@sentropic/h2a-runtime 0.92.0 → 0.93.1

package/dist/native-terminal/host.d.ts

@@ -1,6 +1,125 @@
 import type { PtySpawner } from "../pty.js";
+import { type NativeTerminalPgidOwner } from "../registry.js";
 import { type TerminalOutputChunk, type TerminalReplayGap } from "./replay-buffer.js";
 import { type NativeTerminalStopSignal } from "./protocol.js";
+/**
+ * Emits the FORCE signal to a whole process group from the PARENT (the host
+ * process) and can prove whether the group is actually dead — the two halves
+ * of the fix: FORCE_KILL_MUST_NOT_DEPEND_ON_THE_TARGET_EXECUTING_CODE and
+ * FORCE_STOP_ALL_MUST_PROVE_THE_PTY_TREE_IS_DEAD_NOT_JUST_SIGNAL_IT. Injectable
+ * so tests never send real signals at fabricated pgids (see host.test.ts).
+ */
+export type NativeTerminalProcessGroupReaper = {
+    /** Ask the OS to signal the whole group. Must not throw on ESRCH (already gone). */
+    killGroup(pgid: number, signal: NativeTerminalStopSignal): void;
+    /** True iff the OS still reports at least one process in this group. */
+    isGroupAlive(pgid: number): boolean;
+    /** Best-effort human-readable list of survivors, for a timeout diagnostic. */
+    describeGroup(pgid: number): string;
+};
+/**
+ * Real POSIX implementation: `process.kill(-pgid, signal)` signals every
+ * process in the group in one syscall, regardless of whether any of them is
+ * stuck, in D-state, or has overwritten its own trap handlers — it asks
+ * nothing of the target. `kill(-pgid, 0)` is the standard "is anything still
+ * in this group" probe (ESRCH = empty). Not meaningful on win32 (no POSIX
+ * process groups); callers on that platform fall back to per-process kill.
+ */
+export declare const posixProcessGroupReaper: NativeTerminalProcessGroupReaper;
+/**
+ * Read a process's start-time — Linux `/proc/<pid>/stat` field 22
+ * ("starttime", clock ticks since boot) — the pid-recycling-proof
+ * discriminant used for owning-host attribution
+ * (`RegistryEntry.ownerHostPid`/`ownerHostStartTime`). An immutable property
+ * of a process for its entire lifetime: two DIFFERENT processes that ever
+ * held the same pid cannot both report the same start-time (barring a read
+ * error), which is what makes "pid matches AND start-time matches" a safe
+ * proof of "still the same process", not just "some process now owns this
+ * pid".
+ *
+ * Parsing anchors on the LAST occurrence of the two-character sequence ") "
+ * rather than a naive whitespace split: field 2 (`comm`, the executable
+ * name) is parenthesized and CAN itself contain spaces and parentheses
+ * (e.g. a process named "node (pty host)"), which would shift every
+ * subsequent field under a plain split — silently reading the wrong number
+ * "most of the time" and breaking on the one process with a weird name. That
+ * would be a confident wrong answer, worse than no discriminant.
+ *
+ * After locating the split point, man(5) proc's field 3 ("state") is
+ * `rest[0]`; field 22 ("starttime") is therefore `rest[19]`.
+ *
+ * A mandatory sanity check follows: `starttime` (in clock ticks, USER_HZ=100
+ * on Linux) divided by 100 must not exceed the system's current uptime — a
+ * process cannot have started in the future relative to boot. If that check
+ * fails, the parse is treated as shifted/malformed and this function returns
+ * undefined (never answers from a mis-parsed field) rather than guessing.
+ *
+ * Returns undefined — never throws — on any read/parse failure or on a
+ * non-Linux platform (no /proc); callers must treat "unavailable" the same
+ * conservative way `posixProcessGroupReaper.isGroupAlive` treats EPERM: as
+ * "cannot prove", never as "prove me dead".
+ */
+export declare function readProcessStartTime(pid: number): number | undefined;
+/** Env var name the spawned tree's session token travels under (see `create()`). */
+export declare const H2A_SESSION_TOKEN_ENV_VAR = "H2A_SESSION_TOKEN";
+/**
+ * The group-MEMBERSHIP anchor of last resort: true iff AT LEAST ONE process
+ * currently in group `pgid` carries `expectedToken` in its own environment
+ * (see `RegistryEntry.pgidGroupToken`'s doc comment for the full rationale).
