@songsid/agend 2.3.4-beta.6 → 2.3.5-alpha.2

package/dist/runtime-pane-mcp.js

@@ -0,0 +1,137 @@
+/** Coordinator authority for a persistent pane. Durable call identities survive reconnects without replaying tools. */
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { lstatSync, readFileSync } from "node:fs";
+import { atomicWriteFileSync } from "./atomic-write.js";
+import { runtimeJobDigest } from "./runtime-client-store.js";
+import { validatePaneMcpBody, validatePaneMcpOwner, samePaneMcpOwner } from "./runtime-pane-mcp-protocol.js";
+import { OUTBOUND_TOOL_SCHEMAS } from "./channel/mcp-tools.js";
+const errorResult = (text) => ({ content: [{ type: "text", text }], isError: true });
+/** One ledger per exact pane launch; no plaintext arguments, result, provider credential or user input is persisted. */
+export class PaneMcpAuthorityLease {
+    file;
+    authority;
+    ledger;
+    closed = false;
+    inFlight = new Map();
+    results = new Map();
+    presence;
+    constructor(file, authority) {
+        this.file = file;
+        this.authority = authority;
+        validatePaneMcpOwner(authority.owner);
+        this.ledger = { version: 1, machineId: authority.machineId, owner: { ...authority.owner }, calls: {} };
+        try {
+            const stat = lstatSync(file);
+            if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 16 * 1024 * 1024 || process.getuid && (stat.uid !== process.getuid() || stat.mode & 0o077))
+                throw Error("Unsafe pane tool ledger");
+            const raw = JSON.parse(readFileSync(file, "utf8"));
+            if (raw?.version !== 1 || raw.machineId !== authority.machineId || !samePaneMcpOwner(validatePaneMcpOwner(raw.owner), authority.owner)
+                || !raw.calls || typeof raw.calls !== "object" || Array.isArray(raw.calls) || Object.keys(raw.calls).length > 65_536
+                || Object.entries(raw.calls).some(([key, row]) => !/^[a-f0-9]{64}$/.test(key) || !row || !/^[a-f0-9]{64}$/.test(row.digest)
+                    || !/^[a-f0-9]{64}$/.test(row.responseId) || !/^[a-f0-9-]{36}$/i.test(row.operationId) || !["prepared", "done", "written"].includes(row.state)))
+                throw Error("Pane tool ledger scope differs");
+            this.ledger = raw;
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+    }
+    close() { this.closed = true; this.results.clear(); this.presence = undefined; }
+    /** A retained helper must re-prove itself on the current transport after reconnect. No PID guessing. */
+    serving() {
+        const presence = this.presence;
+        return !!presence && performance.now() - presence.at < 15_000 && !this.closed && this.authority.current()
+            && this.authority.transportEpoch?.() === presence.epoch;
+    }
+    current(transport) { return !this.closed && transport() && this.authority.current(); }
+    save() { atomicWriteFileSync(this.file, JSON.stringify(this.ledger), { mode: 0o600 }); }
+    key(body) {
+        return createHash("sha256").update(JSON.stringify([body.helperId, body.callId])).digest("hex");
+    }
+    async handle(machineId, raw, transport) {
+        const body = validatePaneMcpBody(raw);
+        const current = () => this.current(transport);
+        if (machineId !== this.authority.machineId || !samePaneMcpOwner(body.owner, this.authority.owner) || !current())
+            throw Error("Pane tool owner is no longer current");
+        if (body.method === "presence") {
+            const epoch = this.authority.transportEpoch?.();
+            if (!epoch)
+                throw Error("Pane helper transport identity is unavailable");
+            this.presence = { at: performance.now(), epoch };
+            return { result: { ok: true } };
+        }
+        if (body.method === "tools/list")
+            return { result: { tools: this.authority.menu() } };
+        const key = this.key(body), previous = this.ledger.calls[key];
+        if (body.method === "response-written") {
+            if (!previous || previous.state === "prepared" || previous.responseId !== body.responseId)
+                throw Error("Pane tool response receipt differs");
+            if (previous.state !== "written") {
+                previous.state = "written";
+                this.save();
+                // ACK is already written durably before delivery evidence is published. Replays can never dispatch a tool.
