@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/integrated-runtimes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrated-runtimes.js","sourceRoot":"","sources":["../../src/daemon/integrated-runtimes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAM1C,OAAO,EACN,wBAAwB,EAGxB,qBAAqB,GACrB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,wDAAwD,EAAE,MAAM,oCAAoC,CAAC;AAC9G,OAAO,EAGN,mCAAmC,EACnC,kCAAkC,GAClC,MAAM,iCAAiC,CAAC;AAGzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EACN,gDAAgD,GAGhD,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAEN,gCAAgC,GAChC,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAqC,MAAM,0BAA0B,CAAC;AACtH,OAAO,EAAE,wCAAwC,EAAE,MAAM,uBAAuB,CAAC;AAiFjF,MAAM,UAAU,2BAA2B,CAC1C,OAA8C,EAC9C,OAAe,EACf,OAAO,GAA4B,EAAE,EACV;IAC3B,MAAM,KAAK,GAAG,IAAI,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,mCAAmC,CAClD,KAAsB,EACtB,aAAmD,EACR;IAC3C,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxG,OAAO,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,CAAC;AAAA,CACrH;AAED,MAAM,UAAU,0BAA0B,CACzC,KAAsB,EACtB,aAAmD,EAC9B;IACrB,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;IACrC,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,iBAAiB,GAAG,aAAa,CAAC,MAAM,CAAC,wBAAwB,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxG,OAAO,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAChF;AAED,MAAM,UAAU,2CAA2C,CAC1D,KAA6B,EAC7B,kBAAkB,GAAW,KAAK,CAAC,SAAS,EACH;IACzC,IAAI,kBAAkB,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QAC5C,OAAO;YACN,IAAI,EAAE,iBAAiB;YACvB,kBAAkB;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B,CAAC;IACH,CAAC;IACD,OAAO;QACN,IAAI,EAAE,SAAS;QACf,kBAAkB,EAAE,KAAK,CAAC,SAAS;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC1B,CAAC;AAAA,CACF;AAED,IAAI,mCAAmC,GAAG,CAAC,CAAC;AAE5C,SAAS,4BAA4B,CAAC,KAAsB,EAAsB;IACjF,OAAO,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK;QAC1E,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,gBAAgB;QACrC,CAAC,CAAC,SAAS,CAAC;AAAA,CACb;AAED,KAAK,UAAU,8BAA8B,CAAC,QAAgB,EAAE,GAAW,EAAyC;IACnH,IAAI,QAAgB,CAAC;IACrB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,2BAA2B,CAAC,qBAAqB,EAAE,0CAA0C,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,2BAA2B,CAChC,qBAAqB,EACrB,sEAAsE,CACtE,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtE,OAAO;QACN,YAAY,EAAE,OAAO;QACrB,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;KACtD,CAAC;AAAA,CACF;AAED,MAAM,OAAO,yBAAyB;IACpB,OAAO,CAAmC;IAC1C,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAErE,YAAY,OAAyC,EAAE;QACtD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAAA,CACvB;IAED,gFAAgF;IAChF,cAAc,CAAC,aAAqB,EAAE,SAAiB,EAAU;QAChE,OAAO,GAAG,aAAa,KAAK,SAAS,EAAE,CAAC;IAAA,CACxC;IAED,IAAI,IAAI,GAAW;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAAA,CACzB;IAED,MAAM,GAA6B;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAAA,CACzC;IAED,SAAS,CAAC,aAAqB,EAAE,SAAiB,EAAsC;QACvF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/E,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO,MAAM,CAAC;QACf,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,IAAI,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtF,OAAO,KAAK,CAAC;YACd,CAAC;QACF,CAAC;QACD,OAAO,SAAS,CAAC;IAAA,CACjB;IAEO,iBAAiB,CAAC,aAAmD,EAA+B;QAC3G,OAAO,CACN,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,UAAU,CAAC;YAC/E,kCAAkC,CAAC;gBAClC,gBAAgB,EAAE,aAAa,CAAC,UAAU;gBAC1C,mBAAmB,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC;gBAC1E,gBAAgB,EAAE,IAAI;aACtB,CAAC,CACF,CAAC;IAAA,CACF;IAED,KAAK,CAAC,gBAAgB,CACrB,SAA2E,EAC3E,aAAmD,EAKjD;QACF,MAAM,eAAe,GAAG,0BAA0B,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACnF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YACnC,0EAA0E;YAC1E,8EAA8E;YAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;YAC/E,IAAI,QAAQ,EAAE,CAAC;gBACd,IAAI,CAAC,wDAAwD,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC9E,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;oBAC9D,IAAI,CAAC,mCAAmC,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,CAAC;wBAChF,MAAM,2BAA2B,CAChC,qBAAqB,EACrB,mEAAmE,EACnE,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,CACvE,CAAC;oBACH,CAAC;oBACD,qEAAqE;oBACrE,oEAAoE;oBACpE,sEAAsE;oBACtE,sEAAsE;oBACtE,mEAAmE;oBACnE,oEAAoE;oBACpE,sEAAsE;oBACtE,0EAA0E;oBAC1E,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;oBAC/B,MAAM,kBAAkB,GACvB,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS;wBAC3F,CAAC,CAAC,eAAe;wBACjB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACvB,OAAO;wBACN,KAAK,EAAE,QAAQ;wBACf,OAAO,EAAE,KAAK;wBACd,gBAAgB,EAAE,2CAA2C,CAAC,QAAQ,EAAE,kBAAkB,CAAC;qBAC3F,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC;YAClE,CAAC;QACF,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAAA,CAClD;IAEO,KAAK,CAAC,8BAA8B,CAAC,OAK5C,EAAyC;QACzC,IAAI,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC7F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,2BAA2B,CAAC,6BAA6B,EAAE,QAAQ,CAAC,KAAK,EAAE;gBAChF,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI;aACjC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC;IAAA,CACtB;IAEO,KAAK,CAAC,WAAW,CACxB,SAAqC,EACrC,aAAmD,EAKjD;QACF,IAAI,OAAwC,CAAC;QAC7C,IAAI,gBAAoE,CAAC;QACzE,IAAI,CAAC;YACJ,yEAAyE;YACzE,0EAA0E;YAC1E,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CACpD,aAAa,CAAC,SAAS,CAAC,IAAI,EAC5B,SAAS,CAAC,KAAK,EACf,0BAA0B,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAC1D,CAAC;YACF,MAAM,QAAQ,GAAG,QAAQ,EAAE,IAAI,IAAI,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC;YAChE,MAAM,yBAAyB,GAAG,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC;gBAClE,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,QAAQ;gBACR,gBAAgB,EAAE,yBAAyB;gBAC3C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;aAC/C,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;YACzD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,gDAAgD,CAAC,CAAC;gBAC5G,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAC/B,UAAU;gBACV,kBAAkB,EAAE,mCAAmC,CAAC,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC;gBACvF,GAAG,EAAE,gBAAgB,CAAC,YAAY;gBAClC,UAAU,EAAE,QAAQ;gBACpB,UAAU,EAAE,oBAAoB,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACrF,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;oBAC3B,MAAM,8BAA8B,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAAA,CACpD;gBACD,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,aAAa,CAAC;gBACvF,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,aAAa,CAAC,SAAS,CAAC;aACnF,CAAC,CAAC;YACH,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;YAChC,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;YAClD,MAAM,gBAAgB,GAAG,MAAM,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;YACrF,MAAM,sBAAsB,GAC3B,QAAQ,KAAK,SAAS;gBACrB,CAAC,CAAC,gBAAgB,CAAC,YAAY;gBAC/B,CAAC,CAAC,wCAAwC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;YACtF,MAAM,sBAAsB,GAC3B,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;gBACvC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK;gBAC7C,yBAAyB,KAAK,SAAS;gBACtC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,sBAAsB,CAAC;YAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACtE,IAAI,KAAK,EAAE,CAAC;gBACX,MAAM,yBAAyB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;gBAC3D,IAAI,CAAC,mCAAmC,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;oBACxE,MAAM,2BAA2B,CAChC,qBAAqB,EACrB,mEAAmE,EACnE,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,CACtD,CAAC;gBACH,CAAC;gBACD,OAAO;oBACN,KAAK,EAAE,KAAK;oBACZ,OAAO,EAAE,KAAK;oBACd,gBAAgB,EAAE,2CAA2C,CAAC,KAAK,CAAC;iBACpE,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC;gBACpC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;gBACzC,aAAa,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;gBAC3C,SAAS;gBACT,OAAO;gBACP,GAAG,CAAC,QAAQ,KAAK,SAAS;oBACzB,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACA,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,YAAY,EAAE,QAAQ,CAAC,IAAI;wBAC3B,GAAG,CAAC,QAAQ,CAAC,sBAAsB,KAAK,SAAS;4BAChD,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,8BAA8B,EAAE,QAAQ,CAAC,sBAAsB,EAAE,CAAC;qBACvE,CAAC;gBACJ,GAAG,CAAC,sBAAsB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;gBAC7F,UAAU;aACV,CAAC,CAAC;YACH,IACC,QAAQ,KAAK,SAAS;gBACtB,gBAAgB,CAAC,IAAI,KAAK,SAAS;gBACnC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;gBACvC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK,EAC5C,CAAC;gBACF,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAChG,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,OAAO,EAAE,CAAC;gBACb,MAAM,yBAAyB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;IAEO,iBAAiB,CAAC,OAYzB,EAA0B;QAC1B,OAAO;YACN,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC;YAClE,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,iBAAiB,EAAE,OAAO,CAAC,SAAS;YACpC,kBAAkB,EAAE,IAAI,GAAG,EAAE;YAC7B,eAAe,EAAE,IAAI,GAAG,EAAE;YAC1B,WAAW,EAAE,IAAI,GAAG,EAAE;YACtB,UAAU,EAAE,SAAS;YACrB,wBAAwB,EAAE,SAAS;YACnC,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;YAC9F,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;YACrF,GAAG,CAAC,OAAO,CAAC,8BAA8B,KAAK,SAAS;gBACvD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,8BAA8B,EAAE,OAAO,CAAC,8BAA8B,EAAE,CAAC;YAC9E,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACjG,UAAU,EAAE;gBACX,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;gBACpC,2BAA2B,EAAE,OAAO,CAAC,UAAU,CAAC,2BAA2B;aAC3E;SACD,CAAC;IAAA,CACF;IAEO,KAAK,CAAC,uBAAuB,CACpC,KAA4C,EAC5C,aAAmD,EACnC;QAChB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QACxF,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,KAAK,EAAE,CAAC;YACX,OAAO;QACR,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACpC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;YACzC,aAAa,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;YAC3C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,UAAU,EAAE,KAAK,CAAC,EAAE;YACpB,UAAU,EAAE,WAAW,CAAC,UAAU;SAClC,CAAC,CAAC;QACH,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,wBAAwB,EAAE;YACzD,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,MAAM,EAAE,kBAAkB;YAC1B,UAAU,EAAE,KAAK,CAAC,EAAE;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAAA,CAClD;IAED,KAAK,CAAC,WAAW,CAChB,KAA6B,EAC7B,gBAAwD,EACxD,aAAmD,EACnC;QAChB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,KAAK,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YAC9B,wEAAwE;YACxE,sCAAsC;YACtC,MAAM,2BAA2B,CAAC,mCAAmC,EAAE,qCAAqC,EAAE;gBAC7G,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;gBACvC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,YAAY,EAAE,GAAG;aACjB,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC;QACvD,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,CAAC;YACJ,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACzC,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CACxC,aAAa,CAAC,MAAM,CAAC,MAAM,EAC3B,aAAa,CAAC,SAAS,CAAC,IAAI,EAC5B,KAAK,CAAC,SAAS,CACf,CAAC;YACH,CAAC;YACD,MAAM,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAChE,IAAI,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,QAAQ,CAAC;oBACnB,IAAI,EAAE,iBAAiB;oBACvB,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;oBACzC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;oBACvC,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;iBACpC,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,wBAAwB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAClF,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;gBACvD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IAAA,CACD;IAED,KAAK,CAAC,uBAAuB,CAC5B,KAA6B,EAC7B,gBAAoE,EACpD;QAChB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAAA,CACjE;IAED,KAAK,CAAC,gBAAgB,CAAC,KAA6B,EAAwC;QAC3F,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC;QACnF,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAgC;YAC/C,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YACzD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC;YAC7B,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,2BAA2B,EAAE;gBAC5D,MAAM,EAAE,qBAAqB;gBAC7B,YAAY,EAAE,UAAU,CAAC,EAAE;aAC3B,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,4BAA4B,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/F,OAAO,UAAU,CAAC;IAAA,CAClB;IAED,KAAK,CAAC,gBAAgB,CACrB,KAA6B,EAC7B,UAAuC,EACvC,MAAc,EACd,KAAe,EACC;QAChB,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,OAAO;QACR,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,MAAM,IAAI,CAAC,aAAa,CACvB,KAAK,EACL,4BAA4B,EAC5B,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,EACvC,YAAY,KAAK,SAAS,EAC1B,YAAY,CACZ,CAAC;QACF,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO;QACR,CAAC;QACD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,yBAAyB,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAAA,CACtC;IAED,KAAK,CAAC,uBAAuB,CAAC,KAA6B,EAAE,MAAc,EAAiB;QAC3F,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACzE,OAAO;QACR,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACpC,wEAAwE;YACxE,wEAAwE;YACxE,uEAAuE;YACvE,wEAAwE;YACxE,sEAAsE;YACtE,iCAAiC;YACjC,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC;gBACrC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC1G,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;YACvD,CAAC;YACD,OAAO;QACR,CAAC;QACD,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,yBAAyB,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAAA,CACtC;IAED,KAAK,CAAC,SAAS,CAAC,KAA6B,EAAE,MAAc,EAAiB;QAC7E,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC;YAC3C,wEAAwE;YACxE,yEAAyE;YACzE,gCAAgC;YAChC,OAAO;QACR,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC1B,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;QAC9B,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QAC/C,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,oCAAoC,CACpG,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,SAAS,CACf,CAAC;QACF,IAAI,WAAW,GAAG,IAAI,CAAC;QACvB,IAAI,SAA6B,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,WAAW,GAAG,KAAK,CAAC;YACpB,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC;YACnB,IAAI,EAAE,iBAAiB;YACvB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,aAAa;YAC9B,OAAO,EAAE,WAAW;YACpB,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;SAC7F,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,CACvB,KAAK,EACL,wBAAwB,EACxB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,EAAE,EACvD,WAAW,EACX,SAAS,CACT,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAAA,CAChD;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAiB;QAC5C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;IAAA,CACD;IAED,KAAK,CAAC,aAAa,CAAC,YAAoB,EAAE,MAAc,EAAmB;QAC1E,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;gBACzC,SAAS;YACV,CAAC;YACD,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACpC,YAAY,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,YAAY,CAAC;IAAA,CACpB;IAED,KAAK,CAAC,gBAAgB,CACrB,aAAqB,EACrB,MAAc,EACd,YAAqC,EACnB;QAClB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;gBACrE,SAAS;YACV,CAAC;YACD,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACpC,YAAY,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,YAAY,CAAC;IAAA,CACpB;IAED,KAAK,CAAC,sBAAsB,CAAC,YAAoB,EAAE,aAAqB,EAAE,MAAc,EAAmB;QAC1G,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;gBAClF,SAAS;YACV,CAAC;YACD,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACpC,YAAY,EAAE,CAAC;QAChB,CAAC;QACD,OAAO,YAAY,CAAC;IAAA,CACpB;IAED,KAAK,CAAC,oBAAoB,CACzB,KAA6B,EAC7B,iBAA4D,EAC5D,OAA8B,EAC9B,aAAmD,EACnC;QAChB,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,iBAAiB,EAAE,CAAC;YACnD,OAAO;QACR,CAAC;QACD,KAAK,CAAC,iBAAiB,GAAG,OAAO,CAAC,SAAS,CAAC;QAC5C,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAAA,CACxE;IAEO,KAAK,CAAC,UAAU,CACvB,KAA6B,EAC7B,iBAA4D,EAC5D,aAAqB,EACL;QAChB,MAAM,iBAAiB,GAAG,KAAK,CAAC,SAAS,CAAC;QAC1C,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACpC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAClC,CAAC;QACD,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAChD,KAAK,CAAC,SAAS,GAAG,aAAa,CAAC;QAChC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjC,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,uDAAuD;QACvD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,yBAAyB,CACxE,KAAK,CAAC,aAAa,EACnB,iBAAiB,CACjB,EAAE,CAAC;YACH,MAAM,CAAC,SAAS,GAAG,aAAa,CAAC;QAClC,CAAC;QACD,IAAI,iBAAiB,EAAE,CAAC;YACvB,yEAAyE;YACzE,iEAAiE;YACjE,iBAAiB,CAAC,SAAS,GAAG,aAAa,CAAC;QAC7C,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,gCAAgC,EAAE;YACjE,iBAAiB;YACjB,SAAS,EAAE,aAAa;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAAA,CACvF;IAEO,KAAK,CAAC,mBAAmB,CAChC,KAA6B,EAC7B,SAAiB,EACjB,aAAmD,EACnC;QAChB,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACnB,IAAI,EAAE,iBAAiB;gBACvB,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;gBACzC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;gBACvC,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACR,MAAM,EAAE,2BAA2B;oBACnC,SAAS;oBACT,eAAe,EAAE,KAAK,CAAC,eAAe;oBACtC,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;oBAC3E,kBAAkB,EAAE,KAAK;iBACzB;aACD,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,CACvD,aAAa,CAAC,MAAM,CAAC,MAAM,EAC3B,aAAa,CAAC,SAAS,CAAC,IAAI,EAC5B,SAAS,CACT,CAAC;YACF,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACnB,IAAI,EAAE,iBAAiB;gBACvB,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;gBACzC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;gBACvC,OAAO,EAAE,MAAM,KAAK,SAAS;gBAC7B,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB;gBAC9C,OAAO,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,SAAS,EAAE;aAC3D,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACnB,IAAI,EAAE,iBAAiB;gBACvB,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;gBACzC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;gBACvC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,OAAO,EAAE,EAAE,MAAM,EAAE,2BAA2B,EAAE,SAAS,EAAE;aAC3D,CAAC,CAAC;QACJ,CAAC;IAAA,CACD;IAED,6EAA6E;IAC7E,wBAAwB;IACxB,6EAA6E;IAE7E,mBAAmB,CAAC,KAA6B,EAAE,KAA8B,EAAQ;QACxF,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO;QACR,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACzE,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YAC5G,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC;YAC5B,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO;QACR,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACnC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,OAAO;QACR,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC3C,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,OAAO;YACR,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YAC5G,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YACzC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC7C,OAAO;QACR,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,OAAO;YACR,CAAC;YACD,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvE,CAAC;IAAA,CACD;IAED,KAAK,CAAC,mBAAmB,CACxB,KAA6B,EAC7B,KAA8B,EAC9B,yBAAoE,EACpD;QAChB,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACvC,6EAA6E;QAC7E,oFAAkF;QAClF,oEAAoE;QACpE,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,yBAAyB,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACjH,MAAM,OAAO,CAAC,UAAU,CACvB,aAAa;aACX,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,KAAK,yBAAyB,IAAI,YAAY,CAAC,KAAK,CAAC;aAC1F,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CACrE,CAAC;IAAA,CACF;IAED,KAAK,CAAC,oBAAoB,CACzB,iBAAgD,EAChD,KAA6B,EACb;QAChB,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;YACpD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;gBACzB,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;YACvF,CAAC;YACD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;gBACpD,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;YAC7E,CAAC;QACF,CAAC;IAAA,CACD;IAED,6EAA6E;IAC7E,YAAY;IACZ,6EAA6E;IAE7E,eAAe,CAAC,KAA6B,EAAQ;QACpD,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC;YACrC,OAAO;QACR,CAAC;QACD,KAAK,CAAC,wBAAwB,CAAC,MAAM,EAAE,CAAC;QACxC,KAAK,CAAC,wBAAwB,GAAG,SAAS,CAAC;IAAA,CAC3C;IAED,UAAU,CAAC,KAA6B,EAAW;QAClD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC;IAAA,CAC/G;IAED,iBAAiB,CAAC,KAA6B,EAAE,YAAoB,EAAE,aAAsB,EAAQ;QACpG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC5B,4EAA4E;QAC5E,6EAA6E;QAC7E,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,KAAK,GAAG,aAAa,IAAI,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,gCAAgC,CAAC;YAC/C,KAAK;YACL,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACxC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM;YAC5C,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE;YACtD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBAC7D,OAAO;gBACR,CAAC;gBACD,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,kCAAkC,EAAE;oBACnE,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,YAAY;oBACZ,MAAM,EAAE,8BAA8B;oBACtC,KAAK;iBACL,CAAC,CAAC;gBACH,sEAAsE;gBACtE,wEAAwE;gBACxE,sEAAsE;gBACtE,sEAAsE;gBACtE,uBAAuB;gBACvB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,MAAM,EAAE,CAAC;oBAC1G,OAAO;gBACR,CAAC;gBACD,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;YAAA,CAC5D;YACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnB,KAAK,IAAI,CAAC,aAAa,CACtB,KAAK,EACL,kCAAkC,EAClC;oBACC,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,YAAY;oBACZ,MAAM,EAAE,4BAA4B;oBACpC,KAAK;iBACL,EACD,KAAK,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACtD,CAAC;YAAA,CACF;SACD,CAAC,CAAC;QACH,KAAK,CAAC,wBAAwB,GAAG,MAAM,CAAC;IAAA,CACxC;IAED,6EAA6E;IAC7E,gBAAgB;IAChB,6EAA6E;IAE7E,eAAe,CAAC,KAA6B,EAAE,YAAY,GAA4B,EAAE,EAA2B;QACnH,OAAO;YACN,OAAO,EAAE,iBAAiB;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,eAAe,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI;YACvC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM;YACpC,GAAG,YAAY;SACf,CAAC;IAAA,CACF;IAED,KAAK,CAAC,aAAa,CAClB,KAA6B,EAC7B,IAAY,EACZ,OAAO,GAA4B,EAAE,EACrC,OAAO,GAAG,IAAI,EACd,KAAc,EACE;QAChB,MAAM,IAAI,CAAC,QAAQ,CAAC;YACnB,IAAI;YACJ,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,aAAa;YAC9B,OAAO;YACP,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC;SAC7C,CAAC,CAAC;IAAA,CACH;IAEO,KAAK,CAAC,mBAAmB,CAChC,SAAiD,EACjD,aAAmD,EACnC;QAChB,MAAM,MAAM,GAAG;YACd,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM;YACzC,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI;SACvC,CAAC;QACF,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACnB,GAAG,MAAM;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;aAC7F,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACnB,GAAG,MAAM;gBACT,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,mBAAmB;gBAC1B,OAAO,EAAE,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE;aAC7D,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACnB,GAAG,MAAM;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;aACxE,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,QAAQ,CAAC;gBACnB,GAAG,MAAM;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;aAC7F,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC;YACnB,GAAG,MAAM;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE;SAC5E,CAAC,CAAC;IAAA,CACH;IAEO,KAAK,CAAC,QAAQ,CAAC,KAAkD,EAAiB;QACzF,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACR,4EAA4E;QAC7E,CAAC;IAAA,CACD;CACD;AAED,KAAK,UAAU,yBAAyB,CACvC,OAA4B,EAC5B,gBAAoE,EACpD;IAChB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;IAChD,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IACxC,IAAI,gBAAgB,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO;IACR,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;IACxD,CAAC;AAAA,CACD;AAED,SAAS,kBAAkB,CAAC,KAA8B,EAAsB;IAC/E,OAAO,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC7G;AAED,SAAS,qBAAqB,CAAC,KAA8B,EAAsB;IAClF,OAAO,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAAA,CAC7G","sourcesContent":["import { realpath, rm } from \"node:fs/promises\";\nimport { relative, sep } from \"node:path\";\nimport type { AgentSessionRuntime } from \"../core/agent-session-runtime.ts\";\nimport type { IrohRemoteActiveStreamRegistry } from \"../core/remote/iroh/active-stream-registry.ts\";\nimport type { IrohRemoteAuditLogger } from \"../core/remote/iroh/audit.ts\";\nimport type { IrohRemoteClientAuthorizationSuccess } from \"../core/remote/iroh/authorization.ts\";\nimport type { IrohRemoteHostEngine } from \"../core/remote/iroh/engine.ts\";\nimport {\n\tIrohRemoteHandshakeError,\n\ttype IrohRemoteHandshakeSuccess,\n\ttype IrohRemoteHello,\n\tisIrohRemoteSessionId,\n} from \"../core/remote/iroh/handshake.ts\";\nimport { shouldReplaceIrohRemoteIntegratedRuntimeForAuthorization } from \"../core/remote/iroh/host-policy.ts\";\nimport {\n\ttype IrohRemoteHostHandshakeFailureOutcome,\n\ttype IrohRemoteRuntimeToolPolicy,\n\tisIrohRemoteRuntimeToolPolicyWithin,\n\tresolveIrohRemoteRuntimeToolPolicy,\n} from \"../core/remote/iroh/protocol.ts\";\nimport type { IrohRemoteWorkspace, IrohRemoteWorkspaceWorktree } from \"../core/remote/iroh/state.ts\";\nimport type { IrohRemoteHostStateManager } from \"../core/remote/iroh/state-manager.ts\";\nimport { getDefaultSessionDir } from \"../core/session-manager.ts\";\nimport {\n\tcreateIrohRemoteAgentRuntimeWithSessionSelection,\n\ttype IrohRemoteAgentRuntimeConversationTarget,\n\ttype IrohRemoteSubagentRuntimeCreatedEvent,\n} from \"../modes/rpc/iroh-remote-agent-runtime.ts\";\nimport {\n\ttype DetachedRuntimeRetentionHandle,\n\tscheduleDetachedRuntimeRetention,\n} from \"../remote/integrated-runtime-retention.ts\";\nimport type { IntegratedConversationSessionSelection } from \"./handshake-responses.ts\";\nimport { isPathInside, resolveWorkspaceDirectory, type WorkspaceDirectoryResolution } from \"./workspace-directory.ts\";\nimport { getRegisteredWorkingDirectoryForWorktree } from \"./worktree-manager.ts\";\n\nexport interface IntegratedRuntimeSubscriber {\n\tid: string;\n\tattachedAt: number;\n}\n\ninterface IntegratedWorkflowState {\n\tworkflowEvent: Record<string, unknown> | undefined;\n\tactiveTools: Map<string, Record<string, unknown>>;\n}\n\nexport interface IntegratedRuntimeEntry {\n\tkey: string;\n\tclientNodeId: string;\n\tworkspaceName: string;\n\tsessionId: string;\n\truntime: AgentSessionRuntime;\n\trecordedSessionId: string;\n\tpreviousSessionIds: Set<string>;\n\tactiveWorkflows: Map<string, IntegratedWorkflowState>;\n\tsubscribers: Set<IntegratedRuntimeSubscriber>;\n\tdetachedAt: number | undefined;\n\tdetachedRuntimeRetention: DetachedRuntimeRetentionHandle | undefined;\n\tparentSessionId?: string;\n\tsubagentId?: string;\n\t/** Set when the runtime cwd is a daemon-managed worktree checkout. */\n\tworktreeId?: string;\n\t/** Host-local checkout path (sanitizer root); never sent on the wire. */\n\tworktreePath?: string;\n\t/** Registered-workspace-relative git source root for nested repo worktrees. */\n\tworktreeSourceRootRelativePath?: string;\n\t/** POSIX-style path relative to the registered workspace root. Omitted for root. */\n\tworkingDirectory?: string;\n\t/** Immutable tool policy used to create this shared runtime. */\n\ttoolPolicy: IrohRemoteRuntimeToolPolicy;\n}\n\nexport interface IntegratedRuntimeStreamWriter {\n\tsessionId: string;\n\twrite?