@ours.network/fleet 1.0.4 → 1.1.0-nightly.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (91) hide show
  1. package/README.md +41 -50
  2. package/dist/application/capabilities.d.ts +0 -1
  3. package/dist/application/capabilities.js +3 -13
  4. package/dist/application/errors.d.ts +1 -1
  5. package/dist/application/fleet-query-service.d.ts +0 -3
  6. package/dist/application/fleet-query-service.js +1 -24
  7. package/dist/application/role-creation-service.d.ts +5 -5
  8. package/dist/application/role-creation-service.js +5 -7
  9. package/dist/application/role-repository.d.ts +1 -2
  10. package/dist/application/role-repository.js +7 -7
  11. package/dist/application/session-control.d.ts +0 -12
  12. package/dist/application/session-control.js +0 -42
  13. package/dist/application/session-mutations.d.ts +5 -5
  14. package/dist/application/task-room-service.d.ts +37 -2
  15. package/dist/application/task-room-service.js +49 -7
  16. package/dist/application/types.d.ts +0 -7
  17. package/dist/atomic-file.d.ts +5 -3
  18. package/dist/atomic-file.js +32 -8
  19. package/dist/briefing.js +1 -4
  20. package/dist/build-info.json +5 -5
  21. package/dist/cli.js +9 -23
  22. package/dist/config.d.ts +7 -7
  23. package/dist/config.js +13 -34
  24. package/dist/docs.d.ts +1 -1
  25. package/dist/docs.js +46 -30
  26. package/dist/doctor.js +0 -7
  27. package/dist/fleet-proxy.d.ts +1 -1
  28. package/dist/harness/acp-session-transport.d.ts +8 -0
  29. package/dist/harness/acp-session-transport.js +3 -0
  30. package/dist/harness/agent-session.d.ts +33 -0
  31. package/dist/harness/agent-session.js +1 -0
  32. package/dist/harness/claude-code-session.d.ts +18 -0
  33. package/dist/harness/claude-code-session.js +28 -0
  34. package/dist/harness/claude-code.d.ts +2 -1
  35. package/dist/harness/claude-code.js +29 -81
  36. package/dist/harness/codex-session.d.ts +18 -0
  37. package/dist/harness/codex-session.js +28 -0
  38. package/dist/harness/codex.d.ts +2 -1
  39. package/dist/harness/codex.js +35 -45
  40. package/dist/harness/types.d.ts +6 -38
  41. package/dist/index.d.ts +3 -5
  42. package/dist/index.js +1 -3
  43. package/dist/isolation/resources.d.ts +3 -7
  44. package/dist/isolation/resources.js +3 -7
  45. package/dist/model-env.d.ts +2 -3
  46. package/dist/model-env.js +2 -3
  47. package/dist/monitor.d.ts +1 -24
  48. package/dist/monitor.js +5 -140
  49. package/dist/owner-channel/attachments.d.ts +2 -4
  50. package/dist/owner-channel/attachments.js +6 -39
  51. package/dist/owner-channel/channel.d.ts +2 -2
  52. package/dist/owner-channel/channel.js +16 -3
  53. package/dist/owner-channel/commands.d.ts +18 -1
  54. package/dist/owner-channel/commands.js +73 -4
  55. package/dist/rooms-tasks/cli.js +121 -2
  56. package/dist/rooms-tasks/task-lists.d.ts +19 -0
  57. package/dist/rooms-tasks/task-lists.js +96 -0
  58. package/dist/rooms-tasks/task-state.d.ts +3 -0
  59. package/dist/rooms-tasks/task-state.js +281 -175
  60. package/dist/rooms-tasks/types.d.ts +11 -1
  61. package/dist/runner.d.ts +5 -15
  62. package/dist/runner.js +26 -102
  63. package/dist/session/acp.d.ts +2 -2
  64. package/dist/session/acp.js +2 -3
  65. package/dist/session/activity.d.ts +2 -3
  66. package/dist/session/activity.js +2 -3
  67. package/dist/session/arbiter.d.ts +4 -4
  68. package/dist/session/control.d.ts +3 -3
  69. package/dist/session/types.d.ts +11 -5
  70. package/dist/spawn.js +8 -9
  71. package/dist/supervisor/none.d.ts +1 -1
  72. package/dist/supervisor/none.js +2 -2
  73. package/dist/tmux.d.ts +1 -14
  74. package/dist/tmux.js +1 -51
  75. package/dist/watchdog/config.js +6 -4
  76. package/dist/watchdog/run.js +8 -23
  77. package/dist/web/auth.d.ts +1 -1
  78. package/dist/web/runtime.js +6 -15
