@llui/agent 0.0.29

package/dist/client/ws-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-client.js","sourceRoot":"","sources":["../../src/client/ws-client.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,cAAc,EAAqB,MAAM,oBAAoB,CAAA;AACtE,OAAO,EAAE,iBAAiB,EAAwB,MAAM,uBAAuB,CAAA;AAC/E,OAAO,EAAE,iBAAiB,EAAwB,MAAM,uBAAuB,CAAA;AAC/E,OAAO,EAAE,cAAc,EAAqB,MAAM,oBAAoB,CAAA;AACtE,OAAO,EACL,4BAA4B,GAE7B,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,qBAAqB,EAA4B,MAAM,2BAA2B,CAAA;AA8C3F;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,EAAU,EACV,GAAa,EACb,KAAmB,EACnB,OAAqB,EAAE;IAEvB,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;QAC1C,IAAI,KAAkB,CAAA;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;YACrF,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAA;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAM;QACR,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1B,EAAE,CAAC,KAAK,EAAE,CAAA;YACV,OAAM;QACR,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS,GAAG,IAAI,CAAA;gBAChB,IAAI,CAAC,WAAW,EAAE,EAAE,CAAA;YACtB,CAAC;YACD,OAAM;QACR,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,KAAK,KAAK;YAAE,OAAM;QAC7B,IAAI,MAAe,CAAA;QACnB,IAAI,MAAM,GAA8C,IAAI,CAAA;QAC5D,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YACpD,MAAM,KAAK,GAAgB,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,CAAA;YACnE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,GAAG,CAAuC,CAAA;YAChD,sEAAsE;YACtE,iEAAiE;YACjE,+DAA+D;YAC/D,MAAM,MAAM,GACV,MAAM,CAAC,MAAM;gBACb,CAAC,CAAC,YAAY,KAAK;oBACjB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC9F,CAAC,CAAC,SAAS,CAAC,CAAA;YAChB,MAAM,QAAQ,GAAgB;gBAC5B,CAAC,EAAE,WAAW;gBACd,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,UAAU;gBAC/B,MAAM;aACP,CAAA;YACD,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;YACjC,uEAAuE;YACvE,+CAA+C;YAC/C,OAAO,CAAC,KAAK,CAAC,sCAAsC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAA;QACvE,CAAC;QACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAa;YACzB,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;YACd,IAAI;YACJ,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;YAC/C,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC;SACrE,CAAA;QACD,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAA;QAC3B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAwB,CAAC,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;IAEF,OAAO;QACL,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU;YAC3C,MAAM,KAAK,GAAgB;gBACzB,CAAC,EAAE,kBAAkB;gBACrB,SAAS;gBACT,OAAO;gBACP,UAAU;aACX,CAAA;YACD,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QAChC,CAAC;QACD,eAAe,CAAC,IAAI,EAAE,UAAU;YAC9B,MAAM,KAAK,GAAgB,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;YAClE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QAChC,CAAC;QACD,aAAa,CAAC,KAAK;YACjB,MAAM,KAAK,GAAgB,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;YACrD,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QAChC,CAAC;QACD,KAAK;YACH,EAAE,CAAC,KAAK,EAAE,CAAA;QACZ,CAAC;KACF,CAAA;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAa,EAAE,GAAa;IAChE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACd,OAAO,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAsB,CAAC,CAAA;QAC/D,KAAK,cAAc;YACjB,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAA;QAC/B,KAAK,cAAc;YACjB,OAAO,iBAAiB,CAAC,GAAG,EAAE,IAAa,CAAC,CAAA;QAC9C,KAAK,WAAW;YACd,OAAO,cAAc,CAAC,GAAG,EAAE,IAAa,CAAC,CAAA;QAC3C,KAAK,0BAA0B;YAC7B,OAAO,4BAA4B,CAAC,GAAG,CAAC,CAAA;QAC1C,KAAK,kBAAkB;YACrB,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAA;QACnC;YACE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAA;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,WAAW;IACX,cAAc;IACd,kBAAkB;IAClB,WAAW;IACX,0BAA0B;CAC3B,CAAC,CAAA;AAEF,SAAS,iBAAiB,CACxB,IAAY,EACZ,MAAe,EACf,GAA8C;IAE9C,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,OAAO,CAAA;IAChC,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,MAAoC,CAAA;QAC9C,MAAM,MAAM,GAAG,CAAC,EAAE,MAAM,CAAA;QACxB,IAAI,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO,YAAY,CAAA;QAC1E,IAAI,MAAM,KAAK,sBAAsB;YAAE,OAAO,UAAU,CAAA;QACxD,IAAI,MAAM,KAAK,UAAU;YAAE,OAAO,SAAS,CAAA;QAC3C,OAAO,YAAY,CAAA;IACrB,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAA;IACvC,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAAa;IACjD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,IAA0C,CAAA;QACpD,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,CAAA;QACtB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9C,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,0EAA0E;AAC1E,wDAAwD;AACxD,SAAS,WAAW,CAClB,IAAY,EACZ,IAAa,EACb,WAAsD;IAEtD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,IAA0C,CAAA;QACpD,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;QACzE,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;QACjE,IAAI,SAAS;YAAE,OAAO,SAAS,CAAA;QAC/B,OAAO,OAAO,IAAI,cAAc,CAAA;IAClC,CAAC;IACD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,gBAAgB,CAAA;IACjD,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,wBAAwB,CAAA;IAC5D,IAAI,IAAI,KAAK,kBAAkB;QAAE,OAAO,sBAAsB,CAAA;IAC9D,IAAI,IAAI,KAAK,0BAA0B;QAAE,OAAO,sBAAsB,CAAA;IACtE,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,IAAgC,CAAA;QAC1C,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAA;IACvD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC","sourcesContent":["import type {\n  ClientFrame,\n  ServerFrame,\n  HelloFrame,\n  LogEntry,\n  LogKind,\n  MessageAnnotations,\n} from '../protocol.js'\nimport { handleGetState, type GetStateHost } from './rpc/get-state.js'\nimport { handleSendMessage, type SendMessageHost } from './rpc/send-message.js'\nimport { handleListActions, type ListActionsHost } from './rpc/list-actions.js'\nimport { handleQueryDom, type QueryDomHost } from './rpc/query-dom.js'\nimport {\n  handleDescribeVisibleContent,\n  type DescribeVisibleHost,\n} from './rpc/describe-visible-content.js'\nimport { handleDescribeContext, type DescribeContextHost } from './rpc/describe-context.js'\n\nexport interface WsLike {\n  send(data: string): void\n  close(): void\n  addEventListener(event: 'message', h: (e: { data: string | ArrayBuffer }) => void): void\n  addEventListener(event: 'open' | 'close', h: () => void): void\n}\n\nexport type RpcHosts = GetStateHost &\n  SendMessageHost &\n  ListActionsHost &\n  QueryDomHost &\n  DescribeVisibleHost &\n  DescribeContextHost\n\nexport type HelloBuilder = () => HelloFrame\n\nexport type WsClient = {\n  /** Resolve a pending confirmation; emits confirm-resolved frame to the server. */\n  resolveConfirm(\n    confirmId: string,\n    outcome: 'confirmed' | 'user-cancelled',\n    stateAfter?: unknown,\n  ): void\n  /** Emit a state-update frame so the server can resolve waitForChange promises. */\n  emitStateUpdate(path: string, stateAfter: unknown): void\n  /** Emit a log-append frame so the server can mirror client-observed actions to the audit sink. */\n  emitLogAppend(entry: LogEntry): void\n  /** Close the socket cleanly. */\n  close(): void\n}\n\nexport type WsClientOpts = {\n  /** Called once when the server sends an `{t: 'active'}` frame. Idempotent. */\n  onActivated?: () => void\n  /**\n   * Called with every LogEntry emitted by the ws-client (one per rpc\n   * dispatched or errored). Used by the factory to mirror the entries\n   * into the app's local `agent.log` slice so the UI can show activity.