(value: object): Promise<void> | void;\n}\n\nexport interface IntegratedRuntimeRegistryOptions {\n\tagentDir?: string;\n\tprofile?: string;\n\t/** Injectable runtime factory (tests); defaults to the real iroh remote runtime. */\n\tcreateRuntime?: typeof createIrohRemoteAgentRuntimeWithSessionSelection;\n\tauditLogger: IrohRemoteAuditLogger;\n\tstateManager: IrohRemoteHostStateManager;\n\tactiveStreams: IrohRemoteActiveStreamRegistry;\n\tdetachedRuntimeTtlMs: () => number;\n\t/** Resolve the effective daemon-owned runtime policy. The client grant must remain the ceiling. */\n\tgetToolPolicy?: (workspace: IrohRemoteWorkspace, clientAllowTools: string) => IrohRemoteRuntimeToolPolicy;\n\t/** Legacy workspace-policy seam. It is intersected with the client grant, never used as a replacement. */\n\tgetAllowTools?: (workspace: IrohRemoteWorkspace) => string | undefined;\n\tgetProjectTrustedForWorkspace: (workspace: IrohRemoteWorkspace) => boolean;\n\tsetClientLastSessionId: IrohRemoteHostEngine[\"setClientLastSessionId\"];\n\t/**\n\t * Worktree resolution seam (wired to the daemon's WorktreeManager). Must\n\t * throw a conversation-open error for an unknown/unavailable worktree.\n\t */\n\tresolveWorktree?: (\n\t\tworkspaceName: string,\n\t\thello: IrohRemoteHello,\n\t\ttargetSessionId: string | undefined,\n\t) => Promise<IrohRemoteWorkspaceWorktree | undefined>;\n\t/** Resolve/validate a selected working directory before creating a runtime. */\n\tresolveWorkingDirectory?: (options: {\n\t\tworkspace: IrohRemoteWorkspace;\n\t\trootPath: string;\n\t\tworkingDirectory?: string;\n\t\tworktree?: IrohRemoteWorkspaceWorktree;\n\t}) => Promise<WorkspaceDirectoryResolution>;\n\t/** Persist the sessionId → worktree binding after a created worktree conversation. */\n\tbindWorktreeSession?: (workspaceName: string, worktreeId: string, sessionId: string) => Promise<void>;\n\t/** Lease-broker seam: invoked when a runtime's session id changes (rekey). */\n\tonRuntimeRekeyed?: (workspaceName: string, previousSessionId: string, sessionId: string) => void;\n\tonRuntimeDisposed?: (entry: IntegratedRuntimeEntry, reason: string) => void;\n}\n\nexport function createConversationOpenError(\n\toutcome: IrohRemoteHostHandshakeFailureOutcome,\n\tmessage: string,\n\tdetails: Record<string, unknown> = {},\n): IrohRemoteHandshakeError {\n\tconst error = new IrohRemoteHandshakeError(outcome, message);\n\tObject.assign(error, details);\n\treturn error;\n}\n\nexport function createIrohRuntimeConversationTarget(\n\thello: IrohRemoteHello,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): IrohRemoteAgentRuntimeConversationTarget {\n\tif (hello.mode !== \"conversation\") {\n\t\tthrow new Error(\"integrated runtime requires a conversation stream\");\n\t}\n\tif (hello.conversation.target === \"new\") {\n\t\treturn { target: \"new\" };\n\t}\n\tif (hello.conversation.target === \"session\") {\n\t\treturn { target: \"session\", sessionId: hello.conversation.sessionId };\n\t}\n\tconst previousSessionId = authorization.client.lastSessionIdByWorkspace?.[authorization.workspace.name];\n\treturn previousSessionId === undefined ? { target: \"last\" } : { target: \"last\", resumeSessionId: previousSessionId };\n}\n\nexport function getResolvedTargetSessionId(\n\thello: IrohRemoteHello,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): string | undefined {\n\tif (hello.mode !== \"conversation\") {\n\t\treturn undefined;\n\t}\n\tif (hello.conversation.target === \"session\") {\n\t\treturn hello.conversation.sessionId;\n\t}\n\tif (hello.conversation.target !== \"last\") {\n\t\treturn undefined;\n\t}\n\tconst previousSessionId = authorization.client.lastSessionIdByWorkspace?.[authorization.workspace.name];\n\treturn isIrohRemoteSessionId(previousSessionId) ? previousSessionId : undefined;\n}\n\nexport function createConversationSessionSelectionFromEntry(\n\tentry: IntegratedRuntimeEntry,\n\trequestedSessionId: string = entry.sessionId,\n): IntegratedConversationSessionSelection {\n\tif (requestedSessionId !== entry.sessionId) {\n\t\treturn {\n\t\t\tkind: \"session_rekeyed\",\n\t\t\trequestedSessionId,\n\t\t\tsessionId: entry.sessionId,\n\t\t};\n\t}\n\treturn {\n\t\tkind: \"resumed\",\n\t\trequestedSessionId: entry.sessionId,\n\t\tsessionId: entry.sessionId,\n\t};\n}\n\nlet integratedRuntimeSubscriberSequence = 0;\n\nfunction getRequestedWorkingDirectory(hello: IrohRemoteHello): string | undefined {\n\treturn hello.mode === \"conversation\" && hello.conversation.target === \"new\"\n\t\t? hello.conversation.workingDirectory\n\t\t: undefined;\n}\n\nasync function resolveRuntimeWorkingDirectory(rootPath: string, cwd: string): Promise<WorkspaceDirectoryResolution> {\n\tlet rootReal: string;\n\tlet cwdReal: string;\n\ttry {\n\t\trootReal = await realpath(rootPath);\n\t\tcwdReal = await realpath(cwd);\n\t} catch {\n\t\tthrow createConversationOpenError(\"session_unavailable\", \"session working directory is unavailable\");\n\t}\n\tif (!isPathInside(rootReal, cwdReal)) {\n\t\tthrow createConversationOpenError(\n\t\t\t\"session_unavailable\",\n\t\t\t\"stored session working directory is outside the authorized workspace\",\n\t\t);\n\t}\n\tconst relativePath = relative(rootReal, cwdReal).split(sep).join(\"/\");\n\treturn {\n\t\tabsolutePath: cwdReal,\n\t\t...(relativePath.length === 0 ? {} : { relativePath }),\n\t};\n}\n\nexport class IntegratedRuntimeRegistry {\n\tprivate readonly options: IntegratedRuntimeRegistryOptions;\n\tprivate readonly entries = new Map<string, IntegratedRuntimeEntry>();\n\n\tconstructor(options: IntegratedRuntimeRegistryOptions) {\n\t\tthis.options = options;\n\t}\n\n\t/** The conversation runtime key: one runtime per (workspaceName, sessionId). */\n\tgetRegistryKey(workspaceName: string, sessionId: string): string {\n\t\treturn `${workspaceName}\\0${sessionId}`;\n\t}\n\n\tget size(): number {\n\t\treturn this.entries.size;\n\t}\n\n\tvalues(): IntegratedRuntimeEntry[] {\n\t\treturn Array.from(this.entries.values());\n\t}\n\n\tfindOwner(workspaceName: string, sessionId: string): IntegratedRuntimeEntry | undefined {\n\t\tconst direct = this.entries.get(this.getRegistryKey(workspaceName, sessionId));\n\t\tif (direct) {\n\t\t\treturn direct;\n\t\t}\n\t\tfor (const entry of this.entries.values()) {\n\t\t\tif (entry.workspaceName === workspaceName && entry.previousSessionIds.has(sessionId)) {\n\t\t\t\treturn entry;\n\t\t\t}\n\t\t}\n\t\treturn undefined;\n\t}\n\n\tprivate resolveToolPolicy(authorization: IrohRemoteClientAuthorizationSuccess): IrohRemoteRuntimeToolPolicy {\n\t\treturn (\n\t\t\tthis.options.getToolPolicy?.(authorization.workspace, authorization.allowTools) ??\n\t\t\tresolveIrohRemoteRuntimeToolPolicy({\n\t\t\t\tclientAllowTools: authorization.allowTools,\n\t\t\t\tworkspaceAllowTools: this.options.getAllowTools?.(authorization.workspace),\n\t\t\t\tdaemonAllowTools: null,\n\t\t\t})\n\t\t);\n\t}\n\n\tasync getOrCreateEntry(\n\t\thandshake: { hello: IrohRemoteHello; response: IrohRemoteHandshakeSuccess },\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<{\n\t\tentry: IntegratedRuntimeEntry;\n\t\tcreated: boolean;\n\t\tsessionSelection: IntegratedConversationSessionSelection;\n\t}> {\n\t\tconst targetSessionId = getResolvedTargetSessionId(handshake.hello, authorization);\n\t\tif (targetSessionId !== undefined) {\n\t\t\t// One runtime per conversation: any paired client attaches to an existing\n\t\t\t// runtime for the target (conversation_in_use is retired; single-user model).\n\t\t\tconst existing = this.findOwner(authorization.workspace.name, targetSessionId);\n\t\t\tif (existing) {\n\t\t\t\tif (!shouldReplaceIrohRemoteIntegratedRuntimeForAuthorization(authorization)) {\n\t\t\t\t\tconst attachingPolicy = this.resolveToolPolicy(authorization);\n\t\t\t\t\tif (!isIrohRemoteRuntimeToolPolicyWithin(existing.toolPolicy, attachingPolicy)) {\n\t\t\t\t\t\tthrow createConversationOpenError(\n\t\t\t\t\t\t\t\"conversation_in_use\",\n\t\t\t\t\t\t\t\"conversation is using tools outside this client's persisted grant\",\n\t\t\t\t\t\t\t{ workspace: authorization.workspace.name, sessionId: targetSessionId },\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t\t// Reattach recognized: cancel the pending detached-runtime TTL sweep\n\t\t\t\t\t// synchronously, before the caller's multi-await commit window. The\n\t\t\t\t\t// broker flips to daemon-active immediately (commitDaemonRuntime) but\n\t\t\t\t\t// attachSubscriber (which normally cancels retention) only runs after\n\t\t\t\t\t// several awaits; if the TTL timer elapsed in that window it would\n\t\t\t\t\t// dispose this very runtime mid-reattach (use-after-dispose + split\n\t\t\t\t\t// lease/registry ownership). detachedAt stays set so attachSubscriber\n\t\t\t\t\t// still logs the reattach and a pre-subscriber failure re-arms retention.\n\t\t\t\t\tthis.cancelRetention(existing);\n\t\t\t\t\tconst requestedSessionId =\n\t\t\t\t\t\thandshake.hello.mode === \"conversation\" && handshake.hello.conversation.target === \"session\"\n\t\t\t\t\t\t\t? targetSessionId\n\t\t\t\t\t\t\t: existing.sessionId;\n\t\t\t\t\treturn {\n\t\t\t\t\t\tentry: existing,\n\t\t\t\t\t\tcreated: false,\n\t\t\t\t\t\tsessionSelection: createConversationSessionSelectionFromEntry(existing, requestedSessionId),\n\t\t\t\t\t};\n\t\t\t\t}\n\t\t\t\tawait this.stopEntry(existing, \"fresh_pairing_replaced_runtime\");\n\t\t\t}\n\t\t}\n\t\treturn this.createEntry(handshake, authorization);\n\t}\n\n\tprivate async resolveInitialWorkingDirectory(options: {\n\t\tworkspace: IrohRemoteWorkspace;\n\t\trootPath: string;\n\t\tworkingDirectory?: string;\n\t\tworktree?: IrohRemoteWorkspaceWorktree;\n\t}): Promise<WorkspaceDirectoryResolution> {\n\t\tif (this.options.resolveWorkingDirectory) {\n\t\t\treturn this.options.resolveWorkingDirectory(options);\n\t\t}\n\t\tconst resolved = await resolveWorkspaceDirectory(options.rootPath, options.workingDirectory);\n\t\tif (!resolved.ok) {\n\t\t\tthrow createConversationOpenError(\"invalid_conversation_target\", resolved.error, {\n\t\t\t\tworkspace: options.workspace.name,\n\t\t\t});\n\t\t}\n\t\treturn resolved.value;\n\t}\n\n\tprivate async createEntry(\n\t\thandshake: { hello: IrohRemoteHello },\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<{\n\t\tentry: IntegratedRuntimeEntry;\n\t\tcreated: boolean;\n\t\tsessionSelection: IntegratedConversationSessionSelection;\n\t}> {\n\t\tlet runtime: AgentSessionRuntime | undefined;\n\t\tlet sessionSelection: IntegratedConversationSessionSelection | undefined;\n\t\ttry {\n\t\t\t// Resolve any worktree binding first: explicit worktreeId on \"new\", or a\n\t\t\t// persisted sessionId binding on resume. Trust and allowTools stay pinned\n\t\t\t// to the PARENT workspace; only cwd changes. The session dir is ALWAYS\n\t\t\t// parent-keyed so worktree sessions stay listed under the workspace.\n\t\t\tconst worktree = await this.options.resolveWorktree?.(\n\t\t\t\tauthorization.workspace.name,\n\t\t\t\thandshake.hello,\n\t\t\t\tgetResolvedTargetSessionId(handshake.hello, authorization),\n\t\t\t);\n\t\t\tconst rootPath = worktree?.path ?? authorization.workspace.path;\n\t\t\tconst requestedWorkingDirectory = getRequestedWorkingDirectory(handshake.hello);\n\t\t\tconst initialDirectory = await this.resolveInitialWorkingDirectory({\n\t\t\t\tworkspace: authorization.workspace,\n\t\t\t\trootPath,\n\t\t\t\tworkingDirectory: requestedWorkingDirectory,\n\t\t\t\t...(worktree === undefined ? {} : { worktree }),\n\t\t\t});\n\t\t\tconst toolPolicy = this.resolveToolPolicy(authorization);\n\t\t\tconst runtimeResult = await (this.options.createRuntime ?? createIrohRemoteAgentRuntimeWithSessionSelection)({\n\t\t\t\tagentDir: this.options.agentDir,\n\t\t\t\ttoolPolicy,\n\t\t\t\tconversationTarget: createIrohRuntimeConversationTarget(handshake.hello, authorization),\n\t\t\t\tcwd: initialDirectory.absolutePath,\n\t\t\t\tprojectCwd: rootPath,\n\t\t\t\tsessionDir: getDefaultSessionDir(authorization.workspace.path, this.options.agentDir),\n\t\t\t\tvalidateCwd: async (cwd) => {\n\t\t\t\t\tawait resolveRuntimeWorkingDirectory(rootPath, cwd);\n\t\t\t\t},\n\t\t\t\tonSubagentRuntimeCreated: (event) => this.registerSubagentRuntime(event, authorization),\n\t\t\t\tprofile: this.options.profile,\n\t\t\t\tprojectTrusted: this.options.getProjectTrustedForWorkspace(authorization.workspace),\n\t\t\t});\n\t\t\truntime = runtimeResult.runtime;\n\t\t\tsessionSelection = runtimeResult.sessionSelection;\n\t\t\tconst runtimeDirectory = await resolveRuntimeWorkingDirectory(rootPath, runtime.cwd);\n\t\t\tconst remoteWorkingDirectory =\n\t\t\t\tworktree === undefined\n\t\t\t\t\t? runtimeDirectory.relativePath\n\t\t\t\t\t: getRegisteredWorkingDirectoryForWorktree(worktree, runtimeDirectory.relativePath);\n\t\t\tconst echoedWorkingDirectory =\n\t\t\t\thandshake.hello.mode === \"conversation\" &&\n\t\t\t\thandshake.hello.conversation.target === \"new\" &&\n\t\t\t\trequestedWorkingDirectory === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: remoteWorkingDirectory;\n\t\t\tconst sessionId = runtime.session.sessionId;\n\t\t\tconst owner = this.findOwner(authorization.workspace.name, sessionId);\n\t\t\tif (owner) {\n\t\t\t\tawait cleanupUncommittedRuntime(runtime, sessionSelection);\n\t\t\t\tif (!isIrohRemoteRuntimeToolPolicyWithin(owner.toolPolicy, toolPolicy)) {\n\t\t\t\t\tthrow createConversationOpenError(\n\t\t\t\t\t\t\"conversation_in_use\",\n\t\t\t\t\t\t\"conversation is using tools outside this client's persisted grant\",\n\t\t\t\t\t\t{ workspace: authorization.workspace.name, sessionId },\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\treturn {\n\t\t\t\t\tentry: owner,\n\t\t\t\t\tcreated: false,\n\t\t\t\t\tsessionSelection: createConversationSessionSelectionFromEntry(owner),\n\t\t\t\t};\n\t\t\t}\n\t\t\tconst entry = this.createEntryRecord({\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspaceName: authorization.workspace.name,\n\t\t\t\tsessionId,\n\t\t\t\truntime,\n\t\t\t\t...