@mafdet/cli 0.4.3 → 0.4.5

package/dist/api/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/api/http.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB,SAAU,CAAC;AAC1C,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,EAAE,iBAAiB;IAShC,OAAO,CAAC,CAAC,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAKrB,QAAQ,CAAC,CAAC,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAK3B,8DAA8D;IACxD,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAiBpC,6DAA6D;IACvD,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC;QAAE,QAAQ,EAAE,QAAQ,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;YASxC,IAAI;YA4DJ,QAAQ;YAuCR,SAAS;CAexB;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,UAAU,CAAC,CAkCrB"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/api/http.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB,SAAU,CAAC;AAC1C,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,QAAmB,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,EAAE,iBAAiB;IAShC,OAAO,CAAC,CAAC,EACb,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAKrB,QAAQ,CAAC,CAAC,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAK3B,8DAA8D;IACxD,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAiBpC;;;;;;;;;OASG;IACG,UAAU,CACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC;QACT,QAAQ,EAAE,QAAQ,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,IAAI,CAAC;QAClB,MAAM,EAAE;YAAE,aAAa,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;KACrD,CAAC;YA2BY,IAAI;YA4DJ,QAAQ;YAuCR,SAAS;CAexB;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,QAAQ,EAClB,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,UAAU,CAAC,CAkCrB"}

package/dist/api/http.js

@@ -49,15 +49,36 @@ export class HttpClient {
             requestId,
         };
     }
-    /** Raw streaming response, for the SSE reader to consume. */
+    /**
+     * Raw streaming response, for the SSE reader to consume.
+     *
+     * F-009 · Returns `abort` and the limits the reader should apply. The
+     * request timeout in `send` is cleared once the headers arrive - which for a
+     * stream is the start - so from here on the deadline belongs to whoever is
+     * reading the body, and it needs a way to close the connection rather than
+     * merely stop reading. Generation is what gets billed; dropping our end of
+     * a socket we are no longer reading does not stop it.
+     */
     async postStream(path, body, options = {}) {
-        const response = await this.send("POST", path, body, options, {
-            accept: "text/event-stream",
-        });
+        const streamController = new AbortController();
+        const response = await this.send("POST", path, body, {
+            ...options,
+            signal: options.signal
+                ? AbortSignal.any([options.signal, streamController.signal])
+                : streamController.signal,
+        }, { accept: "text/event-stream" });
         const requestId = requestIdOf(response.headers);
         if (!response.ok)
             throw await this.errorFrom(response, requestId, options);
-        return { response, requestId };
+        return {
+            response,
+            requestId,
+            abort: () => streamController.abort(),
+            limits: {
+                idleTimeoutMs: options.timeoutMs ?? this.timeoutMs,
+                maxBytes: options.maxBytes ?? this.maxBytes,
+            },
+        };
     }
     async send(method, path, body, options, extraHeaders = {}) {
         const url = `${this.baseUrl}${path.startsWith("/") ? path : `/${path}`}`;

