@songsid/agend 2.3.5-alpha.4 → 2.3.5-beta.1

package/dist/runtime-client.js

@@ -1,736 +0,0 @@
-/** Standalone, outbound-only native runtime. Imports no Fleet, database, bot or Linux native dependency. */
-import WebSocket from "ws";
-import { readPaneSystemBootId, reusedRuntimeLockPid } from "./runtime-pane-boot.js";
-import { createServer } from "node:http";
-import { hostname } from "node:os";
-import { randomBytes, randomUUID } from "node:crypto";
-import { join } from "node:path";
-import { WindowsCliBridge, nativeWindowsTransport, WINDOWS_CLI_INVENTORY_FILE } from "./windows-cli.js";
-import { validateNativeTask, validWindowsAgentId } from "./windows-cli-worker.js";
-import { validNativeSessionId } from "./windows-cli-providers.js";
-import { runtimeJobDigest, validateRuntimeServer } from "./runtime-client-store.js";
-import { RUNTIME_ROTATE_PATH, runtimeClaimFingerprint } from "./runtime-protocol.js";
-import { readRuntimeInfo } from "./runtime-build-info.js";
-import { validatePaneMcpBody } from "./runtime-pane-mcp-protocol.js";
-import { validateRuntimePaneRequest, validateRuntimePaneShutdown } from "./runtime-pane-protocol.js";
-export { RUNTIME_PANE_MODULES } from "./runtime-pane-assets.js";
-const REPAIR = "run .\\agend-runtime.cmd disconnect in this folder (add the same --profile if you used one), then double-click connect-agend.bat and enter a new pairing code.";
-/** Plain-language cause and next step for a stop AgEnD caused. AgEnD answers an unknown and a revoked credential with the same bare 401, so "refused" covers both. */
-export function describeRuntimeStop(reason) {
-    switch (reason.kind) {
-        case "refused": return `${reason.detail === "HTTP 403" ? "The connection was refused with HTTP 403. If AgEnD's address goes through a proxy, check the proxy's settings too. " : ""}AgEnD did not accept this computer's saved connection, so the Runtime stopped. Open AgEnD Settings -> Runtime: if this computer is missing or revoked, or AgEnD's data was reset, it must be paired again; ${REPAIR} If the pairing was made against a different AgEnD address than this folder's, use the download that matches it.`;
-        case "revoked": return `This computer was revoked in AgEnD Settings -> Runtime, so the Runtime stopped. To connect it again, ${REPAIR}`;
-        case "replaced": return "This computer connected to AgEnD again from somewhere else, so AgEnD closed this connection. A pairing allows one live connection. Close the other Runtime window (or the other computer that uses a copy of this profile), then double-click connect-agend.bat again. Each computer needs its own pairing code.";
-        case "incompatible": return "This Runtime could not understand a message from AgEnD, so it stopped. This usually means the Runtime and AgEnD are different versions, or the address points at something that is not this AgEnD. Download the Windows Runtime again from AgEnD Settings -> Runtime, extract it, and double-click connect-agend.bat.";
-        case "rejected": return `AgEnD rejected a message from this Runtime${reason.detail ? ` (${reason.detail})` : ""}. Usual causes: leftover data from pairing this profile with a different AgEnD server, or a Runtime/AgEnD version mismatch. If this profile was used with another AgEnD server, ${REPAIR} If pairing reports an unfinished job from another pairing, follow that message: check that no CLI it started is still running, delete jobs.json in the profile folder, then pair again. Otherwise download the Windows Runtime again from AgEnD Settings -> Runtime, extract it, and double-click connect-agend.bat.`;
-    }
-}
-const MAX_FRAME = 256 * 1024;
-const MAX_TOOL = 64 * 1024;
-function object(value) { return !!value && typeof value === "object" && !Array.isArray(value); }
-function message(error) { return error instanceof Error ? error.message.slice(0, 1000) : "Runtime operation failed"; }
-function checkedRun(value) {
-    if (!object(value) || Object.keys(value).some(key => !["task", "resumeSessionId", "context", "mcp"].includes(key)))
-        throw new Error("Invalid runtime run payload");
-    const task = validateNativeTask(value.task);
-    if (value.resumeSessionId !== undefined && !validNativeSessionId(task.cli, value.resumeSessionId))
-        throw new Error("Invalid native conversation ID");
-    if (value.context !== undefined && (typeof value.context !== "string" || value.context.length > 2000 || value.context.includes("\0")))
-        throw new Error("Invalid native context");
-    if (value.mcp !== undefined && (!object(value.mcp) || Object.keys(value.mcp).some(key => key !== "tools")
-        || !Array.isArray(value.mcp.tools) || !value.mcp.tools.length || value.mcp.tools.length > 64
