@xenosystem/agent-interface-host 0.1.3

package/dist/localRpcTransport.js

@@ -0,0 +1,423 @@
+import { createServer, } from 'node:net';
+import { chmod, mkdir, unlink } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { AgentHostProtocolError, XENO_AGENT_HOST_PROTOCOL_VERSION, isAgentHostMethod, } from '@xenosystem/agent-interface-contract';
+import { JsonLineDecoder, asError, assertLocalRpcOptions, isNodeError, isRecord, positiveInteger, resolveMaxFrameBytes, safeTokenEquals, writeFrame, } from '@xenosystem/agent-interface-client/local';
+/**
+ * The SERVER half of the local Agent host wire protocol.
+ *
+ * 🔴 The client half — framing, the client transport, endpoint resolution, lease reading and
+ * `attachToLocalAgentHost` — moved to `@xenosystem/agent-interface-client` so that a
+ * SURFACE can attach to a per-user host without depending on this package (ADE §2.7). This
+ * package stays private; the client package is publishable, which is what lets `xeno-agent-cli`
+ * — which ships to PUBLIC npm — become a host client at all.
+ *
+ * Only four symbols are server-only, which is why the split is clean. Everything else was shared
+ * wire machinery and now has exactly one definition, imported above.
+ */
+/**
+ * Node-side local RPC server. Renderers never connect to it directly; Electron
+ * main/preload compositions expose the existing narrow AgentHostTransport.
+ */
+/**
+ * How long an accepted socket may stay UNAUTHENTICATED before it is dropped.
+ *
+ * 🔴 Measured 2026-08-18: the pipe's DACL is the Windows default, which grants `Everyone` and
+ * `ANONYMOUS LOGON` `FILE_GENERIC_READ`. Nothing in this repo chose that — libuv creates the pipe
+ * and Node exposes no way to pass a security descriptor. The transport token is the real gate and
+ * it holds: no event is fanned out and no request is dispatched before it is checked.
+ *
+ * But "cannot read anything" is not "cannot connect". Any local process could open the pipe, hold
+ * a connection open forever without ever sending a frame, and repeat — consuming pipe instances
+ * and socket state on the host indefinitely. That is a local denial of service against an
+ * authenticated service, and it needs no credential at all.
+ *
+ * Ten seconds is enormous for a handshake over a local pipe (the client sends it immediately on
+ * connect) and small enough that a squatting connection is transient.
+ */
+const UNAUTHENTICATED_HANDSHAKE_TIMEOUT_MS = 10_000;
+/**
+ * How many sockets may be waiting to authenticate at once.
+ *
+ * ⚠️ Deliberately a cap on UNAUTHENTICATED sockets, not on total connections. Capping the total
+ * would let an attacker starve legitimate surfaces by filling it — the cap would become the
+ * denial of service it exists to prevent.
+ *
+ * 🔴 And on overflow the OLDEST pending socket is dropped, not the newest. Refusing the newcomer
+ * rewards squatting: whoever connected first keeps the slot forever. Evicting the oldest means a
+ * legitimate client can always get in, because a real client authenticates within milliseconds
+ * while a squatter is by definition the one that has been waiting longest.
+ */
+const MAX_UNAUTHENTICATED_SOCKETS = 8;
+export class LocalAgentHostRpcServer {
+    transport;
+    endpoint;
+    transportToken;
+    handshakeTimeoutMs;
+    /** Sockets accepted but not yet authenticated, oldest first (insertion order). */
+    pending = new Set();
+    protocolVersion;
+    maxFrameBytes;
+    removeStaleEndpoint;
+    sockets = new Set();
+    server = null;
+    constructor(options) {
+        assertLocalRpcOptions(options.endpoint, options.transportToken);
+        this.transport = options.transport;
+        this.endpoint = options.endpoint;
+        this.transportToken = options.transportToken;
+        this.protocolVersion = positiveInteger(options.protocolVersion) || XENO_AGENT_HOST_PROTOCOL_VERSION;
+        this.maxFrameBytes = resolveMaxFrameBytes(options.maxFrameBytes);
+        this.removeStaleEndpoint = options.removeStaleEndpoint === true;
+        this.handshakeTimeoutMs =
+            positiveInteger(options.handshakeTimeoutMs) || UNAUTHENTICATED_HANDSHAKE_TIMEOUT_MS;
+    }
+    get listening() {
+        return this.server?.listening === true;
+    }
+    async start() {
+        if (this.server)
+            throw new Error('The local Agent host RPC server has already been started.');
+        if (process.platform !== 'win32') {
+            await mkdir(dirname(this.endpoint), { recursive: true, mode: 0o700 });
+            if (this.removeStaleEndpoint) {
+                try {
+                    await unlink(this.endpoint);
+                }
+                catch (error) {
+                    if (!isNodeError(error, 'ENOENT'))
+                        throw error;
+                }
+            }
+        }
+        const server = createServer((socket) => this.accept(socket));
+        this.server = server;
+        await new Promise((resolveStart, rejectStart) => {
+            const onError = (error) => {
+                server.off('listening', onListening);
+                this.server = null;
+                rejectStart(error);
+            };
+            const onListening = () => {
+                server.off('error', onError);
+                resolveStart();
+            };
+            server.once('error', onError);
+            server.once('listening', onListening);
+            server.listen(this.endpoint);
+        });
+        if (process.platform !== 'win32')
+            await chmod(this.endpoint, 0o600);
+    }
+    async close() {
+        const server = this.server;
+        if (!server)
+            return;
+        this.server = null;
+        for (const socket of this.sockets)
+            socket.destroy();
+        this.sockets.clear();
+        await new Promise((resolveClose, rejectClose) => {
+            server.close((error) => error ? rejectClose(error) : resolveClose());
+        });
+        if (process.platform !== 'win32') {
+            try {
+                await unlink(this.endpoint);
+            }
+            catch (error) {
+                if (!isNodeError(error, 'ENOENT'))
+                    throw error;
+            }
+        }
+    }
+    accept(socket) {
+        this.sockets.add(socket);
+        socket.setNoDelay(true);
+        let authenticated = false;
+        let unsubscribe;
+        // Evict the OLDEST pending socket before admitting this one, so squatting cannot fill the
+        // waiting room. A Set preserves insertion order, so the first entry is the longest-waiting.