package/dist/api/sse-parser.d.ts

@@ -62,11 +62,51 @@ export declare class ChatStreamAssembler {
     push(payload: string): boolean;
     result(): StreamResult;
 }
+/** F-009 · Limits that apply for the whole life of the stream. */
+export interface StreamLimits {
+    /**
+     * How long to wait for the *next* chunk, not for the whole stream. A total
+     * deadline would kill a legitimately long generation; what "hung" actually
+     * means is that nothing is arriving.
+     */
+    readonly idleTimeoutMs?: number;
+    /** Total bytes accepted before the stream is treated as hostile. */
+    readonly maxBytes?: number;
+    /**
+     * R-3 · A ceiling on the whole stream, not just on the gaps in it.
+     *
+     * The idle deadline is the right primitive for "this hung" - a long
+     * generation is not a stalled one - but it is defeated by a trickle: a few
+     * bytes before each deadline holds the connection indefinitely. The byte cap
+     * bounds the volume and not the time, so this bounds the time.
+     *
+     * Generous on purpose. It is a backstop against a hostile upstream, not a
+     * limit on how long a model may think, and a single response that takes
+     * longer than this is not a case worth serving.
+     */
+    readonly maxTotalMs?: number;
+    /**
+     * Closes the underlying connection. Cancelling the reader alone stops us
+     * reading; it does not reliably stop the gateway generating, and generation
+     * is what gets billed.
+     */
+    readonly abort?: () => void;
+}
+export declare const DEFAULT_STREAM_IDLE_MS = 120000;
+export declare const DEFAULT_STREAM_MAX_BYTES: number;
+/** Matches the agent's wall-clock ceiling (§7.4), for the same reason. */
+export declare const DEFAULT_STREAM_TOTAL_MS: number;
 /**
  * Read a streaming response to completion.
  *
  * `signal` is the user's Ctrl+C: aborting stops reading AND closes the
  * connection, which is what actually tells the gateway to stop generating.
+ *
+ * F-009 · The request timeout in `HttpClient` is cleared the moment the
+ * response headers arrive, which for a stream is the beginning rather than the
+ * end. Without the two limits below, a gateway that sent headers and then
+ * stopped would hang the CLI forever, and one that never stopped sending would
+ * grow the buffer until the process died.
  */
-export declare function readChatStream(response: Response, events?: StreamEvents, signal?: AbortSignal): Promise<StreamResult>;
+export declare function readChatStream(response: Response, events?: StreamEvents, signal?: AbortSignal, limits?: StreamLimits): Promise<StreamResult>;
 //# sourceMappingURL=sse-parser.d.ts.map

package/dist/api/sse-parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse-parser.d.ts","sourceRoot":"","sources":["../../src/api/sse-parser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;CACf;AAWD,+EAA+E;AAC/E,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAE7C,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE;IAMjC,kDAAkD;IAClD,GAAG,IAAI,MAAM,EAAE;IASf,OAAO,CAAC,KAAK;CAYd;AAED,8DAA8D;AAC9D,qBAAa,mBAAmB;IAOlB,OAAO,CAAC,QAAQ,CAAC,MAAM;IANnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAC7D,OAAO,CAAC,IAAI,CAAM;IAClB,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,KAAK,CAAC,CAAc;IAC5B,OAAO,CAAC,IAAI,CAAS;gBAEQ,MAAM,GAAE,YAAiB;IAEtD,4DAA4D;IAC5D,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAgD9B,MAAM,IAAI,YAAY;CASvB;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,QAAQ,EAClB,MAAM,GAAE,YAAiB,EACzB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,CAAC,CAkCvB"}
+{"version":3,"file":"sse-parser.d.ts","sourceRoot":"","sources":["../../src/api/sse-parser.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;CACf;AAWD,+EAA+E;AAC/E,qBAAa,SAAS;IACpB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAE7C,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE;IAMjC,kDAAkD;IAClD,GAAG,IAAI,MAAM,EAAE;IASf,OAAO,CAAC,KAAK;CAYd;AAED,8DAA8D;AAC9D,qBAAa,mBAAmB;IAOlB,OAAO,CAAC,QAAQ,CAAC,MAAM;IANnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAC7D,OAAO,CAAC,IAAI,CAAM;IAClB,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,KAAK,CAAC,CAAc;IAC5B,OAAO,CAAC,IAAI,CAAS;gBAEQ,MAAM,GAAE,YAAiB;IAEtD,4DAA4D;IAC5D,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAgD9B,MAAM,IAAI,YAAY;CASvB;AAED,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAC9C,eAAO,MAAM,wBAAwB,QAAmB,CAAC;AACzD,0EAA0E;AAC1E,eAAO,MAAM,uBAAuB,QAAc,CAAC;AAEnD;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,QAAQ,EAClB,MAAM,GAAE,YAAiB,EACzB,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,GAAE,YAAiB,GACxB,OAAO,CAAC,YAAY,CAAC,CAyFvB"}

