@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/runtime-pane-boot.js

@@ -1,47 +0,0 @@
-/** Read-only OS incarnation proof. A failed query is unknown, never evidence that a process exited. */
-import { createHash } from "node:crypto";
-import { promisify } from "node:util";
-import { join } from "node:path";
-import { execFile } from "./child-process.js";
-import { nativeCliEnvironment } from "./windows-cli-worker.js";
-export function paneSystemBootId(ticks) {
-    if (ticks.trim() !== ticks || !/^\d{17,20}$/.test(ticks))
-        throw Error("Windows boot identity is unconfirmed");
-    return createHash("sha256").update("agend-windows-boot-v1:" + ticks).digest("hex");
-}
-export async function readPaneSystemBootId() {
-    if (process.platform !== "win32")
-        return undefined;
-    try {
-        const script = "$ErrorActionPreference='Stop'; $ProgressPreference='SilentlyContinue'; [Console]::Write((Get-CimInstance Win32_OperatingSystem).LastBootUpTime.ToUniversalTime().Ticks)";
-        const result = await promisify(execFile)(join(process.env.SystemRoot || "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe"), ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], { timeout: 30_000, maxBuffer: 4096, windowsHide: true, env: nativeCliEnvironment() });
-        return paneSystemBootId(result.stdout.trim());
-    }
-    catch {
-        return undefined;
-    }
-}
-/** Command line of a process, read-only; unknown (undefined) when it cannot be read, which is never evidence either way. */
-export async function readProcessCommandLine(pid) {
-    if (process.platform !== "win32" || !Number.isSafeInteger(pid) || pid <= 0)
-        return undefined;
-    try {
-        const script = `$ErrorActionPreference='Stop'; $ProgressPreference='SilentlyContinue'; [Console]::Write((Get-CimInstance Win32_Process -Filter 'ProcessId=${pid}').CommandLine)`;
-        const result = await promisify(execFile)(join(process.env.SystemRoot || "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe"), ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")], { timeout: 30_000, maxBuffer: 65_536, windowsHide: true, env: nativeCliEnvironment() });
-        return result.stdout.trim() || undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * The profile lock's PID when a readable command line shows it is no Runtime (Windows reuses PIDs after a restart), else undefined.
- * A Runtime that is really running, or one whose command line cannot be read, is never reported, so it keeps its lock.
- */
-export async function reusedRuntimeLockPid(holder, readCommandLine = readProcessCommandLine) {
-    if (holder === undefined || holder === process.pid)
-        return undefined;
-    const line = await readCommandLine(holder);
-    return line !== undefined && !/runtime-cli/i.test(line) ? holder : undefined;
-}
-//# sourceMappingURL=runtime-pane-boot.js.map

package/dist/runtime-pane-boot.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-pane-boot.js","sourceRoot":"","sources":["../src/runtime-pane-boot.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC9G,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACrF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,yKAAyK,CAAC;QACzL,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAC/I,CAAC,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EACvG,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC;QACxF,OAAO,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AACD,4HAA4H;AAC5H,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAW;IACtD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7F,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,6IAA6I,GAAG,iBAAiB,CAAC;QACjL,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAC/I,CAAC,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EACvG,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC;QAC1F,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AACD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAA0B,EAAE,eAAe,GAAiD,sBAAsB;IAC3J,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO,IAAI,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/E,CAAC"}

package/dist/runtime-pane-codex-index.d.ts

@@ -1,10 +0,0 @@
-export declare const CODEX_PROOF_DB_MAX: number, CODEX_PROOF_WAL_MAX: number;
-/** SQLite silently discards WAL content it cannot verify and then answers from the older main file, so a WAL counts
- * only when SQLite would apply ALL of it:
- *  - a valid header (magic, version, page size, header checksum) and whole frames;
- *  - every frame in the header's generation (same salts), chaining its checksum, page number ≠ 0;
- *  - the last frame is a commit (no torn or uncommitted transaction).
- * An older generation's leftover tail is not provably older, so it is unknown too (an administrator decides).
- * Anything else (a torn, flipped, relabelled or foreign file) stays unknown instead of being read as "no rows". */
-export declare function coherentSqliteWal(bytes: Buffer): boolean;
-export declare function codexIndexHasNoThread(path: string, id: string, current: () => boolean, walPath?: string): Promise<boolean>;

