@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/daemon/viewer-feed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer-feed.d.ts","sourceRoot":"","sources":["../../src/daemon/viewer-feed.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D;;;;;;GAMG;AAEH,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAC7C,eAAO,MAAM,uBAAuB,QAAkB,CAAC;AAEvD,4DAA4D;AAC5D,MAAM,WAAW,iBAAiB;IACjC,SAAS,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACzD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC9B;AAiBD,MAAM,WAAW,iBAAiB;IACjC,+EAA+E;IAC/E,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC;CAC3D;AAED,qBAAa,kBAAkB;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoB;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiC;IAEvD,YAAY,OAAO,EAAE,iBAAiB,EAErC;IAED,mFAAmF;IACnF,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAoBlF;IAED,OAAO,CAAC,cAAc;IAiCtB,OAAO,CAAC,IAAI;IASZ;;;;OAIG;IACH,SAAS,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAmB7D;IAED,4EAA4E;IAC5E,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAS/D;IAED,2EAA0E;IACpE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOxE;IAED,yEAAyE;IACzE,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,IAAI,CASzE;IAED,GAAG,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAEjC;CACD","sourcesContent":["import type { ControlEvent } from \"./control-protocol.ts\";\n\n/**\n * Read-only viewer feeds for lease drains (§4.3): from drain start, every\n * AgentSessionEvent of the draining runtime is captured; events are buffered\n * until the acquiring TUI sends viewer_subscribe, then flushed and streamed\n * live as viewer_event control messages. The feed is delivered only to the\n * drain requester's control connection.\n */\n\nexport const VIEWER_BUFFER_MAX_EVENTS = 2000;\nexport const VIEWER_BUFFER_MAX_BYTES = 4 * 1024 * 1024;\n\n/** Structural view of AgentSession as the feed needs it. */\nexport interface ViewerFeedSession {\n\tsubscribe(handler: (event: unknown) => void): () => void;\n\tabort(): Promise<void> | void;\n}\n\ninterface ViewerFeed {\n\tviewerFeedId: string;\n\tconnectionId: string;\n\tsession: ViewerFeedSession;\n\tunsubscribeSession: () => void;\n\t/** Buffered events awaiting viewer_subscribe; null once flushed (live). */\n\tbuffer: unknown[] | null;\n\tbufferedBytes: number;\n\t/** Buffer overflowed: buffer dropped, TUI gets {kind:\"truncated\"} first. */\n\ttruncated: boolean;\n\tseq: number;\n\tsubscribed: boolean;\n\tended: boolean;\n}\n\nexport interface ViewerFeedEffects {\n\t/** Deliver a control event to a specific connection; false when it is gone. */\n\tsendTo(connectionId: string, event: ControlEvent): boolean;\n}\n\nexport class ViewerFeedRegistry {\n\tprivate readonly effects: ViewerFeedEffects;\n\tprivate readonly feeds = new Map<string, ViewerFeed>();\n\n\tconstructor(effects: ViewerFeedEffects) {\n\t\tthis.effects = effects;\n\t}\n\n\t/** Begin capturing the draining runtime's events for the requesting connection. */\n\tstart(viewerFeedId: string, connectionId: string, session: ViewerFeedSession): void {\n\t\tif (this.feeds.has(viewerFeedId)) {\n\t\t\treturn;\n\t\t}\n\t\tconst feed: ViewerFeed = {\n\t\t\tviewerFeedId,\n\t\t\tconnectionId,\n\t\t\tsession,\n\t\t\tunsubscribeSession: () => {},\n\t\t\tbuffer: [],\n\t\t\tbufferedBytes: 0,\n\t\t\ttruncated: false,\n\t\t\tseq: 0,\n\t\t\tsubscribed: false,\n\t\t\tended: false,\n\t\t};\n\t\tfeed.unsubscribeSession = session.subscribe((event) => {\n\t\t\tthis.onSessionEvent(feed, event);\n\t\t});\n\t\tthis.feeds.set(viewerFeedId, feed);\n\t}\n\n\tprivate onSessionEvent(feed: ViewerFeed, event: unknown): void {\n\t\tif (feed.ended) {\n\t\t\treturn;\n\t\t}\n\t\tif (feed.subscribed) {\n\t\t\tthis.emit(feed, event);\n\t\t\treturn;\n\t\t}\n\t\tif (feed.truncated || feed.buffer === null) {\n\t\t\treturn;\n\t\t}\n\t\tlet eventBytes = 0;\n\t\ttry {\n\t\t\teventBytes = JSON.stringify(event)?.length ?? 0;\n\t\t} catch {\n\t\t\t// Unserializable events cannot cross the control plane anyway.\n\t\t\treturn;\n\t\t}\n\t\tif (\n\t\t\tfeed.buffer.length + 1 > VIEWER_BUFFER_MAX_EVENTS ||\n\t\t\tfeed.bufferedBytes + eventBytes > VIEWER_BUFFER_MAX_BYTES\n\t\t) {\n\t\t\t// Cap exceeded: drop everything; the TUI shows a spinner and relies on\n\t\t\t// the post-grant session file load for truth.\n\t\t\tfeed.buffer = null;\n\t\t\tfeed.bufferedBytes = 0;\n\t\t\tfeed.truncated = true;\n\t\t\treturn;\n\t\t}\n\t\tfeed.buffer.push(event);\n\t\tfeed.bufferedBytes += eventBytes;\n\t}\n\n\tprivate emit(feed: ViewerFeed, event: unknown): void {\n\t\tthis.effects.sendTo(feed.connectionId, {\n\t\t\ttype: \"viewer_event\",\n\t\t\tviewerFeedId: feed.viewerFeedId,\n\t\t\tseq: feed.seq++,\n\t\t\tevent,\n\t\t});\n\t}\n\n\t/**\n\t * viewer_subscribe from the drain requester: flush the buffer (or the\n\t * truncation marker) and switch to live forwarding. Returns false for an\n\t * unknown feed or a connection that is not the drain requester.\n\t */\n\tsubscribe(viewerFeedId: string, connectionId: string): boolean {\n\t\tconst feed = this.feeds.get(viewerFeedId);\n\t\tif (!feed || feed.ended || feed.connectionId !== connectionId) {\n\t\t\treturn false;\n\t\t}\n\t\tif (feed.subscribed) {\n\t\t\treturn true;\n\t\t}\n\t\tfeed.subscribed = true;\n\t\tif (feed.truncated) {\n\t\t\tthis.emit(feed, { kind: \"truncated\" });\n\t\t} else if (feed.buffer) {\n\t\t\tfor (const event of feed.buffer) {\n\t\t\t\tthis.emit(feed, event);\n\t\t\t}\n\t\t}\n\t\tfeed.buffer = null;\n\t\tfeed.bufferedBytes = 0;\n\t\treturn true;\n\t}\n\n\t/** Stop forwarding without ending the drain (TUI dismissed the overlay). */\n\tunsubscribe(viewerFeedId: string, connectionId: string): boolean {\n\t\tconst feed = this.feeds.get(viewerFeedId);\n\t\tif (!feed || feed.connectionId !== connectionId) {\n\t\t\treturn false;\n\t\t}\n\t\tfeed.subscribed = false;\n\t\tfeed.buffer = null;\n\t\tfeed.bufferedBytes = 0;\n\t\treturn true;\n\t}\n\n\t/** viewer_abort: stop the draining turn (non-destructive abort, §7.4). */\n\tasync abort(viewerFeedId: string, connectionId: string): Promise<boolean> {\n\t\tconst feed = this.feeds.get(viewerFeedId);\n\t\tif (!feed || feed.ended || feed.connectionId !== connectionId) {\n\t\t\treturn false;\n\t\t}\n\t\tawait feed.session.abort();\n\t\treturn true;\n\t}\n\n\t/** Drain ended: emit viewer_end (best-effort) and tear the feed down. */\n\tend(viewerFeedId: string, reason: \"granted\" | \"cancelled\" | \"error\"): void {\n\t\tconst feed = this.feeds.get(viewerFeedId);\n\t\tif (!feed) {\n\t\t\treturn;\n\t\t}\n\t\tfeed.ended = true;\n\t\tfeed.unsubscribeSession();\n\t\tthis.feeds.delete(viewerFeedId);\n\t\tthis.effects.sendTo(feed.connectionId, { type: \"viewer_end\", viewerFeedId, reason });\n\t}\n\n\thas(viewerFeedId: string): boolean {\n\t\treturn this.feeds.has(viewerFeedId);\n\t}\n}\n"]}

package/dist/daemon/viewer-feed.js

@@ -0,0 +1,138 @@
+/**
+ * Read-only viewer feeds for lease drains (§4.3): from drain start, every
+ * AgentSessionEvent of the draining runtime is captured; events are buffered
+ * until the acquiring TUI sends viewer_subscribe, then flushed and streamed
+ * live as viewer_event control messages. The feed is delivered only to the
+ * drain requester's control connection.
