@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/conversation-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation-commands.d.ts","sourceRoot":"","sources":["../../src/daemon/conversation-commands.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,sCAAsC,CAAC;AAGjG,OAAO,EAEN,KAAK,0BAA0B,EAC/B,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAUvF,OAAO,EAIN,KAAK,4BAA4B,EACjC,MAAM,qCAAqC,CAAC;AAE7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAA2C,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACrG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGpD,eAAO,MAAM,6CAA6C,EAAE,WAAW,CAAC,MAAM,CAI5E,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAKxD,CAAC;AAEH,eAAO,MAAM,6BAA6B,OAAO,CAAC;AAElD,eAAO,MAAM,iCAAiC,KAAK,CAAC;AACpD,eAAO,MAAM,6BAA6B,MAAM,CAAC;AACjD,eAAO,MAAM,iCAAiC,QAAiB,CAAC;AAChE,eAAO,MAAM,oCAAoC,MAAM,CAAC;AACxD;;;;;;;GAOG;AACH,eAAO,MAAM,0CAA0C,KAAK,CAAC;AAQ7D,eAAO,MAAM,8BAA8B,OAAQ,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1E,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;AAEvE,MAAM,WAAW,sBAAsB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,wFAAwF;IACxF,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,yEAAyE;AACzE,MAAM,WAAW,0BAA0B;IAC1C,OAAO,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;KAClD,CAAC;IACF,YAAY,IAAI,OAAO,CACtB,KAAK,CAAC;QACL,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,UAAU,CAAC;KACpB,CAAC,CACF,CAAC;CACF;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,qBAAqB,CAAC;IACpC,UAAU,CAAC,EAAE;QAAE,8BAA8B,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC7E,YAAY,EAAE,0BAA0B,CAAC;IACzC,kBAAkB,EAAE,GAAG,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;IAC9D,sBAAsB,EAAE,MAAM,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,8FAA8F;IAC9F,iBAAiB,CAAC,EAAE,CACnB,aAAa,EAAE,MAAM,KACjB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC9G,mFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC;IAC3B;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC;IAClC,yGAAyG;IACzG,uBAAuB,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,0FAA0F;IAC1F,SAAS,CAAC,EAAE;QACX,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe,CAAC;QAC9C,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;KACjC,CAAC;IACF,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAChD,8FAA8F;IAC9F,YAAY,CAAC,EAAE;QACd,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,CAAC,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,4BAA4B,CAAC;CACpG;AAED,wBAAgB,mCAAmC,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAatG;AAED,wBAAgB,6CAA6C,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYhH;AAiBD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAErF;AAED,wBAAgB,wBAAwB,CACvC,EAAE,EAAE,MAAM,GAAG,SAAS,EACtB,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQzB;AAyGD,MAAM,WAAW,oBAAoB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB;;8BAE0B;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC1B;AAgmBD,wBAAgB,oCAAoC,CACnD,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,0BAA0B,GACjC,MAAM,CAgBR;AAED,wBAAgB,uCAAuC,CACtD,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,0BAA0B,GACjC,MAAM,CA4BR;AA0CD,UAAU,oBAAoB;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,sBAAsB,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AA4BD,wBAAsB,mCAAmC,CACxD,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,0BAA0B,GAClC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA+EjC;AAmHD,wBAAsB,mCAAmC,CACxD,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,0BAA0B,GAClC,OAAO,CAAC,MAAM,CAAC,CA+BjB;AAqHD,wBAAsB,2CAA2C,CAChE,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,0BAA0B,EACnC,iBAAiB,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,CAyDjB;AAED,wBAAsB,6CAA6C,CAClE,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,0BAA0B,EACnC,iBAAiB,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,CAkBjB;AAMD,wBAAgB,sCAAsC,CACrD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,0BAA0B,GACjC,MAAM,GAAG,SAAS,CAiBpB;AA+BD,wBAAsB,0BAA0B,CAC/C,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,0BAA0B,GACjC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAwE7B;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,0BAA0B,GACjC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,0BAA0B,CAetD;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC5C,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,0BAA0B,GACjC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,0BAA0B,CAmBtD;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG,kBAAkB,CAMhF;AAMD;;;;;GAKG;AACH,wBAAsB,sCAAsC,CAC3D,OAAO,EAAE,gBAAgB,EACzB,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,0BAA0B,EACnC,OAAO,EAAE,0BAA0B,GACjC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmD7B","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { randomUUID } from \"node:crypto\";\nimport { isAbsolute, relative, resolve, sep } from \"node:path\";\nimport type { IrohRemoteAuditLogger } from \"../core/remote/iroh/audit.ts\";\nimport type { IrohRemoteClientAuthorizationSuccess } from \"../core/remote/iroh/authorization.ts\";\nimport { handleIrohRemoteDeviceLogUploadRpcCommand } from \"../core/remote/iroh/device-log-rpc.ts\";\nimport { sanitizeIrohRemoteOutbound } from \"../core/remote/iroh/outbound-filter.ts\";\nimport {\n\tcreateIrohRemoteRpcErrorResponse,\n\ttype IrohRemoteRpcErrorResponse,\n} from \"../core/remote/iroh/rpc-command-filter.ts\";\nimport type { IrohRemoteHostStateManager } from \"../core/remote/iroh/state-manager.ts\";\nimport {\n\ttype IrohRemoteTranscriptTextLayout,\n\tsanitizeIrohRemoteTranscriptText,\n} from \"../core/remote/iroh/transcript-text.ts\";\nimport { getIrohRemoteWorkspaceAvailabilityStatus } from \"../core/remote/iroh/workspace.ts\";\nimport {\n\thandleIrohRemoteWorkspaceUnregisterRpcCommand,\n\tIROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE,\n} from \"../core/remote/iroh/workspace-rpc.ts\";\nimport {\n\thandleIrohRemoteWorktreeRpcCommand,\n\tIROH_REMOTE_CREATE_WORKTREE_RPC_TYPE,\n\tIROH_REMOTE_LIST_WORKTREES_RPC_TYPE,\n\ttype IrohRemoteWorktreeRpcBackend,\n} from \"../core/remote/iroh/worktree-rpc.ts\";\nimport { extractMessageImages, projectMessageImages } from \"../core/rpc/transcript.ts\";\nimport type { RpcKeepAwakeStatus } from \"../core/rpc/types.ts\";\nimport { getDefaultSessionDir, type SessionEntry, SessionManager } from \"../core/session-manager.ts\";\nimport type { KeepAwakeStatus } from \"./keep-awake.ts\";\nimport type { LeaseState } from \"./lease-broker.ts\";\nimport { getRegisteredWorkingDirectoryForWorktree } from \"./worktree-manager.ts\";\n\nexport const INTEGRATED_CONVERSATION_UNSUPPORTED_RPC_TYPES: ReadonlySet<string> = new Set([\n\t\"new_session\",\n\t\"switch_session_by_id\",\n\t\"get_messages\",\n]);\n\n/**\n * Commands that start or extend a turn. While a lease is draining to a TUI,\n * these are rejected with `lease_draining` so the drain converges; read-only\n * commands and abort pass through.\n */\nexport const TURN_INITIATING_RPC_TYPES: ReadonlySet<string> = new Set([\n\t\"prompt\",\n\t\"invoke_ui_action\",\n\t\"steer\",\n\t\"follow_up\",\n]);\n\nexport const LEASE_DRAINING_RETRY_AFTER_MS = 1000;\n\nexport const REMOTE_SESSION_LIST_DEFAULT_LIMIT = 50;\nexport const REMOTE_SESSION_LIST_MAX_LIMIT = 200;\nexport const REMOTE_SESSION_LIST_CURSOR_TTL_MS = 10 * 60 * 1000;\nexport const REMOTE_SESSION_LIST_CURSOR_MAX_BYTES = 512;\n/**\n * Per-client cap on retained pagination cursors. The cursor map is shared across\n * every stream on the daemon; without a bound a client that never echoes the\n * returned cursor (each no-cursor list_sessions mints a fresh snapshot of up to\n * REMOTE_SESSION_LIST_MAX_LIMIT summaries) would grow it without limit for the\n * whole TTL window. Bounding per client (rather than globally) prevents one client\n * from evicting another's cursors — mirrors the push deduper's per-client cap.