@skaile/workspaces 5.11.0 → 5.13.0

package/dist/{chunk-OBYKJB4U.js → chunk-O2SYFJWP.js}

@@ -3,6 +3,7 @@ import { encodeBearerSubprotocol } from './chunk-32NA4TVC.js';
 // transport/src/ws/client.ts
 var DEFAULT_RECONNECT_MAX_ATTEMPTS = 5;
 var DEFAULT_RECONNECT_BASE_MS = 1e3;
+var CLOSE_REPLACED = 4001;
 var DEFAULT_RECONNECT_MAX_MS = 3e4;
 var DEFAULT_HEARTBEAT_MS = 3e4;
 var DEFAULT_MAX_MISSED_PONGS = 2;
@@ -106,7 +107,13 @@ var WebSocketClientTransport = class {
       const failConnect = (message) => {
         if (settled) return;
         settled = true;
-        reject(new Error(message));
+        if (!isInitial) {
+          reject(new Error(message));
+          return;
+        }
+        void this.explainRefusal().then((reason) => {
+          reject(new Error(reason ? `${message}: ${reason}` : message));
+        });
       };
       const timeout = setTimeout(() => {
         if (settled) return;
@@ -137,7 +144,7 @@ var WebSocketClientTransport = class {
         }
       });
       let closeHandled = false;
-      const handleClose = (code) => {
+      const handleClose = (code, reason = "") => {
         if (closeHandled) return;
         closeHandled = true;
         clearTimeout(timeout);
@@ -146,6 +153,13 @@ var WebSocketClientTransport = class {
         for (const handler of this.disconnectHandlers) {
           handler();
         }
+        if (code === CLOSE_REPLACED && opened && !this.intentionalClose) {
+          const message = `This connection was replaced by another client (close code ${CLOSE_REPLACED}${reason ? `, "${reason}"` : ""}). The server serves one client at a time, so this client does not reconnect.`;
+          this.log(`[ws-client] ${message}`);
+          const event = { type: "error", message, fatal: false, category: "config" };
+          for (const handler of this.messageHandlers) handler(event);
+          return;
+        }
         if (!opened) {
           failConnect(`Connection to ${this.url} closed before open (code=${code})`);
           if (!isInitial && !this.intentionalClose && code !== 1e3) {
@@ -157,13 +171,73 @@ var WebSocketClientTransport = class {
           this.scheduleReconnect();
         }
       };
-      ws.addEventListener("close", (event) => handleClose(event.code));
+      ws.addEventListener("close", (event) => handleClose(event.code, event.reason));
       ws.addEventListener("error", () => {
         clearTimeout(timeout);
         if (!opened) failConnect(`Connection to ${this.url} failed before open`);
       });
     });
   }
+  /**
+   * After a refused handshake, repeat the upgrade request over `node:http` and report the
+   * status line the server answered with. Resolves `undefined` when nothing useful is
+   * learned (a browser has no `node:http`; the server accepted this time).
+   */
+  async explainRefusal() {
+    if (typeof process === "undefined" || !process.versions?.node) return void 0;
+    try {
+      const url = new URL(this.url);
+      const secure = url.protocol === "wss:";
+      const specifier = secure ? "node:https" : "node:http";
+      const lib = await import(
+        /* @vite-ignore */
+        /* webpackIgnore: true */
+        specifier
+      );
+      return await new Promise((resolve) => {
+        const req = lib.request(
+          {
+            host: url.hostname,
+            port: url.port || (secure ? 443 : 80),
+            path: `${url.pathname}${url.search}`,
+            method: "GET",
+            timeout: 3e3,
+            headers: {
+              Connection: "Upgrade",
+              Upgrade: "websocket",
+              "Sec-WebSocket-Version": "13",
+              "Sec-WebSocket-Key": "c2thaWxlLXByb2JlLWtleQ==",
+              ...this.subprotocols.length > 0 ? { "Sec-WebSocket-Protocol": this.subprotocols.join(", ") } : {}
+            },
+            ...this.tls ? { ca: this.tls.ca } : {}
+          },
+          (res) => {
+            res.resume();
+            const status = `HTTP ${res.statusCode} ${res.statusMessage ?? ""}`.trim();
+            if (res.statusCode === 401) {
+              resolve(
+                this.subprotocols.length > 0 ? `${status} (the server did not accept the token passed as \`auth\`)` : `${status} (the server requires a token: pass \`auth\`; \`skaile serve\` reads SKAILE_WS_AUTH_TOKEN)`
+              );
+            } else {
+              resolve(status);
+            }
+          }
+        );
+        req.on("upgrade", (_res, socket) => {
+          socket.destroy();
+          resolve(void 0);
+        });
+        req.on("timeout", () => {
+          req.destroy();
+          resolve(void 0);
+        });
+        req.on("error", (err) => resolve(err.code));
+        req.end();
+      });
+    } catch {
+      return void 0;
+    }
+  }
   createSocket() {
     if (this.tls) {
       const { ca } = this.tls;
@@ -241,5 +315,5 @@ var WebSocketClientTransport = class {
 };
 
 export { WebSocketClientTransport };
-//# sourceMappingURL=chunk-OBYKJB4U.js.map
-//# sourceMappingURL=chunk-OBYKJB4U.js.map
+//# sourceMappingURL=chunk-O2SYFJWP.js.map
+//# sourceMappingURL=chunk-O2SYFJWP.js.map

package/dist/chunk-O2SYFJWP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../transport/src/ws/client.ts"],"names":[],"mappings":";;;AAWA,IAAM,8BAAA,GAAiC,CAAA;AACvC,IAAM,yBAAA,GAA4B,GAAA;AAElC,IAAM,cAAA,GAAiB,IAAA;AACvB,IAAM,wBAAA,GAA2B,GAAA;AACjC,IAAM,oBAAA,GAAuB,GAAA;AAC7B,IAAM,wBAAA,GAA2B,CAAA;AACjC,IAAM,0BAAA,GAA6B,GAAA;AA6DnC,IAAM,KAAA,GAAQ,OAAQ,UAAA,CAAiC,GAAA,KAAQ,WAAA;AAO/D,eAAe,aAAA,GAAwC;AACrD,EAAA,IAAI,OAAO,YAAY,WAAA,EAAa;AAClC,IAAA,MAAM,IAAI,MAAM,qEAAqE,CAAA;AAAA,EACvF;AACA,EAAA,MAAM,SAAA,GAAY,IAAA;AAClB,EAAA,MAAM,MAAO,MAAM;AAAA;AAAA;AAAA,IAAoD;AAAA,GAAA;AAIvE,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,SAAA,IAAa,GAAA,CAAI,OAAA;AAClC,EAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAC5E,EAAA,OAAO,IAAA;AACT;AAoBO,IAAM,2BAAN,MAA0D;AAAA,EACvD,EAAA,GAAuB,IAAA;AAAA,EACd,GAAA;AAAA,EACA,eAAA;AAAA,EACA,WAAA;AAAA,EACA,cAAA;AAAA,EACA,gBAAA;AAAA,EACA,GAAA;AAAA,EACA,YAAA;AAAA,EACA,GAAA;AAAA;AAAA,EAET,SAAA,GAAkC,IAAA;AAAA,EAElC,cAAA,GAAwD,IAAA;AAAA,EACxD,iBAAA,GAAoB,CAAA;AAAA,EACpB,gBAAA,GAAmB,KAAA;AAAA,EAEV,eAAA,uBAAsB,GAAA,EAAiC;AAAA,EACvD,kBAAA,uBAAyB,GAAA,EAAgB;AAAA,EAE1D,YAAY,OAAA,EAAiC;AAC3C,IAAA,IAAA,CAAK,MAAM,OAAA,CAAQ,GAAA;AACnB,IAAA,IAAA,CAAK,eAAA,GAAkB;AAAA,MACrB,WAAA,EAAa,OAAA,CAAQ,SAAA,EAAW,WAAA,IAAe,8BAAA;AAAA,MAC/C,MAAA,EAAQ,OAAA,CAAQ,SAAA,EAAW,MAAA,IAAU,yBAAA;AAAA,MACrC,KAAA,EAAO,OAAA,CAAQ,SAAA,EAAW,KAAA,IAAS;AAAA,KACrC;AACA,IAAA,IAAA,CAAK,WAAA,GAAc,QAAQ,WAAA,IAAe,oBAAA;AAC1C,IAAA,IAAA,CAAK,cAAA,GAAiB,QAAQ,cAAA,IAAkB,wBAAA;AAChD,IAAA,IAAA,CAAK,gBAAA,GAAmB,QAAQ,gBAAA,IAAoB,0BAAA;AACpD,IAAA,IAAA,CAAK,GAAA,GAAM,OAAA,CAAQ,KAAA,KAAU,MAAM;AAAA,IAAC,CAAA,CAAA;AACpC,IAAA,IAAA,CAAK,YAAA,GAAe,QAAQ,IAAA,GAAO,CAAC,wBAAwB,OAAA,CAAQ,IAAI,CAAC,CAAA,GAAI,EAAC;AAC9E,IAAA,IAAA,CAAK,MAAM,OAAA,CAAQ,GAAA;AAAA,EACrB;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAA,CAAK,gBAAA,GAAmB,KAAA;AACxB,IAAA,IAAA,CAAK,iBAAA,GAAoB,CAAA;AACzB,IAAA,IAAI,IAAA,CAAK,GAAA,IAAO,CAAC,KAAA,IAAS,CAAC,KAAK,SAAA,EAAW,IAAA,CAAK,SAAA,GAAY,MAAM,aAAA,EAAc;AAChF,IAAA,OAAO,IAAA,CAAK,UAAU,IAAI,CAAA;AAAA,EAC5B;AAAA,EAEA,MAAM,UAAA,GAA4B;AAChC,IAAA,IAAA,CAAK,gBAAA,GAAmB,IAAA;AACxB,IAAA,IAAA,CAAK,cAAA,EAAe;AACpB,IAAA,IAAI,KAAK,EAAA,EAAI;AACX,MAAA,IAAI,IAAA,CAAK,EAAA,CAAG,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AACzC,QAAA,IAAA,CAAK,EAAA,CAAG,KAAA,CAAM,GAAA,EAAM,mBAAmB,CAAA;AAAA,MACzC;AACA,MAAA,IAAA,CAAK,EAAA,GAAK,IAAA;AAAA,IACZ;AAAA,EACF;AAAA,EAEA,KAAK,OAAA,EAA6B;AAChC,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,IAAM,KAAK,EAAA,CAAG,UAAA,KAAe,UAAU,IAAA,EAAM;AACrD,MAAA,IAAA,CAAK,IAAI,wCAAwC,CAAA;AACjD,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAAA,EACtC;AAAA,EAEA,UAAU,OAAA,EAAkD;AAC1D,IAAA,IAAA,CAAK,eAAA,CAAgB,IAAI,OAAO,CAAA;AAChC,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,eAAA,CAAgB,OAAO,OAAO,CAAA;AAAA,IACrC,CAAA;AAAA,EACF;AAAA,EAEA,aAAa,OAAA,EAAiC;AAC5C,IAAA,IAAA,CAAK,kBAAA,CAAmB,IAAI,OAAO,CAAA;AACnC,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,kBAAA,CAAmB,OAAO,OAAO,CAAA;AAAA,IACxC,CAAA;AAAA,EACF;AAAA,EAEA,IAAI,SAAA,GAAqB;AACvB,IAAA,OAAO,IAAA,CAAK,EAAA,EAAI,UAAA,KAAe,SAAA,CAAU,IAAA;AAAA,EAC3C;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAA,CAAU,YAAY,KAAA,EAAsB;AAClD,IAAA,OAAO,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AAC5C,MAAA,IAAA,CAAK,GAAA,CAAI,CAAA,0BAAA,EAA6B,IAAA,CAAK,GAAG,CAAA,CAAE,CAAA;AAEhD,MAAA,MAAM,EAAA,GAAK,KAAK,YAAA,EAAa;AAC7B,MAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AAEV,MAAA,MAAM,QAAA,GAAW,EAAE,MAAA,EAAQ,CAAA,EAAE;AAM7B,MAAA,IAAI,OAAA,GAAU,KAAA;AACd,MAAA,IAAI,MAAA,GAAS,KAAA;AACb,MAAA,MAAM,WAAA,GAAc,CAAC,OAAA,KAAoB;AACvC,QAAA,IAAI,OAAA,EAAS;AACb,QAAA,OAAA,GAAU,IAAA;AAMV,QAAA,IAAI,CAAC,SAAA,EAAW;AACd,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,OAAO,CAAC,CAAA;AACzB,UAAA;AAAA,QACF;AACA,QAAA,KAAK,IAAA,CAAK,cAAA,EAAe,CAAE,IAAA,CAAK,CAAC,MAAA,KAAW;AAC1C,UAAA,MAAA,CAAO,IAAI,MAAM,MAAA,GAAS,CAAA,EAAG,OAAO,CAAA,EAAA,EAAK,MAAM,CAAA,CAAA,GAAK,OAAO,CAAC,CAAA;AAAA,QAC9D,CAAC,CAAA;AAAA,MACH,CAAA;AAEA,MAAA,MAAM,OAAA,GAAU,WAAW,MAAM;AAC/B,QAAA,IAAI,OAAA,EAAS;AAIb,QAAA,OAAA,GAAU,IAAA;AACV,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,sBAAA,EAAyB,IAAA,CAAK,GAAG,EAAE,CAAC,CAAA;AACrD,QAAA,EAAA,CAAG,KAAA,EAAM;AAAA,MACX,CAAA,EAAG,KAAK,gBAAgB,CAAA;AAExB,MAAA,EAAA,CAAG,gBAAA,CAAiB,QAAQ,MAAM;AAChC,QAAA,YAAA,CAAa,OAAO,CAAA;AACpB,QAAA,MAAA,GAAS,IAAA;AACT,QAAA,IAAA,CAAK,IAAI,uBAAuB,CAAA;AAChC,QAAA,IAAA,CAAK,