@multiplayer-app/agent 0.1.19 → 0.1.21

package/dist/transport/protocol.d.ts

@@ -32,12 +32,17 @@ export interface AgentSessionFile {
     content: string;
 }
 export type AgentSessionCommand = 
-/** A new user turn. `messageId` is the chat message id the platform already persisted. */
+/**
+ * A new user turn. `messageId` is the chat message id the platform already persisted. `profile`
+ * is the kind of work it is — deep research, or building apps and code; without one the turn
+ * continues the previous turn's (an answer to its question, a "continue").
+ */
 {
     type: 'message';
     messageId: string;
     text: string;
     attachments?: AgentSessionAttachment[];
+    profile?: 'research' | 'coding';
 }
 /** Stop the running turn (the user pressed stop, or the session is being shut down). */
  | {
@@ -49,6 +54,22 @@ export type AgentSessionCommand =
     requestId?: string;
     waitForTurn?: boolean;
     onlyIfIdleForMs?: number;
+}
+/**
+ * Workspace live sync: the session's copy of `path` is now `content` (people edited it, or the
+ * guest's change was built on an older version), which the guest merges into its file. Without
+ * `content`, the session took the guest's own version `hash` as-is.
+ */
+ | {
+    type: 'file_state';
+    path: string;
+    hash: string;
+    content?: string;
+}
+/** Someone deleted `path` in the session. */
+ | {
+    type: 'file_delete';
+    path: string;
 };
 export interface AgentSessionCommandAck {
     ok: boolean;
@@ -117,12 +138,58 @@ export type AgentSessionEvent = BaseEvent & (
     messageId: string;
     usage: AgentUsage;
 }
-/** Text files to store as session artifacts. */
+/** Text files to store as session artifacts (guests without workspace live sync). */
  | {
     type: 'files';
     messageId?: string;
     files: AgentSessionFile[];
 }
+/**
+ * Workspace live sync (src/workspace-sync): a workspace text file changed. `base` is the
+ * workspaceFileHash of the session's version this content was built on — absent when the
+ * guest has none (a new file, or any file right after a restart). `final` ends a draft: the
+ * content replaces the drafted text as-is.
+ */
+ | {
+    type: 'file_changed';
+    path: string;
+    content: string;
+    base?: string;
+    final?: boolean;
+} | {
+    type: 'file_deleted';
+    path: string;
+}
+/** What the model has written so far of a file it is still writing: shown live, not yet on disk. */
+ | {
+    type: 'file_draft';
+    path: string;
+    content: string;
+}
+/** The guest wrote the session's version `hash` of `path` (a file_state) to disk unchanged. */
+ | {
+    type: 'file_synced';
+    path: string;
+    hash: string;
+}
+/**
+ * Every TCP port something in the guest listens on, ascending (minus the guest's own
+ * GUEST_RESERVED_PORTS). Sent on startup, on every change and after a reconnect; the
+ * platform offers each one as a live preview.
+ */
+ | {
+    type: 'ports';
+    ports: number[];
+}
+/**
+ * The workspace's app (detected, with builder.json's overrides), as the guest runs it
+ * (src/app): sent on every change and after a reconnect; null once no app runs. Its URL
+ * routes through it.
+ */
+ | {
+    type: 'app';
+    app: AgentAppStatus | null;
+}
 /** Conversation + workspace persisted (project Git commit or session snapshot). */
  | {
     type: 'checkpointed';
@@ -150,11 +217,127 @@ export type AgentSessionEvent = BaseEvent & (
 export type AgentSessionEventType = AgentSessionEvent['type'];
 export declare function agentSessionEventKey(event: AgentSessionEvent): string;
 export declare const AGENT_SESSION_EVENT_TYPES: readonly AgentSessionEventType[];
+export declare const PREVIEW_PORT_HEADER: "x-builder-preview-port";
+/**
+ * On what the gateway asks the api about a session's URL. A browser can't set it on a navigation, so
+ * a link to the api's route for that never runs a session's page on the api's own origin.
+ */
+export declare const SESSION_SITE_HEADER: "x-builder-session-site";
+/**
+ * Whether a URL path holds a dotfile or dot-folder at any depth (.env, .git, the platform's own
+ * .builder), or a `.`/`..` segment. An app's URL never serves one from its files; .well-known is
+ * the exception.
+ */
+/**
+ * A request's target as a URL, to read its path and query. Anyone can send any target, and
+ * `new URL(target, base)` throws on `//` and reads `//host/path` as a host: this does neither,
+ * so leading slashes collapse as most servers treat them.
+ */
+export declare function requestUrl(target: string | undefined): URL;
+export declare function isHiddenSitePath(pathname: string): boolean;
+/** The guest's own listeners: the hook/preview server, dropbear, and Lambda's shell agent. */
+export declare const GUEST_RESERVED_PORTS: readonly number[];
+/**
+ * The port apps are told to listen on ($PORT for the agent's commands). A session's own URL
+ * (<sessionId>.apps.<domain>) opens this one when it listens, else the lowest port that does.
+ */
+export declare const DEFAULT_APP_PORT = 3000;
+/**
+ * PREVIEW_PORT_HEADER's value for a session's own URL (no port in it): the guest picks the target
+ * itself, by the app's rewrites when the workspace holds one, else DEFAULT_APP_PORT or the
+ * lowest listening port. Never parsed from a hostname.
+ */
+export declare const APP_PREVIEW_TARGET: "app";
+/** A header value as a previewable port, or undefined. */
+export declare function parsePreviewPort(value: unknown): number | undefined;
+/** A PREVIEW_PORT_HEADER value: a previewable port, APP_PREVIEW_TARGET, or undefined. */
+export declare function parsePreviewTarget(value: unknown): number | typeof APP_PREVIEW_TARGET | undefined;
+/** The port a session's own URL opens without an app: DEFAULT_APP_PORT when it listens, else the lowest. */
+export declare function defaultAppPort(ports: readonly number[]): number | undefined;
+/**
+ * The app manifest, in the workspace's .builder folder; a session VM
+ * writes it. The one file of .builder that people see and edit as a session file.
+ */
+export declare const APP_CONFIG_FILE: ".builder/builder.json";
+/** Which of a session's stored files are executable: object storage keeps no mode. */
+/**
+ * Where a session's conversation used to be saved, in its workspace and so in its branch. It's kept
+ * in the runtime's state directory now (persistence/conversation-store.ts), but repos still hold old
+ * copies: they stay off main when a session merges, and out of what a new session starts from.