+ */
+export const VIEWER_BUFFER_MAX_EVENTS = 2000;
+export const VIEWER_BUFFER_MAX_BYTES = 4 * 1024 * 1024;
+export class ViewerFeedRegistry {
+    effects;
+    feeds = new Map();
+    constructor(effects) {
+        this.effects = effects;
+    }
+    /** Begin capturing the draining runtime's events for the requesting connection. */
+    start(viewerFeedId, connectionId, session) {
+        if (this.feeds.has(viewerFeedId)) {
+            return;
+        }
+        const feed = {
+            viewerFeedId,
+            connectionId,
+            session,
+            unsubscribeSession: () => { },
+            buffer: [],
+            bufferedBytes: 0,
+            truncated: false,
+            seq: 0,
+            subscribed: false,
+            ended: false,
+        };
+        feed.unsubscribeSession = session.subscribe((event) => {
+            this.onSessionEvent(feed, event);
+        });
+        this.feeds.set(viewerFeedId, feed);
+    }
+    onSessionEvent(feed, event) {
+        if (feed.ended) {
+            return;
+        }
+        if (feed.subscribed) {
+            this.emit(feed, event);
+            return;
+        }
+        if (feed.truncated || feed.buffer === null) {
+            return;
+        }
+        let eventBytes = 0;
+        try {
+            eventBytes = JSON.stringify(event)?.length ?? 0;
+        }
+        catch {
+            // Unserializable events cannot cross the control plane anyway.
+            return;
+        }
+        if (feed.buffer.length + 1 > VIEWER_BUFFER_MAX_EVENTS ||
+            feed.bufferedBytes + eventBytes > VIEWER_BUFFER_MAX_BYTES) {
+            // Cap exceeded: drop everything; the TUI shows a spinner and relies on
+            // the post-grant session file load for truth.
+            feed.buffer = null;
+            feed.bufferedBytes = 0;
+            feed.truncated = true;
+            return;
+        }
+        feed.buffer.push(event);
+        feed.bufferedBytes += eventBytes;
+    }
+    emit(feed, event) {
+        this.effects.sendTo(feed.connectionId, {
+            type: "viewer_event",
+            viewerFeedId: feed.viewerFeedId,
+            seq: feed.seq++,
+            event,
+        });
+    }
+    /**
+     * viewer_subscribe from the drain requester: flush the buffer (or the
+     * truncation marker) and switch to live forwarding. Returns false for an
+     * unknown feed or a connection that is not the drain requester.
+     */
+    subscribe(viewerFeedId, connectionId) {
+        const feed = this.feeds.get(viewerFeedId);
+        if (!feed || feed.ended || feed.connectionId !== connectionId) {
+            return false;
+        }
+        if (feed.subscribed) {
+            return true;
+        }
+        feed.subscribed = true;
+        if (feed.truncated) {
+            this.emit(feed, { kind: "truncated" });
+        }
+        else if (feed.buffer) {
+            for (const event of feed.buffer) {
+                this.emit(feed, event);
+            }
+        }
+        feed.buffer = null;
+        feed.bufferedBytes = 0;
+        return true;
+    }
+    /** Stop forwarding without ending the drain (TUI dismissed the overlay). */
+    unsubscribe(viewerFeedId, connectionId) {
+        const feed = this.feeds.get(viewerFeedId);
+        if (!feed || feed.connectionId !== connectionId) {
+            return false;
+        }
+        feed.subscribed = false;
+        feed.buffer = null;
+        feed.bufferedBytes = 0;
+        return true;
+    }
+    /** viewer_abort: stop the draining turn (non-destructive abort, §7.4). */
+    async abort(viewerFeedId, connectionId) {
+        const feed = this.feeds.get(viewerFeedId);
+        if (!feed || feed.ended || feed.connectionId !== connectionId) {
+            return false;
+        }
+        await feed.session.abort();
+        return true;
+    }
+    /** Drain ended: emit viewer_end (best-effort) and tear the feed down. */
+    end(viewerFeedId, reason) {
+        const feed = this.feeds.get(viewerFeedId);
+        if (!feed) {
+            return;
+        }
+        feed.ended = true;
+        feed.unsubscribeSession();
+        this.feeds.delete(viewerFeedId);
+        this.effects.sendTo(feed.connectionId, { type: "viewer_end", viewerFeedId, reason });
+    }
+    has(viewerFeedId) {
+        return this.feeds.has(viewerFeedId);
+    }
+}
+//# sourceMappingURL=viewer-feed.js.map

package/dist/daemon/viewer-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viewer-feed.js","sourceRoot":"","sources":["../../src/daemon/viewer-feed.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAC7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AA4BvD,MAAM,OAAO,kBAAkB;IACb,OAAO,CAAoB;IAC3B,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEvD,YAAY,OAA0B,EAAE;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAAA,CACvB;IAED,mFAAmF;IACnF,KAAK,CAAC,YAAoB,EAAE,YAAoB,EAAE,OAA0B,EAAQ;QACnF,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAClC,OAAO;QACR,CAAC;QACD,MAAM,IAAI,GAAe;YACxB,YAAY;YACZ,YAAY;YACZ,OAAO;YACP,kBAAkB,EAAE,GAAG,EAAE,CAAC,EAAC,CAAC;YAC5B,MAAM,EAAE,EAAE;YACV,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,KAAK;YAChB,GAAG,EAAE,CAAC;YACN,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,KAAK;SACZ,CAAC;QACF,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAA,CACjC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAAA,CACnC;IAEO,cAAc,CAAC,IAAgB,EAAE,KAAc,EAAQ;QAC9D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO;QACR,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvB,OAAO;QACR,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5C,OAAO;QACR,CAAC;QACD,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACJ,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACR,+DAA+D;YAC/D,OAAO;QACR,CAAC;QACD,IACC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,wBAAwB;YACjD,IAAI,CAAC,aAAa,GAAG,UAAU,GAAG,uBAAuB,EACxD,CAAC;YACF,uEAAuE;YACvE,8CAA8C;YAC9C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO;QACR,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC;IAAA,CACjC;IAEO,IAAI,CAAC,IAAgB,EAAE,KAAc,EAAQ;QACpD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE;YACtC,IAAI,EAAE,cAAc;YACpB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;YACf,KAAK;SACL,CAAC,CAAC;IAAA,CACH;IAED;;;;OAIG;IACH,SAAS,CAAC,YAAoB,EAAE,YAAoB,EAAW;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACxB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxB,CAAC;QACF,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IAAA,CACZ;IAED,4EAA4E;IAC5E,WAAW,CAAC,YAAoB,EAAE,YAAoB,EAAW;QAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YACjD,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IAAA,CACZ;IAED,2EAA0E;IAC1E,KAAK,CAAC,KAAK,CAAC,YAAoB,EAAE,YAAoB,EAAoB;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IAAA,CACZ;IAED,yEAAyE;IACzE,GAAG,CAAC,YAAoB,EAAE,MAAyC,EAAQ;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,OAAO;QACR,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IAAA,CACrF;IAED,GAAG,CAAC,YAAoB,EAAW;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAAA,CACpC;CACD","sourcesContent":["import type { ControlEvent } from \"./control-protocol.ts\";\n\n/**\n * Read-only viewer feeds for lease drains (§4.3): from drain start, every\n * AgentSessionEvent of the draining runtime is captured; events are buffered\n * until the acquiring TUI sends viewer_subscribe, then flushed and streamed\n * live as viewer_event control messages. The feed is delivered only to the\n * drain requester's control connection.