@hansjm10/volt-coding-agent 0.0.0-bootstrap.0 → 0.1.0

package/dist/core/remote/iroh/outbound-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbound-filter.js","sourceRoot":"","sources":["../../../../src/core/remote/iroh/outbound-filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAGxC,MAAM,CAAC,MAAM,qCAAqC,GAAG,6BAA6B,CAAC;AACnF,MAAM,CAAC,MAAM,gCAAgC,GAAG,wBAAwB,CAAC;AACzE,MAAM,CAAC,MAAM,iCAAiC,GAAG,yBAAyB,CAAC;AAE3E,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;AAC3E,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACzC,KAAK;IACL,YAAY;IACZ,eAAe;IACf,UAAU;IACV,YAAY;IACZ,eAAe;IACf,MAAM;IACN,aAAa;IACb,WAAW;CACX,CAAC,CAAC;AAiCH,MAAM,UAAU,4CAA4C,CAAC,OAAwC,EAAgB;IACpH,MAAM,gBAAgB,GAAuC;QAC5D,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;KACxD,CAAC;IACF,OAAO;QACN,KAAK,CAAC,KAAK,EAAE;YACZ,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,0BAA0B,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAAA,CACpF;QACD,MAAM,CAAC,OAAuB,EAAc;YAC3C,OAAO,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAA,CACzC;QACD,OAAO,CAAC,OAAwB,EAAc;YAC7C,OAAO,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAC,CAAC,CAAC,CAAC;QAAA,CAC1D;QACD,KAAK,CAAC,mBAAmB,GAAG;YAC3B,MAAM,OAAO,CAAC,SAAS,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAAA,CAChD;QACD,KAAK,CAAC,KAAK,GAAG;YACb,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;QAAA,CAClC;QACD,KAAK,GAAG;YACP,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAAA,CACjC;KACD,CAAC;AAAA,CACF;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAa,EAAE,OAA2C,EAAU;IAC9G,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAAA,CACxE;AAED,MAAM,UAAU,kCAAkC,CAAC,IAAY,EAAE,OAA2C,EAAU;IACrH,MAAM,OAAO,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,OAAO,GAAG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,SAAS,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/D,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAAA,CACvE;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACxD,QAA4C,EAC5C,OAAmD,EACnC;IAChB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACnD,MAAM,GAAG,IAAI,CAAC;QAAA,CACd,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;AAAA,CACD;AAED,SAAS,sBAAsB,CAAC,OAA2C,EAAsC;IAChH,MAAM,qBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC7D,gFAAgF;IAChF,iFAAiF;IACjF,mFAAmF;IACnF,kFAAkF;IAClF,sEAAsE;IACtE,MAAM,aAAa,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7D,4EAA4E;IAC5E,mEAAmE;IACnE,MAAM,aAAa,GAAG;QACrB,qBAAqB;QACrB,GAAG,CAAC,OAAO,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;KACzE,CAAC;IACF,MAAM,qBAAqB,GAAG;QAC7B,GAAG,IAAI,GAAG,CACT,aAAa;aACX,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;aACjE,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CACtE;KACD;SACC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO;QACN,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,YAAY;QAChE,aAAa;QACb,qBAAqB;KACrB,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CACrB,KAAc,EACd,OAA2C,EAC3C,SAA6B,EACnB;IACV,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,sBAAsB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,SAAS;QACV,CAAC;QACD,MAAM,cAAc,GAAG,+BAA+B,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC;YACxE,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAClC,uBAAuB,CAAC,SAAS,EAAE,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;QACrF,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,+BAA+B,CACvC,MAA+B,EAC/B,GAAW,EACX,KAAc,EACI;IAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,CACN,GAAG,KAAK,IAAI;QACZ,CAAC,GAAG,KAAK,MAAM,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,GAAG,KAAK,eAAe,IAAI,oBAAoB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC,GAAG,KAAK,mBAAmB,IAAI,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACzE,CAAC,GAAG,KAAK,kBAAkB,IAAI,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CACxE,CAAC;AAAA,CACF;AAED,SAAS,oBAAoB,CAAC,MAA+B,EAAW;IACvE,OAAO,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAAA,CAC9G;AAED,SAAS,oBAAoB,CAAC,MAA+B,EAAE,IAAY,EAAW;IACrF,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;AAAA,CAC5B;AAED,KAAK,UAAU,kBAAkB,CAChC,MAAc,EACd,OAAmD,EACnD,OAA+B,EACf;IAChB,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,OAAO,IAAI,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACR,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;QACpC,MAAM,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;AAAA,CACD;AAED,KAAK,UAAU,sBAAsB,CACpC,IAAY,EACZ,OAAmD,EACnC;IAChB,MAAM,aAAa,GAAG,kCAAkC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACvC,OAAO,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC;AAAA,CAChC;AAED,SAAS,sBAAsB,CAAC,SAA6B,EAAW;IACvE,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,yBAAyB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAAA,CAC7F;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,OAA2C,EAAU;IAC9F,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO,UAAU,CAAC;IACnB,CAAC;IACD,IAAI,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,qCAAqC,CAAC;IAC9C,CAAC;IACD,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,iCAAiC,CAAC;IAC1C,CAAC;IACD,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,gCAAgC,CAAC;IACzC,CAAC;IACD,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACtG,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAAA,CAC1C;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,OAA2C,EAAU;IAC/F,OAAO,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAAA,CACvD;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,OAA2C,EAAU;IAC9F,OAAO,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AAAA,CAC1D;AAED,SAAS,uBAAuB,CAAC,MAA+B,EAAE,GAAW,EAAE,KAAc,EAAQ;IACpG,MAAM,CAAC,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;AAAA,CAChD;AAED,SAAS,kBAAkB,CAAC,MAA+B,EAAE,GAAW,EAAU;IACjF,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,WAAW,CAAC,MAAM,EAAE,GAAG,GAAG,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC;QACjD,KAAK,EAAE,CAAC;IACT,CAAC;IACD,OAAO,GAAG,GAAG,KAAK,KAAK,GAAG,CAAC;AAAA,CAC3B;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,GAAW,EAAW;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAAA,CACjC;AAED,SAAS,sBAAsB,CAAC,KAAa,EAAE,OAA2C,EAAsB;IAC/G,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IACpE,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,mBAAmB,CAAC;IACpC,CAAC;IACD,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,YAAY,KAAK,IAAI,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9F,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,mBAAmB,IAAI,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;AAAA,CACrE;AAED,SAAS,iCAAiC,CAAC,KAAa,EAAE,OAA2C,EAAU;IAC9G,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,aAAa,IAAI,OAAO,CAAC,qBAAqB,EAAE,CAAC;QAC3D,UAAU,GAAG,UAAU,CAAC,OAAO,CAC9B,IAAI,MAAM,CAAC,GAAG,YAAY,CAAC,aAAa,CAAC,iCAAiC,EAAE,GAAG,CAAC,EAChF,OAAO,CAAC,mBAAmB,CAC3B,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AAAA,CAClB;AAED,SAAS,qBAAqB,CAC7B,KAAa,EACb,OAA2C,EAC3C,IAA0B,EACjB;IACT,OAAO,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AAAA,CACrD;AAED,SAAS,uBAAuB,CAC/B,KAAa,EACb,OAA2C,EAC3C,IAA0B,EACjB;IACT,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,IACC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC;YAC7B,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC;YAC/B,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC;YACjC,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC;YAC3C,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC;YACpC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,EAC9B,CAAC;YACF,MAAM,SAAS,GAAG,IAAI,KAAK,WAAW,IAAI,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;YACpG,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YACpE,SAAS,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;YACtE,KAAK,GAAG,QAAQ,CAAC;YACjB,SAAS;QACV,CAAC;QACD,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,EAAE,CAAC;IACT,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,OAA2C,EAAU;IAC9F,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QAClB,OAAO,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,cAAc,EAAE,CAAC;QACpB,OAAO,GAAG,cAAc,GAAG,MAAM,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,GAAG,IAAI,GAAG,MAAM,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,qCAAqC,GAAG,MAAM,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,GAAG,iCAAiC,GAAG,MAAM,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,GAAG,gCAAgC,GAAG,MAAM,EAAE,CAAC;IACvD,CAAC;IACD,IACC,UAAU,CAAC,IAAI,CAAC;QAChB,WAAW,CAAC,IAAI,CAAC;QACjB,qBAAqB,CAAC,IAAI,CAAC;QAC3B,uBAAuB,CAAC,IAAI,CAAC;QAC7B,gBAAgB,CAAC,IAAI,CAAC;QACtB,SAAS,CAAC,IAAI,CAAC,EACd,CAAC;QACF,+EAA+E;QAC/E,0EAA0E;QAC1E,6EAA6E;QAC7E,wEAAwE;QACxE,0CAA0C;QAC1C,OAAO,GAAG,iCAAiC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,iCAAiC,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC;AAAA,CACtE;AAED,SAAS,4BAA4B,CAAC,KAAa,EAAoC;IACtF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AAAA,CACxD;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,OAA2C,EAAW;IACnG,OAAO,KAAK,KAAK,OAAO,CAAC,mBAAmB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,mBAAmB,GAAG,CAAC,CAAC;AAAA,CACpG;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAW;IACjD,OAAO,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CAC/D;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAW;IAClD,OAAO,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CAClD;AAED,SAAS,YAAY,CAAC,KAAa,EAAW;IAC7C,OAAO,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5D;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa,EAAW;IAC/D,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;AAAA,CAChF;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,KAAa,EAAW;IACjE,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CACvC;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAa,EAAW;IACnE,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAClD;AAED,SAAS,sBAAsB,CAAC,KAAa,EAAE,KAAa,EAAW;IACtE,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CAC5C;AAED,SAAS,6BAA6B,CAAC,KAAa,EAAE,KAAa,EAAW;IAC7E,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAAA,CACnD;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,KAAa,EAAW;IACjE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAAA,CACvC;AAED,SAAS,yBAAyB,CAAC,KAAa,EAAE,KAAa,EAAW;IACzE,MAAM,aAAa,GAAG,8BAA8B,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,0BAA0B,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,aAAa,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAChH,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IACrF,IAAI,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC;IAC7E,OAAO,0BAA0B,CAAC,eAAe,CAAC,IAAI,gCAAgC,CAAC,WAAW,CAAC,CAAC;AAAA,CACpG;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,KAAa,EAAW;IACpE,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAAA,CAC9D;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,KAAa,EAAW;IACpE,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AAAA,CAC1C;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa,EAAW;IAChE,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAAA,CAC/D;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa,EAAU;IACjE,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,OAAO,UAAU,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,UAAU,EAAE,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC;AAAA,CAClB;AAED,SAAS,8BAA8B,CAAC,KAAa,EAAE,KAAa,EAAsB;IACzF,KAAK,IAAI,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC;QACf,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,0BAA0B,CAAC,KAAa,EAAE,KAAa,EAAsB;IACrF,KAAK,IAAI,MAAM,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;QAC1D,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC;QACf,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AAED,SAAS,gBAAgB,CACxB,KAAa,EACb,KAAa,EACb,OAA2C,EAC3C,IAA0B,EACjB;IACT,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,QAAQ,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC1E,IAAI,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACjF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM;YACP,CAAC;YACD,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;gBAC/B,MAAM;YACP,CAAC;YACD,SAAS;QACV,CAAC;QACD,QAAQ,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,SAAS,oBAAoB,CAC5B,KAAa,EACb,UAAkB,EAClB,eAAuB,EACvB,OAA2C,EAC