@jungjaehoon/mama-os 0.69.0 → 0.71.0

package/dist/runtime/member-paths.js

@@ -0,0 +1,99 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.memberClaudeTmpDir = memberClaudeTmpDir;
+exports.otherMemberReadPaths = otherMemberReadPaths;
+exports.validateMemberRoot = validateMemberRoot;
+exports.memberPaths = memberPaths;
+exports.ensureMemberPaths = ensureMemberPaths;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const session_credential_js_1 = require("./session-credential.js");
+const backend_security_js_1 = require("./backend-security.js");
+function inside(parent, child) {
+    const path = (0, node_path_1.relative)(parent, child);
+    return path === '' || (path !== '..' && !path.startsWith(`..${node_path_1.sep}`) && !(0, node_path_1.isAbsolute)(path));
+}
+/** Resolve existing ancestors too: a symlink must not move a member root into HOME. */
+const physical = backend_security_js_1.physicalReadPath;
+/**
+ * Claude's sandbox shell uses CLAUDE_CODE_TMPDIR/claude-<uid> only when that path fits 44 bytes
+ * (AF_UNIX socket paths); a longer one falls back to the /tmp/claude-<uid> every Claude session of
+ * this OS user shares. A member workspace path is far longer, so each member gets a short one.
+ */
+function memberClaudeTmpDir(principalId) {
+    const id = (0, node_crypto_1.createHash)('sha256').update(principalId).digest('hex').slice(0, 12);
+    return (0, node_path_1.join)(backend_security_js_1.MEMBER_CLAUDE_TMP_PARENT, id);
+}
+/** Include inactive registrations and unregistered debris; enumerate again before each turn. */
+function otherMemberReadPaths(root, principalId, registered) {
+    const own = [memberPaths(root, principalId).runtimeRoot, memberClaudeTmpDir(principalId)];
+    // The CLI creates the temp parent at a member's first Claude turn.
+    const tmpEntries = (0, node_fs_1.existsSync)(backend_security_js_1.MEMBER_CLAUDE_TMP_PARENT)
+        ? (0, node_fs_1.readdirSync)(backend_security_js_1.MEMBER_CLAUDE_TMP_PARENT).map((entry) => (0, node_path_1.join)(backend_security_js_1.MEMBER_CLAUDE_TMP_PARENT, entry))
+        : [];
+    return (0, backend_security_js_1.normalizeReadPaths)([
+        ...registered.flatMap((id) => [memberPaths(root, id).runtimeRoot, memberClaudeTmpDir(id)]),
+        ...(0, node_fs_1.readdirSync)(root).map((entry) => (0, node_path_1.join)(root, entry)),
+        ...tmpEntries,
+    ].filter((path) => !own.includes(path)));
+}
+/** ownerPaths: HOME, the MAMA home and, at boot, every owner data path members are denied. */
+function validateMemberRoot(root, ownerPaths) {
+    if (!(0, node_path_1.isAbsolute)(root))
+        throw new Error('member_root must be absolute');
+    const resolved = physical((0, node_path_1.resolve)(root));
+    for (const forbidden of ownerPaths.map((path) => physical((0, node_path_1.resolve)(path)))) {
+        if (inside(forbidden, resolved) || inside(resolved, forbidden))
+            throw new Error('member_root must not overlap HOME, the MAMA home or owner data paths');
+    }
+    return resolved;
+}
+function memberPaths(root, principalId) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9_-]*$/.test(principalId))
+        throw new Error('Member principal id must be one safe path component');
+    const runtimeRoot = (0, node_path_1.join)(root, principalId);
+    return {
+        runtimeRoot,
+        workspaceDir: (0, node_path_1.join)(runtimeRoot, 'workspace'),
+        downloadsDir: (0, node_path_1.join)(runtimeRoot, 'downloads'),
+        claudeConfigDir: (0, node_path_1.join)(runtimeRoot, 'claude-config'),
+        pluginDir: (0, node_path_1.join)(runtimeRoot, '.empty-plugins'),
+        codexHome: (0, node_path_1.join)(runtimeRoot, '.codex'),
+        isolatedHome: (0, node_path_1.join)(runtimeRoot, 'codex-runtime', 'home'),
+        registryRoot: (0, node_path_1.join)(runtimeRoot, 'codex-runtime', 'threads'),
+        credentialPath: (0, session_credential_js_1.sessionCredentialPath)(runtimeRoot),
+        mcpConfigPath: (0, node_path_1.join)(runtimeRoot, 'runtime', 'mama-mcp-config.json'),
+        journalPath: (0, node_path_1.join)(runtimeRoot, 'runtime', 'client-journal.jsonl'),
+    };
+}
+function ensureMemberPaths(root, principalId) {
+    const paths = memberPaths(root, principalId);
+    // Host directories and backend state must remain under this principal, including on restart.
+    for (const path of [
+        root,
+        paths.runtimeRoot,
+        paths.workspaceDir,
+        paths.downloadsDir,
+        paths.claudeConfigDir,
+        paths.pluginDir,
+        paths.codexHome,
+        paths.isolatedHome,
+        paths.registryRoot,
+        (0, node_path_1.dirname)(paths.credentialPath),
+    ]) {
+        if ((0, node_fs_1.existsSync)(path) && physical(path) !== (0, node_path_1.resolve)(path))
+            throw new Error(`Member path must not be a symlink: ${path}`);
+        (0, node_fs_1.mkdirSync)(path, { recursive: true, mode: 0o700 });
+        (0, node_fs_1.chmodSync)(path, 0o700);
+    }
+    const gitDir = (0, node_path_1.join)(paths.workspaceDir, '.git');
+    if ((0, node_fs_1.existsSync)(gitDir) && physical(gitDir) !== (0, node_path_1.resolve)(gitDir))
+        throw new Error(`Member git boundary must not be a symlink: ${gitDir}`);
+    (0, node_fs_1.mkdirSync)(gitDir, { recursive: true, mode: 0o700 });
+    const head = (0, node_path_1.join)(gitDir, 'HEAD');
+    if (!(0, node_fs_1.existsSync)(head))
+        (0, node_fs_1.writeFileSync)(head, 'ref: refs/heads/main\n', { mode: 0o600 });
+    return paths;
+}
+//# sourceMappingURL=member-paths.js.map