package/dist/runtime-pane-codex-index.js

@@ -1,151 +0,0 @@
-/** Read-only exact-ID evidence for the audited Codex local store. No vendor process, DB edits or sidecars. */
-import { Worker } from "node:worker_threads";
-import { pathToFileURL } from "node:url";
-import { constants } from "node:fs";
-import { mkdtemp, open, rm, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-// Immutable mode cannot see WAL changes: without a WAL path, callers must prove no WAL bytes before AND after this query.
-// Real Codex (0.165, M-2423) leaves a non-empty state_5.sqlite-wal after a clean exit, so a WAL is read through a private
-// snapshot copy (DB + WAL, never the provider's -shm) that SQLite recovers on open; the provider's files are only read.
-const QUERY = `
-const {parentPort,workerData}=require('node:worker_threads');
-let db;try{const {DatabaseSync}=require('node:sqlite');db=new DatabaseSync(workerData.uri,{readOnly:workerData.readOnly});
-db.exec('PRAGMA trusted_schema=OFF');const schema=db.prepare('PRAGMA table_info(threads)').all();
-if(schema.length>128||!schema.some(c=>c.name==='id'&&c.type.toUpperCase()==='TEXT'&&c.pk===1))throw Error('Unknown schema');
-const row=db.prepare("SELECT 1 AS present FROM threads WHERE typeof(id) <> 'text' OR id=? COLLATE NOCASE LIMIT 1").get(workerData.id);
-parentPort.postMessage(row===undefined?'clear':'unknown');}catch{parentPort.postMessage('unknown');}finally{try{db?.close();}catch{}}
-`;
-export const CODEX_PROOF_DB_MAX = 128 * 1024 * 1024, CODEX_PROOF_WAL_MAX = 64 * 1024 * 1024;
-/** Copy one regular file without following a swapped link or blocking on a FIFO; the caller re-checks the source after. */
-async function snapshotFile(source, target, max, check) {
-    const handle = await open(source, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
-    try {
-        const stat = await handle.stat();
-        if (!stat.isFile() || stat.size > max)
-            throw Error("Unsafe Codex proof snapshot source");
-        const bytes = Buffer.alloc(stat.size);
-        for (let offset = 0; offset < stat.size;) {
-            const { bytesRead } = await handle.read(bytes, offset, stat.size - offset, offset);
-            if (!bytesRead)
-                throw Error("Codex proof snapshot source shrank");
-            offset += bytesRead;
-        }
-        if (check && !check(bytes))
-            throw Error("Unfamiliar Codex proof snapshot");
-        await writeFile(target, bytes, { flag: "wx", mode: 0o600 });
-    }
-    finally {
-        await handle.close();
-    }
-}
-/** SQLite's WAL checksum (walChecksumBytes): pairs of 32-bit words, big-endian when the magic's low bit is set. */
-function walChecksum(bytes, start, end, bigEndian, s1, s2) {
-    for (let i = start; i < end; i += 8) {
-        const x0 = bigEndian ? bytes.readUInt32BE(i) : bytes.readUInt32LE(i), x1 = bigEndian ? bytes.readUInt32BE(i + 4) : bytes.readUInt32LE(i + 4);
-        s1 = (s1 + x0 + s2) >>> 0;
-        s2 = (s2 + x1 + s1) >>> 0;
-    }
-    return [s1, s2];
-}
-/** SQLite silently discards WAL content it cannot verify and then answers from the older main file, so a WAL counts
- * only when SQLite would apply ALL of it:
- *  - a valid header (magic, version, page size, header checksum) and whole frames;
- *  - every frame in the header's generation (same salts), chaining its checksum, page number ≠ 0;
- *  - the last frame is a commit (no torn or uncommitted transaction).
- * An older generation's leftover tail is not provably older, so it is unknown too (an administrator decides).
- * Anything else (a torn, flipped, relabelled or foreign file) stays unknown instead of being read as "no rows". */
-export function coherentSqliteWal(bytes) {
-    if (bytes.length < 32)
-        return false;
-    const magic = bytes.readUInt32BE(0), pageSize = bytes.readUInt32BE(8);
-    if ((magic !== 0x377f0682 && magic !== 0x377f0683) || bytes.readUInt32BE(4) !== 3007000)