\n */\n\nexport const VIEWER_BUFFER_MAX_EVENTS = 2000;\nexport const VIEWER_BUFFER_MAX_BYTES = 4 * 1024 * 1024;\n\n/** Structural view of AgentSession as the feed needs it. */\nexport interface ViewerFeedSession {\n\tsubscribe(handler: (event: unknown) => void): () => void;\n\tabort(): Promise<void> | void;\n}\n\ninterface ViewerFeed {\n\tviewerFeedId: string;\n\tconnectionId: string;\n\tsession: ViewerFeedSession;\n\tunsubscribeSession: () => void;\n\t/** Buffered events awaiting viewer_subscribe; null once flushed (live). */\n\tbuffer: unknown[] | null;\n\tbufferedBytes: number;\n\t/** Buffer overflowed: buffer dropped, TUI gets {kind:\"truncated\"} first. */\n\ttruncated: boolean;\n\tseq: number;\n\tsubscribed: boolean;\n\tended: boolean;\n}\n\nexport interface ViewerFeedEffects {\n\t/** Deliver a control event to a specific connection; false when it is gone. */\n\tsendTo(connectionId: string, event: ControlEvent): boolean;\n}\n\nexport class ViewerFeedRegistry {\n\tprivate readonly effects: ViewerFeedEffects;\n\tprivate readonly feeds = new Map<string, ViewerFeed>();\n\n\tconstructor(effects: ViewerFeedEffects) {\n\t\tthis.effects = effects;\n\t}\n\n\t/** Begin capturing the draining runtime's events for the requesting connection. */\n\tstart(viewerFeedId: string, connectionId: string, session: ViewerFeedSession): void {\n\t\tif (this.feeds.has(viewerFeedId)) {\n\t\t\treturn;\n\t\t}\n\t\tconst feed: ViewerFeed = {\n\t\t\tviewerFeedId,\n\t\t\tconnectionId,\n\t\t\tsession,\n\t\t\tunsubscribeSession: () => {},\n\t\t\tbuffer: [],\n\t\t\tbufferedBytes: 0,\n\t\t\ttruncated: false,\n\t\t\tseq: 0,\n\t\t\tsubscribed: false,\n\t\t\tended: false,\n\t\t};\n\t\tfeed.unsubscribeSession = session.subscribe((event) => {\n\t\t\tthis.onSessionEvent(feed, event);\n\t\t});\n\t\tthis.feeds.set(viewerFeedId, feed);\n\t}\n\n\tprivate onSessionEvent(feed: ViewerFeed, event: unknown): void {\n\t\tif (feed.ended) {\n\t\t\treturn;\n\t\t}\n\t\tif (feed.subscribed) {\n\t\t\tthis.emit(feed, event);\n\t\t\treturn;\n\t\t}\n\t\tif (feed.truncated || feed.buffer === null) {\n\t\t\treturn;\n\t\t}\n\t\tlet eventBytes = 0;\n\t\ttry {\n\t\t\teventBytes = JSON.stringify(event)?.length ?? 0;\n\t\t} catch {\n\t\t\t// Unserializable events cannot cross the control plane anyway.\n\t\t\treturn;\n\t\t}\n\t\tif (\n\t\t\tfeed.buffer.length + 1 > VIEWER_BUFFER_MAX_EVENTS ||\n\t\t\tfeed.bufferedBytes + eventBytes > VIEWER_BUFFER_MAX_BYTES\n\t\t) {\n\t\t\t// Cap exceeded: drop everything; the TUI shows a spinner and relies on\n\t\t\t// the post-grant session file load for truth.\n\t\t\tfeed.buffer = null;\n\t\t\tfeed.bufferedBytes = 0;\n\t\t\tfeed.truncated = true;\n\t\t\treturn;\n\t\t}\n\t\tfeed.buffer.push(event);\n\t\tfeed.bufferedBytes += eventBytes;\n\t}\n\n\tprivate emit(feed: ViewerFeed, event: unknown): void {\n\t\tthis.effects.sendTo(feed.connectionId, {\n\t\t\ttype: \"viewer_event\",\n\t\t\tviewerFeedId: feed.viewerFeedId,\n\t\t\tseq: feed.seq++,\n\t\t\tevent,\n\t\t});\n\t}\n\n\t/**\n\t * viewer_subscribe from the drain requester: flush the buffer (or the\n\t * truncation marker) and switch to live forwarding. Returns false for an\n\t * unknown feed or a connection that is not the drain requester.\n\t */\n\tsubscribe(viewerFeedId: string, connectionId: string): boolean {\n\t\tconst feed = this.feeds.get(viewerFeedId);\n\t\tif (!feed || feed.ended || feed.connectionId !== connectionId) {\n\t\t\treturn false;\n\t\t}\n\t\tif (feed.subscribed) {\n\t\t\treturn true;\n\t\t}\n\t\tfeed.subscribed = true;\n\t\tif (feed.truncated) {\n\t\t\tthis.emit(feed, { kind: \"truncated\" });\n\t\t} else if (feed.buffer) {\n\t\t\tfor (const event of feed.buffer) {\n\t\t\t\tthis.emit(feed, event);\n\t\t\t}\n\t\t}\n\t\tfeed.buffer = null;\n\t\tfeed.bufferedBytes = 0;\n\t\treturn true;\n\t}\n\n\t/** Stop forwarding without ending the drain (TUI dismissed the overlay). */\n\tunsubscribe(viewerFeedId: string, connectionId: string): boolean {\n\t\tconst feed = this.feeds.get(viewerFeedId);\n\t\tif (!feed || feed.connectionId !== connectionId) {\n\t\t\treturn false;\n\t\t}\n\t\tfeed.subscribed = false;\n\t\tfeed.buffer = null;\n\t\tfeed.bufferedBytes = 0;\n\t\treturn true;\n\t}\n\n\t/** viewer_abort: stop the draining turn (non-destructive abort, §7.4). */\n\tasync abort(viewerFeedId: string, connectionId: string): Promise<boolean> {\n\t\tconst feed = this.feeds.get(viewerFeedId);\n\t\tif (!feed || feed.ended || feed.connectionId !== connectionId) {\n\t\t\treturn false;\n\t\t}\n\t\tawait feed.session.abort();\n\t\treturn true;\n\t}\n\n\t/** Drain ended: emit viewer_end (best-effort) and tear the feed down. */\n\tend(viewerFeedId: string, reason: \"granted\" | \"cancelled\" | \"error\"): void {\n\t\tconst feed = this.feeds.get(viewerFeedId);\n\t\tif (!feed) {\n\t\t\treturn;\n\t\t}\n\t\tfeed.ended = true;\n\t\tfeed.unsubscribeSession();\n\t\tthis.feeds.delete(viewerFeedId);\n\t\tthis.effects.sendTo(feed.connectionId, { type: \"viewer_end\", viewerFeedId, reason });\n\t}\n\n\thas(viewerFeedId: string): boolean {\n\t\treturn this.feeds.has(viewerFeedId);\n\t}\n}\n"]}

package/dist/daemon/workspace-directory.d.ts

@@ -0,0 +1,35 @@
+export type WorkspaceDirectoryError = "invalid_working_directory" | "workspace_directory_not_found" | "workspace_directory_not_directory" | "workspace_directory_escape" | "workspace_directory_unavailable";
+export interface WorkspaceDirectoryResolution {
+    absolutePath: string;
+    /** POSIX-style path relative to the workspace root. Undefined means the root. */
+    relativePath?: string;
+}
+export interface WorkspaceDirectoryEntry {
+    name: string;
+    /** POSIX-style path relative to the workspace root. */
+    path: string;
+}
+export declare function normalizeWorkspaceRelativeDirectory(value: string | undefined): {
+    ok: true;
+    relativePath?: string;
+} | {
+    ok: false;
+    error: WorkspaceDirectoryError;
+};
+export declare function resolveWorkspaceDirectory(workspaceRoot: string, workingDirectory?: string): Promise<{
+    ok: true;
+    value: WorkspaceDirectoryResolution;
+} | {
+    ok: false;
+    error: WorkspaceDirectoryError;
+}>;
+export declare function listWorkspaceDirectories(workspaceRoot: string, path?: string): Promise<{
+    ok: true;
+    currentPath?: string;
+    directories: WorkspaceDirectoryEntry[];
+} | {
+    ok: false;
+    error: WorkspaceDirectoryError;
+}>;
+export declare function isPathInside(root: string, candidate: string): boolean;
+//# sourceMappingURL=workspace-directory.d.ts.map

package/dist/daemon/workspace-directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-directory.d.ts","sourceRoot":"","sources":["../../src/daemon/workspace-directory.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,uBAAuB,GAChC,2BAA2B,GAC3B,+BAA+B,GAC/B,mCAAmC,GACnC,4BAA4B,GAC5B,iCAAiC,CAAC;AAErC,MAAM,WAAW,4BAA4B;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,mCAAmC,CAClD,KAAK,EAAE,MAAM,GAAG,SAAS,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,uBAAuB,CAAA;CAAE,CA6BrF;AAED,wBAAsB,yBAAyB,CAC9C,aAAa,EAAE,MAAM,EACrB,gBAAgB,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,4BAA4B,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,uBAAuB,CAAA;CAAE,CAAC,CAoC5G;AAED,wBAAsB,wBAAwB,CAC7C,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,MAAM,GACX,OAAO,CACP;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,uBAAuB,EAAE,CAAA;CAAE,GAC1E;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,uBAAuB,CAAA;CAAE,CAC/C,CAkBA;AAYD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAGrE","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { readdir, realpath, stat } from \"node:fs/promises\";\nimport { isAbsolute, posix, relative, resolve, sep } from \"node:path\";\n\nexport type WorkspaceDirectoryError =\n\t| \"invalid_working_directory\"\n\t| \"workspace_directory_not_found\"\n\t| \"workspace_directory_not_directory\"\n\t| \"workspace_directory_escape\"\n\t| \"workspace_directory_unavailable\";\n\nexport interface WorkspaceDirectoryResolution {\n\tabsolutePath: string;\n\t/** POSIX-style path relative to the workspace root. Undefined means the root. */\n\trelativePath?: string;\n}\n\nexport interface WorkspaceDirectoryEntry {\n\tname: string;\n\t/** POSIX-style path relative to the workspace root. */\n\tpath: string;\n}\n\nexport function normalizeWorkspaceRelativeDirectory(\n\tvalue: string | undefined,\n): { ok: true; relativePath?: string } | { ok: false; error: WorkspaceDirectoryError } {\n\tif (value === undefined) {\n\t\treturn { ok: true };\n\t}\n\tif (value.length === 0 || value === \".