@robota-sdk/agent-transport 3.0.0-beta.83 → 3.0.0-beta.84

package/src/session-message-handler.ts

@@ -15,9 +15,14 @@ import {
 import { handleLoopControlMessage, isLoopControlMessage } from './loop-control-messages.js';
 import { parseClientMessage } from './message-parser.js';
 import { isObserverMessageType } from './observer-messages.js';
+import { handleProjectReadMessage, isProjectReadMessage } from './project-read-messages.js';
 import {
+  handleSessionDeleteMessage,
   handleSessionDirectoryMessage,
+  handleSessionRenameMessage,
+  isSessionDeleteMessage,
   isSessionDirectoryMessage,
+  isSessionRenameMessage,
 } from './session-directory-messages.js';
 import { subscribeSessionEvents } from './session-events.js';
 import {
@@ -25,12 +30,15 @@ import {
   isSessionQueryMessage,
   pendingFrame,
 } from './session-query-messages.js';
+import { handleSettingsMessage, isSettingsMessage } from './settings-messages.js';
 import { handleUsageQueryMessage } from './usage-messages.js';
 
 import type { TOutboundDeliver } from './outbound-delivery.js';
-import type { IProtocolSession } from './protocol-session.js';
+import type { IProtocolSession, TProjectReadCapableSession } from './protocol-session.js';
+import type { ISettingsReporter } from './settings-messages.js';
 import type { IUsageQueryReporters } from './usage-messages.js';
 import type { TClientMessage } from './wire-messages.js';
+import type { TCommandSurfaceLocality } from '@robota-sdk/agent-interface-command';
 import type { TUsageSurface } from '@robota-sdk/agent-interface-analytics';
 import type { ISessionDirectory, TDriverId } from '@robota-sdk/agent-interface-session';
 
@@ -48,8 +56,8 @@ export { parseClientMessage } from './message-parser.js';
 export type TSessionSurfaceRole = 'drive' | 'observe';
 
 export interface ISessionMessageHandlerOptions {
-  /** IProtocolSession to expose. */
-  session: IProtocolSession;
+  /** IProtocolSession to expose — `Partial<ISessionProjectRead>` is probed, not assumed (#3282 §4c). */
+  session: TProjectReadCapableSession;
   /**
    * ARCH-030: the CARRIER's connection-scoped outbound delivery boundary — not a raw `send`, and not a
    * `send` plus an error callback for this handler to assemble into one. The carrier owns both the sink
@@ -76,6 +84,15 @@ export interface ISessionMessageHandlerOptions {
   storedSessionUsageReporter?: NonNullable<IUsageQueryReporters['storedSessionUsageReporter']>;
   /** Host-owned session directory (#3189): list, start and switch the host's sessions. */
   sessionDirectory?: ISessionDirectory;
+  /** #3282 §4a: host-owned read/write for the GUI Settings screen. */
+  settingsReporter?: ISettingsReporter;
+  /**
+   * #3282 §4 part b-2: carrier-decided, like `role` — whether THIS carrier's connections are
+   * provably on this machine. The loopback WS carrier is `'local'`; the device-mesh/WebRTC carrier
+   * sets `'remote'`. Absent → `'local'`, forwarded to `executeCommand` and the settings reporter so a
+   * command that runs code from outside the session (installing a plugin) can refuse a remote device.
+   */
+  commandSurfaceLocality?: TCommandSurfaceLocality;
 }
 
 /**
@@ -118,19 +135,23 @@ export function createSessionMessageHandler(options: ISessionMessageHandlerOptio
     options.surface,
     role,
     options.sessionDirectory,
+    options.settingsReporter,
+    options.commandSurfaceLocality,
   );
 
   return { onMessage, cleanup };
 }
 
 function createMessageHandler(
-  session: IProtocolSession,
+  session: TProjectReadCapableSession,
   deliver: TOutboundDeliver,
   driverId?: TDriverId,
   reporters: IUsageQueryReporters = EMPTY_USAGE_REPORTERS,
   surface?: TUsageSurface,
   role: TSessionSurfaceRole = 'drive',
   sessionDirectory?: ISessionDirectory,
+  settingsReporter?: ISettingsReporter,
+  commandSurfaceLocality?: TCommandSurfaceLocality,
 ): (data: string) => void {
   return (data: string): void => {
     const msg = parseClientMessage(data, deliver);
@@ -139,7 +160,17 @@ function createMessageHandler(
       deliver({ type: 'protocol_error', message: `Not permitted for an observer: ${msg.type}` });
       return;
     }
-    handleClientMessage(session, deliver, msg, driverId, reporters, surface, sessionDirectory);
+    handleClientMessage(
+      session,
+      deliver,
+      msg,
+      driverId,
+      reporters,
+      surface,
+      sessionDirectory,
+      settingsReporter,
+      commandSurfaceLocality,
+    );
   };
 }
 
@@ -154,13 +185,15 @@ const EMPTY_USAGE_REPORTERS: IUsageQueryReporters = {
  * the {@link SessionResumeBridge} intercepts `resume`/`ack` itself and delegates everything else here.
  */
 export function handleClientMessage(
-  session: IProtocolSession,
+  session: TProjectReadCapableSession,
   deliver: TOutboundDeliver,
   msg: TClientMessage,
   driverId?: TDriverId,
   reporters: IUsageQueryReporters = EMPTY_USAGE_REPORTERS,
   surface?: TUsageSurface,
   sessionDirectory?: ISessionDirectory,
+  settingsReporter?: ISettingsReporter,
+  commandSurfaceLocality?: TCommandSurfaceLocality,
 ): void {
   if (handleUsageQueryMessage(session, deliver, msg, reporters)) {
     return;
@@ -169,8 +202,20 @@ export function handleClientMessage(
     handleSessionDirectoryMessage(deliver, msg, sessionDirectory);
     return;
   }
+  if (isSettingsMessage(msg)) {
+    handleSettingsMessage(session, deliver, msg, settingsReporter, commandSurfaceLocality);
+    return;
+  }
+  if (isSessionRenameMessage(msg)) {
+    handleSessionRenameMessage(deliver, msg, sessionDirectory);
+    return;
+  }
+  if (isSessionDeleteMessage(msg)) {
+    handleSessionDeleteMessage(deliver, msg, sessionDirectory);
+    return;
+  }
   if (isSessionControlMessage(msg)) {
-    handleSessionControlMessage(session, deliver, msg, driverId, surface);
+    handleSessionControlMessage(session, deliver, msg, driverId, surface, commandSurfaceLocality);
     return;
   }
   if (isLoopControlMessage(msg)) {
@@ -181,6 +226,10 @@ export function handleClientMessage(
     handleSessionQueryMessage(session, deliver, msg);
     return;
   }
+  if (isProjectReadMessage(msg)) {
+    handleProjectReadMessage(session, deliver, msg);
+    return;
+  }
   if (isBackgroundQueryMessage(msg)) {
     handleBackgroundQueryMessage(session, deliver, msg);
     return;
@@ -268,6 +317,7 @@ function handleSessionControlMessage(
   msg: Extract<TClientMessage, { type: 'submit' | 'command' | 'abort' | 'cancel-queue' }>,
   driverId?: TDriverId,
   surface?: TUsageSurface,
+  commandSurfaceLocality?: TCommandSurfaceLocality,
 ): void {
   if (msg.type === 'submit') {
     // TRANS-008 (issue #2045). A TYPE check, not a falsy one: `{}`, `[]`, `42` and `true` are truthy
@@ -304,7 +354,7 @@ function handleSessionControlMessage(
     }
     // REMOTE-003: a transport-origin command is tagged `'remote'` (optional policy, allow-by-default;
     // REMOTE-006). CMD-004: the SERVER-ASSIGNED driver id (E5) is the command origin — intents route back here.
-    session.executeCommand(msg.name, msg.args ?? '', 'remote', driverId).then(
+    session.executeCommand(msg.name, msg.args ?? '', 'remote', driverId, commandSurfaceLocality).then(
       (result) => {
         deliver({
           type: 'command_result',

