@provos/ironcurtain 0.11.0 → 0.13.0

package/dist/web-ui/dispatch/persona-dispatch.js

@@ -1,39 +1,128 @@
 /**
  * Persona-related JSON-RPC method dispatch.
  *
- * Handles `personas.*` methods: list, get, compile.
+ * Handles `personas.*` methods: list, get, the Phase 1b streamed compile + its
+ * read methods (compileStream / getCompile / listCompiles), and the Phase 1c
+ * CRUD methods. There is a SINGLE compile surface (compileStream) — it is both
+ * kill-switch gated and runs the broad-policy validator. The old blocking
+ * `personas.compile` method was removed in Phase 1c because it was an ungated,
+ * unvalidated second compile path.
  */
-import { existsSync, readFileSync } from 'node:fs';
-import { resolve } from 'node:path';
 import { z } from 'zod';
 import { validateParams } from './types.js';
-import { RpcError, MethodNotFoundError } from '../web-ui-types.js';
-import { scanPersonas } from '../../mux/persona-scanner.js';
-import { getPersonaConstitutionPath, getPersonaGeneratedDir, loadPersona } from '../../persona/resolve.js';
+import { RpcError, MethodNotFoundError, } from '../web-ui-types.js';
+import { getPersonaDetail as getPersonaDetailService, listPersonas, createPersona as createPersonaService, setPersonaConstitution as setPersonaConstitutionService, setPersonaMemory as setPersonaMemoryService, deletePersona as deletePersonaService, setPersonaBroadPolicyOptIn as setPersonaBroadPolicyOptInService, } from '../../persona/persona-service.js';
+import { loadPersona } from '../../persona/resolve.js';
 import { createPersonaName } from '../../persona/types.js';
+import { personaCompileOrchestrator, CompileOrchestratorError } from '../../persona/persona-compile-orchestrator.js';
+import { getConnId } from '../conn-registry.js';
 // ---------------------------------------------------------------------------
 // Param schemas
 // ---------------------------------------------------------------------------
 const personaNameSchema = z.object({ name: z.string().min(1) });
+const getCompileSchema = z.object({ operationId: z.string().min(1) });
+const listCompilesSchema = z.object({});
+// ---------------------------------------------------------------------------
+// Phase 1c persona-CRUD param schemas (locked contract; handlers added in the
+// implementation stage). Exported so they form part of the wire contract and
+// can be unit-tested independently. All mutation methods are additionally
+// gated on `ctx.allowPolicyMutation` in the dispatch switch (else
+// POLICY_MUTATION_FORBIDDEN); the schemas only validate shape.
+// ---------------------------------------------------------------------------
+/** `personas.create` -> PersonaDetailDto. Slug is branded inside the service. */
+export const createPersonaSchema = z.object({
+    name: z.string().min(1).max(63),
+    description: z.string().trim().min(1),
+    servers: z.array(z.string().trim().min(1)).optional(),
+    memoryEnabled: z.boolean().optional(),
+    constitution: z.string().optional(), // default '' inside the service (empty persona)
+});
+/** `personas.editConstitution` -> PersonaEditResultDto { stale }. */
+export const editConstitutionSchema = z.object({
+    name: z.string().min(1),
+    constitution: z.string(),
+});
+/** `personas.setMemory` -> PersonaDetailDto. */
+export const setMemorySchema = z.object({
+    name: z.string().min(1),
+    enabled: z.boolean(),
+});
+/**
+ * `personas.delete` (soft by default) -> { deleted: true }.
+ * `confirmed: z.literal(true)` makes an unconfirmed call a schema error;
+ * confirmation lives in the UI. `force: true` => hard delete (revoke policy).
+ */
+export const deletePersonaSchema = z.object({
+    name: z.string().min(1),
+    confirmed: z.literal(true),
+    force: z.boolean().optional(),
+});
+/**
+ * `personas.setBroadPolicyOptIn` (gated) -> PersonaDetailDto. The ONLY way to
+ * set `allowBroadPolicy`; never inferred from the constitution.