+ */
+export declare const SESSION_CONVERSATION_FILE = ".builder/conversation.json";
+export declare const WORKSPACE_EXECUTABLES_FILE: ".builder/executables.json";
+/** Dependencies and build output: saved with a workspace, but not files people open. */
+export declare const WORKSPACE_GENERATED_DIRECTORIES: readonly string[];
+/** Guest-only: a deployment's app status as JSON. `/internal/*` is never routed publicly. */
+export declare const APP_STATUS_PATH: "/internal/app/status";
+/** A built release's record of what it holds; written last, so a release that has one is complete. */
+export declare const RELEASE_MANIFEST_FILE: "manifest.json";
+/** The compressed copies of a built release's static files, best first. */
+export declare const SITE_ENCODINGS: readonly ["br", "gzip"];
+export type SiteEncoding = (typeof SITE_ENCODINGS)[number];
+/** What a built release's VM runs: its folders as they were built, dependencies and all. */
+export declare const RELEASE_ARCHIVE_FILE: "run.tar.zst";
+/** How far a release's build has got, on a build VM's APP_STATUS_PATH as `{ build }`. */
+export type AgentBuildPhase = 'fetching' | 'installing' | 'building' | 'uploading' | 'done' | 'failed';
+export interface AgentBuildStatus {
+    phase: AgentBuildPhase;
+    /** Why it failed. */
+    error?: string;
+    /** The end of the log of the step running, or of the one that failed. */
+    log?: string;
+    /** What the finished release answers with: files from storage, processes on a VM, or some of each. */
+    serves?: 'files' | 'processes' | 'both';
+}
+/** Where the app is: installing and building come before its processes start. */
+export type AgentAppPhase = 'installing' | 'building' | 'starting' | 'running' | 'failed';
+export interface AgentAppProcess {
+    name: string;
+    kind: 'service' | 'daemon';
+    /** A static service is served by the guest itself and always 'running'. */
+    state: 'starting' | 'running' | 'crashed' | 'stopped';
+    port?: number;
+    restarts: number;
+    exitCode?: number | null;
+    signal?: string | null;
+    /** Workspace-relative log file. */
+    log?: string;
+}
+export interface AgentAppStatus {
+    phase: AgentAppPhase;
+    /** Why the app can't run: an invalid builder.json, or the install or build that failed. */
+    error?: string;
+    processes: AgentAppProcess[];
+    /** The framework it runs as (a Vercel slug); null for none: a package's own scripts, static files. */
+    framework?: string | null;
+    /** Whether builder.json said how it runs, or it was only detected. */
+    source?: 'detected' | 'builder.json';
+}
+/** How both sides of workspace live sync name a version of a file. */
+export declare function workspaceFileHash(content: string): string;
 export declare function isAgentSessionEvent(value: unknown): value is AgentSessionEvent;
 export declare const AGENT_ENV: {
     readonly SESSION_ID: "SESSION_ID";
-    /** 'task' (one AGENT_TASK run, then exit) or 'session' (stay up, serve chat turns). */
+    /**
+     * 'task' (one AGENT_TASK run, then exit), 'session' (stay up, serve chat turns), 'app' (a
+     * deployment: run the release's app on GUEST_HTTP_PORT, no agent) or 'build' (build a release
+     * and upload its output, no agent).
+     */
     readonly AGENT_MODE: "AGENT_MODE";
+    /** 'build' mode: where the release's output goes (the git service's route for that release). */
+    readonly RELEASE_UPLOAD_URL: "RELEASE_UPLOAD_URL";
+    /** secret, 'build' mode: may write only that release's output. */
+    readonly RELEASE_UPLOAD_TOKEN: "RELEASE_UPLOAD_TOKEN";
+    /** 'app' mode: a release built ahead of time: where the files its VM runs are, read with ACCESS_TOKEN. */
+    readonly RELEASE_ARTIFACTS_URL: "RELEASE_ARTIFACTS_URL";
+    /** 'app' mode: the release being run, so a VM restarted on its own disk skips install and build. */
+    readonly APP_RELEASE_ID: "APP_RELEASE_ID";
+    /** 'app' and build modes: the app's directory in the release's repository. */
+    readonly APP_ROOT_DIR: "APP_ROOT_DIR";
+    /** 'app' and build modes: the commit to check out. */
+    readonly GIT_COMMIT: "GIT_COMMIT";
+    /** The JSON schema the builder.json a session VM writes names as its `$schema`; written down, never fetched. */
+    readonly APP_SCHEMA_URL: "APP_SCHEMA_URL";
     /** 'coding' (default) or 'research'. */
     readonly AGENT_PROFILE: "AGENT_PROFILE";
     readonly AGENT_TASK: "AGENT_TASK";
@@ -164,6 +347,8 @@ export declare const AGENT_ENV: {
     /** Total tokens the session may spend before it pauses and asks whether to continue. */
     readonly AGENT_TOKEN_BUDGET: "AGENT_TOKEN_BUDGET";
     readonly AGENT_WORKSPACE_DIR: "AGENT_WORKSPACE_DIR";
+    /** The runtime's own files (its conversation, its git data), which nothing it runs can read. */
+    readonly AGENT_STATE_DIR: "AGENT_STATE_DIR";
     /** The gateway's agent socket; the guest authenticates to it with ACCESS_TOKEN (session-scoped). */
     readonly AGENT_SOCKET_URL: "AGENT_SOCKET_URL";
     /** secret: model provider keys (one of them) */
@@ -194,6 +379,8 @@ export declare const AGENT_ENV: {
      */
     readonly ACCESS_TOKEN: "ACCESS_TOKEN";
 };
+/** The settings that deliver a release to its VM; the rest of a deployed VM's env is the app's own. */
+export declare const RELEASE_DELIVERY_ENV: readonly string[];
 export declare const AGENT_SECRET_ENV_KEYS: readonly string[];
 export {};
 //# sourceMappingURL=protocol.d.ts.map

package/dist/transport/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/transport/protocol.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAA;AACjE,eAAO,MAAM,qBAAqB,EAAG,uBAAgC,CAAA;AAErE,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,gGAAgG;AAChG,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAA;IAChD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,mEAAmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,iHAAiH;IACjH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAED,oGAAoG;AACpG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,mBAAmB;AAC7B,0FAA0F;AACxF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,sBAAsB,EAAE,CAAA;CAAE;AAC9F,wFAAwF;GACtF;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE;AACnB,qFAAqF;GACnF;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAE/F,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,UAAU,SAAS;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8FAA8F;IAC9F,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GACvC;AACE,4EAA4E;AAC1E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AACjF,mDAAmD;GACjD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACpG;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACvG,8FAA8F;GAC5F;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,iBAAiB,EAAE,CAAA;CAAE;AAC1F;;;;GAIG;GACD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE;AACzD,gDAAgD;GAC9C;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,gBAAgB,EAAE,CAAA;CAAE;AAClE,mFAAmF;GACjF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACzG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAEtD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CACpC,CAAA;AAEH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;AAE7D,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAGrE;AAED,eAAO,MAAM,yBAAyB,EAAE,SAAS,qBAAqB,EAgBrE,CAAA;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAQ9E;AAOD,eAAO,MAAM,SAAS;;IAEpB,uFAAuF;;IAEvF,wCAAwC;;;;IAIxC,6DAA6D;;IAE7D,wFAAwF;;;IAGxF,oGAAoG;;IAEpG,gDAAgD;;;IAGhD,2CAA2C;;;IAG3C,wFAAwF;;IAExF,qFAAqF;;IAErF,aAAa;;IAEb,mEAAmE;;IAEnE,uDAAuD;;;;;IAKvD,oFAAoF;;;IAGpF;;;OAGG;;CAEK,CAAA;AAEV,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAOlD,CAAA"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/transport/protocol.