@tetherto/mdk-ui-agent 0.0.0 → 0.12.1

package/dist/core/small-talk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"small-talk.js","sourceRoot":"","sources":["../../src/core/small-talk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,yFAAyF;AACzF,MAAM,cAAc,GAAG;IACrB,oFAAoF;IACpF,iDAAiD;IACjD,gHAAgH;IAChH,yCAAyC;IACzC,kFAAkF;CACnF,CAAA;AAED;;;GAGG;AACH,MAAM,WAAW,GACb,wQAAwQ,CAAA;AAE5Q,qFAAqF;AACrF,MAAM,SAAS,GAAG,CAAC,CAAA;AAEnB,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,UAAU,GAAG,IAAI;SACpB,WAAW,EAAE;SACb,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,iDAAiD;SACvE,IAAI,EAAE,CAAA;IAET,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,KAAK,CAAA;IAE5D,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;AACnE,CAAC"}

package/dist/core/sse.d.ts

@@ -0,0 +1,108 @@
+/**
+ * SSE reading for the agent message route.
+ *
+ * `EventSource` is unusable here: the message is a POST body and `EventSource`
+ * is GET-only. So this is `fetch` + a body-stream reader, which is also what the
+ * producer's own docs prescribe.
+ *
+ * The gateway writes `event: <type>\ndata: <json>\n\n` and nothing else — no
+ * `id:`, no `retry:`, and no heartbeat comment frames. The `event:` line is
+ * redundant (`data.type` carries the same value) so only `data:` is parsed. The
+ * rest of the parser is nonetheless written against the spec rather than against
+ * that one producer: CRLF line endings and multi-line `data:` are both legal, and
+ * a proxy that rewrites line endings would otherwise silently end every turn as a
+ * truncation.
+ */
+import type { WireEvent } from './events';
+/** Synthesized locally, never sent by the gateway. See `readAgentStream`. */
+export declare const ERR_STREAM_TRUNCATED = "ERR_AGENT_STREAM_TRUNCATED";
+/** Synthesized locally: the socket stayed open but nothing arrived. See `readAgentStream`. */
+export declare const ERR_STREAM_IDLE = "ERR_AGENT_STREAM_IDLE";
+/**
+ * How long a turn may say nothing between events before the connection is
+ * assumed lost.
+ *
+ * The gateway sends no heartbeats, so silence is the only symptom of a wedged
+ * agent, a half-closed proxy or a laptop resumed from sleep. Once events are
+ * flowing, 30s of nothing is already far outside what a working turn does: the
+ * producer emits a frame per token.
+ */
+export declare const STREAM_IDLE_TIMEOUT_MS = 30000;
+/**
+ * The same limit before the first event, which is a different wait entirely.
+ *
+ * Nothing is emitted until the producer's first model call returns a routing
+ * decision, and a local model may think for a long time before it answers a
+ * single character: measured against a 4B thinking model on this hardware, the
+ * first event arrived at 61s. Held to the producer's own per-call budget
+ * (`REQUEST_TIMEOUT_MS`, 120s in backend/core/agent/src/constants.js) so a turn
+ * the server is still legitimately working on is never abandoned here first —
+ * whatever the model does, the server gives up before this does and says why.
+ */
+export declare const FIRST_EVENT_IDLE_TIMEOUT_MS = 120000;
+/**
+ * The same limit while an approval is outstanding, where silence is legitimate:
+ * the producer is waiting on a human, and only auto-rejects after its own
+ * `agent.approvalTimeoutMs`. Five minutes is that default plus room to spare, so
+ * the stream is never given up on before the server itself would have resumed it.
+ */
+export declare const APPROVAL_IDLE_TIMEOUT_MS = 300000;
+/** Thrown out of `readFrames` when the deadline expires; converted to an event above. */
+export declare class StreamIdleError extends Error {
+    constructor();
+}
+export type ReadFramesOptions = {
+    /**
+     * Milliseconds of silence tolerated before the next read is given up on, read
+     * fresh before every read so the caller can widen it mid-stream. `0` disables
+     * the deadline.
+     */
+    idleTimeoutMs?: () => number;
+};
+/**
+ * Pulls the `data:` payload out of one frame.
+ *
+ * A frame may carry several `data:` lines, which the spec joins with newlines;
+ * anything else (`event:`, `id:`, a `:` comment) is ignored. Returns null for a
+ * frame with no data at all.
+ */
+export declare function parseFrame(frame: string): unknown;
+/**
+ * Yields each decoded `data:` payload, in order, as frames arrive.
+ *
+ * The abort signal is handled here rather than left to `fetch`. Aborting a fetch
+ * whose headers have already arrived is only specified to error the body stream
+ * — cancelling the reader is what actually unblocks a `read()` that is parked
+ * waiting for the next token, which is where an abort almost always lands.
+ */
+export declare function readFrames(stream: ReadableStream<Uint8Array>, signal?: AbortSignal, options?: ReadFramesOptions): AsyncGenerator<unknown>;
+export type ReadAgentStreamOptions = {
+    /** Silence tolerated between events. Defaults to {@link STREAM_IDLE_TIMEOUT_MS}; `0` disables it. */
+    idleTimeoutMs?: number;
+    /** Silence tolerated while an approval is outstanding. Defaults to {@link APPROVAL_IDLE_TIMEOUT_MS}. */
+    approvalIdleTimeoutMs?: number;
+    /** Silence tolerated before the first event. Defaults to {@link FIRST_EVENT_IDLE_TIMEOUT_MS}. */
+    firstEventIdleTimeoutMs?: number;
+};
+/**
+ * Turns a live response into the guaranteed-well-formed event sequence the rest
+ * of the package is written against. Four contract obligations live here:
+ *
+ * 1. Unknown or malformed events are dropped, not thrown on (invariant 5).
+ * 2. Nothing is emitted after the terminal event (invariant 1), so a
+ *    misbehaving producer cannot reopen a finished turn.
+ * 3. Every stream ends with exactly one terminal event. The gateway's stream
+ *    route calls `rep.hijack()`, so a failure after the headers are sent just
+ *    closes the socket — no `error` frame, no `done`. Left alone that reads as a
+ *    turn that never finishes, so an EOF with no terminal event is converted
+ *    into one here. An abort is excluded: the operator stopping the turn is not
+ *    a failure, and nothing should be reported back to them as one.
+ * 4. A socket that stays open but stops delivering ends the same way. Without
+ *    that, a consumer awaiting the next event parks forever and the panel stays
+ *    busy until the page is reloaded. The deadline is per phase, because how much
+ *    silence is normal is not constant across a turn: wide before the first event
+ *    (the model is still thinking), wide again while an approval is outstanding
+ *    (the producer is waiting on a human), narrow in between.
+ */
+export declare function readAgentStream(stream: ReadableStream<Uint8Array>, signal?: AbortSignal, options?: ReadAgentStreamOptions): AsyncGenerator<WireEvent>;
+//# sourceMappingURL=sse.d.ts.map

