@tokenfactory/acc-runner 0.44.8 → 0.44.9

package/dist/supervisor.js

@@ -0,0 +1,54 @@
+/**
+ * RUNNER-LINUX-SUPERVISOR-1: where a Linux runner host's `watch` supervisor
+ * lives, and what its unit is called.
+ *
+ * macOS has had a supervised `watch` since v0.12 (install-launchd.sh + the
+ * `launchd agent loaded` doctor check). Linux had the installer
+ * (setup-dedicated-runner-linux.sh, a systemd --user unit with Restart=always)
+ * but NO doctor check — `acc-runner doctor` returned "skipped (non-darwin)" and
+ * stayed green on a host whose supervisor was never installed, never enabled,
+ * or silently dead. A release-critical named instance could be down with every
+ * check passing.
+ *
+ * Two things were missing and both are name-derived, so they live here:
+ *
+ *   - Named instances need their OWN unit. `--instance <name>` already forks
+ *     the keychain slot, cache root and server-side machine string
+ *     (instance.ts), but the installer only ever wrote one `acc-runner.service`
+ *     running a bare `watch`. Two named instances on one host collided on it.
+ *   - The doctor needs to resolve the SAME unit name the installer wrote, from
+ *     the same instance env, or it checks the wrong service.
+ *
+ * Pure and fs-free on purpose: the bash installer renders the unit, this module
+ * only names and locates it, so there is exactly one renderer and no template
+ * to drift. The unit CONTENT contract is pinned by
+ * tests/linux-supervisor.test.ts, which reads the installer's text.
+ *
+ * Unnamed hosts keep the historic `acc-runner.service` byte-for-byte — the
+ * upgrade is a no-op for every runner installed before this shipped.
+ */
+import path from "node:path";
+import { resolveInstance } from "./instance.js";
+/** Unit basename for the unnamed instance. FROZEN — pre-existing installs use it. */
+export const SYSTEMD_UNIT_BASE = "acc-runner";
+/** Directory holding systemd --user units for the invoking operator. */
+export function systemdUserUnitDir(home) {
+    return path.join(home, ".config", "systemd", "user");
+}
+/**
+ * Unit name for an instance: `acc-runner.service` unnamed, else
+ * `acc-runner-<name>.service`. The name is already constrained to
+ * `[a-z0-9][a-z0-9-]{0,31}` by instance.ts, so it is safe in a unit name.
+ */
+export function systemdUnitName(instance) {
+    return instance ? `${SYSTEMD_UNIT_BASE}-${instance}.service` : `${SYSTEMD_UNIT_BASE}.service`;
+}
+/** Absolute path of the unit file the installer writes. */
+export function systemdUnitPath(home, instance) {
+    return path.join(systemdUserUnitDir(home), systemdUnitName(instance));
+}
+/** Unit name for the instance THIS process resolves (`--instance` / env). */
+export function activeSystemdUnitName(env = process.env) {
+    return systemdUnitName(resolveInstance(env));
+}
+//# sourceMappingURL=supervisor.js.map

package/dist/supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.js","sourceRoot":"","sources":["../src/supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,qFAAqF;AACrF,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAqB,CAAC;AAEvD,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAuB;IACrD,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,iBAAiB,IAAI,QAAQ,UAAU,CAAC,CAAC,CAAC,GAAG,iBAAiB,UAAU,CAAC;AAChG,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,QAAuB;IACnE,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,OAAO,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/C,CAAC"}

package/dist/terminal/http-carrier.d.ts

@@ -0,0 +1,17 @@
+import type { TerminalEphemeralCarrier, TerminalRunnerMessage } from "./transport-contract.js";
+export interface TerminalHttpCarrierOptions {
+    baseUrl: string;
+    accessToken: () => string | Promise<string>;
+    leaseId: string;
+    fetchImpl?: typeof fetch;
+}
+/** One-shot private upload carrier. It retains no frame or credential. */
+export declare class TerminalHttpCarrier implements TerminalEphemeralCarrier {
+    private readonly endpoint;
+    private readonly token;
+    private readonly leaseId;
+    private readonly fetchImpl;
+    constructor(options: TerminalHttpCarrierOptions);
+    publish(message: TerminalRunnerMessage): Promise<void>;
+}
+//# sourceMappingURL=http-carrier.d.ts.map

package/dist/terminal/http-carrier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-carrier.d.ts","sourceRoot":"","sources":["../../src/terminal/http-carrier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE/F,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,0EAA0E;AAC1E,qBAAa,mBAAoB,YAAW,wBAAwB;IAClE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4C;IAClE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,EAAE,0BAA0B;IAYzC,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;CAkB7D"}

