@provos/ironcurtain 0.10.0 → 0.12.0

package/dist/docker/spawn-with-idle-timeout.js

@@ -0,0 +1,152 @@
+/**
+ * Runs a child process with an *idle* timeout: the watchdog resets every time
+ * the child emits stdout or stderr, and only fires when no output has been
+ * seen for `idleTimeoutMs`. This is the right primitive for long-running
+ * Docker operations (pull/build) where total wall-clock can legitimately span
+ * hours, but a genuine hang means the daemon has stopped emitting progress.
+ *
+ * The child's stdout/stderr are also piped to the parent's stdout/stderr so
+ * the user sees layer downloads / build steps in real time. Today's
+ * execFile-based callers buffer everything until exit, which is what makes
+ * pulls feel like silent hangs.
+ */
+import { spawn as nodeSpawn } from 'node:child_process';
+/**
+ * Cap on the rolling stderr tail kept for error messages. Measured in JS
+ * string length (UTF-16 code units), not UTF-8 bytes — for ASCII-only
+ * output (the overwhelming majority of docker stderr) the two are equal;
+ * for multi-byte UTF-8 the retained byte count is up to ~3× this value.
+ * 4096 is comfortably enough headroom for the short stderr blurbs we
+ * actually quote back to the user.
+ */
+const STDERR_TAIL_CHARS = 4096;
+const DEFAULT_KILL_GRACE_MS = 2_000;
+/**
+ * Spawns `cmd args`, streams stdio to the parent terminal, and enforces an
+ * idle (not wall-clock) timeout. Resolves on clean exit; rejects on
+ * non-zero exit, idle timeout, or spawn error.
+ */
+export function spawnWithIdleTimeout(cmd, args, options) {
+    const { idleTimeoutMs, operation, env, stdoutSink = process.stdout, stderrSink = process.stderr, spawn = nodeSpawn, killGraceMs = DEFAULT_KILL_GRACE_MS, } = options;
+    return new Promise((resolvePromise, rejectPromise) => {
+        let child;
+        try {
+            child = spawn(cmd, [...args], {
+                stdio: ['ignore', 'pipe', 'pipe'],
+                env: env ? { ...process.env, ...env } : process.env,
+            });
+        }
+        catch (err) {
+            // `spawn()` can throw synchronously on invalid options/args (the
+            // async `error` event handles the ENOENT-class failures). Reformat
+            // with the operation label so callers get a consistent error shape.
+            rejectPromise(new Error(`${operation} failed to spawn: ${err instanceof Error ? err.message : String(err)}`));
+            return;
+        }
+        const safeKill = (signal) => {
+            try {
+                child.kill(signal);
+            }
+            catch {
+                // kill() returns false (doesn't throw) on ESRCH per Node's docs;
+                // a throw here would only come from an invalid signal name or an
+                // unexpectedly torn-down child handle. Either way the timeout
+                // callback should never crash the process.
+            }
+        };
+        let stderrTail = '';
+        let settled = false;
+        let exited = false;
+        let idleTimer = null;
+        const settle = (action) => {
+            if (settled)
+                return;
+            settled = true;
+            if (idleTimer) {
+                clearTimeout(idleTimer);
+                idleTimer = null;
+            }
+            // Detach data listeners so a SIGTERM-resistant child can't keep
+            // spamming the user's terminal (or mutating `stderrTail`) between
+            // the promise rejection and the eventual SIGKILL. The kill-escalation
+            // setTimeout is left to fire on its own schedule.
+            child.stdout?.removeAllListeners('data');
+            child.stderr?.removeAllListeners('data');
+            action();
+        };
+        const onIdleTimeout = () => {
+            // Defensive bail: settle() clears the idle timer synchronously, so a
+            // queued callback should not see settled=true — but if a future edit
+            // ever rearranges the close path, the guard prevents duplicate kills
+            // (and a no-op settle()) from this callback.
+            if (settled || exited)
+                return;
+            // Two-phase kill: SIGTERM first, SIGKILL after the grace period for
+            // children that ignore SIGTERM. We gate the SIGKILL on our own
+            // `exited` flag (set in the `close` handler) rather than on
+            // `child.killed`, because Node flips `child.killed` to true the moment
+            // a signal is *sent*, not when the child actually exits — using it
+            // here would make SIGKILL unreachable in practice. The grace timer is
+            // `.unref()`'d so a dropped promise never keeps the Node event loop
+            // alive on it alone.