-        return false;
-    const size = pageSize === 1 ? 65536 : pageSize;
-    if (size < 512 || size > 65536 || (size & (size - 1)))
-        return false;
-    if ((bytes.length - 32) % (24 + size) !== 0)
-        return false;
-    const bigEndian = (magic & 1) === 1;
-    let [s1, s2] = walChecksum(bytes, 0, 24, bigEndian, 0, 0);
-    if (s1 !== bytes.readUInt32BE(24) || s2 !== bytes.readUInt32BE(28))
-        return false;
-    const salt1 = bytes.readUInt32BE(16), salt2 = bytes.readUInt32BE(20);
-    let frames = 0, lastCommit = false;
-    for (let at = 32; at < bytes.length; at += 24 + size) {
-        // Another generation's frame cannot be proved older: its checksum chain began at a header SQLite has overwritten,
-        // and checksums do not cover salts, so a relabelled current frame looks the same. Never read it as "no rows".
-        if (bytes.readUInt32BE(at + 8) !== salt1 || bytes.readUInt32BE(at + 12) !== salt2)
-            return false;
-        if (bytes.readUInt32BE(at) === 0)
-            return false;
-        [s1, s2] = walChecksum(bytes, at, at + 8, bigEndian, s1, s2);
-        [s1, s2] = walChecksum(bytes, at + 24, at + 24 + size, bigEndian, s1, s2);
-        if (s1 !== bytes.readUInt32BE(at + 16) || s2 !== bytes.readUInt32BE(at + 20))
-            return false;
-        frames++;
-        lastCommit = bytes.readUInt32BE(at + 4) !== 0;
-    }
-    return frames === 0 || lastCommit;
-}
-let active = false;
-export async function codexIndexHasNoThread(path, id, current, walPath) {
-    const isCurrent = () => { try {
-        return current() === true;
-    }
-    catch {
-        return false;
-    } };
-    if (!isCurrent() || active)
-        return false;
-    active = true;
-    let snapshot, released = false;
-    const release = () => { if (!released) {
-        released = true;
-        active = false;
-    } };
-    try {
-        let uri = pathToFileURL(path).href + "?immutable=1", readOnly = true;
-        if (walPath !== undefined) {
-            snapshot = await mkdtemp(join(tmpdir(), "agend-codex-proof-"));
-            const copy = join(snapshot, "state.sqlite");
-            await snapshotFile(path, copy, CODEX_PROOF_DB_MAX);
-            await snapshotFile(walPath, copy + "-wal", CODEX_PROOF_WAL_MAX, coherentSqliteWal);
-            if (!isCurrent())
-                return false;
-            // Our own copy: writable so SQLite can rebuild its WAL index; nothing in it is ever written back.
-            uri = pathToFileURL(copy).href;
-            readOnly = false;
-        }
-        return await new Promise(resolve => {
-            let worker, timer, done = false;
-            const finish = (clear) => { if (done)
-                return; done = true; clearTimeout(timer); if (worker)
-                void worker.terminate().then(() => resolve(clear && isCurrent()), () => resolve(false));
-            else
-                resolve(false); };
-            try {
-                worker = new Worker(QUERY, { eval: true, workerData: { uri, readOnly, id },
-                    resourceLimits: { maxOldGenerationSizeMb: 16, maxYoungGenerationSizeMb: 4 }, stderr: true, stdout: true });
-                worker.stdout?.resume();
-                worker.stderr?.resume(); // The only result that leaves this worker is an exact-ID presence bit.
-                worker.once("message", value => finish(value === "clear"));
-                worker.once("error", () => finish(false));
-                worker.once("exit", () => { release(); finish(false); });
-                timer = setTimeout(() => finish(false), 750);
-            }
-            catch {
-                finish(false);
-            }
-        });
-    }
-    catch {
-        return false;
-    }
-    finally {
-        release();
-        if (snapshot)
-            await rm(snapshot, { recursive: true, force: true }).catch(() => undefined);
-    }
-}
-//# sourceMappingURL=runtime-pane-codex-index.js.map

