agentfootprint 9.114.2 → 9.115.0

package/dist/types/hosting/ingressRecord.d.ts

@@ -55,12 +55,22 @@
  *     concurrent-run refusal, an artifact ref that did not resolve;
  *   - and a request that was SERVED.
  *
+ * The HOST's own decisions land here too, though no handler ever saw them: a
+ * request its door guard turned away (a content type any page can send, a
+ * foreign Origin, a Host it was not configured for — `'cross-site-refused'`)
+ * and a session id over the bound (`'refused'`), at the request door and the
+ * conversation door alike. They arrive through the host's `onRefusal`, which
+ * the composer subscribes to whenever a sink is set, and they carry the same
+ * classes and nothing more — door `'request'` or `'conversation'`, because a
+ * forged request is refused before its body says which of the three doors it
+ * wanted.
+ *
  * What it does not carry, stated rather than implied: a body the TRANSPORT
- * refused before the composer ever saw it — unparseable JSON, or an `op` this
- * host's wire grammar does not speak (`InvalidWireOpError`, answered 400 by
- * `httpHost` inside its own request reader). That is a malformed request rather
- * than a decision about a caller, and the composer does not claim it. Your HTTP
- * access log has it.
+ * refused as MALFORMED — unparseable JSON, a body over `maxBodyBytes`, or an
+ * `op` this host's wire grammar does not speak (`InvalidWireOpError`, answered
+ * 400 by `httpHost` inside its own request reader). That is a broken request
+ * rather than a decision about a caller, and the composer does not claim it.
+ * Your HTTP access log has it.
  *
  * Pattern: Observer at a composition boundary. Zero-cost when unset — with no
  * sink configured nothing is built, nothing is wrapped, and the reply object the
@@ -68,9 +78,22 @@
  */
 import { type VerifiedIdentity } from './identityVerification.js';
 import { type IdentityFailureClass } from './errors.js';
-import type { HostReply, HostRequest } from './types.js';
-/** Which of the composer's three doors this request knocked at. */
-export type IngressDoor = 'turn' | 'session-op' | 'artifact';
+import type { ArtifactHandOverFailedPayload } from '../events/payloads.js';
+import type { HostRefusal, HostReply, HostRequest } from './types.js';
+/**
+ * Which door this request knocked at.
+ *
+ *  - `'turn'`, `'session-op'`, `'artifact'` — the composer's three doors, for
+ *    every request the host handed on.
+ *  - `'request'` — the host's one-exchange door, for a request the HOST refused
+ *    before the composer saw it (the door guard; the session-id bound). Which
+ *    of the three it was headed for is deliberately not recorded: a forged
+ *    request is refused on its headers, and its body is never parsed.
+ *  - `'conversation'` — a conversation upgrade the host refused before the 101.
+ *    Recorded here because it is the same host's door and the same census,
+ *    though the composer itself never serves conversations.
+ */
+export type IngressDoor = 'turn' | 'session-op' | 'artifact' | 'request' | 'conversation';
 /**
  * How the door answered — coarse on purpose, because this is the field a
  * dashboard groups by. `errorCode` carries the precision beside it.
@@ -95,14 +118,21 @@ export type IngressDoor = 'turn' | 'session-op' | 'artifact';
  *  - `'admission-refused'` — 429. A policy said no before any work started.
  *  - `'session-refused'` — the one indistinguishable not-found: a session that
  *    does not exist, belongs to somebody else, or names no owner.
+ *  - `'cross-site-refused'` — the host's door guard turned it away before any
+ *    handler saw it: a content type a page on any site can send (415), a
+ *    browser Origin this door does not allow (403), a Host it was not
+ *    configured for (421). `errorCode` says which. Not proof of an attack — a
+ *    script that forgot `content-type: application/json` lands here too — but
+ *    the shape every forged request has, counted where it can be seen.
  *  - `'refused'` — every other refusal the door made by name (a session op with
  *    no verifier configured, a store with no owner index, a concurrent run, an
- *    artifact ref that did not resolve, a pause the wire could not carry).
+ *    artifact ref that did not resolve, a pause the wire could not carry, a
+ *    session id over the ceiling).
  *  - `'failed'` — the request ended in an error that is not one of the door's
  *    own refusals. Usually the run, the store or the provider — which is why
  *    an admitted request that then broke lands HERE and not in `'served'`.
  */
-export type IngressOutcome = 'served' | 'identity-refused' | 'verifier-unavailable' | 'admission-refused' | 'session-refused' | 'refused' | 'failed';
+export type IngressOutcome = 'served' | 'identity-refused' | 'verifier-unavailable' | 'admission-refused' | 'session-refused' | 'cross-site-refused' | 'refused' | 'failed';
 /** What an admission policy answered, when one was consulted. */
 export type IngressAdmissionVerdict = 'allow' | 'queue' | 'refuse';
 /**
@@ -138,6 +168,16 @@ export interface IngressRecord {
     readonly bearerPresent: boolean;
     /** What the admission policy answered, when one was consulted. */
     readonly admission?: IngressAdmissionVerdict;
+    /**
+     * This turn's artifact hand-over (`HostReply.turnArtifacts`) did not go
+     * cleanly — the FIRST failure of it: the host's hook threw, an operation it
+     * started failed, it outran `turnArtifactsTimeoutMs`, or the caller hung up
+     * first. The reply was delivered regardless — the hand-over never decides the
+     * terminal, so `outcome` still says what the caller got. The per-request
+     * census of what `agentfootprint.artifacts.hand_over_failed` reports on the
+     * serving agent's stream, in the same shape: class only, never the message.
+     */
+    readonly turnArtifactsFailure?: ArtifactHandOverFailedPayload;
 }
 /**
  * Where records go — {@link StandingAgentBaseOptions.onIngressDecision}.
@@ -166,9 +206,23 @@ export interface IngressNote {
     identified(verified: VerifiedIdentity | undefined): void;
     /** An admission policy answered. */
     admitted(verdict: IngressAdmissionVerdict): void;
+    /** The turn's artifact hand-over failed — the first failure is recorded. */
+    turnArtifactsFailed(failure: ArtifactHandOverFailedPayload): void;
     /** File the record for a request that left without any terminal at all. */
     settle(): void;
 }
+/**
+ * File the record for a request the HOST refused before the composer saw it —
+ * what `standingAgent` hands to the host's `onRefusal` when a sink is set.
+ *
+ * Built from the refusal's class and the fact of a credential, exactly as a
+ * composer refusal is: no message, no header, no session id (a session id the
+ * bound refused is the one thing this record must never carry), no user —
+ * nothing was verified, because nothing got that far.
+ *
+ * @internal — the option is public, this bookkeeping is not.
+ */
+export declare function recordHostRefusal(refusal: HostRefusal, sink: IngressSink): void;
 /**
  * Begin one request's ingress record.
  *