\") {\n\t\treturn { ok: false, error: \"invalid_working_directory\" };\n\t}\n\tif (\n\t\tvalue.length > 4096 ||\n\t\tBuffer.byteLength(value, \"utf8\") > 8192 ||\n\t\tvalue.includes(\"\\0\") ||\n\t\thasAsciiControlCharacter(value) ||\n\t\tvalue.includes(\"\\\\\") ||\n\t\tvalue.startsWith(\"/\") ||\n\t\t/^[A-Za-z]:/.test(value) ||\n\t\tvalue.startsWith(\"//\")\n\t) {\n\t\treturn { ok: false, error: \"invalid_working_directory\" };\n\t}\n\tfor (const segment of value.split(\"/\")) {\n\t\tif (segment === \"\" || segment === \".\" || segment === \"..\" || segment.toLowerCase() === \".git\") {\n\t\t\treturn { ok: false, error: \"invalid_working_directory\" };\n\t\t}\n\t}\n\tconst normalized = posix.normalize(value);\n\tif (normalized === \".\" || normalized === \"..\" || normalized.startsWith(\"../\") || posix.isAbsolute(normalized)) {\n\t\treturn { ok: false, error: \"invalid_working_directory\" };\n\t}\n\treturn { ok: true, relativePath: normalized };\n}\n\nexport async function resolveWorkspaceDirectory(\n\tworkspaceRoot: string,\n\tworkingDirectory?: string,\n): Promise<{ ok: true; value: WorkspaceDirectoryResolution } | { ok: false; error: WorkspaceDirectoryError }> {\n\tconst normalized = normalizeWorkspaceRelativeDirectory(workingDirectory);\n\tif (!normalized.ok) {\n\t\treturn normalized;\n\t}\n\tlet rootReal: string;\n\tlet candidateReal: string;\n\ttry {\n\t\trootReal = await realpath(workspaceRoot);\n\t} catch {\n\t\treturn { ok: false, error: \"workspace_directory_unavailable\" };\n\t}\n\tconst candidatePath = normalized.relativePath ? resolve(rootReal, normalized.relativePath) : rootReal;\n\ttry {\n\t\tcandidateReal = await realpath(candidatePath);\n\t} catch {\n\t\treturn { ok: false, error: \"workspace_directory_not_found\" };\n\t}\n\tif (!isPathInside(rootReal, candidateReal)) {\n\t\treturn { ok: false, error: \"workspace_directory_escape\" };\n\t}\n\ttry {\n\t\tconst info = await stat(candidateReal);\n\t\tif (!info.isDirectory()) {\n\t\t\treturn { ok: false, error: \"workspace_directory_not_directory\" };\n\t\t}\n\t} catch {\n\t\treturn { ok: false, error: \"workspace_directory_unavailable\" };\n\t}\n\treturn {\n\t\tok: true,\n\t\tvalue: {\n\t\t\tabsolutePath: candidateReal,\n\t\t\trelativePath: normalized.relativePath,\n\t\t},\n\t};\n}\n\nexport async function listWorkspaceDirectories(\n\tworkspaceRoot: string,\n\tpath?: string,\n): Promise<\n\t| { ok: true; currentPath?: string; directories: WorkspaceDirectoryEntry[] }\n\t| { ok: false; error: WorkspaceDirectoryError }\n> {\n\tconst resolved = await resolveWorkspaceDirectory(workspaceRoot, path);\n\tif (!resolved.ok) {\n\t\treturn resolved;\n\t}\n\ttry {\n\t\tconst entries = await readdir(resolved.value.absolutePath, { withFileTypes: true });\n\t\tconst directories = entries\n\t\t\t.filter((entry) => entry.isDirectory() && entry.name.toLowerCase() !== \".git\")\n\t\t\t.map((entry) => ({\n\t\t\t\tname: entry.name,\n\t\t\t\tpath: resolved.value.relativePath ? posix.join(resolved.value.relativePath, entry.name) : entry.name,\n\t\t\t}))\n\t\t\t.sort((a, b) => a.name.localeCompare(b.name, undefined, { sensitivity: \"base\" }));\n\t\treturn { ok: true, currentPath: resolved.value.relativePath, directories };\n\t} catch {\n\t\treturn { ok: false, error: \"workspace_directory_unavailable\" };\n\t}\n}\n\nfunction hasAsciiControlCharacter(value: string): boolean {\n\tfor (let index = 0; index < value.length; index += 1) {\n\t\tconst code = value.charCodeAt(index);\n\t\tif (code <= 0x1f || code === 0x7f) {\n\t\t\treturn true;\n\t\t}\n\t}\n\treturn false;\n}\n\nexport function isPathInside(root: string, candidate: string): boolean {\n\tconst rel = relative(root, candidate);\n\treturn rel === \"\" || (rel !== \"..\" && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));\n}\n"]}

package/dist/daemon/workspace-directory.js

@@ -0,0 +1,105 @@
+import { Buffer } from "node:buffer";
+import { readdir, realpath, stat } from "node:fs/promises";
+import { isAbsolute, posix, relative, resolve, sep } from "node:path";
+export function normalizeWorkspaceRelativeDirectory(value) {
+    if (value === undefined) {
+        return { ok: true };
+    }
+    if (value.length === 0 || value === ".") {
+        return { ok: false, error: "invalid_working_directory" };
+    }
+    if (value.length > 4096 ||
+        Buffer.byteLength(value, "utf8") > 8192 ||
+        value.includes("\0") ||
+        hasAsciiControlCharacter(value) ||
+        value.includes("\\") ||
+        value.startsWith("/") ||
+        /^[A-Za-z]:/.test(value) ||
+        value.startsWith("//")) {
+        return { ok: false, error: "invalid_working_directory" };
+    }
+    for (const segment of value.split("/")) {
+        if (segment === "" || segment === "." || segment === ".." || segment.toLowerCase() === ".git") {
+            return { ok: false, error: "invalid_working_directory" };
+        }
+    }
+    const normalized = posix.normalize(value);
+    if (normalized === "." || normalized === ".." || normalized.startsWith("../") || posix.isAbsolute(normalized)) {
+        return { ok: false, error: "invalid_working_directory" };
+    }
+    return { ok: true, relativePath: normalized };
+}
+export async function resolveWorkspaceDirectory(workspaceRoot, workingDirectory) {
+    const normalized = normalizeWorkspaceRelativeDirectory(workingDirectory);
+    if (!normalized.ok) {
+        return normalized;
+    }
+    let rootReal;
+    let candidateReal;
+    try {
+        rootReal = await realpath(workspaceRoot);
+    }
+    catch {
+        return { ok: false, error: "workspace_directory_unavailable" };
+    }
+    const candidatePath = normalized.relativePath ? resolve(rootReal, normalized.relativePath) : rootReal;
+    try {
+        candidateReal = await realpath(candidatePath);
+    }
+    catch {
+        return { ok: false, error: "workspace_directory_not_found" };
+    }
+    if (!isPathInside(rootReal, candidateReal)) {
+        return { ok: false, error: "workspace_directory_escape" };
+    }
+    try {
+        const info = await stat(candidateReal);
+        if (!info.isDirectory()) {
+            return { ok: false, error: "workspace_directory_not_directory" };
+        }
+    }
+    catch {
+        return { ok: false, error: "workspace_directory_unavailable" };
+    }
+    return {
+        ok: true,
+        value: {
+            absolutePath: candidateReal,
+            relativePath: normalized.relativePath,
+        },
+    };
+}
+export async function listWorkspaceDirectories(workspaceRoot, path) {
+    const resolved = await resolveWorkspaceDirectory(workspaceRoot, path);
+    if (!resolved.ok) {
+        return resolved;
+    }
+    try {
+        const entries = await readdir(resolved.value.absolutePath, { withFileTypes: true });
+        const directories = entries
+            .filter((entry) => entry.isDirectory() && entry.name.toLowerCase() !== ".git")
