@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/dist/authority/web-authority.js

@@ -62,20 +62,12 @@ export function evaluateWebAuthority(i) {
     // §3.5 / §0.2: the public link never qualifies — except the admin's own named tunnel (provenance, exact hostname)
     // while the option is on and "Only this computer can authorize" is off. A peer that says named off the gateway is not.
     // §0.3: the temporary public link (a gateway request that is not named) likewise, by its own option.
-    // #3008: a session signed in from outside with the authenticator's code — over the link connections from outside
-    // opened. That switch is its opt-in (the user's decision 1), in place of the named/quick link options; "Only this
-    // computer can authorize" still refuses it. Off, or another link: it is no one's (and the switch's Off ends it anyway).
-    const remote = i.gateway && s?.remote === "totp" && !s.owner && i.hostOperator === true;
     if (i.gateway) {
         if (i.peer !== "named_link" && i.peer !== "quick_link")
             return refuse("public_link");
         if (i.policy.loopbackOnly)
             return refuse("loopback_only");
-        if (remote) {
-            if (!i.outside || s.exposureId !== i.outside.exposureId)
-                return refuse("outside_sign_in");
-        }
-        else if (i.peer === "named_link" ? !i.policy.namedLink : !i.policy.quickLink)
+        if (i.peer === "named_link" ? !i.policy.namedLink : !i.policy.quickLink)
             return refuse(i.peer === "named_link" ? "named_link_off" : "quick_link_off");
     }
     else if (i.peer === "named_link" || i.peer === "quick_link")
@@ -91,7 +83,7 @@ export function evaluateWebAuthority(i) {
     // #2910 D1: the host operator — a host session with no account, on a web-only fleet. It has no adapter to be an admin
     // of or a namespace in (a web-only fleet has none): it is this computer's admin, so only from this computer.
     const host = s.host === true && !s.owner && i.hostOperator === true;
-    const owner = host || remote ? HOST_OPERATOR : s.owner;
+    const owner = host ? HOST_OPERATOR : s.owner;
     // #2910 D1: on a web-only fleet a session with no account (one from before, or another `agend web` sign-in) is told
     // the one way there: a new sign-in with the host's code on this computer.
     if (!owner?.adapterId || !owner.userId)
@@ -100,9 +92,6 @@ export function evaluateWebAuthority(i) {
         if (i.peer !== "loopback")
             return refuse("loopback_only");
     }
-    else if (remote) {
-        // Checked above: the link connections from outside opened, the switch on, "Only this computer…" off.
-    }
     else {
         if (!i.isAdmin(owner.userId, owner.adapterId))
             return refuse("not_admin");
@@ -114,10 +103,10 @@ export function evaluateWebAuthority(i) {
     // §0: authorized once, by this account, for this session, under the current epoch, and not longer ago than allowed.
     const a = i.authorization;
     if (!a || a.handle !== s.handle || a.owner.adapterId !== owner.adapterId || a.owner.userId !== owner.userId || a.epoch !== i.epoch)
-        return refuse(host ? "host_sign_in" : remote ? "outside_sign_in" : "not_authorized");
+        return refuse(host ? "host_sign_in" : "not_authorized");
     // §0.1: the end it was given with, or sooner if the hours were lowered since — never later.
     if (!(i.now <= Math.min(a.until, a.authorizedAt + i.policy.maxSessionMs)))
-        return refuse(host ? "host_sign_in" : remote ? "outside_sign_in" : "authorization_expired");
+        return refuse(host ? "host_sign_in" : "authorization_expired");
     return {
         authority: {
             kind: "web-verified", actor: { adapter_id: owner.adapterId, user_id: owner.userId },
@@ -156,16 +145,6 @@ export function authorityNow(stored, state) {
         return down("revoked");
     if (state.loopbackOnly && stored.session?.peer !== "loopback")
         return down("loopback_only");
-    // #3008: this computer's admin signed in from outside (over the link connections from outside opened) — its receipts
-    // hold while that switch is on (its opt-in, not the link options); off, they read as none at once.
