ftown 0.0.0-stage → 0.19.41

package/bin/ftown-sessions

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+# Dev/repo launcher — production copy lives at ~/.ftown/ftown-sessions
+set -euo pipefail
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+exec node "${ROOT}/dist/ftown-sessions-cli.js" "$@"

package/dist/agent-commands.d.ts

@@ -0,0 +1,19 @@
+import type { ShellType } from './types.js';
+export { buildOpencodeCommand, shellQuote, buildCursorAgentCommand, buildCodexCommand, buildGrokCommand, buildMuseCommand, buildPiCommand, buildKimiCodeCommand, } from './harness-registry.js';
+export interface BuildSessionCommandInput {
+    shellType?: ShellType;
+    workingDir?: string;
+    model?: string;
+    claudeSessionId?: string;
+    cursorSessionId?: string;
+    codexSessionId?: string;
+    piSessionId?: string;
+    opencodeSessionId?: string;
+    museSessionId?: string;
+    command?: string;
+    /** Initial prompt passed as a CLI argument — avoids racing the TUI with typed input. */
+    initialPrompt?: string;
+    /** Resurrection resume — workdir-based harnesses (Pi/kimi-code) append their continue flag; id-based harnesses (incl. muse) ignore it and key off their id fields. */
+    resume?: boolean;
+}
+export declare function buildSessionCommand(input: BuildSessionCommandInput): string;

package/dist/agent-commands.js

@@ -0,0 +1,15 @@
+import { HARNESSES } from './harness-registry.js';
+// The per-harness builders live in the registry; re-exported here so existing
+// importers (and tests) keep their import paths.
+export { buildOpencodeCommand, shellQuote, buildCursorAgentCommand, buildCodexCommand, buildGrokCommand, buildMuseCommand, buildPiCommand, buildKimiCodeCommand, } from './harness-registry.js';
+export function buildSessionCommand(input) {
+    if (input.command?.trim()) {
+        return input.command.trim();
+    }
+    const shellType = input.shellType ?? 'claude';
+    // Runtime shellType may come from unvalidated JSON — unknown values fall back
+    // to the claude launch, exactly like the old if/else chain's final branch.
+    const spec = HARNESSES[shellType] ?? HARNESSES.claude;
+    return spec.buildCommand(input);
+}
+//# sourceMappingURL=agent-commands.js.map

package/dist/agent-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-commands.js","sourceRoot":"","sources":["../src/agent-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAKlD,8EAA8E;AAC9E,iDAAiD;AACjD,OAAO,EACL,oBAAoB,EACpB,UAAU,EACV,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAmB/B,MAAM,UAAU,mBAAmB,CAAC,KAA+B;IACjE,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC;IAC9C,8EAA8E;IAC9E,2EAA2E;IAC3E,MAAM,IAAI,GAAiB,SAAyC,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC;IACpG,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC"}

package/dist/attention-events.d.ts

@@ -0,0 +1,32 @@
+export type AttentionType = 'permission_prompt' | 'elicitation_dialog' | 'agent_needs_input' | 'ask_user';
+export type Resolution = 'manual' | 'user_prompt' | 'elicitation_complete' | 'session_end';
+export interface Activity {
+    state: 'thinking' | 'tool_use' | 'idle' | 'unknown';
+    lastActivityAt?: string;
+}
+export interface AttentionItem {
+    id: string;
+    sequence: number;
+    type: AttentionType;
+    title: string;
+    message: string;
+    createdAt: string;
+    lastSeenAt: string;
+    occurrences: number;
+    acknowledgedAt?: string;
+    resolvedAt?: string;
+    resolution?: Resolution;
+}
+export interface AttentionObservation {
+    activity?: Activity['state'];
+    attention?: {
+        type: AttentionType;
+        title: string;
+        message: string;
+        sourceId?: string;
+    };
+    resolve?: Exclude<Resolution, 'manual'>;
+}
+/** Only the selected human-facing excerpt crosses the API; never the hook payload. */
+export declare function sanitizeAttentionText(value: string, maxLength: number): string;
+export declare function classifyAttentionHook(eventName: string, data: Record<string, unknown>): AttentionObservation;

