agent-embassy 1.2.0 → 1.3.0

package/dist/src/gateway/claude-compatibility-scratch.js

@@ -1,158 +0,0 @@
-import { randomBytes, randomUUID } from "node:crypto";
-import { spawn as nodeSpawn, } from "node:child_process";
-import os from "node:os";
-import path from "node:path";
-import { BridgeError } from "../errors.js";
-const MAX_SCRATCH_OUTPUT_BYTES = 64 * 1024;
-const SCRATCH_START_TIMEOUT_MS = 2_000;
-const SCRATCH_CLOSE_TIMEOUT_MS = 2_000;
-function waitForSpawn(child) {
-    return new Promise((resolve, reject) => {
-        const timer = setTimeout(() => {
-            cleanup();
-            reject(new Error("scratch spawn timeout"));
-        }, SCRATCH_START_TIMEOUT_MS);
-        timer.unref();
-        const cleanup = () => {
-            clearTimeout(timer);
-            child.off("spawn", onSpawn);
-            child.off("error", onError);
-            child.off("exit", onExit);
-        };
-        const onSpawn = () => {
-            cleanup();
-            resolve();
-        };
-        const onError = (error) => {
-            cleanup();
-            reject(error);
-        };
-        const onExit = () => {
-            cleanup();
-            reject(new Error("scratch exited before ready"));
-        };
-        child.once("spawn", onSpawn);
-        child.once("error", onError);
-        child.once("exit", onExit);
-    });
-}
-function waitForExit(child, timeoutMs) {
-    if (child.exitCode !== null || child.signalCode !== null) {
-        return Promise.resolve(true);
-    }
-    return new Promise((resolve) => {
-        const timer = setTimeout(() => {
-            cleanup();
-            resolve(false);
-        }, timeoutMs);
-        timer.unref();
-        const cleanup = () => {
-            clearTimeout(timer);
-            child.off("exit", onExit);
-        };
-        const onExit = () => {
-            cleanup();
-            resolve(true);
-        };
-        child.once("exit", onExit);
-    });
-}
-export async function startClaudeCompatibilityScratch(runtime, dependencies = {}) {
-    const user = (dependencies.userInfo ?? os.userInfo)();
-    if (!path.isAbsolute(user.homedir) ||
-        path.normalize(user.homedir) !== user.homedir ||
-        user.homedir.includes("\0") ||
-        !/^[A-Za-z0-9._-]{1,128}$/.test(user.username)) {
-        throw new BridgeError("CLAUDE_CERTIFICATION_USER_INVALID", "The bounded Claude certification scratch requires one canonical local user.");
-    }
-    const sessionId = randomUUID();
-    const name = `embassy-compat-${randomBytes(6).toString("hex")}`;
-    const args = [
-        "--print",
-        "--input-format",
-        "stream-json",
-        "--output-format",
-        "stream-json",
-        "--verbose",
-        "--session-id",
-        sessionId,
-        "--name",
-        name,
-        "--safe-mode",
-        "--tools",
-        "",
-        "--strict-mcp-config",
-        "--no-session-persistence",
-        "--permission-mode",
-        "dontAsk",
-        "--settings",
-        '{"crossSessionInbound":"accept"}',
-    ];
-    const spawn = dependencies.spawn ??