+ */
+export const setBroadPolicyOptInSchema = z.object({
+    name: z.string().min(1),
+    enabled: z.boolean(),
+});
 // ---------------------------------------------------------------------------
 // Dispatch
 // ---------------------------------------------------------------------------
-export async function personaDispatch(method, params) {
+// All persona methods are synchronous post-Phase-1c (the streamed compile is
+// fire-and-return; the old blocking `personas.compile` that awaited the pipeline
+// was removed). The signature stays `async` for uniformity with the sibling
+// dispatchers and so a thrown RpcError is normalized into a rejected promise for
+// callers that `await` it.
+// eslint-disable-next-line @typescript-eslint/require-await
+export async function personaDispatch(ctx, method, params, client) {
     switch (method) {
         case 'personas.list': {
-            return scanPersonas().map((p) => ({
-                name: p.name,
-                description: p.description,
-                compiled: p.compiled,
-            }));
+            return listPersonas();
         }
         case 'personas.get': {
             const { name } = validateParams(personaNameSchema, params);
             return getPersonaDetail(name);
         }
-        case 'personas.compile': {
+        case 'personas.compileStream': {
             const { name } = validateParams(personaNameSchema, params);
-            return compilePersona(name);
+            return compileStream(ctx, name, client);
+        }
+        case 'personas.getCompile': {
+            const { operationId } = validateParams(getCompileSchema, params);
+            return getCompile(operationId);
+        }
+        case 'personas.listCompiles': {
+            validateParams(listCompilesSchema, params);
+            return listCompiles();
+        }
+        // -----------------------------------------------------------------------
+        // Phase 1c CRUD (all gated on ctx.allowPolicyMutation; gate fires BEFORE
+        // any fs read). Each mutation emits `personas.changed`.
+        // -----------------------------------------------------------------------
+        case 'personas.create': {
+            requirePolicyMutation(ctx);
+            const input = validateParams(createPersonaSchema, params);
+            return createPersonaHandler(ctx, input, client);
+        }
+        case 'personas.editConstitution': {
+            requirePolicyMutation(ctx);
+            const { name, constitution } = validateParams(editConstitutionSchema, params);
+            return editConstitutionHandler(ctx, name, constitution, client);
+        }
+        case 'personas.setMemory': {
+            requirePolicyMutation(ctx);
+            const { name, enabled } = validateParams(setMemorySchema, params);
+            return setMemoryHandler(ctx, name, enabled, client);
+        }
+        case 'personas.delete': {
+            requirePolicyMutation(ctx);
+            const { name, force } = validateParams(deletePersonaSchema, params);
+            return deletePersonaHandler(ctx, name, force ?? false, client);
+        }
+        case 'personas.setBroadPolicyOptIn': {
+            requirePolicyMutation(ctx);
+            const { name, enabled } = validateParams(setBroadPolicyOptInSchema, params);
+            return setBroadPolicyOptInHandler(ctx, name, enabled, client);
         }
         default:
             throw new MethodNotFoundError(method);
@@ -61,56 +150,120 @@ function resolvePersonaOrThrow(nameRaw) {
     return { name, persona };
 }
 function getPersonaDetail(nameRaw) {
-    const { name, persona } = resolvePersonaOrThrow(nameRaw);
-    let constitution = '';
-    const constitutionPath = getPersonaConstitutionPath(name);
+    // Validate + map to RpcError consistently with the other persona methods,
+    // then delegate the fs reads to the headless service (Phase 1a).
+    const { name } = resolvePersonaOrThrow(nameRaw);
+    return getPersonaDetailService(name);
+}
+/**
+ * Fire-and-return streamed compile (Phase 1b). Gated behind the daemon's
+ * `allowPolicyMutation` kill switch: when off (the DEFAULT), the mutation
+ * surface does not exist — return POLICY_MUTATION_FORBIDDEN BEFORE any
+ * credential read so a read-only client never learns credential state.