-        || value.mcp.tools.some(tool => typeof tool !== "string" || !/^[a-z][a-z0-9_]{0,63}$/.test(tool))))
-        throw new Error("Invalid scoped MCP request");
-    return { task, resumeSessionId: value.resumeSessionId, context: value.context,
-        mcp: value.mcp };
-}
-function jsonBody(req) {
-    return new Promise((accept, reject) => {
-        let text = "", bytes = 0;
-        req.setTimeout(10_000, () => { reject(new Error("MCP request timed out")); req.destroy(); });
-        req.setEncoding("utf8");
-        req.on("data", (part) => { bytes += Buffer.byteLength(part); if (bytes > MAX_TOOL) {
-            reject(new Error("MCP request is too large"));
-            req.destroy();
-        }
-        else
-            text += part; });
-        req.on("error", reject);
-        req.on("end", () => { try {
-            accept(JSON.parse(text));
-        }
-        catch {
-            reject(new Error("Invalid MCP JSON"));
-        } });
-    });
-}
-export class RuntimeClient {
-    options;
-    bootId = randomUUID();
-    runtimeInfo;
-    bridge;
-    socket = null;
-    welcomed = false;
-    stopped = true;
-    closed = false;
-    unlock = null;
-    reconnectTimer = null;
-    reconnectAttempt = 0;
-    graceTimer = null;
-    pollTimer = null;
-    credentials = null;
-    startupRotation = null;
-    paneHost = null;
-    paneOpening = null;
-    machinePaneLimit = 4;
-    paneEpoch = randomUUID();
-    active = new Set();
-    snapshots = new Map();
-    pendingPaneTools = new Map();
-    pendingTools = new Map();
-    mcpTokens = new Map();
-    mcpServer = null;
-    mcpOpening = null;
-    mcpPort = 0;
-    inventory = null;
-    stoppedListeners = new Set();
-    /** Set only when AgEnD ended the connection and the person must act; a local stop (Ctrl+C) leaves it undefined. */
-    stopReason;
-    /** The socket this Runtime itself closed with 1008 because it could not read AgEnD's frame; that is not AgEnD refusing us. */
-    selfClosed = null;
-    constructor(options) {
-        this.options = options;
-        this.runtimeInfo = readRuntimeInfo({ panes: process.platform === "win32" || !!options.createPaneHost || !!options.openPaneLink });
-        this.bridge = options.bridge ?? new WindowsCliBridge(nativeWindowsTransport, join(options.store.directory, WINDOWS_CLI_INVENTORY_FILE));
-    }
-    report(text) { this.options.report?.(text); }
-    online() { return this.welcomed && this.socket?.readyState === WebSocket.OPEN; }
-    waitUntilStopped() { return this.stopped && this.closed ? Promise.resolve() : new Promise(done => this.stoppedListeners.add(done)); }
-    async start() {
-        if (!this.stopped)
-            return;
-        let credentials = this.options.store.credentials();
-        if (!credentials)
-            throw new Error("Pair this runtime before connecting");
-        validateRuntimeServer(credentials.server);
-        this.stopped = false;
-        this.closed = false;
-        this.stopReason = undefined;
-        try {
-            const systemBootId = process.platform === "win32" ? await readPaneSystemBootId() : undefined;
-            if (this.stopped)
-                throw Error("Runtime start was cancelled");
-            const reused = process.platform === "win32" ? await reusedRuntimeLockPid(this.options.store.lockHolder()) : undefined;
-            if (this.stopped)
-                throw Error("Runtime start was cancelled");
-            this.unlock = this.options.store.lock(this.bootId, systemBootId, reused);
-            if (credentials.pendingCredential) {
-                const rotating = this.startupRotation = rotateRuntimeCredentials({ store: this.options.store });
-                try {
-                    credentials = await rotating;
-                }
-                finally {
-                    if (this.startupRotation === rotating)
-                        this.startupRotation = null;
-                }
-            }
-            if (this.stopped)
-                throw Error("Runtime start was cancelled");
-            this.options.store.adoptMachine(credentials.machineId);
-            this.options.store.recoverInterrupted();
-            this.credentials = credentials;
-            // Connect immediately, then publish the last administrator detection from the private profile.
-            // A cached read starts no CLI. Only an explicit probe command with force:true performs detection.
-            this.connect();
-            // A foreground runtime must remain alive while an idle connection is down. Promises and unref'ed retry
-            // timers do not keep Node running after the last socket closes; stop() owns and clears this liveness ref.
