@limrun/api 0.48.3 → 0.49.0

package/internal/proxy-transport.mjs

@@ -1,3 +1,5 @@
+import net from 'net';
+import tls from 'tls';
 import { HttpsProxyAgent } from 'https-proxy-agent';
 import { getProxyForUrl } from 'proxy-from-env';
 import { EnvHttpProxyAgent } from 'undici';
@@ -6,6 +8,7 @@ import { EnvHttpProxyAgent } from 'undici';
 // the first to give up. undici's defaults are 300s, which would abort e.g. an
 // instance-side artifact upload that takes longer.
 const longRequestTimeouts = { headersTimeout: 3600000, bodyTimeout: 3600000 };
+const maxConnectResponseHeaderBytes = 64 * 1024;
 class NodeProxyTransport {
     constructor() {
         this.websocketAgents = new Map();
@@ -49,6 +52,20 @@ class NodeProxyTransport {
         }
         return agent;
     }
+    /**
+     * Opens a paused TCP stream to a destination, tunneling through the proxy
+     * selected by proxy-from-env when applicable. The caller owns the returned
+     * socket and must resume it after installing data/end/error handlers.
+     */
+    connectTcp(options) {
+        const lookupHost = options.proxyLookupHost ?? options.host;
+        const lookupUrl = `${options.proxyLookupProtocol}//${formatAuthority(lookupHost, options.port)}`;
+        const proxyUrl = getProxyForUrl(lookupUrl);
+        if (!proxyUrl) {
+            return connectDirect(options);
+        }
+        return connectThroughProxy(proxyUrl, options);
+    }
     getEnvHttpProxyAgent() {
         this.envHttpProxyAgent ?? (this.envHttpProxyAgent = new EnvHttpProxyAgent());
         return this.envHttpProxyAgent;
@@ -72,4 +89,192 @@ class NodeProxyTransport {
     }
 }
 export const nodeProxyTransport = new NodeProxyTransport();
+function connectDirect(options) {
+    const startedAt = Date.now();
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const socket = net.createConnection({
+            host: options.host,
+            port: options.port,
+            allowHalfOpen: true,
+        });
+        const timer = setTimeout(() => {
+            fail(codedError(`connection to ${formatAuthority(options.host, options.port)} timed out`, 'ETIMEDOUT'));
+        }, options.timeoutMs);
+        timer.unref();
+        const cleanup = () => {
+            clearTimeout(timer);
+            socket.removeListener('connect', onConnect);
+            socket.removeListener('error', fail);
+            options.signal?.removeEventListener('abort', onAbort);
+        };
+        const fail = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            socket.destroy();
+            reject(error);
+        };
+        const onAbort = () => fail(codedError('TCP connection cancelled', 'ECANCELED'));
+        const onConnect = () => {
+            if (settled)
+                return;
+            settled = true;
+            socket.pause();
+            cleanup();
+            resolve({
+                socket,
+                connectMs: Date.now() - startedAt,
+                ...(socket.remoteAddress === undefined ? {} : { remoteAddress: socket.remoteAddress }),
+            });
+        };
+        socket.once('connect', onConnect);
+        socket.once('error', fail);
+        if (options.signal?.aborted) {
+            onAbort();
+        }
+        else {
+            options.signal?.addEventListener('abort', onAbort, { once: true });
+        }
+    });
+}
+function connectThroughProxy(proxyUrlString, options) {
+    const startedAt = Date.now();
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        let response = Buffer.alloc(0);
+        let proxyUrl;
+        try {
+            proxyUrl = new URL(proxyUrlString);
+        }
+        catch {
+            reject(codedError(`invalid proxy URL: ${proxyUrlString}`, 'EPROXY'));
+            return;
+        }
+        if (proxyUrl.protocol !== 'http:' && proxyUrl.protocol !== 'https:') {
+            reject(codedError(`unsupported proxy protocol ${proxyUrl.protocol}`, 'EPROXY'));
+            return;
+        }
+        const proxyPort = proxyUrl.port ? Number(proxyUrl.port)
+            : proxyUrl.protocol === 'https:' ? 443
+                : 80;
+        const proxyHost = unbracketHost(proxyUrl.hostname);
+        const socket = proxyUrl.protocol === 'https:' ?