  79. package/dist/web/server.d.ts +3 -3
  80. package/dist/web/server.js +89 -15
  81. package/dist/web/topology-promote.js +2 -5
  82. package/dist/web-app/assets/index-59GF-gsZ.css +1 -0
  83. package/dist/web-app/assets/{index-BCBK78hw.js → index-DhMDVRU1.js} +6 -6
  84. package/dist/web-app/index.html +2 -2
  85. package/package.json +3 -8
  86. package/dist/session/tmux.d.ts +0 -28
  87. package/dist/session/tmux.js +0 -80
  88. package/dist/web/terminal/bridge.d.ts +0 -27
  89. package/dist/web/terminal/bridge.js +0 -317
  90. package/dist/web-app/assets/TerminalView-C_G1ID2P.js +0 -9
  91. package/dist/web-app/assets/index-DuC-xnX4.css +0 -1
package/dist/web-app/index.html CHANGED
@@ -8,8 +8,8 @@
8
8
  <link rel="manifest" href="/manifest.webmanifest" />
9
9
  <link rel="icon" href="/icons/ours-fleet.svg" type="image/svg+xml" />
10
10
  <title>ours fleet console</title>
11
- <script type="module" crossorigin src="/assets/index-BCBK78hw.js"></script>
12
- <link rel="stylesheet" crossorigin href="/assets/index-DuC-xnX4.css">
11
+ <script type="module" crossorigin src="/assets/index-DhMDVRU1.js"></script>
12
+ <link rel="stylesheet" crossorigin href="/assets/index-59GF-gsZ.css">
13
13
  </head>
14
14
  <body>
15
15
  <div id="root"></div>
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@ours.network/fleet",
3
- "version": "1.0.4",
4
- "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, tmux or ACP sessions, supervision, and ours.network messaging.",
3
+ "version": "1.1.0-nightly.1",
4
+ "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, ACP sessions, supervision, and ours.network messaging.",
5
5
  "type": "module",
6
6
  "license": "FSL-1.1-Apache-2.0",
7
7
  "repository": {
@@ -40,10 +40,6 @@
40
40
  "@fastify/websocket": "^11.2.0",
41
41
  "@ours.network/cli": "1.0.1",
42
42
  "@ours.network/sdk": "3.0.1",
43
- "@xterm/addon-fit": "0.10.0",
44
- "@xterm/addon-serialize": "0.13.0",
45
- "@xterm/headless": "5.5.0",
46
- "@xterm/xterm": "5.5.0",
47
43
  "commander": "^12.1.0",
48
44
  "fastify": "^5.4.0",
49
45
  "react": "^19.1.1",
@@ -54,8 +50,7 @@
54
50
  },
55
51
  "optionalDependencies": {
56
52
  "@agentclientprotocol/claude-agent-acp": "^0.63.0",
57
- "@agentclientprotocol/codex-acp": "1.1.7",
58
- "node-pty": "^1.1.0"
53
+ "@agentclientprotocol/codex-acp": "1.1.7"
59
54
  },
60
55
  "devDependencies": {
61
56
  "@playwright/test": "^1.54.1",
package/dist/session/tmux.d.ts DELETED
@@ -1,28 +0,0 @@
1
- import type { Tmux } from '../tmux.js';
2
- import type { ExitRecord, InterruptOutcome, QueuedPrompt, SessionEvent, SessionHandle, SessionSnapshot, SubmitPromptOptions, TurnResult } from './types.js';
3
- /** SessionHandle adapter for the existing tmux transport. */
4
- export declare class TmuxSession implements SessionHandle {
5
- private readonly name;
6
- readonly pid: number;
7
- private readonly tmux;
8
- private readonly processAlive;
9
- readonly backend: "tmux";
10
- constructor(name: string, pid: number, tmux: Tmux, processAlive: (pid: number) => boolean);
11
- isAlive(): boolean;
12
- snapshot(): SessionSnapshot;
13
- queuePrompt(text: string, options?: SubmitPromptOptions): Promise<QueuedPrompt>;
14
- submitPrompt(text: string, options?: SubmitPromptOptions): Promise<TurnResult>;
15
- /** A keystroke is delivered or it throws; tmux offers no forced-recovery path. */
16
- interrupt(): Promise<InterruptOutcome>;
17
- respondPermission(): boolean;
18
- eventsSince(): SessionEvent[];
19
- subscribe(): () => void;
20
- setControllerAttached(): void;
21
- /**
22
- * A tmux pane's exit is only visible through the record its shell wrapper
23
- * writes; the runner owns that file and classifies it. Nothing observable
24
- * from here, so say `null` rather than guess.
