@workerdeck/client 0.11.0 → 0.12.0

package/build/index.d.mts

@@ -1,5 +1,28 @@
 import { AttachedFrame, CreateJobRequest, CreateProfileRequest, CreateSessionRequest, FindHostFilesResponse, GetProfileResponse, JobEvent, JobInfo, ListHostDirResponse, ListHostRootsResponse, ListProfilesResponse, McpServerActionRequest, McpServerStatusInfo, MessageAttachment, PermissionMode, ProfileInfo, QueueStats, ReadHostFileResponse, ResolvePermissionRequest, SdkSessionSummary, SessionEvent, SessionFileInfo, SessionInfo, SubmitExecutionResultRequest, SubmitExecutionResultResponse, ToolCallRequestFrame, ToolExecutionOutput, UpdateProfileRequest, UpdateSessionRequest, WriteHostFileRequest, WriteHostFileResponse } from "@workerdeck/protocol";
 
+//#region src/host-url.d.ts
+/**
+ * Pure URL logic for gateway hosts — what an operator types, turned into the
+ * `baseUrl` a `WorkerDeckClient` takes.
+ *
+ * Here rather than in each client because there were already two copies (the iOS
+ * `Host.apiURL` and the VS Code extension's port) and a third was coming. Every
+ * host that lets someone type a gateway address has to normalize it the same
+ * way, or the same gateway saved on two devices is two gateways.
+ */
+type HostUrl = {
+  baseUrl: string;
+};
+/** Normalized REST base for `WorkerDeckClient`, or undefined if unparseable. */
+declare function apiUrl(host: HostUrl): string | undefined;
+/**
+ * Whether this gateway is the machine the caller runs on. Decided from the URL,
+ * never by probing paths for existence — two checkouts of the same repo would
+ * lie. In a remote development window the caller runs on the remote box, so
+ * "loopback" correctly means *that* machine and its paths are real files there.
+ */
+declare function isLoopbackHost(host: HostUrl): boolean;
+//#endregion
 //#region src/index.d.ts
 /** Whatever the ambient `fetch` accepts as a body — `Blob`/`File` in a browser,
  * `Uint8Array` or a string in Node. Derived rather than named (`BodyInit` is a
@@ -258,5 +281,5 @@ declare class WorkerDeckClient {
   openQueueSocket(): WebSocket;
 }
 //#endregion
-export { AttachOptions, ClientOptions, FetchBody, QueueHandle, QueueHandleEvents, SessionHandle, SessionHandleEvents, WorkerDeckClient, WorkerDeckError };
+export { AttachOptions, ClientOptions, FetchBody, type HostUrl, QueueHandle, QueueHandleEvents, SessionHandle, SessionHandleEvents, WorkerDeckClient, WorkerDeckError, apiUrl, isLoopbackHost };
 //# sourceMappingURL=index.d.mts.map

package/build/index.mjs

@@ -1,3 +1,35 @@
+//#region src/host-url.ts
+/** Normalized REST base for `WorkerDeckClient`, or undefined if unparseable. */
+function apiUrl(host) {
+	let text = host.baseUrl.trim();
+	while (text.endsWith("/")) text = text.slice(0, -1);
+	if (text === "") return void 0;
+	if (!text.includes("://")) text = "http://" + text;
+	if (!text.endsWith("/v1")) text += "/v1";
+	try {
+		new URL(text);
+	} catch {
+		return;
+	}
+	return text;
+}
+/**
+* Whether this gateway is the machine the caller runs on. Decided from the URL,
+* never by probing paths for existence — two checkouts of the same repo would
+* lie. In a remote development window the caller runs on the remote box, so
+* "loopback" correctly means *that* machine and its paths are real files there.
+*/
+function isLoopbackHost(host) {
+	const api = apiUrl(host);
+	if (!api) return false;
+	try {
+		const { hostname } = new URL(api);
+		return hostname === "127.0.0.1" || hostname === "localhost" || hostname === "::1" || hostname === "[::1]";
+	} catch {
+		return false;
+	}
+}
+//#endregion
 //#region src/index.ts
 /**
 * A REST call the gateway refused, carrying the status alongside the message.
@@ -504,6 +536,6 @@ var WorkerDeckClient = class {
 	}
 };
 //#endregion
-export { QueueHandle, SessionHandle, WorkerDeckClient, WorkerDeckError };
+export { QueueHandle, SessionHandle, WorkerDeckClient, WorkerDeckError, apiUrl, isLoopbackHost };
 
 //# sourceMappingURL=index.mjs.map

package/build/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["#client","#options","#lastSeq","#connectTimer","#connect","#listeners","#sendFrame","#closed","#ws","#retries","#outbox","#emit","#reconnect","#fetch","#WebSocketImpl","#call"],"sources":["../src/index.ts"],"sourcesContent":["import type {\n  AttachedFrame,\n  ClientFrame,\n  CreateJobRequest,\n  CreateProfileRequest,\n  CreateSessionRequest,\n  JobEvent,\n  JobInfo,\n  FindHostFilesResponse,\n  GetProfileResponse,\n  ListHostDirResponse,\n  ListHostRootsResponse,\n  ListProfilesResponse,\n  ListSessionFilesResponse,\n  McpServerActionRequest,\n  McpServersResponse,\n  McpServerStatusInfo,\n  MessageAttachment,\n  ReadHostFileResponse,\n  UploadAttachmentResponse,\n  WriteHostFileRequest,\n  WriteHostFileResponse,\n  PermissionMode,\n  ProfileInfo,\n  QueueServerFrame,\n  QueueStats,\n  ResolvePermissionRequest,\n  UpdateSessionRequest,\n  SubmitExecutionResultRequest,\n  SubmitExecutionResultResponse,\n  SaveProfileResponse,\n  SdkSessionSummary,\n  ServerFrame,\n  SessionEvent,\n  SessionFileInfo,\n  SessionInfo,\n  ToolCallRequestFrame,\n  ToolExecutionOutput,\n  UpdateProfileRequest,\n} from '@workerdeck/protocol'\n\n/** Whatever the ambient `fetch` accepts as a body — `Blob`/`File` in a browser,\n * `Uint8Array` or a string in Node. Derived rather than named (`BodyInit` is a\n * DOM-lib type, and this package compiles against both). */\nexport type FetchBody = NonNullable<NonNullable<Parameters<typeof fetch>[1]>['body']>\n\nexport type ClientOptions = {\n  /** REST base, e.g. \"http://127.0.0.1:8787/v1\". The ws:// URL is derived from it. */\n  baseUrl: string\n  /** Extra headers for REST calls (auth). Browsers can't set WS headers — use\n   * `buildWsUrl` (ticket query param) or cookies for WS auth. */\n  headers?: Record<string, string>\n  /** Override WS URL construction (auth tickets, proxies). */\n  buildWsUrl?: (sessionId: string, afterSeq: number) => string\n  /** Override the queue WS URL (`{baseUrl}/queue/ws` by default). */\n  buildQueueWsUrl?: () => string\n  /** Injectable for non-browser environments/tests. Defaults to globalThis.WebSocket. */\n  WebSocketImpl?: typeof WebSocket\n  fetchImpl?: typeof fetch\n}\n\n/**\n * A REST call the gateway refused, carrying the status alongside the message.\n *\n * An `Error` subclass on purpose: every existing `e instanceof Error` check and\n * every `e.message` read keeps working unchanged. The status is what lets a\n * caller tell \"this server doesn't have that route\" (404 — stop asking) from\n * \"that file was too big\" (413 — tell the user), which a message string can't.\n */\nexport class WorkerDeckError extends Error {\n  readonly status: number\n  constructor(message: string, status: number) {\n    super(message)\n    this.name = 'WorkerDeckError'\n    this.status = status\n  }\n}\n\nexport type AttachOptions = {\n  /** Replay events with seq greater than this. Default 0 (full replay). */\n  afterSeq?: number\n  /** Auto-reconnect with backoff on unexpected disconnects. Default true. */\n  reconnect?: boolean\n}\n\nexport type SessionHandleEvents = {\n  /** Fired on every (re)attach with the server's session snapshot. */\n  attached: AttachedFrame\n  /** Every session event, replayed and live, in seq order. */\n  event: SessionEvent\n  protocolError: string\n  /** WS connectivity: true on open, false on close. */\n  connectionChange: boolean\n  /**\n   * A reconnect has been scheduled, carrying how many have failed in a row (1 on\n   * the first). The handle retries forever, so \"offline\" is a judgement a UI makes\n   * about how long it has been failing rather than a state reported here.\n   */\n  reconnectAttempt: number\n  /**\n   * The server is asking this client to execute a tool call in its own sandbox.\n   * Answer with {@link SessionHandle.sendToolCallResult} or\n   * {@link SessionHandle.sendToolCallError}, echoing the same `executionId`.\n   * Ignoring it is safe: the server fails the execution at `expiresAt`.\n   */\n  toolCallRequest: ToolCallRequestFrame\n  /** A bridged call no longer needs an answer (turn interrupted, timed out, or\n   * the session closed) — abandon any work in progress for this executionId. */\n  toolCallCanceled: { executionId: string; reason: string }\n}\n\ntype Listener<T> = (payload: T) => void\n\nexport class SessionHandle {\n  readonly sessionId: string\n  #client: WorkerDeckClient\n  #options: Required<Pick<AttachOptions, 'reconnect'>> & AttachOptions\n  #ws: WebSocket | undefined\n  #listeners = new Map<keyof SessionHandleEvents, Set<Listener<never>>>()\n  #lastSeq: number\n  #closed = false\n  #retries = 0\n  #outbox: string[] = []\n  #connectTimer: ReturnType<typeof setTimeout> | undefined\n\n  constructor(client: WorkerDeckClient, sessionId: string, options: AttachOptions = {}) {\n    this.#client = client\n    this.sessionId = sessionId\n    this.#options = { reconnect: true, ...options }\n    this.#lastSeq = options.afterSeq ?? 0\n    // Deferred a tick so an attach that is detached in the same tick (React\n    // StrictMode's throwaway dev mount) never opens a socket — closing a\n    // WebSocket mid-upgrade breaks proxies (vite logs EPIPE) for nothing.\n    this.#connectTimer = setTimeout(() => this.#connect(), 0)\n  }\n\n  get lastSeq(): number {\n    return this.#lastSeq\n  }\n\n  on<K extends keyof SessionHandleEvents>(\n    kind: K,\n    listener: Listener<SessionHandleEvents[K]>,\n  ): () => void {\n    let set = this.#listeners.get(kind)\n    if (!set) {\n      set = new Set()\n      this.#listeners.set(kind, set)\n    }\n    set.add(listener as Listener<never>)\n    return () => set.delete(listener as Listener<never>)\n  }\n\n  /** Send a message, optionally naming attachments uploaded ahead of it with\n   * {@link WorkerDeckClient.uploadAttachment} (ids in the order they should reach\n   * the model). An unknown id fails the whole command — the server will not send a\n   * message that quietly lost its picture. */\n  send(text: string, attachmentIds?: string[]): void {\n    this.#sendFrame({\n      type: 'user_message',\n      text,\n      attachmentIds: attachmentIds?.length ? attachmentIds : undefined,\n    })\n  }\n\n  approve(requestId: string, updatedInput?: Record<string, unknown>): void {\n    this.#sendFrame({ type: 'permission_decision', requestId, behavior: 'allow', updatedInput })\n  }\n\n  deny(requestId: string, message?: string, interrupt?: boolean): void {\n    this.#sendFrame({ type: 'permission_decision', requestId, behavior: 'deny', message, interrupt })\n  }\n\n  interrupt(): void {\n    this.