@ours.network/fleet 0.16.0 → 0.17.1

package/dist/session/acp.js

@@ -1,7 +1,7 @@
 import { spawn } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
-import { existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { isAbsolute, join, relative, resolve } from 'node:path';
+import { existsSync, lstatSync, readFileSync, readlinkSync, realpathSync, writeFileSync, } from 'node:fs';
+import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
 import { Readable, Writable } from 'node:stream';
 import * as acp from '@agentclientprotocol/sdk';
 import { normalizeSessionUpdate } from './conversation-normalizer.js';
@@ -13,9 +13,124 @@ const CANCEL_SETTLE_GRACE_MS = 15_000;
 const PERMISSION_TIMEOUT_MS = 10 * 60_000;
 /** Spec §4.3: 10-15 s before a vanished controller triggers the unattended policy. */
 const CONTROLLER_GRACE_MS = 12_000;
+/** Bound safe-boundary waiting without turning a hung tool into cancellation. */
+export const AFTER_TOOL_BOUNDARY_TIMEOUT_MS = 120_000;
+const TERMINAL_TOOL_STATUSES = new Set(['completed', 'failed']);
 const SCHEDULED_LOOP_REDACTION = '[scheduled-loop content redacted]';
 const OWNER_COMMENTARY_REDACTION = '[assistant commentary redacted]';
+const MAX_CANONICAL_SYMLINK_DEPTH = 40;
 const scheduledTurn = (turn) => turn?.origin?.kind === 'scheduled-loop';
+/**
+ * Two matching realpath observations narrow the opportunity for a concurrent
+ * retarget, but are only an advisory consistency check: they do not lock the
+ * path. A mutation after the completed check remains an unavoidable TOCTOU
+ * window until ACP offers handle-based access.
+ */
+function stableRealpath(path) {
+    const first = realpathSync.native(path);
+    const second = realpathSync.native(path);
+    return first === second ? first : undefined;
+}
+/** Distinguish an absent component from a dangling symlink at that component. */
+function inspectMissingPath(path) {
+    try {
+        const stat = lstatSync(path);
+        // realpath said ENOENT but lstat found a non-link: the path changed while
+        // inspected, so there is no coherent canonical answer to trust.
+        if (!stat.isSymbolicLink())
+            return { kind: 'unsafe' };
+        try {
+            return { kind: 'symlink', target: resolve(dirname(path), readlinkSync(path)) };
+        }
+        catch {
+            return { kind: 'unsafe' };
+        }
+    }
+    catch (error) {
+        return error.code === 'ENOENT'
+            ? { kind: 'absent' }
+            : { kind: 'unsafe' };
+    }
+}
+/**
+ * Canonicalize an existing path, or a not-yet-created target through its
+ * nearest existing ancestor. Dangling links are followed explicitly because
+ * realpath reports their absent target as ENOENT. Only genuine absence is
+ * recoverable; loops, permissions, races, and every other error fail closed.
+ */
+function canonicalTarget(path, symlinkDepth = 0) {
+    let probe = resolve(path);
+    const missing = [];
+    while (true) {
+        try {
+            let canonical = stableRealpath(probe);
+            if (!canonical)
+                return undefined;
+            // A component may have appeared while the ancestor search was in
+            // progress. Re-walk the suffix so a newly-created symlink is resolved,
+            // not treated as a lexical child of the old ancestor.
+            let logical = probe;
+            for (let i = 0; i < missing.length; i++) {
+                logical = resolve(logical, missing[i]);
+                try {
+                    const appeared = stableRealpath(logical);
+                    if (!appeared)
+                        return undefined;
+                    canonical = appeared;
+                }
+                catch (error) {
+                    if (error.code !== 'ENOENT')
+                        return undefined;
+                    const inspected = inspectMissingPath(logical);
+                    if (inspected.kind === 'unsafe')
+                        return undefined;
+                    if (inspected.kind === 'symlink') {
+                        if (symlinkDepth >= MAX_CANONICAL_SYMLINK_DEPTH)
+                            return undefined;
+                        return canonicalTarget(resolve(inspected.target, ...missing.slice(i + 1)), symlinkDepth + 1);
+                    }
+                    return resolve(canonical, ...missing.slice(i));
+                }
+            }
+            return canonical;
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                return undefined;
+            const inspected = inspectMissingPath(probe);
+            if (inspected.kind === 'unsafe')
+                return undefined;
+            if (inspected.kind === 'symlink') {
+                if (symlinkDepth >= MAX_CANONICAL_SYMLINK_DEPTH)
+                    return undefined;
+                return canonicalTarget(resolve(inspected.target, ...missing), symlinkDepth + 1);
+            }
+            const parent = dirname(probe);
+            if (parent === probe)
+                return undefined;
+            missing.unshift(basename(probe));
+            probe = parent;
+        }
+    }
+}
+function canonicallyWithin(root, candidates) {
+    if (candidates.length === 0)
+        return false;
+    try {
+        const firstRoot = realpathSync.native(root);
+        const paths = candidates.map(canonicalTarget);
+        const secondRoot = realpathSync.native(root);
+        if (firstRoot !== secondRoot || paths.some(path => path === undefined))
+            return false;
+        return paths.every(candidate => {
+            const rel = relative(firstRoot, candidate);
+            return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
+        });
+    }
+    catch {
+        return false;
+    }
+}
 /**
  * Map typed prompt provenance to the conversation ledger's source vocabulary.
  * Only operator-authored local sources may persist prompt bodies; external
@@ -95,9 +210,13 @@ export class AcpSession {
     runtimeModel;
     reasoningEffort;
     controllerCount = 0;
+    closing = false;
     /** Armed when the last controller detaches; unattended policy applies on fire. */
     controllerGrace;
     cancelEscalation;
+    /** ACP-authenticated in-flight calls, including independently reserved permissions. */
+    activeToolCalls = new Map();
+    toolBoundaryWaiters = new Set();
     activeTurn;
     constructor(options, child, connection) {
         this.options = options;
@@ -215,6 +334,142 @@ export class AcpSession {
             permissionMode: this.options.permissionMode,
         };
     }
+    toolCall(toolCallId) {
+        const existing = this.activeToolCalls.get(toolCallId);
+        if (existing)
+            return existing;
+        const created = { lifecycle: false, permissions: new Map() };
+        this.activeToolCalls.set(toolCallId, created);
+        return created;
+    }
+    reserveTool(toolCallId) {
+        if (toolCallId)
+            this.toolCall(toolCallId).lifecycle = true;
+    }
+    reservePermission(toolCallId, permissionId) {
+        if (toolCallId)
+            this.toolCall(toolCallId).permissions.set(permissionId, 'pending');
+    }
+    allowPermission(toolCallId, permissionId) {
+        if (!toolCallId)
+            return;