package/dist/types/hosting/ingressRecord.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ingressRecord.d.ts","sourceRoot":"","sources":["../../../src/hosting/ingressRecord.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AAEH,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzD,mEAAmE;AACnE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,YAAY,GAAG,UAAU,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,kBAAkB,GAClB,sBAAsB,GACtB,mBAAmB,GACnB,iBAAiB,GACjB,SAAS,GACT,QAAQ,CAAC;AAEb,iEAAiE;AACjE,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,6BAA6B;IAC7B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,oFAAoF;IACpF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;iEAC6D;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,oBAAoB,CAAC;IAChD;yEACqE;IACrE,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC;CAC9C;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;AA+C1D;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,oEAAoE;IACpE,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;IACnC,gFAAgF;IAChF,UAAU,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAAC;IACzD,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,2EAA2E;IAC3E,MAAM,IAAI,IAAI,CAAC;CAChB;AAuDD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAsFjF"}
+{"version":3,"file":"ingressRecord.d.ts","sourceRoot":"","sources":["../../../src/hosting/ingressRecord.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AAEH,OAAO,EAAe,KAAK,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC/E,OAAO,EAQL,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAiB,MAAM,YAAY,CAAC;AAErF;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,CAAC;AAE1F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,kBAAkB,GAClB,sBAAsB,GACtB,mBAAmB,GACnB,iBAAiB,GACjB,oBAAoB,GACpB,SAAS,GACT,QAAQ,CAAC;AAEb,iEAAiE;AACjE,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,6BAA6B;IAC7B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,oFAAoF;IACpF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;iEAC6D;IAC7D,QAAQ,CAAC,eAAe,CAAC,EAAE,oBAAoB,CAAC;IAChD;yEACqE;IACrE,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,kEAAkE;IAClE,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC;IAC7C;;;;;;;;OAQG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,6BAA6B,CAAC;CAC/D;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;AAsD1D;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,oEAAoE;IACpE,KAAK,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;IACnC,gFAAgF;IAChF,UAAU,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAAC;IACzD,oCAAoC;IACpC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACjD,4EAA4E;IAC5E,mBAAmB,CAAC,OAAO,EAAE,6BAA6B,GAAG,IAAI,CAAC;IAClE,2EAA2E;IAC3E,MAAM,IAAI,IAAI,CAAC;CAChB;AAuDD;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAe/E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,WAAW,CAsGjF"}