package/dist/terminal/http-carrier.js

@@ -0,0 +1,39 @@
+/** One-shot private upload carrier. It retains no frame or credential. */
+export class TerminalHttpCarrier {
+    endpoint;
+    token;
+    leaseId;
+    fetchImpl;
+    constructor(options) {
+        const baseUrl = options.baseUrl.trim().replace(/\/+$/, "");
+        if (!baseUrl.startsWith("https://") && !baseUrl.startsWith("http://localhost")) {
+            throw new Error("terminal carrier requires HTTPS");
+        }
+        if (!options.leaseId.trim())
+            throw new Error("terminal carrier requires a lease");
+        this.endpoint = `${baseUrl}/api/terminal/runner-ingest`;
+        this.token = options.accessToken;
+        this.leaseId = options.leaseId;
+        this.fetchImpl = options.fetchImpl ?? fetch;
+    }
+    async publish(message) {
+        const accessToken = (await this.token()).trim();
+        if (!accessToken)
+            throw new Error("terminal carrier requires runner authentication");
+        const response = await this.fetchImpl(this.endpoint, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                "Content-Type": "application/json",
+                "x-acc-terminal-lease": this.leaseId,
+            },
+            body: JSON.stringify(message),
+            signal: AbortSignal.timeout(15_000),
+        });
+        if (!response.ok) {
+            const body = await response.json().catch(() => ({}));
+            throw new Error(body.error ?? `terminal carrier rejected the frame (${response.status})`);
+        }
+    }
+}
+//# sourceMappingURL=http-carrier.js.map

package/dist/terminal/http-carrier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-carrier.js","sourceRoot":"","sources":["../../src/terminal/http-carrier.ts"],"names":[],"mappings":"AASA,0EAA0E;AAC1E,MAAM,OAAO,mBAAmB;IACb,QAAQ,CAAS;IACjB,KAAK,CAA4C;IACjD,OAAO,CAAS;IAChB,SAAS,CAAe;IAEzC,YAAY,OAAmC;QAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,GAAG,GAAG,OAAO,6BAA6B,CAAC;QACxD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA8B;QAC1C,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,cAAc,EAAE,kBAAkB;gBAClC,sBAAsB,EAAE,IAAI,CAAC,OAAO;aACrC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAuB,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,wCAAwC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;CACF"}

package/dist/terminal/pty-adapter.d.ts

@@ -0,0 +1,88 @@
+import type { RunnerConfig } from "../config.js";
+export declare const TERMINAL_RUNNER_ENABLED_ENV = "ACC_RUNNER_INTERACTIVE_TERMINAL";
+export declare const TERMINAL_REDACTION_POLICY_VERSION = "machine-redaction.v1";
+export declare const MAX_TERMINAL_INPUT_BYTES: number;
+export declare const MAX_TERMINAL_OUTPUT_BYTES: number;
+export interface TerminalPtyExit {
+    exitCode: number;
+    signal?: number;
+}
+export interface TerminalPtyProcess {
+    readonly pid: number;
+    onData(listener: (data: string) => void): {
+        dispose(): void;
+    };
+    onExit(listener: (event: TerminalPtyExit) => void): {
+        dispose(): void;
+    };
+    write(data: string): void;
+    resize(cols: number, rows: number): void;
+    kill(signal?: string): void;
+}
+export interface TerminalPtyFactory {
+    spawn(file: string, args: readonly string[], options: {
+        name: string;
+        cwd: string;
+        env: Record<string, string>;
+        cols: number;
+        rows: number;
+    }): TerminalPtyProcess;
+}
+export interface OpenTerminalPtyRequest {
+    terminalSessionId: string;
+    repo: string;
+    cols: number;
+    rows: number;
+}
+export interface TerminalOutputFrame {
+    terminalSessionId: string;
+    outputSeq: number;
+    stream: "stdout";
+    encoding: "base64";
+    data: string;
+    byteLength: number;
+    redactionPolicyVersion: typeof TERMINAL_REDACTION_POLICY_VERSION;
+    redactionApplied: true;
+}
+export interface TerminalInputReceipt {
+    inputId: string;
+    inputSeq: number;
+    runnerReceiptId: string;
+    inputAckCursor: number;
+    status: "accepted";
+}
+export interface TerminalExitOutcome {
+    terminalSessionId: string;
+    exitCode: number;
+    signal?: number;
+    reason: "completed" | "user_terminated" | "failed";
+    finalOutputSeq: number;
+}
+export interface TerminalRunnerSession {
+    readonly terminalSessionId: string;
+    readonly pid: number;
+    readonly closed: Promise<TerminalExitOutcome>;
+    writeInput(inputId: string, inputSeq: number, data: string): TerminalInputReceipt;
+    resize(resizeSeq: number, cols: number, rows: number): boolean;
+    terminate(): Promise<TerminalExitOutcome>;
+}
+export interface OpenTerminalPtyDeps {
+    cfg: RunnerConfig;
+    request: OpenTerminalPtyRequest;
+    onOutput: (frame: TerminalOutputFrame) => void | Promise<void>;
+    factory?: TerminalPtyFactory;
+    env?: NodeJS.ProcessEnv;
+    terminateGraceMs?: number;
+}
+export declare class TerminalRunnerError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export declare function terminalRunnerEnabled(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Allocate one dark, runner-local PTY. This adapter has no polling, RPC, socket,
+ * browser, or product-surface wiring; the explicit environment kill switch must
+ * be on and a future authenticated gateway must supply every call.
+ */
+export declare function openTerminalPty(deps: OpenTerminalPtyDeps): Promise<TerminalRunnerSession>;
+//# sourceMappingURL=pty-adapter.d.ts.map

