sessionpipe-core 0.1.1 → 0.2.0

package/dist/schema.js

@@ -1,4 +1,4 @@
-// sessionpipe-core 0.1.1 · Apache-2.0 · https://sessionpipe.org
+// sessionpipe-core 0.2.0 · Apache-2.0 · https://sessionpipe.org
 
 // schema/v1.ts
 import { z } from "zod";
@@ -170,44 +170,150 @@ var ErrorResponse = z.object({
   max_tier: Tier.optional()
 });
 var Capability = z.enum(["events", "backfill", "forget", "control", "native"]);
-var WellKnown = z.object({
-  protocol: z.array(z.int().min(1)).min(1),
-  max_tier: Tier,
-  capabilities: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/)),
-  auth: z.array(z.enum(["bearer"])).default(["bearer"]),
-  endpoints: z.object({
-    events: z.string(),
-    control: z.string().optional(),
-    native: z.string().optional()
-  }),
-  batch: z.object({ max_events: z.int().min(1).max(50), max_bytes: z.int().min(1024).max(262144) }),
-  control: z.object({ wait_max_s: z.int().min(1).max(60) }).optional()
-});
-var ControlKind = z.enum(["permission.answer", "prompt", "cancel"]);
-var ControlMessage = z.object({
-  id: Ulid,
+var B64Url = z.string().regex(/^[A-Za-z0-9_-]*$/, "base64url, no padding");
+var MachineId = z.string().regex(/^m_[A-Za-z0-9_-]{16,40}$/, "m_ + 16\u201340 base64url");
+var SessionRef = z.string().regex(/^[a-z][a-z0-9-]{0,39}:[A-Za-z0-9._:-]{1,128}$/, "<harness>:<session id>");
+var ControlKind = z.enum(["prompt", "permission.answer", "cancel", "start"]);
+var DeliveryMode = z.enum(["sdk", "waiter", "turn", "api", "resume", "fork"]);
+var ControlCommand = z.object({
+  v: z.literal(1),
+  t: z.literal("sessionpipe.control"),
+  machine: MachineId,
   kind: ControlKind,
-  /** The attention_id a permission answer is for. */
-  for: z.string().max(128).optional(),
+  session: SessionRef,
+  /** prompt, start: the message for the model. */
+  text: z.string().min(1).max(4e3).optional(),
+  /** permission.answer: the attention_id being answered. */
+  for: z.string().min(1).max(128).optional(),
   decision: z.enum(["allow", "deny"]).optional(),
-  /** The prompt text. */
-  text: z.string().max(2e4).optional(),
   /** Shown to the model beside a decision. */
   note: z.string().max(2e3).optional(),
+  /** start: the absolute folder the new session runs in. */
+  cwd: z.string().max(1024).optional(),
+  /** At least 16 random bytes, base64url. */
+  nonce: z.string().regex(/^[A-Za-z0-9_-]{22,64}$/),
+  /** Epoch ms, the signing device's clock. */
+  iat: z.int().min(1)
+});
+var ControlGrant = z.object({
+  v: z.literal(1),
+  t: z.literal("sessionpipe.grant"),
+  /** The day key: P-256 SPKI, base64url. */
+  pub: B64Url.min(1),
+  iat: z.int().min(1),
+  exp: z.int().min(1),
+  /** The receiver's WebAuthn rp id (well-known control.signing.rp_id). */
+  rp: z.string().min(1).max(253)
+});
+var ControlAssertion = z.object({
+  cred: B64Url.min(1),
+  ad: B64Url.min(1),
+  cd: B64Url.min(1),
+  sig: B64Url.min(1)
+});
+var ControlKey = z.object({
+  id: B64Url.min(16).max(1400),
+  alg: z.union([z.literal(-7), z.literal(-257)]),
+  spki: B64Url.min(1)
+});
+var ControlMessage = z.object({
+  /** The receiver's id for this message; the ack key. Not signed: the nonce inside cmd is. */
+  id: Ulid,
+  /** The command string, exactly as signed (≤ 12 000 characters). */
+  cmd: z.string().min(1).max(12e3),
+  /** The day key's ECDSA P-256 / SHA-256 signature over cmd: raw r‖s, base64url. */
+  csig: B64Url.nullable().optional(),
+  /** The grant vouching for the day key: its string plus the passkey's assertion over sha256(str). */
+  grant: ControlAssertion.extend({ str: z.string().min(1).max(2e3) }).nullable().optional(),
+  /** Instead of csig + grant: one passkey assertion over sha256(cmd). */
+  confirm: ControlAssertion.nullable().optional(),
+  /** The receiver's clock. */
   at: Rfc3339,
+  /** After this the machine MUST NOT act and acks `expired`; at most 24 h after `at`. */
   expires_at: Rfc3339
 });
 var ControlPoll = z.object({ messages: z.array(ControlMessage) });
+var ControlOutcome = z.enum(["taken", "delivered", "expired", "unsupported", "failed", "refused"]);
 var ControlAck = z.object({
   acks: z.array(
     z.object({
       id: Ulid,
-      outcome: z.enum(["delivered", "expired", "unsupported", "failed"]),
+      outcome: ControlOutcome,
       at: Rfc3339,
-      detail: z.string().max(500).optional()
+      /** delivered: how it reached the session. */
+      mode: DeliveryMode.optional(),
+      /** The session that took it, when not the one named (a fork's copy, a started session). */
+      session: SessionRef.optional(),
+      /** refused: the verifier's code, or the machine's own (`folder`, `no_attention`, `busy`). */
+      code: z.string().regex(/^[a-z_]{1,40}$/).optional(),
+      detail: z.string().max(500).optional(),
+      /** resume / fork / start: the agent's reply, redacted by the secrets ruleset. */
+      reply: z.string().max(2e4).optional()
     })
   ).min(1)
 });
+var ControlPairStart = z.object({
+  /** Set when adding a key to a machine already paired. */
+  machine: MachineId.optional(),
+  name: z.string().min(1).max(80),
+  harnesses: z.array(z.string().regex(/^[a-z][a-z0-9-]{0,39}$/)).max(20),
+  modes: z.array(DeliveryMode),
+  version: z.string().max(40),
+  /** The folders the machine lets sessions run in, for the receiver's "new session"
+   *  picker. Informational: the machine checks its own list again. */
+  folders: z.array(z.string().max(1024)).max(50).optional(),
+  /** safe: nothing that needs approval runs unattended; auto: the harness's auto mode. */
+  mode: z.enum(["safe", "auto"]).optional()
+});
+var ControlPairStarted = z.object({
+  machine: MachineId,
+  code: z.string().regex(/^[A-Za-z0-9-]{6,32}$/),
+  url: z.url(),
+  /** Six digits the terminal and the receiver's page both show. */
+  check: z.string().regex(/^\d{6}$/),
+  expires_at: Rfc3339
+});
+var ControlPaired = z.object({
+  status: z.enum(["pending", "paired", "expired"]),
+  key: ControlKey.optional(),
+  proof: ControlAssertion.optional(),
+  /** The machine's own bearer for polls, acks and hello: opens nothing else. Minted
+   *  once, at the first pairing of a machine. */
+  token: z.string().min(16).max(256).optional()
+});
+var ControlHello = z.object({
+  name: z.string().min(1).max(80),
+  harnesses: z.array(z.string().regex(/^[a-z][a-z0-9-]{0,39}$/)).max(20),
+  modes: z.array(DeliveryMode),
+  /** Credential ids of the keys enrolled on the machine. */
+  keys: z.array(B64Url.min(16).max(1400)).max(50),
+  version: z.string().max(40),
+  /** Live sessions with a waiter parked on the daemon's socket. */
+  waiting: z.array(SessionRef).max(500).optional(),
+  /** As in control-pair.json: informational, re-checked on the machine. */
+  folders: z.array(z.string().max(1024)).max(50).optional(),
+  mode: z.enum(["safe", "auto"]).optional()
+});
+var WellKnown = z.object({
+  protocol: z.array(z.int().min(1)).min(1),
+  max_tier: Tier,
+  capabilities: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/)),
+  auth: z.array(z.enum(["bearer"])).default(["bearer"]),
+  endpoints: z.object({
+    events: z.string(),
+    control: z.string().optional(),
+    native: z.string().optional()
+  }),
+  batch: z.object({ max_events: z.int().min(1).max(50), max_bytes: z.int().min(1024).max(262144) }),
+  control: z.object({
+    wait_max_s: z.int().min(1).max(60),
+    /** How commands are signed: the WebAuthn rp id keys are enrolled for, and the algorithms. */