package/dist/types/hosting/nodeHost.d.ts

@@ -51,10 +51,24 @@
  * throws does. `types.ts` knows none of it either way.
  */
 /// <reference types="node" />
+import type { CrossSiteOptions } from './doorGuard.js';
 import { type HttpHost, type HttpHostHandle, type HttpWire } from './httpHost.js';
 import type { ConversationLimits } from './types.js';
-/** Options for {@link nodeHost}. */
-export interface NodeHostOptions {
+/**
+ * Options for {@link nodeHost}.
+ *
+ * The three cross-site fields — `allowedOrigins`, `allowedHosts`,
+ * `requireJsonContentType` — are `httpHost`'s own door guard, on both of this
+ * adapter's doors, with the safe defaults: a request that changes something
+ * must say it is JSON, a browser may drive the door only from its own host,
+ * and with `allowedHosts` unset the host says once at boot that it answers any
+ * name. Behind a proxy, list every name the door is reached by — the library
+ * never redirects a short name to a canonical one; that is the proxy's job.
+ *
+ * @example  A door on a company network, reached by one name
+ *   nodeHost({ port: 8080, allowedHosts: ['neo.corp.example'] });
+ */
+export interface NodeHostOptions extends CrossSiteOptions {
     /** Port to bind. Default `8080`. Pass `0` for an ephemeral port. Refused alongside `server`. */
     readonly port?: number;
     /** Interface to bind. Default `'0.0.0.0'`. Refused alongside `server`. */
@@ -138,7 +152,23 @@ export interface NodeHostOptions {
      * is behind TLS.
      */
     readonly sessionCookie?: string;
+    /**
+     * Ceiling on a request body, in bytes. Default {@link DEFAULT_NODE_MAX_BODY_BYTES}
+     * (one mebibyte) — the same number the hosted-runtime adapters default to.
+     *
+     * `httpHost` itself keeps no default (a number chosen there would be
+     * inherited by every adapter built on it); this adapter chooses one, because
+     * without it a caller with no credentials could make the door buffer and
+     * parse a body of any size before a single rule about it — the session-id
+     * bound included — could say no. A body over the line is refused with
+     * `ERR_REQUEST_TOO_LARGE` (413) at the byte that crossed it. One mebibyte is
+     * about a quarter of a million tokens of input, more than any context window
+     * serves in one message; raise it if this deployment genuinely carries more.
+     */
+    readonly maxBodyBytes?: number;
 }
+/** {@link NodeHostOptions.maxBodyBytes}'s default: one mebibyte. */
+export declare const DEFAULT_NODE_MAX_BODY_BYTES = 1048576;
 /**
  * What {@link nodeHost}'s `serve()` resolves to — a `HostHandle` that also
  * reports the `url` and `port` it actually bound, which is the only way to find

package/dist/types/hosting/nodeHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nodeHost.d.ts","sourceRoot":"","sources":["../../../src/hosting/nodeHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;;AAIH,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACd,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,gGAAgG;IAChG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,WAAW,EAAE,MAAM,CAAC;IAC7C;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CACrB,GAAG,EAAE,OAAO,WAAW,EAAE,eAAe,EACxC,GAAG,EAAE,OAAO,WAAW,EAAE,cAAc,KACpC,IAAI,CAAC;IACV;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,cAAc,CAAC;AAE5C,qDAAqD;AACrD,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAIhC,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AAErD,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,eAAoB,GAAG,QAAQ,CAgFpE;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,QAAyB,CAAC;AAgCjD;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CAAC,OAAO,GAAE,eAAoB,GAAG,QAAQ,CAiChE"}
+{"version":3,"file":"nodeHost.d.ts","sourceRoot":"","sources":["../../../src/hosting/nodeHost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACd,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,eAAgB,SAAQ,gBAAgB;IACvD,gGAAgG;IAChG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;OAOG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,WAAW,EAAE,MAAM,CAAC;IAC7C;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,CACrB,GAAG,EAAE,OAAO,WAAW,EAAE,eAAe,EACxC,GAAG,EAAE,OAAO,WAAW,EAAE,cAAc,KACpC,IAAI,CAAC;IACV;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,oEAAoE;AACpE,eAAO,MAAM,2BAA2B,UAAY,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,cAAc,CAAC;AAE5C,qDAAqD;AACrD,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAIhC,kFAAkF;AAClF,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AAErD,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,OAAO,GAAE,eAAoB,GAAG,QAAQ,CAgFpE;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,QAAyB,CAAC;AAgCjD;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CAAC,OAAO,GAAE,eAAoB,GAAG,QAAQ,CAyChE"}

package/dist/types/hosting/standingAgent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"standingAgent.d.ts","sourceRoot":"","sources":["../../../src/hosting/standingAgent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkGG;AAsCH,OAAO,KAAK,EAEV,UAAU,EAKV,oBAAoB,EAErB,MAAM,YAAY,CAAC;AA8DpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,aAAa,CAAC,EAAE,SAAS,UAAU,EACvD,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC,GAChC,OAAO,CAAC,EAAE,CAAC,CAwkCb"}
+{"version":3,"file":"standingAgent.d.ts","sourceRoot":"","sources":["../../../src/hosting/standingAgent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkGG;AA4CH,OAAO,KAAK,EAEV,UAAU,EAKV,oBAAoB,EAErB,MAAM,YAAY,CAAC;AAqEpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,aAAa,CAAC,EAAE,SAAS,UAAU,EACvD,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC,GAChC,OAAO,CAAC,EAAE,CAAC,CA2sCb"}