+ */
+function compileStream(ctx, nameRaw, client) {
+    if (ctx.allowPolicyMutation !== true) {
+        throw new RpcError('POLICY_MUTATION_FORBIDDEN', 'Policy mutation is not enabled on this daemon.');
+    }
+    const { name } = resolvePersonaOrThrow(nameRaw);
+    const actor = describeActor(client);
     try {
-        constitution = readFileSync(constitutionPath, 'utf-8');
+        return personaCompileOrchestrator.startCompile(name, actor, ctx.eventBus);
     }
-    catch {
-        // No constitution yet -- return empty
-    }
-    const generatedDir = getPersonaGeneratedDir(name);
-    const policyPath = resolve(generatedDir, 'compiled-policy.json');
-    const hasPolicy = existsSync(policyPath);
-    let policyRuleCount;
-    if (hasPolicy) {
-        try {
-            const raw = readFileSync(policyPath, 'utf-8');
-            const compiled = JSON.parse(raw);
-            policyRuleCount = compiled.rules.length;
-        }
-        catch {
-            // Ignore parse errors
+    catch (err) {
+        if (err instanceof CompileOrchestratorError) {
+            throw new RpcError(err.code, err.message, err.data);
         }
+        throw err;
     }
-    return {
-        name: persona.name,
-        description: persona.description,
-        createdAt: persona.createdAt,
-        constitution,
-        servers: persona.servers,
-        hasPolicy,
-        policyRuleCount,
-    };
 }
-async function compilePersona(nameRaw) {
-    const { name } = resolvePersonaOrThrow(nameRaw);
+function getCompile(operationId) {
+    const op = personaCompileOrchestrator.getCompile(operationId);
+    if (!op) {
+        throw new RpcError('PERSONA_NOT_FOUND', `No compile operation "${operationId}"`);
+    }
+    return op;
+}
+function listCompiles() {
+    return personaCompileOrchestrator.listCompiles();
+}
+/**
+ * Kill-switch gate shared by all mutation methods. Throws
+ * POLICY_MUTATION_FORBIDDEN when the daemon was not launched with
+ * `--allow-policy-mutation`. Fires BEFORE any fs/credential read so a read-only
+ * client never learns persona/credential state.
+ */
+function requirePolicyMutation(ctx) {
+    if (ctx.allowPolicyMutation !== true) {
+        throw new RpcError('POLICY_MUTATION_FORBIDDEN', 'Policy mutation is not enabled on this daemon.');
+    }
+}
+/**
+ * Maps a persona-service thrown error (which carries a discriminant `code`
+ * string set via Object.assign) onto a typed RpcError. Unknown errors bubble.
+ */
+function rethrowServiceError(err) {
+    const code = typeof err === 'object' && err !== null ? err.code : undefined;
+    if (code === 'PERSONA_EXISTS') {
+        throw new RpcError('PERSONA_EXISTS', err instanceof Error ? err.message : 'Persona already exists.');
+    }
+    if (code === 'PERSONA_NOT_FOUND') {
+        throw new RpcError('PERSONA_NOT_FOUND', err instanceof Error ? err.message : 'Persona not found.');
+    }
+    throw err;
+}
+/**
+ * Runs a persona-service mutation under the WS actor, maps service errors to
+ * RpcError (via rethrowServiceError), emits `personas.changed`, and returns the
+ * mutation's result. Centralizes the per-handler try/catch + change-event
+ * boilerplate so a new mutation method cannot forget the notification.
+ */
+function mutateAndEmit(ctx, mutate, client) {
+    let result;
     try {
-        // Dynamic import to avoid loading heavy pipeline deps at startup
-        const { compilePersonaPolicy } = await import('../../persona/compile-persona-policy.js');
-        const result = await compilePersonaPolicy(name);
-        return {
-            success: true,
-            ruleCount: result.rules.length,
-        };
+        result = mutate(describeActor(client));
     }
     catch (err) {
-        return {
-            success: false,
-            ruleCount: 0,
-            errors: [err instanceof Error ? err.message : String(err)],
-        };
+        rethrowServiceError(err);
     }
+    ctx.eventBus.emit('personas.changed', {});
+    return result;
+}
+function createPersonaHandler(ctx, input, client) {
+    // Validate the slug up front so a bad name is INVALID_PARAMS (not a raw throw).