package/dist/api/sse-parser.js

@@ -1,22 +1,5 @@
-/**
- * SSE reader for the chat data plane.
- *
- * Every rule here is a fact measured in Phase 0 against real transcripts from
- * DeepSeek, Kimi, Qwen and Vertex Gemini (tests/fixtures/cli-000*), not an
- * assumption about how streaming "usually" works:
- *
- *   - `id` and `name` arrive exactly once, so tool calls merge by `index`.
- *   - Qwen sends `"id": ""` on continuation frames; `??` would overwrite the
- *     real id with an empty string and the tool result would be rejected.
- *   - Gemini packs a thought signature into the id (700+ chars) and delivers a
- *     whole call in one frame, where Kimi takes nine — fragment counts mean
- *     nothing.
- *   - `finish_reason` arrives in its own frame with an empty delta; `[DONE]`
- *     ends the stream.
- *   - With `stream_options.include_usage`, usage arrives AFTER finish_reason
- *     in a frame whose `choices` is non-empty but whose delta is empty. A
- *     parser that only reads usage when `choices` is empty reports zero cost.
- */
+import { ApiError } from "./errors.js";
+import { ExitCode } from "../output/exit-codes.js";
 /** Split a byte stream into SSE `data:` payloads across arbitrary chunking. */
 export class SseFramer {
     buffer = "";
@@ -117,20 +100,37 @@ export class ChatStreamAssembler {
         };
     }
 }
+export const DEFAULT_STREAM_IDLE_MS = 120_000;
+export const DEFAULT_STREAM_MAX_BYTES = 32 * 1024 * 1024;
+/** Matches the agent's wall-clock ceiling (§7.4), for the same reason. */
+export const DEFAULT_STREAM_TOTAL_MS = 30 * 60_000;
 /**
  * Read a streaming response to completion.
  *
  * `signal` is the user's Ctrl+C: aborting stops reading AND closes the
  * connection, which is what actually tells the gateway to stop generating.
+ *
+ * F-009 · The request timeout in `HttpClient` is cleared the moment the
+ * response headers arrive, which for a stream is the beginning rather than the
+ * end. Without the two limits below, a gateway that sent headers and then
+ * stopped would hang the CLI forever, and one that never stopped sending would
+ * grow the buffer until the process died.
  */
-export async function readChatStream(response, events = {}, signal) {
+export async function readChatStream(response, events = {}, signal, limits = {}) {
     const framer = new SseFramer();
     const assembler = new ChatStreamAssembler(events);
     const body = response.body;
     if (!body)
         return assembler.result();
+    const idleMs = limits.idleTimeoutMs ?? DEFAULT_STREAM_IDLE_MS;
+    const maxBytes = limits.maxBytes ?? DEFAULT_STREAM_MAX_BYTES;
+    const totalMs = limits.maxTotalMs ?? DEFAULT_STREAM_TOTAL_MS;
+    const startedAt = Date.now();
+    let received = 0;
     const reader = body.getReader();
     const onAbort = () => void reader.cancel();
+    /** Set when `[DONE]` ended the answer while bytes may still be coming. */
+    let finished = false;
     // Attaching a listener is not enough: a signal that aborted between the
     // request and here would never fire one, and the read below would hang
     // forever on a stream nobody is going to close.
@@ -144,12 +144,47 @@ export async function readChatStream(response, events = {}, signal) {
         for (;;) {
             if (signal?.aborted)
                 break;
-            const { done, value } = await reader.read();
+            if (Date.now() - startedAt > totalMs) {
+                limits.abort?.();
+                await reader.cancel().catch(() => { });
+                throw new ApiError({
+                    kind: "timeout",
+                    exitCode: ExitCode.Unavailable,
+                    message: `the stream ran for longer than ${totalMs}ms`,
+                });
+            }
+            const chunk = await withIdleDeadline(reader.read(), idleMs);
+            if (chunk === IDLE) {
+                limits.abort?.();
+                await reader.cancel().catch(() => { });
+                throw new ApiError({
+                    kind: "timeout",
+                    exitCode: ExitCode.Unavailable,
+                    message: `the stream sent nothing for ${idleMs}ms`,
+                });
+            }
+            const { done, value } = chunk;
             if (done)
                 break;
+            received += value.byteLength;
+            if (received > maxBytes) {
+                limits.abort?.();
+                await reader.cancel().catch(() => { });
+                throw new ApiError({
+                    kind: "too_large",
+                    exitCode: ExitCode.Unavailable,
+                    message: `the stream exceeded the ${maxBytes} byte limit`,
+                });
+            }
             for (const payload of framer.push(value)) {
-                if (assembler.push(payload))
+                if (assembler.push(payload)) {
+                    // R-3 · `[DONE]` means the answer is complete, not that the socket
+                    // is. An upstream that keeps the connection open after it would
+                    // otherwise hold ours too - releasing the reader lock in the
+                    // `finally` does not close anything.
+                    finished = true;
                     return assembler.result();
+                }
             }
         }
         for (const payload of framer.end())
@@ -157,7 +192,40 @@ export async function readChatStream(response, events = {}, signal) {
     }
     finally {
         signal?.removeEventListener("abort", onAbort);
+        if (finished) {
+            // Cancel first, then release: cancelling closes the body, and the abort
+            // reaches the fetch itself, which is what actually frees the socket.
+            void reader.cancel().catch(() => { });
+            limits.abort?.();
+        }
         reader.releaseLock();
     }
     return assembler.result();
 }
+/** Sentinel for "the deadline won", distinguishable from a real chunk. */
+const IDLE = Symbol("idle");
+/**
+ * Race a read against the idle deadline.
+ *
+ * The timer is unref'd and always cleared: a pending timer would keep the
+ * process alive after a stream that finished normally.
+ */
+async function withIdleDeadline(read, idleMs) {
+    let timer;
+    try {
+        return await Promise.race([
+            read,
+            new Promise((resolve) => {
+                // Deliberately not unref'd: if a stalled stream were the only thing
+                // left, an unref'd timer would let the process exit silently instead
+                // of reporting the timeout. The finally below always clears it, so
+                // nothing is held open after a stream that ended normally.
+                timer = setTimeout(() => resolve(IDLE), idleMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+}

