@llui/agent 0.0.48 → 0.0.50

package/dist/protocol.d.ts

@@ -275,6 +275,50 @@ export type LapConfirmResultResponse = {
 } | {
     status: 'still-pending';
 };
+/**
+ * Long-poll for the user's next chat-composer submission. Returns
+ * `{ status: 'submitted', text, at }` on receipt of a
+ * `user-input-submitted` WS frame from the paired runtime, or
+ * `{ status: 'timeout' }` after `timeoutMs`. Each submission is
+ * delivered to exactly one waiter (FIFO); arrivals while no waiter
+ * is parked are buffered up to a small bound so a quick "type before
+ * Claude reaches the tool call" doesn't lose the message.
+ */
+export type LapWaitForUserInputRequest = {
+    timeoutMs?: number;
+};
+export type LapWaitForUserInputResponse = {
+    status: 'submitted';
+    text: string;
+    at: number;
+} | {
+    status: 'timeout';
+};
+/**
+ * Push narration prose into the activity feed without dispatching a
+ * Msg. The agent uses this for "I'm thinking…" / "About to do X
+ * because…" / "I noticed Y, going to investigate" — running commentary
+ * the user can read inline with agent actions.
+ *
+ * The server synthesizes a `LogEntry { kind: 'narrate', detail: text }`,
+ * appends it to the per-tid recent-log buffer (visible to subsequent
+ * `describe_recent_actions` calls), AND pushes a `log-push` frame to
+ * the paired browser so the in-app activity feed renders it in real
+ * time. No client roundtrip — the agent gets `{ ok: true }` synchronously
+ * once the server has accepted the narration.
+ */
+export type LapNarrateRequest = {
+    text: string;
+    /**
+     * Optional one-line label for the entry's `intent` field, e.g.
+     * "Thinking" / "Notice" / "Plan". Defaults to "Agent narrated"
+     * when omitted.
+     */
+    intent?: string;
+};
+export type LapNarrateResponse = {
+    ok: true;
+};
 export type LapWaitRequest = {
     path?: string;
     timeoutMs?: number;
@@ -396,6 +440,14 @@ export type LapEndpointMap = {
         req: LapWaitRequest;
         res: LapWaitResponse;
     };
+    '/lap/v1/wait-for-user-input': {
+        req: LapWaitForUserInputRequest;
+        res: LapWaitForUserInputResponse;
+    };
+    '/lap/v1/narrate': {
+        req: LapNarrateRequest;
+        res: LapNarrateResponse;
+    };
     '/lap/v1/query-dom': {
         req: LapQueryDomRequest;
         res: LapQueryDomResponse;
@@ -416,7 +468,24 @@ export type LapEndpointMap = {
 export type LapPath = keyof LapEndpointMap;
 export type LapRequest<P extends LapPath> = LapEndpointMap[P]['req'];
 export type LapResponse<P extends LapPath> = LapEndpointMap[P]['res'];
-export type LogKind = 'proposed' | 'dispatched' | 'confirmed' | 'rejected' | 'blocked' | 'read' | 'error';
+export type LogKind = 'proposed' | 'dispatched' | 'confirmed' | 'rejected' | 'blocked' | 'read' | 'error'
+/**
+ * The user typed a message into the in-app chat composer (the agentChat
+ * namespace) and submitted it. The agent's `wait_for_user_input` tool
+ * picks up the same submission. Surfacing it in the activity log is
+ * what makes the agent panel a real conversational surface — agent
+ * actions and user replies share one chronological timeline.
+ */
+ | 'user-input'
+/**
+ * The agent emitted prose into the activity feed via `/lap/v1/narrate`
+ * — narration like "thinking about your request…", "I'm about to add
+ * an alternative because…", or any out-of-band commentary that
+ * doesn't fit a `dispatched` / `read` lifecycle. Lets the agent talk
+ * to the user inside the app without inventing a fake `@agentOnly`
+ * Msg type.
+ */
+ | 'narrate';
 export type LogEntry = {
     id: string;
     at: number;
@@ -470,7 +539,25 @@ export type LogAppendFrame = {
     t: 'log-append';
     entry: LogEntry;
 };
-export type ClientFrame = HelloFrame | RpcReplyFrame | RpcErrorFrame | ConfirmResolvedFrame | StateUpdateFrame | LogAppendFrame;
+/**
+ * Inverted input channel. The user submits a message through the in-app
+ * chat composer (`agentChat`); the runtime forwards the text on this
+ * frame to the pairing server, which routes it to the parked
+ * `wait_for_user_input` LAP call (if any).
+ *
+ * The runtime ALSO appends a synthetic `LogEntry { kind: 'user-input' }`
+ * to the local activity log so the panel renders it inline with agent
+ * actions — the conversation reads as a single timeline. The frame and
+ * the log entry are independent: the frame travels server-side and
+ * delivers Claude's reply trigger; the log entry stays browser-side
+ * for visibility.
+ */
+export type UserInputSubmittedFrame = {
+    t: 'user-input-submitted';
+    text: string;
+    at: number;
+};
+export type ClientFrame = HelloFrame | RpcReplyFrame | RpcErrorFrame | ConfirmResolvedFrame | StateUpdateFrame | LogAppendFrame | UserInputSubmittedFrame;
 export type RpcFrame = {
     t: 'rpc';
     id: string;
@@ -483,7 +570,20 @@ export type RevokedFrame = {
 export type ActiveFrame = {
     t: 'active';
 };
-export type ServerFrame = RpcFrame | RevokedFrame | ActiveFrame;
+/**
+ * Server-pushed log entry. Used today by the `narrate` LAP method:
+ * the agent calls `/lap/v1/narrate { text }`, the server synthesizes
+ * a `LogEntry { kind: 'narrate' }` and pushes it down to the paired
+ * runtime so the in-app activity feed renders the narration in real
+ * time. Distinct from the browser-emitted `log-append` frame:
+ * `log-append` is browser → server (rpc-derived audit), `log-push`
+ * is server → browser (server-originated entries, no echo).
+ */
+export type LogPushFrame = {
+    t: 'log-push';
+    entry: LogEntry;
+};
+export type ServerFrame = RpcFrame | RevokedFrame | ActiveFrame | LogPushFrame;
 declare const TokenBrand: unique symbol;
 export type AgentToken = string & {
     readonly [TokenBrand]: 'AgentToken';

