@particle-academy/agent-integrations 0.29.0 → 0.30.0

package/dist/relay-server.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/relay-server/core.ts","../src/relay-server/node.ts"],"names":["randomBytes","next","createHash","timingSafeEqual","URL","ok"],"mappings":";;;;;;AAuDA,IAAM,cAAN,MAAmC;AAAA,EAAnC,WAAA,GAAA;AACE,IAAA,IAAA,CAAQ,QAAA,uBAAe,GAAA,EAAqB;AAAA,EAAA;AAAA,EAC5C,WAAW,CAAA,EAAY;AAAE,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,CAAA,CAAE,EAAA,EAAI,CAAC,CAAA;AAAA,EAAG;AAAA,EACrD,WAAW,EAAA,EAAY;AAAE,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA;AAAA,EAAG;AAAA,EACvD,cAAc,EAAA,EAAY;AAAE,IAAA,IAAA,CAAK,QAAA,CAAS,OAAO,EAAE,CAAA;AAAA,EAAG;AAAA,EACtD,kBAAkB,MAAA,EAAgB;AAChC,IAAA,MAAM,MAAgB,EAAC;AACvB,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,CAAC,CAAA,IAAK,IAAA,CAAK,QAAA,EAAU,IAAI,CAAA,CAAE,QAAA,GAAW,MAAA,EAAQ,GAAA,CAAI,IAAA,CAAK,EAAE,CAAA;AACzE,IAAA,OAAO,GAAA;AAAA,EACT;AACF,CAAA;AAEA,IAAM,kBAAA,GAAqB,uBAAA;AAEpB,IAAM,cAAN,MAAkB;AAAA,EAOvB,WAAA,CAAY,IAAA,GAA2B,EAAC,EAAG;AAH3C;AAAA,IAAA,IAAA,CAAQ,IAAA,uBAA8D,GAAA,EAAI;AAIxE,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,CAAA,GAAI,KAAK,EAAA,GAAK,GAAA;AACzC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,IAAI,WAAA,EAAY;AAC3C,IAAA,MAAM,IAAA,GAAO,KAAK,cAAA,IAAkB,GAAA;AACpC,IAAA,IAAI,OAAO,CAAA,EAAG;AACZ,MAAA,IAAA,CAAK,SAAS,WAAA,CAAY,MAAM,IAAA,CAAK,IAAA,IAAQ,IAAI,CAAA;AAEjD,MAAA,IAAI,OAAQ,IAAA,CAAK,MAAA,CAAkC,KAAA,KAAU,UAAA,EAAY;AACvE,QAAC,IAAA,CAAK,OAAiC,KAAA,EAAM;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAA,GAAU;AACR,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,aAAA,CAAc,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,IAAA,CAAK,KAAK,KAAA,EAAM;AAAA,EAClB;AAAA;AAAA;AAAA,EAIA,QAAA,CAAS,IAAY,KAAA,EAA6D;AAChF,IAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,EAAE,CAAA,SAAU,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,oBAAA,EAAqB;AACnF,IAAA,IAAI,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,SAAS,EAAA,IAAM,KAAA,CAAM,SAAS,GAAA,EAAK;AACxE,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAAA,IAC9C;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,CAAA;AACzC,IAAA,MAAM,IAAA,GAAO,UAAU,KAAK,CAAA;AAC5B,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,SAAA,EAAW,IAAI,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAC/F,MAAA,QAAA,CAAS,QAAA,GAAW,KAAK,GAAA,EAAI;AAC7B,MAAA,IAAA,CAAK,KAAA,CAAM,WAAW,QAAQ,CAAA;AAC9B,MAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,IACpB;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,EAAA,EAAI,SAAA,EAAW,MAAM,QAAA,EAAU,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AACnE,IAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,EACpB;AAAA,EAEA,UAAA,CAAW,IAAY,KAAA,EAAwB;AAC7C,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAA,CAAK,KAAA,CAAM,cAAc,EAAE,CAAA;AAC3B,IAAA,IAAA,CAAK,IAAA,CAAK,OAAO,EAAE,CAAA;AACnB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,QAAA,CAAS,IAAY,KAAA,EAAwB;AAC3C,IAAA,IAAI,CAAC,EAAA,IAAM,CAAC,KAAA,EAAO,OAAO,KAAA;AAC1B,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,CAAA;AAClC,IAAA,IAAI,CAAC,GAAG,OAAO,KAAA;AACf,IAAA,IAAI,CAAC,mBAAmB,CAAA,CAAE,SAAA,EAAW,UAAU,KAAK,CAAC,GAAG,OAAO,KAAA;AAC/D,IAAA,CAAA,CAAE,QAAA,GAAW,KAAK,GAAA,EAAI;AACtB,IAAA,IAAA,CAAK,KAAA,CAAM,WAAW,CAAC,CAAA;AACvB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,KAAA,CAAM,EAAA,EAAY,KAAA,EAAe,OAAA,EAA0B;AACzD,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,OAAO,GAAG,OAAO,KAAA;AACnC,IAAA,IAAA,CAAK,MAAA,CAAO,EAAA,EAAI,SAAA,EAAW,OAAO,CAAA;AAClC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAA,CAAO,EAAA,EAAY,KAAA,EAAe,OAAA,EAA0B;AAC1D,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,OAAO,GAAG,OAAO,KAAA;AACnC,IAAA,IAAA,CAAK,MAAA,CAAO,EAAA,EAAI,UAAA,EAAY,OAAO,CAAA;AACnC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA,CAAU,EAAA,EAAY,KAAA,EAAe,SAAA,EAAuC;AAC1E,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAC3E,IAAA,MAAM,YAAA,GAAeA,kBAAA,CAAY,CAAC,CAAA,CAAE,SAAS,KAAK,CAAA;AAClD,IAAA,MAAM,UAAA,GAAyB,EAAE,EAAA,EAAI,YAAA,EAAc,WAAW,KAAA,EAAO,EAAC,EAAG,WAAA,EAAa,IAAA,EAAK;AAC3F,IAAA,IAAA,CAAK,WAAW,EAAA,EAAI,SAAS,CAAA,CAAE,GAAA,CAAI,cAAc,UAAU,CAAA;AAI3D,IAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,MAAA,IAAA,CAAK,MAAA;AAAA,QACH,EAAA;AAAA,QACA,SAAA;AAAA,QACA,KAAK,SAAA,CAAU;AAAA,UACb,OAAA,EAAS,KAAA;AAAA,UACT,MAAA,EAAQ,2BAAA;AAAA,UACR,QAAQ,EAAE,YAAA,EAAc,EAAA,EAAI,IAAA,CAAK,KAAI;AAAE,SACxC;AAAA,OACH;AAAA,IACF;AAEA,IAAA,MAAM,cAAc,MAAM;AACxB,MAAA,IAAA,CAAK,UAAA,CAAW,EAAA,EAAI,SAAS,CAAA,CAAE,OAAO,YAAY,CAAA;AAClD,MAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,QAAA,IAAA,CAAK,MAAA;AAAA,UACH,EAAA;AAAA,UACA,SAAA;AAAA,UACA,KAAK,SAAA,CAAU;AAAA,YACb,OAAA,EAAS,KAAA;AAAA,YACT,MAAA,EAAQ,yBAAA;AAAA,YACR,QAAQ,EAAE,YAAA,EAAc,EAAA,EAAI,IAAA,CAAK,KAAI;AAAE,WACxC;AAAA,SACH;AAAA,MACF;AAAA,IACF,CAAA;AAIA,IAAA,MAAM,SAAS,mBAAuE;AACpF,MAAA,OAAO,IAAA,EAAM;AACX,QAAA,IAAI,IAAA,CAAK,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG;AACzB,UAAA,MAAMC,KAAAA,GAAO,IAAA,CAAK,KAAA,CAAM,KAAA,EAAM;AAC9B,UAAA,IAAIA,KAAAA,KAAS,QAAW,MAAMA,KAAAA;AAC9B,UAAA;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAO,MAAM,IAAI,OAAA,CAAuB,CAAC,OAAA,KAAY;AACzD,UAAA,IAAA,CAAK,WAAA,GAAc,OAAA;AAAA,QACrB,CAAC,CAAA;AACD,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,QAAA,IAAI,SAAS,IAAA,EAAM;AACnB,QAAA,MAAM,IAAA;AAAA,MACR;AAAA,IACF,CAAA,CAAE,KAAK,UAAU,CAAA;AAEjB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAA;AAAA,MACJ,YAAA;AAAA,MACA,QAAQ,MAAA,EAAO;AAAA,MACf,aAAa,MAAM;AAEjB,QAAA,UAAA,CAAW,cAAc,IAAI,CAAA;AAC7B,QAAA,WAAA,EAAY;AAAA,MACd;AAAA,KACF;AAAA,EACF;AAAA;AAAA,EAIQ,UAAA,CAAW,WAAmB,SAAA,EAA+C;AACnF,IAAA,IAAI,SAAA,GAAY,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA;AACvC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,SAAA,uBAAgB,GAAA,EAAI;AACpB,MAAA,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,SAAS,CAAA;AAAA,IACpC;AACA,IAAA,IAAI,KAAA,GAAQ,SAAA,CAAU,GAAA,CAAI,SAAS,CAAA;AACnC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,KAAA,uBAAY,GAAA,EAAI;AAChB,MAAA,SAAA,CAAU,GAAA,CAAI,WAAW,KAAK,CAAA;AAAA,IAChC;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEQ,MAAA,CAAO,SAAA,EAAmB,SAAA,EAAsB,OAAA,EAAiB;AACvE,IAAA,MAAM,MAAM,IAAA,CAAK,IAAA,CAAK,IAAI,SAAS,CAAA,EAAG,IAAI,SAAS,CAAA;AACnD,IAAA,IAAI,CAAC,GAAA,EAAK;AACV,IAAA,KAAA,MAAW,GAAA,IAAO,GAAA,CAAI,MAAA,EAAO,EAAG;AAC9B,MAAA,GAAA,CAAI,KAAA,CAAM,KAAK,OAAO,CAAA;AACtB,MAAA,GAAA,CAAI,WAAA,GAAc,GAAA,CAAI,KAAA,CAAM,KAAA,MAAW,IAAI,CAAA;AAAA,IAC7C;AAAA,EACF;AAAA,EAEQ,QAAQ,OAAA,EAA0B;AACxC,IAAA,OAAO,OAAA,CAAQ,MAAA,GAAS,CAAA,IAAK,OAAA,CAAQ,SAAS,WAAW,CAAA;AAAA,EAC3D;AAAA,EAEQ,IAAA,GAAO;AACb,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,KAAA;AACjC,IAAA,KAAA,MAAW,EAAA,IAAM,IAAA,CAAK,KAAA,CAAM,iBAAA,CAAkB,MAAM,CAAA,EAAG;AACrD,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,EAAE,CAAA;AAC7B,MAAA,IAAI,IAAA,EAAM;AACR,QAAA,KAAA,MAAW,GAAA,IAAO,IAAA,CAAK,MAAA,EAAO,EAAG;AAC/B,UAAA,KAAA,MAAW,OAAO,GAAA,CAAI,MAAA,EAAO,EAAG,GAAA,CAAI,cAAc,IAAI,CAAA;AAAA,QACxD;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAA,CAAK,OAAO,EAAE,CAAA;AACnB,MAAA,IAAA,CAAK,KAAA,CAAM,cAAc,EAAE,CAAA;AAAA,IAC7B;AAAA,EACF;AACF;AAWA,SAAS,UAAU,KAAA,EAAuB;AACxC,EAAA,OAAOC,kBAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AACxD;AAEA,SAAS,kBAAA,CAAmB,GAAW,CAAA,EAAoB;AACzD,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,OAAOC,sBAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,GAAG,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,CAAC,CAAA;AACrE;ACrOO,SAAS,eAAA,CAAgB,IAAA,GAAyB,EAAC,EAAc;AACtE,EAAA,MAAM,MAAA,GAAS,IAAI,WAAA,CAAY,IAAI,CAAA;AACnC,EAAA,MAAM,UAAU,IAAA,CAAK,UAAA,IAAc,EAAA,EAAI,OAAA,CAAQ,OAAO,EAAE,CAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAK,eAAA,IAAmB,GAAA;AAErC,EAAA,SAAS,eAAe,GAAA,EAAqB;AAC3C,IAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,IAAI,CAAA;AACjD,IAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,oBAAoB,CAAA;AAClE,IAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,oCAAoC,CAAA;AAClF,IAAA,GAAA,CAAI,SAAA,CAAU,0BAA0B,OAAO,CAAA;AAAA,EACjD;AAEA,EAAA,SAAS,SAAS,GAAA,EAAuC;AACvD,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,SAAmB,EAAC;AAC1B,MAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,MAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAChC,QAAA,KAAA,IAAS,KAAA,CAAM,MAAA;AAEf,QAAA,IAAI,KAAA,GAAQ,MAAM,IAAA,EAAM;AACtB,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,mBAAmB,CAAC,CAAA;AACrC,UAAA,GAAA,CAAI,OAAA,EAAQ;AACZ,UAAA;AAAA,QACF;AACA,QAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,MACnB,CAAC,CAAA;AACD,MAAA,GAAA,CAAI,EAAA,CAAG,KAAA,EAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAC,CAAA;AACnE,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM,CAAA;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,SAAS,IAAA,CAAK,GAAA,EAAqB,MAAA,EAAgB,IAAA,EAAqB;AACtE,IAAA,GAAA,CAAI,UAAA,GAAa,MAAA;AACjB,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,kBAAkB,CAAA;AAChD,IAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,EAC9B;AAEA,EAAA,SAAS,SAAS,GAAA,EAAuC;AACvD,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,IAAA,MAAM,CAAA,GAAI,IAAIC,OAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,IAAA,OAAO,CAAA,CAAE,YAAA;AAAA,EACX;AAEA,EAAA,SAAS,YAAY,GAAA,EAA8B;AACjD,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,IAAA,MAAM,CAAA,GAAI,IAAIA,OAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,IAAA,OAAO,CAAA,CAAE,QAAA;AAAA,EACX;AAEA,EAAA,MAAM,QAAA,GAAwB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAChD,IAAA,cAAA,CAAe,GAAG,CAAA;AAClB,IAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IAAG;AACxE,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAChF,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AAAE,MAAA,IAAA,GAAO,MAAM,SAAS,GAAG,CAAA;AAAA,IAAG,SAAS,CAAA,EAAG;AAC5C,MAAA,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,eAAA,EAAiB,CAAA;AAAA,IACnF;AACA,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AAAE,MAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IAAG,CAAA,CAAA,MAAQ;AAAE,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAA,IAAG;AAC7F,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAK,UAAU,EAAC;AACvC,IAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAO,UAAU,QAAA,EAAU;AAC5D,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,kBAAkB,CAAA;AAAA,IACnD;AACA,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA;AAC7C,IAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,MAAA,CAAO,MAAA,EAAQ,CAAA;AAC9D,IAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACpC,CAAA;AAKA,EAAA,SAAS,mBACP,SAAA,EACa;AACb,IAAA,OAAO,OAAO,KAAK,GAAA,KAAQ;AACzB,MAAA,cAAA,CAAe,GAAG,CAAA;AAClB,MAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,QAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,QAAA,OAAO,IAAI,GAAA,EAAI;AAAA,MAAG;AACxE,MAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAChF,MAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,EAAK,MAAM,CAAA;AAC1C,MAAA,IAAI,CAAC,SAAS,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,iBAAA,EAAmB,CAAA;AAChE,MAAA,MAAM,QAAQ,QAAA,CAAS,GAAG,CAAA,CAAE,GAAA,CAAI,OAAO,CAAA,IAAK,EAAA;AAE5C,MAAA,IAAI,cAAc,YAAA,EAAc;AAC9B,QAAA,MAAMC,GAAAA,GAAK,MAAA,CAAO,UAAA,CAAW,OAAA,EAAS,KAAK,CAAA;AAC3C,QAAA,OAAO,IAAA,CAAK,GAAA,EAAKA,GAAAA,GAAK,GAAA,GAAM,GAAA,EAAKA,GAAAA,GAAK,EAAE,EAAA,EAAI,IAAA,EAAK,GAAI,EAAE,KAAA,EAAO,iBAAiB,CAAA;AAAA,MACjF;AAEA,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AAAE,QAAA,IAAA,GAAO,MAAM,SAAS,GAAG,CAAA;AAAA,MAAG,SAAS,CAAA,EAAG;AAC5C,QAAA,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,eAAA,EAAiB,CAAA;AAAA,MACnF;AACA,MAAA,MAAM,EAAA,GAAK,SAAA,KAAc,SAAA,GACrB,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,KAAA,EAAO,IAAI,CAAA,GACjC,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,OAAO,IAAI,CAAA;AACtC,MAAA,OAAO,IAAA,CAAK,GAAA,EAAK,EAAA,GAAK,GAAA,GAAM,GAAA,EAAK,EAAA,GAAK,EAAE,EAAA,EAAI,IAAA,EAAK,GAAI,EAAE,KAAA,EAAO,0BAA0B,CAAA;AAAA,IAC1F,CAAA;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,mBAAmB,SAAS,CAAA;AAC1C,EAAA,MAAM,MAAA,GAAS,mBAAmB,UAAU,CAAA;AAC5C,EAAA,MAAM,UAAA,GAAa,mBAAmB,YAAY,CAAA;AAElD,EAAA,MAAM,MAAA,GAAsB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC9C,IAAA,cAAA,CAAe,GAAG,CAAA;AAClB,IAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IAAG;AACxE,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,KAAA,EAAO,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAC/E,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,EAAK,MAAM,CAAA;AAC1C,IAAA,IAAI,CAAC,SAAS,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,iBAAA,EAAmB,CAAA;AAChE,IAAA,MAAM,CAAA,GAAI,SAAS,GAAG,CAAA;AACtB,IAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,OAAO,CAAA,IAAK,EAAA;AAChC,IAAA,MAAM,YAAY,CAAA,CAAE,GAAA,CAAI,WAAW,CAAA,KAAM,aAAa,UAAA,GAAa,SAAA;AAEnE,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,SAAA,CAAU,OAAA,EAAS,OAAO,SAAS,CAAA;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,MAAA,GAAA,CAAI,KAAA,CAAM,CAAA;AAAA,MAAA,EAAuB,IAAI,MAAM;;AAAA,CAAM,CAAA;AACjD,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IACjB;AAEA,IAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,IAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,UAAU,CAAA;AACzC,IAAA,GAAA,CAAI,SAAA,CAAU,cAAc,YAAY,CAAA;AACxC,IAAA,GAAA,CAAI,SAAA,CAAU,qBAAqB,IAAI,CAAA;AACvC,IAAA,GAAA,CAAI,MAAM,iBAAiB,CAAA;AAC3B,IAAA,KAAA,CAAM,GAAG,CAAA;AAET,IAAA,IAAI,SAAA,GAAmD,YAAY,MAAM;AACvE,MAAA,GAAA,CAAI,MAAM,iBAAiB,CAAA;AAC3B,MAAA,KAAA,CAAM,GAAG,CAAA;AAAA,IACX,GAAG,IAAM,CAAA;AACT,IAAA,IAAI,SAAA,IAAa,OAAQ,SAAA,CAAqC,KAAA,KAAU,UAAA,EAAY;AAClF,MAAC,UAAoC,KAAA,EAAM;AAAA,IAC7C;AAEA,IAAA,MAAM,UAAU,MAAM;AACpB,MAAA,IAAI,SAAA,EAAW;AAAE,QAAA,aAAA,CAAc,SAAS,CAAA;AAAG,QAAA,SAAA,GAAY,IAAA;AAAA,MAAM;AAC7D,MAAA,GAAA,CAAI,WAAA,EAAY;AAAA,IAClB,CAAA;AACA,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AACvB,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AAEvB,IAAA,IAAI;AACF,MAAA,WAAA,MAAiB,KAAA,IAAS,IAAI,MAAA,EAAQ;AACpC,QAAA,GAAA,CAAI,KAAA,CAAM,CAAA;AAAA,MAAA,EAAqB,KAAK;;AAAA,CAAM,CAAA;AAC1C,QAAA,KAAA,CAAM,GAAG,CAAA;AAAA,MACX;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER,CAAA,SAAE;AACA,MAAA,OAAA,EAAQ;AACR,MAAA,GAAA,CAAI,GAAA,EAAI;AAAA,IACV;AAAA,EACF,CAAA;AAMA,EAAA,MAAM,OAAA,GAAuB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC/C,IAAA,MAAM,QAAA,GAAW,YAAY,GAAG,CAAA;AAChC,IAAA,IAAI,CAAC,QAAA,CAAS,UAAA,CAAW,MAAA,GAAS,GAAG,CAAA,EAAG;AACtC,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,IAC9C;AACA,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AACzC,IAAA,IAAI,IAAA,KAAS,WAAA,EAAa,OAAO,QAAA,CAAS,KAAK,GAAG,CAAA;AAClD,IAAA,MAAM,CAAA,GAAI,6DAAA,CAA8D,IAAA,CAAK,IAAI,CAAA;AACjF,IAAA,IAAI,CAAC,GAAG,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,WAAA,EAAa,CAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,EAAE,CAAC,CAAA;AACjB,IAAA,IAAI,KAAA,KAAU,OAAA,EAAS,OAAO,KAAA,CAAM,KAAK,GAAG,CAAA;AAC5C,IAAA,IAAI,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC9C,IAAA,IAAI,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC9C,IAAA,IAAI,KAAA,KAAU,YAAA,EAAc,OAAO,UAAA,CAAW,KAAK,GAAG,CAAA;AACtD,IAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,EAC9C,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,UAAU,KAAA,EAAO,MAAA,EAAQ,QAAQ,UAAA,EAAW;AACxE;AAEA,SAAS,cAAA,CAAe,KAAsB,MAAA,EAA+B;AAC3E,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,EAAA,MAAM,CAAA,GAAI,IAAID,OAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,EAAA,MAAM,OAAO,CAAA,CAAE,QAAA;AACf,EAAA,IAAI,UAAU,CAAC,IAAA,CAAK,WAAW,MAAA,GAAS,GAAG,GAAG,OAAO,IAAA;AACrD,EAAA,MAAM,OAAO,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,IAAA;AAClD,EAAA,MAAM,CAAA,GAAI,4BAAA,CAA6B,IAAA,CAAK,IAAI,CAAA;AAChD,EAAA,OAAO,CAAA,GAAI,CAAA,CAAE,CAAC,CAAA,GAAI,IAAA;AACpB;AAEA,SAAS,MAAM,GAAA,EAAqB;AAGlC,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,CAAA,CAAE,KAAA,IAAQ;AACZ","file":"relay-server.cjs","sourcesContent":["import { createHash, randomBytes, timingSafeEqual } from \"node:crypto\";\n\n/**\n * RelayBroker — pure logic for the SSE+POST tunnel described in\n * docs/relay-protocol.md, hostable in any Node-compatible runtime\n * (Node, Bun, Deno-with-Node-compat, Cloudflare Workers via the Web\n * standards subset). No HTTP framework opinions; this class just\n * stores sessions, validates tokens, enqueues frames, and produces\n * SSE event payloads ready to flush.\n *\n *   const broker = new RelayBroker();\n *   const reg     = broker.register(\"session-id\", \"token\");      // ok / error\n *   broker.inbox(\"session-id\", \"token\", '{\"jsonrpc\":\"2.0\",…}');  // enqueue inbound\n *   const sub = broker.subscribe(\"session-id\", \"token\", \"inbound\");\n *   for await (const payload of sub.frames()) yield encodeSse(payload);\n *\n * Storage is an in-memory Map by default — fine for a single relay\n * process. To run multiple instances behind a load balancer, swap\n * `MemoryStore` for a Redis-backed equivalent (same Store interface).\n */\n\nexport type Direction = \"inbound\" | \"outbound\";\n\nexport type Session = {\n  id: string;\n  /** SHA-256 hex of the original token. Compared with timing-safe equals. */\n  tokenHash: string;\n  /** Last touched (ms since epoch). Used for TTL cleanup. */\n  lastSeen: number;\n};\n\nexport type Subscriber = {\n  id: string;\n  direction: Direction;\n  queue: string[];\n  resolveNext: ((frame: string | null) => void) | null;\n};\n\nexport type RelayBrokerOptions = {\n  /** Sessions auto-expire after this many ms of inactivity. Default 4h. */\n  ttlMs?: number;\n  /** Cleanup tick interval in ms. Default 60 000. */\n  reapIntervalMs?: number;\n  /** Bring-your-own storage layer (redis, etc.). Defaults to in-memory. */\n  store?: Store;\n};\n\nexport interface Store {\n  putSession(s: Session): void;\n  getSession(id: string): Session | undefined;\n  deleteSession(id: string): void;\n  /** Used by the reap tick — return ids whose lastSeen < cutoff. */\n  expiredSessionIds(cutoff: number): string[];\n}\n\nclass MemoryStore implements Store {\n  private sessions = new Map<string, Session>();\n  putSession(s: Session) { this.sessions.set(s.id, s); }\n  getSession(id: string) { return this.sessions.get(id); }\n  deleteSession(id: string) { this.sessions.delete(id); }\n  expiredSessionIds(cutoff: number) {\n    const out: string[] = [];\n    for (const [id, s] of this.sessions) if (s.lastSeen < cutoff) out.push(id);\n    return out;\n  }\n}\n\nconst SESSION_ID_PATTERN = /^[A-Za-z0-9_-]{4,64}$/;\n\nexport class RelayBroker {\n  private readonly ttlMs: number;\n  private readonly store: Store;\n  /** Per-session, per-direction subscriber list. */\n  private subs: Map<string, Map<string, Map<string, Subscriber>>> = new Map();\n  private reaper?: ReturnType<typeof setInterval>;\n\n  constructor(opts: RelayBrokerOptions = {}) {\n    this.ttlMs = opts.ttlMs ?? 4 * 60 * 60 * 1000; // 4h\n    this.store = opts.store ?? new MemoryStore();\n    const tick = opts.reapIntervalMs ?? 60_000;\n    if (tick > 0) {\n      this.reaper = setInterval(() => this.reap(), tick);\n      // Don't keep the process alive just for the reaper.\n      if (typeof (this.reaper as { unref?: () => void }).unref === \"function\") {\n        (this.reaper as { unref: () => void }).unref();\n      }\n    }\n  }\n\n  dispose() {\n    if (this.reaper) clearInterval(this.reaper);\n    this.subs.clear();\n  }\n\n  /** Register a session id + token. Idempotent — same id+token re-registers,\n   *  different token fails. */\n  register(id: string, token: string): { ok: true } | { ok: false; reason: string } {\n    if (!SESSION_ID_PATTERN.test(id)) return { ok: false, reason: \"invalid_session_id\" };\n    if (typeof token !== \"string\" || token.length < 16 || token.length > 128) {\n      return { ok: false, reason: \"invalid_token\" };\n    }\n    const existing = this.store.getSession(id);\n    const hash = sha256Hex(token);\n    if (existing) {\n      if (!timingSafeEqualHex(existing.tokenHash, hash)) return { ok: false, reason: \"session_taken\" };\n      existing.lastSeen = Date.now();\n      this.store.putSession(existing);\n      return { ok: true };\n    }\n    this.store.putSession({ id, tokenHash: hash, lastSeen: Date.now() });\n    return { ok: true };\n  }\n\n  unregister(id: string, token: string): boolean {\n    if (!this.validate(id, token)) return false;\n    this.store.deleteSession(id);\n    this.subs.delete(id);\n    return true;\n  }\n\n  /** Validate an authenticated touch and slide the TTL forward. */\n  validate(id: string, token: string): boolean {\n    if (!id || !token) return false;\n    const s = this.store.getSession(id);\n    if (!s) return false;\n    if (!timingSafeEqualHex(s.tokenHash, sha256Hex(token))) return false;\n    s.lastSeen = Date.now();\n    this.store.putSession(s);\n    return true;\n  }\n\n  /** Push a frame onto the inbound queue (external agent → browser). */\n  inbox(id: string, token: string, payload: string): boolean {\n    if (!this.validate(id, token)) return false;\n    if (!this.isFrame(payload)) return false;\n    this.fanOut(id, \"inbound\", payload);\n    return true;\n  }\n\n  /** Push a frame onto the outbound queue (browser server → external agents). */\n  outbox(id: string, token: string, payload: string): boolean {\n    if (!this.validate(id, token)) return false;\n    if (!this.isFrame(payload)) return false;\n    this.fanOut(id, \"outbound\", payload);\n    return true;\n  }\n\n  /**\n   * Subscribe to a session's queue for one direction. Returns an iterable\n   * the caller (an HTTP handler) pumps as SSE.\n   */\n  subscribe(id: string, token: string, direction: Direction): SubscribeResult {\n    if (!this.validate(id, token)) return { ok: false, reason: \"invalid_token\" };\n    const subscriberId = randomBytes(8).toString(\"hex\");\n    const subscriber: Subscriber = { id: subscriberId, direction, queue: [], resolveNext: null };\n    this.getDirSubs(id, direction).set(subscriberId, subscriber);\n\n    // Notify the inbound side (= browser) that an outbound subscriber\n    // (= external agent) just connected.\n    if (direction === \"outbound\") {\n      this.fanOut(\n        id,\n        \"inbound\",\n        JSON.stringify({\n          jsonrpc: \"2.0\",\n          method: \"notifications/peer_joined\",\n          params: { subscriberId, ts: Date.now() },\n        }),\n      );\n    }\n\n    const unsubscribe = () => {\n      this.getDirSubs(id, direction).delete(subscriberId);\n      if (direction === \"outbound\") {\n        this.fanOut(\n          id,\n          \"inbound\",\n          JSON.stringify({\n            jsonrpc: \"2.0\",\n            method: \"notifications/peer_left\",\n            params: { subscriberId, ts: Date.now() },\n          }),\n        );\n      }\n    };\n\n    /** Async generator the HTTP handler drains. Yields raw frame payloads;\n     *  the handler is responsible for SSE framing (`event: mcp\\ndata: …`). */\n    const frames = async function* (this: Subscriber): AsyncGenerator<string, void, void> {\n      while (true) {\n        if (this.queue.length > 0) {\n          const next = this.queue.shift();\n          if (next !== undefined) yield next;\n          continue;\n        }\n        const next = await new Promise<string | null>((resolve) => {\n          this.resolveNext = resolve;\n        });\n        this.resolveNext = null;\n        if (next === null) return;\n        yield next;\n      }\n    }.bind(subscriber);\n\n    return {\n      ok: true,\n      subscriberId,\n      frames: frames(),\n      unsubscribe: () => {\n        // Wake the generator and let it return cleanly.\n        subscriber.resolveNext?.(null);\n        unsubscribe();\n      },\n    };\n  }\n\n  // ────────────────────────────────────────────────────────────── internals\n\n  private getDirSubs(sessionId: string, direction: Direction): Map<string, Subscriber> {\n    let bySession = this.subs.get(sessionId);\n    if (!bySession) {\n      bySession = new Map();\n      this.subs.set(sessionId, bySession);\n    }\n    let byDir = bySession.get(direction);\n    if (!byDir) {\n      byDir = new Map();\n      bySession.set(direction, byDir);\n    }\n    return byDir;\n  }\n\n  private fanOut(sessionId: string, direction: Direction, payload: string) {\n    const dir = this.subs.get(sessionId)?.get(direction);\n    if (!dir) return;\n    for (const sub of dir.values()) {\n      sub.queue.push(payload);\n      sub.resolveNext?.(sub.queue.shift() ?? null);\n    }\n  }\n\n  private isFrame(payload: string): boolean {\n    return payload.length > 0 && payload.includes('\"jsonrpc\"');\n  }\n\n  private reap() {\n    const cutoff = Date.now() - this.ttlMs;\n    for (const id of this.store.expiredSessionIds(cutoff)) {\n      const dirs = this.subs.get(id);\n      if (dirs) {\n        for (const dir of dirs.values()) {\n          for (const sub of dir.values()) sub.resolveNext?.