\n   * The ws-client still sends the outbound `log-append` frame to the\n   * server regardless.\n   */\n  onLogEntry?: (entry: LogEntry) => void\n}\n\n/**\n * Wires up a WebSocket to serve rpc requests from the server. See spec §9.4.\n */\nexport function attachWsClient(\n  ws: WsLike,\n  rpc: RpcHosts,\n  hello: HelloBuilder,\n  opts: WsClientOpts = {},\n): WsClient {\n  let activated = false\n  ws.addEventListener('open', () => {\n    ws.send(JSON.stringify(hello()))\n  })\n  ws.addEventListener('message', async (ev) => {\n    let frame: ServerFrame\n    try {\n      const raw = typeof ev.data === 'string' ? ev.data : new TextDecoder().decode(ev.data)\n      frame = JSON.parse(raw) as ServerFrame\n    } catch {\n      return\n    }\n    if (frame.t === 'revoked') {\n      ws.close()\n      return\n    }\n    if (frame.t === 'active') {\n      if (!activated) {\n        activated = true\n        opts.onActivated?.()\n      }\n      return\n    }\n    if (frame.t !== 'rpc') return\n    let result: unknown\n    let rpcErr: { code?: string; detail?: string } | null = null\n    try {\n      result = await dispatch(frame.tool, frame.args, rpc)\n      const reply: ClientFrame = { t: 'rpc-reply', id: frame.id, result }\n      ws.send(JSON.stringify(reply))\n    } catch (e: unknown) {\n      rpcErr = e as { code?: string; detail?: string }\n      // When a plain JS exception bubbles up (TypeError, RangeError, etc.),\n      // rpcErr has no .code/.detail. Enrich the detail with the actual\n      // message + stack so the server/Claude can see the real cause.\n      const detail =\n        rpcErr.detail ??\n        (e instanceof Error\n          ? `${e.name}: ${e.message}${e.stack ? '\\n' + e.stack.split('\\n').slice(0, 5).join('\\n') : ''}`\n          : undefined)\n      const errFrame: ClientFrame = {\n        t: 'rpc-error',\n        id: frame.id,\n        code: rpcErr.code ?? 'internal',\n        detail,\n      }\n      ws.send(JSON.stringify(errFrame))\n      // Also log to the browser console so operators see the real cause even\n      // when the server/Claude just show \"internal\".\n      console.error(`[llui-agent] rpc handler threw for ${frame.tool}:`, e)\n    }\n    const kind = getLogKindForTool(frame.tool, result, rpcErr)\n    const logEntry: LogEntry = {\n      id: frame.id,\n      at: Date.now(),\n      kind,\n      variant: extractVariant(frame.tool, frame.args),\n      intent: buildIntent(frame.tool, frame.args, rpc.getMsgAnnotations()),\n    }\n    opts.onLogEntry?.(logEntry)\n    ws.send(JSON.stringify({ t: 'log-append', entry: logEntry } satisfies ClientFrame))\n  })\n\n  return {\n    resolveConfirm(confirmId, outcome, stateAfter) {\n      const frame: ClientFrame = {\n        t: 'confirm-resolved',\n        confirmId,\n        outcome,\n        stateAfter,\n      }\n      ws.send(JSON.stringify(frame))\n    },\n    emitStateUpdate(path, stateAfter) {\n      const frame: ClientFrame = { t: 'state-update', path, stateAfter }\n      ws.send(JSON.stringify(frame))\n    },\n    emitLogAppend(entry) {\n      const frame: ClientFrame = { t: 'log-append', entry }\n      ws.send(JSON.stringify(frame))\n    },\n    close() {\n      ws.close()\n    },\n  }\n}\n\nasync function dispatch(tool: string, args: unknown, rpc: RpcHosts): Promise<unknown> {\n  switch (tool) {\n    case 'get_state':\n      return handleGetState(rpc, (args ?? {}) as { path?: string })\n    case 'list_actions':\n      return handleListActions(rpc)\n    case 'send_message':\n      return handleSendMessage(rpc, args as never)\n    case 'query_dom':\n      return handleQueryDom(rpc, args as never)\n    case 'describe_visible_content':\n      return handleDescribeVisibleContent(rpc)\n    case 'describe_context':\n      return handleDescribeContext(rpc)\n    default:\n      throw { code: 'invalid', detail: `unknown tool: ${tool}` }\n  }\n}\n\nconst READ_TOOLS = new Set([\n  'get_state',\n  'list_actions',\n  'describe_context',\n  'query_dom',\n  'describe_visible_content',\n])\n\nfunction getLogKindForTool(\n  tool: string,\n  result: unknown,\n  err: { code?: string; detail?: string } | null,\n): LogKind {\n  if (err !== null) return 'error'\n  if (tool === 'send_message') {\n    const r = result as { status?: string } | null\n    const status = r?.status\n    if (status === 'dispatched' || status === 'confirmed') return 'dispatched'\n    if (status === 'pending-confirmation') return 'proposed'\n    if (status === 'rejected') return 'blocked'\n    return 'dispatched'\n  }\n  if (READ_TOOLS.has(tool)) return 'read'\n  return 'read'\n}\n\nfunction extractVariant(tool: string, args: unknown): string | undefined {\n  if (tool === 'send_message') {\n    const a = args as { msg?: { type?: string } } | null\n    const t = a?.msg?.type\n    return typeof t === 'string' ? t : undefined\n  }\n  return undefined\n}\n\n// Human-readable label for each rpc. For send_message, prefer the @intent\n// annotation authored on the Msg union; fall back to the raw variant name.\n// For read tools, return a short fixed label so the activity feed doesn't\n// show opaque tool ids like \"describe_visible_content\".\nfunction buildIntent(\n  tool: string,\n  args: unknown,\n  annotations: Record<string, MessageAnnotations> | null,\n): string {\n  if (tool === 'send_message') {\n    const a = args as { msg?: { type?: string } } | null\n    const variant = typeof a?.msg?.type === 'string' ? a.msg.type : undefined\n    const annotated = variant ? annotations?.[variant]?.intent : null\n    if (annotated) return annotated\n    return variant ?? 'Send message'\n  }\n  if (tool === 'get_state') return 'Read app state'\n  if (tool === 'list_actions') return 'List available actions'\n  if (tool === 'describe_context') return 'Read current context'\n  if (tool === 'describe_visible_content') return 'Read visible content'\n  if (tool === 'query_dom') {\n    const a = args as { name?: string } | null\n    return a?.name ? `Query DOM: ${a.name}` : 'Query DOM'\n  }\n  return tool\n}\n"]}

