@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/handshake-responses.d.ts

@@ -0,0 +1,47 @@
+import type { IrohRemoteClientAuthorizationSuccess } from "../core/remote/iroh/authorization.ts";
+import { type IrohRemoteConversationSelection, type IrohRemoteHandshakeSuccess, type IrohRemoteHello } from "../core/remote/iroh/handshake.ts";
+import { type IrohRemoteHostMetadata } from "../core/remote/iroh/metadata.ts";
+import type { IrohRemoteRelayMode } from "../core/remote/iroh/protocol.ts";
+/**
+ * Session selection outcomes as tracked by the conversation owner. Extends the
+ * runtime-level selection kinds with "session_rekeyed" (an existing runtime is
+ * serving a different session id than the one requested).
+ */
+export type IntegratedConversationSessionSelection = {
+    kind: "created";
+    sessionId: string;
+    sessionFile?: string;
+} | {
+    kind: "created_after_missing";
+    requestedSessionId: string;
+    sessionId: string;
+    sessionFile?: string;
+} | {
+    kind: "resumed";
+    requestedSessionId: string;
+    sessionId: string;
+    sessionFile?: string;
+} | {
+    kind: "session_rekeyed";
+    requestedSessionId: string;
+    sessionId: string;
+};
+/** Host identity/context needed to build handshake responses and host-state decoration. */
+export interface RemoteHostResponseContext {
+    hostNodeId?: string;
+    relayMode?: IrohRemoteRelayMode;
+    relayUrls?: string[];
+}
+export declare function createRemoteHostMetadata(authorization: IrohRemoteClientAuthorizationSuccess, context: RemoteHostResponseContext): IrohRemoteHostMetadata;
+export declare function getHandshakeConversationSelection(sessionSelection: IntegratedConversationSessionSelection): IrohRemoteConversationSelection;
+export declare function createIntegratedConversationHandshakeResponse(handshake: {
+    hello: IrohRemoteHello;
+    response: IrohRemoteHandshakeSuccess;
+}, authorization: IrohRemoteClientAuthorizationSuccess, sessionId: string, sessionSelection: IntegratedConversationSessionSelection, context: RemoteHostResponseContext, worktreeId?: string, workingDirectory?: string): IrohRemoteHandshakeSuccess;
+/**
+ * Decorates outbound RPC frames with host-side metadata: filters get_ui_actions
+ * to remote-safe actions, and stamps get_state responses with the workspace
+ * name and remote host metadata.
+ */
+export declare function decorateRemoteHostState(value: object, authorization: IrohRemoteClientAuthorizationSuccess, context: RemoteHostResponseContext): object;
+//# sourceMappingURL=handshake-responses.d.ts.map

package/dist/daemon/handshake-responses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake-responses.d.ts","sourceRoot":"","sources":["../../src/daemon/handshake-responses.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,sCAAsC,CAAC;AACjG,OAAO,EAEN,KAAK,+BAA+B,EACpC,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAgC,KAAK,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC5G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAE3E;;;;GAIG;AACH,MAAM,MAAM,sCAAsC,GAC/C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACtG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9E,2FAA2F;AAC3F,MAAM,WAAW,yBAAyB;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAUD,wBAAgB,wBAAwB,CACvC,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,yBAAyB,GAChC,sBAAsB,CAUxB;AAED,wBAAgB,iCAAiC,CAChD,gBAAgB,EAAE,sCAAsC,GACtD,+BAA+B,CAWjC;AAED,wBAAgB,6CAA6C,CAC5D,SAAS,EAAE;IAAE,KAAK,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,0BAA0B,CAAA;CAAE,EAC3E,aAAa,EAAE,oCAAoC,EACnD,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,sCAAsC,EACxD,OAAO,EAAE,yBAAyB,EAClC,UAAU,CAAC,EAAE,MAAM,EACnB,gBAAgB,CAAC,EAAE,MAAM,GACvB,0BAA0B,CAwB5B;AAmCD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,oCAAoC,EACnD,OAAO,EAAE,yBAAyB,GAChC,MAAM,CAwBR","sourcesContent":["import { hostname, userInfo } from \"node:os\";\nimport type { IrohRemoteClientAuthorizationSuccess } from \"../core/remote/iroh/authorization.ts\";\nimport {\n\tcreateIrohRemoteHandshakeSuccess,\n\ttype IrohRemoteConversationSelection,\n\ttype IrohRemoteHandshakeSuccess,\n\ttype IrohRemoteHello,\n} from \"../core/remote/iroh/handshake.ts\";\nimport { createIrohRemoteHostMetadata, type IrohRemoteHostMetadata } from \"../core/remote/iroh/metadata.ts\";\nimport type { IrohRemoteRelayMode } from \"../core/remote/iroh/protocol.ts\";\n\n/**\n * Session selection outcomes as tracked by the conversation owner. Extends the\n * runtime-level selection kinds with \"session_rekeyed\" (an existing runtime is\n * serving a different session id than the one requested).\n */\nexport type IntegratedConversationSessionSelection =\n\t| { kind: \"created\"; sessionId: string; sessionFile?: string }\n\t| { kind: \"created_after_missing\"; requestedSessionId: string; sessionId: string; sessionFile?: string }\n\t| { kind: \"resumed\"; requestedSessionId: string; sessionId: string; sessionFile?: string }\n\t| { kind: \"session_rekeyed\"; requestedSessionId: string; sessionId: string };\n\n/** Host identity/context needed to build handshake responses and host-state decoration. */\nexport interface RemoteHostResponseContext {\n\thostNodeId?: string;\n\trelayMode?: IrohRemoteRelayMode;\n\trelayUrls?: string[];\n}\n\nfunction getCurrentUserName(): string | undefined {\n\ttry {\n\t\treturn userInfo().username;\n\t} catch {\n\t\treturn process.env.USER ?? process.env.USERNAME;\n\t}\n}\n\nexport function createRemoteHostMetadata(\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: RemoteHostResponseContext,\n): IrohRemoteHostMetadata {\n\treturn createIrohRemoteHostMetadata({\n\t\tauthorization,\n\t\thostNodeId: context.hostNodeId,\n\t\trelayMode: context.relayMode,\n\t\trelayUrls: context.relayUrls,\n\t\thostName: hostname(),\n\t\tuserName: getCurrentUserName(),\n\t\tcwd: \"/workspace\",\n\t});\n}\n\nexport function getHandshakeConversationSelection(\n\tsessionSelection: IntegratedConversationSessionSelection,\n): IrohRemoteConversationSelection {\n\tif (sessionSelection.kind === \"created_after_missing\") {\n\t\treturn \"created_missing_last\";\n\t}\n\tif (sessionSelection.kind === \"created\") {\n\t\treturn \"created\";\n\t}\n\tif (sessionSelection.kind === \"session_rekeyed\") {\n\t\treturn \"session_rekeyed\";\n\t}\n\treturn \"resumed\";\n}\n\nexport function createIntegratedConversationHandshakeResponse(\n\thandshake: { hello: IrohRemoteHello; response: IrohRemoteHandshakeSuccess },\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tsessionId: string,\n\tsessionSelection: IntegratedConversationSessionSelection,\n\tcontext: RemoteHostResponseContext,\n\tworktreeId?: string,\n\tworkingDirectory?: string,\n): IrohRemoteHandshakeSuccess {\n\tif (handshake.hello.mode !== \"conversation\") {\n\t\tthrow new Error(\"integrated conversation handshake response requires a conversation hello\");\n\t}\n\tconst requestedSessionId =\n\t\tsessionSelection.kind === \"session_rekeyed\" ? sessionSelection.requestedSessionId : undefined;\n\treturn createIrohRemoteHandshakeSuccess({\n\t\tchild: handshake.response.child,\n\t\tclientNodeId: authorization.client.nodeId,\n\t\tfeatures: handshake.response.features,\n\t\thostNodeId: context.hostNodeId,\n\t\tremoteHost: createRemoteHostMetadata(authorization, context),\n\t\tworkspace: authorization.workspace.name,\n\t\tsessionId,\n\t\tconversation: {\n\t\t\ttarget: handshake.hello.conversation.target,\n\t\t\tsessionId,\n\t\t\tselection: getHandshakeConversationSelection(sessionSelection),\n\t\t\t...(requestedSessionId === undefined ? {} : { requestedSessionId }),\n\t\t\t// Echoed only for worktree-bound conversations; old clients never see it.\n\t\t\t...(worktreeId === undefined ? {} : { worktreeId }),\n\t\t\t...(workingDirectory === undefined ? {} : { workingDirectory }),\n\t\t},\n\t});\n}\n\nfunction isResponseRecord(value: object): value is Record<string, unknown> {\n\treturn !Array.isArray(value);\n}\n\nfunction decorateRemoteUiActionResponse(value: object): object {\n\tif (!isResponseRecord(value)) {\n\t\treturn value;\n\t}\n\tconst data = value.data;\n\tif (\n\t\tvalue.type !== \"response\" ||\n\t\tvalue.command !== \"get_ui_actions\" ||\n\t\tvalue.success !== true ||\n\t\ttypeof data !== \"object\" ||\n\t\tdata === null ||\n\t\tArray.isArray(data) ||\n\t\t!Array.isArray((data as Record<string, unknown>).actions)\n\t) {\n\t\treturn value;\n\t}\n\tconst actions = (data as Record<string, unknown>).actions as unknown[];\n\treturn {\n\t\t...value,\n\t\tdata: {\n\t\t\t...data,\n\t\t\tactions: actions.filter(\n\t\t\t\t(action) =>\n\t\t\t\t\ttypeof action === \"object\" && action !== null && (action as Record<string, unknown>).remoteSafe === true,\n\t\t\t),\n\t\t},\n\t};\n}\n\n/**\n * Decorates outbound RPC frames with host-side metadata: filters get_ui_actions\n * to remote-safe actions, and stamps get_state responses with the workspace\n * name and remote host metadata.\n */\nexport function decorateRemoteHostState(\n\tvalue: object,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: RemoteHostResponseContext,\n): object {\n\tconst decoratedValue = decorateRemoteUiActionResponse(value);\n\tif (!isResponseRecord(decoratedValue)) {\n\t\treturn decoratedValue;\n\t}\n\tconst data = decoratedValue.data;\n\tif (\n\t\tdecoratedValue.type !== \"response\" ||\n\t\tdecoratedValue.command !== \"get_state\" ||\n\t\tdecoratedValue.success !== true ||\n\t\ttypeof data !== \"object\" ||\n\t\tdata === null ||\n\t\tArray.isArray(data)\n\t) {\n\t\treturn decoratedValue;\n\t}\n\treturn {\n\t\t...decoratedValue,\n\t\tdata: {\n\t\t\t...data,\n\t\t\tworkspaceName: authorization.workspace.name,\n\t\t\tremoteHost: createRemoteHostMetadata(authorization, context),\n\t\t},\n\t};\n}\n"]}

package/dist/daemon/handshake-responses.js

@@ -0,0 +1,113 @@
+import { hostname, userInfo } from "node:os";
+import { createIrohRemoteHandshakeSuccess, } from "../core/remote/iroh/handshake.js";
+import { createIrohRemoteHostMetadata } from "../core/remote/iroh/metadata.js";
+function getCurrentUserName() {
+    try {
+        return userInfo().username;
+    }
+    catch {
+        return process.env.USER ?? process.env.USERNAME;
+    }
+}
+export function createRemoteHostMetadata(authorization, context) {
+    return createIrohRemoteHostMetadata({
+        authorization,
+        hostNodeId: context.hostNodeId,
+        relayMode: context.relayMode,
+        relayUrls: context.relayUrls,
+        hostName: hostname(),
+        userName: getCurrentUserName(),
+        cwd: "/workspace",
+    });
+}
+export function getHandshakeConversationSelection(sessionSelection) {
+    if (sessionSelection.kind === "created_after_missing") {
+        return "created_missing_last";
+    }
+    if (sessionSelection.kind === "created") {
+        return "created";
+    }
+    if (sessionSelection.kind === "session_rekeyed") {
+        return "session_rekeyed";
+    }
+    return "resumed";
+}
+export function createIntegratedConversationHandshakeResponse(handshake, authorization, sessionId, sessionSelection, context, worktreeId, workingDirectory) {
+    if (handshake.hello.mode !== "conversation") {
+        throw new Error("integrated conversation handshake response requires a conversation hello");
+    }
+    const requestedSessionId = sessionSelection.kind === "session_rekeyed" ? sessionSelection.requestedSessionId : undefined;
+    return createIrohRemoteHandshakeSuccess({
+        child: handshake.response.child,
+        clientNodeId: authorization.client.nodeId,
+        features: handshake.response.features,
+        hostNodeId: context.hostNodeId,
+        remoteHost: createRemoteHostMetadata(authorization, context),
+        workspace: authorization.workspace.name,
+        sessionId,
+        conversation: {
+            target: handshake.hello.conversation.target,
+            sessionId,
+            selection: getHandshakeConversationSelection(sessionSelection),
+            ...(requestedSessionId === undefined ? {} : { requestedSessionId }),
+            // Echoed only for worktree-bound conversations; old clients never see it.