-        ((command, argv, options) => nodeSpawn(command, [...argv], options));
-    let child;
-    try {
-        child = spawn(runtime.claudeExecutable, args, {
-            cwd: user.homedir,
-            detached: false,
-            env: {
-                HOME: user.homedir,
-                USER: user.username,
-                LOGNAME: user.username,
-                SHELL: "/bin/zsh",
-                PATH: "/usr/bin:/bin:/usr/sbin:/sbin",
-                TMPDIR: os.tmpdir(),
-            },
-            shell: false,
-            stdio: "pipe",
-        });
-    }
-    catch {
-        throw new BridgeError("CLAUDE_CERTIFICATION_SCRATCH_UNAVAILABLE", "The bounded Claude certification scratch could not start.", true);
-    }
-    let outputBytes = 0;
-    let outputOverflow = false;
-    const observeOutput = (chunk) => {
-        outputBytes += Buffer.byteLength(chunk);
-        if (outputBytes > MAX_SCRATCH_OUTPUT_BYTES && !outputOverflow) {
-            outputOverflow = true;
-            child.kill("SIGTERM");
-        }
-    };
-    child.stdout.on("data", observeOutput);
-    child.stderr.on("data", observeOutput);
-    try {
-        await waitForSpawn(child);
-    }
-    catch {
-        child.kill("SIGKILL");
-        await waitForExit(child, SCRATCH_CLOSE_TIMEOUT_MS);
-        throw new BridgeError("CLAUDE_CERTIFICATION_SCRATCH_UNAVAILABLE", "The bounded Claude certification scratch did not become ready.", true);
-    }
-    let closeOperation;
-    return {
-        name,
-        sessionId,
-        assertRunning: () => {
-            if (outputOverflow ||
-                child.exitCode !== null ||
-                child.signalCode !== null) {
-                throw new BridgeError("CLAUDE_CERTIFICATION_SCRATCH_EXITED", "The bounded Claude certification scratch exited before settlement.", true);
-            }
-        },
-        close: () => {
-            closeOperation ??= (async () => {
-                child.stdin.end();
-                if (await waitForExit(child, SCRATCH_CLOSE_TIMEOUT_MS))
-                    return;
-                child.kill("SIGTERM");
-                if (await waitForExit(child, SCRATCH_CLOSE_TIMEOUT_MS))
-                    return;
-                child.kill("SIGKILL");
-                await waitForExit(child, SCRATCH_CLOSE_TIMEOUT_MS);
-            })();
-            return closeOperation;
-        },
-    };
-}
-//# sourceMappingURL=claude-compatibility-scratch.js.map

package/dist/src/gateway/claude-compatibility-scratch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"claude-compatibility-scratch.js","sourceRoot":"","sources":["../../../src/gateway/claude-compatibility-scratch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,KAAK,IAAI,SAAS,GAGnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG3C,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,wBAAwB,GAAG,KAAK,CAAC;AACvC,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAqBvC,SAAS,YAAY,CACnB,KAAqC;IAErC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QAC7C,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAC7B,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,KAAY,EAAQ,EAAE;YACrC,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,KAAqC,EACrC,SAAiB;IAEjB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAkC,EAClC,eAAoC,EAAE;IAEtC,MAAM,IAAI,GAAG,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtD,IACE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO;QAC7C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC3B,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC9C,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,mCAAmC,EACnC,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,kBAAkB,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG;QACX,SAAS;QACT,gBAAgB;QAChB,aAAa;QACb,iBAAiB;QACjB,aAAa;QACb,WAAW;QACX,cAAc;QACd,SAAS;QACT,QAAQ;QACR,IAAI;QACJ,aAAa;QACb,SAAS;QACT,EAAE;QACF,qBAAqB;QACrB,0BAA0B;QAC1B,mBAAmB;QACnB,SAAS;QACT,YAAY;QACZ,kCAAkC;KAC1B,CAAC;IACX,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK;QAC9B,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAC1B,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,OAAO,CAAmC,CAAC,CAAC;IAC9E,IAAI,KAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,EAAE;YAC5C,GAAG,EAAE,IAAI,CAAC,OAAO;YACjB,QAAQ,EAAE,KAAK;YACf,GAAG,EAAE;gBACH,IAAI,EAAE,IAAI,CAAC,OAAO;gBAClB,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,OAAO,EAAE,IAAI,CAAC,QAAQ;gBACtB,KAAK,EAAE,UAAU;gBACjB,IAAI,EAAE,+BAA+B;gBACrC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE;aACpB;YACD,