-            this.pollTimer = setInterval(() => this.poll(), this.options.pollMs ?? 250);
-            void this.refreshInventory().catch(() => this.report("CLI discovery failed; refresh it from AgEnD after checking the local installation."));
-        }
-        catch (error) {
-            this.stopped = true;
-            this.unlock?.();
-            this.unlock = null;
-            throw error;
-        }
-    }
-    connect() {
-        if (this.stopped || !this.credentials)
-            return;
-        const url = validateRuntimeServer(this.credentials.server);
-        url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
-        url.pathname = "/runtime/v1/connect";
-        const socket = this.socket = this.options.socketFactory?.(url.href, this.credentials.credential)
-            ?? new WebSocket(url.href, { headers: { Authorization: `Bearer ${this.credentials.credential}` }, followRedirects: false,
-                maxPayload: MAX_FRAME, handshakeTimeout: 15_000, perMessageDeflate: false });
-        this.welcomed = false;
-        this.paneEpoch = randomUUID();
-        socket.on("open", () => {
-            if (this.stopped || this.socket !== socket) {
-                socket.close();
-                return;
-            }
-            this.send({ v: 1, type: "hello", bootId: this.bootId, name: this.credentials.name, platform: process.platform, runtimeInfo: this.runtimeInfo,
-                ...(process.platform === "win32" || this.options.createPaneHost || this.options.openPaneLink ? { paneProtocol: 1 } : {}),
-                ...(this.inventory ? { inventory: this.inventory } : {}) });
-        });
-        socket.on("message", (bytes, binary) => {
-            const size = Array.isArray(bytes) ? bytes.reduce((sum, part) => sum + part.byteLength, 0) : bytes.byteLength;
-            if (binary || size > MAX_FRAME || this.socket !== socket) {
-                this.selfClosed = socket;
-                socket.close(1008, "Invalid runtime frame");
-                return;
-            }
-            void this.receive(bytes.toString()).catch(() => { this.selfClosed = socket; socket.close(1008, "Invalid runtime protocol"); });
-        });
-        socket.on("error", () => { });
-        socket.on("unexpected-response", (_req, response) => {
-            response.resume();
-            if (response.statusCode === 401 || response.statusCode === 403) {
-                this.report("Runtime credential was refused. Re-pair after the machine is authorized.");
-                this.stopReason = { kind: "refused", ...(response.statusCode === 403 ? { detail: "HTTP 403" } : {}) };
-                void this.stop();
-            }
-            else
-                socket.terminate();
-        });
-        socket.on("close", (code, reason) => {
-            if (this.socket !== socket)
-                return;
-            this.socket = null;
-            this.welcomed = false;
-            this.paneEpoch = randomUUID();
-            if (this.paneHost && "connectionChanged" in this.paneHost)
-                this.paneHost.connectionChanged();
-            this.rejectTools();
-            if (this.stopped)
-                return;
-            if (code === 1008) {
-                const why = reason.toString().replace(/[^ -~]/g, "?").slice(0, 120);
-                this.report(this.selfClosed === socket ? "This Runtime could not read a message from AgEnD and closed the connection." : `AgEnD closed the connection (code 1008${why ? `: ${why}` : ""}).`);
-                this.stopReason = this.selfClosed === socket ? { kind: "incompatible" } : { kind: why === "Machine revoked" ? "revoked" : why === "Connection replaced" ? "replaced" : "rejected", ...(why ? { detail: why } : {}) };
-                void this.stop({ retirePanes: why === "Machine revoked" });
-                return;
-            }
-            this.report("Disconnected. Existing execution is not replayed; reconnecting…");
-            if (!this.graceTimer)
-                this.graceTimer = setTimeout(() => {
-                    this.graceTimer = null;
-                    for (const id of this.active) {
-                        try {
-                            this.bridge.cancel(id);
-                        }
-                        catch { /* state reconciles in poll */ }
-                    }
-                    this.report("The coordinator remained disconnected; cancellation was requested for the active execution.");
-                }, this.options.disconnectGraceMs ?? 45_000);
-            this.graceTimer.unref?.();
-            const base = Math.min(30_000, 2000 * 2 ** Math.min(this.reconnectAttempt++, 4));
-            const delay = this.options.reconnectMs ?? Math.min(30_000, Math.round(base * (0.75 + Math.random() * 0.5)));
-            this.reconnectTimer = setTimeout(() => { this.reconnectTimer = null; this.connect(); }, delay);
-            this.reconnectTimer.unref?.();
-        });
-    }
-    send(value) {
-        if (this.socket?.readyState !== WebSocket.OPEN)
-            return;
-        const frame = JSON.stringify(value);
-        if (Buffer.byteLength(frame) > MAX_FRAME)
-            throw new Error("Runtime frame limit exceeded");