+            ...(worktreeId === undefined ? {} : { worktreeId }),
+            ...(workingDirectory === undefined ? {} : { workingDirectory }),
+        },
+    });
+}
+function isResponseRecord(value) {
+    return !Array.isArray(value);
+}
+function decorateRemoteUiActionResponse(value) {
+    if (!isResponseRecord(value)) {
+        return value;
+    }
+    const data = value.data;
+    if (value.type !== "response" ||
+        value.command !== "get_ui_actions" ||
+        value.success !== true ||
+        typeof data !== "object" ||
+        data === null ||
+        Array.isArray(data) ||
+        !Array.isArray(data.actions)) {
+        return value;
+    }
+    const actions = data.actions;
+    return {
+        ...value,
+        data: {
+            ...data,
+            actions: actions.filter((action) => typeof action === "object" && action !== null && action.remoteSafe === true),
+        },
+    };
+}
+/**
+ * Decorates outbound RPC frames with host-side metadata: filters get_ui_actions
+ * to remote-safe actions, and stamps get_state responses with the workspace
+ * name and remote host metadata.
+ */
+export function decorateRemoteHostState(value, authorization, context) {
+    const decoratedValue = decorateRemoteUiActionResponse(value);
+    if (!isResponseRecord(decoratedValue)) {
+        return decoratedValue;
+    }
+    const data = decoratedValue.data;
+    if (decoratedValue.type !== "response" ||
+        decoratedValue.command !== "get_state" ||
+        decoratedValue.success !== true ||
+        typeof data !== "object" ||
+        data === null ||
+        Array.isArray(data)) {
+        return decoratedValue;
+    }
+    return {
+        ...decoratedValue,
+        data: {
+            ...data,
+            workspaceName: authorization.workspace.name,
+            remoteHost: createRemoteHostMetadata(authorization, context),
+        },
+    };
+}
+//# sourceMappingURL=handshake-responses.js.map

package/dist/daemon/handshake-responses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake-responses.js","sourceRoot":"","sources":["../../src/daemon/handshake-responses.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAE7C,OAAO,EACN,gCAAgC,GAIhC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,4BAA4B,EAA+B,MAAM,iCAAiC,CAAC;AAqB5G,SAAS,kBAAkB,GAAuB;IACjD,IAAI,CAAC;QACJ,OAAO,QAAQ,EAAE,CAAC,QAAQ,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IACjD,CAAC;AAAA,CACD;AAED,MAAM,UAAU,wBAAwB,CACvC,aAAmD,EACnD,OAAkC,EACT;IACzB,OAAO,4BAA4B,CAAC;QACnC,aAAa;QACb,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,QAAQ,EAAE;QACpB,QAAQ,EAAE,kBAAkB,EAAE;QAC9B,GAAG,EAAE,YAAY;KACjB,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,iCAAiC,CAChD,gBAAwD,EACtB;IAClC,IAAI,gBAAgB,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACvD,OAAO,sBAAsB,CAAC;IAC/B,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACjD,OAAO,iBAAiB,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,MAAM,UAAU,6CAA6C,CAC5D,SAA2E,EAC3E,aAAmD,EACnD,SAAiB,EACjB,gBAAwD,EACxD,OAAkC,EAClC,UAAmB,EACnB,gBAAyB,EACI;IAC7B,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,kBAAkB,GACvB,gBAAgB,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,OAAO,gCAAgC,CAAC;QACvC,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK;QAC/B,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;QACzC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ;QACrC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,wBAAwB,CAAC,aAAa,EAAE,OAAO,CAAC;QAC5D,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;QACvC,SAAS;QACT,YAAY,EAAE;YACb,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM;YAC3C,SAAS;YACT,SAAS,EAAE,iCAAiC,CAAC,gBAAgB,CAAC;YAC9D,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC;YACnE,0EAA0E;YAC1E,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;YACnD,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;SAC/D;KACD,CAAC,CAAC;AAAA,CACH;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAoC;IAC1E,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC7B;AAED,SAAS,8BAA8B,CAAC,KAAa,EAAU;IAC9D,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IACC,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,KAAK,CAAC,OAAO,KAAK,gBAAgB;QAClC,KAAK,CAAC,OAAO,KAAK,IAAI;QACtB,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,CAAC,KAAK,CAAC,OAAO,CAAE,IAAgC,CAAC,OAAO,CAAC,EACxD,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAI,IAAgC,CAAC,OAAoB,CAAC;IACvE,OAAO;QACN,GAAG,KAAK;QACR,IAAI,EAAE;YACL,GAAG,IAAI;YACP,OAAO,EAAE,OAAO,CAAC,MAAM,CACtB,CAAC,MAAM,EAAE,EAAE,CACV,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAK,MAAkC,CAAC,UAAU,KAAK,IAAI,CACzG;SACD;KACD,CAAC;AAAA,CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACtC,KAAa,EACb,aAAmD,EACnD,OAAkC,EACzB;IACT,MAAM,cAAc,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE,CAAC;QACvC,OAAO,cAAc,CAAC;IACvB,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC;IACjC,IACC,cAAc,CAAC,IAAI,KAAK,UAAU;QAClC,cAAc,CAAC,OAAO,KAAK,WAAW;QACtC,cAAc,CAAC,OAAO,KAAK,IAAI;QAC/B,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAClB,CAAC;QACF,OAAO,cAAc,CAAC;IACvB,CAAC;IACD,OAAO;QACN,GAAG,cAAc;QACjB,IAAI,EAAE;YACL,GAAG,IAAI;YACP,aAAa,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;YAC3C,UAAU,EAAE,wBAAwB,CAAC,aAAa,EAAE,OAAO,CAAC;SAC5D;KACD,CAAC;AAAA,CACF","sourcesContent":["import { hostname, userInfo } from \"node:os\";\nimport type { IrohRemoteClientAuthorizationSuccess } from \"../core/remote/iroh/authorization.ts\";\nimport {\n\tcreateIrohRemoteHandshakeSuccess,\n\ttype IrohRemoteConversationSelection,\n\ttype IrohRemoteHandshakeSuccess,\n\ttype IrohRemoteHello,\n} from \"../core/remote/iroh/handshake.ts\";\nimport { createIrohRemoteHostMetadata, type IrohRemoteHostMetadata } from \"../core/remote/iroh/metadata.ts\";\nimport type { IrohRemoteRelayMode } from \"../core/remote/iroh/protocol.ts\";\n\n/**\n * Session selection outcomes as tracked by the conversation owner. Extends the\n * runtime-level selection kinds with \"session_rekeyed\" (an existing runtime is\n * serving a different session id than the one requested).\n */\nexport type IntegratedConversationSessionSelection =\n\t| { kind: \"created\"; sessionId: string; sessionFile?: string }\n\t| { kind: \"created_after_missing\"; requestedSessionId: string; sessionId: string; sessionFile?: string }\n\t| { kind: \"resumed\"; requestedSessionId: string; sessionId: string; sessionFile?: string }\n\t| { kind: \"session_rekeyed\"; requestedSessionId: string; sessionId: string };\n\n/** Host identity/context needed to build handshake responses and host-state decoration. */\nexport interface RemoteHostResponseContext {\n\thostNodeId?: string;\n\trelayMode?: IrohRemoteRelayMode;\n\trelayUrls?: string[];\n}\n\nfunction getCurrentUserName(): string | undefined {\n\ttry {\n\t\treturn userInfo().username;\n\t} catch {\n\t\treturn process.env.USER ?? process.env.USERNAME;\n\t}\n}\n\nexport function createRemoteHostMetadata(\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: RemoteHostResponseContext,\n): IrohRemoteHostMetadata {\n\treturn createIrohRemoteHostMetadata({\n\t\tauthorization,\n\t\thostNodeId: context.hostNodeId,\n\t\trelayMode: context.relayMode,\n\t\trelayUrls: context.relayUrls,\n\t\thostName: hostname(),\n\t\tuserName: getCurrentUserName(),\n\t\tcwd: \"/workspace\",\n\t});\n}\n\nexport function getHandshakeConversationSelection(\n\tsessionSelection: IntegratedConversationSessionSelection,\n): IrohRemoteConversationSelection {\n\tif (sessionSelection.kind === \"created_after_missing\") {\n\t\treturn \"created_missing_last\";\n\t}\n\tif (sessionSelection.kind === \"created\") {\n\t\treturn \"created\";\n\t}\n\tif (sessionSelection.kind === \"session_rekeyed\") {\n\t\treturn \"session_rekeyed\";\n\t}\n\treturn \"resumed\";\n}\n\nexport function createIntegratedConversationHandshakeResponse(\n\thandshake: { hello: IrohRemoteHello; response: IrohRemoteHandshakeSuccess },\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tsessionId: string,\n\tsessionSelection: IntegratedConversationSessionSelection,\n\tcontext: RemoteHostResponseContext,\n\tworktreeId?: string,\n\tworkingDirectory?: string,\n): IrohRemoteHandshakeSuccess {\n\tif (handshake.hello.mode !== \"conversation\") {\n\t\tthrow new Error(\"integrated conversation handshake response requires a conversation hello\");\n\t}\n\tconst requestedSessionId =\n\t\tsessionSelection.kind === \"session_rekeyed\" ? sessionSelection.requestedSessionId : undefined;\n\treturn createIrohRemoteHandshakeSuccess({\n\t\tchild: handshake.response.child,\n\t\tclientNodeId: authorization.client.nodeId,\n\t\tfeatures: handshake.response.features,\n\t\thostNodeId: context.hostNodeId,\n\t\tremoteHost: createRemoteHostMetadata(authorization, context),\n\t\tworkspace: authorization.workspace.name,\n\t\tsessionId,\n\t\tconversation: {\n\t\t\ttarget: handshake.hello.conversation.target,\n\t\t\tsessionId,\n\t\t\tselection: getHandshakeConversationSelection(sessionSelection),\n\t\t\t...(requestedSessionId === undefined ? {} : { requestedSessionId }),\n\t\t\t// Echoed only for worktree-bound conversations; old clients never see it.\n\t\t\t...(worktreeId === undefined ? {} : { worktreeId }),\n\t\t\t...(workingDirectory === undefined ? {} : { workingDirectory }),\n\t\t},\n\t});\n}\n\nfunction isResponseRecord(value: object): value is Record<string, unknown> {\n\treturn !Array.isArray(value);\n}\n\nfunction decorateRemoteUiActionResponse(value: object): object {\n\tif (!isResponseRecord(value)) {\n\t\treturn value;\n\t}\n\tconst data = value.data;\n\tif (\n\t\tvalue.type !== \"response\" ||\n\t\tvalue.command !== \"get_ui_actions\" ||\n\t\tvalue.success !== true ||\n\t\ttypeof data !