package/dist/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,SAAS,GACT,QAAQ,GACR,cAAc,GACd,SAAS,GACT,cAAc,GACd,SAAS,GACT,UAAU,CAAA;AAEd,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE;QACL,IAAI,EAAE,YAAY,CAAA;QAClB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,CAAA;CACF,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAA;AAEjE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,gBAAgB,EAAE,OAAO,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;OAIG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB;;;;;;;;OAQG;IACH,KAAK,EAAE,MAAM,EAAE,CAAA;IACf;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,kBAAkB,CAAA;CAChC,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAC5C,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;IACtB,WAAW,EAAE;QACX,aAAa,EAAE,KAAK,CAAA;QACpB,iBAAiB,EAAE,kBAAkB,CAAA;QACrC,YAAY,EAAE,SAAS,CACnB,OAAO,GACP,WAAW,GACX,0BAA0B,GAC1B,kBAAkB,CACrB,EAAE,CAAA;KACJ,CAAA;IACD,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAC/C,MAAM,MAAM,gBAAgB,GAAG;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAEjD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,KAAK,CAAC;QACb,OAAO,EAAE,MAAM,CAAA;QACf;;;;;;;;;WASG;QACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;QACrB,eAAe,EAAE,OAAO,CAAA;QACxB;;;;WAIG;QACH,YAAY,EAAE,QAAQ,GAAG,YAAY,CAAA;QACrC;;;;;;;;;;;WAWG;QACH,MAAM,EAAE,SAAS,GAAG,mBAAmB,GAAG,QAAQ,CAAA;QAClD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;QAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,sDAAsD;QACtD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;QACtB,gEAAgE;QAChE,QAAQ,EAAE,MAAM,EAAE,CAAA;QAClB;;;WAGG;QACH,KAAK,EAAE,MAAM,EAAE,CAAA;QACf;;;;;;WAMG;QACH,UAAU,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAClD,CAAC,CAAA;CACH,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,CAAA;IACrC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,sBAAsB,GAC9B,YAAY,GACZ,gBAAgB,GAChB,SAAS,GACT,SAAS,GACT,cAAc,GACd,SAAS,GACT,QAAQ,CAAA;AAEZ;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,OAAO,GAAG,oBAAoB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxF,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAClE,CAAA;AAED,MAAM,MAAM,kBAAkB,GAC1B;IACE,MAAM,EAAE,YAAY,CAAA;IACpB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;;;OAMG;IACH,SAAS,EAAE,OAAO,iBAAiB,EAAE,SAAS,CAAA;IAC9C,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACtC,KAAK,EAAE,YAAY,CAAA;CACpB,GACD;IAAE,MAAM,EAAE,sBAAsB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IACE;;;;;;;;OAQG;IACH,MAAM,EAAE,WAAW,CAAA;IACnB,UAAU,EAAE,OAAO,CAAA;CACpB,GACD;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAE3E,MAAM,MAAM,uBAAuB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAC/E,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC5C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAAA;CAAE,GAC5D;IAAE,MAAM,EAAE,eAAe,CAAA;CAAE,CAAA;AAE/B,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAClE,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAA;AAE9C,MAAM,MAAM,kBAAkB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AACrE,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CACjF,CAAA;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhD,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,WAAW,EAAE,CAAA;IACtB;;;;;;;;;;;;;OAaG;IACH,MAAM,EAAE,YAAY,GAAG,UAAU,GAAG,WAAW,CAAA;CAChD,CAAA;AAOD,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAAE,OAAO,EAAE,YAAY,CAAA;CAAE,CAAA;AAU1D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACtC,WAAW,EAAE,mBAAmB,CAAA;IAChC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;CAC7B,CAAA;AAKD,MAAM,MAAM,cAAc,GAAG;IAC3B,kBAAkB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,mBAAmB,CAAA;KAAE,CAAA;IAC3D,eAAe,EAAE;QAAE,GAAG,EAAE,eAAe,CAAC;QAAC,GAAG,EAAE,gBAAgB,CAAA;KAAE,CAAA;IAChE,iBAAiB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;IACzD,iBAAiB,EAAE;QAAE,GAAG,EAAE,iBAAiB,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;IACtE,wBAAwB,EAAE;QAAE,GAAG,EAAE,uBAAuB,CAAC;QAAC,GAAG,EAAE,wBAAwB,CAAA;KAAE,CAAA;IACzF,cAAc,EAAE;QAAE,GAAG,EAAE,cAAc,CAAC;QAAC,GAAG,EAAE,eAAe,CAAA;KAAE,CAAA;IAC7D,mBAAmB,EAAE;QAAE,GAAG,EAAE,kBAAkB,CAAC;QAAC,GAAG,EAAE,mBAAmB,CAAA;KAAE,CAAA;IAC1E,0BAA0B,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,0BAA0B,CAAA;KAAE,CAAA;IAC1E,iBAAiB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;IACzD,iBAAiB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;CAC1D,CAAA;AAED,MAAM,MAAM,OAAO,GAAG,MAAM,cAAc,CAAA;AAC1C,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AACpE,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AAMrE,MAAM,MAAM,OAAO,GACf,UAAU,GACV,YAAY,GACZ,WAAW,GACX,UAAU,GACV,SAAS,GACT,MAAM,GACN,OAAO,CAAA;AAEX,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,OAAO,iBAAiB,EAAE,SAAS,CAAA;CAChD,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,EAAE,OAAO,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,CAAC,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAA;AAC3E,MAAM,MAAM,aAAa,GAAG;IAAE,CAAC,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AACzF,MAAM,MAAM,oBAAoB,GAAG;IACjC,CAAC,EAAE,kBAAkB,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,WAAW,GAAG,gBAAgB,CAAA;IACvC,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB,CAAA;AACD,MAAM,MAAM,gBAAgB,GAAG;IAAE,CAAC,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAA;AACvF,MAAM,MAAM,cAAc,GAAG;IAAE,CAAC,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAA;AAEjE,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,aAAa,GACb,aAAa,GACb,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,CAAA;AAElB,MAAM,MAAM,QAAQ,GAAG;IAAE,CAAC,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAA;AAC5E,MAAM,MAAM,YAAY,GAAG;IAAE,CAAC,EAAE,SAAS,CAAA;CAAE,CAAA;AAC3C,MAAM,MAAM,WAAW,GAAG;IAAE,CAAC,EAAE,QAAQ,CAAA;CAAE,CAAA;AAEzC,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,CAAA;AAI/D,OAAO,CAAC,MAAM,UAAU,EAAE,OAAO,MAAM,CAAA;AACvC,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,YAAY,CAAA;CAAE,CAAA;AAEzE,MAAM,MAAM,WAAW,GACnB,aAAa,GACb,iBAAiB,GACjB,QAAQ,GACR,gBAAgB,GAChB,SAAS,CAAA;AAEb,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAA;IACX;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,MAAM,EAAE,WAAW,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,QAAQ,GAAG,gBAAgB,GAAG,SAAS,CAAA;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAID,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAC/C,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,UAAU,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAClD,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAAA;AAE7D,MAAM,MAAM,kBAAkB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAChD,MAAM,MAAM,mBAAmB,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtE,MAAM,MAAM,aAAa,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAC3C,MAAM,MAAM,cAAc,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAA;AAElD,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAAA;AAI3D,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,gBAAgB,GAChB,aAAa,GACb,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,aAAa,CAAA;AAEjB,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,KAAK,EAAE,UAAU,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AASD,OAAO,EACL,QAAQ,EACR,UAAU,EACV,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,KAAK,UAAU,GAChB,MAAM,aAAa,CAAA"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,SAAS,GACT,QAAQ,GACR,cAAc,GACd,SAAS,GACT,cAAc,GACd,SAAS,GACT,UAAU,CAAA;AAEd,MAAM,MAAM,QAAQ,GAAG;IACrB,KAAK,EAAE;QACL,IAAI,EAAE,YAAY,CAAA;QAClB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,CAAA;CACF,CAAA;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAA;AAEjE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,gBAAgB,EAAE,OAAO,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;OAIG;IACH,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB;;;;;;;;OAQG;IACH,KAAK,EAAE,MAAM,EAAE,CAAA;IACf;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,kBAAkB,CAAA;CAChC,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAC5C,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;IACtB,WAAW,EAAE;QACX,aAAa,EAAE,KAAK,CAAA;QACpB,iBAAiB,EAAE,kBAAkB,CAAA;QACrC,YAAY,EAAE,SAAS,CACnB,OAAO,GACP,WAAW,GACX,0BAA0B,GAC1B,kBAAkB,CACrB,EAAE,CAAA;KACJ,CAAA;IACD,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAC/C,MAAM,MAAM,gBAAgB,GAAG;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAEjD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,KAAK,CAAC;QACb,OAAO,EAAE,MAAM,CAAA;QACf;;;;;;;;;WASG;QACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;QACrB,eAAe,EAAE,OAAO,CAAA;QACxB;;;;WAIG;QACH,YAAY,EAAE,QAAQ,GAAG,YAAY,CAAA;QACrC;;;;;;;;;;;WAWG;QACH,MAAM,EAAE,SAAS,GAAG,mBAAmB,GAAG,QAAQ,CAAA;QAClD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;QAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;QAC1B,sDAAsD;QACtD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;QACtB,gEAAgE;QAChE,QAAQ,EAAE,MAAM,EAAE,CAAA;QAClB;;;WAGG;QACH,KAAK,EAAE,MAAM,EAAE,CAAA;QACf;;;;;;WAMG;QACH,UAAU,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAClD,CAAC,CAAA;CACH,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,CAAA;IACrC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;;;;;;OAYG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,sBAAsB,GAC9B,YAAY,GACZ,gBAAgB,GAChB,SAAS,GACT,SAAS,GACT,cAAc,GACd,SAAS,GACT,QAAQ,CAAA;AAEZ;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,OAAO,GAAG,oBAAoB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxF,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAClE,CAAA;AAED,MAAM,MAAM,kBAAkB,GAC1B;IACE,MAAM,EAAE,YAAY,CAAA;IACpB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;;;OAMG;IACH,SAAS,EAAE,OAAO,iBAAiB,EAAE,SAAS,CAAA;IAC9C,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACtC,KAAK,EAAE,YAAY,CAAA;CACpB,GACD;IAAE,MAAM,EAAE,sBAAsB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACrD;IACE;;;;;;;;OAQG;IACH,MAAM,EAAE,WAAW,CAAA;IACnB,UAAU,EAAE,OAAO,CAAA;CACpB,GACD;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAE3E,MAAM,MAAM,uBAAuB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAC/E,MAAM,MAAM,wBAAwB,GAChC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC5C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CAAA;CAAE,GAC5D;IAAE,MAAM,EAAE,eAAe,CAAA;CAAE,CAAA;AAE/B;;;;;;;;GAQG;AACH,MAAM,MAAM,0BAA0B,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAC/D,MAAM,MAAM,2BAA2B,GACnC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAA;AAEzB;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AACD,MAAM,MAAM,kBAAkB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAA;AAE7C,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAClE,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAA;AAE9C,MAAM,MAAM,kBAAkB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AACrE,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CACjF,CAAA;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,EAAE,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhD,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,WAAW,EAAE,CAAA;IACtB;;;;;;;;;;;;;OAaG;IACH,MAAM,EAAE,YAAY,GAAG,UAAU,GAAG,WAAW,CAAA;CAChD,CAAA;AAOD,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAAE,OAAO,EAAE,YAAY,CAAA;CAAE,CAAA;AAU1D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACtC,WAAW,EAAE,mBAAmB,CAAA;IAChC,OAAO,EAAE,YAAY,GAAG,IAAI,CAAA;CAC7B,CAAA;AAKD,MAAM,MAAM,cAAc,GAAG;IAC3B,kBAAkB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,mBAAmB,CAAA;KAAE,CAAA;IAC3D,eAAe,EAAE;QAAE,GAAG,EAAE,eAAe,CAAC;QAAC,GAAG,EAAE,gBAAgB,CAAA;KAAE,CAAA;IAChE,iBAAiB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;IACzD,iBAAiB,EAAE;QAAE,GAAG,EAAE,iBAAiB,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;IACtE,wBAAwB,EAAE;QAAE,GAAG,EAAE,uBAAuB,CAAC;QAAC,GAAG,EAAE,wBAAwB,CAAA;KAAE,CAAA;IACzF,cAAc,EAAE;QAAE,GAAG,EAAE,cAAc,CAAC;QAAC,GAAG,EAAE,eAAe,CAAA;KAAE,CAAA;IAC7D,6BAA6B,EAAE;QAC7B,GAAG,EAAE,0BAA0B,CAAA;QAC/B,GAAG,EAAE,2BAA2B,CAAA;KACjC,CAAA;IACD,iBAAiB,EAAE;QAAE,GAAG,EAAE,iBAAiB,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;IACtE,mBAAmB,EAAE;QAAE,GAAG,EAAE,kBAAkB,CAAC;QAAC,GAAG,EAAE,mBAAmB,CAAA;KAAE,CAAA;IAC1E,0BAA0B,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,0BAA0B,CAAA;KAAE,CAAA;IAC1E,iBAAiB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;IACzD,iBAAiB,EAAE;QAAE,GAAG,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,kBAAkB,CAAA;KAAE,CAAA;CAC1D,CAAA;AAED,MAAM,MAAM,OAAO,GAAG,MAAM,cAAc,CAAA;AAC1C,MAAM,MAAM,UAAU,CAAC,CAAC,SAAS,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AACpE,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AAMrE,MAAM,MAAM,OAAO,GACf,UAAU,GACV,YAAY,GACZ,WAAW,GACX,UAAU,GACV,SAAS,GACT,MAAM,GACN,OAAO;AACT;;;;;;GAMG;GACD,YAAY;AACd;;;;;;;GAOG;GACD,SAAS,CAAA;AAEb,MAAM,MAAM,QAAQ,GAAG;IACrB,EAAE,EAAE,MAAM,CAAA;IACV,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,OAAO,iBAAiB,EAAE,SAAS,CAAA;CAChD,CAAA;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,CAAC,EAAE,OAAO,CAAA;IACV,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,IAAI,EAAE,SAAS,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAAE,CAAC,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,CAAA;AAC3E,MAAM,MAAM,aAAa,GAAG;IAAE,CAAC,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AACzF,MAAM,MAAM,oBAAoB,GAAG;IACjC,CAAC,EAAE,kBAAkB,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,WAAW,GAAG,gBAAgB,CAAA;IACvC,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB,CAAA;AACD,MAAM,MAAM,gBAAgB,GAAG;IAAE,CAAC,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAA;AACvF,MAAM,MAAM,cAAc,GAAG;IAAE,CAAC,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAA;AACjE;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,CAAC,EAAE,sBAAsB,CAAA;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;CACX,CAAA;AAED,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,aAAa,GACb,aAAa,GACb,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,GACd,uBAAuB,CAAA;AAE3B,MAAM,MAAM,QAAQ,GAAG;IAAE,CAAC,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAA;AAC5E,MAAM,MAAM,YAAY,GAAG;IAAE,CAAC,EAAE,SAAS,CAAA;CAAE,CAAA;AAC3C,MAAM,MAAM,WAAW,GAAG;IAAE,CAAC,EAAE,QAAQ,CAAA;CAAE,CAAA;AACzC;;;;;;;;GAQG;AACH,MAAM,MAAM,YAAY,GAAG;IAAE,CAAC,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CAAE,CAAA;AAE7D,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CAAA;AAI9E,OAAO,CAAC,MAAM,UAAU,EAAE,OAAO,MAAM,CAAA;AACvC,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,EAAE,YAAY,CAAA;CAAE,CAAA;AAEzE,MAAM,MAAM,WAAW,GACnB,aAAa,GACb,iBAAiB,GACjB,QAAQ,GACR,gBAAgB,GAChB,SAAS,CAAA;AAEb,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAA;IACX;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,MAAM,EAAE,WAAW,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,QAAQ,GAAG,gBAAgB,GAAG,SAAS,CAAA;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB,CAAA;AAID,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;AAC/C,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,UAAU,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAA;AAClD,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAAA;AAE7D,MAAM,MAAM,kBAAkB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAChD,MAAM,MAAM,mBAAmB,GAAG;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtE,MAAM,MAAM,aAAa,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAC3C,MAAM,MAAM,cAAc,GAAG;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAA;AAElD,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,EAAE,YAAY,EAAE,CAAA;CAAE,CAAA;AAI3D,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,gBAAgB,GAChB,aAAa,GACb,kBAAkB,GAClB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,aAAa,CAAA;AAEjB,MAAM,MAAM,UAAU,GAAG;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,KAAK,EAAE,UAAU,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AASD,OAAO,EACL,QAAQ,EACR,UAAU,EACV,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,KAAK,UAAU,GAChB,MAAM,aAAa,CAAA"}