\n */\nexport const REMOTE_SESSION_LIST_MAX_CURSORS_PER_CLIENT = 64;\nconst REMOTE_TRANSCRIPT_DEFAULT_LIMIT = 200;\nconst REMOTE_TRANSCRIPT_MAX_LIMIT = 200;\nconst REMOTE_TRANSCRIPT_CURSOR_MAX_BYTES = 2048;\nconst REMOTE_TRANSCRIPT_CURSOR_MAX_SCALARS = 512;\nconst REMOTE_TOOL_COMMAND_MAX_SCALARS = 500;\nconst REMOTE_TOOL_ARGUMENT_MAX_SCALARS = 500;\nconst REMOTE_TOOL_ARGUMENT_KEYS_MAX = 12;\nexport const REMOTE_TOOL_OUTPUT_MAX_SCALARS = 8_000;\n\nexport type RemoteRpcCommand = Record<string, unknown> & { type: string };\n\nexport type RemoteSessionRuntimeState = Exclude<LeaseState, \"unowned\">;\n\nexport interface RemoteSessionListEntry {\n\tsessionId: string;\n\ttitle: string;\n\tcreatedAt: string;\n\tupdatedAt: string;\n\tmessageCount: number;\n\t/** \"subagent\" when this session was created for a delegated subagent run. */\n\torigin?: \"subagent\";\n\t/** Live host ownership for this session. Omitted when no runtime is currently owned. */\n\truntimeState?: RemoteSessionRuntimeState;\n\t/** Present when the session is bound to a daemon-managed worktree (worktrees.v1). */\n\tworktreeId?: string;\n\t/** POSIX-style path relative to the registered workspace root. Omitted for root. */\n\tworkingDirectory?: string;\n}\n\nexport interface RemoteSessionListCursorEntry {\n\tclientNodeId: string;\n\tworkspaceName: string;\n\tsessions: RemoteSessionListEntry[];\n\tnextIndex: number;\n\texpiresAt: number;\n}\n\n/** Minimal runtime surface the conversation command handlers consume. */\nexport interface ConversationCommandRuntime {\n\tsession: {\n\t\tsessionId: string;\n\t\tsessionManager: Pick<SessionManager, \"getBranch\">;\n\t};\n\tlistSessions(): Promise<\n\t\tArray<{\n\t\t\tsessionId: string;\n\t\t\tsessionName?: string;\n\t\t\tcreatedAt: string;\n\t\t\tmodifiedAt: string;\n\t\t\tmessageCount: number;\n\t\t\tfirstMessage: string;\n\t\t\tcwd?: string;\n\t\t\torigin?: \"subagent\";\n\t\t}>\n\t>;\n}\n\nexport interface ConversationCommandContext {\n\tagentDir?: string;\n\tauditLogger?: IrohRemoteAuditLogger;\n\thostEngine?: { clearPairingSecretForWorkspace(workspaceName: string): void };\n\tstateManager: IrohRemoteHostStateManager;\n\tsessionListCursors: Map<string, RemoteSessionListCursorEntry>;\n\tsessionListCursorTtlMs: number;\n\tnow?: () => number;\n\t/** Batch live-runtime presence for list_sessions; absent on hosts without a daemon broker. */\n\tlistRuntimeStates?: (\n\t\tworkspaceName: string,\n\t) => Promise<ReadonlyMap<string, RemoteSessionRuntimeState>> | ReadonlyMap<string, RemoteSessionRuntimeState>;\n\t/** True while this conversation's lease is draining to a TUI (§4.5 rejection). */\n\tisDraining?: () => boolean;\n\t/**\n\t * True when this conversation runtime is a subagent child session. Subagent\n\t * sessions are observe-only for remote clients: the parent agent owns the\n\t * delegated turn, so turn-initiating commands are rejected.\n\t */\n\tisSubagentSession?: () => boolean;\n\t/** Host cleanup after a successful workspace unregister (streams, runtimes, live activities, relays). */\n\tonWorkspaceUnregistered?: (workspaceName: string) => Promise<void>;\n\t/** Host keep-awake control; absent when no daemon owns the host (e.g. plain rpc mode). */\n\tkeepAwake?: {\n\t\tsetEnabled(enabled: boolean): KeepAwakeStatus;\n\t\treadonly status: KeepAwakeStatus;\n\t};\n\t/** Persist the desired keep-awake setting after a successful set_keep_awake. */\n\tonKeepAwakeSetting?: (enabled: boolean) => void;\n\t/** Host web-search key control; absent when no daemon owns the host (e.g. plain rpc mode). */\n\twebSearchKey?: {\n\t\tset(apiKey: string | null): void;\n\t\treadonly configured: boolean;\n\t};\n\t/**\n\t * Worktree RPC backend for the stream-bound workspace (worktrees.v1);\n\t * absent when no daemon owns the host (create/list_worktrees then fail\n\t * with unsupported_remote_command).\n\t */\n\tcreateWorktreeBackend?: (workspace: { name: string; path: string }) => IrohRemoteWorktreeRpcBackend;\n}\n\nexport function createLeaseDrainingRpcErrorResponse(command: RemoteRpcCommand): Record<string, unknown> {\n\tconst id = getRpcResponseId(command);\n\treturn {\n\t\t...(id === undefined ? {} : { id }),\n\t\ttype: \"response\",\n\t\tcommand: command.type,\n\t\tsuccess: false,\n\t\terror: {\n\t\t\tcode: \"lease_draining\",\n\t\t\tmessage: \"Handing off to the desktop TUI; retry shortly.\",\n\t\t\tretryAfterMs: LEASE_DRAINING_RETRY_AFTER_MS,\n\t\t},\n\t};\n}\n\nexport function createSubagentSessionReadOnlyRpcErrorResponse(command: RemoteRpcCommand): Record<string, unknown> {\n\tconst id = getRpcResponseId(command);\n\treturn {\n\t\t...(id === undefined ? {} : { id }),\n\t\ttype: \"response\",\n\t\tcommand: command.type,\n\t\tsuccess: false,\n\t\terror: {\n\t\t\tcode: \"subagent_session_read_only\",\n\t\t\tmessage: \"Subagent sessions are observe-only; prompt the parent agent instead.\",\n\t\t},\n\t};\n}\n\nfunction contextNow(context: ConversationCommandContext): number {\n\treturn (context.now ?? Date.now)();\n}\n\nasync function logAudit(\n\tauditLogger: IrohRemoteAuditLogger | undefined,\n\tevent: Parameters<IrohRemoteAuditLogger[\"log\"]>[0],\n): Promise<void> {\n\ttry {\n\t\tawait auditLogger?.log(event);\n\t} catch {\n\t\t// Audit logging is best-effort and must not change remote runtime behavior.\n\t}\n}\n\nexport function getRpcResponseId(command: Record<string, unknown>): string | undefined {\n\treturn typeof command.id === \"string\" ? command.id : undefined;\n}\n\nexport function createRpcSuccessResponse(\n\tid: string | undefined,\n\tcommand: string,\n\tdata?: Record<string, unknown>,\n): Record<string, unknown> {\n\treturn {\n\t\t...(id === undefined ? {} : { id }),\n\t\ttype: \"response\",\n\t\tcommand,\n\t\tsuccess: true,\n\t\t...(data === undefined ? {} : { data }),\n\t};\n}\n\nfunction getRemoteSanitizerOptions(authorization: IrohRemoteClientAuthorizationSuccess) {\n\treturn {\n\t\tremoteWorkspacePath: \"/workspace\",\n\t\tworkspacePath: authorization.workspace.path,\n\t};\n}\n\nfunction truncateUnicodeScalars(value: string, maxLength: number): string {\n\tconst scalars = Array.from(value);\n\treturn scalars.length <= maxLength ? value : scalars.slice(0, maxLength).join(\"\");\n}\n\nfunction sanitizeRemoteTextField(\n\tvalue: string,\n\tmaxLength: number,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): string {\n\tconst sanitized = (\n\t\tsanitizeIrohRemoteOutbound({ value }, getRemoteSanitizerOptions(authorization)) as { value?: unknown }\n\t).value;\n\treturn truncateUnicodeScalars(typeof sanitized === \"string\" ? sanitized : \"\", maxLength);\n}\n\nfunction sanitizeRemoteTranscriptText(\n\tvalue: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tlayout: IrohRemoteTranscriptTextLayout = \"preserve\",\n) {\n\treturn sanitizeIrohRemoteTranscriptText(\n\t\ttypeof value === \"string\" ? value : \"\",\n\t\tgetRemoteSanitizerOptions(authorization),\n\t\tlayout,\n\t);\n}\n\n// ============================================================================\n// Transcript projection\n// ============================================================================\n\ninterface RemoteTranscriptRequest {\n\tlimit: number;\n\tbeforeEntryId?: string;\n}\n\nfunction parseRemoteTranscriptLimit(\n\tcommand: Record<string, unknown>,\n): { ok: true; limit: number } | { ok: false; error: string } {\n\tif (command.limit === undefined) {\n\t\treturn { ok: true, limit: REMOTE_TRANSCRIPT_DEFAULT_LIMIT };\n\t}\n\tif (\n\t\ttypeof command.limit !== \"number\" ||\n\t\t!Number.isFinite(command.limit) ||\n\t\t!Number.isInteger(command.limit) ||\n\t\tcommand.limit <= 0\n\t) {\n\t\treturn { ok: false, error: \"invalid_limit\" };\n\t}\n\treturn { ok: true, limit: Math.min(command.limit, REMOTE_TRANSCRIPT_MAX_LIMIT) };\n}\n\nfunction isValidRemoteTranscriptCursor(value: unknown): value is string {\n\treturn (\n\t\ttypeof value === \"string\" &&\n\t\tvalue.length > 0 &&\n\t\tArray.from(value).length <= REMOTE_TRANSCRIPT_CURSOR_MAX_SCALARS &&\n\t\tBuffer.byteLength(value, \"utf8\") <= REMOTE_TRANSCRIPT_CURSOR_MAX_BYTES\n\t);\n}\n\nfunction parseRemoteTranscriptRequest(\n\tcommand: Record<string, unknown>,\n): ({ ok: true } & RemoteTranscriptRequest) | { ok: false; error: string } {\n\tconst limit = parseRemoteTranscriptLimit(command);\n\tif (!limit.ok) {\n\t\treturn limit;\n\t}\n\tif (command.beforeEntryId !== undefined && !isValidRemoteTranscriptCursor(command.beforeEntryId)) {\n\t\treturn { ok: false, error: \"invalid_cursor\" };\n\t}\n\treturn {\n\t\tok: true,\n\t\tlimit: limit.limit,\n\t\t...(command.beforeEntryId === undefined ? {} : { beforeEntryId: command.beforeEntryId as string }),\n\t};\n}\n\nfunction extractTranscriptContentText(content: unknown): string {\n\tif (typeof content === \"string\") {\n\t\treturn content;\n\t}\n\tif (!Array.isArray(content)) {\n\t\treturn \"\";\n\t}\n\treturn content\n\t\t.filter(\n\t\t\t(part): part is { type: \"text\"; text: string } =>\n\t\t\t\tisRemoteRecord(part) && part.type === \"text\" && typeof part.text === \"string\",\n\t\t)\n\t\t.map((part) => part.text)\n\t\t.join(\"\");\n}\n\nexport interface RemoteTranscriptItem {\n\tentryId: string;\n\tcreatedAt: string;\n\trole: \"user\" | \"assistant\" | \"system\" | \"tool\";\n\ttext: string;\n\ttruncated: boolean;\n\t/** Inline image blocks persisted on the message (user attachments or tool\n\t *  results such as image reads); recoverable per entry via\n\t *  get_message_images. */\n\timageCount?: number;\n\ttoolName?: string;\n\tstatus?: \"completed\" | \"failed\";\n\tsummary?: string;\n\tpath?: string;\n\targs?: Record<string, unknown>;\n\tdetails?: Record<string, unknown>;\n\toutput?: string;\n\toutputTruncated?: boolean;\n}\n\n/**\n * Sanitized, bounded tool result text for remote clients. Layout is preserved\n * (unlike tool summaries) so the phone can render real output; the scalar cap\n * keeps a single transcript item within remote stream size expectations.