+            .map((entry) => ({
+            name: entry.name,
+            path: resolved.value.relativePath ? posix.join(resolved.value.relativePath, entry.name) : entry.name,
+        }))
+            .sort((a, b) => a.name.localeCompare(b.name, undefined, { sensitivity: "base" }));
+        return { ok: true, currentPath: resolved.value.relativePath, directories };
+    }
+    catch {
+        return { ok: false, error: "workspace_directory_unavailable" };
+    }
+}
+function hasAsciiControlCharacter(value) {
+    for (let index = 0; index < value.length; index += 1) {
+        const code = value.charCodeAt(index);
+        if (code <= 0x1f || code === 0x7f) {
+            return true;
+        }
+    }
+    return false;
+}
+export function isPathInside(root, candidate) {
+    const rel = relative(root, candidate);
+    return rel === "" || (rel !== ".." && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));
+}
+//# sourceMappingURL=workspace-directory.js.map

package/dist/daemon/workspace-directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-directory.js","sourceRoot":"","sources":["../../src/daemon/workspace-directory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAqBtE,MAAM,UAAU,mCAAmC,CAClD,KAAyB,EAC6D;IACtF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC1D,CAAC;IACD,IACC,KAAK,CAAC,MAAM,GAAG,IAAI;QACnB,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI;QACvC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,wBAAwB,CAAC,KAAK,CAAC;QAC/B,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QACxB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EACrB,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAC/F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QAC1D,CAAC;IACF,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AAAA,CAC9C;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,aAAqB,EACrB,gBAAyB,EACoF;IAC7G,MAAM,UAAU,GAAG,mCAAmC,CAAC,gBAAgB,CAAC,CAAC;IACzE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,IAAI,QAAgB,CAAC;IACrB,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtG,IAAI,CAAC;QACJ,aAAa,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QAClE,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;IAChE,CAAC;IACD,OAAO;QACN,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACN,YAAY,EAAE,aAAa;YAC3B,YAAY,EAAE,UAAU,CAAC,YAAY;SACrC;KACD,CAAC;AAAA,CACF;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,aAAqB,EACrB,IAAa,EAIZ;IACD,MAAM,QAAQ,GAAG,MAAM,yBAAyB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACtE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,WAAW,GAAG,OAAO;aACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;aAC7E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;SACpG,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACnF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;IAChE,CAAC;AAAA,CACD;AAED,SAAS,wBAAwB,CAAC,KAAa,EAAW;IACzD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,SAAiB,EAAW;IACtE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAAA,CACvF","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport { readdir, realpath, stat } from \"node:fs/promises\";\nimport { isAbsolute, posix, relative, resolve, sep } from \"node:path\";\n\nexport type WorkspaceDirectoryError =\n\t| \"invalid_working_directory\"\n\t| \"workspace_directory_not_found\"\n\t| \"workspace_directory_not_directory\"\n\t| \"workspace_directory_escape\"\n\t| \"workspace_directory_unavailable\";\n\nexport interface WorkspaceDirectoryResolution {\n\tabsolutePath: string;\n\t/** POSIX-style path relative to the workspace root. Undefined means the root. */\n\trelativePath?: string;\n}\n\nexport interface WorkspaceDirectoryEntry {\n\tname: string;\n\t/** POSIX-style path relative to the workspace root. */\n\tpath: string;\n}\n\nexport function normalizeWorkspaceRelativeDirectory(\n\tvalue: string | undefined,\n): { ok: true; relativePath?: string } | { ok: false; error: WorkspaceDirectoryError } {\n\tif (value === undefined) {\n\t\treturn { ok: true };\n\t}\n\tif (value.length === 0 || value === \".\") {\n\t\treturn { ok: false, error: \"invalid_working_directory\" };\n\t}\n\tif (\n\t\tvalue.length > 4096 ||\n\t\tBuffer.byteLength(value, \"utf8\") > 8192 ||\n\t\tvalue.includes(\"\\0\") ||\n\t\thasAsciiControlCharacter(value) ||\n\t\tvalue.includes(\"\\\\\") ||\n\t\tvalue.startsWith(\"/\") ||\n\t\t/^[A-Za-z]:/.test(value) ||\n\t\tvalue.startsWith(\"//\")\n\t) {\n\t\treturn { ok: false, error: \"invalid_working_directory\" };\n\t}\n\tfor (const segment of value.split(\"/\")) {\n\t\tif (segment === \"\" || segment === \".\" || segment === \"..\" || segment.toLowerCase() === \".git\") {\n\t\t\treturn { ok: false, error: \"invalid_working_directory\" };\n\t\t}\n\t}\n\tconst normalized = posix.normalize(value);\n\tif (normalized === \".\" || normalized === \"..\" || normalized.startsWith(\"../\") || posix.isAbsolute(normalized)) {\n\t\treturn { ok: false, error: \"invalid_working_directory\" };\n\t}\n\treturn { ok: true, relativePath: normalized };\n}\n\nexport async function resolveWorkspaceDirectory(\n\tworkspaceRoot: string,\n\tworkingDirectory?: string,\n): Promise<{ ok: true; value: WorkspaceDirectoryResolution } | { ok: false; error: WorkspaceDirectoryError }> {\n\tconst normalized = normalizeWorkspaceRelativeDirectory(workingDirectory);\n\tif (!normalized.ok) {\n\t\treturn normalized;\n\t}\n\tlet rootReal: string;\n\tlet candidateReal: string;\n\ttry {\n\t\trootReal = await realpath(workspaceRoot);\n\t} catch {\n\t\treturn { ok: false, error: \"workspace_directory_unavailable\" };\n\t}\n\tconst candidatePath = normalized.relativePath ? resolve(rootReal, normalized.relativePath) : rootReal;\n\ttry {\n\t\tcandidateReal = await realpath(candidatePath);\n\t} catch {\n\t\treturn { ok: false, error: \"workspace_directory_not_found\" };\n\t}\n\tif (!isPathInside(rootReal, candidateReal)) {\n\t\treturn { ok: false, error: \"workspace_directory_escape\" };\n\t}\n\ttry {\n\t\tconst info = await stat(candidateReal);\n\t\tif (!info.isDirectory()) {\n\t\t\treturn { ok: false, error: \"workspace_directory_not_directory\" };\n\t\t}\n\t} catch {\n\t\treturn { ok: false, error: \"workspace_directory_unavailable\" };\n\t}\n\treturn {\n\t\tok: true,\n\t\tvalue: {\n\t\t\tabsolutePath: candidateReal,\n\t\t\trelativePath: normalized.relativePath,\n\t\t},\n\t};\n}\n\nexport async function listWorkspaceDirectories(\n\tworkspaceRoot: string,\n\tpath?: string,\n): Promise<\n\t| { ok: true; currentPath?: string; directories: WorkspaceDirectoryEntry[] }\n\t| { ok: false; error: WorkspaceDirectoryError }\n> {\n\tconst resolved = await resolveWorkspaceDirectory(workspaceRoot, path);\n\tif (!resolved.ok) {\n\t\treturn resolved;\n\t}\n\ttry {\n\t\tconst entries = await readdir(resolved.value.absolutePath, { withFileTypes: true });\n\t\tconst directories = entries\n\t\t\t.filter((entry) => entry.isDirectory() && entry.name.toLowerCase() !== \".git\")\n\t\t\t.map((entry) => ({\n\t\t\t\tname: entry.name,\n\t\t\t\tpath: resolved.value.relativePath ? posix.join(resolved.value.relativePath, entry.name) : entry.name,\n\t\t\t}))\n\t\t\t.sort((a, b) => a.name.localeCompare(b.name, undefined, { sensitivity: \"base\" }));\n\t\treturn { ok: true, currentPath: resolved.value.relativePath, directories };\n\t} catch {\n\t\treturn { ok: false, error: \"workspace_directory_unavailable\" };\n\t}\n}\n\nfunction hasAsciiControlCharacter(value: string): boolean {\n\tfor (let index = 0; index < value.length; index += 1) {\n\t\tconst code = value.charCodeAt(index);\n\t\tif (code <= 0x1f || code === 0x7f) {\n\t\t\treturn true;\n\t\t}\n\t}\n\treturn false;\n}\n\nexport function isPathInside(root: string, candidate: string): boolean {\n\tconst rel = relative(root, candidate);\n\treturn rel === \"\" || (rel !== \"..\" && !rel.startsWith(`..${sep}`) && !isAbsolute(rel));\n}\n"]}