package/dist/protocol.d.ts

@@ -0,0 +1,319 @@
+export type LapErrorCode = 'auth-failed' | 'revoked' | 'paused' | 'rate-limited' | 'invalid' | 'schema-error' | 'timeout' | 'internal';
+export type LapError = {
+    error: {
+        code: LapErrorCode;
+        detail?: string;
+        retryAfterMs?: number;
+    };
+};
+export type MessageAnnotations = {
+    intent: string | null;
+    alwaysAffordable: boolean;
+    requiresConfirm: boolean;
+    humanOnly: boolean;
+};
+export type MessageSchemaEntry = {
+    payloadSchema: object;
+    annotations: MessageAnnotations;
+};
+export type LapDescribeResponse = {
+    name: string;
+    version: string;
+    stateSchema: object;
+    messages: Record<string, MessageSchemaEntry>;
+    docs: AgentDocs | null;
+    conventions: {
+        dispatchModel: 'TEA';
+        confirmationModel: 'runtime-mediated';
+        readSurfaces: readonly ('state' | 'query_dom' | 'describe_visible_content' | 'describe_context')[];
+    };
+    schemaHash: string;
+};
+export type LapStateRequest = {
+    path?: string;
+};
+export type LapStateResponse = {
+    state: unknown;
+};
+export type LapActionsResponse = {
+    actions: Array<{
+        variant: string;
+        intent: string;
+        requiresConfirm: boolean;
+        source: 'binding' | 'always-affordable';
+        selectorHint: string | null;
+        payloadHint: object | null;
+    }>;
+};
+export type LapMessageRequest = {
+    msg: {
+        type: string;
+        [k: string]: unknown;
+    };
+    reason?: string;
+    waitFor?: 'idle' | 'none';
+    timeoutMs?: number;
+};
+export type LapMessageRejectReason = 'humanOnly' | 'user-cancelled' | 'timeout' | 'invalid' | 'schema-error' | 'revoked' | 'paused';
+export type LapMessageResponse = {
+    status: 'dispatched';
+    stateAfter: unknown;
+} | {
+    status: 'pending-confirmation';
+    confirmId: string;
+} | {
+    status: 'confirmed';
+    stateAfter: unknown;
+} | {
+    status: 'rejected';
+    reason: LapMessageRejectReason;
+    detail?: string;
+};
+export type LapConfirmResultRequest = {
+    confirmId: string;
+    timeoutMs?: number;
+};
+export type LapConfirmResultResponse = {
+    status: 'confirmed';
+    stateAfter: unknown;
+} | {
+    status: 'rejected';
+    reason: 'user-cancelled' | 'timeout';
+} | {
+    status: 'still-pending';
+};
+export type LapWaitRequest = {
+    path?: string;
+    timeoutMs?: number;
+};
+export type LapWaitResponse = {
+    status: 'changed';
+    stateAfter: unknown;
+} | {
+    status: 'timeout';
+    stateAfter: unknown;
+};
+export type LapQueryDomRequest = {
+    name: string;
+    multiple?: boolean;
+};
+export type LapQueryDomResponse = {
+    elements: Array<{
+        text: string;
+        attrs: Record<string, string>;
+        path: number[];
+    }>;
+};
+export type OutlineNode = {
+    kind: 'heading';
+    level: number;
+    text: string;
+} | {
+    kind: 'text';
+    text: string;
+} | {
+    kind: 'list';
+    items: OutlineNode[];
+} | {
+    kind: 'item';
+    text: string;
+    children?: OutlineNode[];
+} | {
+    kind: 'button';
+    text: string;
+    disabled: boolean;
+    actionVariant: string | null;
+} | {
+    kind: 'input';
+    label: string | null;
+    value: string | null;
+    type: string;
+} | {
+    kind: 'link';
+    text: string;
+    href: string;
+};
+export type LapDescribeVisibleResponse = {
+    outline: OutlineNode[];
+};
+export type AgentDocs = {
+    purpose: string;
+    overview?: string;
+    cautions?: string[];
+};
+export type AgentContext = {
+    summary: string;
+    hints?: string[];
+    cautions?: string[];
+};
+export type LapContextResponse = {
+    context: AgentContext;
+};
+export type LapEndpointMap = {
+    '/lap/v1/describe': {
+        req: null;
+        res: LapDescribeResponse;
+    };
+    '/lap/v1/state': {
+        req: LapStateRequest;
+        res: LapStateResponse;
+    };
+    '/lap/v1/actions': {
+        req: null;
+        res: LapActionsResponse;
+    };
+    '/lap/v1/message': {
+        req: LapMessageRequest;
+        res: LapMessageResponse;
+    };
+    '/lap/v1/confirm-result': {
+        req: LapConfirmResultRequest;
+        res: LapConfirmResultResponse;
+    };
+    '/lap/v1/wait': {
+        req: LapWaitRequest;
+        res: LapWaitResponse;
+    };
+    '/lap/v1/query-dom': {
+        req: LapQueryDomRequest;
+        res: LapQueryDomResponse;
+    };
+    '/lap/v1/describe-visible': {
+        req: null;
+        res: LapDescribeVisibleResponse;
+    };
+    '/lap/v1/context': {
+        req: null;
+        res: LapContextResponse;
+    };
+};
+export type LapPath = keyof LapEndpointMap;
+export type LapRequest<P extends LapPath> = LapEndpointMap[P]['req'];
+export type LapResponse<P extends LapPath> = LapEndpointMap[P]['res'];
+export type LogKind = 'proposed' | 'dispatched' | 'confirmed' | 'rejected' | 'blocked' | 'read' | 'error';
+export type LogEntry = {
+    id: string;
+    at: number;
+    kind: LogKind;
+    variant?: string;
+    intent?: string;
+    detail?: string;
+};
+export type HelloFrame = {
+    t: 'hello';
+    appName: string;
+    appVersion: string;
+    msgSchema: Record<string, MessageSchemaEntry>;
+    stateSchema: object;
+    affordancesSample: object[];
+    docs: AgentDocs | null;
+    schemaHash: string;
+};
+export type RpcReplyFrame = {
+    t: 'rpc-reply';
+    id: string;
+    result: unknown;
+};
+export type RpcErrorFrame = {
+    t: 'rpc-error';
+    id: string;
+    code: string;
+    detail?: string;
+};
+export type ConfirmResolvedFrame = {
+    t: 'confirm-resolved';
+    confirmId: string;
+    outcome: 'confirmed' | 'user-cancelled';
+    stateAfter?: unknown;
+};
+export type StateUpdateFrame = {
+    t: 'state-update';
+    path: string;
+    stateAfter: unknown;
+};
+export type LogAppendFrame = {
+    t: 'log-append';
+    entry: LogEntry;
+};
+export type ClientFrame = HelloFrame | RpcReplyFrame | RpcErrorFrame | ConfirmResolvedFrame | StateUpdateFrame | LogAppendFrame;
+export type RpcFrame = {
+    t: 'rpc';
+    id: string;
+    tool: string;
+    args: unknown;
+};
+export type RevokedFrame = {
+    t: 'revoked';
+};
+export type ActiveFrame = {
+    t: 'active';
+};
+export type ServerFrame = RpcFrame | RevokedFrame | ActiveFrame;
+declare const TokenBrand: unique symbol;
+export type AgentToken = string & {
+    readonly [TokenBrand]: 'AgentToken';
+};
+export type TokenPayload = {
+    tid: string;
+    iat: number;
+    exp: number;
+    scope: 'agent';
+};
+export type TokenStatus = 'awaiting-ws' | 'awaiting-claude' | 'active' | 'pending-resume' | 'revoked';
+export type TokenRecord = {
+    tid: string;
+    uid: string | null;
+    status: TokenStatus;
+    createdAt: number;
+    lastSeenAt: number;
+    pendingResumeUntil: number | null;
+    origin: string;
+    label: string | null;
+};
+export type AgentSession = {