package/dist/commands/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":"AAKA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAOvE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAatB,eAAO,MAAM,gBAAgB,0XAK+C,CAAC;AAE7E,eAAO,MAAM,YAAY,mgBAOmB,CAAC;AAE7C,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qDAAqD;IACrD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,uBAAuB,EAAE,QAAQ,CAAC;CACrD;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,QAAQ,CAAC,CA+GnB;AAgFD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,OAAO,0JAI3E"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/commands/agent.ts"],"names":[],"mappings":"AAQA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAiBvE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAGnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAmBtB,eAAO,MAAM,gBAAgB,0XAK+C,CAAC;AAE7E,eAAO,MAAM,YAAY,mgBAOmB,CAAC;AAE7C,MAAM,WAAW,OAAQ,SAAQ,SAAS;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qDAAqD;IACrD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,OAAO,uBAAuB,EAAE,QAAQ,CAAC;CACrD;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,OAAO,GACV,OAAO,CAAC,QAAQ,CAAC,CA6HnB;AAoLD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,kBAAkB,EAAE,OAAO,0JAI3E"}

package/dist/commands/agent.js

@@ -1,7 +1,15 @@
 import { fetchAccessibleModels, fetchCatalog, intersectModels, } from "../api/models.js";
+import { existsSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
 import { approverFor } from "../agent/approvals.js";
 import { runAgent } from "../agent/loop.js";
 import { runSession } from "../agent/session.js";
+import { safeForTerminal } from "../output/terminal-safe.js";
+import { sessionsDir } from "../config/paths.js";
+import { keyDigest } from "../security/redact.js";
+import { decideRecording, firstSaveNotice, NOTICE_FILE, } from "../sessions/policy.js";
+import { SessionRecorder } from "../sessions/recorder.js";
+import { SessionWriter } from "../sessions/store.js";
 import { READ_ONLY_TOOLS } from "../agent/tools/read-only.js";
 import { COMMAND_TOOLS } from "../agent/tools/run-command.js";
 import { WRITE_TOOLS } from "../agent/tools/write.js";
@@ -11,14 +19,20 @@ import { renderJson, renderRecord } from "../output/format.js";
 import { formatUsd } from "../output/money.js";
 import { buildRuntime, reportError, requireApiKey, } from "./runtime.js";
 const USAGE = `Usage:
-  mafdet agent "<goal>" [--model <id>] [--allow-write]
+  mafdet agent "<goal>" [--model <id>] [--allow-write] [--read-only]
                         [--allow-command "<prefix>"]... [--max-turns <n>]
                         [--max-cost-usd <n>] [--json]
+  mafdet agent          Interactive session (needs a terminal)
+                        [--title <text>] [--no-history]
 
 Read-only by default. With --allow-write the agent may edit and create files,
-and every change is shown as a diff and confirmed before it is written. There
-is no flag that approves everything in advance, and a non-interactive run
-cannot write at all.
+and every change is shown as a diff and confirmed before it is written.
+--read-only cancels an earlier --allow-write. There is no flag that approves
+everything in advance, and a non-interactive run cannot write at all.
+
+An interactive session is saved on this computer; --no-history records
+nothing and --title names it in 'mafdet sessions list'. To continue a saved
+conversation, use 'mafdet --resume <id>'.
 `;
 export const READ_ONLY_PROMPT = `You are the Mafdet CLI agent working inside a user's workspace.
 