package/dist/attention-events.js

@@ -0,0 +1,67 @@
+/** Only the selected human-facing excerpt crosses the API; never the hook payload. */
+export function sanitizeAttentionText(value, maxLength) {
+    return value
+        .replace(/\x1b\][^\x07]*(?:\x07|\x1b\\)/g, '')
+        .replace(/\x1b\[[0-?]*[ -/]*[@-~]/g, '')
+        .replace(/[\x00-\x08\x0b-\x1f\x7f-\x9f]/g, '')
+        .replace(/\b(Bearer\s+)[A-Za-z0-9._~+\/-]+=*/gi, '$1[redacted]')
+        .replace(/\b((?:[A-Z_]*(?:API_KEY|AUTH_TOKEN|ACCESS_TOKEN|SECRET|PASSWORD)[A-Z_]*|authorization)\s*[:=]\s*)[^\s,;]+/gi, '$1[redacted]')
+        .replace(/\b(?:sk-(?:ant-)?[A-Za-z0-9_-]{12,}|gh[pousr]_[A-Za-z0-9]{20,})\b/g, '[redacted]')
+        .trim()
+        .slice(0, maxLength);
+}
+const askTools = new Set(['askuserquestion', 'askquestion', 'askuser', 'requestuserinput', 'ftownaskuser']);
+const notificationTypes = new Set(['permission_prompt', 'elicitation_dialog', 'agent_needs_input']);
+const text = (value) => typeof value === 'string' && value.trim() ? value : undefined;
+function question(data) {
+    const raw = data.tool_input ?? data.toolInput ?? data.input;
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return;
+    const input = raw;
+    const direct = text(input.question) ?? text(input.prompt) ?? text(input.message);
+    if (direct)
+        return direct;
+    const first = Array.isArray(input.questions) ? input.questions[0] : undefined;
+    if (!first || typeof first !== 'object' || Array.isArray(first))
+        return;
+    const item = first;
+    return text(item.question) ?? text(item.prompt) ?? text(item.message);
+}
+export function classifyAttentionHook(eventName, data) {
+    const observation = {};
+    if (['UserPromptSubmit', 'beforeSubmitPrompt', 'sessionStart'].includes(eventName))
+        observation.activity = 'thinking';
+    if (['PreToolUse', 'preToolUse', 'beforeShellExecution', 'beforeMCPExecution'].includes(eventName))
+        observation.activity = 'tool_use';
+    if (['PostToolUse', 'postToolUse', 'afterShellExecution', 'afterFileEdit', 'afterMCPExecution'].includes(eventName))
+        observation.activity = 'thinking';
+    if (['Stop', 'stop', 'SessionEnd', 'sessionEnd', 'postToolUseFailure'].includes(eventName))
+        observation.activity = 'idle';
+    if (['UserPromptSubmit', 'beforeSubmitPrompt'].includes(eventName))
+        observation.resolve = 'user_prompt';
+    if (['SessionEnd', 'sessionEnd'].includes(eventName))
+        observation.resolve = 'session_end';
+    if (eventName === 'Notification' && ['elicitation_complete', 'elicitation_response'].includes(String(data.notification_type))) {
+        observation.resolve = 'elicitation_complete';
+    }
+    const sourceId = text(data.notification_id) ?? text(data.tool_use_id) ?? text(data.event_id);
+    if (eventName === 'Notification' && notificationTypes.has(String(data.notification_type))) {
+        observation.attention = {
+            type: data.notification_type,
+            title: sanitizeAttentionText(text(data.title) ?? 'Session needs your input', 200),
+            message: sanitizeAttentionText(text(data.message) ?? 'Open the session to respond.', 2000),
+            ...(sourceId ? { sourceId: sourceId.slice(0, 200) } : {}),
+        };
+    }
+    const tool = (text(data.tool_name) ?? text(data.toolName))?.split(/\.|\/|::|__/).at(-1)?.replace(/[^a-z0-9]/gi, '').toLowerCase();
+    if (['PreToolUse', 'preToolUse'].includes(eventName) && tool && askTools.has(tool)) {
+        observation.attention = {
+            type: 'ask_user',
+            title: 'Session is asking a question',
+            message: sanitizeAttentionText(question(data) ?? 'Open the session to respond.', 2000),
+            ...(sourceId ? { sourceId: sourceId.slice(0, 200) } : {}),
+        };
+    }
+    return observation;
+}
+//# sourceMappingURL=attention-events.js.map