+        const permission = this.activeToolCalls.get(toolCallId)?.permissions;
+        if (permission?.has(permissionId))
+            permission.set(permissionId, 'allowed');
+    }
+    releasePermission(toolCallId, permissionId) {
+        const call = toolCallId && this.activeToolCalls.get(toolCallId);
+        if (!call || !call.permissions.delete(permissionId))
+            return;
+        this.releaseToolIfIdle(toolCallId, call);
+    }
+    releaseTool(toolCallId) {
+        const call = toolCallId && this.activeToolCalls.get(toolCallId);
+        if (!call)
+            return;
+        call.lifecycle = false;
+        // Terminal tool evidence consumes permissions already granted for this
+        // call, but never a separate request that is still awaiting a decision.
+        for (const [permissionId, state] of call.permissions)
+            if (state === 'allowed')
+                call.permissions.delete(permissionId);
+        this.releaseToolIfIdle(toolCallId, call);
+    }
+    releaseToolIfIdle(toolCallId, call) {
+        if (call.lifecycle || call.permissions.size > 0)
+            return;
+        if (!this.activeToolCalls.delete(toolCallId) || this.activeToolCalls.size > 0)
+            return;
+        for (const notify of [...this.toolBoundaryWaiters])
+            notify();
+    }
+    releaseAllTools() {
+        if (this.activeToolCalls.size === 0)
+            return;
+        this.activeToolCalls.clear();
+        for (const notify of [...this.toolBoundaryWaiters])
+            notify();
+    }
+    waitForToolBoundary(timeoutMs) {
+        if (this.activeToolCalls.size === 0)
+            return Promise.resolve(true);
+        return new Promise(resolve => {
+            let settled = false;
+            const finish = (atBoundary) => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(timer);
+                this.toolBoundaryWaiters.delete(check);
+                resolve(atBoundary);
+            };
+            const check = () => {
+                if (this.activeToolCalls.size === 0 || !this.isAlive())
+                    finish(this.activeToolCalls.size === 0);
+            };
+            const timer = setTimeout(() => finish(false), Math.max(0, timeoutMs));
+            timer.unref?.();
+            this.toolBoundaryWaiters.add(check);
+            // Close the subscribe/check race without guessing about elapsed time.
+            check();
+        });
+    }
+    recordAfterToolDelivery(state, activeToolCount, waitedMs) {
+        this.events.emit('monitor_delivery', {
+            status: state, monitorPolicy: 'after_tool', activeToolCount, waitedMs,
+        });
+        this.conversation.appendSafe({
+            kind: 'monitor.delivery', sessionGeneration: this.sessionGeneration,
+            acpSessionId: this.sessionId, source: 'fleet_monitor',
+            payload: { policy: 'after_tool', state, activeToolCount, waitedMs },
+        });
+    }
+    /**
+     * Monitor-only safe-boundary delivery. Steering is the interruption: this
+     * path never calls session/cancel and never resolves a pending permission.
+     */
+    async submitPromptAfterTool(text, options = {}) {
+        if (this.closing || !this.isAlive())
+            return turnResult(false, 'failed', this.lastError ?? 'ACP session is closing');
+        const startedAt = Date.now();
+        const initialToolCount = this.activeToolCalls.size;
+        if (!this.steeringSupported) {
+            this.recordAfterToolDelivery('unsupported', initialToolCount, 0);
+            const result = await this.submitPrompt(text, { ...options, interrupt: false, steer: false });
+            return {
+                ...result,
+                safeBoundary: { state: 'unsupported', waitedMs: 0, activeToolCount: initialToolCount },
+            };
+        }
+        if (initialToolCount === 0) {
+            this.recordAfterToolDelivery('direct', 0, 0);
+            const result = await this.steerPrompt(text);
+            return { ...result, safeBoundary: { state: 'direct', waitedMs: 0, activeToolCount: 0 } };
+        }
+        this.recordAfterToolDelivery('deferred', initialToolCount, 0);
+        const timeoutMs = this.options.afterToolBoundaryTimeoutMs ?? AFTER_TOOL_BOUNDARY_TIMEOUT_MS;
+        const deadline = startedAt + timeoutMs;
+        let atBoundary = false;
+        // Re-check after every wake: another authenticated tool event may have
+        // arrived before this continuation ran. Only an empty tracked set is safe.
+        while (this.activeToolCalls.size > 0) {
+            const remaining = deadline - Date.now();
+            if (remaining <= 0 || !(await this.waitForToolBoundary(remaining)))
+                break;
+        }
+        atBoundary = this.activeToolCalls.size === 0;
+        if (this.closing || !this.isAlive())
+            return turnResult(false, 'failed', this.lastError ?? 'ACP session closed during after_tool wait');
+        const waitedMs = Math.max(0, Date.now() - startedAt);
+        const state = atBoundary ? 'after_tool' : 'timeout';
+        const remainingToolCount = this.activeToolCalls.size;
+        this.recordAfterToolDelivery(state, remainingToolCount, waitedMs);
+        const result = await this.steerPrompt(text);
+        return {
+            ...result,
+            safeBoundary: { state, waitedMs, activeToolCount: remainingToolCount },
+        };
+    }
     /**
      * Accept responsibility for a prompt, then return. The turn itself may run
      * for minutes behind other queued turns; making an interactive caller wait
@@ -365,6 +620,10 @@ export class AcpSession {
             clearTimeout(pending.expiry);
         pending.resolve({ outcome: { outcome: 'selected', optionId } });
         const decision = chosen.kind.startsWith('reject') ? 'denied' : 'allowed';
+        if (decision === 'allowed')
+            this.allowPermission(pending.toolCallId, permissionId);
+        else
+            this.releasePermission(pending.toolCallId, permissionId);
         this.events.emit('permission', {
             turnId: this.activeTurn?.id,
             origin: this.activeTurn?.origin,
@@ -381,7 +640,7 @@ export class AcpSession {
             promptId: this.activeTurn?.id, turnId: this.activeTurn?.id,
             payload: { decision, decisionSource: 'manual', optionId },
         });
-        this.readiness = 'running';
+        this.readiness = this.pendingPermissions.size > 0 ? 'awaiting_permission' : 'running';
         return true;
     }
     /**
@@ -446,11 +705,12 @@ export class AcpSession {
             ? { outcome: { outcome: 'selected', optionId: rejectOption.optionId } }
             : { outcome: { outcome: 'cancelled' } });
         const settled = decision === 'denied' && !rejectOption ? 'cancelled' : decision;
+        this.releasePermission(pending.toolCallId, permissionId);
         this.events.emit('permission', {
             turnId: this.activeTurn?.id,
             origin: this.activeTurn?.origin,
             permissionId,
-            toolCallId: pending.toolCallId,
+            toolCallId: pending.eventToolCallId,
             status: 'completed',
             decision: settled === 'expired' ? 'cancelled' : settled,
             decisionSource: 'automatic',