package/src/session-query-messages.ts

@@ -14,6 +14,8 @@ type TSessionQueryMessage = Extract<
       | 'get-context'
       | 'get-commands'
       | 'get-status'
+      | 'list-models'
+      | 'get-agent-definitions'
       | 'get-executing'
       | 'get-pending'
       | 'get-execution-workspace'
@@ -38,6 +40,8 @@ export function isSessionQueryMessage(msg: TClientMessage): msg is TSessionQuery
     msg.type === 'get-context' ||
     msg.type === 'get-commands' ||
     msg.type === 'get-status' ||
+    msg.type === 'list-models' ||
+    msg.type === 'get-agent-definitions' ||
     msg.type === 'get-executing' ||
     msg.type === 'get-pending' ||
     msg.type === 'get-execution-workspace' ||
@@ -51,7 +55,10 @@ export function handleSessionQueryMessage(
   msg: TSessionQueryMessage,
 ): void {
   if (msg.type === 'get-messages') {
-    deliver({ type: 'messages', messages: session.getMessages() });
+    // #3288 §2: `display` rides the same frame as `messages` — a reload/reconnect/resume replay
+    // needs both in one round trip, and there is no reason a client would ever want one without
+    // the other (the raw messages already have to be fetched to build the projection).
+    deliver({ type: 'messages', messages: session.getMessages(), display: session.getMessagesDisplay() });
   } else if (msg.type === 'get-history') {
     deliver(historyPage(session, msg.fromIndex ?? 0));
   } else if (msg.type === 'get-prompts') {
@@ -62,6 +69,16 @@ export function handleSessionQueryMessage(
     deliver({ type: 'commands', commands: session.listCommands(), skills: session.listSkills() });
   } else if (msg.type === 'get-status') {
     deliver({ type: 'session_status', status: session.getStatusSnapshot() });
+  } else if (msg.type === 'list-models') {
+    const snapshot = session.listModels();
+    deliver({ type: 'model_list', requestId: msg.requestId, ...snapshot });
+  } else if (msg.type === 'get-agent-definitions') {
+    deliver({
+      type: 'agent_definitions',
+      requestId: msg.requestId,
+      agents: session.listAgentDefinitions(),
+      current: session.getDefaultAgentType(),
+    });
   } else if (msg.type === 'get-executing') {
     deliver({ type: 'executing', executing: session.isExecuting() });
   } else if (msg.type === 'get-execution-workspace') {

package/src/session-resume-bridge.ts

@@ -28,6 +28,7 @@ import type { TOutboundDeliver } from './outbound-delivery.js';
 import type { IProtocolSession } from './protocol-session.js';
 import type { IUsageQueryReporters } from './usage-messages.js';
 import type { TSeqServerMessage, TServerMessage } from './wire-messages.js';
+import type { TCommandSurfaceLocality } from '@robota-sdk/agent-interface-command';
 import type { TUsageSurface } from '@robota-sdk/agent-interface-analytics';
 import type { TDriverId } from '@robota-sdk/agent-interface-session';
 
@@ -65,6 +66,8 @@ export interface ISessionResumeBridgeOptions {
   readonly personalUsageReporter?: IUsageQueryReporters['personalUsageReporter'];
   readonly usageReporter?: IUsageQueryReporters['usageReporter'];
   readonly storedSessionUsageReporter?: IUsageQueryReporters['storedSessionUsageReporter'];
+  /** #3282 §4 part b-2: this bridge is the reconnectable WebRTC path, so it is always `'remote'`. */
+  readonly commandSurfaceLocality?: TCommandSurfaceLocality;
 }
 
 export class SessionResumeBridge {
@@ -73,6 +76,7 @@ export class SessionResumeBridge {
   private driverId?: TDriverId;
   private readonly reporters: IUsageQueryReporters;
   private readonly surface?: TUsageSurface;
+  private readonly commandSurfaceLocality?: TCommandSurfaceLocality;
   private readonly unsubscribe: () => void;
   private onDeliveryError?: IAttachOptions['onDeliveryError'];
   /**
@@ -105,6 +109,7 @@ export class SessionResumeBridge {
     this.buffer = new ResumeBuffer(options.buffer);
     this.driverId = options.driverId;
     this.surface = options.surface;
+    this.commandSurfaceLocality = options.commandSurfaceLocality;
     this.reporters = {
       personalUsageReporter: options.personalUsageReporter,
       usageReporter: options.usageReporter,
@@ -178,6 +183,9 @@ export class SessionResumeBridge {
       this.driverId,
       this.reporters,
       this.surface,
+      undefined,
+      undefined,
+      this.commandSurfaceLocality,
     );
   }
 

package/src/settings-messages.ts

@@ -0,0 +1,103 @@
+import type { TOutboundDeliver } from './outbound-delivery.js';
+import type { IProtocolSession } from './protocol-session.js';
+import type { TClientMessage } from './wire-messages.js';
+import type { TCommandSurfaceLocality } from '@robota-sdk/agent-interface-command';
+import type { ISettingsSnapshot, TSettingsPatch } from '@robota-sdk/agent-interface-session';
+
+type TSettingsMessage = Extract<TClientMessage, { type: 'get-settings' | 'update-settings' }>;
+
+export function isSettingsMessage(msg: TClientMessage): msg is TSettingsMessage {
+  return msg.type === 'get-settings' || msg.type === 'update-settings';
+}
+
+/** What applying a patch did: the fresh snapshot, or why nothing was written. */
+export type TSettingsUpdateOutcome =
+  | { readonly ok: true; readonly settings: ISettingsSnapshot }
+  | {
+      readonly ok: false;
+      readonly code: 'not_available' | 'invalid' | 'refused' | 'update_failed';
+      readonly message: string;
+    };
+
+/**
+ * #3282 §4a: host-owned read/write for the Settings screen, supplied by the composition root the
+ * same way `IUsageQueryReporters` supplies usage reads — this package only correlates the request
+ * and carries the result. `updateSettings` applies through the SAME function the matching slash
+ * command uses (issue #3282 §4: "one code path, so the behavior matches the TUI"), so whatever a
+ * command would refuse on this surface is refused here too.
+ */
+export interface ISettingsReporter {
+  getSettings(
+    session: IProtocolSession,
+    locality?: TCommandSurfaceLocality,
+  ): ISettingsSnapshot | Promise<ISettingsSnapshot>;
+  /**
+   * Applies through the SAME function the matching slash command uses. `locality` (#3282 §4 part
+   * b-2) is forwarded to that command exactly as the transport received it, so a command that
+   * refuses a remote surface (installing a plugin) refuses identically here.
+   */
+  updateSettings(
+    session: IProtocolSession,
+    patch: TSettingsPatch,
+    locality?: TCommandSurfaceLocality,
+  ): TSettingsUpdateOutcome | Promise<TSettingsUpdateOutcome>;
+}
+
+export function handleSettingsMessage(
+  session: IProtocolSession,
+  deliver: TOutboundDeliver,
+  msg: TSettingsMessage,
+  reporter: ISettingsReporter | undefined,
+  locality?: TCommandSurfaceLocality,
+): void {
+  if (!reporter) {
+    deliverSettingsError(
+      deliver,
+      msg.requestId,
+      'not_available',
+      'Settings are not available on this host.',
+    );
+    return;
+  }
+  try {
+    if (msg.type === 'get-settings') {
+      void Promise.resolve(reporter.getSettings(session, locality)).then(
+        (settings) => deliver({ type: 'settings', requestId: msg.requestId, settings }),
+        (error) =>
+          deliverSettingsError(deliver, msg.requestId, 'update_failed', failureMessage(error)),
+      );
+      return;
+    }
+    void Promise.resolve(reporter.updateSettings(session, msg.patch, locality)).then(
+      (outcome) => {
+        if (outcome.ok) {
+          deliver({ type: 'settings', requestId: msg.requestId, settings: outcome.settings });
+        } else {
+          deliverSettingsError(deliver, msg.requestId, outcome.code, outcome.message);
+        }
+      },
+      (error) =>
+        deliverSettingsError(deliver, msg.requestId, 'update_failed', failureMessage(error)),
+    );
+  } catch (error) {
+    deliverSettingsError(
+      deliver,
+      msg.requestId,
+      'update_failed',
+      failureMessage(error instanceof Error ? error : String(error)),
+    );
+  }
+}
+
+function deliverSettingsError(
+  deliver: TOutboundDeliver,
+  requestId: string,
+  code: 'not_available' | 'invalid' | 'refused' | 'update_failed',
+  message: string,
+): void {
+  deliver({ type: 'settings_error', requestId, code, message });
+}
+
+function failureMessage(error: Error | string): string {
+  return error instanceof Error ? error.message : String(error);
+}

package/src/wire-messages.ts

@@ -28,17 +28,24 @@ import type {
   IBranchEvent,
   IExecutionResult,
   IContextFileRefreshedEvent,
+  IModelListGroup,
   IPermissionRequestEvent,
   IPromptResolvedEvent,
   IPlanApprovalEvent,
   ISessionRenamedEvent,
+  ISettingsSnapshot,
   IToolState,
   ISessionListing,
   ISessionStatusSnapshot,
   ISessionSwitchedEvent,
   TSessionChangeRefusalCode,
+  TSessionDeleteRefusalCode,
+  TSettingsPatch,
   IUiIntentEvent,
   TPermissionResultValue,
+  TProjectDiffRead,
+  TProjectMemoryRead,
+  TProjectStatusRead,
   TWaitingLoopStopOutcome,
 } from '@robota-sdk/agent-interface-session';
 import type {
@@ -52,6 +59,16 @@ export type TBackgroundControlAction = 'cancel' | 'close' | 'send';
 
 type THistoryEntry = ReturnType<ISessionConversationRead['getFullHistory']>[number];
 