package/dist/attention-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attention-events.js","sourceRoot":"","sources":["../src/attention-events.ts"],"names":[],"mappings":"AAyBA,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,SAAiB;IACpE,OAAO,KAAK;SACT,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC;SAC7C,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;SACvC,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC;SAC7C,OAAO,CAAC,sCAAsC,EAAE,cAAc,CAAC;SAC/D,OAAO,CAAC,6GAA6G,EAAE,cAAc,CAAC;SACtI,OAAO,CAAC,oEAAoE,EAAE,YAAY,CAAC;SAC3F,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,aAAa,EAAE,SAAS,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC,CAAC;AAC5G,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AACpG,MAAM,IAAI,GAAG,CAAC,KAAc,EAAsB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAEnH,SAAS,QAAQ,CAAC,IAA6B;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC;IAC5D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO;IAClE,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjF,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,KAAK,GAAY,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO;IACxE,MAAM,IAAI,GAAG,KAAgC,CAAC;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,IAA6B;IACpF,MAAM,WAAW,GAAyB,EAAE,CAAC;IAC7C,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,WAAW,CAAC,QAAQ,GAAG,UAAU,CAAC;IACtH,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,WAAW,CAAC,QAAQ,GAAG,UAAU,CAAC;IACtI,IAAI,CAAC,aAAa,EAAE,aAAa,EAAE,qBAAqB,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,WAAW,CAAC,QAAQ,GAAG,UAAU,CAAC;IACvJ,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,WAAW,CAAC,QAAQ,GAAG,MAAM,CAAC;IAC1H,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,WAAW,CAAC,OAAO,GAAG,aAAa,CAAC;IACxG,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,WAAW,CAAC,OAAO,GAAG,aAAa,CAAC;IAC1F,IAAI,SAAS,KAAK,cAAc,IAAI,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;QAC9H,WAAW,CAAC,OAAO,GAAG,sBAAsB,CAAC;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7F,IAAI,SAAS,KAAK,cAAc,IAAI,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;QAC1F,WAAW,CAAC,SAAS,GAAG;YACtB,IAAI,EAAE,IAAI,CAAC,iBAAkC;YAC7C,KAAK,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,0BAA0B,EAAE,GAAG,CAAC;YACjF,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,8BAA8B,EAAE,IAAI,CAAC;YAC1F,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAClI,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,WAAW,CAAC,SAAS,GAAG;YACtB,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,8BAA8B;YACrC,OAAO,EAAE,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,8BAA8B,EAAE,IAAI,CAAC;YACtF,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/attention-store.d.ts

@@ -0,0 +1,39 @@
+import { type Activity, type AttentionItem } from './attention-events.js';
+export interface AttentionPage {
+    events: AttentionItem[];
+    cursor: string;
+    hasMore: boolean;
+    cursorReset: boolean;
+    activity: Activity;
+    openCount: number;
+    latest?: AttentionItem;
+}
+export interface AttentionReadOptions {
+    cursor?: string;
+    limit?: number;
+    includeResolved?: boolean;
+    actionableOnly?: boolean;
+}
+export declare class AttentionError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(code: string, message: string, status?: number);
+}
+/** Single-process, serialized snapshots. Missing/corrupt files never masquerade as recovered history. */
+export declare class AttentionStore {
+    private resolveDir;
+    private resolvedRetention;
+    private locks;
+    private listeners;
+    constructor(resolveDir: (sessionId: string) => string, resolvedRetention?: number);
+    private withLock;
+    private load;
+    private save;
+    private cursor;
+    private parseCursor;
+    private prune;
+    record(id: string, eventName: string, data: Record<string, unknown>): Promise<void>;
+    list(id: string, options?: AttentionReadOptions): Promise<AttentionPage>;
+    mutate(id: string, ids: string[], operation: 'ack' | 'resolve', reason?: string): Promise<AttentionItem[]>;
+    wait(id: string, options: AttentionReadOptions, waitSeconds: number, signal?: AbortSignal): Promise<AttentionPage>;
+}