25
- */
26
- exitResult(): ExitRecord | null;
27
- close(): Promise<void>;
28
- }
package/dist/session/tmux.js DELETED
@@ -1,80 +0,0 @@
1
- import { randomUUID } from 'node:crypto';
2
- import { SessionControlError, turnResult } from './types.js';
3
- /** SessionHandle adapter for the existing tmux transport. */
4
- export class TmuxSession {
5
- name;
6
- pid;
7
- tmux;
8
- processAlive;
9
- backend = 'tmux';
10
- constructor(name, pid, tmux, processAlive) {
11
- this.name = name;
12
- this.pid = pid;
13
- this.tmux = tmux;
14
- this.processAlive = processAlive;
15
- }
16
- isAlive() {
17
- return this.processAlive(this.pid);
18
- }
19
- snapshot() {
20
- return {
21
- backend: 'tmux',
22
- alive: this.isAlive(),
23
- readiness: this.isAlive() ? 'idle' : 'failed',
24
- };
25
- }
26
- async queuePrompt(text, options = {}) {
27
- if (!this.isAlive())
28
- throw new SessionControlError('offline', `tmux pane for '${this.name}' is offline`);
29
- try {
30
- if (options.interrupt)
31
- await this.interrupt();
32
- await this.tmux.sendText(this.name, text);
33
- }
34
- catch (error) {
35
- throw new SessionControlError('backend', error?.message ?? String(error));
36
- }
37
- // Keystrokes carry no terminal result: tmux cannot tell us how the turn ended.
38
- return {
39
- promptId: randomUUID(),
40
- queuedBehind: 0,
41
- completion: Promise.resolve(turnResult(true, 'inconclusive')),
42
- };
43
- }
44
- async submitPrompt(text, options = {}) {
45
- try {
46
- return await (await this.queuePrompt(text, options)).completion;
47
- }
48
- catch (error) {
49
- if (error instanceof SessionControlError)
50
- return turnResult(false, 'failed', error.message);
51
- throw error;
52
- }
53
- }
54
- /** A keystroke is delivered or it throws; tmux offers no forced-recovery path. */
55
- async interrupt() {
56
- await this.tmux.sendKey(this.name, 'C-c');
57
- return { state: 'settled' };
58
- }
59
- respondPermission() {
60
- return false;
61
- }
62
- eventsSince() {
63
- return [];
64
- }
65
- subscribe() {
66
- return () => { };
67
- }
68
- setControllerAttached() { }
69
- /**
70
- * A tmux pane's exit is only visible through the record its shell wrapper
71
- * writes; the runner owns that file and classifies it. Nothing observable
72
- * from here, so say `null` rather than guess.