3C,IAA0B,EAC0B;IACpD,IAAI,iBAAiB,GAAG,eAAe,CAAC;IACxC,OAAO,iBAAiB,GAAG,KAAK,CAAC,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;QAC5F,iBAAiB,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,iBAAiB,KAAK,eAAe,IAAI,iBAAiB,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAChF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IACC,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC;QACzC,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC;QAC3C,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,CAAC;QAC7C,6BAA6B,CAAC,KAAK,EAAE,iBAAiB,CAAC;QACvD,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,CAAC;QAChD,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,EAC1C,CAAC;QACF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACxD,IAAI,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;IAC3D,IAAI,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC,kCAAkC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YACnE,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,kCAAkC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;QACzE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAAA,CAC9C;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa,EAAU;IACjE,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,OAAO,UAAU,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;QAChF,UAAU,EAAE,CAAC;IACd,CAAC;IACD,OAAO,UAAU,CAAC;AAAA,CAClB;AAED,SAAS,kCAAkC,CAC1C,MAAc,EACd,OAAe,EACf,OAA2C,EAC3C,IAA0B,EAChB;IACV,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;IACtE,MAAM,WAAW,GAChB,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,SAAS;QACrD,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,SAAS;QACvD,2BAA2B,CAAC,MAAM,CAAC;QACnC,6BAA6B,CAAC,OAAO,CAAC;QACtC,CAAC,2BAA2B,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,CACN,IAAI,KAAK,WAAW;QACpB,sBAAsB,CAAC,MAAM,CAAC;QAC9B,uBAAuB,CAAC,OAAO,CAAC;QAChC,mCAAmC,CAAC,OAAO,CAAC,CAC5C,CAAC;AAAA,CACF;AAED,SAAS,kCAAkC,CAC1C,MAAc,EACd,OAAe,EACf,OAA2C,EACjC;IACV,OAAO,CACN,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,SAAS;QACrD,2BAA2B,CAAC,MAAM,CAAC;QACnC,gCAAgC,CAAC,OAAO,CAAC,CACzC,CAAC;AAAA,CACF;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAW;IAC5D,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,CACN,CAAC,UAAU,CAAC,KAAK,CAAC;QACjB,WAAW,CAAC,KAAK,CAAC;QAClB,qBAAqB,CAAC,KAAK,CAAC;QAC5B,gBAAgB,CAAC,KAAK,CAAC;QACvB,SAAS,CAAC,KAAK,CAAC,CAAC;QAClB,WAAW,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC1B,CAAC;AAAA,CACF;AAED,SAAS,6BAA6B,CAAC,KAAa,EAAW;IAC9D,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAAA,CACvC;AAED,SAAS,8BAA8B,CAAC,KAAyB,EAAW;IAC3E,OAAO,KAAK,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CAC3D;AAED,SAAS,0BAA0B,CAAC,KAAa,EAAW;IAC3D,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,CAAC;AAAA,CAC1E;AAED,SAAS,gCAAgC,CAAC,KAAa,EAAW;IACjE,OAAO,0BAA0B,CAAC,KAAK,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CACpF;AAED,SAAS,mCAAmC,CAAC,KAAa,EAAW;IACpE,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAAA,CAC9C;AAED,SAAS,gCAAgC,CAAC,KAAa,EAAW;IACjE,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;AAAA,CACzB;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAW;IACjD,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAAA,CACnD;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAW;IAC5D,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACvC,OAAO,CACN,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,OAAO;QACtB,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,QAAQ;QACvB,UAAU,KAAK,QAAQ;QACvB,UAAU,KAAK,OAAO;QACtB,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,IAAI;QACnB,UAAU,KAAK,QAAQ,CACvB,CAAC;AAAA,CACF;AAED,SAAS,uBAAuB,CAAC,KAAa,EAAW;IACxD,MAAM,UAAU,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,OAAO,CACN,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,OAAO;QACtB,UAAU,KAAK,OAAO;QACtB,UAAU,KAAK,QAAQ;QACvB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,KAAK;QACpB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,KAAK,CACpB,CAAC;AAAA,CACF;AAED,SAAS,8BAA8B,CAAC,KAAa,EAAW;IAC/D,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CACtC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAU;IAClD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,OAAO,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC;AAAA,CACvE;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAW;IACtD,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CACzF;AAED,SAAS,4BAA4B,CAAC,KAAa,EAAW;IAC7D,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CACnC;AAED,SAAS,4BAA4B,CAAC,KAAa,EAAU;IAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;AAAA,CAC3C;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,KAAa,EAAW;IACpE,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,CACN,SAAS,KAAK,IAAI;QAClB,SAAS,KAAK,IAAI;QAClB,SAAS,KAAK,GAAG;QACjB,SAAS,KAAK,GAAG;QACjB,SAAS,KAAK,GAAG;QACjB,SAAS,KAAK,GAAG;QACjB,SAAS,KAAK,GAAG;QACjB,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC;QAChC,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC;QACjC,CAAC,SAAS,KAAK,GAAG,IAAI,0BAA0B,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAC/D,CAAC;AAAA,CACF;AAED,SAAS,yBAAyB,CAAC,KAAa,EAAW;IAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAAA,CACpD;AAED,SAAS,sBAAsB,CAAC,KAAa,EAAE,KAAa,EAAW;IACtE,OAAO,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAAA,CACjF;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAW;IACtD,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,CAAC;AAAA,CACvC;AAED,SAAS,sBAAsB,CAAC,KAAa,EAAW;IACvD,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAAA,CACnD;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAW;IACrD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,IAAI,mBAAmB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa,EAAW;IAClE,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;AAAA,CACzD;AAED,SAAS,mBAAmB,CAAC,KAAa,EAAE,KAAa,EAAW;IACnE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;IAC5B,OAAO,CACN,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC;QACjC,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC;QACnC,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC;QACrC,6BAA6B,CAAC,KAAK,EAAE,SAAS,CAAC;QAC/C,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC;QACxC,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CACnC,CAAC;AAAA,CACF;AAED,SAAS,0BAA0B,CAAC,KAAa,EAAE,KAAa,EAAW;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,SAAS,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpD,OAAO,CAAC,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,WAAW,CAAC,KAAa,EAAU;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CAClC;AAED,SAAS,aAAa,CAAC,KAAa,EAAU;IAC7C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAAA,CACnC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAW;IACtD,OAAO,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CACrC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAW;IACjD,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CACzC;AAED,SAAS,uBAAuB,CAAC,KAAa,EAAW;IACxD,OAAO,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CAC/C;AAED,SAAS,WAAW,CAAC,KAAa,EAAW;IAC5C,OAAO,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5C;AAED,SAAS,SAAS,CAAC,KAAa,EAAW;IAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;AAAA,CACpE;AAED,SAAS,YAAY,CAAC,KAAa,EAAU;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAAA,CACpD;AAED,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E","sourcesContent":["import { isAbsolute, relative, resolve, sep } from \"node:path\";\nimport { TextDecoder } from \"node:util\";\nimport type { RpcCloseHandler, RpcLineHandler, RpcTransport } from \"../../rpc/index.ts\";\n\nexport const IROH_REMOTE_REDACTED_BASH_OUTPUT_PATH = \"[redacted bash output path]\";\nexport const IROH_REMOTE_REDACTED_EXPORT_PATH = \"[redacted export path]\";\nexport const IROH_REMOTE_REDACTED_SESSION_FILE = \"[redacted session file]\";\n\nconst OMIT_REMOTE_PATH_FIELDS = new Set([\"fullOutputPath\", \"sessionFile\"]);\nconst STRICT_REMOTE_PATH_FIELDS = new Set([\n\t\"cwd\",\n\t\"exportPath\",\n\t\"extensionPath\",\n\t\"filePath\",\n\t\"outputPath\",\n\t\"parentSession\",\n\t\"path\",\n\t\"sessionPath\",\n\t\"traceFile\",\n]);\nexport interface IrohRemoteOutboundFilterOptions {\n\tdecorate?: IrohRemoteOutboundValueDecorator;\n\tremoteWorkspacePath?: string;\n\ttransport: RpcTransport;\n\tworkspacePath: string;\n\t/** Extra roots (e.g. a worktree's parent checkout) redacted to remoteWorkspacePath. */\n\tadditionalRedactedPaths?: string[];\n}\n\nexport interface IrohRemoteOutboundSanitizerOptions {\n\tdecorate?: IrohRemoteOutboundValueDecorator;\n\tremoteWorkspacePath?: string;\n\tworkspacePath: string;\n\t/** Extra roots (e.g. a worktree's parent checkout) redacted to remoteWorkspacePath. */\n\tadditionalRedactedPaths?: string[];\n}\n\nexport interface IrohRemoteOutboundJsonlReadablePipeOptions extends IrohRemoteOutboundSanitizerOptions {\n\tonLine?: (line: string) => void;\n\twriteLine: (line: string) => Promise<void> | void;\n}\n\ninterface IrohRemoteOutboundSanitizerContext {\n\tremoteWorkspacePath: string;\n\tworkspacePath: string;\n\tworkspacePathVariants: string[];\n}\n\nexport type IrohRemoteOutboundValueDecorator = (value: object) => object;\n\ntype PathContinuationMode = \"text\" | \"delimited\";\n\nexport function createIrohRemoteOutboundFilteredRpcTransport(options: IrohRemoteOutboundFilterOptions): RpcTransport {\n\tconst sanitizerOptions: IrohRemoteOutboundSanitizerOptions = {\n\t\tdecorate: options.decorate,\n\t\tremoteWorkspacePath: options.remoteWorkspacePath,\n\t\tworkspacePath: options.workspacePath,\n\t\tadditionalRedactedPaths: options.additionalRedactedPaths,\n\t};\n\treturn {\n\t\twrite(value) {\n\t\t\treturn options.transport.write(sanitizeIrohRemoteOutbound(value, sanitizerOptions));\n\t\t},\n\t\tonLine(handler: RpcLineHandler): () => void {\n\t\t\treturn options.transport.onLine(handler);\n\t\t},\n\t\tonClose(handler: RpcCloseHandler): () => void {\n\t\t\treturn options.transport.onClose?.(handler) ?? (() => {});\n\t\t},\n\t\tasync waitForBackpressure() {\n\t\t\tawait options.transport.waitForBackpressure?.();\n\t\t},\n\t\tasync flush() {\n\t\t\tawait options.transport.flush?.();\n\t\t},\n\t\tclose() {\n\t\t\treturn options.transport.close();\n\t\t},\n\t};\n}\n\nexport function sanitizeIrohRemoteOutbound(value: object, options: IrohRemoteOutboundSanitizerOptions): object {\n\tconst context = createSanitizerContext(options);\n\tconst decorated = options.decorate ? options.decorate(value) : value;\n\tconst sanitized = sanitizeValue(decorated, context, undefined);\n\treturn isRecord(sanitized) || Array.isArray(sanitized) ? sanitized : {};\n}\n\nexport function sanitizeIrohRemoteOutboundJsonLine(line: string, options: IrohRemoteOutboundSanitizerOptions): string {\n\tconst context = createSanitizerContext(options);\n\tconst hasTrailingNewline = line.endsWith(\"\\n\");\n\tconst rawLine = hasTrailingNewline ? line.slice(0, -1) : line;\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(rawLine);\n\t} catch {\n\t\treturn `${sanitizeRemoteText(rawLine, context)}${hasTrailingNewline ? \"\\n\" : \"\"}`;\n\t}\n\tif (!isRecord(parsed) && !Array.isArray(parsed)) {\n\t\treturn `${sanitizeRemoteText(rawLine, context)}${hasTrailingNewline ? \"\\n\" : \"\"}`;\n\t}\n\tconst decorated = options.decorate ? options.decorate(parsed) : parsed;\n\tconst sanitized = sanitizeValue(decorated, context, undefined);\n\treturn `${JSON.stringify(sanitized)}${hasTrailingNewline ? \"\\n\" : \"\"}`;\n}\n\nexport async function pipeIrohRemoteOutboundJsonlReadable(\n\treadable: AsyncIterable<string | Uint8Array>,\n\toptions: IrohRemoteOutboundJsonlReadablePipeOptions,\n): Promise<void> {\n\tconst decoder = new TextDecoder();\n\tlet buffer = \"\";\n\n\tfor await (const chunk of readable) {\n\t\tbuffer += typeof chunk === \"string\" ? chunk : decoder.decode(chunk, { stream: true });\n\t\tawait flushBufferedLines(buffer, options, (rest) => {\n\t\t\tbuffer = rest;\n\t\t});\n\t}\n\n\tbuffer += decoder.decode();\n\tif (buffer.length > 0) {\n\t\tawait writeSanitizedJsonLine(buffer, options);\n\t}\n}\n\nfunction createSanitizerContext(options: IrohRemoteOutboundSanitizerOptions): IrohRemoteOutboundSanitizerContext {\n\tconst resolvedWorkspacePath = resolve(options.workspacePath);\n\t// Compare and redact in a Unicode-normalization-insensitive way: macOS surfaces\n\t// on-disk paths in NFD while a configured root may be NFC (or vice versa), and a\n\t// byte-exact compare would let a differently-composed form of an in-workspace path\n\t// bypass redaction and leak the real host path. Canonicalize the compared root to\n\t// NFC, and match embedded occurrences against both NFC and NFD forms.