iBAAA,GAAoB,CAAA;AAGzB,QAAA,IAAI,IAAA,CAAK,EAAA,KAAO,EAAA,EAAI,IAAA,CAAK,cAAA,CAAe,IAAI,QAAA,EAAU,MAAM,WAAA,CAAY,IAAI,CAAC,CAAA;AAC7E,QAAA,IAAI,CAAC,OAAA,EAAS;AACZ,UAAA,OAAA,GAAU,IAAA;AACV,UAAA,OAAA,EAAQ;AAAA,QACV;AAAA,MACF,CAAC,CAAA;AAED,MAAA,EAAA,CAAG,gBAAA,CAAiB,SAAA,EAAW,CAAC,KAAA,KAAU;AACxC,QAAA,QAAA,CAAS,MAAA,GAAS,CAAA;AAClB,QAAA,IAAI;AACF,UAAA,MAAM,OAAO,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,KAAA,CAAM,IAAI,CAAC,CAAA;AAC1C,UAAA,KAAA,MAAW,OAAA,IAAW,KAAK,eAAA,EAAiB;AAC1C,YAAA,OAAA,CAAQ,IAAI,CAAA;AAAA,UACd;AAAA,QACF,CAAA,CAAA,MAAQ;AACN,UAAA,IAAA,CAAK,IAAI,qCAAqC,CAAA;AAAA,QAChD;AAAA,MACF,CAAC,CAAA;AAKD,MAAA,IAAI,YAAA,GAAe,KAAA;AACnB,MAAA,MAAM,WAAA,GAAc,CAAC,IAAA,EAAc,MAAA,GAAS,EAAA,KAAO;AACjD,QAAA,IAAI,YAAA,EAAc;AAClB,QAAA,YAAA,GAAe,IAAA;AACf,QAAA,YAAA,CAAa,OAAO,CAAA;AACpB,QAAA,IAAI,IAAA,CAAK,EAAA,KAAO,EAAA,EAAI,IAAA,CAAK,cAAA,EAAe;AACxC,QAAA,IAAA,CAAK,GAAA,CAAI,CAAA,+BAAA,EAAkC,IAAI,CAAA,CAAA,CAAG,CAAA;AAElD,QAAA,KAAA,MAAW,OAAA,IAAW,KAAK,kBAAA,EAAoB;AAC7C,UAAA,OAAA,EAAQ;AAAA,QACV;AAIA,QAAA,IAAI,IAAA,KAAS,cAAA,IAAkB,MAAA,IAAU,CAAC,KAAK,gBAAA,EAAkB;AAC/D,UAAA,MAAM,OAAA,GAAU,8DAA8D,cAAc,CAAA,EAAG,SAAS,CAAA,GAAA,EAAM,MAAM,MAAM,EAAE,CAAA,6EAAA,CAAA;AAC5H,UAAA,IAAA,CAAK,GAAA,CAAI,CAAA,YAAA,EAAe,OAAO,CAAA,CAAE,CAAA;AACjC,UAAA,MAAM,KAAA,GAAoB,EAAE,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA,EAAO,KAAA,EAAO,UAAU,QAAA,EAAS;AACrF,UAAA,KAAA,MAAW,OAAA,IAAW,IAAA,CAAK,eAAA,EAAiB,OAAA,CAAQ,KAAK,CAAA;AACzD,UAAA;AAAA,QACF;AAKA,QAAA,IAAI,CAAC,MAAA,EAAQ;AACX,UAAA,WAAA,CAAY,CAAA,cAAA,EAAiB,IAAA,CAAK,GAAG,CAAA,0BAAA,EAA6B,IAAI,CAAA,CAAA,CAAG,CAAA;AACzE,UAAA,IAAI,CAAC,SAAA,IAAa,CAAC,IAAA,CAAK,gBAAA,IAAoB,SAAS,GAAA,EAAM;AACzD,YAAA,IAAA,CAAK,iBAAA,EAAkB;AAAA,UACzB;AACA,UAAA;AAAA,QACF;AAEA,QAAA,IAAI,CAAC,IAAA,CAAK,gBAAA,IAAoB,IAAA,KAAS,GAAA,EAAM;AAC3C,UAAA,IAAA,CAAK,iBAAA,EAAkB;AAAA,QACzB;AAAA,MACF,CAAA;AACA,MAAA,EAAA,CAAG,gBAAA,CAAiB,SAAS,CAAC,KAAA,KAAU,YAAY,KAAA,CAAM,IAAA,EAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AAE7E,MAAA,EAAA,CAAG,gBAAA,CAAiB,SAAS,MAAM;AACjC,QAAA,YAAA,CAAa,OAAO,CAAA;AAGpB,QAAA,IAAI,CAAC,MAAA,EAAQ,WAAA,CAAY,CAAA,cAAA,EAAiB,IAAA,CAAK,GAAG,CAAA,mBAAA,CAAqB,CAAA;AAAA,MACzE,CAAC,CAAA;AAAA,IACH,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,cAAA,GAA8C;AAC1D,IAAA,IAAI,OAAO,OAAA,KAAY,WAAA,IAAe,CAAC,OAAA,CAAQ,QAAA,EAAU,MAAM,OAAO,MAAA;AACtE,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,CAAK,GAAG,CAAA;AAC5B,MAAA,MAAM,MAAA,GAAS,IAAI,QAAA,KAAa,MAAA;AAEhC,MAAA,MAAM,SAAA,GAAY,SAAS,YAAA,GAAe,WAAA;AAC1C,MAAA,MAAM,MAAO,MAAM;AAAA;AAAA;AAAA,QAC4B;AAAA,OAAA;AAE/C,MAAA,OAAO,MAAM,IAAI,OAAA,CAA4B,CAAC,OAAA,KAAY;AACxD,QAAA,MAAM,MAAM,GAAA,CAAI,OAAA;AAAA,UACd;AAAA,YACE,MAAM,GAAA,CAAI,QAAA;AAAA,YACV,IAAA,EAAM,GAAA,CAAI,IAAA,KAAS,MAAA,GAAS,GAAA,GAAM,EAAA,CAAA;AAAA,YAClC,MAAM,CAAA,EAAG,GAAA,CAAI,QAAQ,CAAA,EAAG,IAAI,MAAM,CAAA,CAAA;AAAA,YAClC,MAAA,EAAQ,KAAA;AAAA,YACR,OAAA,EAAS,GAAA;AAAA,YACT,OAAA,EAAS;AAAA,cACP,UAAA,EAAY,SAAA;AAAA,cACZ,OAAA,EAAS,WAAA;AAAA,cACT,uBAAA,EAAyB,IAAA;AAAA,cACzB,mBAAA,EAAqB,0BAAA;AAAA,cACrB,GAAI,IAAA,CAAK,YAAA,CAAa,MAAA,GAAS,CAAA,GAC3B,EAAE,wBAAA,EAA0B,IAAA,CAAK,YAAA,CAAa,IAAA,CAAK,IAAI,CAAA,KACvD;AAAC,aACP;AAAA,YACA,GAAI,KAAK,GAAA,GAAM,EAAE,IAAI,IAAA,CAAK,GAAA,CAAI,EAAA,EAAG,GAAI;AAAC,WACxC;AAAA,UACA,CAAC,GAAA,KAAQ;AACP,YAAA,GAAA,CAAI,MAAA,EAAO;AACX,YAAA,MAAM,MAAA,GAAS,QAAQ,GAAA,CAAI,UAAU,IAAI,GAAA,CAAI,aAAA,IAAiB,EAAE,CAAA,CAAA,CAAG,IAAA,EAAK;AACxE,YAAA,IAAI,GAAA,CAAI,eAAe,GAAA,EAAK;AAC1B,cAAA,OAAA;AAAA,gBACE,IAAA,CAAK,aAAa,MAAA,GAAS,CAAA,GACvB,GAAG,MAAM,CAAA,yDAAA,CAAA,GACT,GAAG,MAAM,CAAA,0FAAA;AAAA,eACf;AAAA,YACF,CAAA,MAAO;AACL,cAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,YAChB;AAAA,UACF;AAAA,SACF;AACA,QAAA,GAAA,CAAI,EAAA,CAAG,SAAA,EAAW,CAAC,IAAA,EAAM,MAAA,KAAW;AAClC,UAAA,MAAA,CAAO,OAAA,EAAQ;AACf,UAAA,OAAA,CAAQ,KAAA,CAAS,CAAA;AAAA,QACnB,CAAC,CAAA;AACD,QAAA,GAAA,CAAI,EAAA,CAAG,WAAW,MAAM;AACtB,UAAA,GAAA,CAAI,OAAA,EAAQ;AACZ,UAAA,OAAA,CAAQ,KAAA,CAAS,CAAA;AAAA,QACnB,CAAC,CAAA;AACD,QAAA,GAAA,CAAI,GAAG,OAAA,EAAS,CAAC,QAA+B,OAAA,CAAQ,GAAA,CAAI,IAAI,CAAC,CAAA;AACjE,QAAA,GAAA,CAAI,GAAA,EAAI;AAAA,MACV,CAAC,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,YAAA,GAA0B;AAChC,IAAA,IAAI,KAAK,GAAA,EAAK;AACZ,MAAA,MAAM,EAAE,EAAA,EAAG,GAAI,IAAA,CAAK,GAAA;AACpB,MAAA,IAAI,KAAA,EAAO;AAET,QAAA,MAAM,IAAA,GAAO,EAAE,SAAA,EAAW,IAAA,CAAK,cAAc,GAAA,EAAK,EAAE,IAAG,EAAE;AACzD,QAAA,OAAO,IAAI,SAAA,CAAU,IAAA,CAAK,GAAA,EAAK,IAA2B,CAAA;AAAA,MAC5D;AACA,MAAA,IAAI,CAAC,IAAA,CAAK,SAAA,EAAW,MAAM,IAAI,MAAM,4CAA4C,CAAA;AACjF,MAAA,OAAO,IAAI,KAAK,SAAA,CAAU,IAAA,CAAK,KAAK,IAAA,CAAK,YAAA,EAAc,EAAE,EAAA,EAAI,CAAA;AAAA,IAC/D;AAGA,IAAA,OAAO,IAAA,CAAK,YAAA,CAAa,MAAA,GAAS,CAAA,GAC9B,IAAI,SAAA,CAAU,IAAA,CAAK,GAAA,EAAK,IAAA,CAAK,YAAY,CAAA,GACzC,IAAI,SAAA,CAAU,KAAK,GAAG,CAAA;AAAA,EAC5B;AAAA,EAEQ,iBAAA,GAA0B;AAChC,IAAA,IAAI,IAAA,CAAK,iBAAA,IAAqB,IAAA,CAAK,eAAA,CAAgB,WAAA,EAAa;AAC9D,MAAA,IAAA,CAAK,GAAA,CAAI,CAAA,sCAAA,EAAyC,IAAA,CAAK,iBAAiB,CAAA,SAAA,CAAW,CAAA;AACnF,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,iBAAA,EAAA;AACL,IAAA,MAAM,QAAQ,IAAA,CAAK,GAAA;AAAA,MACjB,IAAA,CAAK,eAAA,CAAgB,MAAA,GAAS,CAAA,KAAM,KAAK,iBAAA,GAAoB,CAAA,CAAA;AAAA,MAC7D,KAAK,eAAA,CAAgB;AAAA,KACvB;AACA,IAAA,IAAA,CAAK,IAAI,CAAA,4BAAA,EAA+B,KAAK,CAAA,YAAA,EAAe,IAAA,CAAK,iBAAiB,CAAA,CAAA,CAAG,CAAA;AAErF,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAI,KAAK,gBAAA,EAAkB;AAC3B,MAAA,IAAA,CAAK,SAAA,EAAU,CAAE,KAAA,CAAM,MAAM;AAAA,MAE7B,CAAC,CAAA;AAAA,IACH,GAAG,KAAK,CAAA;AAAA,EACV;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,cAAA,CAAe,EAAA,EAAe,QAAA,EAA8B,MAAA,EAA0B;AAC5F,IAAA,IAAA,CAAK,cAAA,EAAe;AACpB,IAAA,MAAM,MAAA,GAAS,EAAA;AACf,IAAA,MAAM,OAAA,GAAU,OAAO,MAAA,CAAO,IAAA,KAAS,UAAA;AACvC,IAAA,MAAM,YAAY,MAAM;AACtB,MAAA,QAAA,CAAS,MAAA,GAAS,CAAA;AAAA,IACpB,CAAA;AACA,IAAA,IAAI,OAAA,IAAW,OAAO,MAAA,CAAO,EAAA,KAAO,YAAY,MAAA,CAAO,EAAA,CAAG,QAAQ,SAAS,CAAA;AAAA,SAAA,IAClE,OAAA,EAAS,EAAA,CAAG,gBAAA,CAAiB,MAAA,EAAmC,SAAS,CAAA;AAClF,IAAA,MAAM,KAAA,GAAQ,OAAA,IAAW,IAAA,CAAK,cAAA,GAAiB,CAAA;AAE/C,IAAA,IAAA,CAAK,cAAA,GAAiB,YAAY,MAAM;AACtC,MAAA,IAAI,EAAA,CAAG,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AACtC,MAAA,IAAI,KAAA,IAAS,QAAA,CAAS,MAAA,IAAU,IAAA,CAAK,cAAA,EAAgB;AACnD,QAAA,IAAA,CAAK,GAAA;AAAA,UACH,CAAA,wBAAA,EAA2B,SAAS,MAAM,CAAA,eAAA,EAAkB,KAAK,WAAW,CAAA,gBAAA,EAAmB,KAAK,GAAG,CAAA;AAAA,SACzG;AACA,QAAA,IAAA,CAAK,cAAA,EAAe;AACpB,QAAA,IAAI;AACF,UAAA,IAAI,OAAO,MAAA,CAAO,SAAA,KAAc,UAAA,SAAmB,SAAA,EAAU;AAAA,kBACrD,KAAA,EAAM;AAAA,QAChB,CAAA,CAAA,MAAQ;AAAA,QAER;AACA,QAAA,MAAA,EAAO;AACP,QAAA;AAAA,MACF;AACA,MAAA,IAAI;AACF,QAAA,MAAA,CAAO,IAAA,IAAO;AACd,QAAA,IAAI,OAAO,QAAA,CAAS,MAAA,EAAA;AAAA,MACtB,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF,CAAA,EAAG,KAAK,WAAW,CAAA;AAAA,EACrB;AAAA,EAEQ,cAAA,GAAuB;AAC7B,IAAA,IAAI,KAAK,cAAA,EAAgB;AACvB,MAAA,aAAA,CAAc,KAAK,cAAc,CAAA;AACjC,MAAA,IAAA,CAAK,cAAA,GAAiB,IAAA;AAAA,IACxB;AAAA,EACF;AACF","file":"chunk-O2SYFJWP.js","sourcesContent":["/**\n * WebSocketClientTransport — connects to a skaile serve WebSocket server.\n *\n * Handles connection, reconnection with exponential backoff, heartbeat,\n * and JSON serialization. Implements ClientTransport from @skaile/workspaces/types.\n */\n\nimport type * as nodeHttp from \"node:http\";\nimport type { AgentCommand, AgentEvent, ClientTransport } from \"@skaile/workspaces/types\";\nimport { encodeBearerSubprotocol } from \"./auth.js\";\n\nconst DEFAULT_RECONNECT_MAX_ATTEMPTS = 5;\nconst DEFAULT_RECONNECT_BASE_MS = 1_000;\n/** Close code the server sends the older client when a newer one connects (see the server). */\nconst CLOSE_REPLACED = 4001;\nconst DEFAULT_RECONNECT_MAX_MS = 30_000;\nconst DEFAULT_HEARTBEAT_MS = 30_000;\nconst DEFAULT_MAX_MISSED_PONGS = 2;\nconst DEFAULT_CONNECT_TIMEOUT_MS = 10_000;\n\n/**\n * Options for {@link WebSocketClientTransport}.\n *\n * @param url - WebSocket server URL to connect to (e.g. `ws://localhost:8080`).\n * @param reconnect - Exponential-backoff reconnect policy. Defaults: 5 attempts, 1s base, 30s max.\n * @param heartbeatMs - Interval in milliseconds between WebSocket ping frames. Default: 30 000.\n * @param maxMissedPongs - Heartbeat ticks a socket may go without a pong (or any\n *   inbound message) before it is judged dead and terminated, so a half-open\n *   connection reaches the reconnect path. Default: 2, i.e. detection within\n *   3 x `heartbeatMs`. `0` disables the deadline. Only applies where the socket\n *   exposes ping and pong (Bun, and the `ws` package used for a `tls` dial under\n *   Node); Node's global WebSocket and browsers expose neither.\n * @param connectTimeoutMs - Maximum time in milliseconds to wait for the initial handshake. Default: 10 000.\n * @param onLog - Optional callback for internal log lines (connection state, errors).\n * @param auth - Optional bearer token sent via the WebSocket subprotocol; must\n *   match the server's `authToken` or the handshake is rejected with HTTP 401.\n * @param tls - Optional per-connection TLS settings for a `wss://` URL. `ca`\n *   (PEM) replaces the default trust store for this connection only, so the\n *   server certificate must chain to it. Server-side runtimes only: Bun passes\n *   it to its native `WebSocket`, Node dials through the `ws` package (the\n *   global WebSocket takes no CA). Unset, the dial is exactly as before.\n *\n * @docLink packages/transport/dev-guide#websocket-client-transport\n */\nexport interface WebSocketClientOptions {\n  url: string;\n  reconnect?: {\n    maxAttempts?: number;\n    baseMs?: number;\n    maxMs?: number;\n  };\n  heartbeatMs?: number;\n  maxMissedPongs?: number;\n  connectTimeoutMs?: number;\n  onLog?: (line: string) => void;\n  auth?: string;\n  tls?: {\n    ca: string | string[];\n  };\n}\n\n/**\n * Optional members a server-side socket may carry beyond the browser API: Bun's\n * native WebSocket has `ping`/`terminate` and a `pong` event; the `ws` package\n * has `ping`/`terminate` and reports pongs only through `on(\"pong\")`.