@namzu/sdk 52.3.0 → 52.4.0

package/dist/runtime/jobs/websocket-source.js

@@ -0,0 +1,379 @@
+import { lookup as dnsLookup } from 'node:dns/promises';
+import { EventEmitter } from 'node:events';
+import { isIP } from 'node:net';
+import { isPrivateAddress } from '../../connector/web/guarded-fetch.js';
+import { isolationOf } from '../../sandbox/isolation.js';
+/**
+ * A WebSocket as a monitor's source.
+ *
+ * A command's stdout is not the only thing worth watching: some services push
+ * their events (a CI run's log stream, a server's change feed) and offer no
+ * command that prints them. This module turns such a connection into the same
+ * thing a command is to the registry: a process-shaped object that writes
+ * lines on stdout, can be asked to stop, and ends. Everything after that (the
+ * 200 ms batches, the rationing, the expiry, the stop, the untrusted frame the
+ * model reads it in) is the registry's and is shared with commands unchanged.
+ *
+ * What is different is where it runs and what it can reach. A command runs
+ * where the registry's spawn puts it, inside a sandbox if there is one; this
+ * connection is opened by the HOST process, outside any sandbox. So the
+ * address is checked before anything is sent, a sandbox that isolates the
+ * network refuses it unless it has said the host is allowed, and the tool
+ * asks a person first (see `tools/builtins/monitor.ts`).
+ */
+/** The largest frame accepted; a bigger one ends the watch. Same as the reference. */
+export const WEBSOCKET_MAX_PAYLOAD_BYTES = 1_048_576;
+export const WEBSOCKET_HANDSHAKE_TIMEOUT_MS = 15_000;
+/** After a polite close, how long a peer gets to answer before the socket is destroyed. */
+export const WEBSOCKET_CLOSE_GRACE_MS = 1000;
+export const WEBSOCKET_URL_MAX_CHARS = 2048;
+export const WEBSOCKET_PROTOCOLS_MAX = 16;
+/** Longest close reason relayed; the protocol allows 123 bytes. */
+const CLOSE_REASON_MAX_CHARS = 123;
+// ---------------------------------------------------------------------------
+// Input
+// ---------------------------------------------------------------------------
+/** RFC 6455 subprotocol names are RFC 2616 tokens: no separators, no controls. */
+const TOKEN = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
+/** Why a URL cannot be a monitor's source, or undefined when it can. */
+export function webSocketUrlProblem(raw) {
+    if (raw.length > WEBSOCKET_URL_MAX_CHARS) {
+        return `The URL is longer than ${WEBSOCKET_URL_MAX_CHARS} characters.`;
+    }
+    // ASCII without whitespace or controls: a model that wants a non-ASCII host
+    // writes it in punycode, and nothing here is left to the parser's leniency
+    // (it strips tabs and newlines silently).
+    if (!/^[\x21-\x7e]+$/.test(raw)) {
+        return 'The URL must be ASCII, with no spaces or control characters.';
+    }
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        return 'That is not a URL.';
+    }
+    if (url.protocol !== 'ws:' && url.protocol !== 'wss:') {
+        return 'The URL must start with ws:// or wss://.';
+    }
+    if (url.username !== '' || url.password !== '') {
+        return 'A URL with a user name or password is not opened.';
+    }
+    if (url.hash !== '')
+        return 'A WebSocket URL cannot have a fragment (#...).';
+    if (url.hostname === '')
+        return 'The URL has no host.';
+    return undefined;
+}
+/** Why a subprotocol list is not valid, or undefined when it is. */
+export function webSocketProtocolsProblem(protocols) {
+    if (protocols.length > WEBSOCKET_PROTOCOLS_MAX) {
+        return `At most ${WEBSOCKET_PROTOCOLS_MAX} subprotocols.`;
+    }
+    for (const protocol of protocols) {
+        if (!TOKEN.test(protocol))
+            return `"${protocol}" is not a valid subprotocol name.`;
+    }
+    if (new Set(protocols).size !== protocols.length)
+        return 'Subprotocol names must be unique.';
+    return undefined;
+}
+/** What a record and an approval call this source: the URL as given, which can carry no credentials. */
+export function webSocketJobCommand(url) {
+    return `websocket ${url}`;
+}
+// ---------------------------------------------------------------------------
+// Where it may connect
+// ---------------------------------------------------------------------------
+/** The address check refused, in words for the model. */
+export class WebSocketRefusedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'WebSocketRefusedError';
+    }
+}
+/** The host name of a WebSocket URL as a resolver or an address check wants it. */
+export function webSocketHostname(raw) {
+    return new URL(raw).hostname.toLowerCase().replace(/^\[|\]$/g, '');
+}
+/**
+ * Resolve the host and refuse unless EVERY address is outside the host's own
+ * network; return the addresses that were checked.
+ *
+ * Refusal covers a name that does not resolve, one that resolves to nothing,
+ * and one with any private address among its answers: a name that answers both
+ * a public and a private address is a name an attacker controls, and a
+ * connection may pick either. Failing to resolve is a refusal and never a
+ * pass: an empty list satisfies "no private address found" and the connection
+ * that followed would resolve the name again against whatever answered.
+ */
+export async function vetWebSocketTarget(raw, options = {}) {
+    const hostname = webSocketHostname(raw);
+    let addresses;
+    const literal = isIP(hostname);
+    if (literal !== 0) {
+        addresses = [hostname];
+    }
+    else {
+        const resolve = options.resolve ??
+            (async (name) => (await dnsLookup(name, { all: true })).map((r) => r.address));
+        try {
+            addresses = await resolve(hostname);
+        }
+        catch (err) {
+            throw new WebSocketRefusedError(`Refused "${hostname}": it could not be resolved (${err instanceof Error ? err.message : String(err)}), so nothing here can say where it points.`);
+        }
+        if (addresses.length === 0) {
+            throw new WebSocketRefusedError(`Refused "${hostname}": it resolves to no addresses.`);
+        }
+    }
+    if (options.allowPrivateAddresses !== true) {
+        for (const address of addresses) {
+            if (isPrivateAddress(address)) {
+                throw new WebSocketRefusedError(`Refused "${hostname}": it resolves to ${address}, inside this host's own network. A WebSocket monitor only connects to public addresses.`);
+            }
+        }
+    }
+    return addresses.map((address) => ({ address, family: isIP(address) === 6 ? 6 : 4 }));
+}
+/**
+ * A `lookup` for the socket that answers with the addresses that were checked
+ * and nothing else.
