@pentoshi/clai 3.9.4 → 3.9.5

package/dist/interactive-session/input-policy.d.ts

@@ -1,41 +0,0 @@
-/**
- * Contextual policy for later interactive input.
- *
- * Generic tool classification cannot decide this: the risk of a keystroke depends
- * on the owning session, the exact bytes, and whether they are being submitted.
- * Risk is monotonic with the shell boundary — a command sent into a session is
- * never rated lower than the same command run through `shell.exec`.
- */
-import type { RiskDecision } from "../safety/classifier.js";
-import type { EngagementScope } from "../store/scope.js";
-import type { SessionInput, SessionTransportKind } from "./types.js";
-export interface InputPolicyContext {
-    readonly ownerId: string;
-    readonly sessionId: string;
-    readonly transport: SessionTransportKind;
-    readonly input: SessionInput;
-    readonly scope?: EngagementScope | undefined;
-}
-export declare function classifyInteractiveInput(context: InputPolicyContext): RiskDecision;
-/** Redacted, bounded description shown in a confirmation preview. */
-export declare function describeInput(input: SessionInput): string;
-export interface ApprovalBinding {
-    readonly ownerId: string;
-    readonly sessionId: string;
-    readonly input: SessionInput;
-    readonly decision: RiskDecision["level"];
-}
-export declare class ApprovalTokenVault {
-    private readonly now;
-    private readonly tokens;
-    constructor(now?: () => number);
-    mint(binding: ApprovalBinding): string;
-    /**
-     * Validate and invalidate atomically. Any change to owner, session, bytes,
-     * kind, submit behavior, or decision fails, and a token is single-use so a
-     * concurrent replay cannot deliver the same input twice.
-     */
-    consume(token: string | undefined, binding: ApprovalBinding): boolean;
-    /** Expiry sweep; single-use semantics make stale tokens unusable anyway. */
-    private sweep;
-}