#sendFrame({ type: 'interrupt' })\n  }\n\n  setPermissionMode(mode: PermissionMode): void {\n    this.#sendFrame({ type: 'set_permission_mode', mode })\n  }\n\n  /** Switch the model for subsequent responses; omit `model` for the default. */\n  setModel(model?: string): void {\n    this.#sendFrame({ type: 'set_model', model })\n  }\n\n  /** Answer a bridged tool call (see the `toolCallRequest` event). */\n  sendToolCallResult(executionId: string, output: ToolExecutionOutput, logs?: string[]): void {\n    this.#sendFrame({ type: 'tool_call_result', executionId, output, logs })\n  }\n\n  /** Report that a bridged tool call could not be executed. The failure is fed\n   * to the model as tool output, so the agent can adapt rather than stall. */\n  sendToolCallError(executionId: string, reason: string, error: string, logs?: string[]): void {\n    this.#sendFrame({ type: 'tool_call_error', executionId, reason, error, logs })\n  }\n\n  /** Ask the server to terminate the session (the handle disconnects too). */\n  closeSession(): void {\n    this.#sendFrame({ type: 'close' })\n    this.detach()\n  }\n\n  /** Skip the reconnect backoff and try again now — what a tab returning to the\n   * foreground should do, rather than sitting out the remaining delay. No-op\n   * while connected or after {@link SessionHandle.detach}. */\n  reconnectNow(): void {\n    if (this.#closed || (this.#ws && this.#ws.readyState === 1)) return\n    clearTimeout(this.#connectTimer)\n    this.#retries = 0\n    this.#connect()\n  }\n\n  /** Disconnect this handle without touching the session. */\n  detach(): void {\n    this.#closed = true\n    clearTimeout(this.#connectTimer)\n    this.#ws?.close()\n    this.#ws = undefined\n  }\n\n  #emit<K extends keyof SessionHandleEvents>(kind: K, payload: SessionHandleEvents[K]): void {\n    const set = this.#listeners.get(kind)\n    if (!set) return\n    for (const listener of set) {\n      try {\n        ;(listener as Listener<SessionHandleEvents[K]>)(payload)\n      } catch {\n        // listener errors must not break the stream\n      }\n    }\n  }\n\n  #sendFrame(frame: ClientFrame): void {\n    const payload = JSON.stringify(frame)\n    // readyState 1 === OPEN (avoid touching the WebSocket global; impl may be injected)\n    if (this.#ws && this.#ws.readyState === 1) this.#ws.send(payload)\n    else this.#outbox.push(payload)\n  }\n\n  #connect(): void {\n    if (this.#closed) return\n    const ws = this.#client.openSocket(this.sessionId, this.#lastSeq)\n    this.#ws = ws\n    ws.onopen = () => {\n      this.#retries = 0\n      this.#emit('connectionChange', true)\n      for (const payload of this.#outbox.splice(0)) ws.send(payload)\n    }\n    ws.onmessage = (msg: MessageEvent) => {\n      const frame = JSON.parse(String(msg.data)) as ServerFrame\n      if (frame.type === 'attached') {\n        this.#emit('attached', frame)\n      } else if (frame.type === 'event') {\n        if (frame.event.seq <= this.#lastSeq) return\n        this.#lastSeq = frame.event.seq\n        this.#emit('event', frame.event)\n      } else if (frame.type === 'tool_call_request') {\n        this.#emit('toolCallRequest', frame)\n      } else if (frame.type === 'tool_call_canceled') {\n        this.#emit('toolCallCanceled', { executionId: frame.executionId, reason: frame.reason })\n      } else if (frame.type === 'protocol_error') {\n        this.#emit('protocolError', frame.message)\n      }\n    }\n    ws.onclose = () => {\n      this.#emit('connectionChange', false)\n      if (this.#closed || !this.#options.reconnect) return\n      const delay = Math.min(500 * 2 ** this.#retries++, 10_000)\n      this.#emit('reconnectAttempt', this.#retries)\n      this.#connectTimer = setTimeout(() => this.#connect(), delay)\n    }\n    ws.onerror = () => {\n      // onclose follows; reconnect handled there\n    }\n  }\n}\n\nexport type QueueHandleEvents = {\n  /** Fired on every (re)attach with the server's current stats. */\n  attached: QueueStats\n  /** Every job lifecycle/progress event, live. */\n  event: JobEvent\n  /** Refreshed stats pushed after job lifecycle changes. */\n  stats: QueueStats\n  /** WS connectivity: true on open, false on close. */\n  connectionChange: boolean\n}\n\n/**\n * Live view of the server's job queue over `{basePath}/queue/ws`. The stream is\n * read-only — submit/cancel stay on the REST methods. There is no replay: on\n * (re)connect, re-list jobs and treat the stream as updates from there.\n */\nexport class QueueHandle {\n  #client: WorkerDeckClient\n  #reconnect: boolean\n  #ws: WebSocket | undefined\n  #listeners = new Map<keyof QueueHandleEvents, Set<Listener<never>>>()\n  #closed = false\n  #retries = 0\n  #connectTimer: ReturnType<typeof setTimeout> | undefined\n\n  constructor(client: WorkerDeckClient, options: { reconnect?: boolean } = {}) {\n    this.#client = client\n    this.#reconnect = options.reconnect ?? true\n    // Deferred a tick for the same StrictMode reason as SessionHandle.\n    this.#connectTimer = setTimeout(() => this.#connect(), 0)\n  }\n\n  on<K extends keyof QueueHandleEvents>(\n    kind: K,\n    listener: Listener<QueueHandleEvents[K]>,\n  ): () => void {\n    let set = this.#listeners.get(kind)\n    if (!set) {\n      set = new Set()\n      this.#listeners.set(kind, set)\n    }\n    set.add(listener as Listener<never>)\n    return () => set.delete(listener as Listener<never>)\n  }\n\n  detach(): void {\n    this.#closed = true\n    clearTimeout(this.#connectTimer)\n    this.#ws?.close()\n    this.#ws = undefined\n  }\n\n  #emit<K extends keyof QueueHandleEvents>(kind: K, payload: QueueHandleEvents[K]): void {\n    const set = this.#listeners.get(kind)\n    if (!set) return\n    for (const listener of set) {\n      try {\n        ;(listener as Listener<QueueHandleEvents[K]>)(payload)\n      } catch {\n        // listener errors must not break the stream\n      }\n    }\n  }\n\n  #connect(): void {\n    if (this.#closed) return\n    const ws = this.#client.openQueueSocket()\n    this.#ws = ws\n    ws.onopen = () => {\n      this.#retries = 0\n      this.#emit('connectionChange', true)\n    }\n    ws.onmessage = (msg: MessageEvent) => {\n      const frame = JSON.parse(String(msg.data)) as QueueServerFrame\n      if (frame.type === 'queue_attached') {\n        this.#emit('attached', frame.stats)\n        this.#emit('stats', frame.stats)\n      } else if (frame.type === 'job_event') {\n        this.#emit('event', frame.event)\n      } else if (frame.type === 'queue_stats') {\n        this.#emit('stats', frame.stats)\n      }\n    }\n    ws.onclose = () => {\n      this.#emit('connectionChange', false)\n      if (this.#closed || !this.#reconnect) return\n      const delay = Math.min(500 * 2 ** this.#retries++, 10_000)\n      this.#connectTimer = setTimeout(() => this.#connect(), delay)\n    }\n    ws.onerror = () => {\n      // onclose follows; reconnect handled there\n    }\n  }\n}\n\nexport class WorkerDeckClient {\n  #options: ClientOptions\n  #fetch: typeof fetch\n  #WebSocketImpl: typeof WebSocket\n\n  constructor(options: ClientOptions) {\n    this.#options = options\n    this.#fetch = options.fetchImpl ?? fetch.bind(globalThis)\n    this.#WebSocketImpl = options.WebSocketImpl ?? WebSocket\n  }\n\n  async createSession(request: CreateSessionRequest): Promise<SessionInfo> {\n    const body = await this.#call('POST', '/sessions', request)\n    return (body as { session: SessionInfo }).session\n  }\n\n  async listSessions(): Promise<SessionInfo[]> {\n    const body = await this.#call('GET', '/sessions')\n    return (body as { sessions: SessionInfo[] }).sessions\n  }\n\n  async getSession(id: string): Promise<SessionInfo> {\n    const body = await this.#call('GET', `/sessions/${encodeURIComponent(id)}`)\n    return (body as { session: SessionInfo }).session\n  }\n\n  /** Rename a session (or clear the name with `null`, restoring the derived\n   * title). 409 when the session is parked. */\n  async updateSession(id: string, patch: UpdateSessionRequest): Promise<SessionInfo> {\n    const body = await this.#call('PATCH', `/sessions/${encodeURIComponent(id)}`, patch)\n    return (body as { session: SessionInfo }).session\n  }\n\n  async deleteSession(id: string): Promise<SessionInfo> {\n    const body = await this.#call('DELETE', `/sessions/${encodeURIComponent(id)}`)\n    return (body as { session: SessionInfo }).session\n  }\n\n  /** List the files currently in a session's scratch filesystem (deliverables the\n   * agent wrote; see the `file_delivered` event). 404s when the session's engine\n   * has no file store (Claude-engine sessions). */\n  async listSessionFiles(sessionId: string): Promise<SessionFileInfo[]> {\n    const body = await this.#call('GET', `/sessions/${encodeURIComponent(sessionId)}/files`)\n    return (body as ListSessionFilesResponse).files\n  }\n\n  /** Download one session file as text. */\n  async fetchSessionFile(sessionId: string, path: string): Promise<string> {\n    const res = await this.#fetch(this.sessionFileUrl(sessionId, path), {\n      headers: this.#options.headers,\n    })\n    if (!res.ok) {\n      const payload = (await res.json().catch(() => ({}))) as { error?: string }\n      throw new WorkerDeckError(payload.error ?? `GET file failed with ${res.status}`, res.status)\n    }\n    return await res.text()\n  }\n\n  /**\n   * Upload one file for the session, ahead of the message that will carry it.\n   * The returned `id` goes to {@link SessionHandle.send}.\n   *\n   * The body is the raw bytes — no multipart — so anything `fetch` accepts as a\n   * body works: a `File`/`Blob` from a picker, a `Uint8Array`, a string.\n   */\n  async uploadAttachment(\n    sessionId: string,\n    file: { name: string; mediaType: string; data: FetchBody },\n  ): Promise<MessageAttachment> {\n    const url = `${this.#options.baseUrl}/sessions/${encodeURIComponent(sessionId)}/attachments?name=${encodeURIComponent(file.name)}`\n    const res = await this.#fetch(url, {\n      method: 'POST',\n      headers: { ...this.#options.headers, 'content-type': file.mediaType },\n      body: file.data,\n    })\n    if (!res.ok) {\n      const payload = (await res.json().catch(() => ({}))) as { error?: string }\n      throw new WorkerDeckError(payload.error ?? `upload failed with ${res.status}`, res.status)\n    }\n    return ((await res.json()) as UploadAttachmentResponse).attachment\n  }\n\n  /** Direct URL for an uploaded attachment — an `<img src>` on a cookie-authenticated\n   * same-origin server. Header-authenticated clients must fetch it themselves. */\n  attachmentUrl(sessionId: string, attachmentId: string): string {\n    return `${this.