+/**
+ * #3282 §4: one agent the switcher can offer. `definedIn` is a plain-words location — a discovered
+ * file's path, or "Built-in" — never a raw internal id.
+ */
+export interface IWireAgentDefinitionSummary {
+  name: string;
+  description: string;
+  definedIn: string;
+}
+
 /**
  * #3189: one entry of the session's full history as it crosses the wire. The same record the session
  * keeps, except that `timestamp` is an ISO 8601 string: a `Date` does not survive JSON, and a
@@ -89,11 +106,25 @@ export type TClientMessage =
   // (a `/` menu), and the session's status (model, permission mode, effort, context).
   | { type: 'get-commands' }
   | { type: 'get-status' }
+  // #3282 §2: the models the GUI's model menu offers, grouped by configured provider profile — so
+  // the GUI never scrapes `/model`'s picker text. Choosing one sends `command` with `name: 'model'`,
+  // the SAME path `/model <id>` runs; this message only reads the choices.
+  | { type: 'list-models'; requestId: string }
+  // #3282 §4: the agent switcher's roster and its currently-selected default — so the GUI never
+  // scrapes `/agent`'s text. Choosing one sends `command` with `name: 'agent'`, the SAME path
+  // `/agent <name>` runs; this message only reads the roster and the current selection.
+  | { type: 'get-agent-definitions'; requestId: string }
   // #3189: the host's sessions — list them, start a new one, make another current. A refused change
   // answers `session_change_failed` with the same `requestId`.
   | { type: 'list-sessions'; requestId: string }
   | { type: 'new-session'; requestId?: string }
   | { type: 'switch-session'; sessionId: string; requestId?: string }
+  // #3289 §1: rename a session from the list — current or not. Answered by `session_renamed_in_list`
+  // or `session_rename_failed`, both carrying the same `requestId`.
+  | { type: 'rename-session'; sessionId: string; name: string; requestId: string }
+  // #3289 §1: remove a stored session's record for good. Answered by `session_deleted` or
+  // `session_delete_failed`, both carrying the same `requestId`.
+  | { type: 'delete-session'; sessionId: string; requestId: string }
   // SELFHOST-004: request the assembled trace/cost read-model (spans + cost-by-source) for the run.
   | { type: 'get-usage-report' }
   | {
@@ -116,6 +147,16 @@ export type TClientMessage =
     }
   // Stop the self-paced loop that is waiting for its next wake; answered by `waiting_loop_stop`.
   | { type: 'stop-waiting-loop'; requestId: string }
+  // #3282 §4c: the Project panel's "Changes" section — this workspace's git status. Answered by
+  // `project_status`, echoing `requestId`.
+  | { type: 'project-status'; requestId: string }
+  // The Project panel's "File diff" section for one file `project_status` reported — `path` exactly
+  // as reported (workspace-relative; the server re-checks it stays inside the workspace). Answered by
+  // `project_diff`.
+  | { type: 'project-diff'; requestId: string; path: string }
+  // The Project panel's "Memory" section — project memory as readable text. Answered by
+  // `project_memory`.
+  | { type: 'project-memory'; requestId: string }
   | { type: 'get-background-tasks'; filter?: IBackgroundTaskListFilter }
   | { type: 'get-background-task'; taskId: string }
   | { type: 'get-background-job-groups' }
@@ -131,7 +172,12 @@ export type TClientMessage =
   // REMOTE-013 E4 session-resume: `resume` asks the host to replay the tail after `lastSeq` (the last seq the
   // client applied); `ack` lets the host free its un-acked buffer up to `seq`. Only meaningful post-E3-accept.
   | { type: 'resume'; lastSeq: number }
-  | { type: 'ack'; seq: number };
+  | { type: 'ack'; seq: number }
+  // #3282 §4a: the GUI Settings screen. A snapshot fetch and a discriminated single-field patch,
+  // never command text — the server applies a patch through the same function its slash command
+  // uses, so the two paths cannot drift. Answered by `settings` or `settings_error`.
+  | { type: 'get-settings'; requestId: string }
+  | { type: 'update-settings'; requestId: string; patch: TSettingsPatch };
 