@@ -74,21 +88,36 @@ export async function agentCommand(argv, io) {
                 io.stderr(`mafdet agent: no goal\n${USAGE}`);
                 return ExitCode.Usage;
             }
-            const summary = await runSession({
-                client: runtime.dataPlane,
-                model,
-                pricing: resolved,
-                catalog,
-                systemPrompt: mode === "read-only" ? READ_ONLY_PROMPT : WRITE_PROMPT,
-                tools: buildToolset(mode, parsed.allowedCommands.length > 0),
-                toolContext: { workspace, allowedCommands: parsed.allowedCommands },
-                approver: io.approver ?? approverFor(mode, io, interactive),
-                mode,
-                allowedCommands: parsed.allowedCommands,
-                stdout: io.stdout,
-                stderr: io.stderr,
-                signal: io.signal,
-            });
+            // F-007 · `decideRecording` already called this surface "interactive",
+            // so the policy claimed these runs were saved while nothing saved them.
+            const recorder = openRecorder(parsed, io, model, workspace.root, mode);
+            // R-8 · In a finally: `close()` is what writes the final index entry, so
+            // a session that threw left the listing without it.
+            let summary;
+            try {
+                summary = await runSession({
+                    client: runtime.dataPlane,
+                    ...(recorder === undefined
+                        ? {}
+                        : { onEvent: (event) => recorder.observe(event) }),
+                    model,
+                    pricing: resolved,
+                    catalog,
+                    systemPrompt: mode === "read-only" ? READ_ONLY_PROMPT : WRITE_PROMPT,
+                    tools: buildToolset(mode, parsed.allowedCommands.length > 0),
+                    toolContext: { workspace, allowedCommands: parsed.allowedCommands },
+                    approver: io.approver ?? approverFor(mode, io, interactive),
+                    mode,
+                    allowedCommands: parsed.allowedCommands,
+                    stdout: io.stdout,
+                    stderr: io.stderr,
+                    signal: io.signal,
+                    isTty: isTty(io),
+                });
+            }
+            finally {
+                recorder?.close();
+            }
             io.stderr("\n" +
                 renderRecord([
                     ["goals", `${summary.goals}`],
@@ -130,6 +159,72 @@ export async function agentCommand(argv, io) {
         return reportError(error, io);
     }
 }
+/**
+ * F-007 · A recorder for an interactive `mafdet agent`, or nothing.
+ *
+ * The same store, policy and failure behaviour as the TUI: `--no-history`
+ * writes nothing at all, and a store that cannot be opened costs the
+ * transcript rather than the session.
+ */
+/**
+ * R-8 · The first-save notice, once per machine.
+ *
+ * The marker file is shared with the TUI on purpose: the notice is about this
+ * computer, not about which command happened to write first.
+ */
+function showNoticeOnce(root, io) {
+    const marker = join(root, NOTICE_FILE);
+    try {
+        if (existsSync(marker))
+            return;
+        io.stderr(firstSaveNotice(root));
+        writeFileSync(marker, `${new Date().toISOString()}\n`, { mode: 0o600 });
+    }
+    catch {
+        // Telling the user is best effort; failing to record that we told them
+        // must not stop the session.
+    }
+}
+/** Whether a terminal is on the other end of stdout. Injectable for tests. */
+function isTty(io) {
+    return io.isTty ?? process.stdout.isTTY === true;
+}
+function openRecorder(parsed, io, modelId, workspaceRoot, mode) {
+    const decision = decideRecording({
+        surface: "interactive",
+        noHistory: parsed.noHistory,
+        save: false,
+    });
+    if (!decision.record)