(null);\n        }\n      }\n      this.subs.delete(id);\n      this.store.deleteSession(id);\n    }\n  }\n}\n\nexport type SubscribeResult =\n  | { ok: false; reason: string }\n  | {\n      ok: true;\n      subscriberId: string;\n      frames: AsyncGenerator<string, void, void>;\n      unsubscribe: () => void;\n    };\n\nfunction sha256Hex(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction timingSafeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  return timingSafeEqual(Buffer.from(a, \"hex\"), Buffer.from(b, \"hex\"));\n}\n","import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { URL } from \"node:url\";\nimport { RelayBroker, type RelayBrokerOptions } from \"./core\";\n\n/**\n * Node HTTP adapter for {@link RelayBroker}. Returns a single request\n * handler plus per-route handlers, so you can either drop it into\n * `http.createServer(...)` directly or mount the individual handlers\n * onto your existing Node HTTP framework (Express, Hono w/ node-adapter,\n * native http).\n *\n *   const relay = createNodeRelay({ pathPrefix: \"/mcp-relay\" });\n *   http.createServer(relay.handler).listen(8787);\n *\n *   // Or piecemeal:\n *   app.post(\"/mcp-relay/register\",       relay.register);\n *   app.post(\"/mcp-relay/:s/inbox\",       relay.inbox);\n *   app.post(\"/mcp-relay/:s/outbox\",      relay.outbox);\n *   app.get (\"/mcp-relay/:s/events\",      relay.events);\n *   app.post(\"/mcp-relay/:s/unregister\",  relay.unregister);\n */\n\nexport type NodeRelayOptions = RelayBrokerOptions & {\n  /** URL path prefix (without trailing slash). Default `\"\"` — handlers\n   *  expect paths like `/register`, `/{id}/inbox`, etc. directly. */\n  pathPrefix?: string;\n  /** Comma-separated origins (or `*`) for CORS. Default `*` — relays\n   *  are typically called cross-origin from the demo host. */\n  corsAllowOrigin?: string;\n};\n\nexport type NodeHandler = (req: IncomingMessage, res: ServerResponse) => unknown | Promise<unknown>;\n\nexport type NodeRelay = {\n  broker: RelayBroker;\n  /** Single-handler shape — routes internally based on method + URL. */\n  handler: NodeHandler;\n  /** Per-route handlers. Each handler ignores the URL prefix and\n   *  acts on the path remainder, so you can mount them under any\n   *  prefix in your existing app. */\n  register: NodeHandler;\n  inbox: NodeHandler;\n  outbox: NodeHandler;\n  events: NodeHandler;\n  unregister: NodeHandler;\n};\n\nexport function createNodeRelay(opts: NodeRelayOptions = {}): NodeRelay {\n  const broker = new RelayBroker(opts);\n  const prefix = (opts.pathPrefix ?? \"\").replace(/\\/$/, \"\");\n  const cors = opts.corsAllowOrigin ?? \"*\";\n\n  function setCorsHeaders(res: ServerResponse) {\n    res.setHeader(\"access-control-allow-origin\", cors);\n    res.setHeader(\"access-control-allow-methods\", \"GET, POST, OPTIONS\");\n    res.setHeader(\"access-control-allow-headers\", \"content-type, x-csrf-token, accept\");\n    res.setHeader(\"access-control-max-age\", \"86400\");\n  }\n\n  function readBody(req: IncomingMessage): Promise<string> {\n    return new Promise((resolve, reject) => {\n      const chunks: Buffer[] = [];\n      let bytes = 0;\n      req.on(\"data\", (chunk: Buffer) => {\n        bytes += chunk.length;\n        // Cap individual frames at 256 KB — protect against runaway payloads.\n        if (bytes > 256 * 1024) {\n          reject(new Error(\"payload_too_large\"));\n          req.destroy();\n          return;\n        }\n        chunks.push(chunk);\n      });\n      req.on(\"end\", () => resolve(Buffer.concat(chunks).toString(\"utf8\")));\n      req.on(\"error\", reject);\n    });\n  }\n\n  function json(res: ServerResponse, status: number, body: unknown): void {\n    res.statusCode = status;\n    res.setHeader(\"content-type\", \"application/json\");\n    res.end(JSON.stringify(body));\n  }\n\n  function getQuery(req: IncomingMessage): URLSearchParams {\n    const host = req.headers.host || \"x\";\n    const u = new URL(req.url || \"/\", `http://${host}`);\n    return u.searchParams;\n  }\n\n  function getPathname(req: IncomingMessage): string {\n    const host = req.headers.host || \"x\";\n    const u = new URL(req.url || \"/\", `http://${host}`);\n    return u.pathname;\n  }\n\n  const register: NodeHandler = async (req, res) => {\n    setCorsHeaders(res);\n    if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n    if (req.method !== \"POST\") return json(res, 405, { error: \"method_not_allowed\" });\n    let body: string;\n    try { body = await readBody(req); } catch (e) {\n      return json(res, 413, { error: e instanceof Error ? e.message : \"payload_error\" });\n    }\n    let parsed: unknown;\n    try { parsed = JSON.parse(body); } catch { return json(res, 400, { error: \"invalid_json\" }); }\n    const { session, token } = (parsed ?? {}) as { session?: string; token?: string };\n    if (typeof session !== \"string\" || typeof token !== \"string\") {\n      return json(res, 400, { error: \"missing_fields\" });\n    }\n    const result = broker.register(session, token);\n    if (!result.ok) return json(res, 401, { error: result.reason });\n    return json(res, 200, { ok: true });\n  };\n\n  /** Handler for endpoints with a `{session}` segment. The path matcher\n   *  caller passes the session id explicitly so this works mounted under\n   *  any route shape. */\n  function makeSessionHandler(\n    direction: Direction | \"unregister\",\n  ): NodeHandler {\n    return async (req, res) => {\n      setCorsHeaders(res);\n      if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n      if (req.method !== \"POST\") return json(res, 405, { error: \"method_not_allowed\" });\n      const session = extractSession(req, prefix);\n      if (!session) return json(res, 400, { error: \"missing_session\" });\n      const token = getQuery(req).get(\"token\") ?? \"\";\n\n      if (direction === \"unregister\") {\n        const ok = broker.unregister(session, token);\n        return json(res, ok ? 200 : 401, ok ? { ok: true } : { error: \"invalid_token\" });\n      }\n\n      let body: string;\n      try { body = await readBody(req); } catch (e) {\n        return json(res, 413, { error: e instanceof Error ? e.message : \"payload_error\" });\n      }\n      const ok = direction === \"inbound\"\n        ? broker.inbox(session, token, body)\n        : broker.outbox(session, token, body);\n      return json(res, ok ? 200 : 401, ok ? { ok: true } : { error: \"invalid_token_or_frame\" });\n    };\n  }\n\n  const inbox = makeSessionHandler(\"inbound\");\n  const outbox = makeSessionHandler(\"outbound\");\n  const unregister = makeSessionHandler(\"unregister\");\n\n  const events: NodeHandler = async (req, res) => {\n    setCorsHeaders(res);\n    if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n    if (req.method !== \"GET\") return json(res, 405, { error: \"method_not_allowed\" });\n    const session = extractSession(req, prefix);\n    if (!session) return json(res, 400, { error: \"missing_session\" });\n    const q = getQuery(req);\n    const token = q.get(\"token\") ?? \"\";\n    const direction = q.get(\"direction\") === \"outbound\" ? \"outbound\" : \"inbound\";\n\n    const sub = broker.subscribe(session, token, direction);\n    if (!sub.ok) {\n      res.statusCode = 401;\n      res.setHeader(\"content-type\", \"text/event-stream\");\n      res.write(`event: error\\ndata: ${sub.reason}\\n\\n`);\n      return res.end();\n    }\n\n    res.statusCode = 200;\n    res.setHeader(\"content-type\", \"text/event-stream\");\n    res.setHeader(\"cache-control\", \"no-cache\");\n    res.setHeader(\"connection\", \"keep-alive\");\n    res.setHeader(\"x-accel-buffering\", \"no\");\n    res.write(\"retry: 2000\\n\\n\");\n    flush(res);\n\n    let heartbeat: ReturnType<typeof setInterval> | null = setInterval(() => {\n      res.write(\": keepalive\\n\\n\");\n      flush(res);\n    }, 15_000);\n    if (heartbeat && typeof (heartbeat as { unref?: () => void }).unref === \"function\") {\n      (heartbeat as { unref: () => void }).unref();\n    }\n\n    const cleanup = () => {\n      if (heartbeat) { clearInterval(heartbeat); heartbeat = null; }\n      sub.unsubscribe();\n    };\n    req.on(\"close\", cleanup);\n    req.on(\"error\", cleanup);\n\n    try {\n      for await (const frame of sub.frames) {\n        res.write(`event: mcp\\ndata: ${frame}\\n\\n`);\n        flush(res);\n      }\n    } catch {\n      /* stream ended */\n    } finally {\n      cleanup();\n      res.end();\n    }\n  };\n\n  /**\n   * Single handler — routes based on method + path. Useful for mounting\n   * via `http.createServer(relay.handler)` without an Express layer.\n   */\n  const handler: NodeHandler = async (req, res) => {\n    const pathname = getPathname(req);\n    if (!pathname.startsWith(prefix + \"/\")) {\n      return json(res, 404, { error: \"not_found\" });\n    }\n    const rest = pathname.slice(prefix.length); // \"/register\", \"/<id>/inbox\", etc.\n    if (rest === \"/register\") return register(req, res);\n    const m = /^\\/([A-Za-z0-9_-]{4,64})\\/(inbox|outbox|events|unregister)$/.exec(rest);\n    if (!m) return json(res, 404, { error: \"not_found\" });\n    const route = m[2];\n    if (route === \"inbox\") return inbox(req, res);\n    if (route === \"outbox\") return outbox(req, res);\n    if (route === \"events\") return events(req, res);\n    if (route === \"unregister\") return unregister(req, res);\n    return json(res, 404, { error: \"not_found\" });\n  };\n\n  return { broker, handler, register, inbox, outbox, events, unregister };\n}\n\nfunction extractSession(req: IncomingMessage, prefix: string): string | null {\n  const host = req.headers.host || \"x\";\n  const u = new URL(req.url || \"/\", `http://${host}`);\n  const path = u.pathname;\n  if (prefix && !path.startsWith(prefix + \"/\")) return null;\n  const rest = prefix ? path.slice(prefix.length) : path;\n  const m = /^\\/([A-Za-z0-9_-]{4,64})\\//.exec(rest);\n  return m ? m[1] : null;\n}\n\nfunction flush(res: ServerResponse) {\n  // Node doesn't expose explicit flush, but write returns false when buffered;\n  // explicit flushHeaders + write is enough for SSE in practice.\n  const r = res as { flush?: () => void };\n  r.flush?.();\n}\n\ntype Direction = \"inbound\" | \"outbound\";\n"]}
+{"version":3,"sources":["../src/relay-server/core.ts","../src/relay-server/node.ts"],"names":["randomBytes","next","createHash","timingSafeEqual","URL","ok"],"mappings":";;;;;;AAuDA,IAAM,cAAN,MAAmC;AAAA,EAAnC,WAAA,GAAA;AACE,IAAA,IAAA,CAAQ,QAAA,uBAAe,GAAA,EAAqB;AAAA,EAAA;AAAA,EAC5C,WAAW,CAAA,EAAY;AAAE,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,CAAA,CAAE,EAAA,EAAI,CAAC,CAAA;AAAA,EAAG;AAAA,EACrD,WAAW,EAAA,EAAY;AAAE,IAAA,OAAO,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA;AAAA,EAAG;AAAA,EACvD,cAAc,EAAA,EAAY;AAAE,IAAA,IAAA,CAAK,QAAA,CAAS,OAAO,EAAE,CAAA;AAAA,EAAG;AAAA,EACtD,kBAAkB,MAAA,EAAgB;AAChC,IAAA,MAAM,MAAgB,EAAC;AACvB,IAAA,KAAA,MAAW,CAAC,EAAA,EAAI,CAAC,CAAA,IAAK,IAAA,CAAK,QAAA,EAAU,IAAI,CAAA,CAAE,QAAA,GAAW,MAAA,EAAQ,GAAA,CAAI,IAAA,CAAK,EAAE,CAAA;AACzE,IAAA,OAAO,GAAA;AAAA,EACT;AACF,CAAA;AAEA,IAAM,kBAAA,GAAqB,uBAAA;AAEpB,IAAM,cAAN,MAAkB;AAAA,EAOvB,WAAA,CAAY,IAAA,GAA2B,EAAC,EAAG;AAH3C;AAAA,IAAA,IAAA,CAAQ,IAAA,uBAA8D,GAAA,EAAI;AAIxE,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,CAAA,GAAI,KAAK,EAAA,GAAK,GAAA;AACzC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA,CAAK,KAAA,IAAS,IAAI,WAAA,EAAY;AAC3C,IAAA,MAAM,IAAA,GAAO,KAAK,cAAA,IAAkB,GAAA;AACpC,IAAA,IAAI,OAAO,CAAA,EAAG;AACZ,MAAA,IAAA,CAAK,SAAS,WAAA,CAAY,MAAM,IAAA,CAAK,IAAA,IAAQ,IAAI,CAAA;AAEjD,MAAA,IAAI,OAAQ,IAAA,CAAK,MAAA,CAAkC,KAAA,KAAU,UAAA,EAAY;AACvE,QAAC,IAAA,CAAK,OAAiC,KAAA,EAAM;AAAA,MAC/C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,OAAA,GAAU;AACR,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,aAAA,CAAc,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,IAAA,CAAK,KAAK,KAAA,EAAM;AAAA,EAClB;AAAA;AAAA;AAAA,EAIA,QAAA,CAAS,IAAY,KAAA,EAA6D;AAChF,IAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,EAAE,CAAA,SAAU,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,oBAAA,EAAqB;AACnF,IAAA,IAAI,OAAO,UAAU,QAAA,IAAY,KAAA,CAAM,SAAS,EAAA,IAAM,KAAA,CAAM,SAAS,GAAA,EAAK;AACxE,MAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAAA,IAC9C;AACA,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,CAAA;AACzC,IAAA,MAAM,IAAA,GAAO,UAAU,KAAK,CAAA;AAC5B,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,IAAI,CAAC,kBAAA,CAAmB,QAAA,CAAS,SAAA,EAAW,IAAI,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAC/F,MAAA,QAAA,CAAS,QAAA,GAAW,KAAK,GAAA,EAAI;AAC7B,MAAA,IAAA,CAAK,KAAA,CAAM,WAAW,QAAQ,CAAA;AAC9B,MAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,IACpB;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,EAAA,EAAI,SAAA,EAAW,MAAM,QAAA,EAAU,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AACnE,IAAA,OAAO,EAAE,IAAI,IAAA,EAAK;AAAA,EACpB;AAAA,EAEA,UAAA,CAAW,IAAY,KAAA,EAAwB;AAC7C,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAA,CAAK,KAAA,CAAM,cAAc,EAAE,CAAA;AAC3B,IAAA,IAAA,CAAK,IAAA,CAAK,OAAO,EAAE,CAAA;AACnB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,QAAA,CAAS,IAAY,KAAA,EAAwB;AAC3C,IAAA,IAAI,CAAC,EAAA,IAAM,CAAC,KAAA,EAAO,OAAO,KAAA;AAC1B,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,KAAA,CAAM,UAAA,CAAW,EAAE,CAAA;AAClC,IAAA,IAAI,CAAC,GAAG,OAAO,KAAA;AACf,IAAA,IAAI,CAAC,mBAAmB,CAAA,CAAE,SAAA,EAAW,UAAU,KAAK,CAAC,GAAG,OAAO,KAAA;AAC/D,IAAA,CAAA,CAAE,QAAA,GAAW,KAAK,GAAA,EAAI;AACtB,IAAA,IAAA,CAAK,KAAA,CAAM,WAAW,CAAC,CAAA;AACvB,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,KAAA,CAAM,EAAA,EAAY,KAAA,EAAe,OAAA,EAA0B;AACzD,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,OAAO,GAAG,OAAO,KAAA;AACnC,IAAA,IAAA,CAAK,MAAA,CAAO,EAAA,EAAI,SAAA,EAAW,OAAO,CAAA;AAClC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA,EAGA,MAAA,CAAO,EAAA,EAAY,KAAA,EAAe,OAAA,EAA0B;AAC1D,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,GAAG,OAAO,KAAA;AACtC,IAAA,IAAI,CAAC,IAAA,CAAK,OAAA,CAAQ,OAAO,GAAG,OAAO,KAAA;AACnC,IAAA,IAAA,CAAK,MAAA,CAAO,EAAA,EAAI,UAAA,EAAY,OAAO,CAAA;AACnC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,SAAA,CAAU,EAAA,EAAY,KAAA,EAAe,SAAA,EAAuC;AAC1E,IAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,EAAA,EAAI,KAAK,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,eAAA,EAAgB;AAC3E,IAAA,MAAM,YAAA,GAAeA,kBAAA,CAAY,CAAC,CAAA,CAAE,SAAS,KAAK,CAAA;AAClD,IAAA,MAAM,UAAA,GAAyB,EAAE,EAAA,EAAI,YAAA,EAAc,WAAW,KAAA,EAAO,EAAC,EAAG,WAAA,EAAa,IAAA,EAAK;AAC3F,IAAA,IAAA,CAAK,WAAW,EAAA,EAAI,SAAS,CAAA,CAAE,GAAA,CAAI,cAAc,UAAU,CAAA;AAI3D,IAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,MAAA,IAAA,CAAK,MAAA;AAAA,QACH,EAAA;AAAA,QACA,SAAA;AAAA,QACA,KAAK,SAAA,CAAU;AAAA,UACb,OAAA,EAAS,KAAA;AAAA,UACT,MAAA,EAAQ,2BAAA;AAAA,UACR,QAAQ,EAAE,YAAA,EAAc,EAAA,EAAI,IAAA,CAAK,KAAI;AAAE,SACxC;AAAA,OACH;AAAA,IACF;AAEA,IAAA,MAAM,cAAc,MAAM;AACxB,MAAA,IAAA,CAAK,UAAA,CAAW,EAAA,EAAI,SAAS,CAAA,CAAE,OAAO,YAAY,CAAA;AAClD,MAAA,IAAI,cAAc,UAAA,EAAY;AAC5B,QAAA,IAAA,CAAK,MAAA;AAAA,UACH,EAAA;AAAA,UACA,SAAA;AAAA,UACA,KAAK,SAAA,CAAU;AAAA,YACb,OAAA,EAAS,KAAA;AAAA,YACT,MAAA,EAAQ,yBAAA;AAAA,YACR,QAAQ,EAAE,YAAA,EAAc,EAAA,EAAI,IAAA,CAAK,KAAI;AAAE,WACxC;AAAA,SACH;AAAA,MACF;AAAA,IACF,CAAA;AAIA,IAAA,MAAM,SAAS,mBAAuE;AACpF,MAAA,OAAO,IAAA,EAAM;AACX,QAAA,IAAI,IAAA,CAAK,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG;AACzB,UAAA,MAAMC,KAAAA,GAAO,IAAA,CAAK,KAAA,CAAM,KAAA,EAAM;AAC9B,UAAA,IAAIA,KAAAA,KAAS,QAAW,MAAMA,KAAAA;AAC9B,UAAA;AAAA,QACF;AACA,QAAA,MAAM,IAAA,GAAO,MAAM,IAAI,OAAA,CAAuB,CAAC,OAAA,KAAY;AACzD,UAAA,IAAA,CAAK,WAAA,GAAc,OAAA;AAAA,QACrB,CAAC,CAAA;AACD,QAAA,IAAA,CAAK,WAAA,GAAc,IAAA;AACnB,QAAA,IAAI,SAAS,IAAA,EAAM;AACnB,QAAA,MAAM,IAAA;AAAA,MACR;AAAA,IACF,CAAA,CAAE,KAAK,UAAU,CAAA;AAEjB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAA;AAAA,MACJ,YAAA;AAAA,MACA,QAAQ,MAAA,EAAO;AAAA,MACf,aAAa,MAAM;AAEjB,QAAA,UAAA,CAAW,cAAc,IAAI,CAAA;AAC7B,QAAA,WAAA,EAAY;AAAA,MACd;AAAA,KACF;AAAA,EACF;AAAA;AAAA,EAIQ,UAAA,CAAW,WAAmB,SAAA,EAA+C;AACnF,IAAA,IAAI,SAAA,GAAY,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA;AACvC,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,SAAA,uBAAgB,GAAA,EAAI;AACpB,MAAA,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,SAAA,EAAW,SAAS,CAAA;AAAA,IACpC;AACA,IAAA,IAAI,KAAA,GAAQ,SAAA,CAAU,GAAA,CAAI,SAAS,CAAA;AACnC,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,KAAA,uBAAY,GAAA,EAAI;AAChB,MAAA,SAAA,CAAU,GAAA,CAAI,WAAW,KAAK,CAAA;AAAA,IAChC;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEQ,MAAA,CAAO,SAAA,EAAmB,SAAA,EAAsB,OAAA,EAAiB;AACvE,IAAA,MAAM,MAAM,IAAA,CAAK,IAAA,CAAK,IAAI,SAAS,CAAA,EAAG,IAAI,SAAS,CAAA;AACnD,IAAA,IAAI,CAAC,GAAA,EAAK;AACV,IAAA,KAAA,MAAW,GAAA,IAAO,GAAA,CAAI,MAAA,EAAO,EAAG;AAC9B,MAAA,GAAA,CAAI,KAAA,CAAM,KAAK,OAAO,CAAA;AACtB,MAAA,GAAA,CAAI,WAAA,GAAc,GAAA,CAAI,KAAA,CAAM,KAAA,MAAW,IAAI,CAAA;AAAA,IAC7C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYQ,QAAQ,OAAA,EAA0B;AACxC,IAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,CAAA,EAAG,OAAO,KAAA;AACjC,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AACF,MAAA,MAAA,GAAS,IAAA,CAAK,MAAM,OAAO,CAAA;AAAA,IAC7B,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,SAAS,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GAAI,MAAA,GAAS,CAAC,MAAM,CAAA;AACvD,IAAA,OAAO,MAAA,CAAO,MAAA,GAAS,CAAA,IAAK,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA,KAAM,IAAA,CAAK,YAAA,CAAa,CAAC,CAAC,CAAA;AAAA,EACtE;AAAA,EAEQ,aAAa,CAAA,EAAqB;AACxC,IAAA,IAAI,CAAC,KAAK,OAAO,CAAA,KAAM,YAAY,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG,OAAO,KAAA;AAC5D,IAAA,MAAM,CAAA,GAAI,CAAA;AACV,IAAA,IAAI,CAAA,CAAE,OAAA,KAAY,KAAA,EAAO,OAAO,KAAA;AAChC,IAAA,MAAM,SAAS,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,GAAW,EAAE,MAAA,GAAS,MAAA;AAEzD,IAAA,IAAI,MAAA,KAAW,2BAAA,IAA+B,MAAA,KAAW,yBAAA,EAA2B,OAAO,KAAA;AAC3F,IAAA,IAAI,MAAA,KAAW,QAAW,OAAO,IAAA;AAEjC,IAAA,MAAM,YAAY,QAAA,IAAY,CAAA;AAC9B,IAAA,MAAM,WAAW,OAAA,IAAW,CAAA;AAC5B,IAAA,OAAO,IAAA,IAAQ,KAAK,SAAA,KAAc,QAAA;AAAA,EACpC;AAAA,EAEQ,IAAA,GAAO;AACb,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,KAAA;AACjC,IAAA,KAAA,MAAW,EAAA,IAAM,IAAA,CAAK,KAAA,CAAM,iBAAA,CAAkB,MAAM,CAAA,EAAG;AACrD,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,CAAK,GAAA,CAAI,EAAE,CAAA;AAC7B,MAAA,IAAI,IAAA,EAAM;AACR,QAAA,KAAA,MAAW,GAAA,IAAO,IAAA,CAAK,MAAA,EAAO,EAAG;AAC/B,UAAA,KAAA,MAAW,OAAO,GAAA,CAAI,MAAA,EAAO,EAAG,GAAA,CAAI,cAAc,IAAI,CAAA;AAAA,QACxD;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAA,CAAK,OAAO,EAAE,CAAA;AACnB,MAAA,IAAA,CAAK,KAAA,CAAM,cAAc,EAAE,CAAA;AAAA,IAC7B;AAAA,EACF;AACF;AAWA,SAAS,UAAU,KAAA,EAAuB;AACxC,EAAA,OAAOC,kBAAW,QAAQ,CAAA,CAAE,OAAO,KAAK,CAAA,CAAE,OAAO,KAAK,CAAA;AACxD;AAEA,SAAS,kBAAA,CAAmB,GAAW,CAAA,EAAoB;AACzD,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,OAAOC,sBAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,GAAG,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,CAAC,CAAA;AACrE;AC5PO,SAAS,eAAA,CAAgB,IAAA,GAAyB,EAAC,EAAc;AACtE,EAAA,MAAM,MAAA,GAAS,IAAI,WAAA,CAAY,IAAI,CAAA;AACnC,EAAA,MAAM,UAAU,IAAA,CAAK,UAAA,IAAc,EAAA,EAAI,OAAA,CAAQ,OAAO,EAAE,CAAA;AACxD,EAAA,MAAM,IAAA,GAAO,KAAK,eAAA,IAAmB,GAAA;AAErC,EAAA,MAAM,iBAAiB,IAAA,CAAK,cAAA;AAE5B,EAAA,SAAS,cAAA,CAAe,KAAqB,GAAA,EAAuB;AAClE,IAAA,IAAI,cAAA,IAAkB,eAAe,MAAA,EAAQ;AAG3C,MAAA,MAAM,MAAA,GAAS,KAAK,OAAA,CAAQ,MAAA;AAC5B,MAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,MAAA,IAAU,cAAA,CAAe,SAAS,MAAM,CAAA,GAAI,SAAS,MAAM,CAAA;AACxG,MAAA,GAAA,CAAI,SAAA,CAAU,QAAQ,QAAQ,CAAA;AAAA,IAChC,CAAA,MAAO;AACL,MAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,IAAI,CAAA;AAAA,IACnD;AACA,IAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,oBAAoB,CAAA;AAElE,IAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,mDAAmD,CAAA;AACjG,IAAA,GAAA,CAAI,SAAA,CAAU,0BAA0B,OAAO,CAAA;AAAA,EACjD;AAEA,EAAA,SAAS,SAAS,GAAA,EAAuC;AACvD,IAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,MAAA,MAAM,SAAmB,EAAC;AAC1B,MAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,MAAA,GAAA,CAAI,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AAChC,QAAA,KAAA,IAAS,KAAA,CAAM,MAAA;AAEf,QAAA,IAAI,KAAA,GAAQ,MAAM,IAAA,EAAM;AACtB,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,mBAAmB,CAAC,CAAA;AACrC,UAAA,GAAA,CAAI,OAAA,EAAQ;AACZ,UAAA;AAAA,QACF;AACA,QAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AAAA,MACnB,CAAC,CAAA;AACD,MAAA,GAAA,CAAI,EAAA,CAAG,KAAA,EAAO,MAAM,OAAA,CAAQ,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA,CAAE,QAAA,CAAS,MAAM,CAAC,CAAC,CAAA;AACnE,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM,CAAA;AAAA,IACxB,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,SAAS,IAAA,CAAK,GAAA,EAAqB,MAAA,EAAgB,IAAA,EAAqB;AACtE,IAAA,GAAA,CAAI,UAAA,GAAa,MAAA;AACjB,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,kBAAkB,CAAA;AAChD,IAAA,GAAA,CAAI,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,EAC9B;AAEA,EAAA,SAAS,SAAS,GAAA,EAAuC;AACvD,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,IAAA,MAAM,CAAA,GAAI,IAAIC,OAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,IAAA,OAAO,CAAA,CAAE,YAAA;AAAA,EACX;AAEA,EAAA,SAAS,YAAY,GAAA,EAA8B;AACjD,IAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,IAAA,MAAM,CAAA,GAAI,IAAIA,OAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,IAAA,OAAO,CAAA,CAAE,QAAA;AAAA,EACX;AAEA,EAAA,MAAM,QAAA,GAAwB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAChD,IAAA,cAAA,CAAe,KAAK,GAAG,CAAA;AACvB,IAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IAAG;AACxE,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAChF,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AAAE,MAAA,IAAA,GAAO,MAAM,SAAS,GAAG,CAAA;AAAA,IAAG,SAAS,CAAA,EAAG;AAC5C,MAAA,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,eAAA,EAAiB,CAAA;AAAA,IACnF;AACA,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI;AAAE,MAAA,MAAA,GAAS,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IAAG,CAAA,CAAA,MAAQ;AAAE,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAA,IAAG;AAC7F,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAK,UAAU,EAAC;AACvC,IAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,OAAO,UAAU,QAAA,EAAU;AAC5D,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,kBAAkB,CAAA;AAAA,IACnD;AACA,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA;AAC7C,IAAA,IAAI,CAAC,MAAA,CAAO,EAAA,EAAI,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,MAAA,CAAO,MAAA,EAAQ,CAAA;AAC9D,IAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,EAAA,EAAI,MAAM,CAAA;AAAA,EACpC,CAAA;AAKA,EAAA,SAAS,mBACP,SAAA,EACa;AACb,IAAA,OAAO,OAAO,KAAK,GAAA,KAAQ;AACzB,MAAA,cAAA,CAAe,KAAK,GAAG,CAAA;AACvB,MAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,QAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,QAAA,OAAO,IAAI,GAAA,EAAI;AAAA,MAAG;AACxE,MAAA,IAAI,GAAA,CAAI,MAAA,KAAW,MAAA,EAAQ,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAChF,MAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,EAAK,MAAM,CAAA;AAC1C,MAAA,IAAI,CAAC,SAAS,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,iBAAA,EAAmB,CAAA;AAChE,MAAA,MAAM,QAAQ,QAAA,CAAS,GAAG,CAAA,CAAE,GAAA,CAAI,OAAO,CAAA,IAAK,EAAA;AAE5C,MAAA,IAAI,cAAc,YAAA,EAAc;AAC9B,QAAA,MAAMC,GAAAA,GAAK,MAAA,CAAO,UAAA,CAAW,OAAA,EAAS,KAAK,CAAA;AAC3C,QAAA,OAAO,IAAA,CAAK,GAAA,EAAKA,GAAAA,GAAK,GAAA,GAAM,GAAA,EAAKA,GAAAA,GAAK,EAAE,EAAA,EAAI,IAAA,EAAK,GAAI,EAAE,KAAA,EAAO,iBAAiB,CAAA;AAAA,MACjF;AAEA,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI;AAAE,QAAA,IAAA,GAAO,MAAM,SAAS,GAAG,CAAA;AAAA,MAAG,SAAS,CAAA,EAAG;AAC5C,QAAA,OAAO,IAAA,CAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,KAAA,GAAQ,CAAA,CAAE,OAAA,GAAU,eAAA,EAAiB,CAAA;AAAA,MACnF;AACA,MAAA,MAAM,EAAA,GAAK,SAAA,KAAc,SAAA,GACrB,MAAA,CAAO,KAAA,CAAM,OAAA,EAAS,KAAA,EAAO,IAAI,CAAA,GACjC,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,OAAO,IAAI,CAAA;AACtC,MAAA,OAAO,IAAA,CAAK,GAAA,EAAK,EAAA,GAAK,GAAA,GAAM,GAAA,EAAK,EAAA,GAAK,EAAE,EAAA,EAAI,IAAA,EAAK,GAAI,EAAE,KAAA,EAAO,0BAA0B,CAAA;AAAA,IAC1F,CAAA;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,mBAAmB,SAAS,CAAA;AAC1C,EAAA,MAAM,MAAA,GAAS,mBAAmB,UAAU,CAAA;AAC5C,EAAA,MAAM,UAAA,GAAa,mBAAmB,YAAY,CAAA;AAElD,EAAA,MAAM,MAAA,GAAsB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC9C,IAAA,cAAA,CAAe,KAAK,GAAG,CAAA;AACvB,IAAA,IAAI,GAAA,CAAI,WAAW,SAAA,EAAW;AAAE,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AAAK,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IAAG;AACxE,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,KAAA,EAAO,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,oBAAA,EAAsB,CAAA;AAC/E,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,GAAA,EAAK,MAAM,CAAA;AAC1C,IAAA,IAAI,CAAC,SAAS,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,iBAAA,EAAmB,CAAA;AAChE,IAAA,MAAM,CAAA,GAAI,SAAS,GAAG,CAAA;AACtB,IAAA,MAAM,KAAA,GAAQ,CAAA,CAAE,GAAA,CAAI,OAAO,CAAA,IAAK,EAAA;AAChC,IAAA,MAAM,YAAY,CAAA,CAAE,GAAA,CAAI,WAAW,CAAA,KAAM,aAAa,UAAA,GAAa,SAAA;AAEnE,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,SAAA,CAAU,OAAA,EAAS,OAAO,SAAS,CAAA;AACtD,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,MAAA,GAAA,CAAI,KAAA,CAAM,CAAA;AAAA,MAAA,EAAuB,IAAI,MAAM;;AAAA,CAAM,CAAA;AACjD,MAAA,OAAO,IAAI,GAAA,EAAI;AAAA,IACjB;AAEA,IAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,IAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,UAAU,CAAA;AACzC,IAAA,GAAA,CAAI,SAAA,CAAU,cAAc,YAAY,CAAA;AACxC,IAAA,GAAA,CAAI,SAAA,CAAU,qBAAqB,IAAI,CAAA;AACvC,IAAA,GAAA,CAAI,MAAM,iBAAiB,CAAA;AAC3B,IAAA,KAAA,CAAM,GAAG,CAAA;AAET,IAAA,IAAI,SAAA,GAAmD,YAAY,MAAM;AACvE,MAAA,GAAA,CAAI,MAAM,iBAAiB,CAAA;AAC3B,MAAA,KAAA,CAAM,GAAG,CAAA;AAAA,IACX,GAAG,IAAM,CAAA;AACT,IAAA,IAAI,SAAA,IAAa,OAAQ,SAAA,CAAqC,KAAA,KAAU,UAAA,EAAY;AAClF,MAAC,UAAoC,KAAA,EAAM;AAAA,IAC7C;AAEA,IAAA,MAAM,UAAU,MAAM;AACpB,MAAA,IAAI,SAAA,EAAW;AAAE,QAAA,aAAA,CAAc,SAAS,CAAA;AAAG,QAAA,SAAA,GAAY,IAAA;AAAA,MAAM;AAC7D,MAAA,GAAA,CAAI,WAAA,EAAY;AAAA,IAClB,CAAA;AACA,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AACvB,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,OAAO,CAAA;AAEvB,IAAA,IAAI;AACF,MAAA,WAAA,MAAiB,KAAA,IAAS,IAAI,MAAA,EAAQ;AACpC,QAAA,GAAA,CAAI,KAAA,CAAM,CAAA;AAAA,MAAA,EAAqB,KAAK;;AAAA,CAAM,CAAA;AAC1C,QAAA,KAAA,CAAM,GAAG,CAAA;AAAA,MACX;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER,CAAA,SAAE;AACA,MAAA,OAAA,EAAQ;AACR,MAAA,GAAA,CAAI,GAAA,EAAI;AAAA,IACV;AAAA,EACF,CAAA;AAMA,EAAA,MAAM,OAAA,GAAuB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC/C,IAAA,MAAM,QAAA,GAAW,YAAY,GAAG,CAAA;AAChC,IAAA,IAAI,CAAC,QAAA,CAAS,UAAA,CAAW,MAAA,GAAS,GAAG,CAAA,EAAG;AACtC,MAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,IAC9C;AACA,IAAA,MAAM,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AACzC,IAAA,IAAI,IAAA,KAAS,WAAA,EAAa,OAAO,QAAA,CAAS,KAAK,GAAG,CAAA;AAClD,IAAA,MAAM,CAAA,GAAI,6DAAA,CAA8D,IAAA,CAAK,IAAI,CAAA;AACjF,IAAA,IAAI,CAAC,GAAG,OAAO,IAAA,CAAK,KAAK,GAAA,EAAK,EAAE,KAAA,EAAO,WAAA,EAAa,CAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,EAAE,CAAC,CAAA;AACjB,IAAA,IAAI,KAAA,KAAU,OAAA,EAAS,OAAO,KAAA,CAAM,KAAK,GAAG,CAAA;AAC5C,IAAA,IAAI,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC9C,IAAA,IAAI,KAAA,KAAU,QAAA,EAAU,OAAO,MAAA,CAAO,KAAK,GAAG,CAAA;AAC9C,IAAA,IAAI,KAAA,KAAU,YAAA,EAAc,OAAO,UAAA,CAAW,KAAK,GAAG,CAAA;AACtD,IAAA,OAAO,KAAK,GAAA,EAAK,GAAA,EAAK,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,EAC9C,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,OAAA,EAAS,UAAU,KAAA,EAAO,MAAA,EAAQ,QAAQ,UAAA,EAAW;AACxE;AAEA,SAAS,cAAA,CAAe,KAAsB,MAAA,EAA+B;AAC3E,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,IAAQ,GAAA;AACjC,EAAA,MAAM,CAAA,GAAI,IAAID,OAAA,CAAI,GAAA,CAAI,OAAO,GAAA,EAAK,CAAA,OAAA,EAAU,IAAI,CAAA,CAAE,CAAA;AAClD,EAAA,MAAM,OAAO,CAAA,CAAE,QAAA;AACf,EAAA,IAAI,UAAU,CAAC,IAAA,CAAK,WAAW,MAAA,GAAS,GAAG,GAAG,OAAO,IAAA;AACrD,EAAA,MAAM,OAAO,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA,GAAI,IAAA;AAClD,EAAA,MAAM,CAAA,GAAI,4BAAA,CAA6B,IAAA,CAAK,IAAI,CAAA;AAChD,EAAA,OAAO,CAAA,GAAI,CAAA,CAAE,CAAC,CAAA,GAAI,IAAA;AACpB;AAEA,SAAS,MAAM,GAAA,EAAqB;AAGlC,EAAA,MAAM,CAAA,GAAI,GAAA;AACV,EAAA,CAAA,CAAE,KAAA,IAAQ;AACZ","file":"relay-server.cjs","sourcesContent":["import { createHash, randomBytes, timingSafeEqual } from \"node:crypto\";\n\n/**\n * RelayBroker — pure logic for the SSE+POST tunnel described in\n * docs/relay-protocol.md, hostable in any Node-compatible runtime\n * (Node, Bun, Deno-with-Node-compat, Cloudflare Workers via the Web\n * standards subset). No HTTP framework opinions; this class just\n * stores sessions, validates tokens, enqueues frames, and produces\n * SSE event payloads ready to flush.