+    signing: z.object({
+      rp_id: z.string().min(1).max(253),
+      algs: z.array(z.union([z.literal(-7), z.literal(-257)])).min(1)
+    })
+  }).optional()
+});
 var SCHEMAS = {
   event: Event,
   "event-data": EventData,
@@ -216,8 +322,15 @@ var SCHEMAS = {
   error: ErrorResponse,
   "well-known": WellKnown,
   control: ControlMessage,
+  "control-command": ControlCommand,
+  "control-grant": ControlGrant,
+  "control-key": ControlKey,
   "control-poll": ControlPoll,
-  "control-ack": ControlAck
+  "control-ack": ControlAck,
+  "control-pair": ControlPairStart,
+  "control-pair-started": ControlPairStarted,
+  "control-paired": ControlPaired,
+  "control-hello": ControlHello
 };
 export {
   AttentionKind,
@@ -225,9 +338,19 @@ export {
   BatchResponse,
   Capability,
   ControlAck,
+  ControlAssertion,
+  ControlCommand,
+  ControlGrant,
+  ControlHello,
+  ControlKey,
   ControlKind,
   ControlMessage,
+  ControlOutcome,
+  ControlPairStart,
+  ControlPairStarted,
+  ControlPaired,
   ControlPoll,
+  DeliveryMode,
   ErrorResponse,
   Event,
   EventData,
@@ -235,12 +358,14 @@ export {
   HARNESS_NAMES,
   Harness,
   KNOWN_TYPES,
+  MachineId,
   PROTOCOL,
   Privacy,
   Rfc3339,
   SCHEMAS,
   Session,
   SessionId,
+  SessionRef,
   TYPE_TIER,
   Tier,
   ToolName,

package/dist/schema.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../schema/v1.ts"],
-  "sourcesContent": ["// SPDX-License-Identifier: Apache-2.0\n// The one source for the protocol's shapes. schemas/v1/*.json are GENERATED from\n// this file (`npm run schemas`); core's runtime types are inferred from it with\n// type-only imports, so zod never enters the zero-dependency bundle. Prose lives in\n// spec/PROTOCOL.md; a rule that is not encoded here is a MUST in words only.\nimport { z } from \"zod\";\n\nexport const PROTOCOL = 1;\n\n/** Dotted, lowercase. Unknown types MUST be accepted and stored. */\nexport const EventType = z\n  .string()\n  .regex(/^(?:native|[a-z][a-z0-9]*(?:\\.[a-z][a-z0-9_]*)+)$/, \"dotted lowercase type, or native\");\n\nexport const KNOWN_TYPES = [\n  \"session.started\",\n  \"session.heartbeat\",\n  \"session.ended\",\n  \"session.backfill\",\n  \"session.forgotten\",\n  \"turn.started\",\n  \"turn.ended\",\n  \"turn.transcript\",\n  \"tool.started\",\n  \"tool.ended\",\n  \"files.changed\",\n  \"attention.needed\",\n  \"attention.cleared\",\n  \"subagent.started\",\n  \"subagent.ended\",\n  \"context.compacted\",\n  \"native\",\n] as const;\n\n/** The lowest tier that carries each known type. */\nexport const TYPE_TIER: Record<(typeof KNOWN_TYPES)[number], 0 | 1 | 2 | 3> = {\n  \"session.started\": 0,\n  \"session.heartbeat\": 0,\n  \"session.ended\": 0,\n  \"session.backfill\": 0,\n  \"session.forgotten\": 0,\n  \"turn.started\": 0,\n  \"turn.ended\": 0,\n  \"turn.transcript\": 2,\n  \"tool.started\": 1,\n  \"tool.ended\": 1,\n  \"files.changed\": 1,\n  \"attention.needed\": 0,\n  \"attention.cleared\": 0,\n  \"subagent.started\": 1,\n  \"subagent.ended\": 1,\n  \"context.compacted\": 1,\n  native: 3,\n};\n\nexport const HARNESS_NAMES = [\n  \"claude-code\",\n  \"codex\",\n  \"gemini-cli\",\n  \"antigravity\",\n  \"cursor\",\n  \"copilot-cli\",\n  \"droid\",\n  \"kiro\",\n  \"opencode\",\n] as const;\n\nexport const Tier = z.int().min(0).max(3);\nexport const Ulid = z.string().regex(/^[0-9A-HJKMNP-TV-Z]{26}$/, \"ULID\");\nexport const Rfc3339 = z.iso.datetime({ offset: false, precision: 3 });\nexport const SessionId = z\n  .string()\n  .min(1)\n  .max(128)\n  .regex(/^[A-Za-z0-9._:-]+$/);\nexport const ToolName = z.string().regex(/^[A-Za-z0-9_.:-]{1,120}$/);\n\nexport const Harness = z.object({\n  /** From the registry in ADAPTERS.md; a name outside it is allowed ([a-z0-9-]). */\n  name: z.string().regex(/^[a-z][a-z0-9-]{0,39}$/),\n  version: z.string().max(64).optional(),\n  /** The harness's own event name (`PostToolUse`, `agentStop`). */\n  event: z.string().max(64).optional(),\n});\n\nexport const Session = z.object({\n  id: SessionId,\n  /** Monotonic per session per sender; the dedup key with harness.name and id. */\n  seq: z.int().min(0),\n  machine: z.string().max(80).optional(),\n  /** Home is written `~`. */\n  cwd: z.string().max(1024).optional(),\n  /** A remote URL with credentials stripped. */\n  repo: z.string().max(512).optional(),\n  branch: z.string().max(256).optional(),\n  model: z.string().max(128).optional(),\n  title: z.string().max(200).optional(),\n  title_source: z.enum([\"custom\", \"harness\", \"first-ask\"]).optional(),\n  url: z.url().max(1024).optional(),\n  /** An id, never an email. */\n  account_id: z.string().max(128).optional(),\n  parent_id: SessionId.nullable().optional(),\n});\n\nexport const Privacy = z.object({\n  /** The redaction rulesets that ran; `secrets@1` always above tier 0. */\n  rulesets: z.array(z.string().regex(/^[a-z][a-z0-9-]*@\\d+$/)),\n  pii: z.boolean(),\n});\n\nexport const Event = z.object({\n  protocol: z.literal(PROTOCOL),\n  id: Ulid,\n  type: EventType,\n  time: Rfc3339,\n  tier: Tier,\n  harness: Harness,\n  session: Session,\n  privacy: Privacy,\n  /** Per type (see EventData); extra keys allowed and kept. */\n  data: z.record(z.string(), z.unknown()),\n});\n\n// --- data per type --------------------------------------------------------------\n\nconst Loose = z.object({}).loose();\nexport const AttentionKind = z.enum([\"permission\", \"question\", \"elicitation\", \"idle\", \"error\"]);\n\nexport const EventData = z.object({\n  \"session.started\": Loose.extend({ source: z.enum([\"startup\", \"resume\", \"clear\", \"compact\", \"fork\", \"unknown\"]) }),\n  \"session.heartbeat\": Loose,\n  \"session.ended\": Loose.extend({ reason: z.enum([\"clear\", \"logout\", \"exit\", \"other\"]) }),\n  \"session.backfill\": Loose.extend({ started_at: Rfc3339, last_at: Rfc3339, turns: z.int().min(0).optional() }),\n  \"session.forgotten\": Loose,\n  \"turn.started\": Loose.extend({ turn_id: z.string().max(128).optional(), prompt_chars: z.int().min(0).optional() }),\n  \"turn.ended\": Loose.extend({\n    turn_id: z.string().max(128).optional(),\n    reason: z.enum([\"stop\", \"interrupt\", \"error\"]),\n    /** The harness's error class when reason is error (rate_limit, overloaded, authentication_failed, server_error \u2026). */\n    error: z.string().max(200).optional(),\n    ms: z.int().min(0).optional(),\n  }),\n  \"turn.transcript\": Loose.extend({\n    turn: z.int().min(0),\n    user: z.string().max(20_000),\n    assistant: z.string().max(20_000),\n    at: Rfc3339,\n  }),\n  \"tool.started\": Loose.extend({\n    tool: ToolName,\n    call_id: z.string().max(128).optional(),\n    turn_id: z.string().max(128).optional(),\n    /** Set when a subagent made the call. */\n    agent_id: z.string().max(128).optional(),\n    input: z.unknown().optional(),\n  }),\n  \"tool.ended\": Loose.extend({\n    tool: ToolName,\n    call_id: z.string().max(128).optional(),\n    turn_id: z.string().max(128).optional(),\n    agent_id: z.string().max(128).optional(),\n    ms: z.int().min(0).optional(),\n    ok: z.boolean(),\n    error: z.string().max(2000).optional(),\n    input: z.unknown().optional(),\n    output: z.unknown().optional(),\n  }),\n  \"files.changed\": Loose.extend({ paths: z.array(z.string().max(1024)).max(500) }),\n  \"attention.needed\": Loose.extend({\n    attention_id: z.string().max(128),\n    kind: AttentionKind,\n    