package/dist/attention-store.js

@@ -0,0 +1,234 @@
+import { open, readFile, rename, rm } from 'node:fs/promises';
+import { join } from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+import { z } from 'zod';
+import { classifyAttentionHook, sanitizeAttentionText } from './attention-events.js';
+const itemSchema = z.object({
+    id: z.string(), sequence: z.number().int().positive(),
+    type: z.enum(['permission_prompt', 'elicitation_dialog', 'agent_needs_input', 'ask_user']),
+    title: z.string().max(200), message: z.string().max(2000),
+    createdAt: z.string(), lastSeenAt: z.string(), occurrences: z.number().int().positive(),
+    acknowledgedAt: z.string().optional(), resolvedAt: z.string().optional(),
+    resolution: z.enum(['manual', 'user_prompt', 'elicitation_complete', 'session_end']).optional(),
+    fingerprint: z.string(), sourceId: z.string().optional(), reason: z.string().optional(),
+}).strict();
+const ledgerSchema = z.object({
+    version: z.literal(1), epoch: z.string().uuid(), sequence: z.number().int().nonnegative(),
+    prunedThrough: z.number().int().nonnegative(),
+    activity: z.object({ state: z.enum(['thinking', 'tool_use', 'idle', 'unknown']), lastActivityAt: z.string().optional() }).strict(),
+    events: z.array(itemSchema),
+}).strict();
+export class AttentionError extends Error {
+    code;
+    status;
+    constructor(code, message, status = 400) {
+        super(message);
+        this.code = code;
+        this.status = status;
+    }
+}
+const publicItem = ({ fingerprint: _fingerprint, sourceId: _sourceId, reason: _reason, ...item }) => item;
+/** Single-process, serialized snapshots. Missing/corrupt files never masquerade as recovered history. */
+export class AttentionStore {
+    resolveDir;
+    resolvedRetention;
+    locks = new Map();
+    listeners = new Map();
+    constructor(resolveDir, resolvedRetention = 500) {
+        this.resolveDir = resolveDir;
+        this.resolvedRetention = resolvedRetention;
+    }
+    withLock(id, fn) {
+        if (!/^[a-zA-Z0-9_-]+$/.test(id))
+            return Promise.reject(new AttentionError('invalid_session', 'Invalid session ID'));
+        const previous = this.locks.get(id) ?? Promise.resolve();
+        const next = previous.then(fn, fn);
+        const settled = next.catch(() => undefined);
+        this.locks.set(id, settled);
+        void settled.then(() => { if (this.locks.get(id) === settled)
+            this.locks.delete(id); });
+        return next;
+    }
+    async load(id) {
+        try {
+            return ledgerSchema.parse(JSON.parse(await readFile(join(this.resolveDir(id), 'attention.json'), 'utf8')));
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                const ledger = { version: 1, epoch: randomUUID(), sequence: 0, prunedThrough: 0, activity: { state: 'unknown' }, events: [] };
+                await this.save(id, ledger);
+                return ledger;
+            }
+            throw new AttentionError('attention_storage_error', 'Attention history could not be read', 500);
+        }
+    }
+    async save(id, ledger) {
+        const dir = this.resolveDir(id);
+        const file = join(dir, 'attention.json');
+        const tmp = `${file}.${randomUUID()}.tmp`;
+        try {
+            // Never mkdir here: deleting a session must not be undone by an in-flight hook.
+            const handle = await open(tmp, 'wx', 0o600);
+            try {
+                await handle.writeFile(JSON.stringify(ledger), 'utf8');
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            await rename(tmp, file);
+            const directory = await open(dir, 'r');
+            try {
+                await directory.sync();
+            }
+            finally {
+                await directory.close();
+            }
+        }
+        catch {
+            await rm(tmp, { force: true }).catch(() => undefined);
+            throw new AttentionError('attention_storage_error', 'Attention history could not be persisted', 500);
