@pentoshi/clai 3.9.3 → 3.9.4

package/dist/interactive-session/session-runtime.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Mutable per-session runtime: the transport, the output store, the ordered
+ * input lane, timers, and the single finalization promise.
+ *
+ * Sessions share no locks, queues, cursors, deadlines, or finalization state, so
+ * a failure in one session cannot affect another.
+ */
+import type { BoundedArtifactWriter } from "./artifact-writer.js";
+import type { InteractiveSessionConfig } from "./config.js";
+import type { OutputStore } from "./output-store.js";
+import { AsyncMutex, FinalizeOnce, Notifier, OrderedInputQueue, TimerSet, type Clock } from "./runtime.js";
+import type { SessionTransport } from "./transport.js";
+import type { CloseResult, InteractiveSessionRecord, TerminationReason } from "./types.js";
+export interface SessionRuntimeInit {
+    readonly record: InteractiveSessionRecord;
+    readonly transport: SessionTransport;
+    readonly output: OutputStore;
+    readonly artifact: BoundedArtifactWriter;
+    readonly config: InteractiveSessionConfig;
+    readonly clock: Clock;
+    readonly idleTimeoutMs: number | undefined;
+    readonly lifetimeTimeoutMs: number | undefined;
+    readonly onTimeout: (reason: "idle-timeout" | "lifetime-timeout") => void;
+}
+export declare class SessionRuntime {
+    readonly record: InteractiveSessionRecord;
+    readonly transport: SessionTransport;
+    readonly output: OutputStore;
+    readonly artifact: BoundedArtifactWriter;
+    readonly config: InteractiveSessionConfig;
+    readonly clock: Clock;
+    readonly input: OrderedInputQueue;
+    readonly mutation: AsyncMutex;
+    readonly finalize: FinalizeOnce<CloseResult>;
+    readonly timers: TimerSet;
+    /** Bumped once when the child exits, so waiters can settle immediately. */
+    readonly exitSignal: Notifier;
+    /** Set once a terminal transition is chosen so late observations only enrich. */
+    processExited: boolean;
+    exitObserved: TerminationReason | undefined;
+    disposed: boolean;
+    private readonly unsubscribes;
+    private readonly idleTimeoutMs;
+    constructor(init: SessionRuntimeInit);
+    track(unsubscribe: () => void): void;
+    /** Accepted input and observed output both count as activity. */
+    touch(): void;
+    syncCursors(): void;
+    releaseListeners(): void;
+}

package/dist/interactive-session/session-runtime.js

@@ -0,0 +1,63 @@
+/**
+ * Mutable per-session runtime: the transport, the output store, the ordered
+ * input lane, timers, and the single finalization promise.
+ *
+ * Sessions share no locks, queues, cursors, deadlines, or finalization state, so
+ * a failure in one session cannot affect another.
+ */
+import { AsyncMutex, FinalizeOnce, Notifier, OrderedInputQueue, TimerSet, } from "./runtime.js";
+export class SessionRuntime {
+    record;
+    transport;
+    output;
+    artifact;
+    config;
+    clock;
+    input = new OrderedInputQueue();
+    mutation = new AsyncMutex();
+    finalize = new FinalizeOnce();
+    timers;
+    /** Bumped once when the child exits, so waiters can settle immediately. */
+    exitSignal = new Notifier();
+    /** Set once a terminal transition is chosen so late observations only enrich. */
+    processExited = false;
+    exitObserved;
+    disposed = false;
+    unsubscribes = [];
+    idleTimeoutMs;
+    constructor(init) {
+        this.record = init.record;
+        this.transport = init.transport;
+        this.output = init.output;
+        this.artifact = init.artifact;
+        this.config = init.config;
+        this.clock = init.clock;
+        this.idleTimeoutMs = init.idleTimeoutMs;
+        this.timers = new TimerSet(init.clock, init.onTimeout);
+        this.timers.armIdle(init.idleTimeoutMs);
+        this.timers.armLifetime(init.lifetimeTimeoutMs);
+    }
+    track(unsubscribe) {
+        this.unsubscribes.push(unsubscribe);
+    }
+    /** Accepted input and observed output both count as activity. */
+    touch() {
+        this.record.lastActivityAt = Date.now();
+        this.timers.armIdle(this.idleTimeoutMs);
+    }
+    syncCursors() {
+        this.record.earliestCursor = this.output.earliestCursor;
+        this.record.latestCursor = this.output.latestCursor;
+    }
+    releaseListeners() {
+        for (const unsubscribe of this.unsubscribes.splice(0)) {
+            try {
+                unsubscribe();
+            }
+            catch {
+                // Listener teardown is best effort; cleanup must still complete.
+            }
+        }
+    }
+}
+//# sourceMappingURL=session-runtime.js.map

