@songsid/agend 2.3.4-beta.5 → 2.3.5-alpha.2

package/dist/runtime-pane-link.d.ts

@@ -0,0 +1,40 @@
+import { type PaneHostDescriptor } from "./runtime-pane-private.js";
+import { type RuntimePaneSnapshot } from "./runtime-pane-protocol.js";
+import { type PaneMcpBody } from "./runtime-pane-mcp-protocol.js";
+export interface PaneLinkOptions {
+    directory: string;
+    server: string;
+    machineId: string;
+    online(): boolean;
+    maxAgents(): number;
+    epoch?(): string;
+    output?(snapshot: RuntimePaneSnapshot): void;
+    /** Transport loss only; retained CLI/process ownership is unchanged. */
+    disconnected?(): void;
+    mcp?(body: PaneMcpBody, current: () => boolean): Promise<unknown>;
+}
+export declare class RuntimePaneLink {
+    private socket;
+    readonly hostBootId: string;
+    private options;
+    private mcpPending;
+    private pending;
+    private timer;
+    private closed;
+    private cleanupOnly;
+    private readonly clientEpoch;
+    private constructor();
+    static open(options: PaneLinkOptions): Promise<RuntimePaneLink>;
+    /** Authenticated discovery seam; fixtures bind only private loopback services. */
+    static attach(descriptor: PaneHostDescriptor, options: Pick<PaneLinkOptions, "online" | "maxAgents" | "output" | "epoch" | "mcp" | "disconnected">): Promise<RuntimePaneLink>;
+    private mcpReply;
+    connectionChanged(): void;
+    private epoch;
+    private lease;
+    request(raw: unknown, current?: () => boolean): Promise<unknown>;
+    connected(): boolean;
+    private closePending;
+    /** An authenticated explicit machine revocation retires only this enrollment's owned panes. A disconnect never does. */
+    retireOwned(): Promise<void>;
+    stop(): Promise<void>;
+}