\n\tconst workspacePath = resolvedWorkspacePath.normalize(\"NFC\");\n\t// Additional roots (worktree parent checkout, worktrees root) fold into the\n\t// same variant list: every occurrence maps to remoteWorkspacePath.\n\tconst redactedRoots = [\n\t\tresolvedWorkspacePath,\n\t\t...(options.additionalRedactedPaths ?? []).map((value) => resolve(value)),\n\t];\n\tconst workspacePathVariants = [\n\t\t...new Set(\n\t\t\tredactedRoots\n\t\t\t\t.flatMap((root) => [root, toPosixPath(root), toWindowsPath(root)])\n\t\t\t\t.flatMap((value) => [value.normalize(\"NFC\"), value.normalize(\"NFD\")]),\n\t\t),\n\t]\n\t\t.filter((value) => value.length > 0)\n\t\t.sort((left, right) => right.length - left.length);\n\treturn {\n\t\tremoteWorkspacePath: options.remoteWorkspacePath ?? \"/workspace\",\n\t\tworkspacePath,\n\t\tworkspacePathVariants,\n\t};\n}\n\nfunction sanitizeValue(\n\tvalue: unknown,\n\tcontext: IrohRemoteOutboundSanitizerContext,\n\tfieldName: string | undefined,\n): unknown {\n\tif (typeof value === \"string\") {\n\t\treturn shouldTreatAsPathField(fieldName) ? sanitizePathField(value, context) : sanitizeRemoteText(value, context);\n\t}\n\tif (Array.isArray(value)) {\n\t\treturn value.map((entry) => sanitizeValue(entry, context, fieldName));\n\t}\n\tif (!isRecord(value)) {\n\t\treturn value;\n\t}\n\n\tconst sanitized: Record<string, unknown> = Object.create(null);\n\tfor (const [key, entry] of Object.entries(value)) {\n\t\tif (OMIT_REMOTE_PATH_FIELDS.has(key)) {\n\t\t\tcontinue;\n\t\t}\n\t\tconst sanitizedEntry = shouldPreserveOpaqueStringEntry(value, key, entry)\n\t\t\t? entry\n\t\t\t: sanitizeValue(entry, context, key);\n\t\tif (sanitizedEntry !== undefined) {\n\t\t\tsetSanitizedObjectEntry(sanitized, sanitizeObjectKey(key, context), sanitizedEntry);\n\t\t}\n\t}\n\treturn sanitized;\n}\n\nfunction shouldPreserveOpaqueStringEntry(\n\trecord: Record<string, unknown>,\n\tkey: string,\n\tvalue: unknown,\n): value is string {\n\tif (typeof value !== \"string\") {\n\t\treturn false;\n\t}\n\treturn (\n\t\tkey === \"id\" ||\n\t\t(key === \"data\" && isImageContentRecord(record)) ||\n\t\t(key === \"textSignature\" && isTypedContentRecord(record, \"text\")) ||\n\t\t(key === \"thinkingSignature\" && isTypedContentRecord(record, \"thinking\")) ||\n\t\t(key === \"thoughtSignature\" && isTypedContentRecord(record, \"toolCall\"))\n\t);\n}\n\nfunction isImageContentRecord(record: Record<string, unknown>): boolean {\n\treturn record.type === \"image\" && typeof record.mimeType === \"string\" && record.mimeType.startsWith(\"image/\");\n}\n\nfunction isTypedContentRecord(record: Record<string, unknown>, type: string): boolean {\n\treturn record.type === type;\n}\n\nasync function flushBufferedLines(\n\tbuffer: string,\n\toptions: IrohRemoteOutboundJsonlReadablePipeOptions,\n\tsetRest: (rest: string) => void,\n): Promise<void> {\n\tlet rest = buffer;\n\twhile (true) {\n\t\tconst newlineIndex = rest.indexOf(\"\\n\");\n\t\tif (newlineIndex === -1) {\n\t\t\tsetRest(rest);\n\t\t\treturn;\n\t\t}\n\t\tconst line = rest.slice(0, newlineIndex + 1);\n\t\trest = rest.slice(newlineIndex + 1);\n\t\tawait writeSanitizedJsonLine(line, options);\n\t}\n}\n\nasync function writeSanitizedJsonLine(\n\tline: string,\n\toptions: IrohRemoteOutboundJsonlReadablePipeOptions,\n): Promise<void> {\n\tconst sanitizedLine = sanitizeIrohRemoteOutboundJsonLine(line, options);\n\tawait options.writeLine(sanitizedLine);\n\toptions.onLine?.(sanitizedLine);\n}\n\nfunction shouldTreatAsPathField(fieldName: string | undefined): boolean {\n\tif (!fieldName) {\n\t\treturn false;\n\t}\n\tif (STRICT_REMOTE_PATH_FIELDS.has(fieldName)) {\n\t\treturn true;\n\t}\n\treturn fieldName.endsWith(\"Dir\") || fieldName.endsWith(\"File\") || fieldName.endsWith(\"Path\");\n}\n\nfunction sanitizePathField(value: string, context: IrohRemoteOutboundSanitizerContext): string {\n\tif (hasPathListSeparator(value)) {\n\t\treturn redactPathOccurrences(value, context, \"text\");\n\t}\n\tconst normalized = normalizeWorkspacePath(value, context);\n\tif (normalized) {\n\t\treturn normalized;\n\t}\n\tif (isRemoteWorkspacePath(value, context)) {\n\t\treturn value;\n\t}\n\tif (isBashOutputPath(value)) {\n\t\treturn IROH_REMOTE_REDACTED_BASH_OUTPUT_PATH;\n\t}\n\tif (isSessionFilePath(value)) {\n\t\treturn IROH_REMOTE_REDACTED_SESSION_FILE;\n\t}\n\tif (isExportPath(value)) {\n\t\treturn IROH_REMOTE_REDACTED_EXPORT_PATH;\n\t}\n\tif (isTildePath(value)) {\n\t\treturn sanitizePathToken(value, context);\n\t}\n\tif (isAbsolute(value) || isWindowsAbsolutePath(value) || isWindowsUncPath(value) || isFileUrl(value)) {\n\t\treturn value;\n\t}\n\treturn sanitizeRemoteText(value, context);\n}\n\nfunction sanitizeRemoteText(value: string, context: IrohRemoteOutboundSanitizerContext): string {\n\treturn sanitizePathOccurrences(value, context, \"text\");\n}\n\nfunction sanitizeObjectKey(value: string, context: IrohRemoteOutboundSanitizerContext): string {\n\treturn redactPathOccurrences(value, context, \"delimited\");\n}\n\nfunction setSanitizedObjectEntry(target: Record<string, unknown>, key: string, value: unknown): void {\n\ttarget[getUniqueObjectKey(target, key)] = value;\n}\n\nfunction getUniqueObjectKey(target: Record<string, unknown>, key: string): string {\n\tif (!hasOwnEntry(target, key)) {\n\t\treturn key;\n\t}\n\tlet index = 2;\n\twhile (hasOwnEntry(target, `${key} (${index})`)) {\n\t\tindex++;\n\t}\n\treturn `${key} (${index})`;\n}\n\nfunction hasOwnEntry(value: object, key: string): boolean {\n\treturn Object.hasOwn(value, key);\n}\n\nfunction normalizeWorkspacePath(value: string, context: IrohRemoteOutboundSanitizerContext): string | undefined {\n\tif (!isAbsolute(value)) {\n\t\treturn undefined;\n\t}\n\tconst candidatePath = resolve(value).normalize(\"NFC\");\n\tconst relativePath = relative(context.workspacePath, candidatePath);\n\tif (relativePath === \"\") {\n\t\treturn context.remoteWorkspacePath;\n\t}\n\tif (relativePath.startsWith(`..${sep}`) || relativePath === \"..\" || isAbsolute(relativePath)) {\n\t\treturn undefined;\n\t}\n\treturn `${context.remoteWorkspacePath}/${toPosixPath(relativePath)}`;\n}\n\nfunction normalizeWorkspacePathOccurrences(value: string, context: IrohRemoteOutboundSanitizerContext): string {\n\tlet normalized = value;\n\tfor (const workspacePath of context.workspacePathVariants) {\n\t\tnormalized = normalized.replace(\n\t\t\tnew RegExp(`${escapeRegExp(workspacePath)}(?=$|[\\\\\\\\/\\\\s\"'<>),.;:!?}\\\\]])`, \"g\"),\n\t\t\tcontext.remoteWorkspacePath,\n\t\t);\n\t}\n\treturn normalized;\n}\n\nfunction redactPathOccurrences(\n\tvalue: string,\n\tcontext: IrohRemoteOutboundSanitizerContext,\n\tmode: PathContinuationMode,\n): string {\n\treturn sanitizePathOccurrences(value, context, mode);\n}\n\nfunction sanitizePathOccurrences(\n\tvalue: string,\n\tcontext: IrohRemoteOutboundSanitizerContext,\n\tmode: PathContinuationMode,\n): string {\n\tlet sanitized = \"\";\n\tlet index = 0;\n\twhile (index < value.length) {\n\t\tif (\n\t\t\tstartsFileUrlAt(value, index) ||\n\t\t\tstartsTildePathAt(value, index) ||\n\t\t\tstartsWindowsPathAt(value, index) ||\n\t\t\tstartsEscapedWindowsUncPathAt(value, index) ||\n\t\t\tstartsWindowsUncPathAt(value, index) ||\n\t\t\tstartsPosixPathAt(value, index)\n\t\t) {\n\t\t\tconst tokenMode = mode === \"delimited\" || isDelimitedPathToken(value, index) ? \"delimited\" : \"text\";\n\t\t\tconst tokenEnd = findPathTokenEnd(value, index, context, tokenMode);\n\t\t\tsanitized += sanitizePathToken(value.slice(index, tokenEnd), context);\n\t\t\tindex = tokenEnd;\n\t\t\tcontinue;\n\t\t}\n\t\tsanitized += value[index];\n\t\tindex++;\n\t}\n\treturn sanitized;\n}\n\nfunction sanitizePathToken(value: string, context: IrohRemoteOutboundSanitizerContext): string {\n\tconst { path, suffix } = splitTrailingPathPunctuation(value);\n\tif (path === \"/\") {\n\t\treturn `${path}${suffix}`;\n\t}\n\tconst normalizedPath = normalizeWorkspacePath(path, context);\n\tif (normalizedPath) {\n\t\treturn `${normalizedPath}${suffix}`;\n\t}\n\tif (isRemoteWorkspacePath(path, context)) {\n\t\treturn `${path}${suffix}`;\n\t}\n\tif (isBashOutputPath(path)) {\n\t\treturn `${IROH_REMOTE_REDACTED_BASH_OUTPUT_PATH}${suffix}`;\n\t}\n\tif (isSessionFilePath(path)) {\n\t\treturn `${IROH_REMOTE_REDACTED_SESSION_FILE}${suffix}`;\n\t}\n\tif (isExportPath(path)) {\n\t\treturn `${IROH_REMOTE_REDACTED_EXPORT_PATH}${suffix}`;\n\t}\n\tif (\n\t\tisAbsolute(path) ||\n\t\tisTildePath(path) ||\n\t\tisWindowsAbsolutePath(path) ||\n\t\tisEscapedWindowsUncPath(path) ||\n\t\tisWindowsUncPath(path) ||\n\t\tisFileUrl(path)\n\t) {\n\t\t// The path is outside the workspace (or unresolvable as a subpath), but it may\n\t\t// still embed the workspace root glued to a non-separator delimiter (e.g.\n\t\t// \"<workspace>:extra\"), which normalizeWorkspacePath treats as a sibling and\n\t\t// would otherwise leak the real host path verbatim. Redact any embedded\n\t\t// workspace-path prefix before returning.\n\t\treturn `${normalizeWorkspacePathOccurrences(path, context)}${suffix}`;\n\t}\n\treturn `${normalizeWorkspacePathOccurrences(path, context)}${suffix}`;\n}\n\nfunction splitTrailingPathPunctuation(value: string): { path: string; suffix: string } {\n\tconst match = value.match(/[),.;:!?}\\]]+$/);\n\tif (!match) {\n\t\treturn { path: value, suffix: \"\" };\n\t}\n\tconst suffix = match[0];\n\treturn { path: value.slice(0, -suffix.length), suffix };\n}\n\nfunction isRemoteWorkspacePath(value: string, context: IrohRemoteOutboundSanitizerContext): boolean {\n\treturn value === context.remoteWorkspacePath || value.startsWith(`${context.remoteWorkspacePath}/`);\n}\n\nfunction isBashOutputPath(value: string): boolean {\n\treturn /(?:^|[/\\\\])volt-bash-[A-Za-z0-9_-]+\\.log$/.test(value);\n}\n\nfunction isSessionFilePath(value: string): boolean {\n\treturn /[/\\\\]sessions[/\\\\].+\\.jsonl$/.test(value);\n}\n\nfunction isExportPath(value: string): boolean {\n\treturn /(?:^|[/\\\\])Volt-session-[^/\\\\]+\\.html$/.test(value);\n}\n\nfunction startsFileUrlAt(value: string, index: number): boolean {\n\tif (!isPathPrefixBoundary(value, index)) {\n\t\treturn false;\n\t}\n\treturn value.slice(index, index + \"file://\".length).toLowerCase() === \"file://\";\n}\n\nfunction startsTildePathAt(value: string, index: number): boolean {\n\tif (!isPathPrefixBoundary(value, index)) {\n\t\treturn false;\n\t}\n\treturn isTildePath(value.slice(index));\n}\n\nfunction startsWindowsPathAt(value: string, index: number): boolean {\n\tif (!isPathPrefixBoundary(value, index)) {\n\t\treturn false;\n\t}\n\treturn /^[A-Za-z]:[\\\\/]/.test(value.slice(index));\n}\n\nfunction startsWindowsUncPathAt(value: string, index: number): boolean {\n\tif (!isPathPrefixBoundary(value, index)) {\n\t\treturn false;\n\t}\n\treturn isWindowsUncPath(value.slice(index));\n}\n\nfunction startsEscapedWindowsUncPathAt(value: string, index: number): boolean {\n\tif (!isPathPrefixBoundary(value, index)) {\n\t\treturn false;\n\t}\n\treturn isEscapedWindowsUncPath(value.slice(index));\n}\n\nfunction startsPosixPathAt(value: string, index: number): boolean {\n\tif (value[index] !