package/dist/core/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../src/core/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAQzC,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,+BAA+B,CAAA;AAChE,8FAA8F;AAC9F,eAAO,MAAM,eAAe,0BAA0B,CAAA;AAEtD;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,QAAS,CAAA;AAE5C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,2BAA2B,SAAU,CAAA;AAElD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,SAAU,CAAA;AAE/C,yFAAyF;AACzF,qBAAa,eAAgB,SAAQ,KAAK;IACxC,cAGC;CACF;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,MAAM,CAAA;CAC7B,CAAA;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAejD;AAiCD;;;;;;;GAOG;AACH,wBAAuB,UAAU,CAC/B,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,EAClC,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE,iBAAsB,GAC9B,cAAc,CAAC,OAAO,CAAC,CA8CzB;AAED,MAAM,MAAM,sBAAsB,GAAG;IACnC,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,wGAAwG;IACxG,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,iGAAiG;IACjG,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC,CAAA;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAuB,eAAe,CACpC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,EAClC,MAAM,CAAC,EAAE,WAAW,EACpB,OAAO,GAAE,sBAA2B,GACnC,cAAc,CAAC,SAAS,CAAC,CA0C3B"}

package/dist/core/sse.js

@@ -0,0 +1,236 @@
+/**
+ * SSE reading for the agent message route.
+ *
+ * `EventSource` is unusable here: the message is a POST body and `EventSource`
+ * is GET-only. So this is `fetch` + a body-stream reader, which is also what the
+ * producer's own docs prescribe.
+ *
+ * The gateway writes `event: <type>\ndata: <json>\n\n` and nothing else — no
+ * `id:`, no `retry:`, and no heartbeat comment frames. The `event:` line is
+ * redundant (`data.type` carries the same value) so only `data:` is parsed. The
+ * rest of the parser is nonetheless written against the spec rather than against
+ * that one producer: CRLF line endings and multi-line `data:` are both legal, and
+ * a proxy that rewrites line endings would otherwise silently end every turn as a
+ * truncation.
+ */
+import { EVENT, isTerminal, isWireEvent } from './events';
+/** A blank line ends a frame; either line ending is legal (spec §7). */
+const FRAME_SEPARATOR = /\r?\n\r?\n/;
+const LINE_SEPARATOR = /\r?\n/;
+const DATA_PREFIX = 'data:';
+/** Synthesized locally, never sent by the gateway. See `readAgentStream`. */
+export const ERR_STREAM_TRUNCATED = 'ERR_AGENT_STREAM_TRUNCATED';
+/** Synthesized locally: the socket stayed open but nothing arrived. See `readAgentStream`. */
+export const ERR_STREAM_IDLE = 'ERR_AGENT_STREAM_IDLE';
+/**
+ * How long a turn may say nothing between events before the connection is
+ * assumed lost.
+ *
+ * The gateway sends no heartbeats, so silence is the only symptom of a wedged
+ * agent, a half-closed proxy or a laptop resumed from sleep. Once events are
+ * flowing, 30s of nothing is already far outside what a working turn does: the
+ * producer emits a frame per token.
+ */
+export const STREAM_IDLE_TIMEOUT_MS = 30_000;
+/**
+ * The same limit before the first event, which is a different wait entirely.
+ *
+ * Nothing is emitted until the producer's first model call returns a routing
+ * decision, and a local model may think for a long time before it answers a
+ * single character: measured against a 4B thinking model on this hardware, the
+ * first event arrived at 61s. Held to the producer's own per-call budget
+ * (`REQUEST_TIMEOUT_MS`, 120s in backend/core/agent/src/constants.js) so a turn
+ * the server is still legitimately working on is never abandoned here first —
+ * whatever the model does, the server gives up before this does and says why.
+ */
+export const FIRST_EVENT_IDLE_TIMEOUT_MS = 120_000;
+/**
+ * The same limit while an approval is outstanding, where silence is legitimate:
+ * the producer is waiting on a human, and only auto-rejects after its own
+ * `agent.approvalTimeoutMs`. Five minutes is that default plus room to spare, so
+ * the stream is never given up on before the server itself would have resumed it.
+ */
+export const APPROVAL_IDLE_TIMEOUT_MS = 300_000;
+/** Thrown out of `readFrames` when the deadline expires; converted to an event above. */
+export class StreamIdleError extends Error {
+    constructor() {
+        super(ERR_STREAM_IDLE);
+        this.name = 'StreamIdleError';
+    }
+}
+/**
+ * Pulls the `data:` payload out of one frame.
+ *
+ * A frame may carry several `data:` lines, which the spec joins with newlines;
+ * anything else (`event:`, `id:`, a `:` comment) is ignored. Returns null for a
+ * frame with no data at all.
+ */
+export function parseFrame(frame) {
+    const data = frame
+        .split(LINE_SEPARATOR)
+        .filter((line) => line.startsWith(DATA_PREFIX))
+        .map((line) => line.slice(DATA_PREFIX.length).trim());
+    if (data.length === 0)
+        return null;
+    try {
+        return JSON.parse(data.join('\n'));
+    }
+    catch {
+        // A frame we cannot parse is indistinguishable from an event type we do not
+        // know about, and invariant 5 says ignore those rather than throw.
+        return null;
+    }
+}
+const IDLE = Symbol('idle');
+/**
+ * One `read()`, given up on after `timeoutMs` of silence.
+ *
+ * The abandoned read is left attached to a rejection handler on purpose: the
+ * caller's `finally` cancels the reader straight after, and an unobserved
+ * rejection from a read parked on a socket we just cancelled would surface as a
+ * global unhandled rejection.
+ */
+async function readWithDeadline(reader, timeoutMs) {