+ * Used ONLY when the group leader itself is unreadable — the rare path —
+ * never as a substitute for the fast leader-start-time check above it.
+ *
+ * DECLARED LIMITS (do not let a reviewer discover these):
+ *  - `/proc/<pid>/environ` is only readable for processes owned by the SAME
+ *    uid as this host process — true here (the host and every PTY tree it
+ *    spawns share a uid).
+ *  - A process can freely rewrite its own environ after exec; this is
+ *    therefore a NON-adversarial membership proof. That is sufficient here:
+ *    the threat this guards against is the CHANCE of the OS recycling a
+ *    pgid to an unrelated process, not an adversary actively forging a
+ *    token — an actual attacker with same-uid code execution already has
+ *    far more direct ways to interfere than faking this one env var.
+ *  - This enumeration runs ONLY on the leader-absent path (never on every
+ *    reap), keeping it rare in practice — the fast leader-start-time check
+ *    above it covers the common case.
+ */
+export declare function groupCarriesSessionToken(pgid: number, expectedToken: string): boolean;
+/** Liveness verdict for a native-terminal PTY session's OWNING HOST. */
+export type NativeTerminalOwnerHostStatus = "alive" | "dead" | "unresolvable";
+/**
+ * Injectable probe: given the (pid, start-time) recorded at PTY-creation
+ * time, decide whether that owning host is PROVEN dead. Tests inject fakes;
+ * `defaultOwnerHostProbe` below is the real /proc-backed implementation used
+ * in production.
+ */
+export type NativeTerminalOwnerHostProbe = (owner: NativeTerminalPgidOwner) => NativeTerminalOwnerHostStatus;
+/**
+ * The real owner-host liveness probe. Two necessary conditions before
+ * declaring a host PROVEN DEAD (mirrors reapOrphan's own "prove death, don't
+ * just signal" conservatism one level up — see `reconcileDeadHostOrphans`):
+ *
+ *  - the owner pid no longer exists at all -> DEAD (no ambiguity possible),
+ *  - OR the pid exists but its CURRENT start-time differs from the one
+ *    recorded at persistence time -> DEAD (the pid was recycled: a different
+ *    process now holds it).
+ *
+ * Every other outcome is conservative-ALIVE: a pid that exists with a
+ * matching start-time is alive (possibly just unreachable — NOT proof of
+ * death); a pid that exists but whose start-time cannot be read/parsed right
+ * now is unresolvable (never guess); a pid that exists with NO recorded
+ * start-time (legacy row, or a write-time read failure) cannot be checked
+ * for recycling at all, so it stays alive rather than manufacture a "dead"
+ * verdict from missing data.
+ *
+ * This asymmetry is deliberate: the DANGEROUS error (reaping a live host)
+ * would require a live process's immutable start-time to change — which
+ * cannot happen barring a read error, itself already routed to
+ * "unresolvable". The BENIGN error (a recycled pid that coincidentally
+ * shares a start-time, or a legacy row with no recorded start-time)
+ * concludes "alive" and merely leaves an orphan uncollected — the pre-fix
+ * status quo, not a regression.
+ */
+export declare const defaultOwnerHostProbe: NativeTerminalOwnerHostProbe;
 export type NativeTerminalExit = Readonly<{
     exitCode: number;
     signal?: number;
@@ -15,6 +134,13 @@ export type NativeTerminalSessionState = Readonly<{
     latestSeq: number;
     exit: NativeTerminalExit | null;
     stopSignal: string | null;
+    /**
+     * Whether a controller currently holds this session's exclusive input lease.
+     * Deliberately a BOOLEAN: consumers (restore visibility) only need to know
+     * that a controlling terminal exists, never who it is — the controller id
+     * stays private to the host.