+            safeKill('SIGTERM');
+            setTimeout(() => {
+                if (!exited)
+                    safeKill('SIGKILL');
+            }, killGraceMs).unref();
+            settle(() => {
+                rejectPromise(new Error(`${operation} produced no output for ${idleTimeoutMs}ms and was killed. ` +
+                    `The Docker daemon may be hung or the registry/builder is unresponsive.`));
+            });
+        };
+        const resetIdleTimer = () => {
+            if (settled)
+                return;
+            if (idleTimer)
+                clearTimeout(idleTimer);
+            idleTimer = setTimeout(onIdleTimeout, idleTimeoutMs);
+            // Match `killTimer.unref()`: don't keep the event loop alive if the
+            // caller drops the promise reference (e.g. a CLI early-exit path).
+            idleTimer.unref();
+        };
+        const forward = (chunk, sink, captureTail) => {
+            const text = typeof chunk === 'string' ? chunk : chunk.toString('utf-8');
+            // Best-effort write; ignore backpressure since stdio piping is informational.
+            sink.write(text);
+            if (captureTail) {
+                stderrTail = (stderrTail + text).slice(-STDERR_TAIL_CHARS);
+            }
+            resetIdleTimer();
+        };
+        child.stdout?.on('data', (chunk) => {
+            forward(chunk, stdoutSink, false);
+        });
+        child.stderr?.on('data', (chunk) => {
+            forward(chunk, stderrSink, true);
+        });
+        child.on('error', (err) => {
+            settle(() => {
+                rejectPromise(new Error(`${operation} failed to spawn: ${err.message}`));
+            });
+        });
+        child.on('close', (code, signal) => {
+            exited = true;
+            if (settled)
+                return;
+            if (code === 0 && !signal) {
+                settle(() => resolvePromise());
+                return;
+            }
+            const tail = stderrTail.trim();
+            const tailSuffix = tail ? `: ${tail}` : '';
+            const reason = signal ? `killed by signal ${signal}` : `exited with code ${code ?? 'unknown'}`;
+            settle(() => {
+                rejectPromise(new Error(`${operation} ${reason}${tailSuffix}`));
+            });
+        });
+        // Arm the watchdog. If the child produces no output at all, this fires
+        // exactly once at `idleTimeoutMs` from start.
+        resetIdleTimer();
+    });
+}
+//# sourceMappingURL=spawn-with-idle-timeout.js.map

package/dist/docker/spawn-with-idle-timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-with-idle-timeout.js","sourceRoot":"","sources":["../../src/docker/spawn-with-idle-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAyBxD;;;;;;;GAOG;AACH,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,IAAuB,EACvB,OAAoC;IAEpC,MAAM,EACJ,aAAa,EACb,SAAS,EACT,GAAG,EACH,UAAU,GAAG,OAAO,CAAC,MAAM,EAC3B,UAAU,GAAG,OAAO,CAAC,MAAM,EAC3B,KAAK,GAAG,SAAS,EACjB,WAAW,GAAG,qBAAqB,GACpC,GAAG,OAAO,CAAC;IAEZ,OAAO,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACzD,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;gBAC5B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACjC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;aACpD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,iEAAiE;YACjE,mEAAmE;YACnE,oEAAoE;YACpE,aAAa,CAAC,IAAI,KAAK,CAAC,GAAG,SAAS,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9G,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;YAChD,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,iEAAiE;gBACjE,8DAA8D;gBAC9D,2CAA2C;YAC7C,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,SAAS,GAA0B,IAAI,CAAC;QAE5C,MAAM,MAAM,GAAG,CAAC,MAAkB,EAAQ,EAAE;YAC1C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,SAAS,EAAE,CAAC;gBACd,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,SAAS,GAAG,IAAI,CAAC;YACnB,CAAC;YACD,gEAAgE;YAChE,kEAAkE;YAClE,sEAAsE;YACtE,kDAAkD;YAClD,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACzC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,EAAE,CAAC;QACX,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,GAAS,EAAE;YAC/B,qEAAqE;YACrE,qEAAqE;YACrE,qEAAqE;YACrE,6CAA6C;YAC7C,IAAI,OAAO,IAAI,MAAM;gBAAE,OAAO;YAC9B,oEAAoE;YACpE,+DAA+D;YAC/D,4DAA4D;YAC5D,uEAAuE;YACvE,mEAAmE;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,qBAAqB;YACrB,QAAQ,CAAC,SAAS,CAAC,CAAC;YACpB,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,MAAM;oBAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC,EAAE,WAAW,CAAC,CAAC,KAAK,EAAE,CAAC;YAExB,MAAM,CAAC,GAAG,EAAE;gBACV,aAAa,CACX,IAAI,KAAK,CACP,GAAG,SAAS,2BAA2B,aAAa,qBAAqB;oBACvE,wEAAwE,CAC3E,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,cAAc,GAAG,GAAS,EAAE;YAChC,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,SAAS,GAAG,UAAU,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YACrD,oEAAoE;YACpE,mEAAmE;YACnE,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,CAAC,KAAsB,EAAE,IAA2B,EAAE,WAAoB,EAAQ,EAAE;YAClG,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzE,8EAA8E;YAC9E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjB,IAAI,WAAW,EAAE,CAAC;gBAChB,UAAU,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC7D,CAAC;YACD,cAAc,EAAE,CAAC;QACnB,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAClD,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAClD,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;YAC/B,MAAM,CAAC,GAAG,EAAE;gBACV,aAAa,CAAC,IAAI,KAAK,CAAC,GAAG,SAAS,qBAAqB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,MAA6B,EAAE,EAAE;YACvE,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1B,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC,CAAC,oBAAoB,IAAI,IAAI,SAAS,EAAE,CAAC;YAC/F,MAAM,CAAC,GAAG,EAAE;gBACV,aAAa,CAAC,IAAI,KAAK,CAAC,GAAG,SAAS,IAAI,MAAM,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,uEAAuE;QACvE,8CAA8C;QAC9C,cAAc,EAAE,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/docker/sse-extractor.d.ts

@@ -0,0 +1,51 @@
+/**
+ * SSE extraction transform stream for the MITM proxy.
+ *
+ * Sits in the response pipeline between the upstream LLM API and the
+ * Docker container. All data passes through unmodified -- the extractor
+ * only emits structured side-channel events via a callback.
+ *
+ * Handles Anthropic and OpenAI SSE formats. Unknown providers emit
+ * raw events for every complete SSE line.
+ */
+import { Transform, type TransformCallback } from 'node:stream';
+import type { SseEventCallback, SseProvider } from './token-stream-types.js';
+/** Maximum length of a single SSE line buffer before truncation (1 MB). */
+export declare const MAX_SSE_LINE_LENGTH = 1048576;
+/**
+ * A passthrough Transform stream that intercepts SSE data flowing
+ * through the MITM proxy without modifying the forwarded bytes.
+ *
+ * Usage:
+ *   upstreamRes.pipe(extractor).pipe(clientRes)
+ *
+ * The extractor reassembles SSE lines across chunk boundaries,
+ * parses provider-specific event formats, and invokes the callback
+ * with structured TokenStreamEvents.
+ *
+ * All data passes through unmodified. The extractor never drops,
+ * delays, or modifies chunks. If parsing fails for any event,
+ * a `raw` event is emitted and data continues to flow.
+ *
+ * ERROR CONTRACT: `_transform()` must NEVER throw or call
+ * `callback(err)`. The entire body is wrapped in a try/catch
+ * that always calls `callback(null, chunk)`. A parsing bug must
+ * never interrupt the forwarding path to the Docker container.
+ */
+export declare class SseExtractorTransform extends Transform {
+    private lineBuffer;
+    private currentEventType;
+    private readonly provider;
+    private readonly onEvent;
+    constructor(provider: SseProvider, onEvent: SseEventCallback);
+    _transform(chunk: Buffer, _encoding: BufferEncoding, callback: TransformCallback): void;
+    _flush(callback: TransformCallback): void;
+    private processText;
+    private processLine;
+    private processUnknownLine;
+    private parseAnthropicData;
+    private parseOpenaiData;
+    private makeMessageEnd;
+    /** Invoke the callback, swallowing any listener errors. */
+    private emitSafe;
+}

package/dist/docker/sse-extractor.js

@@ -0,0 +1,303 @@
+/**
+ * SSE extraction transform stream for the MITM proxy.
+ *
+ * Sits in the response pipeline between the upstream LLM API and the
+ * Docker container. All data passes through unmodified -- the extractor
+ * only emits structured side-channel events via a callback.