package/dist/types/hosting/turnArtifacts.d.ts

@@ -0,0 +1,94 @@
+/**
+ * hosting/turnArtifacts — the artifact hand-over a turn gives its host, and
+ * how long it lives.
+ *
+ *   turnArtifacts: async (turn) => {
+ *     if (turn.bound) story = await turn.artifacts.put({ kind: 'story/turn', mediaType, data });
+ *   },
+ *
+ * `standingAgent` opens one per turn (`openTurnArtifacts`), awaits the host's
+ * `HostReply.turnArtifacts` hook with it and then `drain()` — both BOUNDED by
+ * the composer (`turnArtifactsTimeoutMs`, the request's signal) — and finally
+ * `revoke()`s it before the reply's terminal. This module owns that lifetime
+ * and the failures it can see; the scope, the bound and the record are the
+ * composer's.
+ *
+ * ── Why the hand-over has a lifetime at all ──────────────────────────────────
+ * The scope never widens — the binding closes over one tuple — so a late write
+ * can only ever land in the same person's scope. What a late write breaks is
+ * the RECORD: the binding's facts are delivered on the serving agent's
+ * dispatcher, and by then the agent may be running somebody else's turn (the
+ * shared shape), a stopped instance (the pool evicted the lane), or the next
+ * turn of the same conversation. So the binding is live only while its turn
+ * is — the footprintjs `ScopeFacade · assertLive` law, "a handle held past its
+ * stage is refused", applied to the turn.
+ *
+ * ── Drain, then revoke — and nothing here can crash the process ──────────────
+ * `drain()` waits for every operation started through the binding — a `put`
+ * the hook never awaited included, and one an earlier operation's
+ * continuation starts while it waits. `revoke()` then refuses every later call
+ * by name (`TurnArtifactsExpiredError`). Every promise this module hands out
+ * is handled the moment it is created — an operation's, and a revoked call's
+ * refusal alike — so none of them can become an unhandled rejection that ends
+ * the process; a host that awaits one still receives its error. (A promise the
+ * HOST derives from one — `put(...).then(f)` — is the host's own.)
+ *
+ * ── Failures are reported, never swallowed silently ──────────────────────────
+ * Every failed operation (`'operation'`, with its verb and error class) and
+ * every refused late call (`'expired'`) goes to `onFailure`, which the
+ * composer puts on the serving agent's stream. `reported(err)` lets the
+ * composer tell a hook that merely re-threw an operation's own failure from a
+ * hook that failed for a reason of its own — one failure, counted once.
+ *
+ * Pattern: Proxy (a lifetime-bounded view over the `ctx.artifacts` capability).
+ */
+import { type ArtifactEventSink } from '../artifacts/capability.js';
+import type { ArtifactScope, ArtifactStore } from '../artifacts/types.js';
+import { TurnArtifactsExpiredError } from './errors.js';
+import type { TurnArtifacts } from './types.js';
+/** The five verbs of the capability, by name — what a refusal names. */
+type TurnVerb = TurnArtifactsExpiredError['op'];
+/** One failure of the hand-over this module can see. */
+export type TurnArtifactsFailure = {
+    readonly cause: 'operation';
+    readonly op: TurnVerb;
+    readonly error: unknown;
+} | {
+    readonly cause: 'expired';
+    readonly op: TurnVerb;
+};
+/** What one turn's hand-over is built from. */
+export interface TurnArtifactsSource {
+    /** The serving agent's store. Absent ⇒ `{ bound: false, reason: 'no-store' }`. */
+    readonly store: ArtifactStore | undefined;
+    /** This request's redemption scope. Absent ⇒ `{ bound: false, reason: 'no-session' }`. */
+    readonly scope: ArtifactScope | undefined;
+    /** The run this turn executed, captured when the binding is built — its `origin`. */
+    readonly runId: string | undefined;
+    /** Where the binding's facts go (the hosting door's adapter onto the record). */
+    readonly onEvent: ArtifactEventSink;
+    /** Where a failed operation or a refused late call is reported. */
+    readonly onFailure: (failure: TurnArtifactsFailure) => void;
+}
+/** One turn's hand-over: the value the host is given, and the ways to end it. */
+export interface OpenTurnArtifacts {
+    readonly turn: TurnArtifacts;
+    /** Wait for every operation started through the binding — including one
+     *  started while this waits. Never rejects; resolves at once when nothing
+     *  was bound. The composer races it against its bound. */
+    drain(): Promise<void>;
+    /** Refuse every later call by name. Idempotent. */
+    revoke(): void;
+    /** Was this error already reported as a failed operation? */
+    reported(err: unknown): boolean;
+}
+/**
+ * Open this turn's hand-over — bound to `scope`, or the stated reason there is
+ * nothing to bind. `'no-session'` is checked first: with no session there is no
+ * scope to name at all, whatever the store.
+ *
+ * @internal — the composer's; hosts receive the `TurnArtifacts` value only.
+ */
+export declare function openTurnArtifacts(source: TurnArtifactsSource): OpenTurnArtifacts;
+export {};
+//# sourceMappingURL=turnArtifacts.d.ts.map

package/dist/types/hosting/turnArtifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turnArtifacts.d.ts","sourceRoot":"","sources":["../../../src/hosting/turnArtifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,wEAAwE;AACxE,KAAK,QAAQ,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;AAEhD,wDAAwD;AACxD,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC/E;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEzD,+CAA+C;AAC/C,MAAM,WAAW,mBAAmB;IAClC,kFAAkF;IAClF,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,CAAC;IAC1C,0FAA0F;IAC1F,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,SAAS,CAAC;IAC1C,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,IAAI,CAAC;CAC7D;AAED,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B;;8DAE0D;IAC1D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,mDAAmD;IACnD,MAAM,IAAI,IAAI,CAAC;IACf,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC;CACjC;AAID;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,GAAG,iBAAiB,CAWhF"}