+     */
+    controlled: boolean;
 }>;
 export type NativeTerminalReplay = Readonly<{
     generation: string;
@@ -53,6 +179,52 @@ export type NativeTerminalCreateOptions = Readonly<{
     cols: number;
     rows: number;
 }>;
+/**
+ * Outcome of asking a host to reap a session BY ID from its persisted pgid —
+ * the case where the host asking has no in-memory record of the session at
+ * all (a fresh host after the owning host was killed). `"refused"` means
+ * either the pgid could not be resolved at all, OR it resolved but the
+ * group-leader identity guard (see `#verifyGroupLeaderIdentity`) would not
+ * positively re-prove the group at kill-time: NOTHING was signalled (never
+ * guess a pgid — killing the wrong process group is irreversible), and a
+ * loud diagnostic was logged, because a silent refusal here recreates the
+ * invisible-orphan bug. `cause` is present only for the leader-identity
+ * refusal and DISCERNS its two distinct roots — `"recycled"` (the leader is
+ * readable but its start-time no longer matches: the pgid was reused by an
+ * unrelated process, a correct, defensive refusal) from
+ * `"membership-unprovable"` (the leader is gone AND no surviving group
+ * member carries the persisted session token: possibly our own already-dead
+ * orphan, a conservative refuse-and-leak) — collapsing them into one verdict
+ * would hide whether this guard is protecting us or making us leak.
+ *
+ * `verified`, present on `"reaped"` only when the identity guard actually
+ * ran, DISCERNS a PROVEN kill (`true` — either the current and persisted
+ * leader start-times matched, OR the leader was gone but a surviving member
+ * carried the persisted session token) from an UNPROVEN one (`false` — a
+ * legacy row with no persisted baseline at all to check against, neither a
+ * leader start-time nor a group token: `#verifyGroupLeaderIdentity` fails
+ * OPEN there by design — see its doc comment — but that must never look
+ * identical to a proven match in logs or outcomes). Absent entirely when no
+ * identity check ran at all (e.g. `forceStopAll`, or the group was already
+ * confirmed empty before any check).
+ */
+export type NativeTerminalReapOutcome = Readonly<{
+    sessionId: string;
+    status: "refused";
+    reason: string;
+    cause?: "recycled" | "membership-unprovable";
+} | {
+    sessionId: string;
+    status: "reaped";
+    pgid: number;
+    elapsedMs: number;
+    verified?: boolean;
+} | {
+    sessionId: string;
+    status: "reap-timed-out";
+    pgid: number;
+    elapsedMs: number;
+}>;
 export declare class NativeTerminalHost {
     #private;
     constructor(options: {
@@ -60,8 +232,48 @@ export declare class NativeTerminalHost {
         replayBytesPerSession: number;
         maxSessions?: number;
         spawner: PtySpawner;
+        /** Durable store for pgid persistence; defaults to the real registry path. */
+        registryPath?: string;
+        /** Injectable so tests never send real signals at fabricated pgids. */
+        reaper?: NativeTerminalProcessGroupReaper;
+        /** Diagnostic sink for the force-kill chain; defaults to prefixed stderr. */
+        log?: (line: string) => void;
+        forceKillTimeoutMs?: number;
+        forceKillPollIntervalMs?: number;
+        /** Injectable so tests never touch a real /proc for fabricated pgids;
+         * defaults to the real `readProcessStartTime`. Used BOTH to capture the
+         * group-leader's start-time at spawn AND to re-read it at kill-time (see
+         * `#verifyGroupLeaderIdentity`) — the same probe, applied twice. */
+        readLeaderStartTime?: (pid: number) => number | undefined;
+        /** Injectable so tests never touch a real /proc for fabricated pgids;
+         * defaults to the real `groupCarriesSessionToken`. Consulted ONLY when
+         * the leader is absent — see `#verifyGroupLeaderIdentity`. */
+        findGroupMemberToken?: (pgid: number, expectedToken: string) => boolean;
     });
     get generation(): string;
+    /**
+     * COUNTABLE per arch condition 1/2: the four DISCERNIBLE outcomes of the
+     * group-leader-identity guard, so "has this guard ever refused (and why),
+     * or ever proceeded WITHOUT the fast leader-start-time proof" is
+     * answerable later without re-deriving it from raw logs.