+            tls.connect({
+                host: proxyHost,
+                port: proxyPort,
+                rejectUnauthorized: true,
+                ...(net.isIP(proxyHost) ? {} : { servername: proxyHost }),
+                ALPNProtocols: ['http/1.1'],
+            })
+            : net.createConnection({
+                host: proxyHost,
+                port: proxyPort,
+                allowHalfOpen: true,
+            });
+        socket.allowHalfOpen = true;
+        const connectedEvent = proxyUrl.protocol === 'https:' ? 'secureConnect' : 'connect';
+        const timer = setTimeout(() => {
+            fail(codedError(`proxy connection to ${formatAuthority(options.host, options.port)} timed out`, 'ETIMEDOUT'));
+        }, options.timeoutMs);
+        timer.unref();
+        const cleanup = () => {
+            clearTimeout(timer);
+            socket.removeListener(connectedEvent, onProxyConnected);
+            socket.removeListener('data', onData);
+            socket.removeListener('end', onUnexpectedClose);
+            socket.removeListener('close', onUnexpectedClose);
+            socket.removeListener('error', fail);
+            options.signal?.removeEventListener('abort', onAbort);
+        };
+        const fail = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            socket.destroy();
+            reject(error);
+        };
+        const onAbort = () => fail(codedError('proxy connection cancelled', 'ECANCELED'));
+        const onUnexpectedClose = () => fail(codedError('proxy closed before completing CONNECT', 'ECONNRESET'));
+        const onProxyConnected = () => {
+            const authority = formatAuthority(options.host, options.port);
+            const headers = [`CONNECT ${authority} HTTP/1.1`, `Host: ${authority}`, 'Proxy-Connection: Keep-Alive'];
+            if (proxyUrl.username || proxyUrl.password) {
+                const username = decodeUrlCredential(proxyUrl.username);
+                const password = decodeUrlCredential(proxyUrl.password);
+                headers.push(`Proxy-Authorization: Basic ${Buffer.from(`${username}:${password}`, 'utf8').toString('base64')}`);
+            }
+            socket.write(`${headers.join('\r\n')}\r\n\r\n`);
+        };
+        const onData = (chunk) => {
+            response = Buffer.concat([response, chunk]);
+            const headerEnd = response.indexOf('\r\n\r\n');
+            if (headerEnd < 0) {
+                if (response.length > maxConnectResponseHeaderBytes) {
+                    fail(codedError('proxy CONNECT response headers exceeded 65536 bytes', 'EPROXY'));
+                }
+                return;
+            }
+            if (headerEnd + 4 > maxConnectResponseHeaderBytes) {
+                fail(codedError('proxy CONNECT response headers exceeded 65536 bytes', 'EPROXY'));
+                return;
+            }
+            const statusLineEnd = response.indexOf('\r\n');
+            const statusLine = response
+                .subarray(0, statusLineEnd < 0 ? headerEnd : statusLineEnd)
+                .toString('latin1');
+            const statusMatch = /^HTTP\/1\.[01] ([0-9]{3})(?: |$)/.exec(statusLine);
+            if (!statusMatch) {
+                fail(codedError(`invalid proxy CONNECT response: ${statusLine}`, 'EPROXY'));
+                return;
+            }
+            const statusCode = Number(statusMatch[1]);
+            if (statusCode < 200 || statusCode >= 300) {
+                fail(codedError(`proxy CONNECT failed with status ${statusCode}`, statusCode === 407 ? 'EPROXYAUTH' : 'EPROXYCONNECT'));
+                return;
+            }
+            settled = true;
+            socket.pause();
+            cleanup();
+            const remainder = response.subarray(headerEnd + 4);
+            if (remainder.length > 0)
+                socket.unshift(remainder);
+            resolve({
+                socket,
+                connectMs: Date.now() - startedAt,
+                remoteAddress: options.host,
+            });
+        };
+        socket.once(connectedEvent, onProxyConnected);
+        socket.on('data', onData);
+        socket.once('end', onUnexpectedClose);
+        socket.once('close', onUnexpectedClose);
+        socket.once('error', fail);
+        if (options.signal?.aborted) {
+            onAbort();
+        }
+        else {
+            options.signal?.addEventListener('abort', onAbort, { once: true });
+        }
+    });
+}
+function formatAuthority(host, port) {
+    return `${net.isIP(host) === 6 ? `[${host}]` : host}:${port}`;
+}
+function unbracketHost(host) {
+    return host.startsWith('[') && host.endsWith(']') ? host.slice(1, -1) : host;
+}
+function decodeUrlCredential(value) {
+    try {
+        return decodeURIComponent(value);
+    }
+    catch {
+        return value;
+    }
+}
+function codedError(message, code) {
+    return Object.assign(new Error(message), { code });
+}
 //# sourceMappingURL=proxy-transport.mjs.map

package/internal/proxy-transport.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"proxy-transport.mjs","sourceRoot":"","sources":["../src/internal/proxy-transport.