\n */\ntype PingCapableSocket = WebSocket & {\n  ping?: () => void;\n  terminate?: () => void;\n  on?: (event: \"pong\", listener: () => void) => void;\n};\n\n/** The `ws` package's WebSocket constructor, as far as this client uses it. */\ntype WsPackageCtor = new (\n  url: string,\n  protocols: string[],\n  options: { ca: string | string[] },\n) => WebSocket;\n\nconst isBun = typeof (globalThis as { Bun?: unknown }).Bun !== \"undefined\";\n\n/**\n * Load the `ws` package only when a CA pin needs it under Node, so the client\n * subpath keeps no static `ws` import (browser bundles never reach this). The\n * variable specifier keeps bundlers from inlining it.\n */\nasync function loadWsPackage(): Promise<WsPackageCtor> {\n  if (typeof process === \"undefined\") {\n    throw new Error(\"WebSocketClientTransport `tls` is supported under Node and Bun only\");\n  }\n  const specifier = \"ws\";\n  const mod = (await import(/* @vite-ignore */ /* webpackIgnore: true */ specifier)) as {\n    WebSocket?: WsPackageCtor;\n    default?: WsPackageCtor;\n  };\n  const ctor = mod.WebSocket ?? mod.default;\n  if (!ctor) throw new Error(\"the ws package exports no WebSocket constructor\");\n  return ctor;\n}\n\n/**\n * `ClientTransport` implementation that connects to a skaile agent server over WebSocket.\n *\n * Uses the browser-standard `WebSocket` API so it works in both Bun and browser\n * environments. On an unintentional disconnect it automatically retries with\n * exponential backoff (default: 5 attempts, 1s base, 30s max). A periodic ping\n * keeps the connection alive through NAT and load-balancer idle timeouts. All\n * `AgentCommand` / `AgentEvent` messages are JSON-serialised on the wire.\n *\n * @example\n * ```ts\n * const transport = new WebSocketClientTransport({ url: 'ws://localhost:8080' });\n * await transport.connect();\n * transport.send({ type: 'prompt', prompt: 'Hello' });\n * ```\n *\n * @docLink packages/transport/dev-guide#websocket-client-transport\n */\nexport class WebSocketClientTransport implements ClientTransport {\n  private ws: WebSocket | null = null;\n  private readonly url: string;\n  private readonly reconnectConfig: Required<NonNullable<WebSocketClientOptions[\"reconnect\"]>>;\n  private readonly heartbeatMs: number;\n  private readonly maxMissedPongs: number;\n  private readonly connectTimeoutMs: number;\n  private readonly log: (line: string) => void;\n  private readonly subprotocols: string[];\n  private readonly tls: WebSocketClientOptions[\"tls\"];\n  /** Loaded on the first connect when {@link tls} is set under Node. */\n  private wsPackage: WsPackageCtor | null = null;\n\n  private heartbeatTimer: ReturnType<typeof setInterval> | null = null;\n  private reconnectAttempts = 0;\n  private intentionalClose = false;\n\n  private readonly messageHandlers = new Set<(event: AgentEvent) => void>();\n  private readonly disconnectHandlers = new Set<() => void>();\n\n  constructor(options: WebSocketClientOptions) {\n    this.url = options.url;\n    this.reconnectConfig = {\n      maxAttempts: options.reconnect?.maxAttempts ?? DEFAULT_RECONNECT_MAX_ATTEMPTS,\n      baseMs: options.reconnect?.baseMs ?? DEFAULT_RECONNECT_BASE_MS,\n      maxMs: options.reconnect?.maxMs ?? DEFAULT_RECONNECT_MAX_MS,\n    };\n    this.heartbeatMs = options.heartbeatMs ?? DEFAULT_HEARTBEAT_MS;\n    this.maxMissedPongs = options.maxMissedPongs ?? DEFAULT_MAX_MISSED_PONGS;\n    this.connectTimeoutMs = options.connectTimeoutMs ?? DEFAULT_CONNECT_TIMEOUT_MS;\n    this.log = options.onLog ?? (() => {});\n    this.subprotocols = options.auth ? [encodeBearerSubprotocol(options.auth)] : [];\n    this.tls = options.tls;\n  }\n\n  async connect(): Promise<void> {\n    this.intentionalClose = false;\n    this.reconnectAttempts = 0;\n    if (this.tls && !isBun && !this.wsPackage) this.wsPackage = await loadWsPackage();\n    return this.doConnect(true);\n  }\n\n  async disconnect(): Promise<void> {\n    this.intentionalClose = true;\n    this.clearHeartbeat();\n    if (this.ws) {\n      if (this.ws.readyState === WebSocket.OPEN) {\n        this.ws.close(1000, \"Client disconnect\");\n      }\n      this.ws = null;\n    }\n  }\n\n  send(command: AgentCommand): void {\n    if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {\n      this.log(\"[ws-client] cannot send: not connected\");\n      return;\n    }\n    this.ws.send(JSON.stringify(command));\n  }\n\n  onMessage(handler: (event: AgentEvent) => void): () => void {\n    this.messageHandlers.add(handler);\n    return () => {\n      this.messageHandlers.delete(handler);\n    };\n  }\n\n  onDisconnect(handler: () => void): () => void {\n    this.disconnectHandlers.add(handler);\n    return () => {\n      this.disconnectHandlers.delete(handler);\n    };\n  }\n\n  get connected(): boolean {\n    return this.ws?.readyState === WebSocket.OPEN;\n  }\n\n  // ---------------------------------------------------------------------------\n  // Internal\n  // ---------------------------------------------------------------------------\n\n  private doConnect(isInitial = false): Promise<void> {\n    return new Promise<void>((resolve, reject) => {\n      this.log(`[ws-client] connecting to ${this.url}`);\n\n      const ws = this.createSocket();\n      this.ws = ws;\n      /** Pings this socket sent since its last pong or inbound message. */\n      const liveness = { missed: 0 };\n\n      // Settle the connect promise exactly once. A close or error that arrives\n      // before `open` is a handshake/connect failure (e.g. a rejected auth\n      // upgrade, code 401, or a refused port) — reject so the caller sees it\n      // instead of hanging until the connect timeout.\n      let settled = false;\n      let opened = false;\n      const failConnect = (message: string) => {\n        if (settled) return;\n        settled = true;\n        // The WebSocket API hides why a handshake was refused (no status, no body), so ask\n        // the server once more, plainly, for the status it answers the upgrade with. Only on\n        // the first connect: a probe the server accepts is a real client to it (it would evict\n        // the connected one and drain the replay buffer into the probe), and background\n        // reconnect attempts have no caller waiting for the reason.\n        if (!isInitial) {\n          reject(new Error(message));\n          return;\n        }\n        void this.explainRefusal().then((reason) => {\n          reject(new Error(reason ? `${message}: ${reason}` : message));\n        });\n      };\n\n      const timeout = setTimeout(() => {\n        if (settled) return;\n        // Reject with the timeout reason first, then close — closing may\n        // synchronously fire the `close` handler, whose `failConnect` is then a\n        // no-op thanks to the `settled` guard (preserves the timeout message).\n        settled = true;\n        reject(new Error(`Connection timeout to ${this.url}`));\n        ws.close();\n      }, this.connectTimeoutMs);\n\n      ws.addEventListener(\"open\", () => {\n        clearTimeout(timeout);\n        opened = true;\n        this.log(\"[ws-client] connected\");\n        this.reconnectAttempts = 0;\n        // A socket orphaned by disconnect() or a newer dial must not take over\n        // the heartbeat of the current one.\n        if (this.ws === ws) this.startHeartbeat(ws, liveness, () => handleClose(1006));\n        if (!settled) {\n          settled = true;\n          resolve();\n        }\n      });\n\n      ws.addEventListener(\"message\", (event) => {\n        liveness.missed = 0;\n        try {\n          const data = JSON.parse(String(event.data)) as AgentEvent;\n          for (const handler of this.messageHandlers) {\n            handler(data);\n          }\n        } catch {\n          this.log(\"[ws-client] failed to parse message\");\n        }\n      });\n\n      // Runs once per socket, from its `close` event or from the pong deadline,\n      // whichever comes first: `terminate()` closes synchronously in Bun but\n      // later in the `ws` package, so the second caller must be a no-op.\n      let closeHandled = false;\n      const handleClose = (code: number, reason = \"\") => {\n        if (closeHandled) return;\n        closeHandled = true;\n        clearTimeout(timeout);\n        if (this.ws === ws) this.clearHeartbeat();\n        this.log(`[ws-client] disconnected (code=${code})`);\n\n        for (const handler of this.disconnectHandlers) {\n          handler();\n        }\n\n        // Close code 4001: the server serves one client and a newer one took over. Say so\n        // instead of going quiet, and do not reconnect: that would evict the new owner in turn.\n        if (code === CLOSE_REPLACED && opened && !this.intentionalClose) {\n          const message = `This connection was replaced by another client (close code ${CLOSE_REPLACED}${reason ? `, \"${reason}\"` : \"\"}). The server serves one client at a time, so this client does not reconnect.