package/dist/runtime/member-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-paths.js","sourceRoot":"","sources":["../../src/runtime/member-paths.ts"],"names":[],"mappings":";;AAuBA,gDAGC;AAGD,oDAiBC;AAGD,gDAQC;AAED,kCAiBC;AAID,8CA2BC;AA3GD,6CAAyC;AACzC,qCAAuF;AACvF,yCAA8E;AAC9E,mEAAgE;AAChE,+DAI+B;AAE/B,SAAS,MAAM,CAAC,MAAc,EAAE,KAAa;IAC3C,MAAM,IAAI,GAAG,IAAA,oBAAQ,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC,IAAI,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC,CAAC,CAAC;AAC7F,CAAC;AAED,uFAAuF;AACvF,MAAM,QAAQ,GAAG,sCAAgB,CAAC;AAElC;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,WAAmB;IACpD,MAAM,EAAE,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/E,OAAO,IAAA,gBAAI,EAAC,8CAAwB,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,gGAAgG;AAChG,SAAgB,oBAAoB,CAClC,IAAY,EACZ,WAAmB,EACnB,UAA6B;IAE7B,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1F,mEAAmE;IACnE,MAAM,UAAU,GAAG,IAAA,oBAAU,EAAC,8CAAwB,CAAC;QACrD,CAAC,CAAC,IAAA,qBAAW,EAAC,8CAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,gBAAI,EAAC,8CAAwB,EAAE,KAAK,CAAC,CAAC;QAC7F,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,IAAA,wCAAkB,EACvB;QACE,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1F,GAAG,IAAA,qBAAW,EAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtD,GAAG,UAAU;KACd,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAgB,kBAAkB,CAAC,IAAY,EAAE,UAAoB;IACnE,IAAI,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY,EAAE,WAAmB;IAC3D,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,WAAW,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5C,OAAO;QACL,WAAW;QACX,YAAY,EAAE,IAAA,gBAAI,EAAC,WAAW,EAAE,WAAW,CAAC;QAC5C,YAAY,EAAE,IAAA,gBAAI,EAAC,WAAW,EAAE,WAAW,CAAC;QAC5C,eAAe,EAAE,IAAA,gBAAI,EAAC,WAAW,EAAE,eAAe,CAAC;QACnD,SAAS,EAAE,IAAA,gBAAI,EAAC,WAAW,EAAE,gBAAgB,CAAC;QAC9C,SAAS,EAAE,IAAA,gBAAI,EAAC,WAAW,EAAE,QAAQ,CAAC;QACtC,YAAY,EAAE,IAAA,gBAAI,EAAC,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC;QACxD,YAAY,EAAE,IAAA,gBAAI,EAAC,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC;QAC3D,cAAc,EAAE,IAAA,6CAAqB,EAAC,WAAW,CAAC;QAClD,aAAa,EAAE,IAAA,gBAAI,EAAC,WAAW,EAAE,SAAS,EAAE,sBAAsB,CAAC;QACnE,WAAW,EAAE,IAAA,gBAAI,EAAC,WAAW,EAAE,SAAS,EAAE,sBAAsB,CAAC;KAClE,CAAC;AACJ,CAAC;AAID,SAAgB,iBAAiB,CAAC,IAAY,EAAE,WAAmB;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC7C,6FAA6F;IAC7F,KAAK,MAAM,IAAI,IAAI;QACjB,IAAI;QACJ,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,YAAY;QAClB,IAAA,mBAAO,EAAC,KAAK,CAAC,cAAc,CAAC;KAC9B,EAAE,CAAC;QACF,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAA,mBAAO,EAAC,IAAI,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAA,mBAAS,EAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClD,IAAA,mBAAS,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,IAAA,oBAAU,EAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAA,mBAAO,EAAC,MAAM,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC;IAC1E,IAAA,mBAAS,EAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,IAAA,uBAAa,EAAC,IAAI,EAAE,wBAAwB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/runtime/member-session.d.ts