+ *
+ * Handles Anthropic and OpenAI SSE formats. Unknown providers emit
+ * raw events for every complete SSE line.
+ */
+import { Transform } from 'node:stream';
+/** Maximum length of a single SSE line buffer before truncation (1 MB). */
+export const MAX_SSE_LINE_LENGTH = 1_048_576;
+/** Safely extract a string from an unknown value. */
+function str(value, fallback = '') {
+    return typeof value === 'string' ? value : fallback;
+}
+/** Safely extract a number from an unknown value. */
+function num(value, fallback = 0) {
+    return typeof value === 'number' ? value : fallback;
+}
+/** Safely extract a record from an unknown value. */
+function obj(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+/** Safely extract an array from an unknown value. */
+function arr(value) {
+    return Array.isArray(value) ? value : undefined;
+}
+/**
+ * A passthrough Transform stream that intercepts SSE data flowing
+ * through the MITM proxy without modifying the forwarded bytes.
+ *
+ * Usage:
+ *   upstreamRes.pipe(extractor).pipe(clientRes)
+ *
+ * The extractor reassembles SSE lines across chunk boundaries,
+ * parses provider-specific event formats, and invokes the callback
+ * with structured TokenStreamEvents.
+ *
+ * All data passes through unmodified. The extractor never drops,
+ * delays, or modifies chunks. If parsing fails for any event,
+ * a `raw` event is emitted and data continues to flow.
+ *
+ * ERROR CONTRACT: `_transform()` must NEVER throw or call
+ * `callback(err)`. The entire body is wrapped in a try/catch
+ * that always calls `callback(null, chunk)`. A parsing bug must
+ * never interrupt the forwarding path to the Docker container.
+ */
+export class SseExtractorTransform extends Transform {
+    lineBuffer = '';
+    currentEventType = '';
+    provider;
+    onEvent;
+    constructor(provider, onEvent) {
+        super();
+        this.provider = provider;
+        this.onEvent = onEvent;
+    }
+    _transform(chunk, _encoding, callback) {
+        try {
+            const text = chunk.toString('utf-8');
+            this.processText(text);
+        }
+        catch {
+            // Parsing errors must never propagate -- the forwarding path is sacred.
+        }
+        callback(null, chunk);
+    }
+    _flush(callback) {
+        try {
+            if (this.lineBuffer.length > 0) {
+                this.processLine(this.lineBuffer);
+                this.lineBuffer = '';
+            }
+        }
+        catch {
+            // Same error contract as _transform.
+        }
+        callback();
+    }
+    processText(text) {
+        let pos = 0;
+        while (pos < text.length) {
+            const nextLf = text.indexOf('\n', pos);
+            const nextCr = text.indexOf('\r', pos);
+            // Find the nearest line ending (-1 means not found)
+            let lineEnd;
+            if (nextLf === -1 && nextCr === -1) {
+                // No more line endings -- buffer the rest
+                this.lineBuffer += text.slice(pos);
+                if (this.lineBuffer.length > MAX_SSE_LINE_LENGTH) {
+                    this.emitSafe({
+                        kind: 'raw',
+                        eventType: 'truncated',
+                        data: '',
+                        timestamp: Date.now(),
+                    });
+                    this.lineBuffer = '';
+                }
+                return;
+            }
+            else if (nextCr === -1) {
+                lineEnd = nextLf;
+            }
+            else if (nextLf === -1) {
+                lineEnd = nextCr;
+            }
+            else {
+                lineEnd = Math.min(nextLf, nextCr);
+            }
+            // Append the segment before the line ending and process
+            this.lineBuffer += text.slice(pos, lineEnd);
+            if (this.lineBuffer.length > MAX_SSE_LINE_LENGTH) {
+                this.emitSafe({
+                    kind: 'raw',
+                    eventType: 'truncated',
+                    data: '',
+                    timestamp: Date.now(),
+                });
+                this.lineBuffer = '';
+            }
+            else {
+                this.processLine(this.lineBuffer);
+                this.lineBuffer = '';
+            }
+            // Advance past the line ending, consuming CRLF as a single break
+            pos = lineEnd + 1;
+            if (text[lineEnd] === '\r' && pos < text.length && text[pos] === '\n') {
+                pos++;
+            }
+        }
+    }
+    processLine(line) {
+        if (this.provider === 'unknown') {
+            this.processUnknownLine(line);
+            return;
+        }
+        if (line === '') {
+            // Empty line = SSE event boundary. Reset event type for next event.