-        if (this.socket.bufferedAmount > 2 * MAX_FRAME) {
-            this.socket.close(1013, "Runtime backpressure");
-            return;
-        }
-        this.socket.send(frame);
-    }
-    async receive(text) {
-        const value = JSON.parse(text);
-        if (!object(value) || value.v !== 1 || typeof value.type !== "string")
-            throw new Error("Unsupported runtime protocol");
-        if (value.type === "welcome") {
-            if (value.machineId !== this.credentials?.machineId || !Number.isSafeInteger(value.generation))
-                throw new Error("Runtime machine identity mismatch");
-            this.welcomed = true;
-            this.reconnectAttempt = 0;
-            if (this.graceTimer) {
-                clearTimeout(this.graceTimer);
-                this.graceTimer = null;
-            }
-            this.report("Connected to AgEnD.");
-            for (const job of this.options.store.list())
-                this.publish(job);
-            return;
-        }
-        if (value.type === "revoked") {
-            this.report("This machine was revoked by AgEnD.");
-            this.stopReason = { kind: "revoked" };
-            await this.stop({ retirePanes: true });
-            return;
-        }
-        if (!this.welcomed)
-            throw new Error("Runtime handshake is incomplete");
-        if (value.type === "ping") {
-            this.send({ v: 1, type: "pong" });
-            return;
-        }
-        if (value.type === "tool.result") {
-            if (typeof value.id !== "string")
-                throw new Error("Invalid tool reply");
-            const pending = this.pendingTools.get(value.id);
-            if (!pending)
-                return;
-            clearTimeout(pending.timer);
-            this.pendingTools.delete(value.id);
-            if (value.ok === true)
-                pending.accept(value.result);
-            else
-                pending.reject(new Error("AgEnD MCP request was refused"));
-            return;
-        }
-        if (value.type === "pane.tool.result") {
-            if (Object.keys(value).some(key => !["v", "type", "id", "ok", "result"].includes(key)) || !validWindowsAgentId(value.id) || typeof value.ok !== "boolean")
-                throw Error("Invalid pane MCP reply");
-            const pending = this.pendingPaneTools.get(value.id);
-            if (!pending)
-                return;
-            this.pendingPaneTools.delete(value.id);
-            clearTimeout(pending.timer);
-            if (value.ok)
-                pending.accept(value.result);
-            else
-                pending.reject(Error("Pane MCP request was refused"));
-            return;
-        }
-        if (value.type === "pane.request") {
-            if (Object.keys(value).some(key => !["v", "type", "id", "maxAgents", "request"].includes(key))
-                || typeof value.id !== "string" || !validWindowsAgentId(value.id) || !Number.isInteger(value.maxAgents)
-                || value.maxAgents < 1 || value.maxAgents > 16)
-                throw Error("Invalid pane transport envelope");
-            const request = validateRuntimePaneRequest(value.request);
-            this.machinePaneLimit = value.maxAgents;
-            const epoch = this.paneEpoch;
-            try {
-                const host = await this.panes();
-                const result = await host.request(request, () => epoch === this.paneEpoch && this.online());
-                if (request.action === "shutdown") {
-                    validateRuntimePaneShutdown(result, request.hostBootId);
-                    // Explicit coordinator disable, not a disconnect: the next enabled request discovers a new host boot.
-                    // Retire this cache before sending the reply, including when that reply is lost under backpressure.
-                    if (this.paneHost === host) {
-                        this.paneHost = null;
-                        this.paneOpening = null;
-                    }
-                    await host.stop();
-                }
-                this.send({ v: 1, type: "pane.response", id: value.id, ok: true, result });
-            }
-            catch (error) {
-                this.send({ v: 1, type: "pane.response", id: value.id, ok: false, error: message(error) });
-            }
-            return;
-        }
-        if (value.type !== "request" || typeof value.id !== "string" || !/^[A-Za-z0-9._:-]{1,128}$/.test(value.id)
-            || typeof value.operation !== "string" || !object(value.payload))
-            throw new Error("Invalid runtime request");
-        const command = value;
-        try {
-            this.send({ v: 1, type: "response", id: command.id, ok: true, result: await this.operation(command.operation, command.payload) });
-        }
-        catch (error) {
-            this.send({ v: 1, type: "response", id: command.id, ok: false, error: message(error) });
-        }
-    }
-    publish(job) { if (this.online())
-        this.send({ v: 1, type: "task", seq: job.seq, task: job.task }); }
-    panes() {
-        // A detached host link is not a live cache. Rediscover on the next independent request; never replay this RPC.