@@ -0,0 +1,38 @@
+import { type JudgmentAccess } from '@jungjaehoon/mama-core';
+import { ChatSources } from '../storage/chat-sources.js';
+import type { RawStore } from '../storage/source-archive.js';
+import type { CoreDatabase } from './core-db.js';
+import type { ActionSurface } from './action-surface.js';
+import type { OwnerRuntimeOptions } from './owner-runtime.js';
+import { type NativeSession } from './native-session.js';
+import { type StimulusDeliveryOptions } from './stimulus-delivery.js';
+export declare function createMemberSession(principalId: string, root: string, ports: {
+    options: OwnerRuntimeOptions;
+    ownerDeniedPaths: readonly string[];
+    registeredMemberIds: () => string[];
+    database: CoreDatabase;
+    rawStore: RawStore;
+    surface: ActionSurface;
+    turnChain: NonNullable<StimulusDeliveryOptions['turnChain']>;
+    readResult: NonNullable<StimulusDeliveryOptions['readResult']>;
+}): {
+    native: NativeSession;
+    delivery: import("./stimulus-delivery.js").ReplayClockDelivery;
+    chat: ChatSources;
+    paths: {
+        runtimeRoot: string;
+        workspaceDir: string;
+        downloadsDir: string;
+        claudeConfigDir: string;
+        pluginDir: string;
+        codexHome: string;
+        isolatedHome: string;
+        registryRoot: string;
+        credentialPath: string;
+        mcpConfigPath: string;
+        journalPath: string;
+    };
+    access: () => JudgmentAccess;
+    initialAccess: JudgmentAccess;
+};
+//# sourceMappingURL=member-session.d.ts.map

package/dist/runtime/member-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-session.d.ts","sourceRoot":"","sources":["../../src/runtime/member-session.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,KAAK,cAAc,EAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAO9E,OAAO,EAA0B,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAI9F,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;IACL,OAAO,EAAE,mBAAmB,CAAC;IAC7B,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,mBAAmB,EAAE,MAAM,MAAM,EAAE,CAAC;IACpC,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,EAAE,WAAW,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7D,UAAU,EAAE,WAAW,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;CAChE;;;;;;;;;;;;;;;;;kBAKkB,cAAc;;EAsKlC"}