-    if (stored.actor?.adapter_id === HOST_OPERATOR.adapterId && stored.actor.user_id === HOST_OPERATOR.userId
-        && (stored.session?.peer === "named_link" || stored.session?.peer === "quick_link")) {
-        if (state.outside !== true)
-            return down("outside_off");
-        // #3015 review (Prism P2 2): its session must be one admitted since the last revocation of remote authority (the
-        // switch off, the app removed or replaced) — never back after one, whatever the clock or a restart says.
-        return state.outsideHandles?.has(stored.session.handle) === true ? stored : down("revoked");
-    }
     // §0.2: the named-link option off — every receipt from a session over it reads as none at once.
     if (!state.namedLink && stored.session?.peer === "named_link")
         return down("named_link_off");

package/dist/authority/web-authority.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-authority.js","sourceRoot":"","sources":["../../src/authority/web-authority.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAmDvE,2HAA2H;AAC3H,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAW,CAAC;AAahF,4HAA4H;AAC5H,MAAM,UAAU,kBAAkB,CAAC,GAA0B;IAC3D,MAAM,CAAC,GAAG,GAAG,EAAE,kBAAkB,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,iBAAiB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC5F,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC;IACrI,qHAAqH;IACrH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,KAAK,IAAI;QAChH,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,GAAG,SAAS,EAAE,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAA8C,EAAE,QAAQ,GAAY,kBAAkB;IACvH,OAAO,CAAC,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;AACjG,CAAC;AAED,qGAAqG;AACrG,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,CAAU,CAAC;AAEjI,SAAS,eAAe,CAAC,OAA2B;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACtE,OAAO,OAAO,KAAK,KAAK,IAAI,kCAAkC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAwG;IACtI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,IAAI,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AACzF,CAAC;AAgCD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAkB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;AAEtH;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAA4D,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;AAE/I,sHAAsH;AACtH,MAAM,UAAU,oBAAoB,CAAC,CAAoB;IACvD,MAAM,MAAM,GAAG,CAAC,OAA4B,EAAsB,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACpH,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACpB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IACjD,kHAAkH;IAClH,uHAAuH;IACvH,qGAAqG;IACrG,iHAAiH;IACjH,kHAAkH;IAClH,wHAAwH;IACxH,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC;IACxF,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1D,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAE,CAAC,UAAU,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU;gBAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC/J,CAAC;SAAM,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAC5F,IAAI,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;IACnF,sHAAsH;IACtH,6GAA6G;IAC7G,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC;IACpE,MAAM,KAAK,GAAG,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACvD,oHAAoH;IACpH,0EAA0E;IAC1E,IAAI,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/G,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,MAAM,EAAE,CAAC;QAClB,qGAAqG;IACvG,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzF,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;IACrF,CAAC;IACD,oHAAoH;IACpH,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;IAC1B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACzN,4FAA4F;IAC5F,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;IACvK,OAAO;QACL,SAAS,EAAE;YACT,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE;YACnF,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE;YACnJ,eAAe,EAAE,CAAC,CAAC,KAAK;SACzB;QACD,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA2B,EAAE,GAAuB;IACnF,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAChH,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IAC5B,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IACtK,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAsB,EAAE,KAAkK;IACrN,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,MAAM,CAAC;IAClD,MAAM,IAAI,GAAG,CAAC,UAA8B,EAAkB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IACtJ,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5F,qHAAqH;IACrH,mGAAmG;IACnG,IAAI,MAAM,CAAC,KAAK,EAAE,UAAU,KAAK,aAAa,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,aAAa,CAAC,MAAM;WACpG,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC;QACtF,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,iHAAiH;QACjH,yGAAyG;QACzG,OAAO,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9F,CAAC;IACD,gGAAgG;IAChG,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7F,8GAA8G;IAC9G,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,MAA+E,EAAE,KAAa;IAC9H,OAAO,MAAM,CAAC,QAAQ,KAAK,KAAK,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO;QACrE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;QACjH,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,IAAK,CAAC,CAAC,eAA0B,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChG,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAkB,wCAAwC;IACvG,MAAM,KAAK,GAAG,CAAC,CAAC,KAAuC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU;WACpH,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAC1D,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC;IAC1E,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC;IACrE,wHAAwH;IACxH,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,CAAC,GAAG,CAAC,CAAC,OAA8C,CAAC;IAC3D,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;WACjL,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA+E,EAAE,MAAqB;IACrI,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACrE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IACrD,yFAAyF;IACzF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC;IACrI,IAAI,OAAO;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"web-authority.js","sourceRoot":"","sources":["../../src/authority/web-authority.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAkDvE,2HAA2H;AAC3H,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAW,CAAC;AAahF,4HAA4H;AAC5H,MAAM,UAAU,kBAAkB,CAAC,GAA0B;IAC3D,MAAM,CAAC,GAAG,GAAG,EAAE,kBAAkB,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,iBAAiB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC5F,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,GAAG,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC;IACrI,qHAAqH;IACrH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,KAAK,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,KAAK,IAAI;QAChH,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,GAAG,SAAS,EAAE,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAA8C,EAAE,QAAQ,GAAY,kBAAkB;IACvH,OAAO,CAAC,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;AACjG,CAAC;AAED,qGAAqG;AACrG,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,WAAW,EAAE,kBAAkB,EAAE,KAAK,CAAU,CAAC;AAEjI,SAAS,eAAe,CAAC,OAA2B;IAClD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACtE,OAAO,OAAO,KAAK,KAAK,IAAI,kCAAkC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAwG;IACtI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,IAAI,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AACzF,CAAC;AA0BD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAkB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;AAEtH;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAA4D,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;AAE/I,sHAAsH;AACtH,MAAM,UAAU,oBAAoB,CAAC,CAAoB;IACvD,MAAM,MAAM,GAAG,CAAC,OAA4B,EAAsB,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACpH,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACpB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IACjD,kHAAkH;IAClH,uHAAuH;IACvH,qGAAqG;IACrG,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACxJ,CAAC;SAAM,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAC5F,IAAI,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAClF,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;IACnF,sHAAsH;IACtH,6GAA6G;IAC7G,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7C,oHAAoH;IACpH,0EAA0E;IAC1E,IAAI,CAAC,KAAK,EAAE,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC/G,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACzF,IAAI,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;IACrF,CAAC;IACD,oHAAoH;IACpH,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;IAC1B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IAC5L,4FAA4F;IAC5F,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAC1I,OAAO;QACL,SAAS,EAAE;YACT,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE;YACnF,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,EAAE;YACnJ,eAAe,EAAE,CAAC,CAAC,KAAK;SACzB;QACD,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA2B,EAAE,GAAuB;IACnF,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAChH,IAAI,GAAG,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IAC5B,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM;QAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IACtK,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAsB,EAAE,KAAyG;IAC5J,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