package/dist/interactive-session/session-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-runtime.js","sourceRoot":"","sources":["../../src/interactive-session/session-runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EACL,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,iBAAiB,EACjB,QAAQ,GAET,MAAM,cAAc,CAAC;AAoBtB,MAAM,OAAO,cAAc;IAChB,MAAM,CAA2B;IACjC,SAAS,CAAmB;IAC5B,MAAM,CAAc;IACpB,QAAQ,CAAwB;IAChC,MAAM,CAA2B;IACjC,KAAK,CAAQ;IACb,KAAK,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAChC,QAAQ,GAAG,IAAI,UAAU,EAAE,CAAC;IAC5B,QAAQ,GAAG,IAAI,YAAY,EAAe,CAAC;IAC3C,MAAM,CAAW;IAC1B,2EAA2E;IAClE,UAAU,GAAG,IAAI,QAAQ,EAAE,CAAC;IAErC,iFAAiF;IACjF,aAAa,GAAG,KAAK,CAAC;IACtB,YAAY,CAAgC;IAC5C,QAAQ,GAAG,KAAK,CAAC;IAEA,YAAY,GAAsB,EAAE,CAAC;IACrC,aAAa,CAAqB;IAEnD,YAAY,IAAwB;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,WAAuB;QAC3B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAED,iEAAiE;IACjE,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;IAED,WAAW;QACT,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;IACtD,CAAC;IAED,gBAAgB;QACd,KAAK,MAAM,WAAW,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,WAAW,EAAE,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/interactive-session/streaming-redactor.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Bounded streaming redaction over raw child output.
+ *
+ * Two lanes run before any byte receives a cursor, so raw sensitive data never
+ * reaches memory retention, artifacts, telemetry, or presentation:
+ *
+ *  1. A byte matcher removes the exact UTF-8 encodings of registered sensitive
+ *     values across arbitrary chunk splits, including next to invalid UTF-8.
+ *  2. A decoder applies the existing textual secret patterns to the valid UTF-8
+ *     runs of the emitted region.
+ *
+ * Retention is bounded: the only bytes held back are an incomplete trailing
+ * UTF-8 code point and a tail that is still a viable prefix of a registered
+ * secret. Prompts without a trailing newline therefore emit immediately.
+ */
+import { type SessionOperation } from "./types.js";
+export declare const REDACTION_MARKER = "[redacted]";
+/** Bytes of an incomplete trailing multi-byte UTF-8 sequence, else 0. */
+export declare function trailingIncompleteUtf8Bytes(bytes: Uint8Array): number;
+export interface Utf8Run {
+    readonly valid: boolean;
+    readonly bytes: Uint8Array;
+}
+/** Split a byte range into maximal valid-UTF-8 runs and invalid byte runs. */
+export declare function splitUtf8Runs(bytes: Uint8Array): Utf8Run[];
+export declare class StreamingSecretRedactor {
+    private readonly overlapBytes;
+    private pending;
+    private readonly secrets;
+    private redactedAny;
+    private closed;
+    constructor(overlapBytes: number);
+    get redacted(): boolean;
+    /**
+     * Register an exact sensitive value. Values longer than the configured overlap
+     * bound are rejected before delivery because they could not be matched across
+     * chunk splits without unbounded retention.
+     */
+    registerExactSecret(value: string, operation?: SessionOperation): void;
+    /** Longest tail of `bytes` that is a proper prefix of any registered secret. */
+    private viablePrefixTail;
+    /**
+     * Tail that is either a partial secret-pattern prefix or an in-progress token
+     * that a pattern could still consume.
+     */
+    private viablePatternTail;
+    /** Feed raw bytes; returns the safe bytes now eligible for cursor assignment. */
+    push(raw: Uint8Array): Uint8Array;
+    /** Flush retained overlap through both lanes. Idempotent. */
+    close(): Uint8Array;
+    private transform;
+    private applyByteLane;
+}