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAI3C,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,mDAAmD;AACnD,MAAM,mBAAmB,GAAG,EAAE,cAAc,EAAE,OAAS,EAAE,WAAW,EAAE,OAAS,EAAE,CAAC;AAElF,MAAM,kBAAkB;IAAxB;QAGU,oBAAe,GAAG,IAAI,GAAG,EAAqB,CAAC;QAEvD,UAAK,GAAU,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YAED,OAAQ,KAAa,CAAC,KAAK,EAAE;gBAC3B,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;gBACf,UAAU,EAAE,IAAI,CAAC,oBAAoB,EAAE;aACxC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF;;;;;;WAMG;QACH,qBAAgB,GAAU,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9C,IAAI,CAAC,qBAAqB,KAA1B,IAAI,CAAC,qBAAqB,GAAK,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,EAAC;YAC1E,OAAQ,KAAa,CAAC,KAAK,EAAE;gBAC3B,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;gBACf,UAAU,EAAE,IAAI,CAAC,qBAAqB;aACvC,CAAC,CAAC;QACL,CAAC,CAAC;IA6CJ,CAAC;IA3CC,iBAAiB,CAAC,GAAW;QAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACjD,KAAK,GAAG,YAAY,CAAC;QACvB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,iBAAiB,KAAtB,IAAI,CAAC,iBAAiB,GAAK,IAAI,iBAAiB,EAAE,EAAC;QACnD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,WAAW;QACjB,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAChG,CAAC;IAEO,0BAA0B,CAAC,GAAW;QAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,SAAS,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACjC,SAAS,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC/B,CAAC;aAAM,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACzC,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAChC,CAAC;QACD,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"proxy-transport.mjs","sourceRoot":"","sources":["../src/internal/proxy-transport.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,GAAG,MAAM,KAAK,CAAC;AAEtB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,QAAQ,CAAC;AAI3C,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,mDAAmD;AACnD,MAAM,mBAAmB,GAAG,EAAE,cAAc,EAAE,OAAS,EAAE,WAAW,EAAE,OAAS,EAAE,CAAC;AAClF,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,CAAC;AAwBhD,MAAM,kBAAkB;IAAxB;QAGU,oBAAe,GAAG,IAAI,GAAG,EAAqB,CAAC;QAEvD,UAAK,GAAU,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC5B,CAAC;YAED,OAAQ,KAAa,CAAC,KAAK,EAAE;gBAC3B,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;gBACf,UAAU,EAAE,IAAI,CAAC,oBAAoB,EAAE;aACxC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF;;;;;;WAMG;QACH,qBAAgB,GAAU,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC9C,IAAI,CAAC,qBAAqB,KAA1B,IAAI,CAAC,qBAAqB,GAAK,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,EAAC;YAC1E,OAAQ,KAAa,CAAC,KAAK,EAAE;gBAC3B,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;gBACf,UAAU,EAAE,IAAI,CAAC,qBAAqB;aACvC,CAAC,CAAC;QACL,CAAC,CAAC;IA4DJ,CAAC;IA1DC,iBAAiB,CAAC,GAAW;QAC3B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;YACnD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACjD,KAAK,GAAG,YAAY,CAAC;QACvB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,OAA0B;QACnC,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;QAC3D,MAAM,SAAS,GAAG,GAAG,OAAO,CAAC,mBAAmB,KAAK,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACjG,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,iBAAiB,KAAtB,IAAI,CAAC,iBAAiB,GAAK,IAAI,iBAAiB,EAAE,EAAC;QACnD,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAEO,WAAW;QACjB,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAChG,CAAC;IAEO,0BAA0B,CAAC,GAAW;QAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,SAAS,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACjC,SAAS,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC/B,CAAC;aAAM,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACzC,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAChC,CAAC;QACD,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC;AAE3D,SAAS,aAAa,CAAC,OAA0B;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC;YAClC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,UAAU,CAAC,iBAAiB,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QAC1G,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACtB,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACrC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAQ,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,GAAS,EAAE;YAC3B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,CAAC;YACV,OAAO,CAAC;gBACN,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACjC,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;aACvF,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,cAAsB,EAAE,OAA0B;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,QAAa,CAAC;QAClB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,UAAU,CAAC,sBAAsB,cAAc,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACpE,MAAM,CAAC,UAAU,CAAC,8BAA8B,QAAQ,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GACb,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrC,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG;gBACtC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,MAAM,GACV,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;YAC9B,GAAG,CAAC,OAAO,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,SAAS;gBACf,kBAAkB,EAAE,IAAI;gBACxB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;gBACzD,aAAa,EAAE,CAAC,UAAU,CAAC;aAC5B,CAAC;YACJ,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;gBACnB,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,SAAS;gBACf,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;QACP,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CACF,UAAU,CACR,uBAAuB,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAC9E,WAAW,CACZ,CACF,CAAC;QACJ,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACtB,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,cAAc,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;YACxD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACtC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;YAChD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;YAClD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACrC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,KAAY,EAAQ,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,4BAA4B,EAAE,WAAW,CAAC,CAAC,CAAC;QACxF,MAAM,iBAAiB,GAAG,GAAS,EAAE,CACnC,IAAI,CAAC,UAAU,CAAC,wCAAwC,EAAE,YAAY,CAAC,CAAC,CAAC;QAC3E,MAAM,gBAAgB,GAAG,GAAS,EAAE;YAClC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,CAAC,WAAW,SAAS,WAAW,EAAE,SAAS,SAAS,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACxG,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACxD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACxD,OAAO,CAAC,IAAI,CACV,8BAA8B,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAClG,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClD,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAQ,EAAE;YACrC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC/C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,IAAI,QAAQ,CAAC,MAAM,GAAG,6BAA6B,EAAE,CAAC;oBACpD,IAAI,CAAC,UAAU,CAAC,qDAAqD,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACpF,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,SAAS,GAAG,CAAC,GAAG,6BAA6B,EAAE,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,qDAAqD,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YAED,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,QAAQ;iBACxB,QAAQ,CAAC,CAAC,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;iBAC1D,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtB,MAAM,WAAW,GAAG,kCAAkC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACxE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC,UAAU,CAAC,mCAAmC,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,UAAU,GAAG,GAAG,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;gBAC1C,IAAI,CACF,UAAU,CACR,oCAAoC,UAAU,EAAE,EAChD,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CACpD,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YAED,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;YACnD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACpD,OAAO,CAAC;gBACN,MAAM;gBACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACjC,aAAa,EAAE,OAAO,CAAC,IAAI;aAC5B,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAAY;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC"}

package/internal/session-stream.d.mts

@@ -0,0 +1,39 @@
+/**
+ * Long-lived tail of a runtime session SSE stream (live app logs or the
+ * coalesced event log). The runtime replays its buffer on first connect and
+ * tags every entry with a monotonic SSE id; eventsource-client sends
+ * Last-Event-ID on reconnect, so the runtime resumes exactly where the
+ * stream broke and each entry is delivered exactly once.
+ *
+ * Stream health follows the exec client's model (and reuses its policy): the
+ * EventSource reconnects forever on its own, so a dead stream (deleted
+ * instance) would otherwise retry silently for good. Proof of life — a
+ * delivered entry, a keepalive comment, or a clean connection that stays
+ * open healthyConnectionMs — resets the give-up clock; once the stream stays
+ * broken past giveUpAfterMs, onError fires once and the stream closes.
+ */
+/** The session stream kept failing past the give-up window; it has been closed. */
+export declare class SessionStreamLostError extends Error {
+}
+export interface SessionStreamOptions<T extends {
+    ts: number;
+}> {
+    /** Full URL of the runtime SSE endpoint, without credentials. */
+    url: string;
+    /** Instance token; sent as a bearer Authorization header. */
+    token: string;
+    /** Called once per delivered entry, in stream order. */
+    onEntry: (entry: T) => void;
+    /** Called at most once, when the stream is given up on and closed. */
+    onError?: ((error: Error) => void) | undefined;
+}
+/**
+ * Connects to a session SSE endpoint and delivers parsed entries until the
+ * returned function is called (or the stream is given up on). Entries are
+ * one JSON object per SSE data frame; frames that do not parse to an object
+ * with a numeric `ts` are skipped.
+ */
+export declare function streamSessionEntries<T extends {
+    ts: number;
+}>(options: SessionStreamOptions<T>): () => void;
+//# sourceMappingURL=session-stream.d.mts.map

package/internal/session-stream.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-stream.d.mts","sourceRoot":"","sources":["../src/internal/session-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAQH,mFAAmF;AACnF,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AAEpD,MAAM,WAAW,oBAAoB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE;IAC5D,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;IAC5B,sEAAsE;IACtE,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAChD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAmH3G"}

package/internal/session-stream.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Long-lived tail of a runtime session SSE stream (live app logs or the
+ * coalesced event log). The runtime replays its buffer on first connect and
+ * tags every entry with a monotonic SSE id; eventsource-client sends
+ * Last-Event-ID on reconnect, so the runtime resumes exactly where the
+ * stream broke and each entry is delivered exactly once.
+ *
+ * Stream health follows the exec client's model (and reuses its policy): the
+ * EventSource reconnects forever on its own, so a dead stream (deleted
+ * instance) would otherwise retry silently for good. Proof of life — a
+ * delivered entry, a keepalive comment, or a clean connection that stays
+ * open healthyConnectionMs — resets the give-up clock; once the stream stays
+ * broken past giveUpAfterMs, onError fires once and the stream closes.
+ */
+/** The session stream kept failing past the give-up window; it has been closed. */
+export declare class SessionStreamLostError extends Error {
+}
+export interface SessionStreamOptions<T extends {
+    ts: number;
+}> {
+    /** Full URL of the runtime SSE endpoint, without credentials. */
+    url: string;
+    /** Instance token; sent as a bearer Authorization header. */
+    token: string;
+    /** Called once per delivered entry, in stream order. */
+    onEntry: (entry: T) => void;
+    /** Called at most once, when the stream is given up on and closed. */
+    onError?: ((error: Error) => void) | undefined;
+}
+/**
+ * Connects to a session SSE endpoint and delivers parsed entries until the
+ * returned function is called (or the stream is given up on). Entries are
+ * one JSON object per SSE data frame; frames that do not parse to an object
+ * with a numeric `ts` are skipped.