+    tid: string;
+    label: string;
+    status: 'active' | 'pending-resume' | 'revoked';
+    createdAt: number;
+    lastSeenAt: number;
+};
+export type MintRequest = Record<string, never>;
+export type MintResponse = {
+    token: AgentToken;
+    tid: string;
+    wsUrl: string;
+    lapUrl: string;
+    expiresAt: number;
+};
+export type ResumeListRequest = {
+    tids: string[];
+};
+export type ResumeListResponse = {
+    sessions: AgentSession[];
+};
+export type ResumeClaimRequest = {
+    tid: string;
+};
+export type ResumeClaimResponse = {
+    token: AgentToken;
+    wsUrl: string;
+};
+export type RevokeRequest = {
+    tid: string;
+};
+export type RevokeResponse = {
+    status: 'revoked';
+};
+export type SessionsResponse = {
+    sessions: AgentSession[];
+};
+export type AuditEvent = 'mint' | 'claim' | 'resume' | 'revoke' | 'lap-call' | 'msg-dispatched' | 'msg-blocked' | 'confirm-proposed' | 'confirm-approved' | 'confirm-rejected' | 'rate-limited' | 'auth-failed';
+export type AuditEntry = {
+    at: number;
+    tid: string | null;
+    uid: string | null;
+    event: AuditEvent;
+    detail: object;
+};
+export {};
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,SAAS,GACT,QAAQ,GACR,cAAc,GACd,SAAS,GACT,cAAc,GACd,SAAS,GACT,UAAU,CAAA;AAEd,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE;QACL,IAAI,EAAE,YAAY,CAAA;QAClB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,CAAA;CACF,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,gBAAgB,EAAE,OAAO,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,SAAS,EAAE,OAAO,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,kBAAkB,CAAA;CAChC,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAC5C,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;IACtB,WAAW,EAAE;QACX,aAAa,EAAE,KAAK,CAAA;QACpB,iBAAiB,EAAE,kBAAkB,CAAA;QACrC,YAAY,EAAE,SAAS,CACnB,OAAO,GACP,WAAW,GACX,0BAA0B,GAC1B,kBAAkB,CACrB,EAAE,CAAA;KACJ,CAAA;IACD,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAC/C,MAAM,MAAM,gBAAgB,GAAG;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAEjD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,KAAK,CAAC;QACb,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,EAAE,MAAM,CAAA;QACd,eAAe,EAAE,OAAO,CAAA;QACxB,MAAM,EAAE,SAAS,GAAG,mBAAmB,CAAA;QACvC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;QAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAC3B,CAAC,CAAA;CACH,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,sBAAsB,GAC9B,WAAW,GACX,gBAAgB,GAChB,SAAS,GACT,SAAS,GACT,cAAc,GACd,SAAS,GACT,QAAQ,CAAA;AAEZ,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC7C;IAAE,MAAM,EAAE,sBAAsB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC5C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAE3E,MAAM,MAAM,uBAAuB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAC/E,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC5C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAAA;CAAE,GAC5D;IAAE,MAAM,EAAE,eAAe,CAAA;CAAE,CAAA;AAE/B,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAClE,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAA;AAE9C,MAAM,MAAM,kBAAkB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AACrE,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CACjF,CAAA;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhD,MAAM,MAAM,0BAA0B,GAAG;IAAE,OAAO,EAAE,WAAW,EAAE,CAAA;CAAE,CAAA;AAOnE,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAAE,OAAO,EAAE,YAAY,CAAA;CAAE,CAAA;AAK1D,MAAM,MAAM,cAAc,GAAG;IAC3B,kBAAkB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,mBAAmB,CAAA;KAAE,CAAA;IAC3D,eAAe,EAAE;QAAE,GAAG,EAAE,eAAe,CAAC;QAAC,GAAG,EAAE,gBAAgB,CAAA;KAAE,CAAA;IAChE,iBAAiB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;IACzD,iBAAiB,EAAE;QAAE,GAAG,EAAE,iBAAiB,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;IACtE,wBAAwB,EAAE;QAAE,GAAG,EAAE,uBAAuB,CAAC;QAAC,GAAG,EAAE,wBAAwB,CAAA;KAAE,CAAA;IACzF,cAAc,EAAE;QAAE,GAAG,EAAE,cAAc,CAAC;QAAC,GAAG,EAAE,eAAe,CAAA;KAAE,CAAA;IAC7D,mBAAmB,EAAE;QAAE,GAAG,EAAE,kBAAkB,CAAC;QAAC,GAAG,EAAE,mBAAmB,CAAA;KAAE,CAAA;IAC1E,0BAA0B,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,0BAA0B,CAAA;KAAE,CAAA;IAC1E,iBAAiB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;CAC1D,CAAA;AAED,MAAM,MAAM,OAAO,GAAG,MAAM,cAAc,CAAA;AAC1C,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AACpE,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AAMrE,MAAM,MAAM,OAAO,GACf,UAAU,GACV,YAAY,GACZ,WAAW,GACX,UAAU,GACV,SAAS,GACT,MAAM,GACN,OAAO,CAAA;AAEX,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,EAAE,OAAO,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,CAAC,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAA;AAC3E,MAAM,MAAM,aAAa,GAAG;IAAE,CAAC,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AACzF,MAAM,MAAM,oBAAoB,GAAG;IACjC,CAAC,EAAE,kBAAkB,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,WAAW,GAAG,gBAAgB,CAAA;IACvC,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB,CAAA;AACD,MAAM,MAAM,gBAAgB,GAAG;IAAE,CAAC,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAA;AACvF,MAAM,MAAM,cAAc,GAAG;IAAE,CAAC,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAA;AAEjE,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,aAAa,GACb,aAAa,GACb,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,CAAA;AAElB,MAAM,MAAM,QAAQ,GAAG;IAAE,CAAC,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAA;AAC5E,MAAM,MAAM,YAAY,GAAG;IAAE,CAAC,EAAE,SAAS,CAAA;CAAE,CAAA;AAC3C,MAAM,MAAM,WAAW,GAAG;IAAE,CAAC,EAAE,QAAQ,CAAA;CAAE,CAAA;AAEzC,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,CAAA;AAI/D,OAAO,CAAC,MAAM,UAAU,EAAE,OAAO,MAAM,CAAA;AACvC,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,YAAY,CAAA;CAAE,CAAA;AAEzE,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAED,MAAM,MAAM,WAAW,GACnB,aAAa,GACb,iBAAiB,GACjB,QAAQ,GACR,gBAAgB,GAChB,SAAS,CAAA;AAEb,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,MAAM,EAAE,WAAW,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,QAAQ,GAAG,gBAAgB,GAAG,SAAS,CAAA;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAID,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAC/C,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,UAAU,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAClD,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAAA;AAE7D,MAAM,MAAM,kBAAkB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAChD,MAAM,MAAM,mBAAmB,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtE,MAAM,MAAM,aAAa,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAC3C,MAAM,MAAM,cAAc,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAA;AAElD,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAAA;AAI3D,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,gBAAgB,GAChB,aAAa,GACb,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,aAAa,CAAA;AAEjB,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,KAAK,EAAE,UAAU,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf,CAAA"}