package/dist/interactive-session/streaming-redactor.js

@@ -0,0 +1,263 @@
+/**
+ * Bounded streaming redaction over raw child output.
+ *
+ * Two lanes run before any byte receives a cursor, so raw sensitive data never
+ * reaches memory retention, artifacts, telemetry, or presentation:
+ *
+ *  1. A byte matcher removes the exact UTF-8 encodings of registered sensitive
+ *     values across arbitrary chunk splits, including next to invalid UTF-8.
+ *  2. A decoder applies the existing textual secret patterns to the valid UTF-8
+ *     runs of the emitted region.
+ *
+ * Retention is bounded: the only bytes held back are an incomplete trailing
+ * UTF-8 code point and a tail that is still a viable prefix of a registered
+ * secret. Prompts without a trailing newline therefore emit immediately.
+ */
+import { redactSecrets } from "../llm/provider.js";
+import { throwSessionError } from "./types.js";
+export const REDACTION_MARKER = "[redacted]";
+const MARKER_BYTES = new Uint8Array(Buffer.from(REDACTION_MARKER, "utf8"));
+/** Bytes of an incomplete trailing multi-byte UTF-8 sequence, else 0. */
+export function trailingIncompleteUtf8Bytes(bytes) {
+    const len = bytes.length;
+    for (let back = 1; back <= 3 && back <= len; back += 1) {
+        const byte = bytes[len - back];
+        if ((byte & 0xc0) === 0x80)
+            continue;
+        let expected = 1;
+        if ((byte & 0xe0) === 0xc0)
+            expected = 2;
+        else if ((byte & 0xf0) === 0xe0)
+            expected = 3;
+        else if ((byte & 0xf8) === 0xf0)
+            expected = 4;
+        return expected > back ? back : 0;
+    }
+    return 0;
+}
+/** Split a byte range into maximal valid-UTF-8 runs and invalid byte runs. */
+export function splitUtf8Runs(bytes) {
+    const runs = [];
+    let index = 0;
+    let validStart = 0;
+    const pushRun = (valid, start, end) => {
+        if (end > start)
+            runs.push({ valid, bytes: bytes.subarray(start, end) });
+    };
+    while (index < bytes.length) {
+        const width = utf8SequenceWidth(bytes, index);
+        if (width > 0) {
+            index += width;
+            continue;
+        }
+        pushRun(true, validStart, index);
+        const invalidStart = index;
+        while (index < bytes.length && utf8SequenceWidth(bytes, index) === 0)
+            index += 1;
+        pushRun(false, invalidStart, index);
+        validStart = index;
+    }
+    pushRun(true, validStart, index);
+    return runs;
+}
+function utf8SequenceWidth(bytes, index) {
+    const byte = bytes[index];
+    if (byte < 0x80)
+        return 1;
+    let width = 0;
+    if ((byte & 0xe0) === 0xc0)
+        width = 2;
+    else if ((byte & 0xf0) === 0xe0)
+        width = 3;
+    else if ((byte & 0xf8) === 0xf0)
+        width = 4;
+    else
+        return 0;
+    if (index + width > bytes.length)
+        return 0;
+    for (let offset = 1; offset < width; offset += 1) {
+        if ((bytes[index + offset] & 0xc0) !== 0x80)
+            return 0;
+    }
+    // Reject overlong encodings, surrogates, and out-of-range code points so a
+    // "valid" run always round-trips through UTF-8 without substitution.
+    const second = bytes[index + 1];
+    if (width === 2 && byte < 0xc2)
+        return 0;
+    if (width === 3 && byte === 0xe0 && second < 0xa0)
+        return 0;
+    if (width === 3 && byte === 0xed && second >= 0xa0)
+        return 0;
+    if (width === 4 && (byte > 0xf4 || (byte === 0xf0 && second < 0x90)))
+        return 0;
+    if (width === 4 && byte === 0xf4 && second > 0x8f)
+        return 0;
+    return width;
+}
+function indexOfSequence(haystack, needle, from) {
+    return Buffer.from(haystack.buffer, haystack.byteOffset, haystack.byteLength).indexOf(Buffer.from(needle), from);
+}
+/**
+ * Literal prefixes of the textual secret patterns applied by `redactSecrets`.
+ * They bound how much tail must be retained so a token split across chunks is
+ * still matched, without holding back ordinary prompt text.
+ */
+const TEXT_SECRET_PREFIXES = ["gsk_", "AIza", "AQ.", "sk-", "nvapi-"];
+const TOKEN_BODY_RE = /^[A-Za-z0-9._-]*$/;
+export class StreamingSecretRedactor {
+    overlapBytes;
+    pending = new Uint8Array(0);
+    secrets = [];
+    redactedAny = false;
+    closed = false;
+    constructor(overlapBytes) {
+        this.overlapBytes = overlapBytes;
+    }
+    get redacted() {
+        return this.redactedAny;
+    }
+    /**
+     * Register an exact sensitive value. Values longer than the configured overlap
+     * bound are rejected before delivery because they could not be matched across
+     * chunk splits without unbounded retention.
+     */
+    registerExactSecret(value, operation = "send") {
+        if (value.length === 0)
+            return;
+        const bytes = new Uint8Array(Buffer.from(value, "utf8"));
+        if (bytes.length > this.overlapBytes) {
+            throwSessionError({
+                code: "INVALID_CONFIGURATION",
+                operation,
+                message: "A sensitive value exceeds the configured redaction match span and cannot be redacted safely.",