+ */
+export declare function streamSessionEntries<T extends {
+    ts: number;
+}>(options: SessionStreamOptions<T>): () => void;
+//# sourceMappingURL=session-stream.d.ts.map

package/internal/session-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-stream.d.ts","sourceRoot":"","sources":["../src/internal/session-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAQH,mFAAmF;AACnF,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AAEpD,MAAM,WAAW,oBAAoB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE;IAC5D,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;IACZ,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;IAC5B,sEAAsE;IACtE,OAAO,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAChD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAmH3G"}

package/internal/session-stream.js

@@ -0,0 +1,144 @@
+"use strict";
+/**
+ * Long-lived tail of a runtime session SSE stream (live app logs or the
+ * coalesced event log). The runtime replays its buffer on first connect and
+ * tags every entry with a monotonic SSE id; eventsource-client sends
+ * Last-Event-ID on reconnect, so the runtime resumes exactly where the
+ * stream broke and each entry is delivered exactly once.
+ *
+ * Stream health follows the exec client's model (and reuses its policy): the
+ * EventSource reconnects forever on its own, so a dead stream (deleted
+ * instance) would otherwise retry silently for good. Proof of life — a
+ * delivered entry, a keepalive comment, or a clean connection that stays
+ * open healthyConnectionMs — resets the give-up clock; once the stream stays
+ * broken past giveUpAfterMs, onError fires once and the stream closes.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionStreamLostError = void 0;
+exports.streamSessionEntries = streamSessionEntries;
+const eventsource_client_1 = require("eventsource-client");
+const exec_client_1 = require("../exec-client.js");
+const proxy_transport_1 = require("./proxy-transport.js");
+const sse_fetch_1 = require("./sse-fetch.js");
+/** The session stream kept failing past the give-up window; it has been closed. */
+class SessionStreamLostError extends Error {
+}
+exports.SessionStreamLostError = SessionStreamLostError;
+/**
+ * Connects to a session SSE endpoint and delivers parsed entries until the
+ * returned function is called (or the stream is given up on). Entries are
+ * one JSON object per SSE data frame; frames that do not parse to an object
+ * with a numeric `ts` are skipped.
+ */
+function streamSessionEntries(options) {
+    let closed = false;
+    let connectedAt = 0;
+    let deadSince = 0;
+    let lastCycleAt = 0;
+    let lastCycleMono = 0;
+    let proofOfLifeThisCycle = false;
+    let cleanResponseThisCycle = false;
+    let lastStreamError;
+    const fail = (error) => {
+        if (closed)
+            return;
+        closed = true;
+        eventSource.close();
+        options.onError?.(error);
+    };
+    // Stream health is judged at the fetch surface, where the response status
+    // is visible; the library fires onConnect for error responses too, so an
+    // error page held open must not read as a healthy connection. A rejected
+    // fetch never reaches onDisconnect (the hazard sseFetch exists for):
+    // capture it for the give-up message and let the clock decide, so one
+    // transient refusal does not kill a live stream.
+    const fetchWithStreamPolicy = async (input, init) => {
+        const response = await proxy_transport_1.nodeProxyTransport.fetch(input, init);
+        if (!response.ok) {
+            lastStreamError = new Error(`server answered HTTP ${response.status}`);
+        }
+        cleanResponseThisCycle = response.ok;
+        return response;
+    };
+    const eventSource = (0, eventsource_client_1.createEventSource)({
+        url: options.url,
+        fetch: (0, sse_fetch_1.sseFetch)(fetchWithStreamPolicy, (err) => {
+            lastStreamError = err instanceof Error ? err : new Error(String(err));
+        }),
+        headers: { Authorization: `Bearer ${options.token}` },
+        onConnect: () => {
+            connectedAt = Date.now();
+        },
+        // Keepalive comments count as proof of life (onMessage never sees them).
+        onComment: () => {
+            proofOfLifeThisCycle = true;
+        },
+        // Fires once per broken cycle, before the retry timer is armed, on both
+        // failure paths (request rejected, stream ended). This is where the
+        // give-up clock runs.
+        onScheduleReconnect: () => {
+            if (closed)
+                return;
+            const now = Date.now();
+            const mono = performance.now();
+            const livedMs = connectedAt > 0 ? now - connectedAt : 0;
+            connectedAt = 0;
+            // Date.now() is wall clock: a laptop waking from sleep (or a clock
+            // step) would arrive with the whole window already "elapsed" and fail
+            // on its first attempt. Sleep is the wall clock advancing while the
+            // monotonic clock stands still; a large drift between the two restarts
+            // the streak.