package/dist/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,mEAAmE;AACnE,iEAAiE;AACjE,iEAAiE;AAgiBjE,qEAAqE;AACrE,EAAE;AACF,qEAAqE;AACrE,4DAA4D;AAC5D,mEAAmE;AACnE,qCAAqC;AAErC,OAAO,EACL,QAAQ,EACR,UAAU,EACV,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,cAAc,GAEf,MAAM,aAAa,CAAA","sourcesContent":["// ── LAP — LLui Agent Protocol ────────────────────────────────────\n// JSON over HTTPS between the llui-agent bridge (MCP side) and the\n// @llui/agent server library mounted in the developer's backend.\n// See docs/superpowers/specs/2026-04-19-llui-agent-design.md §7.\n\nexport type LapErrorCode =\n  | 'auth-failed'\n  | 'revoked'\n  | 'paused'\n  | 'rate-limited'\n  | 'invalid'\n  | 'schema-error'\n  | 'timeout'\n  | 'internal'\n\nexport type LapError = {\n  error: {\n    code: LapErrorCode\n    detail?: string\n    retryAfterMs?: number\n  }\n}\n\n/**\n * Who can dispatch a Msg variant.\n *\n * - `'shared'` (default) — both UI bindings and the agent can dispatch.\n * - `'human-only'` — UI-only. Agent calls to `/message` for these variants\n *   are rejected with `LapMessageRejectReason: 'human-only'`. Use for\n *   internal UI events (focus/blur, scroll, hover) the LLM has no business\n *   triggering.\n * - `'agent-only'` — no UI binding exists. Reserved for LLM-driven flows\n *   like batch operations or \"explain this state\" introspection variants.\n *   Lint warns if a view references one via `send({ type: 'X' })`.\n *\n * JSDoc sugar: `@humanOnly` → `'human-only'`, `@agentOnly` → `'agent-only'`.\n * Absence of either tag → `'shared'`. The two tags are mutually exclusive\n * (enforced by `llui/agent-exclusive-annotations` ESLint rule).\n */\nexport type DispatchMode = 'shared' | 'human-only' | 'agent-only'\n\nexport type MessageAnnotations = {\n  intent: string | null\n  alwaysAffordable: boolean\n  requiresConfirm: boolean\n  dispatchMode: DispatchMode\n  /**\n   * Concrete copy-paste example dispatches authored as `@example`\n   * JSDoc tags. Multiple tags on one variant become multiple\n   * entries (mix typical / edge cases without nesting strings).\n   */\n  examples: string[]\n  /**\n   * Non-blocking caution authored as `@warning`. Distinct from\n   * `requiresConfirm` (runtime user gate); this informs the LLM at\n   * affordance time so it can decide whether the dispatch's\n   * downstream is acceptable.\n   */\n  warning: string | null\n  /**\n   * Effect kinds this variant emits when dispatched, declared via\n   * `@emits(\"kind1\", \"kind2\")`. Lets the agent reason about side\n   * effects (cloud writes, analytics, persistent state changes)\n   * before dispatching, and chunk multi-step flows accordingly\n   * (\"don't dispatch X 100 times — each one fires cloud/save\").\n   * Empty when the variant doesn't emit effects or the author hasn't\n   * annotated it yet.\n   */\n  emits: string[]\n  /**\n   * Boolean predicate authored as `@routeGated(\"expr\")` JSDoc, with\n   * `state` bound at evaluation time. The variant only surfaces in\n   * `list_actions` when the predicate returns true. Compile-time\n   * alternative to `agentAffordances(state) => Msg[]` for the common\n   * case of \"this Msg is reachable when state.X looks like Y.\" Null\n   * when the variant has no `@routeGated` tag (default affordance\n   * behavior applies).\n   */\n  routeGate?: string | null\n}\n\nexport type MessageSchemaEntry = {\n  payloadSchema: object\n  annotations: MessageAnnotations\n}\n\nexport type LapDescribeResponse = {\n  name: string\n  version: string\n  stateSchema: object\n  messages: Record<string, MessageSchemaEntry>\n  docs: AgentDocs | null\n  conventions: {\n    dispatchModel: 'TEA'\n    confirmationModel: 'runtime-mediated'\n    readSurfaces: readonly (\n      | 'state'\n      | 'query_dom'\n      | 'describe_visible_content'\n      | 'describe_context'\n    )[]\n  }\n  schemaHash: string\n}\n\nexport type LapStateRequest = { path?: string }\nexport type LapStateResponse = { state: unknown }\n\nexport type LapActionsResponse = {\n  actions: Array<{\n    variant: string\n    /**\n     * Human-readable phrase from `@intent(\"…\")`, or `null` when the\n     * variant has no `@intent` annotation. Callers that surface\n     * affordances to an LLM should treat `null` as \"this action is\n     * undocumented\" — neither synthesise a label from the variant name\n     * nor invent one. Pre-`@intent` variants would previously surface\n     * as `intent: \"<variant>\"` here, which made unannotated actions\n     * indistinguishable from properly-labelled ones; emitting `null`\n     * keeps the gap visible.\n     */\n    intent: string | null\n    requiresConfirm: boolean\n    /**\n     * `'shared'` — both UI and agent can dispatch. `'agent-only'` — no UI\n     * binding exists; the agent is the sole dispatcher. `'human-only'`\n     * variants never appear here (filtered before serialization).\n     */\n    dispatchMode: 'shared' | 'agent-only'\n    /**\n     * Where this affordance came from:\n     *   - `'binding'`           — a tagged event handler is currently\n     *     mounted in the rendered DOM.\n     *   - `'always-affordable'` — the app's `agentAffordances(state)`\n     *     hook listed it as available right now.\n     *   - `'schema'`            — neither of the above; the variant\n     *     is in the Msg union and annotated `@agentOnly`. The\n     *     `payloadHint` carries a synthesized example from the\n     *     compiler-derived field types — copy-paste-ready for\n     *     `send_message`. Bulk-edit operations land here.\n     */\n    source: 'binding' | 'always-affordable' | 'schema'\n    selectorHint: string | null\n    payloadHint: object | null\n    /** Cautionary text from `@warning` JSDoc, or null. */\n    warning: string | null\n    /** Concrete examples from `@example` JSDoc, in source order. */\n    examples: string[]\n    /**\n     * Effect kinds this variant emits, from `@emits(\"k1\", \"k2\")`.\n     * Empty when not annotated.\n     */\n    emits: string[]\n    /**\n     * Per-field guidance lifted from `@should(\"…\")` JSDoc on payload\n     * fields. Path is dot/bracket notation rooted at the payload (e.g.\n     * `\"cells[].meta\"`). Surfaces hints that would otherwise be buried\n     * inside the schema tree, so callers can read them alongside\n     * `examples` without diving into `description.messages.variants`.\n     */\n    fieldHints: Array<{ path: string; hint: string }>\n  }>\n}\n\nexport type LapMessageRequest = {\n  msg: { type: string; [k: string]: unknown }\n  reason?: string\n  /**\n   * Backpressure contract for how long `/message` waits before returning:\n   * - `drained` (default): dispatch, then loop until the message queue is\n   *   idle for `drainQuietMs` ms or the 5s hard cap trips. Captures any\n   *   effect round-trips (http/delay/debounce) that feed back as messages.\n   * - `idle`: dispatch + flush + one microtask yield. Captures the\n   *   synchronous update cycle but not async effects.\n   * - `none`: dispatch and return without flushing. For high-throughput\n   *   fire-and-forget dispatch.\n   */\n  waitFor?: 'drained' | 'idle' | 'none'\n  /**\n   * Quiescence window when `waitFor === 'drained'`. Drain completes when\n   * no new update cycle fires for this many ms. Default 100ms — long\n   * enough for a localhost HTTP round-trip, short enough to be\n   * imperceptible. Ignored for `idle` / `none`.\n   */\n  drainQuietMs?: number\n  /**\n   * Hard cap on total wait time. When `waitFor === 'drained'`, this is\n   * the upper bound on how long the drain loop can run; if reached, the\n   * response carries `drain.timedOut: true` with partial results. For\n   * `pending-confirmation` messages, this is how long to wait for\n   * the user's confirm/reject. Default 5_000ms.\n   */\n  timeoutMs?: number\n  /**\n   * Include the full post-drain `stateAfter` snapshot in the response.\n   * Default `false` — the response carries `stateDiff` only and the\n   * caller applies it to the prior snapshot (from connect/observe). For\n   * apps with non-trivial state, the diff is orders of magnitude\n   * smaller than the full state, and resending the snapshot on every\n   * dispatch wastes bandwidth and (for LLM callers) context budget.\n   *\n   * Set `true` when the caller doesn't track state incrementally and\n   * wants the snapshot back. The legacy `confirmed` and `wait` paths\n   * always carry `stateAfter` because their flow is asynchronous and\n   * a diff would be ambiguous.\n   */\n  includeState?: boolean\n}\n\nexport type LapMessageRejectReason =\n  | 'human-only'\n  | 'user-cancelled'\n  | 'timeout'\n  | 'invalid'\n  | 'schema-error'\n  | 'revoked'\n  | 'paused'\n\n/**\n * Drain metadata attached to `dispatched` / `confirmed` responses.\n * `effectsObserved` counts update-cycle commits (not individual effects) —\n * it's a proxy for \"how much activity happened during the drain window.\"\n * `errors` surfaces sync throws from `onEffect` and unhandled rejections\n * from effect handlers that fired during the drain window, so the LLM\n * can see when an HTTP handler crashed silently.\n *\n * `warnings` surfaces non-blocking observations from the schema\n * validator — typically `untyped-field` flags raised in strict mode\n * when the agent provided a value for an `'unknown'`-typed field. The\n * dispatch landed (we accepted the value) but the validator couldn't\n * structurally check it, so the agent learns of the gap and can\n * tighten the next try if needed. Lenient mode never emits warnings;\n * the field is omitted in that case.\n */\nexport type LapDrainMeta = {\n  effectsObserved: number\n  durationMs: number\n  timedOut: boolean\n  errors: Array<{ kind: 'error' | 'unhandledrejection'; message: string; stack?: string }>\n  warnings?: Array<{ path: string; code: string; message: string }>\n}\n\nexport type LapMessageResponse =\n  | {\n      status: 'dispatched'\n      /**\n       * Full post-drain state snapshot. Present only when the caller\n       * passed `includeState: true` in the request — by default,\n       * `stateDiff` is the only state-shaped field on the response\n       * because callers can apply the diff to the prior snapshot from\n       * `connect` / `observe`. See `LapMessageRequest.includeState`.\n       */\n      stateAfter?: unknown\n      /**\n       * Structural diff from pre-dispatch state to post-drain state,\n       * in JSON-Patch shape (RFC 6902 subset: `add`, `remove`,\n       * `replace`). Empty when the dispatch produced no observable\n       * state change. The default state surface for callers — apply\n       * incrementally to the snapshot from `connect`/`observe`.\n       */\n      stateDiff: import('./state-diff.js').StateDiff\n      actions: LapActionsResponse['actions']\n      drain: LapDrainMeta\n    }\n  | { status: 'pending-confirmation'; confirmId: string }\n  | {\n      /**\n       * The user approved a `pending-confirmation` message. `stateAfter`\n       * is the state snapshot captured when the approve was resolved;\n       * effects produced by the approved dispatch may still be in\n       * flight. The LLM should follow up with an `observe` call to\n       * pick up a drained view and fresh actions — by design the\n       * confirm path doesn't carry drain semantics because approval\n       * can arrive arbitrarily later than the original request.\n       */\n      status: 'confirmed'\n      stateAfter: unknown\n    }\n  | { status: 'rejected'; reason: LapMessageRejectReason; detail?: string }\n\nexport type LapConfirmResultRequest = { confirmId: string; timeoutMs?: number }\nexport type LapConfirmResultResponse =\n  | { status: 'confirmed'; stateAfter: unknown }\n  | { status: 'rejected'; reason: 'user-cancelled' | 'timeout' }\n  | { status: 'still-pending' }\n\nexport type LapWaitRequest = { path?: string; timeoutMs?: number }\nexport type LapWaitResponse =\n  | { status: 'changed'; stateAfter: unknown }\n  | { status: 'timeout'; stateAfter: unknown }\n\nexport type LapQueryDomRequest = { name: string; multiple?: boolean }\nexport type LapQueryDomResponse = {\n  elements: Array<{ text: string; attrs: Record<string, string>; path: number[] }>\n}\n\nexport type OutlineNode =\n  | { kind: 'heading'; level: number; text: string }\n  | { kind: 'text'; text: string }\n  | { kind: 'list'; items: OutlineNode[] }\n  | { kind: 'item'; text: string; children?: OutlineNode[] }\n  | { kind: 'button'; text: string; disabled: boolean; actionVariant: string | null }\n  | { kind: 'input'; label: string | null; value: string | null; type: string }\n  | { kind: 'link'; text: string; href: string }\n\nexport type LapDescribeVisibleResponse = {\n  outline: OutlineNode[]\n  /**\n   * Where the outline came from:\n   *   - `'data-agent'`: the app has `data-agent`-tagged zones and the\n   *     walker scoped the outline to them. The author chose what to\n   *     surface; trust the result.\n   *   - `'fallback'`: no `data-agent` tags exist; the walker fell back\n   *     to a depth- and count-limited semantic walk of the entire\n   *     root element. Useful for first-pass dogfood targets that\n   *     haven't tagged their views.\n   *   - `'truncated'`: same as `'fallback'` but the cap (200 nodes)\n   *     was hit before the walk finished. The visible content beyond\n   *     that point is not represented; reach for `query_dom` or state\n   *     reads if you need more.\n   */\n  source: 'data-agent' | 'fallback' | 'truncated'\n}\n\n// ── App + context documentation ──────────────────────────────────\n// Static app-level docs (authored once on the component record) and\n// dynamic per-state context docs (pure function of state, served by\n// `/lap/v1/context`). See spec §5.4.\n\nexport type AgentDocs = {\n  purpose: string\n  overview?: string\n  cautions?: string[]\n  /**\n   * Free-form idiomatic-usage examples authored by the app: typical\n   * sequences of dispatches the LLM should know about, like \"to\n   * delete a saved matrix: dispatch Confirm/Ask first, then on\n   * approve dispatch Cloud/Delete.\" Each entry is one example;\n   * order is up to the author.\n   */\n  examples?: string[]\n}\n\nexport type AgentContext = {\n  summary: string\n  hints?: string[]\n  cautions?: string[]\n}\n\nexport type LapContextResponse = { context: AgentContext }\n\n// ── Unified observe ──────────────────────────────────────────────\n// Single-call bootstrap. Replaces the get_state + list_actions +\n// describe_app trio for the common \"what can I see, what can I do\"\n// question. Returns the dynamic state + actions slice alongside the\n// static description (name/version/messages/docs) and any\n// state-derived context so one round-trip gives the LLM everything it\n// needs to decide its next action.\n\nexport type LapObserveResponse = {\n  state: unknown\n  actions: LapActionsResponse['actions']\n  description: LapDescribeResponse\n  context: AgentContext | null\n}\n\n// LAP endpoint catalog — a compile-time map binding each path to its\n// request/response shape. Useful for the bridge's dispatcher and for\n// typed test helpers.