+        return undefined;
+    const env = io.env ?? process.env;
+    const root = sessionsDir(env);
+    try {
+        const writer = SessionWriter.create({
+            root,
+            title: parsed.title ??
+                workspaceRoot.split(/[\\/]/).filter(Boolean).at(-1) ??
+                "Conversation",
+            modelId,
+            workspace: workspaceRoot,
+            mode,
+        });
+        // R-8 · Said once per machine, on whichever surface records first. The
+        // TUI showed it and this one did not, so a `mafdet agent` user could have
+        // a transcript on disk without ever being told.
+        showNoticeOnce(root, io);
+        return new SessionRecorder({
+            writer,
+            root,
+            apiKeyRef: keyDigest(env.MAFDET_API_KEY ?? ""),
+            onProblem: (message) => io.stderr(`${message}\n`),
+        });
+    }
+    catch (error) {
+        io.stderr(`not recording this conversation: ${error instanceof Error ? error.message : String(error)}\n`);
+        return undefined;
+    }
+}
 function parseArgs(argv, io) {
     const positional = [];
     let model;
@@ -137,6 +232,8 @@ function parseArgs(argv, io) {
     let maxCostMicroUsd;
     let json = false;
     let allowWrite = false;
+    let noHistory = false;
+    let title;
     const allowedCommands = [];
     for (let i = 0; i < argv.length; i += 1) {
         const arg = argv[i];
@@ -157,6 +254,25 @@ function parseArgs(argv, io) {
         }
         else if (arg === "--read-only")
             allowWrite = false;
+        else if (arg === "--no-history")
+            noHistory = true;
+        else if (arg === "--title") {
+            const entry = next();
+            if (!entry) {
+                io.stderr("mafdet agent: --title needs a value\n");
+                return ExitCode.Usage;
+            }
+            title = entry;
+        }
+        else if (arg === "--resume") {
+            // F-007 · Deliberately not implemented here, and said rather than
+            // silently ignored. Resuming has to reconcile the session's model and
+            // workspace against the current key, which the TUI has a place to do
+            // and this surface does not - and a second, weaker resume path is
+            // exactly how the two drift apart. F-003 was that drift.
+            io.stderr("mafdet agent: --resume is not available here; run 'mafdet --resume <id>'\n");
+            return ExitCode.Usage;
+        }
         else if (arg === "--max-turns") {
             const raw = next();
             maxTurns = Number(raw);
@@ -198,6 +314,8 @@ function parseArgs(argv, io) {
         maxTurns,
         maxCostMicroUsd,
         json,
+        noHistory,
+        ...(title === undefined ? {} : { title }),
     };
 }
 /**
@@ -229,8 +347,10 @@ function finish(report, json, io) {
         io.stdout(renderJson({ ...report, costMicroUsd: report.costMicroUsd.toString() }));
     }
     else {
-        if (report.finalText)
-            io.stdout(`${report.finalText}\n`);
+        // R-4 · The model's answer, sanitised only when a terminal is reading it.
+        if (report.finalText) {
+            io.stdout(`${safeForTerminal(report.finalText, isTty(io))}\n`);
+        }
         io.stderr("\n" +
             renderRecord([
                 ["status", report.stopReason],
@@ -258,6 +378,11 @@ function finish(report, json, io) {
         case "max_turns":
         case "timeout":
         case "max_cost":
+        // F-008 · A ceiling too: the window ran out, and the report says which.
+        case "context_limit":
+        // R-5 · Asked for a ceiling we cannot enforce; stopped rather than spend
+        // past it. A limit, so it belongs with the other limits.
+        case "cost_unknown":
             // Stopped short on purpose; the report says so rather than pretending.
             return ExitCode.LimitReached;
         case "rate_limited":