package/dist/protocol.js

@@ -0,0 +1,6 @@
+// ── LAP — LLui Agent Protocol ────────────────────────────────────
+// JSON over HTTPS between the llui-agent bridge (MCP side) and the
+// @llui/agent server library mounted in the developer's backend.
+// See docs/superpowers/specs/2026-04-19-llui-agent-design.md §7.
+export {};
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,mEAAmE;AACnE,iEAAiE;AACjE,iEAAiE","sourcesContent":["// ── LAP — LLui Agent Protocol ────────────────────────────────────\n// JSON over HTTPS between the llui-agent bridge (MCP side) and the\n// @llui/agent server library mounted in the developer's backend.\n// See docs/superpowers/specs/2026-04-19-llui-agent-design.md §7.\n\nexport type LapErrorCode =\n  | 'auth-failed'\n  | 'revoked'\n  | 'paused'\n  | 'rate-limited'\n  | 'invalid'\n  | 'schema-error'\n  | 'timeout'\n  | 'internal'\n\nexport type LapError = {\n  error: {\n    code: LapErrorCode\n    detail?: string\n    retryAfterMs?: number\n  }\n}\n\nexport type MessageAnnotations = {\n  intent: string | null\n  alwaysAffordable: boolean\n  requiresConfirm: boolean\n  humanOnly: boolean\n}\n\nexport type MessageSchemaEntry = {\n  payloadSchema: object\n  annotations: MessageAnnotations\n}\n\nexport type LapDescribeResponse = {\n  name: string\n  version: string\n  stateSchema: object\n  messages: Record<string, MessageSchemaEntry>\n  docs: AgentDocs | null\n  conventions: {\n    dispatchModel: 'TEA'\n    confirmationModel: 'runtime-mediated'\n    readSurfaces: readonly (\n      | 'state'\n      | 'query_dom'\n      | 'describe_visible_content'\n      | 'describe_context'\n    )[]\n  }\n  schemaHash: string\n}\n\nexport type LapStateRequest = { path?: string }\nexport type LapStateResponse = { state: unknown }\n\nexport type LapActionsResponse = {\n  actions: Array<{\n    variant: string\n    intent: string\n    requiresConfirm: boolean\n    source: 'binding' | 'always-affordable'\n    selectorHint: string | null\n    payloadHint: object | null\n  }>\n}\n\nexport type LapMessageRequest = {\n  msg: { type: string; [k: string]: unknown }\n  reason?: string\n  waitFor?: 'idle' | 'none'\n  timeoutMs?: number\n}\n\nexport type LapMessageRejectReason =\n  | 'humanOnly'\n  | 'user-cancelled'\n  | 'timeout'\n  | 'invalid'\n  | 'schema-error'\n  | 'revoked'\n  | 'paused'\n\nexport type LapMessageResponse =\n  | { status: 'dispatched'; stateAfter: unknown }\n  | { status: 'pending-confirmation'; confirmId: string }\n  | { status: 'confirmed'; stateAfter: unknown }\n  | { status: 'rejected'; reason: LapMessageRejectReason; detail?: string }\n\nexport type LapConfirmResultRequest = { confirmId: string; timeoutMs?: number }\nexport type LapConfirmResultResponse =\n  | { status: 'confirmed'; stateAfter: unknown }\n  | { status: 'rejected'; reason: 'user-cancelled' | 'timeout' }\n  | { status: 'still-pending' }\n\nexport type LapWaitRequest = { path?: string; timeoutMs?: number }\nexport type LapWaitResponse =\n  | { status: 'changed'; stateAfter: unknown }\n  | { status: 'timeout'; stateAfter: unknown }\n\nexport type LapQueryDomRequest = { name: string; multiple?: boolean }\nexport type LapQueryDomResponse = {\n  elements: Array<{ text: string; attrs: Record<string, string>; path: number[] }>\n}\n\nexport type OutlineNode =\n  | { kind: 'heading'; level: number; text: string }\n  | { kind: 'text'; text: string }\n  | { kind: 'list'; items: OutlineNode[] }\n  | { kind: 'item'; text: string; children?: OutlineNode[] }\n  | { kind: 'button'; text: string; disabled: boolean; actionVariant: string | null }\n  | { kind: 'input'; label: string | null; value: string | null; type: string }\n  | { kind: 'link'; text: string; href: string }\n\nexport type LapDescribeVisibleResponse = { outline: OutlineNode[] }\n\n// ── App + context documentation ──────────────────────────────────\n// Static app-level docs (authored once on the component record) and\n// dynamic per-state context docs (pure function of state, served by\n// `/lap/v1/context`). See spec §5.4.\n\nexport type AgentDocs = {\n  purpose: string\n  overview?: string\n  cautions?: string[]\n}\n\nexport type AgentContext = {\n  summary: string\n  hints?: string[]\n  cautions?: string[]\n}\n\nexport type LapContextResponse = { context: AgentContext }\n\n// LAP endpoint catalog — a compile-time map binding each path to its\n// request/response shape. Useful for the bridge's dispatcher and for\n// typed test helpers.\nexport type LapEndpointMap = {\n  '/lap/v1/describe': { req: null; res: LapDescribeResponse }\n  '/lap/v1/state': { req: LapStateRequest; res: LapStateResponse }\n  '/lap/v1/actions': { req: null; res: LapActionsResponse }\n  '/lap/v1/message': { req: LapMessageRequest; res: LapMessageResponse }\n  '/lap/v1/confirm-result': { req: LapConfirmResultRequest; res: LapConfirmResultResponse }\n  '/lap/v1/wait': { req: LapWaitRequest; res: LapWaitResponse }\n  '/lap/v1/query-dom': { req: LapQueryDomRequest; res: LapQueryDomResponse }\n  '/lap/v1/describe-visible': { req: null; res: LapDescribeVisibleResponse }\n  '/lap/v1/context': { req: null; res: LapContextResponse }\n}\n\nexport type LapPath = keyof LapEndpointMap\nexport type LapRequest<P extends LapPath> = LapEndpointMap[P]['req']\nexport type LapResponse<P extends LapPath> = LapEndpointMap[P]['res']\n\n// ── Relay WS frames ──────────────────────────────────────────────\n// Bidirectional framing between the LLui runtime in the browser and\n// the @llui/agent server over /agent/ws. See spec §10.5.\n\nexport type LogKind =\n  | 'proposed'\n  | 'dispatched'\n  | 'confirmed'\n  | 'rejected'\n  | 'blocked'\n  | 'read'\n  | 'error'\n\nexport type LogEntry = {\n  id: string\n  at: number\n  kind: LogKind\n  variant?: string\n  intent?: string\n  detail?: string\n}\n\nexport type HelloFrame = {\n  t: 'hello'\n  appName: string\n  appVersion: string\n  msgSchema: Record<string, MessageSchemaEntry>\n  stateSchema: object\n  affordancesSample: object[]\n  docs: AgentDocs | null\n  schemaHash: string\n}\n\nexport type RpcReplyFrame = { t: 'rpc-reply'; id: string; result: unknown }\nexport type RpcErrorFrame = { t: 'rpc-error'; id: string; code: string; detail?: string }\nexport type ConfirmResolvedFrame = {\n  t: 'confirm-resolved'\n  confirmId: string\n  outcome: 'confirmed' | 'user-cancelled'\n  stateAfter?: unknown\n}\nexport type StateUpdateFrame = { t: 'state-update'; path: string; stateAfter: unknown }\nexport type LogAppendFrame = { t: 'log-append'; entry: LogEntry }\n\nexport type ClientFrame =\n  | HelloFrame\n  | RpcReplyFrame\n  | RpcErrorFrame\n  | ConfirmResolvedFrame\n  | StateUpdateFrame\n  | LogAppendFrame\n\nexport type RpcFrame = { t: 'rpc'; id: string; tool: string; args: unknown }\nexport type RevokedFrame = { t: 'revoked' }\nexport type ActiveFrame = { t: 'active' }\n\nexport type ServerFrame = RpcFrame | RevokedFrame | ActiveFrame\n\n// ── Tokens + pairing ─────────────────────────────────────────────\n\ndeclare const TokenBrand: unique symbol\nexport type AgentToken = string & { readonly [TokenBrand]: 'AgentToken' }\n\nexport type TokenPayload = {\n  tid: string\n  iat: number\n  exp: number\n  scope: 'agent'\n}\n\nexport type TokenStatus =\n  | 'awaiting-ws'\n  | 'awaiting-claude'\n  | 'active'\n  | 'pending-resume'\n  | 'revoked'\n\nexport type TokenRecord = {\n  tid: string\n  uid: string | null\n  status: TokenStatus\n  createdAt: number\n  lastSeenAt: number\n  pendingResumeUntil: number | null\n  origin: string\n  label: string | null\n}\n\nexport type AgentSession = {\n  tid: string\n  label: string\n  status: 'active' | 'pending-resume' | 'revoked'\n  createdAt: number\n  lastSeenAt: number\n}\n\n// HTTP envelopes for the mint/resume/revoke/sessions endpoints (non-LAP).\n\nexport type MintRequest = Record<string, never>\nexport type MintResponse = {\n  token: AgentToken\n  tid: string\n  wsUrl: string\n  lapUrl: string\n  expiresAt: number\n}\n\nexport type ResumeListRequest = { tids: string[] }\nexport type ResumeListResponse = { sessions: AgentSession[] }\n\nexport type ResumeClaimRequest = { tid: string }\nexport type ResumeClaimResponse = { token: AgentToken; wsUrl: string }\n\nexport type RevokeRequest = { tid: string }\nexport type RevokeResponse = { status: 'revoked' }\n\nexport type SessionsResponse = { sessions: AgentSession[] }\n\n// ── Audit ────────────────────────────────────────────────────────\n\nexport type AuditEvent =\n  | 'mint'\n  | 'claim'\n  | 'resume'\n  | 'revoke'\n  | 'lap-call'\n  | 'msg-dispatched'\n  | 'msg-blocked'\n  | 'confirm-proposed'\n  | 'confirm-approved'\n  | 'confirm-rejected'\n  | 'rate-limited'\n  | 'auth-failed'\n\nexport type AuditEntry = {\n  at: number\n  tid: string | null\n  uid: string | null\n  event: AuditEvent\n  detail: object\n}\n"]}