+                this.authority.responseWritten(previous.operationId);
+            }
+            this.results.delete(key);
+            return { result: { ok: true } };
+        }
+        const { name: tool, arguments: args } = body.params;
+        if (!this.authority.allowed(tool, args))
+            throw Error("Pane tool access was revoked");
+        const parsed = OUTBOUND_TOOL_SCHEMAS.get(tool)?.safeParse(args);
+        if (!parsed?.success)
+            return { result: errorResult("Invalid tool arguments") };
+        const checked = parsed.data, digest = runtimeJobDigest({ tool, args: checked });
+        if (previous && previous.digest !== digest)
+            throw Error("Pane tool identity has different arguments");
+        if (previous) {
+            if (this.inFlight.has(key))
+                return this.inFlight.get(key);
+            if (this.results.has(key))
+                return { result: this.results.get(key), responseId: previous.responseId };
+            // A restart or acknowledged call retains its identity, never replays a mutation to manufacture another result.
+            return { result: errorResult(`Tool outcome is retained and will not be repeated. Inspect operation ${previous.operationId}.`) };
+        }
+        if (this.inFlight.size >= 32 || this.results.size >= 64 || Object.keys(this.ledger.calls).length >= 65_536)
+            throw Error("Pane tool receipt backlog or ledger capacity reached");
+        const call = { digest, operationId: randomUUID(), responseId: randomBytes(32).toString("hex"), state: "prepared" };
+        this.ledger.calls[key] = call;
+        try {
+            this.save();
+        }
+        catch (error) {
+            delete this.ledger.calls[key];
+            throw error;
+        }
+        const allowed = () => current() && this.authority.allowed(tool, checked);
+        const run = Promise.resolve().then(async () => {
+            if (!allowed())
+                throw Error("Pane tool permission was revoked before dispatch");
+            let response;
+            try {
+                const value = await this.authority.invoke({ tool, args: checked, operationId: call.operationId }, allowed);
+                if (value.error)
+                    response = errorResult("AgEnD tool operation failed; inspect its operation before retrying");
+                else {
+                    const text = typeof value.result === "string" ? value.result : JSON.stringify(value.result);
+                    response = text === undefined ? errorResult("AgEnD returned no tool result") : { content: [{ type: "text", text }] };
+                    if (Buffer.byteLength(JSON.stringify(response)) > 128 * 1024)
+                        response = errorResult(`Tool result exceeds the pane response limit. Inspect operation ${call.operationId}; do not repeat an uncertain mutation.`);
+                }
+            }
+            catch {
+                response = errorResult(`Tool outcome is unconfirmed. Inspect operation ${call.operationId}; do not repeat it.`);
+            }
+            call.state = "done";
+            this.save();
+            this.results.set(key, response);
+            if (!allowed())
+                throw Error("Pane tool lease expired before returning its result");
+            return { result: response, responseId: call.responseId };
+        }).finally(() => { this.inFlight.delete(key); });
+        this.inFlight.set(key, run);
+        return run;
+    }
+}
+//# sourceMappingURL=runtime-pane-mcp.js.map

package/dist/runtime-pane-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-pane-mcp.js","sourceRoot":"","sources":["../src/runtime-pane-mcp.ts"],"names":[],"mappings":"AAAA,uHAAuH;AACvH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,gBAAgB,EAAuC,MAAM,gCAAgC,CAAC;AAClJ,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAgB/D,MAAM,WAAW,GAAG,CAAC,IAAY,EAA2B,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AACtH,wHAAwH;AACxH,MAAM,OAAO,qBAAqB;IAMZ,IAAI;IAAmB,SAAS;IAL5C,MAAM,CAAS;IACf,MAAM,GAAG,KAAK,CAAC;IACN,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC/C,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,QAAQ,CAA4C;IAC5D,YAAoB,IAAY,EAAW,SAA2B;oBAAlD,IAAI;yBAAmB,SAAS;QAClD,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QACvG,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC9L,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAW,CAAC;YAC7D,IAAI,GAAG,EAAE,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC;mBACjI,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,MAAM;mBACjH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;uBACtH,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACnM,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;IAC1F,CAAC;IACD,KAAK,KAAW,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC;IACtF,wGAAwG;IACxG,OAAO;QACL,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,OAAO,CAAC,CAAC,QAAQ,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;eACpG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,KAAK,QAAQ,CAAC,KAAK,CAAC;IAC5D,CAAC;IACO,OAAO,CAAC,SAAwB,IAAa,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9G,IAAI,KAAW,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9F,GAAG,CAAC,IAAyE;QACnF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjG,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,GAAY,EAAE,SAAwB;QACpE,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACrK,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC1H,IAAI,CAAC,QAAQ,GAAG,EAAE,EAAE,EAAE,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QACpF,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QACtF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;gBAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC7I,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBACjC,QAAQ,CAAC,KAAK,GAAG,SAAS,CAAC;gBAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACxC,2GAA2G;gBAC3G,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;QAClC,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,IAA+B,EAAE,MAAM,GAAG,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACtG,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YAC3D,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;YACrG,+GAA+G;YAC/G,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,wEAAwE,QAAQ,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QAClI,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,MAAM;YAAE,MAAM,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAChL,MAAM,IAAI,GAAS,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACzH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC9B,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAClF,MAAM,OAAO,GAAG,GAAY,EAAE,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClF,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC5C,IAAI,CAAC,OAAO,EAAE;gBAAE,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAChF,IAAI,QAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC3G,IAAI,KAAK,CAAC,KAAK;oBAAE,QAAQ,GAAG,WAAW,CAAC,oEAAoE,CAAC,CAAC;qBACzG,CAAC;oBACJ,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAC5F,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;oBACrH,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI;wBAAE,QAAQ,GAAG,WAAW,CAAC,kEAAkE,IAAI,CAAC,WAAW,wCAAwC,CAAC,CAAC;gBACnN,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBAAC,QAAQ,GAAG,WAAW,CAAC,kDAAkD,IAAI,CAAC,WAAW,qBAAqB,CAAC,CAAC;YAAC,CAAC;YAC5H,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;YAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,OAAO,EAAE;gBAAE,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACnF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3D,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/runtime-pane-native.d.ts

@@ -0,0 +1,45 @@
+/** Closed local helper protocol. It is never accepted from an unauthenticated network peer. */
+import type { PaneMcpConnection } from "./windows-pane-mcp.js";
+import type { NativePaneConfig } from "./runtime-pane-config.js";
+import type { RuntimePaneLaunch } from "./runtime-pane-protocol.js";
+/** Cache admission and the owned worker's final pre-spawn check share the same audited release set. */
+export declare function assertAuditedNativePaneVersion(provider: string, line: string | null): void;
+export interface NativePaneOwner {
+    directory: string;
+    launchId: string;
+    mcp?: PaneMcpConnection;
+}
+export type NativePaneCommand = {
+    type: "start";
+    launch: RuntimePaneLaunch;
+    owner: NativePaneOwner;
+} | {
+    type: "input";
+    data: string;
+} | {
+    type: "resize";
+    columns: number;
+    rows: number;
+} | {
+    type: "pause" | "resume" | "close";
+};
+export type NativePaneFrame = {
+    type: "ready";
+    pid: number;
+} | {
+    type: "output";
+    data: string;
+} | {
+    type: "exit" | "tree.exit";
+    code: number;
+} | {
+    type: "error";
+    message: string;
+};
+/** JSON's basic-string escapes are valid TOML; DEL needs an explicit escape and invalid Unicode is refused. */
+export declare function nativeDeveloperInstructions(text: string): string;
+/** Count node-pty 1.1.0's exact Windows quoting, including its treatment of already-enclosed arguments. */
+export declare function nativePaneCommandLineLength(executable: string, args: readonly string[]): number;
+export declare function assertNativePaneCommandLine(executable: string, args: readonly string[]): void;
+/** Provider arguments come from validated configuration, never a shell RPC. */
+export declare function persistentNativeArguments(launch: RuntimePaneLaunch, config?: NativePaneConfig): string[];

package/dist/runtime-pane-native.js

@@ -0,0 +1,65 @@
+import { nativeUpdateGuard, nativeClaudeFilePolicyArgs } from "./windows-cli-providers.js";
+/** Cache admission and the owned worker's final pre-spawn check share the same audited release set. */
+export function assertAuditedNativePaneVersion(provider, line) {
+    const expected = provider === "codex" ? "0.165.0" : provider === "claude-code" ? "2.1.316" : null;
+    const versions = typeof line === "string" && line.length <= 4096 ? line.match(/\b\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?\b/g) : null;
+    if (!expected || versions?.length !== 1 || versions[0] !== expected)
+        throw Error("This native CLI version has not passed persistent-pane acceptance");
+}
+/** JSON's basic-string escapes are valid TOML; DEL needs an explicit escape and invalid Unicode is refused. */
+export function nativeDeveloperInstructions(text) {
+    if (Buffer.from(text, "utf8").toString("utf8") !== text)
+        throw Error("Pane instructions contain invalid Unicode");
+    return `developer_instructions=${JSON.stringify(text).replace(/\x7f/g, "\\u007f")}`;
+}
+/** Count node-pty 1.1.0's exact Windows quoting, including its treatment of already-enclosed arguments. */
+export function nativePaneCommandLineLength(executable, args) {
+    const argv = [executable, ...args];
+    let size = argv.length - 1;
+    for (const arg of argv) {
+        const quote = arg === "" || /[ \t]/.test(arg) && arg.length > 1 && !(arg.startsWith('"') && arg.endsWith('"'));
+        if (quote)
+            size += 2;
+        let slashes = 0;
+        for (let i = 0; i < arg.length; i++) {
+            if (arg[i] === "\\")
+                slashes++;
+            else if (arg[i] === '"') {
+                size += slashes * 2 + 2;
+                slashes = 0;
+            }
+            else {
+                size += slashes + 1;
+                slashes = 0;
+            }
+        }
+        size += slashes * (quote ? 2 : 1);
+    }
+    return size;
+}
+export function assertNativePaneCommandLine(executable, args) {
+    // CreateProcessW's limit is 32,767 UTF-16 units including NUL. Leave margin; never truncate role/tool instructions.