+    try {
+        createPersonaName(input.name);
+    }
+    catch {
+        throw new RpcError('INVALID_PARAMS', `Invalid persona name: ${input.name}`);
+    }
+    return mutateAndEmit(ctx, (actor) => createPersonaService(input, actor), client);
+}
+function editConstitutionHandler(ctx, nameRaw, constitution, client) {
+    const { name } = resolvePersonaOrThrow(nameRaw);
+    return mutateAndEmit(ctx, (actor) => setPersonaConstitutionService(name, constitution, actor), client);
+}
+function setMemoryHandler(ctx, nameRaw, enabled, client) {
+    const { name } = resolvePersonaOrThrow(nameRaw);
+    mutateAndEmit(ctx, (actor) => setPersonaMemoryService(name, enabled, actor), client);
+    return getPersonaDetailService(name);
+}
+function deletePersonaHandler(ctx, nameRaw, force, client) {
+    const { name } = resolvePersonaOrThrow(nameRaw);
+    mutateAndEmit(ctx, (actor) => deletePersonaService(name, actor, { force }), client);
+    return { deleted: true };
+}
+function setBroadPolicyOptInHandler(ctx, nameRaw, enabled, client) {
+    const { name } = resolvePersonaOrThrow(nameRaw);
+    return mutateAndEmit(ctx, (actor) => setPersonaBroadPolicyOptInService(name, enabled, actor), client);
+}
+/** Builds the audit/actor string: `${remoteAddr}#${connId}` (WS) or 'cli'. */
+function describeActor(client) {
+    if (!client)
+        return 'cli';
+    const connId = getConnId(client);
+    // `_socket` exposes the remote address on the underlying TCP socket.
+    const remote = client._socket?.remoteAddress ?? 'unknown';
+    return `${remote}#${connId ?? 'unknown'}`;
 }
 //# sourceMappingURL=persona-dispatch.js.map

package/dist/web-ui/dispatch/persona-dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"persona-dispatch.js","sourceRoot":"","sources":["../../../src/web-ui/dispatch/persona-dispatch.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAuD,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACxH,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC3G,OAAO,EAAE,iBAAiB,EAA4C,MAAM,wBAAwB,CAAC;AAGrG,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEhE,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,MAA+B;IACnF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,OAAO,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED;YACE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,yFAAyF;AACzF,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,YAAY,OAAO,aAAa,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,YAAY,GAAG,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;IAED,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAEzC,IAAI,eAAmC,CAAC;IACxC,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;YACvD,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,YAAY;QACZ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS;QACT,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAe;IAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAEhD,IAAI,CAAC;QACH,iEAAiE;QACjE,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SAC3D,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"persona-dispatch.js","sourceRoot":"","sources":["../../../src/web-ui/dispatch/persona-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAML,QAAQ,EACR,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,gBAAgB,IAAI,uBAAuB,EAC3C,YAAY,EACZ,aAAa,IAAI,oBAAoB,EACrC,sBAAsB,IAAI,6BAA6B,EACvD,gBAAgB,IAAI,uBAAuB,EAC3C,aAAa,IAAI,oBAAoB,EACrC,0BAA0B,IAAI,iCAAiC,GAChE,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAA4C,MAAM,wBAAwB,CAAC;AACrG,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACrH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAChE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACtE,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAExC,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,kEAAkE;AAClE,+DAA+D;AAC/D,8EAA8E;AAE9E,iFAAiF;AACjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrD,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,gDAAgD;CACtF,CAAC,CAAC;AAEH,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAEH,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,6EAA6E;AAC7E,iFAAiF;AACjF,4EAA4E;AAC5E,iFAAiF;AACjF,2BAA2B;AAC3B,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAA4B,EAC5B,MAAc,EACd,MAA+B,EAC/B,MAAoB;IAEpB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,OAAO,YAAY,EAAE,CAAC;QACxB,CAAC;QAED,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,wBAAwB,CAAC,CAAC,CAAC;YAC9B,MAAM,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,qBAAqB,CAAC,CAAC,CAAC;YAC3B,MAAM,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;YACjE,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,cAAc,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YAC3C,OAAO,YAAY,EAAE,CAAC;QACxB,CAAC;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,wDAAwD;QACxD,0EAA0E;QAE1E,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,cAAc,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;YAC1D,OAAO,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QAED,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;YAC9E,OAAO,uBAAuB,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAClE,CAAC;QAED,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YAClE,OAAO,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;YACpE,OAAO,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,CAAC,CAAC;QACjE,CAAC;QAED,KAAK,8BAA8B,CAAC,CAAC,CAAC;YACpC,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;YAC5E,OAAO,0BAA0B,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;QAED;YACE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,yFAAyF;AACzF,SAAS,qBAAqB,CAAC,OAAe;IAC5C,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,YAAY,OAAO,aAAa,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,GAA4B,EAC5B,OAAe,EACf,MAAoB;IAEpB,IAAI,GAAG,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,gDAAgD,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,0BAA0B,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;YAC5C,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,WAAmB;IACrC,MAAM,EAAE,GAAG,0BAA0B,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,yBAAyB,WAAW,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,0BAA0B,CAAC,YAAY,EAAE,CAAC;AACnD,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAA4B;IACzD,IAAI,GAAG,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,QAAQ,CAAC,2BAA2B,EAAE,gDAAgD,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAE,GAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpG,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,GAAG,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAI,GAA4B,EAAE,MAA4B,EAAE,MAAoB;IACxG,IAAI,MAAS,CAAC;IACd,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAA4B,EAC5B,KAAgH,EAChH,MAAoB;IAEpB,gFAAgF;IAChF,IAAI,CAAC;QACH,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,uBAAuB,CAC9B,GAA4B,EAC5B,OAAe,EACf,YAAoB,EACpB,MAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,6BAA6B,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,gBAAgB,CACvB,GAA4B,EAC5B,OAAe,EACf,OAAgB,EAChB,MAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IACrF,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAA4B,EAC5B,OAAe,EACf,KAAc,EACd,MAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IACpF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,0BAA0B,CACjC,GAA4B,EAC5B,OAAe,EACf,OAAgB,EAChB,MAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iCAAiC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AACxG,CAAC;AAED,8EAA8E;AAC9E,SAAS,aAAa,CAAC,MAAoB;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjC,qEAAqE;IACrE,MAAM,MAAM,GAAI,MAAmD,CAAC,OAAO,EAAE,aAAa,IAAI,SAAS,CAAC;IACxG,OAAO,GAAG,MAAM,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;AAC5C,CAAC"}

package/dist/web-ui/dispatch/pty-dispatch.d.ts

@@ -0,0 +1,15 @@
+/**
+ * PTY terminal subscription JSON-RPC dispatch.
+ *
+ * Handles the four per-client PTY methods:
+ *   - sessions.ptyAttach   (subscribe + one-shot replay snapshot)
+ *   - sessions.ptyDetach   (unsubscribe)
+ *   - sessions.ptyInput    (forward base64 keystroke bytes to the child stdin)
+ *   - sessions.ptyResize   (resize the child PTY)
+ *
+ * All delegate to `ctx.ptySessionManager`. Mirrors token-stream-dispatch.ts:
+ * attach/detach are keyed to the calling WebSocket, so the client is required.
+ */
+import type { WebSocket as WsWebSocket } from 'ws';
+import { type DispatchContext } from './types.js';
+export declare function ptyDispatch(ctx: DispatchContext, method: string, params: Record<string, unknown>, client: WsWebSocket): unknown;

package/dist/web-ui/dispatch/pty-dispatch.js

@@ -0,0 +1,66 @@
+/**
+ * PTY terminal subscription JSON-RPC dispatch.