`;\n          this.log(`[ws-client] ${message}`);\n          const event: AgentEvent = { type: \"error\", message, fatal: false, category: \"config\" };\n          for (const handler of this.messageHandlers) handler(event);\n          return;\n        }\n\n        // Closed before ever opening == connect failure. Reject the pending\n        // connect; only background (reconnect) attempts chain another retry —\n        // an initial connect failure is surfaced to the caller, who owns retry.\n        if (!opened) {\n          failConnect(`Connection to ${this.url} closed before open (code=${code})`);\n          if (!isInitial && !this.intentionalClose && code !== 1000) {\n            this.scheduleReconnect();\n          }\n          return;\n        }\n\n        if (!this.intentionalClose && code !== 1000) {\n          this.scheduleReconnect();\n        }\n      };\n      ws.addEventListener(\"close\", (event) => handleClose(event.code, event.reason));\n\n      ws.addEventListener(\"error\", () => {\n        clearTimeout(timeout);\n        // A pre-open error is a connect failure; reject now. The close event\n        // (which usually follows) is idempotent via the `settled` guard.\n        if (!opened) failConnect(`Connection to ${this.url} failed before open`);\n      });\n    });\n  }\n\n  /**\n   * After a refused handshake, repeat the upgrade request over `node:http` and report the\n   * status line the server answered with. Resolves `undefined` when nothing useful is\n   * learned (a browser has no `node:http`; the server accepted this time).\n   */\n  private async explainRefusal(): Promise<string | undefined> {\n    if (typeof process === \"undefined\" || !process.versions?.node) return undefined;\n    try {\n      const url = new URL(this.url);\n      const secure = url.protocol === \"wss:\";\n      // Variable specifier: bundlers must not pull `node:http` into browser builds.\n      const specifier = secure ? \"node:https\" : \"node:http\";\n      const lib = (await import(\n        /* @vite-ignore */ /* webpackIgnore: true */ specifier\n      )) as typeof nodeHttp;\n      return await new Promise<string | undefined>((resolve) => {\n        const req = lib.request(\n          {\n            host: url.hostname,\n            port: url.port || (secure ? 443 : 80),\n            path: `${url.pathname}${url.search}`,\n            method: \"GET\",\n            timeout: 3_000,\n            headers: {\n              Connection: \"Upgrade\",\n              Upgrade: \"websocket\",\n              \"Sec-WebSocket-Version\": \"13\",\n              \"Sec-WebSocket-Key\": \"c2thaWxlLXByb2JlLWtleQ==\",\n              ...(this.subprotocols.length > 0\n                ? { \"Sec-WebSocket-Protocol\": this.subprotocols.join(\", \") }\n                : {}),\n            },\n            ...(this.tls ? { ca: this.tls.ca } : {}),\n          },\n          (res) => {\n            res.resume();\n            const status = `HTTP ${res.statusCode} ${res.statusMessage ?? \"\"}`.trim();\n            if (res.statusCode === 401) {\n              resolve(\n                this.subprotocols.length > 0\n                  ? `${status} (the server did not accept the token passed as \\`auth\\`)`\n                  : `${status} (the server requires a token: pass \\`auth\\`; \\`skaile serve\\` reads SKAILE_WS_AUTH_TOKEN)`,\n              );\n            } else {\n              resolve(status);\n            }\n          },\n        );\n        req.on(\"upgrade\", (_res, socket) => {\n          socket.destroy();\n          resolve(undefined);\n        });\n        req.on(\"timeout\", () => {\n          req.destroy();\n          resolve(undefined);\n        });\n        req.on(\"error\", (err: NodeJS.ErrnoException) => resolve(err.code));\n        req.end();\n      });\n    } catch {\n      return undefined;\n    }\n  }\n\n  private createSocket(): WebSocket {\n    if (this.tls) {\n      const { ca } = this.tls;\n      if (isBun) {\n        // Bun's WebSocket takes an options object in place of the protocols.\n        const init = { protocols: this.subprotocols, tls: { ca } };\n        return new WebSocket(this.url, init as unknown as string[]);\n      }\n      if (!this.wsPackage) throw new Error(\"ws package not loaded before a pinned dial\");\n      return new this.wsPackage(this.url, this.subprotocols, { ca });\n    }\n    // Pass the bearer subprotocol when auth is configured; an empty list keeps\n    // the no-auth handshake byte-identical to before.\n    return this.subprotocols.length > 0\n      ? new WebSocket(this.url, this.subprotocols)\n      : new WebSocket(this.url);\n  }\n\n  private scheduleReconnect(): void {\n    if (this.reconnectAttempts >= this.reconnectConfig.maxAttempts) {\n      this.log(`[ws-client] giving up reconnect after ${this.reconnectAttempts} attempts`);\n      return;\n    }\n\n    this.reconnectAttempts++;\n    const delay = Math.min(\n      this.reconnectConfig.baseMs * 2 ** (this.reconnectAttempts - 1),\n      this.reconnectConfig.maxMs,\n    );\n    this.log(`[ws-client] reconnecting in ${delay}ms (attempt ${this.reconnectAttempts})`);\n\n    setTimeout(() => {\n      if (this.intentionalClose) return;\n      this.doConnect().catch(() => {\n        // doConnect rejection triggers another close → scheduleReconnect cycle\n      });\n    }, delay);\n  }\n\n  /**\n   * Ping every {@link heartbeatMs} and, where the socket reports pongs, give up\n   * on it after {@link maxMissedPongs} unanswered ticks. A path that dies\n   * without a FIN leaves the socket OPEN forever; terminating it here is what\n   * lets {@link scheduleReconnect} run. `onDead` settles the close at once\n   * because a terminated socket's own close event can arrive late.\n   */\n  private startHeartbeat(ws: WebSocket, liveness: { missed: number }, onDead: () => void): void {\n    this.clearHeartbeat();\n    const socket = ws as PingCapableSocket;\n    const canPing = typeof socket.ping === \"function\";\n    const markAlive = () => {\n      liveness.missed = 0;\n    };\n    if (canPing && typeof socket.on === \"function\") socket.on(\"pong\", markAlive);\n    else if (canPing) ws.addEventListener(\"pong\" as keyof WebSocketEventMap, markAlive);\n    const judge = canPing && this.maxMissedPongs > 0;\n\n    this.heartbeatTimer = setInterval(() => {\n      if (ws.readyState !== WebSocket.OPEN) return;\n      if (judge && liveness.missed >= this.maxMissedPongs) {\n        this.log(\n          `[ws-client] no pong for ${liveness.missed} heartbeats of ${this.heartbeatMs}ms; terminating ${this.url}`,\n        );\n        this.clearHeartbeat();\n        try {\n          if (typeof socket.terminate === \"function\") socket.terminate();\n          else ws.close();\n        } catch {\n          // already gone\n        }\n        onDead();\n        return;\n      }\n      try {\n        socket.ping?.();\n        if (judge) liveness.missed++;\n      } catch {\n        // A runtime whose ping throws cannot be judged on pongs either.\n      }\n    }, this.heartbeatMs);\n  }\n\n  private clearHeartbeat(): void {\n    if (this.heartbeatTimer) {\n      clearInterval(this.heartbeatTimer);\n      this.heartbeatTimer = null;\n    }\n  }\n}\n"]}

package/dist/{chunk-5LKOAX7I.js → chunk-OQ5MKDS3.js}

@@ -34,6 +34,7 @@ var WebSocketServerTransport = class {
   activeClient = null;
   port;
   log;
+  host;
   authToken;
   heartbeatMs;
   maxMissedPongs;
@@ -43,6 +44,7 @@ var WebSocketServerTransport = class {
   constructor(options) {
     this.port = options.port;
     this.log = options.onLog ?? console.log;
+    this.host = options.host;
     this.authToken = options.authToken;
     this.heartbeatMs = options.heartbeatMs ?? DEFAULT_HEARTBEAT_MS;
     this.maxMissedPongs = options.maxMissedPongs ?? DEFAULT_MAX_MISSED_PONGS;
@@ -75,22 +77,36 @@ var WebSocketServerTransport = class {
     try {
       await new Promise((resolve, reject) => {
         httpServer.once("error", reject);
-        httpServer.listen(this.port, () => {
+        const onBound = () => {
           httpServer.off("error", reject);
           resolve();
-        });
+        };
+        if (this.host) httpServer.listen(this.port, this.host, onBound);
+        else httpServer.listen(this.port, onBound);
       });
     } catch (err) {
       wss.close();
       this.wss = null;
       this.httpServer = null;
+      if (err instanceof Error && "code" in err && err.code === "EADDRINUSE") {
+        const where = this.host ? `${this.host}:${this.port}` : `port ${this.port}`;
+        throw Object.assign(
+          new Error(
+            `${where} is already in use: another process listens there. Pick another port.`
+          ),
+          { code: "EADDRINUSE" }
+        );
+      }
       throw err;
     } finally {
       wss.off("error", swallowBindError);
     }
     const addr = httpServer.address();
     const boundPort = typeof addr === "object" && addr ? addr.port : this.port;
-    this.log(`[ws-server] listening on port ${boundPort}`);
+    const bind = this.host ?? "all interfaces";
+    this.log(
+      `[ws-server] listening on port ${boundPort} (${bind}; ${this.authToken ? "token required" : "no authentication"})`
+    );
   }
   handleConnection(ws) {
     if (this.activeClient) {
@@ -239,5 +255,5 @@ var WebSocketServerTransport = class {
 };
 
 export { WebSocketServerTransport };
-//# sourceMappingURL=chunk-5LKOAX7I.js.map
-//# sourceMappingURL=chunk-5LKOAX7I.js.map
+//# sourceMappingURL=chunk-OQ5MKDS3.js.map
+//# sourceMappingURL=chunk-OQ5MKDS3.js.map

