isFinite(labelTimestamp) ? { labelTimestamp: Math.max(0, labelTimestamp) } : {}),
+        ...(title ? { title: boundedText(title, maxTextBytes) } : {}),
+        summary: boundedText(summary(entry), maxTextBytes),
+        timestamp: Math.max(0, Date.parse(entry.timestamp) || 0),
+        ...(stopReason ? { stopReason } : {}),
+        ...(errorMessage ? { errorMessage: boundedText(errorMessage, maxTextBytes) } : {}),
+    };
+}
+function display(entry, calls) {
+    switch (entry.type) {
+        case 'message': {
+            const message = entry.message;
+            if (message.role === 'toolResult') {
+                const call = calls.get(message.toolCallId);
+                return { role: message.role, title: call ? formatToolCall(call.name, call.arguments) : message.toolName || 'tool' };
+            }
+            if (message.role === 'assistant') {
+                return { role: message.role, stopReason: stopReasonOf(message.stopReason), errorMessage: message.errorMessage };
+            }
+            return { role: message.role };
+        }
+        case 'custom_message': return { title: entry.customType };
+        case 'compaction': return { title: `compaction: ${Math.round(entry.tokensBefore / 1000)}k tokens` };
+        case 'model_change': return { title: `model: ${entry.modelId}` };
+        case 'thinking_level_change': return { title: `thinking: ${entry.thinkingLevel}` };
+        case 'custom': return { title: `custom: ${entry.customType}` };
+        case 'context_edit': return { title: `context ${entry.replacement === null ? 'omit' : 'replace'}: ${entry.targetId}` };
+        case 'label': return { title: `label: ${entry.label ?? '(cleared)'}` };
+        case 'session_info': return { title: `title: ${entry.name || 'empty'}` };
+        default: return {};
+    }
+}
+function summary(entry) {
+    switch (entry.type) {
+        case 'message':
+            if (entry.message.role === 'bashExecution')
+                return entry.message.command;
+            return 'content' in entry.message ? textOf(entry.message.content) : '';
+        case 'custom_message': return textOf(entry.content);
+        case 'compaction':
+        case 'branch_summary': return entry.summary;
+        default: return '';
+    }
+}
+function textOf(content) {
+    if (typeof content === 'string')
+        return content;
+    if (!Array.isArray(content))
+        return '';
+    return content.map(part => part && typeof part === 'object' && 'type' in part && part.type === 'text' && 'text' in part && typeof part.text === 'string' ? part.text : '').join('');
+}
+/** Mirrors Pi's tool-call labels; the client adds the surrounding brackets. */
+function formatToolCall(name, value) {
+    const args = value && typeof value === 'object' ? value : {};
+    const shortenPath = (path) => {
+        const home = homedir();
+        return home && path.startsWith(home) ? `~${path.slice(home.length)}` : path;
+    };
+    switch (name) {
+        case 'read': {
+            const offset = args.offset;
+            const limit = args.limit;
+            let display = shortenPath(String(args.path || args.file_path || ''));
+            if (offset !== undefined || limit !== undefined) {
+                const start = offset ?? 1;
+                const end = limit !== undefined ? start + limit - 1 : '';
+                display += `:${start}${end ? `-${end}` : ''}`;
+            }
+            return `read: ${display}`;
+        }
+        case 'write': return `write: ${shortenPath(String(args.path || args.file_path || ''))}`;
+        case 'edit': return `edit: ${shortenPath(String(args.path || args.file_path || ''))}`;
+        case 'bash': {
+            const raw = String(args.command || '');
+            return `bash: ${raw.replace(/[\n\t]/gu, ' ').trim().slice(0, 50)}${raw.length > 50 ? '...' : ''}`;
+        }
+        case 'grep': return `grep: /${String(args.pattern || '')}/ in ${shortenPath(String(args.path || '.'))}`;
+        case 'find': return `find: ${String(args.pattern || '')} in ${shortenPath(String(args.path || '.'))}`;
+        case 'ls': return `ls: ${shortenPath(String(args.path || '.'))}`;
+        default: {
+            const json = JSON.stringify(value) ?? '';
+            return `${name}: ${json.slice(0, 40)}${json.length > 40 ? '...' : ''}`;
+        }
+    }
+}
+//# sourceMappingURL=tree.js.map