@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/runtime-general-protocol.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-general-protocol.js","sourceRoot":"","sources":["../src/runtime-general-protocol.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC3B,IAAI;IAAzB,YAAqB,IAAY,EAAE,MAAM,GAAG,wDAAwD;QAAI,KAAK,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;oBAA/G,IAAI;IAA4G,CAAC;CACvI;AAUD,SAAS,MAAM,CAAC,GAAY,EAAE,IAAuB;IACnD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;AAClK,CAAC;AACD,SAAS,QAAQ,CAAC,GAA4B;IAC5C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;WACzH,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACvL,CAAC;AACD,MAAM,UAAU,+BAA+B,CAAC,GAAY;IAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnF,IAAI,GAAG,CAAC,MAAM,KAAK,mBAAmB;QAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC3F,OAAO,GAAyC,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,+BAA+B,CAAC,GAAY,EAAE,QAAiC;IAC7F,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;QAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QACpF,MAAM,UAAU,GAAG,GAA8B,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,qBAAqB;YACxF,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACxG,IAAI,UAAU,CAAC,OAAO,KAAK,CAAC,IAAI,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,UAAU,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;eACtJ,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,OAAO,UAAU,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChM,MAAM,IAAI,uBAAuB,CAAC,UAAU,CAAC,WAAqB,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3F,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;WAC1H,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC7H,OAAO,GAAyC,CAAC;AACnD,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,GAAY,EAAE,QAAiC;IACrF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,iBAAiB,IAAI,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,MAAM,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3G,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1Q,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/runtime-general-workspace.d.ts

@@ -1,17 +0,0 @@
-import { type GeneralWorkspaceRequest, type GeneralWorkspaceReceipt } from "./runtime-general-protocol.js";
-export interface GeneralKnowledgePack {
-    hash: string;
-    files: Readonly<Record<string, string>>;
-}
-export declare function loadGeneralKnowledge(cli: GeneralWorkspaceRequest["cli"], moduleDirectory?: string): GeneralKnowledgePack;
-/** The caller serializes publication against live/unknown panes using this cwd. File access is bounded and synchronous. */
-export declare class RuntimeGeneralWorkspace {
-    private root;
-    private moduleDirectory;
-    constructor(root: string, moduleDirectory?: string);
-    private path;
-    private manifest;
-    private existing;
-    verify(raw: GeneralWorkspaceRequest, expectedCwd?: string): GeneralWorkspaceReceipt;
-    prepare(raw: GeneralWorkspaceRequest, current: () => boolean, mayWrite: (cwd: string) => boolean): GeneralWorkspaceReceipt;
-}