package/dist/terminal/pty-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-adapter.d.ts","sourceRoot":"","sources":["../../src/terminal/pty-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAOjD,eAAO,MAAM,2BAA2B,oCAAoC,CAAC;AAC7E,eAAO,MAAM,iCAAiC,yBAAyB,CAAC;AACxE,eAAO,MAAM,wBAAwB,QAAY,CAAC;AAClD,eAAO,MAAM,yBAAyB,QAAY,CAAC;AAInD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,OAAO,IAAI,IAAI,CAAA;KAAE,CAAC;IAC9D,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GAAG;QAAE,OAAO,IAAI,IAAI,CAAA;KAAE,CAAC;IACxE,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CACH,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE;QACP,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;KACd,GACA,kBAAkB,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,EAAE,OAAO,iCAAiC,CAAC;IACjE,gBAAgB,EAAE,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,GAAG,iBAAiB,GAAG,QAAQ,CAAC;IACnD,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAAC;IAClF,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/D,SAAS,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,YAAY,CAAC;IAClB,OAAO,EAAE,sBAAsB,CAAC;IAChC,QAAQ,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,EAAE,kBAAkB,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAInD;AAED,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEnF;AA8ED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CA2J/F"}

package/dist/terminal/pty-adapter.js

@@ -0,0 +1,252 @@
+import { createHash, randomUUID } from "node:crypto";
+import { machineCommandEnv, redactMachineOutput, resolveMachineRepoPath, } from "../machine-console/index.js";
+export const TERMINAL_RUNNER_ENABLED_ENV = "ACC_RUNNER_INTERACTIVE_TERMINAL";
+export const TERMINAL_REDACTION_POLICY_VERSION = "machine-redaction.v1";
+export const MAX_TERMINAL_INPUT_BYTES = 16 * 1024;
+export const MAX_TERMINAL_OUTPUT_BYTES = 64 * 1024;
+const OUTPUT_CHUNK_BYTES = 48 * 1024;
+const TERMINATE_GRACE_MS = 5_000;
+export class TerminalRunnerError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "TerminalRunnerError";
+    }
+}
+export function terminalRunnerEnabled(env = process.env) {
+    return (env[TERMINAL_RUNNER_ENABLED_ENV] ?? "").trim() === "1";
+}
+function assertDimensions(cols, rows) {
+    if (!Number.isInteger(cols) || cols < 1 || cols > 500) {
+        throw new TerminalRunnerError("invalid_dimensions", "cols must be an integer from 1 to 500");
+    }
+    if (!Number.isInteger(rows) || rows < 1 || rows > 200) {
+        throw new TerminalRunnerError("invalid_dimensions", "rows must be an integer from 1 to 200");
+    }
+}
+function closedEnvironment(env) {
+    const source = machineCommandEnv(env);
+    const out = {
+        ACC_INTERACTIVE_TERMINAL: "1",
+        TERM: source.TERM || "xterm-256color",
+    };
+    for (const [name, value] of Object.entries(source)) {
+        if (typeof value === "string")
+            out[name] = value;
+    }
+    return out;
+}
+function splitByBytes(value, maxBytes = OUTPUT_CHUNK_BYTES) {
+    const chunks = [];
+    let pending = value;
+    while (Buffer.byteLength(pending) > maxBytes) {
+        let end = Math.min(pending.length, maxBytes);
+        while (end > 1 && Buffer.byteLength(pending.slice(0, end)) > maxBytes)
+            end -= 1;
+        chunks.push(pending.slice(0, end));
+        pending = pending.slice(end);
+    }
+    if (pending)
+        chunks.push(pending);
+    return chunks;
+}
+/** Emit complete tokens promptly while retaining the last token across PTY chunks. */
+class TerminalStreamingRedactor {
+    pending = "";
+    push(value) {
+        this.pending += value;
+        const cut = Math.max(this.pending.lastIndexOf(" "), this.pending.lastIndexOf("\n"), this.pending.lastIndexOf("\r"), this.pending.lastIndexOf("\t"));
+        if (cut < 0) {
+            if (Buffer.byteLength(this.pending) > MAX_TERMINAL_OUTPUT_BYTES) {
+                throw new TerminalRunnerError("redaction_buffer_exceeded", "Unbroken PTY output exceeded the redaction boundary");
+            }
+            return "";
+        }
+        const ready = this.pending.slice(0, cut + 1);
+        this.pending = this.pending.slice(cut + 1);
+        return redactMachineOutput(ready);
+    }
+    finish() {
+        const ready = redactMachineOutput(this.pending);
+        this.pending = "";
+        return ready;
+    }
+}
+async function defaultPtyFactory() {
+    const moduleName = "node-pty";
+    try {
+        return await import(moduleName);
+    }
+    catch (error) {
+        throw new TerminalRunnerError("pty_unavailable", `Interactive terminal support is installed incorrectly: ${error.message}`);
+    }
+}
+/**
+ * Allocate one dark, runner-local PTY. This adapter has no polling, RPC, socket,
+ * browser, or product-surface wiring; the explicit environment kill switch must
+ * be on and a future authenticated gateway must supply every call.
+ */
+export async function openTerminalPty(deps) {
+    const env = deps.env ?? process.env;
+    if (!terminalRunnerEnabled(env)) {
+        throw new TerminalRunnerError("terminal_disabled", "Interactive terminal runner is disabled");
+    }
+    if (!deps.request.terminalSessionId.trim()) {
+        throw new TerminalRunnerError("invalid_session", "terminalSessionId is required");
+    }
+    assertDimensions(deps.request.cols, deps.request.rows);
+    const cwd = resolveMachineRepoPath(deps.cfg, deps.request.repo);
+    const factory = deps.factory ?? await defaultPtyFactory();
+    const shell = process.platform === "win32" ? (env.ComSpec || "cmd.exe") : "/bin/sh";
+    const args = process.platform === "win32" ? [] : ["-l"];
+    const pty = factory.spawn(shell, args, {
+        name: "xterm-256color",
+        cwd,
+        env: closedEnvironment(env),
+        cols: deps.request.cols,
+        rows: deps.request.rows,
+    });