+    const read = reader.read();
+    if (timeoutMs <= 0)
+        return read;
+    read.catch(() => { });
+    let timer;
+    try {
+        return await Promise.race([
+            read,
+            new Promise((resolve) => {
+                timer = setTimeout(() => resolve(IDLE), timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Yields each decoded `data:` payload, in order, as frames arrive.
+ *
+ * The abort signal is handled here rather than left to `fetch`. Aborting a fetch
+ * whose headers have already arrived is only specified to error the body stream
+ * — cancelling the reader is what actually unblocks a `read()` that is parked
+ * waiting for the next token, which is where an abort almost always lands.
+ */
+export async function* readFrames(stream, signal, options = {}) {
+    const reader = stream.getReader();
+    const decoder = new TextDecoder();
+    let buffer = '';
+    const cancel = () => {
+        reader.cancel().catch(() => {
+            // Already closed or errored; there is nothing left to release.
+        });
+    };
+    if (signal?.aborted)
+        cancel();
+    signal?.addEventListener('abort', cancel, { once: true });
+    const drain = function* () {
+        for (;;) {
+            const match = FRAME_SEPARATOR.exec(buffer);
+            if (!match)
+                return;
+            const frame = buffer.slice(0, match.index);
+            buffer = buffer.slice(match.index + match[0].length);
+            const payload = parseFrame(frame);
+            if (payload !== null)
+                yield payload;
+        }
+    };
+    try {
+        for (;;) {
+            const outcome = await readWithDeadline(reader, options.idleTimeoutMs?.() ?? 0);
+            if (outcome === IDLE)
+                throw new StreamIdleError();
+            const { value, done } = outcome;
+            if (done)
+                break;
+            buffer += decoder.decode(value, { stream: true });
+            yield* drain();
+        }
+        // Flush whatever the decoder was holding from an incomplete multibyte
+        // sequence, then the final frame if it arrived without its blank line.
+        buffer += decoder.decode();
+        yield* drain();
+        const tail = parseFrame(buffer);
+        if (tail !== null)
+            yield tail;
+    }
+    finally {
+        signal?.removeEventListener('abort', cancel);
+        cancel();
+    }
+}
+/**
+ * Turns a live response into the guaranteed-well-formed event sequence the rest
+ * of the package is written against. Four contract obligations live here:
+ *
+ * 1. Unknown or malformed events are dropped, not thrown on (invariant 5).
+ * 2. Nothing is emitted after the terminal event (invariant 1), so a
+ *    misbehaving producer cannot reopen a finished turn.
+ * 3. Every stream ends with exactly one terminal event. The gateway's stream
+ *    route calls `rep.hijack()`, so a failure after the headers are sent just
+ *    closes the socket — no `error` frame, no `done`. Left alone that reads as a
+ *    turn that never finishes, so an EOF with no terminal event is converted
+ *    into one here. An abort is excluded: the operator stopping the turn is not
+ *    a failure, and nothing should be reported back to them as one.
+ * 4. A socket that stays open but stops delivering ends the same way. Without
+ *    that, a consumer awaiting the next event parks forever and the panel stays
+ *    busy until the page is reloaded. The deadline is per phase, because how much
+ *    silence is normal is not constant across a turn: wide before the first event
+ *    (the model is still thinking), wide again while an approval is outstanding
+ *    (the producer is waiting on a human), narrow in between.
+ */
+export async function* readAgentStream(stream, signal, options = {}) {
+    const streamingTimeout = options.idleTimeoutMs ?? STREAM_IDLE_TIMEOUT_MS;
+    const approvalTimeout = options.approvalIdleTimeoutMs ?? APPROVAL_IDLE_TIMEOUT_MS;
+    const firstEventTimeout = options.firstEventIdleTimeoutMs ?? FIRST_EVENT_IDLE_TIMEOUT_MS;
+    let terminalSeen = false;
+    let awaitingApproval = false;
+    let seenAnyEvent = false;
+    let idle = false;
+    const idleTimeoutMs = () => {
+        if (streamingTimeout <= 0)
+            return 0;
+        if (awaitingApproval)
+            return approvalTimeout;
+        if (!seenAnyEvent)
+            return firstEventTimeout;
+        return streamingTimeout;
+    };
+    try {
+        for await (const payload of readFrames(stream, signal, { idleTimeoutMs })) {
+            if (!isWireEvent(payload))
+                continue;
+            if (terminalSeen)
+                continue;
+            seenAnyEvent = true;
+            // An approval pauses the producer; its result is what releases it.
+            if (payload.type === EVENT.PENDING_APPROVAL)
+                awaitingApproval = true;
+            if (payload.type === EVENT.TOOL_RESULT)
+                awaitingApproval = false;
+            if (isTerminal(payload))
+                terminalSeen = true;
+            yield payload;
+        }
+    }
+    catch (error) {
+        if (!(error instanceof StreamIdleError))
+            throw error;
+        idle = true;
+    }
+    if (!terminalSeen && !signal?.aborted) {
+        yield {
+            type: EVENT.ERROR,
+            error: idle ? ERR_STREAM_IDLE : ERR_STREAM_TRUNCATED,
+            turnId: '',
+            seq: Number.MAX_SAFE_INTEGER,
+            ts: 0,
+        };
+    }
+}
+//# sourceMappingURL=sse.js.map