-        if (this.paneHost && "connected" in this.paneHost && !this.paneHost.connected()) {
-            this.paneHost = null;
-            this.paneOpening = null;
-        }
-        if (!this.paneOpening) {
-            const output = snapshot => { if (this.online())
-                this.send({ v: 1, type: "pane.output", snapshot }); };
-            if (this.options.createPaneHost)
-                this.paneOpening = import("./runtime-pane-store.js").then(({ RuntimePaneStore }) => {
-                    const store = new RuntimePaneStore(join(this.options.store.directory, "panes"));
-                    store.recoverInterrupted();
-                    return this.paneHost = this.options.createPaneHost({ store, bootId: this.bootId, online: () => !this.stopped && this.online(), maxAgents: () => this.machinePaneLimit, output });
-                });
-            else
-                this.paneOpening = import("./runtime-pane-link.js").then(({ RuntimePaneLink }) => (this.options.openPaneLink ?? RuntimePaneLink.open.bind(RuntimePaneLink))({
-                    directory: this.options.store.directory, server: this.credentials.server, machineId: this.credentials.machineId,
-                    online: () => !this.stopped && this.online(), maxAgents: () => this.machinePaneLimit, epoch: () => this.paneEpoch, output, mcp: (body, current) => this.paneMcp(body, current),
-                })).then(host => this.paneHost = host);
-            const opening = this.paneOpening;
-            void opening.catch(() => { if (this.paneOpening === opening)
-                this.paneOpening = null; });
-        }
-        return this.paneOpening;
-    }
-    paneMcp(raw, current) {
-        const body = validatePaneMcpBody(raw), epoch = this.paneEpoch;
-        if (!current() || !this.online() || this.pendingPaneTools.size >= 32)
-            return Promise.reject(Error("Pane MCP transport is unavailable"));
-        const id = randomUUID();
-        return new Promise((accept, reject) => {
-            const timer = setTimeout(() => { this.pendingPaneTools.delete(id); reject(Error("Pane MCP response is unconfirmed")); }, 85_000);
-            timer.unref();
-            this.pendingPaneTools.set(id, { timer, reject, accept: value => current() && this.online() && this.paneEpoch === epoch ? accept(value) : reject(Error("Pane MCP lease expired")) });
-            try {
-                this.send({ v: 1, type: "pane.tool.request", id, body });
-            }
-            catch {
-                this.pendingPaneTools.delete(id);
-                clearTimeout(timer);
-                reject(Error("Pane MCP response is unconfirmed"));
-            }
-        });
-    }
-    update(task) {
-        if (this.closed)
-            return;
-        const serialized = JSON.stringify(task);
-        if (this.snapshots.get(task.id) === serialized)
-            return;
-        try {
-            const job = this.options.store.update(task);
-            this.snapshots.set(task.id, serialized);
-            this.publish(job);
-            if (task.finishedAt) {
-                this.active.delete(task.id);
-                this.closeMcp(task.id);
-            }
-        }
-        catch {
-            // A process whose state could not be committed must not continue accepting commands.
-            this.report("Runtime execution state could not be saved. Stop and inspect the private runtime profile.");
-            try {
-                this.bridge.cancel(task.id);
-            }
-            catch { /* leave durable accepted state blocked */ }
-            this.socket?.close(1011, "Runtime storage failed");
-        }
-    }
-    poll() { for (const id of this.active) {
-        const task = this.bridge.get(id);
-        if (task)
-            this.update(task);
-    } }
-    async refreshInventory(force = false) {
-        const inventory = await this.bridge.probe({ force });
-        this.inventory = inventory;
-        if (this.online())
-            this.send({ v: 1, type: "inventory", inventory });
-        return inventory;
-    }
-    /** Testable command surface. Mutation identity is committed before calling the native bridge. */
-    async operation(operation, payload) {
-        if (operation === "probe") {
-            if (Object.keys(payload).some(key => key !== "force") || (payload.force !== undefined && typeof payload.force !== "boolean"))
-                throw new Error("Invalid discovery request");
-            return this.refreshInventory(payload.force === true);
-        }
-        if (operation === "workspace") {
-            if (Object.keys(payload).some(key => key !== "agentId") || !validWindowsAgentId(payload.agentId))
-                throw new Error("Invalid workspace request");
-            return { agentId: payload.agentId, cwd: await this.bridge.prepareWorkspace(payload.agentId) };
-        }
-        if (operation === "reconcile") {
-            if (Object.keys(payload).length)
-                throw new Error("Invalid reconciliation request");
-            return { jobs: this.options.store.list().map(row => ({ seq: row.seq, task: row.task })) };
-        }
-        if (operation === "cancel" || operation === "recover") {
-            if (typeof payload.runId !== "string" || Object.keys(payload).some(key => !["runId", ...(operation === "recover" ? ["confirmedStopped", "original"] : [])].includes(key)))
-                throw new Error("Invalid execution operation");
-            const stored = this.options.store.get(payload.runId);
-            if (operation === "recover") {
-                if (this.active.has(payload.runId))
-                    throw new Error("The native execution is still connected; wait for cancellation");
-                if (payload.confirmedStopped !== true)
-                    throw new Error("Confirm the execution stopped before recovery");
-                const original = payload.original === undefined ? null : checkedRun(payload.original);
-                if (original && original.task.requestId !== payload.runId)
-                    throw new Error("Recovery execution identity does not match the original run");
-                const digest = original ? runtimeJobDigest(original) : null;
-                if (stored && digest && stored.digest !== digest)
-                    throw new Error("Recovery arguments do not match the accepted execution");
-                if (!stored) {
-                    if (!original || !digest)
-                        throw new Error("Unknown execution recovery needs its trusted original run");
-                    if (this.active.size)
-                        throw new Error("Wait for the active native execution before recovery");
-                    const task = original.task;
-                    // The coordinator may have durably submitted a run that never reached this client. Explicit manual
-                    // confirmation creates a terminal tombstone, never an execution, so a delayed retry cannot launch it.