+    const inputReceipts = new Map();
+    const redactor = new TerminalStreamingRedactor();
+    let inputCursor = 0;
+    let resizeCursor = 0;
+    let outputCursor = 0;
+    let terminating = false;
+    let settled = false;
+    let outputFailure = false;
+    let outputChain = Promise.resolve();
+    let hardKill;
+    let resolveClosed;
+    const closed = new Promise((resolve) => { resolveClosed = resolve; });
+    const emit = (value) => {
+        for (const chunk of splitByBytes(value)) {
+            const bytes = Buffer.from(chunk, "utf8");
+            outputCursor += 1;
+            const frame = {
+                terminalSessionId: deps.request.terminalSessionId,
+                outputSeq: outputCursor,
+                stream: "stdout",
+                encoding: "base64",
+                data: bytes.toString("base64"),
+                byteLength: bytes.byteLength,
+                redactionPolicyVersion: TERMINAL_REDACTION_POLICY_VERSION,
+                redactionApplied: true,
+            };
+            outputChain = outputChain.then(() => deps.onOutput(frame)).catch(() => {
+                outputFailure = true;
+                if (!terminating) {
+                    terminating = true;
+                    pty.kill("SIGTERM");
+                    hardKill = setTimeout(() => {
+                        if (!settled)
+                            pty.kill("SIGKILL");
+                    }, deps.terminateGraceMs ?? TERMINATE_GRACE_MS);
+                    hardKill.unref?.();
+                }
+            });
+        }
+    };
+    const dataSubscription = pty.onData((data) => {
+        try {
+            emit(redactor.push(data));
+        }
+        catch {
+            outputFailure = true;
+            if (!terminating) {
+                terminating = true;
+                pty.kill("SIGTERM");
+                hardKill = setTimeout(() => {
+                    if (!settled)
+                        pty.kill("SIGKILL");
+                }, deps.terminateGraceMs ?? TERMINATE_GRACE_MS);
+                hardKill.unref?.();
+            }
+        }
+    });
+    const exitSubscription = pty.onExit((event) => {
+        if (settled)
+            return;
+        settled = true;
+        if (hardKill)
+            clearTimeout(hardKill);
+        emit(redactor.finish());
+        void outputChain.finally(() => {
+            dataSubscription.dispose();
+            exitSubscription.dispose();
+            resolveClosed({
+                terminalSessionId: deps.request.terminalSessionId,
+                exitCode: event.exitCode,
+                signal: event.signal,
+                reason: outputFailure ? "failed" : terminating ? "user_terminated" : event.exitCode === 0 ? "completed" : "failed",
+                finalOutputSeq: outputCursor,
+            });
+        });
+    });
+    return {
+        terminalSessionId: deps.request.terminalSessionId,
+        pid: pty.pid,
+        closed,
+        writeInput: (inputId, inputSeq, data) => {
+            if (settled || terminating)
+                throw new TerminalRunnerError("terminal_not_running", "Terminal is not accepting input");
+            if (!inputId.trim())
+                throw new TerminalRunnerError("invalid_input", "inputId is required");
+            if (!Number.isSafeInteger(inputSeq) || inputSeq <= 0) {
+                throw new TerminalRunnerError("invalid_input_sequence", "inputSeq must be positive");
+            }
+            const byteLength = Buffer.byteLength(data, "utf8");
+            if (byteLength > MAX_TERMINAL_INPUT_BYTES) {
+                throw new TerminalRunnerError("input_too_large", "PTY input exceeds the frame limit");
+            }
+            const digest = createHash("sha256").update(data).digest("hex");
+            const existing = inputReceipts.get(inputId);
+            if (existing) {
+                if (existing.digest !== digest || existing.receipt.inputSeq !== inputSeq) {
+                    throw new TerminalRunnerError("input_id_conflict", "inputId was reused with different input");
+                }
+                return existing.receipt;
+            }
+            if (inputSeq !== inputCursor + 1) {
+                throw new TerminalRunnerError("input_sequence_gap", "inputSeq must advance by exactly one");
+            }
+            pty.write(data);
+            inputCursor = inputSeq;
+            const receipt = Object.freeze({
+                inputId,
+                inputSeq,
+                runnerReceiptId: randomUUID(),
+                inputAckCursor: inputCursor,
+                status: "accepted",
+            });
+            inputReceipts.set(inputId, { digest, receipt });
+            return receipt;
+        },
+        resize: (resizeSeq, cols, rows) => {
+            if (settled || terminating)
+                throw new TerminalRunnerError("terminal_not_running", "Terminal cannot be resized");
+            assertDimensions(cols, rows);
+            if (!Number.isSafeInteger(resizeSeq) || resizeSeq <= 0) {
+                throw new TerminalRunnerError("invalid_resize_sequence", "resizeSeq must be positive");
+            }
+            if (resizeSeq <= resizeCursor)
+                return false;
+            pty.resize(cols, rows);
+            resizeCursor = resizeSeq;
+            return true;
+        },
+        terminate: () => {
+            if (settled || terminating)
+                return closed;
+            terminating = true;
+            pty.kill("SIGTERM");
+            hardKill = setTimeout(() => {
+                if (!settled)
+                    pty.kill("SIGKILL");
+            }, deps.terminateGraceMs ?? TERMINATE_GRACE_MS);
+            hardKill.unref?.();
+            return closed;
+        },
+    };
+}
+//# sourceMappingURL=pty-adapter.js.map

