@songsid/agend 2.3.5-alpha.3 → 2.3.5-alpha.5

package/dist/runtime-client.d.ts

@@ -1,12 +1,22 @@
 /** Standalone, outbound-only native runtime. Imports no Fleet, database, bot or Linux native dependency. */
 import WebSocket from "ws";
 import { type WindowsCliProbe, type WindowsCliTask, type WindowsRunOptions } from "./windows-cli.js";
+import { type CredentialProfileAnswer } from "./windows-cli-worker.js";
+import { type CredentialProfileCli } from "./runtime-credential-profiles.js";
 import { RuntimeClientStore, type RuntimeCredentials } from "./runtime-client-store.js";
+import { readRuntimeInfo } from "./runtime-build-info.js";
 import type { PaneLinkOptions } from "./runtime-pane-link.js";
 import type { RuntimePaneLink } from "./runtime-pane-link.js";
 import type { RuntimePaneHost } from "./runtime-pane-host.js";
 import type { RuntimePaneHostOptions } from "./runtime-pane-host.js";
 export { RUNTIME_PANE_MODULES } from "./runtime-pane-assets.js";
+export type RuntimeStopKind = "refused" | "revoked" | "replaced" | "rejected" | "incompatible" | "reinstall";
+export interface RuntimeStopReason {
+    kind: RuntimeStopKind; /** The close reason AgEnD gave, when it gave one. */
+    detail?: string;
+}
+/** Plain-language cause and next step for a stop AgEnD caused. AgEnD answers an unknown and a revoked credential with the same bare 401, so "refused" covers both. */
+export declare function describeRuntimeStop(reason: RuntimeStopReason): string;
 export interface RuntimeBridge {
     probe(options?: {
         force?: boolean;
@@ -17,6 +27,8 @@ export interface RuntimeBridge {
     cancel(id: string): WindowsCliTask;
     close(): void;
     releaseUnknown(id: string): void;
+    /** Required positive physical proof for managed update. An old/injected bridge without it stays unavailable. */
+    idleForUpdate?(): boolean;
 }
 export interface RuntimeClientOptions {
     store: RuntimeClientStore;
@@ -30,10 +42,34 @@ export interface RuntimeClientOptions {
     /** Offline transport acceptance supplies its own process factory, never a public configuration field. */
     openPaneLink?: (options: PaneLinkOptions) => Promise<RuntimePaneLink>;
     createPaneHost?: (options: RuntimePaneHostOptions) => RuntimePaneHost;
+    /**
+     * This Runtime's credential profile root (<runtime home>\credential-profiles). Absent: the Runtime does not offer profiles, says so in its
+     * capabilities, and refuses any run or terminal that names one.
+     */
+    credentialProfilesRoot?: string;
+    /** Test seam; production asks the CLI itself (`claude auth status` under that profile's folder). */
+    credentialLogin?: (cli: CredentialProfileCli, directory: string) => Promise<boolean | null>;
+    /** Test seam for the same check with the account in it (masked e-mail, plan). Wins over `credentialLogin`. */
+    credentialStatus?: (cli: CredentialProfileCli, directory: string) => Promise<CredentialProfileAnswer>;
+    /** How often to look for a sign-in made by `agend-runtime login` in another window (default 5 s). */
+    credentialWatchMs?: number;
+    /** Internal supervisor seam, never a server-supplied configuration option. */
+    managedUpdate?: {
+        trialId?: string;
+        authenticated?(value: {
+            bootId: string;
+            generation: number;
+            updateProtocol?: 1;
+            runtimeInfo: ReturnType<typeof readRuntimeInfo>;
+        }): void;
+    };
+    /** Isolated tests can supply a private pane service. Production uses attach-only discovery and physical exit proof. */
+    drainPaneHostForUpdate?(current: () => boolean): Promise<void>;
 }
 export declare class RuntimeClient {
     private readonly options;
     readonly bootId: `${string}-${string}-${string}-${string}-${string}`;
+    private readonly runtimeInfo;
     private readonly bridge;
     private socket;
     private welcomed;
@@ -44,6 +80,8 @@ export declare class RuntimeClient {
     private reconnectAttempt;
     private graceTimer;
     private pollTimer;
+    private credentialWatch;
+    private credentialStamp;
     private credentials;
     private startupRotation;
     private paneHost;
@@ -60,6 +98,17 @@ export declare class RuntimeClient {
     private mcpPort;
     private inventory;
     private readonly stoppedListeners;
+    private activity;
+    private stopPromise;
+    private generation;
+    private updateProtocol;
+    private preparingUpdate;
+    private trialFence;
+    private updateWait;
+    /** Set only when AgEnD ended the connection and the person must act; a local stop (Ctrl+C) leaves it undefined. */
+    stopReason: RuntimeStopReason | undefined;
+    /** The socket this Runtime itself closed with 1008 because it could not read AgEnD's frame; that is not AgEnD refusing us. */
+    private selfClosed;
     constructor(options: RuntimeClientOptions);
     private report;
     online(): boolean;
@@ -71,11 +120,35 @@ export declare class RuntimeClient {
     private publish;
     private panes;
     private paneMcp;
+    private forwardPaneMcp;
     private update;
     private poll;
+    /** Which profile a run uses: the one the agent named, else this pairing's default (Claude Code only), else none (the Runtime's own environment). */
+    private credentialProfileFor;
+    private stamp;
+    /**
+     * Re-report on its own after `agend-runtime login` / `profile default` (run in another window) changed the sign-in cache: the account shown
+     * in AgEnD follows a profile that was signed in to another account, without an administrator pressing "Detect again". Reads the cache only.
+     */
+    private watchCredentialCache;
+    private statusOf;
+    private remember;
+    /** The folder of a profile that exists AND is signed in on this computer; anything else refuses, never the default account. */
+    private credentialHome;
+    /** Names and signed-in yes/no only. `force` (an explicit "Detect again") asks each profile's CLI; otherwise the last known answer is reported. */
+    private credentialReport;
+    private beginDiscovery;
     private refreshInventory;
+    private readInventory;
     /** Testable command surface. Mutation identity is committed before calling the native bridge. */
     operation(operation: string, payload: Record<string, unknown>): Promise<unknown>;
+    private ownedOperation;
+    private locallyIdle;
+    private updateRpc;
+    /** Called only by the local supervisor. A timeout or disconnect never authorizes process replacement. */
+    prepareUpdate(id: string): Promise<boolean>;
+    /** The parent persists activation intent before this call; an unconfirmed answer is never rollback permission. */
+    activateTrial(id: string): Promise<boolean>;
     private openMcp;
     private closeMcp;
     private toolCall;
@@ -83,6 +156,7 @@ export declare class RuntimeClient {
     stop(options?: {
         retirePanes?: boolean;
     }): Promise<void>;
+    private stopOwned;
 }
 /** Caller holds the profile lock. Persist the candidate before wire; either credential can recover a lost response. */
 export declare function rotateRuntimeCredentials(input: {