(worktree === undefined\n\t\t\t\t\t? {}\n\t\t\t\t\t: {\n\t\t\t\t\t\t\tworktreeId: worktree.id,\n\t\t\t\t\t\t\tworktreePath: worktree.path,\n\t\t\t\t\t\t\t...(worktree.sourceRootRelativePath === undefined\n\t\t\t\t\t\t\t\t? {}\n\t\t\t\t\t\t\t\t: { worktreeSourceRootRelativePath: worktree.sourceRootRelativePath }),\n\t\t\t\t\t\t}),\n\t\t\t\t...(echoedWorkingDirectory === undefined ? {} : { workingDirectory: echoedWorkingDirectory }),\n\t\t\t\ttoolPolicy,\n\t\t\t});\n\t\t\tif (\n\t\t\t\tworktree !== undefined &&\n\t\t\t\tsessionSelection.kind === \"created\" &&\n\t\t\t\thandshake.hello.mode === \"conversation\" &&\n\t\t\t\thandshake.hello.conversation.target === \"new\"\n\t\t\t) {\n\t\t\t\tawait this.options.bindWorktreeSession?.(authorization.workspace.name, worktree.id, sessionId);\n\t\t\t}\n\t\t\treturn { entry, created: true, sessionSelection };\n\t\t} catch (error) {\n\t\t\tif (runtime) {\n\t\t\t\tawait cleanupUncommittedRuntime(runtime, sessionSelection);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tprivate createEntryRecord(options: {\n\t\tclientNodeId: string;\n\t\tworkspaceName: string;\n\t\tsessionId: string;\n\t\truntime: AgentSessionRuntime;\n\t\tparentSessionId?: string;\n\t\tsubagentId?: string;\n\t\tworktreeId?: string;\n\t\tworktreePath?: string;\n\t\tworktreeSourceRootRelativePath?: string;\n\t\tworkingDirectory?: string;\n\t\ttoolPolicy: IrohRemoteRuntimeToolPolicy;\n\t}): IntegratedRuntimeEntry {\n\t\treturn {\n\t\t\tkey: this.getRegistryKey(options.workspaceName, options.sessionId),\n\t\t\tclientNodeId: options.clientNodeId,\n\t\t\tworkspaceName: options.workspaceName,\n\t\t\tsessionId: options.sessionId,\n\t\t\truntime: options.runtime,\n\t\t\trecordedSessionId: options.sessionId,\n\t\t\tpreviousSessionIds: new Set(),\n\t\t\tactiveWorkflows: new Map(),\n\t\t\tsubscribers: new Set(),\n\t\t\tdetachedAt: undefined,\n\t\t\tdetachedRuntimeRetention: undefined,\n\t\t\t...(options.parentSessionId === undefined ? {} : { parentSessionId: options.parentSessionId }),\n\t\t\t...(options.subagentId === undefined ? {} : { subagentId: options.subagentId }),\n\t\t\t...(options.worktreeId === undefined ? {} : { worktreeId: options.worktreeId }),\n\t\t\t...(options.worktreePath === undefined ? {} : { worktreePath: options.worktreePath }),\n\t\t\t...(options.worktreeSourceRootRelativePath === undefined\n\t\t\t\t? {}\n\t\t\t\t: { worktreeSourceRootRelativePath: options.worktreeSourceRootRelativePath }),\n\t\t\t...(options.workingDirectory === undefined ? {} : { workingDirectory: options.workingDirectory }),\n\t\t\ttoolPolicy: {\n\t\t\t\ttools: [...options.toolPolicy.tools],\n\t\t\t\tallowUnlistedExtensionTools: options.toolPolicy.allowUnlistedExtensionTools,\n\t\t\t},\n\t\t};\n\t}\n\n\tprivate async registerSubagentRuntime(\n\t\tevent: IrohRemoteSubagentRuntimeCreatedEvent,\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<void> {\n\t\tconst parentEntry = this.findOwner(authorization.workspace.name, event.parentSessionId);\n\t\tif (!parentEntry) {\n\t\t\tthrow new Error(`Parent runtime is not active for subagent session ${event.sessionId}`);\n\t\t}\n\t\tconst owner = this.findOwner(authorization.workspace.name, event.sessionId);\n\t\tif (owner) {\n\t\t\treturn;\n\t\t}\n\t\tconst entry = this.createEntryRecord({\n\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\tworkspaceName: authorization.workspace.name,\n\t\t\tsessionId: event.sessionId,\n\t\t\truntime: event.runtime,\n\t\t\tparentSessionId: event.parentSessionId,\n\t\t\tsubagentId: event.id,\n\t\t\ttoolPolicy: parentEntry.toolPolicy,\n\t\t});\n\t\tentry.detachedAt = Date.now();\n\t\tthis.entries.set(entry.key, entry);\n\t\tawait this.logEntryAudit(entry, \"remote_runtime_started\", {\n\t\t\tparentSessionId: event.parentSessionId,\n\t\t\treason: \"subagent_created\",\n\t\t\tsubagentId: event.id,\n\t\t});\n\t\tthis.scheduleRetention(entry, \"subagent_created\");\n\t}\n\n\tasync commitEntry(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tsessionSelection: IntegratedConversationSessionSelection,\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<void> {\n\t\tconst owner = this.findOwner(authorization.workspace.name, entry.sessionId);\n\t\tif (owner && owner !== entry) {\n\t\t\t// Two attaches raced to create the same conversation runtime; the loser\n\t\t\t// retries and attaches to the winner.\n\t\t\tthrow createConversationOpenError(\"duplicate_conversation_connection\", \"conversation runtime already active\", {\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsessionId: entry.sessionId,\n\t\t\t\tretryAfterMs: 500,\n\t\t\t});\n\t\t}\n\n\t\tconst inserted = this.entries.get(entry.key) !== entry;\n\t\tif (inserted) {\n\t\t\tthis.entries.set(entry.key, entry);\n\t\t}\n\n\t\ttry {\n\t\t\tif (entry.parentSessionId === undefined) {\n\t\t\t\tawait this.options.setClientLastSessionId(\n\t\t\t\t\tauthorization.client.nodeId,\n\t\t\t\t\tauthorization.workspace.name,\n\t\t\t\t\tentry.sessionId,\n\t\t\t\t);\n\t\t\t}\n\t\t\tawait this.logSessionSelection(sessionSelection, authorization);\n\t\t\tif (inserted) {\n\t\t\t\tawait this.logAudit({\n\t\t\t\t\ttype: \"runtime_started\",\n\t\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\t\tsuccess: true,\n\t\t\t\t\tdetails: this.getEntryDetails(entry),\n\t\t\t\t});\n\t\t\t\tawait this.logEntryAudit(entry, \"remote_runtime_started\", { reason: \"created\" });\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tif (inserted && this.entries.get(entry.key) === entry) {\n\t\t\t\tthis.entries.delete(entry.key);\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync cleanupUncommittedEntry(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tsessionSelection: IntegratedConversationSessionSelection | undefined,\n\t): Promise<void> {\n\t\tif (this.entries.get(entry.key) === entry) {\n\t\t\tthis.entries.delete(entry.key);\n\t\t}\n\t\tthis.cancelRetention(entry);\n\t\tentry.subscribers.clear();\n\t\tawait cleanupUncommittedRuntime(entry.runtime, sessionSelection);\n\t}\n\n\tasync attachSubscriber(entry: IntegratedRuntimeEntry): Promise<IntegratedRuntimeSubscriber> {\n\t\tconst wasDetached = entry.subscribers.size === 0 && entry.detachedAt !== undefined;\n\t\tthis.cancelRetention(entry);\n\t\tconst subscriber: IntegratedRuntimeSubscriber = {\n\t\t\tid: `subscriber-${++integratedRuntimeSubscriberSequence}`,\n\t\t\tattachedAt: Date.now(),\n\t\t};\n\t\tentry.subscribers.add(subscriber);\n\t\tif (wasDetached) {\n\t\t\tentry.detachedAt = undefined;\n\t\t\tawait this.logEntryAudit(entry, \"remote_runtime_reattached\", {\n\t\t\t\treason: \"subscriber_attached\",\n\t\t\t\tsubscriberId: subscriber.id,\n\t\t\t});\n\t\t}\n\t\tawait this.logEntryAudit(entry, \"remote_subscriber_attached\", { subscriberId: subscriber.id });\n\t\treturn subscriber;\n\t}\n\n\tasync detachSubscriber(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tsubscriber: IntegratedRuntimeSubscriber,\n\t\treason: string,\n\t\terror?: unknown,\n\t): Promise<void> {\n\t\tif (!entry.subscribers.delete(subscriber)) {\n\t\t\treturn;\n\t\t}\n\t\tconst errorMessage = error instanceof Error ? error.message : error ? String(error) : undefined;\n\t\tawait this.logEntryAudit(\n\t\t\tentry,\n\t\t\t\"remote_subscriber_detached\",\n\t\t\t{ reason, subscriberId: subscriber.id },\n\t\t\terrorMessage === undefined,\n\t\t\terrorMessage,\n\t\t);\n\t\tif (entry.subscribers.size > 0) {\n\t\t\treturn;\n\t\t}\n\t\tentry.detachedAt = Date.now();\n\t\tawait this.logEntryAudit(entry, \"remote_runtime_detached\", { detachedAt: entry.detachedAt, reason });\n\t\tthis.scheduleRetention(entry, reason);\n\t}\n\n\tasync detachWithoutSubscriber(entry: IntegratedRuntimeEntry, reason: string): Promise<void> {\n\t\tif (this.entries.get(entry.key) !== entry || entry.subscribers.size > 0) {\n\t\t\treturn;\n\t\t}\n\t\tif (entry.detachedAt !== undefined) {\n\t\t\t// Already detached. A reattach that cancelled retention but then failed\n\t\t\t// before attachSubscriber ran can leave a detached entry with no timer;\n\t\t\t// re-arm so it is still swept rather than lingering forever. Honor the\n\t\t\t// ORIGINAL detach deadline (remaining TTL from detachedAt) instead of a\n\t\t\t// fresh full TTL, so repeated reconnect-then-abort cycles cannot keep\n\t\t\t// resetting the retention clock.\n\t\t\tif (!entry.detachedRuntimeRetention) {\n\t\t\t\tconst remainingTtlMs = Math.max(0, this.options.detachedRuntimeTtlMs() - (Date.now() - entry.detachedAt));\n\t\t\t\tthis.scheduleRetention(entry, reason, remainingTtlMs);\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\t\tentry.detachedAt = Date.now();\n\t\tawait this.logEntryAudit(entry, \"remote_runtime_detached\", { detachedAt: entry.detachedAt, reason });\n\t\tthis.scheduleRetention(entry, reason);\n\t}\n\n\tasync stopEntry(entry: IntegratedRuntimeEntry, reason: string): Promise<void> {\n\t\tif (this.entries.get(entry.key) !== entry) {\n\t\t\t// Stale reference: the key may now belong to a replacement runtime, and\n\t\t\t// deleting by key alone would evict that runtime from the registry while\n\t\t\t// leaving it running unmanaged.\n\t\t\treturn;\n\t\t}\n\t\tthis.cancelRetention(entry);\n\t\tthis.entries.delete(entry.key);\n\t\tentry.subscribers.clear();\n\t\tentry.activeWorkflows.clear();\n\t\tentry.detachedAt = undefined;\n\t\tconst wasActive = entry.runtime.session.isBusy;\n\t\tconst removedLiveActivityCount = await this.options.stateManager.removeClientLiveActivitiesForSession(\n\t\t\tentry.clientNodeId,\n\t\t\tentry.workspaceName,\n\t\t\tentry.sessionId,\n\t\t);\n\t\tlet stopSuccess = true;\n\t\tlet stopError: string | undefined;\n\t\ttry {\n\t\t\tawait entry.runtime.dispose();\n\t\t} catch (error) {\n\t\t\tstopSuccess = false;\n\t\t\tstopError = error instanceof Error ? error.message : String(error);\n\t\t}\n\t\tawait this.logAudit({\n\t\t\ttype: \"runtime_stopped\",\n\t\t\tclientNodeId: entry.clientNodeId,\n\t\t\tworkspace: entry.workspaceName,\n\t\t\tsuccess: stopSuccess,\n\t\t\terror: stopError,\n\t\t\tdetails: this.getEntryDetails(entry, { active: wasActive, reason, removedLiveActivityCount }),\n\t\t});\n\t\tawait this.logEntryAudit(\n\t\t\tentry,\n\t\t\t\"remote_runtime_stopped\",\n\t\t\t{ active: wasActive, reason, removedLiveActivityCount },\n\t\t\tstopSuccess,\n\t\t\tstopError,\n\t\t);\n\t\tthis.options.onRuntimeDisposed?.(entry, reason);\n\t}\n\n\tasync stopAll(reason: string): Promise<void> {\n\t\tfor (const entry of this.values()) {\n\t\t\tawait this.stopEntry(entry, reason);\n\t\t}\n\t}\n\n\tasync stopForClient(clientNodeId: string, reason: string): Promise<number> {\n\t\tlet stoppedCount = 0;\n\t\tfor (const entry of this.values()) {\n\t\t\tif (entry.clientNodeId !== clientNodeId) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tawait this.stopEntry(entry, reason);\n\t\t\tstoppedCount++;\n\t\t}\n\t\treturn stoppedCount;\n\t}\n\n\tasync stopForWorkspace(\n\t\tworkspaceName: string,\n\t\treason: string,\n\t\texcludeEntry?: IntegratedRuntimeEntry,\n\t): Promise<number> {\n\t\tlet stoppedCount = 0;\n\t\tfor (const entry of this.values()) {\n\t\t\tif (entry.workspaceName !== workspaceName || entry === excludeEntry) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tawait this.stopEntry(entry, reason);\n\t\t\tstoppedCount++;\n\t\t}\n\t\treturn stoppedCount;\n\t}\n\n\tasync stopForClientWorkspace(clientNodeId: string, workspaceName: string, reason: string): Promise<number> {\n\t\tlet stoppedCount = 0;\n\t\tfor (const entry of this.values()) {\n\t\t\tif (entry.clientNodeId !== clientNodeId || entry.workspaceName !== workspaceName) {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tawait this.stopEntry(entry, reason);\n\t\t\tstoppedCount++;\n\t\t}\n\t\treturn stoppedCount;\n\t}\n\n\tasync handleSessionChanged(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tactiveStreamEntry: IntegratedRuntimeStreamWriter | undefined,\n\t\tsession: { sessionId: string },\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<void> {\n\t\tif (session.sessionId !