package/dist/terminal/pty-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-adapter.js","sourceRoot":"","sources":["../../src/terminal/pty-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAErC,MAAM,CAAC,MAAM,2BAA2B,GAAG,iCAAiC,CAAC;AAC7E,MAAM,CAAC,MAAM,iCAAiC,GAAG,sBAAsB,CAAC;AACxE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAClD,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AACnD,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAkFjC,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACvB;IAArB,YAAqB,IAAY,EAAE,OAAe;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAQ;QAE/B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,IAAY;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;QACtD,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,EAAE,uCAAuC,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;QACtD,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,EAAE,uCAAuC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,GAAG,GAA2B;QAClC,wBAAwB,EAAE,GAAG;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,gBAAgB;KACtC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,QAAQ,GAAG,kBAAkB;IAChE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC;QAC7C,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7C,OAAO,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,QAAQ;YAAE,GAAG,IAAI,CAAC,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACnC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sFAAsF;AACtF,MAAM,yBAAyB;IACrB,OAAO,GAAG,EAAE,CAAC;IAErB,IAAI,CAAC,KAAa;QAChB,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,EAC7B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAC9B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAC9B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAC/B,CAAC;QACF,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,yBAAyB,EAAE,CAAC;gBAChE,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,qDAAqD,CAAC,CAAC;YACpH,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC3C,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,MAAM;QACJ,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,KAAK,UAAU,iBAAiB;IAC9B,MAAM,UAAU,GAAG,UAAU,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,UAAU,CAAuB,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAmB,CAC3B,iBAAiB,EACjB,0DAA2D,KAAe,CAAC,OAAO,EAAE,CACrF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAyB;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,yCAAyC,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,+BAA+B,CAAC,CAAC;IACpF,CAAC;IACD,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,iBAAiB,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE;QACrC,IAAI,EAAE,gBAAgB;QACtB,GAAG;QACH,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC;QAC3B,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;QACvB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;KACxB,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,IAAI,GAAG,EAA6D,CAAC;IAC3F,MAAM,QAAQ,GAAG,IAAI,yBAAyB,EAAE,CAAC;IACjD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,QAAoC,CAAC;IACzC,IAAI,aAAsD,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,EAAE,GAAG,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3F,MAAM,IAAI,GAAG,CAAC,KAAa,EAAQ,EAAE;QACnC,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzC,YAAY,IAAI,CAAC,CAAC;YAClB,MAAM,KAAK,GAAwB;gBACjC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;gBACjD,SAAS,EAAE,YAAY;gBACvB,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,sBAAsB,EAAE,iCAAiC;gBACzD,gBAAgB,EAAE,IAAI;aACvB,CAAC;YACF,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACpE,aAAa,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,WAAW,GAAG,IAAI,CAAC;oBACnB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACpB,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;wBACzB,IAAI,CAAC,OAAO;4BAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACpC,CAAC,EAAE,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,CAAC;oBAChD,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,WAAW,GAAG,IAAI,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACpB,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;oBACzB,IAAI,CAAC,OAAO;wBAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACpC,CAAC,EAAE,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,CAAC;gBAChD,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5C,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACxB,KAAK,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE;YAC5B,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC3B,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC3B,aAAa,CAAC;gBACZ,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;gBACjD,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;gBAClH,cAAc,EAAE,YAAY;aAC7B,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;QACjD,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,MAAM;QACN,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YACtC,IAAI,OAAO,IAAI,WAAW;gBAAE,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,EAAE,iCAAiC,CAAC,CAAC;YACrH,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;gBAAE,MAAM,IAAI,mBAAmB,CAAC,eAAe,EAAE,qBAAqB,CAAC,CAAC;YAC3F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,UAAU,GAAG,wBAAwB,EAAE,CAAC;gBAC1C,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACzE,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,EAAE,yCAAyC,CAAC,CAAC;gBAChG,CAAC;gBACD,OAAO,QAAQ,CAAC,OAAO,CAAC;YAC1B,CAAC;YACD,IAAI,QAAQ,KAAK,WAAW,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,mBAAmB,CAAC,oBAAoB,EAAE,sCAAsC,CAAC,CAAC;YAC9F,CAAC;YACD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChB,WAAW,GAAG,QAAQ,CAAC;YACvB,MAAM,OAAO,GAAyB,MAAM,CAAC,MAAM,CAAC;gBAClD,OAAO;gBACP,QAAQ;gBACR,eAAe,EAAE,UAAU,EAAE;gBAC7B,cAAc,EAAE,WAAW;gBAC3B,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YACH,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAChD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAChC,IAAI,OAAO,IAAI,WAAW;gBAAE,MAAM,IAAI,mBAAmB,CAAC,sBAAsB,EAAE,4BAA4B,CAAC,CAAC;YAChH,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,mBAAmB,CAAC,yBAAyB,EAAE,4BAA4B,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,SAAS,IAAI,YAAY;gBAAE,OAAO,KAAK,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,YAAY,GAAG,SAAS,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,EAAE,GAAG,EAAE;YACd,IAAI,OAAO,IAAI,WAAW;gBAAE,OAAO,MAAM,CAAC;YAC1C,WAAW,GAAG,IAAI,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpB,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;gBACzB,IAAI,CAAC,OAAO;oBAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC,EAAE,IAAI,CAAC,gBAAgB,IAAI,kBAAkB,CAAC,CAAC;YAChD,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/terminal/transport-contract.d.ts