,MAAM,CAAC;IAClD,MAAM,IAAI,GAAG,CAAC,UAA8B,EAAkB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IACtJ,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5F,gGAAgG;IAChG,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7F,8GAA8G;IAC9G,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,MAA+E,EAAE,KAAa;IAC9H,OAAO,MAAM,CAAC,QAAQ,KAAK,KAAK,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO;QACrE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE;QACjH,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,IAAK,CAAC,CAAC,eAA0B,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChG,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAkB,wCAAwC;IACvG,MAAM,KAAK,GAAG,CAAC,CAAC,KAAuC,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU;WACpH,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAC1D,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC;IAC1E,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC;IACrE,wHAAwH;IACxH,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,CAAC,GAAG,CAAC,CAAC,OAA8C,CAAC;IAC3D,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;WACjL,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAA+E,EAAE,MAAqB;IACrI,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACrE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IACrD,yFAAyF;IACzF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,cAAc,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC;IACrI,IAAI,OAAO;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/backend/claude-code.d.ts

@@ -211,8 +211,8 @@ export declare function claudeFileSendCardActive(pane: string): boolean;
 export declare const CLAUDE_DANGEROUS_COMMAND_BLOCKED_NOTICE = "[system:dangerous-command-blocked]\nThe previous command was classified as dangerous and was automatically denied. Do not retry it. Use a safe form instead (for example `${VAR:?}` validation, a literal path, or skip the destructive operation).";
 /** Startup budget for a resuming claude-code launch (fresh starts keep the default). */
 export declare const CLAUDE_RESUME_STARTUP_BUDGET_MS = 60000;
-/** Pane-only detectors: construction performs no provider, config or session discovery. */
-export declare class ClaudePaneDetectors {
+export declare class ClaudeCodeBackend implements CliBackend {
+    private instanceDir;
     readonly binaryName = "claude";
     readonly replyCompletionGuard = true;
     /**
@@ -224,6 +224,14 @@ export declare class ClaudePaneDetectors {
     getStartupBudgetMs(ctx: {
         resume: boolean;
     }): number | undefined;
+    private binaryPath;
+    constructor(instanceDir: string);
+    /** #1811: what the last launch left out and why — the Log tab and daemon.log, never a channel. */
+    private quietLaunchNotes;
+    consumeQuietLaunchNotes(): string[];
+    buildCommand(config: CliBackendConfig): string;
+    private hasProjectSession;
+    writeConfig(config: CliBackendConfig): void;
     /**
      * `❯` is the input box, which Claude Code renders persistently — it is on screen
      * while the agent works, not only when it is waiting. So this marks "the TUI has
@@ -319,6 +327,8 @@ export declare class ClaudePaneDetectors {
      * the transcript shows a turn open.
      */
     isPeriodicRedrawIdlePane(pane: string): boolean;
+    getContextUsage(): number | null;
+    getSessionId(): string | null;
     getErrorPatterns(): ErrorPattern[];
     getStartupDialogs(): StartupDialog[];
     getRuntimeDialogs(): RuntimeDialog[];
@@ -326,19 +336,6 @@ export declare class ClaudePaneDetectors {
     getCompactCommand(): string;
     getClearCommand(): string;
     getCancelKey(): string;
-}
-export declare class ClaudeCodeBackend extends ClaudePaneDetectors implements CliBackend {
-    private instanceDir;
-    private binaryPath;
-    constructor(instanceDir: string);
-    /** #1811: what the last launch left out and why — the Log tab and daemon.log, never a channel. */
-    private quietLaunchNotes;
-    consumeQuietLaunchNotes(): string[];
-    buildCommand(config: CliBackendConfig): string;
-    private hasProjectSession;
-    writeConfig(config: CliBackendConfig): void;
-    getContextUsage(): number | null;
-    getSessionId(): string | null;
     /** #1217: Claude's own words for a session that is not there to resume. */
     resumeMissingPattern(): RegExp;
     quitBlockedByDialog(pane: string): boolean;

package/dist/backend/claude-code.js

@@ -7,9 +7,6 @@ import { homedir } from "node:os";
 import { createHash } from "node:crypto";
 import { credentialHomeSpec, credentialProfileHome, prepareCredentialProfileHome, resolveCredentialProfile } from "./credential-profile.js";
 import { getAgendHome } from "../paths.js";