package/dist/daemon/workspace-streams.d.ts

@@ -0,0 +1,70 @@
+import { Buffer } from "node:buffer";
+import type { IrohRemoteAuditLogger } from "../core/remote/iroh/audit.ts";
+import type { IrohRemoteClientAuthorizationSuccess } from "../core/remote/iroh/authorization.ts";
+import { type IrohRemoteWorktreeRpcBackend } from "../core/remote/iroh/worktree-rpc.ts";
+import { type IrohBiStreamLike, type IrohBytes, type IrohRecvStreamLike } from "../core/rpc/iroh-transport.ts";
+import { type ConversationCommandContext, type RemoteRpcCommand } from "./conversation-commands.ts";
+export declare const DEFAULT_IROH_UTILITY_RPC_MAX_LINE_BYTES: number;
+export declare const WORKSPACE_UNREGISTERED_CLOSE_REASON = "workspace_unregistered";
+export declare function readLineFromIroh(recv: IrohRecvStreamLike, initial?: Buffer, options?: {
+    maxLineBytes?: number;
+}): Promise<{
+    line: string | undefined;
+    rest: Buffer;
+}>;
+export interface RemoteSanitizerOverrides {
+    /** Remote root for the sanitizer. Nested-repo worktrees map to /workspace/<source-root>. */
+    remoteWorkspacePath?: string;
+    /** Sanitizer root override (worktree-bound streams use the worktree path). */
+    workspacePath?: string;
+    /** Extra roots (parent checkout, worktrees root) redacted to remoteWorkspacePath. */
+    additionalRedactedPaths?: string[];
+}
+export declare function getRemoteSanitizerOptions(authorization: IrohRemoteClientAuthorizationSuccess, overrides?: RemoteSanitizerOverrides): {
+    remoteWorkspacePath: string;
+    workspacePath: string;
+    additionalRedactedPaths?: string[];
+};
+export declare function writeIrohRemoteJsonLine(send: IrohBiStreamLike["send"], value: object, authorization: IrohRemoteClientAuthorizationSuccess, sanitizerOverrides?: RemoteSanitizerOverrides): Promise<void>;
+export declare function parseRemoteRpcCommandLine(line: string): {
+    ok: true;
+    command: RemoteRpcCommand;
+} | {
+    ok: false;
+    response: object;
+};
+export interface WorkspaceStreamHooks {
+    auditLogger: IrohRemoteAuditLogger;
+    commandContext: ConversationCommandContext;
+    /** Unregister the workspace and tear down its streams/runtimes. Returns close counts. */
+    unregisterWorkspace(workspaceName: string, excludedStreamClose: () => void): Promise<{
+        ok: true;
+        closedStreamCount: number;
+        stoppedRuntimeCount: number;
+    } | {
+        ok: false;
+        error: string;
+        details?: Record<string, unknown>;
+    }>;
+}
+export interface WorkspaceStreamContext {
+    stream: IrohBiStreamLike;
+    initialInput: IrohBytes;
+    authorization: IrohRemoteClientAuthorizationSuccess;
+    /** Recheck the persisted grant revision before every utility command. */
+    isRpcGrantCurrent(): boolean | Promise<boolean>;
+    closeStream(reason?: string): void;
+}
+/** Serve a workspaceDiscovery stream: list_sessions only. */
+export declare function runWorkspaceDiscoveryStream(context: WorkspaceStreamContext, hooks: Pick<WorkspaceStreamHooks, "commandContext">): Promise<void>;
+/** Serve a workspaceManagement stream: workspace management RPCs. */
+export declare function runWorkspaceManagementStream(context: WorkspaceStreamContext, hooks: WorkspaceStreamHooks): Promise<void>;
+export interface WorktreeStreamHooks {
+    auditLogger: IrohRemoteAuditLogger;
+    worktrees: IrohRemoteWorktreeRpcBackend;
+    /** Extra roots redacted on every frame of this stream (worktrees root). */
+    additionalRedactedPaths?: string[];
+}
+/** Serve a manage_worktrees workspaceManagement stream: create/list/remove worktrees only. */
+export declare function runWorktreeManagementStream(context: WorkspaceStreamContext, hooks: WorktreeStreamHooks): Promise<void>;
+//# sourceMappingURL=workspace-streams.d.ts.map

package/dist/daemon/workspace-streams.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-streams.d.ts","sourceRoot":"","sources":["../../src/daemon/workspace-streams.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAMrC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,sCAAsC,CAAC;AAQjG,OAAO,EAGN,KAAK,4BAA4B,EACjC,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACN,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,kBAAkB,EAEvB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EACN,KAAK,0BAA0B,EAI/B,KAAK,gBAAgB,EACrB,MAAM,4BAA4B,CAAC;AAIpC,eAAO,MAAM,uCAAuC,QAAY,CAAC;AAEjE,eAAO,MAAM,mCAAmC,2BAA2B,CAAC;AAG5E,wBAAsB,gBAAgB,CACrC,IAAI,EAAE,kBAAkB,EACxB,OAAO,GAAE,MAAwB,EACjC,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACrC,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAKrD;AAED,MAAM,WAAW,wBAAwB;IACxC,4FAA4F;IAC5F,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACnC;AAED,wBAAgB,yBAAyB,CACxC,aAAa,EAAE,oCAAoC,EACnD,SAAS,GAAE,wBAA6B,GACtC;IACF,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACnC,CAQA;AAED,wBAAsB,uBAAuB,CAC5C,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAC9B,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,oCAAoC,EACnD,kBAAkB,GAAE,wBAA6B,GAC/C,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,wBAAgB,yBAAyB,CACxC,IAAI,EAAE,MAAM,GACV;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAwB3E;AA2CD,MAAM,WAAW,oBAAoB;IACpC,WAAW,EAAE,qBAAqB,CAAC;IACnC,cAAc,EAAE,0BAA0B,CAAC;IAC3C,yFAAyF;IACzF,mBAAmB,CAClB,aAAa,EAAE,MAAM,EACrB,mBAAmB,EAAE,MAAM,IAAI,GAC7B,OAAO,CACP;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,GACpE;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CACjE,CAAC;CACF;AAED,MAAM,WAAW,sBAAsB;IACtC,MAAM,EAAE,gBAAgB,CAAC;IACzB,YAAY,EAAE,SAAS,CAAC;IACxB,aAAa,EAAE,oCAAoC,CAAC;IACpD,yEAAyE;IACzE,iBAAiB,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,6DAA6D;AAC7D,wBAAsB,2BAA2B,CAChD,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,GACjD,OAAO,CAAC,IAAI,CAAC,CAoCf;AAgCD,qEAAqE;AACrE,wBAAsB,4BAA4B,CACjD,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC,CA2If;AAED,MAAM,WAAW,mBAAmB;IACnC,WAAW,EAAE,qBAAqB,CAAC;IACnC,SAAS,EAAE,4BAA4B,CAAC;IACxC,2EAA2E;IAC3E,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACnC;AAED,8FAA8F;AAC9F,wBAAsB,2BAA2B,CAChD,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,mBAAmB,GACxB,OAAO,CAAC,IAAI,CAAC,CAuDf","sourcesContent":["import { Buffer } from \"node:buffer\";\nimport {\n\tgetIrohRemoteRpcCommandCapabilities,\n\tgetMissingIrohRemoteRpcCapability,\n\tparseIrohRemoteRpcGrant,\n} from \"../core/remote/iroh/access-grant.ts\";\nimport type { IrohRemoteAuditLogger } from \"../core/remote/iroh/audit.ts\";\nimport type { IrohRemoteClientAuthorizationSuccess } from \"../core/remote/iroh/authorization.ts\";\nimport { isIrohRemoteWorkspaceName } from \"../core/remote/iroh/handshake.ts\";\nimport { sanitizeIrohRemoteOutbound } from \"../core/remote/iroh/outbound-filter.ts\";\nimport { isIrohRemoteWorkingDirectory } from \"../core/remote/iroh/protocol.ts\";\nimport {\n\tcreateIrohRemoteRpcCapabilityDeniedResponse,\n\tcreateIrohRemoteRpcErrorResponse,\n} from \"../core/remote/iroh/rpc-command-filter.ts\";\nimport {\n\thandleIrohRemoteWorktreeRpcCommand,\n\tIROH_REMOTE_WORKTREE_RPC_TYPES,\n\ttype IrohRemoteWorktreeRpcBackend,\n} from \"../core/remote/iroh/worktree-rpc.ts\";\nimport {\n\ttype IrohBiStreamLike,\n\ttype IrohBytes,\n\ttype IrohRecvStreamLike,\n\treadIrohJsonlLine,\n} from \"../core/rpc/iroh-transport.ts\";\nimport { serializeJsonLine } from \"../core/rpc/jsonl.ts\";\nimport {\n\ttype ConversationCommandContext,\n\tcreateRemoteListSessionsRpcResponse,\n\tcreateRpcSuccessResponse,\n\tgetRpcResponseId,\n\ttype