package/dist/interactive-session/input-policy.js

@@ -1,163 +0,0 @@
-/**
- * Contextual policy for later interactive input.
- *
- * Generic tool classification cannot decide this: the risk of a keystroke depends
- * on the owning session, the exact bytes, and whether they are being submitted.
- * Risk is monotonic with the shell boundary — a command sent into a session is
- * never rated lower than the same command run through `shell.exec`.
- */
-import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
-import { classifyShellCommand } from "../safety/classifier.js";
-import { maskSecret } from "../llm/provider.js";
-/** Controls that only move a cursor or redraw a prompt carry no risk. */
-const SAFE_CONTROLS = new Set([
-    "escape",
-    "tab",
-    "backspace",
-    "up",
-    "down",
-    "left",
-    "right",
-    "interrupt",
-    "suspend",
-    "eof",
-]);
-/**
- * Short, unambiguous REPL answers. Everything outside this set is treated as
- * unknown submitted text and therefore requires confirmation.
- */
-const RECOGNIZED_ANSWER_RE = /^(y|n|yes|no|q|quit|exit|:q|:q!|help|\?|\d+(\.\d+)?|true|false|none|null)$/i;
-/** REPL constructs that destroy data or escape the interpreter irreversibly. */
-const REPL_DESTRUCTIVE_PATTERNS = [
-    /\bshutil\s*\.\s*rmtree\b/i,
-    /\bos\s*\.\s*(remove|unlink|rmdir)\b/i,
-    /\bfs\s*\.\s*(unlink|rm|rmdir)Sync?\b/i,
-    /\bDROP\s+(TABLE|DATABASE|SCHEMA)\b/i,
-    /\bTRUNCATE\s+TABLE\b/i,
-    /\bDELETE\s+FROM\b(?![\s\S]*\bWHERE\b)/i,
-    /\bRemove-Item\b[\s\S]*-Recurse/i,
-];
-/** REPL constructs that mutate state or reach outside the interpreter. */
-const REPL_MUTATOR_PATTERNS = [
-    /\bos\s*\.\s*system\b/i,
-    /\bsubprocess\s*\.\s*(run|call|Popen|check_output)\b/i,
-    /\bchild_process\b/i,
-    /\brequire\s*\(\s*['"]fs['"]\s*\)/i,
-    /\b(eval|exec)\s*\(/i,
-    /\bopen\s*\([^)]*['"][wa]\+?['"]/i,
-    /\bInvoke-(Expression|WebRequest|RestMethod)\b/i,
-    /\b(UPDATE|INSERT\s+INTO|ALTER\s+TABLE|GRANT|REVOKE)\b/i,
-    /\bpip\s+install\b|\bnpm\s+(install|i)\b/i,
-];
-const EXFILTRATION_PATTERNS = [
-    /\b(curl|wget)\b[\s\S]*\|\s*(sh|bash|zsh|python)/i,
-    /\bbase64\b[\s\S]*\|\s*(curl|wget|nc)\b/i,
-];
-export function classifyInteractiveInput(context) {
-    const { input } = context;
-    if (input.kind === "eof") {
-        return { level: "safe", reason: "Closing session input has no command effect" };
-    }
-    if (input.kind === "control") {
-        return SAFE_CONTROLS.has(input.control)
-            ? { level: "safe", reason: "Terminal navigation control" }
-            : { level: "confirm", reason: "Unrecognized terminal control" };
-    }
-    const text = input.text;
-    if (text.trim().length === 0) {
-        return { level: "safe", reason: "Whitespace-only input has no command effect" };
-    }
-    if (EXFILTRATION_PATTERNS.some((pattern) => pattern.test(text))) {
-        return {
-            level: "block",
-            reason: "Input pipes remote content into an interpreter or exports local data",
-        };
-    }
-    if (REPL_DESTRUCTIVE_PATTERNS.some((pattern) => pattern.test(text))) {
-        return { level: "block", reason: "Input matches a destructive REPL pattern" };
-    }
-    // Never rate an interactive command below the shell boundary for the same text.
-    const shellDecision = classifyShellCommand(text, context.scope ? { scope: context.scope } : {});
-    if (shellDecision.level !== "safe")
-        return shellDecision;
-    if (REPL_MUTATOR_PATTERNS.some((pattern) => pattern.test(text))) {
-        return { level: "confirm", reason: "Input mutates state through an interpreter" };
-    }
-    if (RECOGNIZED_ANSWER_RE.test(text.trim())) {
-        return { level: "safe", reason: "Recognized prompt answer" };
-    }
-    return {
-        level: "confirm",
-        reason: "Submitted interactive text is not recognized as read-only",
-    };
-}
-/** Redacted, bounded description shown in a confirmation preview. */
-export function describeInput(input) {
-    if (input.kind === "eof")
-        return "close session input (EOF)";
-    if (input.kind === "control")
-        return `control: ${input.control}`;
-    const trimmed = input.text.trim();
-    const preview = trimmed.length > 120 ? `${trimmed.slice(0, 120)}…` : trimmed;
-    const body = /^[\x20-\x7e]*$/.test(preview) ? preview : maskSecret(preview);
-    return `${input.submit === "enter" ? "submit" : "type"}: ${body}`;
-}
-// --- Approval tokens ----------------------------------------------------
-const TOKEN_TTL_MS = 60_000;
-/** Per-process key: digests are never persisted, logged, or returned. */
-const digestKey = randomBytes(32);
-function bindingDigest(binding) {
-    const { input } = binding;
-    const parts = [
-        binding.ownerId,
-        binding.sessionId,
-        input.kind,
-        input.kind === "text" ? input.text : input.kind === "control" ? input.control : "",
-        input.kind === "text" ? input.submit : "",
-        binding.decision,
-    ];
-    return createHmac("sha256", digestKey).update(parts.join("\u0000")).digest("hex");
-}
-export class ApprovalTokenVault {
-    now;
-    tokens = new Map();
-    constructor(now = Date.now) {
-        this.now = now;
-    }
-    mint(binding) {
-        this.sweep();
-        const token = randomBytes(24).toString("base64url");
-        this.tokens.set(token, {
-            digest: bindingDigest(binding),
-            expiresAt: this.now() + TOKEN_TTL_MS,
-        });
-        return token;
-    }
-    /**
-     * Validate and invalidate atomically. Any change to owner, session, bytes,
-     * kind, submit behavior, or decision fails, and a token is single-use so a
-     * concurrent replay cannot deliver the same input twice.
-     */
-    consume(token, binding) {
-        if (!token)
-            return false;
-        const entry = this.tokens.get(token);
-        if (!entry)
-            return false;
-        this.tokens.delete(token);
-        if (entry.expiresAt <= this.now())
-            return false;
-        const expected = Buffer.from(bindingDigest(binding), "utf8");
-        const actual = Buffer.from(entry.digest, "utf8");
-        return expected.length === actual.length && timingSafeEqual(expected, actual);
-    }
-    /** Expiry sweep; single-use semantics make stale tokens unusable anyway. */
-    sweep() {
-        const now = this.now();
-        for (const [token, entry] of this.tokens) {
-            if (entry.expiresAt <= now)
-                this.tokens.delete(token);
-        }
-    }
-}
-//# sourceMappingURL=input-policy.js.map