@@ -462,7 +722,7 @@ export class AcpSession {
             kind: 'permission.resolved', sessionGeneration: this.sessionGeneration,
             acpSessionId: this.sessionId, permissionId,
             promptId: this.activeTurn?.id, turnId: this.activeTurn?.id,
-            toolCallId: pending.toolCallId,
+            toolCallId: pending.eventToolCallId,
             payload: {
                 decision: settled, decisionSource: 'automatic',
                 ...(policy ? { policy } : {}), reason,
@@ -476,6 +736,7 @@ export class AcpSession {
         return this.exit;
     }
     async close() {
+        this.closing = true;
         if (this.cancelEscalation)
             clearTimeout(this.cancelEscalation);
         this.cancelEscalation = undefined;
@@ -484,6 +745,7 @@ export class AcpSession {
         this.controllerGrace = undefined;
         for (const [permissionId, pending] of [...this.pendingPermissions])
             this.settlePendingAutomatically(permissionId, pending, 'cancelled', undefined, 'the session closed while this request was pending');
+        this.releaseAllTools();
         if (this.sessionId && this.capabilities?.sessionCapabilities?.close != null) {
             await this.connection.agent.request(acp.methods.agent.session.close, { sessionId: this.sessionId }).catch(() => undefined);
         }
@@ -627,6 +889,7 @@ export class AcpSession {
             return turnResult(false, 'failed', this.lastError, this.activeTurn?.id === turnId ? this.activeTurn.output : undefined);
         }
         finally {
+            this.releaseAllTools();
             if (this.activeTurn?.id === turnId) {
                 if (this.cancelEscalation)
                     clearTimeout(this.cancelEscalation);
@@ -667,9 +930,19 @@ export class AcpSession {
             }
             return undefined;
         };
+        const toolCallId = params.toolCall.toolCallId;
+        const permissionId = randomUUID();
+        // Permission is part of the tool lifecycle. Reserve before any policy or
+        // human decision so a monitor wake cannot slip between request and answer.
+        this.reservePermission(toolCallId, permissionId);
         if (this.options.permissions.approval === 'allow' && this.withinAutomaticBoundary(params)) {
             const option = choose(['allow_always', 'allow_once']);
-            return Promise.resolve(this.settleAutomatically(params, option, 'allowed', 'permissions.approval=allow', `the request is inside the ${this.options.permissions.filesystem} boundary`));
+            const response = this.settleAutomatically(params, option, 'allowed', 'permissions.approval=allow', `the request is inside the ${this.options.permissions.filesystem} boundary`);
+            if (option)
+                this.allowPermission(toolCallId, permissionId);
+            else
+                this.releasePermission(toolCallId, permissionId);
+            return Promise.resolve(response);
         }
         // A live grace window still counts as attended: the controller may be
         // mid-reconnect, and denying instantly is exactly what the grace prevents.
@@ -680,11 +953,12 @@ export class AcpSession {
             // a decision no human made, so one unattended denial would silently disable
             // the tool for the rest of the session.
             const option = choose(['reject_once', 'reject_always']);
-            return Promise.resolve(this.settleAutomatically(params, option, 'denied', unattended ? 'permissions.unattended=deny' : 'permissions.approval=deny', unattended
+            const response = this.settleAutomatically(params, option, 'denied', unattended ? 'permissions.unattended=deny' : 'permissions.approval=deny', unattended
                 ? 'no controller is attached, so the request cannot be shown to anyone'
-                : 'the role denies every permission request by policy'));
+                : 'the role denies every permission request by policy');
+            this.releasePermission(toolCallId, permissionId);
+            return Promise.resolve(response);
         }
-        const permissionId = randomUUID();
         const timeoutMs = this.options.permissionTimeoutMs ?? PERMISSION_TIMEOUT_MS;
         const expiresAt = new Date(Date.now() + timeoutMs).toISOString();
         this.readiness = 'awaiting_permission';
@@ -723,8 +997,8 @@ export class AcpSession {
         return new Promise(resolve => {
             const pending = {
                 options: params.options, resolve,
-                toolCallId: scheduledTurn(this.activeTurn)
-                    ? 'scheduled-loop-tool' : params.toolCall.toolCallId,
+                toolCallId,
+                eventToolCallId: scheduledTurn(this.activeTurn) ? 'scheduled-loop-tool' : toolCallId,
             };
             pending.expiry = setTimeout(() => {
                 this.settlePendingAutomatically(permissionId, pending, 'expired', undefined, `no decision arrived within ${Math.round(timeoutMs / 1000)}s`);
@@ -785,11 +1059,7 @@ export class AcpSession {
         if (locations.length === 0)
             return false;
         const cwd = resolve(this.options.cwd);
-        return locations.every(location => {
-            const path = resolve(location.path);
-            const rel = relative(cwd, path);
-            return rel === '' || (!rel.startsWith('..') && !isAbsolute(rel));
-        });
+        return canonicallyWithin(cwd, locations.map(location => resolve(location.path)));
     }
     recordUpdate(update) {
         const scheduled = this.activeTurn?.origin?.kind === 'scheduled-loop';
@@ -832,6 +1102,10 @@ export class AcpSession {
                     title: scheduled ? 'scheduled-loop tool' : update.title,
                     status: update.status,
                 });
+                if (TERMINAL_TOOL_STATUSES.has(update.status ?? ''))
+                    this.releaseTool(update.toolCallId);
+                else
+                    this.reserveTool(update.toolCallId);
                 break;
             case 'tool_call_update':
                 this.events.emit('tool_update', {
@@ -841,6 +1115,10 @@ export class AcpSession {
                     title: scheduled ? 'scheduled-loop tool' : update.title ?? undefined,
                     status: update.status ?? undefined,
                 });
+                if (TERMINAL_TOOL_STATUSES.has(update.status ?? ''))
+                    this.releaseTool(update.toolCallId);
+                else if (update.status !== undefined)
+                    this.reserveTool(update.toolCallId);
                 break;
             default:
                 break;
@@ -864,7 +1142,10 @@ export class AcpSession {
     }
     /** Normalize every ACP update losslessly into the durable ledger. */
     recordConversationUpdate(update, scheduled, commentary = false) {
-        const normalized = normalizeSessionUpdate(update, scheduled ? { redactText: SCHEDULED_LOOP_REDACTION }
+        const normalized = normalizeSessionUpdate(update, scheduled ? {
+            redactText: SCHEDULED_LOOP_REDACTION,
+            redactToolCallId: 'scheduled-loop-tool',
+        }
             : commentary ? { redactText: OWNER_COMMENTARY_REDACTION } : {});
         this.conversation.appendSafe({
             kind: normalized.kind,