package/dist/runtime-pane-codex-index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-pane-codex-index.js","sourceRoot":"","sources":["../src/runtime-pane-codex-index.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,0HAA0H;AAC1H,0HAA0H;AAC1H,wHAAwH;AACxH,MAAM,KAAK,GAAG;;;;;;;CAOb,CAAC;AACF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC5F,2HAA2H;AAC3H,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,MAAc,EAAE,GAAW,EAAE,KAAkC;IACzG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IAClH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG;YAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;YACzC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACnF,IAAI,CAAC,SAAS;gBAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAClE,MAAM,IAAI,SAAS,CAAC;QACtB,CAAC;QACD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC3E,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AACrC,CAAC;AACD,mHAAmH;AACnH,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa,EAAE,GAAW,EAAE,SAAkB,EAAE,EAAU,EAAE,EAAU;IACxG,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7I,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AACD;;;;;;mHAMmH;AACnH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,UAAU,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACtG,MAAM,IAAI,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC/C,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,SAAS,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,EAAE,KAAK,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACrE,IAAI,MAAM,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IACnC,KAAK,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;QACrD,kHAAkH;QAClH,8GAA8G;QAC9G,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAChG,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1E,IAAI,EAAE,KAAK,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3F,MAAM,EAAE,CAAC;QAAC,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC;AACpC,CAAC;AACD,IAAI,MAAM,GAAG,KAAK,CAAC;AACnB,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,EAAU,EAAE,OAAsB,EAAE,OAAgB;IAC5G,MAAM,SAAS,GAAC,GAAU,EAAE,GAAC,IAAG,CAAC;QAAA,OAAO,OAAO,EAAE,KAAG,IAAI,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC,CAAA,CAAC,CAAC;IAChF,IAAG,CAAC,SAAS,EAAE,IAAE,MAAM;QAAC,OAAO,KAAK,CAAC;IACrC,MAAM,GAAC,IAAI,CAAC;IACZ,IAAI,QAA4B,EAAE,QAAQ,GAAG,KAAK,CAAC;IACnD,MAAM,OAAO,GAAG,GAAS,EAAE,GAAG,IAAG,CAAC,QAAQ,EAAC,CAAC;QAAA,QAAQ,GAAC,IAAI,CAAC;QAAA,MAAM,GAAC,KAAK,CAAC;IAAA,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,cAAc,EAAE,QAAQ,GAAG,IAAI,CAAC;QACrE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YAC5C,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;YACnD,MAAM,YAAY,CAAC,OAAO,EAAE,IAAI,GAAG,MAAM,EAAE,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;YACnF,IAAI,CAAC,SAAS,EAAE;gBAAE,OAAO,KAAK,CAAC;YAC/B,kGAAkG;YAClG,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YAAC,QAAQ,GAAG,KAAK,CAAC;QACnD,CAAC;QACD,OAAO,MAAM,IAAI,OAAO,CAAU,OAAO,CAAC,EAAE;YAC1C,IAAI,MAA0B,EAAE,KAAgD,EAAE,IAAI,GAAG,KAAK,CAAC;YAC/F,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE,GAAG,IAAG,IAAI;gBAAC,OAAO,CAAA,IAAI,GAAC,IAAI,CAAC,CAAA,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA,IAAG,MAAM;gBAAC,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,GAAE,EAAE,CAAA,OAAO,CAAC,KAAK,IAAE,SAAS,EAAE,CAAC,EAAC,GAAE,EAAE,CAAA,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;;gBAAK,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1M,IAAI,CAAC;gBACH,MAAM,GAAC,IAAI,MAAM,CAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,UAAU,EAAC,EAAC,GAAG,EAAC,QAAQ,EAAC,EAAE,EAAC;oBAC7D,cAAc,EAAC,EAAC,sBAAsB,EAAC,EAAE,EAAC,wBAAwB,EAAC,CAAC,EAAC,EAAC,MAAM,EAAC,IAAI,EAAC,MAAM,EAAC,IAAI,EAAC,CAAC,CAAC;gBAClG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBAAA,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,uEAAuE;gBACxH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAC,KAAK,CAAA,EAAE,CAAA,MAAM,CAAC,KAAK,KAAG,OAAO,CAAC,CAAC,CAAC;gBAAA,MAAM,CAAC,IAAI,CAAC,OAAO,EAAC,GAAE,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAA,MAAM,CAAC,IAAI,CAAC,MAAM,EAAC,GAAE,EAAE,GAAC,OAAO,EAAE,CAAC,CAAA,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;gBAChJ,KAAK,GAAC,UAAU,CAAC,GAAE,EAAE,CAAA,MAAM,CAAC,KAAK,CAAC,EAAC,GAAG,CAAC,CAAC;YAC1C,CAAC;YAAA,MAAK,CAAC;gBAAA,MAAM,CAAC,KAAK,CAAC,CAAC;YAAA,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;YACjB,CAAC;QACP,OAAO,EAAE,CAAC;QACV,IAAI,QAAQ;YAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC"}