\nexport type LapEndpointMap = {\n  '/lap/v1/describe': { req: null; res: LapDescribeResponse }\n  '/lap/v1/state': { req: LapStateRequest; res: LapStateResponse }\n  '/lap/v1/actions': { req: null; res: LapActionsResponse }\n  '/lap/v1/message': { req: LapMessageRequest; res: LapMessageResponse }\n  '/lap/v1/confirm-result': { req: LapConfirmResultRequest; res: LapConfirmResultResponse }\n  '/lap/v1/wait': { req: LapWaitRequest; res: LapWaitResponse }\n  '/lap/v1/query-dom': { req: LapQueryDomRequest; res: LapQueryDomResponse }\n  '/lap/v1/describe-visible': { req: null; res: LapDescribeVisibleResponse }\n  '/lap/v1/context': { req: null; res: LapContextResponse }\n  '/lap/v1/observe': { req: null; res: LapObserveResponse }\n}\n\nexport type LapPath = keyof LapEndpointMap\nexport type LapRequest<P extends LapPath> = LapEndpointMap[P]['req']\nexport type LapResponse<P extends LapPath> = LapEndpointMap[P]['res']\n\n// ── Relay WS frames ──────────────────────────────────────────────\n// Bidirectional framing between the LLui runtime in the browser and\n// the @llui/agent server over /agent/ws. See spec §10.5.\n\nexport type LogKind =\n  | 'proposed'\n  | 'dispatched'\n  | 'confirmed'\n  | 'rejected'\n  | 'blocked'\n  | 'read'\n  | 'error'\n\nexport type LogEntry = {\n  id: string\n  at: number\n  kind: LogKind\n  variant?: string\n  intent?: string\n  detail?: string\n  /**\n   * Structural diff from pre-dispatch state to post-drain state, in\n   * JSON-Patch shape. Populated only for `kind: 'dispatched'` entries\n   * — read entries (get_state / list_actions / observe / …) don't\n   * mutate state, and an empty diff would just be noise. Lets the\n   * agent reconstruct what each past action did without re-fetching\n   * state snapshots.\n   */\n  stateDiff?: import('./state-diff.js').StateDiff\n}\n\nexport type HelloFrame = {\n  t: 'hello'\n  appName: string\n  appVersion: string\n  msgSchema: Record<string, MessageSchemaEntry>\n  stateSchema: object\n  affordancesSample: object[]\n  docs: AgentDocs | null\n  schemaHash: string\n}\n\nexport type RpcReplyFrame = { t: 'rpc-reply'; id: string; result: unknown }\nexport type RpcErrorFrame = { t: 'rpc-error'; id: string; code: string; detail?: string }\nexport type ConfirmResolvedFrame = {\n  t: 'confirm-resolved'\n  confirmId: string\n  outcome: 'confirmed' | 'user-cancelled'\n  stateAfter?: unknown\n}\nexport type StateUpdateFrame = { t: 'state-update'; path: string; stateAfter: unknown }\nexport type LogAppendFrame = { t: 'log-append'; entry: LogEntry }\n\nexport type ClientFrame =\n  | HelloFrame\n  | RpcReplyFrame\n  | RpcErrorFrame\n  | ConfirmResolvedFrame\n  | StateUpdateFrame\n  | LogAppendFrame\n\nexport type RpcFrame = { t: 'rpc'; id: string; tool: string; args: unknown }\nexport type RevokedFrame = { t: 'revoked' }\nexport type ActiveFrame = { t: 'active' }\n\nexport type ServerFrame = RpcFrame | RevokedFrame | ActiveFrame\n\n// ── Tokens + pairing ─────────────────────────────────────────────\n\ndeclare const TokenBrand: unique symbol\nexport type AgentToken = string & { readonly [TokenBrand]: 'AgentToken' }\n\nexport type TokenStatus =\n  | 'awaiting-ws'\n  | 'awaiting-claude'\n  | 'active'\n  | 'pending-resume'\n  | 'revoked'\n\nexport type TokenRecord = {\n  tid: string\n  /**\n   * SHA-256 hex of the bearer token. The plaintext token is never\n   * stored — incoming requests hash their `Authorization: Bearer …`\n   * value and look up by this field. Hash-only storage keeps a leaked\n   * store from being a live-token leak. Mirrors the standard session-\n   * cookie / API-key pattern.\n   */\n  tokenHash: string\n  uid: string | null\n  status: TokenStatus\n  createdAt: number\n  /**\n   * Hard-expiry in milliseconds since epoch. The mint endpoint sets\n   * this to `now + hardExpiryMs`; the verify path rejects requests\n   * presenting tokens whose record has `expiresAt <= now`. Pre-0.0.35\n   * the equivalent value lived inside the JWT payload as `exp` (in\n   * seconds); the new opaque-token flow keeps it server-side so the\n   * record is the single source of truth.\n   */\n  expiresAt: number\n  lastSeenAt: number\n  pendingResumeUntil: number | null\n  origin: string\n  label: string | null\n}\n\nexport type AgentSession = {\n  tid: string\n  label: string\n  status: 'active' | 'pending-resume' | 'revoked'\n  createdAt: number\n  lastSeenAt: number\n}\n\n// HTTP envelopes for the mint/resume/revoke/sessions endpoints (non-LAP).\n\nexport type MintRequest = Record<string, never>\nexport type MintResponse = {\n  token: AgentToken\n  tid: string\n  wsUrl: string\n  lapUrl: string\n  expiresAt: number\n}\n\nexport type ResumeListRequest = { tids: string[] }\nexport type ResumeListResponse = { sessions: AgentSession[] }\n\nexport type ResumeClaimRequest = { tid: string }\nexport type ResumeClaimResponse = { token: AgentToken; wsUrl: string }\n\nexport type RevokeRequest = { tid: string }\nexport type RevokeResponse = { status: 'revoked' }\n\nexport type SessionsResponse = { sessions: AgentSession[] }\n\n// ── Audit ────────────────────────────────────────────────────────\n\nexport type AuditEvent =\n  | 'mint'\n  | 'claim'\n  | 'resume'\n  | 'revoke'\n  | 'lap-call'\n  | 'msg-dispatched'\n  | 'msg-blocked'\n  | 'confirm-proposed'\n  | 'confirm-approved'\n  | 'confirm-rejected'\n  | 'rate-limited'\n  | 'auth-failed'\n\nexport type AuditEntry = {\n  at: number\n  tid: string | null\n  uid: string | null\n  event: AuditEvent\n  detail: object\n}\n\n// ── Codec exports ─────────────────────────────────────────────────\n//\n// Re-exported here so consumers can `import { ..., type AgentCodec }\n// from '@llui/agent/protocol'`. The implementation lives in\n// `./codecs.ts` to keep the protocol type surface together but the\n// runtime registry/walkers separate.\n\nexport {\n  WIRE_TAG,\n  WIRE_VALUE,\n  CodecRegistry,\n  isoDateCodec,\n  epochMillisCodec,\n  makeDefaultCodecs,\n  encodeForWire,\n  decodeFromWire,\n  type AgentCodec,\n} from './codecs.js'\n"]}
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,mEAAmE;AACnE,iEAAiE;AACjE,iEAAiE;AAynBjE,qEAAqE;AACrE,EAAE;AACF,qEAAqE;AACrE,4DAA4D;AAC5D,mEAAmE;AACnE,qCAAqC;AAErC,OAAO,EACL,QAAQ,EACR,UAAU,EACV,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,cAAc,GAEf,MAAM,aAAa,CAAA","sourcesContent":["// ── LAP — LLui Agent Protocol ────────────────────────────────────\n// JSON over HTTPS between the llui-agent bridge (MCP side) and the\n// @llui/agent server library mounted in the developer's backend.\n// See docs/superpowers/specs/2026-04-19-llui-agent-design.md §7.\n\nexport type LapErrorCode =\n  | 'auth-failed'\n  | 'revoked'\n  | 'paused'\n  | 'rate-limited'\n  | 'invalid'\n  | 'schema-error'\n  | 'timeout'\n  | 'internal'\n\nexport type LapError = {\n  error: {\n    code: LapErrorCode\n    detail?: string\n    retryAfterMs?: number\n  }\n}\n\n/**\n * Who can dispatch a Msg variant.\n *\n * - `'shared'` (default) — both UI bindings and the agent can dispatch.\n * - `'human-only'` — UI-only. Agent calls to `/message` for these variants\n *   are rejected with `LapMessageRejectReason: 'human-only'`. Use for\n *   internal UI events (focus/blur, scroll, hover) the LLM has no business\n *   triggering.\n * - `'agent-only'` — no UI binding exists. Reserved for LLM-driven flows\n *   like batch operations or \"explain this state\" introspection variants.\n *   Lint warns if a view references one via `send({ type: 'X' })`.\n *\n * JSDoc sugar: `@humanOnly` → `'human-only'`, `@agentOnly` → `'agent-only'`.\n * Absence of either tag → `'shared'`. The two tags are mutually exclusive\n * (enforced by `llui/agent-exclusive-annotations` ESLint rule).\n */\nexport type DispatchMode = 'shared' | 'human-only' | 'agent-only'\n\nexport type MessageAnnotations = {\n  intent: string | null\n  alwaysAffordable: boolean\n  requiresConfirm: boolean\n  dispatchMode: DispatchMode\n  /**\n   * Concrete copy-paste example dispatches authored as `@example`\n   * JSDoc tags. Multiple tags on one variant become multiple\n   * entries (mix typical / edge cases without nesting strings).\n   */\n  examples: string[]\n  /**\n   * Non-blocking caution authored as `@warning`. Distinct from\n   * `requiresConfirm` (runtime user gate); this informs the LLM at\n   * affordance time so it can decide whether the dispatch's\n   * downstream is acceptable.\n   */\n  warning: string | null\n  /**\n   * Effect kinds this variant emits when dispatched, declared via\n   * `@emits(\"kind1\", \"kind2\")`. Lets the agent reason about side\n   * effects (cloud writes, analytics, persistent state changes)\n   * before dispatching, and chunk multi-step flows accordingly\n   * (\"don't dispatch X 100 times — each one fires cloud/save\").\n   * Empty when the variant doesn't emit effects or the author hasn't\n   * annotated it yet.\n   */\n  emits: string[]\n  /**\n   * Boolean predicate authored as `@routeGated(\"expr\")` JSDoc, with\n   * `state` bound at evaluation time. The variant only surfaces in\n   * `list_actions` when the predicate returns true. Compile-time\n   * alternative to `agentAffordances(state) => Msg[]` for the common\n   * case of \"this Msg is reachable when state.X looks like Y.\" Null\n   * when the variant has no `@routeGated` tag (default affordance\n   * behavior applies).\n   */\n  routeGate?: string | null\n}\n\nexport type MessageSchemaEntry = {\n  payloadSchema: object\n  annotations: MessageAnnotations\n}\n\nexport type LapDescribeResponse = {\n  name: string\n  version: string\n  stateSchema: object\n  messages: Record<string, MessageSchemaEntry>\n  docs: AgentDocs | null\n  conventions: {\n    dispatchModel: 'TEA'\n    confirmationModel: 'runtime-mediated'\n    readSurfaces: readonly (\n      | 'state'\n      | 'query_dom'\n      | 'describe_visible_content'\n      | 'describe_context'\n    )[]\n  }\n  schemaHash: string\n}\n\nexport type LapStateRequest = { path?: string }\nexport type LapStateResponse = { state: unknown }\n\nexport type LapActionsResponse = {\n  actions: Array<{\n    variant: string\n    /**\n     * Human-readable phrase from `@intent(\"…\")`, or `null` when the\n     * variant has no `@intent` annotation. Callers that surface\n     * affordances to an LLM should treat `null` as \"this action is\n     * undocumented\" — neither synthesise a label from the variant name\n     * nor invent one. Pre-`@intent` variants would previously surface\n     * as `intent: \"<variant>\"` here, which made unannotated actions\n     * indistinguishable from properly-labelled ones; emitting `null`\n     * keeps the gap visible.\n     */\n    intent: string | null\n    requiresConfirm: boolean\n    /**\n     * `'shared'` — both UI and agent can dispatch. `'agent-only'` — no UI\n     * binding exists; the agent is the sole dispatcher. `'human-only'`\n     * variants never appear here (filtered before serialization).\n     */\n    dispatchMode: 'shared' | 'agent-only'\n    /**\n     * Where this affordance came from:\n     *   - `'binding'`           — a tagged event handler is currently\n     *     mounted in the rendered DOM.\n     *   - `'always-affordable'` — the app's `agentAffordances(state)`\n     *     hook listed it as available right now.\n     *   - `'schema'`            — neither of the above; the variant\n     *     is in the Msg union and annotated `@agentOnly`. The\n     *     `payloadHint` carries a synthesized example from the\n     *     compiler-derived field types — copy-paste-ready for\n     *     `send_message`. Bulk-edit operations land here.\n     */\n    source: 'binding' | 'always-affordable' | 'schema'\n    selectorHint: string | null\n    payloadHint: object | null\n    /** Cautionary text from `@warning` JSDoc, or null. */\n    warning: string | null\n    /** Concrete examples from `@example` JSDoc, in source order. */\n    examples: string[]\n    /**\n     * Effect kinds this variant emits, from `@emits(\"k1\", \"k2\")`.\n     * Empty when not annotated.\n     */\n    emits: string[]\n    /**\n     * Per-field guidance lifted from `@should(\"…\")` JSDoc on payload\n     * fields. Path is dot/bracket notation rooted at the payload (e.g.\n     * `\"cells[].meta\"`). Surfaces hints that would otherwise be buried\n     * inside the schema tree, so callers can read them alongside\n     * `examples` without diving into `description.messages.variants`.\n     */\n    fieldHints: Array<{ path: string; hint: string }>\n  }>\n}\n\nexport type LapMessageRequest = {\n  msg: { type: string; [k: string]: unknown }\n  reason?: string\n  /**\n   * Backpressure contract for how long `/message` waits before returning:\n   * - `drained` (default): dispatch, then loop until the message queue is\n   *   idle for `drainQuietMs` ms or the 5s hard cap trips. Captures any\n   *   effect round-trips (http/delay/debounce) that feed back as messages.\n   * - `idle`: dispatch + flush + one microtask yield. Captures the\n   *   synchronous update cycle but not async effects.\n   * - `none`: dispatch and return without flushing. For high-throughput\n   *   fire-and-forget dispatch.\n   */\n  waitFor?: 'drained' | 'idle' | 'none'\n  /**\n   * Quiescence window when `waitFor === 'drained'`. Drain completes when\n   * no new update cycle fires for this many ms. Default 100ms — long\n   * enough for a localhost HTTP round-trip, short enough to be\n   * imperceptible. Ignored for `idle` / `none`.\n   */\n  drainQuietMs?: number\n  /**\n   * Hard cap on total wait time. When `waitFor === 'drained'`, this is\n   * the upper bound on how long the drain loop can run; if reached, the\n   * response carries `drain.timedOut: true` with partial results. For\n   * `pending-confirmation` messages, this is how long to wait for\n   * the user's confirm/reject. Default 5_000ms.\n   */\n  timeoutMs?: number\n  /**\n   * Include the full post-drain `stateAfter` snapshot in the response.\n   * Default `false` — the response carries `stateDiff` only and the\n   * caller applies it to the prior snapshot (from connect/observe). For\n   * apps with non-trivial state, the diff is orders of magnitude\n   * smaller than the full state, and resending the snapshot on every\n   * dispatch wastes bandwidth and (for LLM callers) context budget.\n   *\n   * Set `true` when the caller doesn't track state incrementally and\n   * wants the snapshot back. The legacy `confirmed` and `wait` paths\n   * always carry `stateAfter` because their flow is asynchronous and\n   * a diff would be ambiguous.\n   */\n  includeState?: boolean\n}\n\nexport type LapMessageRejectReason =\n  | 'human-only'\n  | 'user-cancelled'\n  | 'timeout'\n  | 'invalid'\n  | 'schema-error'\n  | 'revoked'\n  | 'paused'\n\n/**\n * Drain metadata attached to `dispatched` / `confirmed` responses.\n * `effectsObserved` counts update-cycle commits (not individual effects) —\n * it's a proxy for \"how much activity happened during the drain window.\"\n * `errors` surfaces sync throws from `onEffect` and unhandled rejections\n * from effect handlers that fired during the drain window, so the LLM\n * can see when an HTTP handler crashed silently.\n *\n * `warnings` surfaces non-blocking observations from the schema\n * validator — typically `untyped-field` flags raised in strict mode\n * when the agent provided a value for an `'unknown'`-typed field. The\n * dispatch landed (we accepted the value) but the validator couldn't\n * structurally check it, so the agent learns of the gap and can\n * tighten the next try if needed. Lenient mode never emits warnings;\n * the field is omitted in that case.