package/dist/server/audit.d.ts

@@ -0,0 +1,6 @@
+import type { AuditEntry } from '../protocol.js';
+export type AuditSink = {
+    write: (entry: AuditEntry) => void | Promise<void>;
+};
+export declare const consoleAuditSink: AuditSink;
+//# sourceMappingURL=audit.d.ts.map

package/dist/server/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/server/audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEhD,MAAM,MAAM,SAAS,GAAG;IACtB,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnD,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,SAI9B,CAAA"}

package/dist/server/audit.js

@@ -0,0 +1,6 @@
+export const consoleAuditSink = {
+    write(entry) {
+        process.stdout.write(JSON.stringify(entry) + '\n');
+    },
+};
+//# sourceMappingURL=audit.js.map

package/dist/server/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/server/audit.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,gBAAgB,GAAc;IACzC,KAAK,CAAC,KAAK;QACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAA;IACpD,CAAC;CACF,CAAA","sourcesContent":["import type { AuditEntry } from '../protocol.js'\n\nexport type AuditSink = {\n  write: (entry: AuditEntry) => void | Promise<void>\n}\n\nexport const consoleAuditSink: AuditSink = {\n  write(entry) {\n    process.stdout.write(JSON.stringify(entry) + '\\n')\n  },\n}\n"]}

package/dist/server/factory.d.ts

@@ -0,0 +1,10 @@
+import type { ServerOptions, AgentServerHandle } from './options.js';
+/**
+ * Compose the server from its (defaulted) parts. Returns a handle with a
+ * `router` that dispatches `/agent/lap/v1/*` (LAP, checked first) then
+ * `/agent/*` (HTTP management), and a `wsUpgrade` for `/agent/ws`.
+ *
+ * Spec §10.1, §10.4.
+ */
+export declare function createLluiAgentServer(opts: ServerOptions): AgentServerHandle;
+//# sourceMappingURL=factory.d.ts.map

package/dist/server/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/server/factory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAWpE;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,aAAa,GAAG,iBAAiB,CA6D5E"}

package/dist/server/factory.js

@@ -0,0 +1,69 @@
+import { InMemoryTokenStore } from './token-store.js';
+import { consoleAuditSink } from './audit.js';
+import { defaultRateLimiter } from './rate-limit.js';
+import { createHttpRouter } from './http/router.js';
+import { createLapRouter } from './lap/router.js';
+import { WsPairingRegistry } from './ws/pairing-registry.js';
+import { createWsUpgradeHandler } from './ws/upgrade.js';
+const ANONYMOUS_RESOLVER = async () => null;
+/**
+ * Compose the server from its (defaulted) parts. Returns a handle with a
+ * `router` that dispatches `/agent/lap/v1/*` (LAP, checked first) then
+ * `/agent/*` (HTTP management), and a `wsUpgrade` for `/agent/ws`.
+ *
+ * Spec §10.1, §10.4.
+ */
+export function createLluiAgentServer(opts) {
+    if (!opts.signingKey) {
+        throw new Error('createLluiAgentServer: signingKey is required');
+    }
+    const tokenStore = opts.tokenStore ?? new InMemoryTokenStore();
+    const identityResolver = opts.identityResolver ?? ANONYMOUS_RESOLVER;
+    const auditSink = opts.auditSink ?? consoleAuditSink;
+    const rateLimiter = opts.rateLimiter ?? defaultRateLimiter({ perBucket: '30/minute' });
+    const lapBasePath = opts.lapBasePath ?? '/agent/lap/v1';
+    const registry = new WsPairingRegistry({
+        onLogAppend: (tid, entry) => {
+            void auditSink.write({
+                at: entry.at,
+                tid,
+                uid: null,
+                event: 'lap-call',
+                detail: {
+                    source: 'client-log',
+                    kind: entry.kind,
+                    variant: entry.variant,
+                    intent: entry.intent,
+                },
+            });
+        },
+    });
+    const httpRouter = createHttpRouter({
+        signingKey: opts.signingKey,
+        tokenStore,
+        identityResolver,
+        auditSink,
+        lapBasePath,
+    });
+    const lapRouter = createLapRouter({
+        signingKey: opts.signingKey,
+        tokenStore,
+        registry,
+        auditSink,
+        rateLimiter,
+    }, lapBasePath);
+    const router = async (req) => {
+        const lapRes = await lapRouter(req);
+        if (lapRes)
+            return lapRes;
+        return httpRouter(req);
+    };
+    const wsUpgrade = createWsUpgradeHandler({
+        signingKey: opts.signingKey,
+        tokenStore,
+        registry,
+        auditSink,
+    });
+    return { router, wsUpgrade };
+}
+//# sourceMappingURL=factory.js.map