+            this.currentEventType = '';
+            return;
+        }
+        if (line.startsWith('event:')) {
+            this.currentEventType = line.slice(6).trim();
+            return;
+        }
+        if (line.startsWith('data:')) {
+            const data = line.slice(5).trim();
+            if (this.provider === 'anthropic') {
+                this.parseAnthropicData(data);
+            }
+            else {
+                this.parseOpenaiData(data);
+            }
+        }
+        // Ignore other SSE fields (id:, retry:, comments starting with :)
+    }
+    processUnknownLine(line) {
+        if (line === '')
+            return;
+        this.emitSafe({
+            kind: 'raw',
+            eventType: 'unknown_provider',
+            data: line,
+            timestamp: Date.now(),
+        });
+    }
+    parseAnthropicData(data) {
+        let parsed;
+        try {
+            parsed = JSON.parse(data);
+        }
+        catch {
+            this.emitSafe({ kind: 'raw', eventType: this.currentEventType || 'parse_error', data, timestamp: Date.now() });
+            return;
+        }
+        const root = obj(parsed);
+        if (!root)
+            return;
+        const type = str(root['type']);
+        const now = Date.now();
+        if (type === 'message_start') {
+            const message = obj(root['message']);
+            this.emitSafe({ kind: 'message_start', model: str(message?.['model'], 'unknown'), timestamp: now });
+            return;
+        }
+        if (type === 'content_block_delta') {
+            const delta = obj(root['delta']);
+            if (!delta)
+                return;
+            const deltaType = str(delta['type']);
+            if (deltaType === 'text_delta') {
+                this.emitSafe({ kind: 'text_delta', text: str(delta['text']), timestamp: now });
+                return;
+            }
+            if (deltaType === 'input_json_delta') {
+                this.emitSafe({ kind: 'tool_use', toolName: '', inputDelta: str(delta['partial_json']), timestamp: now });
+                return;
+            }
+        }
+        if (type === 'content_block_start') {
+            const block = obj(root['content_block']);
+            if (str(block?.['type']) === 'tool_use') {
+                this.emitSafe({ kind: 'tool_use', toolName: str(block?.['name']), inputDelta: '', timestamp: now });
+                return;
+            }
+        }
+        if (type === 'message_delta') {
+            const delta = obj(root['delta']);
+            const usage = obj(root['usage']);
+            this.emitSafe(this.makeMessageEnd(str(delta?.['stop_reason']), 0, num(usage?.['output_tokens'])));
+            return;
+        }
+        if (type === 'message_stop') {
+            this.emitSafe({ kind: 'raw', eventType: 'message_stop', data, timestamp: now });
+            return;
+        }
+        if (type === 'error') {
+            const error = obj(root['error']);
+            this.emitSafe({ kind: 'error', message: str(error?.['message'], data), timestamp: now });
+            return;
+        }
+        // Unknown Anthropic event type -- emit as raw.
+        this.emitSafe({ kind: 'raw', eventType: type || this.currentEventType || 'unknown', data, timestamp: now });
+    }
+    parseOpenaiData(data) {
+        if (data === '[DONE]') {
+            this.emitSafe(this.makeMessageEnd('stop', 0, 0));
+            return;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(data);
+        }
+        catch {
+            this.emitSafe({ kind: 'raw', eventType: 'parse_error', data, timestamp: Date.now() });
+            return;
+        }
+        const root = obj(parsed);
+        if (!root)
+            return;
+        const now = Date.now();
+        const choices = arr(root['choices']);
+        if (!choices || choices.length === 0) {
+            const model = typeof root['model'] === 'string' ? root['model'] : undefined;
+            if (model) {
+                this.emitSafe({ kind: 'message_start', model, timestamp: now });
+                return;
+            }
+            this.emitSafe({ kind: 'raw', eventType: 'openai_chunk', data, timestamp: now });
+            return;
+        }
+        const choice = choices[0];
+        const delta = obj(choice['delta']);
+        if (!delta) {
+            const finishReason = str(choice['finish_reason']) || undefined;
+            if (finishReason) {
+                this.emitSafe(this.makeMessageEnd(finishReason, 0, 0));
+            }
+            return;
+        }
+        if (typeof delta['content'] === 'string') {
+            this.emitSafe({ kind: 'text_delta', text: delta['content'], timestamp: now });
+            return;
+        }
+        const toolCalls = arr(delta['tool_calls']);
+        if (toolCalls && toolCalls.length > 0) {
+            const tc = toolCalls[0];
+            const fn = obj(tc['function']);
+            this.emitSafe({
+                kind: 'tool_use',
+                toolName: str(fn?.['name']),
+                inputDelta: str(fn?.['arguments']),
+                timestamp: now,
+            });
+            return;
+        }
+        // Empty delta with finish_reason (common OpenAI pattern for stream end).