package/dist/runtime-general-workspace.js

@@ -1,213 +0,0 @@
-/** Runner-owned General knowledge. Only fixed installed assets enter a dedicated, receipt-owned workspace. */
-import { createHash } from "node:crypto";
-import { constants, closeSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, unlinkSync } from "node:fs";
-import { dirname, join, relative, resolve, sep } from "node:path";
-import { fileURLToPath } from "node:url";
-import { atomicWriteFileSync } from "./atomic-write.js";
-import { GENERAL_KNOWLEDGE_FILES, GENERAL_ROLE_INSTRUCTIONS } from "./general-role.js";
-import { GeneralManagedFileError, validateGeneralWorkspaceRequest } from "./runtime-general-protocol.js";
-const hash = (text) => createHash("sha256").update(text).digest("hex");
-const missing = (error) => error.code === "ENOENT";
-function directory(path) {
-    const stat = lstatSync(path);
-    if (!stat.isDirectory() || stat.isSymbolicLink())
-        throw Error("General workspace directory is unsafe");
-    if (resolve(realpathSync(path)).toLowerCase() !== resolve(path).toLowerCase())
-        throw Error("General workspace directory leads elsewhere");
-}
-function text(path, limit) {
-    const before = lstatSync(path);
-    if (!before.isFile() || before.isSymbolicLink() || before.size > limit)
-        throw Error("General program or workspace file is unsafe");
-    const fd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
-    try {
-        const opened = fstatSync(fd);
-        if (!opened.isFile() || opened.size > limit || opened.dev !== before.dev || opened.ino !== before.ino)
-            throw Error("General file changed while opening");
-        const bytes = readFileSync(fd), after = fstatSync(fd);
-        if (bytes.length > limit || after.size !== opened.size || after.mtimeMs !== opened.mtimeMs || bytes.includes(0))
-            throw Error("General file changed or contains invalid text");
-        const value = bytes.toString("utf8");
-        if (!Buffer.from(value, "utf8").equals(bytes))
-            throw Error("General asset is not valid UTF-8");
-        return value;
-    }
-    finally {
-        closeSync(fd);
-    }
-}
-function child(root, name, create = false) {
-    if (!name || name.includes("\\") || name.split("/").some(part => !part || part === "." || part === ".."))
-        throw Error("Invalid General asset path");
-    directory(root);
-    const parts = name.split("/");
-    let path = root;
-    for (const part of parts.slice(0, -1)) {
-        path = join(path, part);
-        if (create) {
-            try {
-                mkdirSync(path, { mode: 0o700 });
-            }
-            catch (error) {
-                if (error.code !== "EEXIST")
-                    throw error;
-            }
-        }
-        directory(path);
-    }
-    const target = join(root, ...parts), within = relative(root, target);
-    if (!within || within.startsWith(".." + sep) || within === "..")
-        throw Error("General asset escaped its workspace");
-    return target;
-}
-export function loadGeneralKnowledge(cli, moduleDirectory = dirname(fileURLToPath(import.meta.url))) {
-    const root = join(moduleDirectory, "general-knowledge");
-    directory(root);
-    const files = {}, skills = cli === "codex" ? ".agents" : ".claude";
-    let total = 0;
-    for (const name of GENERAL_KNOWLEDGE_FILES) {
-        const value = text(child(root, name), 128 * 1024);
-        total += Buffer.byteLength(value);
-        if (total > 512 * 1024)
-            throw Error("General knowledge pack is too large");
-        if (name.startsWith("skills/"))
-            files[`${skills}/${name}`] = value;
-        else
-            files[cli === "codex" ? "AGENTS.md" : "CLAUDE.md"] = `${GENERAL_ROLE_INSTRUCTIONS}\n\n${value}`;
-    }
-    return { hash: hash(JSON.stringify(files)), files };
-}
-/** The caller serializes publication against live/unknown panes using this cwd. File access is bounded and synchronous. */
-export class RuntimeGeneralWorkspace {
-    root;
-    moduleDirectory;
-    constructor(root, moduleDirectory = dirname(fileURLToPath(import.meta.url))) {
-        this.root = root;
-        this.moduleDirectory = moduleDirectory;
-    }
-    path(request, create) {
-        directory(this.root);
-        const root = join(this.root, "general-workspaces");
-        if (create) {
-            try {
-                mkdirSync(root, { mode: 0o700 });
-            }
-            catch (error) {
-                if (error.code !== "EEXIST")
-                    throw error;
-            }
-        }
-        directory(root);
-        const cwd = join(root, request.bindingId);
-        if (create) {
-            try {
-                mkdirSync(cwd, { mode: 0o700 });
-            }
-            catch (error) {
-                if (error.code !== "EEXIST")
-                    throw error;
-            }
-        }
-        directory(cwd);
-        return cwd;
-    }
-    manifest(cwd, request) {
-        let raw;
-        try {
-            raw = JSON.parse(text(join(cwd, ".agend-general.json"), 64 * 1024));
-        }
-        catch (error) {
-            if (missing(error))
-                return null;
-            throw error;
-        }
-        if (raw?.version !== 1 || raw.bindingId !== request.bindingId || raw.instance !== request.instance || raw.cli !== request.cli
-            || Object.keys(raw).some(key => !["version", "bindingId", "instance", "cli", "packHash", "files", "previous"].includes(key))
-            || typeof raw.packHash !== "string" || !/^[a-f0-9]{64}$/.test(raw.packHash))
-            throw Error("General workspace publication scope differs");
-        for (const map of [raw.files, ...(raw.previous !== undefined ? [raw.previous] : [])]) {
-            if (!map || typeof map !== "object" || Array.isArray(map) || Object.keys(map).length > 64
-                || Object.entries(map).some(([name, digest]) => !(name === (request.cli === "codex" ? "AGENTS.md" : "CLAUDE.md")
-                    || new RegExp(`^${request.cli === "codex" ? "\\.agents" : "\\.claude"}/skills/[a-z0-9][a-z0-9-]{0,63}/SKILL\\.md$`).test(name))
-                    || typeof digest !== "string" || !/^[a-f0-9]{64}$/.test(digest)))
-                throw Error("Invalid General owned-file manifest");
-        }
-        return raw;
-    }
-    existing(cwd, name) {
-        try {
-            return hash(text(child(cwd, name), 128 * 1024));
-        }
-        catch (error) {
-            if (missing(error))
-                return null;
-            throw new GeneralManagedFileError(name, "General managed file cannot be verified");
-        }
-    }
-    verify(raw, expectedCwd) {
-        const request = validateGeneralWorkspaceRequest(raw), cwd = this.path(request, false), pack = loadGeneralKnowledge(request.cli, this.moduleDirectory);
-        if (request.packHash !== pack.hash || expectedCwd !== undefined && resolve(expectedCwd).toLowerCase() !== resolve(cwd).toLowerCase())
-            throw Error("General workspace pack or directory differs");
-        const manifest = this.manifest(cwd, request);
-        if (!manifest || manifest.previous || manifest.packHash !== pack.hash || JSON.stringify(manifest.files) !== JSON.stringify(Object.fromEntries(Object.entries(pack.files).map(([name, value]) => [name, hash(value)]))))
-            throw new GeneralManagedFileError(".agend-general.json");
-        for (const [name, value] of Object.entries(pack.files)) {
-            if (this.existing(cwd, name) !== hash(value))
-                throw new GeneralManagedFileError(name);
-        }
-        return { version: 1, bindingId: request.bindingId, instance: request.instance, cli: request.cli, packHash: pack.hash, cwd };
-    }
-    prepare(raw, current, mayWrite) {
-        const request = validateGeneralWorkspaceRequest(raw), pack = loadGeneralKnowledge(request.cli, this.moduleDirectory);
-        if (pack.hash !== request.packHash || !current())
-            throw Error("General workspace pack or lease differs");
-        const cwd = this.path(request, true), previous = this.manifest(cwd, request);
-        try {
-            return this.verify(request);
-        }
-        catch { /* A partial, owned publication is completed only below. */ }
-        if (!mayWrite(cwd) || !current())
-            throw Error("General workspace has a live or unconfirmed pane");
-        if (!previous && readdirSync(cwd).length)
-            throw Error("General workspace contains unowned files");
-        const next = Object.fromEntries(Object.entries(pack.files).map(([name, value]) => [name, hash(value)]));
-        const known = new Set([...Object.keys(previous?.files ?? {}), ...Object.keys(previous?.previous ?? {}), ...Object.keys(next)]);
-        const old = {};
-        for (const name of known) {
-            const digest = this.existing(cwd, name);
-            if (digest !== null && digest !== previous?.files[name] && digest !== previous?.previous?.[name])
-                throw new GeneralManagedFileError(name, "General workspace file is not an unchanged owned copy");
-            if (digest !== null)
-                old[name] = digest;
-        }
-        // Before any content write, retain both possible hashes so an interrupted update never adopts unknown bytes.
-        const pending = { version: 1, bindingId: request.bindingId, instance: request.instance, cli: request.cli, packHash: pack.hash, files: next, previous: old };
-        const save = (value) => { if (!current())
-            throw Error("General workspace lease expired"); directory(cwd); atomicWriteFileSync(join(cwd, ".agend-general.json"), JSON.stringify(value), { mode: 0o600 }); };
-        save(pending);
-        for (const [name, value] of Object.entries(pack.files)) {
-            if (!current())
-                throw Error("General workspace lease expired");
-            const digest = this.existing(cwd, name);
-            if (digest !== null && digest !== next[name] && digest !== old[name])
-                throw new GeneralManagedFileError(name, "General workspace changed during publication");
-            const file = child(cwd, name, true);
-            if (digest !== next[name])
-                atomicWriteFileSync(file, value, { mode: 0o600 });
-        }
-        for (const name of Object.keys(old))
-            if (!Object.hasOwn(next, name)) {
-                if (!current())
-                    throw Error("General workspace lease expired");
-                const digest = this.existing(cwd, name);
-                if (digest !== null && digest !== old[name])
-                    throw new GeneralManagedFileError(name, "Retired General skill changed");
-                if (digest !== null)
-                    unlinkSync(child(cwd, name));
-            }
-        const { previous: _old, ...committed } = pending;
-        save(committed);
-        return this.verify(request);
-    }
-}
-//# sourceMappingURL=runtime-general-workspace.js.map