== \"/\" || !isPathPrefixBoundary(value, index)) {\n\t\treturn false;\n\t}\n\tif (value[index - 1] === \":\" && value[index + 1] === \"/\") {\n\t\treturn false;\n\t}\n\tif (isRelativePathSeparatorAt(value, index)) {\n\t\treturn false;\n\t}\n\treturn !isInsideUrlToken(value, index);\n}\n\nfunction isRelativePathSeparatorAt(value: string, index: number): boolean {\n\tconst previousIndex = findPreviousNonWhitespaceIndex(value, index - 1);\n\tconst nextIndex = findNextNonWhitespaceIndex(value, index + 1);\n\tif (previousIndex === undefined || nextIndex === undefined) {\n\t\treturn false;\n\t}\n\tif (!isRelativePathSegmentCharacter(value[previousIndex]) || !isRelativePathSegmentCharacter(value[nextIndex])) {\n\t\treturn false;\n\t}\n\tconst segmentEnd = findPathSegmentEnd(value, nextIndex);\n\tconst nextSegment = stripTrailingPathPunctuation(value.slice(nextIndex, segmentEnd));\n\tif (hasPathSeparator(nextSegment)) {\n\t\treturn false;\n\t}\n\tconst previousSegmentStart = findPathTokenStart(value, previousIndex + 1);\n\tconst previousSegment = value.slice(previousSegmentStart, previousIndex + 1);\n\treturn isPlainRelativePathSegment(previousSegment) && looksLikeRelativeFileNameSegment(nextSegment);\n}\n\nfunction isPathPrefixBoundary(value: string, index: number): boolean {\n\tif (index === 0) {\n\t\treturn true;\n\t}\n\tconst prefix = value[index - 1];\n\treturn /\\s/.test(prefix) || \"\\\"'`([{<>=,:;|\".includes(prefix);\n}\n\nfunction isDelimitedPathToken(value: string, index: number): boolean {\n\tif (index === 0) {\n\t\treturn false;\n\t}\n\treturn \"\\\"'`|\".includes(value[index - 1]);\n}\n\nfunction isInsideUrlToken(value: string, index: number): boolean {\n\tconst tokenStart = findPathTokenStart(value, index);\n\tconst prefix = value.slice(tokenStart, index);\n\treturn /^[A-Za-z][A-Za-z0-9+.-]*:\\/\\/[^\\s\"'<>]*$/.test(prefix);\n}\n\nfunction findPathTokenStart(value: string, index: number): number {\n\tlet tokenStart = index;\n\twhile (tokenStart > 0 && !isPathTokenStartDelimiter(value[tokenStart - 1])) {\n\t\ttokenStart--;\n\t}\n\treturn tokenStart;\n}\n\nfunction findPreviousNonWhitespaceIndex(value: string, index: number): number | undefined {\n\tfor (let cursor = index; cursor >= 0; cursor--) {\n\t\tif (!isPathTokenWhitespace(value[cursor])) {\n\t\t\treturn cursor;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction findNextNonWhitespaceIndex(value: string, index: number): number | undefined {\n\tfor (let cursor = index; cursor < value.length; cursor++) {\n\t\tif (!isPathTokenWhitespace(value[cursor])) {\n\t\t\treturn cursor;\n\t\t}\n\t}\n\treturn undefined;\n}\n\nfunction findPathTokenEnd(\n\tvalue: string,\n\tindex: number,\n\tcontext: IrohRemoteOutboundSanitizerContext,\n\tmode: PathContinuationMode,\n): number {\n\tlet tokenEnd = index;\n\twhile (tokenEnd < value.length && !isPathTokenDelimiter(value, tokenEnd)) {\n\t\tif (isPathTokenWhitespace(value[tokenEnd])) {\n\t\t\tconst continuation = findPathContinuation(value, index, tokenEnd, context, mode);\n\t\t\tif (continuation === undefined) {\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\ttokenEnd = continuation.end;\n\t\t\tif (!continuation.canContinue) {\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\t\ttokenEnd++;\n\t}\n\treturn tokenEnd;\n}\n\nfunction findPathContinuation(\n\tvalue: string,\n\ttokenStart: number,\n\twhitespaceStart: number,\n\tcontext: IrohRemoteOutboundSanitizerContext,\n\tmode: PathContinuationMode,\n): { canContinue: boolean; end: number } | undefined {\n\tlet continuationStart = whitespaceStart;\n\twhile (continuationStart < value.length && isPathTokenWhitespace(value[continuationStart])) {\n\t\tcontinuationStart++;\n\t}\n\tif (continuationStart === whitespaceStart || continuationStart >= value.length) {\n\t\treturn undefined;\n\t}\n\tif (\n\t\tstartsFileUrlAt(value, continuationStart) ||\n\t\tstartsTildePathAt(value, continuationStart) ||\n\t\tstartsWindowsPathAt(value, continuationStart) ||\n\t\tstartsEscapedWindowsUncPathAt(value, continuationStart) ||\n\t\tstartsWindowsUncPathAt(value, continuationStart) ||\n\t\tstartsPosixPathAt(value, continuationStart)\n\t) {\n\t\treturn undefined;\n\t}\n\tconst prefix = value.slice(tokenStart, whitespaceStart);\n\tif (endsWithPathTokenPunctuation(prefix)) {\n\t\treturn undefined;\n\t}\n\tconst segmentEnd = findPathSegmentEnd(value, continuationStart);\n\tconst segment = value.slice(continuationStart, segmentEnd);\n\tif (startsColonAdjacentPathSegment(segment)) {\n\t\treturn undefined;\n\t}\n\tif (segment.includes(\"://\")) {\n\t\treturn undefined;\n\t}\n\tif (hasPathSeparator(segment)) {\n\t\tif (!shouldContinuePathAcrossWhitespace(prefix, segment, context)) {\n\t\t\treturn undefined;\n\t\t}\n\t\treturn { canContinue: true, end: segmentEnd };\n\t}\n\tif (!shouldConsumePlainPathContinuation(prefix, segment, context, mode)) {\n\t\treturn undefined;\n\t}\n\treturn { canContinue: true, end: segmentEnd };\n}\n\nfunction findPathSegmentEnd(value: string, index: number): number {\n\tlet segmentEnd = index;\n\twhile (segmentEnd < value.length && !isPathSegmentDelimiter(value, segmentEnd)) {\n\t\tsegmentEnd++;\n\t}\n\treturn segmentEnd;\n}\n\nfunction shouldConsumePlainPathContinuation(\n\tprefix: string,\n\tsegment: string,\n\tcontext: IrohRemoteOutboundSanitizerContext,\n\tmode: PathContinuationMode,\n): boolean {\n\tconst combined = `${prefix} ${stripTrailingPathPunctuation(segment)}`;\n\tconst baseAllowed =\n\t\tnormalizeWorkspacePath(prefix, context) === undefined &&\n\t\tnormalizeWorkspacePath(combined, context) === undefined &&\n\t\tlooksLikeIncompletePathName(prefix) &&\n\t\tlooksLikePlainPathNameSegment(segment) &&\n\t\t!isProsePathContinuationWord(stripTrailingPathPunctuation(segment));\n\tif (!baseAllowed) {\n\t\treturn false;\n\t}\n\tif (looksLikeUserHomePath(prefix)) {\n\t\treturn true;\n\t}\n\treturn (\n\t\tmode === \"delimited\" ||\n\t\thasPathTokenWhitespace(prefix) ||\n\t\tisCommonPathNameSegment(segment) ||\n\t\tlooksLikeCapitalizedPathNameSegment(segment)\n\t);\n}\n\nfunction shouldContinuePathAcrossWhitespace(\n\tprefix: string,\n\tsegment: string,\n\tcontext: IrohRemoteOutboundSanitizerContext,\n): boolean {\n\treturn (\n\t\tnormalizeWorkspacePath(prefix, context) === undefined &&\n\t\tlooksLikeIncompletePathName(prefix) &&\n\t\tlooksLikePathContinuationSegment(segment)\n\t);\n}\n\nfunction looksLikeIncompletePathName(value: string): boolean {\n\tconst lastSegment = getLastPathSegment(value);\n\treturn (\n\t\t(isAbsolute(value) ||\n\t\t\tisTildePath(value) ||\n\t\t\tisWindowsAbsolutePath(value) ||\n\t\t\tisWindowsUncPath(value) ||\n\t\t\tisFileUrl(value)) &&\n\t\tlastSegment.length > 0 &&\n\t\t!lastSegment.includes(\".\")\n\t);\n}\n\nfunction looksLikePlainPathNameSegment(value: string): boolean {\n\tconst trimmed = stripTrailingPathPunctuation(value);\n\treturn /^[A-Za-z0-9._-]/.test(trimmed);\n}\n\nfunction isRelativePathSegmentCharacter(value: string | undefined): boolean {\n\treturn value !== undefined && /[A-Za-z0-9._-]/.test(value);\n}\n\nfunction isPlainRelativePathSegment(value: string): boolean {\n\treturn /^[A-Za-z0-9._-]+$/.test(value) && value !== \".\" && value !== \"..\";\n}\n\nfunction looksLikeRelativeFileNameSegment(value: string): boolean {\n\treturn isPlainRelativePathSegment(value) && /(?:^\\.|.+\\.[A-Za-z0-9]+$)/.test(value);\n}\n\nfunction looksLikeCapitalizedPathNameSegment(value: string): boolean {\n\tconst trimmed = stripTrailingPathPunctuation(value);\n\treturn /^[A-Z][A-Za-z0-9._-]*$/.test(trimmed);\n}\n\nfunction looksLikePathContinuationSegment(value: string): boolean {\n\tconst trimmed = stripTrailingPathPunctuation(value);\n\tif (/^and[/\\\\]or$/i.test(trimmed)) {\n\t\treturn false;\n\t}\n\tconst parts = trimmed.split(/[\\\\/]+/).filter((part) => part.length > 0);\n\tif (parts[0] && isProsePathContinuationWord(parts[0])) {\n\t\treturn false;\n\t}\n\treturn parts.length >= 2;\n}\n\nfunction hasPathSeparator(value: string): boolean {\n\treturn value.includes(\"/\") || value.includes(\"\\\\\");\n}\n\nfunction isProsePathContinuationWord(value: string): boolean {\n\tconst normalized = value.toLowerCase();\n\treturn (\n\t\tnormalized === \"and\" ||\n\t\tnormalized === \"badly\" ||\n\t\tnormalized === \"crashed\" ||\n\t\tnormalized === \"done\" ||\n\t\tnormalized === \"exists\" ||\n\t\tnormalized === \"failed\" ||\n\t\tnormalized === \"found\" ||\n\t\tnormalized === \"missing\" ||\n\t\tnormalized === \"not\" ||\n\t\tnormalized === \"or\" ||\n\t\tnormalized === \"suffix\"\n\t);\n}\n\nfunction isCommonPathNameSegment(value: string): boolean {\n\tconst normalized = stripTrailingPathPunctuation(value).toLowerCase();\n\treturn (\n\t\tnormalized === \"app\" ||\n\t\tnormalized === \"build\" ||\n\t\tnormalized === \"cache\" ||\n\t\tnormalized === \"config\" ||\n\t\tnormalized === \"data\" ||\n\t\tnormalized === \"dist\" ||\n\t\tnormalized === \"log\" ||\n\t\tnormalized === \"logs\" ||\n\t\tnormalized === \"project\" ||\n\t\tnormalized === \"temp\" ||\n\t\tnormalized === \"tmp\"\n\t);\n}\n\nfunction startsColonAdjacentPathSegment(value: string): boolean {\n\treturn /^[^/\\\\\\s]+:[/\\\\]/.test(value);\n}\n\nfunction getLastPathSegment(value: string): string {\n\tconst separatorIndex = Math.max(value.lastIndexOf(\"/\"), value.lastIndexOf(\"\\\\\"));\n\treturn separatorIndex === -1 ? value : value.slice(separatorIndex + 1);\n}\n\nfunction looksLikeUserHomePath(value: string): boolean {\n\treturn /^\\/Users\\/[^/]+$/.test(value) || /^[A-Za-z]:[\\\\/]Users[\\\\/][^\\\\/]+$/.test(value);\n}\n\nfunction endsWithPathTokenPunctuation(value: string): boolean {\n\treturn /[),.;:!?}\\]]$/.test(value);\n}\n\nfunction stripTrailingPathPunctuation(value: string): string {\n\treturn value.replace(/[),.;:!?}\\]]+$/, \"\");\n}\n\nfunction isPathTokenDelimiter(value: string, index: number): boolean {\n\tconst character = value[index];\n\treturn (\n\t\tcharacter === \"\\n\" ||\n\t\tcharacter === \"\\r\" ||\n\t\tcharacter === '\"' ||\n\t\tcharacter === \"`\" ||\n\t\tcharacter === \"<\" ||\n\t\tcharacter === \">\" ||\n\t\tcharacter === \"|\" ||\n\t\tisEscapedPathQuote(value, index) ||\n\t\tisPathListSeparator(value, index) ||\n\t\t(character === \"'\" && isLikelyClosingSingleQuote(value, index))\n\t);\n}\n\nfunction isPathTokenStartDelimiter(value: string): boolean {\n\treturn /\\s/.test(value) || \"\\\"'<>|\".includes(value);\n}\n\nfunction isPathSegmentDelimiter(value: string, index: number): boolean {\n\treturn isPathTokenWhitespace(value[index]) || isPathTokenDelimiter(value, index);\n}\n\nfunction isPathTokenWhitespace(value: string): boolean {\n\treturn value === \" \" || value === \"\\t\";\n}\n\nfunction hasPathTokenWhitespace(value: string): boolean {\n\treturn value.includes(\" \") || value.includes(\"\\t\");\n}\n\nfunction hasPathListSeparator(value: string): boolean {\n\tfor (let index = 0; index < value.length; index++) {\n\t\tif (isPathListSeparator(value, index)) {\n\t\t\treturn true;\n\t\t}\n\t}\n\treturn false;\n}\n\nfunction isEscapedPathQuote(value: string, index: number): boolean {\n\treturn value[index] === \"\\\\\" && value[index + 1] === '\"';\n}\n\nfunction isPathListSeparator(value: string, index: number): boolean {\n\tif (!\":;,\".includes(value[index])) {\n\t\treturn false;\n\t}\n\tconst pathStart = index + 1;\n\treturn (\n\t\tstartsFileUrlAt(value, pathStart) ||\n\t\tstartsTildePathAt(value, pathStart) ||\n\t\tstartsWindowsPathAt(value, pathStart) ||\n\t\tstartsEscapedWindowsUncPathAt(value, pathStart) ||\n\t\tstartsWindowsUncPathAt(value, pathStart) ||\n\t\tstartsPosixPathAt(value, pathStart)\n\t);\n}\n\nfunction isLikelyClosingSingleQuote(value: string, index: number): boolean {\n\tconst previous = value[index - 1];\n\tconst next = value[index + 1];\n\tif (next === undefined || '\"`<>),.;:!?}]'.includes(next)) {\n\t\treturn true;\n\t}\n\tif (previous !== undefined && /[A-Za-z0-9]/.test(previous)) {\n\t\tconst tokenStart = findPathTokenStart(value, index);\n\t\treturn !looksLikeIncompletePathName(value.slice(tokenStart, index));\n\t}\n\tif (!/\\s/.test(next)) {\n\t\treturn false;\n\t}\n\treturn true;\n}\n\nfunction toPosixPath(value: string): string {\n\treturn value.split(sep).join(\"/\");\n}\n\nfunction toWindowsPath(value: string): string {\n\treturn value.split(sep).join(\"\\\\\");\n}\n\nfunction isWindowsAbsolutePath(value: string): boolean {\n\treturn /^[A-Za-z]:[\\\\/]/.test(value);\n}\n\nfunction isWindowsUncPath(value: string): boolean {\n\treturn /^\\\\\\\\[^\\\\]+\\\\[^\\\\]+/.test(value);\n}\n\nfunction isEscapedWindowsUncPath(value: string): boolean {\n\treturn /^\\\\\\\\\\\\\\\\[^\\\\]+\\\\\\\\[^\\\\]+/.test(value);\n}\n\nfunction isTildePath(value: string): boolean {\n\treturn /^~[^/\\\\\\s]*(?:$|[\\\\/])/.test(value);\n}\n\nfunction isFileUrl(value: string): boolean {\n\treturn value.slice(0, \"file://\".length).toLowerCase() === \"file://\";\n}\n\nfunction escapeRegExp(value: string): string {\n\treturn value.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n"]}