\n */\nfunction sanitizeRemoteToolOutput(\n\tvalue: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\thostTruncated = false,\n): { text: string; truncated: boolean } | undefined {\n\tif (typeof value !== \"string\" || value.trim().length === 0) {\n\t\treturn undefined;\n\t}\n\tconst sanitized = sanitizeRemoteTranscriptText(value, authorization, \"preserve\");\n\tconst scalars = Array.from(sanitized.text);\n\tconst truncated = sanitized.truncated || hostTruncated || scalars.length > REMOTE_TOOL_OUTPUT_MAX_SCALARS;\n\treturn {\n\t\ttext:\n\t\t\tscalars.length > REMOTE_TOOL_OUTPUT_MAX_SCALARS\n\t\t\t\t? scalars.slice(0, REMOTE_TOOL_OUTPUT_MAX_SCALARS).join(\"\")\n\t\t\t\t: sanitized.text,\n\t\ttruncated,\n\t};\n}\n\nfunction createRemoteTranscriptItem(\n\tentry: SessionEntry,\n\trole: RemoteTranscriptItem[\"role\"],\n\ttext: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tlayout: IrohRemoteTranscriptTextLayout = role === \"tool\" ? \"summary\" : \"preserve\",\n): RemoteTranscriptItem {\n\tconst sanitized = sanitizeRemoteTranscriptText(text, authorization, layout);\n\treturn {\n\t\tentryId: entry.id,\n\t\tcreatedAt: toRemoteSessionTimestamp(entry.timestamp),\n\t\trole,\n\t\ttext: sanitized.text,\n\t\ttruncated: sanitized.truncated,\n\t};\n}\n\ninterface RemoteToolCallRecord {\n\tid: string;\n\tname: string;\n\targuments: Record<string, unknown>;\n}\n\nfunction projectRemoteTranscriptEntry(\n\tentry: SessionEntry,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\ttoolCallsById: Map<string, RemoteToolCallRecord>,\n): RemoteTranscriptItem | undefined {\n\tif (!entry || typeof entry !== \"object\") {\n\t\treturn undefined;\n\t}\n\tif (entry.type === \"compaction\") {\n\t\treturn createRemoteTranscriptItem(entry, \"system\", entry.summary, authorization);\n\t}\n\tif (entry.type === \"custom_message\") {\n\t\tif (entry.customType !== \"review\" || entry.display !== true) {\n\t\t\treturn undefined;\n\t\t}\n\t\tconst text = extractTranscriptContentText(entry.content);\n\t\treturn text ? createRemoteTranscriptItem(entry, \"assistant\", text, authorization) : undefined;\n\t}\n\tif (entry.type !== \"message\" || !entry.message || typeof entry.message !== \"object\") {\n\t\treturn undefined;\n\t}\n\tconst message = entry.message as unknown as Record<string, unknown>;\n\tif (message.role === \"user\" || message.role === \"assistant\") {\n\t\tconst text = extractTranscriptContentText(message.content);\n\t\tconst imageCount = message.role === \"user\" ? extractMessageImages(message.content).length : 0;\n\t\tif (!text && imageCount === 0) {\n\t\t\treturn undefined;\n\t\t}\n\t\tconst item = createRemoteTranscriptItem(entry, message.role, text, authorization);\n\t\tif (imageCount > 0) {\n\t\t\titem.imageCount = imageCount;\n\t\t}\n\t\treturn item;\n\t}\n\tif (message.role === \"toolResult\") {\n\t\tconst status = message.isError ? \"failed\" : \"completed\";\n\t\tconst toolName =\n\t\t\ttypeof message.toolName === \"string\" && message.toolName.trim() ? message.toolName.trim() : \"tool\";\n\t\tconst toolCall = typeof message.toolCallId === \"string\" ? toolCallsById.get(message.toolCallId) : undefined;\n\t\tconst args = isRemoteRecord(toolCall?.arguments) ? toolCall.arguments : undefined;\n\t\tconst path = getRemoteToolPath(toolName, args, authorization);\n\t\tconst summary = summarizeRemoteToolResult(toolName, status, args, path, authorization);\n\t\tconst item = createRemoteTranscriptItem(entry, \"tool\", summary, authorization);\n\t\titem.toolName = toolName;\n\t\titem.status = status;\n\t\titem.summary = summary;\n\t\tif (path) {\n\t\t\titem.path = path;\n\t\t}\n\t\tconst projectedArgs = projectRemoteToolArgs(toolName, args, authorization);\n\t\tif (projectedArgs) {\n\t\t\titem.args = projectedArgs;\n\t\t}\n\t\tif (toolName === \"subagent\") {\n\t\t\tconst details = projectRemoteSubagentDetails(message.details, authorization);\n\t\t\tif (details) {\n\t\t\t\titem.details = details;\n\t\t\t}\n\t\t}\n\t\tconst output = sanitizeRemoteToolOutput(extractTranscriptContentText(message.content), authorization);\n\t\tif (output) {\n\t\t\titem.output = output.text;\n\t\t\titem.outputTruncated = output.truncated;\n\t\t}\n\t\tconst imageCount = extractMessageImages(message.content).length;\n\t\tif (imageCount > 0) {\n\t\t\titem.imageCount = imageCount;\n\t\t}\n\t\treturn item;\n\t}\n\tif (message.role === \"bashExecution\") {\n\t\tconst failed = message.cancelled === true || (message.exitCode !== undefined && message.exitCode !== 0);\n\t\tconst status = failed ? \"failed\" : \"completed\";\n\t\tconst exit = message.cancelled\n\t\t\t? \"cancelled\"\n\t\t\t: message.exitCode === undefined\n\t\t\t\t? status\n\t\t\t\t: `exit ${message.exitCode}`;\n\t\tconst command = remoteString(message.command, authorization, REMOTE_TOOL_COMMAND_MAX_SCALARS);\n\t\tconst summary = command ? `Ran command: ${command} (${exit})` : `bash ${exit}`;\n\t\tconst item = createRemoteTranscriptItem(entry, \"tool\", summary, authorization);\n\t\titem.toolName = \"bash\";\n\t\titem.status = status;\n\t\titem.summary = summary;\n\t\tif (command) {\n\t\t\titem.args = { command };\n\t\t}\n\t\tconst output = sanitizeRemoteToolOutput(message.output, authorization, message.truncated === true);\n\t\tif (output) {\n\t\t\titem.output = output.text;\n\t\t\titem.outputTruncated = output.truncated;\n\t\t}\n\t\treturn item;\n\t}\n\treturn undefined;\n}\n\nfunction projectRemoteTranscriptItems(\n\tsessionManager: Pick<SessionManager, \"getBranch\">,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): RemoteTranscriptItem[] {\n\tconst branch = sessionManager.getBranch();\n\tconst toolCallsById = collectRemoteToolCalls(branch);\n\treturn branch\n\t\t.map((entry) => projectRemoteTranscriptEntry(entry, authorization, toolCallsById))\n\t\t.filter((item): item is RemoteTranscriptItem => item !== undefined);\n}\n\nfunction collectRemoteToolCalls(entries: SessionEntry[]): Map<string, RemoteToolCallRecord> {\n\tconst toolCallsById = new Map<string, RemoteToolCallRecord>();\n\tfor (const entry of entries) {\n\t\tif (entry.type !== \"message\") {\n\t\t\tcontinue;\n\t\t}\n\t\tconst message = entry.message as unknown as Record<string, unknown>;\n\t\tif (message?.role !== \"assistant\" || !Array.isArray(message.content)) {\n\t\t\tcontinue;\n\t\t}\n\t\tfor (const block of message.content) {\n\t\t\tif (\n\t\t\t\tisRemoteRecord(block) &&\n\t\t\t\tblock.type === \"toolCall\" &&\n\t\t\t\ttypeof block.id === \"string\" &&\n\t\t\t\ttypeof block.name === \"string\" &&\n\t\t\t\tisRemoteRecord(block.arguments)\n\t\t\t) {\n\t\t\t\ttoolCallsById.set(block.id, {\n\t\t\t\t\tid: block.id,\n\t\t\t\t\tname: block.name,\n\t\t\t\t\targuments: block.arguments,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n\treturn toolCallsById;\n}\n\nfunction projectRemoteToolArgs(\n\ttoolName: string,\n\targs: Record<string, unknown> | undefined,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): Record<string, unknown> | undefined {\n\tif (toolName === \"subagent\") {\n\t\treturn projectRemoteSubagentArgs(args, authorization);\n\t}\n\tif (!isRemoteRecord(args)) {\n\t\treturn undefined;\n\t}\n\n\tconst projected: Record<string, unknown> = {};\n\tswitch (toolName) {\n\t\tcase \"bash\":\n\t\t\tcopyRemoteString(args, projected, \"command\", authorization, REMOTE_TOOL_COMMAND_MAX_SCALARS);\n\t\t\tcopyRemoteNumber(args, projected, \"timeout\");\n\t\t\tbreak;\n\t\tcase \"read\":\n\t\t\tcopyRemoteString(args, projected, \"path\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"file_path\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteNumber(args, projected, \"offset\");\n\t\t\tcopyRemoteNumber(args, projected, \"limit\");\n\t\t\tbreak;\n\t\tcase \"edit\":\n\t\tcase \"write\":\n\t\t\tcopyRemoteString(args, projected, \"path\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"file_path\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tbreak;\n\t\tcase \"grep\":\n\t\t\tcopyRemoteString(args, projected, \"pattern\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"path\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"glob\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"include\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"exclude\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteBoolean(args, projected, \"ignoreCase\");\n\t\t\tcopyRemoteBoolean(args, projected, \"literal\");\n\t\t\tcopyRemoteNumber(args, projected, \"context\");\n\t\t\tbreak;\n\t\tcase \"find\":\n\t\t\tcopyRemoteString(args, projected, \"query\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"pattern\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"path\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"glob\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"name\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteNumber(args, projected, \"limit\");\n\t\t\tbreak;\n\t\tcase \"ls\":\n\t\t\tcopyRemoteString(args, projected, \"path\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteNumber(args, projected, \"limit\");\n\t\t\tbreak;\n\t\tcase \"lsp\":\n\t\t\tcopyRemoteString(args, projected, \"action\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"symbol\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"path\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteString(args, projected, \"file_path\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteNumber(args, projected, \"line\");\n\t\t\tbreak;\n\t\tcase \"web_search\":\n\t\t\tcopyRemoteString(args, projected, \"query\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteStringArray(args, projected, \"domains\", authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\t\tcopyRemoteNumber(args, projected, \"limit\");\n\t\t\tcopyRemoteNumber(args, projected, \"recencyDays\");\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tbreak;\n\t}\n\n\treturn Object.keys(projected).length > 0 ? projected : undefined;\n}\n\nfunction getRemoteToolPath(\n\ttoolName: string,\n\targs: Record<string, unknown> | undefined,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): string | undefined {\n\tif (!isRemoteRecord(args)) {\n\t\treturn undefined;\n\t}\n\tswitch (toolName) {\n\t\tcase \"read\":\n\t\tcase \"edit\":\n\t\tcase \"write\":\n\t\tcase \"lsp\":\n\t\t\treturn (\n\t\t\t\tremoteString(args.path, authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS) ??