tool: ToolName.optional(),\n    message: z.string().max(200).optional(),\n  }),\n  \"attention.cleared\": Loose.extend({\n    attention_id: z.string().max(128),\n    how: z.enum([\"answered\", \"cancelled\", \"timeout\", \"unknown\"]),\n  }),\n  \"subagent.started\": Loose.extend({ agent_id: z.string().max(128), agent_type: z.string().max(128).optional() }),\n  \"subagent.ended\": Loose.extend({ agent_id: z.string().max(128), agent_type: z.string().max(128).optional() }),\n  \"context.compacted\": Loose.extend({ trigger: z.enum([\"manual\", \"auto\"]) }),\n  native: Loose,\n});\n\n// --- wire -----------------------------------------------------------------------\n\nexport const Batch = z.object({ events: z.array(Event).min(1).max(50) });\n\nexport const BatchResponse = z.object({\n  accepted: z.int().min(0),\n  duplicates: z.int().min(0),\n  rejected: z.array(z.object({ id: Ulid, reason: z.string().max(200) })),\n  max_tier: Tier,\n});\n\nexport const ErrorResponse = z.object({\n  reason: z.string().max(200),\n  supported: z.array(z.int()).optional(),\n  max_tier: Tier.optional(),\n});\n\nexport const Capability = z.enum([\"events\", \"backfill\", \"forget\", \"control\", \"native\"]);\n\nexport const WellKnown = z.object({\n  protocol: z.array(z.int().min(1)).min(1),\n  max_tier: Tier,\n  capabilities: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/)),\n  auth: z.array(z.enum([\"bearer\"])).default([\"bearer\"]),\n  endpoints: z.object({\n    events: z.string(),\n    control: z.string().optional(),\n    native: z.string().optional(),\n  }),\n  batch: z.object({ max_events: z.int().min(1).max(50), max_bytes: z.int().min(1024).max(262_144) }),\n  control: z.object({ wait_max_s: z.int().min(1).max(60) }).optional(),\n});\n\nexport const ControlKind = z.enum([\"permission.answer\", \"prompt\", \"cancel\"]);\n\nexport const ControlMessage = z.object({\n  id: Ulid,\n  kind: ControlKind,\n  /** The attention_id a permission answer is for. */\n  for: z.string().max(128).optional(),\n  decision: z.enum([\"allow\", \"deny\"]).optional(),\n  /** The prompt text. */\n  text: z.string().max(20_000).optional(),\n  /** Shown to the model beside a decision. */\n  note: z.string().max(2000).optional(),\n  at: Rfc3339,\n  expires_at: Rfc3339,\n});\n\nexport const ControlPoll = z.object({ messages: z.array(ControlMessage) });\n\nexport const ControlAck = z.object({\n  acks: z\n    .array(\n      z.object({\n        id: Ulid,\n        outcome: z.enum([\"delivered\", \"expired\", \"unsupported\", \"failed\"]),\n        at: Rfc3339,\n        detail: z.string().max(500).optional(),\n      }),\n    )\n    .min(1),\n});\n\n/** What `npm run schemas` writes to schemas/v1/<name>.json. */\nexport const SCHEMAS = {\n  event: Event,\n  \"event-data\": EventData,\n  batch: Batch,\n  \"batch-response\": BatchResponse,\n  error: ErrorResponse,\n  \"well-known\": WellKnown,\n  control: ControlMessage,\n  \"control-poll\": ControlPoll,\n  \"control-ack\": ControlAck,\n} as const;\n"],
-  "mappings": ";;;AAKA,SAAS,SAAS;AAEX,IAAM,WAAW;AAGjB,IAAM,YAAY,EACtB,OAAO,EACP,MAAM,qDAAqD,kCAAkC;AAEzF,IAAM,cAAc;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,YAAiE;AAAA,EAC5E,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,mBAAmB;AAAA,EACnB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,qBAAqB;AAAA,EACrB,QAAQ;AACV;AAEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;AACjC,IAAM,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,MAAM;AAChE,IAAM,UAAU,EAAE,IAAI,SAAS,EAAE,QAAQ,OAAO,WAAW,EAAE,CAAC;AAC9D,IAAM,YAAY,EACtB,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,oBAAoB;AACtB,IAAM,WAAW,EAAE,OAAO,EAAE,MAAM,0BAA0B;AAE5D,IAAM,UAAU,EAAE,OAAO;AAAA;AAAA,EAE9B,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA,EAC/C,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAErC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AACrC,CAAC;AAEM,IAAM,UAAU,EAAE,OAAO;AAAA,EAC9B,IAAI;AAAA;AAAA,EAEJ,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAClB,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAErC,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAEnC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,cAAc,EAAE,KAAK,CAAC,UAAU,WAAW,WAAW,CAAC,EAAE,SAAS;AAAA,EAClE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAEhC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,WAAW,UAAU,SAAS,EAAE,SAAS;AAC3C,CAAC;AAEM,IAAM,UAAU,EAAE,OAAO;AAAA;AAAA,EAE9B,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAAA,EAC3D,KAAK,EAAE,QAAQ;AACjB,CAAC;AAEM,IAAM,QAAQ,EAAE,OAAO;AAAA,EAC5B,UAAU,EAAE,QAAQ,QAAQ;AAAA,EAC5B,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AAAA,EACN,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA;AAAA,EAET,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AACxC,CAAC;AAID,IAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM;AAC1B,IAAM,gBAAgB,EAAE,KAAK,CAAC,cAAc,YAAY,eAAe,QAAQ,OAAO,CAAC;AAEvF,IAAM,YAAY,EAAE,OAAO;AAAA,EAChC,mBAAmB,MAAM,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,UAAU,SAAS,WAAW,QAAQ,SAAS,CAAC,EAAE,CAAC;AAAA,EAChH,qBAAqB;AAAA,EACrB,iBAAiB,MAAM,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,UAAU,QAAQ,OAAO,CAAC,EAAE,CAAC;AAAA,EACtF,oBAAoB,MAAM,OAAO,EAAE,YAAY,SAAS,SAAS,SAAS,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;AAAA,EAC5G,qBAAqB;AAAA,EACrB,gBAAgB,MAAM,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,GAAG,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;AAAA,EACjH,cAAc,MAAM,OAAO;AAAA,IACzB,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ,aAAa,OAAO,CAAC;AAAA;AAAA,IAE7C,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACpC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,mBAAmB,MAAM,OAAO;AAAA,IAC9B,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,IACnB,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAChC,IAAI;AAAA,EACN,CAAC;AAAA,EACD,gBAAgB,MAAM,OAAO;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,IAEtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACvC,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,cAAc,MAAM,OAAO;AAAA,IACzB,MAAM;AAAA,IACN,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACvC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAC5B,IAAI,EAAE,QAAQ;AAAA,IACd,OAAO,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,IACrC,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC5B,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACD,iBAAiB,MAAM,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;AAAA,EAC/E,oBAAoB,MAAM,OAAO;AAAA,IAC/B,cAAc,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,IAChC,MAAM;AAAA,IACN,MAAM,SAAS,SAAS;AAAA,IACxB,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,CAAC;AAAA,EACD,qBAAqB,MAAM,OAAO;AAAA,IAChC,cAAc,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,IAChC,KAAK,EAAE,KAAK,CAAC,YAAY,aAAa,WAAW,SAAS,CAAC;AAAA,EAC7D,CAAC;AAAA,EACD,oBAAoB,MAAM,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,GAAG,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,EAC9G,kBAAkB,MAAM,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,GAAG,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,EAC5G,qBAAqB,MAAM,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC,EAAE,CAAC;AAAA,EACzE,QAAQ;AACV,CAAC;AAIM,IAAM,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;AAEhE,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EACvB,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EACzB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,MAAM