package/dist/core/remote/iroh/protocol.d.ts

@@ -0,0 +1,60 @@
+export declare const IROH_REMOTE_ALPN = "volt-rpc/0";
+export declare const IROH_REMOTE_TICKET_PREFIX = "volt+iroh://v1/";
+export declare const IROH_REMOTE_HELLO_TYPE = "volt_iroh_hello";
+export declare const IROH_REMOTE_HANDSHAKE_TYPE = "volt_iroh_handshake";
+export declare const IROH_REMOTE_MULTI_STREAMS_FEATURE = "multi_streams.v1";
+export declare const IROH_REMOTE_CONVERSATION_STREAMS_FEATURE = "conversation_streams.v1";
+export declare const IROH_REMOTE_WORKTREES_FEATURE = "worktrees.v1";
+export declare const IROH_REMOTE_WORKING_DIRECTORIES_FEATURE = "working_directories.v1";
+export declare const IROH_REMOTE_AGENT_SETTLED_FEATURE = "agent_settled.v1";
+export declare const IROH_REMOTE_SESSION_RUNTIME_STATE_FEATURE = "session_runtime_state.v1";
+export declare const IROH_REMOTE_HOST_FEATURES: readonly ["multi_streams.v1", "conversation_streams.v1", "worktrees.v1", "working_directories.v1", "agent_settled.v1", "session_runtime_state.v1"];
+/** Daemon-managed worktree ids: lowercase slug, unique per workspace. */
+export declare const IROH_REMOTE_WORKTREE_ID_PATTERN: RegExp;
+export declare function isIrohRemoteWorktreeId(value: unknown): value is string;
+export declare function isIrohRemoteWorkingDirectory(value: unknown): value is string;
+export declare function getIrohRemoteWorkingDirectoryValidationError(value: string): string | undefined;
+export declare const DEFAULT_IROH_REMOTE_ALLOW_TOOLS = "read,bash,edit,write,web_search,grep,find,ls,subagent,mcp";
+export declare const IROH_REMOTE_UNSAFE_TOOL_NAMES: readonly ["bash", "edit", "write", "web_search"];
+export declare const IROH_REMOTE_OUTCOMES: readonly ["host_unreachable", "invalid_workspace", "invalid_conversation_target", "conversation_streams_unsupported", "pairing_secret_expired", "pairing_secret_consumed", "client_unknown", "client_revoked", "workspace_unavailable", "workspace_forbidden", "workspace_authorization_removed", "workspace_unregistered", "session_unavailable", "duplicate_conversation_connection", "conversation_in_use", "host_identity_mismatch", "saved_host_invalid"];
+export declare const IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOMES: readonly ["invalid_workspace", "invalid_conversation_target", "conversation_streams_unsupported", "pairing_secret_expired", "pairing_secret_consumed", "client_unknown", "client_revoked", "workspace_unavailable", "workspace_forbidden", "workspace_authorization_removed", "workspace_unregistered", "session_unavailable", "duplicate_conversation_connection", "conversation_in_use"];
+export type IrohRemoteRelayMode = "disabled" | "development" | "production";
+export type IrohRemoteHostFeature = (typeof IROH_REMOTE_HOST_FEATURES)[number];
+export type IrohRemoteOutcome = (typeof IROH_REMOTE_OUTCOMES)[number];
+export type IrohRemoteHostHandshakeFailureOutcome = (typeof IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOMES)[number];
+export declare function isIrohRemoteRelayMode(value: unknown): value is IrohRemoteRelayMode;
+export declare function isIrohRemoteRelayUrls(value: unknown): value is string[];
+export declare function isIrohRemoteOutcome(value: unknown): value is IrohRemoteOutcome;
+export declare function isIrohRemoteHostHandshakeFailureOutcome(value: unknown): value is IrohRemoteHostHandshakeFailureOutcome;
+export declare class IrohRemoteOutcomeError extends Error {
+    readonly outcome: IrohRemoteOutcome;
+    constructor(outcome: IrohRemoteOutcome, message: string);
+}
+export declare function normalizeIrohRemoteAllowTools(allowTools: string | undefined): string;
+export declare function parseIrohRemoteAllowTools(allowTools: string | undefined): string[];
+export declare function usesDefaultIrohRemoteAllowTools(allowTools: string | undefined): boolean;
+export interface IrohRemoteRuntimeToolPolicy {
+    tools: string[];
+    allowUnlistedExtensionTools: boolean;
+}
+export interface ResolveIrohRemoteRuntimeToolPolicyOptions {
+    /** Persisted pair-time grant. This is always the maximum authority. */
+    clientAllowTools: string;
+    /** Optional legacy workspace ceiling. Missing means no additional restriction. */
+    workspaceAllowTools?: string;
+    /** Exact daemon ceiling. Null means unrestricted; an empty array denies every tool. */
+    daemonAllowTools: readonly string[] | null;
+}
+/**
+ * Compose daemon-owned runtime policy without letting a host or workspace
+ * policy widen the grant persisted for a paired client.
+ *
+ * Default grants permit extension tools that are not known until resource
+ * loading. That wildcard applies only to non-default tool names, and survives
+ * only when every present policy layer has default-grant semantics.
+ */
+export declare function resolveIrohRemoteRuntimeToolPolicy(options: ResolveIrohRemoteRuntimeToolPolicyOptions): IrohRemoteRuntimeToolPolicy;
+/** Return whether every tool permitted by policy is also permitted by ceiling. */
+export declare function isIrohRemoteRuntimeToolPolicyWithin(policy: IrohRemoteRuntimeToolPolicy, ceiling: IrohRemoteRuntimeToolPolicy): boolean;
+export declare function getIrohRemoteUnsafeAllowedTools(allowTools: string): string[];
+//# sourceMappingURL=protocol.d.ts.map

package/dist/core/remote/iroh/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../../src/core/remote/iroh/protocol.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAC7C,eAAO,MAAM,yBAAyB,oBAAoB,CAAC;AAC3D,eAAO,MAAM,sBAAsB,oBAAoB,CAAC;AACxD,eAAO,MAAM,0BAA0B,wBAAwB,CAAC;AAChE,eAAO,MAAM,iCAAiC,qBAAqB,CAAC;AACpE,eAAO,MAAM,wCAAwC,4BAA4B,CAAC;AAClF,eAAO,MAAM,6BAA6B,iBAAiB,CAAC;AAC5D,eAAO,MAAM,uCAAuC,2BAA2B,CAAC;AAChF,eAAO,MAAM,iCAAiC,qBAAqB,CAAC;AACpE,eAAO,MAAM,yCAAyC,6BAA6B,CAAC;AACpF,eAAO,MAAM,yBAAyB,oJAO5B,CAAC;AAEX,yEAAyE;AACzE,eAAO,MAAM,+BAA+B,QAAgC,CAAC;AAE7E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEtE;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAE5E;AAED,wBAAgB,4CAA4C,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAmB9F;AACD,eAAO,MAAM,+BAA+B,8DAA8D,CAAC;AAC3G,eAAO,MAAM,6BAA6B,kDAAmD,CAAC;AAC9F,eAAO,MAAM,oBAAoB,gcAkBvB,CAAC;AACX,eAAO,MAAM,2CAA2C,4XAe9C,CAAC;AAMX,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,aAAa,GAAG,YAAY,CAAC;AAC5E,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/E,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,MAAM,MAAM,qCAAqC,GAAG,CAAC,OAAO,2CAA2C,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAElF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,EAAE,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAED,wBAAgB,uCAAuC,CACtD,KAAK,EAAE,OAAO,GACZ,KAAK,IAAI,qCAAqC,CAEhD;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAChD,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IAEpC,YAAY,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAItD;CACD;AAED,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAGpF;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE,CAGlF;AAED,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAIvF;AAED,MAAM,WAAW,2BAA2B;IAC3C,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,2BAA2B,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,yCAAyC;IACzD,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;IACzB,kFAAkF;IAClF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,uFAAuF;IACvF,gBAAgB,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;CAC3C;AAED;;;;;;;GAOG;AACH,wBAAgB,kCAAkC,CACjD,OAAO,EAAE,yCAAyC,GAChD,2BAA2B,CA8B7B;AAED,kFAAkF;AAClF,wBAAgB,mCAAmC,CAClD,MAAM,EAAE,2BAA2B,EACnC,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAST;AAiCD,wBAAgB,+BAA+B,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAY5E","sourcesContent":["import { Buffer } from \"node:buffer\";\n\nexport const IROH_REMOTE_ALPN = \"volt-rpc/0\";\nexport const IROH_REMOTE_TICKET_PREFIX = \"volt+iroh://v1/\";\nexport const IROH_REMOTE_HELLO_TYPE = \"volt_iroh_hello\";\nexport const IROH_REMOTE_HANDSHAKE_TYPE = \"volt_iroh_handshake\";\nexport const IROH_REMOTE_MULTI_STREAMS_FEATURE = \"multi_streams.v1\";\nexport const IROH_REMOTE_CONVERSATION_STREAMS_FEATURE = \"conversation_streams.v1\";\nexport const IROH_REMOTE_WORKTREES_FEATURE = \"worktrees.v1\";\nexport const IROH_REMOTE_WORKING_DIRECTORIES_FEATURE = \"working_directories.v1\";\nexport const IROH_REMOTE_AGENT_SETTLED_FEATURE = \"agent_settled.v1\";\nexport const IROH_REMOTE_SESSION_RUNTIME_STATE_FEATURE = \"session_runtime_state.v1\";\nexport const IROH_REMOTE_HOST_FEATURES = [\n\tIROH_REMOTE_MULTI_STREAMS_FEATURE,\n\tIROH_REMOTE_CONVERSATION_STREAMS_FEATURE,\n\tIROH_REMOTE_WORKTREES_FEATURE,\n\tIROH_REMOTE_WORKING_DIRECTORIES_FEATURE,\n\tIROH_REMOTE_AGENT_SETTLED_FEATURE,\n\tIROH_REMOTE_SESSION_RUNTIME_STATE_FEATURE,\n] as const;\n\n/** Daemon-managed worktree ids: lowercase slug, unique per workspace. */\nexport const IROH_REMOTE_WORKTREE_ID_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/;\n\nexport function isIrohRemoteWorktreeId(value: unknown): value is string {\n\treturn typeof value === \"string\" && IROH_REMOTE_WORKTREE_ID_PATTERN.test(value);\n}\n\nexport function isIrohRemoteWorkingDirectory(value: unknown): value is string {\n\treturn typeof value === \"string\" && getIrohRemoteWorkingDirectoryValidationError(value) === undefined;\n}\n\nexport function getIrohRemoteWorkingDirectoryValidationError(value: string): string | undefined {\n\tif (value.length === 0) {\n\t\treturn \"workingDirectory must be omitted for the workspace root\";\n\t}\n\tif (value.length > 4096 || Buffer.byteLength(value, \"utf8\") > 8192) {\n\t\treturn \"workingDirectory exceeds maximum length\";\n\t}\n\tif (value.includes(\"\\0\") || hasAsciiControlCharacter(value)) {\n\t\treturn \"workingDirectory must not contain control characters\";\n\t}\n\tif (value.startsWith(\"/\") || value.startsWith(\"//\") || value.includes(\"\\\\\") || /^[A-Za-z]:/.test(value)) {\n\t\treturn \"workingDirectory must be a relative POSIX path\";\n\t}\n\tfor (const segment of value.split(\"/\")) {\n\t\tif (segment === \"\" || segment === \".\" || segment === \"..\" || segment.toLowerCase() === \".git\") {\n\t\t\treturn \"workingDirectory must not contain empty, '.', '..', or '.git' path segments\";\n\t\t}\n\t}\n\treturn undefined;\n}\nexport const DEFAULT_IROH_REMOTE_ALLOW_TOOLS = \"read,bash,edit,write,web_search,grep,find,ls,subagent,mcp\";\nexport const IROH_REMOTE_UNSAFE_TOOL_NAMES = [\"bash\", \"edit\", \"write\", \"web_search\"] as const;\nexport const IROH_REMOTE_OUTCOMES = [\n\t\"host_unreachable\",\n\t\"invalid_workspace\",\n\t\"invalid_conversation_target\",\n\t\"conversation_streams_unsupported\",\n\t\"pairing_secret_expired\",\n\t\"pairing_secret_consumed\",\n\t\"client_unknown\",\n\t\"client_revoked\",\n\t\"workspace_unavailable\",\n\t\"workspace_forbidden\",\n\t\"workspace_authorization_removed\",\n\t\"workspace_unregistered\",\n\t\"session_unavailable\",\n\t\"duplicate_conversation_connection\",\n\t\"conversation_in_use\",\n\t\"host_identity_mismatch\",\n\t\"saved_host_invalid\",\n] as const;\nexport const IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOMES = [\n\t\"invalid_workspace\",\n\t\"invalid_conversation_target\",\n\t\"conversation_streams_unsupported\",\n\t\"pairing_secret_expired\",\n\t\"pairing_secret_consumed\",\n\t\"client_unknown\",\n\t\"client_revoked\",\n\t\"workspace_unavailable\",\n\t\"workspace_forbidden\",\n\t\"workspace_authorization_removed\",\n\t\"workspace_unregistered\",\n\t\"session_unavailable\",\n\t\"duplicate_conversation_connection\",\n\t\"conversation_in_use\",\n] as const;\n\nconst IROH_REMOTE_UNSAFE_TOOL_NAME_SET = new Set<string>(IROH_REMOTE_UNSAFE_TOOL_NAMES);\nconst IROH_REMOTE_OUTCOME_SET = new Set<string>(IROH_REMOTE_OUTCOMES);\nconst IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOME_SET = new Set<string>(IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOMES);\n\nexport type IrohRemoteRelayMode = \"disabled\" | \"development\" | \"production\";\nexport