73
- */
74
- exitResult() {
75
- return null;
76
- }
77
- async close() {
78
- await this.tmux.kill(this.name);
79
- }
80
- }
package/dist/web/terminal/bridge.d.ts DELETED
@@ -1,27 +0,0 @@
1
- import type { WebSocket } from 'ws';
2
- import { Tmux } from '../../tmux.js';
3
- import type { RoleRepository } from '../../application/role-repository.js';
4
- import type { AuditSink } from '../audit.js';
5
- type Constructor<T> = new (...args: any[]) => T;
6
- /** Node exposes these CommonJS xterm packages under `default`; Vite may expose named exports. */
7
- export declare function resolveModuleConstructor<T>(module: unknown, name: string): Constructor<T>;
8
- export interface TerminalBridgeManagerOptions {
9
- repository: RoleRepository;
10
- audit: AuditSink;
11
- tmux?: Tmux;
12
- maxBridges?: number;
13
- graceMs?: number;
14
- loadPty?: () => Promise<typeof import('node-pty')>;
15
- }
16
- export declare class TerminalBridgeManager {
17
- private readonly options;
18
- private readonly bridges;
19
- private ptyModule?;
20
- private ptyError?;
21
- constructor(options: TerminalBridgeManagerOptions);
22
- available(): Promise<boolean>;
23
- diagnostic(): string | undefined;
24
- connect(socket: WebSocket, roleId: string, hello: Record<string, unknown>): Promise<void>;
25
- close(): Promise<void>;
26
- }
27
- export {};
package/dist/web/terminal/bridge.js DELETED
@@ -1,317 +0,0 @@
1
- import { randomUUID } from 'node:crypto';
2
- import { Tmux, tmuxArgs } from '../../tmux.js';
3
- import { FleetError } from '../../application/errors.js';
4
- const OUTPUT = 0x01;
5
- const INPUT = 0x02;
6
- const MAX_INPUT = 8 * 1024;
7
- const RING_BYTES = 2 * 1024 * 1024;
8
- const RING_FRAMES = 10_000;
9
- const LEASE_MS = 30_000;
10
- /** Node exposes these CommonJS xterm packages under `default`; Vite may expose named exports. */
11
- export function resolveModuleConstructor(module, name) {
12
- const record = module && typeof module === 'object' ? module : {};
13
- const fallback = record.default && typeof record.default === 'object'
14
- ? record.default : {};
15
- const value = record[name] ?? fallback[name];
16
- if (typeof value !== 'function')
17
- throw new FleetError('capability_unavailable', `${name} constructor is unavailable`);
18
- return value;
19
- }
20
- export class TerminalBridgeManager {
21
- options;
22
- bridges = new Map();
23
- ptyModule;
24
- ptyError;
25
- constructor(options) {
26
- this.options = options;
27
- }
28
- async available() {
29
- if (this.ptyModule)
30
- return true;
31
- if (this.ptyError)
32
- return false;
33
- try {
34
- this.ptyModule = await (this.options.loadPty?.() ?? import('node-pty'));
35
- return true;
36
- }
37
- catch (error) {
38
- this.ptyError = error.message;
39
- return false;
40
- }
41
- }
42
- diagnostic() { return this.ptyError; }
43
- async connect(socket, roleId, hello) {
44
- const role = await this.options.repository.get(roleId);
45
- if (!role)
46
- throw new FleetError('role_not_found', `no such role '${roleId}'`);
47
- if (role.configuredBackend !== 'tmux' && role.detectedBackend !== 'tmux')
48
- throw new FleetError('capability_unavailable', 'terminal is only available for tmux roles');
49
- if (!await this.available())
50
- throw new FleetError('capability_unavailable', `node-pty unavailable: ${this.ptyError ?? 'not installed'}`);
51
- let bridge = this.bridges.get(roleId);
52
- if (!bridge) {
53
- if (this.bridges.size >= (this.options.maxBridges ?? 12))
54