,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AAAA,EACrE,UAAU;AACZ,CAAC;AAEM,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EAC1B,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrC,UAAU,KAAK,SAAS;AAC1B,CAAC;AAEM,IAAM,aAAa,EAAE,KAAK,CAAC,UAAU,YAAY,UAAU,WAAW,QAAQ,CAAC;AAE/E,IAAM,YAAY,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC;AAAA,EACvC,UAAU;AAAA,EACV,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAAA,EAC3D,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;AAAA,EACpD,WAAW,EAAE,OAAO;AAAA,IAClB,QAAQ,EAAE,OAAO;AAAA,IACjB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,MAAO,EAAE,CAAC;AAAA,EACjG,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,SAAS;AACrE,CAAC;AAEM,IAAM,cAAc,EAAE,KAAK,CAAC,qBAAqB,UAAU,QAAQ,CAAC;AAEpE,IAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,IAAI;AAAA,EACJ,MAAM;AAAA;AAAA,EAEN,KAAK,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAClC,UAAU,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC,EAAE,SAAS;AAAA;AAAA,EAE7C,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA;AAAA,EAEtC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,EACpC,IAAI;AAAA,EACJ,YAAY;AACd,CAAC;AAEM,IAAM,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,EAAE,CAAC;AAElE,IAAM,aAAa,EAAE,OAAO;AAAA,EACjC,MAAM,EACH;AAAA,IACC,EAAE,OAAO;AAAA,MACP,IAAI;AAAA,MACJ,SAAS,EAAE,KAAK,CAAC,aAAa,WAAW,eAAe,QAAQ,CAAC;AAAA,MACjE,IAAI;AAAA,MACJ,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACvC,CAAC;AAAA,EACH,EACC,IAAI,CAAC;AACV,CAAC;AAGM,IAAM,UAAU;AAAA,EACrB,OAAO;AAAA,EACP,cAAc;AAAA,EACd,OAAO;AAAA,EACP,kBAAkB;AAAA,EAClB,OAAO;AAAA,EACP,cAAc;AAAA,EACd,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,eAAe;AACjB;",
+  "sourcesContent": ["// SPDX-License-Identifier: Apache-2.0\n// The one source for the protocol's shapes. schemas/v1/*.json are GENERATED from\n// this file (`npm run schemas`); core's runtime types are inferred from it with\n// type-only imports, so zod never enters the zero-dependency bundle. Prose lives in\n// spec/PROTOCOL.md; a rule that is not encoded here is a MUST in words only.\nimport { z } from \"zod\";\n\nexport const PROTOCOL = 1;\n\n/** Dotted, lowercase. Unknown types MUST be accepted and stored. */\nexport const EventType = z\n  .string()\n  .regex(/^(?:native|[a-z][a-z0-9]*(?:\\.[a-z][a-z0-9_]*)+)$/, \"dotted lowercase type, or native\");\n\nexport const KNOWN_TYPES = [\n  \"session.started\",\n  \"session.heartbeat\",\n  \"session.ended\",\n  \"session.backfill\",\n  \"session.forgotten\",\n  \"turn.started\",\n  \"turn.ended\",\n  \"turn.transcript\",\n  \"tool.started\",\n  \"tool.ended\",\n  \"files.changed\",\n  \"attention.needed\",\n  \"attention.cleared\",\n  \"subagent.started\",\n  \"subagent.ended\",\n  \"context.compacted\",\n  \"native\",\n] as const;\n\n/** The lowest tier that carries each known type. */\nexport const TYPE_TIER: Record<(typeof KNOWN_TYPES)[number], 0 | 1 | 2 | 3> = {\n  \"session.started\": 0,\n  \"session.heartbeat\": 0,\n  \"session.ended\": 0,\n  \"session.backfill\": 0,\n  \"session.forgotten\": 0,\n  \"turn.started\": 0,\n  \"turn.ended\": 0,\n  \"turn.transcript\": 2,\n  \"tool.started\": 1,\n  \"tool.ended\": 1,\n  \"files.changed\": 1,\n  \"attention.needed\": 0,\n  \"attention.cleared\": 0,\n  \"subagent.started\": 1,\n  \"subagent.ended\": 1,\n  \"context.compacted\": 1,\n  native: 3,\n};\n\nexport const HARNESS_NAMES = [\n  \"claude-code\",\n  \"codex\",\n  \"gemini-cli\",\n  \"antigravity\",\n  \"cursor\",\n  \"copilot-cli\",\n  \"droid\",\n  \"kiro\",\n  \"opencode\",\n] as const;\n\nexport const Tier = z.int().min(0).max(3);\nexport const Ulid = z.string().regex(/^[0-9A-HJKMNP-TV-Z]{26}$/, \"ULID\");\nexport const Rfc3339 = z.iso.datetime({ offset: false, precision: 3 });\nexport const SessionId = z\n  .string()\n  .min(1)\n  .max(128)\n  .regex(/^[A-Za-z0-9._:-]+$/);\nexport const ToolName = z.string().regex(/^[A-Za-z0-9_.:-]{1,120}$/);\n\nexport const Harness = z.object({\n  /** From the registry in ADAPTERS.md; a name outside it is allowed ([a-z0-9-]). */\n  name: z.string().regex(/^[a-z][a-z0-9-]{0,39}$/),\n  version: z.string().max(64).optional(),\n  /** The harness's own event name (`PostToolUse`, `agentStop`). */\n  event: z.string().max(64).optional(),\n});\n\nexport const Session = z.object({\n  id: SessionId,\n  /** Monotonic per session per sender; the dedup key with harness.name and id. */\n  seq: z.int().min(0),\n  machine: z.string().max(80).optional(),\n  /** Home is written `~`. */\n  cwd: z.string().max(1024).optional(),\n  /** A remote URL with credentials stripped. */\n  repo: z.string().max(512).optional(),\n  branch: z.string().max(256).optional(),\n  model: z.string().max(128).optional(),\n  title: z.string().max(200).optional(),\n  title_source: z.enum([\"custom\", \"harness\", \"first-ask\"]).optional(),\n  url: z.url().max(1024).optional(),\n  /** An id, never an email. */\n  account_id: z.string().max(128).optional(),\n  parent_id: SessionId.nullable().optional(),\n});\n\nexport const Privacy = z.object({\n  /** The redaction rulesets that ran; `secrets@1` always above tier 0. */\n  rulesets: z.array(z.string().regex(/^[a-z][a-z0-9-]*@\\d+$/)),\n  pii: z.boolean(),\n});\n\nexport const Event = z.object({\n  protocol: z.literal(PROTOCOL),\n  id: Ulid,\n  type: EventType,\n  time: Rfc3339,\n  tier: Tier,\n  harness: Harness,\n  session: Session,\n  privacy: Privacy,\n  /** Per type (see EventData); extra keys allowed and kept. */\n  data: z.record(z.string(), z.unknown()),\n});\n\n// --- data per type --------------------------------------------------------------\n\nconst Loose = z.object({}).loose();\nexport const AttentionKind = z.enum([\"permission\", \"question\", \"elicitation\", \"idle\", \"error\"]);\n\nexport const EventData = z.object({\n  \"session.started\": Loose.extend({ source: z.enum([\"startup\", \"resume\", \"clear\", \"compact\", \"fork\", \"unknown\"]) }),\n  \"session.heartbeat\": Loose,\n  \"session.ended\": Loose.extend({ reason: z.enum([\"clear\", \"logout\", \"exit\", \"other\"]) }),\n  \"session.backfill\": Loose.extend({ started_at: Rfc3339, last_at: Rfc3339, turns: z.int().min(0).optional() }),\n  \"session.forgotten\": Loose,\n  \"turn.started\": Loose.extend({ turn_id: z.string().max(128).optional(), prompt_chars: z.int().min(0).optional() }),\n  \"turn.ended\": Loose.extend({\n    turn_id: z.string().max(128).optional(),\n    reason: z.enum([\"stop\", \"interrupt\", \"error\"]),\n    /** The harness's error class when reason is error (rate_limit, overloaded, authentication_failed, server_error \u2026). */\n    error: z.string().max(200).optional(),\n    ms: z.int().min(0).optional(),\n  }),\n  \"turn.transcript\": Loose.extend({\n    turn: z.int().min(0),\n    user: z.string().max(20_000),\n    assistant: z.string().max(20_000),\n    at: Rfc3339,\n  }),\n  \"tool.started\": Loose.extend({\n    tool: ToolName,\n    call_id: z.string().max(128).optional(),\n    turn_id: z.string().max(128).optional(),\n    /** Set when a subagent made the call. */\n    agent_id: z.string().max(128).optional(),\n    input: z.unknown().optional(),\n  }),\n  \"tool.ended\": Loose.extend({\n    tool: ToolName,\n    call_id: z.string().max(128).optional(),\n    turn_id: z.string().max(128).optional(),\n    agent_id: z.string().max(128).optional(),\n    ms: z.int().min(0).optional(),\n    ok: z.boolean(),\n    error: z.string().max(2000).optional(),\n    