-import { t } from "../locale.js";
-import { selectedGeneralHostSession } from "../general-binding.js";
-import { ResumeBlockedError } from "./types.js";
 import { CLI_PROBE_LONGEST_LEAF_MS, promptCacheTtl, resolveBinary, shellQuote, validateModel, warnIfModelMismatch } from "./types.js";
 /** Mirror Claude Code's ~/.claude/projects key for a working directory. Exported for the detection-signal seam. */
 export function claudeProjectKey(cwd) {
@@ -1082,8 +1079,8 @@ const CLAUDE_BYPASS_ENTRIES = [
 ];
 /** Startup budget for a resuming claude-code launch (fresh starts keep the default). */
 export const CLAUDE_RESUME_STARTUP_BUDGET_MS = 60_000;
-/** Pane-only detectors: construction performs no provider, config or session discovery. */
-export class ClaudePaneDetectors {
+export class ClaudeCodeBackend {
+    instanceDir;
     binaryName = "claude";
     replyCompletionGuard = true;
     /**
@@ -1095,6 +1092,116 @@ export class ClaudePaneDetectors {
     getStartupBudgetMs(ctx) {
         return ctx.resume ? CLAUDE_RESUME_STARTUP_BUDGET_MS : undefined;
     }
+    binaryPath;
+    constructor(instanceDir) {
+        this.instanceDir = instanceDir;
+        this.binaryPath = resolveBinary("claude");
+    }
+    /** #1811: what the last launch left out and why — the Log tab and daemon.log, never a channel. */
+    quietLaunchNotes = [];
+    consumeQuietLaunchNotes() { const notes = this.quietLaunchNotes; this.quietLaunchNotes = []; return notes; }
+    buildCommand(config) {
+        const settingsPath = join(this.instanceDir, "claude-settings.json");
+        const mcpConfigPath = join(this.instanceDir, "mcp-config.json");
+        const envPrefix = ["CMUX_CLAUDE_HOOKS_DISABLED=1", "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1"];
+        // #1699: a named credential profile is its own config dir — its login, account, trust and conversations. No profile:
+        // nothing added, nothing created (the command is exactly what it was).
+        const profileDir = claudeProfileConfigDir(config.backendOptions);
+        if (profileDir) {
+            prepareCredentialProfileHome(credentialHomeSpec("claude-code"), profileDir);
+            // #1754: the project's auto-memory is the shared one, as on the default login.
+            linkSharedClaudeMemory(profileDir, config.workingDirectory, credentialHomeSpec("claude-code").sharedRoot());
+            envPrefix.push(`CLAUDE_CONFIG_DIR=${shellQuote(profileDir)}`);
+        }
+        if (process.env.ANTHROPIC_BASE_URL)
+            envPrefix.push(`ANTHROPIC_BASE_URL=${shellQuote(process.env.ANTHROPIC_BASE_URL)}`);
+        // #2010: an opt-in prompt-cache TTL for the main thread and its subagents. Unset: nothing added, the CLI chooses.
+        const ttl = promptCacheTtl(config.backendOptions);
+        if (ttl)
+            envPrefix.push(`CLAUDE_CODE_PROMPT_CACHE_TTL=${ttl}`, `CLAUDE_CODE_SUBAGENT_PROMPT_CACHE_TTL=${ttl}`);
+        // The fleet's API key only where this instance's own config dir has no OAuth login: a key in the environment wins
+        // over the login, so reading another dir here bills the wrong account (#1699).
+        if (process.env.ANTHROPIC_API_KEY && !this.hasOAuthSession(profileDir)) {
+            envPrefix.push(`ANTHROPIC_API_KEY=${shellQuote(process.env.ANTHROPIC_API_KEY)}`);
+        }
+        let cmd = `${envPrefix.join(" ")} ${this.binaryPath} --settings ${settingsPath} --mcp-config ${mcpConfigPath}`;
+        if (config.skipPermissions !== false)
+            cmd += " --dangerously-skip-permissions";
+        const sessionIdFile = join(this.instanceDir, "session-id");
+        // `session-id` belongs to the instance, not the backend. A ClassicBot can
+        // switch from Kiro (or another CLI) to Claude while retaining that marker.
+        // Claude's bare `--continue` then looks for a conversation in this cwd and
+        // exits when the workspace has never had a Claude session. Treat Claude's
+        // own project transcript as the source of truth instead of the generic
+        // marker alone. This also makes an empty/missing Classic workspace start
+        // fresh rather than entering a resume crash loop.
+        if (!config.skipResume && existsSync(sessionIdFile) && this.hasProjectSession(config.workingDirectory, profileDir)) {
+            cmd += " --continue";
+        }
+        if (config.model) {
+            const model = validateModel(config.model);
+            warnIfModelMismatch("claude-code", model);
+            cmd += ` --model ${shellQuote(model)}`;
+        }
+        // #1811: the configured effort, where this claude takes it (launch-effort.ts); else a quiet note.