package/dist/runtime/member-session.js

@@ -0,0 +1,157 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMemberSession = createMemberSession;
+const node_crypto_1 = require("node:crypto");
+const node_path_1 = require("node:path");
+const mama_core_1 = require("@jungjaehoon/mama-core");
+const chat_sources_js_1 = require("../storage/chat-sources.js");
+const owner_runtime_js_1 = require("./owner-runtime.js");
+const native_session_js_1 = require("./native-session.js");
+const backend_security_js_1 = require("./backend-security.js");
+const member_paths_js_1 = require("./member-paths.js");
+const member_system_prompt_js_1 = require("./member-system-prompt.js");
+const turn_orders_js_1 = require("./turn-orders.js");
+const principal_access_js_1 = require("./principal-access.js");
+const session_start_context_js_1 = require("./session-start-context.js");
+const stimulus_delivery_js_1 = require("./stimulus-delivery.js");
+const owner_authority_js_1 = require("./owner-authority.js");
+const egress_proxy_js_1 = require("./egress-proxy.js");
+function createMemberSession(principalId, root, ports) {
+    const { options, database, rawStore, surface } = ports;
+    const agentId = `member-agent:${principalId}`;
+    const sessionKey = `member:${principalId}:runtime`;
+    const access = () => (0, principal_access_js_1.resolvePrincipalAccess)(principalId, {
+        adapter: database.adapter,
+        ownerAccess: surface.ownerAccess,
+        agentId,
+    });
+    const initialAccess = access(); // Unknown/inactive ids fail before creating their paths.
+    const paths = (0, member_paths_js_1.ensureMemberPaths)(root, principalId);
+    const personalScopes = [{ kind: 'user', id: principalId }];
+    const chat = new chat_sources_js_1.ChatSources(rawStore, database.adapter, principalId, agentId);
+    const denyPaths = () => (0, backend_security_js_1.normalizeReadPaths)([
+        ...ports.ownerDeniedPaths,
+        paths.claudeConfigDir,
+        ...(0, member_paths_js_1.otherMemberReadPaths)(root, principalId, ports.registeredMemberIds()),
+    ]).sort();
+    let deniedReadPaths = denyPaths();
+    let proxy;
+    const create = () => (options.createSession ?? native_session_js_1.createNativeSession)({
+        backend: options.backend,
+        model: options.model,
+        ...paths,
+        socketPath: options.socketPath,
+        actionSurface: surface,
+        principal: {
+            principalId,
+            agentId,
+            sessionKey,
+            systemPrompt: member_system_prompt_js_1.MEMBER_SYSTEM_PROMPT,
+            prepareAccess: access,
+        },
+        // Native session also denies this member's runtime and Codex credentials.
+        deniedReadPaths,
+        sandboxNetworkProxy: proxy,
+        mcpServerPath: options.mcpServerPath,
+        effort: options.effort,
+        timeout: options.timeout,
+        maxTurnMs: options.maxTurnMs,
+        maxTurns: options.maxTurns,
+        runTokenBudget: options.runTokenBudget,
+        codexSandbox: options.codexSandbox,
+        // Members sign in with the owner's login (2026-10-09): copy the owner's managed credential.
+        codexAuthSourcePath: (0, node_path_1.join)(options.codexHome ?? (0, node_path_1.join)(options.runtimeRoot, '.codex'), 'auth.json'),
+        modelRun: (0, owner_runtime_js_1.runtimeModelRun)({ ...options, agentId }, database.adapter),
+    });
+    let current = create();
+    const native = {
+        backend: current.backend,
+        sessionKey,
+        get supportsNativeSubagents() {
+            return current.supportsNativeSubagents;
+        },
+        hostToolDefinitions: () => current.hostToolDefinitions(),
+        callAction: (call, caller) => current.callAction(call, caller),
+        resetSession: (key) => current.resetSession(key),
+        steer: (content, target, key) => current.steer(content, target, key),
+        stop: async () => {
+            try {
+                await current.stop();
+            }
+            finally {
+                await proxy?.close();
+            }
+        },
+        runTurn: async (content, request) => {