#options.baseUrl}/sessions/${encodeURIComponent(sessionId)}/attachments/${encodeURIComponent(attachmentId)}`\n  }\n\n  /**\n   * Direct URL for a file the session's ENGINE produced on the host — the\n   * `fileId` of a `file_produced` event. Same caveat as `attachmentUrl`: usable\n   * as an `<img src>` only where the credential is a same-origin cookie; a\n   * header-authenticated client (the phone) fetches it and makes its own blob.\n   *\n   * Unlike `/fs/read`, this needs no host-file roots and no raised byte cap —\n   * see the `file_produced` note in the protocol for why that is sound.\n   */\n  producedFileUrl(sessionId: string, fileId: string): string {\n    return `${this.#options.baseUrl}/sessions/${encodeURIComponent(sessionId)}/produced/${encodeURIComponent(fileId)}`\n  }\n\n  /** Fetch a produced file's bytes. For clients that cannot put a credential on\n   * an `<img src>`. Throws {@link WorkerDeckError} with the response status —\n   * a 404 means the file is gone from disk, not that the route is missing. */\n  async readProducedFile(sessionId: string, fileId: string): Promise<Blob> {\n    const res = await this.#fetch(this.producedFileUrl(sessionId, fileId), {\n      headers: { ...this.#options.headers },\n    })\n    if (!res.ok) {\n      const payload = (await res.json().catch(() => ({}))) as { error?: string }\n      throw new WorkerDeckError(\n        payload.error ?? `produced file request failed with ${res.status}`,\n        res.status,\n      )\n    }\n    return await res.blob()\n  }\n\n  /** The session's MCP servers and their tools, live from the engine. 501 when the\n   * session's engine has no MCP surface; 409 while the session is parked. */\n  async listMcpServers(sessionId: string): Promise<McpServerStatusInfo[]> {\n    const body = await this.#call('GET', `/sessions/${encodeURIComponent(sessionId)}/mcp`)\n    return (body as McpServersResponse).servers\n  }\n\n  /** Reconnect, enable or disable one MCP server; answers with the refreshed list. */\n  async mcpServerAction(\n    sessionId: string,\n    serverName: string,\n    action: McpServerActionRequest['action'],\n  ): Promise<McpServerStatusInfo[]> {\n    const body = await this.#call(\n      'POST',\n      `/sessions/${encodeURIComponent(sessionId)}/mcp/${encodeURIComponent(serverName)}`,\n      { action },\n    )\n    return (body as McpServersResponse).servers\n  }\n\n  /** Direct download URL for a session file (e.g. an <a download> href). Carries\n   * no headers — on authenticated servers, use fetchSessionFile instead. */\n  sessionFileUrl(sessionId: string, path: string): string {\n    const encoded = path\n      .split('/')\n      .filter(Boolean)\n      .map(encodeURIComponent)\n      .join('/')\n    return `${this.#options.baseUrl}/sessions/${encodeURIComponent(sessionId)}/files/${encoded}`\n  }\n\n  /** Resolve a pending permission over REST — the remote-controller counterpart of the\n   * WS `permission_decision` command (e.g. answering a job's AskUserQuestion from a\n   * webhook consumer; the request rides on job_progress deliveries). Throws if the\n   * request is unknown, already resolved, or expired. */\n  async resolvePermission(\n    sessionId: string,\n    requestId: string,\n    decision: ResolvePermissionRequest,\n  ): Promise<void> {\n    await this.#call(\n      'POST',\n      `/sessions/${encodeURIComponent(sessionId)}/permissions/${encodeURIComponent(requestId)}`,\n      decision,\n    )\n  }\n\n  /**\n   * Deliver the result of a deferred tool execution — the callback a remote\n   * worker (or a human) makes when the work a session parked on is done. The\n   * session is rehydrated if its runner was torn down, and the agent loop\n   * continues with this as the tool's output.\n   *\n   * Applied idempotently by `executionId`: a duplicate, or one racing the\n   * execution watchdog, resolves with `applied: false` instead of applying twice.\n   * Throws (404) when no session is waiting on that id.\n   */\n  async submitExecutionResult(\n    executionId: string,\n    result: SubmitExecutionResultRequest,\n  ): Promise<SubmitExecutionResultResponse> {\n    return (await this.#call(\n      'POST',\n      `/executions/${encodeURIComponent(executionId)}/result`,\n      result,\n    )) as SubmitExecutionResultResponse\n  }\n\n  /** List the profiles (named Claude Code config dirs) this server declares, filtered\n   * to what the caller may use. Feed a result's `name` to createSession({ profile }).\n   * Servers predating profiles 404 here — catch and treat as none declared. */\n  /** The profiles this caller may use, plus whether it may create new ones.\n   * Each profile carries `managed: true` when it is store-backed and therefore\n   * editable; profiles declared in server options are not. */\n  async listProfiles(): Promise<ListProfilesResponse> {\n    return (await this.#call('GET', '/profiles')) as ListProfilesResponse\n  }\n\n  /** One profile plus a fresh, view-only snapshot of its config directory (settings,\n   * skills, agents, commands — env var names only, never values). */\n  async getProfile(name: string): Promise<GetProfileResponse> {\n    return (await this.#call('GET', `/profiles/${encodeURIComponent(name)}`)) as GetProfileResponse\n  }\n\n  /**\n   * Create a managed profile. Requires a server with a profile store and a\n   * principal allowed to manage profiles; 409 if the name is already taken by a\n   * managed or a startup-declared profile.\n   */\n  async createProfile(profile: CreateProfileRequest): Promise<ProfileInfo> {\n    const body = await this.#call('POST', '/profiles', profile)\n    return (body as SaveProfileResponse).profile\n  }\n\n  /** Merge into a managed profile. The name is the route: profiles cannot be\n   * renamed, since sessions and jobs are already pinned to the old one. */\n  async updateProfile(name: string, patch: UpdateProfileRequest): Promise<ProfileInfo> {\n    const body = await this.#call('PATCH', `/profiles/${encodeURIComponent(name)}`, patch)\n    return (body as SaveProfileResponse).profile\n  }\n\n  /** Delete a managed profile. Startup-declared profiles are refused (403) —\n   * they live in the server's options. */\n  async deleteProfile(name: string): Promise<void> {\n    await this.#call('DELETE', `/profiles/${encodeURIComponent(name)}`)\n  }\n\n  /** List an engine's on-disk sessions (for resume across server restarts).\n   * Feed a result's `sessionId` to createSession({ resume }) — under a profile\n   * of the same engine. `profile` names whose store to list (claude profiles →\n   * the Agent SDK store, codex profiles → CODEX_HOME threads); absent, the\n   * server resolves it implicitly when it declares exactly one profile, else\n   * lists the Claude engine's store. */\n  async listSdkSessions(params?: {\n    dir?: string\n    limit?: number\n    offset?: number\n    profile?: string\n  }): Promise<SdkSessionSummary[]> {\n    const search = new URLSearchParams()\n    if (params?.dir) search.set('dir', params.dir)\n    if (params?.limit !== undefined) search.set('limit', String(params.limit))\n    if (params?.offset !== undefined) search.set('offset', String(params.offset))\n    if (params?.profile) search.set('profile', params.profile)\n    const qs = search.size > 0 ? `?${search.toString()}` : ''\n    const body = await this.#call('GET', `/sdk-sessions${qs}`)\n    return (body as { sdkSessions: SdkSessionSummary[] }).sdkSessions\n  }\n\n  // -- Host filesystem (requires the server to be configured with `hostFiles`) -\n\n  /**\n   * The host directories this server will let a client browse, and whether it\n   * accepts writes. Servers without host-file access configured 404 here — catch\n   * and treat as \"no file browser\", the same way `listProfiles` handles an older\n   * server.\n   *\n   * These are operator-privileged routes: the auth key is the whole authorization\n   * story, and they bypass the agent permission flow entirely. See the protocol\n   * package's `HostFileRoot` for why that framing is deliberate.\n   */\n  async listHostRoots(): Promise<ListHostRootsResponse> {\n    return (await this.#call('GET', '/fs/roots')) as ListHostRootsResponse\n  }\n\n  /** One host directory, not recursive. Symlinks are reported as symlinks, never\n   * followed here — read one to find out whether it resolves somewhere allowed. */\n  async listHostDir(path: string): Promise<ListHostDirResponse> {\n    const qs = `?path=${encodeURIComponent(path)}`\n    return (await this.#call('GET', `/fs/list${qs}`)) as ListHostDirResponse\n  }\n\n  /** Recursive fuzzy file search under one host directory — the `@file` picker's\n   * query. Cheap enough to call per keystroke: build directories are skipped and\n   * the walk is bounded, truncating rather than erroring. */\n  async findHostFiles(path: string, query = '', limit?: number): Promise<FindHostFilesResponse> {\n    const search = new URLSearchParams({ path, q: query })\n    if (limit !== undefined) search.set('limit', String(limit))\n    return (await this.#call('GET', `/fs/find?${search.toString()}`)) as FindHostFilesResponse\n  }\n\n  /** Read one host file. Binary content comes back base64-encoded; the returned\n   * `hash` is what a later `writeHostFile` needs as its `expectedHash`. */\n  async readHostFile(path: string): Promise<ReadHostFileResponse> {\n    const qs = `?path=${encodeURIComponent(path)}`\n    return (await this.#call('GET', `/fs/read${qs}`)) as ReadHostFileResponse\n  }\n\n  /**\n   * Write one host file, conditionally — always. Pass the `hash` from the read this\n   * edit is based on; a 409 means the agent (or anything else) changed the file\n   * underneath you, and the edit must be rebased rather than forced. Omit\n   * `expectedHash` only to create a file that does not exist yet.\n   */\n  async writeHostFile(request: WriteHostFileRequest): Promise<WriteHostFileResponse> {\n    return (await this.#call('PUT', '/fs/write', request)) as WriteHostFileResponse\n  }\n\n  // -- Job queue (requires the server to be configured with `queue`) ----------\n\n  /** Schedule a one-shot run. The returned job's `sessionId` (once running) can be\n   * fed to `attach()` to watch the run live. */\n  async createJob(request: CreateJobRequest): Promise<JobInfo> {\n    const body = await this.#call('POST', '/jobs', request)\n    return (body as { job: JobInfo }).job\n  }\n\n  async listJobs(): Promise<JobInfo[]> {\n    const body = await this.#call('GET', '/jobs')\n    return (body as { jobs: JobInfo[] }).jobs\n  }\n\n  async getJob(id: string): Promise<JobInfo> {\n    const body = await this.