type IrohRemoteHostFeature = (typeof IROH_REMOTE_HOST_FEATURES)[number];\nexport type IrohRemoteOutcome = (typeof IROH_REMOTE_OUTCOMES)[number];\nexport type IrohRemoteHostHandshakeFailureOutcome = (typeof IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOMES)[number];\n\nexport function isIrohRemoteRelayMode(value: unknown): value is IrohRemoteRelayMode {\n\treturn value === \"disabled\" || value === \"development\" || value === \"production\";\n}\n\nexport function isIrohRemoteRelayUrls(value: unknown): value is string[] {\n\treturn Array.isArray(value) && value.length > 0 && value.every((url) => typeof url === \"string\" && url.length > 0);\n}\n\nexport function isIrohRemoteOutcome(value: unknown): value is IrohRemoteOutcome {\n\treturn typeof value === \"string\" && IROH_REMOTE_OUTCOME_SET.has(value);\n}\n\nexport function isIrohRemoteHostHandshakeFailureOutcome(\n\tvalue: unknown,\n): value is IrohRemoteHostHandshakeFailureOutcome {\n\treturn typeof value === \"string\" && IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOME_SET.has(value);\n}\n\nexport class IrohRemoteOutcomeError extends Error {\n\treadonly outcome: IrohRemoteOutcome;\n\n\tconstructor(outcome: IrohRemoteOutcome, message: string) {\n\t\tsuper(`${outcome}: ${message}`);\n\t\tthis.name = \"IrohRemoteOutcomeError\";\n\t\tthis.outcome = outcome;\n\t}\n}\n\nexport function normalizeIrohRemoteAllowTools(allowTools: string | undefined): string {\n\tconst tools = parseIrohRemoteAllowToolNames(allowTools ?? DEFAULT_IROH_REMOTE_ALLOW_TOOLS);\n\treturn tools.join(\",\");\n}\n\nexport function parseIrohRemoteAllowTools(allowTools: string | undefined): string[] {\n\tconst normalized = normalizeIrohRemoteAllowTools(allowTools);\n\treturn normalized.length === 0 ? [] : normalized.split(\",\");\n}\n\nexport function usesDefaultIrohRemoteAllowTools(allowTools: string | undefined): boolean {\n\tconst tools = new Set(parseIrohRemoteAllowTools(allowTools));\n\tconst defaultTools = new Set(DEFAULT_IROH_REMOTE_ALLOW_TOOLS.split(\",\"));\n\treturn tools.size === defaultTools.size && Array.from(tools).every((tool) => defaultTools.has(tool));\n}\n\nexport interface IrohRemoteRuntimeToolPolicy {\n\ttools: string[];\n\tallowUnlistedExtensionTools: boolean;\n}\n\nexport interface ResolveIrohRemoteRuntimeToolPolicyOptions {\n\t/** Persisted pair-time grant. This is always the maximum authority. */\n\tclientAllowTools: string;\n\t/** Optional legacy workspace ceiling. Missing means no additional restriction. */\n\tworkspaceAllowTools?: string;\n\t/** Exact daemon ceiling. Null means unrestricted; an empty array denies every tool. */\n\tdaemonAllowTools: readonly string[] | null;\n}\n\n/**\n * Compose daemon-owned runtime policy without letting a host or workspace\n * policy widen the grant persisted for a paired client.\n *\n * Default grants permit extension tools that are not known until resource\n * loading. That wildcard applies only to non-default tool names, and survives\n * only when every present policy layer has default-grant semantics.\n */\nexport function resolveIrohRemoteRuntimeToolPolicy(\n\toptions: ResolveIrohRemoteRuntimeToolPolicyOptions,\n): IrohRemoteRuntimeToolPolicy {\n\tconst defaultTools = new Set(DEFAULT_IROH_REMOTE_ALLOW_TOOLS.split(\",\"));\n\tconst layers: Array<{ tools: string[]; toolSet: Set<string>; allowUnlistedExtensionTools: boolean }> = [];\n\tconst addStringLayer = (allowTools: string): void => {\n\t\tconst tools = uniqueIrohRemoteAllowToolNames(parseIrohRemoteAllowTools(allowTools));\n\t\tlayers.push({\n\t\t\ttools,\n\t\t\ttoolSet: new Set(tools),\n\t\t\tallowUnlistedExtensionTools: usesDefaultIrohRemoteAllowTools(allowTools),\n\t\t});\n\t};\n\n\taddStringLayer(options.clientAllowTools);\n\tif (options.workspaceAllowTools !== undefined) {\n\t\taddStringLayer(options.workspaceAllowTools);\n\t}\n\tif (options.daemonAllowTools !== null) {\n\t\tconst tools = uniqueIrohRemoteAllowToolNames(options.daemonAllowTools);\n\t\tlayers.push({ tools, toolSet: new Set(tools), allowUnlistedExtensionTools: false });\n\t}\n\n\tconst candidates = uniqueIrohRemoteAllowToolNames(layers.flatMap((layer) => layer.tools));\n\treturn {\n\t\ttools: candidates.filter((tool) =>\n\t\t\tlayers.every(\n\t\t\t\t(layer) => layer.toolSet.has(tool) || (layer.allowUnlistedExtensionTools && !defaultTools.has(tool)),\n\t\t\t),\n\t\t),\n\t\tallowUnlistedExtensionTools: layers.every((layer) => layer.allowUnlistedExtensionTools),\n\t};\n}\n\n/** Return whether every tool permitted by policy is also permitted by ceiling. */\nexport function isIrohRemoteRuntimeToolPolicyWithin(\n\tpolicy: IrohRemoteRuntimeToolPolicy,\n\tceiling: IrohRemoteRuntimeToolPolicy,\n): boolean {\n\tif (policy.allowUnlistedExtensionTools && !ceiling.allowUnlistedExtensionTools) {\n\t\treturn false;\n\t}\n\tconst defaultTools = new Set(DEFAULT_IROH_REMOTE_ALLOW_TOOLS.split(\",\"));\n\tconst ceilingTools = new Set(ceiling.tools);\n\treturn policy.tools.every(\n\t\t(tool) => ceilingTools.has(tool) || (ceiling.allowUnlistedExtensionTools && !defaultTools.has(tool)),\n\t);\n}\n\nfunction hasAsciiControlCharacter(value: string): boolean {\n\tfor (const char of value) {\n\t\tconst code = char.charCodeAt(0);\n\t\tif (code <= 0x1f || code === 0x7f) {\n\t\t\treturn true;\n\t\t}\n\t}\n\treturn false;\n}\n\nfunction parseIrohRemoteAllowToolNames(allowTools: string): string[] {\n\treturn allowTools\n\t\t.split(\",\")\n\t\t.map((tool) => tool.trim())\n\t\t.filter((tool) => tool.length > 0);\n}\n\nfunction uniqueIrohRemoteAllowToolNames(toolNames: readonly string[]): string[] {\n\tconst tools: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const toolName of toolNames) {\n\t\tconst tool = toolName.trim();\n\t\tif (tool.length === 0 || seen.has(tool)) {\n\t\t\tcontinue;\n\t\t}\n\t\tseen.add(tool);\n\t\ttools.push(tool);\n\t}\n\treturn tools;\n}\n\nexport function getIrohRemoteUnsafeAllowedTools(allowTools: string): string[] {\n\tconst unsafeTools: string[] = [];\n\tconst seenUnsafeTools = new Set<string>();\n\tfor (const toolName of allowTools.split(\",\")) {\n\t\tconst normalizedToolName = toolName.trim();\n\t\tif (!IROH_REMOTE_UNSAFE_TOOL_NAME_SET.has(normalizedToolName) || seenUnsafeTools.has(normalizedToolName)) {\n\t\t\tcontinue;\n\t\t}\n\t\tseenUnsafeTools.add(normalizedToolName);\n\t\tunsafeTools.push(normalizedToolName);\n\t}\n\treturn unsafeTools;\n}\n"]}

package/dist/core/remote/iroh/protocol.js

@@ -0,0 +1,204 @@
+import { Buffer } from "node:buffer";
+export const IROH_REMOTE_ALPN = "volt-rpc/0";
+export const IROH_REMOTE_TICKET_PREFIX = "volt+iroh://v1/";
+export const IROH_REMOTE_HELLO_TYPE = "volt_iroh_hello";
+export const IROH_REMOTE_HANDSHAKE_TYPE = "volt_iroh_handshake";
+export const IROH_REMOTE_MULTI_STREAMS_FEATURE = "multi_streams.v1";
+export const IROH_REMOTE_CONVERSATION_STREAMS_FEATURE = "conversation_streams.v1";
+export const IROH_REMOTE_WORKTREES_FEATURE = "worktrees.v1";
+export const IROH_REMOTE_WORKING_DIRECTORIES_FEATURE = "working_directories.v1";
+export const IROH_REMOTE_AGENT_SETTLED_FEATURE = "agent_settled.v1";
+export const IROH_REMOTE_SESSION_RUNTIME_STATE_FEATURE = "session_runtime_state.v1";
+export const IROH_REMOTE_HOST_FEATURES = [
+    IROH_REMOTE_MULTI_STREAMS_FEATURE,
+    IROH_REMOTE_CONVERSATION_STREAMS_FEATURE,
+    IROH_REMOTE_WORKTREES_FEATURE,
+    IROH_REMOTE_WORKING_DIRECTORIES_FEATURE,
+    IROH_REMOTE_AGENT_SETTLED_FEATURE,
+    IROH_REMOTE_SESSION_RUNTIME_STATE_FEATURE,
+];
+/** Daemon-managed worktree ids: lowercase slug, unique per workspace. */
+export const IROH_REMOTE_WORKTREE_ID_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/;
+export function isIrohRemoteWorktreeId(value) {
+    return typeof value === "string" && IROH_REMOTE_WORKTREE_ID_PATTERN.test(value);
+}
+export function isIrohRemoteWorkingDirectory(value) {
+    return typeof value === "string" && getIrohRemoteWorkingDirectoryValidationError(value) === undefined;
+}
+export function getIrohRemoteWorkingDirectoryValidationError(value) {
+    if (value.length === 0) {
+        return "workingDirectory must be omitted for the workspace root";
+    }
+    if (value.length > 4096 || Buffer.byteLength(value, "utf8") > 8192) {
+        return "workingDirectory exceeds maximum length";
+    }
+    if (value.includes("\0") || hasAsciiControlCharacter(value)) {
+        return "workingDirectory must not contain control characters";
+    }
+    if (value.startsWith("/") || value.startsWith("//") || value.includes("\\") || /^[A-Za-z]:/.test(value)) {
+        return "workingDirectory must be a relative POSIX path";
+    }
+    for (const segment of value.split("/")) {
+        if (segment === "" || segment === "." || segment === ".." || segment.toLowerCase() === ".git") {
+            return "workingDirectory must not contain empty, '.', '..', or '.git' path segments";
+        }
+    }
+    return undefined;
+}
+export const DEFAULT_IROH_REMOTE_ALLOW_TOOLS = "read,bash,edit,write,web_search,grep,find,ls,subagent,mcp";
+export const IROH_REMOTE_UNSAFE_TOOL_NAMES = ["bash", "edit", "write", "web_search"];
+export const IROH_REMOTE_OUTCOMES = [
+    "host_unreachable",
+    "invalid_workspace",
+    "invalid_conversation_target",
+    "conversation_streams_unsupported",
+    "pairing_secret_expired",
+    "pairing_secret_consumed",
+    "client_unknown",
+    "client_revoked",
+    "workspace_unavailable",
+    "workspace_forbidden",
+    "workspace_authorization_removed",
+    "workspace_unregistered",
+    "session_unavailable",
+    "duplicate_conversation_connection",
+    "conversation_in_use",
+    "host_identity_mismatch",
+    "saved_host_invalid",
+];
+export const IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOMES = [
+    "invalid_workspace",
+    "invalid_conversation_target",
+    "conversation_streams_unsupported",
+    "pairing_secret_expired",
+    "pairing_secret_consumed",
+    "client_unknown",
+    "client_revoked",
+    "workspace_unavailable",
+    "workspace_forbidden",
+    "workspace_authorization_removed",
+    "workspace_unregistered",
+    "session_unavailable",
+    "duplicate_conversation_connection",
+    "conversation_in_use",
+];
+const IROH_REMOTE_UNSAFE_TOOL_NAME_SET = new Set(IROH_REMOTE_UNSAFE_TOOL_NAMES);
+const IROH_REMOTE_OUTCOME_SET = new Set(IROH_REMOTE_OUTCOMES);
+const IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOME_SET = new Set(IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOMES);
+export function isIrohRemoteRelayMode(value) {
+    return value === "disabled" || value === "development" || value === "production";
+}
+export function isIrohRemoteRelayUrls(value) {
+    return Array.isArray(value) && value.length > 0 && value.every((url) => typeof url === "string" && url.length > 0);
+}
+export function isIrohRemoteOutcome(value) {
+    return typeof value === "string" && IROH_REMOTE_OUTCOME_SET.has(value);
+}
+export function isIrohRemoteHostHandshakeFailureOutcome(value) {
+    return typeof value === "string" && IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOME_SET.has(value);
+}
+export class IrohRemoteOutcomeError extends Error {
+    outcome;
+    constructor(outcome, message) {
+        super(`${outcome}: ${message}`);
+        this.name = "IrohRemoteOutcomeError";
+        this.outcome = outcome;
+    }
+}
+export function normalizeIrohRemoteAllowTools(allowTools) {
+    const tools = parseIrohRemoteAllowToolNames(allowTools ?? DEFAULT_IROH_REMOTE_ALLOW_TOOLS);
+    return tools.join(",");
+}
+export function parseIrohRemoteAllowTools(allowTools) {
+    const normalized = normalizeIrohRemoteAllowTools(allowTools);
+    return normalized.length === 0 ? [] : normalized.split(",");
+}
+export function usesDefaultIrohRemoteAllowTools(allowTools) {
+    const tools = new Set(parseIrohRemoteAllowTools(allowTools));
+    const defaultTools = new Set(DEFAULT_IROH_REMOTE_ALLOW_TOOLS.split(","));
+    return tools.size === defaultTools.size && Array.from(tools).every((tool) => defaultTools.has(tool));
+}
+/**
+ * Compose daemon-owned runtime policy without letting a host or workspace
+ * policy widen the grant persisted for a paired client.