package/dist/types/hosting/types.d.ts

@@ -28,6 +28,7 @@ import type { MiddlewareAsk } from '../core/pause.js';
 import type { AgentRunCheckpoint } from '../core/runCheckpoint.js';
 import type { AwaitingInput } from '../core/inputRequest.js';
 import type { Unsubscribe } from '../events/dispatcher.js';
+import type { ToolArtifacts } from '../artifacts/capability.js';
 import type { ArtifactWireRequest, ArtifactWireResult } from './artifactWire.js';
 import type { IdentityVerificationOptions } from './identityVerification.js';
 import type { AdmissionPolicy } from './admission.js';
@@ -88,6 +89,11 @@ export interface HostRequest {
      * anyone who can reach the host can put any string here, including someone
      * else's. Authenticate the caller by your own means, then check that the
      * authenticated principal is allowed this session, before you serve it.
+     *
+     * Bounded at every door the library ships: an id longer than
+     * `MAX_SESSION_ID_LENGTH` or holding a control character is refused before
+     * any handler sees the request, because it travels into every stored row,
+     * log line and trace span of the conversation.
      */
     readonly sessionId?: string;
     /**
@@ -239,9 +245,118 @@ export interface HostReply {
      * Handler code is identical either way: emit freely, complete once.
      */
     emit?(chunk: string): void;
+    /**
+     * The turn's artifact store, **already bound** to the scope this request's
+     * claim tickets are redeemed under — so host code that files its OWN
+     * artifacts for a turn (a story, the person's clicks, anything joined to it)
+     * files them where `artifact-get` will look for the same caller, without
+     * ever composing a scope.
+     *
+     * ── Awaited, inside the turn — and bounded ────────────────────────────────
+     * Not a terminal. The composer calls it exactly ONCE per turn, AWAITS it
+     * while the session's lane is still held, and only then ends the reply with
+     * `complete` or `awaiting` — so a ticket filed here exists before the body
+     * that carries it is composed. Never called for a request that is not a turn
+     * (an artifact redemption, a session op) or for a turn that ends through
+     * `fail`.
+     *
+     * The wait is BOUNDED: the hook and every operation it started must settle
+     * within `turnArtifactsTimeoutMs` (default `TURN_ARTIFACTS_TIMEOUT_MS`, 5 s)
+     * and before the request's own `signal` aborts. Whichever comes first ends
+     * the hand-over: the binding is revoked, what is in flight is NOT cancelled
+     * (it may still land, stamped with this turn's session and run), the cause is
+     * reported, and the terminal is delivered. In the shared `{ agent }` shape
+     * every session waits behind this turn's lane, so the hook's I/O is paid by
+     * everyone — keep it to filing.
+     *
+     * ── Live only for its turn ─────────────────────────────────────────────────
+     * The binding is live while the hand-over is: after the composer has waited
+     * for every operation started through it (a `put` that was not awaited
+     * included), or after the bound ended the wait, it REVOKES it. A verb called
+     * later rejects with `TurnArtifactsExpiredError` — a rejection already
+     * handled, so a floating late call cannot crash the process — and is reported
+     * as `'expired'`. File inside the hook; never hold the binding.
+     *
+     * ── Never decides the reply, never silent ──────────────────────────────────
+     * A hook that throws or rejects, an operation that fails (awaited or not), the
+     * bound, the abort and a late call are all put on the serving agent's stream
+     * as `agentfootprint.artifacts.hand_over_failed { cause, op?, errorClass?,
+     * errorCode? }` — class only, stamped with the session — and the FIRST of
+     * them on the ingress record (`IngressRecord.turnArtifactsFailure`). None of
+     * them turns a delivered answer, or a stored question, into a failure.
+     * Awaiting another turn of the same standing agent from inside the hook can
+     * never finish (that turn queues behind this one); the bound ends the wait.
+  
+     * ── The scope, and what it is not ─────────────────────────────────────────
+     * The scope is the one {@link HostRequest.artifact} redemption re-composes
+     * for this request: the verified user (or the transport's own `userId` when
+     * no verifier is configured), the stored conversation's tenant and
+     * namespace, else the session rung `{ conversationId: sessionId }`. One
+     * owner of that tuple — the library — so an app cannot derive a slightly
+     * different one. It is where the DOOR redeems, which is not always where the
+     * run filed its own recording: at an unverified door a conversation that
+     * carries an identity of its own can put the recording elsewhere (the known
+     * edges are listed in `src/hosting/README.md`).
+     *
+     * Every put is stamped `origin: { runId }` with the run this turn executed,
+     * or carries no origin when it executed none (a partial answer to an input
+     * request, or its cancellation); a caller's own `origin` is always dropped.
+     * A PAUSED turn's run id names a run that files no recording — a pause is
+     * not a finished run, and the resumed run records under its own id — so a
+     * reader joining on it must say "paused, no recording", not "missing". Each
+     * filing lands on the serving agent's record as
+     * `agentfootprint.artifacts.minted` with no `tool` field, its meta naming the
+     * session and the run it was filed FOR — captured when the binding was
+     * built, never read from whichever run is live when a late fact lands.
+     *
+     * When there is nothing to bind, the value SAYS so rather than inventing a
+     * scope — see {@link TurnArtifacts}.
+     *
+     * Optional, and feature-detected: a host that does not implement it is
+     * served exactly as before.
+     *
+     * @example  File a turn's story and carry its ticket on the reply
+     *   turnArtifacts: async (turn) => {
+     *     if (!turn.bound) return;
+     *     const story = await turn.artifacts.put({ kind: 'story/turn', mediaType: 'application/json', data });
+     *     ticketForThisReply = story.ref; // the body `complete` composes next can carry it
+     *   },
+     */
+    turnArtifacts?(turn: TurnArtifacts): void | Promise<void>;
     /** End the reply with a failure. */
     fail(error: Error): void;
 }
+/**
+ * What {@link HostReply.turnArtifacts} is handed: this turn's artifact store,
+ * bound to exactly one scope — or the reason there is none.
+ *
+ * `artifacts` has the shape a tool gets as `ctx.artifacts`: five verbs, none
+ * of which takes a scope, so a binding can reach this request's scope and no
+ * other. The scope itself is deliberately NOT on the value — a tuple a host
+ * can read is a tuple a host can copy, edit and put under. The verbs work only
+ * while the hand-over is live (then `TurnArtifactsExpiredError`, already
+ * handled, reported as `'expired'`).
+ *