package/dist/interactive-session/input-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"input-policy.js","sourceRoot":"","sources":["../../src/interactive-session/input-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG/D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAWhD,yEAAyE;AACzE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,QAAQ;IACR,KAAK;IACL,WAAW;IACX,IAAI;IACJ,MAAM;IACN,MAAM;IACN,OAAO;IACP,WAAW;IACX,SAAS;IACT,KAAK;CACN,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,oBAAoB,GACxB,6EAA6E,CAAC;AAEhF,gFAAgF;AAChF,MAAM,yBAAyB,GAAsB;IACnD,2BAA2B;IAC3B,sCAAsC;IACtC,uCAAuC;IACvC,qCAAqC;IACrC,uBAAuB;IACvB,wCAAwC;IACxC,iCAAiC;CAClC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,qBAAqB,GAAsB;IAC/C,uBAAuB;IACvB,sDAAsD;IACtD,oBAAoB;IACpB,mCAAmC;IACnC,qBAAqB;IACrB,kCAAkC;IAClC,gDAAgD;IAChD,wDAAwD;IACxD,0CAA0C;CAC3C,CAAC;AAEF,MAAM,qBAAqB,GAAsB;IAC/C,kDAAkD;IAClD,yCAAyC;CAC1C,CAAC;AAEF,MAAM,UAAU,wBAAwB,CACtC,OAA2B;IAE3B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YACrC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,6BAA6B,EAAE;YAC1D,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO;YACL,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,sEAAsE;SAC/E,CAAC;IACJ,CAAC;IACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IAChF,CAAC;IAED,gFAAgF;IAChF,MAAM,aAAa,GAAG,oBAAoB,CACxC,IAAI,EACJ,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAC9C,CAAC;IACF,IAAI,aAAa,CAAC,KAAK,KAAK,MAAM;QAAE,OAAO,aAAa,CAAC;IAEzD,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,2DAA2D;KACpE,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,KAAmB;IAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,2BAA2B,CAAC;IAC7D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7E,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5E,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;AACpE,CAAC;AAED,2EAA2E;AAE3E,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,yEAAyE;AACzE,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;AASlC,SAAS,aAAa,CAAC,OAAwB;IAC7C,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAC1B,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,SAAS;QACjB,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAClF,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACzC,OAAO,CAAC,QAAQ;KACjB,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,OAAO,kBAAkB;IAGA;IAFZ,MAAM,GAAG,IAAI,GAAG,EAAiD,CAAC;IAEnF,YAA6B,MAAoB,IAAI,CAAC,GAAG;QAA5B,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAE7D,IAAI,CAAC,OAAwB;QAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE;YACrB,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY;SACrC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,KAAyB,EAAE,OAAwB;QACzD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChF,CAAC;IAED,4EAA4E;IACpE,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;CACF"}