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAA;AACjE,eAAO,MAAM,qBAAqB,EAAG,uBAAgC,CAAA;AAErE,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,gGAAgG;AAChG,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAA;IAChD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,mEAAmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,iHAAiH;IACjH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;CACd;AAED,oGAAoG;AACpG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,MAAM,mBAAmB;AAC7B;;;;GAIG;AACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAA;CAAE;AAC/H,wFAAwF;GACtF;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE;AACnB,qFAAqF;GACnF;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE;AAC7F;;;;GAIG;GACD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AACtE,6CAA6C;GAC3C;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzC,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,UAAU,SAAS;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8FAA8F;IAC9F,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GACvC;AACE,4EAA4E;AAC1E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AACjF,mDAAmD;GACjD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GACpG;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AACvG,8FAA8F;GAC5F;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,iBAAiB,EAAE,CAAA;CAAE;AAC1F;;;;GAIG;GACD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE;AACzD,qFAAqF;GACnF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,gBAAgB,EAAE,CAAA;CAAE;AAClE;;;;;GAKG;GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACxC,oGAAoG;GAClG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACvD,+FAA+F;GAC7F;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACrD;;;;GAIG;GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE;AACpC;;;;GAIG;GACD;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,cAAc,GAAG,IAAI,CAAA;CAAE;AAC7C,mFAAmF;GACjF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GACzG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAEtD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CACpC,CAAA;AAEH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;AAE7D,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAGrE;AAED,eAAO,MAAM,yBAAyB,EAAE,SAAS,qBAAqB,EAsBrE,CAAA;AAOD,eAAO,MAAM,mBAAmB,EAAG,wBAAiC,CAAA;AACpE;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAG,wBAAiC,CAAA;AACpE;;;;GAIG;AACH;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,GAAG,CAE1D;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE1D;AACD,8FAA8F;AAC9F,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAAuB,CAAA;AACzE;;;GAGG;AACH,eAAO,MAAM,gBAAgB,OAAO,CAAA;AAEpC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAG,KAAc,CAAA;AAEhD,0DAA0D;AAC1D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAInE;AAED,yFAAyF;AACzF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,kBAAkB,GAAG,SAAS,CAEjG;AAED,4GAA4G;AAC5G,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAG3E;AAOD;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAG,uBAAgC,CAAA;AAC/D,sFAAsF;AACtF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,+BAA+B,CAAA;AACrE,eAAO,MAAM,0BAA0B,EAAG,2BAAoC,CAAA;AAC9E,wFAAwF;AACxF,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAE5D,CAAA;AACD,6FAA6F;AAC7F,eAAO,MAAM,eAAe,EAAG,sBAA+B,CAAA;AAE9D,sGAAsG;AACtG,eAAO,MAAM,qBAAqB,EAAG,eAAwB,CAAA;AAC7D,2EAA2E;AAC3E,eAAO,MAAM,cAAc,yBAA0B,CAAA;AACrD,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAC1D,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB,EAAG,aAAsB,CAAA;AAE1D,yFAAyF;AACzF,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEtG,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,eAAe,CAAA;IACtB,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,sGAAsG;IACtG,MAAM,CAAC,EAAE,OAAO,GAAG,WAAW,GAAG,MAAM,CAAA;CACxC;AAED,iFAAiF;AACjF,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEzF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAA;IAC1B,2EAA2E;IAC3E,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAA;IACrD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,aAAa,CAAA;IACpB,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,eAAe,EAAE,CAAA;IAC5B,sGAAsG;IACtG,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,sEAAsE;IACtE,MAAM,CAAC,EAAE,UAAU,GAAG,cAAc,CAAA;CACrC;AAED,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAQ9E;AAOD,eAAO,MAAM,SAAS;;IAEpB;;;;OAIG;;IAEH,gGAAgG;;IAEhG,kEAAkE;;IAElE,0GAA0G;;IAE1G,oGAAoG;;IAEpG,8EAA8E;;IAE9E,sDAAsD;;IAEtD,gHAAgH;;IAEhH,wCAAwC;;;;IAIxC,6DAA6D;;IAE7D,wFAAwF;;;IAGxF,gGAAgG;;IAEhG,oGAAoG;;IAEpG,gDAAgD;;;IAGhD,2CAA2C;;;IAG3C,wFAAwF;;IAExF,qFAAqF;;IAErF,aAAa;;IAEb,mEAAmE;;IAEnE,uDAAuD;;;;;IAKvD,oFAAoF;;;IAGpF;;;OAGG;;CAEK,CAAA;AAEV,uGAAuG;AACvG,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAgBjD,CAAA;AAED,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAOlD,CAAA"}

package/dist/transport/protocol.js

@@ -1,4 +1,15 @@
 "use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGENT_SECRET_ENV_KEYS = exports.RELEASE_DELIVERY_ENV = exports.AGENT_ENV = exports.RELEASE_ARCHIVE_FILE = exports.SITE_ENCODINGS = exports.RELEASE_MANIFEST_FILE = exports.APP_STATUS_PATH = exports.WORKSPACE_GENERATED_DIRECTORIES = exports.WORKSPACE_EXECUTABLES_FILE = exports.SESSION_CONVERSATION_FILE = exports.APP_CONFIG_FILE = exports.APP_PREVIEW_TARGET = exports.DEFAULT_APP_PORT = exports.GUEST_RESERVED_PORTS = exports.SESSION_SITE_HEADER = exports.PREVIEW_PORT_HEADER = exports.AGENT_SESSION_EVENT_TYPES = exports.AGENT_SESSION_COMMAND = exports.AGENT_SESSION_EVENT = void 0;
+exports.agentSessionRoom = agentSessionRoom;
+exports.agentSessionEventKey = agentSessionEventKey;
+exports.requestUrl = requestUrl;
+exports.isHiddenSitePath = isHiddenSitePath;
+exports.parsePreviewPort = parsePreviewPort;
+exports.parsePreviewTarget = parsePreviewTarget;
+exports.defaultAppPort = defaultAppPort;
+exports.workspaceFileHash = workspaceFileHash;
+exports.isAgentSessionEvent = isAgentSessionEvent;
 // Wire contract between the in-VM agent and the platform. The guest is the owner of this
 // format: the gateway (services/gateway/src/services/sessions/agent-socket-server.ts) forwards it and
 // the API (services/api/src/services/sessions/agent-session-relay.service.ts) turns it into chat
@@ -8,11 +19,7 @@
 // Two directions on one Socket.IO connection:
 //   guest  -> platform  AGENT_SESSION_EVENT   (fire-and-forget, ordered by `seq`)
 //   platform -> guest   AGENT_SESSION_COMMAND (acknowledged)
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AGENT_SECRET_ENV_KEYS = exports.AGENT_ENV = exports.AGENT_SESSION_EVENT_TYPES = exports.AGENT_SESSION_COMMAND = exports.AGENT_SESSION_EVENT = void 0;
-exports.agentSessionRoom = agentSessionRoom;
-exports.agentSessionEventKey = agentSessionEventKey;
-exports.isAgentSessionEvent = isAgentSessionEvent;
+const crypto_1 = require("crypto");
 exports.AGENT_SESSION_EVENT = 'agent-session:event';
 exports.AGENT_SESSION_COMMAND = 'agent-session:command';
 /** Socket.IO room the gateway joins every guest socket to, so the API can address one session. */
@@ -35,12 +42,107 @@ exports.AGENT_SESSION_EVENT_TYPES = [
     'question',
     'usage',
     'files',
+    'file_changed',
+    'file_deleted',
+    'file_draft',
+    'file_synced',
+    'ports',
+    'app',
     'checkpointed',
     'done',
     'error',
     'tool_call',
     'message',
 ];
+// ── Live preview (gateway → guest :8080 → guest app port) ────────────────────────────────────
+// Every engine reaches only the guest's port 8080, where the agent serves its lifecycle hooks and
+// the preview proxy (runtime/preview-proxy.ts). The gateway sets this header on traffic for
+// <vmId>-<port>.apps.<domain>; the proxy forwards such a request to localhost:<port> instead.