\n */\nexport type LapDrainMeta = {\n  effectsObserved: number\n  durationMs: number\n  timedOut: boolean\n  errors: Array<{ kind: 'error' | 'unhandledrejection'; message: string; stack?: string }>\n  warnings?: Array<{ path: string; code: string; message: string }>\n}\n\nexport type LapMessageResponse =\n  | {\n      status: 'dispatched'\n      /**\n       * Full post-drain state snapshot. Present only when the caller\n       * passed `includeState: true` in the request — by default,\n       * `stateDiff` is the only state-shaped field on the response\n       * because callers can apply the diff to the prior snapshot from\n       * `connect` / `observe`. See `LapMessageRequest.includeState`.\n       */\n      stateAfter?: unknown\n      /**\n       * Structural diff from pre-dispatch state to post-drain state,\n       * in JSON-Patch shape (RFC 6902 subset: `add`, `remove`,\n       * `replace`). Empty when the dispatch produced no observable\n       * state change. The default state surface for callers — apply\n       * incrementally to the snapshot from `connect`/`observe`.\n       */\n      stateDiff: import('./state-diff.js').StateDiff\n      actions: LapActionsResponse['actions']\n      drain: LapDrainMeta\n    }\n  | { status: 'pending-confirmation'; confirmId: string }\n  | {\n      /**\n       * The user approved a `pending-confirmation` message. `stateAfter`\n       * is the state snapshot captured when the approve was resolved;\n       * effects produced by the approved dispatch may still be in\n       * flight. The LLM should follow up with an `observe` call to\n       * pick up a drained view and fresh actions — by design the\n       * confirm path doesn't carry drain semantics because approval\n       * can arrive arbitrarily later than the original request.\n       */\n      status: 'confirmed'\n      stateAfter: unknown\n    }\n  | { status: 'rejected'; reason: LapMessageRejectReason; detail?: string }\n\nexport type LapConfirmResultRequest = { confirmId: string; timeoutMs?: number }\nexport type LapConfirmResultResponse =\n  | { status: 'confirmed'; stateAfter: unknown }\n  | { status: 'rejected'; reason: 'user-cancelled' | 'timeout' }\n  | { status: 'still-pending' }\n\n/**\n * Long-poll for the user's next chat-composer submission. Returns\n * `{ status: 'submitted', text, at }` on receipt of a\n * `user-input-submitted` WS frame from the paired runtime, or\n * `{ status: 'timeout' }` after `timeoutMs`. Each submission is\n * delivered to exactly one waiter (FIFO); arrivals while no waiter\n * is parked are buffered up to a small bound so a quick \"type before\n * Claude reaches the tool call\" doesn't lose the message.\n */\nexport type LapWaitForUserInputRequest = { timeoutMs?: number }\nexport type LapWaitForUserInputResponse =\n  | { status: 'submitted'; text: string; at: number }\n  | { status: 'timeout' }\n\n/**\n * Push narration prose into the activity feed without dispatching a\n * Msg. The agent uses this for \"I'm thinking…\" / \"About to do X\n * because…\" / \"I noticed Y, going to investigate\" — running commentary\n * the user can read inline with agent actions.\n *\n * The server synthesizes a `LogEntry { kind: 'narrate', detail: text }`,\n * appends it to the per-tid recent-log buffer (visible to subsequent\n * `describe_recent_actions` calls), AND pushes a `log-push` frame to\n * the paired browser so the in-app activity feed renders it in real\n * time. No client roundtrip — the agent gets `{ ok: true }` synchronously\n * once the server has accepted the narration.\n */\nexport type LapNarrateRequest = {\n  text: string\n  /**\n   * Optional one-line label for the entry's `intent` field, e.g.\n   * \"Thinking\" / \"Notice\" / \"Plan\". Defaults to \"Agent narrated\"\n   * when omitted.\n   */\n  intent?: string\n}\nexport type LapNarrateResponse = { ok: true }\n\nexport type LapWaitRequest = { path?: string; timeoutMs?: number }\nexport type LapWaitResponse =\n  | { status: 'changed'; stateAfter: unknown }\n  | { status: 'timeout'; stateAfter: unknown }\n\nexport type LapQueryDomRequest = { name: string; multiple?: boolean }\nexport type LapQueryDomResponse = {\n  elements: Array<{ text: string; attrs: Record<string, string>; path: number[] }>\n}\n\nexport type OutlineNode =\n  | { kind: 'heading'; level: number; text: string }\n  | { kind: 'text'; text: string }\n  | { kind: 'list'; items: OutlineNode[] }\n  | { kind: 'item'; text: string; children?: OutlineNode[] }\n  | { kind: 'button'; text: string; disabled: boolean; actionVariant: string | null }\n  | { kind: 'input'; label: string | null; value: string | null; type: string }\n  | { kind: 'link'; text: string; href: string }\n\nexport type LapDescribeVisibleResponse = {\n  outline: OutlineNode[]\n  /**\n   * Where the outline came from:\n   *   - `'data-agent'`: the app has `data-agent`-tagged zones and the\n   *     walker scoped the outline to them. The author chose what to\n   *     surface; trust the result.\n   *   - `'fallback'`: no `data-agent` tags exist; the walker fell back\n   *     to a depth- and count-limited semantic walk of the entire\n   *     root element. Useful for first-pass dogfood targets that\n   *     haven't tagged their views.\n   *   - `'truncated'`: same as `'fallback'` but the cap (200 nodes)\n   *     was hit before the walk finished. The visible content beyond\n   *     that point is not represented; reach for `query_dom` or state\n   *     reads if you need more.\n   */\n  source: 'data-agent' | 'fallback' | 'truncated'\n}\n\n// ── App + context documentation ──────────────────────────────────\n// Static app-level docs (authored once on the component record) and\n// dynamic per-state context docs (pure function of state, served by\n// `/lap/v1/context`). See spec §5.4.\n\nexport type AgentDocs = {\n  purpose: string\n  overview?: string\n  cautions?: string[]\n  /**\n   * Free-form idiomatic-usage examples authored by the app: typical\n   * sequences of dispatches the LLM should know about, like \"to\n   * delete a saved matrix: dispatch Confirm/Ask first, then on\n   * approve dispatch Cloud/Delete.\" Each entry is one example;\n   * order is up to the author.\n   */\n  examples?: string[]\n}\n\nexport type AgentContext = {\n  summary: string\n  hints?: string[]\n  cautions?: string[]\n}\n\nexport type LapContextResponse = { context: AgentContext }\n\n// ── Unified observe ──────────────────────────────────────────────\n// Single-call bootstrap. Replaces the get_state + list_actions +\n// describe_app trio for the common \"what can I see, what can I do\"\n// question. Returns the dynamic state + actions slice alongside the\n// static description (name/version/messages/docs) and any\n// state-derived context so one round-trip gives the LLM everything it\n// needs to decide its next action.\n\nexport type LapObserveResponse = {\n  state: unknown\n  actions: LapActionsResponse['actions']\n  description: LapDescribeResponse\n  context: AgentContext | null\n}\n\n// LAP endpoint catalog — a compile-time map binding each path to its\n// request/response shape. Useful for the bridge's dispatcher and for\n// typed test helpers.\nexport type LapEndpointMap = {\n  '/lap/v1/describe': { req: null; res: LapDescribeResponse }\n  '/lap/v1/state': { req: LapStateRequest; res: LapStateResponse }\n  '/lap/v1/actions': { req: null; res: LapActionsResponse }\n  '/lap/v1/message': { req: LapMessageRequest; res: LapMessageResponse }\n  '/lap/v1/confirm-result': { req: LapConfirmResultRequest; res: LapConfirmResultResponse }\n  '/lap/v1/wait': { req: LapWaitRequest; res: LapWaitResponse }\n  '/lap/v1/wait-for-user-input': {\n    req: LapWaitForUserInputRequest\n    res: LapWaitForUserInputResponse\n  }\n  '/lap/v1/narrate': { req: LapNarrateRequest; res: LapNarrateResponse }\n  '/lap/v1/query-dom': { req: LapQueryDomRequest; res: LapQueryDomResponse }\n  '/lap/v1/describe-visible': { req: null; res: LapDescribeVisibleResponse }\n  '/lap/v1/context': { req: null; res: LapContextResponse }\n  '/lap/v1/observe': { req: null; res: LapObserveResponse }\n}\n\nexport type LapPath = keyof LapEndpointMap\nexport type LapRequest<P extends LapPath> = LapEndpointMap[P]['req']\nexport type LapResponse<P extends LapPath> = LapEndpointMap[P]['res']\n\n// ── Relay WS frames ──────────────────────────────────────────────\n// Bidirectional framing between the LLui runtime in the browser and\n// the @llui/agent server over /agent/ws. See spec §10.5.\n\nexport type LogKind =\n  | 'proposed'\n  | 'dispatched'\n  | 'confirmed'\n  | 'rejected'\n  | 'blocked'\n  | 'read'\n  | 'error'\n  /**\n   * The user typed a message into the in-app chat composer (the agentChat\n   * namespace) and submitted it. The agent's `wait_for_user_input` tool\n   * picks up the same submission. Surfacing it in the activity log is\n   * what makes the agent panel a real conversational surface — agent\n   * actions and user replies share one chronological timeline.\n   */\n  | 'user-input'\n  /**\n   * The agent emitted prose into the activity feed via `/lap/v1/narrate`\n   * — narration like \"thinking about your request…\", \"I'm about to add\n   * an alternative because…\", or any out-of-band commentary that\n   * doesn't fit a `dispatched` / `read` lifecycle. Lets the agent talk\n   * to the user inside the app without inventing a fake `@agentOnly`\n   * Msg type.\n   */\n  | 'narrate'\n\nexport type LogEntry = {\n  id: string\n  at: number\n  kind: LogKind\n  variant?: string\n  intent?: string\n  detail?: string\n  /**\n   * Structural diff from pre-dispatch state to post-drain state, in\n   * JSON-Patch shape. Populated only for `kind: 'dispatched'` entries\n   * — read entries (get_state / list_actions / observe / …) don't\n   * mutate state, and an empty diff would just be noise. Lets the\n   * agent reconstruct what each past action did without re-fetching\n   * state snapshots.\n   */\n  stateDiff?: import('./state-diff.js').StateDiff\n}\n\nexport type HelloFrame = {\n  t: 'hello'\n  appName: string\n  appVersion: string\n  msgSchema: Record<string, MessageSchemaEntry>\n  stateSchema: object\n  affordancesSample: object[]\n  docs: AgentDocs | null\n  schemaHash: string\n}\n\nexport type RpcReplyFrame = { t: 'rpc-reply'; id: string; result: unknown }\nexport type RpcErrorFrame = { t: 'rpc-error'; id: string; code: string; detail?: string }\nexport type ConfirmResolvedFrame = {\n  t: 'confirm-resolved'\n  confirmId: string\n  outcome: 'confirmed' | 'user-cancelled'\n  stateAfter?: unknown\n}\nexport type StateUpdateFrame = { t: 'state-update'; path: string; stateAfter: unknown }\nexport type LogAppendFrame = { t: 'log-append'; entry: LogEntry }\n/**\n * Inverted input channel. The user submits a message through the in-app\n * chat composer (`agentChat`); the runtime forwards the text on this\n * frame to the pairing server, which routes it to the parked\n * `wait_for_user_input` LAP call (if any).\n *\n * The runtime ALSO appends a synthetic `LogEntry { kind: 'user-input' }`\n * to the local activity log so the panel renders it inline with agent\n * actions — the conversation reads as a single timeline. The frame and\n * the log entry are independent: the frame travels server-side and\n * delivers Claude's reply trigger; the log entry stays browser-side\n * for visibility.\n */\nexport type UserInputSubmittedFrame = {\n  t: 'user-input-submitted'\n  text: string\n  at: number\n}\n\nexport type ClientFrame =\n  | HelloFrame\n  | RpcReplyFrame\n  | RpcErrorFrame\n  | ConfirmResolvedFrame\n  | StateUpdateFrame\n  | LogAppendFrame\n  | UserInputSubmittedFrame\n\nexport type RpcFrame = { t: 'rpc'; id: string; tool: string; args: unknown }\nexport type RevokedFrame = { t: 'revoked' }\nexport type ActiveFrame = { t: 'active' }\n/**\n * Server-pushed log entry. Used today by the `narrate` LAP method:\n * the agent calls `/lap/v1/narrate { text }`, the server synthesizes\n * a `LogEntry { kind: 'narrate' }` and pushes it down to the paired\n * runtime so the in-app activity feed renders the narration in real\n * time. Distinct from the browser-emitted `log-append` frame:\n * `log-append` is browser → server (rpc-derived audit), `log-push`\n * is server → browser (server-originated entries, no echo).\n */\nexport type LogPushFrame = { t: 'log-push'; entry: LogEntry }\n\nexport type ServerFrame = RpcFrame | RevokedFrame | ActiveFrame | LogPushFrame\n\n// ── Tokens + pairing ─────────────────────────────────────────────\n\ndeclare const TokenBrand: unique symbol\nexport type AgentToken = string & { readonly [TokenBrand]: 'AgentToken' }\n\nexport type TokenStatus =\n  | 'awaiting-ws'\n  | 'awaiting-claude'\n  | 'active'\n  | 'pending-resume'\n  | 'revoked'\n\nexport type TokenRecord = {\n  tid: string\n  /**\n   * SHA-256 hex of the bearer token. The plaintext token is never\n   * stored — incoming requests hash their `Authorization: Bearer …`\n   * value and look up by this field. Hash-only storage keeps a leaked\n   * store from being a live-token leak. Mirrors the standard session-\n   * cookie / API-key pattern.\n   */\n  tokenHash: string\n  uid: string | null\n  status: TokenStatus\n  createdAt: number\n  /**\n   * Hard-expiry in milliseconds since epoch. The mint endpoint sets\n   * this to `now + hardExpiryMs`; the verify path rejects requests\n   * presenting tokens whose record has `expiresAt <= now`. Pre-0.0.35\n   * the equivalent value lived inside the JWT payload as `exp` (in\n   * seconds); the new opaque-token flow keeps it server-side so the\n   * record is the single source of truth.\n   */\n  expiresAt: number\n  lastSeenAt: number\n  pendingResumeUntil: number | null\n  origin: string\n  label: string | null\n}\n\nexport type AgentSession = {\n  tid: string\n  label: string\n  status: 'active' | 'pending-resume' | 'revoked'\n  createdAt: number\n  lastSeenAt: number\n}\n\n// HTTP envelopes for the mint/resume/revoke/sessions endpoints (non-LAP).\n\nexport type MintRequest = Record<string, never>\nexport type MintResponse = {\n  token: AgentToken\n  tid: string\n  wsUrl: string\n  lapUrl: string\n  expiresAt: number\n}\n\nexport type ResumeListRequest = { tids: string[] }\nexport type ResumeListResponse = { sessions: AgentSession[] }\n\nexport type ResumeClaimRequest = { tid: string }\nexport type ResumeClaimResponse = { token: AgentToken; wsUrl: string }\n\nexport type RevokeRequest = { tid: string }\nexport type RevokeResponse = { status: 'revoked' }\n\nexport type SessionsResponse = { sessions: AgentSession[] }\n\n// ── Audit ────────────────────────────────────────────────────────\n\nexport type AuditEvent =\n  | 'mint'\n  | 'claim'\n  | 'resume'\n  | 'revoke'\n  | 'lap-call'\n  | 'msg-dispatched'\n  | 'msg-blocked'\n  | 'confirm-proposed'\n  | 'confirm-approved'\n  | 'confirm-rejected'\n  | 'rate-limited'\n  | 'auth-failed'\n\nexport type AuditEntry = {\n  at: number\n  tid: string | null\n  uid: string | null\n  event: AuditEvent\n  detail: object\n}\n\n// ── Codec exports ─────────────────────────────────────────────────\n//\n// Re-exported here so consumers can `import { ..., type AgentCodec }\n// from '@llui/agent/protocol'`. The implementation lives in\n// `./codecs.ts` to keep the protocol type surface together but the\n// runtime registry/walkers separate.\n\nexport {\n  WIRE_TAG,\n  WIRE_VALUE,\n  CodecRegistry,\n  isoDateCodec,\n  epochMillisCodec,\n  makeDefaultCodecs,\n  encodeForWire,\n  decodeFromWire,\n  type AgentCodec,\n} from './codecs.js'\n"]}