+        }
+    }
+    cursor(id, ledger, sequence) {
+        return Buffer.from(JSON.stringify({ v: 1, session: id, epoch: ledger.epoch, sequence })).toString('base64url');
+    }
+    parseCursor(id, cursor) {
+        try {
+            if (cursor.length > 1000 || !/^[A-Za-z0-9_-]+$/.test(cursor))
+                throw new Error();
+            const value = z.object({ v: z.literal(1), session: z.literal(id), epoch: z.string().uuid(), sequence: z.number().int().nonnegative() }).strict().parse(JSON.parse(Buffer.from(cursor, 'base64url').toString('utf8')));
+            return value;
+        }
+        catch {
+            throw new AttentionError('invalid_cursor', 'Cursor is malformed or belongs to another session');
+        }
+    }
+    prune(ledger) {
+        const resolved = ledger.events.filter((event) => event.resolvedAt).sort((a, b) => b.sequence - a.sequence);
+        const drop = new Set(resolved.slice(this.resolvedRetention).map((event) => event.id));
+        for (const event of ledger.events)
+            if (drop.has(event.id))
+                ledger.prunedThrough = Math.max(ledger.prunedThrough, event.sequence);
+        ledger.events = ledger.events.filter((event) => !drop.has(event.id));
+    }
+    async record(id, eventName, data) {
+        const observation = classifyAttentionHook(eventName, data);
+        if (!observation.activity && !observation.attention && !observation.resolve)
+            return;
+        await this.withLock(id, async () => {
+            const ledger = await this.load(id);
+            const timestamp = new Date().toISOString();
+            if (observation.activity)
+                ledger.activity = { state: observation.activity, lastActivityAt: timestamp };
+            if (observation.resolve)
+                for (const event of ledger.events) {
+                    if (event.resolvedAt || (observation.resolve === 'elicitation_complete' && event.type !== 'elicitation_dialog'))
+                        continue;
+                    event.resolvedAt = timestamp;
+                    event.resolution = observation.resolve;
+                }
+            let created = false;
+            if (observation.attention) {
+                const { sourceId: rawSourceId, ...attention } = observation.attention;
+                const sourceId = rawSourceId ? createHash('sha256').update(rawSourceId).digest('hex') : undefined;
+                const fingerprint = createHash('sha256').update(JSON.stringify(attention)).digest('hex');
+                const existing = ledger.events.find((event) => !event.resolvedAt && (sourceId ? event.sourceId === sourceId : event.fingerprint === fingerprint));
+                if (existing) {
+                    existing.lastSeenAt = timestamp;
+                    existing.occurrences++;
+                }
+                else {
+                    ledger.events.push({ ...attention, id: randomUUID(), sequence: ++ledger.sequence, createdAt: timestamp, lastSeenAt: timestamp, occurrences: 1, fingerprint, ...(sourceId ? { sourceId } : {}) });
+                    created = true;
+                }
+            }
+            this.prune(ledger);
+            await this.save(id, ledger);
+            if (created)
+                for (const listener of this.listeners.get(id) ?? [])
+                    listener();
+        });
+    }
+    async list(id, options = {}) {
+        return this.withLock(id, async () => {
+            const ledger = await this.load(id);
+            const incoming = options.cursor ? this.parseCursor(id, options.cursor) : undefined;
+            const cursorReset = !!incoming && (incoming.epoch !== ledger.epoch || incoming.sequence < ledger.prunedThrough || incoming.sequence > ledger.sequence);
+            const after = incoming && !cursorReset ? incoming.sequence : 0;
+            const limit = Math.min(100, Math.max(1, options.limit ?? 50));