@@ -0,0 +1,115 @@
+import type { TerminalExitOutcome, TerminalInputReceipt, TerminalOutputFrame } from "./pty-adapter.js";
+export declare const TERMINAL_TRANSPORT_PROTOCOL: "terminal.v1";
+export interface TerminalRunnerLease {
+    terminalSessionId: string;
+    runnerId: string;
+    runnerEpoch: number;
+    /** Opaque gateway-issued value. Never persisted or logged by the runner. */
+    leaseId: string;
+}
+export interface TerminalRunnerEnvelope<TKind extends string, TPayload> {
+    protocol: typeof TERMINAL_TRANSPORT_PROTOCOL;
+    kind: TKind;
+    messageId: string;
+    terminalSessionId: string;
+    runnerId: string;
+    runnerEpoch: number;
+    connectionId: string;
+    occurredAt: string;
+    payload: TPayload;
+}
+export type TerminalRunnerMessage = TerminalRunnerEnvelope<"runner.hello", {
+    runnerId: string;
+    runnerEpoch: number;
+    pty: {
+        supported: true;
+        resize: true;
+        processGroupStop: true;
+    };
+    inputAckCursor: number;
+    outputSeq: number;
+}> | TerminalRunnerEnvelope<"runner.heartbeat", {
+    runnerId: string;
+    runnerEpoch: number;
+    inputAckCursor: number;
+    outputSeq: number;
+}> | TerminalRunnerEnvelope<"input.receipt", TerminalInputReceipt & {
+    inputDigest: string;
+    byteCount: number;
+}> | TerminalRunnerEnvelope<"output.chunk", TerminalOutputFrame> | TerminalRunnerEnvelope<"runner.exited", TerminalExitOutcome> | TerminalRunnerEnvelope<"runner.reconcile.result", {
+    status: "running" | "terminated" | "unknown";
+    runnerEpoch: number;
+    inputAckCursor: number;
+    outputSeq: number;
+    exitCode?: number;
+    signal?: number;
+}>;
+/** Ephemeral carrier only. Implementations must not retain payload bodies. */
+export interface TerminalEphemeralCarrier {
+    publish(message: TerminalRunnerMessage): Promise<void>;
+}
+export interface TerminalInputReceiptMetadata {
+    terminalSessionId: string;
+    runnerId: string;
+    runnerEpoch: number;
+    connectionId: string;
+    inputId: string;
+    inputSeq: number;
+    inputDigest: string;
+    byteCount: number;
+    runnerReceiptId: string;
+    inputAckCursor: number;
+    status: TerminalInputReceipt["status"];
+}
+export interface TerminalOutputReceiptMetadata {
+    terminalSessionId: string;
+    runnerId: string;
+    runnerEpoch: number;
+    outputSeq: number;
+    stream: TerminalOutputFrame["stream"];
+    byteCount: number;
+    outputDigest: string;
+    redactionPolicyVersion: string;
+    redactionApplied: true;
+}
+export interface TerminalHeartbeatMetadata {
+    terminalSessionId: string;
+    runnerId: string;
+    runnerEpoch: number;
+    inputAckCursor: number;
+    outputSeq: number;
+    occurredAt: string;
+}
+export interface TerminalExitMetadata {
+    terminalSessionId: string;
+    runnerId: string;
+    runnerEpoch: number;
+    exitCode: number;
+    signal?: number;
+    reason: TerminalExitOutcome["reason"];
+    finalOutputSeq: number;
+}
+/** Durable metadata boundary. Raw payload fields are impossible to pass. */
+export interface TerminalMetadataSink {
+    recordHeartbeat(metadata: TerminalHeartbeatMetadata): Promise<void>;
+    recordInputReceipt(metadata: TerminalInputReceiptMetadata): Promise<void>;
+    recordOutputReceipt(metadata: TerminalOutputReceiptMetadata): Promise<void>;
+    recordExit(metadata: TerminalExitMetadata): Promise<void>;
+}
+export interface TerminalTransportInput {
+    inputId: string;
+    inputSeq: number;
+    encoding: "utf8";
+    data: string;
+    byteLength: number;
+}
+export interface DarkTerminalRunnerTransportOptions {
+    lease: TerminalRunnerLease;
+    connectionId: string;
+    carrier: TerminalEphemeralCarrier;
+    metadata: TerminalMetadataSink;
+    env?: NodeJS.ProcessEnv;
+    now?: () => number;
+    messageId?: () => string;
+}
+//# sourceMappingURL=transport-contract.d.ts.map