+exports.PREVIEW_PORT_HEADER = 'x-builder-preview-port';
+/**
+ * On what the gateway asks the api about a session's URL. A browser can't set it on a navigation, so
+ * a link to the api's route for that never runs a session's page on the api's own origin.
+ */
+exports.SESSION_SITE_HEADER = 'x-builder-session-site';
+/**
+ * Whether a URL path holds a dotfile or dot-folder at any depth (.env, .git, the platform's own
+ * .builder), or a `.`/`..` segment. An app's URL never serves one from its files; .well-known is
+ * the exception.
+ */
+/**
+ * A request's target as a URL, to read its path and query. Anyone can send any target, and
+ * `new URL(target, base)` throws on `//` and reads `//host/path` as a host: this does neither,
+ * so leading slashes collapse as most servers treat them.
+ */
+function requestUrl(target) {
+    return new URL(`http://request.invalid/${(target !== null && target !== void 0 ? target : '').replace(/^[/\\]+/, '')}`);
+}
+function isHiddenSitePath(pathname) {
+    return pathname.split('/').some((part) => part.startsWith('.') && part !== '.well-known');
+}
+/** The guest's own listeners: the hook/preview server, dropbear, and Lambda's shell agent. */
+exports.GUEST_RESERVED_PORTS = [8080, 2222, 8022];
+/**
+ * The port apps are told to listen on ($PORT for the agent's commands). A session's own URL
+ * (<sessionId>.apps.<domain>) opens this one when it listens, else the lowest port that does.
+ */
+exports.DEFAULT_APP_PORT = 3000;
+/**
+ * PREVIEW_PORT_HEADER's value for a session's own URL (no port in it): the guest picks the target
+ * itself, by the app's rewrites when the workspace holds one, else DEFAULT_APP_PORT or the
+ * lowest listening port. Never parsed from a hostname.
+ */
+exports.APP_PREVIEW_TARGET = 'app';
+/** A header value as a previewable port, or undefined. */
+function parsePreviewPort(value) {
+    if (typeof value !== 'string' || !/^\d{1,5}$/.test(value))
+        return undefined;
+    const port = Number(value);
+    return port >= 1 && port <= 65535 && !exports.GUEST_RESERVED_PORTS.includes(port) ? port : undefined;
+}
+/** A PREVIEW_PORT_HEADER value: a previewable port, APP_PREVIEW_TARGET, or undefined. */
+function parsePreviewTarget(value) {
+    return value === exports.APP_PREVIEW_TARGET ? exports.APP_PREVIEW_TARGET : parsePreviewPort(value);
+}
+/** The port a session's own URL opens without an app: DEFAULT_APP_PORT when it listens, else the lowest. */
+function defaultAppPort(ports) {
+    if (ports.includes(exports.DEFAULT_APP_PORT))
+        return exports.DEFAULT_APP_PORT;
+    return ports.length ? Math.min(...ports) : undefined;
+}
+// ── App (builder.json) ─────────────────────────────────────────────────────────────────────
+// The app a workspace holds — detected as Vercel does, with builder.json's overrides — is run by
+// the guest (src/app): in a session VM with its dev commands, in a deployment (AGENT_MODE=app)
+// built and started.
+/**
+ * The app manifest, in the workspace's .builder folder; a session VM
+ * writes it. The one file of .builder that people see and edit as a session file.
+ */
+exports.APP_CONFIG_FILE = '.builder/builder.json';
+/** Which of a session's stored files are executable: object storage keeps no mode. */
+/**
+ * Where a session's conversation used to be saved, in its workspace and so in its branch. It's kept
+ * in the runtime's state directory now (persistence/conversation-store.ts), but repos still hold old
+ * copies: they stay off main when a session merges, and out of what a new session starts from.
+ */
+exports.SESSION_CONVERSATION_FILE = '.builder/conversation.json';
+exports.WORKSPACE_EXECUTABLES_FILE = '.builder/executables.json';
+/** Dependencies and build output: saved with a workspace, but not files people open. */
+exports.WORKSPACE_GENERATED_DIRECTORIES = [
+    'node_modules', '.venv', '__pycache__', '.next', '.nuxt', '.cache', '.turbo', 'dist', 'build', 'coverage',
+];
+/** Guest-only: a deployment's app status as JSON. `/internal/*` is never routed publicly. */
+exports.APP_STATUS_PATH = '/internal/app/status';
+/** A built release's record of what it holds; written last, so a release that has one is complete. */
+exports.RELEASE_MANIFEST_FILE = 'manifest.json';
+/** The compressed copies of a built release's static files, best first. */
+exports.SITE_ENCODINGS = ['br', 'gzip'];
+/** What a built release's VM runs: its folders as they were built, dependencies and all. */
+exports.RELEASE_ARCHIVE_FILE = 'run.tar.zst';
+/** How both sides of workspace live sync name a version of a file. */
+function workspaceFileHash(content) {
+    return (0, crypto_1.createHash)('sha256').update(content, 'utf8').digest('hex');
+}
 function isAgentSessionEvent(value) {
     if (!value || typeof value !== 'object')
         return false;
@@ -50,13 +152,31 @@ function isAgentSessionEvent(value) {
         exports.AGENT_SESSION_EVENT_TYPES.includes(event.type));
 }
 // ── Environment contract (VM env → guest) ──────────────────────────────────────────────────
-// Documented here so the API's env builder (services/api/src/services/sessions/research-vm-env.ts) and
+// Documented here so the API's env builder (services/api/src/services/sessions/session-vm-env.ts) and
 // the guest's config.ts agree on names. Values marked secret must never be persisted on the VM
 // record; the API sends them to the worker only.
 exports.AGENT_ENV = {
     SESSION_ID: 'SESSION_ID',
-    /** 'task' (one AGENT_TASK run, then exit) or 'session' (stay up, serve chat turns). */
+    /**
+     * 'task' (one AGENT_TASK run, then exit), 'session' (stay up, serve chat turns), 'app' (a
+     * deployment: run the release's app on GUEST_HTTP_PORT, no agent) or 'build' (build a release
+     * and upload its output, no agent).