+            const eligible = ledger.events.filter((event) => event.sequence > after && (options.includeResolved || !event.resolvedAt) && (!options.actionableOnly || (!event.resolvedAt && !event.acknowledgedAt))).sort((a, b) => a.sequence - b.sequence);
+            const events = eligible.slice(0, limit);
+            const hasMore = eligible.length > events.length;
+            // Do not skip records omitted by this page; filtered-out rows do not block later actionable events.
+            const sequence = hasMore ? events.at(-1).sequence : ledger.sequence;
+            return { events: events.map(publicItem), cursor: this.cursor(id, ledger, sequence), hasMore, cursorReset, activity: { ...ledger.activity }, openCount: ledger.events.filter((event) => !event.resolvedAt).length, ...(ledger.events.filter((event) => !event.resolvedAt).at(-1) ? { latest: publicItem(ledger.events.filter((event) => !event.resolvedAt).at(-1)) } : {}) };
+        });
+    }
+    async mutate(id, ids, operation, reason) {
+        return this.withLock(id, async () => {
+            const ledger = await this.load(id);
+            const wanted = [...new Set(ids)];
+            if (!wanted.length || wanted.length > 100 || wanted.some((eventId) => !ledger.events.some((event) => event.id === eventId))) {
+                throw new AttentionError('unknown_attention', 'One or more attention IDs are unknown');
+            }
+            const timestamp = new Date().toISOString();
+            const result = wanted.map((eventId) => ledger.events.find((event) => event.id === eventId));
+            for (const event of result) {
+                if (operation === 'ack' && !event.acknowledgedAt)
+                    event.acknowledgedAt = timestamp;
+                if (operation === 'resolve' && !event.resolvedAt) {
+                    event.resolvedAt = timestamp;
+                    event.resolution = 'manual';
+                    if (reason)
+                        event.reason = sanitizeAttentionText(reason, 500);
+                }
+            }
+            const output = result.map(publicItem);
+            this.prune(ledger);
+            await this.save(id, ledger);
+            return output;
+        });
+    }
+    async wait(id, options, waitSeconds, signal) {
+        const deadline = Date.now() + Math.min(25, Math.max(0, waitSeconds)) * 1000;
+        // Install before the first read so a committed event cannot fall between read and listener setup.
+        let notify;
+        const listeners = this.listeners.get(id) ?? new Set();
+        const listener = () => notify?.();
+        listeners.add(listener);
+        this.listeners.set(id, listeners);
+        try {
+            while (true) {
+                if (signal?.aborted)
+                    throw new AttentionError('cancelled', 'Attention wait cancelled', 499);
+                let wake;
+                const change = new Promise((resolve) => { wake = resolve; });
+                notify = wake;
+                const page = await this.list(id, { ...options, actionableOnly: true, includeResolved: false });
+                if (page.events.length || Date.now() >= deadline)
+                    return page;
+                let timer;
+                const cancel = () => wake();
+                try {
+                    const timeout = new Promise((resolve) => { timer = setTimeout(resolve, Math.max(0, deadline - Date.now())); });
+                    signal?.addEventListener('abort', cancel, { once: true });
+                    if (signal?.aborted)
+                        wake();
+                    await Promise.race([change, timeout]);
+                }
+                finally {
+                    if (timer)
+                        clearTimeout(timer);
+                    signal?.removeEventListener('abort', cancel);
+                }
+            }
+        }
+        finally {
+            listeners.delete(listener);
+            if (!listeners.size)
+                this.listeners.delete(id);
+        }
+    }
+}
+//# sourceMappingURL=attention-store.js.map