package/dist/server/cloudflare/durable-object.d.ts

@@ -46,7 +46,48 @@
  * See `./worker.ts` for `routeToAgentDO` and the full wiring.
  */
 import type { CoreOptions, AgentCoreHandle } from '../core.js';
+import type { UserInputStorage } from '../ws/pairing-registry.js';
 export type DurableObjectOptions = Omit<CoreOptions, 'registry'>;
+/**
+ * Minimal subset of the Cloudflare Durable Object `state.storage`
+ * surface needed to back the registry's `UserInputStorage` adapter.
+ * Declared structurally so we don't pull in `@cloudflare/workers-types`
+ * — that's a peer dependency of the host's Worker project, not ours.
+ */
+export interface DurableObjectStorageLike {
+    get<T>(key: string): Promise<T | undefined>;
+    put<T>(key: string, value: T): Promise<void>;
+    delete(key: string): Promise<boolean>;
+}
+/**
+ * Build a `UserInputStorage` adapter backed by the DO's `state.storage`.
+ * Pass the result to `AgentPairingDurableObject`'s constructor opts to
+ * make buffered chat-composer submissions survive DO eviction (process
+ * restarts, deploys, idle eviction). Without this adapter the in-memory
+ * buffer is lost on eviction; with it, the next request restores any
+ * buffered messages from before the eviction.
+ *
+ * Parked `waitForUserInput` waiters can't be persisted (they're JS
+ * Promise resolvers); the LAP client retries naturally on its own
+ * timeout, and the retry sees the restored buffer.
+ *
+ * Usage:
+ *
+ * ```ts
+ * export class AgentDO {
+ *   private agent: AgentPairingDurableObject
+ *   constructor(state: DurableObjectState) {
+ *     this.agent = new AgentPairingDurableObject({
+ *       userInputStorage: makeDurableObjectUserInputStorage(state.storage),
+ *     })
+ *   }
+ *   fetch(req: Request) {
+ *     return this.agent.fetch(req)
+ *   }
+ * }
+ * ```
+ */
+export declare function makeDurableObjectUserInputStorage(storage: DurableObjectStorageLike): UserInputStorage;
 /**
  * Agent server instance scoped to a single Durable Object. All
  * pairing state lives in the DO's in-process memory — which is safe