+        if (this.pending.size >= MAX_UNAUTHENTICATED_SOCKETS) {
+            const oldest = this.pending.values().next().value;
+            if (oldest) {
+                this.pending.delete(oldest);
+                oldest.destroy();
+            }
+        }
+        this.pending.add(socket);
+        const handshakeDeadline = setTimeout(() => {
+            // Never authenticated. Nothing was read from this connection and nothing was written to it.
+            this.pending.delete(socket);
+            socket.destroy();
+        }, this.handshakeTimeoutMs);
+        // A pending timer must not hold the process open — the host's lifetime is decided by the
+        // host, never by someone who connected to it and said nothing.
+        handshakeDeadline.unref?.();
+        /** Set once this socket completes a handshake, so its loss can be reported to the host. */
+        let clientInstanceId;
+        const decoder = new JsonLineDecoder(this.maxFrameBytes, (frame) => {
+            void handleFrame(frame);
+        });
+        const stop = () => {
+            clearTimeout(handshakeDeadline);
+            this.pending.delete(socket);
+            unsubscribe?.();
+            unsubscribe = undefined;
+            this.sockets.delete(socket);
+            // The connection is gone, so the client is. Without this the host's connected set only
+            // grows, and anything asking it "is anyone there" gets a stale yes — including the check
+            // made immediately before putting a permission prompt to a person and waiting with no
+            // timeout. Idempotent, because both 'close' and 'error' route here.
+            if (clientInstanceId !== undefined) {
+                this.transport.releaseClient?.(clientInstanceId);
+                clientInstanceId = undefined;
+            }
+        };
+        socket.on('close', stop);
+        socket.on('error', () => stop());
+        socket.on('data', (chunk) => {
+            try {
+                decoder.push(chunk);
+            }
+            catch (error) {
+                writeServerFrame(socket, protocolFailure('', error), this.maxFrameBytes);
+                socket.destroy();
+            }
+        });
+        const handleFrame = async (frame) => {
+            let request;
+            try {
+                request = parseLocalRpcRequest(frame);
+            }
+            catch (error) {
+                writeServerFrame(socket, protocolFailure('', error), this.maxFrameBytes);
+                socket.destroy();
+                return;
+            }
+            if (request.protocolVersion !== this.protocolVersion) {
+                writeServerFrame(socket, {
+                    kind: 'response',
+                    id: request.id,
+                    ok: false,
+                    error: {
+                        code: 'protocol_mismatch',
+                        message: `Local Agent host protocol ${this.protocolVersion} is incompatible with client ${request.protocolVersion}.`,
+                    },
+                }, this.maxFrameBytes);
+                socket.destroy();
+                return;
+            }
+            if (!safeTokenEquals(request.token, this.transportToken)) {
+                writeServerFrame(socket, {
+                    kind: 'response',
+                    id: request.id,
+                    ok: false,
+                    error: { code: 'not_connected', message: 'Local Agent host authentication failed.' },
+                }, this.maxFrameBytes);
+                socket.destroy();
+                return;
+            }
+            if (!authenticated) {
+                authenticated = true;
+                // Authenticated: this is a real surface now, and the deadline that exists to evict
+                // squatters must not evict it.
+                clearTimeout(handshakeDeadline);
+                this.pending.delete(socket);
+                unsubscribe = this.transport.subscribe((event) => {
+                    if (!socket.destroyed)
+                        writeServerFrame(socket, { kind: 'event', event }, this.maxFrameBytes);
+                });
+            }
+            try {
+                const output = await dispatchHostRequest(this.transport, request.method, request.input);
+                // Remember WHO this socket is, so its disappearance can be reported. Captured from a
+                // SUCCESSFUL handshake only: a rejected one leaves no client for the host to forget, and
+                // taking the id from the request instead would let a failed handshake evict a live
+                // client that happens to share an instance id.