-                    const accepted = this.options.store.accept({ id: task.requestId, cli: task.cli, cwd: task.cwd, sandbox: task.sandbox,
-                        ...(task.model ? { model: task.model } : {}), status: "failed", startedAt: Date.now(), finishedAt: Date.now(),
-                        outcomeConfirmed: true, output: "", error: "The unconfirmed execution was manually confirmed stopped before local acceptance; it will not be replayed." }, digest);
-                    this.publish(accepted.job);
-                    return accepted.job.task;
-                }
-                if (stored.task.finishedAt && stored.task.outcomeConfirmed === true)
-                    return stored.task;
-                this.bridge.releaseUnknown(payload.runId);
-                const job = this.options.store.recover(payload.runId, true);
-                this.publish(job);
-                return job.task;
-            }
-            if (!stored)
-                throw new Error("Runtime execution not found");
-            if (!this.active.has(payload.runId))
-                return stored.task;
-            const task = this.bridge.cancel(payload.runId);
-            this.update(task);
-            return task;
-        }
-        if (operation !== "run")
-            throw new Error("Unknown runtime operation");
-        const run = checkedRun(payload), task = run.task;
-        const digest = runtimeJobDigest(run);
-        const accepted = this.options.store.accept({ id: task.requestId, cli: task.cli, cwd: task.cwd, sandbox: task.sandbox,
-            ...(task.model ? { model: task.model } : {}), status: "starting", startedAt: Date.now(), output: "" }, digest);
-        if (accepted.duplicate)
-            return accepted.job.task;
-        this.publish(accepted.job);
-        try {
-            const mcp = payload.mcp ? await this.openMcp(task.requestId, payload.mcp.tools) : undefined;
-            if (this.stopped || !this.online())
-                throw new Error("Runtime disconnected before native execution started");
-            this.active.add(task.requestId);
-            const initial = this.bridge.start(task, () => !this.stopped && this.online(), {
-                ...(payload.resumeSessionId ? { resumeSessionId: payload.resumeSessionId } : {}),
-                ...(payload.context ? { context: payload.context } : {}), ...(mcp ? { mcp } : {}),
-                onSettled: settled => this.update(settled),
-            });
-            this.update(initial);
-            return this.options.store.get(task.requestId).task;
-        }
-        catch (error) {
-            this.active.delete(task.requestId);
-            this.closeMcp(task.requestId);
-            const failed = { ...accepted.job.task, status: "failed", error: message(error), finishedAt: Date.now(), outcomeConfirmed: true };
-            this.update(failed);
-            return failed;
-        }
-    }
-    async openMcp(runId, tools) {
-        if (!this.mcpOpening)
-            this.mcpOpening = new Promise((accept, reject) => {
-                const server = this.mcpServer = createServer((req, res) => {
-                    const reply = (status, value) => { if (!res.writableEnded && !res.destroyed) {
-                        res.writeHead(status, { "Content-Type": "application/json", "Cache-Control": "no-store" });
-                        res.end(JSON.stringify(value));
-                    } };
-                    const header = req.headers["x-agend-native-token"];
-                    const entry = typeof header === "string" && /^[a-f0-9]{64}$/.test(header) ? this.mcpTokens.get(header) : undefined;
-                    if (req.method !== "POST" || req.url !== "/agent" || req.headers.origin !== undefined || req.headers.cookie !== undefined
-                        || !["127.0.0.1", "::1", "::ffff:127.0.0.1"].includes(req.socket.remoteAddress ?? "") || !entry
-                        || !this.active.has(entry.runId) || !this.online()) {
-                        req.resume();
-                        reply(403, { error: "Runtime MCP capability is unavailable" });
-                        return;
-                    }
-                    void jsonBody(req).then(async (body) => {
-                        if (!object(body) || body.op !== "native-mcp" || !["tools/list", "tools/call"].includes(String(body.method))
-                            || !object(body.params) || Object.keys(body).some(key => !["op", "method", "params", "callId"].includes(key)))