+    if (nativePaneCommandLineLength(executable, args) > 30_000)
+        throw Error("Native pane launch exceeds the Windows command-line limit; reduce this agent's instructions");
+}
+/** Provider arguments come from validated configuration, never a shell RPC. */
+export function persistentNativeArguments(launch, config) {
+    const model = launch.model ? ["--model", launch.model] : [];
+    const mcp = config?.mcp;
+    const prefix = mcp ? ["-c", `mcp_servers.${mcp.serverName}.command=${JSON.stringify(mcp.nodePath)}`, "-c",
+        `mcp_servers.${mcp.serverName}.args=${JSON.stringify([mcp.helperPath, "--connection-file", mcp.connectionPath])}`, "-c",
+        // Only this launch's authenticated AgEnD server; its live Fleet permissions and General confirms still decide each call.
+        `mcp_servers.${mcp.serverName}.default_tools_approval_mode="approve"`] : [];
+    // Each owned Job must contain only its own CLI tree. A shared Codex app-server would outlive or couple panes.
+    // This is the fleet agent's own developer-role slot. Built-in model and project instructions remain provider-owned.
+    // A shared AGENTS.md identity block would give concurrent same-cwd agents each other's roles.
+    if (launch.cli === "codex")
+        return ["--no-daemon", ...nativeUpdateGuard("codex"), ...prefix,
+            ...(launch.instructions ? ["-c", nativeDeveloperInstructions(launch.instructions)] : []),
+            "-c", 'tui.status_line=["context-remaining"]', "--sandbox", launch.sandbox, "--ask-for-approval", "on-request", "-C", launch.cwd,
+            ...model, ...(launch.sessionId ? ["resume", launch.sessionId] : [])];
+    return [...model, ...nativeClaudeFilePolicyArgs(), ...(config?.instructionsFile ? ["--append-system-prompt-file", config.instructionsFile] : []),
+        ...(mcp ? ["--strict-mcp-config", "--mcp-config", mcp.configPath, "--allowedTools", mcp.tools.map(tool => `mcp__${mcp.serverName}__${tool}`).join(",")] : []), "--permission-mode", launch.sandbox === "workspace-write" ? "acceptEdits" : "default", ...(launch.sandbox === "read-only" ? ["--tools", "Read,Glob,Grep"] : []),
+        ...(launch.sessionId ? ["--resume", launch.sessionId] : config?.sessionId ? ["--session-id", config.sessionId] : [])];
+}
+//# sourceMappingURL=runtime-pane-native.js.map

package/dist/runtime-pane-native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-pane-native.js","sourceRoot":"","sources":["../src/runtime-pane-native.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC3F,uGAAuG;AACvG,MAAM,UAAU,8BAA8B,CAAC,QAAe,EAAC,IAAgB;IAC9E,MAAM,QAAQ,GAAC,QAAQ,KAAG,OAAO,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,QAAQ,KAAG,aAAa,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,IAAI,CAAC;IACpF,MAAM,QAAQ,GAAC,OAAO,IAAI,KAAG,QAAQ,IAAE,IAAI,CAAC,MAAM,IAAE,IAAI,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;IACtH,IAAG,CAAC,QAAQ,IAAE,QAAQ,EAAE,MAAM,KAAG,CAAC,IAAE,QAAQ,CAAC,CAAC,CAAC,KAAG,QAAQ;QAAC,MAAM,KAAK,CAAC,mEAAmE,CAAC,CAAC;AAC7I,CAAC;AAOD,+GAA+G;AAC/G,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAClH,OAAO,0BAA0B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;AACtF,CAAC;AACD,2GAA2G;AAC3G,MAAM,UAAU,2BAA2B,CAAC,UAAkB,EAAE,IAAuB;IACrF,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC;IAAC,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/G,IAAI,KAAK;YAAE,IAAI,IAAI,CAAC,CAAC;QACrB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC;iBAC1B,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAAC,IAAI,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAC,OAAO,GAAG,CAAC,CAAC;YAAC,CAAC;iBAC7D,CAAC;gBAAC,IAAI,IAAI,OAAO,GAAG,CAAC,CAAC;gBAAC