package/dist/runtime-pane-link.js

@@ -0,0 +1,246 @@
+/** Private authenticated link to a persistent host. Closing the runtime client never closes its CLI panes. */
+import WebSocket from "ws";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { randomUUID } from "node:crypto";
+import { spawn } from "./child-process.js";
+import { readPaneSystemBootId } from "./runtime-pane-boot.js";
+import { nativeCliEnvironment } from "./windows-cli-worker.js";
+import { runtimeJobDigest } from "./runtime-client-store.js";
+import { protectPaneDirectory, readPaneHostDescriptor } from "./runtime-pane-private.js";
+import { validateRuntimePaneRequest, validateRuntimePaneSnapshot, validateRuntimePaneShutdown } from "./runtime-pane-protocol.js";
+import { validatePaneMcpBody } from "./runtime-pane-mcp-protocol.js";
+export class RuntimePaneLink {
+    socket;
+    hostBootId;
+    options;
+    mcpPending = 0;
+    pending = new Map();
+    timer;
+    closed = false;
+    cleanupOnly = false;
+    clientEpoch = randomUUID();
+    constructor(socket, hostBootId, options) {
+        this.socket = socket;
+        this.hostBootId = hostBootId;
+        this.options = options;
+    }
+    static async open(options) {
+        if (process.platform !== "win32")
+            throw Error("Persistent pane host requires Windows Node");
+        const directory = join(options.directory, "pane-host");
+        await protectPaneDirectory(directory);
+        const scope = runtimeJobDigest({ server: options.server, machineId: options.machineId });
+        let descriptor = readPaneHostDescriptor(directory, scope);
+        const systemBootId = await readPaneSystemBootId();
+        let live = false;
+        if (descriptor && !(descriptor.systemBootId && systemBootId && descriptor.systemBootId !== systemBootId)) {
+            live = true;
+            try {
+                process.kill(descriptor.pid, 0);
+            }
+            catch (error) {
+                if (error.code === "ESRCH")
+                    live = false;
+            }
+        }
+        if (!live) {
+            const child = spawn(process.execPath, [fileURLToPath(new URL("./runtime-pane-service.js", import.meta.url)), directory, scope], {
+                detached: true, windowsHide: true, stdio: "ignore", shell: false, env: nativeCliEnvironment(),
+            });
+            let failed = false;
+            child.on("error", () => { failed = true; });
+            child.unref();
+            const deadline = performance.now() + 120_000;
+            const prior = descriptor?.hostBootId;
+            for (;;) {
+                if (failed || child.exitCode !== null)
+                    throw Error("Pane host startup was not confirmed");
+                descriptor = readPaneHostDescriptor(directory, scope);
+                if (descriptor && descriptor.hostBootId !== prior && descriptor.pid === child.pid)
+                    break;
+                if (performance.now() > deadline)
+                    throw Error("Pane host startup deadline; its state is retained for inspection");
+                await new Promise(done => setTimeout(done, 50));
+            }
+        }
+        if (!descriptor)
+            throw Error("Pane host descriptor is unavailable");
+        // A live descriptor which cannot authenticate is held, never replaced by another host.
+        return this.attach(descriptor, options);
+    }
+    /** Authenticated discovery seam; fixtures bind only private loopback services. */
+    static attach(descriptor, options) {
+        return new Promise((resolve, reject) => {
+            const socket = new WebSocket(`ws://127.0.0.1:${descriptor.port}/pane/v1`, { headers: { Authorization: `Bearer ${descriptor.token}` },
+                handshakeTimeout: 10_000, maxPayload: 256 * 1024, followRedirects: false, perMessageDeflate: false });
+            const link = new RuntimePaneLink(socket, descriptor.hostBootId, options);
+            let ready = false;
+            const deadline = setTimeout(() => { socket.terminate(); reject(Error("Pane host authentication deadline")); }, 10_000);
+            socket.on("error", () => { });
+            socket.on("close", () => { clearTimeout(deadline); link.closePending(); if (!ready)
+                reject(Error("Pane host attachment is unconfirmed")); });
+            socket.on("message", (bytes, binary) => {
+                try {
+                    if (binary)
+                        throw Error("Binary pane frame");
+                    const value = JSON.parse(bytes.toString());
+                    if (!ready) {
+                        if (value?.type !== "hello" || value.hostBootId !== descriptor.hostBootId)
+                            throw Error("Pane host boot changed");
+                        ready = true;
+                        clearTimeout(deadline);
+                        link.lease();
+                        link.timer = setInterval(() => link.lease(), 5000);
+                        link.timer.unref();
+                        resolve(link);
+                        return;
+                    }
+                    if (value?.type === "mcp.request") {
+                        if (Object.keys(value).some(key => !["type", "id", "epoch", "body"].includes(key)) || !/^[a-f0-9-]{36}$/i.test(value.id) || value.epoch !== link.epoch())
+                            throw Error("Invalid pane MCP frame");
+                        const body = validatePaneMcpBody(value.body), epoch = value.epoch;
+                        const current = () => !link.closed && !link.cleanupOnly && socket.readyState === WebSocket.OPEN && options.online() && link.epoch() === epoch;
+                        if (link.mcpPending >= 32)
+                            throw Error("Pane MCP transport backlog");
+                        link.mcpPending++;
+                        void (async () => {
+                            try {
+                                if (!current() || !options.mcp)
+                                    throw Error("Pane MCP lease unavailable");
+                                const result = await options.mcp(body, current);
+                                if (current())
+                                    link.mcpReply(value.id, epoch, true, result);
+                            }
+                            catch {
+                                if (current())
+                                    link.mcpReply(value.id, epoch, false);
+                            }
+                            finally {
+                                link.mcpPending--;
+                            }
+                        })();
+                        return;
+                    }
+                    if (value?.type === "output") {
+                        options.output?.(validateRuntimePaneSnapshot(value.snapshot));