package/dist/runtime-general-workspace.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-general-workspace.js","sourceRoot":"","sources":["../src/runtime-general-workspace.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC/I,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAA8D,MAAM,+BAA+B,CAAC;AAErK,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvF,MAAM,OAAO,GAAG,CAAC,KAAc,EAAW,EAAE,CAAE,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC;AAChG,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACvG,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;AAC5I,CAAC;AACD,SAAS,IAAI,CAAC,IAAY,EAAE,KAAa;IACvC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK;QAAE,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACnI,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,KAAK,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;YAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACzJ,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC9K,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACrI,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AACD,SAAS,KAAK,CAAC,IAAY,EAAE,IAAY,EAAE,MAAM,GAAG,KAAK;IACvD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACpJ,SAAS,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,IAAI,IAAI,GAAG,IAAI,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxB,IAAI,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;QAAC,CAAC;QAChJ,SAAS,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACpH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAmC,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACjI,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;IAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,KAAK,GAA2B,EAAE,EAAE,MAAM,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC;QAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrF,IAAI,KAAK,GAAG,GAAG,GAAG,IAAI;YAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;;YAC9D,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,GAAG,yBAAyB,OAAO,KAAK,EAAE,CAAC;IACvG,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC;AAKD,2HAA2H;AAC3H,MAAM,OAAO,uBAAuB;IACd,IAAI;IAAkB,eAAe;IAAzD,YAAoB,IAAY,EAAU,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;oBAA/E,IAAI;+BAAkB,eAAe;IAA6C,CAAC;IAC/F,IAAI,CAAC,OAAgC,EAAE,MAAe;QAC5D,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;QAAC,CAAC;QAChJ,SAAS,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;QAAC,CAAC;QAC/I,SAAS,CAAC,GAAG,CAAC,CAAC;QAAC,OAAO,GAAG,CAAC;IAC7B,CAAC;IACO,QAAQ,CAAC,GAAW,EAAE,OAAgC;QAC5D,IAAI,GAAgB,CAAC;QACrB,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC5I,IAAI,GAAG,EAAE,OAAO,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;eACxH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;eACzH,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC1I,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACrF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE;mBACpF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;uBAC3G,IAAI,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,6CAA6C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;uBAC5H,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3H,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACO,QAAQ,CAAC,GAAW,EAAE,IAAY;QACxC,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACtE,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChC,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,yCAAyC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAA4B,EAAE,WAAoB;QACvD,MAAM,OAAO,GAAG,+BAA+B,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACtJ,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjM,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;QACjR,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC;IAC9H,CAAC;IACD,OAAO,CAAC,GAA4B,EAAE,OAAsB,EAAE,QAAkC;QAC9F,MAAM,OAAO,GAAG,+BAA+B,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACrH,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzG,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7E,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,2DAA2D,CAAC,CAAC;QAC1G,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClG,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAClG,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/H,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,QAAQ,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,uDAAuD,CAAC,CAAC;YACnM,IAAI,MAAM,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QAC1C,CAAC;QACD,6GAA6G;QAC7G,MAAM,OAAO,GAAgB,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QACzK,MAAM,IAAI,GAAG,CAAC,KAAkB,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxN,IAAI,CAAC,OAAO,CAAC,CAAC;QACd,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,OAAO,EAAE;gBAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAC;YAC9J,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC;gBAAE,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACpE,IAAI,CAAC,OAAO,EAAE;oBAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBAAC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACxG,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,uBAAuB,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;gBACtH,IAAI,MAAM,KAAK,IAAI;oBAAE,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,GAAG,OAAO,CAAC;QAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjG,CAAC;CACF"}