package/dist/core/sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../../src/core/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEzD,wEAAwE;AACxE,MAAM,eAAe,GAAG,YAAY,CAAA;AACpC,MAAM,cAAc,GAAG,OAAO,CAAA;AAC9B,MAAM,WAAW,GAAG,OAAO,CAAA;AAE3B,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAA;AAChE,8FAA8F;AAC9F,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAA;AAEtD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAA;AAE5C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAO,CAAA;AAElD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAA;AAE/C,yFAAyF;AACzF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC;QACE,KAAK,CAAC,eAAe,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;IAC/B,CAAC;CACF;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,MAAM,IAAI,GAAG,KAAK;SACf,KAAK,CAAC,cAAc,CAAC;SACrB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;SAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAEvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAElC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,mEAAmE;QACnE,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;AAE3B;;;;;;;GAOG;AACH,KAAK,UAAU,gBAAgB,CAC7B,MAA+C,EAC/C,SAAiB;IAEjB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,SAAS,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAEpB,IAAI,KAAgD,CAAA;IACpD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,IAAI;YACJ,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;gBACnC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAA;YACpD,CAAC,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,UAAU,CAC/B,MAAkC,EAClC,MAAoB,EACpB,OAAO,GAAsB,EAAE;IAE/B,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;IACjC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,IAAI,MAAM,GAAG,EAAE,CAAA;IAEf,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACzB,+DAA+D;QACjE,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,EAAE,CAAA;IAC7B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAEzD,MAAM,KAAK,GAAG,QAAQ,CAAC;QACrB,SAAS,CAAC;YACR,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,CAAC,KAAK;gBAAE,OAAM;YAClB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;YAC1C,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YACpD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;YACjC,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,OAAO,CAAA;QACrC,CAAC;IACH,CAAC,CAAA;IAED,IAAI,CAAC;QACH,SAAS,CAAC;YACR,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;YAC9E,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,IAAI,eAAe,EAAE,CAAA;YAEjD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAA;YAC/B,IAAI,IAAI;gBAAE,MAAK;YACf,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YACjD,KAAK,CAAC,CAAC,KAAK,EAAE,CAAA;QAChB,CAAC;QAED,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAA;QAC1B,KAAK,CAAC,CAAC,KAAK,EAAE,CAAA;QACd,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;QAC/B,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,CAAA;IAC/B,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5C,MAAM,EAAE,CAAA;IACV,CAAC;AACH,CAAC;AAWD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,eAAe,CACpC,MAAkC,EAClC,MAAoB,EACpB,OAAO,GAA2B,EAAE;IAEpC,MAAM,gBAAgB,GAAG,OAAO,CAAC,aAAa,IAAI,sBAAsB,CAAA;IACxE,MAAM,eAAe,GAAG,OAAO,CAAC,qBAAqB,IAAI,wBAAwB,CAAA;IACjF,MAAM,iBAAiB,GAAG,OAAO,CAAC,uBAAuB,IAAI,2BAA2B,CAAA;IAExF,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,IAAI,gBAAgB,GAAG,KAAK,CAAA;IAC5B,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,IAAI,IAAI,GAAG,KAAK,CAAA;IAEhB,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,IAAI,gBAAgB,IAAI,CAAC;YAAE,OAAO,CAAC,CAAA;QACnC,IAAI,gBAAgB;YAAE,OAAO,eAAe,CAAA;QAC5C,IAAI,CAAC,YAAY;YAAE,OAAO,iBAAiB,CAAA;QAC3C,OAAO,gBAAgB,CAAA;IACzB,CAAC,CAAA;IAED,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;gBAAE,SAAQ;YACnC,IAAI,YAAY;gBAAE,SAAQ;YAC1B,YAAY,GAAG,IAAI,CAAA;YACnB,mEAAmE;YACnE,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,gBAAgB;gBAAE,gBAAgB,GAAG,IAAI,CAAA;YACpE,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,WAAW;gBAAE,gBAAgB,GAAG,KAAK,CAAA;YAChE,IAAI,UAAU,CAAC,OAAO,CAAC;gBAAE,YAAY,GAAG,IAAI,CAAA;YAC5C,MAAM,OAAO,CAAA;QACf,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,eAAe,CAAC;YAAE,MAAM,KAAK,CAAA;QACpD,IAAI,GAAG,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACtC,MAAM;YACJ,IAAI,EAAE,KAAK,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB;YACpD,MAAM,EAAE,EAAE;YACV,GAAG,EAAE,MAAM,CAAC,gBAAgB;YAC5B,EAAE,EAAE,CAAC;SACN,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/core/tool-label.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Human labels for tool chips.
+ *
+ * Tools are supplied by whichever MCP server the operator points the agent at,
+ * so no name can be hardcoded here — `summarize_site` and `get_device` happen to
+ * come from the reference site tools, but another deployment ships another set
+ * entirely. Callers pass a `toolLabels` map for the names they know; everything
+ * else falls back to a readable form of the identifier.
+ */
+export type ToolLabels = Record<string, string>;
+/** `summarize_site` -> `Summarize site`. */
+export declare function humanizeToolName(name: string): string;
+export declare function toolLabel(name: string, labels?: ToolLabels): string;
+/** `420` -> `0.4s`, so a chip reads `Site status · 0.4s`. */
+export declare function formatDuration(durationMs: number | undefined): string | null;
+//# sourceMappingURL=tool-label.d.ts.map