+            // Bind only when the configured Claude sandbox starts executing this member. No member
+            // receives the owner's endpoint; Codex's OS-level network deny has no proxy observation.
+            if (options.backend === 'claude' &&
+                options.sandboxNetworkProxy !== undefined &&
+                proxy === undefined) {
+                proxy = await (0, egress_proxy_js_1.startMemberEgressProxy)(principalId, (event) => options.outboundAttempts?.(event));
+                await current.stop();
+                current = create();
+            }
+            const next = denyPaths();
+            if (JSON.stringify(next) !== JSON.stringify(deniedReadPaths)) {
+                // Enrollment runs in the owner's turn on the shared serial chain. Here that turn has
+                // finished and no other principal is executing. Never resume a thread with stale policy.
+                await current.resetSession(sessionKey);
+                await current.stop();
+                deniedReadPaths = next;
+                current = create();
+            }
+            return current.runTurn(content, request);
+        },
+    };
+    const delivery = (0, stimulus_delivery_js_1.createStimulusDelivery)({
+        backend: options.backend,
+        timeZone: options.timeZone,
+        turnChain: ports.turnChain,
+        member: { sessionKey, voice: turn_orders_js_1.MEMBER_VOICE },
+        readResult: ports.readResult,
+        sessionStart: (row) => {
+            access();
+            return (0, session_start_context_js_1.readSessionStartInput)({
+                exchanges: chat.recentExchanges(row.stimulusId),
+                records: async () => (await (0, mama_core_1.readMemoryRecordsInScopes)(database.adapter, personalScopes, {
+                    status: 'active',
+                    excludeAmendments: true,
+                })).filter((record) => !(0, mama_core_1.isErasedRecord)(record)),
+                checkpoint: async () => {
+                    const result = await surface.hostToolCall('memory.checkpoint.list', { limit: 1 }, `member-start:${(0, node_crypto_1.randomUUID)()}`, { access: access() });
+                    if (result.status !== 'completed')
+                        throw new Error(`memory.checkpoint.list ${result.status}: ${result.error.message}`);
+                    const [latest] = result.data.checkpoints;
+                    return latest?.summary && typeof latest.timestamp === 'number'
+                        ? {
+                            summary: latest.summary,
+                            nextSteps: latest.next_steps ?? '',
+                            createdAt: latest.timestamp,
+                        }
+                        : null;
+                },
+                now: Date.now(),
+            });
+        },
+        lessons: async (text) => {
+            const result = await surface.hostToolCall('memory.search', { query: text.slice(0, 2_000), limit: 40, includeRelated: false }, `member-lessons:${(0, node_crypto_1.randomUUID)()}`, { access: { ...access(), readScopes: [] } });
+            if (result.status !== 'completed')
+                throw new Error(`memory.search ${result.status}: ${result.error.message}`);
+            const hits = result.data.results ?? [];
+            const records = (await (0, mama_core_1.readMemoryRecordsInScopes)(database.adapter, personalScopes, {
+                kind: [...owner_authority_js_1.RULE_KINDS],
+                status: 'active',
+            })).filter((record) => !(0, mama_core_1.isErasedRecord)(record));
+            const hitIds = hits.map((hit) => hit.id);
+            return (0, owner_runtime_js_1.guidanceInSearchOrder)(hitIds, records, 10, (0, owner_authority_js_1.ownerRuleIds)(database.adapter, hitIds, principalId));
+        },
+        onOwnerResult: options.onMemberResult,
+        onDelivered: options.onStimulusDelivered,
+        onFailed: options.onStimulusFailed,
+        onUncertain: options.onStimulusUncertain,
+        onDead: options.onStimulusDead,
+    });
+    return { native, delivery, chat, paths, access, initialAccess };
+}
+//# sourceMappingURL=member-session.js.map