#call('GET', `/jobs/${encodeURIComponent(id)}`)\n    return (body as { job: JobInfo }).job\n  }\n\n  /** Cancel a queued or running job. */\n  async cancelJob(id: string): Promise<JobInfo> {\n    const body = await this.#call('DELETE', `/jobs/${encodeURIComponent(id)}`)\n    return (body as { job: JobInfo }).job\n  }\n\n  async queueStats(): Promise<QueueStats> {\n    const body = await this.#call('GET', '/queue')\n    return (body as { stats: QueueStats }).stats\n  }\n\n  attach(sessionId: string, options?: AttachOptions): SessionHandle {\n    return new SessionHandle(this, sessionId, options)\n  }\n\n  /** Stream the job queue live (requires the server to be configured with `queue`).\n   * Servers without a queue refuse the socket — check REST first or expect retries. */\n  attachQueue(options?: { reconnect?: boolean }): QueueHandle {\n    return new QueueHandle(this, options)\n  }\n\n  /** @internal used by SessionHandle */\n  openSocket(sessionId: string, afterSeq: number): WebSocket {\n    const url =\n      this.#options.buildWsUrl?.(sessionId, afterSeq) ??\n      `${this.#options.baseUrl.replace(/^http/, 'ws')}/sessions/${encodeURIComponent(sessionId)}/ws?afterSeq=${afterSeq}`\n    return new this.#WebSocketImpl(url)\n  }\n\n  /** @internal used by QueueHandle */\n  openQueueSocket(): WebSocket {\n    const url =\n      this.#options.buildQueueWsUrl?.() ??\n      `${this.#options.baseUrl.replace(/^http/, 'ws')}/queue/ws`\n    return new this.#WebSocketImpl(url)\n  }\n\n  async #call(method: string, path: string, body?: unknown): Promise<unknown> {\n    const res = await this.#fetch(`${this.#options.baseUrl}${path}`, {\n      method,\n      headers: {\n        ...(body !== undefined ? { 'content-type': 'application/json' } : {}),\n        ...this.#options.headers,\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n    })\n    const payload = (await res.json().catch(() => ({}))) as { error?: string }\n    if (!res.ok) {\n      throw new WorkerDeckError(payload.error ?? `${method} ${path} failed with ${res.status}`, res.status)\n    }\n    return payload\n  }\n}\n"],"mappings":";;;;;;;;;AAqEA,IAAa,kBAAb,cAAqC,MAAM;CACzC;CACA,YAAY,SAAiB,QAAgB;AAC3C,QAAM,QAAQ;AACd,OAAK,OAAO;AACZ,OAAK,SAAS;;;AAuClB,IAAa,gBAAb,MAA2B;CACzB;CACA;CACA;CACA;CACA,6BAAa,IAAI,KAAsD;CACvE;CACA,UAAU;CACV,WAAW;CACX,UAAoB,EAAE;CACtB;CAEA,YAAY,QAA0B,WAAmB,UAAyB,EAAE,EAAE;AACpF,QAAA,SAAe;AACf,OAAK,YAAY;AACjB,QAAA,UAAgB;GAAE,WAAW;GAAM,GAAG;GAAS;AAC/C,QAAA,UAAgB,QAAQ,YAAY;AAIpC,QAAA,eAAqB,iBAAiB,MAAA,SAAe,EAAE,EAAE;;CAG3D,IAAI,UAAkB;AACpB,SAAO,MAAA;;CAGT,GACE,MACA,UACY;EACZ,IAAI,MAAM,MAAA,UAAgB,IAAI,KAAK;AACnC,MAAI,CAAC,KAAK;AACR,yBAAM,IAAI,KAAK;AACf,SAAA,UAAgB,IAAI,MAAM,IAAI;;AAEhC,MAAI,IAAI,SAA4B;AACpC,eAAa,IAAI,OAAO,SAA4B;;;;;;CAOtD,KAAK,MAAc,eAAgC;AACjD,QAAA,UAAgB;GACd,MAAM;GACN;GACA,eAAe,eAAe,SAAS,gBAAgB,KAAA;GACxD,CAAC;;CAGJ,QAAQ,WAAmB,cAA8C;AACvE,QAAA,UAAgB;GAAE,MAAM;GAAuB;GAAW,UAAU;GAAS;GAAc,CAAC;;CAG9F,KAAK,WAAmB,SAAkB,WAA2B;AACnE,QAAA,UAAgB;GAAE,MAAM;GAAuB;GAAW,UAAU;GAAQ;GAAS;GAAW,CAAC;;CAGnG,YAAkB;AAChB,QAAA,UAAgB,EAAE,MAAM,aAAa,CAAC;;CAGxC,kBAAkB,MAA4B;AAC5C,QAAA,UAAgB;GAAE,MAAM;GAAuB;GAAM,CAAC;;;CAIxD,SAAS,OAAsB;AAC7B,QAAA,UAAgB;GAAE,MAAM;GAAa;GAAO,CAAC;;;CAI/C,mBAAmB,aAAqB,QAA6B,MAAuB;AAC1F,QAAA,UAAgB;GAAE,MAAM;GAAoB;GAAa;GAAQ;GAAM,CAAC;;;;CAK1E,kBAAkB,aAAqB,QAAgB,OAAe,MAAuB;AAC3F,QAAA,UAAgB;GAAE,MAAM;GAAmB;GAAa;GAAQ;GAAO;GAAM,CAAC;;;CAIhF,eAAqB;AACnB,QAAA,UAAgB,EAAE,MAAM,SAAS,CAAC;AAClC,OAAK,QAAQ;;;;;CAMf,eAAqB;AACnB,MAAI,MAAA,UAAiB,MAAA,MAAY,MAAA,GAAS,eAAe,EAAI;AAC7D,eAAa,MAAA,aAAmB;AAChC,QAAA,UAAgB;AAChB,QAAA,SAAe;;;CAIjB,SAAe;AACb,QAAA,SAAe;AACf,eAAa,MAAA,aAAmB;AAChC,QAAA,IAAU,OAAO;AACjB,QAAA,KAAW,KAAA;;CAGb,MAA2C,MAAS,SAAuC;EACzF,MAAM,MAAM,MAAA,UAAgB,IAAI,KAAK;AACrC,MAAI,CAAC,IAAK;AACV,OAAK,MAAM,YAAY,IACrB,KAAI;AACA,YAA8C,QAAQ;UAClD;;CAMZ,WAAW,OAA0B;EACnC,MAAM,UAAU,KAAK,UAAU,MAAM;AAErC,MAAI,MAAA,MAAY,MAAA,GAAS,eAAe,EAAG,OAAA,GAAS,KAAK,QAAQ;MAC5D,OAAA,OAAa,KAAK,QAAQ;;CAGjC,WAAiB;AACf,MAAI,MAAA,OAAc;EAClB,MAAM,KAAK,MAAA,OAAa,WAAW,KAAK,WAAW,MAAA,QAAc;AACjE,QAAA,KAAW;AACX,KAAG,eAAe;AAChB,SAAA,UAAgB;AAChB,SAAA,KAAW,oBAAoB,KAAK;AACpC,QAAK,MAAM,WAAW,MAAA,OAAa,OAAO,EAAE,CAAE,IAAG,KAAK,QAAQ;;AAEhE,KAAG,aAAa,QAAsB;GACpC,MAAM,QAAQ,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC;AAC1C,OAAI,MAAM,SAAS,WACjB,OAAA,KAAW,YAAY,MAAM;YACpB,MAAM,SAAS,SAAS;AACjC,QAAI,MAAM,MAAM,OAAO,MAAA,QAAe;AACtC,UAAA,UAAgB,MAAM,MAAM;AAC5B,UAAA,KAAW,SAAS,MAAM,MAAM;cACvB,MAAM,SAAS,oBACxB,OAAA,KAAW,mBAAmB,MAAM;YAC3B,MAAM,SAAS,qBACxB,OAAA,KAAW,oBAAoB;IAAE,aAAa,MAAM;IAAa,QAAQ,MAAM;IAAQ,CAAC;YAC/E,MAAM,SAAS,iBACxB,OAAA,KAAW,iBAAiB,MAAM,QAAQ;;AAG9C,KAAG,gBAAgB;AACjB,SAAA,KAAW,oBAAoB,MAAM;AACrC,OAAI,MAAA,UAAgB,CAAC,MAAA,QAAc,UAAW;GAC9C,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,MAAA,WAAiB,IAAO;AAC1D,SAAA,KAAW,oBAAoB,MAAA,QAAc;AAC7C,SAAA,eAAqB,iBAAiB,MAAA,SAAe,EAAE,MAAM;;AAE/D,KAAG,gBAAgB;;;;;;;;AAsBvB,IAAa,cAAb,MAAyB;CACvB;CACA;CACA;CACA,6BAAa,IAAI,KAAoD;CACrE,UAAU;CACV,WAAW;CACX;CAEA,YAAY,QAA0B,UAAmC,EAAE,EAAE;AAC3E,QAAA,SAAe;AACf,QAAA,YAAkB,QAAQ,aAAa;AAEvC,QAAA,eAAqB,iBAAiB,MAAA,SAAe,EAAE,EAAE;;CAG3D,GACE,MACA,UACY;EACZ,IAAI,MAAM,MAAA,UAAgB,IAAI,KAAK;AACnC,MAAI,CAAC,KAAK;AACR,yBAAM,IAAI,KAAK;AACf,SAAA,UAAgB,IAAI,MAAM,IAAI;;AAEhC,MAAI,IAAI,SAA4B;AACpC,eAAa,IAAI,OAAO,SAA4B;;CAGtD,SAAe;AACb,QAAA,SAAe;AACf,eAAa,MAAA,aAAmB;AAChC,QAAA,IAAU,OAAO;AACjB,QAAA,KAAW,KAAA;;CAGb,MAAyC,MAAS,SAAqC;EACrF,MAAM,MAAM,MAAA,UAAgB,IAAI,KAAK;AACrC,MAAI,CAAC,IAAK;AACV,OAAK,MAAM,YAAY,IACrB,KAAI;AACA,YAA4C,QAAQ;UAChD;;CAMZ,WAAiB;AACf,MAAI,MAAA,OAAc;EAClB,MAAM,KAAK,MAAA,OAAa,iBAAiB;AACzC,QAAA,KAAW;AACX,KAAG,eAAe;AAChB,SAAA,UAAgB;AAChB,SAAA,KAAW,oBAAoB,KAAK;;AAEtC,KAAG,aAAa,QAAsB;GACpC,MAAM,QAAQ,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC;AAC1C,OAAI,MAAM,SAAS,kBAAkB;AACnC,UAAA,KAAW,YAAY,MAAM,MAAM;AACnC,UAAA,KAAW,SAAS,MAAM,MAAM;cACvB,MAAM,SAAS,YACxB,OAAA,KAAW,SAAS,MAAM,MAAM;YACvB,MAAM,SAAS,cACxB,OAAA,KAAW,SAAS,MAAM,MAAM;;AAGpC,KAAG,gBAAgB;AACjB,SAAA,KAAW,oBAAoB,MAAM;AACrC,OAAI,MAAA,UAAgB,CAAC,MAAA,UAAiB;GACtC,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,MAAA,WAAiB,IAAO;AAC1D,SAAA,eAAqB,iBAAiB,MAAA,SAAe,EAAE,MAAM;;AAE/D,KAAG,gBAAgB;;;AAMvB,IAAa,mBAAb,MAA8B;CAC5B;CACA;CACA;CAEA,YAAY,SAAwB;AAClC,QAAA,UAAgB;AAChB,QAAA,QAAc,QAAQ,aAAa,MAAM,KAAK,WAAW;AACzD,QAAA,gBAAsB,QAAQ,iBAAiB;;CAGjD,MAAM,cAAc,SAAqD;AAEvE,UAAQ,MADW,MAAA,KAAW,QAAQ,aAAa,QAAQ,EACjB;;CAG5C,MAAM,eAAuC;AAE3C,UAAQ,MADW,MAAA,KAAW,OAAO,YAAY,EACJ;;CAG/C,MAAM,WAAW,IAAkC;AAEjD,UAAQ,MADW,MAAA,KAAW,OAAO,aAAa,mBAAmB,GAAG,GAAG,EACjC;;;;CAK5C,MAAM,cAAc,IAAY,OAAmD;AAEjF,UAAQ,MADW,MAAA,KAAW,SAAS,aAAa,mBAAmB,GAAG,IAAI,MAAM,EAC1C;;CAG5C,MAAM,cAAc,IAAkC;AAEpD,UAAQ,MADW,MAAA,KAAW,UAAU,aAAa,mBAAmB,GAAG,GAAG,EACpC;;;;;CAM5C,MAAM,iBAAiB,WAA+C;AAEpE,UAAQ,MADW,MAAA,KAAW,OAAO,aAAa,mBAAmB,UAAU,CAAC,QAAQ,EAC9C;;;CAI5C,MAAM,iBAAiB,WAAmB,MAA+B;EACvE,MAAM,MAAM,MAAM,MAAA,MAAY,KAAK,eAAe,WAAW,KAAK,EAAE,EAClE,SAAS,MAAA,QAAc,SACxB,CAAC;AACF,MAAI,CAAC,IAAI,GAEP,OAAM,IAAI,iBAAgB,MADH,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EACjB,SAAS,wBAAwB,IAAI,UAAU,IAAI,OAAO;AAE9F,SAAO,MAAM,IAAI,MAAM;;;;;;;;;CAUzB,MAAM,iBACJ,WACA,MAC4B;EAC5B,MAAM,MAAM,GAAG,MAAA,QAAc,QAAQ,YAAY,mBAAmB,UAAU,CAAC,oBAAoB,mBAAmB,KAAK,KAAK;EAChI,MAAM,MAAM,MAAM,MAAA,MAAY,KAAK;GACjC,QAAQ;GACR,SAAS;IAAE,GAAG,MAAA,QAAc;IAAS,gBAAgB,KAAK;IAAW;GACrE,MAAM,KAAK;GACZ,CAAC;AACF,MAAI,CAAC,IAAI,GAEP,OAAM,IAAI,iBAAgB,MADH,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EACjB,SAAS,sBAAsB,IAAI,UAAU,IAAI,OAAO;AAE5F,UAAS,MAAM,IAAI,MAAM,EAA+B;;;;CAK1D,cAAc,WAAmB,cAA8B;AAC7D,SAAO,GAAG,MAAA,QAAc,QAAQ,YAAY,mBAAmB,UAAU,CAAC,eAAe,mBAAmB,aAAa;;;;;;;;;;;CAY3H,gBAAgB,WAAmB,QAAwB;AACzD,SAAO,GAAG,MAAA,QAAc,QAAQ,YAAY,mBAAmB,UAAU,CAAC,YAAY,mBAAmB,OAAO;;;;;CAMlH,MAAM,iBAAiB,WAAmB,QAA+B;EACvE,MAAM,MAAM,MAAM,MAAA,MAAY,KAAK,gBAAgB,WAAW,OAAO,EAAE,EACrE,SAAS,EAAE,GAAG,MAAA,QAAc,SAAS,EACtC,CAAC;AACF,MAAI,CAAC,IAAI,GAEP,OAAM,IAAI,iBACR,MAFqB,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EAEzC,SAAS,qCAAqC,IAAI,UAC1D,IAAI,OACL;AAEH,SAAO,MAAM,IAAI,MAAM;;;;CAKzB,MAAM,eAAe,WAAmD;AAEtE,UAAQ,MADW,MAAA,KAAW,OAAO,aAAa,mBAAmB,UAAU,CAAC,MAAM,EAClD;;;CAItC,MAAM,gBACJ,WACA,YACA,QACgC;AAMhC,UAAQ,MALW,MAAA,KACjB,QACA,aAAa,mBAAmB,UAAU,CAAC,OAAO,mBAAmB,WAAW,IAChF,EAAE,QAAQ,CACX,EACmC;;;;CAKtC,eAAe,WAAmB,MAAsB;EACtD,MAAM,UAAU,KACb,MAAM,IAAI,CACV,OAAO,QAAQ,CACf,IAAI,mBAAmB,CACvB,KAAK,IAAI;AACZ,SAAO,GAAG,MAAA,QAAc,QAAQ,YAAY,mBAAmB,UAAU,CAAC,SAAS;;;;;;CAOrF,MAAM,kBACJ,WACA,WACA,UACe;AACf,QAAM,MAAA,KACJ,QACA,aAAa,mBAAmB,UAAU,CAAC,eAAe,mBAAmB,UAAU,IACvF,SACD;;;;;;;;;;;;CAaH,MAAM,sBACJ,aACA,QACwC;AACxC,SAAQ,MAAM,MAAA,KACZ,QACA,eAAe,mBAAmB,YAAY,CAAC,UAC/C,OACD;;;;;;;;CASH,MAAM,eAA8C;AAClD,SAAQ,MAAM,MAAA,KAAW,OAAO,YAAY;;;;CAK9C,MAAM,WAAW,MAA2C;AAC1D,SAAQ,MAAM,MAAA,KAAW,OAAO,aAAa,mBAAmB,KAAK,GAAG;;;;;;;CAQ1E,MAAM,cAAc,SAAqD;AAEvE,UAAQ,MADW,MAAA,KAAW,QAAQ,aAAa,QAAQ,EACtB;;;;CAKvC,MAAM,cAAc,MAAc,OAAmD;AAEnF,UAAQ,MADW,MAAA,KAAW,SAAS,aAAa,mBAAmB,KAAK,IAAI,MAAM,EACjD;;;;CAKvC,MAAM,cAAc,MAA6B;AAC/C,QAAM,MAAA,KAAW,UAAU,aAAa,mBAAmB,KAAK,GAAG;;;;;;;;CASrE,MAAM,gBAAgB,QAKW;EAC/B,MAAM,SAAS,IAAI,iBAAiB;AACpC,MAAI,QAAQ,IAAK,QAAO,IAAI,OAAO,OAAO,IAAI;AAC9C,MAAI,QAAQ,UAAU,KAAA,EAAW,QAAO,IAAI,SAAS,OAAO,OAAO,MAAM,CAAC;AAC1E,MAAI,QAAQ,WAAW,KAAA,EAAW,QAAO,IAAI,UAAU,OAAO,OAAO,OAAO,CAAC;AAC7E,MAAI,QAAQ,QAAS,QAAO,IAAI,WAAW,OAAO,QAAQ;EAC1D,MAAM,KAAK,OAAO,OAAO,IAAI,IAAI,OAAO,UAAU,KAAK;AAEvD,UAAQ,MADW,MAAA,KAAW,OAAO,gBAAgB,KAAK,EACJ;;;;;;;;;;;;CAexD,MAAM,gBAAgD;AACpD,SAAQ,MAAM,MAAA,KAAW,OAAO,YAAY;;;;CAK9C,MAAM,YAAY,MAA4C;EAC5D,MAAM,KAAK,SAAS,mBAAmB,KAAK;AAC5C,SAAQ,MAAM,MAAA,KAAW,OAAO,WAAW,KAAK;;;;;CAMlD,MAAM,cAAc,MAAc,QAAQ,IAAI,OAAgD;EAC5F,MAAM,SAAS,IAAI,gBAAgB;GAAE;GAAM,GAAG;GAAO,CAAC;AACtD,MAAI,UAAU,KAAA,EAAW,QAAO,IAAI,SAAS,OAAO,MAAM,CAAC;AAC3D,SAAQ,MAAM,MAAA,KAAW,OAAO,YAAY,OAAO,UAAU,GAAG;;;;CAKlE,MAAM,aAAa,MAA6C;EAC9D,MAAM,KAAK,SAAS,mBAAmB,KAAK;AAC5C,SAAQ,MAAM,MAAA,KAAW,OAAO,WAAW,KAAK;;;;;;;;CASlD,MAAM,cAAc,SAA+D;AACjF,SAAQ,MAAM,MAAA,KAAW,OAAO,aAAa,QAAQ;;;;CAOvD,MAAM,UAAU,SAA6C;AAE3D,UAAQ,MADW,MAAA,KAAW,QAAQ,SAAS,QAAQ,EACrB;;CAGpC,MAAM,WAA+B;AAEnC,UAAQ,MADW,MAAA,KAAW,OAAO,QAAQ,EACR;;CAGvC,MAAM,OAAO,IAA8B;AAEzC,UAAQ,MADW,MAAA,KAAW,OAAO,SAAS,mBAAmB,GAAG,GAAG,EACrC;;;CAIpC,MAAM,UAAU,IAA8B;AAE5C,UAAQ,MADW,MAAA,KAAW,UAAU,SAAS,mBAAmB,GAAG,GAAG,EACxC;;CAGpC,MAAM,aAAkC;AAEtC,UAAQ,MADW,MAAA,KAAW,OAAO,SAAS,EACP;;CAGzC,OAAO,WAAmB,SAAwC;AAChE,SAAO,IAAI,cAAc,MAAM,WAAW,QAAQ;;;;CAKpD,YAAY,SAAgD;AAC1D,SAAO,IAAI,YAAY,MAAM,QAAQ;;;CAIvC,WAAW,WAAmB,UAA6B;EACzD,MAAM,MACJ,MAAA,QAAc,aAAa,WAAW,SAAS,IAC/C,GAAG,MAAA,QAAc,QAAQ,QAAQ,SAAS,KAAK,CAAC,YAAY,mBAAmB,UAAU,CAAC,eAAe;AAC3G,SAAO,IAAI,MAAA,cAAoB,IAAI;;;CAIrC,kBAA6B;EAC3B,MAAM,MACJ,MAAA,QAAc,mBAAmB,IACjC,GAAG,MAAA,QAAc,QAAQ,QAAQ,SAAS,KAAK,CAAC;AAClD,SAAO,IAAI,MAAA,cAAoB,IAAI;;CAGrC,OAAA,KAAY,QAAgB,MAAc,MAAkC;EAC1E,MAAM,MAAM,MAAM,MAAA,MAAY,GAAG,MAAA,QAAc,UAAU,QAAQ;GAC/D;GACA,SAAS;IACP,GAAI,SAAS,KAAA,IAAY,EAAE,gBAAgB,oBAAoB,GAAG,EAAE;IACpE,GAAG,MAAA,QAAc;IAClB;GACD,MAAM,SAAS,KAAA,IAAY,KAAK,UAAU,KAAK,GAAG,KAAA;GACnD,CAAC;EACF,MAAM,UAAW,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACnD,MAAI,CAAC,IAAI,GACP,OAAM,IAAI,gBAAgB,QAAQ,SAAS,GAAG,OAAO,GAAG,KAAK,eAAe,IAAI,UAAU,IAAI,OAAO;AAEvG,SAAO"}