RemoteRpcCommand,\n} from \"./conversation-commands.ts\";\nimport { listWorkspaceDirectories } from \"./workspace-directory.ts\";\n\nconst DEFAULT_READ_LIMIT = 64 * 1024;\nexport const DEFAULT_IROH_UTILITY_RPC_MAX_LINE_BYTES = 64 * 1024;\n\nexport const WORKSPACE_UNREGISTERED_CLOSE_REASON = \"workspace_unregistered\";\nconst LIST_WORKSPACE_DIRECTORIES_RPC_TYPE = \"list_workspace_directories\";\n\nexport async function readLineFromIroh(\n\trecv: IrohRecvStreamLike,\n\tinitial: Buffer = Buffer.alloc(0),\n\toptions: { maxLineBytes?: number } = {},\n): Promise<{ line: string | undefined; rest: Buffer }> {\n\treturn await readIrohJsonlLine(recv, initial, {\n\t\treadLimit: DEFAULT_READ_LIMIT,\n\t\tmaxLineBytes: options.maxLineBytes ?? DEFAULT_IROH_UTILITY_RPC_MAX_LINE_BYTES,\n\t});\n}\n\nexport interface RemoteSanitizerOverrides {\n\t/** Remote root for the sanitizer. Nested-repo worktrees map to /workspace/<source-root>. */\n\tremoteWorkspacePath?: string;\n\t/** Sanitizer root override (worktree-bound streams use the worktree path). */\n\tworkspacePath?: string;\n\t/** Extra roots (parent checkout, worktrees root) redacted to remoteWorkspacePath. */\n\tadditionalRedactedPaths?: string[];\n}\n\nexport function getRemoteSanitizerOptions(\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\toverrides: RemoteSanitizerOverrides = {},\n): {\n\tremoteWorkspacePath: string;\n\tworkspacePath: string;\n\tadditionalRedactedPaths?: string[];\n} {\n\treturn {\n\t\tremoteWorkspacePath: overrides.remoteWorkspacePath ?? \"/workspace\",\n\t\tworkspacePath: overrides.workspacePath ?? authorization.workspace.path,\n\t\t...(overrides.additionalRedactedPaths === undefined\n\t\t\t? {}\n\t\t\t: { additionalRedactedPaths: overrides.additionalRedactedPaths }),\n\t};\n}\n\nexport async function writeIrohRemoteJsonLine(\n\tsend: IrohBiStreamLike[\"send\"],\n\tvalue: object,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tsanitizerOverrides: RemoteSanitizerOverrides = {},\n): Promise<void> {\n\tconst sanitized = sanitizeIrohRemoteOutbound(value, getRemoteSanitizerOptions(authorization, sanitizerOverrides));\n\tawait send.writeAll(Array.from(Buffer.from(serializeJsonLine(sanitized), \"utf8\")));\n}\n\nexport function parseRemoteRpcCommandLine(\n\tline: string,\n): { ok: true; command: RemoteRpcCommand } | { ok: false; response: object } {\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(line);\n\t} catch {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(undefined, \"parse\", \"invalid_request\"),\n\t\t};\n\t}\n\tif (typeof parsed !== \"object\" || parsed === null || Array.isArray(parsed)) {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(undefined, \"unknown\", \"invalid_request\"),\n\t\t};\n\t}\n\tconst record = parsed as Record<string, unknown>;\n\tif (typeof record.type !== \"string\") {\n\t\treturn {\n\t\t\tok: false,\n\t\t\tresponse: createIrohRemoteRpcErrorResponse(getRpcResponseId(record), \"unknown\", \"invalid_request\"),\n\t\t};\n\t}\n\treturn { ok: true, command: record as RemoteRpcCommand };\n}\n\nfunction getUtilityCapabilityDenial(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n): object | undefined {\n\tconst required = getIrohRemoteRpcCommandCapabilities(command);\n\tif (required === undefined) return undefined;\n\tconst missing = getMissingIrohRemoteRpcCapability(\n\t\tparseIrohRemoteRpcGrant(authorization.client.rpcGrant, \"client rpcGrant\"),\n\t\trequired,\n\t);\n\treturn missing === undefined\n\t\t? undefined\n\t\t: createIrohRemoteRpcCapabilityDeniedResponse(getRpcResponseId(command), command.type, missing);\n}\n\nasync function runWorkspaceUtilityRpcLoop(\n\tstream: IrohBiStreamLike,\n\tinitialInput: IrohBytes,\n\thandleCommand: (line: string) => Promise<boolean>,\n): Promise<void> {\n\tlet buffer: Buffer = Buffer.from(initialInput);\n\twhile (true) {\n\t\tconst result = await readLineFromIroh(stream.recv, buffer);\n\t\tif (result.line === undefined) {\n\t\t\tif (result.rest.length > 0) {\n\t\t\t\tconst shouldClose = await handleCommand(result.rest.toString(\"utf8\"));\n\t\t\t\tif (shouldClose) {\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\n\t\tconst shouldClose = await handleCommand(result.line);\n\t\tif (shouldClose) {\n\t\t\treturn;\n\t\t}\n\t\tbuffer = result.rest;\n\t}\n}\n\nexport interface WorkspaceStreamHooks {\n\tauditLogger: IrohRemoteAuditLogger;\n\tcommandContext: ConversationCommandContext;\n\t/** Unregister the workspace and tear down its streams/runtimes. Returns close counts. */\n\tunregisterWorkspace(\n\t\tworkspaceName: string,\n\t\texcludedStreamClose: () => void,\n\t): Promise<\n\t\t| { ok: true; closedStreamCount: number; stoppedRuntimeCount: number }\n\t\t| { ok: false; error: string; details?: Record<string, unknown> }\n\t>;\n}\n\nexport interface WorkspaceStreamContext {\n\tstream: IrohBiStreamLike;\n\tinitialInput: IrohBytes;\n\tauthorization: IrohRemoteClientAuthorizationSuccess;\n\t/** Recheck the persisted grant revision before every utility command. */\n\tisRpcGrantCurrent(): boolean | Promise<boolean>;\n\tcloseStream(reason?: string): void;\n}\n\n/** Serve a workspaceDiscovery stream: list_sessions only. */\nexport async function runWorkspaceDiscoveryStream(\n\tcontext: WorkspaceStreamContext,\n\thooks: Pick<WorkspaceStreamHooks, \"commandContext\">,\n): Promise<void> {\n\tconst { stream, authorization } = context;\n\tawait runWorkspaceUtilityRpcLoop(stream, context.initialInput, async (line) => {\n\t\tif (!(await context.isRpcGrantCurrent())) {\n\t\t\tcontext.closeStream(\"access_updated\");\n\t\t\treturn true;\n\t\t}\n\t\tconst parsed = parseRemoteRpcCommandLine(line);\n\t\tif (!parsed.ok) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, parsed.response, authorization);\n\t\t\treturn false;\n\t\t}\n\t\tif (parsed.command.type !== \"list_sessions\") {\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteRpcErrorResponse(\n\t\t\t\t\tgetRpcResponseId(parsed.command),\n\t\t\t\t\tparsed.command.type,\n\t\t\t\t\t\"unsupported_on_workspace_discovery_stream\",\n\t\t\t\t),\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t\tconst denied = getUtilityCapabilityDenial(parsed.command, authorization);\n\t\tif (denied) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, denied, authorization);\n\t\t\treturn false;\n\t\t}\n\t\tawait writeIrohRemoteJsonLine(\n\t\t\tstream.send,\n\t\t\tawait createRemoteListSessionsRpcResponse(parsed.command, authorization, hooks.commandContext),\n\t\t\tauthorization,\n\t\t);\n\t\treturn false;\n\t});\n}\n\nfunction parseWorkspaceManagementWorkspaceRequest(\n\tcommand: RemoteRpcCommand,\n\tauthorization: IrohRemoteClientAuthorizationSuccess,\n\tallowedFields: readonly string[],\n): { ok: true; workspaceName: string } | { ok: false; error: string } {\n\tif (typeof command.workspaceName !== \"string\" || !isIrohRemoteWorkspaceName(command.workspaceName)) {\n\t\treturn { ok: false, error: \"invalid_workspace_payload\" };\n\t}\n\tif (command.workspaceName !== authorization.workspace.name) {\n\t\treturn { ok: false, error: \"session_mismatch\" };\n\t}\n\tconst allowed = new Set(allowedFields);\n\tfor (const field of Object.keys(command)) {\n\t\tif (!allowed.has(field)) {\n\t\t\treturn { ok: false, error: \"invalid_request\" };\n\t\t}\n\t}\n\treturn { ok: true, workspaceName: command.workspaceName };\n}\n\nfunction parseWorkspaceDirectoryPath(command: RemoteRpcCommand): string | undefined | { error: string } {\n\tif (command.path === undefined) {\n\t\treturn undefined;\n\t}\n\tif (typeof command.path !