+ * A filing's `origin.runId` is the run the turn executed — none for a turn that
+ * executed none. On a PAUSED turn that run files no recording (a pause is not a
+ * finished run; the resumed run records under its own id), so a reader joining
+ * a filing to "its recording" by run id must read the absence as "paused, no
+ * recording", never as "missing".
+ *
+ * `bound: false` says why nothing was bound, checked in this order:
+ *  - `'no-session'` — the request named no session. An anonymous run scopes
+ *    its artifacts to its own run id, which no later request can present, so
+ *    there is no scope to bind — and none is invented. Wins over `'no-store'`
+ *    when both apply.
+ *  - `'no-store'` — the serving agent has no artifact store.
+ */
+export type TurnArtifacts = {
+    readonly bound: true;
+    readonly artifacts: ToolArtifacts;
+} | {
+    readonly bound: false;
+    readonly reason: 'no-session' | 'no-store';
+};
 /**
  * What you hand {@link AgentHost.serve}. Throwing is treated exactly like
  * calling `reply.fail(err)` — a handler that throws is a failed request, never
@@ -264,6 +379,35 @@ export interface HostHandle {
      */
     close(): Promise<void>;
 }
+/**
+ * A request the HOST refused before any handler saw it — the door guard's
+ * decision about a caller: a cross-site shape, a Host this door does not answer
+ * for, a session id it will not carry.
+ *
+ * Only decisions travel here. A body that is merely malformed (unparseable
+ * JSON, an unknown wire op, a body over the ceiling) is a broken request, not a
+ * decision about who is knocking, and stays the transport's own 4xx.
+ *
+ * Carries the refusal's class and the fact of a credential — never a header,
+ * never the credential, never the session id. It is what
+ * {@link AgentHost.onRefusal} hands a listener, and a listener is free to log
+ * all of it.
+ */
+export interface HostRefusal {
+    /**
+     * Which door refused: `'request'` — the one-exchange door, refused before
+     * the body was read or before the handler was called (which of the
+     * composer's turn / session-op / artifact doors it was headed for is not
+     * recorded) — or `'conversation'`, an upgrade refused before the 101.
+     */
+    readonly door: 'request' | 'conversation';
+    /** The named refusal the caller was answered with. Its `code` is stable. */
+    readonly error: Error & {
+        readonly code: string;
+    };
+    /** Whether an `authorization: Bearer …` credential was PRESENT. Never its value. */
+    readonly bearerPresent: boolean;
+}
 /**
  * The port: something that can carry requests to one handler and carry its
  * replies back.
@@ -278,6 +422,20 @@ export interface AgentHost {
     readonly capabilities: readonly HostCapability[];
     /** Start serving. Resolves once the host is actually live. */
     serve(handler: HostHandler): Promise<HostHandle>;
+    /**
+     * Hear about every request this host refuses BEFORE a handler sees it — on
+     * any of its doors, the conversation door included. Returns the way to stop
+     * listening.
+     *
+     * Optional, and feature-detected: a host that refuses nothing on its own
+     * has nothing to report. Every host built on `httpHost` has it, and
+     * `standingAgent` subscribes whenever `onIngressDecision` is set — which is
+     * how a forged request the host turned away still lands in the ingress
+     * record, though no run, no handler and no verifier ever saw it.
+     *
+     * A listener that throws is contained: the refusal is still answered.
+     */
+    onRefusal?(listener: (refusal: HostRefusal) => void): Unsubscribe;
 }
 /**
  * A door that stays open: one session-scoped, two-way channel.
@@ -1092,10 +1250,17 @@ export interface StandingAgentBaseOptions<TH extends HostHandle = HostHandle> {
      * header, never a claim set, never an error's message. See
      * {@link IngressRecord} for the field-by-field contract and for the one thing
      * it deliberately does not cover (a body the transport's own wire grammar
-     * refused before this composer ever saw it).
+     * refused as malformed before this composer ever saw it).
+     *
+     * The HOST's own refusals are on it too: set this, and the composer
+     * subscribes to the host's `onRefusal`, so a forged request the door guard
+     * turned away, or a session id over the bound, is recorded
+     * (`'cross-site-refused'` / `'refused'`, door `'request'` or
+     * `'conversation'`) though no handler ever saw it.
      *
-     * Unset — the default — nothing is built, nothing is wrapped, and the reply
-     * the handler uses is the host's own object, to the byte.
+     * Unset — the default — nothing is built, nothing is wrapped, nothing is
+     * subscribed, and the reply the handler uses is the host's own object, to the
+     * byte.
      *
      * @example
      *   onIngressDecision: (record) => {
@@ -1159,10 +1324,38 @@ export interface StandingAgentBaseOptions<TH extends HostHandle = HostHandle> {
      *   await standingAgent({ agent, sessions, host, shutdownOn: ['SIGTERM', 'SIGINT'] });
      */
     readonly shutdownOn?: readonly NodeJS.Signals[];
+    /**
+     * How long a turn's artifact hand-over (`HostReply.turnArtifacts`) may hold
+     * the reply — the hook AND every operation it started — before the composer
+     * stops waiting. Default {@link TURN_ARTIFACTS_TIMEOUT_MS} (5 s). The
+     * request's own `signal` ends the wait earlier when the caller hangs up.
+     *
+     * On expiry the binding is revoked, nothing in flight is cancelled (it may
+     * still land, attributed to its own session and run), the cause is reported
+     * (`agentfootprint.artifacts.hand_over_failed { cause: 'timeout' }`), the
+     * terminal is delivered and the lane released — so one host's hung store or
+     * hook can hold neither every other session (the shared shape), nor a pooled
+     * lane past `maxActiveSessions`, nor `close()` on the SIGTERM path.
+     *
+     * Must be a positive, finite number of milliseconds — a bound that can never
+     * fire is not a bound; anything else is refused at construction. Only read
+     * when the host implements the hook.
+     */
+    readonly turnArtifactsTimeoutMs?: number;
 }
 /** How many sessions a `agentFactory` pool holds before it evicts the least
  *  recently used one. See {@link StandingAgentPoolOptions.maxActiveSessions}. */
 export declare const DEFAULT_MAX_ACTIVE_SESSIONS = 100;
+/**
+ * How long a turn's artifact hand-over may hold its reply by default — the
+ * hook plus the operations it started. Five seconds: the order of
+ * `TOOL_TEARDOWN_TIMEOUT_MS`, and for the same reason — both sit on the
+ * shutdown path (`close()` drains in-flight requests), where an unbounded wait
+ * turns a container stop into a wait for SIGKILL — while leaving a store room
+ * for a few ordinary writes. See
+ * {@link StandingAgentBaseOptions.turnArtifactsTimeoutMs}.
+ */
+export declare const TURN_ARTIFACTS_TIMEOUT_MS = 5000;
 /**
  * One shared agent, serving every session — the original shape, and still the
  * right one for most deployments.