+{"version":3,"file":"index.mjs","names":["#client","#options","#lastSeq","#connectTimer","#connect","#listeners","#sendFrame","#closed","#ws","#retries","#outbox","#emit","#reconnect","#fetch","#WebSocketImpl","#call"],"sources":["../src/host-url.ts","../src/index.ts"],"sourcesContent":["/**\n * Pure URL logic for gateway hosts — what an operator types, turned into the\n * `baseUrl` a `WorkerDeckClient` takes.\n *\n * Here rather than in each client because there were already two copies (the iOS\n * `Host.apiURL` and the VS Code extension's port) and a third was coming. Every\n * host that lets someone type a gateway address has to normalize it the same\n * way, or the same gateway saved on two devices is two gateways.\n */\nexport type HostUrl = { baseUrl: string }\n\n/** Normalized REST base for `WorkerDeckClient`, or undefined if unparseable. */\nexport function apiUrl(host: HostUrl): string | undefined {\n  let text = host.baseUrl.trim()\n  while (text.endsWith('/')) text = text.slice(0, -1)\n  if (text === '') return undefined\n  // A bare `mac.tailnet.ts.net:8787` is a host:port, not a scheme — tailnet\n  // gateways are plain http, so that is the sane default to assume.\n  if (!text.includes('://')) text = 'http://' + text\n  if (!text.endsWith('/v1')) text += '/v1'\n  try {\n    // Validation only — the string, not the URL object, is what we keep.\n    new URL(text)\n  } catch {\n    return undefined\n  }\n  return text\n}\n\n/**\n * Whether this gateway is the machine the caller runs on. Decided from the URL,\n * never by probing paths for existence — two checkouts of the same repo would\n * lie. In a remote development window the caller runs on the remote box, so\n * \"loopback\" correctly means *that* machine and its paths are real files there.\n */\nexport function isLoopbackHost(host: HostUrl): boolean {\n  const api = apiUrl(host)\n  if (!api) return false\n  try {\n    const { hostname } = new URL(api)\n    return (\n      hostname === '127.0.0.1' ||\n      hostname === 'localhost' ||\n      hostname === '::1' ||\n      hostname === '[::1]'\n    )\n  } catch {\n    return false\n  }\n}\n","import type {\n  AttachedFrame,\n  ClientFrame,\n  CreateJobRequest,\n  CreateProfileRequest,\n  CreateSessionRequest,\n  JobEvent,\n  JobInfo,\n  FindHostFilesResponse,\n  GetProfileResponse,\n  ListHostDirResponse,\n  ListHostRootsResponse,\n  ListProfilesResponse,\n  ListSessionFilesResponse,\n  McpServerActionRequest,\n  McpServersResponse,\n  McpServerStatusInfo,\n  MessageAttachment,\n  ReadHostFileResponse,\n  UploadAttachmentResponse,\n  WriteHostFileRequest,\n  WriteHostFileResponse,\n  PermissionMode,\n  ProfileInfo,\n  QueueServerFrame,\n  QueueStats,\n  ResolvePermissionRequest,\n  UpdateSessionRequest,\n  SubmitExecutionResultRequest,\n  SubmitExecutionResultResponse,\n  SaveProfileResponse,\n  SdkSessionSummary,\n  ServerFrame,\n  SessionEvent,\n  SessionFileInfo,\n  SessionInfo,\n  ToolCallRequestFrame,\n  ToolExecutionOutput,\n  UpdateProfileRequest,\n} from '@workerdeck/protocol'\n\n/** Whatever the ambient `fetch` accepts as a body — `Blob`/`File` in a browser,\n * `Uint8Array` or a string in Node. Derived rather than named (`BodyInit` is a\n * DOM-lib type, and this package compiles against both). */\nexport type FetchBody = NonNullable<NonNullable<Parameters<typeof fetch>[1]>['body']>\n\nexport type ClientOptions = {\n  /** REST base, e.g. \"http://127.0.0.1:8787/v1\". The ws:// URL is derived from it. */\n  baseUrl: string\n  /** Extra headers for REST calls (auth). Browsers can't set WS headers — use\n   * `buildWsUrl` (ticket query param) or cookies for WS auth. */\n  headers?: Record<string, string>\n  /** Override WS URL construction (auth tickets, proxies). */\n  buildWsUrl?: (sessionId: string, afterSeq: number) => string\n  /** Override the queue WS URL (`{baseUrl}/queue/ws` by default). */\n  buildQueueWsUrl?: () => string\n  /** Injectable for non-browser environments/tests. Defaults to globalThis.WebSocket. */\n  WebSocketImpl?: typeof WebSocket\n  fetchImpl?: typeof fetch\n}\n\n/**\n * A REST call the gateway refused, carrying the status alongside the message.\n *\n * An `Error` subclass on purpose: every existing `e instanceof Error` check and\n * every `e.message` read keeps working unchanged. The status is what lets a\n * caller tell \"this server doesn't have that route\" (404 — stop asking) from\n * \"that file was too big\" (413 — tell the user), which a message string can't.\n */\nexport class WorkerDeckError extends Error {\n  readonly status: number\n  constructor(message: string, status: number) {\n    super(message)\n    this.name = 'WorkerDeckError'\n    this.status = status\n  }\n}\n\nexport type AttachOptions = {\n  /** Replay events with seq greater than this. Default 0 (full replay). */\n  afterSeq?: number\n  /** Auto-reconnect with backoff on unexpected disconnects. Default true. */\n  reconnect?: boolean\n}\n\nexport type SessionHandleEvents = {\n  /** Fired on every (re)attach with the server's session snapshot. */\n  attached: AttachedFrame\n  /** Every session event, replayed and live, in seq order. */\n  event: SessionEvent\n  protocolError: string\n  /** WS connectivity: true on open, false on close. */\n  connectionChange: boolean\n  /**\n   * A reconnect has been scheduled, carrying how many have failed in a row (1 on\n   * the first). The handle retries forever, so \"offline\" is a judgement a UI makes\n   * about how long it has been failing rather than a state reported here.\n   */\n  reconnectAttempt: number\n  /**\n   * The server is asking this client to execute a tool call in its own sandbox.\n   * Answer with {@link SessionHandle.sendToolCallResult} or\n   * {@link SessionHandle.sendToolCallError}, echoing the same `executionId`.\n   * Ignoring it is safe: the server fails the execution at `expiresAt`.\n   */\n  toolCallRequest: ToolCallRequestFrame\n  /** A bridged call no longer needs an answer (turn interrupted, timed out, or\n   * the session closed) — abandon any work in progress for this executionId. */\n  toolCallCanceled: { executionId: string; reason: string }\n}\n\ntype Listener<T> = (payload: T) => void\n\nexport class SessionHandle {\n  readonly sessionId: string\n  #client: WorkerDeckClient\n  #options: Required<Pick<AttachOptions, 'reconnect'>> & AttachOptions\n  #ws: WebSocket | undefined\n  #listeners = new Map<keyof SessionHandleEvents, Set<Listener<never>>>()\n  #lastSeq: number\n  #closed = false\n  #retries = 0\n  #outbox: string[] = []\n  #connectTimer: ReturnType<typeof setTimeout> | undefined\n\n  constructor(client: WorkerDeckClient, sessionId: string, options: AttachOptions = {}) {\n    this.#client = client\n    this.sessionId = sessionId\n    this.#options = { reconnect: true, ...options }\n    this.#lastSeq = options.afterSeq ?? 0\n    // Deferred a tick so an attach that is detached in the same tick (React\n    // StrictMode's throwaway dev mount) never opens a socket — closing a\n    // WebSocket mid-upgrade breaks proxies (vite logs EPIPE) for nothing.\n    this.#connectTimer = setTimeout(() => this.#connect(), 0)\n  }\n\n  get lastSeq(): number {\n    return this.#lastSeq\n  }\n\n  on<K extends keyof SessionHandleEvents>(\n    kind: K,\n    listener: Listener<SessionHandleEvents[K]>,\n  ): () => void {\n    let set = this.#listeners.get(kind)\n    if (!set) {\n      set = new Set()\n      this.#listeners.set(kind, set)\n    }\n    set.add(listener as Listener<never>)\n    return () => set.delete(listener as Listener<never>)\n  }\n\n  /** Send a message, optionally naming attachments uploaded ahead of it with\n   * {@link WorkerDeckClient.uploadAttachment} (ids in the order they should reach\n   * the model). An unknown id fails the whole command — the server will not send a\n   * message that quietly lost its picture. */\n  send(text: string, attachmentIds?: string[]): void {\n    this.#sendFrame({\n      type: 'user_message',\n      text,\n      attachmentIds: attachmentIds?.length ? attachmentIds : undefined,\n    })\n  }\n\n  approve(requestId: string, updatedInput?: Record<string, unknown>): void {\n    this.#sendFrame({ type: 'permission_decision', requestId, behavior: 'allow', updatedInput })\n  }\n\n  deny(requestId: string, message?: string, interrupt?: boolean): void {\n    this.#sendFrame({ type: 'permission_decision', requestId, behavior: 'deny', message, interrupt })\n  }\n\n  interrupt(): void {\n    this.#sendFrame({ type: 'interrupt' })\n  }\n\n  setPermissionMode(mode: PermissionMode): void {\n    this.#sendFrame({ type: 'set_permission_mode', mode })\n  }\n\n  /** Switch the model for subsequent responses; omit `model` for the default. */\n  setModel(model?: string): void {\n    this.#sendFrame({ type: 'set_model', model })\n  }\n\n  /** Answer a bridged tool call (see the `toolCallRequest` event). */\n  sendToolCallResult(executionId: string, output: ToolExecutionOutput, logs?: string[]): void {\n    this.#sendFrame({ type: 'tool_call_result', executionId, output, logs })\n  }\n\n  /** Report that a bridged tool call could not be executed. The failure is fed\n   * to the model as tool output, so the agent can adapt rather than stall. */\n  sendToolCallError(executionId: string, reason: string, error: string, logs?: string[]): void {\n    this.#sendFrame({ type: 'tool_call_error', executionId, reason, error, logs })\n  }\n\n  /** Ask the server to terminate the session (the handle disconnects too). */\n  closeSession(): void {\n    this.#sendFrame({ type: 'close' })\n    this.detach()\n  }\n\n  /** Skip the reconnect backoff and try again now — what a tab returning to the\n   * foreground should do, rather than sitting out the remaining delay. No-op\n   * while connected or after {@link SessionHandle.detach}. */\n  reconnectNow(): void {\n    if (this.#closed || (this.#ws && this.#ws.readyState === 1)) return\n    clearTimeout(this.#connectTimer)\n    this.#retries = 0\n    this.#connect()\n  }\n\n  /** Disconnect this handle without touching the session. */\n  detach(): void {\n    this.#closed = true\n    clearTimeout(this.#connectTimer)\n    this.#ws?.close()\n    this.#ws = undefined\n  }\n\n  #emit<K extends keyof SessionHandleEvents>(kind: K, payload: SessionHandleEvents[K]): void {\n    const set = this.