+                details: { field: "redactionOverlapBytes", limitBytes: this.overlapBytes },
+            });
+        }
+        if (this.secrets.some((existing) => Buffer.from(existing).equals(bytes)))
+            return;
+        this.secrets.push(bytes);
+    }
+    /** Longest tail of `bytes` that is a proper prefix of any registered secret. */
+    viablePrefixTail(bytes) {
+        let longest = 0;
+        for (const secret of this.secrets) {
+            const max = Math.min(secret.length - 1, bytes.length);
+            for (let length = max; length > longest; length -= 1) {
+                const tail = bytes.subarray(bytes.length - length);
+                if (Buffer.from(tail).equals(Buffer.from(secret.subarray(0, length)))) {
+                    longest = length;
+                    break;
+                }
+            }
+        }
+        return Math.min(longest, this.overlapBytes);
+    }
+    /**
+     * Tail that is either a partial secret-pattern prefix or an in-progress token
+     * that a pattern could still consume.
+     */
+    viablePatternTail(bytes) {
+        const window = bytes.subarray(Math.max(0, bytes.length - this.overlapBytes));
+        const text = Buffer.from(window).toString("latin1");
+        let longest = 0;
+        for (const prefix of TEXT_SECRET_PREFIXES) {
+            const start = text.lastIndexOf(prefix);
+            if (start >= 0 && TOKEN_BODY_RE.test(text.slice(start + prefix.length))) {
+                longest = Math.max(longest, text.length - start);
+            }
+            for (let length = Math.min(prefix.length - 1, text.length); length > longest; length -= 1) {
+                if (text.endsWith(prefix.slice(0, length))) {
+                    longest = length;
+                    break;
+                }
+            }
+        }
+        return Math.min(longest, this.overlapBytes);
+    }
+    /** Feed raw bytes; returns the safe bytes now eligible for cursor assignment. */
+    push(raw) {
+        if (this.closed)
+            throw new Error("Cannot push into a closed redactor");
+        this.pending = concat(this.pending, raw);
+        const keepIncomplete = trailingIncompleteUtf8Bytes(this.pending);
+        const keepSecret = this.viablePrefixTail(this.pending);
+        const keepPattern = this.viablePatternTail(this.pending);
+        const keep = Math.min(Math.max(keepIncomplete, keepSecret, keepPattern), Math.min(this.pending.length, this.overlapBytes));
+        const emitEnd = this.pending.length - keep;
+        if (emitEnd <= 0)
+            return new Uint8Array(0);
+        const region = this.pending.subarray(0, emitEnd);
+        this.pending = new Uint8Array(this.pending.subarray(emitEnd));
+        return this.transform(region);
+    }
+    /** Flush retained overlap through both lanes. Idempotent. */
+    close() {
+        if (this.closed)
+            return new Uint8Array(0);
+        this.closed = true;
+        const region = this.pending;
+        this.pending = new Uint8Array(0);
+        return region.length > 0 ? this.transform(region) : new Uint8Array(0);
+    }
+    transform(region) {
+        const byteLane = this.applyByteLane(region);
+        const parts = [];
+        for (const run of splitUtf8Runs(byteLane)) {
+            if (!run.valid) {
+                // Binary bytes are preserved verbatim so encoded output and artifacts
+                // stay faithful; the byte lane already removed known secrets.
+                parts.push(run.bytes);
+                continue;
+            }
+            const text = Buffer.from(run.bytes).toString("utf8");
+            const safe = redactSecrets(text);
+            if (safe !== text)
+                this.redactedAny = true;
+            parts.push(new Uint8Array(Buffer.from(safe, "utf8")));
+        }
+        return concatAll(parts);
+    }
+    applyByteLane(region) {
+        if (this.secrets.length === 0)
+            return region;
+        let current = region;
+        for (const secret of this.secrets) {
+            let cursor = 0;
+            const parts = [];
+            for (;;) {
+                const found = indexOfSequence(current, secret, cursor);
+                if (found < 0)
+                    break;
+                parts.push(current.subarray(cursor, found), MARKER_BYTES);
+                cursor = found + secret.length;
+                this.redactedAny = true;
+            }
+            if (parts.length === 0)
+                continue;
+            parts.push(current.subarray(cursor));
+            current = concatAll(parts);
+        }
+        return current;
+    }
+}
+function concat(a, b) {
+    if (a.length === 0)
+        return new Uint8Array(b);
+    if (b.length === 0)
+        return a;
+    const out = new Uint8Array(a.length + b.length);
+    out.set(a, 0);
+    out.set(b, a.length);
+    return out;
+}
+function concatAll(parts) {
+    const total = parts.reduce((sum, part) => sum + part.length, 0);
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const part of parts) {
+        out.set(part, offset);
+        offset += part.length;
+    }
+    return out;
+}
+//# sourceMappingURL=streaming-redactor.js.map