package/dist/server/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/server/factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAA;AAExD,MAAM,kBAAkB,GAAG,KAAK,IAAI,EAAE,CAAC,IAAI,CAAA;AAE3C;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAmB;IACvD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,kBAAkB,EAAE,CAAA;IAC9D,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAA;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAA;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAA;IACtF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,eAAe,CAAA;IAEvD,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC;QACrC,WAAW,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC1B,KAAK,SAAS,CAAC,KAAK,CAAC;gBACnB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,GAAG;gBACH,GAAG,EAAE,IAAI;gBACT,KAAK,EAAE,UAAU;gBACjB,MAAM,EAAE;oBACN,MAAM,EAAE,YAAY;oBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB;aACF,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU;QACV,gBAAgB;QAChB,SAAS;QACT,WAAW;KACZ,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,eAAe,CAC/B;QACE,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU;QACV,QAAQ;QACR,SAAS;QACT,WAAW;KACZ,EACD,WAAW,CACZ,CAAA;IAED,MAAM,MAAM,GAAgC,KAAK,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAA;QACnC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;QACzB,OAAO,UAAU,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC,CAAA;IAED,MAAM,SAAS,GAAG,sBAAsB,CAAC;QACvC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,UAAU;QACV,QAAQ;QACR,SAAS;KACV,CAAC,CAAA;IAEF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;AAC9B,CAAC","sourcesContent":["import type { ServerOptions, AgentServerHandle } from './options.js'\nimport { InMemoryTokenStore } from './token-store.js'\nimport { consoleAuditSink } from './audit.js'\nimport { defaultRateLimiter } from './rate-limit.js'\nimport { createHttpRouter } from './http/router.js'\nimport { createLapRouter } from './lap/router.js'\nimport { WsPairingRegistry } from './ws/pairing-registry.js'\nimport { createWsUpgradeHandler } from './ws/upgrade.js'\n\nconst ANONYMOUS_RESOLVER = async () => null\n\n/**\n * Compose the server from its (defaulted) parts. Returns a handle with a\n * `router` that dispatches `/agent/lap/v1/*` (LAP, checked first) then\n * `/agent/*` (HTTP management), and a `wsUpgrade` for `/agent/ws`.\n *\n * Spec §10.1, §10.4.\n */\nexport function createLluiAgentServer(opts: ServerOptions): AgentServerHandle {\n  if (!opts.signingKey) {\n    throw new Error('createLluiAgentServer: signingKey is required')\n  }\n\n  const tokenStore = opts.tokenStore ?? new InMemoryTokenStore()\n  const identityResolver = opts.identityResolver ?? ANONYMOUS_RESOLVER\n  const auditSink = opts.auditSink ?? consoleAuditSink\n  const rateLimiter = opts.rateLimiter ?? defaultRateLimiter({ perBucket: '30/minute' })\n  const lapBasePath = opts.lapBasePath ?? '/agent/lap/v1'\n\n  const registry = new WsPairingRegistry({\n    onLogAppend: (tid, entry) => {\n      void auditSink.write({\n        at: entry.at,\n        tid,\n        uid: null,\n        event: 'lap-call',\n        detail: {\n          source: 'client-log',\n          kind: entry.kind,\n          variant: entry.variant,\n          intent: entry.intent,\n        },\n      })\n    },\n  })\n\n  const httpRouter = createHttpRouter({\n    signingKey: opts.signingKey,\n    tokenStore,\n    identityResolver,\n    auditSink,\n    lapBasePath,\n  })\n\n  const lapRouter = createLapRouter(\n    {\n      signingKey: opts.signingKey,\n      tokenStore,\n      registry,\n      auditSink,\n      rateLimiter,\n    },\n    lapBasePath,\n  )\n\n  const router: AgentServerHandle['router'] = async (req) => {\n    const lapRes = await lapRouter(req)\n    if (lapRes) return lapRes\n    return httpRouter(req)\n  }\n\n  const wsUpgrade = createWsUpgradeHandler({\n    signingKey: opts.signingKey,\n    tokenStore,\n    registry,\n    auditSink,\n  })\n\n  return { router, wsUpgrade }\n}\n"]}

package/dist/server/http/mint.d.ts

@@ -0,0 +1,23 @@
+import type { TokenStore } from '../token-store.js';
+import type { IdentityResolver } from '../identity.js';
+import type { AuditSink } from '../audit.js';
+export type MintDeps = {
+    signingKey: string | Uint8Array;
+    tokenStore: TokenStore;
+    identityResolver: IdentityResolver;
+    auditSink: AuditSink;
+    lapBasePath: string;
+    /** Wall-clock in milliseconds; injectable for tests. */
+    now?: () => number;
+    /** UUID generator; injectable for tests. */
+    uuid?: () => string;
+    /** Hard-expiry window, default 24 h. */
+    hardExpiryMs?: number;
+};
+/**
+ * POST /agent/mint — creates a pairing record and returns the mint
+ * response. See spec §6.2. The caller is responsible for routing
+ * `/agent/mint` requests to this handler; `router.ts` composes that.
+ */
+export declare function handleMint(req: Request, deps: MintDeps): Promise<Response>;
+//# sourceMappingURL=mint.d.ts.map

package/dist/server/http/mint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mint.d.ts","sourceRoot":"","sources":["../../../src/server/http/mint.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAK5C,MAAM,MAAM,QAAQ,GAAG;IACrB,UAAU,EAAE,MAAM,GAAG,UAAU,CAAA;IAC/B,UAAU,EAAE,UAAU,CAAA;IACtB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,SAAS,EAAE,SAAS,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,MAAM,CAAA;IACnB,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAwDhF"}