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CACnB,0CAA0C,EAC1C,2DAA2D,EAC3D,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,MAAM,aAAa,GAAG,CAAC,KAAsB,EAAQ,EAAE;QACrD,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,WAAW,GAAG,wBAAwB,IAAI,CAAC,cAAc,EAAE,CAAC;YAC9D,cAAc,GAAG,IAAI,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtB,MAAM,WAAW,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;QACnD,MAAM,IAAI,WAAW,CACnB,0CAA0C,EAC1C,gEAAgE,EAChE,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,cAAyC,CAAC;IAC9C,OAAO;QACL,IAAI;QACJ,SAAS;QACT,aAAa,EAAE,GAAG,EAAE;YAClB,IACE,cAAc;gBACd,KAAK,CAAC,QAAQ,KAAK,IAAI;gBACvB,KAAK,CAAC,UAAU,KAAK,IAAI,EACzB,CAAC;gBACD,MAAM,IAAI,WAAW,CACnB,qCAAqC,EACrC,oEAAoE,EACpE,IAAI,CACL,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,cAAc,KAAK,CAAC,KAAK,IAAI,EAAE;gBAC7B,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBAClB,IAAI,MAAM,WAAW,CAAC,KAAK,EAAE,wBAAwB,CAAC;oBAAE,OAAO;gBAC/D,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,IAAI,MAAM,WAAW,CAAC,KAAK,EAAE,wBAAwB,CAAC;oBAAE,OAAO;gBAC/D,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,WAAW,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;YACrD,CAAC,CAAC,EAAE,CAAC;YACL,OAAO,cAAc,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/gateway/live-dashboard-bootstrap.d.ts

@@ -1,36 +0,0 @@
-import { type FileHandle } from "node:fs/promises";
-import { type DashboardLocale } from "./dashboard-copy.js";
-export type LiveDashboardRandomBytes = (size: number) => Uint8Array;
-export type LiveDashboardFileStat = Readonly<{
-    dev: number;
-    ino: number;
-    mode: number;
-    isDirectory(): boolean;
-    isFile(): boolean;
-    isSymbolicLink(): boolean;
-}>;
-export type LiveDashboardFileHandle = Pick<FileHandle, "writeFile" | "sync" | "stat" | "close">;
-export type LiveDashboardFileSystem = Readonly<{
-    lstat(pathname: string): Promise<LiveDashboardFileStat>;
-    mkdir(pathname: string, options: {
-        mode: number;
-    }): Promise<void>;
-    open(pathname: string, flags: "wx", mode: number): Promise<LiveDashboardFileHandle>;
-    readdir(pathname: string): Promise<string[]>;
-    realpath(pathname: string): Promise<string>;
-    unlink(pathname: string): Promise<void>;
-    rmdir(pathname: string): Promise<void>;
-}>;
-export declare const defaultLiveDashboardFileSystem: LiveDashboardFileSystem;
-export type LiveDashboardBootstrapArtifacts = Readonly<{
-    bootstrapPath: string;
-    capability: string;
-    close(): Promise<void>;
-}>;
-export declare function createLiveDashboardBootstrap(options: Readonly<{
-    privateStateRoot: string;
-    bootstrapTargetWithoutFragment: string;
-    lang: DashboardLocale;
-    fileSystem?: LiveDashboardFileSystem;
-    random?: LiveDashboardRandomBytes;
-}>): Promise<LiveDashboardBootstrapArtifacts>;

package/dist/src/gateway/live-dashboard-bootstrap.js

@@ -1,176 +0,0 @@
-import { randomBytes } from "node:crypto";
-import { lstat, mkdir, open, readdir, realpath, rmdir, unlink, } from "node:fs/promises";
-import path from "node:path";
-import { assertDashboardLocale, getDashboardCopy, } from "./dashboard-copy.js";
-export const defaultLiveDashboardFileSystem = {
-    lstat,
-    mkdir: async (pathname, options) => {
-        await mkdir(pathname, options);
-    },
-    open,
-    readdir,
-    realpath,
-    unlink,
-    rmdir,
-};
-function identity(stat) {
-    return { device: stat.dev, inode: stat.ino };
-}
-function sameIdentity(stat, expected) {
-    return stat.dev === expected.device && stat.ino === expected.inode;
-}
-function base64Url(bytes) {
-    return Buffer.from(bytes).toString("base64url");
-}
-function escapeHtml(value) {
-    return value
-        .replaceAll("&", "&")
-        .replaceAll('"', """)
-        .replaceAll("<", "&lt;")
-        .replaceAll(">", "&gt;");
-}
-function bootstrapDocument(target, lang) {
-    const copy = getDashboardCopy(lang);
-    const escaped = escapeHtml(target);
-    return `<!doctype html>
-<html lang="${lang}"><head><meta charset="utf-8"><meta name="referrer" content="no-referrer"><meta http-equiv="Content-Security-Policy" content="default-src 'none'; navigate-to http://127.0.0.1:*"><meta http-equiv="refresh" content="0;url=${escaped}"><title>${escapeHtml(copy["live.bootstrap.title"])}</title></head><body><p><a rel="noreferrer" href="${escaped}">${escapeHtml(copy["live.bootstrap.open"])}</a></p></body></html>`;
-}
-export async function createLiveDashboardBootstrap(options) {
-    assertDashboardLocale(options.lang);
-    const fileSystem = options.fileSystem ?? defaultLiveDashboardFileSystem;