package/dist/runtime/member-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-session.js","sourceRoot":"","sources":["../../src/runtime/member-session.ts"],"names":[],"mappings":";;AAyBA,kDAuLC;AAhND,6CAAyC;AACzC,yCAAiC;AACjC,sDAKgC;AAChC,gEAAyD;AAKzD,yDAA4E;AAC5E,2DAA8E;AAC9E,+DAA2D;AAC3D,uDAA4E;AAC5E,uEAAiE;AACjE,qDAAgD;AAChD,+DAA+D;AAC/D,yEAAmE;AACnE,iEAA8F;AAC9F,6DAAgE;AAChE,uDAA6E;AAE7E,SAAgB,mBAAmB,CACjC,WAAmB,EACnB,IAAY,EACZ,KASC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACvD,MAAM,OAAO,GAAG,gBAAgB,WAAW,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,UAAU,WAAW,UAAU,CAAC;IACnD,MAAM,MAAM,GAAG,GAAmB,EAAE,CAClC,IAAA,4CAAsB,EAAC,WAAW,EAAE;QAClC,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO;KACR,CAAC,CAAC;IACL,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,CAAC,yDAAyD;IACzF,MAAM,KAAK,GAAG,IAAA,mCAAiB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,6BAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,GAAG,EAAE,CACrB,IAAA,wCAAkB,EAAC;QACjB,GAAG,KAAK,CAAC,gBAAgB;QACzB,KAAK,CAAC,eAAe;QACrB,GAAG,IAAA,sCAAoB,EAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC;KACxE,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,IAAI,eAAe,GAAG,SAAS,EAAE,CAAC;IAClC,IAAI,KAA8B,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,EAAE,CAClB,CAAC,OAAO,CAAC,aAAa,IAAI,uCAAmB,CAAC,CAAC;QAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,KAAK;QACR,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,aAAa,EAAE,OAAO;QACtB,SAAS,EAAE;YACT,WAAW;YACX,OAAO;YACP,UAAU;YACV,YAAY,EAAE,8CAAoB;YAClC,aAAa,EAAE,MAAM;SACtB;QACD,0EAA0E;QAC1E,eAAe;QACf,mBAAmB,EAAE,KAAK;QAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,4FAA4F;QAC5F,mBAAmB,EAAE,IAAA,gBAAI,EACvB,OAAO,CAAC,SAAS,IAAI,IAAA,gBAAI,EAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,EACxD,WAAW,CACZ;QACD,QAAQ,EAAE,IAAA,kCAAe,EAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,CAAC,OAAO,CAAC;KACrE,CAAC,CAAC;IACL,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC;IACvB,MAAM,MAAM,GAAkB;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU;QACV,IAAI,uBAAuB;YACzB,OAAO,OAAO,CAAC,uBAAuB,CAAC;QACzC,CAAC;QACD,mBAAmB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE;QACxD,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;QAC9D,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC;QAChD,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC;QACpE,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;oBAAS,CAAC;gBACT,MAAM,KAAK,EAAE,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YAClC,uFAAuF;YACvF,yFAAyF;YACzF,IACE,OAAO,CAAC,OAAO,KAAK,QAAQ;gBAC5B,OAAO,CAAC,mBAAmB,KAAK,SAAS;gBACzC,KAAK,KAAK,SAAS,EACnB,CAAC;gBACD,KAAK,GAAG,MAAM,IAAA,wCAAsB,EAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAC1D,OAAO,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,CAClC,CAAC;gBACF,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,OAAO,GAAG,MAAM,EAAE,CAAC;YACrB,CAAC;YACD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC7D,qFAAqF;gBACrF,yFAAyF;gBACzF,MAAM,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;gBACvC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,eAAe,GAAG,IAAI,CAAC;gBACvB,OAAO,GAAG,MAAM,EAAE,CAAC;YACrB,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAA,6CAAsB,EAAC;QACtC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,6BAAY,EAAE;QAC3C,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE;YACpB,MAAM,EAAE,CAAC;YACT,OAAO,IAAA,gDAAqB,EAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC/C,OAAO,EAAE,KAAK,IAAI,EAAE,CAClB,CACE,MAAM,IAAA,qCAAyB,EAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE;oBAChE,MAAM,EAAE,QAAQ;oBAChB,iBAAiB,EAAE,IAAI;iBACxB,CAAC,CACH,CAAC,MAAM,CAAC,CAAC,MAAM,EAA0B,EAAE,CAAC,CAAC,IAAA,0BAAc,EAAC,MAAM,CAAC,CAAC;gBACvE,UAAU,EAAE,KAAK,IAAI,EAAE;oBACrB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CACvC,wBAAwB,EACxB,EAAE,KAAK,EAAE,CAAC,EAAE,EACZ,gBAAgB,IAAA,wBAAU,GAAE,EAAE,EAC9B,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CACrB,CAAC;oBACF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;wBAC/B,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;oBACtF,MAAM,CAAC,MAAM,CAAC,GACZ,MAAM,CAAC,IAGR,CAAC,WAAW,CAAC;oBACd,OAAO,MAAM,EAAE,OAAO,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;wBAC5D,CAAC,CAAC;4BACE,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;4BAClC,SAAS,EAAE,MAAM,CAAC,SAAS;yBAC5B;wBACH,CAAC,CAAC,IAAI,CAAC;gBACX,CAAC;gBACD,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CACvC,eAAe,EACf,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,EACjE,kBAAkB,IAAA,wBAAU,GAAE,EAAE,EAChC,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAC5C,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;gBAC/B,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAI,MAAM,CAAC,IAA4C,CAAC,OAAO,IAAI,EAAE,CAAC;YAChF,MAAM,OAAO,GAAG,CACd,MAAM,IAAA,qCAAyB,EAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE;gBAChE,IAAI,EAAE,CAAC,GAAG,+BAAU,CAAC;gBACrB,MAAM,EAAE,QAAQ;aACjB,CAAC,CACH,CAAC,MAAM,CAAC,CAAC,MAAM,EAA0B,EAAE,CAAC,CAAC,IAAA,0BAAc,EAAC,MAAM,CAAC,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzC,OAAO,IAAA,wCAAqB,EAC1B,MAAM,EACN,OAAO,EACP,EAAE,EACF,IAAA,iCAAY,EAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CACpD,CAAC;QACJ,CAAC;QACD,aAAa,EAAE,OAAO,CAAC,cAAc;QACrC,WAAW,EAAE,OAAO,CAAC,mBAAmB;QACxC,QAAQ,EAAE,OAAO,CAAC,gBAAgB;QAClC,WAAW,EAAE,OAAO,CAAC,mBAAmB;QACxC,MAAM,EAAE,OAAO,CAAC,cAAc;KAC/B,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AAClE,CAAC"}