- throw new FleetError('rate_limited', 'terminal bridge limit reached');
55
- const tmux = this.options.tmux ?? new Tmux();
56
- if (!await tmux.has(roleId))
57
- throw new FleetError('offline', `tmux session '${roleId}' is offline`, { provesOffline: true });
58
- bridge = await TerminalBridge.create(roleId, tmux, this.ptyModule, this.options.audit, () => this.bridges.delete(roleId), this.options.graceMs ?? 30_000);
59
- this.bridges.set(roleId, bridge);
60
- }
61
- bridge.add(socket, hello);
62
- }
63
- async close() {
64
- for (const bridge of this.bridges.values())
65
- bridge.dispose('server_shutdown');
66
- this.bridges.clear();
67
- }
68
- }
69
- class TerminalBridge {
70
- roleId;
71
- pty;
72
- projection;
73
- audit;
74
- onDisposed;
75
- graceMs;
76
- id = randomUUID();
77
- viewers = new Map();
78
- ring = [];
79
- ringBytes = 0;
80
- seq = 0n;
81
- cols = 120;
82
- rows = 36;
83
- lease;
84
- cleanupTimer;
85
- disposed = false;
86
- constructor(roleId, pty, projection, audit, onDisposed, graceMs) {
87
- this.roleId = roleId;
88
- this.pty = pty;
89
- this.projection = projection;
90
- this.audit = audit;
91
- this.onDisposed = onDisposed;
92
- this.graceMs = graceMs;
93
- }
94
- static async create(roleId, tmux, ptyModule, audit, onDisposed, graceMs) {
95
- const [headless, serialization] = await Promise.all([
96
- import('@xterm/headless'), import('@xterm/addon-serialize'),
97
- ]);
98
- const Terminal = resolveModuleConstructor(headless, 'Terminal');
99
- const SerializeAddon = resolveModuleConstructor(serialization, 'SerializeAddon');
100
- const terminal = new Terminal({ cols: 120, rows: 36, scrollback: 5_000, allowProposedApi: true });
101
- const serialize = new SerializeAddon();
102
- terminal.loadAddon(serialize);
103
- const history = await tmux.captureHistory(roleId, 5_000).catch(() => '');
104
- if (history)
105
- await new Promise(resolve => terminal.write(history, resolve));
106
- const env = Object.fromEntries(['PATH', 'HOME', 'LANG', 'LC_ALL'].flatMap(key => process.env[key] ? [[key, process.env[key]]] : []));
107
- const pty = ptyModule.spawn('tmux', tmuxArgs(roleId, ['attach-session', '-t', roleId]), {
108
- name: 'xterm-256color', cols: 120, rows: 36,
109
- cwd: process.env.HOME ?? process.cwd(), env: { ...env, TERM: 'xterm-256color' },
110
- });
111
- const projection = {
112
- write: (data, callback) => terminal.write(data, callback),
113
- resize: (cols, rows) => terminal.resize(cols, rows),
114
- dispose: () => { serialize.dispose(); terminal.dispose(); },
115
- serialize: () => serialize.serialize(),
116
- };
117
- const bridge = new TerminalBridge(roleId, pty, projection, audit, onDisposed, graceMs);
118
- pty.onData(data => bridge.output(new TextEncoder().encode(data)));
119
- pty.onExit(() => bridge.dispose('tmux_client_exit'));
120
- await audit.record({ roleId, action: 'terminal.bridge_open', result: 'succeeded' });
121
- return bridge;
122
- }
123
- add(socket, hello) {
124
- if (this.disposed)
125
- throw new FleetError('stale_state', 'terminal bridge exited');
126
- if (this.cleanupTimer)
127
- clearTimeout(this.cleanupTimer);
128
- const viewer = {
129
- socket, sessionLabel: randomUUID().slice(0, 8), resyncPending: false,
130
- tokens: 32 * 1024, tokenAt: Date.now(),
131
- };
132
- this.viewers.set(socket, viewer);
133
- const lastSeq = parseSeq(hello.lastSeq);
134
- const bridgeMatches = hello.bridgeId === this.id;
135
- const first = this.ring[0]?.seq ?? this.seq;
136
- if (bridgeMatches && lastSeq !== undefined && lastSeq >= first - 1n && lastSeq <= this.seq) {