package/dist/session/arbiter.d.ts

@@ -27,6 +27,11 @@ export declare class RoleTurnArbiter implements SessionHandle {
     private track;
     queuePrompt(text: string, options?: SubmitPromptOptions): Promise<QueuedPrompt>;
     submitPrompt(text: string, options?: SubmitPromptOptions): Promise<TurnResult>;
+    /**
+     * Do not hold `exclusive` while ACP waits for a tool boundary: permission
+     * answers and explicit interrupts must remain able to pass immediately.
+     */
+    submitPromptAfterTool(text: string, options?: SubmitPromptOptions): Promise<TurnResult>;
     tryScheduled(text: string, origin: Extract<PromptOrigin, {
         kind: 'scheduled-loop';
     }>, beforeQueue?: () => void | Promise<void>): Promise<ScheduledAttempt>;

package/dist/session/arbiter.js

@@ -32,6 +32,14 @@ export class RoleTurnArbiter {
     async submitPrompt(text, options = {}) {
         return (await this.queuePrompt(text, options)).completion;
     }
+    /**
+     * Do not hold `exclusive` while ACP waits for a tool boundary: permission
+     * answers and explicit interrupts must remain able to pass immediately.
+     */
+    submitPromptAfterTool(text, options = {}) {
+        return this.session.submitPromptAfterTool?.(text, options)
+            ?? this.session.submitPrompt(text, { ...options, interrupt: false, steer: false });
+    }
     async tryScheduled(text, origin, beforeQueue) {
         // Give owner/console/I/O callbacks already ready in this event-loop turn a
         // chance to claim the arbiter first. Scheduled work is best-effort; humans

package/dist/session/conversation-normalizer.d.ts

@@ -23,6 +23,12 @@ export interface NormalizeOptions {
      * digest. Used for scheduled-loop turns whose output must not be retained.
      */
     redactText?: string;
+    /**
+     * Replace ACP tool-call IDs in both the normalized event correlation field
+     * and payload. The caller may still use the original update for in-memory
+     * lifecycle tracking without persisting its private identifier.
+     */
+    redactToolCallId?: string;
 }
 export interface NormalizedUpdate {
     kind: ConversationEventKind;

package/dist/session/conversation-normalizer.js

@@ -203,9 +203,10 @@ function normalizeToolContent(raw, redact) {
         }
     });
 }
-function toolUpsert(update, snapshot, redact) {
+function toolUpsert(update, snapshot, options) {
+    const redact = options.redactText;
     const payload = {
-        toolCallId: asString(update.toolCallId) ?? '',
+        toolCallId: options.redactToolCallId ?? asString(update.toolCallId) ?? '',
         snapshot,
     };
     if (asString(update.title) !== undefined)
@@ -271,7 +272,7 @@ export function normalizeSessionUpdate(update, options = {}) {
         }
         case 'tool_call':
         case 'tool_call_update': {
-            const payload = toolUpsert(raw, raw.sessionUpdate === 'tool_call', redact);
+            const payload = toolUpsert(raw, raw.sessionUpdate === 'tool_call', options);
             return withMeta({
                 kind: 'tool.upsert', payload,
                 ...(payload.toolCallId ? { toolCallId: payload.toolCallId } : {}),

package/dist/session/conversation-types.d.ts

@@ -7,7 +7,7 @@ import type { PromptOrigin, TurnCancellationSource, TurnOutcome } from './types.
  * file touches the wire: ACP updates are reduced into these shapes by the
  * normalizer, and the store (phase 1) assigns `seq`/`eventId`/timestamps.
  */
-export type ConversationEventKind = 'prompt.admitted' | 'prompt.started' | 'prompt.interrupt_requested' | 'message.chunk' | 'message.replace' | 'thought.chunk' | 'thought.replace' | 'plan.replace' | 'tool.upsert' | 'tool.content_chunk' | 'permission.requested' | 'permission.resolved' | 'usage.updated' | 'turn.state' | 'turn.completed' | 'session.state' | 'session.info' | 'capabilities.updated' | 'error'
+export type ConversationEventKind = 'prompt.admitted' | 'prompt.started' | 'prompt.interrupt_requested' | 'message.chunk' | 'message.replace' | 'thought.chunk' | 'thought.replace' | 'plan.replace' | 'tool.upsert' | 'tool.content_chunk' | 'permission.requested' | 'permission.resolved' | 'monitor.delivery' | 'usage.updated' | 'turn.state' | 'turn.completed' | 'session.state' | 'session.info' | 'capabilities.updated' | 'error'
 /** A well-formed ACP update this version cannot represent. Bounded, never a crash. */
  | 'unsupported';
 /** Where a conversation record came from. Typed provenance, never prompt text. */
@@ -178,6 +178,13 @@ export interface PermissionResolvedPayload {
     policy?: string;
     reason?: string;
 }
+/** Body-free monitor evidence. Tool ids, titles, output, and wake text are never stored. */
+export interface MonitorDeliveryPayload {
+    policy: 'after_tool';
+    state: 'deferred' | 'direct' | 'after_tool' | 'timeout' | 'unsupported';
+    activeToolCount: number;
+    waitedMs: number;
+}
 export interface TurnStatePayload {
     state: 'queued' | 'running' | 'awaiting_permission' | 'interrupt_requested';
 }
@@ -201,7 +208,7 @@ export interface BoundedJson {
     digest?: string;
     redacted?: true;
 }
-export type ConversationPayload = MessageChunkPayload | ThoughtChunkPayload | PlanReplacePayload | ToolUpsertPayload | UsageUpdatedPayload | SessionStatePayload | SessionInfoPayload | CapabilitiesUpdatedPayload | UnsupportedPayload | PromptAdmittedPayload | PromptStartedPayload | PromptInterruptRequestedPayload | PermissionRequestedPayload | PermissionResolvedPayload | TurnStatePayload | TurnCompletedPayload | SessionLifecyclePayload | ErrorPayload;
+export type ConversationPayload = MessageChunkPayload | ThoughtChunkPayload | PlanReplacePayload | ToolUpsertPayload | UsageUpdatedPayload | SessionStatePayload | SessionInfoPayload | CapabilitiesUpdatedPayload | UnsupportedPayload | PromptAdmittedPayload | PromptStartedPayload | PromptInterruptRequestedPayload | PermissionRequestedPayload | PermissionResolvedPayload | TurnStatePayload | TurnCompletedPayload | MonitorDeliveryPayload | SessionLifecyclePayload | ErrorPayload;
 export interface ConversationEventV1 {
     schemaVersion: 1;
     roleId: string;

package/dist/session/types.d.ts

@@ -49,6 +49,12 @@ export interface TurnResult {
     cancellationSource?: TurnCancellationSource;
     /** Final assistant text captured structurally by a backend, when available. */
     output?: string;
+    /** Body-free monitor safe-boundary disposition, when this was an after_tool wake. */
+    safeBoundary?: {
+        state: 'direct' | 'after_tool' | 'timeout' | 'unsupported';
+        waitedMs: number;
+        activeToolCount: number;
+    };
 }
 /**
  * Why a control operation failed. The distinctions exist because collapsing
@@ -137,7 +143,7 @@ export interface SessionSnapshot {
         nativeMode: string;
     };
 }
-export type SessionEventKind = 'state' | 'agent_text' | 'thought' | 'tool_call' | 'tool_update' | 'permission' | 'turn_stop' | 'error';
+export type SessionEventKind = 'state' | 'agent_text' | 'thought' | 'tool_call' | 'tool_update' | 'permission' | 'monitor_delivery' | 'turn_stop' | 'error';
 /** What a settled permission request resolved to. */
 export type PermissionDecision = 'allowed' | 'denied' | 'cancelled';
 export interface SessionEvent {
@@ -178,6 +184,10 @@ export interface SessionEvent {
     reason?: string;
     /** The option actually selected, when one was. */
     optionId?: string;
+    /** Body-free evidence for monitor safe-boundary delivery. */
+    monitorPolicy?: 'after_tool';
+    activeToolCount?: number;
+    waitedMs?: number;
 }
 export interface ConversationHandlePage {
     events: ConversationEventV1[];
@@ -206,6 +216,8 @@ export interface SessionHandle {
     queuePrompt(text: string, options?: SubmitPromptOptions): Promise<QueuedPrompt>;
     /** Queue a prompt and wait for its terminal result. */
     submitPrompt(text: string, options?: SubmitPromptOptions): Promise<TurnResult>;
+    /** Monitor-only ACP safe-boundary delivery. Never implies human/control cancellation. */
+    submitPromptAfterTool?(text: string, options?: SubmitPromptOptions): Promise<TurnResult>;
     interrupt(source?: TurnCancellationSource): Promise<void>;
     respondPermission(permissionId: string, optionId: string): boolean;
     /** Generation-bound browser decision; stale/settled/invalid all fail closed. */

package/dist/web-app/assets/{TerminalView-Mxxypj9w.js → TerminalView-B3rnVWbo.js}