#listeners.get(kind)\n    if (!set) return\n    for (const listener of set) {\n      try {\n        ;(listener as Listener<SessionHandleEvents[K]>)(payload)\n      } catch {\n        // listener errors must not break the stream\n      }\n    }\n  }\n\n  #sendFrame(frame: ClientFrame): void {\n    const payload = JSON.stringify(frame)\n    // readyState 1 === OPEN (avoid touching the WebSocket global; impl may be injected)\n    if (this.#ws && this.#ws.readyState === 1) this.#ws.send(payload)\n    else this.#outbox.push(payload)\n  }\n\n  #connect(): void {\n    if (this.#closed) return\n    const ws = this.#client.openSocket(this.sessionId, this.#lastSeq)\n    this.#ws = ws\n    ws.onopen = () => {\n      this.#retries = 0\n      this.#emit('connectionChange', true)\n      for (const payload of this.#outbox.splice(0)) ws.send(payload)\n    }\n    ws.onmessage = (msg: MessageEvent) => {\n      const frame = JSON.parse(String(msg.data)) as ServerFrame\n      if (frame.type === 'attached') {\n        this.#emit('attached', frame)\n      } else if (frame.type === 'event') {\n        if (frame.event.seq <= this.#lastSeq) return\n        this.#lastSeq = frame.event.seq\n        this.#emit('event', frame.event)\n      } else if (frame.type === 'tool_call_request') {\n        this.#emit('toolCallRequest', frame)\n      } else if (frame.type === 'tool_call_canceled') {\n        this.#emit('toolCallCanceled', { executionId: frame.executionId, reason: frame.reason })\n      } else if (frame.type === 'protocol_error') {\n        this.#emit('protocolError', frame.message)\n      }\n    }\n    ws.onclose = () => {\n      this.#emit('connectionChange', false)\n      if (this.#closed || !this.#options.reconnect) return\n      const delay = Math.min(500 * 2 ** this.#retries++, 10_000)\n      this.#emit('reconnectAttempt', this.#retries)\n      this.#connectTimer = setTimeout(() => this.#connect(), delay)\n    }\n    ws.onerror = () => {\n      // onclose follows; reconnect handled there\n    }\n  }\n}\n\nexport type QueueHandleEvents = {\n  /** Fired on every (re)attach with the server's current stats. */\n  attached: QueueStats\n  /** Every job lifecycle/progress event, live. */\n  event: JobEvent\n  /** Refreshed stats pushed after job lifecycle changes. */\n  stats: QueueStats\n  /** WS connectivity: true on open, false on close. */\n  connectionChange: boolean\n}\n\n/**\n * Live view of the server's job queue over `{basePath}/queue/ws`. The stream is\n * read-only — submit/cancel stay on the REST methods. There is no replay: on\n * (re)connect, re-list jobs and treat the stream as updates from there.\n */\nexport class QueueHandle {\n  #client: WorkerDeckClient\n  #reconnect: boolean\n  #ws: WebSocket | undefined\n  #listeners = new Map<keyof QueueHandleEvents, Set<Listener<never>>>()\n  #closed = false\n  #retries = 0\n  #connectTimer: ReturnType<typeof setTimeout> | undefined\n\n  constructor(client: WorkerDeckClient, options: { reconnect?: boolean } = {}) {\n    this.#client = client\n    this.#reconnect = options.reconnect ?? true\n    // Deferred a tick for the same StrictMode reason as SessionHandle.\n    this.#connectTimer = setTimeout(() => this.#connect(), 0)\n  }\n\n  on<K extends keyof QueueHandleEvents>(\n    kind: K,\n    listener: Listener<QueueHandleEvents[K]>,\n  ): () => void {\n    let set = this.#listeners.get(kind)\n    if (!set) {\n      set = new Set()\n      this.#listeners.set(kind, set)\n    }\n    set.add(listener as Listener<never>)\n    return () => set.delete(listener as Listener<never>)\n  }\n\n  detach(): void {\n    this.#closed = true\n    clearTimeout(this.#connectTimer)\n    this.#ws?.close()\n    this.#ws = undefined\n  }\n\n  #emit<K extends keyof QueueHandleEvents>(kind: K, payload: QueueHandleEvents[K]): void {\n    const set = this.#listeners.get(kind)\n    if (!set) return\n    for (const listener of set) {\n      try {\n        ;(listener as Listener<QueueHandleEvents[K]>)(payload)\n      } catch {\n        // listener errors must not break the stream\n      }\n    }\n  }\n\n  #connect(): void {\n    if (this.#closed) return\n    const ws = this.#client.openQueueSocket()\n    this.#ws = ws\n    ws.onopen = () => {\n      this.#retries = 0\n      this.#emit('connectionChange', true)\n    }\n    ws.onmessage = (msg: MessageEvent) => {\n      const frame = JSON.parse(String(msg.data)) as QueueServerFrame\n      if (frame.type === 'queue_attached') {\n        this.#emit('attached', frame.stats)\n        this.#emit('stats', frame.stats)\n      } else if (frame.type === 'job_event') {\n        this.#emit('event', frame.event)\n      } else if (frame.type === 'queue_stats') {\n        this.#emit('stats', frame.stats)\n      }\n    }\n    ws.onclose = () => {\n      this.#emit('connectionChange', false)\n      if (this.#closed || !this.#reconnect) return\n      const delay = Math.min(500 * 2 ** this.#retries++, 10_000)\n      this.#connectTimer = setTimeout(() => this.#connect(), delay)\n    }\n    ws.onerror = () => {\n      // onclose follows; reconnect handled there\n    }\n  }\n}\n\nexport class WorkerDeckClient {\n  #options: ClientOptions\n  #fetch: typeof fetch\n  #WebSocketImpl: typeof WebSocket\n\n  constructor(options: ClientOptions) {\n    this.#options = options\n    this.#fetch = options.fetchImpl ?? fetch.bind(globalThis)\n    this.#WebSocketImpl = options.WebSocketImpl ?? WebSocket\n  }\n\n  async createSession(request: CreateSessionRequest): Promise<SessionInfo> {\n    const body = await this.#call('POST', '/sessions', request)\n    return (body as { session: SessionInfo }).session\n  }\n\n  async listSessions(): Promise<SessionInfo[]> {\n    const body = await this.#call('GET', '/sessions')\n    return (body as { sessions: SessionInfo[] }).sessions\n  }\n\n  async getSession(id: string): Promise<SessionInfo> {\n    const body = await this.#call('GET', `/sessions/${encodeURIComponent(id)}`)\n    return (body as { session: SessionInfo }).session\n  }\n\n  /** Rename a session (or clear the name with `null`, restoring the derived\n   * title). 409 when the session is parked. */\n  async updateSession(id: string, patch: UpdateSessionRequest): Promise<SessionInfo> {\n    const body = await this.#call('PATCH', `/sessions/${encodeURIComponent(id)}`, patch)\n    return (body as { session: SessionInfo }).session\n  }\n\n  async deleteSession(id: string): Promise<SessionInfo> {\n    const body = await this.#call('DELETE', `/sessions/${encodeURIComponent(id)}`)\n    return (body as { session: SessionInfo }).session\n  }\n\n  /** List the files currently in a session's scratch filesystem (deliverables the\n   * agent wrote; see the `file_delivered` event). 404s when the session's engine\n   * has no file store (Claude-engine sessions). */\n  async listSessionFiles(sessionId: string): Promise<SessionFileInfo[]> {\n    const body = await this.#call('GET', `/sessions/${encodeURIComponent(sessionId)}/files`)\n    return (body as ListSessionFilesResponse).files\n  }\n\n  /** Download one session file as text. */\n  async fetchSessionFile(sessionId: string, path: string): Promise<string> {\n    const res = await this.#fetch(this.sessionFileUrl(sessionId, path), {\n      headers: this.#options.headers,\n    })\n    if (!res.ok) {\n      const payload = (await res.json().catch(() => ({}))) as { error?: string }\n      throw new WorkerDeckError(payload.error ?? `GET file failed with ${res.status}`, res.status)\n    }\n    return await res.text()\n  }\n\n  /**\n   * Upload one file for the session, ahead of the message that will carry it.\n   * The returned `id` goes to {@link SessionHandle.send}.\n   *\n   * The body is the raw bytes — no multipart — so anything `fetch` accepts as a\n   * body works: a `File`/`Blob` from a picker, a `Uint8Array`, a string.\n   */\n  async uploadAttachment(\n    sessionId: string,\n    file: { name: string; mediaType: string; data: FetchBody },\n  ): Promise<MessageAttachment> {\n    const url = `${this.#options.baseUrl}/sessions/${encodeURIComponent(sessionId)}/attachments?name=${encodeURIComponent(file.name)}`\n    const res = await this.#fetch(url, {\n      method: 'POST',\n      headers: { ...this.#options.headers, 'content-type': file.mediaType },\n      body: file.data,\n    })\n    if (!res.ok) {\n      const payload = (await res.json().catch(() => ({}))) as { error?: string }\n      throw new WorkerDeckError(payload.error ?? `upload failed with ${res.status}`, res.status)\n    }\n    return ((await res.json()) as UploadAttachmentResponse).attachment\n  }\n\n  /** Direct URL for an uploaded attachment — an `<img src>` on a cookie-authenticated\n   * same-origin server. Header-authenticated clients must fetch it themselves. */\n  attachmentUrl(sessionId: string, attachmentId: string): string {\n    return `${this.#options.baseUrl}/sessions/${encodeURIComponent(sessionId)}/attachments/${encodeURIComponent(attachmentId)}`\n  }\n\n  /**\n   * Direct URL for a file the session's ENGINE produced on the host — the\n   * `fileId` of a `file_produced` event. Same caveat as `attachmentUrl`: usable\n   * as an `<img src>` only where the credential is a same-origin cookie; a\n   * header-authenticated client (the phone) fetches it and makes its own blob.\n   *\n   * Unlike `/fs/read`, this needs no host-file roots and no raised byte cap —\n   * see the `file_produced` note in the protocol for why that is sound.\n   */\n  producedFileUrl(sessionId: string, fileId: string): string {\n    return `${this.#options.baseUrl}/sessions/${encodeURIComponent(sessionId)}/produced/${encodeURIComponent(fileId)}`\n  }\n\n  /** Fetch a produced file's bytes. For clients that cannot put a credential on\n   * an `<img src>`. Throws {@link WorkerDeckError} with the response status —\n   * a 404 means the file is gone from disk, not that the route is missing. */\n  async readProducedFile(sessionId: string, fileId: string): Promise<Blob> {\n    const res = await this.#fetch(this.producedFileUrl(sessionId, fileId), {\n      headers: { ...this.#options.headers },\n    })\n    if (!res.ok) {\n      const payload = (await res.json().catch(() => ({}))) as { error?: string }\n      throw new WorkerDeckError(\n        payload.error ?? `produced file request failed with ${res.status}`,\n        res.status,\n      )\n    }\n    return await res.blob()\n  }\n\n  /** The session's MCP servers and their tools, live from the engine. 501 when the\n   * session's engine has no MCP surface; 409 while the session is parked. */\n  async listMcpServers(sessionId: string): Promise<McpServerStatusInfo[]> {\n    const body = await this.