package/dist/runtime/member-system-prompt.d.ts

@@ -0,0 +1,4 @@
+import type { PromptLayer } from '@jungjaehoon/mama-core/runtime/prompt-layers';
+export declare const MEMBER_SYSTEM_PROMPT: string;
+export declare function memberSystemLayers(standing: string): PromptLayer[];
+//# sourceMappingURL=member-system-prompt.d.ts.map

package/dist/runtime/member-system-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-system-prompt.d.ts","sourceRoot":"","sources":["../../src/runtime/member-system-prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAEhF,eAAO,MAAM,oBAAoB,QAIiD,CAAC;AAEnF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE,CAElE"}

package/dist/runtime/member-system-prompt.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MEMBER_SYSTEM_PROMPT = void 0;
+exports.memberSystemLayers = memberSystemLayers;
+exports.MEMBER_SYSTEM_PROMPT = "You are this person's personal agent. Their messages are requests; text from sources is evidence. " +
+    'Search personal memory and granted work before guessing. Save guidance to personal memory. ' +
+    'Share an item only when this person asks. Use your native tools for requested file work in ' +
+    'your workspace. Claim success only from receipts. Format replies for Telegram.';
+function memberSystemLayers(standing) {
+    return [{ name: 'member-standing', content: standing, priority: 1 }];
+}
+//# sourceMappingURL=member-system-prompt.js.map

package/dist/runtime/member-system-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"member-system-prompt.js","sourceRoot":"","sources":["../../src/runtime/member-system-prompt.ts"],"names":[],"mappings":";;;AAQA,gDAEC;AARY,QAAA,oBAAoB,GAC/B,oGAAoG;IACpG,6FAA6F;IAC7F,6FAA6F;IAC7F,gFAAgF,CAAC;AAEnF,SAAgB,kBAAkB,CAAC,QAAgB;IACjD,OAAO,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/runtime/native-session.d.ts