@@ -1,4 +1,4 @@
-import{r as le,a as Ee,j as re}from"./index-CsHEL0f6.js";var ge={exports:{}},Se;function ke(){return Se||(Se=1,(function(se,ne){(function(Q,X){se.exports=X()})(globalThis,(()=>(()=>{var Q={4567:function(B,r,o){var l=this&&this.__decorate||function(e,i,a,v){var f,g=arguments.length,c=g<3?i:v===null?v=Object.getOwnPropertyDescriptor(i,a):v;if(typeof Reflect=="object"&&typeof Reflect.decorate=="function")c=Reflect.decorate(e,i,a,v);else for(var m=e.length-1;m>=0;m--)(f=e[m])&&(c=(g<3?f(c):g>3?f(i,a,c):f(i,a))||c);return g>3&&c&&Object.defineProperty(i,a,c),c},_=this&&this.__param||function(e,i){return function(a,v){i(a,v,e)}};Object.defineProperty(r,"__esModule",{value:!0}),r.AccessibilityManager=void 0;const n=o(9042),d=o(9924),u=o(844),p=o(4725),h=o(2585),t=o(3656);let s=r.AccessibilityManager=class extends u.Disposable{constructor(e,i,a,v){super(),this._terminal=e,this._coreBrowserService=a,this._renderService=v,this._rowColumns=new WeakMap,this._liveRegionLineCount=0,this._charsToConsume=[],this._charsToAnnounce="",this._accessibilityContainer=this._coreBrowserService.mainDocument.createElement("div"),this._accessibilityContainer.classList.add("xterm-accessibility"),this._rowContainer=this._coreBrowserService.mainDocument.createElement("div"),this._rowContainer.setAttribute("role","list"),this._rowContainer.classList.add("xterm-accessibility-tree"),this._rowElements=[];for(let f=0;f<this._terminal.rows;f++)this._rowElements[f]=this._createAccessibilityTreeNode(),this._rowContainer.appendChild(this._rowElements[f]);if(this._topBoundaryFocusListener=f=>this._handleBoundaryFocus(f,0),this._bottomBoundaryFocusListener=f=>this._handleBoundaryFocus(f,1),this._rowElements[0].addEventListener("focus",this._topBoundaryFocusListener),this._rowElements[this._rowElements.length-1].addEventListener("focus",this._bottomBoundaryFocusListener),this._refreshRowsDimensions(),this._accessibilityContainer.appendChild(this._rowContainer),this._liveRegion=this._coreBrowserService.mainDocument.createElement("div"),this._liveRegion.classList.add("live-region"),this._liveRegion.setAttribute("aria-live","assertive"),this._accessibilityContainer.appendChild(this._liveRegion),this._liveRegionDebouncer=this.register(new d.TimeBasedDebouncer(this._renderRows.bind(this))),!this._terminal.element)throw new Error("Cannot enable accessibility before Terminal.open");this._terminal.element.insertAdjacentElement("afterbegin",this._accessibilityContainer),this.register(this._terminal.onResize((f=>this._handleResize(f.rows)))),this.register(this._terminal.onRender((f=>this._refreshRows(f.start,f.end)))),this.register(this._terminal.onScroll((()=>this._refreshRows()))),this.register(this._terminal.onA11yChar((f=>this._handleChar(f)))),this.register(this._terminal.onLineFeed((()=>this._handleChar(`
+import{r as le,a as Ee,j as re}from"./index-CliHATFt.js";var ge={exports:{}},Se;function ke(){return Se||(Se=1,(function(se,ne){(function(Q,X){se.exports=X()})(globalThis,(()=>(()=>{var Q={4567:function(B,r,o){var l=this&&this.__decorate||function(e,i,a,v){var f,g=arguments.length,c=g<3?i:v===null?v=Object.getOwnPropertyDescriptor(i,a):v;if(typeof Reflect=="object"&&typeof Reflect.decorate=="function")c=Reflect.decorate(e,i,a,v);else for(var m=e.length-1;m>=0;m--)(f=e[m])&&(c=(g<3?f(c):g>3?f(i,a,c):f(i,a))||c);return g>3&&c&&Object.defineProperty(i,a,c),c},_=this&&this.__param||function(e,i){return function(a,v){i(a,v,e)}};Object.defineProperty(r,"__esModule",{value:!0}),r.AccessibilityManager=void 0;const n=o(9042),d=o(9924),u=o(844),p=o(4725),h=o(2585),t=o(3656);let s=r.AccessibilityManager=class extends u.Disposable{constructor(e,i,a,v){super(),this._terminal=e,this._coreBrowserService=a,this._renderService=v,this._rowColumns=new WeakMap,this._liveRegionLineCount=0,this._charsToConsume=[],this._charsToAnnounce="",this._accessibilityContainer=this._coreBrowserService.mainDocument.createElement("div"),this._accessibilityContainer.classList.add("xterm-accessibility"),this._rowContainer=this._coreBrowserService.mainDocument.createElement("div"),this._rowContainer.setAttribute("role","list"),this._rowContainer.classList.add("xterm-accessibility-tree"),this._rowElements=[];for(let f=0;f<this._terminal.rows;f++)this._rowElements[f]=this._createAccessibilityTreeNode(),this._rowContainer.appendChild(this._rowElements[f]);if(this._topBoundaryFocusListener=f=>this._handleBoundaryFocus(f,0),this._bottomBoundaryFocusListener=f=>this._handleBoundaryFocus(f,1),this._rowElements[0].addEventListener("focus",this._topBoundaryFocusListener),this._rowElements[this._rowElements.length-1].addEventListener("focus",this._bottomBoundaryFocusListener),this._refreshRowsDimensions(),this._accessibilityContainer.appendChild(this._rowContainer),this._liveRegion=this._coreBrowserService.mainDocument.createElement("div"),this._liveRegion.classList.add("live-region"),this._liveRegion.setAttribute("aria-live","assertive"),this._accessibilityContainer.appendChild(this._liveRegion),this._liveRegionDebouncer=this.register(new d.TimeBasedDebouncer(this._renderRows.bind(this))),!this._terminal.element)throw new Error("Cannot enable accessibility before Terminal.open");this._terminal.element.insertAdjacentElement("afterbegin",this._accessibilityContainer),this.register(this._terminal.onResize((f=>this._handleResize(f.rows)))),this.register(this._terminal.onRender((f=>this._refreshRows(f.start,f.end)))),this.register(this._terminal.onScroll((()=>this._refreshRows()))),this.register(this._terminal.onA11yChar((f=>this._handleChar(f)))),this.register(this._terminal.onLineFeed((()=>this._handleChar(`