package/dist/runtime-install.d.ts

@@ -1,50 +0,0 @@
-import type { IncomingMessage, ServerResponse } from "node:http";
-import { type RuntimeBundle } from "./runtime-bundle.js";
-export declare const RUNTIME_INSTALL_SCRIPT_PATH = "/runtime/install.ps1";
-export declare const RUNTIME_BUNDLE_PATH = "/runtime/v1/bundle/windows.zip";
-export declare const RUNTIME_BUNDLE_METADATA_PATH = "/runtime/v1/bundle/windows.json";
-/** Replaced in the template with values that were validated first; the script holds no other server-supplied text. */
-export declare const RUNTIME_INSTALL_VERSION_TOKEN = "@@AGEND_RUNTIME_VERSION@@";
-export declare const RUNTIME_INSTALL_SHA256_TOKEN = "@@AGEND_RUNTIME_SHA256@@";
-export declare const RUNTIME_INSTALL_MAX_SCRIPT_BYTES: number;
-/** Stamps the validated version and bundle hash into the template; an unvalidated value never reaches the script. */
-export declare function renderRuntimeInstallScript(template: string, bundle: Pick<RuntimeBundle, "version" | "sha256">): string;
-export interface RuntimeInstallOptions {
-    /** Tests substitute fixtures; production builds the real bundle from this installation's compiled modules. */
-    bundle?: () => RuntimeBundle;
-    template?: () => string;
-    now?: () => number;
-}
-/** What the dashboard shows an administrator so the copied command can pin the script. */
-export interface RuntimeInstallerInfo {
-    version: string;
-    scriptSha256: string;
-    scriptBytes: number;
-    bundleSha256: string;
-}
-export declare class RuntimeInstallService {
-    private readonly options;
-    private readonly buckets;
-    private files;
-    constructor(options?: RuntimeInstallOptions);
-    /** Tokens a bucket holds right now. One nobody has used holds its whole burst, and holds no table row. */
-    private tokens;
-    private spend;
-    /**
-     * The address's own bucket is asked first. A request it refuses costs the total nothing, so one address that hammers a route is held by
-     * its own bucket and cannot drain what everyone else shares. Only a request that bucket admits is charged to the total, and only then are
-     * both spent. A bucket that has refilled to full is forgotten, and a row is only created by an admitted request, so the table stays small
-     * without a cap.
-     */
-    private admit;
-    /**
-     * Built on first use and kept: a server version has one generic bundle, so the hash the script pins stays the hash of the
-     * archive every later request receives, and one script, so the hash Settings shows is the hash of every script sent. A
-     * failure is not remembered; the next request tries again (under the rate limit).
-     */
-    private build;
-    /** For the local administrator's dashboard. Throws when the installer cannot be built on this host. */
-    installer(): RuntimeInstallerInfo;
-    /** True for an install/metadata route (404 while off); false leaves every other path to the normal gate. */
-    handle(req: IncomingMessage, res: ServerResponse, url: URL): boolean;
-}