input: z.unknown().optional(),\n    output: z.unknown().optional(),\n  }),\n  \"files.changed\": Loose.extend({ paths: z.array(z.string().max(1024)).max(500) }),\n  \"attention.needed\": Loose.extend({\n    attention_id: z.string().max(128),\n    kind: AttentionKind,\n    tool: ToolName.optional(),\n    message: z.string().max(200).optional(),\n  }),\n  \"attention.cleared\": Loose.extend({\n    attention_id: z.string().max(128),\n    how: z.enum([\"answered\", \"cancelled\", \"timeout\", \"unknown\"]),\n  }),\n  \"subagent.started\": Loose.extend({ agent_id: z.string().max(128), agent_type: z.string().max(128).optional() }),\n  \"subagent.ended\": Loose.extend({ agent_id: z.string().max(128), agent_type: z.string().max(128).optional() }),\n  \"context.compacted\": Loose.extend({ trigger: z.enum([\"manual\", \"auto\"]) }),\n  native: Loose,\n});\n\n// --- wire -----------------------------------------------------------------------\n\nexport const Batch = z.object({ events: z.array(Event).min(1).max(50) });\n\nexport const BatchResponse = z.object({\n  accepted: z.int().min(0),\n  duplicates: z.int().min(0),\n  rejected: z.array(z.object({ id: Ulid, reason: z.string().max(200) })),\n  max_tier: Tier,\n});\n\nexport const ErrorResponse = z.object({\n  reason: z.string().max(200),\n  supported: z.array(z.int()).optional(),\n  max_tier: Tier.optional(),\n});\n\nexport const Capability = z.enum([\"events\", \"backfill\", \"forget\", \"control\", \"native\"]);\n\n// --- control (CONTROL.md) ---------------------------------------------------------\n\nconst B64Url = z.string().regex(/^[A-Za-z0-9_-]*$/, \"base64url, no padding\");\nexport const MachineId = z.string().regex(/^m_[A-Za-z0-9_-]{16,40}$/, \"m_ + 16\u201340 base64url\");\n/** `<harness>:<id>`; the id follows its adapter's rule (Claude Code: a UUID). */\nexport const SessionRef = z.string().regex(/^[a-z][a-z0-9-]{0,39}:[A-Za-z0-9._:-]{1,128}$/, \"<harness>:<session id>\");\nexport const ControlKind = z.enum([\"prompt\", \"permission.answer\", \"cancel\", \"start\"]);\nexport const DeliveryMode = z.enum([\"sdk\", \"waiter\", \"turn\", \"api\", \"resume\", \"fork\"]);\n\n/** The signed command, as the device writes it. The machine verifies the EXACT string\n *  it received (control.json `cmd`) and never re-serializes it. */\nexport const ControlCommand = z.object({\n  v: z.literal(1),\n  t: z.literal(\"sessionpipe.control\"),\n  machine: MachineId,\n  kind: ControlKind,\n  session: SessionRef,\n  /** prompt, start: the message for the model. */\n  text: z.string().min(1).max(4000).optional(),\n  /** permission.answer: the attention_id being answered. */\n  for: z.string().min(1).max(128).optional(),\n  decision: z.enum([\"allow\", \"deny\"]).optional(),\n  /** Shown to the model beside a decision. */\n  note: z.string().max(2000).optional(),\n  /** start: the absolute folder the new session runs in. */\n  cwd: z.string().max(1024).optional(),\n  /** At least 16 random bytes, base64url. */\n  nonce: z.string().regex(/^[A-Za-z0-9_-]{22,64}$/),\n  /** Epoch ms, the signing device's clock. */\n  iat: z.int().min(1),\n});\n\n/** A day grant's signed string: a passkey vouches for a device key for \u2264 24 h. */\nexport const ControlGrant = z.object({\n  v: z.literal(1),\n  t: z.literal(\"sessionpipe.grant\"),\n  /** The day key: P-256 SPKI, base64url. */\n  pub: B64Url.min(1),\n  iat: z.int().min(1),\n  exp: z.int().min(1),\n  /** The receiver's WebAuthn rp id (well-known control.signing.rp_id). */\n  rp: z.string().min(1).max(253),\n});\n\n/** A WebAuthn assertion: credential id, authenticatorData, clientDataJSON, signature. */\nexport const ControlAssertion = z.object({\n  cred: B64Url.min(1),\n  ad: B64Url.min(1),\n  cd: B64Url.min(1),\n  sig: B64Url.min(1),\n});\n\n/** A key enrolled on a machine: a passkey's credential id, COSE alg, SPKI. */\nexport const ControlKey = z.object({\n  id: B64Url.min(16).max(1400),\n  alg: z.union([z.literal(-7), z.literal(-257)]),\n  spki: B64Url.min(1),\n});\n\n/** One message as a receiver carries it: its own envelope around the signed bytes. */\nexport const ControlMessage = z.object({\n  /** The receiver's id for this message; the ack key. Not signed: the nonce inside cmd is. */\n  id: Ulid,\n  /** The command string, exactly as signed (\u2264 12 000 characters). */\n  cmd: z.string().min(1).max(12_000),\n  /** The day key's ECDSA P-256 / SHA-256 signature over cmd: raw r\u2016s, base64url. */\n  csig: B64Url.nullable().optional(),\n  /** The grant vouching for the day key: its string plus the passkey's assertion over sha256(str). */\n  grant: ControlAssertion.extend({ str: z.string().min(1).max(2000) })\n    .nullable()\n    .optional(),\n  /** Instead of csig + grant: one passkey assertion over sha256(cmd). */\n  confirm: ControlAssertion.nullable().optional(),\n  /** The receiver's clock. */\n  at: Rfc3339,\n  /** After this the machine MUST NOT act and acks `expired`; at most 24 h after `at`. */\n  expires_at: Rfc3339,\n});\n\nexport const ControlPoll = z.object({ messages: z.array(ControlMessage) });\n\n/** `taken` is the one non-final outcome: the machine verified the message and is\n *  delivering it (a headless resume can take minutes); a final ack follows. */\nexport const ControlOutcome = z.enum([\"taken\", \"delivered\", \"expired\", \"unsupported\", \"failed\", \"refused\"]);\n\nexport const ControlAck = z.object({\n  acks: z\n    .array(\n      z.object({\n        id: Ulid,\n        outcome: ControlOutcome,\n        at: Rfc3339,\n        /** delivered: how it reached the session. */\n        mode: DeliveryMode.optional(),\n        /** The session that took it, when not the one named (a fork's copy, a started session). */\n        session: SessionRef.optional(),\n        /** refused: the verifier's code, or the machine's own (`folder`, `no_attention`, `busy`). */\n        code: z\n          .string()\n          .regex(/^[a-z_]{1,40}$/)\n          .optional(),\n        detail: z.string().max(500).optional(),\n        /** resume / fork / start: the agent's reply, redacted by the secrets ruleset. */\n        reply: z.string().max(20_000).optional(),\n      }),\n    )\n    .min(1),\n});\n\n/** `POST {control}/pair`, sent with the person's sink token from their own terminal. */\nexport const ControlPairStart = z.object({\n  /** Set when adding a key to a machine already paired. */\n  machine: MachineId.optional(),\n  name: z.string().min(1).max(80),\n  harnesses: z.array(z.string().regex(/^[a-z][a-z0-9-]{0,39}$/)).max(20),\n  modes: z.array(DeliveryMode),\n  version: z.string().max(40),\n  /** The folders the machine lets sessions run in, for the receiver's \"new session\"\n   *  picker. Informational: the machine checks its own list again. */\n  folders: z.array(z.string().max(1024)).max(50).optional(),\n  /** safe: nothing that needs approval runs unattended; auto: the harness's auto mode. */\n  mode: z.enum([\"safe\", \"auto\"]).optional(),\n});\n\n/** The receiver's answer: where the person confirms, and the digits both screens show. */\nexport const ControlPairStarted = z.object({\n  machine: MachineId,\n  code: z.string().regex(/^[A-Za-z0-9-]{6,32}$/),\n  url: z.url(),\n  /** Six digits the terminal and the receiver's page both show. */\n  check: z.string().regex(/^\\d{6}$/),\n  expires_at: Rfc3339,\n});\n\n/** `GET {control}/pair?code=\u2026` once the person confirmed. The machine verifies `proof`\n *  over sha256(\"sessionpipe.pair:<machine>:<code>\") before it trusts `key`. */\nexport const ControlPaired = z.object({\n  status: z.enum([\"pending\", \"paired\", \"expired\"]),\n  key: ControlKey.optional(),\n  proof: ControlAssertion.optional(),\n  /** The machine's own bearer for polls, acks and hello: opens nothing else. Minted\n   *  once, at the first pairing of a machine. */\n  token: z.string().min(16).max(256).optional(),\n});\n\n/** `POST {control}/hello`: what the machine can do right now. */\nexport const ControlHello = z.object({\n  name: z.string().min(1).max(80),\n  harnesses: z.array(z.string().regex(/^[a-z][a-z0-9-]{0,39}$/)).max(20),\n  modes: z.array(DeliveryMode),\n  /** Credential ids of the keys enrolled on the machine. */\n  keys: z.array(B64Url.min(16).max(1400)).max(50),\n  version: z.string().max(40),\n  /** Live sessions with a waiter parked on the daemon's socket. */\n  waiting: z.array(SessionRef).max(500).optional(),\n  /** As in control-pair.json: informational, re-checked on the machine. */\n  folders: z.array(z.string().max(1024)).max(50).optional(),\n  mode: z.enum([\"safe\", \"auto\"]).optional(),\n});\n\nexport const WellKnown = z.object({\n  protocol: z.array(z.int().min(1)).min(1),\n  max_tier: Tier,\n  capabilities: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/)),\n  auth: z.array(z.enum([\"bearer\"])).default([\"bearer\"]),\n  endpoints: z.object({\n    events: z.string(),\n    control: z.string().optional(),\n    native: z.string().optional(),\n  }),\n  batch: z.object({ max_events: z.int().min(1).max(50), max_bytes: z.int().min(1024).max(262_144) }),\n  control: z\n    .object({\n      wait_max_s: z.int().min(1).max(60),\n      /** How commands are signed: the WebAuthn rp id keys are enrolled for, and the algorithms. */\n      signing: z.object({\n        rp_id: z.string().min(1).max(253),\n        algs: z.array(z.union([z.literal(-7), z.literal(-257)])).min(1),\n      }),\n    })\n    .optional(),\n});\n\n/** What `npm run schemas` writes to schemas/v1/<name>.json. */\nexport const SCHEMAS = {\n  event: Event,\n  \"event-data\": EventData,\n  batch: Batch,\n  \"batch-response\": BatchResponse,\n  error: ErrorResponse,\n  \"well-known\": WellKnown,\n  control: ControlMessage,\n  \"control-command\": ControlCommand,\n  \"control-grant\": ControlGrant,\n  \"control-key\": ControlKey,\n  \"control-poll\": ControlPoll,\n  \"control-ack\": ControlAck,\n  \"control-pair\": ControlPairStart,\n  \"control-pair-started\": ControlPairStarted,\n  \"control-paired\": ControlPaired,\n  \"control-hello\": ControlHello,\n} as const;\n"],
+  "mappings": ";;;AAKA,SAAS,SAAS;AAEX,IAAM,WAAW;AAGjB,IAAM,YAAY,EACtB,OAAO,EACP,MAAM,qDAAqD,kCAAkC;AAEzF,IAAM,cAAc;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,YAAiE;AAAA,EAC5E,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,mBAAmB;AAAA,EACnB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,kBAAkB;AAAA,EAClB,qBAAqB;AAAA,EACrB,QAAQ;AACV;AAEO,IAAM,gBAAgB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;AACjC,IAAM,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,MAAM;AAChE,IAAM,UAAU,EAAE,IAAI,SAAS,EAAE,QAAQ,OAAO,WAAW,EAAE,CAAC;AAC9D,IAAM,YAAY,EACtB,OAAO,EACP,IAAI,CAAC,EACL,IAAI,GAAG,EACP,MAAM,oBAAoB;AACtB,IAAM,WAAW,EAAE,OAAO,EAAE,MAAM,0BAA0B;AAE5D,IAAM,UAAU,EAAE,OAAO;AAAA;AAAA,EAE9B,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA,EAC/C,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAErC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AACrC,CAAC;AAEM,IAAM,UAAU,EAAE,OAAO;AAAA,EAC9B,IAAI;AAAA;AAAA,EAEJ,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAClB,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAErC,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAEnC,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACrC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACpC,cAAc,EAAE,KAAK,CAAC,UAAU,WAAW,WAAW,CAAC,EAAE,SAAS;AAAA,EAClE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAEhC,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,WAAW,UAAU,SAAS,EAAE,SAAS;AAC3C,CAAC;AAEM,IAAM,UAAU,EAAE,OAAO;AAAA;AAAA,EAE9B,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAAA,EAC3D,KAAK,EAAE,QAAQ;AACjB,CAAC;AAEM,IAAM,QAAQ,EAAE,OAAO;AAAA,EAC5B,UAAU,EAAE,QAAQ,QAAQ;AAAA,EAC5B,IAAI;AAAA,EACJ,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AAAA,EACN,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA;AAAA,EAET,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AACxC,CAAC;AAID,IAAM,QAAQ,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM;AAC1B,IAAM,gBAAgB,EAAE,KAAK,CAAC,cAAc,YAAY,eAAe,QAAQ,OAAO,CAAC;AAEvF,IAAM,YAAY,EAAE,OAAO;AAAA,EAChC,mBAAmB,MAAM,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,UAAU,SAAS,WAAW,QAAQ,SAAS,CAAC,EAAE,CAAC;AAAA,EAChH,qBAAqB;AAAA,EACrB,iBAAiB,MAAM,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,UAAU,QAAQ,OAAO,CAAC,EAAE,CAAC;AAAA,EACtF,oBAAoB,MAAM,OAAO,EAAE,YAAY,SAAS,SAAS,SAAS,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;AAAA,EAC5G,qBAAqB;AAAA,EACrB,gBAAgB,MAAM,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,GAAG,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;AAAA,EACjH,cAAc,MAAM,OAAO;AAAA,IACzB,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ,aAAa,OAAO,CAAC;AAAA;AAAA,IAE7C,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACpC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,mBAAmB,MAAM,OAAO;AAAA,IAC9B,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,IACnB,MAAM,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAC3B,WAAW,EAAE,OAAO,EAAE,IAAI,GAAM;AAAA,IAChC,IAAI;AAAA,EACN,CAAC;AAAA,EACD,gBAAgB,MAAM,OAAO;AAAA,IAC3B,MAAM;AAAA,IACN,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,IAEtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACvC,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,cAAc,MAAM,OAAO;AAAA,IACzB,MAAM;AAAA,IACN,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACtC,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,IACvC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IAC5B,IAAI,EAAE,QAAQ;AAAA,IACd,OAAO,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA,IACrC,OAAO,EAAE,QAAQ,EAAE,SAAS;AAAA,IAC5B,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACD,iBAAiB,MAAM,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;AAAA,EAC/E,oBAAoB,MAAM,OAAO;AAAA,IAC/B,cAAc,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,IAChC,MAAM;AAAA,IACN,MAAM,SAAS,SAAS;AAAA,IACxB,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACxC,CAAC;AAAA,EACD,qBAAqB,MAAM,OAAO;AAAA,IAChC,cAAc,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,IAChC,KAAK,EAAE,KAAK,CAAC,YAAY,aAAa,WAAW,SAAS,CAAC;AAAA,EAC7D,CAAC;AAAA,EACD,oBAAoB,MAAM,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,GAAG,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,EAC9G,kBAAkB,MAAM,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,GAAG,GAAG,YAAY,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;AAAA,EAC5G,qBAAqB,MAAM,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC,EAAE,CAAC;AAAA,EACzE,QAAQ;AACV,CAAC;AAIM,IAAM,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;AAEhE,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EACvB,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EACzB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,MAAM,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AAAA,EACrE,UAAU;AACZ,CAAC;AAEM,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG;AAAA,EAC1B,