 `)))),this.register(this._terminal.onA11yTab((f=>this._handleTab(f)))),this.register(this._terminal.onKey((f=>this._handleKey(f.key)))),this.register(this._terminal.onBlur((()=>this._clearLiveRegion()))),this.register(this._renderService.onDimensionsChange((()=>this._refreshRowsDimensions()))),this.register((0,t.addDisposableDomListener)(document,"selectionchange",(()=>this._handleSelectionChange()))),this.register(this._coreBrowserService.onDprChange((()=>this._refreshRowsDimensions()))),this._refreshRows(),this.register((0,u.toDisposable)((()=>{this._accessibilityContainer.remove(),this._rowElements.length=0})))}_handleTab(e){for(let i=0;i<e;i++)this._handleChar(" ")}_handleChar(e){this._liveRegionLineCount<21&&(this._charsToConsume.length>0?this._charsToConsume.shift()!==e&&(this._charsToAnnounce+=e):this._charsToAnnounce+=e,e===`
 `&&(this._liveRegionLineCount++,this._liveRegionLineCount===21&&(this._liveRegion.textContent+=n.tooMuchOutput)))}_clearLiveRegion(){this._liveRegion.textContent="",this._liveRegionLineCount=0}_handleKey(e){this._clearLiveRegion(),new RegExp("\\p{Control}","u").test(e)||this._charsToConsume.push(e)}_refreshRows(e,i){this._liveRegionDebouncer.refresh(e,i,this._terminal.rows)}_renderRows(e,i){const a=this._terminal.buffer,v=a.lines.length.toString();for(let f=e;f<=i;f++){const g=a.lines.get(a.ydisp+f),c=[],m=g?.translateToString(!0,void 0,void 0,c)||"",E=(a.ydisp+f+1).toString(),k=this._rowElements[f];k&&(m.length===0?(k.innerText=" ",this._rowColumns.set(k,[0,1])):(k.textContent=m,this._rowColumns.set(k,c)),k.setAttribute("aria-posinset",E),k.setAttribute("aria-setsize",v))}this._announceCharacters()}_announceCharacters(){this._charsToAnnounce.length!==0&&(this._liveRegion.textContent+=this._charsToAnnounce,this._charsToAnnounce="")}_handleBoundaryFocus(e,i){const a=e.target,v=this._rowElements[i===0?1:this._rowElements.length-2];if(a.getAttribute("aria-posinset")===(i===0?"1":`${this._terminal.buffer.lines.length}`)||e.relatedTarget!==v)return;let f,g;if(i===0?(f=a,g=this._rowElements.pop(),this._rowContainer.removeChild(g)):(f=this._rowElements.shift(),g=a,this._rowContainer.removeChild(f)),f.removeEventListener("focus",this._topBoundaryFocusListener),g.removeEventListener("focus",this._bottomBoundaryFocusListener),i===0){const c=this._createAccessibilityTreeNode();this._rowElements.unshift(c),this._rowContainer.insertAdjacentElement("afterbegin",c)}else{const c=this._createAccessibilityTreeNode();this._rowElements.push(c),this._rowContainer.appendChild(c)}this._rowElements[0].addEventListener("focus",this._topBoundaryFocusListener),this._rowElements[this._rowElements.length-1].addEventListener("focus",this._bottomBoundaryFocusListener),this._terminal.scrollLines(i===0?-1:1),this._rowElements[i===0?1:this._rowElements.length-2].focus(),e.preventDefault(),e.stopImmediatePropagation()}_handleSelectionChange(){if(this._rowElements.length===0)return;const e=document.getSelection();if(!e)return;if(e.isCollapsed)return void(this._rowContainer.contains(e.anchorNode)&&this._terminal.clearSelection());if(!e.anchorNode||!e.focusNode)return void console.error("anchorNode and/or focusNode are null");let i={node:e.anchorNode,offset:e.anchorOffset},a={node:e.focusNode,offset:e.focusOffset};if((i.node.compareDocumentPosition(a.node)&Node.DOCUMENT_POSITION_PRECEDING||i.node===a.node&&i.offset>a.offset)&&([i,a]=[a,i]),i.node.compareDocumentPosition(this._rowElements[0])&(Node.DOCUMENT_POSITION_CONTAINED_BY|Node.DOCUMENT_POSITION_FOLLOWING)&&(i={node:this._rowElements[0].childNodes[0],offset:0}),!this._rowContainer.contains(i.node))return;const v=this._rowElements.slice(-1)[0];if(a.node.compareDocumentPosition(v)&(Node.DOCUMENT_POSITION_CONTAINED_BY|Node.DOCUMENT_POSITION_PRECEDING)&&(a={node:v,offset:v.textContent?.length??0}),!this._rowContainer.contains(a.node))return;const f=({node:m,offset:E})=>{const k=m instanceof Text?m.parentNode:m;let D=parseInt(k?.getAttribute("aria-posinset"),10)-1;if(isNaN(D))return console.warn("row is invalid. Race condition?"),null;const b=this._rowColumns.get(k);if(!b)return console.warn("columns is null. Race condition?"),null;let x=E<b.length?b[E]:b.slice(-1)[0]+1;return x>=this._terminal.cols&&(++D,x=0),{row:D,column:x}},g=f(i),c=f(a);if(g&&c){if(g.row>c.row||g.row===c.row&&g.column>=c.column)throw new Error("invalid range");this._terminal.select(g.column,g.row,(c.row-g.row)*this._terminal.cols-g.column+c.column)}}_handleResize(e){this._rowElements[this._rowElements.length-1].removeEventListener("focus",this._bottomBoundaryFocusListener);for(let i=this._rowContainer.children.length;i<this._terminal.rows;i++)this._rowElements[i]=this._createAccessibilityTreeNode(),this._rowContainer.appendChild(this._rowElements[i]);for(;this._rowElements.length>e;)this._rowContainer.removeChild(this._rowElements.pop());this._rowElements[this._rowElements.length-1].addEventListener("focus",this._bottomBoundaryFocusListener),this._refreshRowsDimensions()}_createAccessibilityTreeNode(){const e=this._coreBrowserService.mainDocument.createElement("div");return e.setAttribute("role","listitem"),e.tabIndex=-1,this._refreshRowDimensions(e),e}_refreshRowsDimensions(){if(this._renderService.dimensions.css.cell.height){this._accessibilityContainer.style.width=`${this._renderService.dimensions.css.canvas.width}px`,this._rowElements.length!==this._terminal.rows&&this._handleResize(this._terminal.rows);for(let e=0;e<this._terminal.rows;e++)this._refreshRowDimensions(this._rowElements[e])}}_refreshRowDimensions(e){e.style.height=`${this._renderService.dimensions.css.cell.height}px`}};r.AccessibilityManager=s=l([_(1,h.IInstantiationService),_(2,p.ICoreBrowserService),_(3,p.IRenderService)],s)},3614:(B,r)=>{function o(d){return d.replace(/\r?\n/g,"\r")}function l(d,u){return u?"\x1B[200~"+d+"\x1B[201~":d}function _(d,u,p,h){d=l(d=o(d),p.decPrivateModes.bracketedPasteMode&&h.rawOptions.ignoreBracketedPasteMode!==!0),p.triggerDataEvent(d,!0),u.value=""}function n(d,u,p){const h=p.getBoundingClientRect(),t=d.clientX-h.left-10,s=d.clientY-h.top-10;u.style.width="20px",u.style.height="20px",u.style.left=`${t}px`,u.style.top=`${s}px`,u.style.zIndex="1000",u.focus()}Object.defineProperty(r,"__esModule",{value:!0}),r.rightClickHandler=r.moveTextAreaUnderMouseCursor=r.paste=r.handlePasteEvent=r.copyHandler=r.bracketTextForPaste=r.prepareTextForTerminal=void 0,r.prepareTextForTerminal=o,r.bracketTextForPaste=l,r.copyHandler=function(d,u){d.clipboardData&&d.clipboardData.setData("text/plain",u.selectionText),d.preventDefault()},r.handlePasteEvent=function(d,u,p,h){d.stopPropagation(),d.clipboardData&&_(d.clipboardData.getData("text/plain"),u,p,h)},r.paste=_,r.moveTextAreaUnderMouseCursor=n,r.rightClickHandler=function(d,u,p,h,t){n(d,u,p),t&&h.rightClickSelect(d),u.value=h.selectionText,u.select()}},7239:(B,r,o)=>{Object.defineProperty(r,"__esModule",{value:!0}),r.ColorContrastCache=void 0;const l=o(1505);r.ColorContrastCache=class{constructor(){this._color=new l.TwoKeyMap,this._css=new l.TwoKeyMap}setCss(_,n,d){this._css.set(_,n,d)}getCss(_,n){return this._css.get(_,n)}setColor(_,n,d){this._color.set(_,n,d)}getColor(_,n){return this._color.get(_,n)}clear(){this._color.clear(),this._css.clear()}}},3656:(B,r)=>{Object.defineProperty(r,"__esModule",{value:!0}),r.addDisposableDomListener=void 0,r.addDisposableDomListener=function(o,l,_,n){o.addEventListener(l,_,n);let d=!1;return{dispose:()=>{d||(d=!0,o.removeEventListener(l,_,n))}}}},3551:function(B,r,o){var l=this&&this.__decorate||function(s,e,i,a){var v,f=arguments.length,g=f<3?e:a===null?a=Object.getOwnPropertyDescriptor(e,i):a;if(typeof Reflect=="object"&&typeof Reflect.decorate=="function")g=Reflect.decorate(s,e,i,a);else for(var c=s.length-1;c>=0;c--)(v=s[c])&&(g=(f<3?v(g):f>3?v(e,i,g):v(e,i))||g);return f>3&&g&&Object.defineProperty(e,i,g),g},_=this&&this.__param||function(s,e){return function(i,a){e(i,a,s)}};Object.defineProperty(r,"__esModule",{value:!0}),r.Linkifier=void 0;const n=o(3656),d=o(8460),u=o(844),p=o(2585),h=o(4725);let t=r.Linkifier=class extends u.Disposable{get currentLink(){return this._currentLink}constructor(s,e,i,a,v){super(),this._element=s,this._mouseService=e,this._renderService=i,this._bufferService=a,this._linkProviderService=v,this._linkCacheDisposables=[],this._isMouseOut=!0,this._wasResized=!1,this._activeLine=-1,this._onShowLinkUnderline=this.register(new d.EventEmitter),this.onShowLinkUnderline=this._onShowLinkUnderline.event,this._onHideLinkUnderline=this.register(new d.EventEmitter),this.onHideLinkUnderline=this._onHideLinkUnderline.event,this.register((0,u.getDisposeArrayDisposable)(this._linkCacheDisposables)),this.register((0,u.toDisposable)((()=>{this._lastMouseEvent=void 0,this._activeProviderReplies?.clear()}))),this.register(this._bufferService.onResize((()=>{this._clearCurrentLink(),this._wasResized=!0}))),this.register((0,n.addDisposableDomListener)(this._element,"mouseleave",(()=>{this._isMouseOut=!0,this._clearCurrentLink()}))),this.register((0,n.addDisposableDomListener)(this._element,"mousemove",this._handleMouseMove.bind(this))),this.register((0,n.addDisposableDomListener)(this._element,"mousedown",this._handleMouseDown.bind(this))),this.register((0,n.addDisposableDomListener)(this._element,"mouseup",this._handleMouseUp.bind(this)))}_handleMouseMove(s){this._lastMouseEvent=s;const e=this._positionFromMouseEvent(s,this._element,this._mouseService);if(!e)return;this._isMouseOut=!1;const i=s.composedPath();for(let a=0;a<i.length;a++){const v=i[a];if(v.classList.contains("xterm"))break;if(v.classList.contains("xterm-hover"))return}this._lastBufferCell&&e.x===this._lastBufferCell.x&&e.y===this._lastBufferCell.y||(this._handleHover(e),this._lastBufferCell=e)}_handleHover(s){if(this._activeLine!==s.y||this._wasResized)return this._clearCurrentLink(),this._askForLink(s,!1),void(this._wasResized=!1);this._currentLink&&this._linkAtPosition(this._currentLink.link,s)||(this._clearCurrentLink(),this._askForLink(s,!0))}_askForLink(s,e){this._activeProviderReplies&&e||(this._activeProviderReplies?.forEach((a=>{a?.forEach((v=>{v.link.dispose&&v.link.dispose()}))})),this._activeProviderReplies=new Map,this._activeLine=s.y);let i=!1;for(const[a,v]of this._linkProviderService.linkProviders.entries())e?this._activeProviderReplies?.get(a)&&(i=this._checkLinkProviderResult(a,s,i)):v.provideLinks(s.y,(f=>{if(this._isMouseOut)return;const g=f?.map((c=>({link:c})));this._activeProviderReplies?.set(a,g),i=this._checkLinkProviderResult(a,s,i),this._activeProviderReplies?.size===this._linkProviderService.linkProviders.length&&this._removeIntersectingLinks(s.y,this._activeProviderReplies)}))}_removeIntersectingLinks(s,e){const i=new Set;for(let a=0;a<e.size;a++){const v=e.get(a);if(v)for(let f=0;f<v.length;f++){const g=v[f],c=g.link.range.start.y<s?0:g.link.range.start.x,m=g.link.range.end.y>s?this._bufferService.cols:g.link.range.end.x;for(let E=c;E<=m;E++){if(i.has(E)){v.splice(f--,1);break}i.add(E)}}}}_checkLinkProviderResult(s,e,i){if(!this._activeProviderReplies)return i;const a=this._activeProviderReplies.get(s);let v=!1;for(let f=0;f<s;f++)this._activeProviderReplies.has(f)&&!this._activeProviderReplies.get(f)||(v=!0);if(!v&&a){const f=a.find((g=>this._linkAtPosition(g.link,e)));f&&(i=!0,this._handleNewLink(f))}if(this._activeProviderReplies.size===this._linkProviderService.linkProviders.length&&!i)for(let