+                        return;
+                    }
+                    if (value?.type !== "response" || typeof value.id !== "string" || typeof value.ok !== "boolean")
+                        throw Error("Invalid pane reply");
+                    const pending = link.pending.get(value.id);
+                    if (!pending)
+                        return;
+                    link.pending.delete(value.id);
+                    clearTimeout(pending.timer);
+                    if (value.ok)
+                        pending.resolve(value.result);
+                    else
+                        pending.reject(Error("Pane host refused operation; inspect its owned snapshot"));
+                }
+                catch {
+                    socket.close(1008, "Invalid pane host frame");
+                }
+            });
+        });
+    }
+    mcpReply(id, epoch, ok, result) {
+        const frame = JSON.stringify({ type: "mcp.result", id, epoch, ok, ...(ok ? { result } : {}) });
+        if (Buffer.byteLength(frame) > 256 * 1024 || this.socket.bufferedAmount > 256 * 1024) {
+            this.socket.terminate();
+            return;
+        }
+        this.socket.send(frame);
+    }
+    connectionChanged() { this.lease(); }
+    epoch() { return this.options.epoch?.() ?? this.clientEpoch; }
+    lease() {
+        if (this.socket.readyState !== WebSocket.OPEN || this.closed)
+            return;
+        const maxAgents = this.options.maxAgents();
+        if (!Number.isInteger(maxAgents) || maxAgents < 1 || maxAgents > 16) {
+            this.socket.close(1008, "Invalid machine limit");
+            return;
+        }
+        this.socket.send(JSON.stringify({ type: "lease", epoch: this.epoch(), online: this.cleanupOnly || this.options.online(), maxAgents }));
+    }
+    request(raw, current = () => true) {
+        const request = validateRuntimePaneRequest(raw);
+        if (this.cleanupOnly && !["list", "snapshot", "close", "shutdown"].includes(request.action))
+            return Promise.reject(Error("Pane link only permits owned retirement"));
+        if (!current() || this.closed || this.socket.readyState !== WebSocket.OPEN || !(this.cleanupOnly || this.options.online()))
+            return Promise.reject(Error("Pane client is disconnected"));
+        if (this.pending.size >= 64 || this.socket.bufferedAmount > 256 * 1024)
+            return Promise.reject(Error("Pane client backpressure limit"));
+        this.lease();
+        const id = randomUUID();
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => { this.pending.delete(id); reject(Error("Pane result unconfirmed; no input is replayed")); }, 125_000);
+            timer.unref();
+            this.pending.set(id, { resolve, reject, timer });
+            this.socket.send(JSON.stringify({ type: "request", id, epoch: this.epoch(), request }), error => {
+                if (!error)
+                    return;
+                const pending = this.pending.get(id);
+                if (pending) {
+                    clearTimeout(timer);
+                    this.pending.delete(id);
+                    reject(Error("Pane result unconfirmed"));
+                }
+            });
+        });
+    }
+    connected() { return !this.closed && this.socket.readyState === WebSocket.OPEN; }
+    closePending() {
+        if (this.closed)
+            return;
+        this.closed = true;
+        clearInterval(this.timer);
+        for (const pending of this.pending.values()) {
+            clearTimeout(pending.timer);
+            pending.reject(Error("Pane connection closed; terminal ownership is retained"));
+        }
+        this.pending.clear();
+        try {
+            this.options.disconnected?.();
+        }
+        catch { /* cleanup observers cannot change retained ownership */ }
+    }
+    /** An authenticated explicit machine revocation retires only this enrollment's owned panes. A disconnect never does. */
+    async retireOwned() {
+        this.cleanupOnly = true;
+        const deadline = performance.now() + 125_000;
+        const request = (value) => {
+            const remaining = deadline - performance.now();
+            if (remaining <= 0)
+                return Promise.reject(Error("Owned pane retirement deadline"));
+            return new Promise((resolve, reject) => { const timer = setTimeout(() => reject(Error("Owned pane retirement deadline")), remaining); timer.unref(); this.request(value).then(result => { clearTimeout(timer); resolve(result); }, error => { clearTimeout(timer); reject(error); }); });
+        };
+        const inventory = await request({ action: "list" });
+        if (inventory?.hostBootId !== this.hostBootId || !Array.isArray(inventory.panes) || inventory.panes.length > 4096)
+            throw Error("Owned pane inventory is unconfirmed");
+        const panes = inventory.panes.map(validateRuntimePaneSnapshot);
+        if (new Set(panes.map(pane => pane.paneId)).size !== panes.length)
+            throw Error("Owned pane inventory contains duplicate identities");
+        // Retire positively observed running Jobs before encountering old unknown reservations.
+        panes.sort((a, b) => Number(b.state === "running") - Number(a.state === "running"));
+        for (const pane of panes) {
+            if (pane.state === "exited")
+                continue;
+            if (pane.hostBootId !== this.hostBootId)
+                throw Error("Owned pane host changed");
+            const current = validateRuntimePaneSnapshot(await request({ action: "snapshot", paneId: pane.paneId, launchId: pane.launchId }));
+            if (current.hostBootId !== this.hostBootId || current.paneId !== pane.paneId || current.launchId !== pane.launchId || current.agentId !== pane.agentId || current.instance !== pane.instance)
+                throw Error("Owned pane retirement identity changed");
+            if (current.state === "exited")
+                continue;
+            const exited = validateRuntimePaneSnapshot(await request({ action: "close", paneId: current.paneId, launchId: current.launchId, sequence: current.commandSequence + 1, operationId: randomUUID() }));
+            if (exited.hostBootId !== this.hostBootId || exited.paneId !== pane.paneId || exited.launchId !== pane.launchId || exited.agentId !== pane.agentId || exited.instance !== pane.instance || exited.state !== "exited")
+                throw Error("Owned pane retirement exit is unconfirmed");
+        }
+        // Only explicit disable/revoke calls retireOwned. A transport/coordinator restart merely detaches via stop().
+        validateRuntimePaneShutdown(await request({ action: "shutdown", hostBootId: this.hostBootId }), this.hostBootId);
+    }
+    async stop() { this.closePending(); this.socket.terminate(); }
+}
+//# sourceMappingURL=runtime-pane-link.js.map