== entry.sessionId) {\n\t\t\tawait this.rekeyEntry(entry, activeStreamEntry, session.sessionId);\n\t\t}\n\t\tif (session.sessionId === entry.recordedSessionId) {\n\t\t\treturn;\n\t\t}\n\t\tentry.recordedSessionId = session.sessionId;\n\t\tawait this.recordSessionChange(entry, session.sessionId, authorization);\n\t}\n\n\tprivate async rekeyEntry(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tactiveStreamEntry: IntegratedRuntimeStreamWriter | undefined,\n\t\tnextSessionId: string,\n\t): Promise<void> {\n\t\tconst previousSessionId = entry.sessionId;\n\t\tconst previousKey = entry.key;\n\t\tconst nextKey = this.getRegistryKey(entry.workspaceName, nextSessionId);\n\t\tconst existing = this.entries.get(nextKey);\n\t\tif (existing && existing !== entry) {\n\t\t\tawait this.stopEntry(existing, \"session_change_replaced_runtime\");\n\t\t}\n\t\tif (this.entries.get(previousKey) === entry) {\n\t\t\tthis.entries.delete(previousKey);\n\t\t}\n\t\tentry.previousSessionIds.add(previousSessionId);\n\t\tentry.sessionId = nextSessionId;\n\t\tentry.key = nextKey;\n\t\tthis.entries.set(nextKey, entry);\n\t\t// Re-key EVERY stream bound to the old conversation id, not just the one\n\t\t// that drove this session change. Workflow-event fan-out matches streams by\n\t\t// the runtime's current sessionId, so a co-attached device left on the stale\n\t\t// id would be silently dropped from all future events.\n\t\tfor (const stream of this.options.activeStreams.entriesForConversationKey(\n\t\t\tentry.workspaceName,\n\t\t\tpreviousSessionId,\n\t\t)) {\n\t\t\tstream.sessionId = nextSessionId;\n\t\t}\n\t\tif (activeStreamEntry) {\n\t\t\t// Defensive: the driving stream is normally already in the registry, but\n\t\t\t// keep it consistent even if this runs before it was registered.\n\t\t\tactiveStreamEntry.sessionId = nextSessionId;\n\t\t}\n\t\tawait this.logEntryAudit(entry, \"remote_runtime_session_changed\", {\n\t\t\tpreviousSessionId,\n\t\t\tsessionId: nextSessionId,\n\t\t});\n\t\tthis.options.onRuntimeRekeyed?.(entry.workspaceName, previousSessionId, nextSessionId);\n\t}\n\n\tprivate async recordSessionChange(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tsessionId: string,\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<void> {\n\t\tif (entry.parentSessionId !== undefined) {\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"session_changed\",\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: {\n\t\t\t\t\treason: \"remote_rpc_session_change\",\n\t\t\t\t\tsessionId,\n\t\t\t\t\tparentSessionId: entry.parentSessionId,\n\t\t\t\t\t...(entry.subagentId === undefined ? {} : { subagentId: entry.subagentId }),\n\t\t\t\t\tlastSessionUpdated: false,\n\t\t\t\t},\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\n\t\ttry {\n\t\t\tconst client = await this.options.setClientLastSessionId(\n\t\t\t\tauthorization.client.nodeId,\n\t\t\t\tauthorization.workspace.name,\n\t\t\t\tsessionId,\n\t\t\t);\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"session_changed\",\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsuccess: client !== undefined,\n\t\t\t\terror: client ? undefined : \"client not found\",\n\t\t\t\tdetails: { reason: \"remote_rpc_session_change\", sessionId },\n\t\t\t});\n\t\t} catch (error) {\n\t\t\tawait this.logAudit({\n\t\t\t\ttype: \"session_changed\",\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\tsuccess: false,\n\t\t\t\terror: error instanceof Error ? error.message : String(error),\n\t\t\t\tdetails: { reason: \"remote_rpc_session_change\", sessionId },\n\t\t\t});\n\t\t}\n\t}\n\n\t// ==========================================================================\n\t// Workflow event replay\n\t// ==========================================================================\n\n\trecordWorkflowEvent(entry: IntegratedRuntimeEntry, event: Record<string, unknown>): void {\n\t\tconst workflowId = getWorkflowEventId(event);\n\t\tif (!workflowId) {\n\t\t\treturn;\n\t\t}\n\t\tif (event.type === \"workflow_start\" || event.type === \"workflow_update\") {\n\t\t\tconst state = entry.activeWorkflows.get(workflowId) ?? { workflowEvent: undefined, activeTools: new Map() };\n\t\t\tstate.workflowEvent = event;\n\t\t\tentry.activeWorkflows.set(workflowId, state);\n\t\t\treturn;\n\t\t}\n\t\tif (event.type === \"workflow_end\") {\n\t\t\tentry.activeWorkflows.delete(workflowId);\n\t\t\treturn;\n\t\t}\n\t\tif (event.type === \"tool_execution_start\") {\n\t\t\tconst toolCallId = getWorkflowToolCallId(event);\n\t\t\tif (!toolCallId) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst state = entry.activeWorkflows.get(workflowId) ?? { workflowEvent: undefined, activeTools: new Map() };\n\t\t\tstate.activeTools.set(toolCallId, event);\n\t\t\tentry.activeWorkflows.set(workflowId, state);\n\t\t\treturn;\n\t\t}\n\t\tif (event.type === \"tool_execution_end\") {\n\t\t\tconst toolCallId = getWorkflowToolCallId(event);\n\t\t\tif (!toolCallId) {\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tentry.activeWorkflows.get(workflowId)?.activeTools.delete(toolCallId);\n\t\t}\n\t}\n\n\tasync handleWorkflowEvent(\n\t\tentry: IntegratedRuntimeEntry,\n\t\tevent: Record<string, unknown>,\n\t\texcludedActiveStreamEntry: IntegratedRuntimeStreamWriter | undefined,\n\t): Promise<void> {\n\t\tthis.recordWorkflowEvent(entry, event);\n\t\t// Fan out across every co-attached device on this conversation, not just the\n\t\t// runtime creator's clientNodeId — the runtime is shared by (workspace, session),\n\t\t// so a second paired device must also receive live workflow events.\n\t\tconst activeStreams = this.options.activeStreams.entriesForConversationKey(entry.workspaceName, entry.sessionId);\n\t\tawait Promise.allSettled(\n\t\t\tactiveStreams\n\t\t\t\t.filter((activeStream) => activeStream !== excludedActiveStreamEntry && activeStream.write)\n\t\t\t\t.map((activeStream) => Promise.resolve(activeStream.write?.(event))),\n\t\t);\n\t}\n\n\tasync replayWorkflowEvents(\n\t\tactiveStreamEntry: IntegratedRuntimeStreamWriter,\n\t\tentry: IntegratedRuntimeEntry,\n\t): Promise<void> {\n\t\tfor (const state of entry.activeWorkflows.values()) {\n\t\t\tif (state.workflowEvent) {\n\t\t\t\tawait Promise.resolve(activeStreamEntry.write?.(state.workflowEvent)).catch(() => {});\n\t\t\t}\n\t\t\tfor (const toolEvent of state.activeTools.values()) {\n\t\t\t\tawait Promise.resolve(activeStreamEntry.write?.(toolEvent)).catch(() => {});\n\t\t\t}\n\t\t}\n\t}\n\n\t// ==========================================================================\n\t// Retention\n\t// ==========================================================================\n\n\tcancelRetention(entry: IntegratedRuntimeEntry): void {\n\t\tif (!entry.detachedRuntimeRetention) {\n\t\t\treturn;\n\t\t}\n\t\tentry.detachedRuntimeRetention.cancel();\n\t\tentry.detachedRuntimeRetention = undefined;\n\t}\n\n\tisDetached(entry: IntegratedRuntimeEntry): boolean {\n\t\treturn this.entries.get(entry.key) === entry && entry.subscribers.size === 0 && entry.detachedAt !== undefined;\n\t}\n\n\tscheduleRetention(entry: IntegratedRuntimeEntry, detachReason: string, ttlOverrideMs?: number): void {\n\t\tthis.cancelRetention(entry);\n\t\t// A re-arm for an already-detached entry (reattach cancelled retention then\n\t\t// aborted before attach) honors the ORIGINAL detach deadline via an override\n\t\t// rather than restarting a full TTL, so a flaky reconnect-then-abort loop\n\t\t// cannot keep resetting the clock and pin a detached runtime open forever.\n\t\tconst ttlMs = ttlOverrideMs ?? this.options.detachedRuntimeTtlMs();\n\t\tconst handle = scheduleDetachedRuntimeRetention({\n\t\t\tttlMs,\n\t\t\tisDetached: () => this.isDetached(entry),\n\t\t\tisActive: () => entry.runtime.session.isBusy,\n\t\t\twaitForIdle: () => entry.runtime.session.waitForIdle(),\n\t\t\tonExpire: async () => {\n\t\t\t\tif (!this.isDetached(entry) || entry.runtime.session.isBusy) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait this.logEntryAudit(entry, \"remote_runtime_retention_expired\", {\n\t\t\t\t\tdetachedAt: entry.detachedAt,\n\t\t\t\t\tdetachReason,\n\t\t\t\t\treason: \"detached_runtime_ttl_expired\",\n\t\t\t\t\tttlMs,\n\t\t\t\t});\n\t\t\t\t// A reattach handshake can commit during the audit-write await above,\n\t\t\t\t// clearing detachedAt / adding a subscriber, or cancel and replace this\n\t\t\t\t// retention. Re-check (and confirm this retention is still the active\n\t\t\t\t// one) before disposing, so the sweep never tears down a runtime that\n\t\t\t\t// was just reattached.\n\t\t\t\tif (!this.isDetached(entry) || entry.runtime.session.isBusy || entry.detachedRuntimeRetention !== handle) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait this.stopEntry(entry, \"detached_runtime_ttl_expired\");\n\t\t\t},\n\t\t\tonError: (error) => {\n\t\t\t\tvoid this.logEntryAudit(\n\t\t\t\t\tentry,\n\t\t\t\t\t\"remote_runtime_retention_expired\",\n\t\t\t\t\t{\n\t\t\t\t\t\tdetachedAt: entry.detachedAt,\n\t\t\t\t\t\tdetachReason,\n\t\t\t\t\t\treason: \"detached_runtime_ttl_error\",\n\t\t\t\t\t\tttlMs,\n\t\t\t\t\t},\n\t\t\t\t\tfalse,\n\t\t\t\t\terror instanceof Error ? error.message : String(error),\n\t\t\t\t);\n\t\t\t},\n\t\t});\n\t\tentry.detachedRuntimeRetention = handle;\n\t}\n\n\t// ==========================================================================\n\t// Audit helpers\n\t// ==========================================================================\n\n\tgetEntryDetails(entry: IntegratedRuntimeEntry, extraDetails: Record<string, unknown> = {}): Record<string, unknown> {\n\t\treturn {\n\t\t\truntime: \"integrated-volt\",\n\t\t\tsessionId: entry.sessionId,\n\t\t\tsubscriberCount: entry.subscribers.size,\n\t\t\tactive: entry.runtime.session.isBusy,\n\t\t\t...extraDetails,\n\t\t};\n\t}\n\n\tasync logEntryAudit(\n\t\tentry: IntegratedRuntimeEntry,\n\t\ttype: string,\n\t\tdetails: Record<string, unknown> = {},\n\t\tsuccess = true,\n\t\terror?: string,\n\t): Promise<void> {\n\t\tawait this.logAudit({\n\t\t\ttype,\n\t\t\tclientNodeId: entry.clientNodeId,\n\t\t\tworkspace: entry.workspaceName,\n\t\t\tsuccess,\n\t\t\terror,\n\t\t\tdetails: this.getEntryDetails(entry, details),\n\t\t});\n\t}\n\n\tprivate async logSessionSelection(\n\t\tselection: IntegratedConversationSessionSelection,\n\t\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\t): Promise<void> {\n\t\tconst common = {\n\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\tworkspace: authorization.workspace.name,\n\t\t};\n\t\tif (selection.kind === \"resumed\") {\n\t\t\tawait this.logAudit({\n\t\t\t\t...common,\n\t\t\t\ttype: \"session_resumed\",\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: { requestedSessionId: selection.requestedSessionId, sessionId: selection.sessionId },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tif (selection.kind === \"created_after_missing\") {\n\t\t\tawait this.logAudit({\n\t\t\t\t...common,\n\t\t\t\ttype: \"session_missing_on_resume\",\n\t\t\t\tsuccess: false,\n\t\t\t\terror: \"session not found\",\n\t\t\t\tdetails: { requestedSessionId: selection.requestedSessionId },\n\t\t\t});\n\t\t\tawait this.logAudit({\n\t\t\t\t...common,\n\t\t\t\ttype: \"session_created\",\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: { reason: \"missing_on_resume\", sessionId: selection.sessionId },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tif (selection.kind === \"session_rekeyed\") {\n\t\t\tawait this.logAudit({\n\t\t\t\t...common,\n\t\t\t\ttype: \"session_rekeyed\",\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: { requestedSessionId: selection.requestedSessionId, sessionId: selection.sessionId },\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t\tawait this.logAudit({\n\t\t\t...common,\n\t\t\ttype: \"session_created\",\n\t\t\tsuccess: true,\n\t\t\tdetails: { reason: \"new_client_connection\", sessionId: selection.sessionId },\n\t\t});\n\t}\n\n\tprivate async logAudit(event: Parameters<IrohRemoteAuditLogger[\"log\"]>[0]): Promise<void> {\n\t\ttry {\n\t\t\tawait this.options.auditLogger.log(event);\n\t\t} catch {\n\t\t\t// Audit logging is best-effort and must not change remote runtime behavior.\n\t\t}\n\t}\n}\n\nasync function cleanupUncommittedRuntime(\n\truntime: AgentSessionRuntime,\n\tsessionSelection: IntegratedConversationSessionSelection | undefined,\n): Promise<void> {\n\tconst sessionFile = runtime.session.sessionFile;\n\tawait runtime.dispose().catch(() => {});\n\tif (sessionSelection?.kind === \"resumed\") {\n\t\treturn;\n\t}\n\tif (typeof sessionFile === \"string\" && sessionFile.length > 0) {\n\t\tawait rm(sessionFile, { force: true }).catch(() => {});\n\t}\n}\n\nfunction getWorkflowEventId(event: Record<string, unknown>): string | undefined {\n\treturn typeof event.workflowId === \"string\" && event.workflowId.trim() ? event.workflowId.trim() : undefined;\n}\n\nfunction getWorkflowToolCallId(event: Record<string, unknown>): string | undefined {\n\treturn typeof event.toolCallId === \"string\" && event.toolCallId.trim() ? event.toolCallId.trim() : undefined;\n}\n"]}

package/dist/daemon/iroh-native.d.ts

@@ -0,0 +1,76 @@
+import type { IrohBiStreamLike } from "../core/rpc/iroh-transport.ts";
+/**
+ * Minimal structural typings for the @number0/iroh surface the daemon touches.
+ * The native module ships without TypeScript types; these interfaces mirror the
+ * members exercised by the dissolved iroh-host.mjs.