,OAAO,GAAG,CAAC,CAAC;YAAC,CAAC;QAC5C,CAAC;QACD,IAAI,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,2BAA2B,CAAC,UAAkB,EAAE,IAAuB;IACrF,oHAAoH;IACpH,IAAI,2BAA2B,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM;QAAE,MAAM,KAAK,CAAC,6FAA6F,CAAC,CAAC;AACzK,CAAC;AACD,+EAA+E;AAC/E,MAAM,UAAU,yBAAyB,CAAC,MAAyB,EAAE,MAAyB;IAC5F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,CAAC;IACxB,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,GAAG,CAAC,UAAU,YAAY,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI;QACvG,eAAe,GAAG,CAAC,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,mBAAmB,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,EAAE,IAAI;QACvH,yHAAyH;QACzH,eAAe,GAAG,CAAC,UAAU,wCAAwC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9E,8GAA8G;IAC9G,oHAAoH;IACpH,8FAA8F;IAC9F,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO;QAAE,OAAO,CAAC,aAAa,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM;YACzF,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,2BAA2B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,IAAI,EAAE,uCAAuC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG;YAChI,GAAG,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,KAAK,EAAE,GAAG,0BAA0B,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,6BAA6B,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9I,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE,cAAc,EAAE,GAAG,CAAC,UAAU,EAAE,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,OAAO,KAAK,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9T,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1H,CAAC"}

package/dist/runtime-pane-output.d.ts

@@ -0,0 +1,19 @@
+/** Bounded raw-output ring. The runner never accepts a coordinator log path. */
+export declare const PANE_OUTPUT_CHUNK: number;
+export interface PaneOutputBatch {
+    from: number;
+    next: number;
+    gap: boolean;
+    data: string;
+    exited: boolean;
+}
+export declare function validatePaneOutputBatch(value: unknown, requested: number): PaneOutputBatch;
+export declare class RuntimePaneOutputBuffer {
+    private limit;
+    private chunks;
+    private retained;
+    private total;
+    constructor(limit?: number);
+    append(text: string): void;
+    read(offset: number, exited: boolean): PaneOutputBatch;
+}

package/dist/runtime-pane-output.js

@@ -0,0 +1,53 @@
+/** Bounded raw-output ring. The runner never accepts a coordinator log path. */
+export const PANE_OUTPUT_CHUNK = 128 * 1024;
+export function validatePaneOutputBatch(value, requested) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw Error("Invalid pane output frame");
+    const v = value;
+    if (Object.keys(v).some(key => !["from", "next", "gap", "data", "exited"].includes(key)) || !Number.isSafeInteger(v.from) || !Number.isSafeInteger(v.next) || v.from < requested || v.next < v.from
+        || typeof v.gap !== "boolean" || v.gap !== (v.from !== requested) || typeof v.exited !== "boolean" || typeof v.data !== "string" || v.data.length > Math.ceil(PANE_OUTPUT_CHUNK / 3) * 4
+        || Buffer.from(v.data, "base64").toString("base64") !== v.data || Buffer.from(v.data, "base64").length !== v.next - v.from)
+        throw Error("Invalid pane output frame");
+    return v;
+}
+export class RuntimePaneOutputBuffer {
+    limit;
+    chunks = [];
+    retained = 0;
+    total = 0;
+    constructor(limit = 4 * 1024 * 1024) {
+        this.limit = limit;
+    }
+    append(text) { let bytes = Buffer.from(text); if (!bytes.length)
+        return; this.total += bytes.length; if (!Number.isSafeInteger(this.total))
+        throw Error("Pane output offset overflow"); if (bytes.length > this.limit)