package/dist/runtime-install.js

@@ -1,186 +0,0 @@
-/**
- * Unauthenticated, read-only delivery of the Windows Runtime installer:
- *   GET /runtime/install.ps1             the installer script, stamped with this server's runtime version and bundle SHA-256
- *   GET /runtime/v1/bundle/windows.zip   the same createRuntimeBundle() archive Settings offers as a download
- *   GET /runtime/v1/bundle/windows.json  the version, SHA-256 and size of that exact cached archive
- * These files are static for a given server version: the bundle is built once and kept, and the script is that bundle's
- * version and SHA-256 stamped into a fixed template. The script is built once as bytes and those exact bytes are what every
- * request receives (no newline rewriting, no compression, no per-request text), so the SHA-256 that Settings shows for it is
- * the hash of what is sent: the copied command downloads the script, checks that hash and only then runs it, so the check
- * does not depend on the TLS trust decision. The script in turn pins the bundle's hash. Nothing in a response depends on
- * the request (no Host header, query, cookie or caller), and nothing in it is a credential, pairing code, profile, user data
- * or server address: the page's command hands the server address to the script.
- * They are served only while runtimes.remote_runtime is on (otherwise they answer 404), never through a public gateway link
- * (404 there too), only over loopback or TLS (the installer must not travel over plain LAN HTTP), rate limited per client
- * address with a small burst, and never larger than the bundle's own cap.
- * Pairing stays exactly as it was: nothing here creates, accepts or approves a pairing.
- */
-import { createHash } from "node:crypto";
-import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { createRuntimeBundle, RUNTIME_MAX_ARCHIVE_BYTES } from "./runtime-bundle.js";
-import { remoteRuntimeEnabled } from "./runtime-switches.js";
-import { gatewayRequestContext } from "./web-request-context.js";
-export const RUNTIME_INSTALL_SCRIPT_PATH = "/runtime/install.ps1";
-export const RUNTIME_BUNDLE_PATH = "/runtime/v1/bundle/windows.zip";
-export const RUNTIME_BUNDLE_METADATA_PATH = "/runtime/v1/bundle/windows.json";
-/** Replaced in the template with values that were validated first; the script holds no other server-supplied text. */
-export const RUNTIME_INSTALL_VERSION_TOKEN = "@@AGEND_RUNTIME_VERSION@@";
-export const RUNTIME_INSTALL_SHA256_TOKEN = "@@AGEND_RUNTIME_SHA256@@";
-export const RUNTIME_INSTALL_MAX_SCRIPT_BYTES = 64 * 1024;
-/**
- * Token buckets: a person re-running an installer, not a crawler. Each client address may burst a few requests, then is held to the
- * refill rate; everything together is bounded too, because a reverse proxy makes every client look like one address.
- */
-const LIMITS = {
-    script: { burst: 10, perMinute: 30 },
-    bundle: { burst: 4, perMinute: 12 },
-    total: { burst: 60, perMinute: 240 },
-};
-const VERSION = /^\d+\.\d+\.\d+(?:[-+][A-Za-z0-9.-]+)?$/, SHA256 = /^[a-f0-9]{64}$/;
-function defaultTemplate() {
-    const file = join(dirname(fileURLToPath(import.meta.url)), "..", "templates", "runtime-install", "install.ps1");
-    const bytes = readFileSync(file);
-    if (bytes.length > RUNTIME_INSTALL_MAX_SCRIPT_BYTES)
-        throw new Error("Runtime installer script is too large");
-    return bytes.toString("utf8");
-}
-/** Stamps the validated version and bundle hash into the template; an unvalidated value never reaches the script. */
-export function renderRuntimeInstallScript(template, bundle) {
-    if (!VERSION.test(bundle.version) || !SHA256.test(bundle.sha256))
-        throw new Error("Invalid runtime bundle identity");
-    if (!template.includes(RUNTIME_INSTALL_VERSION_TOKEN) || !template.includes(RUNTIME_INSTALL_SHA256_TOKEN))
-        throw new Error("Runtime installer template has no placeholders");
-    const script = template.replaceAll(RUNTIME_INSTALL_VERSION_TOKEN, bundle.version).replaceAll(RUNTIME_INSTALL_SHA256_TOKEN, bundle.sha256);
-    if (/@@AGEND_RUNTIME_/.test(script) || Buffer.byteLength(script) > RUNTIME_INSTALL_MAX_SCRIPT_BYTES)
-        throw new Error("Runtime installer script is invalid");
-    return script;
-}
-const loopback = (address) => address === "127.0.0.1" || address === "::1" || address === "::ffff:127.0.0.1";
-function protectedTransport(req) {
-    return loopback(req.socket.remoteAddress) || req.socket.encrypted === true;
-}
-function answer(res, status, body, headers = {}) {
-    if (res.destroyed || res.writableEnded)
-        return;
-    res.writeHead(status, { "Content-Type": "application/json; charset=utf-8", "Cache-Control": "no-store", ...headers });
-    res.end(JSON.stringify(body));
-}
-const sha256 = (bytes) => createHash("sha256").update(bytes).digest("hex");
-export class RuntimeInstallService {
-    options;
-    buckets = new Map();
-    files;
-    constructor(options = {}) {
-        this.options = options;
-    }
-    /** Tokens a bucket holds right now. One nobody has used holds its whole burst, and holds no table row. */
-    tokens(key, limit, now) {
-        const row = this.buckets.get(key);
-        return row ? Math.min(row.burst, row.tokens + Math.max(0, now - row.at) * row.perMs) : limit.burst;
-    }
-    spend(key, limit, now) {
-        const perMs = limit.perMinute / 60_000, row = this.buckets.get(key) ?? { tokens: limit.burst, at: now, burst: limit.burst, perMs };
-        row.tokens = Math.min(row.burst, row.tokens + Math.max(0, now - row.at) * row.perMs) - 1;
-        row.at = now;
-        this.buckets.set(key, row);
-    }
-    /**
-     * The address's own bucket is asked first. A request it refuses costs the total nothing, so one address that hammers a route is held by
-     * its own bucket and cannot drain what everyone else shares. Only a request that bucket admits is charged to the total, and only then are
-     * both spent. A bucket that has refilled to full is forgotten, and a row is only created by an admitted request, so the table stays small
-     * without a cap.
-     */
-    admit(peerKey, peerLimit) {
-        const now = (this.options.now ?? Date.now)();
-        for (const [id, row] of this.buckets)
-            if (row.tokens + (now - row.at) * row.perMs >= row.burst)
-                this.buckets.delete(id);
-        if (this.tokens(peerKey, peerLimit, now) < 1 || this.tokens("total", LIMITS.total, now) < 1)
-            return false;
-        this.spend("total", LIMITS.total, now);
-        this.spend(peerKey, peerLimit, now);
-        return true;
-    }
-    /**
-     * Built on first use and kept: a server version has one generic bundle, so the hash the script pins stays the hash of the
-     * archive every later request receives, and one script, so the hash Settings shows is the hash of every script sent. A
-     * failure is not remembered; the next request tries again (under the rate limit).
-     */
-    build() {
-        if (this.files)
-            return this.files;
-        const bundle = (this.options.bundle ?? createRuntimeBundle)();
-        if (!bundle.bytes.length || bundle.bytes.length > RUNTIME_MAX_ARCHIVE_BYTES)
-            throw new Error("Runtime bundle exceeded its archive size limit");
-        const script = Buffer.from(renderRuntimeInstallScript((this.options.template ?? defaultTemplate)(), bundle), "utf8");
-        const metadata = Buffer.from(JSON.stringify({ version: bundle.version, sha256: bundle.sha256, bytes: bundle.bytes.length }) + "\n");
-        return this.files = { bundle, metadata, script, scriptSha256: sha256(script), etag: `"${bundle.version}-${bundle.sha256}"` };
-    }
-    /** For the local administrator's dashboard. Throws when the installer cannot be built on this host. */
-    installer() {
-        const { bundle, script, scriptSha256 } = this.build();
-        return { version: bundle.version, scriptSha256, scriptBytes: script.length, bundleSha256: bundle.sha256 };
-    }
-    /** True for an install/metadata route (404 while off); false leaves every other path to the normal gate. */
-    handle(req, res, url) {
-        const isScript = url.pathname === RUNTIME_INSTALL_SCRIPT_PATH;
-        const isMetadata = url.pathname === RUNTIME_BUNDLE_METADATA_PATH;
-        if (!isScript && !isMetadata && url.pathname !== RUNTIME_BUNDLE_PATH)
-            return false;
-        // Off, or reached through a public gateway link: these routes do not exist there. 404 is the same answer as any
-        // unknown route, and it does not reveal whether remote runtimes are configured. No bundle is built for it.
-        if (!remoteRuntimeEnabled() || gatewayRequestContext(req)) {
-            answer(res, 404, { error: "Not found" });
-            return true;
-        }
-        const method = req.method ?? "GET";
-        if (method !== "GET" && method !== "HEAD") {
-            answer(res, 405, { error: "Runtime installer files are read-only" }, { Allow: "GET, HEAD" });
-            return true;
-        }
-        if (url.search) {
-            answer(res, 400, { error: "Runtime installer files do not accept options" });
-            return true;
-        }
-        if (!protectedTransport(req)) {
-            answer(res, 403, { error: "The Runtime installer is served only over HTTPS or localhost" });
-            return true;
-        }
-        // ZIP and metadata share an allowance, including conditional and HEAD requests.
-        const peer = req.socket.remoteAddress ?? "unknown", kind = isScript ? "script" : "bundle";
-        if (!this.admit(`${kind}:${peer}`, LIMITS[kind])) {
-            answer(res, 429, { error: "Too many Runtime installer requests. Wait a minute and try again." }, { "Retry-After": "30" });
-            return true;
-        }
-        try {
-            const { bundle, metadata, script, etag } = this.build();
-            const common = { "X-Content-Type-Options": "nosniff" };
-            if (isScript) {
-                // never cached anywhere: a stale script would not match the hash the page shows
-                res.writeHead(200, { ...common, "Cache-Control": "no-store", "Content-Type": "text/plain; charset=utf-8", "Content-Length": script.length });
-                res.end(method === "HEAD" ? undefined : script);
-            }
-            else if ((req.headers["if-none-match"] ?? "").split(",").some(tag => tag.trim() === etag)) {
-                // The archive is immutable for this server version, so a client may ask whether its copy is still current. The installer
-                // still verifies the SHA-256 pinned in the script, so a cached copy is never trusted on its own.
-                res.writeHead(304, { ...common, "Cache-Control": "no-cache", ETag: etag });
-                res.end();
-            }
-            else {
-                const bytes = isMetadata ? metadata : bundle.bytes;
-                res.writeHead(200, { ...common, "Cache-Control": "no-cache", ETag: etag,
-                    "Content-Type": isMetadata ? "application/json; charset=utf-8" : "application/zip",
-                    ...(isMetadata ? {} : { "Content-Disposition": `attachment; filename="${bundle.filename}"`, "X-Agend-SHA256": bundle.sha256 }),
-                    "Content-Length": bytes.length });
-                res.end(method === "HEAD" ? undefined : bytes);
-            }
-        }
-        catch {
-            answer(res, 503, { error: "The Windows Runtime installer is unavailable on this host. Update or reinstall AgEnD and retry." });
-        }
-        return true;
-    }
-}
-//# sourceMappingURL=runtime-install.js.map