== \"object\" ||\n\t\tdata === null ||\n\t\tArray.isArray(data) ||\n\t\t!Array.isArray((data as Record<string, unknown>).actions)\n\t) {\n\t\treturn value;\n\t}\n\tconst actions = (data as Record<string, unknown>).actions as unknown[];\n\treturn {\n\t\t...value,\n\t\tdata: {\n\t\t\t...data,\n\t\t\tactions: actions.filter(\n\t\t\t\t(action) =>\n\t\t\t\t\ttypeof action === \"object\" && action !== null && (action as Record<string, unknown>).remoteSafe === true,\n\t\t\t),\n\t\t},\n\t};\n}\n\n/**\n * Decorates outbound RPC frames with host-side metadata: filters get_ui_actions\n * to remote-safe actions, and stamps get_state responses with the workspace\n * name and remote host metadata.\n */\nexport function decorateRemoteHostState(\n\tvalue: object,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tcontext: RemoteHostResponseContext,\n): object {\n\tconst decoratedValue = decorateRemoteUiActionResponse(value);\n\tif (!isResponseRecord(decoratedValue)) {\n\t\treturn decoratedValue;\n\t}\n\tconst data = decoratedValue.data;\n\tif (\n\t\tdecoratedValue.type !== \"response\" ||\n\t\tdecoratedValue.command !== \"get_state\" ||\n\t\tdecoratedValue.success !== true ||\n\t\ttypeof data !== \"object\" ||\n\t\tdata === null ||\n\t\tArray.isArray(data)\n\t) {\n\t\treturn decoratedValue;\n\t}\n\treturn {\n\t\t...decoratedValue,\n\t\tdata: {\n\t\t\t...data,\n\t\t\tworkspaceName: authorization.workspace.name,\n\t\t\tremoteHost: createRemoteHostMetadata(authorization, context),\n\t\t},\n\t};\n}\n"]}

package/dist/daemon/integrated-runtimes.d.ts

@@ -0,0 +1,137 @@
+import type { AgentSessionRuntime } from "../core/agent-session-runtime.ts";
+import type { IrohRemoteActiveStreamRegistry } from "../core/remote/iroh/active-stream-registry.ts";
+import type { IrohRemoteAuditLogger } from "../core/remote/iroh/audit.ts";
+import type { IrohRemoteClientAuthorizationSuccess } from "../core/remote/iroh/authorization.ts";
+import type { IrohRemoteHostEngine } from "../core/remote/iroh/engine.ts";
+import { IrohRemoteHandshakeError, type IrohRemoteHandshakeSuccess, type IrohRemoteHello } from "../core/remote/iroh/handshake.ts";
+import { type IrohRemoteHostHandshakeFailureOutcome, type IrohRemoteRuntimeToolPolicy } from "../core/remote/iroh/protocol.ts";
+import type { IrohRemoteWorkspace, IrohRemoteWorkspaceWorktree } from "../core/remote/iroh/state.ts";
+import type { IrohRemoteHostStateManager } from "../core/remote/iroh/state-manager.ts";
+import { createIrohRemoteAgentRuntimeWithSessionSelection, type IrohRemoteAgentRuntimeConversationTarget } from "../modes/rpc/iroh-remote-agent-runtime.ts";
+import { type DetachedRuntimeRetentionHandle } from "../remote/integrated-runtime-retention.ts";
+import type { IntegratedConversationSessionSelection } from "./handshake-responses.ts";
+import { type WorkspaceDirectoryResolution } from "./workspace-directory.ts";
+export interface IntegratedRuntimeSubscriber {
+    id: string;
+    attachedAt: number;
+}
+interface IntegratedWorkflowState {
+    workflowEvent: Record<string, unknown> | undefined;
+    activeTools: Map<string, Record<string, unknown>>;
+}
+export interface IntegratedRuntimeEntry {
+    key: string;
+    clientNodeId: string;
+    workspaceName: string;
+    sessionId: string;
+    runtime: AgentSessionRuntime;
+    recordedSessionId: string;
+    previousSessionIds: Set<string>;
+    activeWorkflows: Map<string, IntegratedWorkflowState>;
+    subscribers: Set<IntegratedRuntimeSubscriber>;
+    detachedAt: number | undefined;
+    detachedRuntimeRetention: DetachedRuntimeRetentionHandle | undefined;
+    parentSessionId?: string;
+    subagentId?: string;
+    /** Set when the runtime cwd is a daemon-managed worktree checkout. */
+    worktreeId?: string;
+    /** Host-local checkout path (sanitizer root); never sent on the wire. */
+    worktreePath?: string;
+    /** Registered-workspace-relative git source root for nested repo worktrees. */
+    worktreeSourceRootRelativePath?: string;
+    /** POSIX-style path relative to the registered workspace root. Omitted for root. */
+    workingDirectory?: string;
+    /** Immutable tool policy used to create this shared runtime. */
+    toolPolicy: IrohRemoteRuntimeToolPolicy;
+}
+export interface IntegratedRuntimeStreamWriter {
+    sessionId: string;
+    write?(value: object): Promise<void> | void;
+}
+export interface IntegratedRuntimeRegistryOptions {
+    agentDir?: string;
+    profile?: string;
+    /** Injectable runtime factory (tests); defaults to the real iroh remote runtime. */
+    createRuntime?: typeof createIrohRemoteAgentRuntimeWithSessionSelection;
+    auditLogger: IrohRemoteAuditLogger;
+    stateManager: IrohRemoteHostStateManager;
+    activeStreams: IrohRemoteActiveStreamRegistry;
+    detachedRuntimeTtlMs: () => number;
+    /** Resolve the effective daemon-owned runtime policy. The client grant must remain the ceiling. */
+    getToolPolicy?: (workspace: IrohRemoteWorkspace, clientAllowTools: string) => IrohRemoteRuntimeToolPolicy;
+    /** Legacy workspace-policy seam. It is intersected with the client grant, never used as a replacement. */
+    getAllowTools?: (workspace: IrohRemoteWorkspace) => string | undefined;
+    getProjectTrustedForWorkspace: (workspace: IrohRemoteWorkspace) => boolean;
+    setClientLastSessionId: IrohRemoteHostEngine["setClientLastSessionId"];
+    /**
+     * Worktree resolution seam (wired to the daemon's WorktreeManager). Must
+     * throw a conversation-open error for an unknown/unavailable worktree.
+     */
+    resolveWorktree?: (workspaceName: string, hello: IrohRemoteHello, targetSessionId: string | undefined) => Promise<IrohRemoteWorkspaceWorktree | undefined>;
+    /** Resolve/validate a selected working directory before creating a runtime. */
+    resolveWorkingDirectory?: (options: {
+        workspace: IrohRemoteWorkspace;
+        rootPath: string;
+        workingDirectory?: string;
+        worktree?: IrohRemoteWorkspaceWorktree;
+    }) => Promise<WorkspaceDirectoryResolution>;
+    /** Persist the sessionId → worktree binding after a created worktree conversation. */
+    bindWorktreeSession?: (workspaceName: string, worktreeId: string, sessionId: string) => Promise<void>;
+    /** Lease-broker seam: invoked when a runtime's session id changes (rekey). */
+    onRuntimeRekeyed?: (workspaceName: string, previousSessionId: string, sessionId: string) => void;
+    onRuntimeDisposed?: (entry: IntegratedRuntimeEntry, reason: string) => void;
+}
+export declare function createConversationOpenError(outcome: IrohRemoteHostHandshakeFailureOutcome, message: string, details?: Record<string, unknown>): IrohRemoteHandshakeError;
+export declare function createIrohRuntimeConversationTarget(hello: IrohRemoteHello, authorization: IrohRemoteClientAuthorizationSuccess): IrohRemoteAgentRuntimeConversationTarget;
+export declare function getResolvedTargetSessionId(hello: IrohRemoteHello, authorization: IrohRemoteClientAuthorizationSuccess): string | undefined;
+export declare function createConversationSessionSelectionFromEntry(entry: IntegratedRuntimeEntry, requestedSessionId?: string): IntegratedConversationSessionSelection;
+export declare class IntegratedRuntimeRegistry {
+    private readonly options;
+    private readonly entries;
+    constructor(options: IntegratedRuntimeRegistryOptions);
+    /** The conversation runtime key: one runtime per (workspaceName, sessionId). */
+    getRegistryKey(workspaceName: string, sessionId: string): string;
+    get size(): number;
+    values(): IntegratedRuntimeEntry[];
+    findOwner(workspaceName: string, sessionId: string): IntegratedRuntimeEntry | undefined;
+    private resolveToolPolicy;
+    getOrCreateEntry(handshake: {
+        hello: IrohRemoteHello;
+        response: IrohRemoteHandshakeSuccess;
+    }, authorization: IrohRemoteClientAuthorizationSuccess): Promise<{
+        entry: IntegratedRuntimeEntry;
+        created: boolean;
+        sessionSelection: IntegratedConversationSessionSelection;
+    }>;
+    private resolveInitialWorkingDirectory;
+    private createEntry;
+    private createEntryRecord;
+    private registerSubagentRuntime;
+    commitEntry(entry: IntegratedRuntimeEntry, sessionSelection: IntegratedConversationSessionSelection, authorization: IrohRemoteClientAuthorizationSuccess): Promise<void>;
+    cleanupUncommittedEntry(entry: IntegratedRuntimeEntry, sessionSelection: IntegratedConversationSessionSelection | undefined): Promise<void>;
+    attachSubscriber(entry: IntegratedRuntimeEntry): Promise<IntegratedRuntimeSubscriber>;
+    detachSubscriber(entry: IntegratedRuntimeEntry, subscriber: IntegratedRuntimeSubscriber, reason: string, error?: unknown): Promise<void>;
+    detachWithoutSubscriber(entry: IntegratedRuntimeEntry, reason: string): Promise<void>;
+    stopEntry(entry: IntegratedRuntimeEntry, reason: string): Promise<void>;
+    stopAll(reason: string): Promise<void>;
+    stopForClient(clientNodeId: string, reason: string): Promise<number>;
+    stopForWorkspace(workspaceName: string, reason: string, excludeEntry?: IntegratedRuntimeEntry): Promise<number>;
+    stopForClientWorkspace(clientNodeId: string, workspaceName: string, reason: string): Promise<number>;
+    handleSessionChanged(entry: IntegratedRuntimeEntry, activeStreamEntry: IntegratedRuntimeStreamWriter | undefined, session: {
+        sessionId: string;
+    }, authorization: IrohRemoteClientAuthorizationSuccess): Promise<void>;
+    private rekeyEntry;
+    private recordSessionChange;
+    recordWorkflowEvent(entry: IntegratedRuntimeEntry, event: Record<string, unknown>): void;
+    handleWorkflowEvent(entry: IntegratedRuntimeEntry, event: Record<string, unknown>, excludedActiveStreamEntry: IntegratedRuntimeStreamWriter | undefined): Promise<void>;