package/dist/chunk-OQ5MKDS3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../transport/src/ws/server.ts"],"names":[],"mappings":";;;;AAyCA,IAAM,oBAAA,GAAuB,GAAA;AAC7B,IAAM,wBAAA,GAA2B,CAAA;AAkBjC,SAAS,yBAAyB,GAAA,EAA6C;AAC7E,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,cAAA,EAAgB,OAAO,6BAAA;AAExC,EAAA,MAAM,WAAW,GAAA,CAAI,QAAA;AACrB,EAAA,IAAI,CAAC,YAAY,OAAO,QAAA,KAAa,YAAY,KAAA,CAAM,OAAA,CAAQ,QAAQ,CAAA,EAAG;AACxE,IAAA,OAAO,4BAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,QAAA,CAAS,WAAA,KAAgB,QAAA,EAAU,OAAO,uCAAA;AACrD,EAAA,IAAI,OAAO,QAAA,CAAS,SAAA,KAAc,QAAA,EAAU,OAAO,qCAAA;AACnD,EAAA,IAAI,OAAO,QAAA,CAAS,SAAA,KAAc,QAAA,EAAU,OAAO,qCAAA;AAEnD,EAAA,MAAM,kBAAkB,GAAA,CAAI,eAAA;AAC5B,EAAA,IAAI,CAAC,mBAAmB,OAAO,eAAA,KAAoB,YAAY,KAAA,CAAM,OAAA,CAAQ,eAAe,CAAA,EAAG;AAC7F,IAAA,OAAO,mCAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,eAAA,CAAgB,KAAA,KAAU,QAAA,EAAU,OAAO,wCAAA;AACtD,EAAA,IAAI,OAAO,eAAA,CAAgB,KAAA,KAAU,QAAA,EAAU,OAAO,wCAAA;AACtD,EAAA,IAAI,OAAO,eAAA,CAAgB,KAAA,KAAU,QAAA,EAAU,OAAO,wCAAA;AAEtD,EAAA,IACE,CAAC,GAAA,CAAI,cAAA,IACL,OAAO,GAAA,CAAI,cAAA,KAAmB,QAAA,IAC9B,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA,EAChC;AACA,IAAA,OAAO,kCAAA;AAAA,EACT;AAEA,EAAA,IAAI,CAAC,GAAA,CAAI,WAAA,IAAe,OAAO,GAAA,CAAI,WAAA,KAAgB,QAAA,IAAY,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAA,EAAG;AAC7F,IAAA,OAAO,+BAAA;AAAA,EACT;AAEA,EAAA,OAAO,IAAA;AACT;AAyBO,IAAM,2BAAN,MAA0D;AAAA,EACvD,UAAA,GAAgC,IAAA;AAAA,EAChC,GAAA,GAA8B,IAAA;AAAA,EAC9B,YAAA,GAAiC,IAAA;AAAA,EACxB,IAAA;AAAA,EACA,GAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,cAAA;AAAA,EAEA,eAAA,uBAAsB,GAAA,EAAqC;AAAA,EAC3D,eAAA,uBAAsB,GAAA,EAAgB;AAAA,EACtC,kBAAA,uBAAyB,GAAA,EAAgB;AAAA,EAE1D,YAAY,OAAA,EAAiC;AAC3C,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,GAAA,GAAM,OAAA,CAAQ,KAAA,IAAS,OAAA,CAAQ,GAAA;AACpC,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,YAAY,OAAA,CAAQ,SAAA;AACzB,IAAA,IAAA,CAAK,WAAA,GAAc,QAAQ,WAAA,IAAe,oBAAA;AAC1C,IAAA,IAAA,CAAK,cAAA,GAAiB,QAAQ,cAAA,IAAkB,wBAAA;AAAA,EAClD;AAAA;AAAA,EAGA,MAAM,MAAA,GAAwB;AAC5B,IAAA,MAAM,UAAA,GAAa,YAAA,CAAa,CAAC,IAAA,EAAM,GAAA,KAAQ;AAC7C,MAAA,GAAA,CAAI,SAAA,CAAU,GAAA,EAAK,EAAE,cAAA,EAAgB,cAAc,CAAA;AACnD,MAAA,GAAA,CAAI,IAAI,qBAAqB,CAAA;AAAA,IAC/B,CAAC,CAAA;AAKD,IAAA,MAAM,WAAW,IAAA,CAAK,SAAA;AACtB,IAAA,MAAM,GAAA,GAAM,IAAI,eAAA,CAAgB;AAAA,MAC9B,MAAA,EAAQ,UAAA;AAAA,MACR,YAAA,EAAc,QAAA,GACV,CAAC,IAAA,EAAM,EAAA,KAAO;AACZ,QAAA,MAAM,YAAY,sBAAA,CAAuB,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,wBAAwB,CAAC,CAAA;AACnF,QAAA,IAAI,SAAA,KAAc,IAAA,IAAQ,WAAA,CAAY,SAAA,EAAW,QAAQ,CAAA,EAAG;AAC1D,UAAA,EAAA,CAAG,IAAI,CAAA;AAAA,QACT,CAAA,MAAO;AACL,UAAA,IAAA,CAAK,IAAI,+CAA+C,CAAA;AACxD,UAAA,EAAA,CAAG,KAAA,EAAO,KAAK,cAAc,CAAA;AAAA,QAC/B;AAAA,MACF,CAAA,GACA;AAAA,KACL,CAAA;AACD,IAAA,GAAA,CAAI,GAAG,YAAA,EAAc,CAAC,OAAO,IAAA,CAAK,gBAAA,CAAiB,EAAE,CAAC,CAAA;AAItD,IAAA,MAAM,mBAAmB,MAAM;AAAA,IAAC,CAAA;AAChC,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,gBAAgB,CAAA;AAChC,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAClB,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AAEX,IAAA,IAAI;AACF,MAAA,MAAM,IAAI,OAAA,CAAc,CAAC,OAAA,EAAS,MAAA,KAAW;AAC3C,QAAA,UAAA,CAAW,IAAA,CAAK,SAAS,MAAM,CAAA;AAC/B,QAAA,MAAM,UAAU,MAAM;AACpB,UAAA,UAAA,CAAW,GAAA,CAAI,SAAS,MAAM,CAAA;AAC9B,UAAA,OAAA,EAAQ;AAAA,QACV,CAAA;AACA,QAAA,IAAI,IAAA,CAAK,MAAM,UAAA,CAAW,MAAA,CAAO,KAAK,IAAA,EAAM,IAAA,CAAK,MAAM,OAAO,CAAA;AAAA,aACzD,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,IAAA,EAAM,OAAO,CAAA;AAAA,MAC3C,CAAC,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,KAAA,EAAM;AACV,MAAA,IAAA,CAAK,GAAA,GAAM,IAAA;AACX,MAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,MAAA,IAAI,eAAe,KAAA,IAAS,MAAA,IAAU,GAAA,IAAO,GAAA,CAAI,SAAS,YAAA,EAAc;AACtE,QAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,IAAA,GAAO,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAA,GAAK,CAAA,KAAA,EAAQ,IAAA,CAAK,IAAI,CAAA,CAAA;AACzE,QAAA,MAAM,MAAA,CAAO,MAAA;AAAA,UACX,IAAI,KAAA;AAAA,YACF,GAAG,KAAK,CAAA,qEAAA;AAAA,WACV;AAAA,UACA,EAAE,MAAM,YAAA;AAAa,SACvB;AAAA,MACF;AACA,MAAA,MAAM,GAAA;AAAA,IACR,CAAA,SAAE;AACA,MAAA,GAAA,CAAI,GAAA,CAAI,SAAS,gBAAgB,CAAA;AAAA,IACnC;AAEA,IAAA,MAAM,IAAA,GAAO,WAAW,OAAA,EAAQ;AAChC,IAAA,MAAM,YAAY,OAAO,IAAA,KAAS,YAAY,IAAA,GAAO,IAAA,CAAK,OAAO,IAAA,CAAK,IAAA;AACtE,IAAA,MAAM,IAAA,GAAO,KAAK,IAAA,IAAQ,gBAAA;AAC1B,IAAA,IAAA,CAAK,GAAA;AAAA,MACH,CAAA,8BAAA,EAAiC,SAAS,CAAA,EAAA,EAAK,IAAI,KAAK,IAAA,CAAK,SAAA,GAAY,mBAAmB,mBAAmB,CAAA,CAAA;AAAA,KACjH;AAAA,EACF;AAAA,EAEQ,iBAAiB,EAAA,EAAqB;AAC5C,IAAA,IAAI,KAAK,YAAA,EAAc;AAIrB,MAAA,IAAA,CAAK,IAAI,2CAA2C,CAAA;AACpD,MAAA,IAAI;AACF,QAAA,IAAA,CAAK,YAAA,CAAa,KAAA,CAAM,IAAA,EAAM,4BAA4B,CAAA;AAAA,MAC5D,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AACA,IAAA,IAAA,CAAK,IAAI,8BAA8B,CAAA;AACvC,IAAA,IAAA,CAAK,YAAA,GAAe,EAAA;AACpB,IAAA,KAAA,MAAW,OAAA,IAAW,KAAK,eAAA,EAAiB;AAC1C,MAAA,OAAA,EAAQ;AAAA,IACV;AAEA,IAAA,MAAM,aAAA,GAAgB,IAAA,CAAK,cAAA,CAAe,EAAE,CAAA;AAE5C,IAAA,EAAA,CAAG,EAAA,CAAG,SAAA,EAAW,CAAC,IAAA,KAAS;AACzB,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,MAAA,CAAO,IAAI,CAAC,CAAA;AAKtC,QAAA,IAAI,UAAU,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,CAAO,SAAS,cAAA,EAAgB;AAC1E,UAAA,MAAM,MAAA,GAAS,yBAAyB,MAAM,CAAA;AAC9C,UAAA,IAAI,WAAW,IAAA,EAAM;AACnB,YAAA,IAAA,CAAK,GAAA,CAAI,CAAA,4CAAA,EAA+C,MAAM,CAAA,CAAE,CAAA;AAChE,YAAA,IAAA,CAAK,OAAA,CAAQ;AAAA,cACX,IAAA,EAAM,OAAA;AAAA,cACN,OAAA,EAAS,yBAAyB,MAAM,CAAA,CAAA;AAAA,cACxC,KAAA,EAAO;AAAA,aACR,CAAA;AACD,YAAA;AAAA,UACF;AAAA,QACF;AACA,QAAA,MAAM,GAAA,GAAM,MAAA;AACZ,QAAA,KAAA,MAAW,OAAA,IAAW,KAAK,eAAA,EAAiB;AAC1C,UAAA,OAAA,CAAQ,GAAG,CAAA;AAAA,QACb;AAAA,MACF,SAAS,GAAA,EAAK;AACZ,QAAA,IAAA,CAAK,OAAA,CAAQ;AAAA,UACX,IAAA,EAAM,OAAA;AAAA,UACN,OAAA,EAAS,oBAAoB,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,UAC7E,KAAA,EAAO;AAAA,SACR,CAAA;AAAA,MACH;AAAA,IACF,CAAC,CAAA;AAED,IAAA,EAAA,CAAG,EAAA,CAAG,SAAS,MAAM;AACnB,MAAA,aAAA,EAAc;AACd,MAAA,IAAA,CAAK,IAAI,iCAAiC,CAAA;AAC1C,MAAA,IAAI,IAAA,CAAK,iBAAiB,EAAA,EAAI;AAC5B,QAAA,IAAA,CAAK,YAAA,GAAe,IAAA;AACpB,QAAA,KAAA,MAAW,OAAA,IAAW,KAAK,kBAAA,EAAoB;AAC7C,UAAA,OAAA,EAAQ;AAAA,QACV;AAAA,MACF;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,eAAe,EAAA,EAA2B;AAChD,IAAA,IAAI,IAAA,CAAK,cAAA,IAAkB,CAAA,EAAG,OAAO,MAAM;AAAA,IAAC,CAAA;AAC5C,IAAA,IAAI,MAAA,GAAS,CAAA;AACb,IAAA,MAAM,YAAY,MAAM;AACtB,MAAA,MAAA,GAAS,CAAA;AAAA,IACX,CAAA;AACA,IAAA,EAAA,CAAG,EAAA,CAAG,QAAQ,SAAS,CAAA;AACvB,IAAA,EAAA,CAAG,EAAA,CAAG,WAAW,SAAS,CAAA;AAC1B,IAAA,MAAM,KAAA,GAAQ,YAAY,MAAM;AAC9B,MAAA,IAAI,EAAA,CAAG,UAAA,KAAe,EAAA,CAAG,IAAA,EAAM;AAC/B,MAAA,IAAI,MAAA,IAAU,KAAK,cAAA,EAAgB;AACjC,QAAA,IAAA,CAAK,GAAA;AAAA,UACH,CAAA,wBAAA,EAA2B,MAAM,CAAA,eAAA,EAAkB,IAAA,CAAK,WAAW,CAAA,sBAAA;AAAA,SACrE;AACA,QAAA,aAAA,CAAc,KAAK,CAAA;AACnB,QAAA,EAAA,CAAG,SAAA,EAAU;AACb,QAAA;AAAA,MACF;AACA,MAAA,MAAA,EAAA;AACA,MAAA,IAAI;AACF,QAAA,EAAA,CAAG,IAAA,EAAK;AAAA,MACV,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF,CAAA,EAAG,KAAK,WAAW,CAAA;AACnB,IAAA,KAAA,CAAM,KAAA,IAAQ;AACd,IAAA,OAAO,MAAM,cAAc,KAAK,CAAA;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAI;AACF,MAAA,IAAA,CAAK,cAAc,SAAA,EAAU;AAAA,IAC/B,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,IAAA,CAAK,YAAA,GAAe,IAAA;AACpB,IAAA,IAAA,CAAK,KAAK,KAAA,EAAM;AAChB,IAAA,IAAA,CAAK,GAAA,GAAM,IAAA;AACX,IAAA,MAAM,aAAa,IAAA,CAAK,UAAA;AACxB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,UAAA,CAAW,mBAAA,EAAoB;AAC/B,MAAA,MAAM,IAAI,QAAc,CAAC,OAAA,KAAY,WAAW,KAAA,CAAM,MAAM,OAAA,EAAS,CAAC,CAAA;AAAA,IACxE;AAAA,EACF;AAAA,EAEA,KAAK,KAAA,EAAyB;AAC5B,IAAA,IAAA,CAAK,QAAQ,KAAK,CAAA;AAAA,EACpB;AAAA,EAEA,UAAU,OAAA,EAAsD;AAC9D,IAAA,IAAA,CAAK,eAAA,CAAgB,IAAI,OAAO,CAAA;AAChC,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,eAAA,CAAgB,OAAO,OAAO,CAAA;AAAA,IACrC,CAAA;AAAA,EACF;AAAA,EAEA,UAAU,OAAA,EAAiC;AACzC,IAAA,IAAA,CAAK,eAAA,CAAgB,IAAI,OAAO,CAAA;AAChC,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,eAAA,CAAgB,OAAO,OAAO,CAAA;AAAA,IACrC,CAAA;AAAA,EACF;AAAA,EAEA,aAAa,OAAA,EAAiC;AAC5C,IAAA,IAAA,CAAK,kBAAA,CAAmB,IAAI,OAAO,CAAA;AACnC,IAAA,OAAO,MAAM;AACX,MAAA,IAAA,CAAK,kBAAA,CAAmB,OAAO,OAAO,CAAA;AAAA,IACxC,CAAA;AAAA,EACF;AAAA,EAEA,IAAI,SAAA,GAAqB;AACvB,IAAA,OAAO,KAAK,YAAA,KAAiB,IAAA;AAAA,EAC/B;AAAA;AAAA,EAGA,IAAI,SAAA,GAAgC;AAClC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,UAAA,EAAY,OAAA,EAAQ;AACtC,IAAA,OAAO,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,GAAO,KAAK,IAAA,GAAO,MAAA;AAAA,EACxD;AAAA,EAEQ,QAAQ,IAAA,EAAqB;AACnC,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,IAAA,CAAK,YAAA;AACpB,MAAA,IAAI,MAAA,IAAU,MAAA,CAAO,UAAA,KAAe,CAAA,EAAG;AACrC,QAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MAClC;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"chunk-OQ5MKDS3.js","sourcesContent":["/**\n * WebSocketServerTransport — `ws`-based WebSocket server.\n *\n * Accepts one client at a time. Implements ServerTransport from @skaile/workspaces/types.\n * Built on the `ws` package + `node:http`, both of which run under Node and Bun.\n */\n\nimport { createServer, type Server as HttpServer } from \"node:http\";\nimport type { AgentCommand, AgentEvent, ServerTransport } from \"@skaile/workspaces/types\";\nimport { type WebSocket, WebSocketServer } from \"ws\";\nimport { decodeBearerFromHeader, tokensEqual } from \"./auth.js\";\n\n/**\n * Options for {@link WebSocketServerTransport}.\n *\n * @param port - TCP port to bind to; `0` picks a free port (read it back via `boundPort`).\n * @param onLog - Optional callback for internal log lines (client connect/disconnect events).\n * @param host - Address to bind. Default: every interface (Node's unspecified address).\n *   `127.0.0.1` accepts local clients only.\n * @param authToken - When set, every upgrade must present this token via the\n *   `skaile-bearer.