\n\t\t\t\tremoteString(args.file_path, authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS)\n\t\t\t);\n\t\tcase \"grep\":\n\t\tcase \"find\":\n\t\tcase \"ls\":\n\t\t\treturn remoteString(args.path, authorization, REMOTE_TOOL_ARGUMENT_MAX_SCALARS);\n\t\tdefault:\n\t\t\treturn undefined;\n\t}\n}\n\nfunction summarizeRemoteToolResult(\n\ttoolName: string,\n\tstatus: \"completed\" | \"failed\",\n\targs: Record<string, unknown> | undefined,\n\tpath: string | undefined,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): string {\n\tconst statusText = status === \"failed\" ? \"failed\" : \"completed\";\n\tif (toolName === \"bash\") {\n\t\tconst command = remoteString(args?.command, authorization, REMOTE_TOOL_COMMAND_MAX_SCALARS);\n\t\tif (command) {\n\t\t\treturn `Ran command: ${command} (${statusText})`;\n\t\t}\n\t}\n\tif (toolName === \"read\" && path) {\n\t\treturn `Read ${path} (${statusText})`;\n\t}\n\tif (path) {\n\t\treturn `${toolName} ${path} (${statusText})`;\n\t}\n\treturn `${toolName} ${statusText}`;\n}\n\nfunction projectRemoteSubagentArgs(\n\targs: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): Record<string, unknown> | undefined {\n\tif (!isRemoteRecord(args)) {\n\t\treturn undefined;\n\t}\n\tconst projected: Record<string, unknown> = {};\n\tcopyRemoteString(args, projected, \"agent\", authorization, 200);\n\tcopyRemoteString(args, projected, \"task\", authorization, 1000);\n\tconst tasks = projectRemoteSubagentInputArray(args.tasks, authorization);\n\tif (tasks) {\n\t\tprojected.tasks = tasks;\n\t}\n\tconst chain = projectRemoteSubagentInputArray(args.chain, authorization);\n\tif (chain) {\n\t\tprojected.chain = chain;\n\t}\n\treturn Object.keys(projected).length > 0 ? projected : undefined;\n}\n\nfunction projectRemoteSubagentInputArray(\n\tvalue: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): Array<{ agent: string; task: string }> | undefined {\n\tif (!Array.isArray(value)) {\n\t\treturn undefined;\n\t}\n\tconst projected = value\n\t\t.map((item) => {\n\t\t\tif (!isRemoteRecord(item)) {\n\t\t\t\treturn undefined;\n\t\t\t}\n\t\t\tconst agent = remoteString(item.agent, authorization, 200);\n\t\t\tconst task = remoteString(item.task, authorization, 1000);\n\t\t\treturn agent && task ? { agent, task } : undefined;\n\t\t})\n\t\t.filter((item): item is { agent: string; task: string } => item !== undefined);\n\treturn projected.length > 0 ? projected : undefined;\n}\n\nfunction projectRemoteSubagentDetails(\n\tvalue: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): Record<string, unknown> | undefined {\n\tif (!isRemoteRecord(value)) {\n\t\treturn undefined;\n\t}\n\tconst projected: Record<string, unknown> = {};\n\tcopyRemoteString(value, projected, \"mode\", authorization, 200);\n\tcopyRemoteString(value, projected, \"status\", authorization, 200);\n\tcopyRemoteString(value, projected, \"subagentId\", authorization, 200);\n\tcopyRemoteString(value, projected, \"sessionId\", authorization, 200);\n\tcopyRemoteSubagentNumericDetails(value, projected);\n\tcopyRemoteString(value, projected, \"currentActivity\", authorization, 300);\n\tconst summary = projectRemoteSubagentSummary(value.summary);\n\tif (summary) {\n\t\tprojected.summary = summary;\n\t}\n\tconst childSessions = projectRemoteSubagentDetailArray(value.childSessions, authorization);\n\tif (childSessions) {\n\t\tprojected.childSessions = childSessions;\n\t}\n\tconst agent = projectRemoteSubagentAgent(value.agent, authorization);\n\tif (agent) {\n\t\tprojected.agent = agent;\n\t}\n\tconst output = projectRemoteSubagentOutput(value.output, authorization);\n\tif (output) {\n\t\tprojected.output = output;\n\t}\n\tconst error = projectRemoteSubagentError(value.error, authorization);\n\tif (error) {\n\t\tprojected.error = error;\n\t}\n\tconst children = projectRemoteSubagentDetailArray(value.children, authorization);\n\tif (children) {\n\t\tprojected.children = children;\n\t}\n\tconst tasks = projectRemoteSubagentDetailArray(value.tasks, authorization);\n\tif (tasks) {\n\t\tprojected.tasks = tasks;\n\t}\n\tconst steps = projectRemoteSubagentDetailArray(value.steps, authorization);\n\tif (steps) {\n\t\tprojected.steps = steps;\n\t}\n\treturn Object.keys(projected).length > 0 ? projected : undefined;\n}\n\nconst REMOTE_SUBAGENT_NUMERIC_KEYS = [\"startedAt\", \"durationMs\", \"toolCalls\", \"tokens\"] as const;\nconst REMOTE_SUBAGENT_TREE_DEPTH_LIMIT = 5;\n\nfunction copyRemoteSubagentNumericDetails(from: Record<string, unknown>, to: Record<string, unknown>): void {\n\tfor (const key of REMOTE_SUBAGENT_NUMERIC_KEYS) {\n\t\tconst numberValue = remoteFiniteNumber(from[key]);\n\t\tif (numberValue !== undefined) {\n\t\t\tto[key] = numberValue;\n\t\t}\n\t}\n}\n\nfunction projectRemoteSubagentSummary(value: unknown): Record<string, number> | undefined {\n\tif (!isRemoteRecord(value)) {\n\t\treturn undefined;\n\t}\n\tconst projected: Record<string, number> = {};\n\tfor (const key of [\n\t\t\"total\",\n\t\t\"completed\",\n\t\t\"failed\",\n\t\t\"aborted\",\n\t\t\"running\",\n\t\t\"maxTasks\",\n\t\t\"maxConcurrency\",\n\t\t\"stoppedAt\",\n\t]) {\n\t\tconst numberValue = remoteFiniteNumber(value[key]);\n\t\tif (numberValue !== undefined) {\n\t\t\tprojected[key] = numberValue;\n\t\t}\n\t}\n\treturn Object.keys(projected).length > 0 ? projected : undefined;\n}\n\nfunction projectRemoteSubagentDetailArray(\n\tvalue: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tdepth = 0,\n): Array<Record<string, unknown>> | undefined {\n\tif (!Array.isArray(value) || depth >= REMOTE_SUBAGENT_TREE_DEPTH_LIMIT) {\n\t\treturn undefined;\n\t}\n\tconst projected = value\n\t\t.map((item) => projectRemoteSubagentTask(item, authorization, depth))\n\t\t.filter((item): item is Record<string, unknown> => item !== undefined);\n\treturn projected.length > 0 ? projected : undefined;\n}\n\nfunction projectRemoteSubagentTask(\n\tvalue: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tdepth = 0,\n): Record<string, unknown> | undefined {\n\tif (!isRemoteRecord(value)) {\n\t\treturn undefined;\n\t}\n\tconst projected: Record<string, unknown> = {};\n\tconst index = remoteFiniteNumber(value.index);\n\tif (index !== undefined) {\n\t\tprojected.index = index;\n\t}\n\tcopyRemoteString(value, projected, \"subagentId\", authorization, 200);\n\tcopyRemoteString(value, projected, \"sessionId\", authorization, 200);\n\tconst agent = projectRemoteSubagentAgent(value.agent, authorization);\n\tif (agent) {\n\t\tprojected.agent = agent;\n\t}\n\tcopyRemoteString(value, projected, \"status\", authorization, 200);\n\tcopyRemoteString(value, projected, \"task\", authorization, 1_000);\n\tcopyRemoteSubagentNumericDetails(value, projected);\n\tcopyRemoteString(value, projected, \"currentActivity\", authorization, 300);\n\tconst error = projectRemoteSubagentError(value.error, authorization);\n\tif (error) {\n\t\tprojected.error = error;\n\t}\n\tconst children = projectRemoteSubagentDetailArray(value.children, authorization, depth + 1);\n\tif (children) {\n\t\tprojected.children = children;\n\t}\n\treturn Object.keys(projected).length > 0 ? projected : undefined;\n}\n\nfunction projectRemoteSubagentAgent(\n\tvalue: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): Record<string, unknown> | undefined {\n\tif (!isRemoteRecord(value)) {\n\t\treturn undefined;\n\t}\n\tconst projected: Record<string, unknown> = {};\n\tcopyRemoteString(value, projected, \"name\", authorization, 200);\n\tcopyRemoteString(value, projected, \"source\", authorization, 200);\n\treturn Object.keys(projected).length > 0 ? projected : undefined;\n}\n\nfunction projectRemoteSubagentOutput(\n\tvalue: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): Record<string, unknown> | undefined {\n\tif (!isRemoteRecord(value)) {\n\t\treturn undefined;\n\t}\n\tconst projected: Record<string, unknown> = {};\n\tcopyRemoteString(value, projected, \"text\", authorization, 1000);\n\tfor (const key of [\"bytes\", \"omittedBytes\", \"maxBytes\"]) {\n\t\tconst numberValue = remoteFiniteNumber(value[key]);\n\t\tif (numberValue !