package/dist/server/cloudflare/durable-object.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"durable-object.d.ts","sourceRoot":"","sources":["../../../src/server/cloudflare/durable-object.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAI9D,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;AAEhE;;;;;;;;;GASG;AACH,qBAAa,yBAAyB;IACpC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;gBAEnB,IAAI,EAAE,oBAAoB;IAIhC,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;CAgB7C"}
+{"version":3,"file":"durable-object.d.ts","sourceRoot":"","sources":["../../../src/server/cloudflare/durable-object.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAG9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAEjE,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;AAEhE;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAA;IAC3C,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACtC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,wBAAwB,GAChC,gBAAgB,CAiBlB;AAED;;;;;;;;;GASG;AACH,qBAAa,yBAAyB;IACpC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;gBAEnB,IAAI,EAAE,oBAAoB;IAIhC,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;CAgB7C"}

package/dist/server/cloudflare/durable-object.js

@@ -1,5 +1,51 @@
 import { createLluiAgentCore } from '../core.js';
 import { handleCloudflareUpgrade } from '../web/upgrade.js';
+/**
+ * Build a `UserInputStorage` adapter backed by the DO's `state.storage`.
+ * Pass the result to `AgentPairingDurableObject`'s constructor opts to
+ * make buffered chat-composer submissions survive DO eviction (process
+ * restarts, deploys, idle eviction). Without this adapter the in-memory
+ * buffer is lost on eviction; with it, the next request restores any
+ * buffered messages from before the eviction.
+ *
+ * Parked `waitForUserInput` waiters can't be persisted (they're JS
+ * Promise resolvers); the LAP client retries naturally on its own
+ * timeout, and the retry sees the restored buffer.
+ *
+ * Usage:
+ *
+ * ```ts
+ * export class AgentDO {
+ *   private agent: AgentPairingDurableObject
+ *   constructor(state: DurableObjectState) {
+ *     this.agent = new AgentPairingDurableObject({
+ *       userInputStorage: makeDurableObjectUserInputStorage(state.storage),
+ *     })
+ *   }
+ *   fetch(req: Request) {
+ *     return this.agent.fetch(req)
+ *   }
+ * }
+ * ```
+ */
+export function makeDurableObjectUserInputStorage(storage) {
+    // One key per tid keeps the operations O(1) and avoids cross-tid
+    // contention. Prefix is to namespace from any other agent storage
+    // a future feature might add.
+    const key = (tid) => `__llui_agent_user_input_buf__:${tid}`;
+    return {
+        async read(tid) {
+            const stored = await storage.get(key(tid));
+            return stored ?? [];
+        },
+        async write(tid, buffer) {
+            await storage.put(key(tid), buffer);
+        },
+        async clear(tid) {
+            await storage.delete(key(tid));
+        },
+    };
+}
 /**
  * Agent server instance scoped to a single Durable Object. All
  * pairing state lives in the DO's in-process memory — which is safe

package/dist/server/cloudflare/durable-object.js.map

@@ -1 +1 @@
-{"version":3,"file":"durable-object.js","sourceRoot":"","sources":["../../../src/server/cloudflare/durable-object.ts"],"names":[],"mappings":"AAgDA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAI3D;;;;;;;;;GASG;AACH,MAAM,OAAO,yBAAyB;IAC3B,KAAK,CAAiB;IAE/B,YAAY,IAA0B;QACpC,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAY;QACtB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAE5B,gEAAgE;QAChE,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;QAEzB,iEAAiE;QACjE,sBAAsB;QACtB,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;QACjD,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACnD,CAAC;CACF","sourcesContent":["/**\n * Durable Object helper for hosting the agent pairing + LAP surface\n * on Cloudflare Workers. One DO instance owns one `tid` — its\n * in-memory `PairingRegistry` survives across Worker isolate\n * invocations because the DO IS persistent.\n *\n * This file exports a class designed to be composed into a real\n * Durable Object in the user's Worker project. We intentionally\n * don't subclass `DurableObject` from `@cloudflare/workers-types` —\n * that dependency belongs to the user's project, not ours. Users\n * wrap an instance of `AgentPairingDurableObject` in their own DO\n * class and forward `fetch` to it.\n *\n * Usage in a Worker project:\n *\n * ```ts\n * // worker.ts\n * import { AgentPairingDurableObject } from '@llui/agent/server/cloudflare'\n *\n * export class AgentDO {\n *   private agent: AgentPairingDurableObject\n *   constructor(_state: DurableObjectState, env: Env) {\n *     // Tokens are opaque (see token.ts) — no signing key needed.\n *     this.agent = new AgentPairingDurableObject({})\n *   }\n *   fetch(req: Request): Promise<Response> {\n *     return this.agent.fetch(req)\n *   }\n * }\n *\n * export default {\n *   async fetch(req: Request, env: Env): Promise<Response> {\n *     // routeToAgentDO now takes a `resolveTid` callback — typically\n *     // a fetch to the root DO's token-resolution endpoint, or a\n *     // const stub when you don't shard by tid.\n *     return routeToAgentDO(req, env.AGENT_DO, async (token) => {\n *       const stub = env.AGENT_DO.get(env.AGENT_DO.idFromName('__root'))\n *       const r = await stub.fetch(`http://internal/__resolve?token=${encodeURIComponent(token)}`)\n *       const body = (await r.json()) as { tid: string | null }\n *       return body.tid\n *     })\n *   },\n * }\n * ```\n *\n * See `./worker.ts` for `routeToAgentDO` and the full wiring.\n */\nimport type { CoreOptions, AgentCoreHandle } from '../core.js'\nimport { createLluiAgentCore } from '../core.js'\nimport { handleCloudflareUpgrade } from '../web/upgrade.js'\n\nexport type DurableObjectOptions = Omit<CoreOptions, 'registry'>\n\n/**\n * Agent server instance scoped to a single Durable Object. All\n * pairing state lives in the DO's in-process memory — which is safe\n * here because the DO is a persistent addressable entity, not a\n * one-shot Worker isolate.\n *\n * Users instantiate one of these inside their DO class's constructor\n * and delegate `fetch` to `agent.fetch(req)`. LAP HTTP routes and\n * WebSocket upgrades both flow through this single entry.\n */\nexport class AgentPairingDurableObject {\n  readonly agent: AgentCoreHandle\n\n  constructor(opts: DurableObjectOptions) {\n    this.agent = createLluiAgentCore(opts)\n  }\n\n  async fetch(req: Request): Promise<Response> {\n    const url = new URL(req.url)\n\n    // LAP routes (/agent/lap/v1/*, /agent/*). `router` returns null\n    // for non-matching paths so we can fall through to the upgrade.\n    const lapRes = await this.agent.router(req)\n    if (lapRes) return lapRes\n\n    // WebSocket upgrade — uses `WebSocketPair`, which only exists in\n    // Cloudflare Workers.\n    if (url.pathname === '/agent/ws') {\n      return handleCloudflareUpgrade(req, this.agent)\n    }\n\n    return new Response('Not Found', { status: 404 })\n  }\n}\n"]}
+{"version":3,"file":"durable-object.js","sourceRoot":"","sources":["../../../src/server/cloudflare/durable-object.ts"],"names":[],"mappings":"AAgDA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAiB3D;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAAiC;IAEjC,iEAAiE;IACjE,kEAAkE;IAClE,8BAA8B;IAC9B,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,iCAAiC,GAAG,EAAE,CAAA;IACnE,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAG;YACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAsC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;YAC/E,OAAO,MAAM,IAAI,EAAE,CAAA;QACrB,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM;YACrB,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;QACrC,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG;YACb,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QAChC,CAAC;KACF,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,yBAAyB;IAC3B,KAAK,CAAiB;IAE/B,YAAY,IAA0B;QACpC,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAY;QACtB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAE5B,gEAAgE;QAChE,gEAAgE;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAA;QAEzB,iEAAiE;QACjE,sBAAsB;QACtB,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACjC,OAAO,uBAAuB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;QACjD,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;IACnD,CAAC;CACF","sourcesContent":["/**\n * Durable Object helper for hosting the agent pairing + LAP surface\n * on Cloudflare Workers. One DO instance owns one `tid` — its\n * in-memory `PairingRegistry` survives across Worker isolate\n * invocations because the DO IS persistent.\n *\n * This file exports a class designed to be composed into a real\n * Durable Object in the user's Worker project. We intentionally\n * don't subclass `DurableObject` from `@cloudflare/workers-types` —\n * that dependency belongs to the user's project, not ours. Users\n * wrap an instance of `AgentPairingDurableObject` in their own DO\n * class and forward `fetch` to it.\n *\n * Usage in a Worker project:\n *\n * ```ts\n * // worker.ts\n * import { AgentPairingDurableObject } from '@llui/agent/server/cloudflare'\n *\n * export class AgentDO {\n *   private agent: AgentPairingDurableObject\n *   constructor(_state: DurableObjectState, env: Env) {\n *     // Tokens are opaque (see token.ts) — no signing key needed.\n *     this.agent = new AgentPairingDurableObject({})\n *   }\n *   fetch(req: Request): Promise<Response> {\n *     return this.agent.fetch(req)\n *   }\n * }\n *\n * export default {\n *   async fetch(req: Request, env: Env): Promise<Response> {\n *     // routeToAgentDO now takes a `resolveTid` callback — typically\n *     // a fetch to the root DO's token-resolution endpoint, or a\n *     // const stub when you don't shard by tid.\n *     return routeToAgentDO(req, env.AGENT_DO, async (token) => {\n *       const stub = env.AGENT_DO.get(env.AGENT_DO.idFromName('__root'))\n *       const r = await stub.fetch(`http://internal/__resolve?token=${encodeURIComponent(token)}`)\n *       const body = (await r.json()) as { tid: string | null }\n *       return body.tid\n *     })\n *   },\n * }\n * ```\n *\n * See `./worker.ts` for `routeToAgentDO` and the full wiring.\n */\nimport type { CoreOptions, AgentCoreHandle } from '../core.js'\nimport { createLluiAgentCore } from '../core.js'\nimport { handleCloudflareUpgrade } from '../web/upgrade.js'\nimport type { UserInputStorage } from '../ws/pairing-registry.js'\n\nexport type DurableObjectOptions = Omit<CoreOptions, 'registry'>\n\n/**\n * Minimal subset of the Cloudflare Durable Object `state.storage`\n * surface needed to back the registry's `UserInputStorage` adapter.\n * Declared structurally so we don't pull in `@cloudflare/workers-types`\n * — that's a peer dependency of the host's Worker project, not ours.\n */\nexport interface DurableObjectStorageLike {\n  get<T>(key: string): Promise<T | undefined>\n  put<T>(key: string, value: T): Promise<void>\n  delete(key: string): Promise<boolean>\n}\n\n/**\n * Build a `UserInputStorage` adapter backed by the DO's `state.storage`.\n * Pass the result to `AgentPairingDurableObject`'s constructor opts to\n * make buffered chat-composer submissions survive DO eviction (process\n * restarts, deploys, idle eviction). Without this adapter the in-memory\n * buffer is lost on eviction; with it, the next request restores any\n * buffered messages from before the eviction.\n *\n * Parked `waitForUserInput` waiters can't be persisted (they're JS\n * Promise resolvers); the LAP client retries naturally on its own\n * timeout, and the retry sees the restored buffer.\n *\n * Usage:\n *\n * ```ts\n * export class AgentDO {\n *   private agent: AgentPairingDurableObject\n *   constructor(state: DurableObjectState) {\n *     this.agent = new AgentPairingDurableObject({\n *       userInputStorage: makeDurableObjectUserInputStorage(state.storage),\n *     })\n *   }\n *   fetch(req: Request) {\n *     return this.agent.fetch(req)\n *   }\n * }\n * ```\n */\nexport function makeDurableObjectUserInputStorage(\n  storage: DurableObjectStorageLike,\n): UserInputStorage {\n  // One key per tid keeps the operations O(1) and avoids cross-tid\n  // contention. Prefix is to namespace from any other agent storage\n  // a future feature might add.\n  const key = (tid: string) => `__llui_agent_user_input_buf__:${tid}`\n  return {\n    async read(tid) {\n      const stored = await storage.get<Array<{ text: string; at: number }>>(key(tid))\n      return stored ?? []\n    },\n    async write(tid, buffer) {\n      await storage.put(key(tid), buffer)\n    },\n    async clear(tid) {\n      await storage.delete(key(tid))\n    },\n  }\n}\n\n/**\n * Agent server instance scoped to a single Durable Object. All\n * pairing state lives in the DO's in-process memory — which is safe\n * here because the DO is a persistent addressable entity, not a\n * one-shot Worker isolate.\n *\n * Users instantiate one of these inside their DO class's constructor\n * and delegate `fetch` to `agent.fetch(req)`. LAP HTTP routes and\n * WebSocket upgrades both flow through this single entry.\n */\nexport class AgentPairingDurableObject {\n  readonly agent: AgentCoreHandle\n\n  constructor(opts: DurableObjectOptions) {\n    this.agent = createLluiAgentCore(opts)\n  }\n\n  async fetch(req: Request): Promise<Response> {\n    const url = new URL(req.url)\n\n    // LAP routes (/agent/lap/v1/*, /agent/*). `router` returns null\n    // for non-matching paths so we can fall through to the upgrade.\n    const lapRes = await this.agent.router(req)\n    if (lapRes) return lapRes\n\n    // WebSocket upgrade — uses `WebSocketPair`, which only exists in\n    // Cloudflare Workers.\n    if (url.pathname === '/agent/ws') {\n      return handleCloudflareUpgrade(req, this.agent)\n    }\n\n    return new Response('Not Found', { status: 404 })\n  }\n}\n"]}