+     */
     AGENT_MODE: 'AGENT_MODE',
+    /** 'build' mode: where the release's output goes (the git service's route for that release). */
+    RELEASE_UPLOAD_URL: 'RELEASE_UPLOAD_URL',
+    /** secret, 'build' mode: may write only that release's output. */
+    RELEASE_UPLOAD_TOKEN: 'RELEASE_UPLOAD_TOKEN',
+    /** 'app' mode: a release built ahead of time: where the files its VM runs are, read with ACCESS_TOKEN. */
+    RELEASE_ARTIFACTS_URL: 'RELEASE_ARTIFACTS_URL',
+    /** 'app' mode: the release being run, so a VM restarted on its own disk skips install and build. */
+    APP_RELEASE_ID: 'APP_RELEASE_ID',
+    /** 'app' and build modes: the app's directory in the release's repository. */
+    APP_ROOT_DIR: 'APP_ROOT_DIR',
+    /** 'app' and build modes: the commit to check out. */
+    GIT_COMMIT: 'GIT_COMMIT',
+    /** The JSON schema the builder.json a session VM writes names as its `$schema`; written down, never fetched. */
+    APP_SCHEMA_URL: 'APP_SCHEMA_URL',
     /** 'coding' (default) or 'research'. */
     AGENT_PROFILE: 'AGENT_PROFILE',
     AGENT_TASK: 'AGENT_TASK',
@@ -66,6 +186,8 @@ exports.AGENT_ENV = {
     /** Total tokens the session may spend before it pauses and asks whether to continue. */
     AGENT_TOKEN_BUDGET: 'AGENT_TOKEN_BUDGET',
     AGENT_WORKSPACE_DIR: 'AGENT_WORKSPACE_DIR',
+    /** The runtime's own files (its conversation, its git data), which nothing it runs can read. */
+    AGENT_STATE_DIR: 'AGENT_STATE_DIR',
     /** The gateway's agent socket; the guest authenticates to it with ACCESS_TOKEN (session-scoped). */
     AGENT_SOCKET_URL: 'AGENT_SOCKET_URL',
     /** secret: model provider keys (one of them) */
@@ -96,6 +218,24 @@ exports.AGENT_ENV = {
      */
     ACCESS_TOKEN: 'ACCESS_TOKEN',
 };
+/** The settings that deliver a release to its VM; the rest of a deployed VM's env is the app's own. */
+exports.RELEASE_DELIVERY_ENV = [
+    exports.AGENT_ENV.ACCESS_TOKEN,
+    exports.AGENT_ENV.AGENT_MODE,
+    exports.AGENT_ENV.AGENT_WORKSPACE_DIR,
+    exports.AGENT_ENV.SESSION_STORAGE_URL,
+    exports.AGENT_ENV.GIT_SERVER_URL,
+    exports.AGENT_ENV.GIT_REPOSITORY,
+    exports.AGENT_ENV.GIT_REPOSITORY_DIR,
+    exports.AGENT_ENV.GIT_BRANCH,
+    exports.AGENT_ENV.GIT_COMMIT,
+    exports.AGENT_ENV.APP_ROOT_DIR,
+    exports.AGENT_ENV.APP_RELEASE_ID,
+    exports.AGENT_ENV.RELEASE_UPLOAD_URL,
+    exports.AGENT_ENV.RELEASE_UPLOAD_TOKEN,
+    exports.AGENT_ENV.RELEASE_ARTIFACTS_URL,
+    'APP_WORK_DIR',
+];
 exports.AGENT_SECRET_ENV_KEYS = [
     exports.AGENT_ENV.OPENROUTER_API_KEY,
     exports.AGENT_ENV.ANTHROPIC_API_KEY,

package/dist/transport/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/transport/protocol.ts"],"names":[],"mappings":";AAAA,yFAAyF;AACzF,sGAAsG;AACtG,iGAAiG;AACjG,8FAA8F;AAC9F,wEAAwE;AACxE,EAAE;AACF,8CAA8C;AAC9C,kFAAkF;AAClF,6DAA6D;;;AAM7D,4CAEC;AAyFD,oDAGC;AAoBD,kDAQC;AA9HY,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AACpD,QAAA,qBAAqB,GAAG,uBAAgC,CAAA;AAErE,kGAAkG;AAClG,SAAgB,gBAAgB,CAAC,SAAiB;IAChD,OAAO,iBAAiB,SAAS,EAAE,CAAA;AACrC,CAAC;AAyFD,SAAgB,oBAAoB,CAAC,KAAwB;;IAC3D,mFAAmF;IACnF,OAAO,qBAAqB,KAAK,CAAC,SAAS,IAAI,MAAA,KAAK,CAAC,UAAU,mCAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,EAAE,CAAA;AACnG,CAAC;AAEY,QAAA,yBAAyB,GAAqC;IACzE,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,UAAU;IACV,UAAU;IACV,OAAO;IACP,OAAO;IACP,cAAc;IACd,MAAM;IACN,OAAO;IACP,WAAW;IACX,SAAS;CACV,CAAA;AAED,SAAgB,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACrD,MAAM,KAAK,GAAG,KAAmC,CAAA;IACjD,OAAO,CACL,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC7B,iCAA+C,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CACtE,CAAA;AACH,CAAC;AAED,8FAA8F;AAC9F,uGAAuG;AACvG,+FAA+F;AAC/F,iDAAiD;AAEpC,QAAA,SAAS,GAAG;IACvB,UAAU,EAAE,YAAY;IACxB,uFAAuF;IACvF,UAAU,EAAE,YAAY;IACxB,wCAAwC;IACxC,aAAa,EAAE,eAAe;IAC9B,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,6DAA6D;IAC7D,sBAAsB,EAAE,wBAAwB;IAChD,wFAAwF;IACxF,kBAAkB,EAAE,oBAAoB;IACxC,mBAAmB,EAAE,qBAAqB;IAC1C,oGAAoG;IACpG,gBAAgB,EAAE,kBAAkB;IACpC,gDAAgD;IAChD,kBAAkB,EAAE,oBAAoB;IACxC,iBAAiB,EAAE,mBAAmB;IACtC,2CAA2C;IAC3C,gBAAgB,EAAE,kBAAkB;IACpC,uBAAuB,EAAE,yBAAyB;IAClD,wFAAwF;IACxF,qBAAqB,EAAE,uBAAuB;IAC9C,qFAAqF;IACrF,oBAAoB,EAAE,sBAAsB;IAC5C,aAAa;IACb,wBAAwB,EAAE,0BAA0B;IACpD,mEAAmE;IACnE,wBAAwB,EAAE,0BAA0B;IACpD,uDAAuD;IACvD,8BAA8B,EAAE,gCAAgC;IAChE,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,kBAAkB,EAAE,oBAAoB;IACxC,oFAAoF;IACpF,UAAU,EAAE,YAAY;IACxB,mBAAmB,EAAE,qBAAqB;IAC1C;;;OAGG;IACH,YAAY,EAAE,cAAc;CACpB,CAAA;AAEG,QAAA,qBAAqB,GAAsB;IACtD,iBAAS,CAAC,kBAAkB;IAC5B,iBAAS,CAAC,iBAAiB;IAC3B,iBAAS,CAAC,qBAAqB;IAC/B,iBAAS,CAAC,wBAAwB;IAClC,iBAAS,CAAC,YAAY;IACtB,iBAAS,CAAC,gBAAgB;CAC3B,CAAA"}
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/transport/protocol.ts"],"names":[],"mappings":";;;AAeA,4CAEC;AA6HD,oDAGC;AA+CD,gCAEC;AAED,4CAEC;AAiBD,4CAIC;AAGD,gDAEC;AAGD,wCAGC;AA4ED,8CAEC;AAED,kDAQC;AA9TD,yFAAyF;AACzF,sGAAsG;AACtG,iGAAiG;AACjG,8FAA8F;AAC9F,wEAAwE;AACxE,EAAE;AACF,8CAA8C;AAC9C,kFAAkF;AAClF,6DAA6D;AAC7D,mCAAmC;AAEtB,QAAA,mBAAmB,GAAG,qBAA8B,CAAA;AACpD,QAAA,qBAAqB,GAAG,uBAAgC,CAAA;AAErE,kGAAkG;AAClG,SAAgB,gBAAgB,CAAC,SAAiB;IAChD,OAAO,iBAAiB,SAAS,EAAE,CAAA;AACrC,CAAC;AA6HD,SAAgB,oBAAoB,CAAC,KAAwB;;IAC3D,mFAAmF;IACnF,OAAO,qBAAqB,KAAK,CAAC,SAAS,IAAI,MAAA,KAAK,CAAC,UAAU,mCAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG,EAAE,CAAA;AACnG,CAAC;AAEY,QAAA,yBAAyB,GAAqC;IACzE,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,kBAAkB;IAClB,UAAU;IACV,UAAU;IACV,OAAO;IACP,OAAO;IACP,cAAc;IACd,cAAc;IACd,YAAY;IACZ,aAAa;IACb,OAAO;IACP,KAAK;IACL