package/dist/commands/chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/commands/chat.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAOxE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAatB,MAAM,WAAW,MAAO,SAAQ,SAAS;IACvC,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,gDAAgD;IAChD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAcD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CA8BnB;AAoSD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,GAAG,SAAS,EAC/B,KAAK,EAAE,WAAW,GACjB,MAAM,GAAG,SAAS,CASpB"}
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../src/commands/chat.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAWxE,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAatB,MAAM,WAAW,MAAO,SAAQ,SAAS;IACvC,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,gDAAgD;IAChD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAcD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,CAAC,CA8BnB;AA8SD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,GAAG,SAAS,EAC/B,KAAK,EAAE,WAAW,GACjB,MAAM,GAAG,SAAS,CASpB"}

package/dist/commands/chat.js

@@ -2,6 +2,7 @@ import { readFileSync } from "node:fs";
 import { fetchCatalog } from "../api/models.js";
 import { readChatStream } from "../api/sse-parser.js";
 import { ApiError } from "../api/errors.js";
+import { safeForTerminal, terminalSafeWriter, } from "../output/terminal-safe.js";
 import { sessionsDir } from "../config/paths.js";
 import { keyDigest } from "../security/redact.js";
 import { upsertIndexEntry } from "../sessions/index-file.js";
@@ -196,7 +197,11 @@ function saveChat(args, io, answer, usage, requestId, model) {
                 model_id: args.model,
                 prompt_tokens: usage.prompt_tokens,
                 completion_tokens: usage.completion_tokens,
-                estimated_charge_micro_usd: (micros ?? 0n).toString(),
+                // F-012 · Omitted rather than zeroed when the catalogue could not
+                // price it: "we do not know" must not be recorded as "it was free".
+                ...(micros === undefined
+                    ? {}
+                    : { estimated_charge_micro_usd: micros.toString() }),
                 settlement_status: "pending",
                 api_key_ref: keyDigest(readKey(io)),
             });
@@ -217,6 +222,10 @@ function chatTitle(prompt) {
     const trimmed = line.trim();
     return trimmed.length > 60 ? `${trimmed.slice(0, 57)}...` : trimmed;
 }
+/** Whether a terminal is on the other end of stdout. Injectable for tests. */
+function isTty(io) {
+    return io.isTty ?? process.stdout.isTTY === true;
+}
 function readKey(io) {
     return (io.env ?? process.env).MAFDET_API_KEY ?? "";
 }
@@ -238,12 +247,20 @@ async function priceModel(runtime, modelId, needed) {
     }
 }
 async function streamChat(runtime, body, args, io) {
-    const { response, requestId } = await runtime.dataPlane.postStream("/chat/completions", body, {
+    const { response, requestId, abort, limits } = await runtime.dataPlane.postStream("/chat/completions", body, {
         signal: io.signal,
     });
     // Text goes to stdout as it arrives; everything else is stderr, so
     // `mafdet chat ... > answer.txt` captures only the answer.
-    const result = await readChatStream(response, { onText: io.stdout }, io.signal);
+    // F-009 · The limits travel with the stream: without them a gateway that
+    // sent headers and then went quiet would hang here indefinitely.
+    // F-010 · Sanitised only when a terminal is reading: `mafdet chat >
+    // answer.txt` and `| jq` must get the bytes the model sent.
+    const write = terminalSafeWriter(io.stdout, isTty(io));
+    const result = await readChatStream(response, { onText: write }, io.signal, {
+        ...limits,
+        abort,
+    });
     io.stdout("\n");
     const model = await priceModel(runtime, args.model, !args.quiet || args.save);
     if (io.signal?.aborted) {
@@ -260,7 +277,7 @@ async function streamChat(runtime, body, args, io) {
 async function completeChat(runtime, body, args, io) {
     const { data, requestId } = await runtime.dataPlane.postJson("/chat/completions", body, { signal: io.signal });
     const answer = data.choices?.[0]?.message?.content ?? "";
-    io.stdout(`${answer}\n`);
+    io.stdout(`${safeForTerminal(answer, isTty(io))}\n`);
     const model = await priceModel(runtime, args.model, !args.quiet || args.save);
     summarise(args, data.usage, io, model);
     saveChat(args, io, answer, data.usage, requestId, model);