-    const random = options.random ?? randomBytes;
-    const targetMatch = /^http:\/\/127\.0\.0\.1:([1-9][0-9]{0,4})\/[A-Za-z0-9_-]{16,128}\/bootstrap$/u.exec(options.bootstrapTargetWithoutFragment);
-    if (targetMatch === null || Number(targetMatch[1]) > 65_535) {
-        throw new Error("LIVE_DASHBOARD_BOOTSTRAP_TARGET_INVALID");
-    }
-    const requestedRoot = path.resolve(options.privateStateRoot);
-    const rootPath = await fileSystem.realpath(requestedRoot);
-    const rootStat = await fileSystem.lstat(rootPath);
-    if (!rootStat.isDirectory() ||
-        rootStat.isSymbolicLink() ||
-        (rootStat.mode & 0o077) !== 0) {
-        throw new Error("LIVE_DASHBOARD_STATE_ROOT_NOT_PRIVATE");
-    }
-    let runDirectory = "";
-    let runIdentity;
-    for (let attempt = 0; attempt < 4; attempt += 1) {
-        const name = `live-${base64Url(random(16))}`;
-        if (!/^live-[A-Za-z0-9_-]{22}$/u.test(name)) {
-            throw new Error("LIVE_DASHBOARD_RANDOM_SOURCE_INVALID");
-        }
-        const candidate = path.join(rootPath, name);
-        try {
-            await fileSystem.mkdir(candidate, { mode: 0o700 });
-            const candidateStat = await fileSystem.lstat(candidate);
-            if (!candidateStat.isDirectory() ||
-                candidateStat.isSymbolicLink() ||
-                (candidateStat.mode & 0o077) !== 0) {
-                throw new Error("LIVE_DASHBOARD_RUN_DIRECTORY_NOT_PRIVATE");
-            }
-            runDirectory = candidate;
-            runIdentity = identity(candidateStat);
-            break;
-        }
-        catch (error) {
-            if (typeof error === "object" &&
-                error !== null &&
-                "code" in error &&
-                error.code === "EEXIST") {
-                continue;
-            }
-            throw error;
-        }
-    }
-    if (runIdentity === undefined) {
-        throw new Error("LIVE_DASHBOARD_RUN_DIRECTORY_COLLISION");
-    }
-    const capability = base64Url(random(32));
-    if (!/^[A-Za-z0-9_-]{43}$/u.test(capability)) {
-        throw new Error("LIVE_DASHBOARD_RANDOM_SOURCE_INVALID");
-    }
-    const target = `${options.bootstrapTargetWithoutFragment}#${capability}`;
-    const bootstrapPath = path.join(runDirectory, "bootstrap.html");
-    let handle;
-    let bootstrapIdentity;
-    try {
-        handle = await fileSystem.open(bootstrapPath, "wx", 0o600);
-        const openedStat = await handle.stat();
-        if (!openedStat.isFile() ||
-            openedStat.isSymbolicLink() ||
-            (openedStat.mode & 0o177) !== 0) {
-            throw new Error("LIVE_DASHBOARD_BOOTSTRAP_NOT_PRIVATE");
-        }
-        bootstrapIdentity = identity(openedStat);
-        await handle.writeFile(bootstrapDocument(target, options.lang), {
-            encoding: "utf8",
-        });
-        await handle.sync();
-        await handle.close();
-        handle = undefined;
-        const bootstrapStat = await fileSystem.lstat(bootstrapPath);
-        if (!bootstrapStat.isFile() ||
-            bootstrapStat.isSymbolicLink() ||
-            (bootstrapStat.mode & 0o177) !== 0) {
-            throw new Error("LIVE_DASHBOARD_BOOTSTRAP_NOT_PRIVATE");
-        }
-        if (!sameIdentity(bootstrapStat, bootstrapIdentity)) {
-            throw new Error("LIVE_DASHBOARD_BOOTSTRAP_REPLACED");
-        }
-    }
-    catch (error) {
-        await handle?.close().catch(() => undefined);
-        try {
-            const currentRun = await fileSystem.lstat(runDirectory);
-            if (sameIdentity(currentRun, runIdentity)) {
-                const entries = await fileSystem.readdir(runDirectory);
-                if (entries.length === 1 && entries[0] === "bootstrap.html") {
-                    const currentBootstrap = await fileSystem.lstat(bootstrapPath);
-                    if (bootstrapIdentity !== undefined &&
-                        sameIdentity(currentBootstrap, bootstrapIdentity) &&
-                        currentBootstrap.isFile() &&
-                        !currentBootstrap.isSymbolicLink()) {
-                        await fileSystem.unlink(bootstrapPath);
-                    }
-                }
-                if ((await fileSystem.readdir(runDirectory)).length === 0) {
-                    await fileSystem.rmdir(runDirectory);
-                }
-            }
-        }
-        catch {
-            // Never broaden cleanup after a startup error. A private empty artifact
-            // is preferable to deleting a path whose exact ownership changed.