+            if (deadSince > 0 && lastCycleAt > 0) {
+                const wallGapMs = now - lastCycleAt;
+                const monoGapMs = mono - lastCycleMono;
+                if (wallGapMs - monoGapMs > 30000) {
+                    deadSince = now;
+                }
+            }
+            lastCycleAt = now;
+            lastCycleMono = mono;
+            const healthy = proofOfLifeThisCycle || (cleanResponseThisCycle && livedMs >= exec_client_1.sseStreamPolicy.healthyConnectionMs);
+            proofOfLifeThisCycle = false;
+            cleanResponseThisCycle = false;
+            if (healthy) {
+                deadSince = 0;
+                lastStreamError = undefined;
+                return;
+            }
+            if (deadSince === 0) {
+                deadSince = now;
+                return;
+            }
+            if (now - deadSince >= exec_client_1.sseStreamPolicy.giveUpAfterMs) {
+                const seconds = Math.round((now - deadSince) / 1000);
+                const cause = lastStreamError ? `; last error: ${lastStreamError.message}` : '';
+                fail(new SessionStreamLostError(`session stream to ${options.url} kept failing for ${seconds}s without delivering entries${cause}; ` +
+                    'the instance may no longer exist'));
+            }
+        },
+        onMessage: (message) => {
+            deadSince = 0;
+            proofOfLifeThisCycle = true;
+            lastStreamError = undefined;
+            const data = typeof message.data === 'string' ? message.data : String(message.data ?? '');
+            let parsed;
+            try {
+                parsed = JSON.parse(data);
+            }
+            catch {
+                return;
+            }
+            if (typeof parsed?.ts !== 'number') {
+                return;
+            }
+            options.onEntry(parsed);
+        },
+    });
+    return () => {
+        if (closed)
+            return;
+        closed = true;
+        eventSource.close();
+    };
+}
+//# sourceMappingURL=session-stream.js.map

package/internal/session-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-stream.js","sourceRoot":"","sources":["../src/internal/session-stream.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AA4BH,oDAmHC;AA7ID,2DAAgF;AAChF,mDAAiD;AACjD,0DAAuD;AACvD,8CAAuC;AAGvC,mFAAmF;AACnF,MAAa,sBAAuB,SAAQ,KAAK;CAAG;AAApD,wDAAoD;AAapD;;;;;GAKG;AACH,SAAgB,oBAAoB,CAA2B,OAAgC;IAC7F,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,sBAAsB,GAAG,KAAK,CAAC;IACnC,IAAI,eAAkC,CAAC;IAEvC,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;QAC5B,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,WAAW,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,sEAAsE;IACtE,iDAAiD;IACjD,MAAM,qBAAqB,GAAU,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACzD,MAAM,QAAQ,GAAG,MAAM,oCAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,eAAe,GAAG,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,sBAAsB,GAAG,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,IAAA,sCAAiB,EAAC;QACpC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,IAAA,oBAAQ,EAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7C,eAAe,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC;QACF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE;QACrD,SAAS,EAAE,GAAG,EAAE;YACd,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,yEAAyE;QACzE,SAAS,EAAE,GAAG,EAAE;YACd,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,wEAAwE;QACxE,oEAAoE;QACpE,sBAAsB;QACtB,mBAAmB,EAAE,GAAG,EAAE;YACxB,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,WAAW,GAAG,CAAC,CAAC;YAChB,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,uEAAuE;YACvE,cAAc;YACd,IAAI,SAAS,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,SAAS,GAAG,GAAG,GAAG,WAAW,CAAC;gBACpC,MAAM,SAAS,GAAG,IAAI,GAAG,aAAa,CAAC;gBACvC,IAAI,SAAS,GAAG,SAAS,GAAG,KAAM,EAAE,CAAC;oBACnC,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;YACH,CAAC;YACD,WAAW,GAAG,GAAG,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,OAAO,GACX,oBAAoB,IAAI,CAAC,sBAAsB,IAAI,OAAO,IAAI,6BAAe,CAAC,mBAAmB,CAAC,CAAC;YACrG,oBAAoB,GAAG,KAAK,CAAC;YAC7B,sBAAsB,GAAG,KAAK,CAAC;YAC/B,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,GAAG,CAAC,CAAC;gBACd,eAAe,GAAG,SAAS,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,SAAS,GAAG,GAAG,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,IAAI,GAAG,GAAG,SAAS,IAAI,6BAAe,CAAC,aAAa,EAAE,CAAC;gBACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;gBACrD,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,iBAAiB,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,IAAI,CACF,IAAI,sBAAsB,CACxB,qBAAqB,OAAO,CAAC,GAAG,qBAAqB,OAAO,+BAA+B,KAAK,IAAI;oBAClG,kCAAkC,CACrC,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,SAAS,EAAE,CAAC,OAA2B,EAAE,EAAE;YACzC,SAAS,GAAG,CAAC,CAAC;YACd,oBAAoB,GAAG,IAAI,CAAC;YAC5B,eAAe,GAAG,SAAS,CAAC;YAC5B,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC1F,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,IAAI,OAAQ,MAA2B,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACzD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,MAAW,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,GAAG,EAAE;QACV,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,WAAW,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC"}

package/internal/session-stream.mjs

@@ -0,0 +1,139 @@
+/**
+ * Long-lived tail of a runtime session SSE stream (live app logs or the
+ * coalesced event log). The runtime replays its buffer on first connect and
+ * tags every entry with a monotonic SSE id; eventsource-client sends
+ * Last-Event-ID on reconnect, so the runtime resumes exactly where the
+ * stream broke and each entry is delivered exactly once.