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACrC,UAAU,KAAK,SAAS;AAC1B,CAAC;AAEM,IAAM,aAAa,EAAE,KAAK,CAAC,UAAU,YAAY,UAAU,WAAW,QAAQ,CAAC;AAItF,IAAM,SAAS,EAAE,OAAO,EAAE,MAAM,oBAAoB,uBAAuB;AACpE,IAAM,YAAY,EAAE,OAAO,EAAE,MAAM,4BAA4B,2BAAsB;AAErF,IAAM,aAAa,EAAE,OAAO,EAAE,MAAM,iDAAiD,wBAAwB;AAC7G,IAAM,cAAc,EAAE,KAAK,CAAC,UAAU,qBAAqB,UAAU,OAAO,CAAC;AAC7E,IAAM,eAAe,EAAE,KAAK,CAAC,OAAO,UAAU,QAAQ,OAAO,UAAU,MAAM,CAAC;AAI9E,IAAM,iBAAiB,EAAE,OAAO;AAAA,EACrC,GAAG,EAAE,QAAQ,CAAC;AAAA,EACd,GAAG,EAAE,QAAQ,qBAAqB;AAAA,EAClC,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS;AAAA;AAAA,EAET,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA;AAAA,EAE3C,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACzC,UAAU,EAAE,KAAK,CAAC,SAAS,MAAM,CAAC,EAAE,SAAS;AAAA;AAAA,EAE7C,MAAM,EAAE,OAAO,EAAE,IAAI,GAAI,EAAE,SAAS;AAAA;AAAA,EAEpC,KAAK,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA;AAAA,EAEnC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB;AAAA;AAAA,EAEhD,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AACpB,CAAC;AAGM,IAAM,eAAe,EAAE,OAAO;AAAA,EACnC,GAAG,EAAE,QAAQ,CAAC;AAAA,EACd,GAAG,EAAE,QAAQ,mBAAmB;AAAA;AAAA,EAEhC,KAAK,OAAO,IAAI,CAAC;AAAA,EACjB,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAClB,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA;AAAA,EAElB,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAC/B,CAAC;AAGM,IAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,MAAM,OAAO,IAAI,CAAC;AAAA,EAClB,IAAI,OAAO,IAAI,CAAC;AAAA,EAChB,IAAI,OAAO,IAAI,CAAC;AAAA,EAChB,KAAK,OAAO,IAAI,CAAC;AACnB,CAAC;AAGM,IAAM,aAAa,EAAE,OAAO;AAAA,EACjC,IAAI,OAAO,IAAI,EAAE,EAAE,IAAI,IAAI;AAAA,EAC3B,KAAK,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC;AAAA,EAC7C,MAAM,OAAO,IAAI,CAAC;AACpB,CAAC;AAGM,IAAM,iBAAiB,EAAE,OAAO;AAAA;AAAA,EAErC,IAAI;AAAA;AAAA,EAEJ,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAM;AAAA;AAAA,EAEjC,MAAM,OAAO,SAAS,EAAE,SAAS;AAAA;AAAA,EAEjC,OAAO,iBAAiB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,CAAC,EAChE,SAAS,EACT,SAAS;AAAA;AAAA,EAEZ,SAAS,iBAAiB,SAAS,EAAE,SAAS;AAAA;AAAA,EAE9C,IAAI;AAAA;AAAA,EAEJ,YAAY;AACd,CAAC;AAEM,IAAM,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,EAAE,CAAC;AAIlE,IAAM,iBAAiB,EAAE,KAAK,CAAC,SAAS,aAAa,WAAW,eAAe,UAAU,SAAS,CAAC;AAEnG,IAAM,aAAa,EAAE,OAAO;AAAA,EACjC,MAAM,EACH;AAAA,IACC,EAAE,OAAO;AAAA,MACP,IAAI;AAAA,MACJ,SAAS;AAAA,MACT,IAAI;AAAA;AAAA,MAEJ,MAAM,aAAa,SAAS;AAAA;AAAA,MAE5B,SAAS,WAAW,SAAS;AAAA;AAAA,MAE7B,MAAM,EACH,OAAO,EACP,MAAM,gBAAgB,EACtB,SAAS;AAAA,MACZ,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,MAErC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAM,EAAE,SAAS;AAAA,IACzC,CAAC;AAAA,EACH,EACC,IAAI,CAAC;AACV,CAAC;AAGM,IAAM,mBAAmB,EAAE,OAAO;AAAA;AAAA,EAEvC,SAAS,UAAU,SAAS;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC9B,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC,EAAE,IAAI,EAAE;AAAA,EACrE,OAAO,EAAE,MAAM,YAAY;AAAA,EAC3B,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA;AAAA;AAAA,EAG1B,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA;AAAA,EAExD,MAAM,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC,EAAE,SAAS;AAC1C,CAAC;AAGM,IAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,SAAS;AAAA,EACT,MAAM,EAAE,OAAO,EAAE,MAAM,sBAAsB;AAAA,EAC7C,KAAK,EAAE,IAAI;AAAA;AAAA,EAEX,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS;AAAA,EACjC,YAAY;AACd,CAAC;AAIM,IAAM,gBAAgB,EAAE,OAAO;AAAA,EACpC,QAAQ,EAAE,KAAK,CAAC,WAAW,UAAU,SAAS,CAAC;AAAA,EAC/C,KAAK,WAAW,SAAS;AAAA,EACzB,OAAO,iBAAiB,SAAS;AAAA;AAAA;AAAA,EAGjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,GAAG,EAAE,SAAS;AAC9C,CAAC;AAGM,IAAM,eAAe,EAAE,OAAO;AAAA,EACnC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC9B,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC,EAAE,IAAI,EAAE;AAAA,EACrE,OAAO,EAAE,MAAM,YAAY;AAAA;AAAA,EAE3B,MAAM,EAAE,MAAM,OAAO,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA,EAC9C,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;AAAA;AAAA,EAE1B,SAAS,EAAE,MAAM,UAAU,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAE/C,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,SAAS;AAAA,EACxD,MAAM,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC,EAAE,SAAS;AAC1C,CAAC;AAEM,IAAM,YAAY,EAAE,OAAO;AAAA,EAChC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC;AAAA,EACvC,UAAU;AAAA,EACV,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAAA,EAC3D,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;AAAA,EACpD,WAAW,EAAE,OAAO;AAAA,IAClB,QAAQ,EAAE,OAAO;AAAA,IACjB,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC9B,CAAC;AAAA,EACD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,IAAI,MAAO,EAAE,CAAC;AAAA,EACjG,SAAS,EACN,OAAO;AAAA,IACN,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE;AAAA;AAAA,IAEjC,SAAS,EAAE,OAAO;AAAA,MAChB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,MAChC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;AAAA,IAChE,CAAC;AAAA,EACH,CAAC,EACA,SAAS;AACd,CAAC;AAGM,IAAM,UAAU;AAAA,EACrB,OAAO;AAAA,EACP,cAAc;AAAA,EACd,OAAO;AAAA,EACP,kBAAkB;AAAA,EAClB,OAAO;AAAA,EACP,cAAc;AAAA,EACd,SAAS;AAAA,EACT,mBAAmB;AAAA,EACnB,iBAAiB;AAAA,EACjB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,wBAAwB;AAAA,EACxB,kBAAkB;AAAA,EAClB,iBAAiB;AACnB;",
   "names": []
 }

package/dist/src/adapters/claude-code-control.d.ts

@@ -0,0 +1,70 @@
+export declare const JOB_TIMEOUT_MS: number;
+export type Mode = "safe" | "auto";
+/** The `claude` to run: on PATH, else where the installers put it, else the newest
+ *  copy the desktop app ships. Null when this machine has none. */
+export declare function findClaude(env?: NodeJS.ProcessEnv, home?: string): string | null;
+export interface Caps {
+    hasMode: boolean;
+    modes: string[];
+    promptsNone: boolean;
+    fork: boolean;
+}
+export declare function parseCaps(help: string): Caps;
+/** Permission flags for the machine's mode. Safe: `dontAsk` (nothing that needs
+ *  approval runs). Auto: Claude Code's own auto mode, or a refusal. Never
+ *  bypassPermissions — no path here writes it. */
+export declare function modeFlags(mode: Mode, caps: Caps): {
+    args: string[];
+} | {
+    error: string;
+};
+/** The env a headless turn runs with: ours, minus the markers that make Claude Code
+ *  think it runs inside another session, with CLAUDE_CONFIG_DIR naming the account. */
+export declare function claudeEnv(configDir?: string, env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function detectCaps(bin: string): Caps;
+export interface Transcript {
+    file: string;
+    configDir: string;
+    project: string;
+}
+/** <config dir>/projects/<folder>/<session>.jsonl in any Claude Code config dir. */
+export declare function findTranscript(session: string, dirs: string[]): Transcript | null;
+/** The folder a session runs in, from its transcript's own records (never from a
+ *  command): the `cwd` whose project name is the folder the transcript is filed
+ *  under, else the first `cwd`. Streams; a line over 2 MB is skipped. */
+export declare function sessionFolder(t: Transcript, cap?: number): string | null;
+/** A Claude Code process holds this session right now: its registry file,
+ *  <config>/sessions/<pid>.json, names it and the pid is alive (interactive and
+ *  Agent SDK sessions both file one). */
+export declare function liveProcess(session: string, configDir: string): boolean;
+/** Written in the last 90 s, and not by a job of ours. */
+export declare function recentlyWritten(file: string, ourLastEnd?: number, now?: number): boolean;