package/dist/server/http/mint.js

@@ -0,0 +1,63 @@
+import { signToken } from '../token.js';
+import { randomUUID } from 'node:crypto';
+/**
+ * POST /agent/mint — creates a pairing record and returns the mint
+ * response. See spec §6.2. The caller is responsible for routing
+ * `/agent/mint` requests to this handler; `router.ts` composes that.
+ */
+export async function handleMint(req, deps) {
+    if (req.method !== 'POST') {
+        return new Response(JSON.stringify({ error: { code: 'method-not-allowed' } }), {
+            status: 405,
+            headers: { 'content-type': 'application/json' },
+        });
+    }
+    const now = deps.now ?? (() => Date.now());
+    const uuid = deps.uuid ?? randomUUID;
+    const hardExpiryMs = deps.hardExpiryMs ?? 24 * 60 * 60 * 1000;
+    const uid = await deps.identityResolver(req);
+    const tid = uuid();
+    const nowMs = now();
+    const iat = Math.floor(nowMs / 1000);
+    const exp = Math.floor((nowMs + hardExpiryMs) / 1000);
+    const origin = new URL(req.url).origin;
+    const payload = { tid, iat, exp, scope: 'agent' };
+    const token = signToken(payload, deps.signingKey);
+    const record = {
+        tid,
+        uid,
+        status: 'awaiting-ws',
+        createdAt: nowMs,
+        lastSeenAt: nowMs,
+        pendingResumeUntil: null,
+        origin,
+        label: null,
+    };
+    await deps.tokenStore.create(record);
+    await deps.auditSink.write({
+        at: nowMs,
+        tid,
+        uid,
+        event: 'mint',
+        detail: { origin },
+    });
+    const wsUrl = toWsUrl(new URL(req.url).origin) + '/agent/ws';
+    const lapUrl = new URL(deps.lapBasePath, origin).toString();
+    const body = {
+        token,
+        tid,
+        wsUrl,
+        lapUrl,
+        expiresAt: exp,
+    };
+    return new Response(JSON.stringify(body), {
+        status: 200,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+function toWsUrl(httpOrigin) {
+    return httpOrigin.startsWith('https://')
+        ? 'wss://' + httpOrigin.slice('https://'.length)
+        : 'ws://' + httpOrigin.slice('http://'.length);
+}
+//# sourceMappingURL=mint.js.map

package/dist/server/http/mint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mint.js","sourceRoot":"","sources":["../../../src/server/http/mint.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAgBxC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAY,EAAE,IAAc;IAC3D,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,CAAC,EAAE;YAC7E,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,UAAU,CAAA;IACpC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAE7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC5C,MAAM,GAAG,GAAG,IAAI,EAAE,CAAA;IAClB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAA;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAA;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IAEtC,MAAM,OAAO,GAAiB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;IAC/D,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IAEjD,MAAM,MAAM,GAAgB;QAC1B,GAAG;QACH,GAAG;QACH,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,IAAI;QACxB,MAAM;QACN,KAAK,EAAE,IAAI;KACZ,CAAA;IACD,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEpC,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QACzB,EAAE,EAAE,KAAK;QACT,GAAG;QACH,GAAG;QACH,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,EAAE,MAAM,EAAE;KACnB,CAAC,CAAA;IAEF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,WAAW,CAAA;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;IAE3D,MAAM,IAAI,GAAiB;QACzB,KAAK;QACL,GAAG;QACH,KAAK;QACL,MAAM;QACN,SAAS,EAAE,GAAG;KACf,CAAA;IACD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,UAAkB;IACjC,OAAO,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QACtC,CAAC,CAAC,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QAChD,CAAC,CAAC,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;AAClD,CAAC","sourcesContent":["import type { TokenStore } from '../token-store.js'\nimport type { IdentityResolver } from '../identity.js'\nimport type { AuditSink } from '../audit.js'\nimport { signToken } from '../token.js'\nimport type { MintResponse, TokenPayload, TokenRecord } from '../../protocol.js'\nimport { randomUUID } from 'node:crypto'\n\nexport type MintDeps = {\n  signingKey: string | Uint8Array\n  tokenStore: TokenStore\n  identityResolver: IdentityResolver\n  auditSink: AuditSink\n  lapBasePath: string\n  /** Wall-clock in milliseconds; injectable for tests. */\n  now?: () => number\n  /** UUID generator; injectable for tests. */\n  uuid?: () => string\n  /** Hard-expiry window, default 24 h. */\n  hardExpiryMs?: number\n}\n\n/**\n * POST /agent/mint — creates a pairing record and returns the mint\n * response. See spec §6.2. The caller is responsible for routing\n * `/agent/mint` requests to this handler; `router.ts` composes that.\n */\nexport async function handleMint(req: Request, deps: MintDeps): Promise<Response> {\n  if (req.method !== 'POST') {\n    return new Response(JSON.stringify({ error: { code: 'method-not-allowed' } }), {\n      status: 405,\n      headers: { 'content-type': 'application/json' },\n    })\n  }\n\n  const now = deps.now ?? (() => Date.now())\n  const uuid = deps.uuid ?? randomUUID\n  const hardExpiryMs = deps.hardExpiryMs ?? 24 * 60 * 60 * 1000\n\n  const uid = await deps.identityResolver(req)\n  const tid = uuid()\n  const nowMs = now()\n  const iat = Math.floor(nowMs / 1000)\n  const exp = Math.floor((nowMs + hardExpiryMs) / 1000)\n  const origin = new URL(req.url).origin\n\n  const payload: TokenPayload = { tid, iat, exp, scope: 'agent' }\n  const token = signToken(payload, deps.signingKey)\n\n  const record: TokenRecord = {\n    tid,\n    uid,\n    status: 'awaiting-ws',\n    createdAt: nowMs,\n    lastSeenAt: nowMs,\n    pendingResumeUntil: null,\n    origin,\n    label: null,\n  }\n  await deps.tokenStore.create(record)\n\n  await deps.auditSink.write({\n    at: nowMs,\n    tid,\n    uid,\n    event: 'mint',\n    detail: { origin },\n  })\n\n  const wsUrl = toWsUrl(new URL(req.url).origin) + '/agent/ws'\n  const lapUrl = new URL(deps.lapBasePath, origin).toString()\n\n  const body: MintResponse = {\n    token,\n    tid,\n    wsUrl,\n    lapUrl,\n    expiresAt: exp,\n  }\n  return new Response(JSON.stringify(body), {\n    status: 200,\n    headers: { 'content-type': 'application/json' },\n  })\n}\n\nfunction toWsUrl(httpOrigin: string): string {\n  return httpOrigin.startsWith('https://')\n    ? 'wss://' + httpOrigin.slice('https://'.length)\n    : 'ws://' + httpOrigin.slice('http://'.length)\n}\n"]}

package/dist/server/http/resume.d.ts

@@ -0,0 +1,14 @@
+import type { TokenStore } from '../token-store.js';
+import type { IdentityResolver } from '../identity.js';
+import type { AuditSink } from '../audit.js';
+export type ResumeDeps = {
+    tokenStore: TokenStore;
+    identityResolver: IdentityResolver;
+    auditSink: AuditSink;
+    signingKey?: string | Uint8Array;
+    now?: () => number;
+    hardExpiryMs?: number;
+};
+export declare function handleResumeList(req: Request, deps: ResumeDeps): Promise<Response>;
+export declare function handleResumeClaim(req: Request, deps: ResumeDeps): Promise<Response>;
+//# sourceMappingURL=resume.d.ts.map

package/dist/server/http/resume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../../src/server/http/resume.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAW5C,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,UAAU,CAAA;IACtB,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IAChC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAyBxF;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAoCzF"}