 /** Outbound message from server to client. */
 export type TServerMessage =
@@ -145,7 +191,28 @@ export type TServerMessage =
   | { type: 'thinking'; isThinking: boolean; driverId?: TDriverId }
   | { type: 'complete'; result: TWireExecutionResult; driverId?: TDriverId }
   | { type: 'interrupted'; result: TWireExecutionResult; driverId?: TDriverId }
-  | { type: 'error'; message: string; driverId?: TDriverId }
+  | {
+      type: 'error';
+      /** The raw failure text — kept for a "Details" disclosure; never the whole story on its own. */
+      message: string;
+      /**
+       * What kind of failure this was, when it's known — so a renderer can say what happened and
+       * what to do next in plain words instead of showing `message` verbatim (#3289 §3). Additive:
+       * absent for a session error this classification does not recognize (unchanged behavior).
+       */
+      code?: 'auth' | 'rate_limit' | 'model_unavailable' | 'network' | 'provider';
+      /** The provider/profile name the failure came from, when `code` names one. */
+      provider?: string;
+      /** For `code: 'rate_limit'`, how long until a retry may succeed, when the provider said so. */
+      retryAfterSeconds?: number;
+      /**
+       * For `code: 'model_unavailable'`, the model the failed request tried — captured at the moment
+       * of failure so a renderer never has to fall back to whatever model is live by the time it
+       * draws this notice (which may already be a different one the person switched to).
+       */
+      model?: string;
+      driverId?: TDriverId;
+    }
   | {
       type: 'command_result';
       name: string;
@@ -155,7 +222,24 @@ export type TServerMessage =
       /** The `requestId` of the `command` this answers, when it carried one. */
       requestId?: string;
     }
-  | { type: 'messages'; messages: ReturnType<ISessionConversationRead['getMessages']> }
+  | {
+      type: 'messages';
+      messages: ReturnType<ISessionConversationRead['getMessages']>;
+      /**
+       * #3288 §2: the SAME history, projected into display segments (text runs and finished tool
+       * calls, diffs included) — so a reload/reconnect/resume replay shows tool rows instead of bare
+       * text. Optional so an older host that has not grown `getMessagesDisplay()` yet still sends a
+       * valid frame; a client without this field falls back to `messages`-only (text bubbles), the
+       * same as before this existed.
+       */
+      display?: ReturnType<ISessionConversationRead['getMessagesDisplay']>;
+      /**
+       * #3289 §3: this connection's own server-assigned driver id, carried on the first frame every
+       * connection already gets — so a client can tell its OWN turns from a co-driver's instead of
+       * treating everything but the literal `'owner'` id as someone else (REMOTE-014 E5 display-only).
+       */
+      driverId?: TDriverId;
+    }
   // #3189: one page of the full history. `entries` start at `startIndex` of the `total` the session
   // holds now, and stop before a page grows past a bounded size (a single larger entry is sent alone).
   | { type: 'history'; startIndex: number; total: number; entries: IWireHistoryEntry[] }
@@ -169,6 +253,23 @@ export type TServerMessage =
   | { type: 'commands'; commands: ICommandListEntry[]; skills: ICommandSkillListEntry[] }
   // Sent in reply to `get-status`, and pushed whenever the session's status changes.
   | { type: 'session_status'; status: ISessionStatusSnapshot }
+  // #3282 §2: reply to `list-models`, echoing its `requestId`. `groups` is current-profile first;
+  // `currentProfile` is absent only when no provider profile is configured at all.
+  | {
+      type: 'model_list';
+      requestId: string;
+      groups: readonly IModelListGroup[];
+      currentProfile?: string;
+      currentModel: string;
+    }
+  // #3282 §4: reply to `get-agent-definitions`, echoing its `requestId`. `current` is always one of
+  // `agents`' names (the fallback default when nothing was ever selected).
+  | {
+      type: 'agent_definitions';
+      requestId: string;
+      agents: readonly IWireAgentDefinitionSummary[];
+      current: string;
+    }
   | { type: 'sessions'; requestId: string; listing: ISessionListing }
   | {
       type: 'sessions_error';
@@ -186,6 +287,18 @@ export type TServerMessage =
       message: string;
       requestId?: string;
     }
+  // #3289 §1: a `rename-session` succeeded (current session or not); the client refreshes its listing.
+  | { type: 'session_renamed_in_list'; requestId: string; sessionId: string; name: string }
+  | { type: 'session_rename_failed'; requestId: string; message: string }
+  // #3289 §1: a `delete-session` succeeded; the client refreshes its listing and, if it was showing
+  // the deleted session, re-reads what it now shows (the host has already switched it away).
+  | { type: 'session_deleted'; requestId: string; sessionId: string }
+  | {
+      type: 'session_delete_failed';
+      requestId: string;
+      code: TSessionDeleteRefusalCode;
+      message: string;
+    }
   // SELFHOST-004 (P5, TC-08): carry the assembled trace/cost read-model (per-op span timeline +
   // cost-by-source) across the sidecar boundary — no existing variant carries per-op `durationMs` or
   // per-source `costUsd`. The GUI renders it renderer-side.
@@ -218,6 +331,13 @@ export type TServerMessage =
   | { type: 'execution_detail'; requestId: string; page: IExecutionDetailPage }
   | { type: 'execution_detail_error'; requestId: string; message: string }
   | { type: 'waiting_loop_stop'; requestId: string; outcome: TWaitingLoopStopOutcome }
+  // #3282 §4c: the Project panel's reads. Each result crosses the wire UNCHANGED as the session
+  // method's own return value (same convention as `waiting_loop_stop`'s `outcome` above) — the
+  // `kind` discriminant carries the non-repository / outside-workspace / unavailable / failed cases,
+  // so there is no separate `_error` sibling to keep in sync with these.
+  | { type: 'project_status'; requestId: string; result: TProjectStatusRead }
+  | { type: 'project_diff'; requestId: string; result: TProjectDiffRead }
+  | { type: 'project_memory'; requestId: string; result: TProjectMemoryRead }
   | { type: 'background_task_event'; event: TBackgroundTaskEvent }
   | { type: 'background_job_group_event'; event: TBackgroundJobGroupEvent }
   | { type: 'plan_event'; event: IPlanApprovalEvent }
@@ -252,7 +372,16 @@ export type TServerMessage =
   | { type: 'protocol_error'; message: string; requestId?: string }
   // REMOTE-013 E4: sent instead of a replay when the client's `lastSeq` predates the host's retained buffer
   // (overrun) — the client must do a full `get-messages` refresh rather than accept a silent gap.
-  | { type: 'resume_gap' };
+  | { type: 'resume_gap' }
+  // #3282 §4a: the Settings screen's snapshot, in reply to `get-settings` or `update-settings`. The
+  // same type answers both, the way `session_status` answers `get-status` and a status change alike.
+  | { type: 'settings'; requestId: string; settings: ISettingsSnapshot }
+  | {
+      type: 'settings_error';
+      requestId: string;
+      code: 'not_available' | 'invalid' | 'refused' | 'update_failed';
+      message: string;
+    };
 
 /**
  * REMOTE-013 E4: a server message stamped with its monotonic session sequence number (added by the

package/dist/browser/observer-messages-Bx-xReUQ.js

@@ -1,2 +0,0 @@
-import{SESSION_CHANGE_REFUSAL_CODES as e}from"@robota-sdk/agent-interface-session";const t=4*1024*1024;function n(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}const r=e=>typeof e==`string`,i=e=>typeof e==`string`&&e.length>0,a=e=>typeof e==`boolean`,o=e=>typeof e==`number`&&Number.isFinite(e),s=e=>Number.isSafeInteger(e)&&e>=0,c=e=>t=>t===void 0||e(t),l=e=>Array.isArray(e)&&e.every(n),u=e=>e===null||n(e),d=e=>t=>typeof t==`string`&&e.includes(t),f={user:!0,"agent-wakeup":!0,peer:!0,external:!0},p=e=>n(e)&&r(e.id)&&r(e.timestamp)&&r(e.category)&&r(e.type),m=e=>Array.isArray(e)&&e.every(p),h=[`agent`,`process`,`scheduled`],g=[`foreground`,`background`],_=[`queued`,`running`,`waiting_permission`,`sleeping`,`paused`,`completed`,`failed`,`cancelled`],v=[`cancel`,`close`,`send`],y=e=>n(e)&&c(d(h))(e.kind)&&c(d(_))(e.status)&&c(d(g))(e.mode)&&c(a)(e.includeClosed),b=e=>n(e)&&c(r)(e.prompt)&&c(r)(e.stdin),x=e=>n(e)&&o(e.offset),S=e=>n(e)&&s(e.offset),C=e=>a(e)||e===`allow-session`||e===`allow-project`,w=e=>n(e)&&(e.type===`answer`&&Array.isArray(e.values)&&e.values.every(r)&&c(r)(e.text)||e.type===`cancelled`&&e.values===void 0&&e.text===void 0),T={none:{},several:{message:r},stopped:{loopId:i,message:c(r)},failed:{loopId:c(i),message:r}},E=e=>{if(!n(e)||!r(e.kind))return!1;let t=e.kind;if(!Object.prototype.hasOwnProperty.call(T,t))return!1;let i=T[t];return Object.entries(i).every(([t,n])=>n(e[t]))},D={submit:{prompt:i},command:{name:i,args:c(r),requestId:c(i)},abort:{},"cancel-queue":{},"get-messages":{},"get-history":{fromIndex:c(s)},"get-prompts":{},"get-context":{},"get-commands":{},"get-status":{},"list-sessions":{requestId:i},"new-session":{requestId:c(i)},"switch-session":{sessionId:i,requestId:c(i)},"get-usage-report":{},"get-personal-usage-report":{requestId:i,period:d([`7d`,`30d`]),timezone:i},"get-stored-session-usage-report":{requestId:i,sessionId:i},"get-executing":{},"get-pending":{},"get-execution-workspace":{},"read-execution-detail":{requestId:i,entryId:i,cursor:c(S)},"stop-waiting-loop":{requestId:i},"get-background-tasks":{filter:c(y)},"get-background-task":{taskId:i},"get-background-job-groups":{},"get-background-job-group":{groupId:i},"wait-background-job-group":{groupId:i},"cancel-background-task":{taskId:i,reason:c(r)},"close-background-task":{taskId:i},"send-background-task":{taskId:i,input:b},"read-background-task-log":{taskId:i,cursor:c(x)},"permission-response":{id:i,result:C},"ask-response":{id:i,response:w},resume:{lastSeq:o},ack:{seq:o}},O={driverId:c(r)},k={text_delta:{delta:r,...O},user_message:{content:r,...O},tool_start:{state:n,...O},tool_end:{state:n,...O},thinking:{isThinking:a,...O},complete:{result:n,...O},interrupted:{result:n,...O},error:{message:r,...O},command_result:{name:r,message:r,success:a,requestId:c(r)},messages:{messages:l},history:{startIndex:s,total:s,entries:m},context:{state:n},history_changed:{},turn_source:{source:d(Object.keys(f))},commands:{commands:l,skills:l},session_status:{status:n},sessions:{requestId:i,listing:n},sessions_error:{requestId:i,code:d([`not_available`,`list_failed`]),message:r},session_switched:{event:n},session_change_failed:{code:d(e),message:r,requestId:c(r)},usage_report:{report:n},personal_usage_report:{requestId:i,report:n},personal_usage_report_error:{requestId:i,code:d([`not_available`,`report_failed`]),message:r},stored_session_usage_report:{requestId:i,sessionId:i,report:n},stored_session_usage_report_error:{requestId:i,sessionId:i,code:d([`not_available`,`report_failed`]),message:r},executing:{executing:a},pending:{pending:e=>e===null||r(e),pendingCount:c(s)},execution_workspace_event:{snapshot:n},execution_detail:{requestId:i,page:n},execution_detail_error:{requestId:i,message:r},waiting_loop_stop:{requestId:i,outcome:E},background_task_event:{event:n},background_job_group_event:{event:n},plan_event:{event:n},context_file_refreshed:{event:n},branch_event:{event:n},background_tasks:{tasks:l},background_task:{taskId:r,task:u},background_job_groups:{groups:l},background_job_group:{groupId:r,group:u},background_task_log:{taskId:r,page:n},permission_request:{event:n},ask_request:{event:n},prompt_resolved:{event:n},ui_intent:{event:n},session_renamed:{event:n},history_cleared:{},background_task_control_result:{action:d(v),taskId:r,success:a,message:c(r)},protocol_error:{message:r,requestId:c(r)},resume_gap:{}};function A(e,t,i){if(!n(e))return{ok:!1,reason:`message must be a JSON object`};let a=e.type;if(!r(a))return{ok:!1,reason:`message type must be a string`};let o=Object.prototype.hasOwnProperty.call(t,a)?t[a]:void 0;if(o===void 0)return{ok:!1,reason:`Unknown message type: ${a}`};for(let[t,n]of Object.entries(o))if(!n(e[t]))return{ok:!1,reason:i(t)};return{ok:!0,message:e}}function j(e){return A(e,D,e=>e===`prompt`?`prompt must be a non-empty string`:`${e} has an invalid shape`)}function M(e){return A(e,k,e=>`${e} has an invalid shape`)}function N(e,t){if(e.length>4194304)return{ok:!1,reason:`Frame too large`};let n;try{n=JSON.parse(e)}catch{return{ok:!1,reason:`Invalid JSON`}}return t(n)}const P=new Set([`get-messages`,`get-history`,`get-context`,`get-status`,`get-commands`,`get-executing`,`get-pending`,`get-execution-workspace`,`read-execution-detail`,`get-usage-report`,`list-sessions`,`get-background-tasks`,`get-background-task`,`get-background-job-groups`,`get-background-job-group`,`wait-background-job-group`,`read-background-task-log`]);function F(e){return P.has(e)}export{M as a,N as i,t as n,j as r,F as t};
-//# sourceMappingURL=observer-messages-Bx-xReUQ.js.map