package/dist/attention-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attention-store.js","sourceRoot":"","sources":["../src/attention-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAsD,MAAM,uBAAuB,CAAC;AAEzI,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC;IAC1F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,sBAAsB,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACxF,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAClI,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAC;AAOZ,MAAM,OAAO,cAAe,SAAQ,KAAK;IAClB;IAAwC;IAA7D,YAAqB,IAAY,EAAE,OAAe,EAAW,SAAS,GAAG;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAAvE,SAAI,GAAJ,IAAI,CAAQ;QAA4B,WAAM,GAAN,MAAM,CAAM;IAAoB,CAAC;CAC/F;AACD,MAAM,UAAU,GAAG,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAc,EAAiB,EAAE,CAAC,IAAI,CAAC;AAErI,yGAAyG;AACzG,MAAM,OAAO,cAAc;IAGL;IAAmD;IAF/D,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IACvD,YAAoB,UAAyC,EAAU,oBAAoB,GAAG;QAA1E,eAAU,GAAV,UAAU,CAA+B;QAAU,sBAAiB,GAAjB,iBAAiB,CAAM;IAAG,CAAC;IAE1F,QAAQ,CAAI,EAAU,EAAE,EAAoB;QAClD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACrH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC5B,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IACO,KAAK,CAAC,IAAI,CAAC,EAAU;QAC3B,IAAI,CAAC;YAAC,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACnH,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,MAAM,GAAW,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBACtI,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBAC5B,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,cAAc,CAAC,yBAAyB,EAAE,qCAAqC,EAAE,GAAG,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IACO,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,MAAc;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;QAC1C,IAAI,CAAC;YACH,gFAAgF;YAChF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC;gBAAC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;gBAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;oBAC5E,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YACjC,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACxB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC;gBAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,IAAI,cAAc,CAAC,yBAAyB,EAAE,0CAA0C,EAAE,GAAG,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;IACO,MAAM,CAAC,EAAU,EAAE,MAAc,EAAE,QAAgB;QACzD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACjH,CAAC;IACO,WAAW,CAAC,EAAU,EAAE,MAAc;QAC5C,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YAChF,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtN,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,mDAAmD,CAAC,CAAC;QAAC,CAAC;IAC9G,CAAC;IACO,KAAK,CAAC,MAAc;QAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3G,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAAE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,SAAiB,EAAE,IAA6B;QACvE,MAAM,WAAW,GAAG,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,CAAC,QAAQ,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,OAAO;YAAE,OAAO;QACpF,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,WAAW,CAAC,QAAQ;gBAAE,MAAM,CAAC,QAAQ,GAAG,EAAE,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;YACvG,IAAI,WAAW,CAAC,OAAO;gBAAE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAC3D,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,OAAO,KAAK,sBAAsB,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,CAAC;wBAAE,SAAS;oBAC1H,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC;oBAC7B,KAAK,CAAC,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC;gBACzC,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC1B,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC;gBACtE,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClG,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC;gBAClJ,IAAI,QAAQ,EAAE,CAAC;oBAAC,QAAQ,CAAC,UAAU,GAAG,SAAS,CAAC;oBAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAAC,CAAC;qBACrE,CAAC;oBACJ,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;oBACjM,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnB,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5B,IAAI,OAAO;gBAAE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE;oBAAE,QAAQ,EAAE,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,UAAgC,EAAE;QACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnF,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,aAAa,IAAI,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvJ,MAAM,KAAK,GAAG,QAAQ,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;YAChP,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAChD,oGAAoG;YACpG,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/W,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,GAAa,EAAE,SAA4B,EAAE,MAAe;QACnF,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC5H,MAAM,IAAI,cAAc,CAAC,mBAAmB,EAAE,uCAAuC,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAE,CAAC,CAAC;YAC7F,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,SAAS,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,cAAc;oBAAE,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC;gBACnF,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;oBACjD,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC;oBAAC,KAAK,CAAC,UAAU,GAAG,QAA6B,CAAC;oBAC/E,IAAI,MAAM;wBAAE,KAAK,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnB,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAU,EAAE,OAA6B,EAAE,WAAmB,EAAE,MAAoB;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5E,kGAAkG;QAClG,IAAI,MAAgC,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAc,CAAC;QAClE,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,IAAI,cAAc,CAAC,WAAW,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAC;gBAC5F,IAAI,IAAiB,CAAC;gBACtB,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnE,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC/F,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBAC9D,IAAI,KAAgD,CAAC;gBACrD,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBACrH,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1D,IAAI,MAAM,EAAE,OAAO;wBAAE,IAAI,EAAE,CAAC;oBAC5B,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBACxC,CAAC;wBAAS,CAAC;oBAAC,IAAI,KAAK;wBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;oBAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;YAC7F,CAAC;QACH,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,IAAI;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IAC3F,CAAC;CACF"}