+ *
+ * Handles the four per-client PTY methods:
+ *   - sessions.ptyAttach   (subscribe + one-shot replay snapshot)
+ *   - sessions.ptyDetach   (unsubscribe)
+ *   - sessions.ptyInput    (forward base64 keystroke bytes to the child stdin)
+ *   - sessions.ptyResize   (resize the child PTY)
+ *
+ * All delegate to `ctx.ptySessionManager`. Mirrors token-stream-dispatch.ts:
+ * attach/detach are keyed to the calling WebSocket, so the client is required.
+ */
+import { z } from 'zod';
+import { validateParams, labelSchema } from './types.js';
+import { MethodNotFoundError, RpcError } from '../web-ui-types.js';
+// ---------------------------------------------------------------------------
+// Param validation schemas
+// ---------------------------------------------------------------------------
+const ptyInputSchema = z.object({ label: z.number().int().positive(), data: z.string() });
+const ptyResizeSchema = z.object({
+    label: z.number().int().positive(),
+    cols: z.number().int().positive(),
+    rows: z.number().int().positive(),
+});
+// A trusted user message (not raw keystrokes): the daemon writes user-context
+// (source 'mux-trusted-input') and injects the text into the PTY.
+const ptyPromptSchema = z.object({ label: z.number().int().positive(), text: z.string().min(1) });
+// ---------------------------------------------------------------------------
+// Dispatch
+// ---------------------------------------------------------------------------
+export function ptyDispatch(ctx, method, params, client) {
+    const manager = ctx.ptySessionManager;
+    if (!manager) {
+        throw new RpcError('INTERNAL_ERROR', 'PTY session manager not available');
+    }
+    switch (method) {
+        case 'sessions.ptyAttach': {
+            const { label } = validateParams(labelSchema, params);
+            manager.attach(label, client);
+            return { attached: true };
+        }
+        case 'sessions.ptyDetach': {
+            const { label } = validateParams(labelSchema, params);
+            manager.detach(label, client);
+            return { detached: true };
+        }
+        case 'sessions.ptyInput': {
+            const { label, data } = validateParams(ptyInputSchema, params);
+            manager.input(label, data);
+            return { accepted: true };
+        }
+        case 'sessions.ptyResize': {
+            const { label, cols, rows } = validateParams(ptyResizeSchema, params);
+            manager.resize(label, cols, rows);
+            return { resized: true };
+        }
+        case 'sessions.ptyPrompt': {
+            const { label, text } = validateParams(ptyPromptSchema, params);
+            manager.sendPrompt(label, text);
+            return { accepted: true };
+        }
+        default:
+            throw new MethodNotFoundError(method);
+    }
+}
+//# sourceMappingURL=pty-dispatch.js.map

package/dist/web-ui/dispatch/pty-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-dispatch.js","sourceRoot":"","sources":["../../../src/web-ui/dispatch/pty-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAwB,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnE,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC1F,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AACH,8EAA8E;AAC9E,kEAAkE;AAClE,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElG,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,UAAU,WAAW,CACzB,GAAoB,EACpB,MAAc,EACd,MAA+B,EAC/B,MAAmB;IAEnB,MAAM,OAAO,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAC;IAC5E,CAAC;IAED,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAED,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACtD,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAED,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAC/D,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC3B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAED,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YACtE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YAChE,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAED;YACE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/web-ui/dispatch/session-dispatch.js

@@ -5,9 +5,10 @@
  * budget, history, diagnostics.