+    replayWorkflowEvents(activeStreamEntry: IntegratedRuntimeStreamWriter, entry: IntegratedRuntimeEntry): Promise<void>;
+    cancelRetention(entry: IntegratedRuntimeEntry): void;
+    isDetached(entry: IntegratedRuntimeEntry): boolean;
+    scheduleRetention(entry: IntegratedRuntimeEntry, detachReason: string, ttlOverrideMs?: number): void;
+    getEntryDetails(entry: IntegratedRuntimeEntry, extraDetails?: Record<string, unknown>): Record<string, unknown>;
+    logEntryAudit(entry: IntegratedRuntimeEntry, type: string, details?: Record<string, unknown>, success?: boolean, error?: string): Promise<void>;
+    private logSessionSelection;
+    private logAudit;
+}
+export {};
+//# sourceMappingURL=integrated-runtimes.d.ts.map

package/dist/daemon/integrated-runtimes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrated-runtimes.d.ts","sourceRoot":"","sources":["../../src/daemon/integrated-runtimes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+CAA+C,CAAC;AACpG,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,sCAAsC,CAAC;AACjG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EACN,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,eAAe,EAEpB,MAAM,kCAAkC,CAAC;AAE1C,OAAO,EACN,KAAK,qCAAqC,EAC1C,KAAK,2BAA2B,EAGhC,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AACrG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAEvF,OAAO,EACN,gDAAgD,EAChD,KAAK,wCAAwC,EAE7C,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACN,KAAK,8BAA8B,EAEnC,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EAAE,sCAAsC,EAAE,MAAM,0BAA0B,CAAC;AACvF,OAAO,EAA2C,KAAK,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AAGtH,MAAM,WAAW,2BAA2B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,UAAU,uBAAuB;IAChC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACnD,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,sBAAsB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IACtD,WAAW,EAAE,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC9C,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,wBAAwB,EAAE,8BAA8B,GAAG,SAAS,CAAC;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,UAAU,EAAE,2BAA2B,CAAC;CACxC;AAED,MAAM,WAAW,6BAA6B;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,gCAAgC;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,aAAa,CAAC,EAAE,OAAO,gDAAgD,CAAC;IACxE,WAAW,EAAE,qBAAqB,CAAC;IACnC,YAAY,EAAE,0BAA0B,CAAC;IACzC,aAAa,EAAE,8BAA8B,CAAC;IAC9C,oBAAoB,EAAE,MAAM,MAAM,CAAC;IACnC,mGAAmG;IACnG,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,KAAK,2BAA2B,CAAC;IAC1G,0GAA0G;IAC1G,aAAa,CAAC,EAAE,CAAC,SAAS,EAAE,mBAAmB,KAAK,MAAM,GAAG,SAAS,CAAC;IACvE,6BAA6B,EAAE,CAAC,SAAS,EAAE,mBAAmB,KAAK,OAAO,CAAC;IAC3E,sBAAsB,EAAE,oBAAoB,CAAC,wBAAwB,CAAC,CAAC;IACvE;;;OAGG;IACH,eAAe,CAAC,EAAE,CACjB,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,eAAe,EACtB,eAAe,EAAE,MAAM,GAAG,SAAS,KAC/B,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAAC;IACtD,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE;QACnC,SAAS,EAAE,mBAAmB,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,EAAE,2BAA2B,CAAC;KACvC,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC5C,wFAAsF;IACtF,mBAAmB,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtG,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACjG,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;CAC5E;AAED,wBAAgB,2BAA2B,CAC1C,OAAO,EAAE,qCAAqC,EAC9C,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACnC,wBAAwB,CAI1B;AAED,wBAAgB,mCAAmC,CAClD,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,oCAAoC,GACjD,wCAAwC,CAY1C;AAED,wBAAgB,0BAA0B,CACzC,KAAK,EAAE,eAAe,EACtB,aAAa,EAAE,oCAAoC,GACjD,MAAM,GAAG,SAAS,CAYpB;AAED,wBAAgB,2CAA2C,CAC1D,KAAK,EAAE,sBAAsB,EAC7B,kBAAkB,GAAE,MAAwB,GAC1C,sCAAsC,CAaxC;AAgCD,qBAAa,yBAAyB;IACrC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmC;IAC3D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IAErE,YAAY,OAAO,EAAE,gCAAgC,EAEpD;IAED,gFAAgF;IAChF,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/D;IAED,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,MAAM,IAAI,sBAAsB,EAAE,CAEjC;IAED,SAAS,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,CAWtF;IAED,OAAO,CAAC,iBAAiB;IAWnB,gBAAgB,CACrB,SAAS,EAAE;QAAE,KAAK,EAAE,eAAe,CAAC;QAAC,QAAQ,EAAE,0BAA0B,CAAA;KAAE,EAC3E,aAAa,EAAE,oCAAoC,GACjD,OAAO,CAAC;QACV,KAAK,EAAE,sBAAsB,CAAC;QAC9B,OAAO,EAAE,OAAO,CAAC;QACjB,gBAAgB,EAAE,sCAAsC,CAAC;KACzD,CAAC,CAuCD;YAEa,8BAA8B;YAkB9B,WAAW;IA2GzB,OAAO,CAAC,iBAAiB;YAwCX,uBAAuB;IA+B/B,WAAW,CAChB,KAAK,EAAE,sBAAsB,EAC7B,gBAAgB,EAAE,sCAAsC,EACxD,aAAa,EAAE,oCAAoC,GACjD,OAAO,CAAC,IAAI,CAAC,CA0Cf;IAEK,uBAAuB,CAC5B,KAAK,EAAE,sBAAsB,EAC7B,gBAAgB,EAAE,sCAAsC,GAAG,SAAS,GAClE,OAAO,CAAC,IAAI,CAAC,CAOf;IAEK,gBAAgB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAiB1F;IAEK,gBAAgB,CACrB,KAAK,EAAE,sBAAsB,EAC7B,UAAU,EAAE,2BAA2B,EACvC,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC,CAkBf;IAEK,uBAAuB,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB1F;IAEK,SAAS,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA0C5E;IAEK,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI3C;IAEK,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAUzE;IAEK,gBAAgB,CACrB,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,sBAAsB,GACnC,OAAO,CAAC,MAAM,CAAC,CAUjB;IAEK,sBAAsB,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAUzG;IAEK,oBAAoB,CACzB,KAAK,EAAE,sBAAsB,EAC7B,iBAAiB,EAAE,6BAA6B,GAAG,SAAS,EAC5D,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,EAC9B,aAAa,EAAE,oCAAoC,GACjD,OAAO,CAAC,IAAI,CAAC,CASf;YAEa,UAAU;YAyCV,mBAAmB;IAoDjC,mBAAmB,CAAC,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAgCvF;IAEK,mBAAmB,CACxB,KAAK,EAAE,sBAAsB,EAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,yBAAyB,EAAE,6BAA6B,GAAG,SAAS,GAClE,OAAO,CAAC,IAAI,CAAC,CAWf;IAEK,oBAAoB,CACzB,iBAAiB,EAAE,6BAA6B,EAChD,KAAK,EAAE,sBAAsB,GAC3B,OAAO,CAAC,IAAI,CAAC,CASf;IAMD,eAAe,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,CAMnD;IAED,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAEjD;IAED,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAgDnG;IAMD,eAAe,CAAC,KAAK,EAAE,sBAAsB,EAAE,YAAY,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQlH;IAEK,aAAa,CAClB,KAAK,EAAE,sBAAsB,EAC7B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACrC,OAAO,UAAO,EACd,KAAK,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CASf;YAEa,mBAAmB;YAkDnB,QAAQ;CAOtB","sourcesContent":["import { realpath, rm } from \"node:fs/promises\";\nimport { relative, sep } from \"node:path\";\nimport type { AgentSessionRuntime } from \"../core/agent-session-runtime.ts\";\nimport type { IrohRemoteActiveStreamRegistry } from \"../core/remote/iroh/active-stream-registry.ts\";\nimport type { IrohRemoteAuditLogger } from \"../core/remote/iroh/audit.ts\";\nimport type { IrohRemoteClientAuthorizationSuccess } from \"../core/remote/iroh/authorization.ts\";\nimport type { IrohRemoteHostEngine } from \"../core/remote/iroh/engine.ts\";\nimport {\n\tIrohRemoteHandshakeError,\n\ttype IrohRemoteHandshakeSuccess,\n\ttype IrohRemoteHello,\n\tisIrohRemoteSessionId,\n} from \"../core/remote/iroh/handshake.ts\";\nimport { shouldReplaceIrohRemoteIntegratedRuntimeForAuthorization } from \"../core/remote/iroh/host-policy.ts\";\nimport {\n\ttype IrohRemoteHostHandshakeFailureOutcome,\n\ttype IrohRemoteRuntimeToolPolicy,\n\tisIrohRemoteRuntimeToolPolicyWithin,\n\tresolveIrohRemoteRuntimeToolPolicy,\n} from \"../core/remote/iroh/protocol.ts\";\nimport type { IrohRemoteWorkspace, IrohRemoteWorkspaceWorktree } from \"../core/remote/iroh/state.ts\";\nimport type { IrohRemoteHostStateManager } from \"../core/remote/iroh/state-manager.ts\";\nimport { getDefaultSessionDir } from \"../core/session-manager.ts\";\nimport {\n\tcreateIrohRemoteAgentRuntimeWithSessionSelection,\n\ttype IrohRemoteAgentRuntimeConversationTarget,\n\ttype IrohRemoteSubagentRuntimeCreatedEvent,\n} from \"../modes/rpc/iroh-remote-agent-runtime.ts\";\nimport {\n\ttype DetachedRuntimeRetentionHandle,\n\tscheduleDetachedRuntimeRetention,\n} from \"../remote/integrated-runtime-retention.ts\";\nimport type { IntegratedConversationSessionSelection } from \"./handshake-responses.ts\";\nimport { isPathInside, resolveWorkspaceDirectory, type WorkspaceDirectoryResolution } from \"./workspace-directory.ts\";\nimport { getRegisteredWorkingDirectoryForWorktree } from \"./worktree-manager.ts\";\n\nexport interface IntegratedRuntimeSubscriber {\n\tid: string;\n\tattachedAt: number;\n}\n\ninterface IntegratedWorkflowState {\n\tworkflowEvent: Record<string, unknown> | undefined;\n\tactiveTools: Map<string, Record<string, unknown>>;\n}\n\nexport interface IntegratedRuntimeEntry {\n\tkey: string;\n\tclientNodeId: string;\n\tworkspaceName: string;\n\tsessionId: string;\n\truntime: AgentSessionRuntime;\n\trecordedSessionId: string;\n\tpreviousSessionIds: Set<string>;\n\tactiveWorkflows: Map<string, IntegratedWorkflowState>;\n\tsubscribers: Set<IntegratedRuntimeSubscriber>;\n\tdetachedAt: number | undefined;\n\tdetachedRuntimeRetention: DetachedRuntimeRetentionHandle | undefined;\n\tparentSessionId?: string;\n\tsubagentId?: string;\n\t/** Set when the runtime cwd is a daemon-managed worktree checkout. */\n\tworktreeId?: string;\n\t/** Host-local checkout path (sanitizer root); never sent on the wire. */\n\tworktreePath?: string;\n\t/** Registered-workspace-relative git source root for nested repo worktrees. */\n\tworktreeSourceRootRelativePath?: string;\n\t/** POSIX-style path relative to the registered workspace root. Omitted for root. */\n\tworkingDirectory?: string;\n\t/** Immutable tool policy used to create this shared runtime. */\n\ttoolPolicy: IrohRemoteRuntimeToolPolicy;\n}\n\nexport interface IntegratedRuntimeStreamWriter {\n\tsessionId: string;\n\twrite?