+                if (request.method === 'host.handshake') {
+                    const identity = request.input.identity;
+                    if (identity && typeof identity.instanceId === 'string')
+                        clientInstanceId = identity.instanceId;
+                }
+                writeServerFrame(socket, {
+                    kind: 'response',
+                    id: request.id,
+                    ok: true,
+                    output,
+                }, this.maxFrameBytes);
+            }
+            catch (error) {
+                writeServerFrame(socket, protocolFailure(request.id, error), this.maxFrameBytes);
+            }
+        };
+    }
+}
+function parseLocalRpcRequest(frame) {
+    let value;
+    try {
+        value = JSON.parse(frame);
+    }
+    catch {
+        throw new AgentHostProtocolError('invalid_response', 'Local Agent host request is malformed JSON.');
+    }
+    if (!isRecord(value)
+        || value.kind !== 'request'
+        || typeof value.id !== 'string'
+        || !value.id
+        || typeof value.protocolVersion !== 'number'
+        || !Number.isInteger(value.protocolVersion)
+        || typeof value.token !== 'string'
+        || typeof value.method !== 'string'
+        || !isAgentHostMethod(value.method)
+        || !('input' in value)) {
+        throw new AgentHostProtocolError('invalid_response', 'Local Agent host request does not satisfy the RPC contract.');
+    }
+    return value;
+}
+function protocolFailure(id, error) {
+    const failure = error instanceof AgentHostProtocolError
+        ? error
+        : new AgentHostProtocolError('invalid_response', asError(error).message);
+    return {
+        kind: 'response',
+        id,
+        ok: false,
+        error: { code: failure.code, message: failure.message },
+    };
+}
+function writeServerFrame(socket, value, maxFrameBytes) {
+    writeFrame(socket, value, maxFrameBytes);
+}
+async function dispatchHostRequest(transport, method, input) {
+    if (method === 'host.handshake') {
+        return transport.request(method, input);
+    }
+    if (method === 'providers.list') {
+        return transport.request(method, input);
+    }
+    if (method === 'providers.refresh') {
+        return transport.request(method, input);
+    }
+    if (method === 'runtime.events.list') {
+        return transport.request(method, input);
+    }
+    if (method === 'state.workspaces.load') {
+        return transport.request(method, input);
+    }
+    if (method === 'state.workspaces.save') {
+        return transport.request(method, input);
+    }
+    if (method === 'state.conversations.load') {
+        return transport.request(method, input);
+    }
+    if (method === 'state.conversations.save') {
+        return transport.request(method, input);
+    }
+    if (method === 'state.conversations.delete') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.access.grant') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.directory.list') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.file.read') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.file.write') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.command.run') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.terminal.start') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.terminal.stop') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.pty.start') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.pty.snapshot') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.pty.input') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.pty.resize') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.pty.clear') {
+        return transport.request(method, input);
+    }
+    if (method === 'workspace.pty.stop') {
+        return transport.request(method, input);
+    }
+    if (method === 'turn.start') {
+        return transport.request(method, input);
+    }
+    if (method === 'turn.cancel') {
+        return transport.request(method, input);
+    }
+    if (method === 'turn.steer') {
+        return transport.request(method, input);
+    }
+    if (method === 'turn.queue') {
+        return transport.request(method, input);
+    }
+    if (method === 'turn.queue.list') {
+        return transport.request(method, input);
+    }
+    if (method === 'turn.queue.drop') {
+        return transport.request(method, input);
+    }
+    if (method === 'elicitation.choose-directory.answer') {
+        return transport.request(method, input);
+    }
+    if (method === 'elicitation.workspace-placement.answer') {
+        return transport.request(method, input);
+    }
+    if (method === 'elicitation.permission.answer') {
+        return transport.request(method, input);
+    }
+    if (method === 'elicitation.ask-user.answer') {
+        return transport.request(method, input);
+    }
+    if (method === 'sdk.sessions.list') {
+        return transport.request(method, input);
+    }
+    if (method === 'sdk.sessions.show') {
+        return transport.request(method, input);
+    }
+    if (method === 'sdk.sessions.attach') {
+        return transport.request(method, input);
+    }
+    if (method === 'sdk.sessions.detach') {
+        return transport.request(method, input);
+    }
+    if (method === 'sdk.sessions.delete') {
+        return transport.request(method, input);
+    }
+    if (method === 'sdk.sessions.clean') {
+        return transport.request(method, input);
+    }
+    if (method === 'sdk.checkpoints.list') {
+        return transport.request(method, input);
+    }
+    if (method === 'sdk.checkpoints.restore') {
+        return transport.request(method, input);
+    }
+    if (method === 'sdk.checkpoints.delete') {
+        return transport.request(method, input);
+    }
+    if (method === 'sdk.tasks.output') {
+        return transport.request(method, input);
+    }
+    return transport.request(method, input);
+}
+// Existing importers reach these through this module; re-exported so the extraction is
+// invisible to them and the change stays reviewable.