package/dist/runtime-pane-config.d.ts

@@ -1,16 +0,0 @@
-import type { RuntimePaneLaunch } from "./runtime-pane-protocol.js";
-import type { NativePaneOwner } from "./runtime-pane-native.js";
-export interface NativePaneConfig {
-    sessionId?: string;
-    instructionsFile?: string;
-    mcp?: {
-        nodePath: string;
-        helperPath: string;
-        connectionPath: string;
-        configPath: string;
-        tools: string[];
-        serverName: string;
-    };
-    cleanup(): void;
-}
-export declare function prepareNativePaneConfig(launch: RuntimePaneLaunch, owner: NativePaneOwner, nodePath: string, helperPath: string): NativePaneConfig;

package/dist/runtime-pane-config.js

@@ -1,54 +0,0 @@
-/** Launch-local files only. Provider account configuration and credentials are never copied or rewritten. */
-import { lstatSync, mkdirSync, rmdirSync, unlinkSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
-import { validateNativeMcpConnection } from "./windows-cli-providers.js";
-import { validatePaneMcpOwner } from "./runtime-pane-mcp-protocol.js";
-function realDirectory(path) { const stat = lstatSync(path); if (!stat.isDirectory() || stat.isSymbolicLink())
-    throw Error("Pane configuration must stay in its owned directory"); }
-export function prepareNativePaneConfig(launch, owner, nodePath, helperPath) {
-    realDirectory(owner.directory);
-    const parent = join(owner.directory, "launches");
-    mkdirSync(parent, { recursive: true, mode: 0o700 });
-    realDirectory(parent);
-    const directory = join(parent, owner.launchId);
-    mkdirSync(directory, { mode: 0o700 });
-    const files = [];
-    const config = { ...(launch.cli === "claude-code" ? { sessionId: launch.sessionId ?? owner.launchId } : {}), cleanup: () => {
-            for (const file of files) {
-                try {
-                    unlinkSync(file);
-                }
-                catch { /* Only exact files created by this launch. */ }
-            }
-            try {
-                rmdirSync(directory);
-            }
-            catch { /* Unknown extra files are never deleted. */ }
-        } };
-    const write = (name, value) => { const file = join(directory, name); writeFileSync(file, value, { encoding: "utf8", mode: 0o600, flag: "wx" }); files.push(file); return file; };
-    try {
-        if (launch.mcpTools) {
-            if (!owner.mcp)
-                throw Error("Persistent pane MCP scope was not prepared");
-            const identity = validatePaneMcpOwner(owner.mcp.owner), mcp = validateNativeMcpConnection({ endpoint: owner.mcp.endpoint, token: owner.mcp.token, tools: owner.mcp.tools });
-            if (identity.paneId !== launch.paneId || identity.launchId !== owner.launchId || identity.agentId !== launch.agentId || identity.instance !== launch.instance
-                || JSON.stringify(mcp.tools) !== JSON.stringify(launch.mcpTools))
-                throw Error("Persistent pane MCP scope differs from its launch");
-            const connectionPath = write("mcp-connection.json", JSON.stringify({ ...mcp, owner: identity }));
-            const serverName = `agend_${launch.agentId.replace(/-/g, "")}`;
-            const server = { command: nodePath, args: [helperPath, "--connection-file", connectionPath] };
-            const configPath = write("mcp.json", JSON.stringify({ mcpServers: { [serverName]: server } }));
-            config.mcp = { nodePath, helperPath, connectionPath, configPath, serverName, tools: mcp.tools };
-        }
-        else if (owner.mcp)
-            throw Error("Unexpected pane MCP scope");
-        if (launch.cli === "claude-code" && launch.instructions)
-            config.instructionsFile = write("instructions.txt", launch.instructions);
-        return config;
-    }
-    catch (error) {
-        config.cleanup();
-        throw error;
-    }
-}
-//# sourceMappingURL=runtime-pane-config.js.map