package/dist/runtime-pane-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-pane-link.js","sourceRoot":"","sources":["../src/runtime-pane-link.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,OAAO,SAAS,MAAM,IAAI,CAAC;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAA2B,MAAM,2BAA2B,CAAC;AAClH,OAAO,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,2BAA2B,EAA4B,MAAM,4BAA4B,CAAC;AAE5J,OAAO,EAAE,mBAAmB,EAAoB,MAAM,gCAAgC,CAAC;AAcvF,MAAM,OAAO,eAAe;IAOE,MAAM;IAAsB,UAAU;IAAkB,OAAO;IANnF,UAAU,GAAG,CAAC,CAAC;IACf,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IACrC,KAAK,CAA6C;IAClD,MAAM,GAAG,KAAK,CAAC;IACf,WAAW,GAAC,KAAK,CAAC;IACT,WAAW,GAAG,UAAU,EAAE,CAAC;IAC5C,YAA4B,MAAiB,EAAW,UAAkB,EAAU,OAAoG;sBAA5J,MAAM;0BAAsB,UAAU;uBAAkB,OAAO;IAAgG,CAAC;IAC5L,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAwB;QACxC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACzF,IAAI,UAAU,GAAG,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,MAAM,oBAAoB,EAAE,CAAC;QAClD,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,YAAY,IAAI,YAAY,IAAI,UAAU,CAAC,YAAY,KAAK,YAAY,CAAC,EAAE,CAAC;YACzG,IAAI,GAAG,IAAI,CAAC;YACZ,IAAI,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO;oBAAE,IAAI,GAAG,KAAK,CAAC;YAAC,CAAC;QACjI,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,2BAA2B,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE;gBAC9H,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,oBAAoB,EAAE;aAC9F,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,KAAK,CAAC;YAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/E,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YAC7C,MAAM,KAAK,GAAG,UAAU,EAAE,UAAU,CAAC;YACrC,SAAS,CAAC;gBACR,IAAI,MAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;oBAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBAC1F,UAAU,GAAG,sBAAsB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBACtD,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;oBAAE,MAAM;gBACzF,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ;oBAAE,MAAM,KAAK,CAAC,kEAAkE,CAAC,CAAC;gBAClH,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU;YAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACpE,uFAAuF;QACvF,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,kFAAkF;IAClF,MAAM,CAAC,MAAM,CAAC,UAA8B,EAAE,OAAoG;QAChJ,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,kBAAkB,UAAU,CAAC,IAAI,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,UAAU,CAAC,KAAK,EAAE,EAAE;gBAClI,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;YACxG,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACzE,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACvH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7I,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrC,IAAI,CAAC;oBACH,IAAI,MAAM;wBAAE,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;oBAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;wBACX,IAAI,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU;4BAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;wBACjH,KAAK,GAAG,IAAI,CAAC;wBAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;wBAAC,IAAI,CAAC,KAAK,EAAE,CAAC;wBAAC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;wBAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBAAC,OAAO;oBACpJ,CAAC;oBACD,IAAI,KAAK,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;wBAClC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE;4BAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;wBAChM,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;wBAClE,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,KAAK,KAAK,CAAC;wBACvJ,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE;4BAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;wBACrE,IAAI,CAAC,UAAU,EAAE,CAAC;wBAClB,KAAK,CAAC,KAAK,IAAI,EAAE;4BACf,IAAI,CAAC;gCACH,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;oCAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;gCAC1E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gCAChD,IAAI,OAAO,EAAE;oCAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;4BAC9D,CAAC;4BAAC,MAAM,CAAC;gCAAC,IAAI,OAAO,EAAE;oCAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;4BAAC,CAAC;oCACzD,CAAC;gCAAC,IAAI,CAAC,UAAU,EAAE,CAAC;4BAAC,CAAC;wBAChC,CAAC,CAAC,EAAE,CAAC;wBACL,OAAO;oBACT,CAAC;oBACD,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAAC,OAAO,CAAC,MAAM,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;wBAAC,OAAO;oBAAC,CAAC;oBACxG,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,SAAS;wBAAE,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBACnI,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAAC,IAAI,CAAC,OAAO;wBAAE,OAAO;oBACjE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC3D,IAAI,KAAK,CAAC,EAAE;wBAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;;wBAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,CAAC,CAAC,CAAC;gBACrI,CAAC;gBAAC,MAAM,CAAC;oBAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;gBAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACO,QAAQ,CAAC,EAAU,EAAE,KAAa,EAAE,EAAW,EAAE,MAAgB;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/F,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC1H,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,iBAAiB,KAAW,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACnC,KAAK,KAAa,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACtE,KAAK;QACX,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACrE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAClI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,CAAC,GAAY,EAAE,OAAO,GAAkB,GAAG,EAAE,CAAC,IAAI;QACvD,MAAM,OAAO,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;QAChD,IAAG,IAAI,CAAC,WAAW,IAAE,CAAC,CAAC,MAAM,EAAC,UAAU,EAAC,OAAO,EAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC,CAAC;QAC9J,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;QACxL,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,GAAG,GAAG,IAAI;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;QACvI,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACrJ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE;gBAC9F,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAC,IAAI,OAAO,EAAE,CAAC;oBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;gBAAC,CAAC;YAChJ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IACD,SAAS,KAAc,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClF,YAAY;QAClB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC,CAAC;QAAC,CAAC;QAC9J,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,wDAAwD,CAAC,CAAC;IAC3G,CAAC;IACD,wHAAwH;IACxH,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,WAAW,GAAC,IAAI,CAAC;QACtB,MAAM,QAAQ,GAAC,WAAW,CAAC,GAAG,EAAE,GAAC,OAAO,CAAC;QACzC,MAAM,OAAO,GAAC,CAAC,KAAa,EAAkB,EAAE;YAC9C,MAAM,SAAS,GAAC,QAAQ,GAAC,WAAW,CAAC,GAAG,EAAE,CAAC;YAAA,IAAG,SAAS,IAAE,CAAC;gBAAC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YAC1H,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE,GAAC,MAAM,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,EAAC,SAAS,CAAC,CAAC,CAAA,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAA,EAAE,GAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA,CAAC,EAAC,KAAK,CAAA,EAAE,GAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;QACpQ,CAAC,CAAC;QACF,MAAM,SAAS,GAAC,MAAM,OAAO,CAAC,EAAC,MAAM,EAAC,MAAM,EAAC,CAAyC,CAAC;QACvF,IAAG,SAAS,EAAE,UAAU,KAAG,IAAI,CAAC,UAAU,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,IAAE,SAAS,CAAC,KAAK,CAAC,MAAM,GAAC,IAAI;YAAC,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC5J,MAAM,KAAK,GAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QAC7D,IAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAG,KAAK,CAAC,MAAM;YAAC,MAAM,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC/H,wFAAwF;QACxF,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,MAAM,CAAC,CAAC,CAAC,KAAK,KAAG,SAAS,CAAC,GAAC,MAAM,CAAC,CAAC,CAAC,KAAK,KAAG,SAAS,CAAC,CAAC,CAAC;QAC3E,KAAI,MAAM,IAAI,IAAI,KAAK,EAAC,CAAC;YAAA,IAAG,IAAI,CAAC,KAAK,KAAG,QAAQ;gBAAC,SAAS;YAAA,IAAG,IAAI,CAAC,UAAU,KAAG,IAAI,CAAC,UAAU;gBAAC,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACrI,MAAM,OAAO,GAAC,2BAA2B,CAAC,MAAM,OAAO,CAAC,EAAC,MAAM,EAAC,UAAU,EAAC,MAAM,EAAC,IAAI,CAAC,MAAM,EAAC,QAAQ,EAAC,IAAI,CAAC,QAAQ,EAAC,CAAC,CAAC,CAAC;YACxH,IAAG,OAAO,CAAC,UAAU,KAAG,IAAI,CAAC,UAAU,IAAE,OAAO,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,OAAO,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAE,OAAO,CAAC,OAAO,KAAG,IAAI,CAAC,OAAO,IAAE,OAAO,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ;gBAAC,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAChO,IAAG,OAAO,CAAC,KAAK,KAAG,QAAQ;gBAAC,SAAS;YACrC,MAAM,MAAM,GAAC,2BAA2B,CAAC,MAAM,OAAO,CAAC,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,QAAQ,EAAC,OAAO,CAAC,eAAe,GAAC,CAAC,EAAC,WAAW,EAAC,UAAU,EAAE,EAAC,CAAC,CAAC,CAAC;YACtL,IAAG,MAAM,CAAC,UAAU,KAAG,IAAI,CAAC,UAAU,IAAE,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,MAAM,IAAE,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAE,MAAM,CAAC,OAAO,KAAG,IAAI,CAAC,OAAO,IAAE,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAE,MAAM,CAAC,KAAK,KAAG,QAAQ;gBAAC,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACzP,CAAC;QACD,8GAA8G;QAC9G,2BAA2B,CAAC,MAAM,OAAO,CAAC,EAAC,MAAM,EAAC,UAAU,EAAC,UAAU,EAAC,IAAI,CAAC,UAAU,EAAC,CAAC,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7G,CAAC;IACD,KAAK,CAAC,IAAI,KAAoB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;CAC9E"}