137
- for (const frame of this.ring)
138
- if (frame.seq > lastSeq)
139
- socket.send(binaryFrame(frame));
140
- }
141
- else {
142
- socket.send(JSON.stringify({
143
- type: 'snapshot', atSeq: this.seq.toString(), encoding: 'utf8',
144
- data: this.projection.serialize(),
145
- }));
146
- }
147
- socket.send(JSON.stringify({
148
- type: 'ready', bridgeId: this.id, firstSeq: first.toString(), lastSeq: this.seq.toString(),
149
- mode: this.lease?.socket === socket ? 'controller' : 'viewer',
150
- leaseExpiresAt: this.lease ? new Date(this.lease.expiresAt).toISOString() : null,
151
- }));
152
- socket.on('message', (data, binary) => this.message(viewer, data, binary));
153
- socket.on('close', () => this.remove(socket));
154
- void this.audit.record({ roleId: this.roleId, action: 'terminal.viewer_open', result: 'succeeded' });
155
- }
156
- output(bytes) {
157
- if (this.disposed || bytes.byteLength === 0)
158
- return;
159
- this.seq++;
160
- const frame = { seq: this.seq, bytes };
161
- this.ring.push(frame);
162
- this.ringBytes += bytes.byteLength;
163
- while (this.ring.length > RING_FRAMES || this.ringBytes > RING_BYTES) {
164
- this.ringBytes -= this.ring.shift().bytes.byteLength;
165
- }
166
- this.projection.write(bytes);
167
- const payload = binaryFrame(frame);
168
- for (const viewer of this.viewers.values()) {
169
- if (viewer.socket.bufferedAmount > 4 * 1024 * 1024) {
170
- viewer.socket.close(4408, 'slow consumer');
171
- continue;
172
- }
173
- if (viewer.socket.bufferedAmount > 1024 * 1024) {
174
- viewer.resyncPending = true;
175
- continue;
176
- }
177
- if (viewer.resyncPending) {
178
- viewer.socket.send(JSON.stringify({ type: 'resync.required', reason: 'slow_consumer' }));
179
- viewer.resyncPending = false;
180
- continue;
181
- }
182
- viewer.socket.send(payload);
183
- }
184
- }
185
- message(viewer, data, binary) {
186
- try {
187
- if (binary) {
188
- const bytes = new Uint8Array(data);
189
- if (bytes.byteLength < 9 || bytes[0] !== INPUT || bytes.byteLength - 9 > MAX_INPUT)
190
- throw new FleetError('invalid_request', 'invalid terminal input frame');
191
- if (!this.validLease(viewer.socket))
192
- throw new FleetError('forbidden', 'writer lease required');
193
- const input = bytes.slice(9);
194
- if (!this.consume(viewer, input.byteLength))
195
- throw new FleetError('rate_limited', 'terminal input rate exceeded');
196
- this.pty.write(new TextDecoder().decode(input));
197
- this.renewLease();
198
- return;
199
- }
200
- const message = JSON.parse(data.toString());
201
- if (message.type === 'lease.request')
202
- this.requestLease(viewer);
203
- else if (message.type === 'lease.release')
204
- this.releaseLease(viewer.socket);
205
- else if (message.type === 'resize')
206
- this.resize(viewer, message);
207
- else
208
- throw new FleetError('invalid_request', 'unknown terminal control message');
209
- }
210
- catch (error) {
211
- const fleet = error instanceof FleetError ? error : new FleetError('invalid_request', error.message);
212
- viewer.socket.send(JSON.stringify({ type: 'error', code: fleet.code, message: fleet.message }));
213
- if (fleet.code === 'rate_limited')
214
- viewer.socket.close(4408, fleet.message);
215
- }
216
- }
217
- requestLease(viewer) {
218
- const now = Date.now();
219
- if (this.lease && this.lease.expiresAt > now && this.lease.socket !== viewer.socket) {
220
- viewer.socket.send(JSON.stringify({
221
- type: 'error', code: 'lease_held',
222