#call('GET', `/sessions/${encodeURIComponent(sessionId)}/mcp`)\n    return (body as McpServersResponse).servers\n  }\n\n  /** Reconnect, enable or disable one MCP server; answers with the refreshed list. */\n  async mcpServerAction(\n    sessionId: string,\n    serverName: string,\n    action: McpServerActionRequest['action'],\n  ): Promise<McpServerStatusInfo[]> {\n    const body = await this.#call(\n      'POST',\n      `/sessions/${encodeURIComponent(sessionId)}/mcp/${encodeURIComponent(serverName)}`,\n      { action },\n    )\n    return (body as McpServersResponse).servers\n  }\n\n  /** Direct download URL for a session file (e.g. an <a download> href). Carries\n   * no headers — on authenticated servers, use fetchSessionFile instead. */\n  sessionFileUrl(sessionId: string, path: string): string {\n    const encoded = path\n      .split('/')\n      .filter(Boolean)\n      .map(encodeURIComponent)\n      .join('/')\n    return `${this.#options.baseUrl}/sessions/${encodeURIComponent(sessionId)}/files/${encoded}`\n  }\n\n  /** Resolve a pending permission over REST — the remote-controller counterpart of the\n   * WS `permission_decision` command (e.g. answering a job's AskUserQuestion from a\n   * webhook consumer; the request rides on job_progress deliveries). Throws if the\n   * request is unknown, already resolved, or expired. */\n  async resolvePermission(\n    sessionId: string,\n    requestId: string,\n    decision: ResolvePermissionRequest,\n  ): Promise<void> {\n    await this.#call(\n      'POST',\n      `/sessions/${encodeURIComponent(sessionId)}/permissions/${encodeURIComponent(requestId)}`,\n      decision,\n    )\n  }\n\n  /**\n   * Deliver the result of a deferred tool execution — the callback a remote\n   * worker (or a human) makes when the work a session parked on is done. The\n   * session is rehydrated if its runner was torn down, and the agent loop\n   * continues with this as the tool's output.\n   *\n   * Applied idempotently by `executionId`: a duplicate, or one racing the\n   * execution watchdog, resolves with `applied: false` instead of applying twice.\n   * Throws (404) when no session is waiting on that id.\n   */\n  async submitExecutionResult(\n    executionId: string,\n    result: SubmitExecutionResultRequest,\n  ): Promise<SubmitExecutionResultResponse> {\n    return (await this.#call(\n      'POST',\n      `/executions/${encodeURIComponent(executionId)}/result`,\n      result,\n    )) as SubmitExecutionResultResponse\n  }\n\n  /** List the profiles (named Claude Code config dirs) this server declares, filtered\n   * to what the caller may use. Feed a result's `name` to createSession({ profile }).\n   * Servers predating profiles 404 here — catch and treat as none declared. */\n  /** The profiles this caller may use, plus whether it may create new ones.\n   * Each profile carries `managed: true` when it is store-backed and therefore\n   * editable; profiles declared in server options are not. */\n  async listProfiles(): Promise<ListProfilesResponse> {\n    return (await this.#call('GET', '/profiles')) as ListProfilesResponse\n  }\n\n  /** One profile plus a fresh, view-only snapshot of its config directory (settings,\n   * skills, agents, commands — env var names only, never values). */\n  async getProfile(name: string): Promise<GetProfileResponse> {\n    return (await this.#call('GET', `/profiles/${encodeURIComponent(name)}`)) as GetProfileResponse\n  }\n\n  /**\n   * Create a managed profile. Requires a server with a profile store and a\n   * principal allowed to manage profiles; 409 if the name is already taken by a\n   * managed or a startup-declared profile.\n   */\n  async createProfile(profile: CreateProfileRequest): Promise<ProfileInfo> {\n    const body = await this.#call('POST', '/profiles', profile)\n    return (body as SaveProfileResponse).profile\n  }\n\n  /** Merge into a managed profile. The name is the route: profiles cannot be\n   * renamed, since sessions and jobs are already pinned to the old one. */\n  async updateProfile(name: string, patch: UpdateProfileRequest): Promise<ProfileInfo> {\n    const body = await this.#call('PATCH', `/profiles/${encodeURIComponent(name)}`, patch)\n    return (body as SaveProfileResponse).profile\n  }\n\n  /** Delete a managed profile. Startup-declared profiles are refused (403) —\n   * they live in the server's options. */\n  async deleteProfile(name: string): Promise<void> {\n    await this.#call('DELETE', `/profiles/${encodeURIComponent(name)}`)\n  }\n\n  /** List an engine's on-disk sessions (for resume across server restarts).\n   * Feed a result's `sessionId` to createSession({ resume }) — under a profile\n   * of the same engine. `profile` names whose store to list (claude profiles →\n   * the Agent SDK store, codex profiles → CODEX_HOME threads); absent, the\n   * server resolves it implicitly when it declares exactly one profile, else\n   * lists the Claude engine's store. */\n  async listSdkSessions(params?: {\n    dir?: string\n    limit?: number\n    offset?: number\n    profile?: string\n  }): Promise<SdkSessionSummary[]> {\n    const search = new URLSearchParams()\n    if (params?.dir) search.set('dir', params.dir)\n    if (params?.limit !== undefined) search.set('limit', String(params.limit))\n    if (params?.offset !== undefined) search.set('offset', String(params.offset))\n    if (params?.profile) search.set('profile', params.profile)\n    const qs = search.size > 0 ? `?${search.toString()}` : ''\n    const body = await this.#call('GET', `/sdk-sessions${qs}`)\n    return (body as { sdkSessions: SdkSessionSummary[] }).sdkSessions\n  }\n\n  // -- Host filesystem (requires the server to be configured with `hostFiles`) -\n\n  /**\n   * The host directories this server will let a client browse, and whether it\n   * accepts writes. Servers without host-file access configured 404 here — catch\n   * and treat as \"no file browser\", the same way `listProfiles` handles an older\n   * server.\n   *\n   * These are operator-privileged routes: the auth key is the whole authorization\n   * story, and they bypass the agent permission flow entirely. See the protocol\n   * package's `HostFileRoot` for why that framing is deliberate.\n   */\n  async listHostRoots(): Promise<ListHostRootsResponse> {\n    return (await this.#call('GET', '/fs/roots')) as ListHostRootsResponse\n  }\n\n  /** One host directory, not recursive. Symlinks are reported as symlinks, never\n   * followed here — read one to find out whether it resolves somewhere allowed. */\n  async listHostDir(path: string): Promise<ListHostDirResponse> {\n    const qs = `?path=${encodeURIComponent(path)}`\n    return (await this.#call('GET', `/fs/list${qs}`)) as ListHostDirResponse\n  }\n\n  /** Recursive fuzzy file search under one host directory — the `@file` picker's\n   * query. Cheap enough to call per keystroke: build directories are skipped and\n   * the walk is bounded, truncating rather than erroring. */\n  async findHostFiles(path: string, query = '', limit?: number): Promise<FindHostFilesResponse> {\n    const search = new URLSearchParams({ path, q: query })\n    if (limit !== undefined) search.set('limit', String(limit))\n    return (await this.#call('GET', `/fs/find?${search.toString()}`)) as FindHostFilesResponse\n  }\n\n  /** Read one host file. Binary content comes back base64-encoded; the returned\n   * `hash` is what a later `writeHostFile` needs as its `expectedHash`. */\n  async readHostFile(path: string): Promise<ReadHostFileResponse> {\n    const qs = `?path=${encodeURIComponent(path)}`\n    return (await this.#call('GET', `/fs/read${qs}`)) as ReadHostFileResponse\n  }\n\n  /**\n   * Write one host file, conditionally — always. Pass the `hash` from the read this\n   * edit is based on; a 409 means the agent (or anything else) changed the file\n   * underneath you, and the edit must be rebased rather than forced. Omit\n   * `expectedHash` only to create a file that does not exist yet.\n   */\n  async writeHostFile(request: WriteHostFileRequest): Promise<WriteHostFileResponse> {\n    return (await this.#call('PUT', '/fs/write', request)) as WriteHostFileResponse\n  }\n\n  // -- Job queue (requires the server to be configured with `queue`) ----------\n\n  /** Schedule a one-shot run. The returned job's `sessionId` (once running) can be\n   * fed to `attach()` to watch the run live. */\n  async createJob(request: CreateJobRequest): Promise<JobInfo> {\n    const body = await this.#call('POST', '/jobs', request)\n    return (body as { job: JobInfo }).job\n  }\n\n  async listJobs(): Promise<JobInfo[]> {\n    const body = await this.#call('GET', '/jobs')\n    return (body as { jobs: JobInfo[] }).jobs\n  }\n\n  async getJob(id: string): Promise<JobInfo> {\n    const body = await this.#call('GET', `/jobs/${encodeURIComponent(id)}`)\n    return (body as { job: JobInfo }).job\n  }\n\n  /** Cancel a queued or running job. */\n  async cancelJob(id: string): Promise<JobInfo> {\n    const body = await this.#call('DELETE', `/jobs/${encodeURIComponent(id)}`)\n    return (body as { job: JobInfo }).job\n  }\n\n  async queueStats(): Promise<QueueStats> {\n    const body = await this.#call('GET', '/queue')\n    return (body as { stats: QueueStats }).stats\n  }\n\n  attach(sessionId: string, options?: AttachOptions): SessionHandle {\n    return new SessionHandle(this, sessionId, options)\n  }\n\n  /** Stream the job queue live (requires the server to be configured with `queue`).\n   * Servers without a queue refuse the socket — check REST first or expect retries. */\n  attachQueue(options?: { reconnect?: boolean }): QueueHandle {\n    return new QueueHandle(this, options)\n  }\n\n  /** @internal used by SessionHandle */\n  openSocket(sessionId: string, afterSeq: number): WebSocket {\n    const url =\n      this.#options.buildWsUrl?.(sessionId, afterSeq) ??\n      `${this.#options.baseUrl.replace(/^http/, 'ws')}/sessions/${encodeURIComponent(sessionId)}/ws?afterSeq=${afterSeq}`\n    return new this.#WebSocketImpl(url)\n  }\n\n  /** @internal used by QueueHandle */\n  openQueueSocket(): WebSocket {\n    const url =\n      this.#options.buildQueueWsUrl?.() ??\n      `${this.#options.baseUrl.replace(/^http/, 'ws')}/queue/ws`\n    return new this.#WebSocketImpl(url)\n  }\n\n  async #call(method: string, path: string, body?: unknown): Promise<unknown> {\n    const res = await this.#fetch(`${this.#options.baseUrl}${path}`, {\n      method,\n      headers: {\n        ...(body !== undefined ? { 'content-type': 'application/json' } : {}),\n        ...this.#options.headers,\n      },\n      body: body !