package/dist/terminal/transport-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-contract.d.ts","sourceRoot":"","sources":["../../src/terminal/transport-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,kBAAkB,CAAC;AAE1B,eAAO,MAAM,2BAA2B,EAAG,aAAsB,CAAC;AAElE,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB,CAAC,KAAK,SAAS,MAAM,EAAE,QAAQ;IACpE,QAAQ,EAAE,OAAO,2BAA2B,CAAC;IAC7C,IAAI,EAAE,KAAK,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,QAAQ,CAAC;CACnB;AAED,MAAM,MAAM,qBAAqB,GAC7B,sBAAsB,CAAC,cAAc,EAAE;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE;QAAE,SAAS,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,IAAI,CAAC;QAAC,gBAAgB,EAAE,IAAI,CAAA;KAAE,CAAC;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,GACF,sBAAsB,CAAC,kBAAkB,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,GACF,sBAAsB,CAAC,eAAe,EAAE,oBAAoB,GAAG;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,GACF,sBAAsB,CAAC,cAAc,EAAE,mBAAmB,CAAC,GAC3D,sBAAsB,CAAC,eAAe,EAAE,mBAAmB,CAAC,GAC5D,sBAAsB,CAAC,yBAAyB,EAAE;IAChD,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEP,8EAA8E;AAC9E,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,4BAA4B;IAC3C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,gBAAgB,EAAE,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,yBAAyB;IACxC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,eAAe,CAAC,QAAQ,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,kBAAkB,CAAC,QAAQ,EAAE,4BAA4B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,mBAAmB,CAAC,QAAQ,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,UAAU,CAAC,QAAQ,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kCAAkC;IACjD,KAAK,EAAE,mBAAmB,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,wBAAwB,CAAC;IAClC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;CAC1B"}