+ */
+export interface IrohNodeIdLike {
+    toString(): string;
+}
+export interface IrohSecretKeyLike {
+    toBytes(): number[];
+}
+export interface IrohEndpointLike {
+    id(): IrohNodeIdLike;
+    addr(): unknown;
+    online(): Promise<void>;
+    close(): Promise<void>;
+    acceptNext(): Promise<IrohIncomingLike | null | undefined>;
+    secretKey(): IrohSecretKeyLike;
+}
+export interface IrohIncomingLike {
+    accept(): Promise<IrohAcceptingLike>;
+    refuse(): Promise<void>;
+}
+export interface IrohAcceptingLike {
+    connect(): Promise<IrohConnectionLike>;
+}
+export interface IrohConnectionLike {
+    remoteId(): IrohNodeIdLike;
+    acceptBi(): Promise<IrohBiStreamLike>;
+    setMaxConcurrentBiStreams(count: bigint): void;
+    close(errorCode: bigint, reason: number[]): void;
+    closed(): Promise<unknown>;
+}
+export interface IrohEndpointBuilderLike {
+    relayMode(mode: unknown): void;
+    secretKey(key: number[]): void;
+    alpns(alpns: number[][]): void;
+    bind(): Promise<IrohEndpointLike>;
+}
+export interface IrohRelayConfigLike {
+    url: string;
+    quicPort?: number;
+    authToken?: string;
+}
+export interface IrohRelayMapLike {
+    insert(config: IrohRelayConfigLike): void;
+}
+export interface IrohModuleLike {
+    Endpoint: {
+        builder(): IrohEndpointBuilderLike;
+    };
+    EndpointTicket: {
+        fromAddr(addr: unknown): {
+            toString(): string;
+        };
+    };
+    RelayMap: {
+        empty(): IrohRelayMapLike;
+    };
+    RelayMode: {
+        disabled(): unknown;
+        custom(map: IrohRelayMapLike): unknown;
+        customFromUrls(urls: string[]): unknown;
+    };
+    presetMinimal(builder: IrohEndpointBuilderLike): void;
+    presetN0(builder: IrohEndpointBuilderLike): void;
+    presetN0DisableRelay(builder: IrohEndpointBuilderLike): void;
+}
+export interface IrohNativeLoadResult {
+    iroh?: IrohModuleLike;
+    error?: unknown;
+}
+export declare function loadIrohModule(): IrohNativeLoadResult;
+export declare function formatIrohLoadError(error: unknown): string;
+//# sourceMappingURL=iroh-native.d.ts.map

package/dist/daemon/iroh-native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iroh-native.d.ts","sourceRoot":"","sources":["../../src/daemon/iroh-native.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAGtE;;;;GAIG;AAEH,MAAM,WAAW,cAAc;IAC9B,QAAQ,IAAI,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IACjC,OAAO,IAAI,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAChC,EAAE,IAAI,cAAc,CAAC;IACrB,IAAI,IAAI,OAAO,CAAC;IAChB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,UAAU,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC3D,SAAS,IAAI,iBAAiB,CAAC;CAC/B;AAED,MAAM,WAAW,gBAAgB;IAChC,MAAM,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IACjC,OAAO,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,IAAI,cAAc,CAAC;IAC3B,QAAQ,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtC,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACjD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACvC,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC;IAC/B,IAAI,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAChC,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE;QAAE,OAAO,IAAI,uBAAuB,CAAA;KAAE,CAAC;IACjD,cAAc,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG;YAAE,QAAQ,IAAI,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACpE,QAAQ,EAAE;QAAE,KAAK,IAAI,gBAAgB,CAAA;KAAE,CAAC;IACxC,SAAS,EAAE;QAAE,QAAQ,IAAI,OAAO,CAAC;QAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC;QAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;KAAE,CAAC;IACpH,aAAa,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,oBAAoB,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;CAC7D;AAED,MAAM,WAAW,oBAAoB;IACpC,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,cAAc,IAAI,oBAAoB,CAMrD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQ1D","sourcesContent":["import type { IrohBiStreamLike } from \"../core/rpc/iroh-transport.ts\";\nimport nativeAdapter from \"../remote/iroh-native-adapter.cjs\";\n\n/**\n * Minimal structural typings for the @number0/iroh surface the daemon touches.\n * The native module ships without TypeScript types; these interfaces mirror the\n * members exercised by the dissolved iroh-host.mjs.\n */\n\nexport interface IrohNodeIdLike {\n\ttoString(): string;\n}\n\nexport interface IrohSecretKeyLike {\n\ttoBytes(): number[];\n}\n\nexport interface IrohEndpointLike {\n\tid(): IrohNodeIdLike;\n\taddr(): unknown;\n\tonline(): Promise<void>;\n\tclose(): Promise<void>;\n\tacceptNext(): Promise<IrohIncomingLike | null | undefined>;\n\tsecretKey(): IrohSecretKeyLike;\n}\n\nexport interface IrohIncomingLike {\n\taccept(): Promise<IrohAcceptingLike>;\n\trefuse(): Promise<void>;\n}\n\nexport interface IrohAcceptingLike {\n\tconnect(): Promise<IrohConnectionLike>;\n}\n\nexport interface IrohConnectionLike {\n\tremoteId(): IrohNodeIdLike;\n\tacceptBi(): Promise<IrohBiStreamLike>;\n\tsetMaxConcurrentBiStreams(count: bigint): void;\n\tclose(errorCode: bigint, reason: number[]): void;\n\tclosed(): Promise<unknown>;\n}\n\nexport interface IrohEndpointBuilderLike {\n\trelayMode(mode: unknown): void;\n\tsecretKey(key: number[]): void;\n\talpns(alpns: number[][]): void;\n\tbind(): Promise<IrohEndpointLike>;\n}\n\nexport interface IrohRelayConfigLike {\n\turl: string;\n\tquicPort?: number;\n\tauthToken?: string;\n}\n\nexport interface IrohRelayMapLike {\n\tinsert(config: IrohRelayConfigLike): void;\n}\n\nexport interface IrohModuleLike {\n\tEndpoint: { builder(): IrohEndpointBuilderLike };\n\tEndpointTicket: { fromAddr(addr: unknown): { toString(): string } };\n\tRelayMap: { empty(): IrohRelayMapLike };\n\tRelayMode: { disabled(): unknown; custom(map: IrohRelayMapLike): unknown; customFromUrls(urls: string[]): unknown };\n\tpresetMinimal(builder: IrohEndpointBuilderLike): void;\n\tpresetN0(builder: IrohEndpointBuilderLike): void;\n\tpresetN0DisableRelay(builder: IrohEndpointBuilderLike): void;\n}\n\nexport interface IrohNativeLoadResult {\n\tiroh?: IrohModuleLike;\n\terror?: unknown;\n}\n\nexport function loadIrohModule(): IrohNativeLoadResult {\n\tconst { iroh, irohLoadError } = nativeAdapter.loadIroh();\n\tif (!iroh) {\n\t\treturn { error: irohLoadError };\n\t}\n\treturn { iroh: iroh as IrohModuleLike };\n}\n\nexport function formatIrohLoadError(error: unknown): string {\n\tconst detail = error instanceof Error ? error.message : error ? String(error) : \"unknown native adapter error\";\n\treturn [\n\t\t\"The optional @number0/iroh native adapter is not available.\",\n\t\t`Native adapter error: ${detail}`,\n\t\t\"Install Volt with optional dependencies enabled for this platform, then retry.\",\n\t\t\"If optional dependencies were omitted, reinstall without `--omit=optional`.\",\n\t].join(\"\\n\");\n}\n"]}

package/dist/daemon/iroh-native.js

@@ -0,0 +1,18 @@
+import nativeAdapter from "../remote/iroh-native-adapter.cjs";
+export function loadIrohModule() {
+    const { iroh, irohLoadError } = nativeAdapter.loadIroh();
+    if (!iroh) {
+        return { error: irohLoadError };
+    }
+    return { iroh: iroh };
+}
+export function formatIrohLoadError(error) {
+    const detail = error instanceof Error ? error.message : error ? String(error) : "unknown native adapter error";
+    return [
+        "The optional @number0/iroh native adapter is not available.",
+        `Native adapter error: ${detail}`,
+        "Install Volt with optional dependencies enabled for this platform, then retry.",
+        "If optional dependencies were omitted, reinstall without `--omit=optional`.",
+    ].join("\n");
+}
+//# sourceMappingURL=iroh-native.js.map

package/dist/daemon/iroh-native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iroh-native.js","sourceRoot":"","sources":["../../src/daemon/iroh-native.ts"],"names":[],"mappings":"AACA,OAAO,aAAa,MAAM,mCAAmC,CAAC;AA0E9D,MAAM,UAAU,cAAc,GAAyB;IACtD,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IACzD,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAsB,EAAE,CAAC;AAAA,CACxC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAU;IAC3D,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;IAC/G,OAAO;QACN,6DAA6D;QAC7D,yBAAyB,MAAM,EAAE;QACjC,gFAAgF;QAChF,6EAA6E;KAC7E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACb","sourcesContent":["import type { IrohBiStreamLike } from \"../core/rpc/iroh-transport.ts\";\nimport nativeAdapter from \"../remote/iroh-native-adapter.cjs\";\n\n/**\n * Minimal structural typings for the @number0/iroh surface the daemon touches.\n * The native module ships without TypeScript types; these interfaces mirror the\n * members exercised by the dissolved iroh-host.mjs.\n */\n\nexport interface IrohNodeIdLike {\n\ttoString(): string;\n}\n\nexport interface IrohSecretKeyLike {\n\ttoBytes(): number[];\n}\n\nexport interface IrohEndpointLike {\n\tid(): IrohNodeIdLike;\n\taddr(): unknown;\n\tonline(): Promise<void>;\n\tclose(): Promise<void>;\n\tacceptNext(): Promise<IrohIncomingLike | null | undefined>;\n\tsecretKey(): IrohSecretKeyLike;\n}\n\nexport interface IrohIncomingLike {\n\taccept(): Promise<IrohAcceptingLike>;\n\trefuse(): Promise<void>;\n}\n\nexport interface IrohAcceptingLike {\n\tconnect(): Promise<IrohConnectionLike>;\n}\n\nexport interface IrohConnectionLike {\n\tremoteId(): IrohNodeIdLike;\n\tacceptBi(): Promise<IrohBiStreamLike>;\n\tsetMaxConcurrentBiStreams(count: bigint): void;\n\tclose(errorCode: bigint, reason: number[]): void;\n\tclosed(): Promise<unknown>;\n}\n\nexport interface IrohEndpointBuilderLike {\n\trelayMode(mode: unknown): void;\n\tsecretKey(key: number[]): void;\n\talpns(alpns: number[][]): void;\n\tbind(): Promise<IrohEndpointLike>;\n}\n\nexport interface IrohRelayConfigLike {\n\turl: string;\n\tquicPort?: number;\n\tauthToken?: string;\n}\n\nexport interface IrohRelayMapLike {\n\tinsert(config: IrohRelayConfigLike): void;\n}\n\nexport interface IrohModuleLike {\n\tEndpoint: { builder(): IrohEndpointBuilderLike };\n\tEndpointTicket: { fromAddr(addr: unknown): { toString(): string } };\n\tRelayMap: { empty(): IrohRelayMapLike };\n\tRelayMode: { disabled(): unknown; custom(map: IrohRelayMapLike): unknown; customFromUrls(urls: string[]): unknown };\n\tpresetMinimal(builder: IrohEndpointBuilderLike): void;\n\tpresetN0(builder: IrohEndpointBuilderLike): void;\n\tpresetN0DisableRelay(builder: IrohEndpointBuilderLike): void;\n}\n\nexport interface IrohNativeLoadResult {\n\tiroh?: IrohModuleLike;\n\terror?: unknown;\n}\n\nexport function loadIrohModule(): IrohNativeLoadResult {\n\tconst { iroh, irohLoadError } = nativeAdapter.loadIroh();\n\tif (!iroh) {\n\t\treturn { error: irohLoadError };\n\t}\n\treturn { iroh: iroh as IrohModuleLike };\n}\n\nexport function formatIrohLoadError(error: unknown): string {\n\tconst detail = error instanceof Error ? error.message : error ? String(error) : \"unknown native adapter error\";\n\treturn [\n\t\t\"The optional @number0/iroh native adapter is not available.\",\n\t\t`Native adapter error: ${detail}`,\n\t\t\"Install Volt with optional dependencies enabled for this platform, then retry.\",\n\t\t\"If optional dependencies were omitted, reinstall without `--omit=optional`.\",\n\t].join(\"\\n\");\n}\n"]}

package/dist/daemon/iroh-resource-guard.d.ts

@@ -0,0 +1,57 @@
+export interface IrohRemoteResourceLimits {
+    maxConnectionTasks: number;
+    maxConnectionsPerNode: number;
+    maxUnauthenticatedConnections: number;
+    maxUnauthenticatedConnectionsPerNode: number;
+    maxActiveStreams: number;
+    maxActiveStreamsPerNode: number;
+    maxConcurrentHandshakes: number;
+    maxConcurrentHandshakesPerNode: number;
+}
+export declare const DEFAULT_IROH_REMOTE_RESOURCE_LIMITS: IrohRemoteResourceLimits;
+export interface IrohRemoteResourceLease {
+    release(): void;
+}
+export type IrohRemoteResourceAdmission = {
+    ok: true;
+    lease: IrohRemoteResourceLease;
+} | {
+    ok: false;
+    scope: "global" | "node";
+    limit: number;
+};
+export interface IrohRemoteResourceSnapshot {
+    connectionTasks: number;
+    nodeConnections: number;
+    unauthenticatedConnections: number;
+    nodeUnauthenticatedConnections: number;
+    activeStreams: number;
+    nodeActiveStreams: number;
+    concurrentHandshakes: number;
+    nodeConcurrentHandshakes: number;
+}
+/**
+ * Synchronous admission accounting for the daemon's Iroh transport. Callers
+ * acquire before starting work and release from a `finally` block. Per-node
+ * maps remove zero-count entries so rotating node ids cannot grow bookkeeping.