  */
 import { z } from 'zod';
-import { validateParams, toSessionDto, toBudgetDto, labelSchema } from './types.js';
+import { validateParams, toSessionDto, toBudgetDto, zeroedBudgetDto, labelSchema, } from './types.js';
 import { RpcError, SessionNotFoundError, MethodNotFoundError, } from '../web-ui-types.js';
 import { tokenStreamDispatch } from './token-stream-dispatch.js';
+import { ptyDispatch } from './pty-dispatch.js';
 import { WebSessionTransport } from '../web-session-transport.js';
 import { loadConfig } from '../../config/index.js';
 import { createStandaloneSession } from '../../session/index.js';
@@ -18,7 +19,24 @@ import * as logger from '../../logger.js';
 // ---------------------------------------------------------------------------
 // Param validation schemas
 // ---------------------------------------------------------------------------
-const sessionCreateSchema = z.object({ persona: z.string().min(1).optional() });
+const sessionCreateSchema = z.object({
+    persona: z.string().min(1).optional(),
+    /**
+     * Per-session trajectory-capture override. Wins over the
+     * daemon-process default set via `--capture-traces`. When undefined,
+     * the daemon-process default (or `false`) is used. See
+     * docs/designs/mitm-token-trajectory-capture.md §10.
+     */
+    captureTraces: z.boolean().optional(),
+    /**
+     * Docker-agent (web-pty) launch options, mirroring mux `/new`. Ignored by the
+     * code-mode chatbox path. The child `ironcurtain start --pty` validates the
+     * workspace (containment) and resolves the provider profile / model.
+     */
+    workspacePath: z.string().min(1).optional(),
+    providerProfileName: z.string().min(1).optional(),
+    model: z.string().min(1).optional(),
+});
 const sessionSendSchema = z.object({ label: z.number().int().positive(), text: z.string().min(1) });
 // ---------------------------------------------------------------------------
 // Session dispatch
@@ -31,6 +49,13 @@ export async function sessionDispatch(ctx, method, params, client) {
         }
         return tokenStreamDispatch(ctx, method, params, client);
     }
+    // Delegate PTY terminal methods to dedicated dispatch module
+    if (method.startsWith('sessions.pty')) {
+        if (!client) {
+            throw new RpcError('INTERNAL_ERROR', 'PTY methods require a WebSocket client');
+        }
+        return ptyDispatch(ctx, method, params, client);
+    }
     switch (method) {
         case 'sessions.list':
             return listSessions(ctx);
@@ -39,11 +64,21 @@ export async function sessionDispatch(ctx, method, params, client) {
             return getSession(ctx, label);
         }
         case 'sessions.create': {
-            const { persona } = validateParams(sessionCreateSchema, params);
-            return createWebSession(ctx, persona);
+            const opts = validateParams(sessionCreateSchema, params);
+            // Docker mode streams a live terminal (web-pty); code mode keeps the
+            // turn-based chatbox session. The daemon's SessionMode is process-global.
+            if (ctx.mode.kind === 'docker') {
+                return createPtySession(ctx, opts);
+            }
+            return createWebSession(ctx, opts.persona, opts.captureTraces);
         }
         case 'sessions.end': {
             const { label } = validateParams(labelSchema, params);
+            // Route PTY labels to their manager (they are not in SessionManager).
+            if (ctx.ptySessionManager?.has(label)) {
+                ctx.ptySessionManager.end(label);
+                return;
+            }
             const endManaged = ctx.sessionManager.get(label);
             const endSessionId = endManaged?.session.getInfo().id;
             await ctx.sessionManager.end(label);
@@ -59,6 +94,10 @@ export async function sessionDispatch(ctx, method, params, client) {
         }
         case 'sessions.budget': {
             const { label } = validateParams(labelSchema, params);
+            // PTY sessions have no turn/budget accounting; return a zeroed budget
+            // rather than throwing, so a stale/racing client degrades cleanly (§11 D2).
+            if (ctx.ptySessionManager?.has(label))
+                return zeroedBudgetDto();
             const managed = ctx.sessionManager.get(label);
             if (!managed)
                 throw new SessionNotFoundError(label);
@@ -66,6 +105,9 @@ export async function sessionDispatch(ctx, method, params, client) {
         }
         case 'sessions.history': {
             const { label } = validateParams(labelSchema, params);
+            // PTY sessions carry no turn history (§11 D2).