\n *\n *   const broker = new RelayBroker();\n *   const reg     = broker.register(\"session-id\", \"token\");      // ok / error\n *   broker.inbox(\"session-id\", \"token\", '{\"jsonrpc\":\"2.0\",…}');  // enqueue inbound\n *   const sub = broker.subscribe(\"session-id\", \"token\", \"inbound\");\n *   for await (const payload of sub.frames()) yield encodeSse(payload);\n *\n * Storage is an in-memory Map by default — fine for a single relay\n * process. To run multiple instances behind a load balancer, swap\n * `MemoryStore` for a Redis-backed equivalent (same Store interface).\n */\n\nexport type Direction = \"inbound\" | \"outbound\";\n\nexport type Session = {\n  id: string;\n  /** SHA-256 hex of the original token. Compared with timing-safe equals. */\n  tokenHash: string;\n  /** Last touched (ms since epoch). Used for TTL cleanup. */\n  lastSeen: number;\n};\n\nexport type Subscriber = {\n  id: string;\n  direction: Direction;\n  queue: string[];\n  resolveNext: ((frame: string | null) => void) | null;\n};\n\nexport type RelayBrokerOptions = {\n  /** Sessions auto-expire after this many ms of inactivity. Default 4h. */\n  ttlMs?: number;\n  /** Cleanup tick interval in ms. Default 60 000. */\n  reapIntervalMs?: number;\n  /** Bring-your-own storage layer (redis, etc.). Defaults to in-memory. */\n  store?: Store;\n};\n\nexport interface Store {\n  putSession(s: Session): void;\n  getSession(id: string): Session | undefined;\n  deleteSession(id: string): void;\n  /** Used by the reap tick — return ids whose lastSeen < cutoff. */\n  expiredSessionIds(cutoff: number): string[];\n}\n\nclass MemoryStore implements Store {\n  private sessions = new Map<string, Session>();\n  putSession(s: Session) { this.sessions.set(s.id, s); }\n  getSession(id: string) { return this.sessions.get(id); }\n  deleteSession(id: string) { this.sessions.delete(id); }\n  expiredSessionIds(cutoff: number) {\n    const out: string[] = [];\n    for (const [id, s] of this.sessions) if (s.lastSeen < cutoff) out.push(id);\n    return out;\n  }\n}\n\nconst SESSION_ID_PATTERN = /^[A-Za-z0-9_-]{4,64}$/;\n\nexport class RelayBroker {\n  private readonly ttlMs: number;\n  private readonly store: Store;\n  /** Per-session, per-direction subscriber list. */\n  private subs: Map<string, Map<string, Map<string, Subscriber>>> = new Map();\n  private reaper?: ReturnType<typeof setInterval>;\n\n  constructor(opts: RelayBrokerOptions = {}) {\n    this.ttlMs = opts.ttlMs ?? 4 * 60 * 60 * 1000; // 4h\n    this.store = opts.store ?? new MemoryStore();\n    const tick = opts.reapIntervalMs ?? 60_000;\n    if (tick > 0) {\n      this.reaper = setInterval(() => this.reap(), tick);\n      // Don't keep the process alive just for the reaper.\n      if (typeof (this.reaper as { unref?: () => void }).unref === \"function\") {\n        (this.reaper as { unref: () => void }).unref();\n      }\n    }\n  }\n\n  dispose() {\n    if (this.reaper) clearInterval(this.reaper);\n    this.subs.clear();\n  }\n\n  /** Register a session id + token. Idempotent — same id+token re-registers,\n   *  different token fails. */\n  register(id: string, token: string): { ok: true } | { ok: false; reason: string } {\n    if (!SESSION_ID_PATTERN.test(id)) return { ok: false, reason: \"invalid_session_id\" };\n    if (typeof token !== \"string\" || token.length < 16 || token.length > 128) {\n      return { ok: false, reason: \"invalid_token\" };\n    }\n    const existing = this.store.getSession(id);\n    const hash = sha256Hex(token);\n    if (existing) {\n      if (!timingSafeEqualHex(existing.tokenHash, hash)) return { ok: false, reason: \"session_taken\" };\n      existing.lastSeen = Date.now();\n      this.store.putSession(existing);\n      return { ok: true };\n    }\n    this.store.putSession({ id, tokenHash: hash, lastSeen: Date.now() });\n    return { ok: true };\n  }\n\n  unregister(id: string, token: string): boolean {\n    if (!this.validate(id, token)) return false;\n    this.store.deleteSession(id);\n    this.subs.delete(id);\n    return true;\n  }\n\n  /** Validate an authenticated touch and slide the TTL forward. */\n  validate(id: string, token: string): boolean {\n    if (!id || !token) return false;\n    const s = this.store.getSession(id);\n    if (!s) return false;\n    if (!timingSafeEqualHex(s.tokenHash, sha256Hex(token))) return false;\n    s.lastSeen = Date.now();\n    this.store.putSession(s);\n    return true;\n  }\n\n  /** Push a frame onto the inbound queue (external agent → browser). */\n  inbox(id: string, token: string, payload: string): boolean {\n    if (!this.validate(id, token)) return false;\n    if (!this.isFrame(payload)) return false;\n    this.fanOut(id, \"inbound\", payload);\n    return true;\n  }\n\n  /** Push a frame onto the outbound queue (browser server → external agents). */\n  outbox(id: string, token: string, payload: string): boolean {\n    if (!this.validate(id, token)) return false;\n    if (!this.isFrame(payload)) return false;\n    this.fanOut(id, \"outbound\", payload);\n    return true;\n  }\n\n  /**\n   * Subscribe to a session's queue for one direction. Returns an iterable\n   * the caller (an HTTP handler) pumps as SSE.\n   */\n  subscribe(id: string, token: string, direction: Direction): SubscribeResult {\n    if (!this.validate(id, token)) return { ok: false, reason: \"invalid_token\" };\n    const subscriberId = randomBytes(8).toString(\"hex\");\n    const subscriber: Subscriber = { id: subscriberId, direction, queue: [], resolveNext: null };\n    this.getDirSubs(id, direction).set(subscriberId, subscriber);\n\n    // Notify the inbound side (= browser) that an outbound subscriber\n    // (= external agent) just connected.\n    if (direction === \"outbound\") {\n      this.fanOut(\n        id,\n        \"inbound\",\n        JSON.stringify({\n          jsonrpc: \"2.0\",\n          method: \"notifications/peer_joined\",\n          params: { subscriberId, ts: Date.now() },\n        }),\n      );\n    }\n\n    const unsubscribe = () => {\n      this.getDirSubs(id, direction).delete(subscriberId);\n      if (direction === \"outbound\") {\n        this.fanOut(\n          id,\n          \"inbound\",\n          JSON.stringify({\n            jsonrpc: \"2.0\",\n            method: \"notifications/peer_left\",\n            params: { subscriberId, ts: Date.now() },\n          }),\n        );\n      }\n    };\n\n    /** Async generator the HTTP handler drains. Yields raw frame payloads;\n     *  the handler is responsible for SSE framing (`event: mcp\\ndata: …`). */\n    const frames = async function* (this: Subscriber): AsyncGenerator<string, void, void> {\n      while (true) {\n        if (this.queue.length > 0) {\n          const next = this.queue.shift();\n          if (next !== undefined) yield next;\n          continue;\n        }\n        const next = await new Promise<string | null>((resolve) => {\n          this.resolveNext = resolve;\n        });\n        this.resolveNext = null;\n        if (next === null) return;\n        yield next;\n      }\n    }.bind(subscriber);\n\n    return {\n      ok: true,\n      subscriberId,\n      frames: frames(),\n      unsubscribe: () => {\n        // Wake the generator and let it return cleanly.\n        subscriber.resolveNext?.(null);\n        unsubscribe();\n      },\n    };\n  }\n\n  // ────────────────────────────────────────────────────────────── internals\n\n  private getDirSubs(sessionId: string, direction: Direction): Map<string, Subscriber> {\n    let bySession = this.subs.get(sessionId);\n    if (!bySession) {\n      bySession = new Map();\n      this.subs.set(sessionId, bySession);\n    }\n    let byDir = bySession.get(direction);\n    if (!byDir) {\n      byDir = new Map();\n      bySession.set(direction, byDir);\n    }\n    return byDir;\n  }\n\n  private fanOut(sessionId: string, direction: Direction, payload: string) {\n    const dir = this.subs.get(sessionId)?.get(direction);\n    if (!dir) return;\n    for (const sub of dir.values()) {\n      sub.queue.push(payload);\n      sub.resolveNext?.(sub.queue.shift() ?? null);\n    }\n  }\n\n  /**\n   * Validate that a peer-supplied payload is a well-formed JSON-RPC 2.0 frame\n   * (or batch) before it is fanned out. Previously this was a substring match on\n   * `\"jsonrpc\"`, which let any token holder inject spoofed frames — a forged\n   * `notifications/peer_joined` / `peer_left` (broker-reserved presence control),\n   * a fake `notifications/agent_activity {source:\"user\"}` (\"human took control\"),\n   * or a forged response with a matching id. We now parse + shape-check, and\n   * reject the broker-reserved control methods (the broker emits those itself,\n   * never a peer).\n   */\n  private isFrame(payload: string): boolean {\n    if (payload.length === 0) return false;\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(payload);\n    } catch {\n      return false;\n    }\n    const frames = Array.isArray(parsed) ? parsed : [parsed];\n    return frames.length > 0 && frames.every((f) => this.isValidFrame(f));\n  }\n\n  private isValidFrame(f: unknown): boolean {\n    if (!f || typeof f !== \"object\" || Array.isArray(f)) return false;\n    const o = f as Record<string, unknown>;\n    if (o.jsonrpc !== \"2.0\") return false;\n    const method = typeof o.method === \"string\" ? o.method : undefined;\n    // Broker-reserved control frames may never arrive from a peer.\n    if (method === \"notifications/peer_joined\" || method === \"notifications/peer_left\") return false;\n    if (method !== undefined) return true; // request or notification\n    // Response: needs an id and exactly one of result / error.\n    const hasResult = \"result\" in o;\n    const hasError = \"error\" in o;\n    return \"id\" in o && hasResult !== hasError;\n  }\n\n  private reap() {\n    const cutoff = Date.now() - this.ttlMs;\n    for (const id of this.store.expiredSessionIds(cutoff)) {\n      const dirs = this.subs.get(id);\n      if (dirs) {\n        for (const dir of dirs.values()) {\n          for (const sub of dir.values()) sub.resolveNext?.(null);\n        }\n      }\n      this.subs.delete(id);\n      this.store.deleteSession(id);\n    }\n  }\n}\n\nexport type SubscribeResult =\n  | { ok: false; reason: string }\n  | {\n      ok: true;\n      subscriberId: string;\n      frames: AsyncGenerator<string, void, void>;\n      unsubscribe: () => void;\n    };\n\nfunction sha256Hex(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction timingSafeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  return timingSafeEqual(Buffer.from(a, \"hex\"), Buffer.from(b, \"hex\"));\n}\n","import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { URL } from \"node:url\";\nimport { RelayBroker, type RelayBrokerOptions } from \"./core\";\n\n/**\n * Node HTTP adapter for {@link RelayBroker}. Returns a single request\n * handler plus per-route handlers, so you can either drop it into\n * `http.createServer(...)` directly or mount the individual handlers\n * onto your existing Node HTTP framework (Express, Hono w/ node-adapter,\n * native http).\n *\n *   const relay = createNodeRelay({ pathPrefix: \"/mcp-relay\" });\n *   http.createServer(relay.handler).listen(8787);\n *\n *   // Or piecemeal:\n *   app.post(\"/mcp-relay/register\",       relay.register);\n *   app.post(\"/mcp-relay/:s/inbox\",       relay.inbox);\n *   app.post(\"/mcp-relay/:s/outbox\",      relay.outbox);\n *   app.get (\"/mcp-relay/:s/events\",      relay.events);\n *   app.post(\"/mcp-relay/:s/unregister\",  relay.unregister);\n */\n\nexport type NodeRelayOptions = RelayBrokerOptions & {\n  /** URL path prefix (without trailing slash). Default `\"\"` — handlers\n   *  expect paths like `/register`, `/{id}/inbox`, etc. directly. */\n  pathPrefix?: string;\n  /** Comma-separated origins (or `*`) for CORS. Default `*` — relays\n   *  are typically called cross-origin from the demo host. */\n  corsAllowOrigin?: string;\n  /**\n   * Strict browser-origin allow-list. When set, only these Origins get a\n   * matching `Access-Control-Allow-Origin` (the request's own Origin is\n   * reflected, never `*`), which blunts DNS-rebinding + hostile cross-origin\n   * pages from reading relay responses. Recommended for any browser-facing\n   * deployment. When unset, `corsAllowOrigin` (default `*`) is used and the\n   * session token is the only auth — pair that with a loopback bind.\n   */\n  allowedOrigins?: string[];\n};\n\nexport type NodeHandler = (req: IncomingMessage, res: ServerResponse) => unknown | Promise<unknown>;\n\nexport type NodeRelay = {\n  broker: RelayBroker;\n  /** Single-handler shape — routes internally based on method + URL. */\n  handler: NodeHandler;\n  /** Per-route handlers. Each handler ignores the URL prefix and\n   *  acts on the path remainder, so you can mount them under any\n   *  prefix in your existing app. */\n  register: NodeHandler;\n  inbox: NodeHandler;\n  outbox: NodeHandler;\n  events: NodeHandler;\n  unregister: NodeHandler;\n};\n\nexport function createNodeRelay(opts: NodeRelayOptions = {}): NodeRelay {\n  const broker = new RelayBroker(opts);\n  const prefix = (opts.pathPrefix ?? \"\").replace(/\\/$/, \"\");\n  const cors = opts.corsAllowOrigin ?? \"*\";\n\n  const allowedOrigins = opts.allowedOrigins;\n\n  function setCorsHeaders(res: ServerResponse, req?: IncomingMessage) {\n    if (allowedOrigins && allowedOrigins.length) {\n      // Strict mode: reflect the request Origin only when it's allow-listed;\n      // otherwise emit an origin that no browser will match.\n      const origin = req?.headers.origin;\n      res.setHeader(\"access-control-allow-origin\", origin && allowedOrigins.includes(origin) ? origin : \"null\");\n      res.setHeader(\"vary\", \"origin\");\n    } else {\n      res.setHeader(\"access-control-allow-origin\", cors);\n    }\n    res.setHeader(\"access-control-allow-methods\", \"GET, POST, OPTIONS\");\n    // `authorization` is forward-compat for a header-borne session token.\n    res.setHeader(\"access-control-allow-headers\", \"content-type, x-csrf-token, accept, authorization\");\n    res.setHeader(\"access-control-max-age\", \"86400\");\n  }\n\n  function readBody(req: IncomingMessage): Promise<string> {\n    return new Promise((resolve, reject) => {\n      const chunks: Buffer[] = [];\n      let bytes = 0;\n      req.on(\"data\", (chunk: Buffer) => {\n        bytes += chunk.length;\n        // Cap individual frames at 256 KB — protect against runaway payloads.\n        if (bytes > 256 * 1024) {\n          reject(new Error(\"payload_too_large\"));\n          req.destroy();\n          return;\n        }\n        chunks.push(chunk);\n      });\n      req.on(\"end\", () => resolve(Buffer.concat(chunks).toString(\"utf8\")));\n      req.on(\"error\", reject);\n    });\n  }\n\n  function json(res: ServerResponse, status: number, body: unknown): void {\n    res.statusCode = status;\n    res.setHeader(\"content-type\", \"application/json\");\n    res.end(JSON.stringify(body));\n  }\n\n  function getQuery(req: IncomingMessage): URLSearchParams {\n    const host = req.headers.host || \"x\";\n    const u = new URL(req.url || \"/\", `http://${host}`);\n    return u.searchParams;\n  }\n\n  function getPathname(req: IncomingMessage): string {\n    const host = req.headers.host || \"x\";\n    const u = new URL(req.url || \"/\", `http://${host}`);\n    return u.pathname;\n  }\n\n  const register: NodeHandler = async (req, res) => {\n    setCorsHeaders(res, req);\n    if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n    if (req.method !== \"POST\") return json(res, 405, { error: \"method_not_allowed\" });\n    let body: string;\n    try { body = await readBody(req); } catch (e) {\n      return json(res, 413, { error: e instanceof Error ? e.message : \"payload_error\" });\n    }\n    let parsed: unknown;\n    try { parsed = JSON.parse(body); } catch { return json(res, 400, { error: \"invalid_json\" }); }\n    const { session, token } = (parsed ?? {}) as { session?: string; token?: string };\n    if (typeof session !== \"string\" || typeof token !== \"string\") {\n      return json(res, 400, { error: \"missing_fields\" });\n    }\n    const result = broker.register(session, token);\n    if (!result.ok) return json(res, 401, { error: result.reason });\n    return json(res, 200, { ok: true });\n  };\n\n  /** Handler for endpoints with a `{session}` segment. The path matcher\n   *  caller passes the session id explicitly so this works mounted under\n   *  any route shape. */\n  function makeSessionHandler(\n    direction: Direction | \"unregister\",\n  ): NodeHandler {\n    return async (req, res) => {\n      setCorsHeaders(res, req);\n      if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n      if (req.method !== \"POST\") return json(res, 405, { error: \"method_not_allowed\" });\n      const session = extractSession(req, prefix);\n      if (!session) return json(res, 400, { error: \"missing_session\" });\n      const token = getQuery(req).get(\"token\") ?? \"\";\n\n      if (direction === \"unregister\") {\n        const ok = broker.unregister(session, token);\n        return json(res, ok ? 200 : 401, ok ? { ok: true } : { error: \"invalid_token\" });\n      }\n\n      let body: string;\n      try { body = await readBody(req); } catch (e) {\n        return json(res, 413, { error: e instanceof Error ? e.message : \"payload_error\" });\n      }\n      const ok = direction === \"inbound\"\n        ? broker.inbox(session, token, body)\n        : broker.outbox(session, token, body);\n      return json(res, ok ? 200 : 401, ok ? { ok: true } : { error: \"invalid_token_or_frame\" });\n    };\n  }\n\n  const inbox = makeSessionHandler(\"inbound\");\n  const outbox = makeSessionHandler(\"outbound\");\n  const unregister = makeSessionHandler(\"unregister\");\n\n  const events: NodeHandler = async (req, res) => {\n    setCorsHeaders(res, req);\n    if (req.method === \"OPTIONS\") { res.statusCode = 204; return res.end(); }\n    if (req.method !== \"GET\") return json(res, 405, { error: \"method_not_allowed\" });\n    const session = extractSession(req, prefix);\n    if (!session) return json(res, 400, { error: \"missing_session\" });\n    const q = getQuery(req);\n    const token = q.get(\"token\") ?? \"\";\n    const direction = q.get(\"direction\") === \"outbound\" ? \"outbound\" : \"inbound\";\n\n    const sub = broker.subscribe(session, token, direction);\n    if (!sub.ok) {\n      res.statusCode = 401;\n      res.setHeader(\"content-type\", \"text/event-stream\");\n      res.write(`event: error\\ndata: ${sub.reason}\\n\\n`);\n      return res.end();\n    }\n\n    res.statusCode = 200;\n    res.setHeader(\"content-type\", \"text/event-stream\");\n    res.setHeader(\"cache-control\", \"no-cache\");\n    res.setHeader(\"connection\", \"keep-alive\");\n    res.setHeader(\"x-accel-buffering\", \"no\");\n    res.write(\"retry: 2000\\n\\n\");\n    flush(res);\n\n    let heartbeat: ReturnType<typeof setInterval> | null = setInterval(() => {\n      res.write(\": keepalive\\n\\n\");\n      flush(res);\n    }, 15_000);\n    if (heartbeat && typeof (heartbeat as { unref?: () => void }).unref === \"function\") {\n      (heartbeat as { unref: () => void }).unref();\n    }\n\n    const cleanup = () => {\n      if (heartbeat) { clearInterval(heartbeat); heartbeat = null; }\n      sub.unsubscribe();\n    };\n    req.on(\"close\", cleanup);\n    req.on(\"error\", cleanup);\n\n    try {\n      for await (const frame of sub.frames) {\n        res.write(`event: mcp\\ndata: ${frame}\\n\\n`);\n        flush(res);\n      }\n    } catch {\n      /* stream ended */\n    } finally {\n      cleanup();\n      res.end();\n    }\n  };\n\n  /**\n   * Single handler — routes based on method + path. Useful for mounting\n   * via `http.createServer(relay.handler)` without an Express layer.\n   */\n  const handler: NodeHandler = async (req, res) => {\n    const pathname = getPathname(req);\n    if (!pathname.startsWith(prefix + \"/\")) {\n      return json(res, 404, { error: \"not_found\" });\n    }\n    const rest = pathname.slice(prefix.length); // \"/register\", \"/<id>/inbox\", etc.\n    if (rest === \"/register\") return register(req, res);\n    const m = /^\\/([A-Za-z0-9_-]{4,64})\\/(inbox|outbox|events|unregister)$/.exec(rest);\n    if (!m) return json(res, 404, { error: \"not_found\" });\n    const route = m[2];\n    if (route === \"inbox\") return inbox(req, res);\n    if (route === \"outbox\") return outbox(req, res);\n    if (route === \"events\") return events(req, res);\n    if (route === \"unregister\") return unregister(req, res);\n    return json(res, 404, { error: \"not_found\" });\n  };\n\n  return { broker, handler, register, inbox, outbox, events, unregister };\n}\n\nfunction extractSession(req: IncomingMessage, prefix: string): string | null {\n  const host = req.headers.host || \"x\";\n  const u = new URL(req.url || \"/\", `http://${host}`);\n  const path = u.pathname;\n  if (prefix && !path.startsWith(prefix + \"/\")) return null;\n  const rest = prefix ? path.slice(prefix.length) : path;\n  const m = /^\\/([A-Za-z0-9_-]{4,64})\\//.exec(rest);\n  return m ? m[1] : null;\n}\n\nfunction flush(res: ServerResponse) {\n  // Node doesn't expose explicit flush, but write returns false when buffered;\n  // explicit flushHeaders + write is enough for SSE in practice.\n  const r = res as { flush?: () => void };\n  r.flush?.();\n}\n\ntype Direction = \"inbound\" | \"outbound\";\n"]}