package/dist/bridge-auth.d.ts

@@ -0,0 +1,21 @@
+/** Loopback advert embedded in the Centrifugo connection JWT `info` claim (L2). */
+export interface BridgeLocalAdvert {
+    localPort: number;
+    localNonce: string;
+}
+export interface BridgeAuthResponse {
+    token: string;
+    refreshToken: string;
+    centrifugoUrl: string;
+    userId: string;
+}
+export declare function fetchBridgeToken(apiUrl: string, authToken: string, bridgeId: string, local: BridgeLocalAdvert): Promise<BridgeAuthResponse>;
+/**
+ * Exchange a (rotating) refresh token for a fresh Centrifugo connect token.
+ *
+ * The server rotates the refresh token on every use (audit finding F3): the
+ * response carries a NEW refreshToken that supersedes the one just sent, so the
+ * caller must persist it and send the newest value next time. Reusing an old
+ * refresh token is rejected.
+ */
+export declare function refreshBridgeToken(apiUrl: string, refreshToken: string, bridgeId: string, local: BridgeLocalAdvert): Promise<BridgeAuthResponse>;

package/dist/bridge-auth.js

@@ -0,0 +1,56 @@
+import { hostname as osHostname } from 'node:os';
+import { UnauthorizedError } from 'centrifuge';
+export async function fetchBridgeToken(apiUrl, authToken, bridgeId, local) {
+    const res = await fetch(`${apiUrl}/api/auth/bridge`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            token: authToken,
+            bridgeId,
+            hostname: osHostname(),
+            // Embedded in the Centrifugo connection JWT `info` claim so the owning
+            // user's clients discover the loopback WS rung via presence (L2).
+            localPort: local.localPort,
+            localNonce: local.localNonce,
+        }),
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        throw new Error(`Bridge auth failed (${res.status}): ${body}`);
+    }
+    return res.json();
+}
+/**
+ * Exchange a (rotating) refresh token for a fresh Centrifugo connect token.
+ *
+ * The server rotates the refresh token on every use (audit finding F3): the
+ * response carries a NEW refreshToken that supersedes the one just sent, so the
+ * caller must persist it and send the newest value next time. Reusing an old
+ * refresh token is rejected.
+ */
+export async function refreshBridgeToken(apiUrl, refreshToken, bridgeId, local) {
+    const res = await fetch(`${apiUrl}/api/auth/bridge/refresh`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            refreshToken,
+            bridgeId,
+            hostname: osHostname(),
+            localPort: local.localPort,
+            localNonce: local.localNonce,
+        }),
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        const message = `Token refresh failed (${res.status}): ${body}`;
+        // A rejected bridge credential cannot become valid through retrying.
+        // centrifuge-js only stops its token retry loop for UnauthorizedError;
+        // ordinary errors are treated as transient and retried indefinitely.
+        if (res.status === 401) {
+            throw new UnauthorizedError(message);
+        }
+        throw new Error(message);
+    }
+    return res.json();
+}
+//# sourceMappingURL=bridge-auth.js.map

package/dist/bridge-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-auth.js","sourceRoot":"","sources":["../src/bridge-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAe/C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,SAAiB,EACjB,QAAgB,EAChB,KAAwB;IAExB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,kBAAkB,EAAE;QACnD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,SAAS;YAChB,QAAQ;YACR,QAAQ,EAAE,UAAU,EAAE;YACtB,uEAAuE;YACvE,kEAAkE;YAClE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAiC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,YAAoB,EACpB,QAAgB,EAChB,KAAwB;IAExB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,0BAA0B,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,YAAY;YACZ,QAAQ;YACR,QAAQ,EAAE,UAAU,EAAE;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,yBAAyB,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC;QAChE,qEAAqE;QACrE,uEAAuE;QACvE,qEAAqE;QACrE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAiC,CAAC;AACnD,CAAC"}

package/dist/browser-access.d.ts

@@ -0,0 +1,44 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { Command, CommandResponse } from './types.js';
+export type BrowserBootstrap = {
+    version: 1;
+    userId: string;
+    bridgeId: string;
+    hostname: string;
+    localPort: number;
+    localNonce: string;
+};
+type Options = {
+    cloudNonce?: string;
+    dataDir: string;
+    allowedOrigins: string[];
+    bootstrap: () => BrowserBootstrap;
+    execute: (command: Command) => Promise<CommandResponse>;
+    onRevoke?: () => void;
+};
+/** Loopback browser consent and control. No cloud dependency and no raw persisted tokens. */
+export declare class BrowserAccess {
+    private readonly opts;
+    private devices;
+    private pairings;
+    private rates;
+    private commands;
+    private events;
+    private eventBytes;
+    private sequence;
+    private waiters;
+    private windowExpires;
+    private closed;
+    private readonly file;
+    constructor(opts: Options);
+    private persist;
+    private device;
+    authorize(token: string, origin: string): boolean;
+    private sweep;
+    private send;
+    private body;
+    handle(req: IncomingMessage, res: ServerResponse, admin: boolean): Promise<void>;
+    publish(channel: string, data: unknown): void;
+    close(): void;
+}
+export {};