-        }
-        throw error;
-    }
-    let closed = false;
-    return {
-        bootstrapPath,
-        capability,
-        close: async () => {
-            if (closed)
-                return;
-            const currentRun = await fileSystem.lstat(runDirectory);
-            if (!sameIdentity(currentRun, runIdentity) ||
-                !currentRun.isDirectory() ||
-                currentRun.isSymbolicLink()) {
-                throw new Error("LIVE_DASHBOARD_RUN_DIRECTORY_REPLACED");
-            }
-            const entries = await fileSystem.readdir(runDirectory);
-            if (entries.length !== 1 || entries[0] !== "bootstrap.html") {
-                throw new Error("LIVE_DASHBOARD_RUN_DIRECTORY_NOT_EXACT_OWNED");
-            }
-            const currentBootstrap = await fileSystem.lstat(bootstrapPath);
-            if (bootstrapIdentity === undefined ||
-                !sameIdentity(currentBootstrap, bootstrapIdentity) ||
-                !currentBootstrap.isFile() ||
-                currentBootstrap.isSymbolicLink()) {
-                throw new Error("LIVE_DASHBOARD_BOOTSTRAP_REPLACED");
-            }
-            await fileSystem.unlink(bootstrapPath);
-            await fileSystem.rmdir(runDirectory);
-            closed = true;
-        },
-    };
-}
-//# sourceMappingURL=live-dashboard-bootstrap.js.map

package/dist/src/gateway/live-dashboard-bootstrap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"live-dashboard-bootstrap.js","sourceRoot":"","sources":["../../../src/gateway/live-dashboard-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,KAAK,EACL,KAAK,EACL,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,KAAK,EACL,MAAM,GAEP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,qBAAqB,EACrB,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAqC7B,MAAM,CAAC,MAAM,8BAA8B,GAA4B;IACrE,KAAK;IACL,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACjC,MAAM,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,MAAM;IACN,KAAK;CACN,CAAC;AAEF,SAAS,QAAQ,CAAC,IAA2B;IAC3C,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CACnB,IAA2B,EAC3B,QAAsB;IAEtB,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,IAAqB;IAC9D,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO;cACK,IAAI,+NAA+N,OAAO,YAAY,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,qDAAqD,OAAO,KAAK,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,wBAAwB,CAAC;AAC7a,CAAC;AAQD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAME;IAEF,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,8BAA8B,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC;IAC7C,MAAM,WAAW,GACf,8EAA8E,CAAC,IAAI,CACjF,OAAO,CAAC,8BAA8B,CACvC,CAAC;IACJ,IAAI,WAAW,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClD,IACE,CAAC,QAAQ,CAAC,WAAW,EAAE;QACvB,QAAQ,CAAC,cAAc,EAAE;QACzB,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,IAAI,WAAqC,CAAC;IAC1C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnD,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxD,IACE,CAAC,aAAa,CAAC,WAAW,EAAE;gBAC5B,aAAa,CAAC,cAAc,EAAE;gBAC9B,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAClC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,YAAY,GAAG,SAAS,CAAC;YACzB,WAAW,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;YACtC,MAAM;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,OAAO,KAAK,KAAK,QAAQ;gBACzB,KAAK,KAAK,IAAI;gBACd,MAAM,IAAI,KAAK;gBACf,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,8BAA8B,IAAI,UAAU,EAAE,CAAC;IACzE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAChE,IAAI,MAA2C,CAAC;IAChD,IAAI,iBAA2C,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,IACE,CAAC,UAAU,CAAC,MAAM,EAAE;YACpB,UAAU,CAAC,cAAc,EAAE;YAC3B,CAAC,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,iBAAiB,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;YAC9D,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC5D,IACE,CAAC,aAAa,CAAC,MAAM,EAAE;YACvB,aAAa,CAAC,cAAc,EAAE;YAC9B,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAClC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxD,IAAI,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC1C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;oBAC5D,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;oBAC/D,IACE,iBAAiB,KAAK,SAAS;wBAC/B,YAAY,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;wBACjD,gBAAgB,CAAC,MAAM,EAAE;wBACzB,CAAC