+export { LocalAgentHostRpcClientTransport, resolveLocalAgentHostEndpoint, LOCAL_AGENT_HOST_DEFAULT_MAX_FRAME_BYTES, LOCAL_AGENT_HOST_ABSOLUTE_MAX_FRAME_BYTES, } from '@xenosystem/agent-interface-client/local';
+//# sourceMappingURL=localRpcTransport.js.map

package/dist/localRpcTransport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localRpcTransport.js","sourceRoot":"","sources":["../src/localRpcTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,GAGb,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EACL,sBAAsB,EACtB,gCAAgC,EAChC,iBAAiB,GAOlB,MAAM,sCAAsC,CAAA;AAC7C,OAAO,EACL,eAAe,EACf,OAAO,EACP,qBAAqB,EACrB,WAAW,EACX,QAAQ,EACR,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,UAAU,GAKX,MAAM,0CAA0C,CAAA;AAEjD;;;;;;;;;;;GAWG;AAEH;;;GAGG;AACH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,oCAAoC,GAAG,MAAM,CAAA;AAEnD;;;;;;;;;;;GAWG;AACH,MAAM,2BAA2B,GAAG,CAAC,CAAA;AAErC,MAAM,OAAO,uBAAuB;IACjB,SAAS,CAAoB;IAC7B,QAAQ,CAAQ;IAChB,cAAc,CAAQ;IACtB,kBAAkB,CAAQ;IAC3C,kFAAkF;IACjE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IAC3B,eAAe,CAAQ;IACvB,aAAa,CAAQ;IACrB,mBAAmB,CAAS;IAC5B,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IACpC,MAAM,GAAkB,IAAI,CAAA;IAEpC,YAAY,OAAuC;QACjD,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;QAC/D,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;QAClC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAA;QAChC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAA;QAC5C,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,gCAAgC,CAAA;QACnG,IAAI,CAAC,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;QAChE,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,KAAK,IAAI,CAAA;QAC/D,IAAI,CAAC,kBAAkB;YACrB,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,oCAAoC,CAAA;IACvF,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,CAAA;IACxC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;QAC7F,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACrE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBAC7B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;wBAAE,MAAM,KAAK,CAAA;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;YACpD,MAAM,OAAO,GAAG,CAAC,KAAY,EAAQ,EAAE;gBACrC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;gBACpC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;gBAClB,WAAW,CAAC,KAAK,CAAC,CAAA;YACpB,CAAC,CAAA;YACD,MAAM,WAAW,GAAG,GAAS,EAAE;gBAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBAC5B,YAAY,EAAE,CAAA;YAChB,CAAC,CAAA;YACD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC7B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;YACrC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAA;QAEF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACrE,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QAC1B,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAA;QACnD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAA;QACpB,MAAM,IAAI,OAAO,CAAO,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;YACpD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;QACF,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YAC7B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAA;YAChD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,MAAc;QAC3B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACxB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACvB,IAAI,aAAa,GAAG,KAAK,CAAA;QACzB,IAAI,WAA6C,CAAA;QAEjD,0FAA0F;QAC1F,4FAA4F;QAC5F,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,2BAA2B,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;YACjD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC3B,MAAM,CAAC,OAAO,EAAE,CAAA;YAClB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACxB,MAAM,iBAAiB,GAAG,UAAU,CAAC,GAAG,EAAE;YACxC,4FAA4F;YAC5F,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC3B,MAAM,CAAC,OAAO,EAAE,CAAA;QAClB,CAAC,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAC3B,yFAAyF;QACzF,+DAA+D;QAC/D,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAA;QAC3B,2FAA2F;QAC3F,IAAI,gBAAoC,CAAA;QACxC,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YAChE,KAAK,WAAW,CAAC,KAAK,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;QAEF,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,YAAY,CAAC,iBAAiB,CAAC,CAAA;YAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC3B,WAAW,EAAE,EAAE,CAAA;YACf,WAAW,GAAG,SAAS,CAAA;YACvB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC3B,uFAAuF;YACvF,yFAAyF;YACzF,sFAAsF;YACtF,oEAAoE;YACpE,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,gBAAgB,CAAC,CAAA;gBAChD,gBAAgB,GAAG,SAAS,CAAA;YAC9B,CAAC;QACH,CAAC,CAAA;QACD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACxB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAA;QAChC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACrB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;gBACxE,MAAM,CAAC,OAAO,EAAE,CAAA;YAClB,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,MAAM,WAAW,GAAG,KAAK,EAAE,KAAa,EAAiB,EAAE;YACzD,IAAI,OAAwB,CAAA;YAC5B,IAAI,CAAC;gBACH,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;gBACxE,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,OAAM;YACR,CAAC;YAED,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrD,gBAAgB,CAAC,MAAM,EAAE;oBACvB,IAAI,EAAE,UAAU;oBAChB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,mBAAmB;wBACzB,OAAO,EAAE,6BAA6B,IAAI,CAAC,eAAe,gCAAgC,OAAO,CAAC,eAAe,GAAG;qBACrH;iBACF,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;gBACtB,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,OAAM;YACR,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACzD,gBAAgB,CAAC,MAAM,EAAE;oBACvB,IAAI,EAAE,UAAU;oBAChB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,yCAAyC,EAAE;iBACrF,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;gBACtB,MAAM,CAAC,OAAO,EAAE,CAAA;gBAChB,OAAM;YACR,CAAC;YAED,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,aAAa,GAAG,IAAI,CAAA;gBACpB,mFAAmF;gBACnF,+BAA+B;gBAC/B,YAAY,CAAC,iBAAiB,CAAC,CAAA;gBAC/B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;gBAC3B,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC/C,IAAI,CAAC,MAAM,CAAC,SAAS;wBAAE,gBAAgB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;gBAC/F,CAAC,CAAC,CAAA;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAA;gBACvF,qFAAqF;gBACrF,yFAAyF;gBACzF,mFAAmF;gBACnF,+CAA+C;gBAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;oBACxC,MAAM,QAAQ,GAAI,OAAO,CAAC,KAA0C,CAAC,QAAQ,CAAA;oBAC7E,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;wBAAE,gBAAgB,GAAG,QAAQ,CAAC,UAAU,CAAA;gBACjG,CAAC;gBACD,gBAAgB,CAAC,MAAM,EAAE;oBACvB,IAAI,EAAE,UAAU;oBAChB,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,EAAE,EAAE,IAAI;oBACR,MAAM;iBACP,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAA;YAClF,CAAC;QACH,CAAC,CAAA;IACH,CAAC;CACF;AACD,SAAS,oBAAoB,CAAC,KAAa;IACzC,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,EAAE,6CAA6C,CAAC,CAAA;IACrG,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;WACf,KAAK,CAAC,IAAI,KAAK,SAAS;WACxB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;WAC5B,CAAC,KAAK,CAAC,EAAE;WACT,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;WACzC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC;WACxC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;WAC/B,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;WAChC,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC;WAChC,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,EACtB,CAAC;QACD,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,EAAE,6DAA6D,CAAC,CAAA;IACrH,CAAC;IACD,OAAO,KAAmC,CAAA;AAC5C,CAAC;AACD,SAAS,eAAe,CAAC,EAAU,EAAE,KAAc;IACjD,MAAM,OAAO,GAAG,KAAK,YAAY,sBAAsB;QACrD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,sBAAsB,CAAC,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAA;IAC1E,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,EAAE;QACF,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;KACxD,CAAA;AACH,CAAC;AACD,SAAS,gBAAgB,CAAC,MAAc,EAAE,KAA4B,EAAE,aAAqB;IAC3F,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;AAC1C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,SAA6B,EAC7B,MAAuB,EACvB,KAAc;IAEd,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAyC,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAyC,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA4C,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA8C,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAgD,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAgD,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,MAAM,KAAK,0BAA0B,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAmD,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,MAAM,KAAK,0BAA0B,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAmD,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,MAAM,KAAK,4BAA4B,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAqD,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,MAAM,KAAK,wBAAwB,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAiD,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,MAAM,KAAK,0BAA0B,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAmD,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA8C,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA+C,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAgD,CAAC,CAAA;IACpF,CAAC;IACD,IAAI,MAAM,KAAK,0BAA0B,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAmD,CAAC,CAAA;IACvF,CAAC;IACD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAkD,CAAC,CAAA;IACtF,CAAC;IACD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA8C,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,wBAAwB,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAiD,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA8C,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA+C,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA8C,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA6C,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAqC,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAsC,CAAC,CAAA;IAC1E,CAAC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAqC,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAqC,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA0C,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACjC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA0C,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,MAAM,KAAK,qCAAqC,EAAE,CAAC;QACrD,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA8D,CAAC,CAAA;IAClG,CAAC;IACD,IAAI,MAAM,KAAK,wCAAwC,EAAE,CAAC;QACxD,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAiE,CAAC,CAAA;IACrG,CAAC;IACD,IAAI,MAAM,KAAK,+BAA+B,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAwD,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,MAAM,KAAK,6BAA6B,EAAE,CAAC;QAC7C,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAsD,CAAC,CAAA;IAC1F,CAAC;IACD,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA4C,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA4C,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA8C,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA8C,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA8C,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA6C,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA+C,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAkD,CAAC,CAAA;IACtF,CAAC;IACD,IAAI,MAAM,KAAK,wBAAwB,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAiD,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAA2C,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,KAAyC,CAAC,CAAA;AAC7E,CAAC;AAED,uFAAuF;AACvF,qDAAqD;AACrD,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,wCAAwC,EACxC,yCAAyC,GAC1C,MAAM,0CAA0C,CAAA"}