+ *
+ * Stream health follows the exec client's model (and reuses its policy): the
+ * EventSource reconnects forever on its own, so a dead stream (deleted
+ * instance) would otherwise retry silently for good. Proof of life — a
+ * delivered entry, a keepalive comment, or a clean connection that stays
+ * open healthyConnectionMs — resets the give-up clock; once the stream stays
+ * broken past giveUpAfterMs, onError fires once and the stream closes.
+ */
+import { createEventSource } from 'eventsource-client';
+import { sseStreamPolicy } from "../exec-client.mjs";
+import { nodeProxyTransport } from "./proxy-transport.mjs";
+import { sseFetch } from "./sse-fetch.mjs";
+/** The session stream kept failing past the give-up window; it has been closed. */
+export class SessionStreamLostError extends Error {
+}
+/**
+ * Connects to a session SSE endpoint and delivers parsed entries until the
+ * returned function is called (or the stream is given up on). Entries are
+ * one JSON object per SSE data frame; frames that do not parse to an object
+ * with a numeric `ts` are skipped.
+ */
+export function streamSessionEntries(options) {
+    let closed = false;
+    let connectedAt = 0;
+    let deadSince = 0;
+    let lastCycleAt = 0;
+    let lastCycleMono = 0;
+    let proofOfLifeThisCycle = false;
+    let cleanResponseThisCycle = false;
+    let lastStreamError;
+    const fail = (error) => {
+        if (closed)
+            return;
+        closed = true;
+        eventSource.close();
+        options.onError?.(error);
+    };
+    // Stream health is judged at the fetch surface, where the response status
+    // is visible; the library fires onConnect for error responses too, so an
+    // error page held open must not read as a healthy connection. A rejected
+    // fetch never reaches onDisconnect (the hazard sseFetch exists for):
+    // capture it for the give-up message and let the clock decide, so one
+    // transient refusal does not kill a live stream.
+    const fetchWithStreamPolicy = async (input, init) => {
+        const response = await nodeProxyTransport.fetch(input, init);
+        if (!response.ok) {
+            lastStreamError = new Error(`server answered HTTP ${response.status}`);
+        }
+        cleanResponseThisCycle = response.ok;
+        return response;
+    };
+    const eventSource = createEventSource({
+        url: options.url,
+        fetch: sseFetch(fetchWithStreamPolicy, (err) => {
+            lastStreamError = err instanceof Error ? err : new Error(String(err));
+        }),
+        headers: { Authorization: `Bearer ${options.token}` },
+        onConnect: () => {
+            connectedAt = Date.now();
+        },
+        // Keepalive comments count as proof of life (onMessage never sees them).
+        onComment: () => {
+            proofOfLifeThisCycle = true;
+        },
+        // Fires once per broken cycle, before the retry timer is armed, on both
+        // failure paths (request rejected, stream ended). This is where the
+        // give-up clock runs.
+        onScheduleReconnect: () => {
+            if (closed)
+                return;
+            const now = Date.now();
+            const mono = performance.now();
+            const livedMs = connectedAt > 0 ? now - connectedAt : 0;
+            connectedAt = 0;
+            // Date.now() is wall clock: a laptop waking from sleep (or a clock
+            // step) would arrive with the whole window already "elapsed" and fail
+            // on its first attempt. Sleep is the wall clock advancing while the
+            // monotonic clock stands still; a large drift between the two restarts
+            // the streak.