+     * `recycled`/`membershipUnprovable` are refusals (the kill was NOT
+     * emitted). `tokenVerified` is a PROVEN proceed via the group-membership
+     * token (the leader was absent, but a surviving member carried it) —
+     * distinct from the ordinary start-time-matched proceed, which is not
+     * counted at all (it is the expected common case). `unverifiedLegacy` is
+     * an UNPROVEN proceed (the kill WAS emitted) on a row with no baseline —
+     * neither a leader-start-time nor a group-token — to check against at
+     * all, the fail-open branch of `#verifyGroupLeaderIdentity`. Never
+     * collapsed: a proven kill and an unproven one must never look alike
+     * here, exactly as a refusal and a proceed must never look alike — see
+     * `NativeTerminalReapOutcome`'s `cause`/`verified`.
+     */
+    get pgidGuardCounters(): Readonly<{
+        recycled: number;
+        membershipUnprovable: number;
+        unverifiedLegacy: number;
+        tokenVerified: number;
+    }>;
     create(options: NativeTerminalCreateOptions): NativeTerminalSessionState;
     list(): ReadonlyArray<NativeTerminalSessionState>;
     state(id: string): NativeTerminalSessionState;
@@ -73,6 +285,110 @@ export declare class NativeTerminalHost {
     resize(lease: NativeTerminalControllerLease, cols: number, rows: number): void;
     stop(lease: NativeTerminalControllerLease, signal?: NativeTerminalStopSignal): NativeTerminalSessionState;
     stopAll(signal?: NativeTerminalStopSignal): ReadonlyArray<NativeTerminalSessionState>;
-    forceStopAll(signal?: NativeTerminalStopSignal): ReadonlyArray<NativeTerminalSessionState>;
+    /**
+     * Force-stop every non-exited session this host currently knows about — the
+     * FORCE path. Unlike `stop()`/`stopAll()` (which go through the pty's own
+     * kill(), i.e. the SIGUSR1->trap escalation on Linux — still fine for a
+     * graceful, cooperative stop), this emits the group SIGKILL itself, from
+     * the PARENT, and WAITS to PROVE the whole group is dead before returning —
+     * it does not return "done" on the strength of having merely signalled it.
+     * A poll timeout is reported as an error (an absence of information, not a
+     * claimed success), never silently swallowed.
+     */
+    forceStopAll(signal?: NativeTerminalStopSignal): Promise<ReadonlyArray<NativeTerminalSessionState>>;
+    /**
+     * Reap a session BY ID from its durably persisted pgid, even though THIS
+     * host has no in-memory record of it — the case a fresh host faces after
+     * the host that created the session was killed. Never guesses a pgid: if
+     * it cannot be resolved (registry unreadable, or genuinely never recorded),
+     * this signals NOTHING and returns `"refused"` after logging a LOUD
+     * diagnostic — a silent no-op here would recreate the exact
+     * invisible-orphan bug this mechanism exists to close.
+     */
+    reapOrphan(sessionId: string, signal?: NativeTerminalStopSignal): Promise<NativeTerminalReapOutcome>;
 }
+/** Per-entry outcome of a `reconcileDeadHostOrphans` pass. */
+export type NativeTerminalReconcileOutcome = Readonly<{
+    sessionId: string;
+    status: "reaped";
+    ownerPid: number;
+    pgid: number;
+} | {
+    sessionId: string;
+    status: "reap-timed-out";
+    ownerPid: number;
+    pgid: number;
+} | {
+    sessionId: string;
+    status: "reap-refused";
+    ownerPid: number;
+    pgid: number;
+    reason: string;
+} | {
+    sessionId: string;
+    status: "skipped-alive";
+    ownerPid: number;
+} | {
+    sessionId: string;
+    status: "skipped-unresolvable";
+    ownerPid: number;
+} | {
+    sessionId: string;
+    status: "skipped-no-owner";
+}>;
+/** Summary of a `reconcileDeadHostOrphans` pass. */
+export type NativeTerminalReconcileSummary = Readonly<{
+    status: "refused";
+    reason: string;
+} | {
+    status: "completed";
+    outcomes: ReadonlyArray<NativeTerminalReconcileOutcome>;
+}>;
+/**
+ * Reap orphan PTY groups left behind by a PROVEN-DEAD host — the ONE
+ * production trigger for `NativeTerminalHost#reapOrphan`. Called at
+ * supervisor takeover (see `NativeTerminalHostSupervisor`), the moment a
+ * fresh host is about to be spawned because the previous one could not be
+ * reached: exactly the moment a stale registry might exist, and exactly the
+ * moment this must NOT be mistaken for "the old host is dead".