+        const finishReason = str(choice['finish_reason']) || undefined;
+        if (finishReason) {
+            this.emitSafe(this.makeMessageEnd(finishReason, 0, 0));
+            return;
+        }
+        // Unknown delta shape -- emit as raw.
+        this.emitSafe({ kind: 'raw', eventType: 'openai_delta', data, timestamp: now });
+    }
+    makeMessageEnd(stopReason, inputTokens, outputTokens) {
+        return { kind: 'message_end', stopReason, inputTokens, outputTokens, timestamp: Date.now() };
+    }
+    /** Invoke the callback, swallowing any listener errors. */
+    emitSafe(event) {
+        try {
+            this.onEvent(event);
+        }
+        catch {
+            // Listener errors must never propagate to the stream pipeline.
+        }
+    }
+}
+//# sourceMappingURL=sse-extractor.js.map

package/dist/docker/sse-extractor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-extractor.js","sourceRoot":"","sources":["../../src/docker/sse-extractor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAC;AAGhE,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAE7C,qDAAqD;AACrD,SAAS,GAAG,CAAC,KAAc,EAAE,QAAQ,GAAG,EAAE;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtD,CAAC;AAED,qDAAqD;AACrD,SAAS,GAAG,CAAC,KAAc,EAAE,QAAQ,GAAG,CAAC;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtD,CAAC;AAED,qDAAqD;AACrD,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,qDAAqD;AACrD,SAAS,GAAG,CAAC,KAAc;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAwC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,qBAAsB,SAAQ,SAAS;IAC1C,UAAU,GAAG,EAAE,CAAC;IAChB,gBAAgB,GAAG,EAAE,CAAC;IACb,QAAQ,CAAc;IACtB,OAAO,CAAmB;IAE3C,YAAY,QAAqB,EAAE,OAAyB;QAC1D,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,SAAyB,EAAE,QAA2B;QAC9E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;QACD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,CAAC,QAA2B;QAChC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAClC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QACD,QAAQ,EAAE,CAAC;IACb,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAEvC,oDAAoD;YACpD,IAAI,OAAe,CAAC;YACpB,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBACnC,0CAA0C;gBAC1C,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;oBACjD,IAAI,CAAC,QAAQ,CAAC;wBACZ,IAAI,EAAE,KAAK;wBACX,SAAS,EAAE,WAAW;wBACtB,IAAI,EAAE,EAAE;wBACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;qBACtB,CAAC,CAAC;oBACH,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;gBACvB,CAAC;gBACD,OAAO;YACT,CAAC;iBAAM,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBACzB,OAAO,GAAG,MAAM,CAAC;YACnB,CAAC;iBAAM,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;gBACzB,OAAO,GAAG,MAAM,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACrC,CAAC;YAED,wDAAwD;YACxD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;gBACjD,IAAI,CAAC,QAAQ,CAAC;oBACZ,IAAI,EAAE,KAAK;oBACX,SAAS,EAAE,WAAW;oBACtB,IAAI,EAAE,EAAE;oBACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;gBACH,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAClC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;YACvB,CAAC;YAED,iEAAiE;YACjE,GAAG,GAAG,OAAO,GAAG,CAAC,CAAC;YAClB,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBACtE,GAAG,EAAE,CAAC;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,oEAAoE;YACpE,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC7C,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;gBAClC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,kEAAkE;IACpE,CAAC;IAEO,kBAAkB,CAAC,IAAY;QACrC,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO;QACxB,IAAI,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,kBAAkB;YAC7B,IAAI,EAAE,IAAI;YACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAEO,kBAAkB,CAAC,IAAY;QACrC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,gBAAgB,IAAI,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YACpG,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK;gBAAE,OAAO;YAEnB,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACrC,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChF,OAAO;YACT,CAAC;YACD,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;gBACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC1G,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;YACzC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBACpG,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;YAClG,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QAED,+CAA+C;QAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,gBAAgB,IAAI,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,eAAe,CAAC,IAAY;QAClC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,OAAO;QAElB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,SAAS,CAAC;YAC/D,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzD,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3C,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACxB,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC;gBACZ,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;gBAC3B,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;gBAClC,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,SAAS,CAAC;QAC/D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAClF,CAAC;IAEO,cAAc,CAAC,UAAkB,EAAE,WAAmB,EAAE,YAAoB;QAClF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/F,CAAC;IAED,2DAA2D;IACnD,QAAQ,CAAC,KAAuB;QACtC,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;CACF"}

package/dist/docker/token-stream-bus.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Stateless pub/sub dispatcher for LLM token stream events.