+        bytes = bytes.subarray(bytes.length - this.limit); this.chunks.push(bytes); this.retained += bytes.length; while (this.chunks.length > 1024) {
+        this.retained -= this.chunks.shift().length;
+    } while (this.retained > this.limit) {
+        const excess = this.retained - this.limit, head = this.chunks[0];
+        if (head.length <= excess) {
+            this.chunks.shift();
+            this.retained -= head.length;
+        }
+        else {
+            this.chunks[0] = head.subarray(excess);
+            this.retained -= excess;
+        }
+    } }
+    read(offset, exited) {
+        if (!Number.isSafeInteger(offset) || offset < 0 || offset > this.total)
+            throw Error("Pane output cursor differs");
+        const oldest = this.total - this.retained, from = Math.max(offset, oldest), end = Math.min(this.total, from + PANE_OUTPUT_CHUNK), pieces = [];
+        let at = oldest;
+        for (const chunk of this.chunks) {
+            const finish = at + chunk.length;
+            if (finish > from && at < end)
+                pieces.push(chunk.subarray(Math.max(0, from - at), Math.min(chunk.length, end - at)));
+            at = finish;
+            if (at >= end)
+                break;
+        }
+        return { from, next: end, gap: from !== offset, data: Buffer.concat(pieces).toString("base64"), exited };
+    }
+}
+//# sourceMappingURL=runtime-pane-output.js.map

package/dist/runtime-pane-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-pane-output.js","sourceRoot":"","sources":["../src/runtime-pane-output.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAC,GAAG,GAAC,IAAI,CAAC;AAExC,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAC,SAAgB;IACrE,IAAG,CAAC,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAAA,MAAM,CAAC,GAAC,KAAwB,CAAC;IACnI,IAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,EAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAE,CAAC,CAAC,IAAI,GAAC,SAAS,IAAE,CAAC,CAAC,IAAI,GAAC,CAAC,CAAC,IAAI;WAC7K,OAAO,CAAC,CAAC,GAAG,KAAG,SAAS,IAAE,CAAC,CAAC,GAAG,KAAG,CAAC,CAAC,CAAC,IAAI,KAAG,SAAS,CAAC,IAAE,OAAO,CAAC,CAAC,MAAM,KAAG,SAAS,IAAE,OAAO,CAAC,CAAC,IAAI,KAAG,QAAQ,IAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,GAAC,CAAC,CAAC,GAAC,CAAC;WAC7J,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAG,CAAC,CAAC,IAAI,IAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAC,QAAQ,CAAC,CAAC,MAAM,KAAG,CAAC,CAAC,IAAI,GAAC,CAAC,CAAC,IAAI;QAAC,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAAA,OAAO,CAAC,CAAC;AACpK,CAAC;AACD,MAAM,OAAO,uBAAuB;IAEf,KAAK;IADjB,MAAM,GAAU,EAAE,CAAC;IAAQ,QAAQ,GAAC,CAAC,CAAC;IAAQ,KAAK,GAAC,CAAC,CAAC;IAC9D,YAAoB,KAAK,GAAC,CAAC,GAAC,IAAI,GAAC,IAAI;qBAAjB,KAAK;IAAc,CAAC;IACxC,MAAM,CAAC,IAAW,IAAO,IAAI,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,IAAG,CAAC,KAAK,CAAC,MAAM;QAAC,OAAO,CAAA,IAAI,CAAC,KAAK,IAAE,KAAK,CAAC,MAAM,CAAC,CAAA,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAA,IAAG,KAAK,CAAC,MAAM,GAAC,IAAI,CAAC,KAAK;QAAC,KAAK,GAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA,IAAI,CAAC,QAAQ,IAAE,KAAK,CAAC,MAAM,CAAC,CAAA,OAAM,IAAI,CAAC,MAAM,CAAC,MAAM,GAAC,IAAI,EAAC,CAAC;QAAA,IAAI,CAAC,QAAQ,IAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAG,CAAC,MAAM,CAAC;IAAA,CAAC,CAAA,OAAM,IAAI,CAAC,QAAQ,GAAC,IAAI,CAAC,KAAK,EAAC,CAAC;QAAA,MAAM,MAAM,GAAC,IAAI,CAAC,QAAQ,GAAC,IAAI,CAAC,KAAK,EAAC,IAAI,GAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAA,IAAG,IAAI,CAAC,MAAM,IAAE,MAAM,EAAC,CAAC;YAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAAA,IAAI,CAAC,QAAQ,IAAE,IAAI,CAAC,MAAM,CAAC;QAAA,CAAC;aAAI,CAAC;YAAA,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