+ *
+ * This is what closes the gap `web_fetch` documents: there the address is
+ * checked, then the platform `fetch` resolves the name AGAIN, so a name that
+ * answers publicly the first time and privately the second (DNS rebinding)
+ * gets through. Here the connection never asks DNS: it is handed the checked
+ * addresses, so there is no second answer to differ. The URL still names the
+ * host, so TLS keeps its SNI and its certificate check on the hostname and not
+ * on an address.
+ */
+export function pinnedLookup(addresses) {
+    return (_hostname, options, callback) => {
+        // A caller that wants one family gets that family's addresses; asking for
+        // one we hold none of is an error rather than a fall back to DNS.
+        const wanted = options?.family === 4 || options?.family === 6 ? options.family : undefined;
+        const usable = wanted === undefined ? addresses : addresses.filter((a) => a.family === wanted);
+        const first = usable[0];
+        if (first === undefined) {
+            const error = new Error('no vetted address of that family');
+            error.code = 'ENOTFOUND';
+            callback(error, '', 0);
+            return;
+        }
+        if (options?.all === true) {
+            callback(null, usable.map((a) => ({ address: a.address, family: a.family })));
+            return;
+        }
+        callback(null, first.address, first.family);
+    };
+}
+/** `api.example.com` is that host; `.example.com` is the domain and its subdomains. */
+export function hostMatchesPolicy(hostname, allowedHosts) {
+    const host = hostname.toLowerCase().replace(/\.$/, '');
+    return allowedHosts.some((entry) => {
+        const allowed = entry.toLowerCase().replace(/\.$/, '');
+        if (allowed.startsWith('.'))
+            return host === allowed.slice(1) || host.endsWith(allowed);
+        return host === allowed;
+    });
+}
+/**
+ * Why a sandbox forbids this connection, or undefined when it does not.
+ *
+ * The connection is opened by the host process, outside the boundary, so a
+ * sandbox's network rules do not bind it. If a turn runs under a sandbox that
+ * isolates the network, letting the host connect would be a way out of that
+ * isolation, so it is refused unless the sandbox's live policy names the host.
+ * A sandbox that does not isolate the network says nothing about it, and the
+ * connection is allowed, subject to the address check and to review.
+ */
+export function webSocketSandboxRefusal(sandbox, hostname) {
+    if (sandbox === undefined)
+        return undefined;
+    if (!isolationOf(sandbox.environment).network)
+        return undefined;
+    const allowed = sandbox.networkPolicy?.allowedHosts;
+    if (allowed !== undefined && hostMatchesPolicy(hostname, allowed))
+        return undefined;
+    return `A WebSocket monitor connects from the host, outside this turn's sandbox, which blocks the network. "${hostname}" is not on the sandbox's list of allowed hosts, so the connection was not opened. Allow the host in the sandbox's network policy, or watch the service from inside the sandbox with a command.`;
+}
+// ---------------------------------------------------------------------------
+// Notices
+// ---------------------------------------------------------------------------
+/** Server-written text, made one short line before it goes into a notice. */
+function oneLine(text) {
+    const line = Array.from(text, (character) => {
+        const code = character.charCodeAt(0);
+        return code < 0x20 || (code >= 0x7f && code <= 0x9f) ? ' ' : character;
+    })
+        .join('')
+        .replace(/\s+/g, ' ')
+        .trim();
+    return line.length <= CLOSE_REASON_MAX_CHARS
+        ? line
+        : `${line.slice(0, CLOSE_REASON_MAX_CHARS)}...`;
+}
+export const webSocketRejectedNotice = (status) => `[WebSocket upgrade rejected: HTTP ${status}]`;
+export const webSocketErrorNotice = (message) => `[WebSocket error: ${oneLine(message)}]`;
+export const webSocketClosedNotice = (code, reason) => {
+    const why = oneLine(reason);
+    return why === '' ? `[WebSocket closed: ${code}]` : `[WebSocket closed: ${code} ${why}]`;
+};
+export const webSocketDroppedNotice = () => `[Dropped a frame larger than ${WEBSOCKET_MAX_PAYLOAD_BYTES} bytes; closing]`;
+function frameBytes(data) {
+    if (Array.isArray(data))
+        return data.reduce((sum, part) => sum + part.length, 0);
+    return data instanceof ArrayBuffer ? data.byteLength : data.length;
+}
+/**
+ * Open the connection and return it as a job's process.
+ *
+ * The socket library is loaded when the first monitor of this kind starts, so
+ * a session that never watches a WebSocket never pays for it.
+ */
+export function connectWebSocketSource(options) {
+    const { target, host } = options;
+    const stand = Object.assign(new EventEmitter(), {
+        pid: undefined,
+        stdout: new EventEmitter(),
+        stderr: new EventEmitter(),
+    });
+    let socket;
+    let graceTimer;
+    // Set once somebody asked the connection to stop (a kill, the expiry, the
+    // output rule). From then on the connection says nothing: the registry has
+    // already told the model why the watch ended, and nothing follows that.
+    let stopping = false;
+    let opened = false;
+    let rejected = false;
+    let oversize = false;
+    // The connection failed before it opened: the error notice was the last word.