package/dist/core/tool-label.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-label.d.ts","sourceRoot":"","sources":["../../src/core/tool-label.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAE/C,4CAA4C;AAC5C,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOrD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAEnE;AAED,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAK5E"}

package/dist/core/tool-label.js

@@ -0,0 +1,31 @@
+/**
+ * Human labels for tool chips.
+ *
+ * Tools are supplied by whichever MCP server the operator points the agent at,
+ * so no name can be hardcoded here — `summarize_site` and `get_device` happen to
+ * come from the reference site tools, but another deployment ships another set
+ * entirely. Callers pass a `toolLabels` map for the names they know; everything
+ * else falls back to a readable form of the identifier.
+ */
+/** `summarize_site` -> `Summarize site`. */
+export function humanizeToolName(name) {
+    const words = name
+        .replaceAll(/[_-]+/g, ' ')
+        .replaceAll(/([a-z\d])([A-Z])/g, '$1 $2')
+        .trim();
+    if (words.length === 0)
+        return name;
+    return words.charAt(0).toUpperCase() + words.slice(1).toLowerCase();
+}
+export function toolLabel(name, labels) {
+    return labels?.[name] ?? humanizeToolName(name);
+}
+/** `420` -> `0.4s`, so a chip reads `Site status · 0.4s`. */
+export function formatDuration(durationMs) {
+    if (durationMs === undefined || !Number.isFinite(durationMs))
+        return null;
+    const seconds = durationMs / 1000;
+    // Tenths stay readable up to a minute; past that the decimal is noise.
+    return seconds < 60 ? `${seconds.toFixed(1)}s` : `${Math.round(seconds)}s`;
+}
+//# sourceMappingURL=tool-label.js.map

package/dist/core/tool-label.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-label.js","sourceRoot":"","sources":["../../src/core/tool-label.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,4CAA4C;AAC5C,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,KAAK,GAAG,IAAI;SACf,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;SACzB,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC;SACxC,IAAI,EAAE,CAAA;IACT,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;AACrE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAAmB;IACzD,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAA;AACjD,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,UAA8B;IAC3D,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAA;IACzE,MAAM,OAAO,GAAG,UAAU,GAAG,IAAI,CAAA;IACjC,uEAAuE;IACvE,OAAO,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAA;AAC5E,CAAC"}