package/dist/types/hosting/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/hosting/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE9F,YAAY,EAAE,WAAW,EAAE,CAAC;AAI5B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,cAAc,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IACxC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,yCAAyC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,SAAS;IACxB,kDAAkD;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC5C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC3C;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,oCAAoC;IACpC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3F,mBAAmB;AACnB,MAAM,WAAW,UAAU;IACzB;;;;;;;;;;;OAWG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,8DAA8D;IAC9D,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAClD;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;;;OAOG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,WAAW,CAAC;IAClD;;;;OAIG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,WAAW,CAAC;IAC9D;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;IAC/C,iDAAiD;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;OAKG;IACH,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACvE;AAID;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAE1E,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,sBAAsB;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,SAAS;IACxB,qFAAqF;IACrF,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,2CAA2C;IAC3C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,wFAAwF;IACxF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,mFAAmF;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;IAC7B;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,CAAC;AAEzE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IACpE;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuDG;IACH,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpF;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkEG;IACH,SAAS,CAAC,IAAI,gBAAgB,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,mBAAmB,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC7F;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,0BAA0B;AAC1B,MAAM,WAAW,kBAAkB;IACjC,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC;uCACuC;AACvC,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;WAEW;AACX,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,oCAAoC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,wBAAwB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU;IAC1E,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG;QAAE,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC;IACxE,8DAA8D;IAC9D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAChD;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC;IACzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,gBAAgB,GAAG,MAAM,CAAC;IACxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,CAAC,OAAO,EAAE,CAAC;CACjD;AAED;iFACiF;AACjF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,WAAW,0BAA0B,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,CAC5E,SAAQ,wBAAwB,CAAC,EAAE,CAAC;IACpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC;CACxC;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,CAC1E,SAAQ,wBAAwB,CAAC,EAAE,CAAC;IACpC,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC;IACnC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oBAAoB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,IAC/D,0BAA0B,CAAC,EAAE,CAAC,GAC9B,wBAAwB,CAAC,EAAE,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/hosting/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE9F,YAAY,EAAE,WAAW,EAAE,CAAC;AAI5B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,cAAc,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IACxC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,kBAAkB,CAAC;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,yCAAyC;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,SAAS;IACxB,kDAAkD;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC5C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC3C;;;;;;;;;;;;;OAaG;IACH,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4EG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,oCAAoC;IACpC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,UAAU,CAAA;CAAE,CAAC;AAE1E;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3F,mBAAmB;AACnB,MAAM,WAAW,UAAU;IACzB;;;;;;;;;;;OAWG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,cAAc,CAAC;IAC1C,4EAA4E;IAC5E,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,oFAAoF;IACpF,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,8DAA8D;IAC9D,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,IAAI,GAAG,WAAW,CAAC;CACnE;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;OAQG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;;;;OAOG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,WAAW,CAAC;IAClD;;;;OAIG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,WAAW,CAAC;IAC9D;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,GAAG,WAAW,CAAC;IAC/C,iDAAiD;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,YAAY,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;OAKG;IACH,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACvE;AAID;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAE1E,mFAAmF;AACnF,MAAM,WAAW,oBAAoB;IACnC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,+BAA+B;IAC/B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,sBAAsB;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,SAAS;IACxB,qFAAqF;IACrF,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,2CAA2C;IAC3C,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,wFAAwF;IACxF,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,mFAAmF;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;IAC7B;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,CAAC;AAEzE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IACpE;;;;;;;;;;;;;;;;;;;OAmBG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,MAAM,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuDG;IACH,UAAU,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACpF;;;;;;;;;;;;;;;;;OAiBG;IACH,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkEG;IACH,SAAS,CAAC,IAAI,gBAAgB,CAAC;CAChC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,mBAAmB,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC7F;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,WAAW,mBAAmB;IAClC;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,0BAA0B;AAC1B,MAAM,WAAW,kBAAkB;IACjC,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC;uCACuC;AACvC,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;WAEW;AACX,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,oCAAoC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,wBAAwB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU;IAC1E,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG;QAAE,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;KAAE,CAAC;IACxE,8DAA8D;IAC9D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IACrD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAoCG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAChD;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC;IACzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC;IACrC;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,gBAAgB,GAAG,MAAM,CAAC;IACxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,CAAC,OAAO,EAAE,CAAC;IAChD;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAC1C;AAED;iFACiF;AACjF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,WAAW,0BAA0B,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,CAC5E,SAAQ,wBAAwB,CAAC,EAAE,CAAC;IACpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,kFAAkF;IAClF,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC;CACxC;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,CAC1E,SAAQ,wBAAwB,CAAC,EAAE,CAAC;IACpC,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,KAAK,CAAC;IACnC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,oBAAoB,CAAC,EAAE,SAAS,UAAU,GAAG,UAAU,IAC/D,0BAA0B,CAAC,EAAE,CAAC,GAC9B,wBAAwB,CAAC,EAAE,CAAC,CAAC"}