<base64url>` subprotocol or the handshake is rejected with\n *   HTTP 401. When unset, no auth is enforced (back-compatible default).\n * @param heartbeatMs - Interval in milliseconds between pings to the active\n *   client. Default: 30 000.\n * @param maxMissedPongs - Heartbeat ticks the client may go without a pong (or\n *   any inbound frame) before its socket is terminated, so a client lost behind a\n *   dead path (no FIN) fires `onDisconnect` instead of swallowing every event\n *   sent to it. Default: 2, i.e. detection within 3 x `heartbeatMs`. `0` turns\n *   the heartbeat off. Every WebSocket client answers pings on its own.\n *\n * @docLink packages/transport/dev-guide#websocket-server-transport\n */\nexport interface WebSocketServerOptions {\n  port: number;\n  host?: string;\n  onLog?: (line: string) => void;\n  authToken?: string;\n  heartbeatMs?: number;\n  maxMissedPongs?: number;\n}\n\nconst DEFAULT_HEARTBEAT_MS = 30_000;\nconst DEFAULT_MAX_MISSED_PONGS = 2;\n\n/**\n * Shape-validate a `session_init` frame at ingress before forwarding to the\n * runner. Protocol v3 requires the deterministic bootstrap envelope to carry\n * an identity tuple, a semver-shaped `protocolVersion`, a resolved config\n * object, and a `credentials` map keyed by `mounts` / `connectors`. Frames\n * that fail the guard are rejected on the wire so the runner never sees a\n * malformed boot envelope.\n *\n * Returns `null` when the frame is well-formed, or a human-readable reason\n * when it should be rejected.\n *\n * Spec: `_devlog/specs/2026-05-10-deterministic-session-bootstrap.md`\n * § \"SessionInitCommand schema\".\n *\n * @internal\n */\nfunction validateSessionInitShape(cmd: Record<string, unknown>): string | null {\n  if (cmd.type !== \"session_init\") return \"type must be 'session_init'\";\n\n  const identity = cmd.identity as Record<string, unknown> | undefined;\n  if (!identity || typeof identity !== \"object\" || Array.isArray(identity)) {\n    return \"identity must be an object\";\n  }\n  if (typeof identity.containerId !== \"string\") return \"identity.containerId must be a string\";\n  if (typeof identity.sessionId !== \"string\") return \"identity.sessionId must be a string\";\n  if (typeof identity.projectId !== \"string\") return \"identity.projectId must be a string\";\n\n  const protocolVersion = cmd.protocolVersion as Record<string, unknown> | undefined;\n  if (!protocolVersion || typeof protocolVersion !== \"object\" || Array.isArray(protocolVersion)) {\n    return \"protocolVersion must be an object\";\n  }\n  if (typeof protocolVersion.major !== \"number\") return \"protocolVersion.major must be a number\";\n  if (typeof protocolVersion.minor !== \"number\") return \"protocolVersion.minor must be a number\";\n  if (typeof protocolVersion.patch !== \"number\") return \"protocolVersion.patch must be a number\";\n\n  if (\n    !cmd.resolvedConfig ||\n    typeof cmd.resolvedConfig !== \"object\" ||\n    Array.isArray(cmd.resolvedConfig)\n  ) {\n    return \"resolvedConfig must be an object\";\n  }\n\n  if (!cmd.credentials || typeof cmd.credentials !== \"object\" || Array.isArray(cmd.credentials)) {\n    return \"credentials must be an object\";\n  }\n\n  return null;\n}\n\n/**\n * `ServerTransport` implementation backed by the `ws` package on top of a\n * `node:http` server.\n *\n * Enforces a single-client policy: if a new connection arrives while a client is\n * already connected, the stale connection is closed with code 4001 and replaced.\n * Incoming frames are parsed as JSON `AgentCommand` messages and fanned out to\n * registered `onCommand` handlers; outgoing `AgentEvent` objects are JSON-serialised\n * before sending. Call `listen()` to start accepting connections and `close()` to\n * shut down cleanly — `close()` terminates the active socket immediately rather\n * than keeping the event loop alive.\n *\n * @example\n * ```ts\n * const server = new WebSocketServerTransport({ port: 8080 });\n * await server.listen();\n * server.onCommand((cmd) => console.log(cmd));\n * server.send({ type: 'agent_end' });\n * await server.close();\n * ```\n *\n * @docLink packages/transport/dev-guide#websocket-server-transport\n */\nexport class WebSocketServerTransport implements ServerTransport {\n  private httpServer: HttpServer | null = null;\n  private wss: WebSocketServer | null = null;\n  private activeClient: WebSocket | null = null;\n  private readonly port: number;\n  private readonly log: (line: string) => void;\n  private readonly host?: string;\n  private readonly authToken?: string;\n  private readonly heartbeatMs: number;\n  private readonly maxMissedPongs: number;\n\n  private readonly commandHandlers = new Set<(command: AgentCommand) => void>();\n  private readonly connectHandlers = new Set<() => void>();\n  private readonly disconnectHandlers = new Set<() => void>();\n\n  constructor(options: WebSocketServerOptions) {\n    this.port = options.port;\n    this.log = options.onLog ?? console.log;\n    this.host = options.host;\n    this.authToken = options.authToken;\n    this.heartbeatMs = options.heartbeatMs ?? DEFAULT_HEARTBEAT_MS;\n    this.maxMissedPongs = options.maxMissedPongs ?? DEFAULT_MAX_MISSED_PONGS;\n  }\n\n  /** Start the server and accept connections. */\n  async listen(): Promise<void> {\n    const httpServer = createServer((_req, res) => {\n      res.writeHead(200, { \"content-type\": \"text/plain\" });\n      res.end(\"skaile agent server\");\n    });\n    // When an auth token is configured, reject the upgrade at handshake time\n    // (HTTP 401) unless the client presents the matching bearer subprotocol.\n    // Rejecting here — before `connection` — keeps unauthenticated sockets from\n    // ever reaching the command handlers.\n    const expected = this.authToken;\n    const wss = new WebSocketServer({\n      server: httpServer,\n      verifyClient: expected\n        ? (info, cb) => {\n            const presented = decodeBearerFromHeader(info.req.headers[\"sec-websocket-protocol\"]);\n            if (presented !== null && tokensEqual(presented, expected)) {\n              cb(true);\n            } else {\n              this.log(\"[ws-server] rejecting unauthenticated upgrade\");\n              cb(false, 401, \"Unauthorized\");\n            }\n          }\n        : undefined,\n    });\n    wss.on(\"connection\", (ws) => this.handleConnection(ws));\n    // `ws` re-emits the http server's errors on `wss`; unhandled during the bind,\n    // that throws before the reject below runs and `listen()` hangs. Scoped to the\n    // bind so a post-startup server error still surfaces loudly.\n    const swallowBindError = () => {};\n    wss.on(\"error\", swallowBindError);\n    this.httpServer = httpServer;\n    this.wss = wss;\n\n    try {\n      await new Promise<void>((resolve, reject) => {\n        httpServer.once(\"error\", reject);\n        const onBound = () => {\n          httpServer.off(\"error\", reject);\n          resolve();\n        };\n        if (this.host) httpServer.listen(this.port, this.host, onBound);\n        else httpServer.listen(this.port, onBound);\n      });\n    } catch (err) {\n      wss.close();\n      this.wss = null;\n      this.httpServer = null;\n      if (err instanceof Error && \"code\" in err && err.code === \"EADDRINUSE\") {\n        const where = this.host ? `${this.host}:${this.port}` : `port ${this.port}`;\n        throw Object.assign(\n          new Error(\n            `${where} is already in use: another process listens there. Pick another port.`,\n          ),\n          { code: \"EADDRINUSE\" },\n        );\n      }\n      throw err;\n    } finally {\n      wss.off(\"error\", swallowBindError);\n    }\n\n    const addr = httpServer.address();\n    const boundPort = typeof addr === \"object\" && addr ? addr.port : this.port;\n    const bind = this.host ?? \"all interfaces\";\n    this.log(\n      `[ws-server] listening on port ${boundPort} (${bind}; ${this.authToken ? \"token required\" : \"no authentication\"})`,\n    );\n  }\n\n  private handleConnection(ws: WebSocket): void {\n    if (this.activeClient) {\n      // Close the stale connection instead of rejecting the new one.\n      // This handles the race where waitForWsReady's probe hasn't\n      // fully disconnected before the real gateway client connects.\n      this.log(\"[ws-server] replacing previous connection\");\n      try {\n        this.activeClient.close(4001, \"Replaced by new connection\");\n      } catch {\n        // already closed\n      }\n    }\n    this.log(\"[ws-server] client connected\");\n    this.activeClient = ws;\n    for (const handler of this.connectHandlers) {\n      handler();\n    }\n\n    const stopHeartbeat = this.startHeartbeat(ws);\n\n    ws.on(\"message\", (data) => {\n      try {\n        const parsed = JSON.parse(String(data)) as Record<string, unknown>;\n        // Protocol v3: shape-validate `session_init` at ingress so the\n        // runner never receives a malformed boot envelope. Other command\n        // shapes pass through unchanged — invalid `AgentCommand`s surface\n        // through the existing per-command handlers in serve.ts.\n        if (parsed && typeof parsed === \"object\" && parsed.type === \"session_init\") {\n          const reason = validateSessionInitShape(parsed);\n          if (reason !