+            if (ctx.ptySessionManager?.has(label))
+                return [];
             const managed = ctx.sessionManager.get(label);
             if (!managed)
                 throw new SessionNotFoundError(label);
@@ -73,6 +115,9 @@ export async function sessionDispatch(ctx, method, params, client) {
         }
         case 'sessions.diagnostics': {
             const { label } = validateParams(labelSchema, params);
+            // PTY sessions carry no diagnostic log (§11 D2).
+            if (ctx.ptySessionManager?.has(label))
+                return [];
             const managed = ctx.sessionManager.get(label);
             if (!managed)
                 throw new SessionNotFoundError(label);
@@ -90,9 +135,17 @@ function cleanupSessionQueue(ctx, label) {
     ctx.sessionQueues.delete(label);
 }
 function listSessions(ctx) {
-    return ctx.sessionManager.all().map((m) => toSessionDto(m));
+    const managed = ctx.sessionManager.all().map((m) => toSessionDto(m));
+    const pty = ctx.ptySessionManager?.listDtos() ?? [];
+    return [...managed, ...pty];
 }
 function getSession(ctx, label) {
+    // PTY sessions have no turn history/diagnostics; return the DTO with empty
+    // logs rather than throwing, since selecting one drives this call.
+    const ptyDto = ctx.ptySessionManager?.getDto(label);
+    if (ptyDto) {
+        return { ...ptyDto, history: [], diagnosticLog: [] };
+    }
     const managed = ctx.sessionManager.get(label);
     if (!managed)
         throw new SessionNotFoundError(label);
@@ -102,7 +155,28 @@ function getSession(ctx, label) {
         diagnosticLog: managed.session.getDiagnosticLog(),
     };
 }
-async function createWebSession(ctx, persona) {
+/**
+ * Creates a Docker-agent PTY session (docker mode). Enforces the SAME
+ * concurrency cap as the turn-based path, counting PTY sessions (§11 D4) —
+ * each is a full container, so an unbounded spawn is a real resource concern.
+ */
+async function createPtySession(ctx, opts) {
+    const manager = ctx.ptySessionManager;
+    if (!manager) {
+        throw new RpcError('INTERNAL_ERROR', 'PTY session manager not available');
+    }
+    if (manager.size >= ctx.maxConcurrentWebSessions) {
+        throw new RpcError('RATE_LIMITED', `PTY session limit reached (max ${ctx.maxConcurrentWebSessions})`);
+    }
+    return manager.create({
+        ...(opts.persona ? { persona: opts.persona } : {}),
+        ...(opts.captureTraces !== undefined ? { captureTraces: opts.captureTraces } : {}),
+        ...(opts.workspacePath ? { workspacePath: opts.workspacePath } : {}),
+        ...(opts.providerProfileName ? { providerProfileName: opts.providerProfileName } : {}),
+        ...(opts.model ? { model: opts.model } : {}),
+    });
+}
+async function createWebSession(ctx, persona, captureTracesOverride) {
     const webCount = ctx.sessionManager.byKind('web').length;
     if (webCount >= ctx.maxConcurrentWebSessions) {
         throw new RpcError('RATE_LIMITED', `Web session limit reached (max ${ctx.maxConcurrentWebSessions})`);
@@ -114,10 +188,19 @@ async function createWebSession(ctx, persona) {
         autoSaveMemory: shouldAutoSaveMemory(config, { persona }),
         dockerMode: ctx.mode.kind === 'docker',
     });
+    // Capture precedence: JSON-RPC field > daemon CLI flag > userConfig.
+    // The session factory then resolves vs `userConfig.capture?.enabled`
+    // as the final fallback (§10).
+    const effectiveCapture = captureTracesOverride !== undefined
+        ? captureTracesOverride
+        : (ctx.captureTracesDefault ?? false)
+            ? true
+            : undefined;
     const session = await createStandaloneSession({
         config,
         mode: ctx.mode,
         persona,
+        ...(effectiveCapture !== undefined ? { captureTracesOverride: effectiveCapture } : {}),
         onEscalation: transport.createEscalationHandler(),
         onEscalationExpired: transport.createEscalationExpiredHandler(),
         onEscalationResolved: transport.createEscalationResolvedHandler(),