== undefined) {\n\t\t\tprojected[key] = numberValue;\n\t\t}\n\t}\n\tif (typeof value.truncated === \"boolean\") {\n\t\tprojected.truncated = value.truncated;\n\t}\n\treturn Object.keys(projected).length > 0 ? projected : undefined;\n}\n\nfunction projectRemoteSubagentError(\n\tvalue: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): { message: string } | undefined {\n\tif (!isRemoteRecord(value)) {\n\t\treturn undefined;\n\t}\n\tconst message = remoteString(value.message, authorization, 1000);\n\treturn message ? { message } : undefined;\n}\n\nfunction remoteString(\n\tvalue: unknown,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tmaxLength: number,\n): string | undefined {\n\treturn typeof value === \"string\" && value.trim()\n\t\t? sanitizeRemoteTextField(value, maxLength, authorization)\n\t\t: undefined;\n}\n\nfunction copyRemoteString(\n\tfrom: Record<string, unknown>,\n\tto: Record<string, unknown>,\n\tkey: string,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tmaxLength: number,\n): void {\n\tconst value = remoteString(from[key], authorization, maxLength);\n\tif (value) {\n\t\tto[key] = value;\n\t}\n}\n\nfunction copyRemoteNumber(from: Record<string, unknown>, to: Record<string, unknown>, key: string): void {\n\tconst value = remoteFiniteNumber(from[key]);\n\tif (value !== undefined) {\n\t\tto[key] = value;\n\t}\n}\n\nfunction copyRemoteBoolean(from: Record<string, unknown>, to: Record<string, unknown>, key: string): void {\n\tif (typeof from[key] === \"boolean\") {\n\t\tto[key] = from[key];\n\t}\n}\n\nfunction copyRemoteStringArray(\n\tfrom: Record<string, unknown>,\n\tto: Record<string, unknown>,\n\tkey: string,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tmaxLength: number,\n): void {\n\tconst value = from[key];\n\tif (!Array.isArray(value)) {\n\t\treturn;\n\t}\n\tconst projected = value\n\t\t.slice(0, REMOTE_TOOL_ARGUMENT_KEYS_MAX)\n\t\t.map((entry) => remoteString(entry, authorization, maxLength))\n\t\t.filter((entry): entry is string => entry !== undefined);\n\tif (projected.length > 0) {\n\t\tto[key] = projected;\n\t}\n}\n\nfunction remoteFiniteNumber(value: unknown): number | undefined {\n\treturn typeof value === \"number\" && Number.isFinite(value) ? value : undefined;\n}\n\nfunction isRemoteRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction createRemoteTranscriptPage(items: RemoteTranscriptItem[], request: RemoteTranscriptRequest) {\n\tconst beforeIndex =\n\t\trequest.beforeEntryId === undefined\n\t\t\t? items.length\n\t\t\t: items.findIndex((item) => item.entryId === request.beforeEntryId);\n\tif (beforeIndex === -1) {\n\t\treturn undefined;\n\t}\n\tconst eligibleItems = items.slice(0, beforeIndex);\n\tconst pageStart = Math.max(0, eligibleItems.length - request.limit);\n\tconst pageItems = eligibleItems.slice(pageStart);\n\tconst hasMore = pageStart > 0;\n\treturn {\n\t\titems: pageItems,\n\t\thasMore,\n\t\tnextBeforeEntryId: hasMore ? (pageItems[0]?.entryId ?? null) : null,\n\t};\n}\n\nexport function createRemoteGetTranscriptRpcResponse(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\truntime: ConversationCommandRuntime,\n): object {\n\tconst id = getRpcResponseId(command);\n\tconst request = parseRemoteTranscriptRequest(command);\n\tif (!request.ok) {\n\t\treturn createIrohRemoteRpcErrorResponse(id, \"get_transcript\", request.error);\n\t}\n\tconst items = projectRemoteTranscriptItems(runtime.session.sessionManager, authorization);\n\tconst page = createRemoteTranscriptPage(items, request);\n\tif (!page) {\n\t\treturn createIrohRemoteRpcErrorResponse(id, \"get_transcript\", \"invalid_cursor\");\n\t}\n\treturn createRpcSuccessResponse(id, \"get_transcript\", {\n\t\tworkspaceName: authorization.workspace.name,\n\t\tsessionId: runtime.session.sessionId,\n\t\t...page,\n\t});\n}\n\nexport function createRemoteGetMessageImagesRpcResponse(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\truntime: ConversationCommandRuntime,\n): object {\n\tconst id = getRpcResponseId(command);\n\tif (!isValidRemoteTranscriptCursor(command.entryId)) {\n\t\treturn createIrohRemoteRpcErrorResponse(id, \"get_message_images\", \"invalid_cursor\");\n\t}\n\tlet startImageIndex = 0;\n\tif (command.startImageIndex !== undefined) {\n\t\tif (\n\t\t\ttypeof command.startImageIndex !== \"number\" ||\n\t\t\t!Number.isInteger(command.startImageIndex) ||\n\t\t\tcommand.startImageIndex < 0\n\t\t) {\n\t\t\treturn createIrohRemoteRpcErrorResponse(id, \"get_message_images\", \"invalid_request\");\n\t\t}\n\t\tstartImageIndex = command.startImageIndex;\n\t}\n\tconst result = projectMessageImages(runtime.session.sessionManager.getBranch(), command.entryId, startImageIndex);\n\tif (!result.ok) {\n\t\treturn createIrohRemoteRpcErrorResponse(id, \"get_message_images\", result.error);\n\t}\n\treturn createRpcSuccessResponse(id, \"get_message_images\", {\n\t\tworkspaceName: authorization.workspace.name,\n\t\tsessionId: runtime.session.sessionId,\n\t\tentryId: result.entryId,\n\t\ttotalImages: result.totalImages,\n\t\timages: result.images,\n\t\tnextImageIndex: result.nextImageIndex,\n\t});\n}\n\n// ============================================================================\n// Session listing\n// ============================================================================\n\nfunction toRemoteSessionTimestamp(value: string | number | Date): string {\n\tconst date = value instanceof Date ? value : new Date(value);\n\treturn Number.isNaN(date.getTime()) ? new Date(0).toISOString() : date.toISOString();\n}\n\nfunction getRemoteSessionTimestampMs(value: string): number {\n\tconst date = new Date(value);\n\treturn Number.isNaN(date.getTime()) ? 0 : date.getTime();\n}\n\ninterface RemoteSessionSummaryInput {\n\tsessionId: string;\n\ttitle: unknown;\n\tcreatedAt: string | Date;\n\tupdatedAt: string | Date;\n\tmessageCount: number;\n\tcwd?: string;\n\torigin?: \"subagent\";\n}\n\nfunction getRelativeWorkingDirectory(rootPath: string, cwd: string | undefined): string | null | undefined {\n\tif (!cwd) {\n\t\treturn undefined;\n\t}\n\tconst root = resolve(rootPath);\n\tconst child = resolve(cwd);\n\tconst relativePath = relative(root, child);\n\tif (relativePath === \"\" || relativePath === \".\") {\n\t\treturn undefined;\n\t}\n\tif (relativePath === \"..\" || relativePath.startsWith(`..${sep}`) || isAbsolute(relativePath)) {\n\t\treturn null;\n\t}\n\treturn relativePath.split(sep).join(\"/\");\n}\n\ninterface RemoteSessionSummary {\n\tsortUpdatedAtMs: number;\n\tsession: RemoteSessionListEntry;\n\tcwd?: string;\n}\n\nfunction createRemoteSessionSummary(\n\tinput: RemoteSessionSummaryInput,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): RemoteSessionSummary {\n\tconst createdAt = toRemoteSessionTimestamp(input.createdAt);\n\tconst updatedAt = toRemoteSessionTimestamp(input.updatedAt);\n\tconst workingDirectory = getRelativeWorkingDirectory(authorization.workspace.path, input.cwd);\n\treturn {\n\t\tsortUpdatedAtMs: getRemoteSessionTimestampMs(updatedAt),\n\t\tsession: {\n\t\t\tsessionId: input.sessionId,\n\t\t\ttitle: sanitizeRemoteTextField(typeof input.title === \"string\" ? input.title : \"\", 160, authorization),\n\t\t\tcreatedAt,\n\t\t\tupdatedAt,\n\t\t\tmessageCount: input.messageCount,\n\t\t\t...(input.origin === undefined ? {} : { origin: input.origin }),\n\t\t\t...(workingDirectory === undefined || workingDirectory === null ? {} : { workingDirectory }),\n\t\t},\n\t\t...(input.cwd === undefined ? {} : { cwd: input.cwd }),\n\t};\n}\n\nfunction sortRemoteSessionSummaries(left: RemoteSessionSummary, right: RemoteSessionSummary): number {\n\treturn right.sortUpdatedAtMs - left.sortUpdatedAtMs || left.session.sessionId.localeCompare(right.session.sessionId);\n}\n\nexport async function listRemoteWorkspaceSessionSummaries(\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: ConversationCommandContext,\n\truntime?: ConversationCommandRuntime,\n): Promise<RemoteSessionSummary[]> {\n\tconst bySessionId = new Map<string, RemoteSessionSummary>();\n\tif (runtime === undefined || context.agentDir !== undefined) {\n\t\tfor (const info of await SessionManager.list(\n\t\t\tauthorization.workspace.path,\n\t\t\tgetDefaultSessionDir(authorization.workspace.path, context.agentDir),\n\t\t)) {\n\t\t\tconst summary = createRemoteSessionSummary(\n\t\t\t\t{\n\t\t\t\t\tsessionId: info.id,\n\t\t\t\t\ttitle: info.name ?? info.firstMessage,\n\t\t\t\t\tcreatedAt: info.created,\n\t\t\t\t\tupdatedAt: info.modified,\n\t\t\t\t\tmessageCount: info.messageCount,\n\t\t\t\t\tcwd: info.cwd,\n\t\t\t\t\t...