+    let failedToOpen = false;
+    let ended = false;
+    const write = (text) => {
+        if (stopping || ended)
+            return;
+        stand.stdout.emit('data', text);
+    };
+    const end = (exitCode) => {
+        if (ended)
+            return;
+        ended = true;
+        clearTimeout(graceTimer);
+        stand.emit('close', exitCode, null);
+    };
+    void import('ws')
+        .then(({ WebSocket }) => {
+        if (stopping) {
+            end(0);
+            return;
+        }
+        const client = new WebSocket(target.url, target.protocols && target.protocols.length > 0 ? [...target.protocols] : undefined, {
+            maxPayload: WEBSOCKET_MAX_PAYLOAD_BYTES,
+            // A redirect could lead to an address nobody checked.
+            followRedirects: false,
+            // A compressed frame inflates past the size cap before it is
+            // measured; refusing the extension leaves every frame as sent.
+            perMessageDeflate: false,
+            handshakeTimeout: WEBSOCKET_HANDSHAKE_TIMEOUT_MS,
+            // Only the vetted addresses; see `pinnedLookup`.
+            lookup: pinnedLookup(target.addresses),
+        });
+        socket = client;
+        client.on('open', () => {
+            opened = true;
+        });
+        client.on('unexpected-response', (_request, response) => {
+            if (stopping)
+                return;
+            rejected = true;
+            response.resume();
+            host.notice(webSocketRejectedNotice(response.statusCode ?? 0), { final: true });
+            // With a listener for this event the library leaves the half-open
+            // request to us.
+            client.terminate();
+        });
+        client.on('error', (error) => {
+            if (stopping || rejected || oversize)
+                return;
+            if (error.code === 'WS_ERR_UNSUPPORTED_MESSAGE_LENGTH') {
+                // The library knows a frame was too big and not how big: it stops
+                // reading at the length field.
+                oversize = true;
+                host.notice(webSocketDroppedNotice(), { final: true });
+                client.terminate();
+                return;
+            }
+            if (!opened) {
+                // It never opened, so there is no close to report after this:
+                // one notice says it failed, and it is the last.
+                failedToOpen = true;
+                host.notice(webSocketErrorNotice(error.message), { final: true });
+                return;
+            }
+            host.notice(webSocketErrorNotice(error.message));
+        });
+        client.on('message', (data, isBinary) => {
+            if (isBinary) {
+                write(`[binary frame, ${frameBytes(data)} bytes]\n`);
+                return;
+            }
+            const text = Array.isArray(data)
+                ? Buffer.concat(data).toString('utf8')
+                : Buffer.from(data).toString('utf8');
+            // Frames are not lines. A newline closes this one, so the next frame
+            // starts a fresh line and a frame without one is not glued to it.
+            write(text.endsWith('\n') ? text : `${text}\n`);
+        });
+        client.on('close', (code, reason) => {
+            const why = reason.toString('utf8');
+            if (!stopping && !rejected && !oversize && !failedToOpen) {
+                host.notice(webSocketClosedNotice(code, why), { final: true });
+                if (opened)
+                    host.connectionClosed(code, oneLine(why));
+            }
+            // A normal or going-away close is the stream ending; anything else,
+            // and a connection that never opened, is a failure.
+            end(opened && (code === 1000 || code === 1001 || code === 1005) ? 0 : 1);
+        });
+    })
+        .catch((error) => {
+        host.notice(webSocketErrorNotice(error instanceof Error ? error.message : String(error)), {
+            final: true,
+        });
+        end(1);
+    });
+    return {
+        child: stand,
+        // Not a process, so the registry's group kill has nothing to signal; this
+        // is how it is stopped. SIGTERM asks politely, SIGKILL (and the grace
+        // running out) destroys the socket.
+        kill(signal) {
+            if (ended)
+                return;
+            if (signal === 'SIGKILL') {
+                stopping = true;
+                if (socket)
+                    socket.terminate();
+                else
+                    end(0);
+                return;
+            }
+            if (stopping)
+                return;
+            stopping = true;
+            if (!socket)
+                return; // the import resolves, sees `stopping`, and ends
+            if (socket.readyState === socket.OPEN) {
+                socket.close(1000);
+                graceTimer = setTimeout(() => socket?.terminate(), WEBSOCKET_CLOSE_GRACE_MS);
+                graceTimer.unref?.();
+            }
+            else {
+                socket.terminate();
+            }
+        },
+    };
+}
+//# sourceMappingURL=websocket-source.js.map

package/dist/runtime/jobs/websocket-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket-source.js","sourceRoot":"","sources":["../../../src/runtime/jobs/websocket-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAI/B,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAA;AACvE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAKxD;;;;;;;;;;;;;;;;;GAiBG;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,2BAA2B,GAAG,SAAS,CAAA;AACpD,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAA;AACpD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAA;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAA;AAC3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAA;AACzC,mEAAmE;AACnE,MAAM,sBAAsB,GAAG,GAAG,CAAA;AAElC,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,kFAAkF;AAClF,MAAM,KAAK,GAAG,gCAAgC,CAAA;AAE9C,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC9C,IAAI,GAAG,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC1C,OAAO,0BAA0B,uBAAuB,cAAc,CAAA;IACvE,CAAC;IACD,4EAA4E;IAC5E,2EAA2E;IAC3E,0CAA0C;IAC1C,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,8DAA8D,CAAA;IACtE,CAAC;IACD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;IACnB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,oBAAoB,CAAA;IAC5B,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACvD,OAAO,0CAA0C,CAAA;IAClD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAChD,OAAO,mDAAmD,CAAA;IAC3D,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE;QAAE,OAAO,gDAAgD,CAAA;IAC5E,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO,sBAAsB,CAAA;IACtD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,yBAAyB,CAAC,SAA4B;IACrE,IAAI,SAAS,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAChD,OAAO,WAAW,uBAAuB,gBAAgB,CAAA;IAC1D,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,QAAQ,oCAAoC,CAAA;IACnF,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,mCAAmC,CAAA;IAC5F,OAAO,SAAS,CAAA;AACjB,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC9C,OAAO,aAAa,GAAG,EAAE,CAAA;AAC1B,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,yDAAyD;AACzD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;IACpC,CAAC;CACD;AAiBD,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC5C,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;AACnE,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,GAAW,EACX,UAA+B,EAAE;IAEjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,SAA4B,CAAA;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC9B,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QACnB,SAAS,GAAG,CAAC,QAAQ,CAAC,CAAA;IACvB,CAAC;SAAM,CAAC;QACP,MAAM,OAAO,GACZ,OAAO,CAAC,OAAO;YACf,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QACvF,IAAI,CAAC;YACJ,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,IAAI,qBAAqB,CAC9B,YAAY,QAAQ,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,6CAA6C,CACjJ,CAAA;QACF,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,qBAAqB,CAAC,YAAY,QAAQ,iCAAiC,CAAC,CAAA;QACvF,CAAC;IACF,CAAC;IACD,IAAI,OAAO,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;QAC5C,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,qBAAqB,CAC9B,YAAY,QAAQ,qBAAqB,OAAO,0FAA0F,CAC1I,CAAA;YACF,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AACtF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC3B,SAA0E;IAE1E,OAAO,CACN,SAAiB,EACjB,OAAgE,EAChE,QAIS,EACF,EAAE;QACT,0EAA0E;QAC1E,kEAAkE;QAClE,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,KAAK,CAAC,IAAI,OAAO,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAA;QAC1F,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;QAC9F,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,KAAK,GAA0B,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;YAClF,KAAK,CAAC,IAAI,GAAG,WAAW,CAAA;YACxB,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;YACtB,OAAM;QACP,CAAC;QACD,IAAI,OAAO,EAAE,GAAG,KAAK,IAAI,EAAE,CAAC;YAC3B,QAAQ,CACP,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAC7D,CAAA;YACD,OAAM;QACP,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAC5C,CAAC,CAAA;AACF,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,YAA+B;IAClF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACtD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QACtD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QACvF,OAAO,IAAI,KAAK,OAAO,CAAA;IACxB,CAAC,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACtC,OAA4B,EAC5B,QAAgB;IAEhB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3C,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAAE,YAAY,CAAA;IACnD,IAAI,OAAO,KAAK,SAAS,IAAI,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IACnF,OAAO,uGAAuG,QAAQ,iMAAiM,CAAA;AACxT,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,6EAA6E;AAC7E,SAAS,OAAO,CAAC,IAAY;IAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACpC,OAAO,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IACvE,CAAC,CAAC;SACA,IAAI,CAAC,EAAE,CAAC;SACR,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAA;IACR,OAAO,IAAI,CAAC,MAAM,IAAI,sBAAsB;QAC3C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,KAAK,CAAA;AACjD,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAc,EAAU,EAAE,CACjE,qCAAqC,MAAM,GAAG,CAAA;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAU,EAAE,CAC/D,qBAAqB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAA;AACzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,IAAY,EAAE,MAAc,EAAU,EAAE;IAC7E,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3B,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,sBAAsB,IAAI,GAAG,CAAC,CAAC,CAAC,sBAAsB,IAAI,IAAI,GAAG,GAAG,CAAA;AACzF,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAW,EAAE,CAClD,gCAAgC,2BAA2B,kBAAkB,CAAA;AAW9E,SAAS,UAAU,CAAC,IAAqC;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IAChF,OAAO,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA+B;IACrE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;IAChC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,EAAE;QAC/C,GAAG,EAAE,SAAS;QACd,MAAM,EAAE,IAAI,YAAY,EAAE;QAC1B,MAAM,EAAE,IAAI,YAAY,EAAE;KAC1B,CAAC,CAAA;IACF,IAAI,MAAmC,CAAA;IACvC,IAAI,UAAqD,CAAA;IACzD,0EAA0E;IAC1E,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,8EAA8E;IAC9E,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,IAAI,KAAK,GAAG,KAAK,CAAA;IAEjB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAQ,EAAE;QACpC,IAAI,QAAQ,IAAI,KAAK;YAAE,OAAM;QAC7B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAChC,CAAC,CAAA;IACD,MAAM,GAAG,GAAG,CAAC,QAAgB,EAAQ,EAAE;QACtC,IAAI,KAAK;YAAE,OAAM;QACjB,KAAK,GAAG,IAAI,CAAA;QACZ,YAAY,CAAC,UAAU,CAAC,CAAA;QACxB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IACpC,CAAC,CAAA;IAED,KAAK,MAAM,CAAC,IAAI,CAAC;SACf,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;QACvB,IAAI,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,CAAC,CAAC,CAAA;YACN,OAAM;QACP,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,SAAS,CAC3B,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EACnF;YACC,UAAU,EAAE,2BAA2B;YACvC,sDAAsD;YACtD,eAAe,EAAE,KAAK;YACtB,6DAA6D;YAC7D,+DAA+D;YAC/D,iBAAiB,EAAE,KAAK;YACxB,gBAAgB,EAAE,8BAA8B;YAChD,iDAAiD;YACjD,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC;SACtC,CACD,CAAA;QACD,MAAM,GAAG,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,MAAM,GAAG,IAAI,CAAA;QACd,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,qBAAqB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;YACvD,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,QAAQ,CAAC,MAAM,EAAE,CAAA;YACjB,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/E,kEAAkE;YAClE,iBAAiB;YACjB,MAAM,CAAC,SAAS,EAAE,CAAA;QACnB,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAgC,EAAE,EAAE;YACvD,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ;gBAAE,OAAM;YAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,mCAAmC,EAAE,CAAC;gBACxD,kEAAkE;gBAClE,+BAA+B;gBAC/B,QAAQ,GAAG,IAAI,CAAA;gBACf,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBACtD,MAAM,CAAC,SAAS,EAAE,CAAA;gBAClB,OAAM;YACP,CAAC;YACD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,8DAA8D;gBAC9D,iDAAiD;gBACjD,YAAY,GAAG,IAAI,CAAA;gBACnB,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBACjE,OAAM;YACP,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACjD,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;YACvC,IAAI,QAAQ,EAAE,CAAC;gBACd,KAAK,CAAC,kBAAkB,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;gBACpD,OAAM;YACP,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC/B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACtC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YAC/C,qEAAqE;YACrE,kEAAkE;YAClE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;YACnC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC1D,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC9D,IAAI,MAAM;oBAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;YACtD,CAAC;YACD,oEAAoE;YACpE,oDAAoD;YACpD,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACzE,CAAC,CAAC,CAAA;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACzB,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE;YACzF,KAAK,EAAE,IAAI;SACX,CAAC,CAAA;QACF,GAAG,CAAC,CAAC,CAAC,CAAA;IACP,CAAC,CAAC,CAAA;IAEH,OAAO;QACN,KAAK,EAAE,KAAK;QACZ,0EAA0E;QAC1E,sEAAsE;QACtE,oCAAoC;QACpC,IAAI,CAAC,MAAM;YACV,IAAI,KAAK;gBAAE,OAAM;YACjB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1B,QAAQ,GAAG,IAAI,CAAA;gBACf,IAAI,MAAM;oBAAE,MAAM,CAAC,SAAS,EAAE,CAAA;;oBACzB,GAAG,CAAC,CAAC,CAAC,CAAA;gBACX,OAAM;YACP,CAAC;YACD,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,IAAI,CAAA;YACf,IAAI,CAAC,MAAM;gBAAE,OAAM,CAAC,iDAAiD;YACrE,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;gBACvC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;gBAClB,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,wBAAwB,CAAC,CAAA;gBAC5E,UAAU,CAAC,KAAK,EAAE,EAAE,CAAA;YACrB,CAAC;iBAAM,CAAC;gBACP,MAAM,CAAC,SAAS,EAAE,CAAA;YACnB,CAAC;QACF,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/runtime/query/steering.d.ts

@@ -98,9 +98,9 @@ export declare function formatMonitorNote(text: string): string;
  * in-turn delivery with this, and a host that holds events for a later turn
  * renders them with it too, so both read the same words.