(value: object): Promise<void> | void;\n}\n\nexport interface IntegratedRuntimeRegistryOptions {\n\tagentDir?: string;\n\tprofile?: string;\n\t/** Injectable runtime factory (tests); defaults to the real iroh remote runtime. */\n\tcreateRuntime?: typeof createIrohRemoteAgentRuntimeWithSessionSelection;\n\tauditLogger: IrohRemoteAuditLogger;\n\tstateManager: IrohRemoteHostStateManager;\n\tactiveStreams: IrohRemoteActiveStreamRegistry;\n\tdetachedRuntimeTtlMs: () => number;\n\t/** Resolve the effective daemon-owned runtime policy. The client grant must remain the ceiling. */\n\tgetToolPolicy?: (workspace: IrohRemoteWorkspace, clientAllowTools: string) => IrohRemoteRuntimeToolPolicy;\n\t/** Legacy workspace-policy seam. It is intersected with the client grant, never used as a replacement. */\n\tgetAllowTools?: (workspace: IrohRemoteWorkspace) => string | undefined;\n\tgetProjectTrustedForWorkspace: (workspace: IrohRemoteWorkspace) => boolean;\n\tsetClientLastSessionId: IrohRemoteHostEngine[\"setClientLastSessionId\"];\n\t/**\n\t * Worktree resolution seam (wired to the daemon's WorktreeManager). Must\n\t * throw a conversation-open error for an unknown/unavailable worktree.\n\t */\n\tresolveWorktree?: (\n\t\tworkspaceName: string,\n\t\thello: IrohRemoteHello,\n\t\ttargetSessionId: string | undefined,\n\t) => Promise<IrohRemoteWorkspaceWorktree | undefined>;\n\t/** Resolve/validate a selected working directory before creating a runtime. */\n\tresolveWorkingDirectory?: (options: {\n\t\tworkspace: IrohRemoteWorkspace;\n\t\trootPath: string;\n\t\tworkingDirectory?: string;\n\t\tworktree?: IrohRemoteWorkspaceWorktree;\n\t}) => Promise<WorkspaceDirectoryResolution>;\n\t/** Persist the sessionId → worktree binding after a created worktree conversation. */\n\tbindWorktreeSession?: (workspaceName: string, worktreeId: string, sessionId: string) => Promise<void>;\n\t/** Lease-broker seam: invoked when a runtime's session id changes (rekey). */\n\tonRuntimeRekeyed?: (workspaceName: string, previousSessionId: string, sessionId: string) => void;\n\tonRuntimeDisposed?: (entry: IntegratedRuntimeEntry, reason: string) => void;\n}\n\nexport function createConversationOpenError(\n\toutcome: IrohRemoteHostHandshakeFailureOutcome,\n\tmessage: string,\n\tdetails: Record<string, unknown> = {},\n): IrohRemoteHandshakeError {\n\tconst error = new IrohRemoteHandshakeError(outcome, message);\n\tObject.assign(error, details);\n\treturn error;\n}\n\nexport function createIrohRuntimeConversationTarget(\n\thello: IrohRemoteHello,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): IrohRemoteAgentRuntimeConversationTarget {\n\tif (hello.mode !== \"conversation\") {\n\t\tthrow new Error(\"integrated runtime requires a conversation stream\");\n\t}\n\tif (hello.conversation.target === \"new\") {\n\t\treturn { target: \"new\" };\n\t}\n\tif (hello.conversation.target === \"session\") {\n\t\treturn { target: \"session\", sessionId: hello.conversation.sessionId };\n\t}\n\tconst previousSessionId = authorization.client.lastSessionIdByWorkspace?.[authorization.workspace.name];\n\treturn previousSessionId === undefined ? { target: \"last\" } : { target: \"last\", resumeSessionId: previousSessionId };\n}\n\nexport function getResolvedTargetSessionId(\n\thello: IrohRemoteHello,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): string | undefined {\n\tif (hello.mode !== \"conversation\") {\n\t\treturn undefined;\n\t}\n\tif (hello.conversation.target === \"session\") {\n\t\treturn hello.conversation.sessionId;\n\t}\n\tif (hello.conversation.target !== \"last\") {\n\t\treturn undefined;\n\t}\n\tconst previousSessionId = authorization.client.lastSessionIdByWorkspace?.[authorization.workspace.name];\n\treturn isIrohRemoteSessionId(previousSessionId) ? previousSessionId : undefined;\n}\n\nexport function createConversationSessionSelectionFromEntry(\n\tentry: IntegratedRuntimeEntry,\n\trequestedSessionId: string = entry.sessionId,\n): IntegratedConversationSessionSelection {\n\tif (requestedSessionId !== entry.sessionId) {\n\t\treturn {\n\t\t\tkind: \"session_rekeyed\",\n\t\t\trequestedSessionId,\n\t\t\tsessionId: entry.sessionId,\n\t\t};\n\t}\n\treturn {\n\t\tkind: \"resumed\",\n\t\trequestedSessionId: entry.sessionId,\n\t\tsessionId: entry.sessionId,\n\t};\n}\n\nlet integratedRuntimeSubscriberSequence = 0;\n\nfunction getRequestedWorkingDirectory(hello: IrohRemoteHello): string | undefined {\n\treturn hello.mode === \"conversation\" && hello.conversation.target === \"new\"\n\t\t? hello.conversation.workingDirectory\n\t\t: undefined;\n}\n\nasync function resolveRuntimeWorkingDirectory(rootPath: string, cwd: string): Promise<WorkspaceDirectoryResolution> {\n\tlet rootReal: string;\n\tlet cwdReal: string;\n\ttry {\n\t\trootReal = await realpath(rootPath);\n\t\tcwdReal = await realpath(cwd);\n\t} catch {\n\t\tthrow createConversationOpenError(\"session_unavailable\", \"session working directory is unavailable\");\n\t}\n\tif (!isPathInside(rootReal, cwdReal)) {\n\t\tthrow createConversationOpenError(\n\t\t\t\"session_unavailable\",\n\t\t\t\"stored session working directory is outside the authorized workspace\",\n\t\t);\n\t}\n\tconst relativePath = relative(rootReal, cwdReal).split(sep).join(\"/\");\n\treturn {\n\t\tabsolutePath: cwdReal,\n\t\t...(relativePath.length === 0 ? {} : { relativePath }),\n\t};\n}\n\nexport class IntegratedRuntimeRegistry {\n\tprivate readonly options: IntegratedRuntimeRegistryOptions;\n\tprivate readonly entries = new Map<string, IntegratedRuntimeEntry>();\n\n\tconstructor(options: IntegratedRuntimeRegistryOptions) {\n\t\tthis.options = options;\n\t}\n\n\t/** The conversation runtime key: one runtime per (workspaceName, sessionId). */\n\tgetRegistryKey(workspaceName: string, sessionId: string): string {\n\t\treturn `${workspaceName}\\0${sessionId}`;\n\t}\n\n\tget size(): number {\n\t\treturn this.entries.size;\n\t}\n\n\tvalues(): IntegratedRuntimeEntry[] {\n\t\treturn Array.from(this.entries.values());\n\t}\n\n\tfindOwner(workspaceName: string, sessionId: string): IntegratedRuntimeEntry | undefined {\n\t\tconst direct = this.entries.get(this.getRegistryKey(workspaceName, sessionId));\n\t\tif (direct) {\n\t\t\treturn direct;\n\t\t}\n\t\tfor (const entry of this.entries.values()) {\n\t\t\tif (entry.workspaceName === workspaceName && entry.previousSessionIds.has(sessionId)) {\n\t\t\t\treturn entry;\n\t\t\t}\n\t\t}\n\t\treturn undefined;\n\t}\n\n\tprivate resolveToolPolicy(authorization: IrohRemoteClientAuthorizationSuccess): IrohRemoteRuntimeToolPolicy {\n\t\treturn (\n\t\t\tthis.options.getToolPolicy?.(authorization.workspace, authorization.allowTools) ??\n\t\t\tresolveIrohRemoteRuntimeToolPolicy({\n\t\t\t\tclientAllowTools: authorization.allowTools,\n\t\t\t\tworkspaceAllowTools: this.options.getAllowTools?.(authorization.workspace),\n\t\t\t\tdaemonAllowTools: null,\n\t\t\t})\n\t\t);\n\t}\n\n\tasync getOrCreateEntry(\n\t\thandshake: { hello: IrohRemoteHello; response: IrohRemoteHandshakeSuccess },\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<{\n\t\tentry: IntegratedRuntimeEntry;\n\t\tcreated: boolean;\n\t\tsessionSelection: IntegratedConversationSessionSelection;\n\t}> {\n\t\tconst targetSessionId = getResolvedTargetSessionId(handshake.hello, authorization);\n\t\tif (targetSessionId !== undefined) {\n\t\t\t// One runtime per conversation: any paired client attaches to an existing\n\t\t\t// runtime for the target (conversation_in_use is retired; single-user model).\n\t\t\tconst existing = this.findOwner(authorization.workspace.name, targetSessionId);\n\t\t\tif (existing) {\n\t\t\t\tif (!shouldReplaceIrohRemoteIntegratedRuntimeForAuthorization(authorization)) {\n\t\t\t\t\tconst attachingPolicy = this.resolveToolPolicy(authorization);\n\t\t\t\t\tif (!isIrohRemoteRuntimeToolPolicyWithin(existing.toolPolicy, attachingPolicy)) {\n\t\t\t\t\t\tthrow createConversationOpenError(\n\t\t\t\t\t\t\t\"conversation_in_use\",\n\t\t\t\t\t\t\t\"conversation is using tools outside this client's persisted grant\",\n\t\t\t\t\t\t\t{ workspace: authorization.workspace.name, sessionId: targetSessionId },\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\t// Reattach recognized: cancel the pending detached-runtime TTL sweep\n\t\t\t\t\t// synchronously, before the caller's multi-await commit window. The\n\t\t\t\t\t// broker flips to daemon-active immediately (commitDaemonRuntime) but\n\t\t\t\t\t// attachSubscriber (which normally cancels retention) only runs after\n\t\t\t\t\t// several awaits; if the TTL timer elapsed in that window it would\n\t\t\t\t\t// dispose this very runtime mid-reattach (use-after-dispose + split\n\t\t\t\t\t// lease/registry ownership). detachedAt stays set so attachSubscriber\n\t\t\t\t\t// still logs the reattach and a pre-subscriber failure re-arms retention.