package/dist/runtime-pane-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-pane-config.js","sourceRoot":"","sources":["../src/runtime-pane-config.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAItE,SAAS,aAAa,CAAC,IAAY,IAAU,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;IAAE,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC,CAAC,CAAC;AAClM,MAAM,UAAU,uBAAuB,CAAC,MAAyB,EAAE,KAAsB,EAAE,QAAgB,EAAE,UAAkB;IAC7H,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7H,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAqB,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE;YAC3I,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC;YAAC,CAAC;YAChH,IAAI,CAAC;gBAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;QACtF,CAAC,EAAE,CAAC;IACJ,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,GAAG,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACzM,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,GAAG;gBAAE,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC1E,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,2BAA2B,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5K,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;mBACxJ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACrI,MAAM,cAAc,GAAG,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YACjG,MAAM,UAAU,GAAG,SAAS,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAC/D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,mBAAmB,EAAE,cAAc,CAAC,EAAE,CAAC;YAC9F,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/F,MAAM,CAAC,GAAG,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QAClG,CAAC;aAAM,IAAI,KAAK,CAAC,GAAG;YAAE,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa,IAAI,MAAM,CAAC,YAAY;YAAE,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,kBAAkB,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QAClI,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACpD,CAAC"}

package/dist/runtime-pane-host.d.ts

@@ -1,63 +0,0 @@
-import type { IPty } from "node-pty";
-import { RuntimePaneStore } from "./runtime-pane-store.js";
-import { type RuntimePaneLaunch, type RuntimePaneSnapshot } from "./runtime-pane-protocol.js";
-import type { PaneMcpConnection } from "./windows-pane-mcp.js";
-import type { NativePaneOwner } from "./runtime-pane-native.js";
-import type { PaneMcpOwner } from "./runtime-pane-mcp-protocol.js";
-import { NativePaneTranscriptReader, type NativeClaudeSessionState } from "./runtime-pane-transcript.js";
-export { persistentNativeArguments } from "./runtime-pane-native.js";
-export type RuntimePaneProcess = Pick<IPty, "pid" | "write" | "resize" | "kill" | "pause" | "resume" | "onData" | "onExit"> & {
-    /** The CLI version the helper verified and launched (absent from an older helper). */
-    readonly version?: string;
-    /** Internal pre-spawn proof; only bounded matching messages cross a capture response. */
-    quotaReplay?: {
-        messages: readonly string[];
-        current(): boolean;
-    };
-    onFailure?(listener: () => void): {
-        dispose(): void;
-    };
-};
-export interface RuntimePaneHostOptions {
-    store: RuntimePaneStore;
-    bootId: string;
-    systemBootId?: string;
-    online(): boolean;
-    maxAgents(): number;
-    /** Internal local launch factory, never a field in the remote request. */
-    spawn?(launch: RuntimePaneLaunch, owner: NativePaneOwner): Promise<RuntimePaneProcess>;
-    mcpConnection?(owner: PaneMcpOwner, tools: string[]): PaneMcpConnection;
-    /** Internal runner seam. A remote request never provides roots or a path. */
-    transcript?(launch: RuntimePaneLaunch, sessionId: string): (Pick<NativePaneTranscriptReader, "read" | "close"> & Partial<Pick<NativePaneTranscriptReader, "baseline">>);
-    sessionProof?(launch: RuntimePaneLaunch, sessionId: string, current: () => boolean): Promise<NativeClaudeSessionState>;
-    /**
-     * Local seam, never a request field: the folder of a credential profile that exists under this Runtime's own profile root, or a refusal.
-     * Absent means this host cannot honour a profile, and a launch that names one is refused rather than started on the default account.
-     */
-    credentialHome?(cli: RuntimePaneLaunch["cli"], name: string): string;
-    /** Asked once for each NEW launch that names a profile (never for a reattach): true = signed in. Anything else refuses the launch. */
-    credentialLogin?(cli: RuntimePaneLaunch["cli"], home: string, name: string): Promise<boolean | null>;
-    output?(snapshot: RuntimePaneSnapshot): void;
-}
-export declare class RuntimePaneHost {
-    private readonly options;
-    private readonly live;
-    private readonly queues;
-    private closing;
-    private readonly general;
-    constructor(options: RuntimePaneHostOptions);
-    list(): RuntimePaneSnapshot[];
-    /** Exact live reservation; no PID adoption or scans of other panes. */
-    owns(owner: PaneMcpOwner): boolean;
-    request(raw: unknown, current?: () => boolean): Promise<unknown>;
-    /** The profile folder for a launch that names one (checked, never created here); undefined when it names none. */
-    private credentialHome;
-    private admitCredentialProfile;
-    /** Transcripts and conversation proofs live under the profile's own folder; a launch without a profile keeps the Runtime's own roots. */
-    private transcriptRoots;
-    private open;
-    private recover;
-    private operate;
-    private readTranscript;
-    stop(): Promise<void>;
-}