package/dist/relay-server.js

@@ -1,3 +1,3 @@
-export { RelayBroker, createNodeRelay } from './chunk-OIX2ANFS.js';
+export { RelayBroker, createNodeRelay } from './chunk-GRHPEK6M.js';
 //# sourceMappingURL=relay-server.js.map
 //# sourceMappingURL=relay-server.js.map

package/dist/sharing/index.d.cts

@@ -1,4 +1,4 @@
-export { S as SessionDescriptor, b as buildShareConfig, a as buildShareUrl, e as constantTimeEqual, c as createSessionDescriptor, d as describeSession, r as readSessionFromUrl } from '../token-CrJF76oH.cjs';
+export { S as SessionDescriptor, b as buildShareConfig, a as buildShareUrl, e as constantTimeEqual, c as createSessionDescriptor, d as describeSession, r as readSessionFromUrl } from '../token-BZ8doMam.cjs';
 import { b as JsonRpcMessage } from '../types-C58ZXs4K.cjs';
 import { T as Transport, M as MicroMcpServer } from '../server-DDD3IZ56.cjs';
 import '../tool-host-EuYHYSSH.cjs';

package/dist/sharing/index.d.ts

@@ -1,4 +1,4 @@
-export { S as SessionDescriptor, b as buildShareConfig, a as buildShareUrl, e as constantTimeEqual, c as createSessionDescriptor, d as describeSession, r as readSessionFromUrl } from '../token-CrJF76oH.js';
+export { S as SessionDescriptor, b as buildShareConfig, a as buildShareUrl, e as constantTimeEqual, c as createSessionDescriptor, d as describeSession, r as readSessionFromUrl } from '../token-BZ8doMam.js';
 import { b as JsonRpcMessage } from '../types-C58ZXs4K.js';
 import { T as Transport, M as MicroMcpServer } from '../server-CDX643Kz.js';
 import '../tool-host-CWTOJEm2.js';

package/dist/sharing.cjs

@@ -42,8 +42,7 @@ function describeSession(id, token) {
 }
 function buildShareUrl(descriptor, baseUrl = typeof window !== "undefined" ? window.location.href.split("?")[0] : "") {
   const u = new URL(baseUrl);
-  u.searchParams.set("session", descriptor.id);
-  u.searchParams.set("token", descriptor.token);
+  u.hash = new URLSearchParams({ session: descriptor.id, token: descriptor.token }).toString();
   return u.toString();
 }
 function buildShareConfig(descriptor, transport = "broadcast-channel") {
@@ -58,9 +57,10 @@ function buildShareConfig(descriptor, transport = "broadcast-channel") {
 }
 function readSessionFromUrl() {
   if (typeof window === "undefined") return null;
-  const params = new URL(window.location.href).searchParams;
-  const id = params.get("session");
-  const token = params.get("token");
+  const url = new URL(window.location.href);
+  const frag = new URLSearchParams(url.hash.replace(/^#/, ""));
+  const id = frag.get("session") ?? url.searchParams.get("session");
+  const token = frag.get("token") ?? url.searchParams.get("token");
   if (!id || !token) return null;
   return describeSession(id, token);
 }