,CAAC,QAAQ,IAAE,MAAM,CAAC;QAAA,CAAC;IAAA,CAAC,CAAA,CAAC;IACnmB,IAAI,CAAC,MAAa,EAAC,MAAc;QAChC,IAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAE,MAAM,GAAC,CAAC,IAAE,MAAM,GAAC,IAAI,CAAC,KAAK;YAAC,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAAA,MAAM,MAAM,GAAC,IAAI,CAAC,KAAK,GAAC,IAAI,CAAC,QAAQ,EAAC,IAAI,GAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAC,MAAM,CAAC,EAAC,GAAG,GAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAC,IAAI,GAAC,iBAAiB,CAAC,EAAC,MAAM,GAAU,EAAE,CAAC;QAAA,IAAI,EAAE,GAAC,MAAM,CAAC;QAC5P,KAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAC,CAAC;YAAA,MAAM,MAAM,GAAC,EAAE,GAAC,KAAK,CAAC,MAAM,CAAC;YAAA,IAAG,MAAM,GAAC,IAAI,IAAE,EAAE,GAAC,GAAG;gBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,IAAI,GAAC,EAAE,CAAC,EAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAC,GAAG,GAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAAA,EAAE,GAAC,MAAM,CAAC;YAAA,IAAG,EAAE,IAAE,GAAG;gBAAC,MAAM;QAAA,CAAC;QAC/L,OAAM,EAAC,IAAI,EAAC,IAAI,EAAC,GAAG,EAAC,GAAG,EAAC,IAAI,KAAG,MAAM,EAAC,IAAI,EAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC,MAAM,EAAC,CAAC;IAC9F,CAAC;CACD"}

package/dist/runtime-pane-port.d.ts

@@ -0,0 +1,134 @@
+/** Coordinator-side pane handle. Remote PIDs are never exposed as local supervision targets. */
+import { EventEmitter } from "node:events";
+import { type RuntimePaneLaunch, type RuntimePaneRequest, type RuntimePaneSnapshot } from "./runtime-pane-protocol.js";
+import type { Pane, PaneHost, PaneInputProof, PaneKey, PaneObservation, PaneSize, PaneStatus } from "./pane-port.js";
+import type { RuntimeCoordinatorEvent } from "./runtime-coordinator.js";
+import { type PaneTranscriptBaseline, type PaneTranscriptCursor, type PaneTranscriptWireBatch, type RuntimeTranscriptReference } from "./runtime-pane-transcript-protocol.js";
+export interface PaneEndpoint {
+    online(): boolean;
+    call(request: RuntimePaneRequest): Promise<unknown>;
+    subscribe(listener: (event: RuntimeCoordinatorEvent) => void): () => void;
+    machineId: string;
+}
+export declare class RuntimePanePort implements Pane {
+    private endpoint;
+    private file;
+    private inputIsComposer;
+    private record;
+    private tail;
+    private error;
+    private closing;
+    private outputLog;
+    private lastObservation;
+    private inputCapture;
+    private inputNotSent;
+    constructor(endpoint: PaneEndpoint, file: string, launch: RuntimePaneLaunch, inputIsComposer?: (screen: string) => boolean);
+    private save;
+    private serialize;
+    private accept;
+    open(): Promise<{
+        windowId: string;
+        reattached: boolean;
+    }>;
+    /** Read-only recovery of an open whose ACK was lost. Never sends open or starts a process. */
+    inspectRetained(): Promise<RuntimePaneSnapshot>;
+    /** Idempotent metadata binding; it never types into the CLI or replays an input. */
+    bindConversation(sessionId: string): Promise<RuntimePaneSnapshot>;
+    /** Intent before the one automatic /status. A lost coordinator must inspect its result, never type it twice. */
+    beginStatusRequest(): Promise<boolean>;
+    runtimeTranscriptReference(cursor: PaneTranscriptCursor): RuntimeTranscriptReference;
+    readTranscript(cursor: PaneTranscriptCursor, current?: () => boolean): Promise<PaneTranscriptWireBatch>;
+    readTranscriptBaseline(cursor: PaneTranscriptCursor, current?: () => boolean): Promise<PaneTranscriptBaseline>;
+    isTranscriptObservationCurrent(ref: RuntimeTranscriptReference): boolean;
+    private mutate;
+    private target;
+    createWindow(): Promise<string>;
+    respawnWindow(): Promise<void>;