package/dist/interactive-session/streaming-redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming-redactor.js","sourceRoot":"","sources":["../../src/interactive-session/streaming-redactor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAyB,MAAM,YAAY,CAAC;AAEtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAC7C,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3E,yEAAyE;AACzE,MAAM,UAAU,2BAA2B,CAAC,KAAiB;IAC3D,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACzB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,GAAG,IAAI,CAAE,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QACrC,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,QAAQ,GAAG,CAAC,CAAC;aACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,QAAQ,GAAG,CAAC,CAAC;aACzC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,QAAQ,GAAG,CAAC,CAAC;QAC9C,OAAO,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAOD,8EAA8E;AAC9E,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,KAAa,EAAE,GAAW,EAAQ,EAAE;QACnE,IAAI,GAAG,GAAG,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC;IACF,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,KAAK,IAAI,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,YAAY,GAAG,KAAK,CAAC;QAC3B,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QACjF,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QACpC,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiB,EAAE,KAAa;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,IAAI;QAAE,OAAO,CAAC,CAAC;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,KAAK,GAAG,CAAC,CAAC;SACjC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,KAAK,GAAG,CAAC,CAAC;SACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,KAAK,GAAG,CAAC,CAAC;;QACtC,OAAO,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAC3C,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC;IACjC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,GAAG,IAAI;QAAE,OAAO,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,GAAG,IAAI;QAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,GAAG,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/E,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,GAAG,IAAI;QAAE,OAAO,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,QAAoB,EAAE,MAAkB,EAAE,IAAY;IAC7E,OAAO,MAAM,CAAC,IAAI,CAChB,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,UAAU,CACpB,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAC;AAC/E,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAE1C,MAAM,OAAO,uBAAuB;IAML;IALrB,OAAO,GAAe,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/B,OAAO,GAAiB,EAAE,CAAC;IACpC,WAAW,GAAG,KAAK,CAAC;IACpB,MAAM,GAAG,KAAK,CAAC;IAEvB,YAA6B,YAAoB;QAApB,iBAAY,GAAZ,YAAY,CAAQ;IAAG,CAAC;IAErD,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CAAC,KAAa,EAAE,YAA8B,MAAM;QACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACrC,iBAAiB,CAAC;gBAChB,IAAI,EAAE,uBAAuB;gBAC7B,SAAS;gBACT,OAAO,EACL,8FAA8F;gBAChG,OAAO,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO;QACjF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,gFAAgF;IACxE,gBAAgB,CAAC,KAAiB;QACxC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACtD,KAAK,IAAI,MAAM,GAAG,GAAG,EAAE,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;gBACnD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,OAAO,GAAG,MAAM,CAAC;oBACjB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACK,iBAAiB,CAAC,KAAiB;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,KAAK,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBACxE,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;YACnD,CAAC;YACD,KAAK,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC1F,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;oBAC3C,OAAO,GAAG,MAAM,CAAC;oBACjB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC,GAAe;QAClB,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CACnB,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC,EACjD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CACjD,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;QAC3C,IAAI,OAAO,IAAI,CAAC;YAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,6DAA6D;IAC7D,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAEO,SAAS,CAAC,MAAkB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;gBACf,sEAAsE;gBACtE,8DAA8D;gBAC9D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,IAAI,KAAK,IAAI;gBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAEO,aAAa,CAAC,MAAkB;QACtC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAC7C,IAAI,OAAO,GAAG,MAAM,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,MAAM,KAAK,GAAiB,EAAE,CAAC;YAC/B,SAAS,CAAC;gBACR,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBACvD,IAAI,KAAK,GAAG,CAAC;oBAAE,MAAM;gBACrB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;gBAC1D,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC/B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACjC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACrC,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,SAAS,MAAM,CAAC,CAAa,EAAE,CAAa;IAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,KAA4B;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/interactive-session/telemetry.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Bounded, metadata-only diagnostics.
+ *
+ * Every field is an explicit scalar. Raw session ids, commands, cwd, environment
+ * values, input, output, native error text, confirmation previews, and artifact
+ * content are structurally excluded — they are never accepted as arguments.
+ */
+import { auditLog } from "../store/logs.js";
+import type { SessionOperation, SessionState, SessionTransportKind, StableErrorCode, TerminationReason } from "./types.js";
+export declare function redactSessionId(sessionId: string | undefined): string | undefined;
+export interface TelemetryEvent {
+    readonly operation: SessionOperation;
+    readonly sessionId?: string | undefined;
+    readonly durationMs: number;
+    readonly result: "ok" | StableErrorCode;
+    readonly state?: SessionState | undefined;
+    readonly transport?: SessionTransportKind | undefined;
+    readonly inputBytes?: number | undefined;
+    readonly outputBytes?: number | undefined;
+    readonly queueDepth?: number | undefined;
+    readonly retryCount?: number | undefined;
+    readonly terminationReason?: TerminationReason | undefined;
+    /** Recorded when Start failed after allocating a process or terminal. */
+    readonly cleanupVerified?: boolean | undefined;
+}
+export declare class SessionTelemetry {
+    private readonly sink;
+    constructor(sink?: typeof auditLog);
+    record(event: TelemetryEvent): void;
+}