package/dist/runtime-install.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-install.js","sourceRoot":"","sources":["../src/runtime-install.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAsB,MAAM,qBAAqB,CAAC;AACzG,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,MAAM,CAAC,MAAM,2BAA2B,GAAG,sBAAsB,CAAC;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AACpE,MAAM,CAAC,MAAM,4BAA4B,GAAG,iCAAiC,CAAC;AAC9E,sHAAsH;AACtH,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AACzE,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AACvE,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1D;;;GAGG;AACH,MAAM,MAAM,GAAG;IACb,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;IACpC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;IACnC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE;CAC5B,CAAC;AACX,MAAM,OAAO,GAAG,wCAAwC,EAAE,MAAM,GAAG,gBAAgB,CAAC;AAEpF,SAAS,eAAe;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,GAAG,gCAAgC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC9G,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AACD,qHAAqH;AACrH,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,MAAiD;IAC5G,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrH,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC7K,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,6BAA6B,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1I,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,gCAAgC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5J,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,QAAQ,GAAG,CAAC,OAA2B,EAAW,EAAE,CAAC,OAAO,KAAK,WAAW,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,kBAAkB,CAAC;AAC1I,SAAS,kBAAkB,CAAC,GAAoB;IAC9C,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAK,GAAG,CAAC,MAAsD,CAAC,SAAS,KAAK,IAAI,CAAC;AAC9H,CAAC;AACD,SAAS,MAAM,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa,EAAE,OAAO,GAA2B,EAAE;IACtG,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO;IAC/C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACtH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAYD,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/F,MAAM,OAAO,qBAAqB;IAGH,OAAO;IAFnB,OAAO,GAAG,IAAI,GAAG,EAAwE,CAAC;IACnG,KAAK,CAAkC;IAC/C,YAA6B,OAAO,GAA0B,EAAE;uBAAnC,OAAO;IAA+B,CAAC;IACpE,0GAA0G;IAClG,MAAM,CAAC,GAAW,EAAE,KAAwB,EAAE,GAAW;QAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACrG,CAAC;IACO,KAAK,CAAC,GAAW,EAAE,KAA2C,EAAE,GAAW;QACjF,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,GAAG,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;QACnI,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC;QACvG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC;IACD;;;;;OAKG;IACK,KAAK,CAAC,OAAe,EAAE,SAA+C;QAC5E,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxH,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1G,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD;;;;OAIG;IACK,KAAK;QACX,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,yBAAyB;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QAC/I,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QACrH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACpI,OAAO,IAAI,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IAC/H,CAAC;IACD,uGAAuG;IACvG,SAAS;QACP,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC5G,CAAC;IACD,4GAA4G;IAC5G,MAAM,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAQ;QACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,2BAA2B,CAAC;QAC9D,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,KAAK,4BAA4B,CAAC;QACjE,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,mBAAmB;YAAE,OAAO,KAAK,CAAC;QACnF,gHAAgH;QAChH,2GAA2G;QAC3G,IAAI,CAAC,oBAAoB,EAAE,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACrH,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACzJ,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC9G,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8DAA8D,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC3I,gFAAgF;QAChF,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,EAAE,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1F,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mEAAmE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QACzI,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACxD,MAAM,MAAM,GAAG,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC;YACvD,IAAI,QAAQ,EAAE,CAAC;gBACb,gFAAgF;gBAChF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,2BAA2B,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC7I,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAClD,CAAC;iBAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC5F,yHAAyH;gBACzH,iGAAiG;gBACjG,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACnD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI;oBACrE,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,iBAAiB;oBAClF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,yBAAyB,MAAM,CAAC,QAAQ,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;oBAC9H,gBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpC,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iGAAiG,EAAE,CAAC,CAAC;QACjI,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/runtime-pane-assets.d.ts