+ *
+ * Default grants permit extension tools that are not known until resource
+ * loading. That wildcard applies only to non-default tool names, and survives
+ * only when every present policy layer has default-grant semantics.
+ */
+export function resolveIrohRemoteRuntimeToolPolicy(options) {
+    const defaultTools = new Set(DEFAULT_IROH_REMOTE_ALLOW_TOOLS.split(","));
+    const layers = [];
+    const addStringLayer = (allowTools) => {
+        const tools = uniqueIrohRemoteAllowToolNames(parseIrohRemoteAllowTools(allowTools));
+        layers.push({
+            tools,
+            toolSet: new Set(tools),
+            allowUnlistedExtensionTools: usesDefaultIrohRemoteAllowTools(allowTools),
+        });
+    };
+    addStringLayer(options.clientAllowTools);
+    if (options.workspaceAllowTools !== undefined) {
+        addStringLayer(options.workspaceAllowTools);
+    }
+    if (options.daemonAllowTools !== null) {
+        const tools = uniqueIrohRemoteAllowToolNames(options.daemonAllowTools);
+        layers.push({ tools, toolSet: new Set(tools), allowUnlistedExtensionTools: false });
+    }
+    const candidates = uniqueIrohRemoteAllowToolNames(layers.flatMap((layer) => layer.tools));
+    return {
+        tools: candidates.filter((tool) => layers.every((layer) => layer.toolSet.has(tool) || (layer.allowUnlistedExtensionTools && !defaultTools.has(tool)))),
+        allowUnlistedExtensionTools: layers.every((layer) => layer.allowUnlistedExtensionTools),
+    };
+}
+/** Return whether every tool permitted by policy is also permitted by ceiling. */
+export function isIrohRemoteRuntimeToolPolicyWithin(policy, ceiling) {
+    if (policy.allowUnlistedExtensionTools && !ceiling.allowUnlistedExtensionTools) {
+        return false;
+    }
+    const defaultTools = new Set(DEFAULT_IROH_REMOTE_ALLOW_TOOLS.split(","));
+    const ceilingTools = new Set(ceiling.tools);
+    return policy.tools.every((tool) => ceilingTools.has(tool) || (ceiling.allowUnlistedExtensionTools && !defaultTools.has(tool)));
+}
+function hasAsciiControlCharacter(value) {
+    for (const char of value) {
+        const code = char.charCodeAt(0);
+        if (code <= 0x1f || code === 0x7f) {
+            return true;
+        }
+    }
+    return false;
+}
+function parseIrohRemoteAllowToolNames(allowTools) {
+    return allowTools
+        .split(",")
+        .map((tool) => tool.trim())
+        .filter((tool) => tool.length > 0);
+}
+function uniqueIrohRemoteAllowToolNames(toolNames) {
+    const tools = [];
+    const seen = new Set();
+    for (const toolName of toolNames) {
+        const tool = toolName.trim();
+        if (tool.length === 0 || seen.has(tool)) {
+            continue;
+        }
+        seen.add(tool);
+        tools.push(tool);
+    }
+    return tools;
+}
+export function getIrohRemoteUnsafeAllowedTools(allowTools) {
+    const unsafeTools = [];
+    const seenUnsafeTools = new Set();
+    for (const toolName of allowTools.split(",")) {
+        const normalizedToolName = toolName.trim();
+        if (!IROH_REMOTE_UNSAFE_TOOL_NAME_SET.has(normalizedToolName) || seenUnsafeTools.has(normalizedToolName)) {
+            continue;
+        }
+        seenUnsafeTools.add(normalizedToolName);
+        unsafeTools.push(normalizedToolName);
+    }
+    return unsafeTools;
+}
+//# sourceMappingURL=protocol.js.map

package/dist/core/remote/iroh/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../src/core/remote/iroh/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAC7C,MAAM,CAAC,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AAC3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AACxD,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC;AAChE,MAAM,CAAC,MAAM,iCAAiC,GAAG,kBAAkB,CAAC;AACpE,MAAM,CAAC,MAAM,wCAAwC,GAAG,yBAAyB,CAAC;AAClF,MAAM,CAAC,MAAM,6BAA6B,GAAG,cAAc,CAAC;AAC5D,MAAM,CAAC,MAAM,uCAAuC,GAAG,wBAAwB,CAAC;AAChF,MAAM,CAAC,MAAM,iCAAiC,GAAG,kBAAkB,CAAC;AACpE,MAAM,CAAC,MAAM,yCAAyC,GAAG,0BAA0B,CAAC;AACpF,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACxC,iCAAiC;IACjC,wCAAwC;IACxC,6BAA6B;IAC7B,uCAAuC;IACvC,iCAAiC;IACjC,yCAAyC;CAChC,CAAC;AAEX,yEAAyE;AACzE,MAAM,CAAC,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AAE7E,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAmB;IACvE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAAA,CAChF;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc,EAAmB;IAC7E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,4CAA4C,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;AAAA,CACtG;AAED,MAAM,UAAU,4CAA4C,CAAC,KAAa,EAAsB;IAC/F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,yDAAyD,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACpE,OAAO,yCAAyC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,OAAO,sDAAsD,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzG,OAAO,gDAAgD,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YAC/F,OAAO,6EAA6E,CAAC;QACtF,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC;AAAA,CACjB;AACD,MAAM,CAAC,MAAM,+BAA+B,GAAG,2DAA2D,CAAC;AAC3G,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAU,CAAC;AAC9F,MAAM,CAAC,MAAM,oBAAoB,GAAG;IACnC,kBAAkB;IAClB,mBAAmB;IACnB,6BAA6B;IAC7B,kCAAkC;IAClC,wBAAwB;IACxB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,uBAAuB;IACvB,qBAAqB;IACrB,iCAAiC;IACjC,wBAAwB;IACxB,qBAAqB;IACrB,mCAAmC;IACnC,qBAAqB;IACrB,wBAAwB;IACxB,oBAAoB;CACX,CAAC;AACX,MAAM,CAAC,MAAM,2CAA2C,GAAG;IAC1D,mBAAmB;IACnB,6BAA6B;IAC7B,kCAAkC;IAClC,wBAAwB;IACxB,yBAAyB;IACzB,gBAAgB;IAChB,gBAAgB;IAChB,uBAAuB;IACvB,qBAAqB;IACrB,iCAAiC;IACjC,wBAAwB;IACxB,qBAAqB;IACrB,mCAAmC;IACnC,qBAAqB;CACZ,CAAC;AAEX,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAAS,6BAA6B,CAAC,CAAC;AACxF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAS,oBAAoB,CAAC,CAAC;AACtE,MAAM,8CAA8C,GAAG,IAAI,GAAG,CAAS,2CAA2C,CAAC,CAAC;AAOpH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAgC;IACnF,OAAO,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,YAAY,CAAC;AAAA,CACjF;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAqB;IACxE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAAA,CACnH;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAA8B;IAC/E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAAA,CACvE;AAED,MAAM,UAAU,uCAAuC,CACtD,KAAc,EACmC;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,8CAA8C,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAAA,CAC9F;AAED,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACvC,OAAO,CAAoB;IAEpC,YAAY,OAA0B,EAAE,OAAe,EAAE;QACxD,KAAK,CAAC,GAAG,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAAA,CACvB;CACD;AAED,MAAM,UAAU,6BAA6B,CAAC,UAA8B,EAAU;IACrF,MAAM,KAAK,GAAG,6BAA6B,CAAC,UAAU,IAAI,+BAA+B,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACvB;AAED,MAAM,UAAU,yBAAyB,CAAC,UAA8B,EAAY;IACnF,MAAM,UAAU,GAAG,6BAA6B,CAAC,UAAU,CAAC,CAAC;IAC7D,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAAA,CAC5D;AAED,MAAM,UAAU,+BAA+B,CAAC,UAA8B,EAAW;IACxF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,+BAA+B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAAA,CACrG;AAgBD;;;;;;;GAOG;AACH,MAAM,UAAU,kCAAkC,CACjD,OAAkD,EACpB;IAC9B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,+BAA+B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAA2F,EAAE,CAAC;IAC1G,MAAM,cAAc,GAAG,CAAC,UAAkB,EAAQ,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,8BAA8B,CAAC,yBAAyB,CAAC,UAAU,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC;YACX,KAAK;YACL,OAAO,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC;YACvB,2BAA2B,EAAE,+BAA+B,CAAC,UAAU,CAAC;SACxE,CAAC,CAAC;IAAA,CACH,CAAC;IAEF,cAAc,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC/C,cAAc,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,8BAA8B,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACvE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,2BAA2B,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,UAAU,GAAG,8BAA8B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1F,OAAO;QACN,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACjC,MAAM,CAAC,KAAK,CACX,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,2BAA2B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACpG,CACD;QACD,2BAA2B,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC;KACvF,CAAC;AAAA,CACF;AAED,kFAAkF;AAClF,MAAM,UAAU,mCAAmC,CAClD,MAAmC,EACnC,OAAoC,EAC1B;IACV,IAAI,MAAM,CAAC,2BAA2B,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,+BAA+B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CACxB,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CACpG,CAAC;AAAA,CACF;AAED,SAAS,wBAAwB,CAAC,KAAa,EAAW;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,6BAA6B,CAAC,UAAkB,EAAY;IACpE,OAAO,UAAU;SACf,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAAA,CACpC;AAED,SAAS,8BAA8B,CAAC,SAA4B,EAAY;IAC/E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,SAAS;QACV,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,MAAM,UAAU,+BAA+B,CAAC,UAAkB,EAAY;IAC7E,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,KAAK,MAAM,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,gCAAgC,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC1G,SAAS;QACV,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACxC,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,WAAW,CAAC;AAAA,CACnB","sourcesContent":["import { Buffer } from \"node:buffer\";\n\nexport const IROH_REMOTE_ALPN = \"volt-rpc/0\";\nexport const IROH_REMOTE_TICKET_PREFIX = \"volt+iroh://v1/\";\nexport const IROH_REMOTE_HELLO_TYPE = \"volt_iroh_hello\";\nexport const IROH_REMOTE_HANDSHAKE_TYPE = \"volt_iroh_handshake\";\nexport const IROH_REMOTE_MULTI_STREAMS_FEATURE = \"multi_streams.v1\";\nexport const IROH_REMOTE_CONVERSATION_STREAMS_FEATURE = \"conversation_streams.v1\";\nexport const IROH_REMOTE_WORKTREES_FEATURE = \"worktrees.v1\";\nexport const IROH_REMOTE_WORKING_DIRECTORIES_FEATURE = \"working_directories.v1\";\nexport const IROH_REMOTE_AGENT_SETTLED_FEATURE = \"agent_settled.v1\";\nexport const IROH_REMOTE_SESSION_RUNTIME_STATE_FEATURE = \"session_runtime_state.v1\";\nexport const IROH_REMOTE_HOST_FEATURES = [\n\tIROH_REMOTE_MULTI_STREAMS_FEATURE,\n\tIROH_REMOTE_CONVERSATION_STREAMS_FEATURE,\n\tIROH_REMOTE_WORKTREES_FEATURE,\n\tIROH_REMOTE_WORKING_DIRECTORIES_FEATURE,\n\tIROH_REMOTE_AGENT_SETTLED_FEATURE,\n\tIROH_REMOTE_SESSION_RUNTIME_STATE_FEATURE,\n] as const;\n\n/** Daemon-managed worktree ids: lowercase slug, unique per workspace. */\nexport const IROH_REMOTE_WORKTREE_ID_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/;\n\nexport function isIrohRemoteWorktreeId(value: unknown): value is string {\n\treturn typeof value === \"string\" && IROH_REMOTE_WORKTREE_ID_PATTERN.test(value);\n}\n\nexport function isIrohRemoteWorkingDirectory(value: unknown): value is string {\n\treturn typeof value === \"string\" && getIrohRemoteWorkingDirectoryValidationError(value) === undefined;\n}\n\nexport function getIrohRemoteWorkingDirectoryValidationError(value: string): string | undefined {\n\tif (value.length === 0) {\n\t\treturn \"workingDirectory must be omitted for the workspace root\";\n\t}\n\tif (value.length > 4096 || Buffer.byteLength(value, \"utf8\") > 8192) {\n\t\treturn \"workingDirectory exceeds maximum length\";\n\t}\n\tif (value.includes(\"\\0\") || hasAsciiControlCharacter(value)) {\n\t\treturn \"workingDirectory must not contain control characters\";\n\t}\n\tif (value.startsWith(\"/\") || value.startsWith(\"//\") || value.includes(\"\\\\\") || /^[A-Za-z]:/.test(value)) {\n\t\treturn \"workingDirectory must be a relative POSIX path\";\n\t}\n\tfor (const segment of value.split(\"/\")) {\n\t\tif (segment === \"\" || segment === \".\" || segment === \"..\" || segment.toLowerCase() === \".git\") {\n\t\t\treturn \"workingDirectory must not contain empty, '.', '..', or '.git' path segments\";\n\t\t}\n\t}\n\treturn undefined;\n}\nexport const DEFAULT_IROH_REMOTE_ALLOW_TOOLS = \"read,bash,edit,write,web_search,grep,find,ls,subagent,mcp\";\nexport const IROH_REMOTE_UNSAFE_TOOL_NAMES = [\"bash\", \"edit\", \"write\", \"web_search\"] as const;\nexport const IROH_REMOTE_OUTCOMES = [\n\t\"host_unreachable\",\n\t\"invalid_workspace\",\n\t\"invalid_conversation_target\",\n\t\"conversation_streams_unsupported\",\n\t\"pairing_secret_expired\",\n\t\"pairing_secret_consumed\",\n\t\"client_unknown\",\n\t\"client_revoked\",\n\t\"workspace_unavailable\",\n\t\"workspace_forbidden\",\n\t\"workspace_authorization_removed\",\n\t\"workspace_unregistered\",\n\t\"session_unavailable\",\n\t\"duplicate_conversation_connection\",\n\t\"conversation_in_use\",\n\t\"host_identity_mismatch\",\n\t\"saved_host_invalid\",\n] as const;\nexport const IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOMES = [\n\t\"invalid_workspace\",\n\t\"invalid_conversation_target\",\n\t\"conversation_streams_unsupported\",\n\t\"pairing_secret_expired\",\n\t\"pairing_secret_consumed\",\n\t\"client_unknown\",\n\t\"client_revoked\",\n\t\"workspace_unavailable\",\n\t\"workspace_forbidden\",\n\t\"workspace_authorization_removed\",\n\t\"workspace_unregistered\",\n\t\"session_unavailable\",\n\t\"duplicate_conversation_connection\",\n\t\"conversation_in_use\",\n] as const;\n\nconst IROH_REMOTE_UNSAFE_TOOL_NAME_SET = new Set<string>(IROH_REMOTE_UNSAFE_TOOL_NAMES);\nconst IROH_REMOTE_OUTCOME_SET = new Set<string>(IROH_REMOTE_OUTCOMES);\nconst IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOME_SET = new Set<string>(IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOMES);\n\nexport type IrohRemoteRelayMode = \"disabled\" | \"development\" | \"production\";\nexport type IrohRemoteHostFeature = (typeof IROH_REMOTE_HOST_FEATURES)[number];\nexport type IrohRemoteOutcome = (typeof IROH_REMOTE_OUTCOMES)[number];\nexport type IrohRemoteHostHandshakeFailureOutcome = (typeof IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOMES)[number];\n\nexport function isIrohRemoteRelayMode(value: unknown): value is IrohRemoteRelayMode {\n\treturn value === \"disabled\" || value === \"development\" || value === \"production\";\n}\n\nexport function isIrohRemoteRelayUrls(value: unknown): value is string[] {\n\treturn Array.isArray(value) && value.length > 0 && value.every((url) => typeof url === \"string\" && url.length > 0);\n}\n\nexport function isIrohRemoteOutcome(value: unknown): value is IrohRemoteOutcome {\n\treturn typeof value === \"string\" && IROH_REMOTE_OUTCOME_SET.has(value);\n}\n\nexport function isIrohRemoteHostHandshakeFailureOutcome(\n\tvalue: unknown,\n): value is IrohRemoteHostHandshakeFailureOutcome {\n\treturn typeof value === \"string\" && IROH_REMOTE_HOST_HANDSHAKE_FAILURE_OUTCOME_SET.has(value);\n}\n\nexport class IrohRemoteOutcomeError extends Error {\n\treadonly outcome: IrohRemoteOutcome;\n\n\tconstructor(outcome: IrohRemoteOutcome, message: string) {\n\t\tsuper(`${outcome}: ${message}`);\n\t\tthis.name = \"IrohRemoteOutcomeError\";\n\t\tthis.outcome = outcome;\n\t}\n}\n\nexport function normalizeIrohRemoteAllowTools(allowTools: string | undefined): string {\n\tconst tools = parseIrohRemoteAllowToolNames(allowTools ?? DEFAULT_IROH_REMOTE_ALLOW_TOOLS);\n\treturn tools.join(\",\");\n}\n\nexport function parseIrohRemoteAllowTools(allowTools: string | undefined): string[] {\n\tconst normalized = normalizeIrohRemoteAllowTools(allowTools);\n\treturn normalized.length === 0 ? [] : normalized.split(\",\");\n}\n\nexport function usesDefaultIrohRemoteAllowTools(allowTools: string | undefined): boolean {\n\tconst tools = new Set(parseIrohRemoteAllowTools(allowTools));\n\tconst defaultTools = new Set(DEFAULT_IROH_REMOTE_ALLOW_TOOLS.split(\",\"));\n\treturn tools.size === defaultTools.size && Array.from(tools).every((tool) => defaultTools.has(tool));\n}\n\nexport interface IrohRemoteRuntimeToolPolicy {\n\ttools: string[];\n\tallowUnlistedExtensionTools: boolean;\n}\n\nexport interface ResolveIrohRemoteRuntimeToolPolicyOptions {\n\t/** Persisted pair-time grant. This is always the maximum authority. */\n\tclientAllowTools: string;\n\t/** Optional legacy workspace ceiling. Missing means no additional restriction. */\n\tworkspaceAllowTools?: string;\n\t/** Exact daemon ceiling. Null means unrestricted; an empty array denies every tool. */\n\tdaemonAllowTools: readonly string[] | null;\n}\n\n/**\n * Compose daemon-owned runtime policy without letting a host or workspace\n * policy widen the grant persisted for a paired client.\n *\n * Default grants permit extension tools that are not known until resource\n * loading. That wildcard applies only to non-default tool names, and survives\n * only when every present policy layer has default-grant semantics.\n */\nexport function resolveIrohRemoteRuntimeToolPolicy(\n\toptions: ResolveIrohRemoteRuntimeToolPolicyOptions,\n): IrohRemoteRuntimeToolPolicy {\n\tconst defaultTools = new Set(DEFAULT_IROH_REMOTE_ALLOW_TOOLS.split(\",\"));\n\tconst layers: Array<{ tools: string[]; toolSet: Set<string>; allowUnlistedExtensionTools: boolean }> = [];\n\tconst addStringLayer = (allowTools: string): void => {\n\t\tconst tools = uniqueIrohRemoteAllowToolNames(parseIrohRemoteAllowTools(allowTools));\n\t\tlayers.push({\n\t\t\ttools,\n\t\t\ttoolSet: new Set(tools),\n\t\t\tallowUnlistedExtensionTools: usesDefaultIrohRemoteAllowTools(allowTools),\n\t\t});\n\t};\n\n\taddStringLayer(options.clientAllowTools);\n\tif (options.workspaceAllowTools !== undefined) {\n\t\taddStringLayer(options.workspaceAllowTools);\n\t}\n\tif (options.daemonAllowTools !== null) {\n\t\tconst tools = uniqueIrohRemoteAllowToolNames(options.daemonAllowTools);\n\t\tlayers.push({ tools, toolSet: new Set(tools), allowUnlistedExtensionTools: false });\n\t}\n\n\tconst candidates = uniqueIrohRemoteAllowToolNames(layers.flatMap((layer) => layer.tools));\n\treturn {\n\t\ttools: candidates.filter((tool) =>\n\t\t\tlayers.every(\n\t\t\t\t(layer) => layer.toolSet.has(tool) || (layer.allowUnlistedExtensionTools && !defaultTools.has(tool)),\n\t\t\t),\n\t\t),\n\t\tallowUnlistedExtensionTools: layers.every((layer) => layer.allowUnlistedExtensionTools),\n\t};\n}\n\n/** Return whether every tool permitted by policy is also permitted by ceiling. */\nexport function isIrohRemoteRuntimeToolPolicyWithin(\n\tpolicy: IrohRemoteRuntimeToolPolicy,\n\tceiling: IrohRemoteRuntimeToolPolicy,\n): boolean {\n\tif (policy.allowUnlistedExtensionTools && !ceiling.allowUnlistedExtensionTools) {\n\t\treturn false;\n\t}\n\tconst defaultTools = new Set(DEFAULT_IROH_REMOTE_ALLOW_TOOLS.split(\",\"));\n\tconst ceilingTools = new Set(ceiling.tools);\n\treturn policy.tools.every(\n\t\t(tool) => ceilingTools.has(tool) || (ceiling.allowUnlistedExtensionTools && !defaultTools.has(tool)),\n\t);\n}\n\nfunction hasAsciiControlCharacter(value: string): boolean {\n\tfor (const char of value) {\n\t\tconst code = char.charCodeAt(0);\n\t\tif (code <= 0x1f || code === 0x7f) {\n\t\t\treturn true;\n\t\t}\n\t}\n\treturn false;\n}\n\nfunction parseIrohRemoteAllowToolNames(allowTools: string): string[] {\n\treturn allowTools\n\t\t.split(\",\")\n\t\t.map((tool) => tool.trim())\n\t\t.filter((tool) => tool.length > 0);\n}\n\nfunction uniqueIrohRemoteAllowToolNames(toolNames: readonly string[]): string[] {\n\tconst tools: string[] = [];\n\tconst seen = new Set<string>();\n\tfor (const toolName of toolNames) {\n\t\tconst tool = toolName.trim();\n\t\tif (tool.length === 0 || seen.has(tool)) {\n\t\t\tcontinue;\n\t\t}\n\t\tseen.add(tool);\n\t\ttools.push(tool);\n\t}\n\treturn tools;\n}\n\nexport function getIrohRemoteUnsafeAllowedTools(allowTools: string): string[] {\n\tconst unsafeTools: string[] = [];\n\tconst seenUnsafeTools = new Set<string>();\n\tfor (const toolName of allowTools.split(\",\")) {\n\t\tconst normalizedToolName = toolName.trim();\n\t\tif (!IROH_REMOTE_UNSAFE_TOOL_NAME_SET.has(normalizedToolName) || seenUnsafeTools.has(normalizedToolName)) {\n\t\t\tcontinue;\n\t\t}\n\t\tseenUnsafeTools.add(normalizedToolName);\n\t\tunsafeTools.push(normalizedToolName);\n\t}\n\treturn unsafeTools;\n}\n"]}