\n\t\t\t\t\tthis.cancelRetention(existing);\n\t\t\t\t\tconst requestedSessionId =\n\t\t\t\t\t\thandshake.hello.mode === \"conversation\" && handshake.hello.conversation.target === \"session\"\n\t\t\t\t\t\t\t? targetSessionId\n\t\t\t\t\t\t\t: existing.sessionId;\n\t\t\t\t\treturn {\n\t\t\t\t\t\tentry: existing,\n\t\t\t\t\t\tcreated: false,\n\t\t\t\t\t\tsessionSelection: createConversationSessionSelectionFromEntry(existing, requestedSessionId),\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tawait this.stopEntry(existing, \"fresh_pairing_replaced_runtime\");\n\t\t\t}\n\t\t}\n\t\treturn this.createEntry(handshake, authorization);\n\t}\n\n\tprivate async resolveInitialWorkingDirectory(options: {\n\t\tworkspace: IrohRemoteWorkspace;\n\t\trootPath: string;\n\t\tworkingDirectory?: string;\n\t\tworktree?: IrohRemoteWorkspaceWorktree;\n\t}): Promise<WorkspaceDirectoryResolution> {\n\t\tif (this.options.resolveWorkingDirectory) {\n\t\t\treturn this.options.resolveWorkingDirectory(options);\n\t\t}\n\t\tconst resolved = await resolveWorkspaceDirectory(options.rootPath, options.workingDirectory);\n\t\tif (!resolved.ok) {\n\t\t\tthrow createConversationOpenError(\"invalid_conversation_target\", resolved.error, {\n\t\t\t\tworkspace: options.workspace.name,\n\t\t\t});\n\t\t}\n\t\treturn resolved.value;\n\t}\n\n\tprivate async createEntry(\n\t\thandshake: { hello: IrohRemoteHello },\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<{\n\t\tentry: IntegratedRuntimeEntry;\n\t\tcreated: boolean;\n\t\tsessionSelection: IntegratedConversationSessionSelection;\n\t}> {\n\t\tlet runtime: AgentSessionRuntime | undefined;\n\t\tlet sessionSelection: IntegratedConversationSessionSelection | undefined;\n\t\ttry {\n\t\t\t// Resolve any worktree binding first: explicit worktreeId on \"new\", or a\n\t\t\t// persisted sessionId binding on resume. Trust and allowTools stay pinned\n\t\t\t// to the PARENT workspace; only cwd changes. The session dir is ALWAYS\n\t\t\t// parent-keyed so worktree sessions stay listed under the workspace.\n\t\t\tconst worktree = await this.options.resolveWorktree?.(\n\t\t\t\tauthorization.workspace.name,\n\t\t\t\thandshake.hello,\n\t\t\t\tgetResolvedTargetSessionId(handshake.hello, authorization),\n\t\t\t);\n\t\t\tconst rootPath = worktree?.path ?? authorization.workspace.path;\n\t\t\tconst requestedWorkingDirectory = getRequestedWorkingDirectory(handshake.hello);\n\t\t\tconst initialDirectory = await this.resolveInitialWorkingDirectory({\n\t\t\t\tworkspace: authorization.workspace,\n\t\t\t\trootPath,\n\t\t\t\tworkingDirectory: requestedWorkingDirectory,\n\t\t\t\t...(worktree === undefined ? {} : { worktree }),\n\t\t\t});\n\t\t\tconst toolPolicy = this.resolveToolPolicy(authorization);\n\t\t\tconst runtimeResult = await (this.options.createRuntime ?? createIrohRemoteAgentRuntimeWithSessionSelection)({\n\t\t\t\tagentDir: this.options.agentDir,\n\t\t\t\ttoolPolicy,\n\t\t\t\tconversationTarget: createIrohRuntimeConversationTarget(handshake.hello, authorization),\n\t\t\t\tcwd: initialDirectory.absolutePath,\n\t\t\t\tprojectCwd: rootPath,\n\t\t\t\tsessionDir: getDefaultSessionDir(authorization.workspace.path, this.options.agentDir),\n\t\t\t\tvalidateCwd: async (cwd) => {\n\t\t\t\t\tawait resolveRuntimeWorkingDirectory(rootPath, cwd);\n\t\t\t\t},\n\t\t\t\tonSubagentRuntimeCreated: (event) => this.registerSubagentRuntime(event, authorization),\n\t\t\t\tprofile: this.options.profile,\n\t\t\t\tprojectTrusted: this.options.getProjectTrustedForWorkspace(authorization.workspace),\n\t\t\t});\n\t\t\truntime = runtimeResult.runtime;\n\t\t\tsessionSelection = runtimeResult.sessionSelection;\n\t\t\tconst runtimeDirectory = await resolveRuntimeWorkingDirectory(rootPath, runtime.cwd);\n\t\t\tconst remoteWorkingDirectory =\n\t\t\t\tworktree === undefined\n\t\t\t\t\t? runtimeDirectory.relativePath\n\t\t\t\t\t: getRegisteredWorkingDirectoryForWorktree(worktree, runtimeDirectory.relativePath);\n\t\t\tconst echoedWorkingDirectory =\n\t\t\t\thandshake.hello.mode === \"conversation\" &&\n\t\t\t\thandshake.hello.conversation.target === \"new\" &&\n\t\t\t\trequestedWorkingDirectory === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: remoteWorkingDirectory;\n\t\t\tconst sessionId = runtime.session.sessionId;\n\t\t\tconst owner = this.findOwner(authorization.workspace.name, sessionId);\n\t\t\tif (owner) {\n\t\t\t\tawait cleanupUncommittedRuntime(runtime, sessionSelection);\n\t\t\t\tif (!isIrohRemoteRuntimeToolPolicyWithin(owner.toolPolicy, toolPolicy)) {\n\t\t\t\t\tthrow createConversationOpenError(\n\t\t\t\t\t\t\"conversation_in_use\",\n\t\t\t\t\t\t\"conversation is using tools outside this client's persisted grant\",\n\t\t\t\t\t\t{ workspace: authorization.workspace.name, sessionId },\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\treturn {\n\t\t\t\t\tentry: owner,\n\t\t\t\t\tcreated: false,\n\t\t\t\t\tsessionSelection: createConversationSessionSelectionFromEntry(owner),\n\t\t\t\t};\n\t\t\t}\n\t\t\tconst entry = this.createEntryRecord({\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspaceName: authorization.workspace.name,\n\t\t\t\tsessionId,\n\t\t\t\truntime,\n\t\t\t\t...(worktree === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tworktreeId: worktree.id,\n\t\t\t\t\t\t\tworktreePath: worktree.path,\n\t\t\t\t\t\t\t...(worktree.sourceRootRelativePath === undefined\n\t\t\t\t\t\t\t\t? {}\n\t\t\t\t\t\t\t\t: { worktreeSourceRootRelativePath: worktree.sourceRootRelativePath }),\n\t\t\t\t\t\t}),\n\t\t\t\t...(echoedWorkingDirectory === undefined ? {} : { workingDirectory: echoedWorkingDirectory }),\n\t\t\t\ttoolPolicy,\n\t\t\t});\n\t\t\tif (\n\t\t\t\tworktree !== undefined &&\n\t\t\t\tsessionSelection.kind === \"created\" &&\n\t\t\t\thandshake.hello.mode === \"conversation\" &&\n\t\t\t\thandshake.hello.conversation.target === \"new\"\n\t\t\t) {\n\t\t\t\tawait this.options.bindWorktreeSession?.(authorization.workspace.name, worktree.id, sessionId);\n\t\t\t}\n\t\t\treturn { entry, created: true, sessionSelection };\n\t\t} catch (error) {\n\t\t\tif (runtime) {\n\t\t\t\tawait cleanupUncommittedRuntime(runtime, sessionSelection);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tprivate createEntryRecord(options: {\n\t\tclientNodeId: string;\n\t\tworkspaceName: string;\n\t\tsessionId: string;\n\t\truntime: AgentSessionRuntime;\n\t\tparentSessionId?: string;\n\t\tsubagentId?: string;\n\t\tworktreeId?: string;\n\t\tworktreePath?: string;\n\t\tworktreeSourceRootRelativePath?: string;\n\t\tworkingDirectory?: string;\n\t\ttoolPolicy: IrohRemoteRuntimeToolPolicy;\n\t}): IntegratedRuntimeEntry {\n\t\treturn {\n\t\t\tkey: this.getRegistryKey(options.workspaceName, options.sessionId),\n\t\t\tclientNodeId: options.clientNodeId,\n\t\t\tworkspaceName: options.workspaceName,\n\t\t\tsessionId: options.sessionId,\n\t\t\truntime: options.runtime,\n\t\t\trecordedSessionId: options.sessionId,\n\t\t\tpreviousSessionIds: new Set(),\n\t\t\tactiveWorkflows: new Map(),\n\t\t\tsubscribers: new Set(),\n\t\t\tdetachedAt: undefined,\n\t\t\tdetachedRuntimeRetention: undefined,\n\t\t\t...(options.parentSessionId === undefined ? {} : { parentSessionId: options.parentSessionId }),\n\t\t\t...(options.subagentId === undefined ? {} : { subagentId: options.subagentId }),\n\t\t\t...(options.worktreeId === undefined ? {} : { worktreeId: options.worktreeId }),\n\t\t\t...(options.worktreePath === undefined ? {} : { worktreePath: options.worktreePath }),\n\t\t\t...(options.worktreeSourceRootRelativePath === undefined\n\t\t\t\t? {}\n\t\t\t\t: { worktreeSourceRootRelativePath: options.worktreeSourceRootRelativePath }),\n\t\t\t...(options.workingDirectory === undefined ? {} : { workingDirectory: options.workingDirectory }),\n\t\t\ttoolPolicy: {\n\t\t\t\ttools: [...options.toolPolicy.tools],\n\t\t\t\tallowUnlistedExtensionTools: options.toolPolicy.allowUnlistedExtensionTools,\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate async registerSubagentRuntime(\n\t\tevent: IrohRemoteSubagentRuntimeCreatedEvent,\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<void> {\n\t\tconst parentEntry = this.findOwner(authorization.workspace.name, event.parentSessionId);\n\t\tif (!parentEntry) {\n\t\t\tthrow new Error(`Parent runtime is not active for subagent session ${event.sessionId}`);\n\t\t}\n\t\tconst owner = this.findOwner(authorization.workspace.name, event.sessionId);\n\t\tif (owner) {\n\t\t\treturn;\n\t\t}\n\t\tconst entry = this.createEntryRecord({\n\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\tworkspaceName: authorization.workspace.name,\n\t\t\tsessionId: event.sessionId,\n\t\t\truntime: event.runtime,\n\t\t\tparentSessionId: event.parentSessionId,\n\t\t\tsubagentId: event.id,\n\t\t\ttoolPolicy: parentEntry.toolPolicy,\n\t\t});\n\t\tentry.detachedAt = Date.now();\n\t\tthis.entries.set(entry.key, entry);\n\t\tawait this.logEntryAudit(entry, \"remote_runtime_started\", {\n\t\t\tparentSessionId: event.parentSessionId,\n\t\t\treason: \"subagent_created\",\n\t\t\tsubagentId: event.id,\n\t\t});\n\t\tthis.scheduleRetention(entry, \"subagent_created\");\n\t}\n\n\tasync commitEntry(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tsessionSelection: IntegratedConversationSessionSelection,\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<void> {\n\t\tconst owner = this.findOwner(authorization.workspace.name, entry.sessionId);\n\t\tif (owner && owner !== entry) {\n\t\t\t// Two attaches raced to create the same conversation runtime; the loser\n\t\t\t// retries and attaches to the winner.\n\t\t\tthrow createConversationOpenError(\"duplicate_conversation_connection\", \"conversation runtime already active\", {\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsessionId: entry.sessionId,\n\t\t\t\tretryAfterMs: 500,\n\t\t\t});\n\t\t}\n\n\t\tconst inserted = this.entries.get(entry.key) !== entry;\n\t\tif (inserted) {\n\t\t\tthis.entries.set(entry.key, entry);\n\t\t}\n\n\t\ttry {\n\t\t\tif (entry.parentSessionId === undefined) {\n\t\t\t\tawait this.options.setClientLastSessionId(\n\t\t\t\t\tauthorization.client.nodeId,\n\t\t\t\t\tauthorization.workspace.name,\n\t\t\t\t\tentry.sessionId,\n\t\t\t\t);\n\t\t\t}\n\t\t\tawait this.logSessionSelection(sessionSelection, authorization);\n\t\t\tif (inserted) {\n\t\t\t\tawait this.logAudit({\n\t\t\t\t\ttype: \"runtime_started\",\n\t\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\t\tsuccess: true,\n\t\t\t\t\tdetails: this.getEntryDetails(entry),\n\t\t\t\t});\n\t\t\t\tawait this.logEntryAudit(entry, \"remote_runtime_started\", { reason: \"created\" });\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tif (inserted && this.entries.get(entry.key) === entry) {\n\t\t\t\tthis.entries.delete(entry.key);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync cleanupUncommittedEntry(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tsessionSelection: IntegratedConversationSessionSelection | undefined,\n\t): Promise<void> {\n\t\tif (this.entries.get(entry.key) === entry) {\n\t\t\tthis.entries.delete(entry.key);\n\t\t}\n\t\tthis.cancelRetention(entry);\n\t\tentry.subscribers.clear();\n\t\tawait cleanupUncommittedRuntime(entry.runtime, sessionSelection);\n\t}\n\n\tasync attachSubscriber(entry: IntegratedRuntimeEntry): Promise<IntegratedRuntimeSubscriber> {\n\t\tconst wasDetached = entry.subscribers.size === 0 && entry.detachedAt !