@@ -1,17 +0,0 @@
-/** Fixed program assets only. Prepared at build time; Linux installations load no Windows native module. */
-export declare const RUNTIME_PANE_ASSETS: readonly [{
-    readonly name: "@xterm/headless";
-    readonly version: "6.0.0";
-    readonly files: readonly ["package.json", "LICENSE", "lib-headless/xterm-headless.js", "lib-headless/xterm-headless.mjs"];
-}, {
-    readonly name: "@xterm/addon-serialize";
-    readonly version: "0.14.0";
-    readonly files: readonly ["package.json", "LICENSE", "lib/addon-serialize.js", "lib/addon-serialize.mjs"];
-}, {
-    readonly name: "node-pty";
-    readonly version: "1.1.0";
-    readonly files: readonly ["package.json", "LICENSE", "CONPTY-LICENSE", "CONPTY-NOTICE.md", "lib/index.js", "lib/windowsConoutConnection.js", "lib/eventEmitter2.js", "lib/types.js", "lib/windowsTerminal.js", "lib/utils.js", "lib/worker/conoutSocketWorker.js", "lib/conpty_console_list_agent.js", "lib/interfaces.js", "lib/windowsPtyAgent.js", "lib/shared/conout.js", "lib/terminal.js", "lib/unixTerminal.js", ...string[]];
-}];
-export declare const RUNTIME_PANE_MODULES: readonly ["general-role.js", "runtime-general-protocol.js", "runtime-general-workspace.js", "runtime-pane-output.js", "local-pane-stage.ps1", "runtime-pane-stdio.js", "runtime-pane-stdio-protocol.js", "runtime-pane-protocol.js", "runtime-pane-mcp-protocol.js", "runtime-pane-mcp-relay.js", "windows-pane-mcp.js", "runtime-pane-link.js", "runtime-pane-private.js", "runtime-pane-private.ps1", "runtime-pane-service.js", "runtime-pane-assets.js", "runtime-pane-host.js", "runtime-pane-screen.js", "runtime-pane-store.js", "runtime-pane-boot.js", "runtime-pane-native.js", "runtime-pane-config.js", "runtime-pane-transcript.js", "runtime-pane-quota-history.js", "pane-quota-history.js", "runtime-pane-codex-index.js", "runtime-pane-transcript-protocol.js", "transcript-records.js", "transcript-needles.js", "transcript-turns.js", "runtime-pane-process.js", "runtime-pane-worker.js", "runtime-pane-job-owner.js", "runtime-pane-job.ps1"];
-/** node-pty@1.1.0 npm prebuilds (lockfile integrity), bundled ConPTY 1.23.251008001. */
-export declare const PANE_NATIVE_SHA256: Readonly<Record<string, string>>;