== null) {\n            this.log(`[ws-server] rejecting invalid session_init: ${reason}`);\n            this.sendRaw({\n              type: \"error\",\n              message: `Invalid session_init: ${reason}`,\n              fatal: false,\n            });\n            return;\n          }\n        }\n        const cmd = parsed as unknown as AgentCommand;\n        for (const handler of this.commandHandlers) {\n          handler(cmd);\n        }\n      } catch (err) {\n        this.sendRaw({\n          type: \"error\",\n          message: `Invalid message: ${err instanceof Error ? err.message : String(err)}`,\n          fatal: false,\n        });\n      }\n    });\n\n    ws.on(\"close\", () => {\n      stopHeartbeat();\n      this.log(\"[ws-server] client disconnected\");\n      if (this.activeClient === ws) {\n        this.activeClient = null;\n        for (const handler of this.disconnectHandlers) {\n          handler();\n        }\n      }\n    });\n  }\n\n  /**\n   * Ping `ws` every {@link heartbeatMs}; terminate it after\n   * {@link maxMissedPongs} unanswered ticks. `terminate()` makes `ws` emit\n   * `close`, which runs the normal disconnect path. Returns the stop function.\n   */\n  private startHeartbeat(ws: WebSocket): () => void {\n    if (this.maxMissedPongs <= 0) return () => {};\n    let missed = 0;\n    const markAlive = () => {\n      missed = 0;\n    };\n    ws.on(\"pong\", markAlive);\n    ws.on(\"message\", markAlive);\n    const timer = setInterval(() => {\n      if (ws.readyState !== ws.OPEN) return;\n      if (missed >= this.maxMissedPongs) {\n        this.log(\n          `[ws-server] no pong for ${missed} heartbeats of ${this.heartbeatMs}ms; terminating client`,\n        );\n        clearInterval(timer);\n        ws.terminate();\n        return;\n      }\n      missed++;\n      try {\n        ws.ping();\n      } catch {\n        // socket closing underneath us; the close event cleans up\n      }\n    }, this.heartbeatMs);\n    timer.unref?.();\n    return () => clearInterval(timer);\n  }\n\n  /**\n   * Stop the server.\n   *\n   * Terminates the active socket immediately — otherwise a still-connected\n   * client would keep the event loop alive and block process shutdown.\n   */\n  async close(): Promise<void> {\n    try {\n      this.activeClient?.terminate();\n    } catch {\n      // already closed\n    }\n    this.activeClient = null;\n    this.wss?.close();\n    this.wss = null;\n    const httpServer = this.httpServer;\n    this.httpServer = null;\n    if (httpServer) {\n      httpServer.closeAllConnections();\n      await new Promise<void>((resolve) => httpServer.close(() => resolve()));\n    }\n  }\n\n  send(event: AgentEvent): void {\n    this.sendRaw(event);\n  }\n\n  onCommand(handler: (command: AgentCommand) => void): () => void {\n    this.commandHandlers.add(handler);\n    return () => {\n      this.commandHandlers.delete(handler);\n    };\n  }\n\n  onConnect(handler: () => void): () => void {\n    this.connectHandlers.add(handler);\n    return () => {\n      this.connectHandlers.delete(handler);\n    };\n  }\n\n  onDisconnect(handler: () => void): () => void {\n    this.disconnectHandlers.add(handler);\n    return () => {\n      this.disconnectHandlers.delete(handler);\n    };\n  }\n\n  get connected(): boolean {\n    return this.activeClient !== null;\n  }\n\n  /** The port actually bound by `listen()` (resolves `port: 0`); `undefined` when not listening. */\n  get boundPort(): number | undefined {\n    const addr = this.httpServer?.address();\n    return typeof addr === \"object\" && addr ? addr.port : undefined;\n  }\n\n  private sendRaw(data: unknown): void {\n    try {\n      const client = this.activeClient;\n      if (client && client.readyState === 1) {\n        client.send(JSON.stringify(data));\n      }\n    } catch {\n      // Silently ignore send failures\n    }\n  }\n}\n"]}

package/dist/{chunk-NWDSLXOX.js → chunk-PHRNUTSG.js}

@@ -1,103 +1,11 @@
 import { CODEX_NATIVE_STATE_FORMAT, CodexNativeStateUnavailable } from './chunk-LOO5CB5M.js';
-import { openSqlite } from './chunk-DALV4HHP.js';
+import { openSqlite } from './chunk-DKXNKFKP.js';
 import { registryEntries, isEntryEnabled, parseCredentialRef } from './chunk-MJHSLODD.js';
-import { lstatSync, realpathSync, existsSync, chmodSync, rmSync, writeFileSync, renameSync, mkdirSync, readdirSync, readFileSync } from 'fs';
-import { isAbsolute, resolve, dirname, join, relative } from 'path';
 import * as z from 'zod';
 import { createHash } from 'crypto';
+import { realpathSync, existsSync, lstatSync, chmodSync, rmSync, writeFileSync, renameSync, mkdirSync, readdirSync, readFileSync } from 'fs';
+import { isAbsolute, join, resolve, dirname, relative } from 'path';
 
-var invalid = () => new Error("AI_PROFILE_INVALID");
-var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var within = (child, parent) => {
-  const rel = relative(parent, child);
-  return rel === "" || !rel.startsWith("../") && rel !== ".." && !isAbsolute(rel);
-};
-var hasControl = (path) => [...path].some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);
-var directory = (path) => {
-  if (!isAbsolute(path) || hasControl(path)) throw invalid();
-  const stat = lstatSync(path);
-  if (!stat.isDirectory() || stat.isSymbolicLink()) throw invalid();
-  return realpathSync(path);
-};
-function prepareNativePolicy(input) {
-  const cwd = directory(input.cwd);
-  const privateRoot = directory(input.privateRoot);
-  const privateDirectory = directory(input.privateDirectory);
-  if (within(cwd, privateRoot) || within(privateRoot, cwd) || !within(privateDirectory, privateRoot) || privateDirectory === privateRoot || input.sandboxMode !== "read-only" && input.sandboxMode !== "workspace-write")
-    throw invalid();
-  const stat = lstatSync(privateRoot);
-  if (stat.mode & 63 || process.getuid && stat.uid !== 0 && stat.uid !== process.getuid())
-    throw invalid();
-  const filesystem = Object.freeze({
-    [cwd]: input.sandboxMode === "workspace-write" ? "write" : "read",
-    [privateRoot]: "deny"
-  });
-  const config = Object.freeze({
-    default_permissions: "managed",
-    features: Object.freeze({ use_legacy_landlock: false }),
-    permissions: Object.freeze({
-      managed: Object.freeze({
-        extends: ":read-only",
-        filesystem,
-        network: Object.freeze({ enabled: false })
-      })
-    })
-  });
-  const profile = `{ managed = { extends = ":read-only", filesystem = { ${Object.entries(filesystem).map(([path, access]) => `${JSON.stringify(path)} = ${JSON.stringify(access)}`).join(", ")} }, network = { enabled = false } } }`;
-  const policy = Object.freeze({
-    config,
-    cliArgs: Object.freeze([
-      "-c",
-      'default_permissions="managed"',
-      "-c",
-      "features.use_legacy_landlock=false",
-      "-c",
-      `permissions=${profile}`
-    ])
-  });
-  prepared.set(policy, { cwd, privateRoot, writable: input.sandboxMode === "workspace-write" });
-  return policy;
-}
-var prepared = /* @__PURE__ */ new WeakMap();
-var active = /* @__PURE__ */ new WeakMap();
-function activateNativeApprovalPolicy(policy, response, signal) {
-  const binding = prepared.get(policy);
-  if (!binding || signal.aborted || !record(response) || !record(response.thread) || typeof response.thread.id !== "string" || !response.thread.id || response.cwd !== binding.cwd || !record(response.activePermissionProfile) || response.activePermissionProfile.id !== "managed" || response.activePermissionProfile.extends !== ":read-only")
-    throw invalid();
-  const token = Object.freeze({});
-  active.set(token, { ...binding, threadId: response.thread.id, signal });
-  return token;
-}
-function isNativeApprovalPolicyActive(policy, threadId) {
-  if (!record(policy)) return false;
-  const binding = active.get(policy);
-  return Boolean(binding && !binding.signal.aborted && binding.threadId === threadId);
-}
-function allowsNativeApprovalPath(policy, path, access) {
-  if (!policy) return false;
-  const binding = active.get(policy);
-  if (!binding || binding.signal.aborted || !isAbsolute(path) || hasControl(path) || access !== "read" && access !== "write" || access === "write" && !binding.writable)
-    return false;
-  try {
-    let existing = resolve(path);
-    const suffix = [];
-    while (true) {
-      try {
-        lstatSync(existing);
-        break;
-      } catch (error) {
-        if (error.code !== "ENOENT" || dirname(existing) === existing)
-          return false;
-        suffix.unshift(existing.slice(dirname(existing).length + 1));
-        existing = dirname(existing);
-      }
-    }
-    const canonical = resolve(realpathSync(existing), ...suffix);
-    return within(canonical, binding.cwd) && !within(canonical, binding.privateRoot);
-  } catch {
-    return false;
-  }
-}
 var identifier = z.string().min(1).max(4096);
 var timestamp = z.iso.datetime({ offset: true });
 var common = {
@@ -177,31 +85,31 @@ function managedCodexRegistryViolation(registry) {
     return `entry '${id}' resolves its credential outside the control plane; managed codex admits only a 'platform:' reference`;
   return void 0;
 }
-var invalid2 = () => new Error("AI_PROFILE_INVALID");
-var within2 = (path, root) => {
+var invalid = () => new Error("AI_PROFILE_INVALID");
+var within = (path, root) => {
   const rel = relative(root, path);
   return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
 };
-function directory2(path) {
+function directory(path) {
   if (!existsSync(path)) mkdirSync(path, { mode: 448 });
   const stat = lstatSync(path);
-  if (!stat.isDirectory() || stat.isSymbolicLink() || stat.mode & 63) throw invalid2();