package/dist/types/hosting/webSocketConversation.d.ts

@@ -9,6 +9,11 @@
  * port-shaped lives in `types.ts`; this file is the join.
  *
  * ── The laws it keeps, all of them pinned by tests ───────────────────────────
+ *  - **A handshake the door guard refuses never gets a 101.** A WebSocket is
+ *    not bound by the same-origin policy and its browser API cannot set a
+ *    header, so there is no preflight to force: the host's guard judges Host,
+ *    Origin and Fetch metadata on the handshake itself, and the session id the
+ *    dialect read is bounded before the channel opens.
  *  - **A path this door does not own is not touched.** `node:http` calls EVERY
  *    `'upgrade'` listener for every upgrade, exactly as it calls every
  *    `'request'` listener — so a caller's own protocol lives beside this one on
@@ -40,7 +45,8 @@
 /// <reference types="node" />
 import type { IncomingMessage } from 'node:http';
 import type { Duplex } from 'node:stream';
-import type { ConversationHandler, ConversationLimits } from './types.js';
+import { type DoorGuard } from './doorGuard.js';
+import type { ConversationHandler, ConversationLimits, HostRefusal } from './types.js';
 /**
  * What a wire read out of one handshake — the conversation half of a
  * deployment's dialect.
@@ -83,6 +89,14 @@ export interface ConversationDoorOptions {
     readonly handler: ConversationHandler;
     /** Whether the host is still taking conversations — false after `close()`. */
     readonly accepting: () => boolean;
+    /**
+     * The host's door guard — Host and Origin (and the browser's Fetch
+     * metadata) judged on the handshake, BEFORE the 101. Absent, no handshake is
+     * judged, which is the conversation door as it was before the guard.
+     */
+    readonly guard?: DoorGuard;
+    /** Told about every handshake this door refuses on the guard's or the session bound's word. */
+    readonly onRefusal?: (refusal: HostRefusal) => void;
 }
 /** What a handshake dialect may read. Deliberately the same shape a request wire gets, minus the body. */
 export interface HandshakeFacts {