package/dist/node.d.ts

@@ -0,0 +1,104 @@
+export * from './index.js';
+export { AGENT_HOST_METHODS, isAgentHostMethod, type AgentHostEvent, type AgentHostInput, type AgentHostMethod, type AgentHostOutput, type AgentHostTransport, } from '@xenosystem/agent-interface-contract';
+export * from './durableRuntimeEventStore.js';
+export * from './localHostLease.js';
+export * from './localHostAuthority.js';
+export * from './detachedHostService.js';
+export * from './detachedHostSupervisor.js';
+export * from './localRpcTransport.js';
+export * from './localHostPaths.js';
+export * from './state/JsonAgentStateRepository.js';
+export * from './state/SqliteAgentStateRepository.js';
+export * from './state/createAgentStateRepository.js';
+export * from './acp/AcpApprovalPortAdapter.js';
+export * from './intake/RepositoryTodoIntakeSource.js';
+export * from './intake/WorkspaceTodoIntakeSource.js';
+export * from './observation/MountContentReader.js';
+export * from './observation/DirectoryBaselineScanner.js';
+export * from './workspace/WorkspaceHostService.js';
+export * from './workspace/WorkspaceShellService.js';
+export * from './workspace/fileAssociations.js';
+export * from './runtime/RuntimeEventStore.js';
+export * from './runtime/RuntimeEventStoreRepositoryAdapter.js';
+export * from './runtime/RuntimeTimelineProjection.js';
+export * from './runtime/runtimeEventTypes.js';
+export * from './agent/chooseDirectoryBridge.js';
+export * from './agent/permissionProfiles.js';
+export * from './agent/runtimeAuthorityPrompt.js';
+export * from './agent/runtimeModeOutputGuard.js';
+export * from './agent/workspacePlacementBridge.js';
+export * from './engineering/EngineeringWorkbenchService.js';
+export * from './engineering/LandingService.js';
+export * from './engineering/engineeringTypes.js';
+export * from './codebase/codeTypes.js';
+export * from './codebase/codeUtils.js';
+export * from './codebase/CodebaseIntelligenceService.js';
+export * from './codebase/contextPacks.js';
+export * from './codebase/dependencyGraph.js';
+export * from './codebase/fileIndexer.js';
+export * from './codebase/LanguageServerProcessManager.js';
+export * from './codebase/symbolIndexer.js';
+export * from './codebase/whatChanged.js';
+export * from './agentSearch/searchTypes.js';
+export * from './agentSearch/AgentSearchService.js';
+export * from './agentSearch/conversationIndexer.js';
+export * from './agentSearch/JsonInvertedIndexAdapter.js';
+export * from './agentSearch/SearchIndexAdapter.js';
+export * from './agentSearch/SearchSourceWatcher.js';
+export * from './agentSearch/SqliteFtsIndexAdapter.js';
+export * from './agentSearch/workspaceMetadataIndexer.js';
+export { actionsForDocument, canReadDocument, createScopeAcl, normalizeSearchText, redactSearchText, safeJsonStringify, stableDocumentId, tokenizeSearchText, createSnippet as createSearchSnippet, estimateTokens as estimateSearchTokens, } from './agentSearch/searchUtils.js';
+export * from './policy/WorkspacePolicyService.js';
+export * from './policy/policyTypes.js';
+export * from './policy/policyGuard.js';
+export * from './pluginMcp/PluginMcpManagerService.js';
+export * from './pluginMcp/pluginMcpTypes.js';
+export * from './subagents/capabilityMatcher.js';
+export * from './subagents/SubagentRunService.js';
+export * from './subagents/SubagentScheduler.js';
+export * from './subagents/SubagentRunService.js';
+export * from './subagents/subagentRunPort.js';
+export * from './subagents/HostTurnSubagentExecutionAdapter.js';
+export * from './subagents/subagentTypes.js';
+export * from './subagents/TeamAgentRouter.js';
+export * from './subagents/AcpSubagentExecutionAdapter.js';
+export * from './subagents/CliSubagentExecutionAdapter.js';
+export * from './acp/acpTypes.js';
+export * from './acp/acpErrors.js';
+export * from './acp/acpRedaction.js';
+export * from './acp/AcpHostBridge.js';
+export * from './acp/AcpPermissionBridge.js';
+export * from './acp/AcpPermissionPolicy.js';
+export * from './acp/DurableAcpPermissionPolicyStore.js';
+export * from './turns/interruptedTurns.js';
+export * from './turns/DurableInterruptedTurnStore.js';
+export * from './acp/AcpInteractivePermissionBridge.js';
+export * from './acp/acpSessionResume.js';
+export * from './acp/AcpRuntimeEventMapper.js';
+export * from './acp/AcpProviderVersionReadiness.js';
+export * from './acp/AcpProviderModelService.js';
+export * from './acp/AcpDiagnosticsService.js';
+export * from './acp/AcpAgentRegistryService.js';
+export * from './acp/AcpExternalCertificationHarness.js';
+export * from './acp/AcpProcessSupervisor.js';
+export * from './acp/AcpProviderApprovalService.js';
+export * from './acp/AcpProviderCatalogService.js';
+export * from './acp/AcpSessionService.js';
+export * from './acp/AcpAgentTurnExecutionAdapter.js';
+export * from './sdk/SdkNativeAgentTurnExecutionAdapter.js';
+export * from './cloud/XenoCloudAgentTurnExecutionAdapter.js';
+export type { AgentModelDescriptor } from '@xenosystem/agent-interface-contract';
+export * from './support/SupportDiagnosticsService.js';
+export * from './cli/CliControlPlaneService.js';
+/**
+ * ADE §5.3's execution half — NODE-only, deliberately.
+ *
+ * `RunExecutionEnvironment` is what a composition wires: it answers BOTH where a
+ * run's commands execute and what containment to report, from one lookup, so the
+ * two cannot drift. It lives here rather than in the browser barrel because it
+ * constructs a `LocalCommandExecutor` for every unsandboxed run, and that spawns
+ * real processes. (`SandboxCommandExecutor` is `fetch`-only and stays in the
+ * browser barrel.)