+  if (!stat.isDirectory() || stat.isSymbolicLink() || stat.mode & 63) throw invalid();
 }
 function readRegular(path, limit) {
   const stat = lstatSync(path);
-  if (!stat.isFile() || stat.isSymbolicLink() || stat.size > limit) throw invalid2();
+  if (!stat.isFile() || stat.isSymbolicLink() || stat.size > limit) throw invalid();
   return readFileSync(path);
 }
 function prepareCodexInstance(config, options, credential) {
   if (!isAbsolute(options.privateDirectory) || !isAbsolute(config.cwd) || !config.sessionId)
-    throw invalid2();
-  directory2(options.privateDirectory);
+    throw invalid();
+  directory(options.privateDirectory);
   const root = realpathSync(options.privateDirectory);
   const cwd = realpathSync(config.cwd);
-  if (within2(root, cwd) || within2(cwd, root)) throw invalid2();
+  if (within(root, cwd) || within(cwd, root)) throw invalid();
   const lock = join(root, ".active");
   const leasePath = join(root, "lease.db");
-  if (existsSync(leasePath) && !lstatSync(leasePath).isFile()) throw invalid2();
+  if (existsSync(leasePath) && !lstatSync(leasePath).isFile()) throw invalid();
   const lease = openSqlite(leasePath);
   try {
     lease.exec("PRAGMA busy_timeout=0; BEGIN EXCLUSIVE");
@@ -233,9 +141,9 @@ function prepareCodexInstance(config, options, credential) {
       })
     ).digest("hex");
     const slots = join(root, CODEX_NATIVE_STATE_FORMAT);
-    directory2(slots);
+    directory(slots);
     const stateRoot = join(slots, key);
-    directory2(stateRoot);
+    directory(stateRoot);
     for (const name of ["instructions.new", "binding.new"])
       rmSync(join(stateRoot, name), { force: true });
     const bindingPath = join(stateRoot, "binding.json");
@@ -255,10 +163,10 @@ function prepareCodexInstance(config, options, credential) {
     }
     const home = join(stateRoot, "home");
     if (config.resumeSessionId && !existsSync(home)) throw new CodexNativeStateUnavailable();
-    directory2(home);
-    for (const subdir of ["config", "cache", "data", "tmp"]) directory2(join(home, subdir));
+    directory(home);
+    for (const subdir of ["config", "cache", "data", "tmp"]) directory(join(home, subdir));
     if (["auth.json", ".credentials.json"].some((name) => existsSync(join(home, name))))
-      throw invalid2();
+      throw invalid();
     const instructionFile = join(stateRoot, "instructions.md");
     const instructions = [
       ...(options.instructionFiles ?? []).map(
@@ -273,24 +181,24 @@ function prepareCodexInstance(config, options, credential) {
     if (!options.skillsDirectory && existsSync(target)) rmSync(target, { recursive: true });
     if (options.skillsDirectory) {
       const source = realpathSync(options.skillsDirectory);
-      if (within2(target, source) || within2(source, target)) throw invalid2();
+      if (within(target, source) || within(source, target)) throw invalid();
       if (existsSync(target)) rmSync(target, { recursive: true });
       let files = 0;
       let entries = 0;
       let bytes = 0;
       const copy = (source2, destination) => {
-        if (++entries > 1024) throw invalid2();
-        if (lstatSync(source2).isSymbolicLink()) throw invalid2();
+        if (++entries > 1024) throw invalid();
+        if (lstatSync(source2).isSymbolicLink()) throw invalid();
         mkdirSync(destination, { mode: 448 });
         for (const entry of readdirSync(source2, { withFileTypes: true })) {
           const src = join(source2, entry.name);
           const dst = join(destination, entry.name);
-          if (entry.isSymbolicLink()) throw invalid2();
+          if (entry.isSymbolicLink()) throw invalid();
           if (entry.isDirectory()) copy(src, dst);
           else {
             const content = readRegular(src, 1024 * 1024);
             bytes += content.byteLength;
-            if (++files > 512 || bytes > 8 * 1024 * 1024) throw invalid2();
+            if (++files > 512 || bytes > 8 * 1024 * 1024) throw invalid();
             writeFileSync(dst, content, { mode: 384, flag: "wx" });
           }
         }
@@ -298,7 +206,7 @@ function prepareCodexInstance(config, options, credential) {
       copy(options.skillsDirectory, target);
     }
     const bindThread = (threadId) => {
-      if (!threadId || threadId.length > 4096) throw invalid2();
+      if (!threadId || threadId.length > 4096) throw invalid();
       const next = join(stateRoot, "binding.new");
       writeFileSync(next, JSON.stringify({ format: CODEX_NATIVE_STATE_FORMAT, key, threadId }), {
         mode: 384,
@@ -340,7 +248,7 @@ function codexInstanceEnvironment(input, home) {
     "NO_PROXY"
   ]);
   if (!input || Object.entries(input).some(([key, value]) => !allowed.has(key) || typeof value !== "string"))
-    throw invalid2();
+    throw invalid();
   return {
     ...input,
     HOME: home,
@@ -351,7 +259,99 @@ function codexInstanceEnvironment(input, home) {
     TMPDIR: join(home, "tmp")
   };
 }
+var invalid2 = () => new Error("AI_PROFILE_INVALID");
+var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var within2 = (child, parent) => {
+  const rel = relative(parent, child);
+  return rel === "" || !rel.startsWith("../") && rel !== ".." && !isAbsolute(rel);
+};
+var hasControl = (path) => [...path].some((character) => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);
+var directory2 = (path) => {
+  if (!isAbsolute(path) || hasControl(path)) throw invalid2();
+  const stat = lstatSync(path);
+  if (!stat.isDirectory() || stat.isSymbolicLink()) throw invalid2();
+  return realpathSync(path);
+};
+function prepareNativePolicy(input) {
+  const cwd = directory2(input.cwd);
+  const privateRoot = directory2(input.privateRoot);
+  const privateDirectory = directory2(input.privateDirectory);
+  if (within2(cwd, privateRoot) || within2(privateRoot, cwd) || !within2(privateDirectory, privateRoot) || privateDirectory === privateRoot || input.sandboxMode !== "read-only" && input.sandboxMode !== "workspace-write")
+    throw invalid2();
+  const stat = lstatSync(privateRoot);
+  if (stat.mode & 63 || process.getuid && stat.uid !== 0 && stat.uid !== process.getuid())
+    throw invalid2();
+  const filesystem = Object.freeze({
+    [cwd]: input.sandboxMode === "workspace-write" ? "write" : "read",
+    [privateRoot]: "deny"
+  });
+  const config = Object.freeze({
+    default_permissions: "managed",
+    features: Object.freeze({ use_legacy_landlock: false }),
+    permissions: Object.freeze({
+      managed: Object.freeze({
+        extends: ":read-only",
+        filesystem,
+        network: Object.freeze({ enabled: false })
+      })
+    })
+  });
+  const profile = `{ managed = { extends = ":read-only", filesystem = { ${Object.entries(filesystem).map(([path, access]) => `${JSON.stringify(path)} = ${JSON.stringify(access)}`).join(", ")} }, network = { enabled = false } } }`;
+  const policy = Object.freeze({
+    config,
+    cliArgs: Object.freeze([
+      "-c",
+      'default_permissions="managed"',
+      "-c",
+      "features.use_legacy_landlock=false",
+      "-c",
+      `permissions=${profile}`
+    ])
+  });
+  prepared.set(policy, { cwd, privateRoot, writable: input.sandboxMode === "workspace-write" });
+  return policy;
+}
+var prepared = /* @__PURE__ */ new WeakMap();
+var active = /* @__PURE__ */ new WeakMap();
+function activateNativeApprovalPolicy(policy, response, signal) {
+  const binding = prepared.get(policy);
+  if (!binding || signal.aborted || !record(response) || !record(response.thread) || typeof response.thread.id !== "string" || !response.thread.id || response.cwd !== binding.cwd || !record(response.activePermissionProfile) || response.activePermissionProfile.id !== "managed" || response.activePermissionProfile.extends !== ":read-only")
+    throw invalid2();
+  const token = Object.freeze({});
+  active.set(token, { ...binding, threadId: response.thread.id, signal });
+  return token;
+}
+function isNativeApprovalPolicyActive(policy, threadId) {
+  if (!record(policy)) return false;
+  const binding = active.get(policy);
+  return Boolean(binding && !binding.signal.aborted && binding.threadId === threadId);
+}
+function allowsNativeApprovalPath(policy, path, access) {
+  if (!policy) return false;
+  const binding = active.get(policy);
+  if (!binding || binding.signal.aborted || !isAbsolute(path) || hasControl(path) || access !== "read" && access !== "write" || access === "write" && !binding.writable)
+    return false;
+  try {
+    let existing = resolve(path);
+    const suffix = [];
+    while (true) {
+      try {
+        lstatSync(existing);
+        break;
+      } catch (error) {
+        if (error.code !== "ENOENT" || dirname(existing) === existing)
+          return false;
+        suffix.unshift(existing.slice(dirname(existing).length + 1));
+        existing = dirname(existing);
+      }
+    }
+    const canonical = resolve(realpathSync(existing), ...suffix);
+    return within2(canonical, binding.cwd) && !within2(canonical, binding.privateRoot);
+  } catch {
+    return false;
+  }
+}
 
 export { activateNativeApprovalPolicy, allowsNativeApprovalPath, codexInstanceEnvironment, isNativeApprovalPolicyActive, managedCodexRegistryViolation, parseCodexCredential, parseCodexRefreshInput, parseCodexRefreshResult, prepareCodexInstance, prepareNativePolicy };
-//# sourceMappingURL=chunk-NWDSLXOX.js.map
-//# sourceMappingURL=chunk-NWDSLXOX.js.map
+//# sourceMappingURL=chunk-PHRNUTSG.js.map
+//# sourceMappingURL=chunk-PHRNUTSG.js.map