package/dist/commands/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAOnD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,SAAS,GACZ,QAAQ,CAwEV"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAOnD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,SAAS,GACZ,QAAQ,CAsEV"}

package/dist/commands/config.js

@@ -44,7 +44,6 @@ export function configCommand(argv, io) {
         model_source: config.modelSource,
         base_url: config.baseUrl,
         backend_url: config.backendUrl,
-        approval_mode: config.approvalMode,
         api_key: config.apiKey ? keyFingerprint(config.apiKey) : null,
         user_config: config.sources.userConfigFound
             ? config.sources.userConfigPath
@@ -61,7 +60,6 @@ export function configCommand(argv, io) {
         ["model", view.model ? `${view.model} (${view.model_source})` : "<unset>"],
         ["base url", view.base_url],
         ["backend url", view.backend_url],
-        ["approval mode", view.approval_mode],
         ["api key", view.api_key ?? "<unset> (set MAFDET_API_KEY)"],
         ["user config", view.user_config ?? "<none>"],
         ["project config", view.project_config ?? "<none>"],

package/dist/commands/runtime.d.ts

@@ -10,6 +10,12 @@ export interface CommandIo {
     /** Injected by tests; production uses global fetch. */
     fetchImpl?: typeof fetch;
     version?: string;
+    /**
+     * F-010 · Whether stdout is a terminal. Untrusted text is stripped of
+     * control sequences only then: a pipe or a file must receive exact bytes.
+     * Defaults to `process.stdout.isTTY`; tests set it explicitly.
+     */
+    isTty?: boolean;
 }
 export interface Runtime {
     config: LoadedConfig;

package/dist/commands/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/commands/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,YAAY,CAAC;IACrB,sCAAsC;IACtC,SAAS,EAAE,UAAU,CAAC;IACtB,yCAAyC;IACzC,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGjD;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAgBnD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CASxD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,GAAG,QAAQ,CAkBnE"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/commands/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEnD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,YAAY,CAAC;IACrB,sCAAsC;IACtC,SAAS,EAAE,UAAU,CAAC;IACtB,yCAAyC;IACzC,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGjD;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,SAAS,GAAG,OAAO,CAgBnD;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CASxD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,GAAG,QAAQ,CAkBnE"}

package/dist/commands/sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/commands/sessions.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAuBnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAgBtB,wBAAsB,eAAe,CACnC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,SAAS,GACZ,OAAO,CAAC,QAAQ,CAAC,CAenB;AAqID,eAAO,MAAM,eAAe,GAAI,IAAI,MAAM,KAAG,MAUX,CAAC"}
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../src/commands/sessions.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AA4BnD,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAgBtB,wBAAsB,eAAe,CACnC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,EAAE,EAAE,SAAS,GACZ,OAAO,CAAC,QAAQ,CAAC,CAUnB;AAoRD,eAAO,MAAM,eAAe,GAAI,IAAI,MAAM,KAAG,MAUX,CAAC"}