+        const effort = flagEffort("claude-code", config.effort, this.binaryPath);
+        if (effort.arg)
+            cmd += effort.arg;
+        this.quietLaunchNotes = effort.note ? [effort.note] : [];
+        // Additive system prompt: append fleet instructions without overriding Claude's built-in prompt
+        const instrFile = join(this.instanceDir, "fleet-instructions.md");
+        if (existsSync(instrFile)) {
+            cmd += ` --append-system-prompt-file ${instrFile}`;
+        }
+        return cmd;
+    }
+    hasProjectSession(workingDirectory, profileDir) {
+        const cwd = workingDirectory.trim();
+        if (!cwd)
+            return false;
+        const configDir = claudeConfigDirFor(profileDir);
+        const encodedCwd = claudeProjectKey(cwd);
+        try {
+            return readdirSync(join(configDir, "projects", encodedCwd), { withFileTypes: true })
+                .some(entry => entry.isFile() && entry.name.endsWith(".jsonl"));
+        }
+        catch {
+            return false;
+        }
+    }
+    writeConfig(config) {
+        // 1. Write mcp-config.json to instance dir (loaded via --mcp-config)
+        const mcpConfigPath = join(this.instanceDir, "mcp-config.json");
+        const mcpConfig = { mcpServers: config.mcpServers };
+        writeFileSync(mcpConfigPath, JSON.stringify(mcpConfig, null, 2));
+        // 2. Write statusline script
+        const statusLineCommand = this.writeStatusLineScript();
+        // 3. Write claude-settings.json (permissions handled by --dangerously-skip-permissions)
+        const settings = {
+            statusLine: {
+                type: "command",
+                command: statusLineCommand,
+            },
+        };
+        // The Bypass Permissions warning appears on a first run (and whenever the
+        // user's own settings have not recorded the acceptance) for every launch
+        // with --dangerously-skip-permissions. AgEnD passes that flag deliberately,
+        // so record the acceptance in the flag-level settings this file is loaded as
+        // (--settings): claude 2.1.286 then never paints the dialog (verified live).
+        // Only when the flag is actually passed — see buildCommand.
+        if (config.skipPermissions !== false)
+            settings.skipDangerousModePermissionPrompt = true;
+        writeFileSync(join(this.instanceDir, "claude-settings.json"), JSON.stringify(settings));
+        // 4. Pre-approve API key to skip interactive prompt on startup
+        this.preApproveApiKey(config);
+        // 5. Write fleet instructions file (loaded via --append-system-prompt-file)
+        if (config.instructions) {
+            try {
+                writeFileSync(join(this.instanceDir, "fleet-instructions.md"), config.instructions);
+            }
+            catch { /* best effort */ }
+        }
+    }
     /**
      * `❯` is the input box, which Claude Code renders persistently — it is on screen
      * while the agent works, not only when it is waiting. So this marks "the TUI has
@@ -1205,6 +1312,27 @@ export class ClaudePaneDetectors {
         const box = readClaudeInputBox(pane);
         return box !== null && box.queued !== true && !this.getBusyPattern().test(pane);
     }
+    getContextUsage() {
+        try {
+            const sf = join(this.instanceDir, "statusline.json");
+            const data = JSON.parse(readFileSync(sf, "utf-8"));
+            return data.context_window?.used_percentage ?? null;
+        }
+        catch (err) {
+            // File may not exist yet during startup — return null to signal unavailable
+            return null;
+        }
+    }
+    getSessionId() {
+        try {
+            const sf = join(this.instanceDir, "statusline.json");
+            const data = JSON.parse(readFileSync(sf, "utf-8"));
+            return data.session_id ?? null;
+        }
+        catch {
+            return null;
+        }
+    }
     getErrorPatterns() {
         return [
             { pattern: /API Error: Rate limit/i, type: "rate_limit", action: "failover", message: "API rate limit reached" },
@@ -1499,153 +1627,6 @@ export class ClaudePaneDetectors {
     getCompactCommand() { return "/compact"; }
     getClearCommand() { return "/clear"; }
     getCancelKey() { return "Escape"; }
-}
-export class ClaudeCodeBackend extends ClaudePaneDetectors {
-    instanceDir;
-    binaryPath;
-    constructor(instanceDir) {
-        super();
-        this.instanceDir = instanceDir;
-        this.binaryPath = resolveBinary("claude");
-    }
-    /** #1811: what the last launch left out and why — the Log tab and daemon.log, never a channel. */
-    quietLaunchNotes = [];
-    consumeQuietLaunchNotes() { const notes = this.quietLaunchNotes; this.quietLaunchNotes = []; return notes; }
-    buildCommand(config) {
-        const settingsPath = join(this.instanceDir, "claude-settings.json");
-        const mcpConfigPath = join(this.instanceDir, "mcp-config.json");
-        const envPrefix = ["CMUX_CLAUDE_HOOKS_DISABLED=1", "CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1"];
-        // #1699: a named credential profile is its own config dir — its login, account, trust and conversations. No profile:
-        // nothing added, nothing created (the command is exactly what it was).