package/dist/sharing.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/presence/registry.ts","../src/sharing/token.ts","../src/sharing/sse-relay.ts"],"names":["emitActivity","onActivity","readActivityHistory","resetActivityRegistry"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,IAAA,gBAAA,GAAA,EAAA;AAAA,QAAA,CAAA,gBAAA,EAAA;AAAA,EAAA,YAAA,EAAA,MAAAA,4BAAA;AAAA,EAAA,UAAA,EAAA,MAAAC,0BAAA;AAAA,EAAA,mBAAA,EAAA,MAAAC,mCAAA;AAAA,EAAA,qBAAA,EAAA,MAAAC;AAAA,CAAA,CAAA;AAAA,IAAA,aAAA,GAAA,KAAA,CAAA;AAAA,EAAA,0BAAA,GAAA;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACQA,IAAM,WAAA,GAAc,EAAA;AAWb,SAAS,uBAAA,GAA6C;AAC3D,EAAA,MAAM,EAAA,GAAK,SAAS,CAAC,CAAA;AACrB,EAAA,MAAM,QAAQ,WAAA,EAAY;AAC1B,EAAA,OAAO,EAAE,IAAI,KAAA,EAAO,OAAA,EAAS,MAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,EAAE;AACjD;AAEO,SAAS,eAAA,CAAgB,IAAY,KAAA,EAAkC;AAC5E,EAAA,OAAO,EAAE,IAAI,KAAA,EAAO,OAAA,EAAS,MAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,EAAE;AACjD;AAGO,SAAS,aAAA,CACd,UAAA,EACA,OAAA,GAAkB,OAAO,WAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,IAAI,EAAA,EAC/E;AACR,EAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,OAAO,CAAA;AACzB,EAAA,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,SAAA,EAAW,UAAA,CAAW,EAAE,CAAA;AAC3C,EAAA,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,KAAK,CAAA;AAC5C,EAAA,OAAO,EAAE,QAAA,EAAS;AACpB;AAGO,SAAS,gBAAA,CAAiB,UAAA,EAA+B,SAAA,GAAY,mBAAA,EAAqB;AAC/F,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,WAAA,EAAc,UAAA,CAAW,EAAE,CAAA,CAAA;AAAA,IACjC,SAAA;AAAA,IACA,SAAS,UAAA,CAAW,EAAA;AAAA,IACpB,OAAO,UAAA,CAAW,KAAA;AAAA,IAClB,OAAA,EAAS,CAAA,UAAA,EAAa,UAAA,CAAW,EAAE,CAAA,CAAA;AAAA,IACnC,gBAAA,EAAkB;AAAA,GACpB;AACF;AAGO,SAAS,kBAAA,GAA+C;AAC7D,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,MAAM,SAAS,IAAI,GAAA,CAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAE,YAAA;AAC7C,EAAA,MAAM,EAAA,GAAK,MAAA,CAAO,GAAA,CAAI,SAAS,CAAA;AAC/B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA;AAChC,EAAA,IAAI,CAAC,EAAA,IAAM,CAAC,KAAA,EAAO,OAAO,IAAA;AAC1B,EAAA,OAAO,eAAA,CAAgB,IAAI,KAAK,CAAA;AAClC;AAEA,SAAS,WAAA,GAAsB;AAC7B,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,WAAW,CAAA;AACxC,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,UAAU,KAAK,CAAA;AACxB;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,IAAA,CAAK,KAAM,GAAA,GAAM,CAAA,GAAK,CAAC,CAAC,CAAA;AACrD,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,SAAA,CAAU,KAAK,CAAA,CAAE,KAAA,CAAM,GAAG,GAAG,CAAA;AACtC;AAEA,SAAS,UAAU,KAAA,EAA2B;AAC5C,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,MAAW,CAAA,IAAK,KAAA,EAAO,CAAA,IAAK,MAAA,CAAO,aAAa,CAAC,CAAA;AACjD,EAAA,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC1E;AAGO,SAAS,iBAAA,CAAkB,GAAW,CAAA,EAAoB;AAC/D,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,MAAA,EAAQ,CAAA,EAAA,EAAK,IAAA,IAAQ,CAAA,CAAE,UAAA,CAAW,CAAC,CAAA,GAAI,CAAA,CAAE,WAAW,CAAC,CAAA;AAC3E,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;;;ACjFA,aAAA,EAAA;AA2BO,IAAM,oBAAN,MAA6C;AAAA,EAalD,YAAY,OAAA,EAA0B;AATtC,IAAA,IAAA,CAAQ,QAAA,GAAW,KAAA;AAEnB,IAAA,IAAA,CAAQ,YAA8B,EAAC;AACvC,IAAA,IAAA,CAAQ,SAAA,GAAY,KAAA;AACpB,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAiC;AACzD,IAAA,IAAA,CAAQ,KAAA,GAAoB,MAAA;AAE5B,IAAA,IAAA,CAAQ,KAAA,uBAAY,GAAA,EAAY;AAG9B,IAAA,IAAA,CAAK,IAAA,GAAO,OAAA;AACZ,IAAA,IAAA,CAAK,gBAAgB,OAAA,CAAQ,KAAA;AAAA,EAC/B;AAAA,EAEA,WAAW,MAAA,EAA8B;AACvC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,IAAI,KAAK,SAAA,IAAa,IAAA,CAAK,QAAA,IAAY,OAAO,WAAW,WAAA,EAAa;AACtE,IAAA,IAAA,CAAK,SAAS,YAAY,CAAA;AAK1B,IAAA,KAAK,OAAO,kCAAkC,CAAA,CAC3C,KAAK,CAAC,EAAE,oBAAmB,KAAM;AAChC,MAAA,IAAI,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,QAAA,EAAU;AACrC,MAAA,IAAA,CAAK,UAAU,kBAAA,CAAmB;AAAA,QAChC,OAAA,EAAS,KAAK,IAAA,CAAK,OAAA;AAAA,QACnB,OAAA,EAAS,KAAK,IAAA,CAAK,SAAA;AAAA,QACnB,KAAA,EAAO,KAAK,IAAA,CAAK,KAAA;AAAA,QACjB,SAAA,EAAW,MAAA;AAAA,QACX,gBAAA,EAAkB,SAAA;AAAA,QAClB,QAAA,EAAU,QAAA;AAAA,QACV,OAAA,EAAS,CAAC,GAAA,KAAQ,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QACxC,MAAA,EAAQ,MAAM,IAAA,CAAK,QAAA,EAAS;AAAA,QAC5B,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,CAAS,OAAO,CAAA;AAAA,QACpC,SAAA,EAAW,KAAK,IAAA,CAAK;AAAA,OACtB,CAAA;AACD,MAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,IACrB,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AACX,MAAA,IAAI,CAAC,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS;AAAA,IACpC,CAAC,CAAA;AAAA,EACL;AAAA;AAAA,EAGQ,QAAA,GAAiB;AACvB,IAAA,IAAI,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,QAAA,EAAU;AACrC,IAAA,MAAM,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,OAAO,IAAI,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA,cAAA,EAAiB,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,KAAK,CAAC,CAAA,CAAA;AAC/H,IAAA,MAAM,KAAK,IAAI,WAAA,CAAY,KAAK,EAAE,eAAA,EAAiB,OAAO,CAAA;AAC1D,IAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AACV,IAAA,EAAA,CAAG,gBAAA,CAAiB,MAAA,EAAQ,MAAM,IAAA,CAAK,UAAU,CAAA;AACjD,IAAA,EAAA,CAAG,gBAAA,CAAiB,OAAO,CAAC,EAAA,KAAqB,KAAK,aAAA,CAAc,EAAA,CAAG,IAAI,CAAC,CAAA;AAC5E,IAAA,EAAA,CAAG,iBAAiB,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,CAAS,OAAO,CAAC,CAAA;AAAA,EAC3D;AAAA;AAAA,EAGQ,QAAA,GAAiB;AACvB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,IAAA,IAAA,CAAK,SAAS,MAAM,CAAA;AACpB,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,CAAC,CAAA;AACtC,IAAA,KAAA,MAAW,GAAA,IAAO,MAAA,EAAQ,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAAA,EAC5C;AAAA,EAEA,KAAK,OAAA,EAA+B;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,OAAO,CAAA;AAC3B,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,QAAQ,OAAO,CAAA;AAAA,EACtB;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAChB,IAAA,IAAA,CAAK,SAAS,IAAA,EAAK;AACnB,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AACf,IAAA,IAAA,CAAK,EAAA,GAAK,MAAA;AACV,IAAA,IAAA,CAAK,SAAA,GAAY,KAAA;AACjB,IAAA,IAAA,CAAK,SAAS,QAAQ,CAAA;AAAA,EACxB;AAAA,EAEA,cAAc,QAAA,EAAmD;AAC/D,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,QAAA,CAAS,KAAK,KAAK,CAAA;AACnB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAA,CAAkB,OAAA,EAAkC,KAAA,EAA+B;AACvF,IAAA,IAAI,UAAU,MAAA,IAAa,CAAC,kBAAkB,KAAA,EAAO,IAAA,CAAK,aAAa,CAAA,EAAG;AAC1E,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAI,MAAM,uCAAuC,CAAA;AACzE,IAAA,MAAM,UAA0B,OAAO,OAAA,KAAY,WAAW,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,GAAI,OAAA;AACpF,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAAA,EACzC;AAAA,EAEA,MAAc,QAAQ,OAAA,EAAwC;AAC5D,IAAA,MAAM,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,OAAO,IAAI,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA,cAAA,EAAiB,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,KAAK,CAAC,CAAA,CAAA;AAC/H,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,IAAA,CAAK,KAAA,IAAS,KAAA;AAC7B,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,GAAA,EAAK;AAAA,QACX,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,UAAU,kBAAA,EAAmB;AAAA,QAC5E,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,OAC7B,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,GAAA,EAA4B;AACtD,IAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAClB,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AACF,MAAA,OAAA,GAAU,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,IAC1B,CAAA,CAAA,MAAQ;AACN,MAAA;AAAA,IACF;AACA,IAAA,IAAI,QAAA,IAAY,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,2BAAA,EAA6B;AACzE,MAAA,MAAM,YAAA,GAAe,MAAA,CAAQ,OAAA,CAAQ,MAAA,EAAmD,gBAAgB,MAAM,CAAA;AAC9G,MAAA,IAAA,CAAK,KAAA,CAAM,IAAI,YAAY,CAAA;AAC3B,MAAAH,4BAAA,CAAa;AAAA,QACX,OAAA,EAAS,OAAA;AAAA,QACT,SAAA,EAAW,OAAA;AAAA,QACX,UAAA,EAAY,SAAA;AAAA,QACZ,MAAA,EAAQ,iBAAA;AAAA,QACR,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,QACpB,MAAA,EAAQ,EAAE,IAAA,EAAM,YAAA,EAAc,OAAO,iBAAA,EAAkB;AAAA,QACvD,IAAA,EAAM,EAAE,YAAA;AAAa,OACtB,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAI,QAAA,IAAY,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,yBAAA,EAA2B;AACvE,MAAA,MAAM,YAAA,GAAe,MAAA,CAAQ,OAAA,CAAQ,MAAA,EAAmD,gBAAgB,MAAM,CAAA;AAC9G,MAAA,IAAA,CAAK,KAAA,CAAM,OAAO,YAAY,CAAA;AAC9B,MAAA,IAAI,IAAA,CAAK,KAAA,CAAM,IAAA,KAAS,CAAA,EAAG;AACzB,QAAAA,4BAAA,CAAa;AAAA,UACX,OAAA,EAAS,OAAA;AAAA,UACT,SAAA,EAAW,OAAA;AAAA,UACX,UAAA,EAAY,SAAA;AAAA,UACZ,MAAA,EAAQ,oBAAA;AAAA,UACR,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,UACpB,MAAA,EAAQ,EAAE,IAAA,EAAM,YAAA,EAAc,OAAO,oBAAA,EAAqB;AAAA,UAC1D,IAAA,EAAM,EAAE,YAAA;AAAa,SACtB,CAAA;AAAA,MACH;AACA,MAAA;AAAA,IACF;AACA,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAAA,EACzC;AAAA,EAEQ,SAAS,KAAA,EAAyB;AACxC,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,SAAA,EAAW,CAAA,CAAE,KAAK,CAAA;AAAA,EACzC;AACF;AAIO,SAAS,cAAA,CAAe,QAAwB,OAAA,EAA6C;AAClG,EAAA,MAAM,SAAA,GAAY,IAAI,iBAAA,CAAkB,OAAO,CAAA;AAC/C,EAAA,SAAA,CAAU,WAAW,MAAM,CAAA;AAC3B,EAAA,MAAA,CAAO,OAAO,SAAS,CAAA;AACvB,EAAA,SAAA,CAAU,KAAA,EAAM;AAMhB,EAAA,OAAA,CAAA,OAAA,EAAA,CAAA,IAAA,CAAA,OAAA,aAAA,EAAA,EAAA,gBAAA,CAAA,CAAA,CAA+B,IAAA,CAAK,CAAC,EAAE,UAAA,EAAAC,aAAW,KAAM;AACtD,IAAA,MAAM,GAAA,GAAMA,WAAAA,CAAW,CAAC,KAAA,KAAU;AAChC,MAAA,SAAA,CAAU,IAAA,CAAK;AAAA,QACb,OAAA,EAAS,KAAA;AAAA,QACT,MAAA,EAAQ,8BAAA;AAAA,QACR,MAAA,EAAQ;AAAA,OACT,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,MAAM,SAAA,GAAY,SAAA,CAAU,KAAA,CAAM,IAAA,CAAK,SAAS,CAAA;AAChD,IAAA,SAAA,CAAU,QAAQ,MAAM;AACtB,MAAA,GAAA,EAAI;AACJ,MAAA,SAAA,EAAU;AAAA,IACZ,CAAA;AAAA,EACF,CAAC,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,EAEf,CAAC,CAAA;AAED,EAAA,OAAO,SAAA;AACT","file":"sharing.cjs","sourcesContent":["/**\n * In-process registry of activity events. Now backed by the shared bus in\n * `@particle-academy/fancy-auto-common`, so agent activity (here) and flow\n * activity (fancy-flow's FlowRunnerUx) land in ONE stream — presence layers\n * render both. Re-exported under the same names for back-compat.\n */\nexport {\n  emitActivity,\n  onActivity,\n  readActivityHistory,\n  resetActivityRegistry,\n} from \"@particle-academy/fancy-auto-common\";\n","/**\n * Session-token utilities. The token is a high-entropy secret; possession\n * grants read/write on the session. We don't HMAC frames — frames carry\n * the token directly (which is fine for in-process / same-origin / TLS\n * transports). For lower-trust transports, host apps can layer signing\n * on top of the BroadcastChannelTransport.\n */\n\nconst TOKEN_BYTES = 24; // 192 bits, base64url-encoded → 32 chars\n\nexport type SessionDescriptor = {\n  /** Stable session identifier. Channel name = `fai:share:${id}`. */\n  id: string;\n  /** Secret token. Treat as a password — anyone with it can read/write. */\n  token: string;\n  /** Pretty hash for display (first 8 chars of token). */\n  display: string;\n};\n\nexport function createSessionDescriptor(): SessionDescriptor {\n  const id = randomId(8);\n  const token = randomToken();\n  return { id, token, display: token.slice(0, 8) };\n}\n\nexport function describeSession(id: string, token: string): SessionDescriptor {\n  return { id, token, display: token.slice(0, 8) };\n}\n\n/** Build the shareable URL for the current page (preserves path, adds session+token). */\nexport function buildShareUrl(\n  descriptor: SessionDescriptor,\n  baseUrl: string = typeof window !== \"undefined\" ? window.location.href.split(\"?\")[0] : \"\",\n): string {\n  const u = new URL(baseUrl);\n  u.searchParams.set(\"session\", descriptor.id);\n  u.searchParams.set(\"token\", descriptor.token);\n  return u.toString();\n}\n\n/** Build the JSON config form (suitable for Claude Desktop / Cline / etc.). */\nexport function buildShareConfig(descriptor: SessionDescriptor, transport = \"broadcast-channel\") {\n  return {\n    name: `whiteboard-${descriptor.id}`,\n    transport,\n    session: descriptor.id,\n    token: descriptor.token,\n    channel: `fai:share:${descriptor.id}`,\n    protocol_version: \"2025-06-18\",\n  };\n}\n\n/** Read session descriptor from current URL, or null if not a shared link. */\nexport function readSessionFromUrl(): SessionDescriptor | null {\n  if (typeof window === \"undefined\") return null;\n  const params = new URL(window.location.href).searchParams;\n  const id = params.get(\"session\");\n  const token = params.get(\"token\");\n  if (!id || !token) return null;\n  return describeSession(id, token);\n}\n\nfunction randomToken(): string {\n  const bytes = new Uint8Array(TOKEN_BYTES);\n  crypto.getRandomValues(bytes);\n  return base64Url(bytes);\n}\n\nfunction randomId(len: number): string {\n  const bytes = new Uint8Array(Math.ceil((len * 3) / 4));\n  crypto.getRandomValues(bytes);\n  return base64Url(bytes).slice(0, len);\n}\n\nfunction base64Url(bytes: Uint8Array): string {\n  let s = \"\";\n  for (const b of bytes) s += String.fromCharCode(b);\n  return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n/** Constant-time string compare so a mismatched token leaks no timing info. */\nexport function constantTimeEqual(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n  return diff === 0;\n}\n","import type { JsonRpcMessage } from \"../mcp/types\";\nimport type { Transport } from \"../mcp/server\";\nimport type { MicroMcpServer } from \"../mcp/server\";\nimport type { RelayChannelHandle } from \"@particle-academy/fancy-cf-relay\";\nimport { constantTimeEqual } from \"./token\";\nimport { emitActivity } from \"../presence/registry\";\n\n/**\n * SseRelayTransport — bridges the in-page MicroMcpServer to a host-app\n * relay broker over Server-Sent Events (inbound) + POST (outbound).\n *\n * Wire model:\n *   - Browser opens an EventSource at `${baseUrl}/${sessionId}/events?token=…`.\n *     Each `event: mcp` carries one JSON-RPC frame from a remote client.\n *   - Browser POSTs JSON-RPC frames to `${baseUrl}/${sessionId}/outbox?token=…`\n *     when the local server has a response/notification to send.\n *\n * The host provides the relay endpoint (any HTTP server). See the demo\n * `WhiteboardShareController` for the reference implementation.\n *\n * Token authentication is the host's job — this transport just carries the\n * token in the query string. For lower-trust deployments, layer signing on\n * top by wrapping `send` / `deliverFromRemote`.\n */\nexport type SseRelayOptions = {\n  baseUrl: string;\n  sessionId: string;\n  token: string;\n  /** Override fetch (testing / non-browser). Defaults to global fetch. */\n  fetch?: typeof fetch;\n};\n\nexport class SseRelayTransport implements Transport {\n  private server?: MicroMcpServer;\n  private es?: EventSource;\n  private channel?: RelayChannelHandle;\n  private disposed = false;\n  private opts: SseRelayOptions;\n  private sendQueue: JsonRpcMessage[] = [];\n  private connected = false;\n  private listeners = new Set<(state: RelayState) => void>();\n  private state: RelayState = \"idle\";\n  private expectedToken: string;\n  private peers = new Set<string>();\n\n  constructor(options: SseRelayOptions) {\n    this.opts = options;\n    this.expectedToken = options.token;\n  }\n\n  bindServer(server: MicroMcpServer): void {\n    this.server = server;\n  }\n\n  /** Open the receive channel. Idempotent. */\n  start(): void {\n    if (this.connected || this.disposed || typeof window === \"undefined\") return;\n    this.setState(\"connecting\");\n    // Prefer @particle-academy/fancy-cf-relay's adaptive channel (auto SSE↔\n    // long-poll with Cloudflare detection) so the receive leg survives a\n    // Cloudflare HTTP/3 (QUIC) edge that resets long-lived SSE streams. It's an\n    // OPTIONAL peer: if it isn't installed, fall back to a plain EventSource.\n    void import(\"@particle-academy/fancy-cf-relay\")\n      .then(({ createRelayChannel }) => {\n        if (this.connected || this.disposed) return;\n        this.channel = createRelayChannel({\n          baseUrl: this.opts.baseUrl,\n          session: this.opts.sessionId,\n          token: this.opts.token,\n          transport: \"auto\",\n          receiveDirection: \"inbound\",\n          sendPath: \"outbox\",\n          onFrame: (raw) => this.handleInbound(raw),\n          onOpen: () => this.markOpen(),\n          onError: () => this.setState(\"error\"),\n          fetchImpl: this.opts.fetch,\n        });\n        this.channel.start();\n      })\n      .catch(() => {\n        if (!this.disposed) this.startSse();\n      });\n  }\n\n  /** Fallback receive leg: a plain EventSource (no fancy-cf-relay installed). */\n  private startSse(): void {\n    if (this.connected || this.disposed) return;\n    const url = `${this.opts.baseUrl}/${encodeURIComponent(this.opts.sessionId)}/events?token=${encodeURIComponent(this.opts.token)}`;\n    const es = new EventSource(url, { withCredentials: false });\n    this.es = es;\n    es.addEventListener(\"open\", () => this.markOpen());\n    es.addEventListener(\"mcp\", (ev: MessageEvent) => this.handleInbound(ev.data));\n    es.addEventListener(\"error\", () => this.setState(\"error\")); // EventSource auto-reconnects\n  }\n\n  /** Mark the channel live + flush any queued outbound frames. */\n  private markOpen(): void {\n    this.connected = true;\n    this.setState(\"open\");\n    const queued = this.sendQueue.splice(0);\n    for (const msg of queued) this.postOut(msg);\n  }\n\n  send(message: JsonRpcMessage): void {\n    if (!this.connected) {\n      this.sendQueue.push(message);\n      return;\n    }\n    this.postOut(message);\n  }\n\n  close(): void {\n    this.disposed = true;\n    this.channel?.stop();\n    this.channel = undefined;\n    this.es?.close();\n    this.es = undefined;\n    this.connected = false;\n    this.setState(\"closed\");\n  }\n\n  onStateChange(listener: (state: RelayState) => void): () => void {\n    this.listeners.add(listener);\n    listener(this.state);\n    return () => this.listeners.delete(listener);\n  }\n\n  /**\n   * For relays that wrap each frame with auth metadata: hosts can call this\n   * directly when a frame arrives via a non-SSE path. The transport will\n   * dispatch it to the bound server.\n   */\n  async deliverFromRemote(payload: JsonRpcMessage | string, token?: string): Promise<void> {\n    if (token !== undefined && !constantTimeEqual(token, this.expectedToken)) return;\n    if (!this.server) throw new Error(\"SseRelayTransport has no bound server\");\n    const message: JsonRpcMessage = typeof payload === \"string\" ? JSON.parse(payload) : payload;\n    await this.server.receive(this, message);\n  }\n\n  private async postOut(message: JsonRpcMessage): Promise<void> {\n    const url = `${this.opts.baseUrl}/${encodeURIComponent(this.opts.sessionId)}/outbox?token=${encodeURIComponent(this.opts.token)}`;\n    const f = this.opts.fetch ?? fetch;\n    try {\n      await f(url, {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\", \"accept\": \"application/json\" },\n        body: JSON.stringify(message),\n      });\n    } catch {\n      // Drop — relay errors are surfaced via state change separately.\n    }\n  }\n\n  private async handleInbound(raw: string): Promise<void> {\n    if (!this.server) return;\n    let message: JsonRpcMessage;\n    try {\n      message = JSON.parse(raw);\n    } catch {\n      return;\n    }\n    if (\"method\" in message && message.method === \"notifications/peer_joined\") {\n      const subscriberId = String((message.params as { subscriberId?: unknown } | undefined)?.subscriberId ?? \"peer\");\n      this.peers.add(subscriberId);\n      emitActivity({\n        agentId: \"agent\",\n        agentName: \"Agent\",\n        agentColor: \"#a855f7\",\n        action: \"agent_connected\",\n        timestamp: Date.now(),\n        target: { kind: \"navigation\", label: \"Agent connected\" },\n        meta: { subscriberId },\n      });\n      return;\n    }\n    if (\"method\" in message && message.method === \"notifications/peer_left\") {\n      const subscriberId = String((message.params as { subscriberId?: unknown } | undefined)?.subscriberId ?? \"peer\");\n      this.peers.delete(subscriberId);\n      if (this.peers.size === 0) {\n        emitActivity({\n          agentId: \"agent\",\n          agentName: \"Agent\",\n          agentColor: \"#a855f7\",\n          action: \"agent_disconnected\",\n          timestamp: Date.now(),\n          target: { kind: \"navigation\", label: \"Agent disconnected\" },\n          meta: { subscriberId },\n        });\n      }\n      return;\n    }\n    await this.server.receive(this, message);\n  }\n\n  private setState(state: RelayState): void {\n    this.state = state;\n    for (const l of this.listeners) l(state);\n  }\n}\n\nexport type RelayState = \"idle\" | \"connecting\" | \"open\" | \"closed\" | \"error\";\n\nexport function attachSseRelay(server: MicroMcpServer, options: SseRelayOptions): SseRelayTransport {\n  const transport = new SseRelayTransport(options);\n  transport.bindServer(server);\n  server.attach(transport);\n  transport.start();\n\n  // Forward in-process agent activity events out over the relay so external\n  // subscribers can render presence indicators in real time. Uses a dynamic\n  // import so the relay doesn't hard-depend on the presence module if it's\n  // tree-shaken out.\n  import(\"../presence/registry\").then(({ onActivity }) => {\n    const off = onActivity((event) => {\n      transport.send({\n        jsonrpc: \"2.0\",\n        method: \"notifications/agent_activity\",\n        params: event as any,\n      });\n    });\n    // Tear down the subscription when the transport closes.\n    const origClose = transport.close.bind(transport);\n    transport.close = () => {\n      off();\n      origClose();\n    };\n  }).catch(() => {\n    // Presence module unavailable — silently no-op (relay still works).\n  });\n\n  return transport;\n}\n"]}
+{"version":3,"sources":["../src/presence/registry.ts","../src/sharing/token.ts","../src/sharing/sse-relay.ts"],"names":["emitActivity","onActivity","readActivityHistory","resetActivityRegistry"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,IAAA,gBAAA,GAAA,EAAA;AAAA,QAAA,CAAA,gBAAA,EAAA;AAAA,EAAA,YAAA,EAAA,MAAAA,4BAAA;AAAA,EAAA,UAAA,EAAA,MAAAC,0BAAA;AAAA,EAAA,mBAAA,EAAA,MAAAC,mCAAA;AAAA,EAAA,qBAAA,EAAA,MAAAC;AAAA,CAAA,CAAA;AAAA,IAAA,aAAA,GAAA,KAAA,CAAA;AAAA,EAAA,0BAAA,GAAA;AAAA,EAAA;AAAA,CAAA,CAAA;;;ACQA,IAAM,WAAA,GAAc,EAAA;AAWb,SAAS,uBAAA,GAA6C;AAC3D,EAAA,MAAM,EAAA,GAAK,SAAS,CAAC,CAAA;AACrB,EAAA,MAAM,QAAQ,WAAA,EAAY;AAC1B,EAAA,OAAO,EAAE,IAAI,KAAA,EAAO,OAAA,EAAS,MAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,EAAE;AACjD;AAEO,SAAS,eAAA,CAAgB,IAAY,KAAA,EAAkC;AAC5E,EAAA,OAAO,EAAE,IAAI,KAAA,EAAO,OAAA,EAAS,MAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,EAAE;AACjD;AAYO,SAAS,aAAA,CACd,UAAA,EACA,OAAA,GAAkB,OAAO,WAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,IAAI,EAAA,EAC/E;AACR,EAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,OAAO,CAAA;AACzB,EAAA,CAAA,CAAE,IAAA,GAAO,IAAI,eAAA,CAAgB,EAAE,OAAA,EAAS,UAAA,CAAW,EAAA,EAAI,KAAA,EAAO,UAAA,CAAW,KAAA,EAAO,CAAA,CAAE,QAAA,EAAS;AAC3F,EAAA,OAAO,EAAE,QAAA,EAAS;AACpB;AAGO,SAAS,gBAAA,CAAiB,UAAA,EAA+B,SAAA,GAAY,mBAAA,EAAqB;AAC/F,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,WAAA,EAAc,UAAA,CAAW,EAAE,CAAA,CAAA;AAAA,IACjC,SAAA;AAAA,IACA,SAAS,UAAA,CAAW,EAAA;AAAA,IACpB,OAAO,UAAA,CAAW,KAAA;AAAA,IAClB,OAAA,EAAS,CAAA,UAAA,EAAa,UAAA,CAAW,EAAE,CAAA,CAAA;AAAA,IACnC,gBAAA,EAAkB;AAAA,GACpB;AACF;AAOO,SAAS,kBAAA,GAA+C;AAC7D,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,MAAA,CAAO,SAAS,IAAI,CAAA;AACxC,EAAA,MAAM,IAAA,GAAO,IAAI,eAAA,CAAgB,GAAA,CAAI,KAAK,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAC,CAAA;AAC3D,EAAA,MAAM,EAAA,GAAK,KAAK,GAAA,CAAI,SAAS,KAAK,GAAA,CAAI,YAAA,CAAa,IAAI,SAAS,CAAA;AAChE,EAAA,MAAM,KAAA,GAAQ,KAAK,GAAA,CAAI,OAAO,KAAK,GAAA,CAAI,YAAA,CAAa,IAAI,OAAO,CAAA;AAC/D,EAAA,IAAI,CAAC,EAAA,IAAM,CAAC,KAAA,EAAO,OAAO,IAAA;AAC1B,EAAA,OAAO,eAAA,CAAgB,IAAI,KAAK,CAAA;AAClC;AAEA,SAAS,WAAA,GAAsB;AAC7B,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,WAAW,CAAA;AACxC,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,UAAU,KAAK,CAAA;AACxB;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,IAAA,CAAK,KAAM,GAAA,GAAM,CAAA,GAAK,CAAC,CAAC,CAAA;AACrD,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,SAAA,CAAU,KAAK,CAAA,CAAE,KAAA,CAAM,GAAG,GAAG,CAAA;AACtC;AAEA,SAAS,UAAU,KAAA,EAA2B;AAC5C,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,MAAW,CAAA,IAAK,KAAA,EAAO,CAAA,IAAK,MAAA,CAAO,aAAa,CAAC,CAAA;AACjD,EAAA,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC1E;AAGO,SAAS,iBAAA,CAAkB,GAAW,CAAA,EAAoB;AAC/D,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,MAAA,EAAQ,CAAA,EAAA,EAAK,IAAA,IAAQ,CAAA,CAAE,UAAA,CAAW,CAAC,CAAA,GAAI,CAAA,CAAE,WAAW,CAAC,CAAA;AAC3E,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;;;AC9FA,aAAA,EAAA;AA2BO,IAAM,oBAAN,MAA6C;AAAA,EAalD,YAAY,OAAA,EAA0B;AATtC,IAAA,IAAA,CAAQ,QAAA,GAAW,KAAA;AAEnB,IAAA,IAAA,CAAQ,YAA8B,EAAC;AACvC,IAAA,IAAA,CAAQ,SAAA,GAAY,KAAA;AACpB,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAiC;AACzD,IAAA,IAAA,CAAQ,KAAA,GAAoB,MAAA;AAE5B,IAAA,IAAA,CAAQ,KAAA,uBAAY,GAAA,EAAY;AAG9B,IAAA,IAAA,CAAK,IAAA,GAAO,OAAA;AACZ,IAAA,IAAA,CAAK,gBAAgB,OAAA,CAAQ,KAAA;AAAA,EAC/B;AAAA,EAEA,WAAW,MAAA,EAA8B;AACvC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,IAAI,KAAK,SAAA,IAAa,IAAA,CAAK,QAAA,IAAY,OAAO,WAAW,WAAA,EAAa;AACtE,IAAA,IAAA,CAAK,SAAS,YAAY,CAAA;AAK1B,IAAA,KAAK,OAAO,kCAAkC,CAAA,CAC3C,KAAK,CAAC,EAAE,oBAAmB,KAAM;AAChC,MAAA,IAAI,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,QAAA,EAAU;AACrC,MAAA,IAAA,CAAK,UAAU,kBAAA,CAAmB;AAAA,QAChC,OAAA,EAAS,KAAK,IAAA,CAAK,OAAA;AAAA,QACnB,OAAA,EAAS,KAAK,IAAA,CAAK,SAAA;AAAA,QACnB,KAAA,EAAO,KAAK,IAAA,CAAK,KAAA;AAAA,QACjB,SAAA,EAAW,MAAA;AAAA,QACX,gBAAA,EAAkB,SAAA;AAAA,QAClB,QAAA,EAAU,QAAA;AAAA,QACV,OAAA,EAAS,CAAC,GAAA,KAAQ,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QACxC,MAAA,EAAQ,MAAM,IAAA,CAAK,QAAA,EAAS;AAAA,QAC5B,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,CAAS,OAAO,CAAA;AAAA,QACpC,SAAA,EAAW,KAAK,IAAA,CAAK;AAAA,OACtB,CAAA;AACD,MAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,IACrB,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AACX,MAAA,IAAI,CAAC,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS;AAAA,IACpC,CAAC,CAAA;AAAA,EACL;AAAA;AAAA,EAGQ,QAAA,GAAiB;AACvB,IAAA,IAAI,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,QAAA,EAAU;AACrC,IAAA,MAAM,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,OAAO,IAAI,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA,cAAA,EAAiB,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,KAAK,CAAC,CAAA,CAAA;AAC/H,IAAA,MAAM,KAAK,IAAI,WAAA,CAAY,KAAK,EAAE,eAAA,EAAiB,OAAO,CAAA;AAC1D,IAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AACV,IAAA,EAAA,CAAG,gBAAA,CAAiB,MAAA,EAAQ,MAAM,IAAA,CAAK,UAAU,CAAA;AACjD,IAAA,EAAA,CAAG,gBAAA,CAAiB,OAAO,CAAC,EAAA,KAAqB,KAAK,aAAA,CAAc,EAAA,CAAG,IAAI,CAAC,CAAA;AAC5E,IAAA,EAAA,CAAG,iBAAiB,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,CAAS,OAAO,CAAC,CAAA;AAAA,EAC3D;AAAA;AAAA,EAGQ,QAAA,GAAiB;AACvB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,IAAA,IAAA,CAAK,SAAS,MAAM,CAAA;AACpB,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,CAAC,CAAA;AACtC,IAAA,KAAA,MAAW,GAAA,IAAO,MAAA,EAAQ,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAAA,EAC5C;AAAA,EAEA,KAAK,OAAA,EAA+B;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,OAAO,CAAA;AAC3B,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,QAAQ,OAAO,CAAA;AAAA,EACtB;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAChB,IAAA,IAAA,CAAK,SAAS,IAAA,EAAK;AACnB,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AACf,IAAA,IAAA,CAAK,EAAA,GAAK,MAAA;AACV,IAAA,IAAA,CAAK,SAAA,GAAY,KAAA;AACjB,IAAA,IAAA,CAAK,SAAS,QAAQ,CAAA;AAAA,EACxB;AAAA,EAEA,cAAc,QAAA,EAAmD;AAC/D,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,QAAA,CAAS,KAAK,KAAK,CAAA;AACnB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAA,CAAkB,OAAA,EAAkC,KAAA,EAA+B;AACvF,IAAA,IAAI,UAAU,MAAA,IAAa,CAAC,kBAAkB,KAAA,EAAO,IAAA,CAAK,aAAa,CAAA,EAAG;AAC1E,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAI,MAAM,uCAAuC,CAAA;AACzE,IAAA,MAAM,UAA0B,OAAO,OAAA,KAAY,WAAW,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,GAAI,OAAA;AACpF,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAAA,EACzC;AAAA,EAEA,MAAc,QAAQ,OAAA,EAAwC;AAC5D,IAAA,MAAM,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,OAAO,IAAI,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA,cAAA,EAAiB,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,KAAK,CAAC,CAAA,CAAA;AAC/H,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,IAAA,CAAK,KAAA,IAAS,KAAA;AAC7B,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,GAAA,EAAK;AAAA,QACX,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,UAAU,kBAAA,EAAmB;AAAA,QAC5E,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,OAC7B,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,GAAA,EAA4B;AACtD,IAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAClB,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AACF,MAAA,OAAA,GAAU,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,IAC1B,CAAA,CAAA,MAAQ;AACN,MAAA;AAAA,IACF;AACA,IAAA,IAAI,QAAA,IAAY,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,2BAAA,EAA6B;AACzE,MAAA,MAAM,YAAA,GAAe,MAAA,CAAQ,OAAA,CAAQ,MAAA,EAAmD,gBAAgB,MAAM,CAAA;AAC9G,MAAA,IAAA,CAAK,KAAA,CAAM,IAAI,YAAY,CAAA;AAC3B,MAAAH,4BAAA,CAAa;AAAA,QACX,OAAA,EAAS,OAAA;AAAA,QACT,SAAA,EAAW,OAAA;AAAA,QACX,UAAA,EAAY,SAAA;AAAA,QACZ,MAAA,EAAQ,iBAAA;AAAA,QACR,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,QACpB,MAAA,EAAQ,EAAE,IAAA,EAAM,YAAA,EAAc,OAAO,iBAAA,EAAkB;AAAA,QACvD,IAAA,EAAM,EAAE,YAAA;AAAa,OACtB,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAI,QAAA,IAAY,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,yBAAA,EAA2B;AACvE,MAAA,MAAM,YAAA,GAAe,MAAA,CAAQ,OAAA,CAAQ,MAAA,EAAmD,gBAAgB,MAAM,CAAA;AAC9G,MAAA,IAAA,CAAK,KAAA,CAAM,OAAO,YAAY,CAAA;AAC9B,MAAA,IAAI,IAAA,CAAK,KAAA,CAAM,IAAA,KAAS,CAAA,EAAG;AACzB,QAAAA,4BAAA,CAAa;AAAA,UACX,OAAA,EAAS,OAAA;AAAA,UACT,SAAA,EAAW,OAAA;AAAA,UACX,UAAA,EAAY,SAAA;AAAA,UACZ,MAAA,EAAQ,oBAAA;AAAA,UACR,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,UACpB,MAAA,EAAQ,EAAE,IAAA,EAAM,YAAA,EAAc,OAAO,oBAAA,EAAqB;AAAA,UAC1D,IAAA,EAAM,EAAE,YAAA;AAAa,SACtB,CAAA;AAAA,MACH;AACA,MAAA;AAAA,IACF;AACA,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAAA,EACzC;AAAA,EAEQ,SAAS,KAAA,EAAyB;AACxC,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,SAAA,EAAW,CAAA,CAAE,KAAK,CAAA;AAAA,EACzC;AACF;AAIO,SAAS,cAAA,CAAe,QAAwB,OAAA,EAA6C;AAClG,EAAA,MAAM,SAAA,GAAY,IAAI,iBAAA,CAAkB,OAAO,CAAA;AAC/C,EAAA,SAAA,CAAU,WAAW,MAAM,CAAA;AAC3B,EAAA,MAAA,CAAO,OAAO,SAAS,CAAA;AACvB,EAAA,SAAA,CAAU,KAAA,EAAM;AAMhB,EAAA,OAAA,CAAA,OAAA,EAAA,CAAA,IAAA,CAAA,OAAA,aAAA,EAAA,EAAA,gBAAA,CAAA,CAAA,CAA+B,IAAA,CAAK,CAAC,EAAE,UAAA,EAAAC,aAAW,KAAM;AACtD,IAAA,MAAM,GAAA,GAAMA,WAAAA,CAAW,CAAC,KAAA,KAAU;AAChC,MAAA,SAAA,CAAU,IAAA,CAAK;AAAA,QACb,OAAA,EAAS,KAAA;AAAA,QACT,MAAA,EAAQ,8BAAA;AAAA,QACR,MAAA,EAAQ;AAAA,OACT,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,MAAM,SAAA,GAAY,SAAA,CAAU,KAAA,CAAM,IAAA,CAAK,SAAS,CAAA;AAChD,IAAA,SAAA,CAAU,QAAQ,MAAM;AACtB,MAAA,GAAA,EAAI;AACJ,MAAA,SAAA,EAAU;AAAA,IACZ,CAAA;AAAA,EACF,CAAC,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,EAEf,CAAC,CAAA;AAED,EAAA,OAAO,SAAA;AACT","file":"sharing.cjs","sourcesContent":["/**\n * In-process registry of activity events. Now backed by the shared bus in\n * `@particle-academy/fancy-auto-common`, so agent activity (here) and flow\n * activity (fancy-flow's FlowRunnerUx) land in ONE stream — presence layers\n * render both. Re-exported under the same names for back-compat.\n */\nexport {\n  emitActivity,\n  onActivity,\n  readActivityHistory,\n  resetActivityRegistry,\n} from \"@particle-academy/fancy-auto-common\";\n","/**\n * Session-token utilities. The token is a high-entropy secret; possession\n * grants read/write on the session. We don't HMAC frames — frames carry\n * the token directly (which is fine for in-process / same-origin / TLS\n * transports). For lower-trust transports, host apps can layer signing\n * on top of the BroadcastChannelTransport.\n */\n\nconst TOKEN_BYTES = 24; // 192 bits, base64url-encoded → 32 chars\n\nexport type SessionDescriptor = {\n  /** Stable session identifier. Channel name = `fai:share:${id}`. */\n  id: string;\n  /** Secret token. Treat as a password — anyone with it can read/write. */\n  token: string;\n  /** Pretty hash for display (first 8 chars of token). */\n  display: string;\n};\n\nexport function createSessionDescriptor(): SessionDescriptor {\n  const id = randomId(8);\n  const token = randomToken();\n  return { id, token, display: token.slice(0, 8) };\n}\n\nexport function describeSession(id: string, token: string): SessionDescriptor {\n  return { id, token, display: token.slice(0, 8) };\n}\n\n/**\n * Build the shareable URL for the current page (preserves path, adds\n * session+token in the URL FRAGMENT).\n *\n * The token goes in the `#fragment`, never the `?query`: a fragment is never\n * transmitted to the server, so it can't leak through access/proxy logs or the\n * `Referer` header sent to third-party assets on the page. The recipient reads\n * it back with {@link readSessionFromUrl}. (The on-wire relay leg still sends\n * `?token=` today — moving that off the query is the larger transport change.)\n */\nexport function buildShareUrl(\n  descriptor: SessionDescriptor,\n  baseUrl: string = typeof window !== \"undefined\" ? window.location.href.split(\"?\")[0] : \"\",\n): string {\n  const u = new URL(baseUrl);\n  u.hash = new URLSearchParams({ session: descriptor.id, token: descriptor.token }).toString();\n  return u.toString();\n}\n\n/** Build the JSON config form (suitable for Claude Desktop / Cline / etc.). */\nexport function buildShareConfig(descriptor: SessionDescriptor, transport = \"broadcast-channel\") {\n  return {\n    name: `whiteboard-${descriptor.id}`,\n    transport,\n    session: descriptor.id,\n    token: descriptor.token,\n    channel: `fai:share:${descriptor.id}`,\n    protocol_version: \"2025-06-18\",\n  };\n}\n\n/**\n * Read session descriptor from the current URL, or null if not a shared link.\n * Prefers the fragment (the non-leaking form {@link buildShareUrl} now emits),\n * falling back to the query string for links minted before that change.\n */\nexport function readSessionFromUrl(): SessionDescriptor | null {\n  if (typeof window === \"undefined\") return null;\n  const url = new URL(window.location.href);\n  const frag = new URLSearchParams(url.hash.replace(/^#/, \"\"));\n  const id = frag.get(\"session\") ?? url.searchParams.get(\"session\");\n  const token = frag.get(\"token\") ?? url.searchParams.get(\"token\");\n  if (!id || !token) return null;\n  return describeSession(id, token);\n}\n\nfunction randomToken(): string {\n  const bytes = new Uint8Array(TOKEN_BYTES);\n  crypto.getRandomValues(bytes);\n  return base64Url(bytes);\n}\n\nfunction randomId(len: number): string {\n  const bytes = new Uint8Array(Math.ceil((len * 3) / 4));\n  crypto.getRandomValues(bytes);\n  return base64Url(bytes).slice(0, len);\n}\n\nfunction base64Url(bytes: Uint8Array): string {\n  let s = \"\";\n  for (const b of bytes) s += String.fromCharCode(b);\n  return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n/** Constant-time string compare so a mismatched token leaks no timing info. */\nexport function constantTimeEqual(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n  return diff === 0;\n}\n","import type { JsonRpcMessage } from \"../mcp/types\";\nimport type { Transport } from \"../mcp/server\";\nimport type { MicroMcpServer } from \"../mcp/server\";\nimport type { RelayChannelHandle } from \"@particle-academy/fancy-cf-relay\";\nimport { constantTimeEqual } from \"./token\";\nimport { emitActivity } from \"../presence/registry\";\n\n/**\n * SseRelayTransport — bridges the in-page MicroMcpServer to a host-app\n * relay broker over Server-Sent Events (inbound) + POST (outbound).\n *\n * Wire model:\n *   - Browser opens an EventSource at `${baseUrl}/${sessionId}/events?token=…`.\n *     Each `event: mcp` carries one JSON-RPC frame from a remote client.\n *   - Browser POSTs JSON-RPC frames to `${baseUrl}/${sessionId}/outbox?token=…`\n *     when the local server has a response/notification to send.\n *\n * The host provides the relay endpoint (any HTTP server). See the demo\n * `WhiteboardShareController` for the reference implementation.\n *\n * Token authentication is the host's job — this transport just carries the\n * token in the query string. For lower-trust deployments, layer signing on\n * top by wrapping `send` / `deliverFromRemote`.\n */\nexport type SseRelayOptions = {\n  baseUrl: string;\n  sessionId: string;\n  token: string;\n  /** Override fetch (testing / non-browser). Defaults to global fetch. */\n  fetch?: typeof fetch;\n};\n\nexport class SseRelayTransport implements Transport {\n  private server?: MicroMcpServer;\n  private es?: EventSource;\n  private channel?: RelayChannelHandle;\n  private disposed = false;\n  private opts: SseRelayOptions;\n  private sendQueue: JsonRpcMessage[] = [];\n  private connected = false;\n  private listeners = new Set<(state: RelayState) => void>();\n  private state: RelayState = \"idle\";\n  private expectedToken: string;\n  private peers = new Set<string>();\n\n  constructor(options: SseRelayOptions) {\n    this.opts = options;\n    this.expectedToken = options.token;\n  }\n\n  bindServer(server: MicroMcpServer): void {\n    this.server = server;\n  }\n\n  /** Open the receive channel. Idempotent. */\n  start(): void {\n    if (this.connected || this.disposed || typeof window === \"undefined\") return;\n    this.setState(\"connecting\");\n    // Prefer @particle-academy/fancy-cf-relay's adaptive channel (auto SSE↔\n    // long-poll with Cloudflare detection) so the receive leg survives a\n    // Cloudflare HTTP/3 (QUIC) edge that resets long-lived SSE streams. It's an\n    // OPTIONAL peer: if it isn't installed, fall back to a plain EventSource.\n    void import(\"@particle-academy/fancy-cf-relay\")\n      .then(({ createRelayChannel }) => {\n        if (this.connected || this.disposed) return;\n        this.channel = createRelayChannel({\n          baseUrl: this.opts.baseUrl,\n          session: this.opts.sessionId,\n          token: this.opts.token,\n          transport: \"auto\",\n          receiveDirection: \"inbound\",\n          sendPath: \"outbox\",\n          onFrame: (raw) => this.handleInbound(raw),\n          onOpen: () => this.markOpen(),\n          onError: () => this.setState(\"error\"),\n          fetchImpl: this.opts.fetch,\n        });\n        this.channel.start();\n      })\n      .catch(() => {\n        if (!this.disposed) this.startSse();\n      });\n  }\n\n  /** Fallback receive leg: a plain EventSource (no fancy-cf-relay installed). */\n  private startSse(): void {\n    if (this.connected || this.disposed) return;\n    const url = `${this.opts.baseUrl}/${encodeURIComponent(this.opts.sessionId)}/events?token=${encodeURIComponent(this.opts.token)}`;\n    const es = new EventSource(url, { withCredentials: false });\n    this.es = es;\n    es.addEventListener(\"open\", () => this.markOpen());\n    es.addEventListener(\"mcp\", (ev: MessageEvent) => this.handleInbound(ev.data));\n    es.addEventListener(\"error\", () => this.setState(\"error\")); // EventSource auto-reconnects\n  }\n\n  /** Mark the channel live + flush any queued outbound frames. */\n  private markOpen(): void {\n    this.connected = true;\n    this.setState(\"open\");\n    const queued = this.sendQueue.splice(0);\n    for (const msg of queued) this.postOut(msg);\n  }\n\n  send(message: JsonRpcMessage): void {\n    if (!this.connected) {\n      this.sendQueue.push(message);\n      return;\n    }\n    this.postOut(message);\n  }\n\n  close(): void {\n    this.disposed = true;\n    this.channel?.stop();\n    this.channel = undefined;\n    this.es?.close();\n    this.es = undefined;\n    this.connected = false;\n    this.setState(\"closed\");\n  }\n\n  onStateChange(listener: (state: RelayState) => void): () => void {\n    this.listeners.add(listener);\n    listener(this.state);\n    return () => this.listeners.delete(listener);\n  }\n\n  /**\n   * For relays that wrap each frame with auth metadata: hosts can call this\n   * directly when a frame arrives via a non-SSE path. The transport will\n   * dispatch it to the bound server.\n   */\n  async deliverFromRemote(payload: JsonRpcMessage | string, token?: string): Promise<void> {\n    if (token !== undefined && !constantTimeEqual(token, this.expectedToken)) return;\n    if (!this.server) throw new Error(\"SseRelayTransport has no bound server\");\n    const message: JsonRpcMessage = typeof payload === \"string\" ? JSON.parse(payload) : payload;\n    await this.server.receive(this, message);\n  }\n\n  private async postOut(message: JsonRpcMessage): Promise<void> {\n    const url = `${this.opts.baseUrl}/${encodeURIComponent(this.opts.sessionId)}/outbox?token=${encodeURIComponent(this.opts.token)}`;\n    const f = this.opts.fetch ?? fetch;\n    try {\n      await f(url, {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\", \"accept\": \"application/json\" },\n        body: JSON.stringify(message),\n      });\n    } catch {\n      // Drop — relay errors are surfaced via state change separately.\n    }\n  }\n\n  private async handleInbound(raw: string): Promise<void> {\n    if (!this.server) return;\n    let message: JsonRpcMessage;\n    try {\n      message = JSON.parse(raw);\n    } catch {\n      return;\n    }\n    if (\"method\" in message && message.method === \"notifications/peer_joined\") {\n      const subscriberId = String((message.params as { subscriberId?: unknown } | undefined)?.subscriberId ?? \"peer\");\n      this.peers.add(subscriberId);\n      emitActivity({\n        agentId: \"agent\",\n        agentName: \"Agent\",\n        agentColor: \"#a855f7\",\n        action: \"agent_connected\",\n        timestamp: Date.now(),\n        target: { kind: \"navigation\", label: \"Agent connected\" },\n        meta: { subscriberId },\n      });\n      return;\n    }\n    if (\"method\" in message && message.method === \"notifications/peer_left\") {\n      const subscriberId = String((message.params as { subscriberId?: unknown } | undefined)?.subscriberId ?? \"peer\");\n      this.peers.delete(subscriberId);\n      if (this.peers.size === 0) {\n        emitActivity({\n          agentId: \"agent\",\n          agentName: \"Agent\",\n          agentColor: \"#a855f7\",\n          action: \"agent_disconnected\",\n          timestamp: Date.now(),\n          target: { kind: \"navigation\", label: \"Agent disconnected\" },\n          meta: { subscriberId },\n        });\n      }\n      return;\n    }\n    await this.server.receive(this, message);\n  }\n\n  private setState(state: RelayState): void {\n    this.state = state;\n    for (const l of this.listeners) l(state);\n  }\n}\n\nexport type RelayState = \"idle\" | \"connecting\" | \"open\" | \"closed\" | \"error\";\n\nexport function attachSseRelay(server: MicroMcpServer, options: SseRelayOptions): SseRelayTransport {\n  const transport = new SseRelayTransport(options);\n  transport.bindServer(server);\n  server.attach(transport);\n  transport.start();\n\n  // Forward in-process agent activity events out over the relay so external\n  // subscribers can render presence indicators in real time. Uses a dynamic\n  // import so the relay doesn't hard-depend on the presence module if it's\n  // tree-shaken out.\n  import(\"../presence/registry\").then(({ onActivity }) => {\n    const off = onActivity((event) => {\n      transport.send({\n        jsonrpc: \"2.0\",\n        method: \"notifications/agent_activity\",\n        params: event as any,\n      });\n    });\n    // Tear down the subscription when the transport closes.\n    const origClose = transport.close.bind(transport);\n    transport.close = () => {\n      off();\n      origClose();\n    };\n  }).catch(() => {\n    // Presence module unavailable — silently no-op (relay still works).\n  });\n\n  return transport;\n}\n"]}