+ */
+export * from './isolation/RunExecutionEnvironment.js';
+//# sourceMappingURL=node.d.ts.map

package/dist/node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,kBAAkB,GACxB,MAAM,sCAAsC,CAAA;AAC7C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,qBAAqB,CAAA;AACnC,cAAc,yBAAyB,CAAA;AACvC,cAAc,0BAA0B,CAAA;AACxC,cAAc,6BAA6B,CAAA;AAC3C,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,qCAAqC,CAAA;AACnD,cAAc,uCAAuC,CAAA;AACrD,cAAc,uCAAuC,CAAA;AACrD,cAAc,iCAAiC,CAAA;AAC/C,cAAc,wCAAwC,CAAA;AACtD,cAAc,uCAAuC,CAAA;AACrD,cAAc,qCAAqC,CAAA;AACnD,cAAc,2CAA2C,CAAA;AACzD,cAAc,qCAAqC,CAAA;AACnD,cAAc,sCAAsC,CAAA;AACpD,cAAc,iCAAiC,CAAA;AAC/C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iDAAiD,CAAA;AAC/D,cAAc,wCAAwC,CAAA;AACtD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kCAAkC,CAAA;AAChD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,mCAAmC,CAAA;AACjD,cAAc,mCAAmC,CAAA;AACjD,cAAc,qCAAqC,CAAA;AACnD,cAAc,8CAA8C,CAAA;AAC5D,cAAc,iCAAiC,CAAA;AAC/C,cAAc,mCAAmC,CAAA;AACjD,cAAc,yBAAyB,CAAA;AACvC,cAAc,yBAAyB,CAAA;AACvC,cAAc,2CAA2C,CAAA;AACzD,cAAc,4BAA4B,CAAA;AAC1C,cAAc,+BAA+B,CAAA;AAC7C,cAAc,2BAA2B,CAAA;AACzC,cAAc,4CAA4C,CAAA;AAC1D,cAAc,6BAA6B,CAAA;AAC3C,cAAc,2BAA2B,CAAA;AACzC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,qCAAqC,CAAA;AACnD,cAAc,sCAAsC,CAAA;AACpD,cAAc,2CAA2C,CAAA;AACzD,cAAc,qCAAqC,CAAA;AACnD,cAAc,sCAAsC,CAAA;AACpD,cAAc,wCAAwC,CAAA;AACtD,cAAc,2CAA2C,CAAA;AACzD,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,IAAI,mBAAmB,EACpC,cAAc,IAAI,oBAAoB,GACvC,MAAM,8BAA8B,CAAA;AACrC,cAAc,oCAAoC,CAAA;AAClD,cAAc,yBAAyB,CAAA;AACvC,cAAc,yBAAyB,CAAA;AACvC,cAAc,wCAAwC,CAAA;AACtD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,kCAAkC,CAAA;AAChD,cAAc,mCAAmC,CAAA;AACjD,cAAc,kCAAkC,CAAA;AAChD,cAAc,mCAAmC,CAAA;AACjD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,iDAAiD,CAAA;AAC/D,cAAc,8BAA8B,CAAA;AAC5C,cAAc,gCAAgC,CAAA;AAC9C,cAAc,4CAA4C,CAAA;AAC1D,cAAc,4CAA4C,CAAA;AAC1D,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,wBAAwB,CAAA;AACtC,cAAc,8BAA8B,CAAA;AAC5C,cAAc,8BAA8B,CAAA;AAC5C,cAAc,0CAA0C,CAAA;AACxD,cAAc,6BAA6B,CAAA;AAC3C,cAAc,wCAAwC,CAAA;AACtD,cAAc,yCAAyC,CAAA;AACvD,cAAc,2BAA2B,CAAA;AACzC,cAAc,gCAAgC,CAAA;AAC9C,cAAc,sCAAsC,CAAA;AACpD,cAAc,kCAAkC,CAAA;AAChD,cAAc,gCAAgC,CAAA;AAC9C,cAAc,kCAAkC,CAAA;AAChD,cAAc,0CAA0C,CAAA;AACxD,cAAc,+BAA+B,CAAA;AAC7C,cAAc,qCAAqC,CAAA;AACnD,cAAc,oCAAoC,CAAA;AAClD,cAAc,4BAA4B,CAAA;AAC1C,cAAc,uCAAuC,CAAA;AACrD,cAAc,6CAA6C,CAAA;AAC3D,cAAc,+CAA+C,CAAA;AAC7D,YAAY,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAA;AAChF,cAAc,wCAAwC,CAAA;AACtD,cAAc,iCAAiC,CAAA;AAC/C;;;;;;;;;GASG;AACH,cAAc,wCAAwC,CAAA"}

package/dist/node.js

@@ -0,0 +1,103 @@
+export * from './index.js';
+export { AGENT_HOST_METHODS, isAgentHostMethod, } from '@xenosystem/agent-interface-contract';
+export * from './durableRuntimeEventStore.js';
+export * from './localHostLease.js';
+export * from './localHostAuthority.js';
+export * from './detachedHostService.js';
+export * from './detachedHostSupervisor.js';
+export * from './localRpcTransport.js';
+export * from './localHostPaths.js';
+export * from './state/JsonAgentStateRepository.js';
+export * from './state/SqliteAgentStateRepository.js';
+export * from './state/createAgentStateRepository.js';
+export * from './acp/AcpApprovalPortAdapter.js';
+export * from './intake/RepositoryTodoIntakeSource.js';
+export * from './intake/WorkspaceTodoIntakeSource.js';
+export * from './observation/MountContentReader.js';
+export * from './observation/DirectoryBaselineScanner.js';
+export * from './workspace/WorkspaceHostService.js';
+export * from './workspace/WorkspaceShellService.js';
+export * from './workspace/fileAssociations.js';
+export * from './runtime/RuntimeEventStore.js';
+export * from './runtime/RuntimeEventStoreRepositoryAdapter.js';
+export * from './runtime/RuntimeTimelineProjection.js';
+export * from './runtime/runtimeEventTypes.js';
+export * from './agent/chooseDirectoryBridge.js';
+export * from './agent/permissionProfiles.js';
+export * from './agent/runtimeAuthorityPrompt.js';
+export * from './agent/runtimeModeOutputGuard.js';