== undefined ? JSON.stringify(body) : undefined,\n    })\n    const payload = (await res.json().catch(() => ({}))) as { error?: string }\n    if (!res.ok) {\n      throw new WorkerDeckError(payload.error ?? `${method} ${path} failed with ${res.status}`, res.status)\n    }\n    return payload\n  }\n}\n\nexport { apiUrl, isLoopbackHost } from './host-url.ts'\nexport type { HostUrl } from './host-url.ts'\n"],"mappings":";;AAYA,SAAgB,OAAO,MAAmC;CACxD,IAAI,OAAO,KAAK,QAAQ,MAAM;AAC9B,QAAO,KAAK,SAAS,IAAI,CAAE,QAAO,KAAK,MAAM,GAAG,GAAG;AACnD,KAAI,SAAS,GAAI,QAAO,KAAA;AAGxB,KAAI,CAAC,KAAK,SAAS,MAAM,CAAE,QAAO,YAAY;AAC9C,KAAI,CAAC,KAAK,SAAS,MAAM,CAAE,SAAQ;AACnC,KAAI;AAEF,MAAI,IAAI,KAAK;SACP;AACN;;AAEF,QAAO;;;;;;;;AAST,SAAgB,eAAe,MAAwB;CACrD,MAAM,MAAM,OAAO,KAAK;AACxB,KAAI,CAAC,IAAK,QAAO;AACjB,KAAI;EACF,MAAM,EAAE,aAAa,IAAI,IAAI,IAAI;AACjC,SACE,aAAa,eACb,aAAa,eACb,aAAa,SACb,aAAa;SAET;AACN,SAAO;;;;;;;;;;;;;ACsBX,IAAa,kBAAb,cAAqC,MAAM;CACzC;CACA,YAAY,SAAiB,QAAgB;AAC3C,QAAM,QAAQ;AACd,OAAK,OAAO;AACZ,OAAK,SAAS;;;AAuClB,IAAa,gBAAb,MAA2B;CACzB;CACA;CACA;CACA;CACA,6BAAa,IAAI,KAAsD;CACvE;CACA,UAAU;CACV,WAAW;CACX,UAAoB,EAAE;CACtB;CAEA,YAAY,QAA0B,WAAmB,UAAyB,EAAE,EAAE;AACpF,QAAA,SAAe;AACf,OAAK,YAAY;AACjB,QAAA,UAAgB;GAAE,WAAW;GAAM,GAAG;GAAS;AAC/C,QAAA,UAAgB,QAAQ,YAAY;AAIpC,QAAA,eAAqB,iBAAiB,MAAA,SAAe,EAAE,EAAE;;CAG3D,IAAI,UAAkB;AACpB,SAAO,MAAA;;CAGT,GACE,MACA,UACY;EACZ,IAAI,MAAM,MAAA,UAAgB,IAAI,KAAK;AACnC,MAAI,CAAC,KAAK;AACR,yBAAM,IAAI,KAAK;AACf,SAAA,UAAgB,IAAI,MAAM,IAAI;;AAEhC,MAAI,IAAI,SAA4B;AACpC,eAAa,IAAI,OAAO,SAA4B;;;;;;CAOtD,KAAK,MAAc,eAAgC;AACjD,QAAA,UAAgB;GACd,MAAM;GACN;GACA,eAAe,eAAe,SAAS,gBAAgB,KAAA;GACxD,CAAC;;CAGJ,QAAQ,WAAmB,cAA8C;AACvE,QAAA,UAAgB;GAAE,MAAM;GAAuB;GAAW,UAAU;GAAS;GAAc,CAAC;;CAG9F,KAAK,WAAmB,SAAkB,WAA2B;AACnE,QAAA,UAAgB;GAAE,MAAM;GAAuB;GAAW,UAAU;GAAQ;GAAS;GAAW,CAAC;;CAGnG,YAAkB;AAChB,QAAA,UAAgB,EAAE,MAAM,aAAa,CAAC;;CAGxC,kBAAkB,MAA4B;AAC5C,QAAA,UAAgB;GAAE,MAAM;GAAuB;GAAM,CAAC;;;CAIxD,SAAS,OAAsB;AAC7B,QAAA,UAAgB;GAAE,MAAM;GAAa;GAAO,CAAC;;;CAI/C,mBAAmB,aAAqB,QAA6B,MAAuB;AAC1F,QAAA,UAAgB;GAAE,MAAM;GAAoB;GAAa;GAAQ;GAAM,CAAC;;;;CAK1E,kBAAkB,aAAqB,QAAgB,OAAe,MAAuB;AAC3F,QAAA,UAAgB;GAAE,MAAM;GAAmB;GAAa;GAAQ;GAAO;GAAM,CAAC;;;CAIhF,eAAqB;AACnB,QAAA,UAAgB,EAAE,MAAM,SAAS,CAAC;AAClC,OAAK,QAAQ;;;;;CAMf,eAAqB;AACnB,MAAI,MAAA,UAAiB,MAAA,MAAY,MAAA,GAAS,eAAe,EAAI;AAC7D,eAAa,MAAA,aAAmB;AAChC,QAAA,UAAgB;AAChB,QAAA,SAAe;;;CAIjB,SAAe;AACb,QAAA,SAAe;AACf,eAAa,MAAA,aAAmB;AAChC,QAAA,IAAU,OAAO;AACjB,QAAA,KAAW,KAAA;;CAGb,MAA2C,MAAS,SAAuC;EACzF,MAAM,MAAM,MAAA,UAAgB,IAAI,KAAK;AACrC,MAAI,CAAC,IAAK;AACV,OAAK,MAAM,YAAY,IACrB,KAAI;AACA,YAA8C,QAAQ;UAClD;;CAMZ,WAAW,OAA0B;EACnC,MAAM,UAAU,KAAK,UAAU,MAAM;AAErC,MAAI,MAAA,MAAY,MAAA,GAAS,eAAe,EAAG,OAAA,GAAS,KAAK,QAAQ;MAC5D,OAAA,OAAa,KAAK,QAAQ;;CAGjC,WAAiB;AACf,MAAI,MAAA,OAAc;EAClB,MAAM,KAAK,MAAA,OAAa,WAAW,KAAK,WAAW,MAAA,QAAc;AACjE,QAAA,KAAW;AACX,KAAG,eAAe;AAChB,SAAA,UAAgB;AAChB,SAAA,KAAW,oBAAoB,KAAK;AACpC,QAAK,MAAM,WAAW,MAAA,OAAa,OAAO,EAAE,CAAE,IAAG,KAAK,QAAQ;;AAEhE,KAAG,aAAa,QAAsB;GACpC,MAAM,QAAQ,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC;AAC1C,OAAI,MAAM,SAAS,WACjB,OAAA,KAAW,YAAY,MAAM;YACpB,MAAM,SAAS,SAAS;AACjC,QAAI,MAAM,MAAM,OAAO,MAAA,QAAe;AACtC,UAAA,UAAgB,MAAM,MAAM;AAC5B,UAAA,KAAW,SAAS,MAAM,MAAM;cACvB,MAAM,SAAS,oBACxB,OAAA,KAAW,mBAAmB,MAAM;YAC3B,MAAM,SAAS,qBACxB,OAAA,KAAW,oBAAoB;IAAE,aAAa,MAAM;IAAa,QAAQ,MAAM;IAAQ,CAAC;YAC/E,MAAM,SAAS,iBACxB,OAAA,KAAW,iBAAiB,MAAM,QAAQ;;AAG9C,KAAG,gBAAgB;AACjB,SAAA,KAAW,oBAAoB,MAAM;AACrC,OAAI,MAAA,UAAgB,CAAC,MAAA,QAAc,UAAW;GAC9C,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,MAAA,WAAiB,IAAO;AAC1D,SAAA,KAAW,oBAAoB,MAAA,QAAc;AAC7C,SAAA,eAAqB,iBAAiB,MAAA,SAAe,EAAE,MAAM;;AAE/D,KAAG,gBAAgB;;;;;;;;AAsBvB,IAAa,cAAb,MAAyB;CACvB;CACA;CACA;CACA,6BAAa,IAAI,KAAoD;CACrE,UAAU;CACV,WAAW;CACX;CAEA,YAAY,QAA0B,UAAmC,EAAE,EAAE;AAC3E,QAAA,SAAe;AACf,QAAA,YAAkB,QAAQ,aAAa;AAEvC,QAAA,eAAqB,iBAAiB,MAAA,SAAe,EAAE,EAAE;;CAG3D,GACE,MACA,UACY;EACZ,IAAI,MAAM,MAAA,UAAgB,IAAI,KAAK;AACnC,MAAI,CAAC,KAAK;AACR,yBAAM,IAAI,KAAK;AACf,SAAA,UAAgB,IAAI,MAAM,IAAI;;AAEhC,MAAI,IAAI,SAA4B;AACpC,eAAa,IAAI,OAAO,SAA4B;;CAGtD,SAAe;AACb,QAAA,SAAe;AACf,eAAa,MAAA,aAAmB;AAChC,QAAA,IAAU,OAAO;AACjB,QAAA,KAAW,KAAA;;CAGb,MAAyC,MAAS,SAAqC;EACrF,MAAM,MAAM,MAAA,UAAgB,IAAI,KAAK;AACrC,MAAI,CAAC,IAAK;AACV,OAAK,MAAM,YAAY,IACrB,KAAI;AACA,YAA4C,QAAQ;UAChD;;CAMZ,WAAiB;AACf,MAAI,MAAA,OAAc;EAClB,MAAM,KAAK,MAAA,OAAa,iBAAiB;AACzC,QAAA,KAAW;AACX,KAAG,eAAe;AAChB,SAAA,UAAgB;AAChB,SAAA,KAAW,oBAAoB,KAAK;;AAEtC,KAAG,aAAa,QAAsB;GACpC,MAAM,QAAQ,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC;AAC1C,OAAI,MAAM,SAAS,kBAAkB;AACnC,UAAA,KAAW,YAAY,MAAM,MAAM;AACnC,UAAA,KAAW,SAAS,MAAM,MAAM;cACvB,MAAM,SAAS,YACxB,OAAA,KAAW,SAAS,MAAM,MAAM;YACvB,MAAM,SAAS,cACxB,OAAA,KAAW,SAAS,MAAM,MAAM;;AAGpC,KAAG,gBAAgB;AACjB,SAAA,KAAW,oBAAoB,MAAM;AACrC,OAAI,MAAA,UAAgB,CAAC,MAAA,UAAiB;GACtC,MAAM,QAAQ,KAAK,IAAI,MAAM,KAAK,MAAA,WAAiB,IAAO;AAC1D,SAAA,eAAqB,iBAAiB,MAAA,SAAe,EAAE,MAAM;;AAE/D,KAAG,gBAAgB;;;AAMvB,IAAa,mBAAb,MAA8B;CAC5B;CACA;CACA;CAEA,YAAY,SAAwB;AAClC,QAAA,UAAgB;AAChB,QAAA,QAAc,QAAQ,aAAa,MAAM,KAAK,WAAW;AACzD,QAAA,gBAAsB,QAAQ,iBAAiB;;CAGjD,MAAM,cAAc,SAAqD;AAEvE,UAAQ,MADW,MAAA,KAAW,QAAQ,aAAa,QAAQ,EACjB;;CAG5C,MAAM,eAAuC;AAE3C,UAAQ,MADW,MAAA,KAAW,OAAO,YAAY,EACJ;;CAG/C,MAAM,WAAW,IAAkC;AAEjD,UAAQ,MADW,MAAA,KAAW,OAAO,aAAa,mBAAmB,GAAG,GAAG,EACjC;;;;CAK5C,MAAM,cAAc,IAAY,OAAmD;AAEjF,UAAQ,MADW,MAAA,KAAW,SAAS,aAAa,mBAAmB,GAAG,IAAI,MAAM,EAC1C;;CAG5C,MAAM,cAAc,IAAkC;AAEpD,UAAQ,MADW,MAAA,KAAW,UAAU,aAAa,mBAAmB,GAAG,GAAG,EACpC;;;;;CAM5C,MAAM,iBAAiB,WAA+C;AAEpE,UAAQ,MADW,MAAA,KAAW,OAAO,aAAa,mBAAmB,UAAU,CAAC,QAAQ,EAC9C;;;CAI5C,MAAM,iBAAiB,WAAmB,MAA+B;EACvE,MAAM,MAAM,MAAM,MAAA,MAAY,KAAK,eAAe,WAAW,KAAK,EAAE,EAClE,SAAS,MAAA,QAAc,SACxB,CAAC;AACF,MAAI,CAAC,IAAI,GAEP,OAAM,IAAI,iBAAgB,MADH,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EACjB,SAAS,wBAAwB,IAAI,UAAU,IAAI,OAAO;AAE9F,SAAO,MAAM,IAAI,MAAM;;;;;;;;;CAUzB,MAAM,iBACJ,WACA,MAC4B;EAC5B,MAAM,MAAM,GAAG,MAAA,QAAc,QAAQ,YAAY,mBAAmB,UAAU,CAAC,oBAAoB,mBAAmB,KAAK,KAAK;EAChI,MAAM,MAAM,MAAM,MAAA,MAAY,KAAK;GACjC,QAAQ;GACR,SAAS;IAAE,GAAG,MAAA,QAAc;IAAS,gBAAgB,KAAK;IAAW;GACrE,MAAM,KAAK;GACZ,CAAC;AACF,MAAI,CAAC,IAAI,GAEP,OAAM,IAAI,iBAAgB,MADH,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EACjB,SAAS,sBAAsB,IAAI,UAAU,IAAI,OAAO;AAE5F,UAAS,MAAM,IAAI,MAAM,EAA+B;;;;CAK1D,cAAc,WAAmB,cAA8B;AAC7D,SAAO,GAAG,MAAA,QAAc,QAAQ,YAAY,mBAAmB,UAAU,CAAC,eAAe,mBAAmB,aAAa;;;;;;;;;;;CAY3H,gBAAgB,WAAmB,QAAwB;AACzD,SAAO,GAAG,MAAA,QAAc,QAAQ,YAAY,mBAAmB,UAAU,CAAC,YAAY,mBAAmB,OAAO;;;;;CAMlH,MAAM,iBAAiB,WAAmB,QAA+B;EACvE,MAAM,MAAM,MAAM,MAAA,MAAY,KAAK,gBAAgB,WAAW,OAAO,EAAE,EACrE,SAAS,EAAE,GAAG,MAAA,QAAc,SAAS,EACtC,CAAC;AACF,MAAI,CAAC,IAAI,GAEP,OAAM,IAAI,iBACR,MAFqB,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EAEzC,SAAS,qCAAqC,IAAI,UAC1D,IAAI,OACL;AAEH,SAAO,MAAM,IAAI,MAAM;;;;CAKzB,MAAM,eAAe,WAAmD;AAEtE,UAAQ,MADW,MAAA,KAAW,OAAO,aAAa,mBAAmB,UAAU,CAAC,MAAM,EAClD;;;CAItC,MAAM,gBACJ,WACA,YACA,QACgC;AAMhC,UAAQ,MALW,MAAA,KACjB,QACA,aAAa,mBAAmB,UAAU,CAAC,OAAO,mBAAmB,WAAW,IAChF,EAAE,QAAQ,CACX,EACmC;;;;CAKtC,eAAe,WAAmB,MAAsB;EACtD,MAAM,UAAU,KACb,MAAM,IAAI,CACV,OAAO,QAAQ,CACf,IAAI,mBAAmB,CACvB,KAAK,IAAI;AACZ,SAAO,GAAG,MAAA,QAAc,QAAQ,YAAY,mBAAmB,UAAU,CAAC,SAAS;;;;;;CAOrF,MAAM,kBACJ,WACA,WACA,UACe;AACf,QAAM,MAAA,KACJ,QACA,aAAa,mBAAmB,UAAU,CAAC,eAAe,mBAAmB,UAAU,IACvF,SACD;;;;;;;;;;;;CAaH,MAAM,sBACJ,aACA,QACwC;AACxC,SAAQ,MAAM,MAAA,KACZ,QACA,eAAe,mBAAmB,YAAY,CAAC,UAC/C,OACD;;;;;;;;CASH,MAAM,eAA8C;AAClD,SAAQ,MAAM,MAAA,KAAW,OAAO,YAAY;;;;CAK9C,MAAM,WAAW,MAA2C;AAC1D,SAAQ,MAAM,MAAA,KAAW,OAAO,aAAa,mBAAmB,KAAK,GAAG;;;;;;;CAQ1E,MAAM,cAAc,SAAqD;AAEvE,UAAQ,MADW,MAAA,KAAW,QAAQ,aAAa,QAAQ,EACtB;;;;CAKvC,MAAM,cAAc,MAAc,OAAmD;AAEnF,UAAQ,MADW,MAAA,KAAW,SAAS,aAAa,mBAAmB,KAAK,IAAI,MAAM,EACjD;;;;CAKvC,MAAM,cAAc,MAA6B;AAC/C,QAAM,MAAA,KAAW,UAAU,aAAa,mBAAmB,KAAK,GAAG;;;;;;;;CASrE,MAAM,gBAAgB,QAKW;EAC/B,MAAM,SAAS,IAAI,iBAAiB;AACpC,MAAI,QAAQ,IAAK,QAAO,IAAI,OAAO,OAAO,IAAI;AAC9C,MAAI,QAAQ,UAAU,KAAA,EAAW,QAAO,IAAI,SAAS,OAAO,OAAO,MAAM,CAAC;AAC1E,MAAI,QAAQ,WAAW,KAAA,EAAW,QAAO,IAAI,UAAU,OAAO,OAAO,OAAO,CAAC;AAC7E,MAAI,QAAQ,QAAS,QAAO,IAAI,WAAW,OAAO,QAAQ;EAC1D,MAAM,KAAK,OAAO,OAAO,IAAI,IAAI,OAAO,UAAU,KAAK;AAEvD,UAAQ,MADW,MAAA,KAAW,OAAO,gBAAgB,KAAK,EACJ;;;;;;;;;;;;CAexD,MAAM,gBAAgD;AACpD,SAAQ,MAAM,MAAA,KAAW,OAAO,YAAY;;;;CAK9C,MAAM,YAAY,MAA4C;EAC5D,MAAM,KAAK,SAAS,mBAAmB,KAAK;AAC5C,SAAQ,MAAM,MAAA,KAAW,OAAO,WAAW,KAAK;;;;;CAMlD,MAAM,cAAc,MAAc,QAAQ,IAAI,OAAgD;EAC5F,MAAM,SAAS,IAAI,gBAAgB;GAAE;GAAM,GAAG;GAAO,CAAC;AACtD,MAAI,UAAU,KAAA,EAAW,QAAO,IAAI,SAAS,OAAO,MAAM,CAAC;AAC3D,SAAQ,MAAM,MAAA,KAAW,OAAO,YAAY,OAAO,UAAU,GAAG;;;;CAKlE,MAAM,aAAa,MAA6C;EAC9D,MAAM,KAAK,SAAS,mBAAmB,KAAK;AAC5C,SAAQ,MAAM,MAAA,KAAW,OAAO,WAAW,KAAK;;;;;;;;CASlD,MAAM,cAAc,SAA+D;AACjF,SAAQ,MAAM,MAAA,KAAW,OAAO,aAAa,QAAQ;;;;CAOvD,MAAM,UAAU,SAA6C;AAE3D,UAAQ,MADW,MAAA,KAAW,QAAQ,SAAS,QAAQ,EACrB;;CAGpC,MAAM,WAA+B;AAEnC,UAAQ,MADW,MAAA,KAAW,OAAO,QAAQ,EACR;;CAGvC,MAAM,OAAO,IAA8B;AAEzC,UAAQ,MADW,MAAA,KAAW,OAAO,SAAS,mBAAmB,GAAG,GAAG,EACrC;;;CAIpC,MAAM,UAAU,IAA8B;AAE5C,UAAQ,MADW,MAAA,KAAW,UAAU,SAAS,mBAAmB,GAAG,GAAG,EACxC;;CAGpC,MAAM,aAAkC;AAEtC,UAAQ,MADW,MAAA,KAAW,OAAO,SAAS,EACP;;CAGzC,OAAO,WAAmB,SAAwC;AAChE,SAAO,IAAI,cAAc,MAAM,WAAW,QAAQ;;;;CAKpD,YAAY,SAAgD;AAC1D,SAAO,IAAI,YAAY,MAAM,QAAQ;;;CAIvC,WAAW,WAAmB,UAA6B;EACzD,MAAM,MACJ,MAAA,QAAc,aAAa,WAAW,SAAS,IAC/C,GAAG,MAAA,QAAc,QAAQ,QAAQ,SAAS,KAAK,CAAC,YAAY,mBAAmB,UAAU,CAAC,eAAe;AAC3G,SAAO,IAAI,MAAA,cAAoB,IAAI;;;CAIrC,kBAA6B;EAC3B,MAAM,MACJ,MAAA,QAAc,mBAAmB,IACjC,GAAG,MAAA,QAAc,QAAQ,QAAQ,SAAS,KAAK,CAAC;AAClD,SAAO,IAAI,MAAA,cAAoB,IAAI;;CAGrC,OAAA,KAAY,QAAgB,MAAc,MAAkC;EAC1E,MAAM,MAAM,MAAM,MAAA,MAAY,GAAG,MAAA,QAAc,UAAU,QAAQ;GAC/D;GACA,SAAS;IACP,GAAI,SAAS,KAAA,IAAY,EAAE,gBAAgB,oBAAoB,GAAG,EAAE;IACpE,GAAG,MAAA,QAAc;IAClB;GACD,MAAM,SAAS,KAAA,IAAY,KAAK,UAAU,KAAK,GAAG,KAAA;GACnD,CAAC;EACF,MAAM,UAAW,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACnD,MAAI,CAAC,IAAI,GACP,OAAM,IAAI,gBAAgB,QAAQ,SAAS,GAAG,OAAO,GAAG,KAAK,eAAe,IAAI,UAAU,IAAI,OAAO;AAEvG,SAAO"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@workerdeck/client",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "type": "module",
   "description": "Typed WorkerDeck protocol client for browsers and Node: REST session management plus a WebSocket attach with auto-reconnect and replay-from-last-seq. Uses the platform's fetch and WebSocket; zero runtime deps.",
   "license": "MIT",
@@ -17,7 +17,7 @@
     }
   },
   "dependencies": {
-    "@workerdeck/protocol": "0.11.0"
+    "@workerdeck/protocol": "0.12.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.0",
@@ -26,8 +26,8 @@
     "tsdown": "^0.21.10",
     "vitest": "^3.2.7",
     "ws": "^8.21.1",
-    "@workerdeck/core": "0.11.0",
-    "@workerdeck/server": "0.11.0"
+    "@workerdeck/core": "0.12.0",
+    "@workerdeck/server": "0.12.0"
   },
   "author": "Tobias Strebitzer",
   "repository": {