  */
-export declare function formatMonitorEvent(event: Pick<MonitorEvent, 'jobId' | 'description' | 'kind' | 'text'>, command: string): string;
+export declare function formatMonitorEvent(event: Pick<MonitorEvent, 'jobId' | 'description' | 'kind' | 'text'> & Partial<Pick<MonitorEvent, 'transport'>>, command: string): string;
 /** A monitor's end as the system-event envelope, in the words {@link describeMonitorEnd} gives it. */
-export declare function formatMonitorEnd(job: Pick<BackgroundJob, 'id' | 'command' | 'description' | 'status' | 'exitCode' | 'signal' | 'error'>, stats: {
+export declare function formatMonitorEnd(job: Pick<BackgroundJob, 'id' | 'command' | 'description' | 'status' | 'exitCode' | 'signal' | 'error' | 'transport' | 'closeCode' | 'closeReason'>, stats: {
     readonly stdoutChars: number;
 }): string;
 /**

package/dist/runtime/query/steering.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"steering.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/steering.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAKxE,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAsB,MAAM,qBAAqB,CAAA;AAG/F,sEAAsE;AACtE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,WAAW,CAQ9E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,WAAW,eAAe;IAC/B;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAEzB,yDAAyD;IACzD,KAAK,IAAI,MAAM,GAAG,SAAS,CAAA;IAE3B,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CACzB;AAED,qBAAa,eAAgB,YAAW,eAAe;IACtD,OAAO,CAAC,MAAM,CAAe;IAE7B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAMzB,KAAK,IAAI,MAAM,GAAG,SAAS;IAO3B,IAAI,OAAO,IAAI,OAAO,CAErB;CACD;AAED;;;;;;;;;;;;GAYG;AACH,+EAA+E;AAC/E,wBAAgB,YAAY,CAC3B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,EAAE,eAAe,GAAG,SAAS,EACpC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM;AAChC;;;;;;;;GAQG;AACH,WAAW,CAAC,EAAE,MAAM,IAAI,GACtB,SAAS,OAAO,EAAE,CAqBpB;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAKD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC,EACpE,OAAO,EAAE,MAAM,GACb,MAAM,CAoBR;AAED,sGAAsG;AACtG,wBAAgB,gBAAgB,CAC/B,GAAG,EAAE,IAAI,CACR,aAAa,EACb,IAAI,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,CAC7E,EACD,KAAK,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACrC,MAAM,CAUR;AAMD;;;GAGG;AACH,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAuC,GAC1C,MAAM,CAmCR;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAwC,GAC3C,MAAM,CAER;AAeD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGpE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC7B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,EAAE,eAAe,GAAG,SAAS;AACpC,4EAA4E;AAC5E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAClC,SAAS,OAAO,EAAE,CAkCpB"}
+{"version":3,"file":"steering.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/steering.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAA;AAKxE,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,YAAY,EAAsB,MAAM,qBAAqB,CAAA;AAG/F,sEAAsE;AACtE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,WAAW,CAQ9E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,WAAW,eAAe;IAC/B;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAEzB,yDAAyD;IACzD,KAAK,IAAI,MAAM,GAAG,SAAS,CAAA;IAE3B,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CACzB;AAED,qBAAa,eAAgB,YAAW,eAAe;IACtD,OAAO,CAAC,MAAM,CAAe;IAE7B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAMzB,KAAK,IAAI,MAAM,GAAG,SAAS;IAO3B,IAAI,OAAO,IAAI,OAAO,CAErB;CACD;AAED;;;;;;;;;;;;GAYG;AACH,+EAA+E;AAC/E,wBAAgB,YAAY,CAC3B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,EAAE,eAAe,GAAG,SAAS,EACpC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM;AAChC;;;;;;;;GAQG;AACH,WAAW,CAAC,EAAE,MAAM,IAAI,GACtB,SAAS,OAAO,EAAE,CAqBpB;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAKD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CACjC,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,aAAa,GAAG,MAAM,GAAG,MAAM,CAAC,GACnE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,EACzC,OAAO,EAAE,MAAM,GACb,MAAM,CAiBR;AAqBD,sGAAsG;AACtG,wBAAgB,gBAAgB,CAC/B,GAAG,EAAE,IAAI,CACR,aAAa,EACX,IAAI,GACJ,SAAS,GACT,aAAa,GACb,QAAQ,GACR,UAAU,GACV,QAAQ,GACR,OAAO,GACP,WAAW,GACX,WAAW,GACX,aAAa,CACf,EACD,KAAK,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACrC,MAAM,CAUR;AAMD;;;GAGG;AACH,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAuC,GAC1C,MAAM,CAmCR;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAwC,GAC3C,MAAM,CAER;AAeD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGpE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC7B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,EAAE,eAAe,GAAG,SAAS;AACpC,4EAA4E;AAC5E,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAClC,SAAS,OAAO,EAAE,CAkCpB"}

package/dist/runtime/query/steering.js

@@ -117,14 +117,27 @@ export function formatMonitorEvent(event, command) {
             envelope: {
                 kind: event.kind === 'output' ? 'monitor-output' : 'monitor-notice',
                 attributes: { job: event.jobId },
-                provenance: event.kind === 'output'
-                    ? 'Lines the watched command printed to stdout. The command, or whatever it reads, wrote them; they are not the operator.'