package/dist/sharing.js

@@ -1,5 +1,5 @@
 import './chunk-IJ6JX5VC.js';
-export { SseRelayTransport, attachSseRelay, buildShareConfig, buildShareUrl, constantTimeEqual, createSessionDescriptor, describeSession, readSessionFromUrl } from './chunk-KMSRG5KH.js';
+export { SseRelayTransport, attachSseRelay, buildShareConfig, buildShareUrl, constantTimeEqual, createSessionDescriptor, describeSession, readSessionFromUrl } from './chunk-N6RLSLOF.js';
 import './chunk-C3TYI5TJ.js';
 //# sourceMappingURL=sharing.js.map
 //# sourceMappingURL=sharing.js.map

package/dist/{token-CrJF76oH.d.ts → token-BZ8doMam.d.cts}

@@ -15,7 +15,16 @@ type SessionDescriptor = {
 };
 declare function createSessionDescriptor(): SessionDescriptor;
 declare function describeSession(id: string, token: string): SessionDescriptor;
-/** Build the shareable URL for the current page (preserves path, adds session+token). */
+/**
+ * Build the shareable URL for the current page (preserves path, adds
+ * session+token in the URL FRAGMENT).
+ *
+ * The token goes in the `#fragment`, never the `?query`: a fragment is never
+ * transmitted to the server, so it can't leak through access/proxy logs or the
+ * `Referer` header sent to third-party assets on the page. The recipient reads
+ * it back with {@link readSessionFromUrl}. (The on-wire relay leg still sends
+ * `?token=` today — moving that off the query is the larger transport change.)
+ */
 declare function buildShareUrl(descriptor: SessionDescriptor, baseUrl?: string): string;
 /** Build the JSON config form (suitable for Claude Desktop / Cline / etc.). */
 declare function buildShareConfig(descriptor: SessionDescriptor, transport?: string): {
@@ -26,7 +35,11 @@ declare function buildShareConfig(descriptor: SessionDescriptor, transport?: str
     channel: string;
     protocol_version: string;
 };
-/** Read session descriptor from current URL, or null if not a shared link. */
+/**
+ * Read session descriptor from the current URL, or null if not a shared link.
+ * Prefers the fragment (the non-leaking form {@link buildShareUrl} now emits),
+ * falling back to the query string for links minted before that change.
+ */
 declare function readSessionFromUrl(): SessionDescriptor | null;
 /** Constant-time string compare so a mismatched token leaks no timing info. */
 declare function constantTimeEqual(a: string, b: string): boolean;

package/dist/{token-CrJF76oH.d.cts → token-BZ8doMam.d.ts}

@@ -15,7 +15,16 @@ type SessionDescriptor = {
 };
 declare function createSessionDescriptor(): SessionDescriptor;
 declare function describeSession(id: string, token: string): SessionDescriptor;
-/** Build the shareable URL for the current page (preserves path, adds session+token). */
+/**
+ * Build the shareable URL for the current page (preserves path, adds
+ * session+token in the URL FRAGMENT).
+ *
+ * The token goes in the `#fragment`, never the `?query`: a fragment is never
+ * transmitted to the server, so it can't leak through access/proxy logs or the
+ * `Referer` header sent to third-party assets on the page. The recipient reads
+ * it back with {@link readSessionFromUrl}. (The on-wire relay leg still sends
+ * `?token=` today — moving that off the query is the larger transport change.)
+ */
 declare function buildShareUrl(descriptor: SessionDescriptor, baseUrl?: string): string;
 /** Build the JSON config form (suitable for Claude Desktop / Cline / etc.). */
 declare function buildShareConfig(descriptor: SessionDescriptor, transport?: string): {
@@ -26,7 +35,11 @@ declare function buildShareConfig(descriptor: SessionDescriptor, transport?: str
     channel: string;
     protocol_version: string;
 };
-/** Read session descriptor from current URL, or null if not a shared link. */
+/**
+ * Read session descriptor from the current URL, or null if not a shared link.
+ * Prefers the fragment (the non-leaking form {@link buildShareUrl} now emits),
+ * falling back to the query string for links minted before that change.
+ */
 declare function readSessionFromUrl(): SessionDescriptor | null;
 /** Constant-time string compare so a mismatched token leaks no timing info. */
 declare function constantTimeEqual(a: string, b: string): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@particle-academy/agent-integrations",
-  "version": "0.29.0",
+  "version": "0.30.0",
   "description": "MCP-driven agent presence in collab sessions: per-session micro-MCP server, pluggable bridges to fancy-* packages, and agent UX components (panel + on-canvas cursor).",
   "repository": {
     "type": "git",

package/dist/chunk-KKGC4ERF.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/bridges/terminal.ts"],"names":[],"mappings":";;;;;AA2FA,IAAM,gBAAgB,EAAE,EAAA,EAAI,SAAS,IAAA,EAAM,OAAA,EAAS,OAAO,SAAA,EAAU;AAErE,IAAM,QAAA,GAAW,CAAC,CAAA,EAAW,CAAA,GAAI,EAAA,KAAgB,CAAA,CAAE,MAAA,GAAS,CAAA,GAAI,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,CAAC,IAAI,QAAA,GAAM,CAAA;AAiB/E,SAAS,sBAAA,CAAuB,MAAgB,OAAA,EAAgD;AACrG,EAAA,MAAM,KAAA,GAAQ,EAAE,GAAG,aAAA,EAAe,GAAI,OAAA,CAAQ,KAAA,IAAS,EAAC,EAAG;AAC3D,EAAA,MAAM,WAAA,GAAc,QAAQ,WAAA,IAAe,KAAA;AAC3C,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,QAAA,IAAY,OAAA,CAAQ,OAAA,EAAS,QAAA;AACtD,EAAA,MAAM,YAA+B,EAAC;AACtC,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAoB;AACvC,EAAA,IAAI,GAAA,GAAM,CAAA;AAGV,EAAA,yBAAA,CAA0B,IAAI,CAAA;AAI9B,EAAA,MAAM,gBAAgB,MAAqB;AACzC,IAAA,IAAI,OAAA,CAAQ,SAAA,EAAW,OAAO,OAAA,CAAQ,SAAA,EAAU;AAChD,IAAA,IAAI,OAAA,CAAQ,OAAA,EAAS,OAAO,CAAC,EAAE,EAAA,EAAI,UAAA,EAAY,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,IAAA,EAAM,GAAG,OAAA,CAAQ,SAAS,CAAA;AACpG,IAAA,OAAO,EAAC;AAAA,EACV,CAAA;AAGA,EAAA,MAAM,OAAA,GAAU,CAAC,EAAA,KAA0C;AACzD,IAAA,MAAM,OAAO,aAAA,EAAc;AAC3B,IAAA,IAAI,OAAO,EAAA,KAAO,QAAA,IAAY,EAAA,KAAO,EAAA,EAAI,OAAO,IAAA,CAAK,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,EAAE,CAAA;AAC5E,IAAA,OAAO,IAAA,CAAK,KAAK,CAAC,CAAA,KAAM,EAAE,MAAM,CAAA,IAAK,KAAK,CAAC,CAAA;AAAA,EAC7C,CAAA;AAIA,EAAA,MAAM,QAAA,GAAW,CAAC,CAAC,OAAA,CAAQ,SAAA;AAC3B,EAAA,MAAM,QAAA,GAAW,QAAA,IAAY,CAAC,CAAC,QAAQ,OAAA,EAAS,KAAA;AAChD,EAAA,MAAM,SAAA,GAAY,QAAA,IAAY,CAAC,CAAC,QAAQ,OAAA,EAAS,UAAA;AACjD,EAAA,MAAM,WAAA,GAAc,QAAA,IAAY,CAAC,CAAC,QAAQ,OAAA,EAAS,QAAA;AAEnD,EAAA,MAAM,MAAA,GAAS,CAAC,KAAA,EAAgB,UAAA,MAAsC;AAAA,IACpE,IAAA,EAAM,UAAA;AAAA,IACN,QAAA;AAAA,IACA,SAAA,EAAW,cAAc,QAAA,IAAY,UAAA;AAAA,IACrC,OAAO,KAAA,IAAS;AAAA,GAClB,CAAA;AAEA,EAAA,MAAM,YAAA,GAAe;AAAA,IACnB,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,QAAA;AAAA,MACN,WAAA,EAAa;AAAA;AACf,GACF;AAEA,EAAA,MAAM,GAAA,GAAM,CACV,IAAA,EACA,WAAA,EACA,YACA,QAAA,EACA,OAAA,EACA,YACA,aAAA,KACG;AACH,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,KAAqB;AAC1C,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,QAAQ,IAAI,CAAA;AAAA,MAC3B,SAAS,CAAA,EAAG;AACV,QAAA,OAAO,YAAY,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAC/D;AAAA,IACF,CAAA;AACA,IAAA,MAAM,KAAA,GAAQ,UAAA,GACV,oBAAA,CAAqB,OAAA,EAAS;AAAA,MAC5B,QAAA,EAAU,IAAA;AAAA,MACV,KAAA;AAAA,MACA,IAAA,EAAM,UAAA;AAAA,MACN,QAAA;AAAA,MACA,aAAA,EAAe,CAAC,EAAE,IAAA,EAAM,MAAA,OAAa,aAAA,GAAgB,IAAA,EAAM,MAAM,CAAA,IAAK,MAAA;AAAO,KAC9E,CAAA,GACD,OAAA;AACJ,IAAA,SAAA,CAAU,IAAA;AAAA,MACR,IAAA,CAAK,YAAA;AAAA,QACH;AAAA,UACE,IAAA;AAAA,UACA,WAAA;AAAA,UACA,aAAa,EAAE,IAAA,EAAM,UAAU,UAAA,EAA+B,QAAA,EAAU,sBAAsB,KAAA;AAAM,SACtG;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF,CAAA;AAGA,EAAA,MAAM,IAAA,GAAO,CAAC,IAAA,KAAkC;AAC9C,IAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA;AAC/B,IAAA,IAAI,CAAC,CAAA,EAAG;AACN,MAAA,MAAM,GAAA,GAAM,aAAA,EAAc,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,EAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA,IAAK,QAAA;AAC3D,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,OAAO,IAAA,CAAK,QAAA,KAAa,QAAA,IAAY,IAAA,CAAK,QAAA,GACtC,CAAA,kBAAA,EAAqB,IAAA,CAAK,QAAQ,CAAA,cAAA,EAAiB,GAAG,CAAA,oBAAA,CAAA,GACtD;AAAA,OACN;AAAA,IACF;AACA,IAAA,OAAO,CAAA;AAAA,EACT,CAAA;AAEA,EAAA,eAAe,IAAA,CAAK,CAAA,EAAgB,IAAA,EAAkB,IAAA,EAA6B;AACjF,IAAA,IAAI,SAAS,KAAA,EAAO;AAClB,MAAA,IAAI,CAAA,CAAE,UAAA,EAAY,MAAM,CAAA,CAAE,WAAW,IAAI,CAAA;AAAA,WACpC,CAAA,CAAE,KAAA,CAAM,IAAA,GAAO,IAAI,CAAA;AAAA,IAC1B,CAAA,MAAO;AACL,MAAA,CAAA,CAAE,MAAM,IAAI,CAAA;AAAA,IACd;AAAA,EACF;AAEA,EAAA,eAAe,WAAA,CAAY,CAAA,EAAgB,IAAA,EAAkB,IAAA,EAAc;AACzE,IAAA,IAAI,CAAC,WAAA,EAAa;AAChB,MAAA,MAAM,IAAA,CAAK,CAAA,EAAG,IAAA,EAAM,IAAI,CAAA;AACxB,MAAA,OAAO,UAAA,CAAW,CAAA,EAAG,IAAA,KAAS,KAAA,GAAQ,KAAA,GAAQ,OAAO,CAAA,IAAA,EAAO,CAAA,CAAE,EAAE,CAAA,EAAA,EAAK,QAAA,CAAS,IAAI,CAAC,CAAA,CAAA,EAAI;AAAA,QACrF,IAAA;AAAA,QACA,IAAA;AAAA,QACA,UAAU,CAAA,CAAE,EAAA;AAAA,QACZ,QAAA,EAAU;AAAA,OACX,CAAA;AAAA,IACH;AACA,IAAA,MAAM,EAAA,GAAK,CAAA,CAAA,EAAI,EAAE,GAAG,CAAA,CAAA;AACpB,IAAA,MAAM,QAAgB,EAAE,EAAA,EAAI,MAAM,IAAA,EAAM,UAAA,EAAY,EAAE,EAAA,EAAG;AACzD,IAAA,MAAA,CAAO,GAAA,CAAI,IAAI,KAAK,CAAA;AACpB,IAAA,OAAA,CAAQ,YAAY,KAAK,CAAA;AACzB,IAAA,OAAO,UAAA;AAAA,MACL,CAAA,OAAA,EAAU,IAAI,CAAA,IAAA,EAAO,CAAA,CAAE,EAAE,QAAQ,EAAE,CAAA,sCAAA,EAAoC,QAAA,CAAS,IAAI,CAAC,CAAA,CAAA;AAAA,MACrF,EAAE,GAAG,KAAA,EAAO,OAAA,EAAS,IAAA;AAAK,KAC5B;AAAA,EACF;AAGA,EAAA,GAAA;AAAA,IACE,eAAA;AAAA,IACA,6LAAA;AAAA,IACA,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,MAAM,IAAA,GAAO,eAAc,CAAE,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,IAAI,CAAA,CAAE,EAAA,EAAI,OAAO,CAAA,CAAE,KAAA,IAAS,EAAE,EAAA,EAAI,MAAA,EAAQ,CAAC,CAAC,CAAA,CAAE,QAAO,CAAE,CAAA;AAClG,MAAA,MAAM,IAAA,GAAO,KAAK,MAAA,GACd,IAAA,CAAK,IAAI,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA,CAAE,MAAA,GAAS,IAAA,GAAO,IAAI,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,QAAA,EAAM,CAAA,CAAE,KAAK,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA,GAC1E,gBAAA;AACJ,MAAA,OAAO,UAAA,CAAW,IAAA,EAAM,EAAE,SAAA,EAAW,MAAM,CAAA;AAAA,IAC7C,CAAA;AAAA,IACA;AAAA,GACF;AAGA,EAAA,GAAA;AAAA,IACE,eAAA;AAAA,IACA,+IAAA;AAAA,IACA,EAAE,GAAG,YAAA,EAAc,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,WAAA,EAAa,+BAAA,EAAgC,EAAE;AAAA,IAC1F,EAAC;AAAA,IACD,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,CAAA,GAAI,KAAK,IAAI,CAAA;AACnB,MAAA,IAAI,GAAA,GAAM,EAAE,SAAA,EAAU;AACtB,MAAA,MAAM,OAAO,OAAO,IAAA,CAAK,IAAA,KAAS,QAAA,GAAW,KAAK,IAAA,GAAO,MAAA;AACzD,MAAA,IAAI,IAAA,IAAQ,IAAA,GAAO,CAAA,EAAG,GAAA,GAAM,GAAA,CAAI,KAAA,CAAM,IAAI,CAAA,CAAE,KAAA,CAAM,CAAC,IAAI,CAAA,CAAE,KAAK,IAAI,CAAA;AAClE,MAAA,OAAO,UAAA,CAAW,KAAK,EAAE,MAAA,EAAQ,KAAK,QAAA,EAAU,CAAA,CAAE,IAAI,CAAA;AAAA,IACxD,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,kBAAA;AAAA,IACA,4DAAA;AAAA,IACA,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,MAAM,IAAA,GAAO,CAAC,GAAG,MAAA,CAAO,QAAQ,CAAA;AAChC,MAAA,OAAO,UAAA;AAAA,QACL,IAAA,CAAK,MAAA,GAAS,IAAA,CAAK,GAAA,CAAI,CAAC,MAAM,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,EAAA,EAAK,CAAA,CAAE,IAAI,OAAO,CAAA,CAAE,UAAU,CAAA,CAAA,EAAI,QAAA,CAAS,CAAA,CAAE,IAAI,CAAC,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA,GAAI,QAAA;AAAA,QACxG,EAAE,SAAS,IAAA;AAAK,OAClB;AAAA,IACF,CAAA;AAAA,IACA;AAAA,GACF;AAGA,EAAA,GAAA;AAAA,IACE,gBAAA;AAAA,IACA,oKAAA;AAAA,IACA,EAAE,GAAG,YAAA,EAAc,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAU,WAAA,EAAa,qBAAA,EAAsB,EAAE;AAAA,IAChF,CAAC,MAAM,CAAA;AAAA,IACP,CAAC,IAAA,KAAS,WAAA,CAAY,IAAA,CAAK,IAAI,GAAG,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,IAC5D,IAAA;AAAA,IACA,CAAC,IAAA,KAAS,MAAA,CAAO,CAAA,MAAA,EAAS,OAAO,IAAA,CAAK,QAAA,IAAY,EAAE,CAAC,CAAA,CAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,GAAG,EAAE;AAAA,GACrF;AAEA,EAAA,GAAA;AAAA,IACE,cAAA;AAAA,IACA,uLAAA;AAAA,IACA,EAAE,GAAG,YAAA,EAAc,OAAA,EAAS,EAAE,IAAA,EAAM,QAAA,EAAU,WAAA,EAAa,0BAAA,EAA2B,EAAE;AAAA,IACxF,CAAC,SAAS,CAAA;AAAA,IACV,CAAC,IAAA,KAAS,WAAA,CAAY,IAAA,CAAK,IAAI,GAAG,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,IAC7D,IAAA;AAAA,IACA,CAAC,IAAA,KAAS,MAAA,CAAO,QAAA,CAAS,OAAO,IAAA,CAAK,OAAA,IAAW,EAAE,CAAC,CAAA,EAAG,OAAA,CAAQ,IAAA,CAAK,QAAQ,GAAG,EAAE;AAAA,GACnF;AAEA,EAAA,GAAA;AAAA,IACE,kBAAA;AAAA,IACA,yDAAA;AAAA,IACA,EAAE,EAAA,EAAI,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IACzB,CAAC,IAAI,CAAA;AAAA,IACL,OAAO,IAAA,KAAS;AACd,MAAA,MAAM,EAAA,GAAK,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AACzB,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,GAAA,CAAI,EAAE,CAAA;AAC3B,MAAA,IAAI,CAAC,KAAA,EAAO,OAAO,WAAA,CAAY,CAAA,kBAAA,EAAqB,EAAE,CAAA,CAAE,CAAA;AACxD,MAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,KAAA,CAAM,UAAU,CAAA;AAClC,MAAA,IAAI,CAAC,GAAG,OAAO,WAAA,CAAY,aAAa,KAAA,CAAM,UAAU,CAAA,4BAAA,EAA0B,EAAE,CAAA,CAAE,CAAA;AACtF,MAAA,MAAA,CAAO,OAAO,EAAE,CAAA;AAChB,MAAA,MAAM,IAAA,CAAK,CAAA,EAAG,KAAA,CAAM,IAAA,EAAM,MAAM,IAAI,CAAA;AACpC,MAAA,OAAO,UAAA,CAAW,aAAa,EAAE,CAAA,EAAA,EAAK,MAAM,IAAI,CAAA,IAAA,EAAO,EAAE,EAAE,CAAA,CAAA,EAAI,SAAS,KAAA,CAAM,IAAI,CAAC,CAAA,CAAA,EAAI,EAAE,GAAG,KAAA,EAAO,QAAA,EAAU,MAAM,CAAA;AAAA,IACrH,CAAA;AAAA,IACA,IAAA;AAAA,IACA,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,IAAI,MAAA,CAAO,GAAA,CAAI,MAAA,CAAO,IAAA,CAAK,EAAE,CAAC,CAAA;AACpC,MAAA,OAAO,MAAA,CAAO,WAAW,MAAA,CAAO,IAAA,CAAK,MAAM,EAAE,CAAC,CAAA,CAAA,EAAI,CAAA,EAAG,UAAU,CAAA;AAAA,IACjE;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,iBAAA;AAAA,IACA,mDAAA;AAAA,IACA,EAAE,EAAA,EAAI,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IACzB,CAAC,IAAI,CAAA;AAAA,IACL,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,EAAA,GAAK,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AACzB,MAAA,IAAI,CAAC,OAAO,MAAA,CAAO,EAAE,GAAG,OAAO,WAAA,CAAY,CAAA,kBAAA,EAAqB,EAAE,CAAA,CAAE,CAAA;AACpE,MAAA,OAAO,UAAA,CAAW,YAAY,EAAE,CAAA,CAAA,EAAI,EAAE,EAAA,EAAI,QAAA,EAAU,MAAM,CAAA;AAAA,IAC5D,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,GAAA;AAAA,MACE,gBAAA;AAAA,MACA,wEAAA;AAAA,MACA,EAAE,GAAG,YAAA,EAAa;AAAA,MAClB,EAAC;AAAA,MACD,CAAC,IAAA,KAAS;AACR,QAAA,MAAM,CAAA,GAAI,KAAK,IAAI,CAAA;AACnB,QAAA,IAAI,CAAC,EAAE,KAAA,EAAO,OAAO,YAAY,CAAA,UAAA,EAAa,CAAA,CAAE,EAAE,CAAA,mBAAA,CAAqB,CAAA;AACvE,QAAA,CAAA,CAAE,KAAA,EAAM;AACR,QAAA,OAAO,UAAA,CAAW,WAAW,CAAA,CAAE,EAAE,IAAI,EAAE,QAAA,EAAU,CAAA,CAAE,EAAA,EAAI,CAAA;AAAA,MACzD,CAAA;AAAA,MACA,IAAA;AAAA,MACA,CAAC,IAAA,KAAS,MAAA,CAAO,CAAA,MAAA,EAAS,OAAO,IAAA,CAAK,QAAA,IAAY,EAAE,CAAC,CAAA,CAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,GAAG,EAAE;AAAA,KACrF;AAAA,EACF;AAGA,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,GAAA;AAAA,MACE,sBAAA;AAAA,MACA,8JAAA;AAAA,MACA,EAAE,GAAG,YAAA,EAAa;AAAA,MAClB,EAAC;AAAA,MACD,CAAC,IAAA,KAAS;AACR,QAAA,MAAM,CAAA,GAAI,KAAK,IAAI,CAAA;AACnB,QAAA,IAAI,CAAC,EAAE,UAAA,EAAY,OAAO,YAAY,CAAA,UAAA,EAAa,CAAA,CAAE,EAAE,CAAA,2BAAA,CAA6B,CAAA;AACpF,QAAA,MAAM,MAAA,GAAS,EAAE,UAAA,EAAW;AAC5B,QAAA,MAAM,MAAA,GAAS,EAAE,QAAA,IAAW;AAC5B,QAAA,MAAM,IAAA,GAAO,OAAO,MAAA,GAChB,MAAA,CAAO,IAAI,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA,CAAE,EAAA,KAAO,MAAA,GAAS,OAAO,IAAI,CAAA,EAAG,CAAA,CAAE,EAAE,CAAA,QAAA,EAAM,CAAA,CAAE,KAAK,CAAA,CAAE,CAAA,CAAE,IAAA,CAAK,IAAI,CAAA,GACnF,QAAA;AACJ,QAAA,OAAO,UAAA,CAAW,MAAM,EAAE,MAAA,EAAQ,QAAQ,QAAA,EAAU,CAAA,CAAE,IAAI,CAAA;AAAA,MAC5D,CAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAEA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,GAAA;AAAA,MACE,oBAAA;AAAA,MACA,kKAAA;AAAA,MACA,EAAE,GAAG,YAAA,EAAc,EAAA,EAAI,EAAE,IAAA,EAAM,QAAA,EAAU,WAAA,EAAa,wBAAA,EAAyB,EAAE;AAAA,MACjF,CAAC,IAAI,CAAA;AAAA,MACL,OAAO,IAAA,KAAS;AACd,QAAA,MAAM,CAAA,GAAI,KAAK,IAAI,CAAA;AACnB,QAAA,IAAI,CAAC,EAAE,QAAA,EAAU,OAAO,YAAY,CAAA,UAAA,EAAa,CAAA,CAAE,EAAE,CAAA,sBAAA,CAAwB,CAAA;AAC7E,QAAA,MAAM,EAAA,GAAK,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AACzB,QAAA,MAAM,MAAA,GAAS,EAAE,UAAA,IAAa;AAC9B,QAAA,IAAI,MAAA,IAAU,MAAA,CAAO,MAAA,IAAU,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,EAAE,CAAA,EAAG;AAC/D,UAAA,OAAO,YAAY,CAAA,eAAA,EAAkB,EAAE,CAAA,MAAA,EAAS,CAAA,CAAE,EAAE,CAAA,yCAAA,CAA2C,CAAA;AAAA,QACjG;AACA,QAAA,MAAM,CAAA,CAAE,SAAS,EAAE,CAAA;AACnB,QAAA,OAAO,UAAA,CAAW,CAAA,SAAA,EAAY,CAAA,CAAE,EAAE,CAAA,UAAA,EAAa,EAAE,CAAA,CAAA,EAAI,EAAE,KAAA,EAAO,EAAA,EAAI,QAAA,EAAU,CAAA,CAAE,IAAI,CAAA;AAAA,MACpF,CAAA;AAAA,MACA,IAAA;AAAA,MACA,CAAC,IAAA,KAAS,MAAA,CAAO,CAAA,MAAA,EAAS,OAAO,IAAA,CAAK,EAAA,IAAM,EAAE,CAAC,CAAA,CAAA,EAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,GAAG,EAAE;AAAA,KAC/E;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,UAAA;AAAA,IACJ,KAAA,EAAO,UAAA;AAAA,IACP,SAAS,MAAM;AACb,MAAA,SAAA,CAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,EAAG,CAAA;AAC5B,MAAA,SAAA,CAAU,MAAA,GAAS,CAAA;AACnB,MAAA,MAAA,CAAO,KAAA,EAAM;AAAA,IACf,CAAA;AAAA,IACA,OAAA,EAAS,CAAC,EAAA,KAAe;AACvB,MAAA,MAAM,CAAA,GAAI,MAAA,CAAO,GAAA,CAAI,EAAE,CAAA;AACvB,MAAA,IAAI,CAAA,EAAG;AACL,QAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,CAAA,CAAE,UAAU,CAAA;AAC9B,QAAA,MAAA,CAAO,OAAO,EAAE,CAAA;AAChB,QAAA,IAAI,GAAG,KAAK,IAAA,CAAK,GAAG,CAAA,CAAE,IAAA,EAAM,EAAE,IAAI,CAAA;AAAA,MACpC;AAAA,IACF,CAAA;AAAA,IACA,MAAA,EAAQ,CAAC,EAAA,KAAe;AACtB,MAAA,MAAA,CAAO,OAAO,EAAE,CAAA;AAAA,IAClB,CAAA;AAAA,IACA,SAAS,MAAM,CAAC,GAAG,MAAA,CAAO,QAAQ;AAAA,GACpC;AACF","file":"chunk-KKGC4ERF.js","sourcesContent":["import { textResult, errorResult } from \"../mcp/server\";\nimport type { ToolHost } from \"../mcp/tool-host\";\nimport type { JsonObject } from \"../mcp/types\";\nimport type { Bridge } from \"./types\";\nimport { wrapToolWithActivity } from \"../presence/wrap-tool-with-activity\";\nimport { ensureUndoToolsRegistered } from \"../undo/undo-tools\";\nimport type { AgentTarget } from \"../presence/types\";\n\n/**\n * A shell/profile an agent can switch a terminal to. Mirrors fancy-term's\n * `ShellProfile` (kept local so the bridge never imports fancy-term).\n */\nexport type TerminalShell = { id: string; label: string; icon?: string };\n\n/**\n * One terminal the bridge can drive. A Human+ app often hosts **several**\n * terminals on a screen (a build pane, a server pane, an agent scratch shell);\n * each is a `TerminalRef` with a stable `id` so an agent can read/write any of\n * them — not just \"its own\". Wire the function fields to that terminal's\n * fancy-term `TerminalHandle`.\n */\nexport type TerminalRef = {\n  /** Stable id used to address this terminal (`terminal_list` enumerates them). */\n  id: string;\n  /** Human label, e.g. \"Build\", \"Server\". Defaults to the id. */\n  label?: string;\n  /** True for the focused terminal — the default target when no id is passed. */\n  active?: boolean;\n  /** Read the visible buffer as text (wire to `TerminalHandle.getBuffer`). */\n  getBuffer: () => string;\n  /** Write raw data / keystrokes (wire to `TerminalHandle.write`). */\n  write: (data: string) => void;\n  /** Run a command. Defaults to writing `${command}\\r`; override for a real runner. */\n  runCommand?: (command: string) => void | Promise<void>;\n  /** Clear the viewport (wire to `TerminalHandle.clear`). */\n  clear?: () => void;\n  /** Current text selection (wire to `TerminalHandle.getSelection`). */\n  getSelection?: () => string;\n  /** Shells this terminal offers (cmd, PowerShell, …). */\n  listShells?: () => TerminalShell[];\n  /** Switch this terminal's active shell by id. */\n  setShell?: (id: string) => void | Promise<void>;\n  /** This terminal's active shell id. */\n  getShell?: () => string | undefined;\n};\n\n/**\n * Single-terminal adapter (back-compat). A `TerminalRef` without the\n * `id`/`label`/`active` bookkeeping — pass it as `{ adapter }` and the bridge\n * treats it as the one (active) terminal. Use `{ terminals }` for multiple.\n */\nexport type TerminalBridgeAdapter = Omit<TerminalRef, \"id\" | \"label\" | \"active\"> & {\n  /** fancy-screens screen id (optional) so activity events know which screen the terminal lives in. */\n  screenId?: string;\n};\n\ntype StagedKind = \"write\" | \"run\";\ntype Staged = { id: string; kind: StagedKind; data: string; terminalId: string };\n\nexport type TerminalBridgeOptions = {\n  /** A single terminal (back-compat). Mutually exclusive with `terminals`. */\n  adapter?: TerminalBridgeAdapter;\n  /**\n   * The live list of terminals on the screen. Use this when the app hosts more\n   * than one terminal so an agent can `terminal_list` then target any of them by\n   * id — i.e. reach into another terminal in the same screen.\n   */\n  terminals?: () => TerminalRef[];\n  /** fancy-screens screen id for activity events (defaults to `adapter.screenId`). */\n  screenId?: string;\n  agent?: { id: string; name?: string; color?: string };\n  /**\n   * Trust-but-verify (Human+ contract for inhabited surfaces). When on,\n   * `terminal_write` + `terminal_run` don't execute — they **stage** the command\n   * (returning a pending id) and fire `onPending`. A human confirms via the\n   * `terminal_confirm` tool or the returned bridge's `confirm(id)`. Default off.\n   */\n  pendingMode?: boolean;\n  /** Notified when a command is staged (pendingMode) — show it + offer confirm / reject. */\n  onPending?: (pending: Staged) => void;\n};\n\nexport type TerminalBridge = Bridge & {\n  /** Execute a staged command by id — wire a host confirm button to this. No-op if not pending. */\n  confirm: (id: string) => void;\n  /** Drop a staged command by id without executing. */\n  reject: (id: string) => void;\n  /** Commands currently awaiting confirmation. */\n  pending: () => Staged[];\n};\n\nconst DEFAULT_AGENT = { id: \"agent\", name: \"Agent\", color: \"#a855f7\" };\n\nconst truncate = (s: string, n = 60): string => (s.length > n ? s.slice(0, n) + \"…\" : s);\n\n/**\n * registerTerminalBridge — MCP access to one **or many** terminal surfaces on a\n * screen. An agent reads the visible buffer (`terminal_read`), writes input\n * (`terminal_write`), and runs commands (`terminal_run`) through the host; every\n * mutation broadcasts an `AgentActivity` event. With `pendingMode`, destructive\n * actions are staged for human confirmation (`terminal_confirm` / `terminal_reject`\n * / `terminal_pending`).\n *\n * **Multi-terminal:** pass `{ terminals }` (vs a single `{ adapter }`) and every\n * tool takes an optional `terminal` id; `terminal_list` enumerates them. This is\n * how an agent **reaches into another terminal in the same screen** rather than\n * being stuck in one. When a terminal offers shells, the agent can also list\n * (`terminal_list_shells`) and switch (`terminal_set_shell`) its shell. Tool\n * prefix `terminal_*`.\n */\nexport function registerTerminalBridge(host: ToolHost, options: TerminalBridgeOptions): TerminalBridge {\n  const agent = { ...DEFAULT_AGENT, ...(options.agent ?? {}) };\n  const pendingMode = options.pendingMode ?? false;\n  const screenId = options.screenId ?? options.adapter?.screenId;\n  const disposers: Array<() => void> = [];\n  const staged = new Map<string, Staged>();\n  let seq = 0;\n\n  // Enables agent_history (a log of what agents did across every bridge).\n  ensureUndoToolsRegistered(host);\n\n  // The live terminal list — from `terminals()` (multi) or the single `adapter`\n  // normalized to one active ref with the id \"terminal\".\n  const listTerminals = (): TerminalRef[] => {\n    if (options.terminals) return options.terminals();\n    if (options.adapter) return [{ id: \"terminal\", label: \"Terminal\", active: true, ...options.adapter }];\n    return [];\n  };\n\n  /** Resolve a terminal by id; with no id, the active one, else the first. */\n  const resolve = (id?: unknown): TerminalRef | undefined => {\n    const list = listTerminals();\n    if (typeof id === \"string\" && id !== \"\") return list.find((t) => t.id === id);\n    return list.find((t) => t.active) ?? list[0];\n  };\n\n  // Whether any host config can offer these capabilities (gates tool registration;\n  // per-call we still check the *resolved* terminal supports it).\n  const anyMulti = !!options.terminals;\n  const canClear = anyMulti || !!options.adapter?.clear;\n  const canShells = anyMulti || !!options.adapter?.listShells;\n  const canSetShell = anyMulti || !!options.adapter?.setShell;\n\n  const target = (label?: string, terminalId?: string): AgentTarget => ({\n    kind: \"terminal\",\n    screenId,\n    elementId: terminalId ?? screenId ?? \"terminal\",\n    label: label ?? \"terminal\",\n  });\n\n  const TERMINAL_ARG = {\n    terminal: {\n      type: \"string\",\n      description: \"Terminal id to target (call terminal_list for ids). Omit for the active / only terminal.\",\n    },\n  };\n\n  const reg = (\n    name: string,\n    description: string,\n    properties: Record<string, unknown>,\n    required: string[],\n    handler: (args: JsonObject) => Promise<any> | any,\n    isMutation: boolean,\n    resolveTarget?: (args: JsonObject, result: any) => AgentTarget | null,\n  ) => {\n    const wrapped = async (args: JsonObject) => {\n      try {\n        return await handler(args);\n      } catch (e) {\n        return errorResult(e instanceof Error ? e.message : String(e));\n      }\n    };\n    const final = isMutation\n      ? wrapToolWithActivity(wrapped, {\n          toolName: name,\n          agent,\n          kind: \"terminal\",\n          screenId,\n          resolveTarget: ({ args, result }) => resolveTarget?.(args, result) ?? target(),\n        })\n      : wrapped;\n    disposers.push(\n      host.registerTool(\n        {\n          name,\n          description,\n          inputSchema: { type: \"object\", properties: properties as any, required, additionalProperties: false },\n        },\n        final as any,\n      ),\n    );\n  };\n\n  /** Resolve the targeted terminal or throw a clear error for the agent. */\n  const need = (args: JsonObject): TerminalRef => {\n    const t = resolve(args.terminal);\n    if (!t) {\n      const ids = listTerminals().map((x) => x.id).join(\", \") || \"(none)\";\n      throw new Error(\n        typeof args.terminal === \"string\" && args.terminal\n          ? `Unknown terminal '${args.terminal}'. Available: ${ids}. Use terminal_list.`\n          : \"No terminal available.\",\n      );\n    }\n    return t;\n  };\n\n  async function exec(t: TerminalRef, kind: StagedKind, data: string): Promise<void> {\n    if (kind === \"run\") {\n      if (t.runCommand) await t.runCommand(data);\n      else t.write(data + \"\\r\");\n    } else {\n      t.write(data);\n    }\n  }\n\n  async function stageOrExec(t: TerminalRef, kind: StagedKind, data: string) {\n    if (!pendingMode) {\n      await exec(t, kind, data);\n      return textResult(`${kind === \"run\" ? \"ran\" : \"wrote\"} on ${t.id}: ${truncate(data)}`, {\n        kind,\n        data,\n        terminal: t.id,\n        executed: true,\n      });\n    }\n    const id = `t${++seq}`;\n    const entry: Staged = { id, kind, data, terminalId: t.id };\n    staged.set(id, entry);\n    options.onPending?.(entry);\n    return textResult(\n      `Staged ${kind} on ${t.id} (id ${id}) — awaiting human confirmation: ${truncate(data)}`,\n      { ...entry, pending: true },\n    );\n  }\n\n  // ── List ──────────────────────────────────────────────────────────────────\n  reg(\n    \"terminal_list\",\n    \"List the terminals on this screen (id, label, which is active) — so you can reach into another terminal, not just the active one. Pass the chosen id as `terminal` to the other tools.\",\n    {},\n    [],\n    () => {\n      const list = listTerminals().map((t) => ({ id: t.id, label: t.label ?? t.id, active: !!t.active }));\n      const text = list.length\n        ? list.map((t) => `${t.active ? \"* \" : \"  \"}${t.id} — ${t.label}`).join(\"\\n\")\n        : \"(no terminals)\";\n      return textResult(text, { terminals: list });\n    },\n    false,\n  );\n\n  // ── Read ──────────────────────────────────────────────────────────────────\n  reg(\n    \"terminal_read\",\n    \"Read a terminal's visible buffer as text — what the user sees. Pass `tail` for only the last N lines, `terminal` to read a specific one.\",\n    { ...TERMINAL_ARG, tail: { type: \"number\", description: \"Return only the last N lines.\" } },\n    [],\n    (args) => {\n      const t = need(args);\n      let buf = t.getBuffer();\n      const tail = typeof args.tail === \"number\" ? args.tail : undefined;\n      if (tail && tail > 0) buf = buf.split(\"\\n\").slice(-tail).join(\"\\n\");\n      return textResult(buf, { buffer: buf, terminal: t.id });\n    },\n    false,\n  );\n\n  reg(\n    \"terminal_pending\",\n    \"List commands staged for human confirmation (pendingMode).\",\n    {},\n    [],\n    () => {\n      const list = [...staged.values()];\n      return textResult(\n        list.length ? list.map((s) => `${s.id}: ${s.kind} on ${s.terminalId} ${truncate(s.data)}`).join(\"\\n\") : \"(none)\",\n        { pending: list },\n      );\n    },\n    false,\n  );\n\n  // ── Mutations ───────────────────────────────────────────────────────────────\n  reg(\n    \"terminal_write\",\n    \"Write raw data / keystrokes to a terminal (input, control chars, ANSI). Pass `terminal` to target a specific one. In pendingMode this stages instead of executing.\",\n    { ...TERMINAL_ARG, data: { type: \"string\", description: \"Raw bytes to write.\" } },\n    [\"data\"],\n    (args) => stageOrExec(need(args), \"write\", String(args.data)),\n    true,\n    (args) => target(`write:${String(args.terminal ?? \"\")}`, resolve(args.terminal)?.id),\n  );\n\n  reg(\n    \"terminal_run\",\n    \"Run a shell command in a terminal — writes the command + Enter (or the host's runner). Pass `terminal` to target a specific one. In pendingMode this stages it for confirmation.\",\n    { ...TERMINAL_ARG, command: { type: \"string\", description: \"The command line to run.\" } },\n    [\"command\"],\n    (args) => stageOrExec(need(args), \"run\", String(args.command)),\n    true,\n    (args) => target(truncate(String(args.command ?? \"\")), resolve(args.terminal)?.id),\n  );\n\n  reg(\n    \"terminal_confirm\",\n    \"Confirm + execute a staged command by id (pendingMode).\",\n    { id: { type: \"string\" } },\n    [\"id\"],\n    async (args) => {\n      const id = String(args.id);\n      const entry = staged.get(id);\n      if (!entry) return errorResult(`No staged command ${id}`);\n      const t = resolve(entry.terminalId);\n      if (!t) return errorResult(`Terminal '${entry.terminalId}' is gone — cannot run ${id}`);\n      staged.delete(id);\n      await exec(t, entry.kind, entry.data);\n      return textResult(`Confirmed ${id}: ${entry.kind} on ${t.id} ${truncate(entry.data)}`, { ...entry, executed: true });\n    },\n    true,\n    (args) => {\n      const e = staged.get(String(args.id));\n      return target(`confirm:${String(args.id ?? \"\")}`, e?.terminalId);\n    },\n  );\n\n  reg(\n    \"terminal_reject\",\n    \"Drop a staged command by id without executing it.\",\n    { id: { type: \"string\" } },\n    [\"id\"],\n    (args) => {\n      const id = String(args.id);\n      if (!staged.delete(id)) return errorResult(`No staged command ${id}`);\n      return textResult(`Rejected ${id}`, { id, rejected: true });\n    },\n    false,\n  );\n\n  if (canClear) {\n    reg(\n      \"terminal_clear\",\n      \"Clear a terminal's viewport. Pass `terminal` to target a specific one.\",\n      { ...TERMINAL_ARG },\n      [],\n      (args) => {\n        const t = need(args);\n        if (!t.clear) return errorResult(`Terminal '${t.id}' can't be cleared.`);\n        t.clear();\n        return textResult(`cleared ${t.id}`, { terminal: t.id });\n      },\n      true,\n      (args) => target(`clear:${String(args.terminal ?? \"\")}`, resolve(args.terminal)?.id),\n    );\n  }\n\n  // ── Shells ──────────────────────────────────────────────────────────────────\n  if (canShells) {\n    reg(\n      \"terminal_list_shells\",\n      \"List the shells a terminal can switch to (cmd, PowerShell, Git Bash, …) — id + label, active one marked. Pass `terminal` to target a specific one.\",\n      { ...TERMINAL_ARG },\n      [],\n      (args) => {\n        const t = need(args);\n        if (!t.listShells) return errorResult(`Terminal '${t.id}' has no switchable shells.`);\n        const shells = t.listShells();\n        const active = t.getShell?.();\n        const text = shells.length\n          ? shells.map((s) => `${s.id === active ? \"* \" : \"  \"}${s.id} — ${s.label}`).join(\"\\n\")\n          : \"(none)\";\n        return textResult(text, { shells, active, terminal: t.id });\n      },\n      false,\n    );\n  }\n\n  if (canSetShell) {\n    reg(\n      \"terminal_set_shell\",\n      \"Switch a terminal's active shell by id (e.g. 'powershell', 'git-bash'). Call terminal_list_shells first for valid ids. Pass `terminal` to target a specific one.\",\n      { ...TERMINAL_ARG, id: { type: \"string\", description: \"Shell id to switch to.\" } },\n      [\"id\"],\n      async (args) => {\n        const t = need(args);\n        if (!t.setShell) return errorResult(`Terminal '${t.id}' can't switch shells.`);\n        const id = String(args.id);\n        const shells = t.listShells?.();\n        if (shells && shells.length && !shells.some((s) => s.id === id)) {\n          return errorResult(`Unknown shell '${id}' for ${t.id}. Use terminal_list_shells for valid ids.`);\n        }\n        await t.setShell(id);\n        return textResult(`Switched ${t.id} shell to ${id}`, { shell: id, terminal: t.id });\n      },\n      true,\n      (args) => target(`shell:${String(args.id ?? \"\")}`, resolve(args.terminal)?.id),\n    );\n  }\n\n  return {\n    id: \"terminal\",\n    title: \"Terminal\",\n    dispose: () => {\n      disposers.forEach((d) => d());\n      disposers.length = 0;\n      staged.clear();\n    },\n    confirm: (id: string) => {\n      const e = staged.get(id);\n      if (e) {\n        const t = resolve(e.terminalId);\n        staged.delete(id);\n        if (t) void exec(t, e.kind, e.data);\n      }\n    },\n    reject: (id: string) => {\n      staged.delete(id);\n    },\n    pending: () => [...staged.values()],\n  };\n}\n"]}