-                            throw new Error("Invalid runtime MCP request");
-                        if (body.method === "tools/call" && (!entry.tools.includes(String(body.params.name)) || !object(body.params.arguments)
-                            || typeof body.callId !== "string" || !/^[A-Za-z0-9._:-]{1,128}$/.test(body.callId)))
-                            throw new Error("Runtime MCP tool is unavailable");
-                        const result = await this.toolCall(entry.runId, body);
-                        if (!this.active.has(entry.runId) || !this.online()) {
-                            reply(401, { error: "Runtime MCP capability expired" });
-                            return;
-                        }
-                        if (Buffer.byteLength(JSON.stringify(result) ?? "") > MAX_TOOL)
-                            throw new Error("Runtime MCP result is too large");
-                        reply(200, result);
-                    }).catch(() => reply(403, { error: "Runtime MCP request was refused or its execution expired" }));
-                });
-                server.on("error", reject);
-                server.listen(0, "127.0.0.1", () => { const address = server.address(); if (!address || typeof address === "string") {
-                    reject(new Error("Runtime MCP could not bind"));
-                    return;
-                } this.mcpPort = address.port; accept(address.port); });
-            });
-        await this.mcpOpening;
-        const token = randomBytes(32).toString("hex");
-        this.mcpTokens.set(token, { runId, tools: [...tools] });
-        return { endpoint: `http://127.0.0.1:${this.mcpPort}/agent`, token, tools: [...tools] };
-    }
-    closeMcp(runId) { for (const [token, entry] of this.mcpTokens)
-        if (entry.runId === runId)
-            this.mcpTokens.delete(token); }
-    toolCall(runId, body) {
-        if (!this.online())
-            return Promise.reject(new Error("Runtime is disconnected"));
-        if (this.pendingTools.size >= 64)
-            return Promise.reject(new Error("Runtime MCP call capacity reached"));
-        const id = randomUUID();
-        return new Promise((accept, reject) => {
-            const timer = setTimeout(() => { this.pendingTools.delete(id); reject(new Error("AgEnD MCP request timed out")); }, 90_000);
-            timer.unref?.();
-            this.pendingTools.set(id, { accept, reject, timer });
-            this.send({ v: 1, type: "tool.call", id, runId, body });
-        });
-    }
-    rejectTools() {
-        for (const pending of this.pendingPaneTools.values()) {
-            clearTimeout(pending.timer);
-            pending.reject(Error("Pane MCP disconnected; no call was replayed"));
-        }
-        this.pendingPaneTools.clear();
-        for (const pending of this.pendingTools.values()) {
-            clearTimeout(pending.timer);
-            pending.reject(new Error("Runtime disconnected"));
-        }
-        this.pendingTools.clear();
-    }
-    async stop(options = {}) {
-        if (this.stopped)
-            return;
-        this.stopped = true;
-        this.welcomed = false;
-        if (this.reconnectTimer)
-            clearTimeout(this.reconnectTimer);
-        if (this.graceTimer)
-            clearTimeout(this.graceTimer);
-        if (this.pollTimer)
-            clearInterval(this.pollTimer);
-        this.reconnectTimer = null;
-        this.graceTimer = null;
-        this.pollTimer = null;
-        this.rejectTools();
-        this.mcpTokens.clear();
-        this.bridge.close();
-        const socket = this.socket;
-        this.socket = null;
-        if (socket) {
-            socket.close();
-            if (socket.readyState !== WebSocket.CLOSED)
-                socket.terminate();
-        }
-        // A cancelled start may still finish its durable credential write. Do not release the profile to another writer.
-        await this.startupRotation?.catch(() => { });
-        await this.paneOpening?.then(async (host) => {
-            try {
-                if (options.retirePanes && "retireOwned" in host)
-                    await host.retireOwned();
-            }
-            finally {
-                await host.stop();
-            }
-        }).catch(() => this.report("Pane cleanup is unconfirmed; its durable reservations remain held."));
-        // Keep the profile lock until cancellation is confirmed or the journal is explicitly marked uncertain.