package/dist/runtime-pane-mcp-protocol.d.ts

@@ -0,0 +1,32 @@
+export interface PaneMcpOwner {
+    hostBootId: string;
+    paneId: string;
+    launchId: string;
+    agentId: string;
+    instance: string;
+}
+export type PaneMcpBody = {
+    op: "pane-mcp";
+    owner: PaneMcpOwner;
+    helperId: string;
+} & ({
+    method: "tools/list";
+    params: Record<string, never>;
+} | {
+    method: "presence";
+    params: Record<string, never>;
+} | {
+    method: "tools/call";
+    callId: string;
+    params: {
+        name: string;
+        arguments: Record<string, unknown>;
+    };
+} | {
+    method: "response-written";
+    callId: string;
+    responseId: string;
+});
+export declare function validatePaneMcpOwner(value: unknown): PaneMcpOwner;
+export declare function validatePaneMcpBody(value: unknown): PaneMcpBody;
+export declare function samePaneMcpOwner(a: PaneMcpOwner, b: PaneMcpOwner): boolean;

package/dist/runtime-pane-mcp-protocol.js

@@ -0,0 +1,39 @@
+/** Provider-independent persistent pane MCP identity, separate from per-turn exec grants. */
+import { validWindowsAgentId } from "./windows-cli-worker.js";
+function object(value) { return !!value && typeof value === "object" && !Array.isArray(value); }
+export function validatePaneMcpOwner(value) {
+    if (!object(value) || Object.keys(value).some(key => !["hostBootId", "paneId", "launchId", "agentId", "instance"].includes(key))
+        || ![value.hostBootId, value.paneId, value.launchId, value.agentId].every(validWindowsAgentId)
+        || typeof value.instance !== "string" || !/^[\p{L}\p{N}_.-]{1,160}$/u.test(value.instance))
+        throw Error("Invalid pane MCP owner");
+    return value;
+}
+export function validatePaneMcpBody(value) {
+    if (!object(value) || value.op !== "pane-mcp" || !validWindowsAgentId(value.helperId)
+        || Buffer.byteLength(JSON.stringify(value)) > 64 * 1024)
+        throw Error("Invalid pane MCP request");
+    validatePaneMcpOwner(value.owner);
+    const common = ["op", "owner", "helperId", "method"];
+    if (value.method === "tools/list" || value.method === "presence") {
+        if (Object.keys(value).some(key => ![...common, "params"].includes(key)) || !object(value.params) || Object.keys(value.params).length)
+            throw Error("Invalid pane MCP menu request");
+    }
+    else if (value.method === "tools/call") {
+        if (Object.keys(value).some(key => ![...common, "callId", "params"].includes(key)) || typeof value.callId !== "string" || !/^[a-f0-9]{64}$/.test(value.callId)
+            || !object(value.params) || Object.keys(value.params).some(key => !["name", "arguments"].includes(key)) || typeof value.params.name !== "string"
+            || !/^[a-z][a-z0-9_]{0,63}$/.test(value.params.name) || !object(value.params.arguments))
+            throw Error("Invalid pane MCP tool call");
+    }
+    else if (value.method === "response-written") {
+        if (Object.keys(value).some(key => ![...common, "callId", "responseId"].includes(key)) || typeof value.callId !== "string" || !/^[a-f0-9]{64}$/.test(value.callId)
+            || typeof value.responseId !== "string" || !/^[a-f0-9]{64}$/.test(value.responseId))
+            throw Error("Invalid pane MCP response receipt");
+    }
+    else
+        throw Error("Unsupported pane MCP method");
+    return value;
+}
+export function samePaneMcpOwner(a, b) {
+    return a.hostBootId === b.hostBootId && a.paneId === b.paneId && a.launchId === b.launchId && a.agentId === b.agentId && a.instance === b.instance;
+}
+//# sourceMappingURL=runtime-pane-mcp-protocol.js.map