package/dist/chunk-KMSRG5KH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sharing/token.ts","../src/sharing/sse-relay.ts"],"names":[],"mappings":";;;AAQA,IAAM,WAAA,GAAc,EAAA;AAWb,SAAS,uBAAA,GAA6C;AAC3D,EAAA,MAAM,EAAA,GAAK,SAAS,CAAC,CAAA;AACrB,EAAA,MAAM,QAAQ,WAAA,EAAY;AAC1B,EAAA,OAAO,EAAE,IAAI,KAAA,EAAO,OAAA,EAAS,MAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,EAAE;AACjD;AAEO,SAAS,eAAA,CAAgB,IAAY,KAAA,EAAkC;AAC5E,EAAA,OAAO,EAAE,IAAI,KAAA,EAAO,OAAA,EAAS,MAAM,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,EAAE;AACjD;AAGO,SAAS,aAAA,CACd,UAAA,EACA,OAAA,GAAkB,OAAO,WAAW,WAAA,GAAc,MAAA,CAAO,QAAA,CAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,IAAI,EAAA,EAC/E;AACR,EAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,OAAO,CAAA;AACzB,EAAA,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,SAAA,EAAW,UAAA,CAAW,EAAE,CAAA;AAC3C,EAAA,CAAA,CAAE,YAAA,CAAa,GAAA,CAAI,OAAA,EAAS,UAAA,CAAW,KAAK,CAAA;AAC5C,EAAA,OAAO,EAAE,QAAA,EAAS;AACpB;AAGO,SAAS,gBAAA,CAAiB,UAAA,EAA+B,SAAA,GAAY,mBAAA,EAAqB;AAC/F,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,WAAA,EAAc,UAAA,CAAW,EAAE,CAAA,CAAA;AAAA,IACjC,SAAA;AAAA,IACA,SAAS,UAAA,CAAW,EAAA;AAAA,IACpB,OAAO,UAAA,CAAW,KAAA;AAAA,IAClB,OAAA,EAAS,CAAA,UAAA,EAAa,UAAA,CAAW,EAAE,CAAA,CAAA;AAAA,IACnC,gBAAA,EAAkB;AAAA,GACpB;AACF;AAGO,SAAS,kBAAA,GAA+C;AAC7D,EAAA,IAAI,OAAO,MAAA,KAAW,WAAA,EAAa,OAAO,IAAA;AAC1C,EAAA,MAAM,SAAS,IAAI,GAAA,CAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAE,YAAA;AAC7C,EAAA,MAAM,EAAA,GAAK,MAAA,CAAO,GAAA,CAAI,SAAS,CAAA;AAC/B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,GAAA,CAAI,OAAO,CAAA;AAChC,EAAA,IAAI,CAAC,EAAA,IAAM,CAAC,KAAA,EAAO,OAAO,IAAA;AAC1B,EAAA,OAAO,eAAA,CAAgB,IAAI,KAAK,CAAA;AAClC;AAEA,SAAS,WAAA,GAAsB;AAC7B,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,WAAW,CAAA;AACxC,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,UAAU,KAAK,CAAA;AACxB;AAEA,SAAS,SAAS,GAAA,EAAqB;AACrC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,IAAA,CAAK,KAAM,GAAA,GAAM,CAAA,GAAK,CAAC,CAAC,CAAA;AACrD,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,SAAA,CAAU,KAAK,CAAA,CAAE,KAAA,CAAM,GAAG,GAAG,CAAA;AACtC;AAEA,SAAS,UAAU,KAAA,EAA2B;AAC5C,EAAA,IAAI,CAAA,GAAI,EAAA;AACR,EAAA,KAAA,MAAW,CAAA,IAAK,KAAA,EAAO,CAAA,IAAK,MAAA,CAAO,aAAa,CAAC,CAAA;AACjD,EAAA,OAAO,IAAA,CAAK,CAAC,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,GAAG,CAAA,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC1E;AAGO,SAAS,iBAAA,CAAkB,GAAW,CAAA,EAAoB;AAC/D,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,MAAA,EAAQ,CAAA,EAAA,EAAK,IAAA,IAAQ,CAAA,CAAE,UAAA,CAAW,CAAC,CAAA,GAAI,CAAA,CAAE,WAAW,CAAC,CAAA;AAC3E,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;;;ACtDO,IAAM,oBAAN,MAA6C;AAAA,EAalD,YAAY,OAAA,EAA0B;AATtC,IAAA,IAAA,CAAQ,QAAA,GAAW,KAAA;AAEnB,IAAA,IAAA,CAAQ,YAA8B,EAAC;AACvC,IAAA,IAAA,CAAQ,SAAA,GAAY,KAAA;AACpB,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAiC;AACzD,IAAA,IAAA,CAAQ,KAAA,GAAoB,MAAA;AAE5B,IAAA,IAAA,CAAQ,KAAA,uBAAY,GAAA,EAAY;AAG9B,IAAA,IAAA,CAAK,IAAA,GAAO,OAAA;AACZ,IAAA,IAAA,CAAK,gBAAgB,OAAA,CAAQ,KAAA;AAAA,EAC/B;AAAA,EAEA,WAAW,MAAA,EAA8B;AACvC,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,IAAI,KAAK,SAAA,IAAa,IAAA,CAAK,QAAA,IAAY,OAAO,WAAW,WAAA,EAAa;AACtE,IAAA,IAAA,CAAK,SAAS,YAAY,CAAA;AAK1B,IAAA,KAAK,OAAO,kCAAkC,CAAA,CAC3C,KAAK,CAAC,EAAE,oBAAmB,KAAM;AAChC,MAAA,IAAI,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,QAAA,EAAU;AACrC,MAAA,IAAA,CAAK,UAAU,kBAAA,CAAmB;AAAA,QAChC,OAAA,EAAS,KAAK,IAAA,CAAK,OAAA;AAAA,QACnB,OAAA,EAAS,KAAK,IAAA,CAAK,SAAA;AAAA,QACnB,KAAA,EAAO,KAAK,IAAA,CAAK,KAAA;AAAA,QACjB,SAAA,EAAW,MAAA;AAAA,QACX,gBAAA,EAAkB,SAAA;AAAA,QAClB,QAAA,EAAU,QAAA;AAAA,QACV,OAAA,EAAS,CAAC,GAAA,KAAQ,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QACxC,MAAA,EAAQ,MAAM,IAAA,CAAK,QAAA,EAAS;AAAA,QAC5B,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,CAAS,OAAO,CAAA;AAAA,QACpC,SAAA,EAAW,KAAK,IAAA,CAAK;AAAA,OACtB,CAAA;AACD,MAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,IACrB,CAAC,CAAA,CACA,KAAA,CAAM,MAAM;AACX,MAAA,IAAI,CAAC,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS;AAAA,IACpC,CAAC,CAAA;AAAA,EACL;AAAA;AAAA,EAGQ,QAAA,GAAiB;AACvB,IAAA,IAAI,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,QAAA,EAAU;AACrC,IAAA,MAAM,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,OAAO,IAAI,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA,cAAA,EAAiB,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,KAAK,CAAC,CAAA,CAAA;AAC/H,IAAA,MAAM,KAAK,IAAI,WAAA,CAAY,KAAK,EAAE,eAAA,EAAiB,OAAO,CAAA;AAC1D,IAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AACV,IAAA,EAAA,CAAG,gBAAA,CAAiB,MAAA,EAAQ,MAAM,IAAA,CAAK,UAAU,CAAA;AACjD,IAAA,EAAA,CAAG,gBAAA,CAAiB,OAAO,CAAC,EAAA,KAAqB,KAAK,aAAA,CAAc,EAAA,CAAG,IAAI,CAAC,CAAA;AAC5E,IAAA,EAAA,CAAG,iBAAiB,OAAA,EAAS,MAAM,IAAA,CAAK,QAAA,CAAS,OAAO,CAAC,CAAA;AAAA,EAC3D;AAAA;AAAA,EAGQ,QAAA,GAAiB;AACvB,IAAA,IAAA,CAAK,SAAA,GAAY,IAAA;AACjB,IAAA,IAAA,CAAK,SAAS,MAAM,CAAA;AACpB,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,CAAC,CAAA;AACtC,IAAA,KAAA,MAAW,GAAA,IAAO,MAAA,EAAQ,IAAA,CAAK,OAAA,CAAQ,GAAG,CAAA;AAAA,EAC5C;AAAA,EAEA,KAAK,OAAA,EAA+B;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACnB,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,OAAO,CAAA;AAC3B,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,QAAQ,OAAO,CAAA;AAAA,EACtB;AAAA,EAEA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAChB,IAAA,IAAA,CAAK,SAAS,IAAA,EAAK;AACnB,IAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AACf,IAAA,IAAA,CAAK,IAAI,KAAA,EAAM;AACf,IAAA,IAAA,CAAK,EAAA,GAAK,MAAA;AACV,IAAA,IAAA,CAAK,SAAA,GAAY,KAAA;AACjB,IAAA,IAAA,CAAK,SAAS,QAAQ,CAAA;AAAA,EACxB;AAAA,EAEA,cAAc,QAAA,EAAmD;AAC/D,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,QAAA,CAAS,KAAK,KAAK,CAAA;AACnB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,iBAAA,CAAkB,OAAA,EAAkC,KAAA,EAA+B;AACvF,IAAA,IAAI,UAAU,MAAA,IAAa,CAAC,kBAAkB,KAAA,EAAO,IAAA,CAAK,aAAa,CAAA,EAAG;AAC1E,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAI,MAAM,uCAAuC,CAAA;AACzE,IAAA,MAAM,UAA0B,OAAO,OAAA,KAAY,WAAW,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,GAAI,OAAA;AACpF,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAAA,EACzC;AAAA,EAEA,MAAc,QAAQ,OAAA,EAAwC;AAC5D,IAAA,MAAM,MAAM,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,OAAO,IAAI,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,SAAS,CAAC,CAAA,cAAA,EAAiB,kBAAA,CAAmB,IAAA,CAAK,IAAA,CAAK,KAAK,CAAC,CAAA,CAAA;AAC/H,IAAA,MAAM,CAAA,GAAI,IAAA,CAAK,IAAA,CAAK,KAAA,IAAS,KAAA;AAC7B,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,GAAA,EAAK;AAAA,QACX,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,UAAU,kBAAA,EAAmB;AAAA,QAC5E,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,OAAO;AAAA,OAC7B,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA,EAEA,MAAc,cAAc,GAAA,EAA4B;AACtD,IAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAClB,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AACF,MAAA,OAAA,GAAU,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,IAC1B,CAAA,CAAA,MAAQ;AACN,MAAA;AAAA,IACF;AACA,IAAA,IAAI,QAAA,IAAY,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,2BAAA,EAA6B;AACzE,MAAA,MAAM,YAAA,GAAe,MAAA,CAAQ,OAAA,CAAQ,MAAA,EAAmD,gBAAgB,MAAM,CAAA;AAC9G,MAAA,IAAA,CAAK,KAAA,CAAM,IAAI,YAAY,CAAA;AAC3B,MAAA,YAAA,CAAa;AAAA,QACX,OAAA,EAAS,OAAA;AAAA,QACT,SAAA,EAAW,OAAA;AAAA,QACX,UAAA,EAAY,SAAA;AAAA,QACZ,MAAA,EAAQ,iBAAA;AAAA,QACR,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,QACpB,MAAA,EAAQ,EAAE,IAAA,EAAM,YAAA,EAAc,OAAO,iBAAA,EAAkB;AAAA,QACvD,IAAA,EAAM,EAAE,YAAA;AAAa,OACtB,CAAA;AACD,MAAA;AAAA,IACF;AACA,IAAA,IAAI,QAAA,IAAY,OAAA,IAAW,OAAA,CAAQ,MAAA,KAAW,yBAAA,EAA2B;AACvE,MAAA,MAAM,YAAA,GAAe,MAAA,CAAQ,OAAA,CAAQ,MAAA,EAAmD,gBAAgB,MAAM,CAAA;AAC9G,MAAA,IAAA,CAAK,KAAA,CAAM,OAAO,YAAY,CAAA;AAC9B,MAAA,IAAI,IAAA,CAAK,KAAA,CAAM,IAAA,KAAS,CAAA,EAAG;AACzB,QAAA,YAAA,CAAa;AAAA,UACX,OAAA,EAAS,OAAA;AAAA,UACT,SAAA,EAAW,OAAA;AAAA,UACX,UAAA,EAAY,SAAA;AAAA,UACZ,MAAA,EAAQ,oBAAA;AAAA,UACR,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,UACpB,MAAA,EAAQ,EAAE,IAAA,EAAM,YAAA,EAAc,OAAO,oBAAA,EAAqB;AAAA,UAC1D,IAAA,EAAM,EAAE,YAAA;AAAa,SACtB,CAAA;AAAA,MACH;AACA,MAAA;AAAA,IACF;AACA,IAAA,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAA;AAAA,EACzC;AAAA,EAEQ,SAAS,KAAA,EAAyB;AACxC,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,KAAA,MAAW,CAAA,IAAK,IAAA,CAAK,SAAA,EAAW,CAAA,CAAE,KAAK,CAAA;AAAA,EACzC;AACF;AAIO,SAAS,cAAA,CAAe,QAAwB,OAAA,EAA6C;AAClG,EAAA,MAAM,SAAA,GAAY,IAAI,iBAAA,CAAkB,OAAO,CAAA;AAC/C,EAAA,SAAA,CAAU,WAAW,MAAM,CAAA;AAC3B,EAAA,MAAA,CAAO,OAAO,SAAS,CAAA;AACvB,EAAA,SAAA,CAAU,KAAA,EAAM;AAMhB,EAAA,OAAO,wBAAsB,CAAA,CAAE,IAAA,CAAK,CAAC,EAAE,YAAW,KAAM;AACtD,IAAA,MAAM,GAAA,GAAM,UAAA,CAAW,CAAC,KAAA,KAAU;AAChC,MAAA,SAAA,CAAU,IAAA,CAAK;AAAA,QACb,OAAA,EAAS,KAAA;AAAA,QACT,MAAA,EAAQ,8BAAA;AAAA,QACR,MAAA,EAAQ;AAAA,OACT,CAAA;AAAA,IACH,CAAC,CAAA;AAED,IAAA,MAAM,SAAA,GAAY,SAAA,CAAU,KAAA,CAAM,IAAA,CAAK,SAAS,CAAA;AAChD,IAAA,SAAA,CAAU,QAAQ,MAAM;AACtB,MAAA,GAAA,EAAI;AACJ,MAAA,SAAA,EAAU;AAAA,IACZ,CAAA;AAAA,EACF,CAAC,CAAA,CAAE,KAAA,CAAM,MAAM;AAAA,EAEf,CAAC,CAAA;AAED,EAAA,OAAO,SAAA;AACT","file":"chunk-KMSRG5KH.js","sourcesContent":["/**\n * Session-token utilities. The token is a high-entropy secret; possession\n * grants read/write on the session. We don't HMAC frames — frames carry\n * the token directly (which is fine for in-process / same-origin / TLS\n * transports). For lower-trust transports, host apps can layer signing\n * on top of the BroadcastChannelTransport.\n */\n\nconst TOKEN_BYTES = 24; // 192 bits, base64url-encoded → 32 chars\n\nexport type SessionDescriptor = {\n  /** Stable session identifier. Channel name = `fai:share:${id}`. */\n  id: string;\n  /** Secret token. Treat as a password — anyone with it can read/write. */\n  token: string;\n  /** Pretty hash for display (first 8 chars of token). */\n  display: string;\n};\n\nexport function createSessionDescriptor(): SessionDescriptor {\n  const id = randomId(8);\n  const token = randomToken();\n  return { id, token, display: token.slice(0, 8) };\n}\n\nexport function describeSession(id: string, token: string): SessionDescriptor {\n  return { id, token, display: token.slice(0, 8) };\n}\n\n/** Build the shareable URL for the current page (preserves path, adds session+token). */\nexport function buildShareUrl(\n  descriptor: SessionDescriptor,\n  baseUrl: string = typeof window !== \"undefined\" ? window.location.href.split(\"?\")[0] : \"\",\n): string {\n  const u = new URL(baseUrl);\n  u.searchParams.set(\"session\", descriptor.id);\n  u.searchParams.set(\"token\", descriptor.token);\n  return u.toString();\n}\n\n/** Build the JSON config form (suitable for Claude Desktop / Cline / etc.). */\nexport function buildShareConfig(descriptor: SessionDescriptor, transport = \"broadcast-channel\") {\n  return {\n    name: `whiteboard-${descriptor.id}`,\n    transport,\n    session: descriptor.id,\n    token: descriptor.token,\n    channel: `fai:share:${descriptor.id}`,\n    protocol_version: \"2025-06-18\",\n  };\n}\n\n/** Read session descriptor from current URL, or null if not a shared link. */\nexport function readSessionFromUrl(): SessionDescriptor | null {\n  if (typeof window === \"undefined\") return null;\n  const params = new URL(window.location.href).searchParams;\n  const id = params.get(\"session\");\n  const token = params.get(\"token\");\n  if (!id || !token) return null;\n  return describeSession(id, token);\n}\n\nfunction randomToken(): string {\n  const bytes = new Uint8Array(TOKEN_BYTES);\n  crypto.getRandomValues(bytes);\n  return base64Url(bytes);\n}\n\nfunction randomId(len: number): string {\n  const bytes = new Uint8Array(Math.ceil((len * 3) / 4));\n  crypto.getRandomValues(bytes);\n  return base64Url(bytes).slice(0, len);\n}\n\nfunction base64Url(bytes: Uint8Array): string {\n  let s = \"\";\n  for (const b of bytes) s += String.fromCharCode(b);\n  return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\n/** Constant-time string compare so a mismatched token leaks no timing info. */\nexport function constantTimeEqual(a: string, b: string): boolean {\n  if (a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n  return diff === 0;\n}\n","import type { JsonRpcMessage } from \"../mcp/types\";\nimport type { Transport } from \"../mcp/server\";\nimport type { MicroMcpServer } from \"../mcp/server\";\nimport type { RelayChannelHandle } from \"@particle-academy/fancy-cf-relay\";\nimport { constantTimeEqual } from \"./token\";\nimport { emitActivity } from \"../presence/registry\";\n\n/**\n * SseRelayTransport — bridges the in-page MicroMcpServer to a host-app\n * relay broker over Server-Sent Events (inbound) + POST (outbound).\n *\n * Wire model:\n *   - Browser opens an EventSource at `${baseUrl}/${sessionId}/events?token=…`.\n *     Each `event: mcp` carries one JSON-RPC frame from a remote client.\n *   - Browser POSTs JSON-RPC frames to `${baseUrl}/${sessionId}/outbox?token=…`\n *     when the local server has a response/notification to send.\n *\n * The host provides the relay endpoint (any HTTP server). See the demo\n * `WhiteboardShareController` for the reference implementation.\n *\n * Token authentication is the host's job — this transport just carries the\n * token in the query string. For lower-trust deployments, layer signing on\n * top by wrapping `send` / `deliverFromRemote`.\n */\nexport type SseRelayOptions = {\n  baseUrl: string;\n  sessionId: string;\n  token: string;\n  /** Override fetch (testing / non-browser). Defaults to global fetch. */\n  fetch?: typeof fetch;\n};\n\nexport class SseRelayTransport implements Transport {\n  private server?: MicroMcpServer;\n  private es?: EventSource;\n  private channel?: RelayChannelHandle;\n  private disposed = false;\n  private opts: SseRelayOptions;\n  private sendQueue: JsonRpcMessage[] = [];\n  private connected = false;\n  private listeners = new Set<(state: RelayState) => void>();\n  private state: RelayState = \"idle\";\n  private expectedToken: string;\n  private peers = new Set<string>();\n\n  constructor(options: SseRelayOptions) {\n    this.opts = options;\n    this.expectedToken = options.token;\n  }\n\n  bindServer(server: MicroMcpServer): void {\n    this.server = server;\n  }\n\n  /** Open the receive channel. Idempotent. */\n  start(): void {\n    if (this.connected || this.disposed || typeof window === \"undefined\") return;\n    this.setState(\"connecting\");\n    // Prefer @particle-academy/fancy-cf-relay's adaptive channel (auto SSE↔\n    // long-poll with Cloudflare detection) so the receive leg survives a\n    // Cloudflare HTTP/3 (QUIC) edge that resets long-lived SSE streams. It's an\n    // OPTIONAL peer: if it isn't installed, fall back to a plain EventSource.\n    void import(\"@particle-academy/fancy-cf-relay\")\n      .then(({ createRelayChannel }) => {\n        if (this.connected || this.disposed) return;\n        this.channel = createRelayChannel({\n          baseUrl: this.opts.baseUrl,\n          session: this.opts.sessionId,\n          token: this.opts.token,\n          transport: \"auto\",\n          receiveDirection: \"inbound\",\n          sendPath: \"outbox\",\n          onFrame: (raw) => this.handleInbound(raw),\n          onOpen: () => this.markOpen(),\n          onError: () => this.setState(\"error\"),\n          fetchImpl: this.opts.fetch,\n        });\n        this.channel.start();\n      })\n      .catch(() => {\n        if (!this.disposed) this.startSse();\n      });\n  }\n\n  /** Fallback receive leg: a plain EventSource (no fancy-cf-relay installed). */\n  private startSse(): void {\n    if (this.connected || this.disposed) return;\n    const url = `${this.opts.baseUrl}/${encodeURIComponent(this.opts.sessionId)}/events?token=${encodeURIComponent(this.opts.token)}`;\n    const es = new EventSource(url, { withCredentials: false });\n    this.es = es;\n    es.addEventListener(\"open\", () => this.markOpen());\n    es.addEventListener(\"mcp\", (ev: MessageEvent) => this.handleInbound(ev.data));\n    es.addEventListener(\"error\", () => this.setState(\"error\")); // EventSource auto-reconnects\n  }\n\n  /** Mark the channel live + flush any queued outbound frames. */\n  private markOpen(): void {\n    this.connected = true;\n    this.setState(\"open\");\n    const queued = this.sendQueue.splice(0);\n    for (const msg of queued) this.postOut(msg);\n  }\n\n  send(message: JsonRpcMessage): void {\n    if (!this.connected) {\n      this.sendQueue.push(message);\n      return;\n    }\n    this.postOut(message);\n  }\n\n  close(): void {\n    this.disposed = true;\n    this.channel?.stop();\n    this.channel = undefined;\n    this.es?.close();\n    this.es = undefined;\n    this.connected = false;\n    this.setState(\"closed\");\n  }\n\n  onStateChange(listener: (state: RelayState) => void): () => void {\n    this.listeners.add(listener);\n    listener(this.state);\n    return () => this.listeners.delete(listener);\n  }\n\n  /**\n   * For relays that wrap each frame with auth metadata: hosts can call this\n   * directly when a frame arrives via a non-SSE path. The transport will\n   * dispatch it to the bound server.\n   */\n  async deliverFromRemote(payload: JsonRpcMessage | string, token?: string): Promise<void> {\n    if (token !== undefined && !constantTimeEqual(token, this.expectedToken)) return;\n    if (!this.server) throw new Error(\"SseRelayTransport has no bound server\");\n    const message: JsonRpcMessage = typeof payload === \"string\" ? JSON.parse(payload) : payload;\n    await this.server.receive(this, message);\n  }\n\n  private async postOut(message: JsonRpcMessage): Promise<void> {\n    const url = `${this.opts.baseUrl}/${encodeURIComponent(this.opts.sessionId)}/outbox?token=${encodeURIComponent(this.opts.token)}`;\n    const f = this.opts.fetch ?? fetch;\n    try {\n      await f(url, {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\", \"accept\": \"application/json\" },\n        body: JSON.stringify(message),\n      });\n    } catch {\n      // Drop — relay errors are surfaced via state change separately.\n    }\n  }\n\n  private async handleInbound(raw: string): Promise<void> {\n    if (!this.server) return;\n    let message: JsonRpcMessage;\n    try {\n      message = JSON.parse(raw);\n    } catch {\n      return;\n    }\n    if (\"method\" in message && message.method === \"notifications/peer_joined\") {\n      const subscriberId = String((message.params as { subscriberId?: unknown } | undefined)?.subscriberId ?? \"peer\");\n      this.peers.add(subscriberId);\n      emitActivity({\n        agentId: \"agent\",\n        agentName: \"Agent\",\n        agentColor: \"#a855f7\",\n        action: \"agent_connected\",\n        timestamp: Date.now(),\n        target: { kind: \"navigation\", label: \"Agent connected\" },\n        meta: { subscriberId },\n      });\n      return;\n    }\n    if (\"method\" in message && message.method === \"notifications/peer_left\") {\n      const subscriberId = String((message.params as { subscriberId?: unknown } | undefined)?.subscriberId ?? \"peer\");\n      this.peers.delete(subscriberId);\n      if (this.peers.size === 0) {\n        emitActivity({\n          agentId: \"agent\",\n          agentName: \"Agent\",\n          agentColor: \"#a855f7\",\n          action: \"agent_disconnected\",\n          timestamp: Date.now(),\n          target: { kind: \"navigation\", label: \"Agent disconnected\" },\n          meta: { subscriberId },\n        });\n      }\n      return;\n    }\n    await this.server.receive(this, message);\n  }\n\n  private setState(state: RelayState): void {\n    this.state = state;\n    for (const l of this.listeners) l(state);\n  }\n}\n\nexport type RelayState = \"idle\" | \"connecting\" | \"open\" | \"closed\" | \"error\";\n\nexport function attachSseRelay(server: MicroMcpServer, options: SseRelayOptions): SseRelayTransport {\n  const transport = new SseRelayTransport(options);\n  transport.bindServer(server);\n  server.attach(transport);\n  transport.start();\n\n  // Forward in-process agent activity events out over the relay so external\n  // subscribers can render presence indicators in real time. Uses a dynamic\n  // import so the relay doesn't hard-depend on the presence module if it's\n  // tree-shaken out.\n  import(\"../presence/registry\").then(({ onActivity }) => {\n    const off = onActivity((event) => {\n      transport.send({\n        jsonrpc: \"2.0\",\n        method: \"notifications/agent_activity\",\n        params: event as any,\n      });\n    });\n    // Tear down the subscription when the transport closes.\n    const origClose = transport.close.bind(transport);\n    transport.close = () => {\n      off();\n      origClose();\n    };\n  }).catch(() => {\n    // Presence module unavailable — silently no-op (relay still works).\n  });\n\n  return transport;\n}\n"]}