,cAAc;IACd,MAAM;IACN,OAAO;IACP,WAAW;IACX,SAAS;CACV,CAAA;AAED,gGAAgG;AAChG,kGAAkG;AAClG,4FAA4F;AAC5F,8FAA8F;AAEjF,QAAA,mBAAmB,GAAG,wBAAiC,CAAA;AACpE;;;GAGG;AACU,QAAA,mBAAmB,GAAG,wBAAiC,CAAA;AACpE;;;;GAIG;AACH;;;;GAIG;AACH,SAAgB,UAAU,CAAC,MAA0B;IACnD,OAAO,IAAI,GAAG,CAAC,0BAA0B,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;AACnF,CAAC;AAED,SAAgB,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,aAAa,CAAC,CAAA;AAC3F,CAAC;AACD,8FAA8F;AACjF,QAAA,oBAAoB,GAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AACzE;;;GAGG;AACU,QAAA,gBAAgB,GAAG,IAAI,CAAA;AAEpC;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,KAAc,CAAA;AAEhD,0DAA0D;AAC1D,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1B,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,4BAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9F,CAAC;AAED,yFAAyF;AACzF,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,OAAO,KAAK,KAAK,0BAAkB,CAAC,CAAC,CAAC,0BAAkB,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;AACpF,CAAC;AAED,4GAA4G;AAC5G,SAAgB,cAAc,CAAC,KAAwB;IACrD,IAAI,KAAK,CAAC,QAAQ,CAAC,wBAAgB,CAAC;QAAE,OAAO,wBAAgB,CAAA;IAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACtD,CAAC;AAED,8FAA8F;AAC9F,iGAAiG;AACjG,+FAA+F;AAC/F,qBAAqB;AAErB;;;GAGG;AACU,QAAA,eAAe,GAAG,uBAAgC,CAAA;AAC/D,sFAAsF;AACtF;;;;GAIG;AACU,QAAA,yBAAyB,GAAG,4BAA4B,CAAA;AACxD,QAAA,0BAA0B,GAAG,2BAAoC,CAAA;AAC9E,wFAAwF;AAC3E,QAAA,+BAA+B,GAAsB;IAChE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU;CAC1G,CAAA;AACD,6FAA6F;AAChF,QAAA,eAAe,GAAG,sBAA+B,CAAA;AAE9D,sGAAsG;AACzF,QAAA,qBAAqB,GAAG,eAAwB,CAAA;AAC7D,2EAA2E;AAC9D,QAAA,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,CAAU,CAAA;AAErD,4FAA4F;AAC/E,QAAA,oBAAoB,GAAG,aAAsB,CAAA;AA0C1D,sEAAsE;AACtE,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnE,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACrD,MAAM,KAAK,GAAG,KAAmC,CAAA;IACjD,OAAO,CACL,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC7B,iCAA+C,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CACtE,CAAA;AACH,CAAC;AAED,8FAA8F;AAC9F,sGAAsG;AACtG,+FAA+F;AAC/F,iDAAiD;AAEpC,QAAA,SAAS,GAAG;IACvB,UAAU,EAAE,YAAY;IACxB;;;;OAIG;IACH,UAAU,EAAE,YAAY;IACxB,gGAAgG;IAChG,kBAAkB,EAAE,oBAAoB;IACxC,kEAAkE;IAClE,oBAAoB,EAAE,sBAAsB;IAC5C,0GAA0G;IAC1G,qBAAqB,EAAE,uBAAuB;IAC9C,oGAAoG;IACpG,cAAc,EAAE,gBAAgB;IAChC,8EAA8E;IAC9E,YAAY,EAAE,cAAc;IAC5B,sDAAsD;IACtD,UAAU,EAAE,YAAY;IACxB,gHAAgH;IAChH,cAAc,EAAE,gBAAgB;IAChC,wCAAwC;IACxC,aAAa,EAAE,eAAe;IAC9B,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,6DAA6D;IAC7D,sBAAsB,EAAE,wBAAwB;IAChD,wFAAwF;IACxF,kBAAkB,EAAE,oBAAoB;IACxC,mBAAmB,EAAE,qBAAqB;IAC1C,gGAAgG;IAChG,eAAe,EAAE,iBAAiB;IAClC,oGAAoG;IACpG,gBAAgB,EAAE,kBAAkB;IACpC,gDAAgD;IAChD,kBAAkB,EAAE,oBAAoB;IACxC,iBAAiB,EAAE,mBAAmB;IACtC,2CAA2C;IAC3C,gBAAgB,EAAE,kBAAkB;IACpC,uBAAuB,EAAE,yBAAyB;IAClD,wFAAwF;IACxF,qBAAqB,EAAE,uBAAuB;IAC9C,qFAAqF;IACrF,oBAAoB,EAAE,sBAAsB;IAC5C,aAAa;IACb,wBAAwB,EAAE,0BAA0B;IACpD,mEAAmE;IACnE,wBAAwB,EAAE,0BAA0B;IACpD,uDAAuD;IACvD,8BAA8B,EAAE,gCAAgC;IAChE,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,kBAAkB,EAAE,oBAAoB;IACxC,oFAAoF;IACpF,UAAU,EAAE,YAAY;IACxB,mBAAmB,EAAE,qBAAqB;IAC1C;;;OAGG;IACH,YAAY,EAAE,cAAc;CACpB,CAAA;AAEV,uGAAuG;AAC1F,QAAA,oBAAoB,GAAsB;IACrD,iBAAS,CAAC,YAAY;IACtB,iBAAS,CAAC,UAAU;IACpB,iBAAS,CAAC,mBAAmB;IAC7B,iBAAS,CAAC,mBAAmB;IAC7B,iBAAS,CAAC,cAAc;IACxB,iBAAS,CAAC,cAAc;IACxB,iBAAS,CAAC,kBAAkB;IAC5B,iBAAS,CAAC,UAAU;IACpB,iBAAS,CAAC,UAAU;IACpB,iBAAS,CAAC,YAAY;IACtB,iBAAS,CAAC,cAAc;IACxB,iBAAS,CAAC,kBAAkB;IAC5B,iBAAS,CAAC,oBAAoB;IAC9B,iBAAS,CAAC,qBAAqB;IAC/B,cAAc;CACf,CAAA;AAEY,QAAA,qBAAqB,GAAsB;IACtD,iBAAS,CAAC,kBAAkB;IAC5B,iBAAS,CAAC,iBAAiB;IAC3B,iBAAS,CAAC,qBAAqB;IAC/B,iBAAS,CAAC,wBAAwB;IAClC,iBAAS,CAAC,YAAY;IACtB,iBAAS,CAAC,gBAAgB;CAC3B,CAAA"}

package/dist/transport/protocol.test.js

@@ -19,6 +19,18 @@ const protocol_1 = require("./protocol");
         strict_1.default.equal((0, protocol_1.isAgentSessionEvent)({ type: 'done' }), false);
         strict_1.default.equal((0, protocol_1.isAgentSessionEvent)(null), false);
     });
+    (0, node_test_1.it)('accepts the app as a preview target only by name, never from a hostname port', () => {
+        strict_1.default.equal((0, protocol_1.parsePreviewTarget)('app'), 'app');
+        strict_1.default.equal((0, protocol_1.parsePreviewTarget)('5173'), 5173);
+        strict_1.default.equal((0, protocol_1.parsePreviewTarget)('8080'), undefined);
+        strict_1.default.equal((0, protocol_1.parsePreviewTarget)('apps'), undefined);
+        strict_1.default.equal((0, protocol_1.parsePreviewPort)('app'), undefined);
+    });
+    (0, node_test_1.it)("opens a session URL on the default app port when it listens, else the lowest", () => {
+        strict_1.default.equal((0, protocol_1.defaultAppPort)([5173, 3000]), 3000);
+        strict_1.default.equal((0, protocol_1.defaultAppPort)([5173, 4000]), 4000);
+        strict_1.default.equal((0, protocol_1.defaultAppPort)([]), undefined);
+    });
     (0, node_test_1.it)('names the per-session room the gateway joins guests to', () => {
         strict_1.default.equal((0, protocol_1.agentSessionRoom)('abc'), 'agent-session:abc');
     });
@@ -28,4 +40,33 @@ const protocol_1 = require("./protocol");
         }
     });
 });
+(0, node_test_1.describe)('a request target', () => {
+    const read = (target) => {
+        const { pathname, search } = (0, protocol_1.requestUrl)(target);
+        return `${pathname}${search}`;
+    };
+    (0, node_test_1.it)('reads as itself when it\'s an ordinary one', () => {
+        strict_1.default.equal(read('/'), '/');