== \"string\" || !isIrohRemoteWorkingDirectory(command.path)) {\n\t\treturn { error: \"invalid_working_directory\" };\n\t}\n\treturn command.path;\n}\n\n/** Serve a workspaceManagement stream: workspace management RPCs. */\nexport async function runWorkspaceManagementStream(\n\tcontext: WorkspaceStreamContext,\n\thooks: WorkspaceStreamHooks,\n): Promise<void> {\n\tconst { stream, authorization } = context;\n\tawait runWorkspaceUtilityRpcLoop(stream, context.initialInput, async (line) => {\n\t\tif (!(await context.isRpcGrantCurrent())) {\n\t\t\tcontext.closeStream(\"access_updated\");\n\t\t\treturn true;\n\t\t}\n\t\tconst parsed = parseRemoteRpcCommandLine(line);\n\t\tif (!parsed.ok) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, parsed.response, authorization);\n\t\t\treturn false;\n\t\t}\n\t\tif (\n\t\t\tparsed.command.type !== \"unregister_workspace\" &&\n\t\t\tparsed.command.type !== LIST_WORKSPACE_DIRECTORIES_RPC_TYPE\n\t\t) {\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteRpcErrorResponse(\n\t\t\t\t\tgetRpcResponseId(parsed.command),\n\t\t\t\t\tparsed.command.type,\n\t\t\t\t\t\"unsupported_on_workspace_management_stream\",\n\t\t\t\t),\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t\tconst denied = getUtilityCapabilityDenial(parsed.command, authorization);\n\t\tif (denied) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, denied, authorization);\n\t\t\treturn false;\n\t\t}\n\t\tconst id = getRpcResponseId(parsed.command);\n\t\tif (parsed.command.type === LIST_WORKSPACE_DIRECTORIES_RPC_TYPE) {\n\t\t\tconst request = parseWorkspaceManagementWorkspaceRequest(parsed.command, authorization, [\n\t\t\t\t\"id\",\n\t\t\t\t\"type\",\n\t\t\t\t\"workspaceName\",\n\t\t\t\t\"path\",\n\t\t\t]);\n\t\t\tif (!request.ok) {\n\t\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\t\tstream.send,\n\t\t\t\t\tcreateIrohRemoteRpcErrorResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, request.error),\n\t\t\t\t\tauthorization,\n\t\t\t\t);\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tconst path = parseWorkspaceDirectoryPath(parsed.command);\n\t\t\tif (typeof path === \"object\") {\n\t\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\t\tstream.send,\n\t\t\t\t\tcreateIrohRemoteRpcErrorResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, path.error),\n\t\t\t\t\tauthorization,\n\t\t\t\t);\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tconst listed = await listWorkspaceDirectories(authorization.workspace.path, path);\n\t\t\tif (!listed.ok) {\n\t\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\t\tstream.send,\n\t\t\t\t\tcreateIrohRemoteRpcErrorResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, listed.error),\n\t\t\t\t\tauthorization,\n\t\t\t\t);\n\t\t\t\treturn false;\n\t\t\t}\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateRpcSuccessResponse(id, LIST_WORKSPACE_DIRECTORIES_RPC_TYPE, {\n\t\t\t\t\tworkspaceName: request.workspaceName,\n\t\t\t\t\t...(listed.currentPath === undefined ? {} : { path: listed.currentPath }),\n\t\t\t\t\tdirectories: listed.directories,\n\t\t\t\t}),\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t\tconst request = parseWorkspaceManagementWorkspaceRequest(parsed.command, authorization, [\n\t\t\t\"id\",\n\t\t\t\"type\",\n\t\t\t\"workspaceName\",\n\t\t]);\n\t\tif (!request.ok) {\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteRpcErrorResponse(id, \"unregister_workspace\", request.error),\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\n\t\tlet excludedClosed = false;\n\t\tconst result = await hooks.unregisterWorkspace(request.workspaceName, () => {\n\t\t\texcludedClosed = true;\n\t\t});\n\t\tif (!result.ok) {\n\t\t\tawait hooks.auditLogger\n\t\t\t\t.log({\n\t\t\t\t\ttype: \"workspace_unregistered\",\n\t\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\t\tworkspace: request.workspaceName,\n\t\t\t\t\tsuccess: false,\n\t\t\t\t\terror: result.error,\n\t\t\t\t\tdetails: { source: \"remote_workspace_management_stream\", ...(result.details ?? {}) },\n\t\t\t\t})\n\t\t\t\t.catch(() => {});\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteRpcErrorResponse(id, \"unregister_workspace\", result.error),\n\t\t\t\tauthorization,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t\tawait hooks.auditLogger\n\t\t\t.log({\n\t\t\t\ttype: \"workspace_unregistered\",\n\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\tworkspace: request.workspaceName,\n\t\t\t\tsuccess: true,\n\t\t\t\tdetails: {\n\t\t\t\t\tclosedStreamCount: result.closedStreamCount,\n\t\t\t\t\tsource: \"remote_workspace_management_stream\",\n\t\t\t\t\tstoppedRuntimeCount: result.stoppedRuntimeCount,\n\t\t\t\t},\n\t\t\t})\n\t\t\t.catch(() => {});\n\t\tawait writeIrohRemoteJsonLine(\n\t\t\tstream.send,\n\t\t\tcreateRpcSuccessResponse(id, \"unregister_workspace\", {\n\t\t\t\tworkspaceName: request.workspaceName,\n\t\t\t\tunregistered: true,\n\t\t\t}),\n\t\t\tauthorization,\n\t\t);\n\t\tif (!excludedClosed) {\n\t\t\tcontext.closeStream(WORKSPACE_UNREGISTERED_CLOSE_REASON);\n\t\t}\n\t\treturn true;\n\t});\n}\n\nexport interface WorktreeStreamHooks {\n\tauditLogger: IrohRemoteAuditLogger;\n\tworktrees: IrohRemoteWorktreeRpcBackend;\n\t/** Extra roots redacted on every frame of this stream (worktrees root). */\n\tadditionalRedactedPaths?: string[];\n}\n\n/** Serve a manage_worktrees workspaceManagement stream: create/list/remove worktrees only. */\nexport async function runWorktreeManagementStream(\n\tcontext: WorkspaceStreamContext,\n\thooks: WorktreeStreamHooks,\n): Promise<void> {\n\tconst { stream, authorization } = context;\n\tconst sanitizerOverrides = { additionalRedactedPaths: hooks.additionalRedactedPaths };\n\tawait runWorkspaceUtilityRpcLoop(stream, context.initialInput, async (line) => {\n\t\tif (!(await context.isRpcGrantCurrent())) {\n\t\t\tcontext.closeStream(\"access_updated\");\n\t\t\treturn true;\n\t\t}\n\t\tconst parsed = parseRemoteRpcCommandLine(line);\n\t\tif (!parsed.ok) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, parsed.response, authorization, sanitizerOverrides);\n\t\t\treturn false;\n\t\t}\n\t\tif (!IROH_REMOTE_WORKTREE_RPC_TYPES.has(parsed.command.type)) {\n\t\t\tawait writeIrohRemoteJsonLine(\n\t\t\t\tstream.send,\n\t\t\t\tcreateIrohRemoteRpcErrorResponse(\n\t\t\t\t\tgetRpcResponseId(parsed.command),\n\t\t\t\t\tparsed.command.type,\n\t\t\t\t\t\"unsupported_on_workspace_management_stream\",\n\t\t\t\t),\n\t\t\t\tauthorization,\n\t\t\t\tsanitizerOverrides,\n\t\t\t);\n\t\t\treturn false;\n\t\t}\n\t\tconst denied = getUtilityCapabilityDenial(parsed.command, authorization);\n\t\tif (denied) {\n\t\t\tawait writeIrohRemoteJsonLine(stream.send, denied, authorization, sanitizerOverrides);\n\t\t\treturn false;\n\t\t}\n\t\tconst result = await handleIrohRemoteWorktreeRpcCommand(parsed.command, {\n\t\t\tauthorizedWorkspaceName: authorization.workspace.name,\n\t\t\tbackend: hooks.worktrees,\n\t\t});\n\t\tif (!result.handled) {\n\t\t\treturn false;\n\t\t}\n\t\tif (parsed.command.type !== \"list_worktrees\") {\n\t\t\tawait hooks.auditLogger\n\t\t\t\t.log({\n\t\t\t\t\ttype:\n\t\t\t\t\t\tresult.audit?.type ??\n\t\t\t\t\t\t(parsed.command.type === \"create_worktree\" ? \"worktree_created\" : \"worktree_removed\"),\n\t\t\t\t\tclientNodeId: authorization.client.nodeId,\n\t\t\t\t\tworkspace: authorization.workspace.name,\n\t\t\t\t\tsuccess: result.response.success,\n\t\t\t\t\t...(result.response.success ? {} : { error: result.response.error }),\n\t\t\t\t\tdetails: { source: \"remote_worktree_management_stream\", ...(result.audit?.details ?? {}) },\n\t\t\t\t})\n\t\t\t\t.catch(() => {});\n\t\t}\n\t\tawait writeIrohRemoteJsonLine(stream.send, result.response, authorization, sanitizerOverrides);\n\t\treturn false;\n\t});\n}\n"]}