-                    : 'Written by the monitor itself, not by the watched command.',
+                provenance: monitorProvenance(event.kind, event.transport),
             },
             content: capMonitorContent(event.text),
         },
     });
 }
+/**
+ * Who wrote what is inside the frame. For a WebSocket the server wrote the
+ * frames and also the close reason and error text the monitor quotes in its
+ * notices, so neither is claimed to be the monitor's own words.
+ */
+function monitorProvenance(kind, transport) {
+    if (transport === 'websocket') {
+        return kind === 'output'
+            ? 'Text frames the WebSocket server sent. The server, or whatever it relays, wrote them; they are not the operator.'
+            : 'A notice from the monitor about the WebSocket connection. It can quote text the server sent (a close reason, an error message); that text is not the operator.';
+    }
+    return kind === 'output'
+        ? 'Lines the watched command printed to stdout. The command, or whatever it reads, wrote them; they are not the operator.'
+        : 'Written by the monitor itself, not by the watched command.';
+}
 /** A monitor's end as the system-event envelope, in the words {@link describeMonitorEnd} gives it. */
 export function formatMonitorEnd(job, stats) {
     const end = describeMonitorEnd(job, stats);

package/dist/runtime/query/steering.js.map

@@ -1 +1 @@
-{"version":3,"file":"steering.js","sourceRoot":"","sources":["../../../src/runtime/query/steering.ts"],"names":[],"mappings":"AACA,OAAO,EACN,+BAA+B,EAC/B,8BAA8B,GAC9B,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAyC,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC/F,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAExE,sEAAsE;AACtE,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACrD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAA;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC7B,OAAO,CACN,CAAC,MAAM;QACP,MAAM,CAAC,IAAI,KAAK,YAAY;QAC5B,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CACjE,CAAA;AACF,CAAC;AAiDD,MAAM,OAAO,eAAe;IACnB,MAAM,GAAa,EAAE,CAAA;IAE7B,KAAK,CAAC,IAAY;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK;QACJ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAA;QAChB,OAAO,MAAM,CAAA;IACd,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IAC9B,CAAC;CACD;AAED;;;;;;;;;;;;GAYG;AACH,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAC3B,QAA4B,EAC5B,OAAoC,EACpC,MAAgC;AAChC;;;;;;;;GAQG;AACH,WAAwB;IAExB,IAAI,CAAC,OAAO,EAAE,OAAO;QAAE,OAAO,QAAQ,CAAA;IACtC,IAAI,aAAa,GAAG,CAAC,CAAC,CAAA;IACtB,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACtC,aAAa,GAAG,KAAK,CAAA;YACrB,MAAK;QACN,CAAC;IACF,CAAC;IACD,IAAI,aAAa,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;IAC5B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAY,CAAA;IACjD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnB,OAAO,QAAQ,CAAA;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAA;IAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAA;IAC3E,WAAW,EAAE,EAAE,CAAA;IACf,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,OAAO,gCAAgC,IAAI,EAAE,CAAA;AAC9C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC7C,OAAO,yBAAyB,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAA;AAChE,CAAC;AAED,4FAA4F;AAC5F,MAAM,kBAAkB,GAAG,wEAAwE,CAAA;AAEnG;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,KAAoE,EACpE,OAAe;IAEf,OAAO,iBAAiB,CAAC;QACxB,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,KAAK,CAAC,KAAK;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,mBAAmB,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG;QACjE,MAAM,EAAE,WAAW,KAAK,CAAC,KAAK,KAAK,eAAe,CAAC,OAAO,CAAC,EAAE;QAC7D,IAAI,EAAE,8BAA8B,KAAK,CAAC,KAAK,aAAa;QAC5D,IAAI,EAAE;YACL,QAAQ,EAAE;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB;gBACnE,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE;gBAChC,UAAU,EACT,KAAK,CAAC,IAAI,KAAK,QAAQ;oBACtB,CAAC,CAAC,wHAAwH;oBAC1H,CAAC,CAAC,4DAA4D;aAChE;YACD,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC;SACtC;KACD,CAAC,CAAA;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,gBAAgB,CAC/B,GAGC,EACD,KAAuC;IAEvC,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC1C,OAAO,iBAAiB,CAAC;QACxB,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,WAAW,GAAG,CAAC,EAAE,KAAK,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC5D,IAAI,EAAE,8BAA8B,GAAG,CAAC,EAAE,qBAAqB;KAC/D,CAAC,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACvC,OAAO,IAAI,KAAK,mEAAmE,CAAA;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACtC,IAAY,EACZ,MAAc,8BAA8B;IAE5C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA;IACnC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAEpD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACxD,mDAAmD;IACnD,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IACnD,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QAC5C,IAAI,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,CAAC;YAAE,MAAK;QACxC,SAAS,IAAI,IAAI,CAAA;QACjB,IAAI,EAAE,CAAA;IACP,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,OAAO,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;QAC9C,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,SAAS,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM;YAAE,MAAK;QAChD,SAAS,IAAI,IAAI,CAAA;QACjB,IAAI,EAAE,CAAA;IACP,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC3C,0EAA0E;IAC1E,2EAA2E;IAC3E,mDAAmD;IACnD,MAAM,IAAI,GAAG;QACZ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QACxB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;KACrC,CAAA;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAChC,IAAY,EACZ,MAAc,+BAA+B;IAE7C,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC3C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA;IACnC,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,SAAS,OAAO,2BAA2B,CAAA;IAC/E,wEAAwE;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