package/dist/chunk-KYMEDV6E.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/bridges/code.ts"],"names":[],"mappings":";;;;;AAwCA,IAAM,gBAAgB,EAAE,EAAA,EAAI,SAAS,IAAA,EAAM,OAAA,EAAS,OAAO,SAAA,EAAU;AAQ9D,SAAS,kBAAA,CACd,MACA,OAAA,EACQ;AACR,EAAA,MAAM,EAAE,SAAQ,GAAI,OAAA;AACpB,EAAA,MAAM,KAAA,GAAQ,EAAE,GAAG,aAAA,EAAe,GAAI,OAAA,CAAQ,KAAA,IAAS,EAAC,EAAG;AAC3D,EAAA,MAAM,YAA+B,EAAC;AAItC,EAAA,yBAAA,CAA0B,IAAA,EAAM,EAAE,cAAA,EAAgB,KAAA,CAAM,IAAI,CAAA;AAE5D,EAAA,MAAM,MAAA,GAAsB;AAAA,IAC1B,IAAA,EAAM,MAAA;AAAA,IACN,UAAU,OAAA,CAAQ,QAAA;AAAA,IAClB,WAAW,OAAA,CAAQ,EAAA;AAAA,IACnB,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ;AAAA,GAClC;AAEA,EAAA,MAAM,MAAM,CACV,IAAA,EACA,aACA,UAAA,EACA,QAAA,EACA,SACA,UAAA,KACG;AACH,IAAA,MAAM,OAAA,GAAU,OAAO,IAAA,KAAqB;AAC1C,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,QAAQ,IAAI,CAAA;AAAA,MAC3B,SAAS,CAAA,EAAG;AACV,QAAA,OAAO,YAAY,CAAA,YAAa,KAAA,GAAQ,EAAE,OAAA,GAAU,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAC/D;AAAA,IACF,CAAA;AACA,IAAA,MAAM,KAAA,GAAQ,UAAA,GACV,oBAAA,CAAqB,OAAA,EAAS;AAAA,MAC5B,QAAA,EAAU,IAAA;AAAA,MACV,KAAA;AAAA,MACA,IAAA,EAAM,MAAA;AAAA,MACN,UAAU,OAAA,CAAQ,QAAA;AAAA,MAClB,eAAe,MAAM;AAAA,KACtB,CAAA,GACD,OAAA;AACJ,IAAA,SAAA,CAAU,IAAA;AAAA,MACR,IAAA,CAAK,YAAA;AAAA,QACH;AAAA,UACE,IAAA;AAAA,UACA,WAAA;AAAA,UACA,aAAa,EAAE,IAAA,EAAM,UAAU,UAAA,EAA+B,QAAA,EAAU,sBAAsB,KAAA;AAAM,SACtG;AAAA,QACA;AAAA;AACF,KACF;AAAA,EACF,CAAA;AAEA,EAAA,GAAA;AAAA,IACE,eAAA;AAAA,IACA,CAAA,qBAAA,EAAwB,QAAQ,EAAE,CAAA,2CAAA,CAAA;AAAA,IAClC,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,MAAM,KAAA,GAAQ,QAAQ,QAAA,EAAS;AAC/B,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,WAAA,IAAc,IAAK,SAAA;AAC5C,MAAA,MAAM,OAAA,GAAU,EAAE,EAAA,EAAI,OAAA,CAAQ,IAAI,QAAA,EAAU,MAAA,EAAQ,KAAA,CAAM,MAAA,EAAQ,KAAA,EAAO,KAAA,CAAM,KAAA,CAAM,IAAI,EAAE,MAAA,EAAO;AAClG,MAAA,OAAO,UAAA,CAAW,IAAA,CAAK,SAAA,CAAU,OAAO,GAAG,OAAO,CAAA;AAAA,IACpD,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,gBAAA;AAAA,IACA,8BAAA;AAAA,IACA,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,MAAM,KAAA,GAAQ,QAAQ,QAAA,EAAS;AAC/B,MAAA,OAAO,UAAA,CAAW,KAAA,EAAO,EAAE,KAAA,EAAO,CAAA;AAAA,IACpC,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,oBAAA;AAAA,IACA,kEAAA;AAAA,IACA,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,IAAI,CAAC,OAAA,CAAQ,YAAA,EAAc,OAAO,YAAY,oCAAoC,CAAA;AAClF,MAAA,MAAM,KAAA,GAAQ,QAAQ,YAAA,EAAa;AACnC,MAAA,OAAO,UAAA,CAAW,KAAA,EAAO,EAAE,KAAA,EAAO,CAAA;AAAA,IACpC,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,gBAAA;AAAA,IACA,8BAAA;AAAA,IACA,EAAE,KAAA,EAAO,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IAC5B,CAAC,OAAO,CAAA;AAAA,IACR,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,KAAA,IAAS,EAAE,CAAA;AACrC,MAAA,OAAA,CAAQ,SAAS,KAAK,CAAA;AACtB,MAAA,OAAO,UAAA,CAAW,sBAAsB,KAAA,CAAM,MAAM,WAAW,EAAE,MAAA,EAAQ,KAAA,CAAM,MAAA,EAAQ,CAAA;AAAA,IACzF,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,aAAA;AAAA,IACA,yCAAA;AAAA,IACA,EAAE,IAAA,EAAM,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IAC3B,CAAC,MAAM,CAAA;AAAA,IACP,CAAC,IAAA,KAAS;AACR,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,IAAA,IAAQ,EAAE,CAAA;AACnC,MAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,QAAA,EAAS,GAAI,IAAA;AAClC,MAAA,OAAA,CAAQ,SAAS,IAAI,CAAA;AACrB,MAAA,OAAO,UAAA,CAAW,YAAY,IAAA,CAAK,MAAM,UAAU,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,CAAA;AAAA,IAC5E,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,oBAAA;AAAA,IACA,oHAAA;AAAA,IACA;AAAA,MACE,IAAA,EAAM,EAAE,IAAA,EAAM,QAAA,EAAS;AAAA,MACvB,GAAA,EAAK,EAAE,IAAA,EAAM,QAAA,EAAU,aAAa,oCAAA;AAAqC,KAC3E;AAAA,IACA,CAAC,MAAM,CAAA;AAAA,IACP,OAAO,IAAA,KAAS;AACd,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,IAAA,IAAQ,EAAE,CAAA;AACnC,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,CAAI,CAAA,EAAG,OAAO,IAAA,CAAK,GAAA,IAAO,EAAE,CAAC,CAAA;AAC9C,MAAA,MAAM,QAAA,GAAW,KAAK,GAAA,CAAI,CAAA,EAAG,KAAK,KAAA,CAAM,GAAA,GAAO,GAAG,CAAC,CAAA;AACnD,MAAA,MAAM,KAAA,GAAQ,QAAQ,QAAA,EAAS;AAC/B,MAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,IAAK,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACrC,QAAA,OAAA,CAAQ,SAAS,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAC,CAAA;AACzC,QAAA,IAAI,CAAA,GAAI,IAAA,CAAK,MAAA,EAAQ,MAAM,IAAI,OAAA,CAAQ,CAAC,CAAA,KAAM,UAAA,CAAW,CAAA,EAAG,QAAQ,CAAC,CAAA;AAAA,MACvE;AACA,MAAA,OAAO,UAAA,CAAW,YAAY,IAAA,CAAK,MAAM,UAAU,EAAE,MAAA,EAAQ,IAAA,CAAK,MAAA,EAAQ,CAAA;AAAA,IAC5E,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,wBAAA;AAAA,IACA,6DAAA;AAAA,IACA,EAAE,IAAA,EAAM,EAAE,IAAA,EAAM,UAAS,EAAE;AAAA,IAC3B,CAAC,MAAM,CAAA;AAAA,IACP,CAAC,IAAA,KAAS;AACR,MAAA,IAAI,CAAC,OAAA,CAAQ,gBAAA,EAAkB,OAAO,YAAY,wCAAwC,CAAA;AAC1F,MAAA,OAAA,CAAQ,gBAAA,CAAiB,MAAA,CAAO,IAAA,CAAK,IAAA,IAAQ,EAAE,CAAC,CAAA;AAChD,MAAA,OAAO,UAAA,CAAW,oBAAA,EAAsB,EAAG,CAAA;AAAA,IAC7C,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,mBAAA;AAAA,IACA,oDAAA;AAAA,IACA,EAAE,QAAA,EAAU,EAAE,MAAM,QAAA,EAAU,WAAA,EAAa,oCAAmC,EAAE;AAAA,IAChF,CAAC,UAAU,CAAA;AAAA,IACX,CAAC,IAAA,KAAS;AACR,MAAA,IAAI,CAAC,OAAA,CAAQ,WAAA,EAAa,OAAO,YAAY,mCAAmC,CAAA;AAChF,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,QAAA,IAAY,EAAE,CAAA;AACvC,MAAA,OAAA,CAAQ,YAAY,IAAI,CAAA;AACxB,MAAA,OAAO,WAAW,CAAA,gBAAA,EAAc,IAAI,IAAI,EAAE,QAAA,EAAU,MAAM,CAAA;AAAA,IAC5D,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,GAAA;AAAA,IACE,YAAA;AAAA,IACA,mCAAA;AAAA,IACA,EAAC;AAAA,IACD,EAAC;AAAA,IACD,MAAM;AACJ,MAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,EAAO,OAAO,YAAY,6BAA6B,CAAA;AACpE,MAAA,OAAA,CAAQ,KAAA,EAAM;AACd,MAAA,OAAO,UAAA,CAAW,SAAA,EAAW,EAAG,CAAA;AAAA,IAClC,CAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,CAAA,KAAA,EAAQ,OAAA,CAAQ,EAAE,CAAA,CAAA;AAAA,IACtB,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,EAAA;AAAA,IAChC,SAAS,MAAM;AACb,MAAA,KAAA,MAAW,CAAA,IAAK,WAAW,CAAA,EAAE;AAAA,IAC/B;AAAA,GACF;AACF","file":"chunk-KYMEDV6E.js","sourcesContent":["import { textResult, errorResult } from \"../mcp/server\";\nimport type { ToolHost } from \"../mcp/tool-host\";\nimport type { JsonObject } from \"../mcp/types\";\nimport type { Bridge } from \"./types\";\nimport { wrapToolWithActivity } from \"../presence/wrap-tool-with-activity\";\nimport { ensureUndoToolsRegistered } from \"../undo/undo-tools\";\nimport type { AgentTarget } from \"../presence/types\";\n\n/**\n * Adapter the host wires to a fancy-code CodeEditor (typically via the\n * useCodeEditor hook's context value).\n */\nexport type CodeBridgeAdapter = {\n  /** Stable id for this editor instance. */\n  id: string;\n  /** Display label. */\n  title?: string;\n  /** Optional fancy-screens screen id. */\n  screenId?: string;\n  /** Read the current document text. */\n  getValue: () => string;\n  /** Replace the document. */\n  setValue: (value: string) => void;\n  /** Read the current selection text (empty string if none). */\n  getSelection?: () => string;\n  /** Replace the current selection with text. */\n  replaceSelection?: (text: string) => void;\n  /** Programmatic focus. */\n  focus?: () => void;\n  /** Read / set the active language. */\n  getLanguage?: () => string;\n  /** Set the active language. */\n  setLanguage?: (lang: string) => void;\n};\n\nexport type CodeBridgeOptions = {\n  adapter: CodeBridgeAdapter;\n  agent?: { id: string; name?: string; color?: string };\n};\n\nconst DEFAULT_AGENT = { id: \"agent\", name: \"Agent\", color: \"#a855f7\" };\n\n/**\n * registerCodeBridge — schema-aware MCP access to a single CodeEditor.\n * Tools cover read, full replace, append, selection replace, language\n * switch, and a streaming append helper for \"type characters into the\n * editor over time\" UX.\n */\nexport function registerCodeBridge(\n  host: ToolHost,\n  options: CodeBridgeOptions,\n): Bridge {\n  const { adapter } = options;\n  const agent = { ...DEFAULT_AGENT, ...(options.agent ?? {}) };\n  const disposers: Array<() => void> = [];\n\n  // agent_undo / agent_redo / agent_history are registered whenever any bridge\n  // mounts, so undo availability doesn't hinge on which bridges are co-present.\n  ensureUndoToolsRegistered(host, { defaultAgentId: agent.id });\n\n  const target: AgentTarget = {\n    kind: \"code\",\n    screenId: adapter.screenId,\n    elementId: adapter.id,\n    label: adapter.title ?? adapter.id,\n  };\n\n  const reg = (\n    name: string,\n    description: string,\n    properties: Record<string, unknown>,\n    required: string[],\n    handler: (args: JsonObject) => Promise<any> | any,\n    isMutation: boolean,\n  ) => {\n    const wrapped = async (args: JsonObject) => {\n      try {\n        return await handler(args);\n      } catch (e) {\n        return errorResult(e instanceof Error ? e.message : String(e));\n      }\n    };\n    const final = isMutation\n      ? wrapToolWithActivity(wrapped, {\n          toolName: name,\n          agent,\n          kind: \"code\",\n          screenId: adapter.screenId,\n          resolveTarget: () => target,\n        })\n      : wrapped;\n    disposers.push(\n      host.registerTool(\n        {\n          name,\n          description,\n          inputSchema: { type: \"object\", properties: properties as any, required, additionalProperties: false },\n        },\n        final as any,\n      ),\n    );\n  };\n\n  reg(\n    \"code_describe\",\n    `Describe the editor \"${adapter.id}\" — language + length + has-selection.`,\n    {},\n    [],\n    () => {\n      const value = adapter.getValue();\n      const language = adapter.getLanguage?.() ?? \"unknown\";\n      const summary = { id: adapter.id, language, length: value.length, lines: value.split(\"\\n\").length };\n      return textResult(JSON.stringify(summary), summary);\n    },\n    false,\n  );\n\n  reg(\n    \"code_get_value\",\n    \"Read the full document text.\",\n    {},\n    [],\n    () => {\n      const value = adapter.getValue();\n      return textResult(value, { value });\n    },\n    false,\n  );\n\n  reg(\n    \"code_get_selection\",\n    \"Read the currently-selected text (empty string if no selection).\",\n    {},\n    [],\n    () => {\n      if (!adapter.getSelection) return errorResult(\"Host did not provide getSelection.\");\n      const value = adapter.getSelection();\n      return textResult(value, { value });\n    },\n    false,\n  );\n\n  reg(\n    \"code_set_value\",\n    \"Replace the entire document.\",\n    { value: { type: \"string\" } },\n    [\"value\"],\n    (args) => {\n      const value = String(args.value ?? \"\");\n      adapter.setValue(value);\n      return textResult(`Replaced document (${value.length} chars)`, { length: value.length });\n    },\n    true,\n  );\n\n  reg(\n    \"code_append\",\n    \"Append text to the end of the document.\",\n    { text: { type: \"string\" } },\n    [\"text\"],\n    (args) => {\n      const text = String(args.text ?? \"\");\n      const next = adapter.getValue() + text;\n      adapter.setValue(next);\n      return textResult(`Appended ${text.length} chars`, { length: next.length });\n    },\n    true,\n  );\n\n  reg(\n    \"code_stream_append\",\n    \"Type characters into the document one at a time so the human can read it forming. Returns when streaming finishes.\",\n    {\n      text: { type: \"string\" },\n      cps: { type: \"number\", description: \"Characters per second. Default 25.\" },\n    },\n    [\"text\"],\n    async (args) => {\n      const text = String(args.text ?? \"\");\n      const cps = Math.max(1, Number(args.cps ?? 25));\n      const interval = Math.max(8, Math.round(1000 / cps));\n      const start = adapter.getValue();\n      for (let i = 1; i <= text.length; i++) {\n        adapter.setValue(start + text.slice(0, i));\n        if (i < text.length) await new Promise((r) => setTimeout(r, interval));\n      }\n      return textResult(`Streamed ${text.length} chars`, { length: text.length });\n    },\n    true,\n  );\n\n  reg(\n    \"code_replace_selection\",\n    \"Replace the currently-selected text with the supplied text.\",\n    { text: { type: \"string\" } },\n    [\"text\"],\n    (args) => {\n      if (!adapter.replaceSelection) return errorResult(\"Host did not provide replaceSelection.\");\n      adapter.replaceSelection(String(args.text ?? \"\"));\n      return textResult(\"Selection replaced\", { });\n    },\n    true,\n  );\n\n  reg(\n    \"code_set_language\",\n    \"Switch the active syntax highlighting / formatter.\",\n    { language: { type: \"string\", description: \"e.g. 'javascript', 'php', 'sql'.\" } },\n    [\"language\"],\n    (args) => {\n      if (!adapter.setLanguage) return errorResult(\"Host did not provide setLanguage.\");\n      const lang = String(args.language ?? \"\");\n      adapter.setLanguage(lang);\n      return textResult(`Language → ${lang}`, { language: lang });\n    },\n    true,\n  );\n\n  reg(\n    \"code_focus\",\n    \"Move browser focus to the editor.\",\n    {},\n    [],\n    () => {\n      if (!adapter.focus) return errorResult(\"Host did not provide focus.\");\n      adapter.focus();\n      return textResult(\"Focused\", { });\n    },\n    true,\n  );\n\n  return {\n    id: `code:${adapter.id}`,\n    title: adapter.title ?? adapter.id,\n    dispose: () => {\n      for (const d of disposers) d();\n    },\n  };\n}\n"]}