package/dist/runtime-pane-mcp-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-pane-mcp-protocol.js","sourceRoot":"","sources":["../src/runtime-pane-mcp-protocol.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAQ9D,SAAS,MAAM,CAAC,KAAc,IAAsC,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3I,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;WAC3H,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;WAC3F,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACpI,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC;WAChF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI;QAAE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACnG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACjE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtL,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACzC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;eACzJ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;eAC7I,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACvI,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;eAC7J,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC1I,CAAC;;QAAM,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAClD,OAAO,KAA+B,CAAC;AACzC,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,CAAe,EAAE,CAAe;IAC/D,OAAO,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC;AACrJ,CAAC"}

package/dist/runtime-pane-mcp-relay.d.ts

@@ -0,0 +1,17 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import { type PaneMcpBody, type PaneMcpOwner } from "./runtime-pane-mcp-protocol.js";
+import type { PaneMcpConnection } from "./windows-pane-mcp.js";
+export interface PaneMcpRelayOptions {
+    secret: string;
+    endpoint(): string;
+    owned(owner: PaneMcpOwner): boolean;
+    forward(body: PaneMcpBody, current: () => boolean): Promise<unknown>;
+}
+export declare class PaneMcpRelay {
+    private options;
+    private pending;
+    constructor(options: PaneMcpRelayOptions);
+    private token;
+    connection(owner: PaneMcpOwner, tools: string[]): PaneMcpConnection;
+    handle(req: IncomingMessage, res: ServerResponse): Promise<void>;
+}

package/dist/runtime-pane-mcp-relay.js

@@ -0,0 +1,70 @@
+/** Local pane-scoped MCP endpoint. The CLI never receives the host or enrollment credential. */
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { validatePaneMcpBody, validatePaneMcpOwner } from "./runtime-pane-mcp-protocol.js";
+function key(owner) { return JSON.stringify([owner.hostBootId, owner.paneId, owner.launchId, owner.agentId, owner.instance]); }
+export class PaneMcpRelay {
+    options;
+    pending = 0;
+    constructor(options) {
+        this.options = options;
+    }
+    token(owner) { return createHmac("sha256", this.options.secret).update(key(owner)).digest("hex"); }
+    connection(owner, tools) {
+        validatePaneMcpOwner(owner);
+        if (!this.options.owned(owner))
+            throw Error("Pane MCP owner is unavailable");
+        return { endpoint: this.options.endpoint(), token: this.token(owner), owner: { ...owner }, tools: [...tools] };
+    }
+    async handle(req, res) {
+        const answer = (status, value) => {
+            if (res.destroyed || res.writableEnded)
+                return;
+            const text = JSON.stringify(value);
+            if (Buffer.byteLength(text) > 192 * 1024) {
+                res.writeHead(503);
+                res.end();
+                return;
+            }
+            res.writeHead(status, { "Content-Type": "application/json", "Cache-Control": "no-store" });
+            res.end(text);
+        };
+        if (req.method !== "POST" || req.url !== "/agent" || req.headers.origin !== undefined || req.headers.cookie !== undefined
+            || !["127.0.0.1", "::1", "::ffff:127.0.0.1"].includes(req.socket.remoteAddress ?? "")
+            || typeof req.headers["x-agend-native-token"] !== "string" || !/^[a-f0-9]{64}$/.test(req.headers["x-agend-native-token"])
+            || this.pending >= 32) {
+            answer(403, { error: "Pane MCP scope is unavailable" });
+            req.resume();
+            return;
+        }
+        this.pending++;
+        try {
+            const chunks = [];
+            let size = 0;
+            req.setTimeout(10_000, () => req.destroy());
+            for await (const part of req) {
+                const chunk = Buffer.isBuffer(part) ? part : Buffer.from(part);
+                size += chunk.length;
+                if (size > 64 * 1024)
+                    throw Error("Pane MCP request limit");
+                chunks.push(chunk);
+            }
+            req.setTimeout(0);
+            const body = validatePaneMcpBody(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks))));
+            const supplied = req.headers["x-agend-native-token"];
+            if (!timingSafeEqual(Buffer.from(supplied), Buffer.from(this.token(body.owner))) || !this.options.owned(body.owner))
+                throw Error("Pane MCP scope is unavailable");
+            const current = () => !res.destroyed && !res.writableEnded && this.options.owned(body.owner);
+            const result = await this.options.forward(body, current);
+            if (!current())
+                throw Error("Pane MCP lease expired");
+            answer(200, result);
+        }
+        catch {
+            answer(403, { error: "Pane MCP request was refused or is unconfirmed; it was not replayed" });
+        }
+        finally {
+            this.pending--;
+        }
+    }
+}
+//# sourceMappingURL=runtime-pane-mcp-relay.js.map