package/dist/terminal/transport-contract.js

@@ -0,0 +1,2 @@
+export const TERMINAL_TRANSPORT_PROTOCOL = "terminal.v1";
+//# sourceMappingURL=transport-contract.js.map

package/dist/terminal/transport-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-contract.js","sourceRoot":"","sources":["../../src/terminal/transport-contract.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,2BAA2B,GAAG,aAAsB,CAAC"}

package/dist/terminal/transport.d.ts

@@ -0,0 +1,32 @@
+import { type TerminalExitOutcome, type TerminalInputReceipt, type TerminalOutputFrame, type TerminalRunnerSession } from "./pty-adapter.js";
+import { type DarkTerminalRunnerTransportOptions, type TerminalRunnerLease, type TerminalTransportInput } from "./transport-contract.js";
+export * from "./transport-contract.js";
+export declare class DarkTerminalRunnerTransport {
+    private readonly lease;
+    private readonly connectionId;
+    private readonly carrier;
+    private readonly metadata;
+    private readonly now;
+    private readonly messageId;
+    private session?;
+    private inputAckCursor;
+    private outputSeq;
+    private exitOutcome?;
+    private exitPromise?;
+    constructor(options: DarkTerminalRunnerTransportOptions);
+    bindSession(session: TerminalRunnerSession): void;
+    hello(claim: TerminalRunnerLease): Promise<void>;
+    heartbeat(claim: TerminalRunnerLease): Promise<void>;
+    writeInput(claim: TerminalRunnerLease, input: TerminalTransportInput): Promise<TerminalInputReceipt>;
+    resize(claim: TerminalRunnerLease, resizeSeq: number, cols: number, rows: number): boolean;
+    acceptOutput(claim: TerminalRunnerLease, frame: TerminalOutputFrame): Promise<void>;
+    reconcile(claim: TerminalRunnerLease): Promise<void>;
+    terminate(claim: TerminalRunnerLease): Promise<TerminalExitOutcome>;
+    settled(): Promise<void>;
+    private assertLease;
+    private requireSession;
+    private envelope;
+    private publish;
+    private publishExit;
+}
+//# sourceMappingURL=transport.d.ts.map