+ */
+export declare class IrohRemoteResourceGuard {
+    private readonly limits;
+    private connectionTasks;
+    private unauthenticatedConnections;
+    private activeStreams;
+    private concurrentHandshakes;
+    private readonly unauthenticatedConnectionsByNode;
+    private readonly connectionsByNode;
+    private readonly activeStreamsByNode;
+    private readonly concurrentHandshakesByNode;
+    constructor(limits?: IrohRemoteResourceLimits);
+    tryAcquireConnectionTask(): IrohRemoteResourceAdmission;
+    tryAcquireNodeConnection(nodeId: string): IrohRemoteResourceAdmission;
+    tryAcquireUnauthenticatedConnection(nodeId: string): IrohRemoteResourceAdmission;
+    tryAcquireActiveStream(nodeId: string): IrohRemoteResourceAdmission;
+    tryAcquireHandshake(nodeId: string): IrohRemoteResourceAdmission;
+    snapshot(nodeId: string): IrohRemoteResourceSnapshot;
+    private tryAcquirePerNode;
+}
+//# sourceMappingURL=iroh-resource-guard.d.ts.map

package/dist/daemon/iroh-resource-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iroh-resource-guard.d.ts","sourceRoot":"","sources":["../../src/daemon/iroh-resource-guard.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,wBAAwB;IACxC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,6BAA6B,EAAE,MAAM,CAAC;IACtC,oCAAoC,EAAE,MAAM,CAAC;IAC7C,gBAAgB,EAAE,MAAM,CAAC;IACzB,uBAAuB,EAAE,MAAM,CAAC;IAChC,uBAAuB,EAAE,MAAM,CAAC;IAChC,8BAA8B,EAAE,MAAM,CAAC;CACvC;AAED,eAAO,MAAM,mCAAmC,EAAE,wBASjD,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACvC,OAAO,IAAI,IAAI,CAAC;CAChB;AAED,MAAM,MAAM,2BAA2B,GACpC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,uBAAuB,CAAA;CAAE,GAC5C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,MAAM,WAAW,0BAA0B;IAC1C,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,0BAA0B,EAAE,MAAM,CAAC;IACnC,8BAA8B,EAAE,MAAM,CAAC;IACvC,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,wBAAwB,EAAE,MAAM,CAAC;CACjC;AAuBD;;;;GAIG;AACH,qBAAa,uBAAuB;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;IAClD,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,0BAA0B,CAAK;IACvC,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,oBAAoB,CAAK;IACjC,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAA6B;IAC9E,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA6B;IAC/D,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAA6B;IACjE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA6B;IAExE,YAAY,MAAM,GAAE,wBAA8D,EAKjF;IAED,wBAAwB,IAAI,2BAA2B,CAWtD;IAED,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,2BAA2B,CAiBpE;IAED,mCAAmC,CAAC,MAAM,EAAE,MAAM,GAAG,2BAA2B,CAW/E;IAED,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,2BAA2B,CAWlE;IAED,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,2BAA2B,CAW/D;IAED,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,0BAA0B,CAWnD;IAED,OAAO,CAAC,iBAAiB;CA+BzB","sourcesContent":["export interface IrohRemoteResourceLimits {\n\tmaxConnectionTasks: number;\n\tmaxConnectionsPerNode: number;\n\tmaxUnauthenticatedConnections: number;\n\tmaxUnauthenticatedConnectionsPerNode: number;\n\tmaxActiveStreams: number;\n\tmaxActiveStreamsPerNode: number;\n\tmaxConcurrentHandshakes: number;\n\tmaxConcurrentHandshakesPerNode: number;\n}\n\nexport const DEFAULT_IROH_REMOTE_RESOURCE_LIMITS: IrohRemoteResourceLimits = {\n\tmaxConnectionTasks: 128,\n\tmaxConnectionsPerNode: 16,\n\tmaxUnauthenticatedConnections: 32,\n\tmaxUnauthenticatedConnectionsPerNode: 4,\n\tmaxActiveStreams: 128,\n\tmaxActiveStreamsPerNode: 16,\n\tmaxConcurrentHandshakes: 64,\n\tmaxConcurrentHandshakesPerNode: 16,\n};\n\nexport interface IrohRemoteResourceLease {\n\trelease(): void;\n}\n\nexport type IrohRemoteResourceAdmission =\n\t| { ok: true; lease: IrohRemoteResourceLease }\n\t| { ok: false; scope: \"global\" | \"node\"; limit: number };\n\nexport interface IrohRemoteResourceSnapshot {\n\tconnectionTasks: number;\n\tnodeConnections: number;\n\tunauthenticatedConnections: number;\n\tnodeUnauthenticatedConnections: number;\n\tactiveStreams: number;\n\tnodeActiveStreams: number;\n\tconcurrentHandshakes: number;\n\tnodeConcurrentHandshakes: number;\n}\n\nclass ResourceLease implements IrohRemoteResourceLease {\n\tprivate released = false;\n\tprivate readonly onRelease: () => void;\n\n\tconstructor(onRelease: () => void) {\n\t\tthis.onRelease = onRelease;\n\t}\n\n\trelease(): void {\n\t\tif (this.released) return;\n\t\tthis.released = true;\n\t\tthis.onRelease();\n\t}\n}\n\nfunction assertPositiveInteger(value: number, name: string): void {\n\tif (!Number.isSafeInteger(value) || value <= 0) {\n\t\tthrow new Error(`${name} must be a positive integer`);\n\t}\n}\n\n/**\n * Synchronous admission accounting for the daemon's Iroh transport. Callers\n * acquire before starting work and release from a `finally` block. Per-node\n * maps remove zero-count entries so rotating node ids cannot grow bookkeeping.\n */\nexport class IrohRemoteResourceGuard {\n\tprivate readonly limits: IrohRemoteResourceLimits;\n\tprivate connectionTasks = 0;\n\tprivate unauthenticatedConnections = 0;\n\tprivate activeStreams = 0;\n\tprivate concurrentHandshakes = 0;\n\tprivate readonly unauthenticatedConnectionsByNode = new Map<string, number>();\n\tprivate readonly connectionsByNode = new Map<string, number>();\n\tprivate readonly activeStreamsByNode = new Map<string, number>();\n\tprivate readonly concurrentHandshakesByNode = new Map<string, number>();\n\n\tconstructor(limits: IrohRemoteResourceLimits = DEFAULT_IROH_REMOTE_RESOURCE_LIMITS) {\n\t\tfor (const [name, value] of Object.entries(limits)) {\n\t\t\tassertPositiveInteger(value, name);\n\t\t}\n\t\tthis.limits = { ...limits };\n\t}\n\n\ttryAcquireConnectionTask(): IrohRemoteResourceAdmission {\n\t\tif (this.connectionTasks >= this.limits.maxConnectionTasks) {\n\t\t\treturn { ok: false, scope: \"global\", limit: this.limits.maxConnectionTasks };\n\t\t}\n\t\tthis.connectionTasks++;\n\t\treturn {\n\t\t\tok: true,\n\t\t\tlease: new ResourceLease(() => {\n\t\t\t\tthis.connectionTasks--;\n\t\t\t}),\n\t\t};\n\t}\n\n\ttryAcquireNodeConnection(nodeId: string): IrohRemoteResourceAdmission {\n\t\tconst nodeCount = this.connectionsByNode.get(nodeId) ?? 0;\n\t\tif (nodeCount >= this.limits.maxConnectionsPerNode) {\n\t\t\treturn { ok: false, scope: \"node\", limit: this.limits.maxConnectionsPerNode };\n\t\t}\n\t\tthis.connectionsByNode.set(nodeId, nodeCount + 1);\n\t\treturn {\n\t\t\tok: true,\n\t\t\tlease: new ResourceLease(() => {\n\t\t\t\tconst currentNodeCount = this.connectionsByNode.get(nodeId) ?? 0;\n\t\t\t\tif (currentNodeCount <= 1) {\n\t\t\t\t\tthis.connectionsByNode.delete(nodeId);\n\t\t\t\t} else {\n\t\t\t\t\tthis.connectionsByNode.set(nodeId, currentNodeCount - 1);\n\t\t\t\t}\n\t\t\t}),\n\t\t};\n\t}\n\n\ttryAcquireUnauthenticatedConnection(nodeId: string): IrohRemoteResourceAdmission {\n\t\treturn this.tryAcquirePerNode(\n\t\t\tnodeId,\n\t\t\t() => this.unauthenticatedConnections,\n\t\t\tthis.unauthenticatedConnectionsByNode,\n\t\t\tthis.limits.maxUnauthenticatedConnections,\n\t\t\tthis.limits.maxUnauthenticatedConnectionsPerNode,\n\t\t\t(value) => {\n\t\t\t\tthis.unauthenticatedConnections = value;\n\t\t\t},\n\t\t);\n\t}\n\n\ttryAcquireActiveStream(nodeId: string): IrohRemoteResourceAdmission {\n\t\treturn this.tryAcquirePerNode(\n\t\t\tnodeId,\n\t\t\t() => this.activeStreams,\n\t\t\tthis.activeStreamsByNode,\n\t\t\tthis.limits.maxActiveStreams,\n\t\t\tthis.limits.maxActiveStreamsPerNode,\n\t\t\t(value) => {\n\t\t\t\tthis.activeStreams = value;\n\t\t\t},\n\t\t);\n\t}\n\n\ttryAcquireHandshake(nodeId: string): IrohRemoteResourceAdmission {\n\t\treturn this.tryAcquirePerNode(\n\t\t\tnodeId,\n\t\t\t() => this.concurrentHandshakes,\n\t\t\tthis.concurrentHandshakesByNode,\n\t\t\tthis.limits.maxConcurrentHandshakes,\n\t\t\tthis.limits.maxConcurrentHandshakesPerNode,\n\t\t\t(value) => {\n\t\t\t\tthis.concurrentHandshakes = value;\n\t\t\t},\n\t\t);\n\t}\n\n\tsnapshot(nodeId: string): IrohRemoteResourceSnapshot {\n\t\treturn {\n\t\t\tconnectionTasks: this.connectionTasks,\n\t\t\tnodeConnections: this.connectionsByNode.get(nodeId) ?? 0,\n\t\t\tunauthenticatedConnections: this.unauthenticatedConnections,\n\t\t\tnodeUnauthenticatedConnections: this.unauthenticatedConnectionsByNode.get(nodeId) ?? 0,\n\t\t\tactiveStreams: this.activeStreams,\n\t\t\tnodeActiveStreams: this.activeStreamsByNode.get(nodeId) ?? 0,\n\t\t\tconcurrentHandshakes: this.concurrentHandshakes,\n\t\t\tnodeConcurrentHandshakes: this.concurrentHandshakesByNode.get(nodeId) ?? 0,\n\t\t};\n\t}\n\n\tprivate tryAcquirePerNode(\n\t\tnodeId: string,\n\t\tgetGlobalCount: () => number,\n\t\tcountsByNode: Map<string, number>,\n\t\tglobalLimit: number,\n\t\tnodeLimit: number,\n\t\tsetGlobalCount: (value: number) => void,\n\t): IrohRemoteResourceAdmission {\n\t\tconst globalCount = getGlobalCount();\n\t\tif (globalCount >= globalLimit) {\n\t\t\treturn { ok: false, scope: \"global\", limit: globalLimit };\n\t\t}\n\t\tconst nodeCount = countsByNode.get(nodeId) ?? 0;\n\t\tif (nodeCount >= nodeLimit) {\n\t\t\treturn { ok: false, scope: \"node\", limit: nodeLimit };\n\t\t}\n\t\tsetGlobalCount(globalCount + 1);\n\t\tcountsByNode.set(nodeId, nodeCount + 1);\n\t\treturn {\n\t\t\tok: true,\n\t\t\tlease: new ResourceLease(() => {\n\t\t\t\tsetGlobalCount(getGlobalCount() - 1);\n\t\t\t\tconst currentNodeCount = countsByNode.get(nodeId) ?? 0;\n\t\t\t\tif (currentNodeCount <= 1) {\n\t\t\t\t\tcountsByNode.delete(nodeId);\n\t\t\t\t} else {\n\t\t\t\t\tcountsByNode.set(nodeId, currentNodeCount - 1);\n\t\t\t\t}\n\t\t\t}),\n\t\t};\n\t}\n}\n"]}

package/dist/daemon/iroh-resource-guard.js

@@ -0,0 +1,134 @@
+export const DEFAULT_IROH_REMOTE_RESOURCE_LIMITS = {
+    maxConnectionTasks: 128,
+    maxConnectionsPerNode: 16,
+    maxUnauthenticatedConnections: 32,
+    maxUnauthenticatedConnectionsPerNode: 4,
+    maxActiveStreams: 128,
+    maxActiveStreamsPerNode: 16,
+    maxConcurrentHandshakes: 64,
+    maxConcurrentHandshakesPerNode: 16,
+};
+class ResourceLease {
+    released = false;
+    onRelease;
+    constructor(onRelease) {
+        this.onRelease = onRelease;
+    }
+    release() {
+        if (this.released)
+            return;
+        this.released = true;
+        this.onRelease();
+    }
+}
+function assertPositiveInteger(value, name) {
+    if (!Number.isSafeInteger(value) || value <= 0) {
+        throw new Error(`${name} must be a positive integer`);
+    }
+}
+/**
+ * Synchronous admission accounting for the daemon's Iroh transport. Callers
+ * acquire before starting work and release from a `finally` block. Per-node
+ * maps remove zero-count entries so rotating node ids cannot grow bookkeeping.
+ */
+export class IrohRemoteResourceGuard {
+    limits;
+    connectionTasks = 0;
+    unauthenticatedConnections = 0;
+    activeStreams = 0;
+    concurrentHandshakes = 0;
+    unauthenticatedConnectionsByNode = new Map();
+    connectionsByNode = new Map();
+    activeStreamsByNode = new Map();
+    concurrentHandshakesByNode = new Map();
+    constructor(limits = DEFAULT_IROH_REMOTE_RESOURCE_LIMITS) {
+        for (const [name, value] of Object.entries(limits)) {
+            assertPositiveInteger(value, name);
+        }
+        this.limits = { ...limits };
+    }
+    tryAcquireConnectionTask() {
+        if (this.connectionTasks >= this.limits.maxConnectionTasks) {
+            return { ok: false, scope: "global", limit: this.limits.maxConnectionTasks };
+        }
+        this.connectionTasks++;
+        return {
+            ok: true,
+            lease: new ResourceLease(() => {
+                this.connectionTasks--;
+            }),
+        };
+    }
+    tryAcquireNodeConnection(nodeId) {
+        const nodeCount = this.connectionsByNode.get(nodeId) ?? 0;
+        if (nodeCount >= this.limits.maxConnectionsPerNode) {
+            return { ok: false, scope: "node", limit: this.limits.maxConnectionsPerNode };
+        }
+        this.connectionsByNode.set(nodeId, nodeCount + 1);
+        return {
+            ok: true,
+            lease: new ResourceLease(() => {
+                const currentNodeCount = this.connectionsByNode.get(nodeId) ?? 0;
+                if (currentNodeCount <= 1) {
+                    this.connectionsByNode.delete(nodeId);
+                }
+                else {
+                    this.connectionsByNode.set(nodeId, currentNodeCount - 1);
+                }
+            }),
+        };
+    }
+    tryAcquireUnauthenticatedConnection(nodeId) {
+        return this.tryAcquirePerNode(nodeId, () => this.unauthenticatedConnections, this.unauthenticatedConnectionsByNode, this.limits.maxUnauthenticatedConnections, this.limits.maxUnauthenticatedConnectionsPerNode, (value) => {
+            this.unauthenticatedConnections = value;
+        });
+    }
+    tryAcquireActiveStream(nodeId) {
+        return this.tryAcquirePerNode(nodeId, () => this.activeStreams, this.activeStreamsByNode, this.limits.maxActiveStreams, this.limits.maxActiveStreamsPerNode, (value) => {
+            this.activeStreams = value;
+        });
+    }
+    tryAcquireHandshake(nodeId) {
+        return this.tryAcquirePerNode(nodeId, () => this.concurrentHandshakes, this.concurrentHandshakesByNode, this.limits.maxConcurrentHandshakes, this.limits.maxConcurrentHandshakesPerNode, (value) => {
+            this.concurrentHandshakes = value;
+        });
+    }
+    snapshot(nodeId) {
+        return {
+            connectionTasks: this.connectionTasks,
+            nodeConnections: this.connectionsByNode.get(nodeId) ?? 0,
+            unauthenticatedConnections: this.unauthenticatedConnections,
+            nodeUnauthenticatedConnections: this.unauthenticatedConnectionsByNode.get(nodeId) ?? 0,
+            activeStreams: this.activeStreams,
+            nodeActiveStreams: this.activeStreamsByNode.get(nodeId) ?? 0,
+            concurrentHandshakes: this.concurrentHandshakes,
+            nodeConcurrentHandshakes: this.concurrentHandshakesByNode.get(nodeId) ?? 0,
+        };
+    }
+    tryAcquirePerNode(nodeId, getGlobalCount, countsByNode, globalLimit, nodeLimit, setGlobalCount) {
+        const globalCount = getGlobalCount();
+        if (globalCount >= globalLimit) {
+            return { ok: false, scope: "global", limit: globalLimit };
+        }
+        const nodeCount = countsByNode.get(nodeId) ?? 0;
+        if (nodeCount >= nodeLimit) {
+            return { ok: false, scope: "node", limit: nodeLimit };
+        }