-        const profileDir = claudeProfileConfigDir(config.backendOptions);
-        if (profileDir) {
-            prepareCredentialProfileHome(credentialHomeSpec("claude-code"), profileDir);
-            // #1754: the project's auto-memory is the shared one, as on the default login.
-            linkSharedClaudeMemory(profileDir, config.workingDirectory, credentialHomeSpec("claude-code").sharedRoot());
-            envPrefix.push(`CLAUDE_CONFIG_DIR=${shellQuote(profileDir)}`);
-        }
-        if (process.env.ANTHROPIC_BASE_URL)
-            envPrefix.push(`ANTHROPIC_BASE_URL=${shellQuote(process.env.ANTHROPIC_BASE_URL)}`);
-        // #2010: an opt-in prompt-cache TTL for the main thread and its subagents. Unset: nothing added, the CLI chooses.
-        const ttl = promptCacheTtl(config.backendOptions);
-        if (ttl)
-            envPrefix.push(`CLAUDE_CODE_PROMPT_CACHE_TTL=${ttl}`, `CLAUDE_CODE_SUBAGENT_PROMPT_CACHE_TTL=${ttl}`);
-        // The fleet's API key only where this instance's own config dir has no OAuth login: a key in the environment wins
-        // over the login, so reading another dir here bills the wrong account (#1699).
-        if (process.env.ANTHROPIC_API_KEY && !this.hasOAuthSession(profileDir)) {
-            envPrefix.push(`ANTHROPIC_API_KEY=${shellQuote(process.env.ANTHROPIC_API_KEY)}`);
-        }
-        let cmd = `${envPrefix.join(" ")} ${this.binaryPath} --settings ${settingsPath} --mcp-config ${mcpConfigPath}`;
-        if (config.skipPermissions !== false)
-            cmd += " --dangerously-skip-permissions";
-        const sessionIdFile = join(this.instanceDir, "session-id");
-        // `session-id` belongs to the instance, not the backend. A ClassicBot can
-        // switch from Kiro (or another CLI) to Claude while retaining that marker.
-        // Claude's bare `--continue` then looks for a conversation in this cwd and
-        // exits when the workspace has never had a Claude session. Treat Claude's
-        // own project transcript as the source of truth instead of the generic
-        // marker alone. This also makes an empty/missing Classic workspace start
-        // fresh rather than entering a resume crash loop.
-        const retainedGeneral = selectedGeneralHostSession(this.instanceDir, config.instanceName, "claude-code", config.workingDirectory);
-        if (retainedGeneral) {
-            const path = join(claudeConfigDirFor(profileDir), "projects", claudeProjectKey(config.workingDirectory), `${retainedGeneral}.jsonl`);
-            try {
-                if (!lstatSync(path).isFile())
-                    throw Error("not regular");
-            }
-            catch {
-                throw new ResumeBlockedError(t("general_location.start_failed"), t("general_location.start_failed"));
-            }
-            cmd += ` --resume ${shellQuote(retainedGeneral)}`;
-        }
-        else if (!config.skipResume && existsSync(sessionIdFile) && this.hasProjectSession(config.workingDirectory, profileDir)) {
-            cmd += " --continue";
-        }
-        if (config.model) {
-            const model = validateModel(config.model);
-            warnIfModelMismatch("claude-code", model);
-            cmd += ` --model ${shellQuote(model)}`;
-        }
-        // #1811: the configured effort, where this claude takes it (launch-effort.ts); else a quiet note.