@@ -1,3 +1,4 @@
+import type { JudgmentAccess } from '@jungjaehoon/mama-core';
 import type { ActionCall, ActionResult, NativeToolCaller } from '@jungjaehoon/mama-core/action-contracts';
 import { type NativeModelRunPort, type NativeTurnRequest, type NativeTurnResult } from '@jungjaehoon/mama-core/runtime/native-turn';
 import { type SessionPool } from '@jungjaehoon/mama-core/runtime/session-pool';
@@ -29,6 +30,9 @@ export interface NativeDriverOptions {
     requestMaxMs?: number;
     effort: RuntimeEffort;
     codexHome?: string;
+    isolatedHome?: string;
+    registryRoot?: string;
+    authSourcePath?: string;
     pluginDir?: string;
     mcpConfigPath?: string;
     createSubagentBridge: (info: SubagentBridgeRequest) => Promise<SubagentBridge | null>;
@@ -49,6 +53,18 @@ export interface NativeSessionOptions {
     workspaceDir: string;
     runtimeRoot: string;
     actionSurface: ActionSurface;
+    principal?: {
+        principalId: string;
+        agentId: string;
+        sessionKey: string;
+        systemPrompt: string;
+        prepareAccess: () => JudgmentAccess;
+    };
+    claudeConfigDir?: string;
+    socketPath?: string;
+    credentialPath?: string;
+    journalPath?: string;
+    deniedReadPaths?: readonly string[];
     ownerSystemPrompt?: string;
     ownerPolicyProvider?: OwnerPolicyProvider;
     effort?: RuntimeEffort;
@@ -59,6 +75,10 @@ export interface NativeSessionOptions {
     maxTurns: number;
     runTokenBudget?: number;
     codexHome?: string;
+    /** A member's Codex home copies the owner's managed credential; the owner signs in to its own. */
+    codexAuthSourcePath?: string;
+    isolatedHome?: string;
+    registryRoot?: string;
     replayKeyFile?: string;
     /** The host's logging proxy for the Claude shell sandbox's network (W35.4). */
     sandboxNetworkProxy?: SandboxNetworkProxy;

package/dist/runtime/native-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native-session.d.ts","sourceRoot":"","sources":["../../src/runtime/native-session.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,gBAAgB,EACjB,MAAM,yCAAyC,CAAC;AAGjD,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAEtB,MAAM,4CAA4C,CAAC;AAGpD,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,KAAK,EAEV,YAAY,EAEZ,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EACnB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACtB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAuB,MAAM,mBAAmB,CAAC;AAElF,eAAO,MAAM,yBAAyB,kBAAkB,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,oEAAoE;IACpE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,SAAS,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,+EAA+E;IAC/E,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,aAAa,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,YAAY,CAAC;IAC7D,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,mBAAmB,IAAI,kBAAkB,EAAE,CAAC;IAC5C,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9E,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5F,KAAK,CACH,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAkJD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,WAAW,EAAE,CAK7F;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CAqKhF;AAED,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"native-session.d.ts","sourceRoot":"","sources":["../../src/runtime/native-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAO7D,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,gBAAgB,EACjB,MAAM,yCAAyC,CAAC;AAGjD,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EAEtB,MAAM,4CAA4C,CAAC;AAGpD,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,6CAA6C,CAAC;AAC/F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8CAA8C,CAAC;AAChF,OAAO,KAAK,EAEV,YAAY,EAEZ,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EACnB,MAAM,8CAA8C,CAAC;AACtD,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACtB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,wCAAwC,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAuB,MAAM,mBAAmB,CAAC;AAElF,eAAO,MAAM,yBAAyB,kBAAkB,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,oEAAoE;IACpE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,SAAS,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;IAC9B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,+EAA+E;IAC/E,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,6EAA6E;IAC7E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,CAAC,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,cAAc,CAAC;KACrC,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kGAAkG;IAClG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,cAAc,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,KAAK,YAAY,CAAC;IAC7D,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,kBAAkB,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,mBAAmB,IAAI,kBAAkB,EAAE,CAAC;IAC5C,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9E,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5F,KAAK,CACH,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAwLD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,WAAW,EAAE,CAK7F;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CA0NhF;AAED,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC"}