+        setGlobalCount(globalCount + 1);
+        countsByNode.set(nodeId, nodeCount + 1);
+        return {
+            ok: true,
+            lease: new ResourceLease(() => {
+                setGlobalCount(getGlobalCount() - 1);
+                const currentNodeCount = countsByNode.get(nodeId) ?? 0;
+                if (currentNodeCount <= 1) {
+                    countsByNode.delete(nodeId);
+                }
+                else {
+                    countsByNode.set(nodeId, currentNodeCount - 1);
+                }
+            }),
+        };
+    }
+}
+//# sourceMappingURL=iroh-resource-guard.js.map

package/dist/daemon/iroh-resource-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iroh-resource-guard.js","sourceRoot":"","sources":["../../src/daemon/iroh-resource-guard.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,mCAAmC,GAA6B;IAC5E,kBAAkB,EAAE,GAAG;IACvB,qBAAqB,EAAE,EAAE;IACzB,6BAA6B,EAAE,EAAE;IACjC,oCAAoC,EAAE,CAAC;IACvC,gBAAgB,EAAE,GAAG;IACrB,uBAAuB,EAAE,EAAE;IAC3B,uBAAuB,EAAE,EAAE;IAC3B,8BAA8B,EAAE,EAAE;CAClC,CAAC;AAqBF,MAAM,aAAa;IACV,QAAQ,GAAG,KAAK,CAAC;IACR,SAAS,CAAa;IAEvC,YAAY,SAAqB,EAAE;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAAA,CAC3B;IAED,OAAO,GAAS;QACf,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,SAAS,EAAE,CAAC;IAAA,CACjB;CACD;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,IAAY,EAAQ;IACjE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6BAA6B,CAAC,CAAC;IACvD,CAAC;AAAA,CACD;AAED;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IAClB,MAAM,CAA2B;IAC1C,eAAe,GAAG,CAAC,CAAC;IACpB,0BAA0B,GAAG,CAAC,CAAC;IAC/B,aAAa,GAAG,CAAC,CAAC;IAClB,oBAAoB,GAAG,CAAC,CAAC;IAChB,gCAAgC,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7D,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,0BAA0B,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExE,YAAY,MAAM,GAA6B,mCAAmC,EAAE;QACnF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAAA,CAC5B;IAED,wBAAwB,GAAgC;QACvD,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBAC9B,IAAI,CAAC,eAAe,EAAE,CAAC;YAAA,CACvB,CAAC;SACF,CAAC;IAAA,CACF;IAED,wBAAwB,CAAC,MAAc,EAA+B;QACrE,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QAClD,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBAC9B,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACjE,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;oBAC3B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvC,CAAC;qBAAM,CAAC;oBACP,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAC;gBAC1D,CAAC;YAAA,CACD,CAAC;SACF,CAAC;IAAA,CACF;IAED,mCAAmC,CAAC,MAAc,EAA+B;QAChF,OAAO,IAAI,CAAC,iBAAiB,CAC5B,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,0BAA0B,EACrC,IAAI,CAAC,gCAAgC,EACrC,IAAI,CAAC,MAAM,CAAC,6BAA6B,EACzC,IAAI,CAAC,MAAM,CAAC,oCAAoC,EAChD,CAAC,KAAK,EAAE,EAAE,CAAC;YACV,IAAI,CAAC,0BAA0B,GAAG,KAAK,CAAC;QAAA,CACxC,CACD,CAAC;IAAA,CACF;IAED,sBAAsB,CAAC,MAAc,EAA+B;QACnE,OAAO,IAAI,CAAC,iBAAiB,CAC5B,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EACxB,IAAI,CAAC,mBAAmB,EACxB,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAC5B,IAAI,CAAC,MAAM,CAAC,uBAAuB,EACnC,CAAC,KAAK,EAAE,EAAE,CAAC;YACV,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC;QAAA,CAC3B,CACD,CAAC;IAAA,CACF;IAED,mBAAmB,CAAC,MAAc,EAA+B;QAChE,OAAO,IAAI,CAAC,iBAAiB,CAC5B,MAAM,EACN,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAC/B,IAAI,CAAC,0BAA0B,EAC/B,IAAI,CAAC,MAAM,CAAC,uBAAuB,EACnC,IAAI,CAAC,MAAM,CAAC,8BAA8B,EAC1C,CAAC,KAAK,EAAE,EAAE,CAAC;YACV,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC;QAAA,CAClC,CACD,CAAC;IAAA,CACF;IAED,QAAQ,CAAC,MAAc,EAA8B;QACpD,OAAO;YACN,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YACxD,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;YAC3D,8BAA8B,EAAE,IAAI,CAAC,gCAAgC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YACtF,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,iBAAiB,EAAE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAC5D,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,wBAAwB,EAAE,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;SAC1E,CAAC;IAAA,CACF;IAEO,iBAAiB,CACxB,MAAc,EACd,cAA4B,EAC5B,YAAiC,EACjC,WAAmB,EACnB,SAAiB,EACjB,cAAuC,EACT;QAC9B,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACvD,CAAC;QACD,cAAc,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QAChC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QACxC,OAAO;YACN,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,IAAI,aAAa,CAAC,GAAG,EAAE,CAAC;gBAC9B,cAAc,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;gBACrC,MAAM,gBAAgB,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACvD,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;oBAC3B,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACP,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAC;gBAChD,CAAC;YAAA,CACD,CAAC;SACF,CAAC;IAAA,CACF;CACD","sourcesContent":["export interface IrohRemoteResourceLimits {\n\tmaxConnectionTasks: number;\n\tmaxConnectionsPerNode: number;\n\tmaxUnauthenticatedConnections: number;\n\tmaxUnauthenticatedConnectionsPerNode: number;\n\tmaxActiveStreams: number;\n\tmaxActiveStreamsPerNode: number;\n\tmaxConcurrentHandshakes: number;\n\tmaxConcurrentHandshakesPerNode: number;\n}\n\nexport const DEFAULT_IROH_REMOTE_RESOURCE_LIMITS: IrohRemoteResourceLimits = {\n\tmaxConnectionTasks: 128,\n\tmaxConnectionsPerNode: 16,\n\tmaxUnauthenticatedConnections: 32,\n\tmaxUnauthenticatedConnectionsPerNode: 4,\n\tmaxActiveStreams: 128,\n\tmaxActiveStreamsPerNode: 16,\n\tmaxConcurrentHandshakes: 64,\n\tmaxConcurrentHandshakesPerNode: 16,\n};\n\nexport interface IrohRemoteResourceLease {\n\trelease(): void;\n}\n\nexport type IrohRemoteResourceAdmission =\n\t| { ok: true; lease: IrohRemoteResourceLease }\n\t| { ok: false; scope: \"global\" | \"node\"; limit: number };\n\nexport interface IrohRemoteResourceSnapshot {\n\tconnectionTasks: number;\n\tnodeConnections: number;\n\tunauthenticatedConnections: number;\n\tnodeUnauthenticatedConnections: number;\n\tactiveStreams: number;\n\tnodeActiveStreams: number;\n\tconcurrentHandshakes: number;\n\tnodeConcurrentHandshakes: number;\n}\n\nclass ResourceLease implements IrohRemoteResourceLease {\n\tprivate released = false;\n\tprivate readonly onRelease: () => void;\n\n\tconstructor(onRelease: () => void) {\n\t\tthis.onRelease = onRelease;\n\t}\n\n\trelease(): void {\n\t\tif (this.released) return;\n\t\tthis.released = true;\n\t\tthis.onRelease();\n\t}\n}\n\nfunction assertPositiveInteger(value: number, name: string): void {\n\tif (!Number.isSafeInteger(value) || value <= 0) {\n\t\tthrow new Error(`${name} must be a positive integer`);\n\t}\n}\n\n/**\n * Synchronous admission accounting for the daemon's Iroh transport. Callers\n * acquire before starting work and release from a `finally` block. Per-node\n * maps remove zero-count entries so rotating node ids cannot grow bookkeeping.\n */\nexport class IrohRemoteResourceGuard {\n\tprivate readonly limits: IrohRemoteResourceLimits;\n\tprivate connectionTasks = 0;\n\tprivate unauthenticatedConnections = 0;\n\tprivate activeStreams = 0;\n\tprivate concurrentHandshakes = 0;\n\tprivate readonly unauthenticatedConnectionsByNode = new Map<string, number>();\n\tprivate readonly connectionsByNode = new Map<string, number>();\n\tprivate readonly activeStreamsByNode = new Map<string, number>();\n\tprivate readonly concurrentHandshakesByNode = new Map<string, number>();\n\n\tconstructor(limits: IrohRemoteResourceLimits = DEFAULT_IROH_REMOTE_RESOURCE_LIMITS) {\n\t\tfor (const [name, value] of Object.entries(limits)) {\n\t\t\tassertPositiveInteger(value, name);\n\t\t}\n\t\tthis.limits = { ...limits };\n\t}\n\n\ttryAcquireConnectionTask(): IrohRemoteResourceAdmission {\n\t\tif (this.connectionTasks >= this.limits.maxConnectionTasks) {\n\t\t\treturn { ok: false, scope: \"global\", limit: this.limits.maxConnectionTasks };\n\t\t}\n\t\tthis.connectionTasks++;\n\t\treturn {\n\t\t\tok: true,\n\t\t\tlease: new ResourceLease(() => {\n\t\t\t\tthis.connectionTasks--;\n\t\t\t}),\n\t\t};\n\t}\n\n\ttryAcquireNodeConnection(nodeId: string): IrohRemoteResourceAdmission {\n\t\tconst nodeCount = this.connectionsByNode.get(nodeId) ?? 0;\n\t\tif (nodeCount >= this.limits.maxConnectionsPerNode) {\n\t\t\treturn { ok: false, scope: \"node\", limit: this.limits.maxConnectionsPerNode };\n\t\t}\n\t\tthis.connectionsByNode.set(nodeId, nodeCount + 1);\n\t\treturn {\n\t\t\tok: true,\n\t\t\tlease: new ResourceLease(() => {\n\t\t\t\tconst currentNodeCount = this.connectionsByNode.get(nodeId) ?? 0;\n\t\t\t\tif (currentNodeCount <= 1) {\n\t\t\t\t\tthis.connectionsByNode.delete(nodeId);\n\t\t\t\t} else {\n\t\t\t\t\tthis.connectionsByNode.set(nodeId, currentNodeCount - 1);\n\t\t\t\t}\n\t\t\t}),\n\t\t};\n\t}\n\n\ttryAcquireUnauthenticatedConnection(nodeId: string): IrohRemoteResourceAdmission {\n\t\treturn this.tryAcquirePerNode(\n\t\t\tnodeId,\n\t\t\t() => this.unauthenticatedConnections,\n\t\t\tthis.unauthenticatedConnectionsByNode,\n\t\t\tthis.limits.maxUnauthenticatedConnections,\n\t\t\tthis.limits.maxUnauthenticatedConnectionsPerNode,\n\t\t\t(value) => {\n\t\t\t\tthis.unauthenticatedConnections = value;\n\t\t\t},\n\t\t);\n\t}\n\n\ttryAcquireActiveStream(nodeId: string): IrohRemoteResourceAdmission {\n\t\treturn this.tryAcquirePerNode(\n\t\t\tnodeId,\n\t\t\t() => this.activeStreams,\n\t\t\tthis.activeStreamsByNode,\n\t\t\tthis.limits.maxActiveStreams,\n\t\t\tthis.limits.maxActiveStreamsPerNode,\n\t\t\t(value) => {\n\t\t\t\tthis.activeStreams = value;\n\t\t\t},\n\t\t);\n\t}\n\n\ttryAcquireHandshake(nodeId: string): IrohRemoteResourceAdmission {\n\t\treturn this.tryAcquirePerNode(\n\t\t\tnodeId,\n\t\t\t() => this.concurrentHandshakes,\n\t\t\tthis.concurrentHandshakesByNode,\n\t\t\tthis.limits.maxConcurrentHandshakes,\n\t\t\tthis.limits.maxConcurrentHandshakesPerNode,\n\t\t\t(value) => {\n\t\t\t\tthis.concurrentHandshakes = value;\n\t\t\t},\n\t\t);\n\t}\n\n\tsnapshot(nodeId: string): IrohRemoteResourceSnapshot {\n\t\treturn {\n\t\t\tconnectionTasks: this.connectionTasks,\n\t\t\tnodeConnections: this.connectionsByNode.get(nodeId) ?? 0,\n\t\t\tunauthenticatedConnections: this.unauthenticatedConnections,\n\t\t\tnodeUnauthenticatedConnections: this.unauthenticatedConnectionsByNode.get(nodeId) ?? 0,\n\t\t\tactiveStreams: this.activeStreams,\n\t\t\tnodeActiveStreams: this.activeStreamsByNode.get(nodeId) ?? 0,\n\t\t\tconcurrentHandshakes: this.concurrentHandshakes,\n\t\t\tnodeConcurrentHandshakes: this.concurrentHandshakesByNode.get(nodeId) ?? 0,\n\t\t};\n\t}\n\n\tprivate tryAcquirePerNode(\n\t\tnodeId: string,\n\t\tgetGlobalCount: () => number,\n\t\tcountsByNode: Map<string, number>,\n\t\tglobalLimit: number,\n\t\tnodeLimit: number,\n\t\tsetGlobalCount: (value: number) => void,\n\t): IrohRemoteResourceAdmission {\n\t\tconst globalCount = getGlobalCount();\n\t\tif (globalCount >= globalLimit) {\n\t\t\treturn { ok: false, scope: \"global\", limit: globalLimit };\n\t\t}\n\t\tconst nodeCount = countsByNode.get(nodeId) ?? 0;\n\t\tif (nodeCount >= nodeLimit) {\n\t\t\treturn { ok: false, scope: \"node\", limit: nodeLimit };\n\t\t}\n\t\tsetGlobalCount(globalCount + 1);\n\t\tcountsByNode.set(nodeId, nodeCount + 1);\n\t\treturn {\n\t\t\tok: true,\n\t\t\tlease: new ResourceLease(() => {\n\t\t\t\tsetGlobalCount(getGlobalCount() - 1);\n\t\t\t\tconst currentNodeCount = countsByNode.get(nodeId) ?? 0;\n\t\t\t\tif (currentNodeCount <= 1) {\n\t\t\t\t\tcountsByNode.delete(nodeId);\n\t\t\t\t} else {\n\t\t\t\t\tcountsByNode.set(nodeId, currentNodeCount - 1);\n\t\t\t\t}\n\t\t\t}),\n\t\t};\n\t}\n}\n"]}

package/dist/daemon/iroh-service.d.ts

@@ -0,0 +1,51 @@
+import type { IrohRemoteActiveStreamEntry } from "../core/remote/iroh/active-stream-registry.ts";
+import { IrohRemoteActiveStreamRegistry } from "../core/remote/iroh/active-stream-registry.ts";
+import { type IntegratedRuntimeEntry } from "./integrated-runtimes.ts";
+import type { VoltdServiceExtension } from "./main.ts";
+export type AuthorityInvalidationRuntime = Pick<IntegratedRuntimeEntry, "clientNodeId" | "workspaceName" | "sessionId">;
+export declare function collectClientAuthorityInvalidationRuntimes<T extends AuthorityInvalidationRuntime>(activeStreams: IrohRemoteActiveStreamRegistry, runtimes: Iterable<T>, clientNodeId: string): Set<T>;
+export declare function collectClientAuthorityInvalidationStreams(activeStreams: IrohRemoteActiveStreamRegistry, runtimes: Iterable<AuthorityInvalidationRuntime>, clientNodeId: string): Set<IrohRemoteActiveStreamEntry>;
+export type IrohRelayMode = "disabled" | "development" | "production";
+/**
+ * The Volt-operated relay fleet. Endpoints bind against these by default
+ * ("production" mode); the n0 public relays ("development" mode) are for
+ * development only and must be opted into via VOLT_IROH_RELAY_MODE=development.
+ */
+export declare const VOLT_PRODUCTION_RELAY_URLS: string[];
+export interface IrohDaemonServiceConfig {
+    relayMode?: IrohRelayMode;
+    /**
+     * Relay server URLs (e.g. "https://relay.example.com"). When set (or via
+     * VOLT_IROH_RELAY_URLS, comma-separated), production mode binds against
+     * these instead of the built-in Volt fleet, and pairing tickets carry the
+     * URLs so clients bind against the same relays.
+     */
+    relayUrls?: string[];
+    /**
+     * Bearer token presented to relay servers configured with
+     * access.shared_token. Falls back to VOLT_IROH_RELAY_AUTH_TOKEN, then the
+     * token persisted in daemon state from a previous start.
+     */
+    relayAuthToken?: string;
+    pushRelayUrl?: string;
+    pushRelayAuthToken?: string;
+    profile?: string;
+}
+export interface ResolvedIrohRelayConfig {
+    relayMode: IrohRelayMode;
+    relayUrls: string[];
+    warning?: string;
+}
+/**
+ * Resolves the effective relay configuration. Precedence: explicit service
+ * config, then VOLT_IROH_RELAY_MODE / VOLT_IROH_RELAY_URLS, then the Volt
+ * production relay fleet.
+ */
+export declare function resolveIrohRelayConfig(config: Pick<IrohDaemonServiceConfig, "relayMode" | "relayUrls">, env?: Record<string, string | undefined>): ResolvedIrohRelayConfig;
+/**
+ * The daemon's Iroh host: owns the endpoint identity, pairing, revocation,
+ * headless integrated runtimes, workspace/device streams, push dispatch, and
+ * the accept loop. Ported from the dissolved src/remote/iroh-host.mjs.
+ */
+export declare function createIrohDaemonService(config?: IrohDaemonServiceConfig): VoltdServiceExtension;
+//# sourceMappingURL=iroh-service.d.ts.map