+export * from './agent/workspacePlacementBridge.js';
+export * from './engineering/EngineeringWorkbenchService.js';
+export * from './engineering/LandingService.js';
+export * from './engineering/engineeringTypes.js';
+export * from './codebase/codeTypes.js';
+export * from './codebase/codeUtils.js';
+export * from './codebase/CodebaseIntelligenceService.js';
+export * from './codebase/contextPacks.js';
+export * from './codebase/dependencyGraph.js';
+export * from './codebase/fileIndexer.js';
+export * from './codebase/LanguageServerProcessManager.js';
+export * from './codebase/symbolIndexer.js';
+export * from './codebase/whatChanged.js';
+export * from './agentSearch/searchTypes.js';
+export * from './agentSearch/AgentSearchService.js';
+export * from './agentSearch/conversationIndexer.js';
+export * from './agentSearch/JsonInvertedIndexAdapter.js';
+export * from './agentSearch/SearchIndexAdapter.js';
+export * from './agentSearch/SearchSourceWatcher.js';
+export * from './agentSearch/SqliteFtsIndexAdapter.js';
+export * from './agentSearch/workspaceMetadataIndexer.js';
+export { actionsForDocument, canReadDocument, createScopeAcl, normalizeSearchText, redactSearchText, safeJsonStringify, stableDocumentId, tokenizeSearchText, createSnippet as createSearchSnippet, estimateTokens as estimateSearchTokens, } from './agentSearch/searchUtils.js';
+export * from './policy/WorkspacePolicyService.js';
+export * from './policy/policyTypes.js';
+export * from './policy/policyGuard.js';
+export * from './pluginMcp/PluginMcpManagerService.js';
+export * from './pluginMcp/pluginMcpTypes.js';
+export * from './subagents/capabilityMatcher.js';
+export * from './subagents/SubagentRunService.js';
+export * from './subagents/SubagentScheduler.js';
+export * from './subagents/SubagentRunService.js';
+export * from './subagents/subagentRunPort.js';
+export * from './subagents/HostTurnSubagentExecutionAdapter.js';
+export * from './subagents/subagentTypes.js';
+export * from './subagents/TeamAgentRouter.js';
+export * from './subagents/AcpSubagentExecutionAdapter.js';
+export * from './subagents/CliSubagentExecutionAdapter.js';
+export * from './acp/acpTypes.js';
+export * from './acp/acpErrors.js';
+export * from './acp/acpRedaction.js';
+export * from './acp/AcpHostBridge.js';
+export * from './acp/AcpPermissionBridge.js';
+export * from './acp/AcpPermissionPolicy.js';
+export * from './acp/DurableAcpPermissionPolicyStore.js';
+export * from './turns/interruptedTurns.js';
+export * from './turns/DurableInterruptedTurnStore.js';
+export * from './acp/AcpInteractivePermissionBridge.js';
+export * from './acp/acpSessionResume.js';
+export * from './acp/AcpRuntimeEventMapper.js';
+export * from './acp/AcpProviderVersionReadiness.js';
+export * from './acp/AcpProviderModelService.js';
+export * from './acp/AcpDiagnosticsService.js';
+export * from './acp/AcpAgentRegistryService.js';
+export * from './acp/AcpExternalCertificationHarness.js';
+export * from './acp/AcpProcessSupervisor.js';
+export * from './acp/AcpProviderApprovalService.js';
+export * from './acp/AcpProviderCatalogService.js';
+export * from './acp/AcpSessionService.js';
+export * from './acp/AcpAgentTurnExecutionAdapter.js';
+export * from './sdk/SdkNativeAgentTurnExecutionAdapter.js';
+export * from './cloud/XenoCloudAgentTurnExecutionAdapter.js';
+export * from './support/SupportDiagnosticsService.js';
+export * from './cli/CliControlPlaneService.js';
+/**
+ * ADE §5.3's execution half — NODE-only, deliberately.
+ *
+ * `RunExecutionEnvironment` is what a composition wires: it answers BOTH where a
+ * run's commands execute and what containment to report, from one lookup, so the
+ * two cannot drift. It lives here rather than in the browser barrel because it
+ * constructs a `LocalCommandExecutor` for every unsandboxed run, and that spawns
+ * real processes. (`SandboxCommandExecutor` is `fetch`-only and stays in the
+ * browser barrel.)
+ */
+export * from './isolation/RunExecutionEnvironment.js';
+//# sourceMappingURL=node.js.map