;IACxB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;AACrG,CAAC;AAED,MAAM,oBAAoB,GACzB,yEAAyE,CAAA;AAE1E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,OAAO,GAAG,oBAAoB,GAAG,IAAI,EAAE,CAAA;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC/C,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAA;IACpD,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;AAC5E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC7B,QAA4B,EAC5B,OAAoC;AACpC,4EAA4E;AAC5E,WAAoC;IAEpC,IAAI,CAAC,OAAO,EAAE,OAAO;QAAE,OAAO,QAAQ,CAAA;IAEtC,IAAI,aAAa,GAAG,CAAC,CAAC,CAAA;IACtB,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACtC,aAAa,GAAG,KAAK,CAAA;YACrB,MAAK;QACN,CAAC;IACF,CAAC;IACD,IAAI,aAAa,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IAEzC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;IAChC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IAE3C,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAY,CAAA;IACjD,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvB,OAAO,QAAQ,CAAA;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAA;IAC1B,IAAI,CAAC,aAAa,CAAC,GAAG;QACrB,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC;KACtD,CAAA;IACD,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAA;IACvB,OAAO,IAAI,CAAA;AACZ,CAAC"}
+{"version":3,"file":"steering.js","sourceRoot":"","sources":["../../../src/runtime/query/steering.ts"],"names":[],"mappings":"AACA,OAAO,EACN,+BAA+B,EAC/B,8BAA8B,GAC9B,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAyC,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC/F,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAExE,sEAAsE;AACtE,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACrD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAA;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAC7B,OAAO,CACN,CAAC,MAAM;QACP,MAAM,CAAC,IAAI,KAAK,YAAY;QAC5B,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CACjE,CAAA;AACF,CAAC;AAiDD,MAAM,OAAO,eAAe;IACnB,MAAM,GAAa,EAAE,CAAA;IAE7B,KAAK,CAAC,IAAY;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK;QACJ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAA;QAChB,OAAO,MAAM,CAAA;IACd,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IAC9B,CAAC;CACD;AAED;;;;;;;;;;;;GAYG;AACH,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAC3B,QAA4B,EAC5B,OAAoC,EACpC,MAAgC;AAChC;;;;;;;;GAQG;AACH,WAAwB;IAExB,IAAI,CAAC,OAAO,EAAE,OAAO;QAAE,OAAO,QAAQ,CAAA;IACtC,IAAI,aAAa,GAAG,CAAC,CAAC,CAAA;IACtB,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACtC,aAAa,GAAG,KAAK,CAAA;YACrB,MAAK;QACN,CAAC;IACF,CAAC;IACD,IAAI,aAAa,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;IAC5B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAY,CAAA;IACjD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnB,OAAO,QAAQ,CAAA;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAA;IAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAA;IAC3E,WAAW,EAAE,EAAE,CAAA;IACf,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,OAAO,gCAAgC,IAAI,EAAE,CAAA;AAC9C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC7C,OAAO,yBAAyB,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAA;AAChE,CAAC;AAED,4FAA4F;AAC5F,MAAM,kBAAkB,GAAG,wEAAwE,CAAA;AAEnG;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CACjC,KACyC,EACzC,OAAe;IAEf,OAAO,iBAAiB,CAAC;QACxB,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,KAAK,CAAC,KAAK;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,mBAAmB,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG;QACjE,MAAM,EAAE,WAAW,KAAK,CAAC,KAAK,KAAK,eAAe,CAAC,OAAO,CAAC,EAAE;QAC7D,IAAI,EAAE,8BAA8B,KAAK,CAAC,KAAK,aAAa;QAC5D,IAAI,EAAE;YACL,QAAQ,EAAE;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB;gBACnE,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE;gBAChC,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC;aAC1D;YACD,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC;SACtC;KACD,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACzB,IAA0B,EAC1B,SAAoC;IAEpC,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO,IAAI,KAAK,QAAQ;YACvB,CAAC,CAAC,kHAAkH;YACpH,CAAC,CAAC,gKAAgK,CAAA;IACpK,CAAC;IACD,OAAO,IAAI,KAAK,QAAQ;QACvB,CAAC,CAAC,wHAAwH;QAC1H,CAAC,CAAC,4DAA4D,CAAA;AAChE,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,gBAAgB,CAC/B,GAYC,EACD,KAAuC;IAEvC,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC1C,OAAO,iBAAiB,CAAC;QACxB,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,WAAW,GAAG,CAAC,EAAE,KAAK,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC5D,IAAI,EAAE,8BAA8B,GAAG,CAAC,EAAE,qBAAqB;KAC/D,CAAC,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACvC,OAAO,IAAI,KAAK,mEAAmE,CAAA;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACtC,IAAY,EACZ,MAAc,8BAA8B;IAE5C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA;IACnC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAEpD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACxD,mDAAmD;IACnD,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;IACnD,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QAC5C,IAAI,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,CAAC;YAAE,MAAK;QACxC,SAAS,IAAI,IAAI,CAAA;QACjB,IAAI,EAAE,CAAA;IACP,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,SAAS,GAAG,CAAC,CAAA;IACjB,OAAO,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,CAAA;QAC9C,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,SAAS,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM;YAAE,MAAK;QAChD,SAAS,IAAI,IAAI,CAAA;QACjB,IAAI,EAAE,CAAA;IACP,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC3C,0EAA0E;IAC1E,2EAA2E;IAC3E,mDAAmD;IACnD,MAAM,IAAI,GAAG;QACZ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QACxB,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;KACrC,CAAA;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAChC,IAAY,EACZ,MAAc,+BAA+B;IAE7C,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAW;IAC3C