package/dist/core/transport.d.ts

@@ -0,0 +1,71 @@
+/**
+ * The four agent routes, as declared in `backend/apps/agent/mdk-plugin.json`.
+ *
+ *   POST   /agent/sessions                              -> { sessionId }
+ *   POST   /agent/sessions/:id/messages                 -> text/event-stream
+ *   POST   /agent/sessions/:id/approvals/:approvalId    -> { approvalId, approved }
+ *   DELETE /agent/sessions/:id                          -> { sessionId, deleted }
+ *
+ * Note the approval route is session-scoped. `backend/core/agent/docs/CONTRACT.md`
+ * documents it as `/agent/turns/{turnId}/approvals/{approvalId}`; that is stale —
+ * `turnId` appears in no URL.
+ *
+ * The gateway sends no CORS headers, and the stream route calls `rep.hijack()` so
+ * no CORS hook could decorate it even if one existed. Callers must be same-origin
+ * (served from `staticRootPath`) or proxied (`/agent` in the dev server).
+ */
+import type { WireEvent } from './events';
+import type { ReadAgentStreamOptions } from './sse';
+export declare const AGENT_ROUTE_PREFIX = "/agent";
+/** The `ERR_*` codes these routes can return. */
+export declare const AGENT_ERROR: {
+    readonly SESSION_NOT_FOUND: 'ERR_AGENT_SESSION_NOT_FOUND';
+    readonly TURN_ACTIVE: 'ERR_AGENT_TURN_ACTIVE';
+    readonly TEXT_REQUIRED: 'ERR_AGENT_MESSAGE_TEXT_REQUIRED';
+    readonly UNAVAILABLE: 'ERR_AGENT_UNAVAILABLE';
+    readonly APPROVAL_NOT_FOUND: 'ERR_AGENT_APPROVAL_NOT_FOUND';
+};
+export type AgentErrorCode = (typeof AGENT_ERROR)[keyof typeof AGENT_ERROR];
+export type TokenSource = () => string | null | undefined | Promise<string | null | undefined>;
+export type AgentTransportOptions = {
+    /** Gateway origin. Empty string means relative URLs — i.e. same-origin or proxied. */
+    baseUrl?: string;
+    getToken?: TokenSource;
+    /** Injected in tests; defaults to the global `fetch`. */
+    fetchImpl?: typeof fetch;
+};
+/** A gateway error carrying the `ERR_*` code the UI branches on. */
+export declare class AgentApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(status: number, code: string, message?: string);
+    is(code: AgentErrorCode): boolean;
+}
+/** Identity comes from the token, so the request body is ignored by the gateway. */
+export declare function createSession(options?: AgentTransportOptions): Promise<string>;
+export declare function deleteSession(sessionId: string, options?: AgentTransportOptions): Promise<void>;
+/**
+ * Answers a paused approval. The decision travels on its own request while the
+ * message stream stays open — the stream resumes on its own once this lands.
+ *
+ * The gateway tests `approved === true`, so anything else is a rejection. It is
+ * passed through as a real boolean rather than coerced, to keep that explicit.
+ *
+ * A decision that arrives after the approval timed out, or a second decision for
+ * the same approval, is a 404 `ERR_AGENT_APPROVAL_NOT_FOUND` — the two are
+ * deliberately indistinguishable. Callers should treat it as "already settled",
+ * not as a failure.
+ */
+export declare function decideApproval(sessionId: string, approvalId: string, approved: boolean, options?: AgentTransportOptions): Promise<void>;
+export type StreamTurnOptions = AgentTransportOptions & ReadAgentStreamOptions & {
+    signal?: AbortSignal;
+};
+/**
+ * Sends one message and yields its events until the turn ends.
+ *
+ * Only one turn may be in flight per session; a second send while this is
+ * running — including while it is paused on an approval, since a paused turn
+ * still holds the session busy — throws `ERR_AGENT_TURN_ACTIVE`.
+ */
+export declare function streamTurn(sessionId: string, text: string, options?: StreamTurnOptions): AsyncGenerator<WireEvent>;
+//# sourceMappingURL=transport.d.ts.map

package/dist/core/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/core/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,OAAO,CAAA;AAGnD,eAAO,MAAM,kBAAkB,WAAW,CAAA;AAE1C,iDAAiD;AACjD,eAAO,MAAM,WAAW;aACtB,iBAAiB,EAAE,6BAA6B;aAChD,WAAW,EAAE,uBAAuB;aACpC,aAAa,EAAE,iCAAiC;aAChD,WAAW,EAAE,uBAAuB;aACpC,kBAAkB,EAAE,8BAA8B;CAC1C,CAAA;AAEV,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAE3E,MAAM,MAAM,WAAW,GAAG,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;AAE9F,MAAM,MAAM,qBAAqB,GAAG;IAClC,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,WAAW,CAAA;IACtB,yDAAyD;IACzD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB,CAAA;AAED,oEAAoE;AACpE,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB,YAAY,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAKzD;IAED,EAAE,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAEhC;CACF;AAyDD,oFAAoF;AACpF,wBAAsB,aAAa,CAAC,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAQxF;AAED,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,OAAO,EACjB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,GAAG,sBAAsB,GAAG;IAC/E,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB,CAAA;AAED;;;;;;GAMG;AACH,wBAAuB,UAAU,CAC/B,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,iBAAsB,GAC9B,cAAc,CAAC,SAAS,CAAC,CA0B3B"}