- message: `controlled by viewer ${this.viewers.get(this.lease.socket)?.sessionLabel ?? 'unknown'}`,
223
- }));
224
- return;
225
- }
226
- this.lease = { socket: viewer.socket, id: randomUUID(), expiresAt: now + LEASE_MS };
227
- viewer.socket.send(JSON.stringify({
228
- type: 'lease.granted', leaseId: this.lease.id,
229
- leaseExpiresAt: new Date(this.lease.expiresAt).toISOString(),
230
- }));
231
- void this.audit.record({ roleId: this.roleId, action: 'terminal.lease_acquire', result: 'succeeded' });
232
- }
233
- releaseLease(socket) {
234
- if (this.lease?.socket !== socket)
235
- return;
236
- this.lease = undefined;
237
- socket.send(JSON.stringify({ type: 'lease.released' }));
238
- void this.audit.record({ roleId: this.roleId, action: 'terminal.lease_release', result: 'succeeded' });
239
- }
240
- resize(viewer, message) {
241
- if (!this.validLease(viewer.socket) || message.leaseId !== this.lease?.id)
242
- throw new FleetError('forbidden', 'writer lease required');
243
- const cols = clamp(Number(message.cols), 80, 240);
244
- const rows = clamp(Number(message.rows), 24, 80);
245
- this.cols = cols;
246
- this.rows = rows;
247
- this.pty.resize(cols, rows);
248
- this.projection.resize(cols, rows);
249
- this.renewLease();
250
- }
251
- validLease(socket) {
252
- if (this.lease && this.lease.expiresAt <= Date.now())
253
- this.lease = undefined;
254
- return this.lease?.socket === socket;
255
- }
256
- renewLease() {
257
- if (this.lease)
258
- this.lease.expiresAt = Date.now() + LEASE_MS;
259
- }
260
- consume(viewer, amount) {
261
- const now = Date.now();
262
- viewer.tokens = Math.min(32 * 1024, viewer.tokens + (now - viewer.tokenAt) * 16);
263
- viewer.tokenAt = now;
264
- if (amount > viewer.tokens)
265
- return false;
266
- viewer.tokens -= amount;
267
- return true;
268
- }
269
- remove(socket) {
270
- this.releaseLease(socket);
271
- this.viewers.delete(socket);
272
- void this.audit.record({ roleId: this.roleId, action: 'terminal.viewer_close', result: 'succeeded' });
273
- if (!this.viewers.size)
274
- this.cleanupTimer = setTimeout(() => this.dispose('idle_grace_expired'), this.graceMs);
275
- }
276
- dispose(reason) {
277
- if (this.disposed)
278
- return;
279
- this.disposed = true;
280
- if (this.cleanupTimer)
281
- clearTimeout(this.cleanupTimer);
282
- for (const viewer of this.viewers.values()) {
283
- if (viewer.socket.readyState === viewer.socket.OPEN) {
284
- viewer.socket.send(JSON.stringify({ type: 'terminal.exit', reason }));
285
- viewer.socket.close(1001, reason);
286
- }
287
- }
288
- this.viewers.clear();
289
- try {
290
- this.pty.kill();
291
- }
292
- catch { /* already exited */ }
293
- this.projection.dispose();
294
- this.onDisposed();
295
- void this.audit.record({ roleId: this.roleId, action: 'terminal.bridge_close', result: reason });
296
- }
297
- }
298
- function binaryFrame(frame) {
299
- const payload = new Uint8Array(9 + frame.bytes.byteLength);
300
- payload[0] = OUTPUT;
301
- new DataView(payload.buffer).setBigUint64(1, frame.seq);
302
- payload.set(frame.bytes, 9);
303
- return payload;
304
- }
305
- function parseSeq(value) {
306
- try {
307
- return value === undefined ? undefined : BigInt(String(value));
308
- }
309
- catch {
310
- return undefined;
311
- }
312
- }
313
- function clamp(value, min, max) {
314
- if (!Number.isFinite(value))
315
- throw new FleetError('invalid_request', 'terminal size must be numeric');
316
- return Math.min(Math.max(Math.trunc(value), min), max);
317
- }