package/dist/interactive-session/telemetry.js

@@ -0,0 +1,47 @@
+/**
+ * Bounded, metadata-only diagnostics.
+ *
+ * Every field is an explicit scalar. Raw session ids, commands, cwd, environment
+ * values, input, output, native error text, confirmation previews, and artifact
+ * content are structurally excluded — they are never accepted as arguments.
+ */
+import { createHmac, randomBytes } from "node:crypto";
+import { auditLog } from "../store/logs.js";
+const AUDIT_EVENT = "tool.terminal_session";
+/** Per-process key so a redacted id cannot be correlated across runs. */
+const idKey = randomBytes(32);
+export function redactSessionId(sessionId) {
+    if (!sessionId)
+        return undefined;
+    return createHmac("sha256", idKey).update(sessionId).digest("hex").slice(0, 12);
+}
+export class SessionTelemetry {
+    sink;
+    constructor(sink = auditLog) {
+        this.sink = sink;
+    }
+    record(event) {
+        const payload = {
+            operation: event.operation,
+            ...(event.sessionId !== undefined
+                ? { session: redactSessionId(event.sessionId) }
+                : {}),
+            durationMs: Math.max(0, Math.round(event.durationMs)),
+            result: event.result,
+            ...(event.state !== undefined ? { state: event.state } : {}),
+            ...(event.transport !== undefined ? { transport: event.transport } : {}),
+            ...(event.inputBytes !== undefined ? { inputBytes: event.inputBytes } : {}),
+            ...(event.outputBytes !== undefined ? { outputBytes: event.outputBytes } : {}),
+            ...(event.queueDepth !== undefined ? { queueDepth: event.queueDepth } : {}),
+            ...(event.retryCount !== undefined ? { retryCount: event.retryCount } : {}),
+            ...(event.terminationReason !== undefined
+                ? { terminationReason: event.terminationReason }
+                : {}),
+            ...(event.cleanupVerified !== undefined
+                ? { cleanupVerified: event.cleanupVerified }
+                : {}),
+        };
+        void this.sink(AUDIT_EVENT, payload);
+    }
+}
+//# sourceMappingURL=telemetry.js.map