+ *
+ * This mirrors `reapOrphan`'s own conservatism one level up: a lost
+ * connection to a host is the UNKNOWN, not proof of death. An
+ * unreachable-but-alive host (overloaded, a saturated socket, a paused
+ * process) is ALIVE and its sessions are live work — reaping there would be
+ * a mass-kill dressed up as cleanup. So this function enumerates EVERY
+ * durably-persisted native-terminal-pty row and, for EACH ONE
+ * INDEPENDENTLY, proves whether ITS OWNING HOST (not "the host we were just
+ * talking to") is dead before touching it:
+ *
+ *  - registry unresolvable (`listNativeTerminalPgidEntries` reports
+ *    `known:false`) -> reap NOTHING, loud refusal, `status:"refused"`.
+ *  - an entry with no owner attribution recorded (a legacy row written
+ *    before this fix, or a write-time start-time-read failure) -> cannot
+ *    prove death -> skip.
+ *  - `ownerProbe` reports the owner "alive" or "unresolvable" -> skip
+ *    (unresolvable is treated exactly like alive: never guess).
+ *  - `ownerProbe` reports "dead" (pid gone, or recycled — a live pid whose
+ *    start-time no longer matches) -> reap that entry's orphan process group
+ *    via `reap`, then prune the entry once the reap is CONFIRMED (`"reaped"`
+ *    only — a `"reap-timed-out"` leaves the row for a future pass instead of
+ *    losing the only durable record of an unconfirmed pgid).
+ *
+ * Best-effort per entry: one entry's failure does not stop the pass over the
+ * rest (each entry is an independent host/session; a single problem entry
+ * must never mask the others).
+ */
+export declare function reconcileDeadHostOrphans(options?: {
+    registryPath?: string;
+    signal?: NativeTerminalStopSignal;
+    /** Injectable so tests never touch a real /proc; defaults to the real probe. */
+    ownerProbe?: NativeTerminalOwnerHostProbe;
+    /** Injectable so tests never send real signals; defaults to a throwaway
+     * `NativeTerminalHost` (never spawns a pty) calling the real `reapOrphan`.
+     * The persisted pgid is passed through for observability/assertions even
+     * though the real reap re-resolves it itself from the SAME registry row —
+     * they always agree by construction. */
+    reap?: (sessionId: string, pgid: number, signal: NativeTerminalStopSignal) => Promise<NativeTerminalReapOutcome>;
+    log?: (line: string) => void;
+}): Promise<NativeTerminalReconcileSummary>;
 //# sourceMappingURL=host.d.ts.map

package/dist/native-terminal/host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/native-terminal/host.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAa,UAAU,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE5E,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,2BAA2B,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC3C,GAAG,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IACnD,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,CAAC;AAgBH,qBAAa,kBAAkB;;gBAOjB,OAAO,EAAE;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,qBAAqB,EAAE,MAAM,CAAC;QAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,UAAU,CAAC;KACrB;IA4BD,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,MAAM,CAAC,OAAO,EAAE,2BAA2B,GAAG,0BAA0B;IAuDxE,IAAI,IAAI,aAAa,CAAC,0BAA0B,CAAC;IAMjD,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,0BAA0B;IAI7C,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAU9D,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,gCAAgC;IAW5D,iBAAiB,CACf,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GACnB,6BAA6B;IAyBhC,iBAAiB,CACf,KAAK,EAAE,6BAA6B,GACnC,6BAA6B;IAWhC,KAAK,CAAC,KAAK,EAAE,6BAA6B,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAO/D,MAAM,CACJ,KAAK,EAAE,6BAA6B,EACpC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,IAAI;IAYP,IAAI,CACF,KAAK,EAAE,6BAA6B,EACpC,MAAM,GAAE,wBAAoC,GAC3C,0BAA0B;IAgB7B,OAAO,CACL,MAAM,GAAE,wBAAoC,GAC3C,aAAa,CAAC,0BAA0B,CAAC;IAiB5C,YAAY,CACV,MAAM,GAAE,wBAAoC,GAC3C,aAAa,CAAC,0BAA0B,CAAC;CA+F7C"}