+    killWindow(): Promise<void>;
+    killWindowConfirmed(): Promise<boolean>;
+    private closeOwned;
+    isWindowAlive(): Promise<boolean>;
+    setRemainOnExit(): Promise<void>;
+    getPaneStatus(): Promise<PaneStatus | null>;
+    getWindowGeometry(): Promise<PaneSize & {
+        mode: string;
+    }>;
+    getPaneInputMode(): Promise<"unknown">;
+    sendKeys(text: string, proof?: PaneInputProof): Promise<boolean>;
+    sendKeySequence(keys: readonly string[]): Promise<boolean>;
+    sendSpecialKey(key: PaneKey, _timeoutMs?: number, proof?: PaneInputProof): Promise<boolean>;
+    deleteBackward(count: number): Promise<boolean>;
+    lastInputWasNotSent(): boolean;
+    getLastSendSpecialKeyError(): string | null;
+    getLastPasteError(): string | null;
+    isLastPasteFailureRecoverable(): boolean;
+    pasteText(text: string): Promise<boolean>;
+    pasteBuffer(text: string, opts?: {
+        guard?: () => boolean;
+        proof?: PaneInputProof;
+    }): Promise<boolean>;
+    pipeOutput(logPath: string): Promise<void>;
+    closeOutput(): void;
+    private captureCurrent;
+    private capture;
+    capturePane(): Promise<string>;
+    capturePaneWithHistory(lines?: number): Promise<string>;
+    capturePaneJoined(lines?: number): Promise<string>;
+    getWindowId(): string;
+    /** A fresh authenticated endpoint proved the exact retained exit; retire an obsolete local relay without IO. */
+    recordConfirmedExit(raw: RuntimePaneSnapshot, current: () => void): Promise<void>;
+    observedSnapshot(): RuntimePaneSnapshot | null;
+    ownedSnapshot(): RuntimePaneSnapshot | null;
+}
+/** Passive output source. A disconnected link never proves idle; a reconnect resets all observation fences. */
+export declare class RuntimePaneObservation extends EventEmitter implements PaneObservation {
+    private endpoint;
+    private owned;
+    private idleMs;
+    private remove;
+    private resetAt;
+    private last;
+    private windows;
+    private wasOnline;
+    private sweep;
+    constructor(endpoint: PaneEndpoint, owned: (id: string) => RuntimePaneSnapshot | null, idleMs?: number);
+    start(): void;
+    stop(): void;
+    registerWindow(id: string): Promise<void>;
+    unregisterWindow(id: string): void;
+    getObservationResetAt(): number;
+    isObservationBlind(): boolean;
+    isIdle(id: string): boolean;
+    getLastOutputAt(id: string): number | undefined;
+    hasOutputSince(id: string, ts: number): boolean;
+    private wait;
+    waitForIdle(id: string, timeout?: number): Promise<boolean>;
+    waitUntilIdle(id: string, timeout?: number, abandoned?: () => boolean): Promise<boolean>;
+    waitForOutput(id: string, timeout?: number): Promise<boolean>;
+}
+/** One configured agent's host facade. Session/PID APIs never cross the machine boundary as local process evidence. */
+export declare class RuntimePaneHostPort implements PaneHost {
+    readonly pane: RuntimePanePort;
+    private endpoint;
+    readonly executionHost: "remote";
+    constructor(pane: RuntimePanePort, endpoint: PaneEndpoint);
+    bind(_session: string, id: string): Pane;
+    ensureSession(): Promise<void>;
+    sessionExists(): Promise<boolean>;
+    sessionExistsStrict(): Promise<boolean>;
+    killSession(): Promise<void>;
+    getServerPid(): Promise<null>;
+    listWindows(): Promise<Array<{
+        id: string;
+        name: string;
+    }>>;
+    listWindowsStrict(): Promise<Array<{
+        id: string;
+        name: string;
+    }>>;
+    getPanePid(): Promise<null>;
+    listPanePids(): Promise<Array<{
+        pid: number;
+        window: string;
+    }>>;
+}