+            if (deadSince > 0 && lastCycleAt > 0) {
+                const wallGapMs = now - lastCycleAt;
+                const monoGapMs = mono - lastCycleMono;
+                if (wallGapMs - monoGapMs > 30000) {
+                    deadSince = now;
+                }
+            }
+            lastCycleAt = now;
+            lastCycleMono = mono;
+            const healthy = proofOfLifeThisCycle || (cleanResponseThisCycle && livedMs >= sseStreamPolicy.healthyConnectionMs);
+            proofOfLifeThisCycle = false;
+            cleanResponseThisCycle = false;
+            if (healthy) {
+                deadSince = 0;
+                lastStreamError = undefined;
+                return;
+            }
+            if (deadSince === 0) {
+                deadSince = now;
+                return;
+            }
+            if (now - deadSince >= sseStreamPolicy.giveUpAfterMs) {
+                const seconds = Math.round((now - deadSince) / 1000);
+                const cause = lastStreamError ? `; last error: ${lastStreamError.message}` : '';
+                fail(new SessionStreamLostError(`session stream to ${options.url} kept failing for ${seconds}s without delivering entries${cause}; ` +
+                    'the instance may no longer exist'));
+            }
+        },
+        onMessage: (message) => {
+            deadSince = 0;
+            proofOfLifeThisCycle = true;
+            lastStreamError = undefined;
+            const data = typeof message.data === 'string' ? message.data : String(message.data ?? '');
+            let parsed;
+            try {
+                parsed = JSON.parse(data);
+            }
+            catch {
+                return;
+            }
+            if (typeof parsed?.ts !== 'number') {
+                return;
+            }
+            options.onEntry(parsed);
+        },
+    });
+    return () => {
+        if (closed)
+            return;
+        closed = true;
+        eventSource.close();
+    };
+}
+//# sourceMappingURL=session-stream.mjs.map

package/internal/session-stream.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-stream.mjs","sourceRoot":"","sources":["../src/internal/session-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAA2B,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,eAAe,EAAE,2BAAuB;AACjD,OAAO,EAAE,kBAAkB,EAAE,8BAA0B;AACvD,OAAO,EAAE,QAAQ,EAAE,wBAAoB;AAGvC,mFAAmF;AACnF,MAAM,OAAO,sBAAuB,SAAQ,KAAK;CAAG;AAapD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAA2B,OAAgC;IAC7F,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,sBAAsB,GAAG,KAAK,CAAC;IACnC,IAAI,eAAkC,CAAC;IAEvC,MAAM,IAAI,GAAG,CAAC,KAAY,EAAE,EAAE;QAC5B,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,WAAW,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC;IAEF,0EAA0E;IAC1E,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,sEAAsE;IACtE,iDAAiD;IACjD,MAAM,qBAAqB,GAAU,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACzD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,eAAe,GAAG,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,sBAAsB,GAAG,QAAQ,CAAC,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACpC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,KAAK,EAAE,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,EAAE;YAC7C,eAAe,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC;QACF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE;QACrD,SAAS,EAAE,GAAG,EAAE;YACd,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,CAAC;QACD,yEAAyE;QACzE,SAAS,EAAE,GAAG,EAAE;YACd,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;QACD,wEAAwE;QACxE,oEAAoE;QACpE,sBAAsB;QACtB,mBAAmB,EAAE,GAAG,EAAE;YACxB,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,WAAW,GAAG,CAAC,CAAC;YAChB,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,uEAAuE;YACvE,cAAc;YACd,IAAI,SAAS,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACrC,MAAM,SAAS,GAAG,GAAG,GAAG,WAAW,CAAC;gBACpC,MAAM,SAAS,GAAG,IAAI,GAAG,aAAa,CAAC;gBACvC,IAAI,SAAS,GAAG,SAAS,GAAG,KAAM,EAAE,CAAC;oBACnC,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;YACH,CAAC;YACD,WAAW,GAAG,GAAG,CAAC;YAClB,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,OAAO,GACX,oBAAoB,IAAI,CAAC,sBAAsB,IAAI,OAAO,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;YACrG,oBAAoB,GAAG,KAAK,CAAC;YAC7B,sBAAsB,GAAG,KAAK,CAAC;YAC/B,IAAI,OAAO,EAAE,CAAC;gBACZ,SAAS,GAAG,CAAC,CAAC;gBACd,eAAe,GAAG,SAAS,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,SAAS,GAAG,GAAG,CAAC;gBAChB,OAAO;YACT,CAAC;YACD,IAAI,GAAG,GAAG,SAAS,IAAI,eAAe,CAAC,aAAa,EAAE,CAAC;gBACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;gBACrD,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,iBAAiB,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChF,IAAI,CACF,IAAI,sBAAsB,CACxB,qBAAqB,OAAO,CAAC,GAAG,qBAAqB,OAAO,+BAA+B,KAAK,IAAI;oBAClG,kCAAkC,CACrC,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QACD,SAAS,EAAE,CAAC,OAA2B,EAAE,EAAE;YACzC,SAAS,GAAG,CAAC,CAAC;YACd,oBAAoB,GAAG,IAAI,CAAC;YAC5B,eAAe,GAAG,SAAS,CAAC;YAC5B,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC1F,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;YACD,IAAI,OAAQ,MAA2B,EAAE,EAAE,KAAK,QAAQ,EAAE,CAAC;gBACzD,OAAO;YACT,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,MAAW,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,GAAG,EAAE;QACV,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,WAAW,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC"}