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA;IACnC,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,SAAS,OAAO,2BAA2B,CAAA;IAC/E,wEAAwE;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,IAAI,CAAA;IACxB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;AACrG,CAAC;AAED,MAAM,oBAAoB,GACzB,yEAAyE,CAAA;AAE1E,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,OAAO,GAAG,oBAAoB,GAAG,IAAI,EAAE,CAAA;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC/C,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAA;IACpD,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;AAC5E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC7B,QAA4B,EAC5B,OAAoC;AACpC,4EAA4E;AAC5E,WAAoC;IAEpC,IAAI,CAAC,OAAO,EAAE,OAAO;QAAE,OAAO,QAAQ,CAAA;IAEtC,IAAI,aAAa,GAAG,CAAC,CAAC,CAAA;IACtB,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACtC,aAAa,GAAG,KAAK,CAAA;YACrB,MAAK;QACN,CAAC;IACF,CAAC;IACD,IAAI,aAAa,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IAEzC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;IAChC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IAE3C,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAY,CAAA;IACjD,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvB,OAAO,QAAQ,CAAA;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAA;IAC1B,IAAI,CAAC,aAAa,CAAC,GAAG;QACrB,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC;KACtD,CAAA;IACD,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAA;IACvB,OAAO,IAAI,CAAA;AACZ,CAAC"}

package/dist/tools/builtins/monitor.d.ts

@@ -1,3 +1,4 @@
+import { type WebSocketVetOptions } from '../../runtime/jobs/websocket-source.js';
 export declare const MONITOR_TOOL_NAME = "monitor";
 /**
  * What a sandbox without `spawnDetached` is told. The wording of `bash`'s own
@@ -6,10 +7,42 @@ export declare const MONITOR_TOOL_NAME = "monitor";
  * rule: the watch is never run on the host to get around the sandbox.
  */
 export declare const MONITOR_CANNOT_DETACH = "monitor is unavailable: this sandbox cannot start a detached process, and the watch will not be run on the host to get around it. Run the command in the foreground with bash, with a timeout.";
-export declare const MonitorTool: import("../../public-types.js").ToolDefinition<{
-    command: string;
+/** What a host can tune about the WebSocket source; for tests only, see {@link WebSocketVetOptions}. */
+export interface MonitorToolOptions {
+    readonly webSocket?: WebSocketVetOptions;
+    /**
+     * How to turn web access on, in the host's own words, appended to the
+     * refusal a WebSocket call gets while it is off. The SDK cannot name a
+     * switch it does not own (a CLI config key, a desktop setting), and a
+     * refusal that only says "off" leaves the operator guessing. One short
+     * sentence; it is shown to the model and the operator as written.
+     */
+    readonly webAccessHint?: string;
+}
+/** The text that says a WebSocket watch was refused because the host has web access off. */
+export declare const MONITOR_WEBSOCKET_WEB_OFF = "WebSocket monitors follow the host's web access setting, and web access is switched off here, so no connection was opened. Watch the service with a command (for example curl or websocat through monitor) if the operator allows it.";
+/**
+ * The tool, built once with defaults for a host and again by a test that needs
+ * to reach a server on this machine. The options belong to whoever builds the
+ * tool; nothing a model sends can set them.
+ */
+export declare function createMonitorTool(options?: MonitorToolOptions): import("../../types/tool/index.js").ToolDefinition<{
+    description: string;
+    timeout_ms: number;
+    command?: string | undefined;
+    ws?: {
+        url: string;
+        protocols?: string[] | undefined;
+    } | undefined;
+}>;
+export declare const MonitorTool: import("../../types/tool/index.js").ToolDefinition<{
     description: string;
     timeout_ms: number;
+    command?: string | undefined;
+    ws?: {
+        url: string;
+        protocols?: string[] | undefined;
+    } | undefined;
 }>;
 /**
  * The tool, for a host that opts in.
@@ -18,7 +51,8 @@ export declare const MonitorTool: import("../../public-types.js").ToolDefinition
  * wakes on them, and offering a tool that starts a job nobody will hear from
  * is worse than not offering it. A function rather than a constant so a host
  * can decide per turn, and so it reads like `getCodeAnalysisTools`, beside
- * which a host mounts it deferred.
+ * which a host mounts it deferred. Called with no options it returns the
+ * shared {@link MonitorTool}.
  */
-export declare function getMonitorTools(): (typeof MonitorTool)[];
+export declare function getMonitorTools(options?: MonitorToolOptions): (typeof MonitorTool)[];
 //# sourceMappingURL=monitor.d.ts.map

package/dist/tools/builtins/monitor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"monitor.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/monitor.ts"],"names":[],"mappings":"AA8EA,eAAO,MAAM,iBAAiB,YAAY,CAAA;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,mMAC+J,CAAA;AAKjM,eAAO,MAAM,WAAW;;;;EAoGtB,CAAA;AAEF;;;;;;;;GAQG;AACH,wBAAgB,eAAe,IAAI,CAAC,OAAO,WAAW,CAAC,EAAE,CAExD"}
+{"version":3,"file":"monitor.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/monitor.ts"],"names":[],"mappings":"AAQA,OAAO,EAGN,KAAK,mBAAmB,EAMxB,MAAM,wCAAwC,CAAA;AAgH/C,eAAO,MAAM,iBAAiB,YAAY,CAAA;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,mMAC+J,CAAA;AAMjM,wGAAwG;AACxG,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAA;IACxC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED,4FAA4F;AAC5F,eAAO,MAAM,yBAAyB,0OACkM,CAAA;AAKxO;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,kBAAuB;;;;;;;;GA8LjE;AAED,eAAO,MAAM,WAAW;;;;;;;;EAAsB,CAAA;AAE9C;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,kBAAkB,GAAG,CAAC,OAAO,WAAW,CAAC,EAAE,CAEpF"}