+ *
+ * A module-scoped singleton (see `getTokenStreamBus()`) is shared
+ * across all publishers and subscribers in-process. No buffering --
+ * events are delivered synchronously to current listeners and
+ * discarded if none exist.
+ */
+import type { SessionId } from '../session/types.js';
+import type { TokenStreamEvent, TokenStreamListener } from './token-stream-types.js';
+/**
+ * Stateless pub/sub dispatcher for LLM token stream events.
+ *
+ * The bus maintains two listener collections:
+ * - Per-session: `Map<SessionId, Set<Listener>>` for consumers watching
+ *   a specific session (web UI session view, CLI `observe <session>`)
+ * - Global: `Set<Listener>` for consumers watching all sessions
+ *   (CLI `observe --all`, future Matrix rain visualization)
+ *
+ * `push(sessionId, event)` dispatches to both the session-specific
+ * listener set and the global listener set.
+ *
+ * Invariants:
+ * - `subscribe()` and `subscribeAll()` return unsubscribe functions
+ *   for RAII-style cleanup.
+ * - Subscribers receive only live events from the point of subscription
+ *   forward. There is no history or replay.
+ * - Push never blocks or throws, even with zero subscribers.
+ */
+export interface TokenStreamBus {
+    /**
+     * Push an event to all listeners for the given session and all
+     * global listeners. Discarded silently if no listeners exist.
+     */
+    push(sessionId: SessionId, event: TokenStreamEvent): void;
+    /**
+     * Subscribe to a single session's token stream.
+     * The listener receives only live events from this point forward.
+     *
+     * @returns An unsubscribe function. Calling it removes the listener.
+     */
+    subscribe(sessionId: SessionId, listener: TokenStreamListener): () => void;
+    /**
+     * Subscribe to token stream events from all sessions.
+     * The listener receives every event pushed to the bus,
+     * regardless of session.
+     *
+     * @returns An unsubscribe function. Calling it removes the listener.
+     */
+    subscribeAll(listener: TokenStreamListener): () => void;
+    /**
+     * Signal that a session has ended. Removes the session's
+     * per-session listener set.
+     */
+    endSession(sessionId: SessionId): void;
+}
+/** Creates a new TokenStreamBus instance. */
+export declare function createTokenStreamBus(): TokenStreamBus;
+/**
+ * Returns the module-scoped singleton TokenStreamBus, creating it on
+ * first access. Subsequent calls return the same instance.
+ *
+ * Use this from daemon-level producers/consumers (MITM proxy, web UI
+ * bridge, observe CLI) that all need to share a single bus. Tests that
+ * want isolated, stack-local instances should call `createTokenStreamBus()`
+ * directly.
+ */
+export declare function getTokenStreamBus(): TokenStreamBus;
+/**
+ * Clears the module-scoped singleton so the next `getTokenStreamBus()`
+ * call returns a fresh instance. Intended for test `beforeEach` hooks.
+ *
+ * INVARIANT: do NOT call this while any `TokenStreamBridge` instance has
+ * active subscriptions. The bridge caches bus unsubscribe handles in
+ * `this.subscriptions` / `this.globalUnsubscribe` that are bound to the
+ * old bus; after reset, subsequent `addClient`/`addGlobalClient` calls
+ * will subscribe on the NEW bus, but events pushed on behalf of old
+ * subscriptions still target the stale bus and never reach the new one.
+ * The safe pattern is: construct a fresh `TokenStreamBridge` after every
+ * reset (i.e. build both in the same `beforeEach`). Daemon production
+ * code never resets.
+ */
+export declare function resetTokenStreamBus(): void;