== undefined;\n\t\tthis.cancelRetention(entry);\n\t\tconst subscriber: IntegratedRuntimeSubscriber = {\n\t\t\tid: `subscriber-${++integratedRuntimeSubscriberSequence}`,\n\t\t\tattachedAt: Date.now(),\n\t\t};\n\t\tentry.subscribers.add(subscriber);\n\t\tif (wasDetached) {\n\t\t\tentry.detachedAt = undefined;\n\t\t\tawait this.logEntryAudit(entry, \"remote_runtime_reattached\", {\n\t\t\t\treason: \"subscriber_attached\",\n\t\t\t\tsubscriberId: subscriber.id,\n\t\t\t});\n\t\t}\n\t\tawait this.logEntryAudit(entry, \"remote_subscriber_attached\", { subscriberId: subscriber.id });\n\t\treturn subscriber;\n\t}\n\n\tasync detachSubscriber(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tsubscriber: IntegratedRuntimeSubscriber,\n\t\treason: string,\n\t\terror?: unknown,\n\t): Promise<void> {\n\t\tif (!entry.subscribers.delete(subscriber)) {\n\t\t\treturn;\n\t\t}\n\t\tconst errorMessage = error instanceof Error ? error.message : error ? String(error) : undefined;\n\t\tawait this.logEntryAudit(\n\t\t\tentry,\n\t\t\t\"remote_subscriber_detached\",\n\t\t\t{ reason, subscriberId: subscriber.id },\n\t\t\terrorMessage === undefined,\n\t\t\terrorMessage,\n\t\t);\n\t\tif (entry.subscribers.size > 0) {\n\t\t\treturn;\n\t\t}\n\t\tentry.detachedAt = Date.now();\n\t\tawait this.logEntryAudit(entry, \"remote_runtime_detached\", { detachedAt: entry.detachedAt, reason });\n\t\tthis.scheduleRetention(entry, reason);\n\t}\n\n\tasync detachWithoutSubscriber(entry: IntegratedRuntimeEntry, reason: string): Promise<void> {\n\t\tif (this.entries.get(entry.key) !== entry || entry.subscribers.size > 0) {\n\t\t\treturn;\n\t\t}\n\t\tif (entry.detachedAt !== undefined) {\n\t\t\t// Already detached. A reattach that cancelled retention but then failed\n\t\t\t// before attachSubscriber ran can leave a detached entry with no timer;\n\t\t\t// re-arm so it is still swept rather than lingering forever. Honor the\n\t\t\t// ORIGINAL detach deadline (remaining TTL from detachedAt) instead of a\n\t\t\t// fresh full TTL, so repeated reconnect-then-abort cycles cannot keep\n\t\t\t// resetting the retention clock.\n\t\t\tif (!entry.detachedRuntimeRetention) {\n\t\t\t\tconst remainingTtlMs = Math.max(0, this.options.detachedRuntimeTtlMs() - (Date.now() - entry.detachedAt));\n\t\t\t\tthis.scheduleRetention(entry, reason, remainingTtlMs);\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\t\tentry.detachedAt = Date.now();\n\t\tawait this.logEntryAudit(entry, \"remote_runtime_detached\", { detachedAt: entry.detachedAt, reason });\n\t\tthis.scheduleRetention(entry, reason);\n\t}\n\n\tasync stopEntry(entry: IntegratedRuntimeEntry, reason: string): Promise<void> {\n\t\tif (this.entries.get(entry.key) !== entry) {\n\t\t\t// Stale reference: the key may now belong to a replacement runtime, and\n\t\t\t// deleting by key alone would evict that runtime from the registry while\n\t\t\t// leaving it running unmanaged.\n\t\t\treturn;\n\t\t}\n\t\tthis.cancelRetention(entry);\n\t\tthis.entries.delete(entry.key);\n\t\tentry.subscribers.clear();\n\t\tentry.activeWorkflows.clear();\n\t\tentry.detachedAt = undefined;\n\t\tconst wasActive = entry.runtime.session.isBusy;\n\t\tconst removedLiveActivityCount = await this.options.stateManager.removeClientLiveActivitiesForSession(\n\t\t\tentry.clientNodeId,\n\t\t\tentry.workspaceName,\n\t\t\tentry.sessionId,\n\t\t);\n\t\tlet stopSuccess = true;\n\t\tlet stopError: string | undefined;\n\t\ttry {\n\t\t\tawait entry.runtime.dispose();\n\t\t} catch (error) {\n\t\t\tstopSuccess = false;\n\t\t\tstopError = error instanceof Error ? error.message : String(error);\n\t\t}\n\t\tawait this.logAudit({\n\t\t\ttype: \"runtime_stopped\",\n\t\t\tclientNodeId: entry.clientNodeId,\n\t\t\tworkspace: entry.workspaceName,\n\t\t\tsuccess: stopSuccess,\n\t\t\terror: stopError,\n\t\t\tdetails: this.getEntryDetails(entry, { active: wasActive, reason, removedLiveActivityCount }),\n\t\t});\n\t\tawait this.logEntryAudit(\n\t\t\tentry,\n\t\t\t\"remote_runtime_stopped\",\n\t\t\t{ active: wasActive, reason, removedLiveActivityCount },\n\t\t\tstopSuccess,\n\t\t\tstopError,\n\t\t);\n\t\tthis.options.onRuntimeDisposed?.(entry, reason);\n\t}\n\n\tasync stopAll(reason: string): Promise<void> {\n\t\tfor (const entry of this.values()) {\n\t\t\tawait this.stopEntry(entry, reason);\n\t\t}\n\t}\n\n\tasync stopForClient(clientNodeId: string, reason: string): Promise<number> {\n\t\tlet stoppedCount = 0;\n\t\tfor (const entry of this.values()) {\n\t\t\tif (entry.clientNodeId !== clientNodeId) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tawait this.stopEntry(entry, reason);\n\t\t\tstoppedCount++;\n\t\t}\n\t\treturn stoppedCount;\n\t}\n\n\tasync stopForWorkspace(\n\t\tworkspaceName: string,\n\t\treason: string,\n\t\texcludeEntry?: IntegratedRuntimeEntry,\n\t): Promise<number> {\n\t\tlet stoppedCount = 0;\n\t\tfor (const entry of this.values()) {\n\t\t\tif (entry.workspaceName !== workspaceName || entry === excludeEntry) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tawait this.stopEntry(entry, reason);\n\t\t\tstoppedCount++;\n\t\t}\n\t\treturn stoppedCount;\n\t}\n\n\tasync stopForClientWorkspace(clientNodeId: string, workspaceName: string, reason: string): Promise<number> {\n\t\tlet stoppedCount = 0;\n\t\tfor (const entry of this.values()) {\n\t\t\tif (entry.clientNodeId !== clientNodeId || entry.workspaceName !== workspaceName) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tawait this.stopEntry(entry, reason);\n\t\t\tstoppedCount++;\n\t\t}\n\t\treturn stoppedCount;\n\t}\n\n\tasync handleSessionChanged(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tactiveStreamEntry: IntegratedRuntimeStreamWriter | undefined,\n\t\tsession: { sessionId: string },\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<void> {\n\t\tif (session.sessionId !== entry.sessionId) {\n\t\t\tawait this.rekeyEntry(entry, activeStreamEntry, session.sessionId);\n\t\t}\n\t\tif (session.sessionId === entry.recordedSessionId) {\n\t\t\treturn;\n\t\t}\n\t\tentry.recordedSessionId = session.sessionId;\n\t\tawait this.recordSessionChange(entry, session.sessionId, authorization);\n\t}\n\n\tprivate async rekeyEntry(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tactiveStreamEntry: IntegratedRuntimeStreamWriter | undefined,\n\t\tnextSessionId: string,\n\t): Promise<void> {\n\t\tconst previousSessionId = entry.sessionId;\n\t\tconst previousKey = entry.key;\n\t\tconst nextKey = this.getRegistryKey(entry.workspaceName, nextSessionId);\n\t\tconst existing = this.entries.get(nextKey);\n\t\tif (existing && existing !== entry) {\n\t\t\tawait this.stopEntry(existing, \"session_change_replaced_runtime\");\n\t\t}\n\t\tif (this.entries.get(previousKey) === entry) {\n\t\t\tthis.entries.delete(previousKey);\n\t\t}\n\t\tentry.previousSessionIds.add(previousSessionId);\n\t\tentry.sessionId = nextSessionId;\n\t\tentry.key = nextKey;\n\t\tthis.entries.set(nextKey, entry);\n\t\t// Re-key EVERY stream bound to the old conversation id, not just the one\n\t\t// that drove this session change. Workflow-event fan-out matches streams by\n\t\t// the runtime's current sessionId, so a co-attached device left on the stale\n\t\t// id would be silently dropped from all future events.\n\t\tfor (const stream of this.options.activeStreams.entriesForConversationKey(\n\t\t\tentry.workspaceName,\n\t\t\tpreviousSessionId,\n\t\t)) {\n\t\t\tstream.sessionId = nextSessionId;\n\t\t}\n\t\tif (activeStreamEntry) {\n\t\t\t// Defensive: the driving stream is normally already in the registry, but\n\t\t\t// keep it consistent even if this runs before it was registered.\n\t\t\tactiveStreamEntry.sessionId = nextSessionId;\n\t\t}\n\t\tawait this.logEntryAudit(entry, \"remote_runtime_session_changed\", {\n\t\t\tpreviousSessionId,\n\t\t\tsessionId: nextSessionId,\n\t\t});\n\t\tthis.options.onRuntimeRekeyed?.(entry.workspaceName, previousSessionId, nextSessionId);\n\t}\n\n\tprivate async recordSessionChange(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tsessionId: string,\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<void> {\n\t\tif (entry.parentSessionId !== undefined) {\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"session_changed\",\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: {\n\t\t\t\t\treason: \"remote_rpc_session_change\",\n\t\t\t\t\tsessionId,\n\t\t\t\t\tparentSessionId: entry.parentSessionId,\n\t\t\t\t\t...(entry.subagentId === undefined ? {} : { subagentId: entry.subagentId }),\n\t\t\t\t\tlastSessionUpdated: false,\n\t\t\t\t},\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\n\t\ttry {\n\t\t\tconst client = await this.options.setClientLastSessionId(\n\t\t\t\tauthorization.client.nodeId,\n\t\t\t\tauthorization.workspace.name,\n\t\t\t\tsessionId,\n\t\t\t);\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"session_changed\",\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsuccess: client !