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../src/native-terminal/host.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAa,UAAU,EAAE,MAAM,WAAW,CAAC;AAQvD,OAAO,EAKL,KAAK,uBAAuB,EAC7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,eAAe,CAAC;AAEvB;;;;;;GAMG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,oFAAoF;IACpF,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,GAAG,IAAI,CAAC;IAChE,wEAAwE;IACxE,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,8EAA8E;IAC9E,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CACrC,CAAC;AAMF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,EAAE,gCA6CrC,CAAC;AAMF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAmBpE;AAED,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,sBAAsB,CAAC;AA4D7D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAKrF;AAcD,wEAAwE;AACxE,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,MAAM,GAAG,cAAc,CAAC;AAE9E;;;;;GAKG;AACH,MAAM,MAAM,4BAA4B,GAAG,CACzC,KAAK,EAAE,uBAAuB,KAC3B,6BAA6B,CAAC;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,qBAAqB,EAAE,4BAMnC,CAAC;AASF,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAE5E,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,2BAA2B,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC3C,GAAG,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IACnD,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAC5C;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,UAAU,GAAG,uBAAuB,CAAC;CAC9C,GACD;IACE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,QAAQ,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GACD;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CACnF,CAAC;AAgBF,qBAAa,kBAAkB;;gBAoBjB,OAAO,EAAE;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,qBAAqB,EAAE,MAAM,CAAC;QAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,UAAU,CAAC;QACpB,8EAA8E;QAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,uEAAuE;QACvE,MAAM,CAAC,EAAE,gCAAgC,CAAC;QAC1C,6EAA6E;QAC7E,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;QAC7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC;;;4EAGoE;QACpE,mBAAmB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;QAC1D;;sEAE8D;QAC9D,oBAAoB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC;KACzE;IA4CD,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,iBAAiB,IAAI,QAAQ,CAAC;QAChC,QAAQ,EAAE,MAAM,CAAC;QACjB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,gBAAgB,EAAE,MAAM,CAAC;QACzB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC,CAED;IAED,MAAM,CAAC,OAAO,EAAE,2BAA2B,GAAG,0BAA0B;IA6GxE,IAAI,IAAI,aAAa,CAAC,0BAA0B,CAAC;IAMjD,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,0BAA0B;IAI7C,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,oBAAoB;IAU9D,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,gCAAgC;IAW5D,iBAAiB,CACf,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GACnB,6BAA6B;IAyBhC,iBAAiB,CACf,KAAK,EAAE,6BAA6B,GACnC,6BAA6B;IAWhC,KAAK,CAAC,KAAK,EAAE,6BAA6B,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IAO/D,MAAM,CACJ,KAAK,EAAE,6BAA6B,EACpC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GACX,IAAI;IAYP,IAAI,CACF,KAAK,EAAE,6BAA6B,EACpC,MAAM,GAAE,wBAAoC,GAC3C,0BAA0B;IAgB7B,OAAO,CACL,MAAM,GAAE,wBAAoC,GAC3C,aAAa,CAAC,0BAA0B,CAAC;IAiB5C;;;;;;;;;OASG;IACG,YAAY,CAChB,MAAM,GAAE,wBAAoC,GAC3C,OAAO,CAAC,aAAa,CAAC,0BAA0B,CAAC,CAAC;IAgCrD;;;;;;;;OAQG;IACG,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,wBAAoC,GAC3C,OAAO,CAAC,yBAAyB,CAAC;CAkTtC;AAED,8DAA8D;AAC9D,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CACjD;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7F;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CACpD,CAAC;AAEF,oDAAoD;AACpD,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CACjD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAC,8BAA8B,CAAC,CAAA;CAAE,CACnF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,GAAE;IACtD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,gFAAgF;IAChF,UAAU,CAAC,EAAE,4BAA4B,CAAC;IAC1C;;;;4CAIwC;IACxC,IAAI,CAAC,EAAE,CACL,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,wBAAwB,KAC7B,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACxC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACzB,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAgG/C"}