package/dist/browser/observer-messages-Bx-xReUQ.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"observer-messages-Bx-xReUQ.js","names":[],"sources":["../../src/message-decoders.ts","../../src/observer-messages.ts"],"sourcesContent":["/**\n * Owner-side runtime decoders for the wire message unions (issue #2045 / TRANS-005 adjacent).\n *\n * `wire-messages.ts` owns the TypeScript unions; this file owns turning `JSON.parse` output into one\n * of them. Before it, the server did `JSON.parse(data) as TClientMessage` and each client did the\n * same for `TServerMessage`, so valid JSON with an invalid shape crossed the boundary wearing a\n * protocol type. Carriers now implement `raw string → owner decoder → typed message` and answer a\n * refusal with the protocol's own `protocol_error` (server side) or client error (client side).\n *\n * `decodeClientMessage` is TOTAL: every variant and every nested field it carries is validated.\n * `decodeServerMessage` validates every variant's discriminator and declared top-level fields; a\n * payload OWNED BY ANOTHER PACKAGE (`IToolState`, `IExecutionResult`, background events, …) is\n * checked as a non-array record (or array of records) here — its own total decoding belongs to its\n * owner and is tracked there, not duplicated in a transport package.\n */\n\nimport { SESSION_CHANGE_REFUSAL_CODES } from '@robota-sdk/agent-interface-session';\n\nimport type { TBackgroundControlAction, TClientMessage, TServerMessage } from './wire-messages.js';\n\nexport type TMessageDecodeResult<TMessage> =\n  | { readonly ok: true; readonly message: TMessage }\n  | { readonly ok: false; readonly reason: string };\n\n/** Serialized frames larger than this are refused before any parse (a bounded inbound budget). */\nexport const MAX_INBOUND_FRAME_BYTES = 4 * 1024 * 1024;\n\ntype TRecord = Record<string, unknown>;\n\nfunction isRecord(value: unknown): value is TRecord {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\nconst isString = (v: unknown): v is string => typeof v === 'string';\nconst isNonEmptyString = (v: unknown): v is string => typeof v === 'string' && v.length > 0;\nconst isBoolean = (v: unknown): v is boolean => typeof v === 'boolean';\nconst isFiniteNumber = (v: unknown): v is number => typeof v === 'number' && Number.isFinite(v);\nconst isCount = (v: unknown): v is number => Number.isSafeInteger(v) && (v as number) >= 0;\nconst isOptional =\n  (check: (v: unknown) => boolean) =>\n  (v: unknown): boolean =>\n    v === undefined || check(v);\nconst isRecordArray = (v: unknown): boolean => Array.isArray(v) && v.every(isRecord);\nconst isNullableRecord = (v: unknown): boolean => v === null || isRecord(v);\nconst oneOf =\n  (members: readonly string[]) =>\n  (v: unknown): boolean =>\n    typeof v === 'string' && members.includes(v);\n/** A record, not an array, so a turn source added to the union without one here fails to compile. */\nconst TURN_SOURCES: Readonly<\n  Record<Extract<TServerMessage, { type: 'turn_source' }>['source'], true>\n> = { user: true, 'agent-wakeup': true, peer: true, external: true };\n/** A history entry's envelope is this package's (`IWireHistoryEntry`); its `data` is the recorder's. */\nconst isWireHistoryEntry = (v: unknown): boolean =>\n  isRecord(v) &&\n  isString(v['id']) &&\n  isString(v['timestamp']) &&\n  isString(v['category']) &&\n  isString(v['type']);\nconst isWireHistoryEntries = (v: unknown): boolean =>\n  Array.isArray(v) && v.every(isWireHistoryEntry);\n\ntype TFieldCheck = (value: unknown) => boolean;\ntype TVariantShape = Readonly<Record<string, TFieldCheck>>;\n\nconst BACKGROUND_TASK_KINDS = ['agent', 'process', 'scheduled'] as const;\nconst BACKGROUND_TASK_MODES = ['foreground', 'background'] as const;\nconst BACKGROUND_TASK_STATUSES = [\n  'queued',\n  'running',\n  'waiting_permission',\n  'sleeping',\n  'paused',\n  'completed',\n  'failed',\n  'cancelled',\n] as const;\nconst BACKGROUND_CONTROL_ACTIONS: readonly TBackgroundControlAction[] = ['cancel', 'close', 'send'];\n\nconst isBackgroundTaskListFilter: TFieldCheck = (v) =>\n  isRecord(v) &&\n  isOptional(oneOf(BACKGROUND_TASK_KINDS))(v['kind']) &&\n  isOptional(oneOf(BACKGROUND_TASK_STATUSES))(v['status']) &&\n  isOptional(oneOf(BACKGROUND_TASK_MODES))(v['mode']) &&\n  isOptional(isBoolean)(v['includeClosed']);\nconst isBackgroundTaskInput: TFieldCheck = (v) =>\n  isRecord(v) && isOptional(isString)(v['prompt']) && isOptional(isString)(v['stdin']);\nconst isBackgroundTaskLogCursor: TFieldCheck = (v) => isRecord(v) && isFiniteNumber(v['offset']);\nconst isExecutionDetailCursor: TFieldCheck = (v) => isRecord(v) && isCount(v['offset']);\nconst isPermissionResultValue: TFieldCheck = (v) =>\n  isBoolean(v) || v === 'allow-session' || v === 'allow-project';\nconst isActionResponse: TFieldCheck = (v) =>\n  isRecord(v) &&\n  ((v['type'] === 'answer' &&\n    Array.isArray(v['values']) &&\n    v['values'].every(isString) &&\n    isOptional(isString)(v['text'])) ||\n    (v['type'] === 'cancelled' && v['values'] === undefined && v['text'] === undefined));\n\ntype TWaitingLoopStopOutcome = Extract<TServerMessage, { type: 'waiting_loop_stop' }>['outcome'];\n/** Keyed by `kind`, so an outcome added to the union without a shape here fails to compile. */\nconst WAITING_LOOP_STOP_OUTCOME_SHAPES: Readonly<\n  Record<TWaitingLoopStopOutcome['kind'], TVariantShape>\n> = {\n  none: {},\n  several: { message: isString },\n  stopped: { loopId: isNonEmptyString, message: isOptional(isString) },\n  failed: { loopId: isOptional(isNonEmptyString), message: isString },\n};\nconst isWaitingLoopStopOutcome: TFieldCheck = (v) => {\n  if (!isRecord(v) || !isString(v['kind'])) return false;\n  const kind = v['kind'];\n  if (!Object.prototype.hasOwnProperty.call(WAITING_LOOP_STOP_OUTCOME_SHAPES, kind)) return false;\n  const shape = WAITING_LOOP_STOP_OUTCOME_SHAPES[kind as TWaitingLoopStopOutcome['kind']];\n  return Object.entries(shape).every(([field, check]) => check(v[field]));\n};\n\n/** One entry per `TClientMessage` variant — a variant added to the union without one fails the test. */\nexport const CLIENT_MESSAGE_SHAPES: Readonly<Record<TClientMessage['type'], TVariantShape>> = {\n  submit: { prompt: isNonEmptyString },\n  command: {\n    name: isNonEmptyString,\n    args: isOptional(isString),\n    requestId: isOptional(isNonEmptyString),\n  },\n  abort: {},\n  'cancel-queue': {},\n  'get-messages': {},\n  'get-history': { fromIndex: isOptional(isCount) },\n  'get-prompts': {},\n  'get-context': {},\n  'get-commands': {},\n  'get-status': {},\n  'list-sessions': { requestId: isNonEmptyString },\n  'new-session': { requestId: isOptional(isNonEmptyString) },\n  'switch-session': { sessionId: isNonEmptyString, requestId: isOptional(isNonEmptyString) },\n  'get-usage-report': {},\n  'get-personal-usage-report': {\n    requestId: isNonEmptyString,\n    period: oneOf(['7d', '30d']),\n    timezone: isNonEmptyString,\n  },\n  'get-stored-session-usage-report': {\n    requestId: isNonEmptyString,\n    sessionId: isNonEmptyString,\n  },\n  'get-executing': {},\n  'get-pending': {},\n  'get-execution-workspace': {},\n  'read-execution-detail': {\n    requestId: isNonEmptyString,\n    entryId: isNonEmptyString,\n    cursor: isOptional(isExecutionDetailCursor),\n  },\n  'stop-waiting-loop': { requestId: isNonEmptyString },\n  'get-background-tasks': { filter: isOptional(isBackgroundTaskListFilter) },\n  'get-background-task': { taskId: isNonEmptyString },\n  'get-background-job-groups': {},\n  'get-background-job-group': { groupId: isNonEmptyString },\n  'wait-background-job-group': { groupId: isNonEmptyString },\n  'cancel-background-task': { taskId: isNonEmptyString, reason: isOptional(isString) },\n  'close-background-task': { taskId: isNonEmptyString },\n  'send-background-task': { taskId: isNonEmptyString, input: isBackgroundTaskInput },\n  'read-background-task-log': {\n    taskId: isNonEmptyString,\n    cursor: isOptional(isBackgroundTaskLogCursor),\n  },\n  'permission-response': { id: isNonEmptyString, result: isPermissionResultValue },\n  'ask-response': { id: isNonEmptyString, response: isActionResponse },\n  resume: { lastSeq: isFiniteNumber },\n  ack: { seq: isFiniteNumber },\n};\n\nconst authored: TVariantShape = { driverId: isOptional(isString) };\n\n/** One entry per `TServerMessage` variant. Foreign-owned payloads are checked as records (see header). */\nexport const SERVER_MESSAGE_SHAPES: Readonly<Record<TServerMessage['type'], TVariantShape>> = {\n  text_delta: { delta: isString, ...authored },\n  user_message: { content: isString, ...authored },\n  tool_start: { state: isRecord, ...authored },\n  tool_end: { state: isRecord, ...authored },\n  thinking: { isThinking: isBoolean, ...authored },\n  complete: { result: isRecord, ...authored },\n  interrupted: { result: isRecord, ...authored },\n  error: { message: isString, ...authored },\n  command_result: {\n    name: isString,\n    message: isString,\n    success: isBoolean,\n    requestId: isOptional(isString),\n  },\n  messages: { messages: isRecordArray },\n  history: { startIndex: isCount, total: isCount, entries: isWireHistoryEntries },\n  context: { state: isRecord },\n  history_changed: {},\n  turn_source: { source: oneOf(Object.keys(TURN_SOURCES)) },\n  commands: { commands: isRecordArray, skills: isRecordArray },\n  session_status: { status: isRecord },\n  sessions: { requestId: isNonEmptyString, listing: isRecord },\n  sessions_error: {\n    requestId: isNonEmptyString,\n    code: oneOf(['not_available', 'list_failed']),\n    message: isString,\n  },\n  session_switched: { event: isRecord },\n  session_change_failed: {\n    code: oneOf(SESSION_CHANGE_REFUSAL_CODES),\n    message: isString,\n    requestId: isOptional(isString),\n  },\n  usage_report: { report: isRecord },\n  personal_usage_report: { requestId: isNonEmptyString, report: isRecord },\n  personal_usage_report_error: {\n    requestId: isNonEmptyString,\n    code: oneOf(['not_available', 'report_failed']),\n    message: isString,\n  },\n  stored_session_usage_report: {\n    requestId: isNonEmptyString,\n    sessionId: isNonEmptyString,\n    report: isRecord,\n  },\n  stored_session_usage_report_error: {\n    requestId: isNonEmptyString,\n    sessionId: isNonEmptyString,\n    code: oneOf(['not_available', 'report_failed']),\n    message: isString,\n  },\n  executing: { executing: isBoolean },\n  // An older host sends no count; a client then counts the one prompt it can see.