,gBAAgB,CAAC,cAAc,EAAE,EAClC,CAAC;wBACD,MAAM,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;oBACzC,CAAC;gBACH,CAAC;gBACD,IAAI,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1D,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,kEAAkE;QACpE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,OAAO;QACL,aAAa;QACb,UAAU;QACV,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxD,IACE,CAAC,YAAY,CAAC,UAAU,EAAE,WAAW,CAAC;gBACtC,CAAC,UAAU,CAAC,WAAW,EAAE;gBACzB,UAAU,CAAC,cAAc,EAAE,EAC3B,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;gBAC5D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAClE,CAAC;YACD,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC/D,IACE,iBAAiB,KAAK,SAAS;gBAC/B,CAAC,YAAY,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;gBAClD,CAAC,gBAAgB,CAAC,MAAM,EAAE;gBAC1B,gBAAgB,CAAC,cAAc,EAAE,EACjC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACvC,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACrC,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/docs/DESIGN.md

@@ -1,134 +0,0 @@
-# Embassy Design System — "Porcelain & Seal"
-
-Canon for every user surface: marketing site, dashboard, README visuals, mark,
-and social imagery. One token system; no surface invents its own values.
-Agreed jointly (PM + engineering) 2026-08-08.
-
-> **PM amendment — 2026-08-09 (the warm/arch era).** The visual identity
-> moved on from this document's imagery on the operator's direction; the
-> honesty rules below remain canon, the imagery sections are historical.
-> What ships today: the **gate/archway mark** with an amber glow and pennant
-> (`assets/embassy-logo/mark.svg`, badge and lockup alongside; the tent
-> variants at `assets/mark.svg` / `assets/mark-seal.svg` remain as favicon
-> until superseded); the **warm anime banner** — three chibi agent mascots
-> exchanging envelopes before the glowing arch (`assets/social-preview.png`,
-> brief in `docs/BANNER-BRIEF.md`); and the **live dashboard's Cohere-token
-> chip system** (`assets/live-dashboard/app.css`) in place of the porcelain
-> palette and seal/receipt iconography described below — state is carried by
-> tinted chips (progress stone, positive green, qualified outline,
-> indeterminate purple, warning coral, failure red, inert outline), with the
-> same rules: progress is never green, `released` ≠ read, refusals are not
-> failures, and the brand accent is never a state color. A successor canon
-> document for the warm era is owed; until then, treat BANNER-BRIEF.md plus
-> the shipped dashboard tokens as the working truth for imagery and color.
-
-## Idea
-
-Embassy's brand is the **receipt** — the seal that records a message
-crossing a boundary and how delivery settled. (A settlement record, not
-cryptographic proof: today `delivered` can mean the receiving App Server
-accepted the turn, not that the model consumed or completed it. Copy on any
-surface must never claim more than this.) The visual world is a light, unhurried diplomatic
-register: porcelain paper, near-black ink, hairline rules, and exactly one
-decisive color — seal red. Abstract, artistic, calm. No buildings, no flags,
-no vendor colors, no circuit-board "AI" imagery.
-
-## Tokens
-
-### Color
-
-| Token | Value | Use |
-| --- | --- | --- |
-| `--porcelain` | `#f8f4ec` | Page ground |
-| `--porcelain-raise` | `#fffdf8` | Cards, panels |
-| `--ink` | `#231f1a` | Primary text |
-| `--ink-soft` | `#6d6558` | Secondary text |
-| `--rule` | `#e4dccd` | Hairlines, borders |
-| `--seal` | `#b3382c` | Brand + one primary action per view — the cinnabar seal. **Never a state color.** |
-| `--jade` | `#557f68` | Healthy / delivered / positive states |
-| `--ochre` | `#a8842f` | Waiting / queued / in-progress states |
-| `--codeblock` | `#262019` | Terminal code blocks only — the one deliberate dark exception |
-
-Rules: cinnabar never decorates and never signals any state — it is the brand
-and the single most important action on screen. **There is no second red.**
-Failure is carried by SHAPE (the broken seal) rendered in `--ink`, never by a
-red that would compete with the brand at small sizes. Jade and ochre are
-semantic only and never used decoratively. Dark-mode variants are NOT provided in v1 —
-the light porcelain world is the committed identity (paint every ground
-explicitly; never inherit host backgrounds).