package/dist/interactive-session/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/interactive-session/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAS5C,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAC5C,yEAAyE;AACzE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;AAE9B,MAAM,UAAU,eAAe,CAAC,SAA6B;IAC3D,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,OAAO,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAkBD,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,OAAwB,QAAQ;QAAhC,SAAI,GAAJ,IAAI,CAA4B;IAAG,CAAC;IAEjE,MAAM,CAAC,KAAqB;QAC1B,MAAM,OAAO,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;YACP,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/interactive-session/transport-factory.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Default transport factory. PTY support stays behind a lazy capability probe so
+ * pipe sessions and every legacy shell/job path remain reachable on targets
+ * without a verified native artifact.
+ */
+import type { SessionTransportFactory } from "./transport.js";
+export declare function createSessionTransportFactory(): SessionTransportFactory;
+export declare const defaultTransportFactory: SessionTransportFactory;

package/dist/interactive-session/transport-factory.js

@@ -0,0 +1,16 @@
+/**
+ * Default transport factory. PTY support stays behind a lazy capability probe so
+ * pipe sessions and every legacy shell/job path remain reachable on targets
+ * without a verified native artifact.
+ */
+import { startPipeTransport } from "./transport-pipe.js";
+import { probePtyCapability, startPtyTransport } from "./transport-node-pty.js";
+export function createSessionTransportFactory() {
+    return {
+        capability: (platform) => probePtyCapability(platform),
+        startPipe: (request) => startPipeTransport(request),
+        startPty: (request) => startPtyTransport(request),
+    };
+}
+export const defaultTransportFactory = createSessionTransportFactory();
+//# sourceMappingURL=transport-factory.js.map

package/dist/interactive-session/transport-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-factory.js","sourceRoot":"","sources":["../../src/interactive-session/transport-factory.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAGhF,MAAM,UAAU,6BAA6B;IAC3C,OAAO;QACL,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QACtD,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC;QACnD,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,6BAA6B,EAAE,CAAC"}

package/dist/interactive-session/transport-node-pty.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Optional PTY transport.
+ *
+ * `node-pty` is an optional dependency loaded through a lazy dynamic import so
+ * an absent or unloadable native artifact degrades capability instead of failing
+ * application startup. Capability is per-platform and only claimed after the
+ * module actually loads in this packaged layout; the release pipeline must prove
+ * load/spawn/resize/cleanup on a matching-target runner before advertising it.
+ */
+import { type LaunchRequest, type LaunchResult, type PtyCapability } from "./transport.js";
+import type { TerminalDimensions } from "./types.js";
+/** Minimal structural view of the parts of node-pty this adapter uses. */
+export interface PtyProcessLike {
+    readonly pid: number;
+    onData(listener: (data: string | Buffer) => void): {
+        dispose(): void;
+    };
+    onExit(listener: (event: {
+        exitCode: number;
+        signal?: number | undefined;
+    }) => void): {
+        dispose(): void;
+    };
+    write(data: string): void;
+    resize(columns: number, rows: number): void;
+    pause(): void;
+    resume(): void;
+    kill(signal?: string): void;
+}
+export interface NodePtyModuleLike {
+    spawn(file: string, args: string[] | string, options: {
+        cwd: string;
+        env: Record<string, string>;
+        cols: number;
+        rows: number;
+        name?: string;
+        useConpty?: boolean;
+    }): PtyProcessLike;
+}
+export declare function probePtyCapability(platform?: NodeJS.Platform): Promise<PtyCapability>;
+/** Test seam: reset the memoized load so capability can be re-evaluated. */
+export declare function resetPtyCapabilityCache(): void;
+export interface PtyStartOverrides {
+    readonly module?: NodePtyModuleLike | undefined;
+    readonly shell?: string | null | undefined;
+}
+export declare function startPtyTransport(request: LaunchRequest & {
+    dimensions: TerminalDimensions;
+}, overrides?: PtyStartOverrides): Promise<LaunchResult>;