+        strict_1.default.equal(read('/a/b?x=1&y=2'), '/a/b?x=1&y=2');
+        strict_1.default.equal(read('/a%20b'), '/a%20b');
+        strict_1.default.equal(read(undefined), '/');
+    });
+    (0, node_test_1.it)('never throws, whatever is sent: new URL throws on these or reads a host from them', () => {
+        for (const target of ['//', '///', '//[', '//foo:bar', '//:', 'http://[', '\\\\', '/%', '/%zz', '*', '', ' ', '//\u0000', '/?', '#']) {
+            strict_1.default.doesNotThrow(() => (0, protocol_1.requestUrl)(target), target);
+        }
+    });
+    (0, node_test_1.it)('never takes a host from it, so routing and what\'s hidden see the real path', () => {
+        strict_1.default.equal(read('//'), '/');
+        strict_1.default.equal(read('//foo/bar?x=1'), '/foo/bar?x=1');
+        strict_1.default.equal(read('///foo'), '/foo');
+        strict_1.default.equal(read('\\\\foo/bar'), '/foo/bar');
+        strict_1.default.equal(read('//.builder/builder.json'), '/.builder/builder.json');
+        strict_1.default.equal((0, protocol_1.requestUrl)('//evil.example/x').host, 'request.invalid');
+    });
+    (0, node_test_1.it)('still resolves dot segments, which is what path checks rely on', () => {
+        strict_1.default.equal(read('/a/../.builder/x'), '/.builder/x');
+        strict_1.default.equal(read('/a/./b'), '/a/b');
+    });
+});
 //# sourceMappingURL=protocol.test.js.map

package/dist/transport/protocol.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.test.js","sourceRoot":"","sources":["../../src/transport/protocol.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAuC;AACvC,yCAAwC;AACxC,yCAAkJ;AAElJ,IAAA,oBAAQ,EAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAA,cAAE,EAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,KAAK,GAAsB,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAC9K,gBAAM,CAAC,KAAK,CAAC,IAAA,+BAAoB,EAAC,KAAK,CAAC,EAAE,IAAA,+BAAoB,EAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAA;QAC7E,gBAAM,CAAC,QAAQ,CAAC,IAAA,+BAAoB,EAAC,KAAK,CAAC,EAAE,IAAA,+BAAoB,EAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,CAAA;QAC5G,gBAAM,CAAC,QAAQ,CAAC,IAAA,+BAAoB,EAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,IAAA,+BAAoB,EAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACxJ,CAAC,CAAC,CAAA;IACF,IAAA,cAAE,EAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,gBAAM,CAAC,KAAK,CAAC,IAAA,8BAAmB,EAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QACnI,gBAAM,CAAC,KAAK,CAAC,IAAA,8BAAmB,EAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAC5E,gBAAM,CAAC,KAAK,CAAC,IAAA,8BAAmB,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAC1D,gBAAM,CAAC,KAAK,CAAC,IAAA,8BAAmB,EAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,gBAAM,CAAC,KAAK,CAAC,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,KAAK,MAAM,GAAG,IAAI,CAAC,oBAAS,CAAC,wBAAwB,EAAE,oBAAS,CAAC,YAAY,EAAE,oBAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7G,gBAAM,CAAC,EAAE,CAAC,gCAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,mBAAmB,CAAC,CAAA;QAC3E,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"protocol.test.js","sourceRoot":"","sources":["../../src/transport/protocol.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAuC;AACvC,yCAAwC;AACxC,yCAAoN;AAEpN,IAAA,oBAAQ,EAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,IAAA,cAAE,EAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,KAAK,GAAsB,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;QAC9K,gBAAM,CAAC,KAAK,CAAC,IAAA,+BAAoB,EAAC,KAAK,CAAC,EAAE,IAAA,+BAAoB,EAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAA;QAC7E,gBAAM,CAAC,QAAQ,CAAC,IAAA,+BAAoB,EAAC,KAAK,CAAC,EAAE,IAAA,+BAAoB,EAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,CAAA;QAC5G,gBAAM,CAAC,QAAQ,CAAC,IAAA,+BAAoB,EAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,IAAA,+BAAoB,EAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACxJ,CAAC,CAAC,CAAA;IACF,IAAA,cAAE,EAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,gBAAM,CAAC,KAAK,CAAC,IAAA,8BAAmB,EAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QACnI,gBAAM,CAAC,KAAK,CAAC,IAAA,8BAAmB,EAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAC5E,gBAAM,CAAC,KAAK,CAAC,IAAA,8BAAmB,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAA;QAC1D,gBAAM,CAAC,KAAK,CAAC,IAAA,8BAAmB,EAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,gBAAM,CAAC,KAAK,CAAC,IAAA,6BAAkB,EAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;QAC9C,gBAAM,CAAC,KAAK,CAAC,IAAA,6BAAkB,EAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAA;QAC9C,gBAAM,CAAC,KAAK,CAAC,IAAA,6BAAkB,EAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAA;QACnD,gBAAM,CAAC,KAAK,CAAC,IAAA,6BAAkB,EAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAA;QACnD,gBAAM,CAAC,KAAK,CAAC,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,gBAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;QAChD,gBAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;QAChD,gBAAM,CAAC,KAAK,CAAC,IAAA,yBAAc,EAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,gBAAM,CAAC,KAAK,CAAC,IAAA,2BAAgB,EAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAA;IAC5D,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,KAAK,MAAM,GAAG,IAAI,CAAC,oBAAS,CAAC,wBAAwB,EAAE,oBAAS,CAAC,YAAY,EAAE,oBAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7G,gBAAM,CAAC,EAAE,CAAC,gCAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,mBAAmB,CAAC,CAAA;QAC3E,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAA,oBAAQ,EAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,IAAI,GAAG,CAAC,MAA0B,EAAE,EAAE;QAC1C,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAA,qBAAU,EAAC,MAAM,CAAC,CAAA;QAC/C,OAAO,GAAG,QAAQ,GAAG,MAAM,EAAE,CAAA;IAC/B,CAAC,CAAA;IAED,IAAA,cAAE,EAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;QAC5B,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAA;QAClD,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAA;QACtC,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACrI,gBAAM,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAA,qBAAU,EAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;QACvD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;QAC7B,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,cAAc,CAAC,CAAA;QACnD,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;QACpC,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC,CAAA;QAC7C,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,EAAE,wBAAwB,CAAC,CAAA;QACvE,gBAAM,CAAC,KAAK,CAAC,IAAA,qBAAU,EAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAA;IACtE,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,aAAa,CAAC,CAAA;QACrD,gBAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/workspace-sync/eligibility.d.ts

@@ -0,0 +1,14 @@
+/** Same cap as publish_results: past it a file is no longer mirrored (its last copy stays). */
+export declare const MAX_SYNCED_FILE_BYTES: number;
+/** Files mirrored per session; later ones are left out. */
+export declare const MAX_SYNCED_FILES = 2000;
+/** A workspace-relative POSIX path, without a leading ./ or /. */
+export declare function normalizeSyncPath(relative: string): string;
+/** Whether a directory's contents can be mirrored at all (it is also never watched otherwise). */
+export declare function isSyncableDirectory(relative: string): boolean;
+/** Whether live sync watches a directory: one it mirrors, or one holding a mirrored state file (.builder). */
+export declare function isWatchedDirectory(relative: string): boolean;
+export declare function isSyncablePath(relative: string): boolean;
+/** The file as text, or undefined when it is binary (has a NUL byte) or too large to mirror. */
+export declare function syncableText(buffer: Buffer): string | undefined;
+//# sourceMappingURL=eligibility.d.ts.map

package/dist/workspace-sync/eligibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eligibility.d.ts","sourceRoot":"","sources":["../../src/workspace-sync/eligibility.ts"],"names":[],"mappings":"AAYA,+FAA+F;AAC/F,eAAO,MAAM,qBAAqB,QAAa,CAAA;AAC/C,2DAA2D;AAC3D,eAAO,MAAM,gBAAgB,OAAQ,CAAA;AAErC,kEAAkE;AAClE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAI7D;AAED,8GAA8G;AAC9G,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAG5D;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAMxD;AAED,gGAAgG;AAChG,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG/D"}

package/dist/workspace-sync/eligibility.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_SYNCED_FILES = exports.MAX_SYNCED_FILE_BYTES = void 0;
+exports.normalizeSyncPath = normalizeSyncPath;
+exports.isSyncableDirectory = isSyncableDirectory;
+exports.isWatchedDirectory = isWatchedDirectory;
+exports.isSyncablePath = isSyncablePath;
+exports.syncableText = syncableText;
+// Which workspace files live sync mirrors into the session: the text people would open, not
+// dependencies, build output, VCS internals, logs or the agent's own state — but for the app
+// manifest in that state, which people read and may edit.
+const node_path_1 = require("node:path");
+const protocol_1 = require("../transport/protocol");
+/** Files under an excluded directory that are mirrored all the same. */
+const MIRRORED_STATE_FILES = new Set([protocol_1.APP_CONFIG_FILE]);
+const EXCLUDED_DIRECTORIES = new Set(['.git', '.builder', ...protocol_1.WORKSPACE_GENERATED_DIRECTORIES]);
+const EXCLUDED_FILES = /(\.sqlite(-journal)?|\.log|^nohup\.out)$/;
+/** Same cap as publish_results: past it a file is no longer mirrored (its last copy stays). */
+exports.MAX_SYNCED_FILE_BYTES = 512 * 1024;
+/** Files mirrored per session; later ones are left out. */
+exports.MAX_SYNCED_FILES = 2000;
+/** A workspace-relative POSIX path, without a leading ./ or /. */
+function normalizeSyncPath(relative) {
+    return relative.split(/[\\/]+/).filter((part) => part && part !== '.').join('/');
+}
+/** Whether a directory's contents can be mirrored at all (it is also never watched otherwise). */
+function isSyncableDirectory(relative) {
+    const path = normalizeSyncPath(relative);
+    if (path === 'data/attachments' || path.startsWith('data/attachments/'))
+        return false;
+    return !path.split('/').some((part) => EXCLUDED_DIRECTORIES.has(part));
+}
+/** Whether live sync watches a directory: one it mirrors, or one holding a mirrored state file (.builder). */
+function isWatchedDirectory(relative) {
+    const path = normalizeSyncPath(relative);
+    return isSyncableDirectory(path) || [...MIRRORED_STATE_FILES].some((file) => node_path_1.posix.dirname(file) === path);
+}
+function isSyncablePath(relative) {
+    const path = normalizeSyncPath(relative);
+    if (!path || path.split('/').includes('..'))
+        return false;
+    if (MIRRORED_STATE_FILES.has(path))
+        return true;
+    const parts = path.split('/');
+    return isSyncableDirectory(parts.slice(0, -1).join('/')) && !EXCLUDED_FILES.test(parts[parts.length - 1]);
+}
+/** The file as text, or undefined when it is binary (has a NUL byte) or too large to mirror. */
+function syncableText(buffer) {
+    if (buffer.byteLength > exports.MAX_SYNCED_FILE_BYTES || buffer.includes(0))
+        return undefined;
+    return buffer.toString('utf8');
+}
+//# sourceMappingURL=eligibility.js.map