package/dist/core/transport.js

@@ -0,0 +1,147 @@
+/**
+ * The four agent routes, as declared in `backend/apps/agent/mdk-plugin.json`.
+ *
+ *   POST   /agent/sessions                              -> { sessionId }
+ *   POST   /agent/sessions/:id/messages                 -> text/event-stream
+ *   POST   /agent/sessions/:id/approvals/:approvalId    -> { approvalId, approved }
+ *   DELETE /agent/sessions/:id                          -> { sessionId, deleted }
+ *
+ * Note the approval route is session-scoped. `backend/core/agent/docs/CONTRACT.md`
+ * documents it as `/agent/turns/{turnId}/approvals/{approvalId}`; that is stale —
+ * `turnId` appears in no URL.
+ *
+ * The gateway sends no CORS headers, and the stream route calls `rep.hijack()` so
+ * no CORS hook could decorate it even if one existed. Callers must be same-origin
+ * (served from `staticRootPath`) or proxied (`/agent` in the dev server).
+ */
+import { readAgentStream } from './sse';
+export const AGENT_ROUTE_PREFIX = '/agent';
+/** The `ERR_*` codes these routes can return. */
+export const AGENT_ERROR = {
+    SESSION_NOT_FOUND: 'ERR_AGENT_SESSION_NOT_FOUND',
+    TURN_ACTIVE: 'ERR_AGENT_TURN_ACTIVE',
+    TEXT_REQUIRED: 'ERR_AGENT_MESSAGE_TEXT_REQUIRED',
+    UNAVAILABLE: 'ERR_AGENT_UNAVAILABLE',
+    APPROVAL_NOT_FOUND: 'ERR_AGENT_APPROVAL_NOT_FOUND',
+};
+/** A gateway error carrying the `ERR_*` code the UI branches on. */
+export class AgentApiError extends Error {
+    status;
+    code;
+    constructor(status, code, message) {
+        super(message ?? code);
+        this.name = 'AgentApiError';
+        this.status = status;
+        this.code = code;
+    }
+    is(code) {
+        return this.code === code;
+    }
+}
+// Trimmed with a scan rather than /\/+$/: the regex backtracks quadratically on a long run
+// of trailing slashes, which CodeQL flags as a polynomial ReDoS (js/polynomial-redos).
+function stripTrailingSlashes(value) {
+    let end = value.length;
+    while (end > 0 && value[end - 1] === '/')
+        end--;
+    return value.slice(0, end);
+}
+function joinUrl(baseUrl, path) {
+    if (!baseUrl)
+        return path;
+    return `${stripTrailingSlashes(baseUrl)}${path}`;
+}
+async function buildHeaders(options, extra) {
+    const headers = new Headers(extra);
+    const token = await options.getToken?.();
+    if (token)
+        headers.set('authorization', `Bearer ${token}`);
+    return headers;
+}
+/**
+ * Both error body shapes, reduced to a code.
+ *
+ * Normal routes answer `{ statusCode, error, message }`; the streaming route
+ * answers `{ statusCode, message }` with no `error` key at all. Either way the
+ * `ERR_*` code is in `message`. `ERR_AGENT_UNAVAILABLE` additionally has its
+ * reason concatenated in (`"ERR_AGENT_UNAVAILABLE: config.agent missing"`), so
+ * the code is only the part before the colon.
+ */
+async function toApiError(response) {
+    let message = response.statusText;
+    try {
+        const body = (await response.json());
+        if (typeof body?.message === 'string')
+            message = body.message;
+    }
+    catch {
+        // Non-JSON body (or none). The status alone still identifies the failure.
+    }
+    const code = message.split(':')[0]?.trim() || `HTTP_${response.status}`;
+    return new AgentApiError(response.status, code, message);
+}
+async function requestJson(path, init, options) {
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    const response = await fetchImpl(joinUrl(options.baseUrl, path), init);
+    if (!response.ok)
+        throw await toApiError(response);
+    return (await response.json());
+}
+/** Identity comes from the token, so the request body is ignored by the gateway. */
+export async function createSession(options = {}) {
+    const headers = await buildHeaders(options, { 'content-type': 'application/json' });
+    const body = await requestJson(`${AGENT_ROUTE_PREFIX}/sessions`, { method: 'POST', headers, body: '{}' }, options);
+    return body.sessionId;
+}
+export async function deleteSession(sessionId, options = {}) {
+    const headers = await buildHeaders(options);
+    await requestJson(`${AGENT_ROUTE_PREFIX}/sessions/${encodeURIComponent(sessionId)}`, { method: 'DELETE', headers }, options);
+}
+/**
+ * Answers a paused approval. The decision travels on its own request while the
+ * message stream stays open — the stream resumes on its own once this lands.
+ *
+ * The gateway tests `approved === true`, so anything else is a rejection. It is
+ * passed through as a real boolean rather than coerced, to keep that explicit.
+ *
+ * A decision that arrives after the approval timed out, or a second decision for
+ * the same approval, is a 404 `ERR_AGENT_APPROVAL_NOT_FOUND` — the two are
+ * deliberately indistinguishable. Callers should treat it as "already settled",
+ * not as a failure.
+ */
+export async function decideApproval(sessionId, approvalId, approved, options = {}) {
+    const headers = await buildHeaders(options, { 'content-type': 'application/json' });
+    await requestJson(`${AGENT_ROUTE_PREFIX}/sessions/${encodeURIComponent(sessionId)}`
+        + `/approvals/${encodeURIComponent(approvalId)}`, { method: 'POST', headers, body: JSON.stringify({ approved }) }, options);
+}
+/**
+ * Sends one message and yields its events until the turn ends.
+ *
+ * Only one turn may be in flight per session; a second send while this is
+ * running — including while it is paused on an approval, since a paused turn
+ * still holds the session busy — throws `ERR_AGENT_TURN_ACTIVE`.
+ */
+export async function* streamTurn(sessionId, text, options = {}) {
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    const headers = await buildHeaders(options, {
+        'content-type': 'application/json',
+        'accept': 'text/event-stream',
+    });
+    const response = await fetchImpl(joinUrl(options.baseUrl, `${AGENT_ROUTE_PREFIX}/sessions/${encodeURIComponent(sessionId)}/messages`), { method: 'POST', headers, body: JSON.stringify({ text }), signal: options.signal });
+    // 404 / 409 / 400 are all raised before the SSE headers go out, so they arrive
+    // as an ordinary JSON body rather than as an event on the stream.
+    if (!response.ok)
+        throw await toApiError(response);
+    if (!response.body)
+        throw new AgentApiError(response.status, 'ERR_AGENT_STREAM_EMPTY');
+    yield* readAgentStream(response.body, options.signal, {
+        ...(options.idleTimeoutMs === undefined ? {} : { idleTimeoutMs: options.idleTimeoutMs }),
+        ...(options.approvalIdleTimeoutMs === undefined
+            ? {}
+            : { approvalIdleTimeoutMs: options.approvalIdleTimeoutMs }),
+        ...(options.firstEventIdleTimeoutMs === undefined
+            ? {}
+            : { firstEventIdleTimeoutMs: options.firstEventIdleTimeoutMs }),
+    });
+}
+//# sourceMappingURL=transport.js.map