package/dist/server/cloudflare/index.d.ts

@@ -11,13 +11,20 @@
  * import {
  *   AgentPairingDurableObject,
  *   routeToAgentDO,
+ *   makeDurableObjectUserInputStorage,
  * } from '@llui/agent/server/cloudflare'
  *
  * export class AgentDO {
  *   private agent: AgentPairingDurableObject
- *   constructor(_state: DurableObjectState, env: Env) {
+ *   constructor(state: DurableObjectState, _env: Env) {
  *     // Tokens are opaque (see token.ts) — no signing key needed.
- *     this.agent = new AgentPairingDurableObject({})
+ *     // The storage adapter makes the chat-composer's user-input
+ *     // buffer survive DO eviction (deploys, idle eviction, runtime
+ *     // restarts) — buffered messages from before the eviction are
+ *     // restored on the next request.
+ *     this.agent = new AgentPairingDurableObject({
+ *       userInputStorage: makeDurableObjectUserInputStorage(state.storage),
+ *     })
  *   }
  *   fetch(req: Request) {
  *     return this.agent.fetch(req)
@@ -47,7 +54,7 @@
  * new_classes = ["AgentDO"]
  * ```
  */
-export { AgentPairingDurableObject, type DurableObjectOptions } from './durable-object.js';
+export { AgentPairingDurableObject, type DurableObjectOptions, makeDurableObjectUserInputStorage, type DurableObjectStorageLike, } from './durable-object.js';
 export { routeToAgentDO, type MinimalDurableObjectNamespace, type MinimalDurableObjectId, type MinimalDurableObjectStub, } from './worker.js';
 export { createWHATWGPairingConnection, handleCloudflareUpgrade, extractToken, } from '../web/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/cloudflare/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/cloudflare/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,OAAO,EAAE,yBAAyB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1F,OAAO,EACL,cAAc,EACd,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,YAAY,GACb,MAAM,iBAAiB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/cloudflare/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,EACL,yBAAyB,EACzB,KAAK,oBAAoB,EACzB,iCAAiC,EACjC,KAAK,wBAAwB,GAC9B,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,cAAc,EACd,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,YAAY,GACb,MAAM,iBAAiB,CAAA"}

package/dist/server/cloudflare/index.js

@@ -11,13 +11,20 @@
  * import {
  *   AgentPairingDurableObject,
  *   routeToAgentDO,
+ *   makeDurableObjectUserInputStorage,
  * } from '@llui/agent/server/cloudflare'
  *
  * export class AgentDO {
  *   private agent: AgentPairingDurableObject
- *   constructor(_state: DurableObjectState, env: Env) {
+ *   constructor(state: DurableObjectState, _env: Env) {
  *     // Tokens are opaque (see token.ts) — no signing key needed.
- *     this.agent = new AgentPairingDurableObject({})
+ *     // The storage adapter makes the chat-composer's user-input
+ *     // buffer survive DO eviction (deploys, idle eviction, runtime
+ *     // restarts) — buffered messages from before the eviction are
+ *     // restored on the next request.
+ *     this.agent = new AgentPairingDurableObject({
+ *       userInputStorage: makeDurableObjectUserInputStorage(state.storage),
+ *     })
  *   }
  *   fetch(req: Request) {
  *     return this.agent.fetch(req)
@@ -47,7 +54,7 @@
  * new_classes = ["AgentDO"]
  * ```
  */
-export { AgentPairingDurableObject } from './durable-object.js';
+export { AgentPairingDurableObject, makeDurableObjectUserInputStorage, } from './durable-object.js';
 export { routeToAgentDO, } from './worker.js';
 export { createWHATWGPairingConnection, handleCloudflareUpgrade, extractToken, } from '../web/index.js';
 //# sourceMappingURL=index.js.map

package/dist/server/cloudflare/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/cloudflare/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,OAAO,EAAE,yBAAyB,EAA6B,MAAM,qBAAqB,CAAA;AAC1F,OAAO,EACL,cAAc,GAIf,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,YAAY,GACb,MAAM,iBAAiB,CAAA","sourcesContent":["/**\n * Cloudflare Workers + Durable Object adapter. Use this sub-path\n * from a Cloudflare Workers project where the agent pairing state\n * lives inside a Durable Object.\n *\n * See the full deployment recipe at\n * https://llui.dev/api/agent#cloudflare-deployment — the short\n * version:\n *\n * ```ts\n * import {\n *   AgentPairingDurableObject,\n *   routeToAgentDO,\n * } from '@llui/agent/server/cloudflare'\n *\n * export class AgentDO {\n *   private agent: AgentPairingDurableObject\n *   constructor(_state: DurableObjectState, env: Env) {\n *     // Tokens are opaque (see token.ts) — no signing key needed.\n *     this.agent = new AgentPairingDurableObject({})\n *   }\n *   fetch(req: Request) {\n *     return this.agent.fetch(req)\n *   }\n * }\n *\n * export default {\n *   async fetch(req: Request, env: Env) {\n *     return routeToAgentDO(req, env.AGENT_DO, async (token) => {\n *       const stub = env.AGENT_DO.get(env.AGENT_DO.idFromName('__root'))\n *       const r = await stub.fetch(`http://internal/__resolve?token=${encodeURIComponent(token)}`)\n *       const body = (await r.json()) as { tid: string | null }\n *       return body.tid\n *     })\n *   },\n * }\n * ```\n *\n * `wrangler.toml`:\n * ```toml\n * [[durable_objects.bindings]]\n * name = \"AGENT_DO\"\n * class_name = \"AgentDO\"\n *\n * [[migrations]]\n * tag = \"v1\"\n * new_classes = [\"AgentDO\"]\n * ```\n */\nexport { AgentPairingDurableObject, type DurableObjectOptions } from './durable-object.js'\nexport {\n  routeToAgentDO,\n  type MinimalDurableObjectNamespace,\n  type MinimalDurableObjectId,\n  type MinimalDurableObjectStub,\n} from './worker.js'\nexport {\n  createWHATWGPairingConnection,\n  handleCloudflareUpgrade,\n  extractToken,\n} from '../web/index.js'\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/cloudflare/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AACH,OAAO,EACL,yBAAyB,EAEzB,iCAAiC,GAElC,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,cAAc,GAIf,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,YAAY,GACb,MAAM,iBAAiB,CAAA","sourcesContent":["/**\n * Cloudflare Workers + Durable Object adapter. Use this sub-path\n * from a Cloudflare Workers project where the agent pairing state\n * lives inside a Durable Object.\n *\n * See the full deployment recipe at\n * https://llui.dev/api/agent#cloudflare-deployment — the short\n * version:\n *\n * ```ts\n * import {\n *   AgentPairingDurableObject,\n *   routeToAgentDO,\n *   makeDurableObjectUserInputStorage,\n * } from '@llui/agent/server/cloudflare'\n *\n * export class AgentDO {\n *   private agent: AgentPairingDurableObject\n *   constructor(state: DurableObjectState, _env: Env) {\n *     // Tokens are opaque (see token.ts) — no signing key needed.\n *     // The storage adapter makes the chat-composer's user-input\n *     // buffer survive DO eviction (deploys, idle eviction, runtime\n *     // restarts) — buffered messages from before the eviction are\n *     // restored on the next request.\n *     this.agent = new AgentPairingDurableObject({\n *       userInputStorage: makeDurableObjectUserInputStorage(state.storage),\n *     })\n *   }\n *   fetch(req: Request) {\n *     return this.agent.fetch(req)\n *   }\n * }\n *\n * export default {\n *   async fetch(req: Request, env: Env) {\n *     return routeToAgentDO(req, env.AGENT_DO, async (token) => {\n *       const stub = env.AGENT_DO.get(env.AGENT_DO.idFromName('__root'))\n *       const r = await stub.fetch(`http://internal/__resolve?token=${encodeURIComponent(token)}`)\n *       const body = (await r.json()) as { tid: string | null }\n *       return body.tid\n *     })\n *   },\n * }\n * ```\n *\n * `wrangler.toml`:\n * ```toml\n * [[durable_objects.bindings]]\n * name = \"AGENT_DO\"\n * class_name = \"AgentDO\"\n *\n * [[migrations]]\n * tag = \"v1\"\n * new_classes = [\"AgentDO\"]\n * ```\n */\nexport {\n  AgentPairingDurableObject,\n  type DurableObjectOptions,\n  makeDurableObjectUserInputStorage,\n  type DurableObjectStorageLike,\n} from './durable-object.js'\nexport {\n  routeToAgentDO,\n  type MinimalDurableObjectNamespace,\n  type MinimalDurableObjectId,\n  type MinimalDurableObjectStub,\n} from './worker.js'\nexport {\n  createWHATWGPairingConnection,\n  handleCloudflareUpgrade,\n  extractToken,\n} from '../web/index.js'\n"]}

package/dist/server/core.d.ts

@@ -13,7 +13,7 @@ import type { TokenStore } from './token-store.js';
 import type { IdentityResolver } from './identity.js';
 import type { AuditSink } from './audit.js';
 import type { RateLimiter } from './rate-limit.js';
-import type { PairingConnection, PairingRegistry } from './ws/pairing-registry.js';
+import type { PairingConnection, PairingRegistry, UserInputStorage } from './ws/pairing-registry.js';
 /**
  * Options accepted by `createLluiAgentCore`. Strict subset of
  * `ServerOptions` — everything needed to build the router, registry,
@@ -32,6 +32,16 @@ export type CoreOptions = {
      * Durable Object that persists across isolates) pass it here.
      */
     registry?: PairingRegistry;
+    /**
+     * Optional persistence adapter for the chat-composer's
+     * `wait_for_user_input` buffer. Wired automatically into the
+     * default `InMemoryPairingRegistry`; ignored when `opts.registry`
+     * is overridden (custom registries supply their own persistence).
+     * See `UserInputStorage` for the contract. Cloudflare DO hosts get
+     * a ready-made adapter from
+     * `@llui/agent/server/cloudflare`'s `makeDurableObjectUserInputStorage`.
+     */
+    userInputStorage?: UserInputStorage;
     /**
      * How long, in milliseconds, a token's record stays in
      * `pending-resume` after the WS pairing closes. During this window

package/dist/server/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/server/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AAWlF;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B,CAAA;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,GAAG,SAAS,CAAA;CAAE,CAAA;AAElE;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAClD,QAAQ,EAAE,eAAe,CAAA;IACzB,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,SAAS,CAAA;IACpB;;;;;;;;;;OAUG;IACH,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;CACpF,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,WAAgB,GAAG,eAAe,CAkH3E"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/server/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAWpG;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,eAAe,CAAA;IAC1B;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;IACnC;;;;;;;;;;;;;;;;;OAiBG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B,CAAA;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,aAAa,GAAG,SAAS,CAAA;CAAE,CAAA;AAElE;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAClD,QAAQ,EAAE,eAAe,CAAA;IACzB,UAAU,EAAE,UAAU,CAAA;IACtB,SAAS,EAAE,SAAS,CAAA;IACpB;;;;;;;;;;OAUG;IACH,gBAAgB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,YAAY,CAAC,CAAA;CACpF,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,WAAgB,GAAG,eAAe,CAmH3E"}

package/dist/server/core.js

@@ -36,6 +36,7 @@ export function createLluiAgentCore(opts = {}) {
                     },
                 });
             },
+            userInputStorage: opts.userInputStorage,
         });
     const httpRouter = createHttpRouter({
         tokenStore,