\n  pending: { pending: (v) => v === null || isString(v), pendingCount: isOptional(isCount) },\n  execution_workspace_event: { snapshot: isRecord },\n  execution_detail: { requestId: isNonEmptyString, page: isRecord },\n  execution_detail_error: { requestId: isNonEmptyString, message: isString },\n  waiting_loop_stop: { requestId: isNonEmptyString, outcome: isWaitingLoopStopOutcome },\n  background_task_event: { event: isRecord },\n  background_job_group_event: { event: isRecord },\n  plan_event: { event: isRecord },\n  context_file_refreshed: { event: isRecord },\n  branch_event: { event: isRecord },\n  background_tasks: { tasks: isRecordArray },\n  background_task: { taskId: isString, task: isNullableRecord },\n  background_job_groups: { groups: isRecordArray },\n  background_job_group: { groupId: isString, group: isNullableRecord },\n  background_task_log: { taskId: isString, page: isRecord },\n  permission_request: { event: isRecord },\n  ask_request: { event: isRecord },\n  prompt_resolved: { event: isRecord },\n  ui_intent: { event: isRecord },\n  session_renamed: { event: isRecord },\n  history_cleared: {},\n  background_task_control_result: {\n    action: oneOf(BACKGROUND_CONTROL_ACTIONS),\n    taskId: isString,\n    success: isBoolean,\n    message: isOptional(isString),\n  },\n  protocol_error: { message: isString, requestId: isOptional(isString) },\n  resume_gap: {},\n};\n\nfunction decodeVariant<TMessage extends { type: string }>(\n  value: unknown,\n  shapes: Readonly<Record<string, TVariantShape>>,\n  reasonFor: (field: string) => string,\n): TMessageDecodeResult<TMessage> {\n  if (!isRecord(value)) return { ok: false, reason: 'message must be a JSON object' };\n  const type = value['type'];\n  if (!isString(type)) return { ok: false, reason: 'message type must be a string' };\n  const shape = Object.prototype.hasOwnProperty.call(shapes, type) ? shapes[type] : undefined;\n  if (shape === undefined) return { ok: false, reason: `Unknown message type: ${type}` };\n  for (const [field, check] of Object.entries(shape)) {\n    if (!check(value[field])) return { ok: false, reason: reasonFor(field) };\n  }\n  return { ok: true, message: value as unknown as TMessage };\n}\n\n/** Total decode of a parsed client frame. */\nexport function decodeClientMessage(value: unknown): TMessageDecodeResult<TClientMessage> {\n  return decodeVariant<TClientMessage>(value, CLIENT_MESSAGE_SHAPES, (field) =>\n    field === 'prompt' ? 'prompt must be a non-empty string' : `${field} has an invalid shape`,\n  );\n}\n\n/** Variant-level decode of a parsed server frame (foreign-owned payloads as records, see header). */\nexport function decodeServerMessage(value: unknown): TMessageDecodeResult<TServerMessage> {\n  return decodeVariant<TServerMessage>(\n    value,\n    SERVER_MESSAGE_SHAPES,\n    (field) => `${field} has an invalid shape`,\n  );\n}\n\n/** `raw string → JSON → owner decoder`, the one path a carrier implements. */\nexport function decodeFrame<TMessage>(\n  data: string,\n  decode: (value: unknown) => TMessageDecodeResult<TMessage>,\n): TMessageDecodeResult<TMessage> {\n  if (data.length > MAX_INBOUND_FRAME_BYTES) return { ok: false, reason: 'Frame too large' };\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(data);\n    // allow-fallback: the parse failure is returned as a typed refusal the carrier answers on the wire\n  } catch {\n    return { ok: false, reason: 'Invalid JSON' };\n  }\n  return decode(parsed);\n}\n","import type { TClientMessage } from './wire-messages.js';\n\n/**\n * The only inbound messages an observer may send: reads of this session. An allowlist, so a message\n * type added later is refused to observers until someone decides it is a read. `get-prompts` is left\n * out: an observer never receives prompts, open ones included.\n *\n * The host refuses anything else from an observer, and a client in observe mode sends only these, so\n * both sides read this one list.\n */\nexport const OBSERVER_MESSAGES: ReadonlySet<TClientMessage['type']> = new Set<\n  TClientMessage['type']\n>([\n  'get-messages',\n  'get-history',\n  'get-context',\n  'get-status',\n  'get-commands',\n  'get-executing',\n  'get-pending',\n  'get-execution-workspace',\n  'read-execution-detail',\n  'get-usage-report',\n  'list-sessions',\n  'get-background-tasks',\n  'get-background-task',\n  'get-background-job-groups',\n  'get-background-job-group',\n  'wait-background-job-group',\n  'read-background-task-log',\n]);\n\n/** Whether an observer may send a message of this type. */\nexport function isObserverMessageType(type: string): boolean {\n  return (OBSERVER_MESSAGES as