package/dist/core/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/core/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,eAAe,EAAE,MAAM,OAAO,CAAA;AAEvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAA;AAE1C,iDAAiD;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,iBAAiB,EAAE,6BAA6B;IAChD,WAAW,EAAE,uBAAuB;IACpC,aAAa,EAAE,iCAAiC;IAChD,WAAW,EAAE,uBAAuB;IACpC,kBAAkB,EAAE,8BAA8B;CAC1C,CAAA;AAcV,oEAAoE;AACpE,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAQ;IACd,IAAI,CAAQ;IAErB,YAAY,MAAc,EAAE,IAAY,EAAE,OAAgB;QACxD,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;IAED,EAAE,CAAC,IAAoB;QACrB,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,CAAA;IAC3B,CAAC;CACF;AAED,2FAA2F;AAC3F,uFAAuF;AACvF,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAA;IACtB,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,GAAG,EAAE,CAAA;IAC/C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,OAAO,CAAC,OAA2B,EAAE,IAAY;IACxD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IACzB,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAA;AAClD,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAA8B,EAC9B,KAA8B;IAE9B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAA;IACxC,IAAI,KAAK;QAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAA;IAC1D,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,UAAU,CAAC,QAAkB;IAC1C,IAAI,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAA;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAA;QAC5D,IAAI,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ;YAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAA;IACvE,OAAO,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AAC1D,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,IAAiB,EACjB,OAA8B;IAE9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAA;IACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;IACtE,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAA;IAClD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAA;AACrC,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAO,GAA0B,EAAE;IACrE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;IACnF,MAAM,IAAI,GAAG,MAAM,WAAW,CAC5B,GAAG,kBAAkB,WAAW,EAChC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EACvC,OAAO,CACR,CAAA;IACD,OAAO,IAAI,CAAC,SAAS,CAAA;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,OAAO,GAA0B,EAAE;IAEnC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,WAAW,CACf,GAAG,kBAAkB,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE,EACjE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAC7B,OAAO,CACR,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,UAAkB,EAClB,QAAiB,EACjB,OAAO,GAA0B,EAAE;IAEnC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;IACnF,MAAM,WAAW,CACf,GAAG,kBAAkB,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE;UAC/D,cAAc,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAChD,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAC/D,OAAO,CACR,CAAA;AACH,CAAC;AAMD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,UAAU,CAC/B,SAAiB,EACjB,IAAY,EACZ,OAAO,GAAsB,EAAE;IAE/B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAA;IACvD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;QAC1C,cAAc,EAAE,kBAAkB;QAClC,QAAQ,EAAE,mBAAmB;KAC9B,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,kBAAkB,aAAa,kBAAkB,CAAC,SAAS,CAAC,WAAW,CAAC,EACpG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACpF,CAAA;IAED,+EAA+E;IAC/E,kEAAkE;IAClE,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAA;IAClD,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAA;IAEtF,KAAK,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE;QACpD,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;QACxF,GAAG,CAAC,OAAO,CAAC,qBAAqB,KAAK,SAAS;YAC7C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,uBAAuB,KAAK,SAAS;YAC/C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,uBAAuB,EAAE,OAAO,CAAC,uBAAuB,EAAE,CAAC;KAClE,CAAC,CAAA;AACJ,CAAC"}