package/dist/runtime-pane-mcp-relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-pane-mcp-relay.js","sourceRoot":"","sources":["../src/runtime-pane-mcp-relay.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAuC,MAAM,gCAAgC,CAAC;AAQhI,SAAS,GAAG,CAAC,KAAmB,IAAY,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACrJ,MAAM,OAAO,YAAY;IAEH,OAAO;IADnB,OAAO,GAAG,CAAC,CAAC;IACpB,YAAoB,OAA4B;uBAA5B,OAAO;IAAwB,CAAC;IAC5C,KAAK,CAAC,KAAmB,IAAY,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjI,UAAU,CAAC,KAAmB,EAAE,KAAe;QAC7C,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC7E,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;IACjH,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,GAAoB,EAAE,GAAmB;QACpD,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,KAAc,EAAQ,EAAE;YACtD,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa;gBAAE,OAAO;YAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;gBAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACpF,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5G,CAAC,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;eACpH,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;eAClF,OAAO,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;eACtH,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;YAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC3G,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAa,EAAE,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YAC1C,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5C,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/D,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBAAC,IAAI,IAAI,GAAG,EAAE,GAAG,IAAI;oBAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxG,CAAC;YACD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAClB,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACtH,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAW,CAAC;YAC/D,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAClK,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACzD,IAAI,CAAC,OAAO,EAAE;gBAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACtD,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,qEAAqE,EAAE,CAAC,CAAC;QAAC,CAAC;gBAClG,CAAC;YAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC7B,CAAC;CACF"}

package/dist/runtime-pane-mcp.d.ts

@@ -0,0 +1,43 @@
+import { type PaneMcpOwner } from "./runtime-pane-mcp-protocol.js";
+interface ToolMenu {
+    name: string;
+    [key: string]: unknown;
+}
+export interface PaneMcpAuthority {
+    machineId: string;
+    owner: PaneMcpOwner;
+    /** Bound to the daemon/launch identity and dynamic config; never a cached permission set. */
+    current(): boolean;
+    menu(): ToolMenu[];
+    allowed(tool: string, args: Record<string, unknown>): boolean;
+    invoke(input: {
+        tool: string;
+        args: Record<string, unknown>;
+        operationId: string;
+    }, current: () => boolean): Promise<{
+        result: unknown;
+        error?: string;
+    }>;
+    responseWritten(operationId: string): void;
+    /** Stable authenticated connection generation, distinct from one RPC's short-lived current() fence. */
+    transportEpoch?(): string | null;
+}
+/** One ledger per exact pane launch; no plaintext arguments, result, provider credential or user input is persisted. */
+export declare class PaneMcpAuthorityLease {
+    private file;
+    readonly authority: PaneMcpAuthority;
+    private ledger;
+    private closed;
+    private readonly inFlight;
+    private readonly results;
+    private presence;
+    constructor(file: string, authority: PaneMcpAuthority);
+    close(): void;
+    /** A retained helper must re-prove itself on the current transport after reconnect. No PID guessing. */
+    serving(): boolean;
+    private current;
+    private save;
+    private key;
+    handle(machineId: string, raw: unknown, transport: () => boolean): Promise<unknown>;
+}
+export {};