(info.origin === undefined ? {} : { origin: info.origin }),\n\t\t\t\t},\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\tbySessionId.set(summary.session.sessionId, summary);\n\t\t}\n\t}\n\tif (runtime !== undefined) {\n\t\tfor (const liveSummary of await runtime.listSessions()) {\n\t\t\tconst summary = createRemoteSessionSummary(\n\t\t\t\t{\n\t\t\t\t\tsessionId: liveSummary.sessionId,\n\t\t\t\t\ttitle: liveSummary.sessionName ?? liveSummary.firstMessage,\n\t\t\t\t\tcreatedAt: liveSummary.createdAt,\n\t\t\t\t\tupdatedAt: liveSummary.modifiedAt,\n\t\t\t\t\tmessageCount: liveSummary.messageCount,\n\t\t\t\t\tcwd: liveSummary.cwd,\n\t\t\t\t\t...(liveSummary.origin === undefined ? {} : { origin: liveSummary.origin }),\n\t\t\t\t},\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\tbySessionId.set(summary.session.sessionId, summary);\n\t\t}\n\t}\n\t// Worktree attribution (worktrees.v1): join the persisted session bindings so\n\t// clients can badge worktree-bound sessions without a separate list_worktrees\n\t// round trip. Ids only — checkout paths never reach the wire.\n\ttry {\n\t\tfor (const worktree of await context.stateManager.listWorktrees(authorization.workspace.name)) {\n\t\t\tfor (const sessionId of worktree.sessionIds) {\n\t\t\t\tconst summary = bySessionId.get(sessionId);\n\t\t\t\tif (summary) {\n\t\t\t\t\tsummary.session.worktreeId = worktree.id;\n\t\t\t\t\tconst worktreeRelativeDirectory = getRelativeWorkingDirectory(worktree.path, summary.cwd);\n\t\t\t\t\tif (worktreeRelativeDirectory === null) {\n\t\t\t\t\t\tdelete summary.session.workingDirectory;\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\tconst workingDirectory = getRegisteredWorkingDirectoryForWorktree(worktree, worktreeRelativeDirectory);\n\t\t\t\t\tif (workingDirectory === undefined) {\n\t\t\t\t\t\tdelete summary.session.workingDirectory;\n\t\t\t\t\t} else {\n\t\t\t\t\t\tsummary.session.workingDirectory = workingDirectory;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t} catch {\n\t\t// Attribution is best-effort; the session list itself stays authoritative.\n\t}\n\ttry {\n\t\tconst runtimeStates = await context.listRuntimeStates?.(authorization.workspace.name);\n\t\tif (runtimeStates) {\n\t\t\tfor (const [sessionId, runtimeState] of runtimeStates) {\n\t\t\t\tconst summary = bySessionId.get(sessionId);\n\t\t\t\tif (summary) {\n\t\t\t\t\tsummary.session.runtimeState = runtimeState;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t} catch {\n\t\t// Presence is best-effort; persisted session discovery remains authoritative.\n\t}\n\treturn Array.from(bySessionId.values()).sort(sortRemoteSessionSummaries);\n}\n\nfunction cleanupExpiredSessionListCursors(context: ConversationCommandContext, now = contextNow(context)): void {\n\tfor (const [cursor, entry] of context.sessionListCursors) {\n\t\tif (entry.expiresAt <= now) {\n\t\t\tcontext.sessionListCursors.delete(cursor);\n\t\t}\n\t}\n}\n\nfunction evictExcessSessionListCursors(\n\tcontext: ConversationCommandContext,\n\tclientNodeId: string,\n\tmaxForClient: number,\n): void {\n\t// Map iteration is insertion order, so this client's oldest cursors come first.\n\tconst clientCursors: string[] = [];\n\tfor (const [cursor, entry] of context.sessionListCursors) {\n\t\tif (entry.clientNodeId === clientNodeId) {\n\t\t\tclientCursors.push(cursor);\n\t\t}\n\t}\n\t// Drop oldest until inserting one more keeps this client within the cap.\n\tfor (let index = 0; index <= clientCursors.length - maxForClient; index++) {\n\t\tcontext.sessionListCursors.delete(clientCursors[index]);\n\t}\n}\n\nfunction createSessionListCursor(\n\tcontext: ConversationCommandContext,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tsessions: RemoteSessionListEntry[],\n\tnextIndex: number,\n): string {\n\t// Sweep expired entries on every insert (not only on the cursored read path) and\n\t// bound this client's retained cursors so a client that never echoes the returned\n\t// cursor cannot grow the shared, daemon-wide map without limit.\n\tcleanupExpiredSessionListCursors(context);\n\tevictExcessSessionListCursors(context, authorization.client.nodeId, REMOTE_SESSION_LIST_MAX_CURSORS_PER_CLIENT);\n\tconst cursor = randomUUID();\n\tcontext.sessionListCursors.set(cursor, {\n\t\tclientNodeId: authorization.client.nodeId,\n\t\tworkspaceName: authorization.workspace.name,\n\t\tsessions,\n\t\tnextIndex,\n\t\texpiresAt: contextNow(context) + context.sessionListCursorTtlMs,\n\t});\n\treturn cursor;\n}\n\nfunction getSessionListCursorEntry(\n\tcontext: ConversationCommandContext,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcursor: string,\n): RemoteSessionListCursorEntry | undefined {\n\tcleanupExpiredSessionListCursors(context);\n\tconst entry = context.sessionListCursors.get(cursor);\n\tif (\n\t\t!entry ||\n\t\tentry.clientNodeId !== authorization.client.nodeId ||\n\t\tentry.workspaceName !== authorization.workspace.name\n\t) {\n\t\treturn undefined;\n\t}\n\treturn entry;\n}\n\nfunction parseRemoteSessionListLimit(\n\tcommand: Record<string, unknown>,\n): { ok: true; limit: number } | { ok: false; error: string } {\n\tif (command.limit === undefined) {\n\t\treturn { ok: true, limit: REMOTE_SESSION_LIST_DEFAULT_LIMIT };\n\t}\n\tif (typeof command.limit !== \"number\" || !Number.isInteger(command.limit) || command.limit <= 0) {\n\t\treturn { ok: false, error: \"invalid_limit\" };\n\t}\n\treturn { ok: true, limit: Math.min(command.limit, REMOTE_SESSION_LIST_MAX_LIMIT) };\n}\n\nfunction parseRemoteSessionListRequest(\n\tcommand: Record<string, unknown>,\n): { ok: true; limit: number; cursor?: string } | { ok: false; error: string } {\n\tif (Object.hasOwn(command, \"sessionId\")) {\n\t\treturn { ok: false, error: \"unexpected_session_id\" };\n\t}\n\tfor (const field of [\"workspace\", \"workspaceName\", \"clientNodeId\", \"hostNodeId\"]) {\n\t\tif (Object.hasOwn(command, field)) {\n\t\t\treturn { ok: false, error: \"session_mismatch\" };\n\t\t}\n\t}\n\tfor (const field of Object.keys(command)) {\n\t\tif (field !== \"id\" && field !== \"type\" && field !== \"limit\" && field !== \"cursor\") {\n\t\t\treturn { ok: false, error: \"invalid_request\" };\n\t\t}\n\t}\n\tconst limit = parseRemoteSessionListLimit(command);\n\tif (!limit.ok) {\n\t\treturn limit;\n\t}\n\tif (command.cursor !== undefined) {\n\t\tif (\n\t\t\ttypeof command.cursor !== \"string\" ||\n\t\t\tcommand.cursor.length === 0 ||\n\t\t\tBuffer.byteLength(command.cursor, \"utf8\") > REMOTE_SESSION_LIST_CURSOR_MAX_BYTES\n\t\t) {\n\t\t\treturn { ok: false, error: \"invalid_cursor\" };\n\t\t}\n\t}\n\treturn {\n\t\tok: true,\n\t\tlimit: limit.limit,\n\t\t...(command.cursor === undefined ? {} : { cursor: command.cursor as string }),\n\t};\n}\n\nexport async function createRemoteListSessionsRpcResponse(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: ConversationCommandContext,\n\truntime?: ConversationCommandRuntime,\n): Promise<object> {\n\tconst id = getRpcResponseId(command);\n\tconst request = parseRemoteSessionListRequest(command);\n\tif (!request.ok) {\n\t\treturn createIrohRemoteRpcErrorResponse(id, \"list_sessions\", request.error);\n\t}\n\n\tlet sessions: RemoteSessionListEntry[];\n\tlet startIndex: number;\n\tif (request.cursor) {\n\t\tconst cursorEntry = getSessionListCursorEntry(context, authorization, request.cursor);\n\t\tif (!cursorEntry) {\n\t\t\treturn createIrohRemoteRpcErrorResponse(id, \"list_sessions\", \"invalid_cursor\");\n\t\t}\n\t\tsessions = cursorEntry.sessions;\n\t\tstartIndex = cursorEntry.nextIndex;\n\t} else {\n\t\tsessions = (await listRemoteWorkspaceSessionSummaries(authorization, context, runtime)).map(\n\t\t\t(summary) => summary.session,\n\t\t);\n\t\tstartIndex = 0;\n\t}\n\n\tconst nextIndex = startIndex + request.limit;\n\tconst page = sessions.slice(startIndex, nextIndex);\n\tconst hasMore = nextIndex < sessions.length;\n\treturn createRpcSuccessResponse(id, \"list_sessions\", {\n\t\tsessions: page,\n\t\thasMore,\n\t\tnextCursor: hasMore ? createSessionListCursor(context, authorization, sessions, nextIndex) : null,\n\t});\n}\n\n// ============================================================================\n// Live Activities\n// ============================================================================\n\ninterface RemoteLiveActivityCommandScope {\n\tworkspaceName: string;\n\tsessionId: string;\n\tactivityId: string;\n}\n\ninterface RemoteLiveActivityRegistrationRequest extends RemoteLiveActivityCommandScope {\n\ttokenHash: string;\n\ttokenEnvironment: \"development\" | \"production\";\n\tplatform: \"ios\";\n}\n\nfunction parseRemoteLiveActivityRegistrationCommand(\n\tcommand: Record<string, unknown>,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\texpectedSessionId: string,\n): ({ ok: true } & RemoteLiveActivityRegistrationRequest) | { ok: false; error: string } {\n\tconst common = parseRemoteLiveActivityCommandScope(command, authorization, expectedSessionId);\n\tif (!common.ok) {\n\t\treturn common;\n\t}\n\tif (typeof command.tokenHash !