ReadonlySet<string>).has(type);\n}\n"],"mappings":"mFAyBA,MAAa,EAA0B,EAAI,KAAO,KAIlD,SAAS,EAAS,EAAkC,CAClD,OAAO,OAAO,GAAU,YAAY,GAAkB,CAAC,MAAM,QAAQ,CAAK,CAC5E,CACA,MAAM,EAAY,GAA4B,OAAO,GAAM,SACrD,EAAoB,GAA4B,OAAO,GAAM,UAAY,EAAE,OAAS,EACpF,EAAa,GAA6B,OAAO,GAAM,UACvD,EAAkB,GAA4B,OAAO,GAAM,UAAY,OAAO,SAAS,CAAC,EACxF,EAAW,GAA4B,OAAO,cAAc,CAAC,GAAM,GAAgB,EACnF,EACH,GACA,GACC,IAAM,IAAA,IAAa,EAAM,CAAC,EACxB,EAAiB,GAAwB,MAAM,QAAQ,CAAC,GAAK,EAAE,MAAM,CAAQ,EAC7E,EAAoB,GAAwB,IAAM,MAAQ,EAAS,CAAC,EACpE,EACH,GACA,GACC,OAAO,GAAM,UAAY,EAAQ,SAAS,CAAC,EAEzC,EAEF,CAAE,KAAM,GAAM,eAAgB,GAAM,KAAM,GAAM,SAAU,EAAK,EAE7D,EAAsB,GAC1B,EAAS,CAAC,GACV,EAAS,EAAE,EAAK,GAChB,EAAS,EAAE,SAAY,GACvB,EAAS,EAAE,QAAW,GACtB,EAAS,EAAE,IAAO,EACd,EAAwB,GAC5B,MAAM,QAAQ,CAAC,GAAK,EAAE,MAAM,CAAkB,EAK1C,EAAwB,CAAC,QAAS,UAAW,WAAW,EACxD,EAAwB,CAAC,aAAc,YAAY,EACnD,EAA2B,CAC/B,SACA,UACA,qBACA,WACA,SACA,YACA,SACA,WACF,EACM,EAAkE,CAAC,SAAU,QAAS,MAAM,EAE5F,EAA2C,GAC/C,EAAS,CAAC,GACV,EAAW,EAAM,CAAqB,CAAC,CAAC,CAAC,EAAE,IAAO,GAClD,EAAW,EAAM,CAAwB,CAAC,CAAC,CAAC,EAAE,MAAS,GACvD,EAAW,EAAM,CAAqB,CAAC,CAAC,CAAC,EAAE,IAAO,GAClD,EAAW,CAAS,CAAC,CAAC,EAAE,aAAgB,EACpC,EAAsC,GAC1C,EAAS,CAAC,GAAK,EAAW,CAAQ,CAAC,CAAC,EAAE,MAAS,GAAK,EAAW,CAAQ,CAAC,CAAC,EAAE,KAAQ,EAC/E,EAA0C,GAAM,EAAS,CAAC,GAAK,EAAe,EAAE,MAAS,EACzF,EAAwC,GAAM,EAAS,CAAC,GAAK,EAAQ,EAAE,MAAS,EAChF,EAAwC,GAC5C,EAAU,CAAC,GAAK,IAAM,iBAAmB,IAAM,gBAC3C,EAAiC,GACrC,EAAS,CAAC,IACR,EAAE,OAAY,UACd,MAAM,QAAQ,EAAE,MAAS,GACzB,EAAE,OAAU,MAAM,CAAQ,GAC1B,EAAW,CAAQ,CAAC,CAAC,EAAE,IAAO,GAC7B,EAAE,OAAY,aAAe,EAAE,SAAc,IAAA,IAAa,EAAE,OAAY,IAAA,IAIvE,EAEF,CACF,KAAM,CAAC,EACP,QAAS,CAAE,QAAS,CAAS,EAC7B,QAAS,CAAE,OAAQ,EAAkB,QAAS,EAAW,CAAQ,CAAE,EACnE,OAAQ,CAAE,OAAQ,EAAW,CAAgB,EAAG,QAAS,CAAS,CACpE,EACM,EAAyC,GAAM,CACnD,GAAI,CAAC,EAAS,CAAC,GAAK,CAAC,EAAS,EAAE,IAAO,EAAG,MAAO,GACjD,IAAM,EAAO,EAAE,KACf,GAAI,CAAC,OAAO,UAAU,eAAe,KAAK,EAAkC,CAAI,EAAG,MAAO,GAC1F,IAAM,EAAQ,EAAiC,GAC/C,OAAO,OAAO,QAAQ,CAAK,CAAC,CAAC,OAAO,CAAC,EAAO,KAAW,EAAM,EAAE,EAAM,CAAC,CACxE,EAGa,EAAiF,CAC5F,OAAQ,CAAE,OAAQ,CAAiB,EACnC,QAAS,CACP,KAAM,EACN,KAAM,EAAW,CAAQ,EACzB,UAAW,EAAW,CAAgB,CACxC,EACA,MAAO,CAAC,EACR,eAAgB,CAAC,EACjB,eAAgB,CAAC,EACjB,cAAe,CAAE,UAAW,EAAW,CAAO,CAAE,EAChD,cAAe,CAAC,EAChB,cAAe,CAAC,EAChB,eAAgB,CAAC,EACjB,aAAc,CAAC,EACf,gBAAiB,CAAE,UAAW,CAAiB,EAC/C,cAAe,CAAE,UAAW,EAAW,CAAgB,CAAE,EACzD,iBAAkB,CAAE,UAAW,EAAkB,UAAW,EAAW,CAAgB,CAAE,EACzF,mBAAoB,CAAC,EACrB,4BAA6B,CAC3B,UAAW,EACX,OAAQ,EAAM,CAAC,KAAM,KAAK,CAAC,EAC3B,SAAU,CACZ,EACA,kCAAmC,CACjC,UAAW,EACX,UAAW,CACb,EACA,gBAAiB,CAAC,EAClB,cAAe,CAAC,EAChB,0BAA2B,CAAC,EAC5B,wBAAyB,CACvB,UAAW,EACX,QAAS,EACT,OAAQ,EAAW,CAAuB,CAC5C,EACA,oBAAqB,CAAE,UAAW,CAAiB,EACnD,uBAAwB,CAAE,OAAQ,EAAW,CAA0B,CAAE,EACzE,sBAAuB,CAAE,OAAQ,CAAiB,EAClD,4BAA6B,CAAC,EAC9B,2BAA4B,CAAE,QAAS,CAAiB,EACxD,4BAA6B,CAAE,QAAS,CAAiB,EACzD,yBAA0B,CAAE,OAAQ,EAAkB,OAAQ,EAAW,CAAQ,CAAE,EACnF,wBAAyB,CAAE,OAAQ,CAAiB,EACpD,uBAAwB,CAAE,OAAQ,EAAkB,MAAO,CAAsB,EACjF,2BAA4B,CAC1B,OAAQ,EACR,OAAQ,EAAW,CAAyB,CAC9C,EACA,sBAAuB,CAAE,GAAI,EAAkB,OAAQ,CAAwB,EAC/E,eAAgB,CAAE,GAAI,EAAkB,SAAU,CAAiB,EACnE,OAAQ,CAAE,QAAS,CAAe,EAClC,IAAK,CAAE,IAAK,CAAe,CAC7B,EAEM,EAA0B,CAAE,SAAU,EAAW,CAAQ,CAAE,EAGpD,EAAiF,CAC5F,WAAY,CAAE,MAAO,EAAU,GAAG,CAAS,EAC3C,aAAc,CAAE,QAAS,EAAU,GAAG,CAAS,EAC/C,WAAY,CAAE,MAAO,EAAU,GAAG,CAAS,EAC3C,SAAU,CAAE,MAAO,EAAU,GAAG,CAAS,EACzC,SAAU,CAAE,WAAY,EAAW,GAAG,CAAS,EAC/C,SAAU,CAAE,OAAQ,EAAU,GAAG,CAAS,EAC1C,YAAa,CAAE,OAAQ,EAAU,GAAG,CAAS,EAC7C,MAAO,CAAE,QAAS,EAAU,GAAG,CAAS,EACxC,eAAgB,CACd,KAAM,EACN,QAAS,EACT,QAAS,EACT,UAAW,EAAW,CAAQ,CAChC,EACA,SAAU,CAAE,SAAU,CAAc,EACpC,QAAS,CAAE,WAAY,EAAS,MAAO,EAAS,QAAS,CAAqB,EAC9E,QAAS,CAAE,MAAO,CAAS,EAC3B,gBAAiB,CAAC,EAClB,YAAa,CAAE,OAAQ,EAAM,OAAO,KAAK,CAAY,CAAC,CAAE,EACxD,SAAU,CAAE,SAAU,EAAe,OAAQ,CAAc,EAC3D,eAAgB,CAAE,OAAQ,CAAS,EACnC,SAAU,CAAE,UAAW,EAAkB,QAAS,CAAS,EAC3D,eAAgB,CACd,UAAW,EACX,KAAM,EAAM,CAAC,gBAAiB,aAAa,CAAC,EAC5C,QAAS,CACX,EACA,iBAAkB,CAAE,MAAO,CAAS,EACpC,sBAAuB,CACrB,KAAM,EAAM,CAA4B,EACxC,QAAS,EACT,UAAW,EAAW,CAAQ,CAChC,EACA,aAAc,CAAE,OAAQ,CAAS,EACjC,sBAAuB,CAAE,UAAW,EAAkB,OAAQ,CAAS,EACvE,4BAA6B,CAC3B,UAAW,EACX,KAAM,EAAM,CAAC,gBAAiB,eAAe,CAAC,EAC9C,QAAS,CACX,EACA,4BAA6B,CAC3B,UAAW,EACX,UAAW,EACX,OAAQ,CACV,EACA,kCAAmC,CACjC,UAAW,EACX,UAAW,EACX,KAAM,EAAM,CAAC,gBAAiB,eAAe,CAAC,EAC9C,QAAS,CACX,EACA,UAAW,CAAE,UAAW,CAAU,EAElC,QAAS,CAAE,QAAU,GAAM,IAAM,MAAQ,EAAS,CAAC,EAAG,aAAc,EAAW,CAAO,CAAE,EACxF,0BAA2B,CAAE,SAAU,CAAS,EAChD,iBAAkB,CAAE,UAAW,EAAkB,KAAM,CAAS,EAChE,uBAAwB,CAAE,UAAW,EAAkB,QAAS,CAAS,EACzE,kBAAmB,CAAE,UAAW,EAAkB,QAAS,CAAyB,EACpF,sBAAuB,CAAE,MAAO,CAAS,EACzC,2BAA4B,CAAE,MAAO,CAAS,EAC9C,WAAY,CAAE,MAAO,CAAS,EAC9B,uBAAwB,CAAE,MAAO,CAAS,EAC1C,aAAc,CAAE,MAAO,CAAS,EAChC,iBAAkB,CAAE,MAAO,CAAc,EACzC,gBAAiB,CAAE,OAAQ,EAAU,KAAM,CAAiB,EAC5D,sBAAuB,CAAE,OAAQ,CAAc,EAC/C,qBAAsB,CAAE,QAAS,EAAU,MAAO,CAAiB,EACnE,oBAAqB,CAAE,OAAQ,EAAU,KAAM,CAAS,EACxD,mBAAoB,CAAE,MAAO,CAAS,EACtC,YAAa,CAAE,MAAO,CAAS,EAC/B,gBAAiB,CAAE,MAAO,CAAS,EACnC,UAAW,CAAE,MAAO,CAAS,EAC7B,gBAAiB,CAAE,MAAO,CAAS,EACnC,gBAAiB,CAAC,EAClB,+BAAgC,CAC9B,OAAQ,EAAM,CAA0B,EACxC,OAAQ,EACR,QAAS,EACT,QAAS,EAAW,CAAQ,CAC9B,EACA,eAAgB,CAAE,QAAS,EAAU,UAAW,EAAW,CAAQ,CAAE,EACrE,WAAY,CAAC,CACf,EAEA,SAAS,EACP,EACA,EACA,EACgC,CAChC,GAAI,CAAC,EAAS,CAAK,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,+BAAgC,EAClF,IAAM,EAAO,EAAM,KACnB,GAAI,CAAC,EAAS,CAAI,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,+BAAgC,EACjF,IAAM,EAAQ,OAAO,UAAU,eAAe,KAAK,EAAQ,CAAI,EAAI,EAAO,GAAQ,IAAA,GAClF,GAAI,IAAU,IAAA,GAAW,MAAO,CAAE,GAAI,GAAO,OAAQ,yBAAyB,GAAO,EACrF,IAAK,GAAM,CAAC,EAAO,KAAU,OAAO,QAAQ,CAAK,EAC/C,GAAI,CAAC,EAAM,EAAM,EAAM,EAAG,MAAO,CAAE,GAAI,GAAO,OAAQ,EAAU,CAAK,CAAE,EAEzE,MAAO,CAAE,GAAI,GAAM,QAAS,CAA6B,CAC3D,CAGA,SAAgB,EAAoB,EAAsD,CACxF,OAAO,EAA8B,EAAO,EAAwB,GAClE,IAAU,SAAW,oCAAsC,GAAG,EAAM,sBACtE,CACF,CAGA,SAAgB,EAAoB,EAAsD,CACxF,OAAO,EACL,EACA,EACC,GAAU,GAAG,EAAM,sBACtB,CACF,CAGA,SAAgB,EACd,EACA,EACgC,CAChC,GAAI,EAAK,OAAA,QAAkC,MAAO,CAAE,GAAI,GAAO,OAAQ,iBAAkB,EACzF,IAAI,EACJ,GAAI,CACF,EAAS,KAAK,MAAM,CAAI,CAE1B,MAAQ,CACN,MAAO,CAAE,GAAI,GAAO,OAAQ,cAAe,CAC7C,CACA,OAAO,EAAO,CAAM,CACtB,CCxSA,MAAa,EAAyD,IAAI,IAExE,CACA,eACA,cACA,cACA,aACA,eACA,gBACA,cACA,0BACA,wBACA,mBACA,gBACA,uBACA,sBACA,4BACA,2BACA,4BACA,0BACF,CAAC,EAGD,SAAgB,EAAsB,EAAuB,CAC3D,OAAQ,EAA0C,IAAI,CAAI,CAC5D"}