-        const effort = flagEffort("claude-code", config.effort, this.binaryPath);
-        if (effort.arg)
-            cmd += effort.arg;
-        this.quietLaunchNotes = effort.note ? [effort.note] : [];
-        // Additive system prompt: append fleet instructions without overriding Claude's built-in prompt
-        const instrFile = join(this.instanceDir, "fleet-instructions.md");
-        if (existsSync(instrFile)) {
-            cmd += ` --append-system-prompt-file ${instrFile}`;
-        }
-        return cmd;
-    }
-    hasProjectSession(workingDirectory, profileDir) {
-        const cwd = workingDirectory.trim();
-        if (!cwd)
-            return false;
-        const configDir = claudeConfigDirFor(profileDir);
-        const encodedCwd = claudeProjectKey(cwd);
-        try {
-            return readdirSync(join(configDir, "projects", encodedCwd), { withFileTypes: true })
-                .some(entry => entry.isFile() && entry.name.endsWith(".jsonl"));
-        }
-        catch {
-            return false;
-        }
-    }
-    writeConfig(config) {
-        // 1. Write mcp-config.json to instance dir (loaded via --mcp-config)
-        const mcpConfigPath = join(this.instanceDir, "mcp-config.json");
-        const mcpConfig = { mcpServers: config.mcpServers };
-        writeFileSync(mcpConfigPath, JSON.stringify(mcpConfig, null, 2));
-        // 2. Write statusline script
-        const statusLineCommand = this.writeStatusLineScript();
-        // 3. Write claude-settings.json (permissions handled by --dangerously-skip-permissions)
-        const settings = {
-            statusLine: {
-                type: "command",
-                command: statusLineCommand,
-            },
-        };
-        // The Bypass Permissions warning appears on a first run (and whenever the
-        // user's own settings have not recorded the acceptance) for every launch
-        // with --dangerously-skip-permissions. AgEnD passes that flag deliberately,
-        // so record the acceptance in the flag-level settings this file is loaded as
-        // (--settings): claude 2.1.286 then never paints the dialog (verified live).
-        // Only when the flag is actually passed — see buildCommand.
-        if (config.skipPermissions !== false)
-            settings.skipDangerousModePermissionPrompt = true;
-        writeFileSync(join(this.instanceDir, "claude-settings.json"), JSON.stringify(settings));
-        // 4. Pre-approve API key to skip interactive prompt on startup
-        this.preApproveApiKey(config);
-        // 5. Write fleet instructions file (loaded via --append-system-prompt-file)
-        if (config.instructions) {
-            try {
-                writeFileSync(join(this.instanceDir, "fleet-instructions.md"), config.instructions);
-            }
-            catch { /* best effort */ }
-        }
-    }
-    getContextUsage() {
-        try {
-            const sf = join(this.instanceDir, "statusline.json");
-            const data = JSON.parse(readFileSync(sf, "utf-8"));
-            return data.context_window?.used_percentage ?? null;
-        }
-        catch (err) {
-            // File may not exist yet during startup — return null to signal unavailable
-            return null;
-        }
-    }
-    getSessionId() {
-        try {
-            const sf = join(this.instanceDir, "statusline.json");
-            const data = JSON.parse(readFileSync(sf, "utf-8"));
-            return data.session_id ?? null;
-        }
-        catch {
-            return null;
-        }
-    }
     /** #1217: Claude's own words for a session that is not there to resume. */
     resumeMissingPattern() {
         return /no conversation found|no conversation to (continue|resume)|no previous (session|conversation)/i;