== \"string\") {\n\t\treturn { ok: false, error: \"invalid_live_activity_token\" };\n\t}\n\tif (!/^[0-9a-f]{64}$/.test(command.tokenHash)) {\n\t\treturn { ok: false, error: \"invalid_live_activity_token\" };\n\t}\n\tif (command.tokenEnvironment !== \"development\" && command.tokenEnvironment !== \"production\") {\n\t\treturn { ok: false, error: \"invalid_live_activity_registration\" };\n\t}\n\tif (command.platform !== \"ios\") {\n\t\treturn { ok: false, error: \"invalid_live_activity_registration\" };\n\t}\n\treturn {\n\t\t...common,\n\t\ttokenHash: command.tokenHash,\n\t\ttokenEnvironment: command.tokenEnvironment,\n\t\tplatform: command.platform,\n\t};\n}\n\nfunction parseRemoteLiveActivityUnregistrationCommand(\n\tcommand: Record<string, unknown>,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\texpectedSessionId: string,\n): ({ ok: true } & RemoteLiveActivityCommandScope) | { ok: false; error: string } {\n\treturn parseRemoteLiveActivityCommandScope(command, authorization, expectedSessionId);\n}\n\nfunction parseRemoteLiveActivityCommandScope(\n\tcommand: Record<string, unknown>,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\texpectedSessionId: string,\n): ({ ok: true } & RemoteLiveActivityCommandScope) | { ok: false; error: string } {\n\tif (\n\t\ttypeof command.workspaceName !== \"string\" ||\n\t\ttypeof command.sessionId !== \"string\" ||\n\t\ttypeof command.activityId !== \"string\"\n\t) {\n\t\treturn { ok: false, error: \"invalid_live_activity_registration\" };\n\t}\n\tif (command.workspaceName !== authorization.workspace.name || command.sessionId !== expectedSessionId) {\n\t\treturn { ok: false, error: \"session_mismatch\" };\n\t}\n\tif (!isValidLiveActivityId(command.activityId)) {\n\t\treturn { ok: false, error: \"invalid_live_activity_registration\" };\n\t}\n\treturn {\n\t\tok: true,\n\t\tworkspaceName: command.workspaceName,\n\t\tsessionId: command.sessionId,\n\t\tactivityId: command.activityId,\n\t};\n}\n\nfunction isValidLiveActivityId(activityId: string): boolean {\n\treturn activityId.length > 0 && Array.from(activityId).length <= 128 && Buffer.byteLength(activityId, \"utf8\") <= 512;\n}\n\nasync function logLiveActivityRegistrationAudit(\n\tcontext: ConversationCommandContext,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcommand: RemoteRpcCommand,\n\tsuccess: boolean,\n\terror?: string,\n\trequest?: Partial<RemoteLiveActivityRegistrationRequest>,\n\textraDetails: Record<string, unknown> = {},\n): Promise<void> {\n\tconst details: Record<string, unknown> = {\n\t\tcommand: command.type,\n\t\t...(request\n\t\t\t? {\n\t\t\t\t\tsessionId: request.sessionId,\n\t\t\t\t\tactivityId: request.activityId,\n\t\t\t\t\ttokenHash: request.tokenHash,\n\t\t\t\t\ttokenEnvironment: request.tokenEnvironment,\n\t\t\t\t\tplatform: request.platform,\n\t\t\t\t}\n\t\t\t: {}),\n\t\t...extraDetails,\n\t};\n\tawait logAudit(context.auditLogger, {\n\t\ttype: command.type === \"unregister_live_activity\" ? \"live_activity_unregistered\" : \"live_activity_registered\",\n\t\tclientNodeId: authorization.client.nodeId,\n\t\tworkspace: request?.workspaceName ?? authorization.workspace.name,\n\t\tsuccess,\n\t\terror,\n\t\tdetails,\n\t});\n}\n\nexport async function createRemoteRegisterLiveActivityRpcResponse(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: ConversationCommandContext,\n\texpectedSessionId: string,\n): Promise<object> {\n\tconst id = getRpcResponseId(command);\n\tconst request = parseRemoteLiveActivityRegistrationCommand(command, authorization, expectedSessionId);\n\tif (!request.ok) {\n\t\tawait logLiveActivityRegistrationAudit(context, authorization, command, false, request.error);\n\t\treturn createIrohRemoteRpcErrorResponse(id, \"register_live_activity\", request.error);\n\t}\n\tconst deliveryChannel = await context.stateManager.findClientLiveActivityDeliveryChannel(\n\t\tauthorization.client.nodeId,\n\t\t{\n\t\t\ttokenHash: request.tokenHash,\n\t\t\ttokenEnvironment: request.tokenEnvironment,\n\t\t\tplatform: request.platform,\n\t\t},\n\t);\n\tif (!deliveryChannel?.liveActivity) {\n\t\tawait logLiveActivityRegistrationAudit(\n\t\t\tcontext,\n\t\t\tauthorization,\n\t\t\tcommand,\n\t\t\tfalse,\n\t\t\t\"unknown_live_activity_token\",\n\t\t\trequest,\n\t\t);\n\t\treturn createIrohRemoteRpcErrorResponse(id, \"register_live_activity\", \"unknown_live_activity_token\");\n\t}\n\tconst now = contextNow(context);\n\tconst result = await context.stateManager.registerClientLiveActivity(authorization.client.nodeId, {\n\t\tworkspaceName: request.workspaceName,\n\t\tsessionId: request.sessionId,\n\t\tactivityId: request.activityId,\n\t\ttokenHash: request.tokenHash,\n\t\ttokenEnvironment: request.tokenEnvironment,\n\t\tplatform: request.platform,\n\t\tpushTargetId: deliveryChannel.id,\n\t\tcreatedAt: now,\n\t\tupdatedAt: now,\n\t});\n\tif (!result.registration) {\n\t\tawait logLiveActivityRegistrationAudit(\n\t\t\tcontext,\n\t\t\tauthorization,\n\t\t\tcommand,\n\t\t\tfalse,\n\t\t\t\"unknown_live_activity_token\",\n\t\t\trequest,\n\t\t);\n\t\treturn createIrohRemoteRpcErrorResponse(id, \"register_live_activity\", \"unknown_live_activity_token\");\n\t}\n\tawait logLiveActivityRegistrationAudit(context, authorization, command, true, undefined, request, {\n\t\tpushTargetId: deliveryChannel.id,\n\t\treplaced: result.replacedRegistration !== undefined,\n\t});\n\treturn createRpcSuccessResponse(id, \"register_live_activity\", {\n\t\tstatus: \"registered\",\n\t\tactivityId: request.activityId,\n\t});\n}\n\nexport async function createRemoteUnregisterLiveActivityRpcResponse(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: ConversationCommandContext,\n\texpectedSessionId: string,\n): Promise<object> {\n\tconst id = getRpcResponseId(command);\n\tconst request = parseRemoteLiveActivityUnregistrationCommand(command, authorization, expectedSessionId);\n\tif (!request.ok) {\n\t\tawait logLiveActivityRegistrationAudit(context, authorization, command, false, request.error);\n\t\treturn createIrohRemoteRpcErrorResponse(id, \"unregister_live_activity\", request.error);\n\t}\n\tconst removed = await context.stateManager.unregisterClientLiveActivity(\n\t\tauthorization.client.nodeId,\n\t\trequest.workspaceName,\n\t\trequest.sessionId,\n\t\trequest.activityId,\n\t);\n\tawait logLiveActivityRegistrationAudit(context, authorization, command, true, undefined, request, { removed });\n\treturn createRpcSuccessResponse(id, \"unregister_live_activity\", {\n\t\tstatus: \"unregistered\",\n\t\tactivityId: request.activityId,\n\t});\n}\n\n// ============================================================================\n// Identity checks, device logs, host commands\n// ============================================================================\n\nexport function getIntegratedConversationIdentityError(\n\tcommand: Record<string, unknown>,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\truntime: ConversationCommandRuntime,\n): string | undefined {\n\tconst expectedWorkspaceName = authorization.workspace.name;\n\tfor (const field of [\"workspace\", \"workspaceName\"]) {\n\t\tif (\n\t\t\tObject.hasOwn(command, field) &&\n\t\t\t(typeof command[field] !== \"string\" || command[field] !== expectedWorkspaceName)\n\t\t) {\n\t\t\treturn \"session_mismatch\";\n\t\t}\n\t}\n\tif (\n\t\tObject.hasOwn(command, \"sessionId\") &&\n\t\t(typeof command.sessionId !== \"string\" || command.sessionId !== runtime.session.sessionId)\n\t) {\n\t\treturn \"session_mismatch\";\n\t}\n\treturn undefined;\n}\n\nasync function createRemoteUploadDeviceLogsRpcResponse(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: ConversationCommandContext,\n): Promise<object> {\n\tconst response = await handleIrohRemoteDeviceLogUploadRpcCommand(command, {\n\t\tworkspacePath: authorization.workspace.path,\n\t});\n\tawait logAudit(context.auditLogger, {\n\t\ttype: \"device_log_uploaded\",\n\t\tclientNodeId: authorization.client.nodeId,\n\t\tworkspace: authorization.workspace.name,\n\t\tsuccess: response.success === true,\n\t\terror: response.success === true ? undefined : response.error,\n\t\tdetails: response.success === true ? { path: response.data.path, byteCount: response.data.byteCount } : undefined,\n\t});\n\treturn response;\n}\n\nfunction updateAuthorizationWorkspaceMetadata(\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tmetadata: { workspaceNames: string[]; workspaces: Array<{ name: string; status: string }> },\n): void {\n\tauthorization.workspaceNames = [...metadata.workspaceNames];\n\tauthorization.workspaces = metadata.workspaces.map((workspace) => ({\n\t\t...workspace,\n\t})) as typeof authorization.workspaces;\n}\n\nexport async function handleRemoteHostRpcCommand(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: ConversationCommandContext,\n): Promise<object | undefined> {\n\t// create_worktree / list_worktrees are accepted on conversation streams so a\n\t// phone can spin up a parallel isolated session without opening a separate\n\t// manage_worktrees stream. remove_worktree stays management-stream-only (a\n\t// destructive op keeps the narrower surface); the passthrough filter and the\n\t// relay command set never admit it here.