package/dist/runtime-pane-assets.js

@@ -1,23 +0,0 @@
-/** Fixed program assets only. Prepared at build time; Linux installations load no Windows native module. */
-export const RUNTIME_PANE_ASSETS = [
-    { name: "@xterm/headless", version: "6.0.0", files: ["package.json", "LICENSE", "lib-headless/xterm-headless.js", "lib-headless/xterm-headless.mjs"] },
-    { name: "@xterm/addon-serialize", version: "0.14.0", files: ["package.json", "LICENSE", "lib/addon-serialize.js", "lib/addon-serialize.mjs"] },
-    { name: "node-pty", version: "1.1.0", files: [
-            "package.json", "LICENSE", "CONPTY-LICENSE", "CONPTY-NOTICE.md", "lib/index.js", "lib/windowsConoutConnection.js", "lib/eventEmitter2.js", "lib/types.js", "lib/windowsTerminal.js", "lib/utils.js",
-            "lib/worker/conoutSocketWorker.js", "lib/conpty_console_list_agent.js", "lib/interfaces.js", "lib/windowsPtyAgent.js", "lib/shared/conout.js", "lib/terminal.js", "lib/unixTerminal.js",
-            ...["win32-x64", "win32-arm64"].flatMap(platform => ["conpty.node", "conpty_console_list.node", "conpty/OpenConsole.exe", "conpty/conpty.dll"].map(file => `prebuilds/${platform}/${file}`)),
-        ] },
-];
-export const RUNTIME_PANE_MODULES = ["general-role.js", "runtime-general-protocol.js", "runtime-general-workspace.js", "runtime-pane-output.js", "local-pane-stage.ps1", "runtime-pane-stdio.js", "runtime-pane-stdio-protocol.js", "runtime-pane-protocol.js", "runtime-pane-mcp-protocol.js", "runtime-pane-mcp-relay.js", "windows-pane-mcp.js", "runtime-pane-link.js", "runtime-pane-private.js", "runtime-pane-private.ps1", "runtime-pane-service.js", "runtime-pane-assets.js", "runtime-pane-host.js", "runtime-pane-screen.js", "runtime-pane-store.js", "runtime-pane-boot.js", "runtime-pane-native.js", "runtime-pane-config.js", "runtime-pane-transcript.js", "runtime-pane-quota-history.js", "pane-quota-history.js", "runtime-pane-codex-index.js", "runtime-pane-transcript-protocol.js", "transcript-records.js", "transcript-needles.js", "transcript-turns.js", "runtime-pane-process.js", "runtime-pane-worker.js", "runtime-pane-job-owner.js", "runtime-pane-job.ps1"];
-/** node-pty@1.1.0 npm prebuilds (lockfile integrity), bundled ConPTY 1.23.251008001. */
-export const PANE_NATIVE_SHA256 = {
-    "prebuilds/win32-x64/conpty.node": "ee8f4e6f4dad71939eecfda11de249400e34bfefe4c8b48af13f3b5476f4035b",
-    "prebuilds/win32-x64/conpty_console_list.node": "879dd94cfc79f1e263a00077597ae9448a5394b7d193381aaa50d992a1f91090",
-    "prebuilds/win32-x64/conpty/conpty.dll": "7c7430632052ff703540b68371ec43821820aa1335d8e11dfbcd9ff00e9daaed",
-    "prebuilds/win32-x64/conpty/OpenConsole.exe": "d1fe7faa62f9e955e2ac2371f95d7e5513df4d496255097158f979c94782c5fc",
-    "prebuilds/win32-arm64/conpty.node": "25a06916c5cb1a3aac7acc401424d8e6a6a9e8eea441a3604cd657a0619555cd",
-    "prebuilds/win32-arm64/conpty_console_list.node": "fda76b16afb3bf9a4de085c943b5fb4138ecbeb08e8254c09d5555ea5426bd4e",
-    "prebuilds/win32-arm64/conpty/conpty.dll": "b6cca5f1081111f59e5255eec043d924ebd11a86d09986c0d121b680540b3380",
-    "prebuilds/win32-arm64/conpty/OpenConsole.exe": "b7763ba27e80d5e84f9e60d1368ec2ddb25dfd10283336c0c9f3f252d35cb2f8"
-};
-//# sourceMappingURL=runtime-pane-assets.js.map

package/dist/runtime-pane-assets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-pane-assets.js","sourceRoot":"","sources":["../src/runtime-pane-assets.ts"],"names":[],"mappings":"AAAA,4GAA4G;AAC5G,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,gCAAgC,EAAE,iCAAiC,CAAC,EAAE;IACtJ,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,wBAAwB,EAAE,yBAAyB,CAAC,EAAE;IAC9I,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;YAC3C,cAAc,EAAE,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,cAAc,EAAE,gCAAgC,EAAE,sBAAsB,EAAE,cAAc,EAAE,wBAAwB,EAAE,cAAc;YACnM,kCAAkC,EAAE,kCAAkC,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,qBAAqB;YACvL,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,aAAa,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,mBAAmB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;SAC7L,EAAE;CACK,CAAC;AACX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,iBAAiB,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,+BAA+B,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,qCAAqC,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,sBAAsB,CAAU,CAAC;AAEz8B,wFAAwF;AACxF,MAAM,CAAC,MAAM,kBAAkB,GAAqC;IAClE,iCAAiC,EAAE,kEAAkE;IACrG,8CAA8C,EAAE,kEAAkE;IAClH,uCAAuC,EAAE,kEAAkE;IAC3G,4CAA4C,EAAE,kEAAkE;IAChH,mCAAmC,EAAE,kEAAkE;IACvG,gDAAgD,EAAE,kEAAkE;IACpH,yCAAyC,EAAE,kEAAkE;IAC7G,8CAA8C,EAAE,kEAAkE;CACnH,CAAC"}

package/dist/runtime-pane-boot.d.ts

@@ -1,9 +0,0 @@
-export declare function paneSystemBootId(ticks: string): string;
-export declare function readPaneSystemBootId(): Promise<string | undefined>;
-/** Command line of a process, read-only; unknown (undefined) when it cannot be read, which is never evidence either way. */
-export declare function readProcessCommandLine(pid: number): Promise<string | undefined>;
-/**
- * The profile lock's PID when a readable command line shows it is no Runtime (Windows reuses PIDs after a restart), else undefined.
- * A Runtime that is really running, or one whose command line cannot be read, is never reported, so it keeps its lock.
- */
-export declare function reusedRuntimeLockPid(holder: number | undefined, readCommandLine?: (pid: number) => Promise<string | undefined>): Promise<number | undefined>;