-
-### Type
-
-| Role | Stack | Treatment |
-| --- | --- | --- |
-| Display | `"Iowan Old Style", "Palatino Nova", Palatino, Georgia, serif` | Large, tight-tracked (−0.01em), `text-wrap: balance` |
-| Body | `-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, sans-serif` | 16–17px / 1.65, max width 65ch |
-| Utility | `ui-monospace, "SF Mono", Menlo, Consolas, monospace` | Commands, receipts, timestamps, stats; `font-variant-numeric: tabular-nums` |
-| Label | Body stack | 11–12px, uppercase, letter-spacing 0.14em, `--ink-soft` (or `--seal` for the active section) |
-
-### Space & structure
-
-- Base unit 8px; section rhythm 72–96px on the site, 24–32px on the dashboard.
-- Hairline rules (`1px solid --rule`) separate; whitespace groups. Prefer
-  asymmetric editorial layouts over centered symmetry on the site.
-- Cards: `--porcelain-raise`, 1px `--rule` border, radius 10px, no shadows
-  heavier than `0 1px 2px rgb(35 31 26 / 4%)`.
-- Wide content (tables, code) scrolls in its own container; the page never
-  scrolls horizontally.
-
-## The mark
-
-An abstract seal: a circle holding two facing arcs that shelter a sealed
-center point — the parentheses of a meeting. **No diagonal strokes anywhere**
-(diagonals collapse into an error X at small sizes), **never radial from the
-hub** (reads as a clock), **nothing detached below center** (reads as a
-face). Two parties, one meeting point. At 20px and below, drop the outer
-ring. Sources:
-
-- `assets/mark.svg` — ink line version on light grounds.
-- `assets/mark-seal.svg` — solid seal-red disc with porcelain chevrons; used
-  for favicon and small sizes (legible at 16px).
-
-Receipt iconography derives from the mark: **delivered** = intact seal
-(jade), **queued** = half-drawn seal (ochre), **expired/failed** = broken
-seal (ink — shape carries the failure; no red competes with the brand). The
-brand cinnabar seal itself never marks a state. No other icon family is
-used.
-
-## Site first viewport
-
-Not an illustration with a title: a compact, authentic message exchange —
-two named agents, the seal at center, a delivered receipt — showing the
-product doing its one thing. Then accreditation/how-it-works, protocol
-truth, real dashboard proof, quickstart/security.
-
-## Dashboard information architecture
-
-1. **Exchange board** — Claude selection ↔ queue/pouch ↔ Codex registration;
-   broker readiness and the next action inline.
-2. **Needs attention** — ordered, actionable, hidden when empty.
-3. **In transit** — queue count, oldest wait, and explicit stall state from the
-   bounded public snapshot.
-4. **Activity ledger** — receipt lifecycle; details on demand.
-5. **Sessions & routes** — secondary.
-6. **Compatibility & diagnostics** — collapsed by default.
-
-Every alert pairs the state with the exact next command. Raw data lives
-behind the questions, never in front of them. Review lenses: a new user must
-understand purpose / readiness / queue / next action within 10 seconds; a
-protocol expert must verify discovery ≠ selection ≠ registration,
-accepted ≠ delivered, progress ≠ failure, no private data, no overclaims,
-and correct ambiguity/restart/version semantics.
-
-## Localization
-
-Runtime dashboards, CLI guidance, and native gateway notices render from
-closed, parity-tested `en` / `zh-CN` catalogs. Commands, JSON keys, enums,
-aliases, protocol tags, and safe codes stay English. English remains canonical
-for security meaning. The marketing site and README ship parallel locale
-artifacts rather than changing the runtime protocol.
-
-## Review gate
-
-Every batch built under this system passes two adversarial reviews — a
-new-user lens and an AI-expert lens — before it ships.