\n\tif (command.type === IROH_REMOTE_CREATE_WORKTREE_RPC_TYPE || command.type === IROH_REMOTE_LIST_WORKTREES_RPC_TYPE) {\n\t\tconst backend = context.createWorktreeBackend?.(authorization.workspace);\n\t\tif (!backend) {\n\t\t\treturn createIrohRemoteRpcErrorResponse(getRpcResponseId(command), command.type, \"unsupported_remote_command\");\n\t\t}\n\t\tconst worktreeResult = await handleIrohRemoteWorktreeRpcCommand(command, {\n\t\t\tauthorizedWorkspaceName: authorization.workspace.name,\n\t\t\tbackend,\n\t\t});\n\t\tif (!worktreeResult.handled) {\n\t\t\treturn undefined;\n\t\t}\n\t\tif (worktreeResult.audit) {\n\t\t\tawait logAudit(context.auditLogger, {\n\t\t\t\ttype: worktreeResult.audit.type,\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: { ...worktreeResult.audit.details, source: \"remote_rpc\" },\n\t\t\t});\n\t\t}\n\t\treturn worktreeResult.response;\n\t}\n\tif (command.type === IROH_REMOTE_UNREGISTER_WORKSPACE_RPC_TYPE) {\n\t\t// Conversation and relay unregister is scoped to the stream-bound workspace:\n\t\t// the documented `workspaceName` must be present and equal the authorized\n\t\t// workspace, so a client cannot unregister an unrelated registered workspace\n\t\t// by name. The relay path bypasses getIntegratedConversationIdentityError, so\n\t\t// this is the authoritative scope check for it; the dedicated\n\t\t// workspaceManagement stream enforces the same rule (workspace-streams.ts).\n\t\tif (typeof command.workspaceName !== \"string\" || command.workspaceName !== authorization.workspace.name) {\n\t\t\treturn createIrohRemoteRpcErrorResponse(getRpcResponseId(command), command.type, \"session_mismatch\");\n\t\t}\n\t}\n\tlet result: Awaited<ReturnType<typeof handleIrohRemoteWorkspaceUnregisterRpcCommand>>;\n\ttry {\n\t\tresult = await handleIrohRemoteWorkspaceUnregisterRpcCommand(command, {\n\t\t\tclassifyWorkspaceAvailability: getIrohRemoteWorkspaceAvailabilityStatus,\n\t\t\tstateManager: context.stateManager,\n\t\t});\n\t} catch (error) {\n\t\treturn createIrohRemoteRpcErrorResponse(\n\t\t\tgetRpcResponseId(command),\n\t\t\tcommand.type,\n\t\t\terror instanceof Error ? error.message : String(error),\n\t\t);\n\t}\n\tif (!result.handled) {\n\t\treturn undefined;\n\t}\n\tif (result.metadata) {\n\t\tupdateAuthorizationWorkspaceMetadata(authorization, result.metadata);\n\t}\n\tif (result.response.success === true) {\n\t\tcontext.hostEngine?.clearPairingSecretForWorkspace(authorization.workspace.name);\n\t\tawait context.onWorkspaceUnregistered?.(authorization.workspace.name);\n\t}\n\tawait logAudit(context.auditLogger, {\n\t\ttype: \"workspace_unregistered\",\n\t\tclientNodeId: authorization.client.nodeId,\n\t\tworkspace: authorization.workspace.name,\n\t\tsuccess: result.response.success === true,\n\t\terror: result.response.success === true ? undefined : result.response.error,\n\t\tdetails: { source: \"remote_rpc\" },\n\t});\n\treturn result.response;\n}\n\n/**\n * `set_keep_awake` / `get_keep_awake` from a phone. Host-level (not\n * conversation-level): any paired client with stream access may toggle it. The\n * wire status strips the host-local mechanism name.\n */\nexport function createKeepAwakeRpcResponse(\n\tcommand: RemoteRpcCommand,\n\tcontext: ConversationCommandContext,\n): Record<string, unknown> | IrohRemoteRpcErrorResponse {\n\tconst id = getRpcResponseId(command);\n\tconst keepAwake = context.keepAwake;\n\tif (!keepAwake) {\n\t\treturn createIrohRemoteRpcErrorResponse(id, command.type, \"unsupported_remote_command\");\n\t}\n\tif (command.type === \"set_keep_awake\") {\n\t\tif (typeof command.enabled !== \"boolean\") {\n\t\t\treturn createIrohRemoteRpcErrorResponse(id, command.type, \"set_keep_awake requires a boolean enabled\");\n\t\t}\n\t\tconst status = keepAwake.setEnabled(command.enabled);\n\t\tcontext.onKeepAwakeSetting?.(command.enabled);\n\t\treturn createRpcSuccessResponse(id, command.type, { keepAwake: toRpcKeepAwakeStatus(status) });\n\t}\n\treturn createRpcSuccessResponse(id, command.type, { keepAwake: toRpcKeepAwakeStatus(keepAwake.status) });\n}\n\n/**\n * `set_web_search_key` / `get_web_search_status` from a phone. Host-level (not\n * conversation-level): any paired client with stream access may set it. The\n * wire status never includes the key itself, only whether one is stored.\n */\nexport function createWebSearchKeyRpcResponse(\n\tcommand: RemoteRpcCommand,\n\tcontext: ConversationCommandContext,\n): Record<string, unknown> | IrohRemoteRpcErrorResponse {\n\tconst id = getRpcResponseId(command);\n\tconst webSearchKey = context.webSearchKey;\n\tif (!webSearchKey) {\n\t\treturn createIrohRemoteRpcErrorResponse(id, command.type, \"unsupported_remote_command\");\n\t}\n\tif (command.type === \"set_web_search_key\") {\n\t\tconst apiKey = command.apiKey;\n\t\tif (apiKey !== undefined && apiKey !== null && typeof apiKey !== \"string\") {\n\t\t\treturn createIrohRemoteRpcErrorResponse(\n\t\t\t\tid,\n\t\t\t\tcommand.type,\n\t\t\t\t\"set_web_search_key requires apiKey to be a string or null\",\n\t\t\t);\n\t\t}\n\t\tconst normalized = typeof apiKey === \"string\" ? apiKey.trim() : \"\";\n\t\twebSearchKey.set(normalized.length > 0 ? normalized : null);\n\t}\n\treturn createRpcSuccessResponse(id, command.type, { webSearch: { configured: webSearchKey.configured } });\n}\n\nexport function toRpcKeepAwakeStatus(status: KeepAwakeStatus): RpcKeepAwakeStatus {\n\treturn {\n\t\tenabled: status.enabled,\n\t\tstate: status.state,\n\t\t...(status.reason === undefined ? {} : { reason: status.reason }),\n\t};\n}\n\n// ============================================================================\n// Dispatch\n// ============================================================================\n\n/**\n * Host-side handler for conversation-stream RPC commands that are not served\n * directly by the runtime's rpc mode. Returns undefined for commands the rpc\n * mode should handle itself — including abort, which stops the turn while the\n * stream stays open and the runtime stays live.\n */\nexport async function handleIntegratedConversationRpcCommand(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: ConversationCommandContext,\n\truntime: ConversationCommandRuntime,\n): Promise<object | undefined> {\n\tif (context.isDraining?.() && TURN_INITIATING_RPC_TYPES.has(command.type)) {\n\t\treturn createLeaseDrainingRpcErrorResponse(command);\n\t}\n\t// Defense in depth: the phone hides the composer for subagent tabs, but a\n\t// stray client must not be able to inject turns into a delegated child run.\n\tif (context.isSubagentSession?.() && TURN_INITIATING_RPC_TYPES.has(command.type)) {\n\t\treturn createSubagentSessionReadOnlyRpcErrorResponse(command);\n\t}\n\tif (command.type === \"list_sessions\") {\n\t\treturn await createRemoteListSessionsRpcResponse(command, authorization, context, runtime);\n\t}\n\tif (command.type === \"set_keep_awake\" || command.type === \"get_keep_awake\") {\n\t\treturn createKeepAwakeRpcResponse(command, context);\n\t}\n\tif (command.type === \"set_web_search_key\" || command.type === \"get_web_search_status\") {\n\t\treturn createWebSearchKeyRpcResponse(command, context);\n\t}\n\tif (INTEGRATED_CONVERSATION_UNSUPPORTED_RPC_TYPES.has(command.type)) {\n\t\treturn createIrohRemoteRpcErrorResponse(getRpcResponseId(command), command.type, \"unsupported_remote_command\");\n\t}\n\tif (command.type === \"register_live_activity\") {\n\t\treturn await createRemoteRegisterLiveActivityRpcResponse(\n\t\t\tcommand,\n\t\t\tauthorization,\n\t\t\tcontext,\n\t\t\truntime.session.sessionId,\n\t\t);\n\t}\n\tif (command.type === \"unregister_live_activity\") {\n\t\treturn await createRemoteUnregisterLiveActivityRpcResponse(\n\t\t\tcommand,\n\t\t\tauthorization,\n\t\t\tcontext,\n\t\t\truntime.session.sessionId,\n\t\t);\n\t}\n\tconst identityError = getIntegratedConversationIdentityError(command, authorization, runtime);\n\tif (identityError) {\n\t\treturn createIrohRemoteRpcErrorResponse(getRpcResponseId(command), command.type, identityError);\n\t}\n\tif (command.type === \"upload_device_logs\") {\n\t\treturn await createRemoteUploadDeviceLogsRpcResponse(command, authorization, context);\n\t}\n\tif (command.type === \"get_transcript\") {\n\t\treturn createRemoteGetTranscriptRpcResponse(command, authorization, runtime);\n\t}\n\tif (command.type === \"get_message_images\") {\n\t\treturn createRemoteGetMessageImagesRpcResponse(command, authorization, runtime);\n\t}\n\treturn await handleRemoteHostRpcCommand(command, authorization, context);\n}\n"]}