-        const deadline = Date.now() + 5000;
-        while (this.active.size && Date.now() < deadline) {
-            this.poll();
-            if (!this.active.size)
-                break;
-            await new Promise(done => setTimeout(done, 50));
-        }
-        for (const id of this.active) {
-            const old = this.options.store.get(id);
-            if (old)
-                this.update({ ...old.task, status: "failed", finishedAt: Date.now(), outcomeConfirmed: false,
-                    error: "Runtime stopped before native process shutdown was confirmed. Inspect processes before recovery." });
-        }
-        this.closed = true;
-        if (this.mcpServer) {
-            const server = this.mcpServer;
-            this.mcpServer = null;
-            server.closeAllConnections();
-            await new Promise(done => server.close(() => done()));
-        }
-        this.unlock?.();
-        this.unlock = null;
-        for (const done of this.stoppedListeners)
-            done();
-        this.stoppedListeners.clear();
-    }
-}
-async function post(server, path, body, signal, credential) {
-    const response = await fetch(new URL(path, server), { method: "POST", redirect: "error", headers: { "Content-Type": "application/json", ...(credential ? { Authorization: `Bearer ${credential}` } : {}) },
-        body: JSON.stringify(body), signal: signal ? AbortSignal.any([signal, AbortSignal.timeout(15_000)]) : AbortSignal.timeout(15_000) });
-    let text = "", bytes = 0;
-    if (response.body)
-        for await (const part of response.body) {
-            bytes += part.byteLength;
-            if (bytes > MAX_TOOL)
-                throw new Error("Runtime pairing response is too large");
-            text += new TextDecoder().decode(part);
-        }
-    let data;
-    try {
-        data = JSON.parse(text);
-    }
-    catch {
-        throw new Error("Invalid runtime pairing response");
-    }
-    if (!object(data))
-        throw new Error("Invalid runtime pairing response");
-    return { status: response.status, data };
-}
-/** Caller holds the profile lock. Persist the candidate before wire; either credential can recover a lost response. */
-export async function rotateRuntimeCredentials(input) {
-    let saved = input.store.credentials();
-    if (!saved)
-        throw Error("Pair this runtime before rotating its credential");
-    if (!saved.pendingCredential) {
-        saved = { ...saved, pendingCredential: randomBytes(32).toString("hex") };
-        input.store.saveCredentials(saved);
-    }
-    const server = validateRuntimeServer(saved.server), candidate = saved.pendingCredential;
-    for (const credential of [saved.credential, candidate]) {
-        const response = await post(server, RUNTIME_ROTATE_PATH, { machineId: saved.machineId, credential: candidate }, input.signal, credential);
-        if (response.status === 200 && response.data.status === "rotated" && response.data.machineId === saved.machineId) {
-            const { pendingCredential: _, ...current } = saved;
-            const completed = { ...current, credential: candidate };
-            input.store.saveCredentials(completed);
-            return completed;
-        }
-        if (response.status !== 401 && response.status !== 429)
-            break;
-    }
-    throw Error("Runtime credential rotation was not confirmed. The saved candidate is retained; retry rotate before connecting.");
-}
-export async function pairRuntime(input) {
-    const server = validateRuntimeServer(input.server);
-    if (!input.code.trim() || input.code.length > 256 || /[\x00-\x1f]/.test(input.code) || !input.name.trim() || input.name.length > 100)
-        throw new Error("Enter a valid pairing code and machine name");
-    input.store.assertCanPair();
-    const paired = await post(server, "/runtime/v1/pair", { code: input.code.trim(), name: input.name.trim(), platform: process.platform, hostname: hostname() }, input.signal);
-    if (paired.status !== 201 || paired.data.status !== "pending" || typeof paired.data.machineId !== "string" || typeof paired.data.claimSecret !== "string")
-        throw new Error(`Runtime pairing was refused (HTTP ${paired.status})`);
-    const deadline = Math.min(Date.now() + 10 * 60_000, typeof paired.data.expiresAt === "number" ? paired.data.expiresAt : Infinity);
-    const fingerprint = runtimeClaimFingerprint(paired.data.claimSecret);
-    input.report?.(`Pairing fingerprint: ${fingerprint}. Compare it with AgEnD Settings → Runtime before approving this machine; waiting for approval…`);
-    while (!input.signal?.aborted && Date.now() < deadline) {
-        const claimed = await post(server, "/runtime/v1/claim", { machineId: paired.data.machineId, claimSecret: paired.data.claimSecret }, input.signal);
-        if (claimed.status === 200 && claimed.data.status === "approved" && claimed.data.machineId === paired.data.machineId
-            && typeof claimed.data.credential === "string" && /^[A-Za-z0-9._-]{16,256}$/.test(claimed.data.credential)) {
-            const credentials = { server: server.origin, machineId: paired.data.machineId, credential: claimed.data.credential, name: input.name.trim() };
-            // Save first: the one-time credential cannot be issued again. A ledger that changed since the check above is reported after it is safe.
-            input.store.saveCredentials(credentials);
-            try {
-                input.store.adoptMachine(credentials.machineId, true);
-            }
-            catch (error) {
-                throw new Error(`The computer was paired and its credential is saved. ${error instanceof Error ? error.message : "Its job ledger could not be updated."}`);
-            }
-            input.report?.("Runtime paired. Its machine credential was saved in the private local profile.");
-            return credentials;
-        }
-        if (claimed.status !== 202 || claimed.data.status !== "pending")
-            throw new Error(`Runtime approval was refused or expired (HTTP ${claimed.status})`);
-        await new Promise((accept, reject) => {
-            const timer = setTimeout(() => { input.signal?.removeEventListener("abort", abort); accept(); }, input.pollMs ?? 1500);
-            const abort = () => { clearTimeout(timer); reject(new Error("Runtime pairing cancelled")); };
-            input.signal?.addEventListener("abort", abort, { once: true });
-        });
-    }
-    throw new Error(input.signal?.aborted ? "Runtime pairing was cancelled" : "Runtime pairing expired before the computer was approved. Open AgEnD Settings -> Runtime, then double-click connect-agend.bat again and enter a new pairing code.");
-}
-//# sourceMappingURL=runtime-client.js.map