package/dist/interactive-session/manager.d.ts

@@ -1,107 +0,0 @@
-/**
- * Interactive session manager: the single owner of persistent interactive
- * process lifecycle.
- *
- * Ownership is conversation-scoped. Every operation requires an owner id, and a
- * lookup for another owner is indistinguishable from a missing session so the
- * manager cannot be used as an existence oracle. Direct user-terminal handoff is
- * outside this contract by design.
- */
-import type { EngagementScope } from "../store/scope.js";
-import { type InteractiveSessionConfig, type InteractiveSessionOverrides } from "./config.js";
-import { RecoveryJournal, type ReconciliationEntry } from "./recovery-journal.js";
-import { type Clock } from "./runtime.js";
-import { SessionTelemetry } from "./telemetry.js";
-import { type SessionTransportFactory } from "./transport.js";
-import { type CloseAllResult, type CloseOwnerResult, type CloseRequest, type CloseResult, type ListResult, type ReadRequest, type ReadResult, type ResizeRequest, type ResizeResult, type SendRequest, type SendResult, type SessionInput, type SessionOperation, type StartRequest, type StartResult, type StatusResult, type TerminationReason } from "./types.js";
-/** Confirmation surface for a `confirm`-level action. Previews are redacted. */
-export type ConfirmPreview = (request: {
-    readonly title: string;
-    readonly description: string;
-    readonly reason: string;
-}) => Promise<boolean>;
-export interface ManagerRequestExtras {
-    readonly confirm?: ConfirmPreview | undefined;
-    readonly scope?: EngagementScope | undefined;
-}
-export interface InteractiveSessionManagerDeps {
-    readonly config?: InteractiveSessionOverrides | undefined;
-    readonly transports?: SessionTransportFactory | undefined;
-    readonly clock?: Clock | undefined;
-    readonly journal?: RecoveryJournal | undefined;
-    readonly telemetry?: SessionTelemetry | undefined;
-    readonly artifactBaseDir?: string | undefined;
-}
-export declare class InteractiveSessionManager {
-    private readonly registry;
-    private readonly runtimes;
-    private readonly approvals;
-    private readonly telemetry;
-    private readonly journal;
-    private readonly cleanup;
-    private readonly transports;
-    private readonly clock;
-    private readonly baseConfig;
-    private readonly artifactBaseDir;
-    private readonly ownerCloses;
-    constructor(deps?: InteractiveSessionManagerDeps);
-    get config(): InteractiveSessionConfig;
-    /** Reconcile crashed-session records. Must run before tools are enabled. */
-    reconcileOrphans(): ReconciliationEntry[];
-    ptyCapability(): Promise<{
-        available: boolean;
-        reason?: string | undefined;
-    }>;
-    start(request: StartRequest & ManagerRequestExtras): Promise<StartResult>;
-    private launchError;
-    private launchWithDeadline;
-    send(request: SendRequest & ManagerRequestExtras): Promise<SendResult>;
-    private sendError;
-    /**
-     * Acceptance is all-or-nothing under the mutation lock: either the whole action
-     * is reserved within the backpressure bound, or no sequence or queue state
-     * changes at all.
-     */
-    private accept;
-    private assertControlSupported;
-    /**
-     * Quiet detection starts at delivery completion: only output observed after
-     * this point resets the quiet timer, while the absolute deadline never extends.
-     */
-    private gather;
-    read(request: ReadRequest): Promise<ReadResult>;
-    private waitForOutput;
-    status(request: {
-        ownerId: string;
-        id: string;
-    }): StatusResult;
-    list(request: {
-        ownerId: string;
-    }): ListResult;
-    resize(request: ResizeRequest): Promise<ResizeResult>;
-    close(request: CloseRequest): Promise<CloseResult>;
-    /** Owner cancellation: closes every live session owned by a conversation. */
-    cancelOwner(ownerId: string): Promise<CloseOwnerResult>;
-    /**
-     * Fence an owner synchronously, then start one tracked close. Callers rebinding
-     * a conversation id must fence before the old id becomes unreachable.
-     */
-    beginCloseOwner(ownerId: string, reason?: TerminationReason): Promise<CloseOwnerResult>;
-    /** Await any teardown already started for an owner. */
-    awaitOwnerClose(ownerId: string): Promise<void>;
-    closeAll(reason?: TerminationReason): Promise<CloseAllResult>;
-    private closeOwnerSessions;
-    private finalizeRecord;
-    private finalize;
-    private authorizeCommand;
-    private authorizeInput;
-    private assertOwner;
-    private assertNotFenced;
-    private assertEnabled;
-    private notFound;
-    private requireRuntime;
-}
-/** Strict validation of the dependent input fields before acceptance. */
-export declare function validateInput(input: SessionInput | undefined, operation: SessionOperation): SessionInput;
-/** Process-wide manager, mirroring the existing process-wide job manager. */
-export declare const interactiveSessionManager: InteractiveSessionManager;