f=0;f<this._activeProviderReplies.size;f++){const g=this._activeProviderReplies.get(f)?.find((c=>this._linkAtPosition(c.link,e)));if(g){i=!0,this._handleNewLink(g);break}}return i}_handleMouseDown(){this._mouseDownLink=this._currentLink}_handleMouseUp(s){if(!this._currentLink)return;const e=this._positionFromMouseEvent(s,this._element,this._mouseService);e&&this._mouseDownLink===this._currentLink&&this._linkAtPosition(this._currentLink.link,e)&&this._currentLink.link.activate(s,this._currentLink.link.text)}_clearCurrentLink(s,e){this._currentLink&&this._lastMouseEvent&&(!s||!e||this._currentLink.link.range.start.y>=s&&this._currentLink.link.range.end.y<=e)&&(this._linkLeave(this._element,this._currentLink.link,this._lastMouseEvent),this._currentLink=void 0,(0,u.disposeArray)(this._linkCacheDisposables))}_handleNewLink(s){if(!this._lastMouseEvent)return;const e=this._positionFromMouseEvent(this._lastMouseEvent,this._element,this._mouseService);e&&this._linkAtPosition(s.link,e)&&(this._currentLink=s,this._currentLink.state={decorations:{underline:s.link.decorations===void 0||s.link.decorations.underline,pointerCursor:s.link.decorations===void 0||s.link.decorations.pointerCursor},isHovered:!0},this._linkHover(this._element,s.link,this._lastMouseEvent),s.link.decorations={},Object.defineProperties(s.link.decorations,{pointerCursor:{get:()=>this._currentLink?.state?.decorations.pointerCursor,set:i=>{this._currentLink?.state&&this._currentLink.state.decorations.pointerCursor!==i&&(this._currentLink.state.decorations.pointerCursor=i,this._currentLink.state.isHovered&&this._element.classList.toggle("xterm-cursor-pointer",i))}},underline:{get:()=>this._currentLink?.state?.decorations.underline,set:i=>{this._currentLink?.state&&this._currentLink?.state?.decorations.underline!==i&&(this._currentLink.state.decorations.underline=i,this._currentLink.state.isHovered&&this._fireUnderlineEvent(s.link,i))}}}),this._linkCacheDisposables.push(this._renderService.onRenderedViewportChange((i=>{if(!this._currentLink)return;const a=i.start===0?0:i.start+1+this._bufferService.buffer.ydisp,v=this._bufferService.buffer.ydisp+1+i.end;if(this._currentLink.link.range.start.y>=a&&this._currentLink.link.range.end.y<=v&&(this._clearCurrentLink(a,v),this._lastMouseEvent)){const f=this._positionFromMouseEvent(this._lastMouseEvent,this._element,this._mouseService);f&&this._askForLink(f,!1)}}))))}_linkHover(s,e,i){this._currentLink?.state&&(this._currentLink.state.isHovered=!0,this._currentLink.state.decorations.underline&&this._fireUnderlineEvent(e,!0),this._currentLink.state.decorations.pointerCursor&&s.classList.add("xterm-cursor-pointer")),e.hover&&e.hover(i,e.text)}_fireUnderlineEvent(s,e){const i=s.range,a=this._bufferService.buffer.ydisp,v=this._createLinkUnderlineEvent(i.start.x-1,i.start.y-a-1,i.end.x,i.end.y-a-1,void 0);(e?this._onShowLinkUnderline:this._onHideLinkUnderline).fire(v)}_linkLeave(s,e,i){this._currentLink?.state&&(this._currentLink.state.isHovered=!1,this._currentLink.state.decorations.underline&&this._fireUnderlineEvent(e,!1),this._currentLink.state.decorations.pointerCursor&&s.classList.remove("xterm-cursor-pointer")),e.leave&&e.leave(i,e.text)}_linkAtPosition(s,e){const i=s.range.start.y*this._bufferService.cols+s.range.start.x,a=s.range.end.y*this._bufferService.cols+s.range.end.x,v=e.y*this._bufferService.cols+e.x;return i<=v&&v<=a}_positionFromMouseEvent(s,e,i){const a=i.getCoords(s,e,this._bufferService.cols,this._bufferService.rows);if(a)return{x:a[0],y:a[1]+this._bufferService.buffer.ydisp}}_createLinkUnderlineEvent(s,e,i,a,v){return{x1:s,y1:e,x2:i,y2:a,cols:this._bufferService.cols,fg:v}}};r.Linkifier=t=l([_(1,h.IMouseService),_(2,h.IRenderService),_(3,p.IBufferService),_(4,h.ILinkProviderService)],t)},9042:(B,r)=>{Object.defineProperty(r,"__esModule",{value:!0}),r.tooMuchOutput=r.promptLabel=void 0,r.promptLabel="Terminal input",r.tooMuchOutput="Too much output to announce, navigate to rows manually to read"},3730:function(B,r,o){var l=this&&this.__decorate||function(h,t,s,e){var i,a=arguments.length,v=a<3?t:e===null?e=Object.getOwnPropertyDescriptor(t,s):e;if(typeof Reflect=="object"&&typeof Reflect.decorate=="function")v=Reflect.decorate(h,t,s,e);else for(var f=h.length-1;f>=0;f--)(i=h[f])&&(v=(a<3?i(v):a>3?i(t,s,v):i(t,s))||v);return a>3&&v&&Object.defineProperty(t,s,v),v},_=this&&this.__param||function(h,t){return function(s,e){t(s,e,h)}};Object.defineProperty(r,"__esModule",{value:!0}),r.OscLinkProvider=void 0;const n=o(511),d=o(2585);let u=r.OscLinkProvider=class{constructor(h,t,s){this._bufferService=h,this._optionsService=t,this._oscLinkService=s}provideLinks(h,t){const s=this._bufferService.buffer.lines.get(h-1);if(!s)return void t(void 0);const e=[],i=this._optionsService.rawOptions.linkHandler,a=new n.CellData,v=s.getTrimmedLength();let f=-1,g=-1,c=!1;for(let m=0;m<v;m++)if(g!==-1||s.hasContent(m)){if(s.loadCell(m,a),a.hasExtendedAttrs()&&a.extended.urlId){if(g===-1){g=m,f=a.extended.urlId;continue}c=a.extended.urlId!==f}else g!==-1&&(c=!0);if(c||g!==-1&&m===v-1){const E=this._oscLinkService.getLinkData(f)?.uri;if(E){const k={start:{x:g+1,y:h},end:{x:m+(c||m!==v-1?0:1),y:h}};let D=!1;if(!i?.allowNonHttpProtocols)try{const b=new URL(E);["http:","https:"].includes(b.protocol)||(D=!0)}catch{D=!0}D||e.push({text:E,range:k,activate:(b,x)=>i?i.activate(b,x,k):p(0,x),hover:(b,x)=>i?.hover?.(b,x,k),leave:(b,x)=>i?.leave?.(b,x,k)})}c=!1,a.hasExtendedAttrs()&&a.extended.urlId?(g=m,f=a.extended.urlId):(g=-1,f=-1)}}t(e)}};function p(h,t){if(confirm(`Do you want to navigate to ${t}?