== undefined,\n\t\t\t\terror: client ? undefined : \"client not found\",\n\t\t\t\tdetails: { reason: \"remote_rpc_session_change\", sessionId },\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"session_changed\",\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsuccess: false,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t\tdetails: { reason: \"remote_rpc_session_change\", sessionId },\n\t\t\t});\n\t\t}\n\t}\n\n\t// ==========================================================================\n\t// Workflow event replay\n\t// ==========================================================================\n\n\trecordWorkflowEvent(entry: IntegratedRuntimeEntry, event: Record<string, unknown>): void {\n\t\tconst workflowId = getWorkflowEventId(event);\n\t\tif (!workflowId) {\n\t\t\treturn;\n\t\t}\n\t\tif (event.type === \"workflow_start\" || event.type === \"workflow_update\") {\n\t\t\tconst state = entry.activeWorkflows.get(workflowId) ?? { workflowEvent: undefined, activeTools: new Map() };\n\t\t\tstate.workflowEvent = event;\n\t\t\tentry.activeWorkflows.set(workflowId, state);\n\t\t\treturn;\n\t\t}\n\t\tif (event.type === \"workflow_end\") {\n\t\t\tentry.activeWorkflows.delete(workflowId);\n\t\t\treturn;\n\t\t}\n\t\tif (event.type === \"tool_execution_start\") {\n\t\t\tconst toolCallId = getWorkflowToolCallId(event);\n\t\t\tif (!toolCallId) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst state = entry.activeWorkflows.get(workflowId) ?? { workflowEvent: undefined, activeTools: new Map() };\n\t\t\tstate.activeTools.set(toolCallId, event);\n\t\t\tentry.activeWorkflows.set(workflowId, state);\n\t\t\treturn;\n\t\t}\n\t\tif (event.type === \"tool_execution_end\") {\n\t\t\tconst toolCallId = getWorkflowToolCallId(event);\n\t\t\tif (!toolCallId) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tentry.activeWorkflows.get(workflowId)?.activeTools.delete(toolCallId);\n\t\t}\n\t}\n\n\tasync handleWorkflowEvent(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tevent: Record<string, unknown>,\n\t\texcludedActiveStreamEntry: IntegratedRuntimeStreamWriter | undefined,\n\t): Promise<void> {\n\t\tthis.recordWorkflowEvent(entry, event);\n\t\t// Fan out across every co-attached device on this conversation, not just the\n\t\t// runtime creator's clientNodeId — the runtime is shared by (workspace, session),\n\t\t// so a second paired device must also receive live workflow events.\n\t\tconst activeStreams = this.options.activeStreams.entriesForConversationKey(entry.workspaceName, entry.sessionId);\n\t\tawait Promise.allSettled(\n\t\t\tactiveStreams\n\t\t\t\t.filter((activeStream) => activeStream !== excludedActiveStreamEntry && activeStream.write)\n\t\t\t\t.map((activeStream) => Promise.resolve(activeStream.write?.(event))),\n\t\t);\n\t}\n\n\tasync replayWorkflowEvents(\n\t\tactiveStreamEntry: IntegratedRuntimeStreamWriter,\n\t\tentry: IntegratedRuntimeEntry,\n\t): Promise<void> {\n\t\tfor (const state of entry.activeWorkflows.values()) {\n\t\t\tif (state.workflowEvent) {\n\t\t\t\tawait Promise.resolve(activeStreamEntry.write?.(state.workflowEvent)).catch(() => {});\n\t\t\t}\n\t\t\tfor (const toolEvent of state.activeTools.values()) {\n\t\t\t\tawait Promise.resolve(activeStreamEntry.write?.(toolEvent)).catch(() => {});\n\t\t\t}\n\t\t}\n\t}\n\n\t// ==========================================================================\n\t// Retention\n\t// ==========================================================================\n\n\tcancelRetention(entry: IntegratedRuntimeEntry): void {\n\t\tif (!entry.detachedRuntimeRetention) {\n\t\t\treturn;\n\t\t}\n\t\tentry.detachedRuntimeRetention.cancel();\n\t\tentry.detachedRuntimeRetention = undefined;\n\t}\n\n\tisDetached(entry: IntegratedRuntimeEntry): boolean {\n\t\treturn this.entries.get(entry.key) === entry && entry.subscribers.size === 0 && entry.detachedAt !== undefined;\n\t}\n\n\tscheduleRetention(entry: IntegratedRuntimeEntry, detachReason: string, ttlOverrideMs?: number): void {\n\t\tthis.cancelRetention(entry);\n\t\t// A re-arm for an already-detached entry (reattach cancelled retention then\n\t\t// aborted before attach) honors the ORIGINAL detach deadline via an override\n\t\t// rather than restarting a full TTL, so a flaky reconnect-then-abort loop\n\t\t// cannot keep resetting the clock and pin a detached runtime open forever.\n\t\tconst ttlMs = ttlOverrideMs ?? this.options.detachedRuntimeTtlMs();\n\t\tconst handle = scheduleDetachedRuntimeRetention({\n\t\t\tttlMs,\n\t\t\tisDetached: () => this.isDetached(entry),\n\t\t\tisActive: () => entry.runtime.session.isBusy,\n\t\t\twaitForIdle: () => entry.runtime.session.waitForIdle(),\n\t\t\tonExpire: async () => {\n\t\t\t\tif (!this.isDetached(entry) || entry.runtime.session.isBusy) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait this.logEntryAudit(entry, \"remote_runtime_retention_expired\", {\n\t\t\t\t\tdetachedAt: entry.detachedAt,\n\t\t\t\t\tdetachReason,\n\t\t\t\t\treason: \"detached_runtime_ttl_expired\",\n\t\t\t\t\tttlMs,\n\t\t\t\t});\n\t\t\t\t// A reattach handshake can commit during the audit-write await above,\n\t\t\t\t// clearing detachedAt / adding a subscriber, or cancel and replace this\n\t\t\t\t// retention. Re-check (and confirm this retention is still the active\n\t\t\t\t// one) before disposing, so the sweep never tears down a runtime that\n\t\t\t\t// was just reattached.\n\t\t\t\tif (!this.isDetached(entry) || entry.runtime.session.isBusy || entry.detachedRuntimeRetention !== handle) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait this.stopEntry(entry, \"detached_runtime_ttl_expired\");\n\t\t\t},\n\t\t\tonError: (error) => {\n\t\t\t\tvoid this.logEntryAudit(\n\t\t\t\t\tentry,\n\t\t\t\t\t\"remote_runtime_retention_expired\",\n\t\t\t\t\t{\n\t\t\t\t\t\tdetachedAt: entry.detachedAt,\n\t\t\t\t\t\tdetachReason,\n\t\t\t\t\t\treason: \"detached_runtime_ttl_error\",\n\t\t\t\t\t\tttlMs,\n\t\t\t\t\t},\n\t\t\t\t\tfalse,\n\t\t\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t\t);\n\t\t\t},\n\t\t});\n\t\tentry.detachedRuntimeRetention = handle;\n\t}\n\n\t// ==========================================================================\n\t// Audit helpers\n\t// ==========================================================================\n\n\tgetEntryDetails(entry: IntegratedRuntimeEntry, extraDetails: Record<string, unknown> = {}): Record<string, unknown> {\n\t\treturn {\n\t\t\truntime: \"integrated-volt\",\n\t\t\tsessionId: entry.sessionId,\n\t\t\tsubscriberCount: entry.subscribers.size,\n\t\t\tactive: entry.runtime.session.isBusy,\n\t\t\t...extraDetails,\n\t\t};\n\t}\n\n\tasync logEntryAudit(\n\t\tentry: IntegratedRuntimeEntry,\n\t\ttype: string,\n\t\tdetails: Record<string, unknown> = {},\n\t\tsuccess = true,\n\t\terror?: string,\n\t): Promise<void> {\n\t\tawait this.logAudit({\n\t\t\ttype,\n\t\t\tclientNodeId: entry.clientNodeId,\n\t\t\tworkspace: entry.workspaceName,\n\t\t\tsuccess,\n\t\t\terror,\n\t\t\tdetails: this.getEntryDetails(entry, details),\n\t\t});\n\t}\n\n\tprivate async logSessionSelection(\n\t\tselection: IntegratedConversationSessionSelection,\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<void> {\n\t\tconst common = {\n\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\tworkspace: authorization.workspace.name,\n\t\t};\n\t\tif (selection.kind === \"resumed\") {\n\t\t\tawait this.logAudit({\n\t\t\t\t...common,\n\t\t\t\ttype: \"session_resumed\",\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: { requestedSessionId: selection.requestedSessionId, sessionId: selection.sessionId },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tif (selection.kind === \"created_after_missing\") {\n\t\t\tawait this.logAudit({\n\t\t\t\t...common,\n\t\t\t\ttype: \"session_missing_on_resume\",\n\t\t\t\tsuccess: false,\n\t\t\t\terror: \"session not found\",\n\t\t\t\tdetails: { requestedSessionId: selection.requestedSessionId },\n\t\t\t});\n\t\t\tawait this.logAudit({\n\t\t\t\t...common,\n\t\t\t\ttype: \"session_created\",\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: { reason: \"missing_on_resume\", sessionId: selection.sessionId },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tif (selection.kind === \"session_rekeyed\") {\n\t\t\tawait this.logAudit({\n\t\t\t\t...common,\n\t\t\t\ttype: \"session_rekeyed\",\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: { requestedSessionId: selection.requestedSessionId, sessionId: selection.sessionId },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tawait this.logAudit({\n\t\t\t...common,\n\t\t\ttype: \"session_created\",\n\t\t\tsuccess: true,\n\t\t\tdetails: { reason: \"new_client_connection\", sessionId: selection.sessionId },\n\t\t});\n\t}\n\n\tprivate async logAudit(event: Parameters<IrohRemoteAuditLogger[\"log\"]>[0]): Promise<void> {\n\t\ttry {\n\t\t\tawait this.options.auditLogger.log(event);\n\t\t} catch {\n\t\t\t// Audit logging is best-effort and must not change remote runtime behavior.\n\t\t}\n\t}\n}\n\nasync function cleanupUncommittedRuntime(\n\truntime: AgentSessionRuntime,\n\tsessionSelection: IntegratedConversationSessionSelection | undefined,\n): Promise<void> {\n\tconst sessionFile = runtime.session.sessionFile;\n\tawait runtime.dispose().catch(() => {});\n\tif (sessionSelection?.kind === \"resumed\") {\n\t\treturn;\n\t}\n\tif (typeof sessionFile === \"string\" && sessionFile.length > 0) {\n\t\tawait rm(sessionFile, { force: true }).catch(() => {});\n\t}\n}\n\nfunction getWorkflowEventId(event: Record<string, unknown>): string | undefined {\n\treturn typeof event.workflowId === \"string\" && event.workflowId.trim() ? event.workflowId.trim() : undefined;\n}\n\nfunction getWorkflowToolCallId(event: Record<string, unknown>): string | undefined {\n\treturn typeof event.toolCallId === \"string\" && event.toolCallId.trim() ? event.toolCallId.trim() : undefined;\n}\n"]}