+export interface RunResult {
+    error?: string;
+    code?: number | null;
+    signal?: NodeJS.Signals | null;
+    stdout?: string | null;
+    tooBig?: boolean;
+    stderr?: string;
+    timedOut?: boolean;
+}
+/** Run one headless turn in its own process group, holding at most 1 MB of stdout. */
+export declare function runClaude(bin: string, args: string[], o: {
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+}): Promise<RunResult>;
+export interface ClaudeResult {
+    type?: string;
+    result?: unknown;
+    is_error?: boolean;
+    subtype?: string;
+    session_id?: unknown;
+    permission_denials?: {
+        tool_name?: unknown;
+    }[];
+}
+/** `--output-format json`: one result object, or an array whose last `result` entry it is. */
+export declare function parseResult(stdout: string | null | undefined): ClaudeResult | null;
+export declare const isUuid: (s: unknown) => s is string;
+//# sourceMappingURL=claude-code-control.d.ts.map

package/dist/src/adapters/claude-code-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-control.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code-control.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,cAAc,QAAc,CAAC;AAK1C,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;AAoBnC;mEACmE;AACnE,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAe,GAAG,MAAM,GAAG,IAAI,CA2BnG;AAcD,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAS5C;AAED;;kDAEkD;AAClD,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG;IAAE,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAexF;AAED;uFACuF;AACvF,wBAAgB,SAAS,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,UAAU,CAiBrG;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAc5C;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,UAAU,GAAG,IAAI,CAkBjF;AAID;;yEAEyE;AACzE,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,SAAkB,GAAG,MAAM,GAAG,IAAI,CA2DjF;AAYD;;yCAEyC;AACzC,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAkBvE;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO,CAS5F;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,sFAAsF;AACtF,wBAAgB,SAAS,CACvB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D,OAAO,CAAC,SAAS,CAAC,CAoEpB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;CAChD;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAqBlF;AAED,eAAO,MAAM,MAAM,GAAI,GAAG,OAAO,KAAG,CAAC,IAAI,MAAkD,CAAC"}

package/dist/src/adapters/claude-code.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,OAAO,EAEP,UAAU,EAKV,YAAY,EACb,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,aAAa,0OAehB,CAAC;AAOX,oDAAoD;AACpD,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAO,GAAG,MAAM,EAAE,CAiBtF;AAgBD,eAAO,MAAM,UAAU,EAAE,OAwMxB,CAAC;AA4EF;sEACsE;AACtE,wBAAgB,SAAS,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAa7E;AA4DD;yEACyE;AACzE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7C;AA2DD;;qFAEqF;AACrF,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,UAAU,GAChB,YAAY,CA6Fd;AAED,6GAA6G;AAC7G,eAAO,MAAM,kBAAkB,QAAO,IAGrC,CAAC"}
+{"version":3,"file":"claude-code.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-code.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EACV,OAAO,EAEP,UAAU,EAKV,YAAY,EACb,MAAM,YAAY,CAAC;AAGpB,eAAO,MAAM,aAAa,0OAehB,CAAC;AAaX,oDAAoD;AACpD,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,IAAI,SAAO,GAAG,MAAM,EAAE,CAiBtF;AAgBD,eAAO,MAAM,UAAU,EAAE,OAwMxB,CAAC;AA4EF;sEACsE;AACtE,wBAAgB,SAAS,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAa7E;AA4DD;yEACyE;AACzE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7C;AA2DD;;qFAEqF;AACrF,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,KAAK,EAAE,UAAU,GAChB,YAAY,CA6Fd;AAED,6GAA6G;AAC7G,eAAO,MAAM,kBAAkB,QAAO,IAGrC,CAAC"}

package/dist/src/adapters/claude-shaped.d.ts

@@ -4,6 +4,9 @@ export interface ClaudeShapedOptions {
     matcherFor: (event: string) => string | undefined;
     /** Seconds (milliseconds for Gemini CLI). */
     timeout: number;
+    /** A longer timeout for one event (Claude Code's PermissionRequest, which may wait
+     *  for a verified control answer: spec/CONTROL.md §6). */
+    timeoutFor?: (event: string) => number | undefined;
     /** Extra top-level keys the file must carry (Cursor/Copilot: version: 1). */
     top?: Record<string, unknown>;
 }

package/dist/src/adapters/claude-shaped.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-shaped.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-shaped.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAClD,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,8GAA8G;AAC9G,eAAO,MAAM,IAAI,QAAqE,CAAC;AACvF,eAAO,MAAM,MAAM,GAAI,GAAG;IAAE,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,KAAG,OACwC,CAAC;AAExG,MAAM,MAAM,QAAQ,GAChB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;CACvB,GACD;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,GAAG,EAAE,EAAE,CAAC;IAAC,MAAM,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,IAAI,CAAA;CAAE,GAClH;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD;sDACsD;AACtD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CA4BnD;AAED,yCAAyC;AACzC,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAG5G;AAED,qDAAqD;AACrD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG9D;AAUD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,mBAAmB,GACrB,aAAa,CAyCf;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAO,GAC3C,aAAa,CA0Bf;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,mBAAmB,GACrB,SAAS,GAAG,OAAO,GAAG,SAAS,CAiBjC"}
+{"version":3,"file":"claude-shaped.d.ts","sourceRoot":"","sources":["../../../src/adapters/claude-shaped.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAClD,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB;8DAC0D;IAC1D,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACnD,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,8GAA8G;AAC9G,eAAO,MAAM,IAAI,QAAqE,CAAC;AACvF,eAAO,MAAM,MAAM,GAAI,GAAG;IAAE,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,KAAG,OACwC,CAAC;AAExG,MAAM,MAAM,QAAQ,GAChB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,IAAI,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;CACvB,GACD;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,GAAG,EAAE,EAAE,CAAC;IAAC,MAAM,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,IAAI,CAAA;CAAE,GAClH;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD;sDACsD;AACtD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CA4BnD;AAED,yCAAyC;AACzC,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAG5G;AAED,qDAAqD;AACrD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAG9D;AAUD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,mBAAmB,GACrB,aAAa,CAyCf;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAAO,GAC3C,aAAa,CA0Bf;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,GAAG,EAAE,WAAW,EAChB,CAAC,EAAE,mBAAmB,GACrB,SAAS,GAAG,OAAO,GAAG,SAAS,CAiBjC"}

package/dist/src/adapters/index.d.ts

@@ -5,6 +5,8 @@ import { geminiCli } from "./gemini-cli.js";
 import type { Adapter } from "./types.js";
 export declare const ADAPTERS: readonly Adapter[];
 export declare const adapterByName: (name: string) => Adapter | undefined;
+export { claudeDirs } from "./claude-code.js";
+export * as claudeControl from "./claude-code-control.js";
 export type { Adapter, AdapterEvent, BackfillRow, FactsState, HookCommand, HookInput, HookResult, InstallReport, SessionFacts, TranscriptRead, Turn, } from "./types.js";
 export { antigravity, claudeCode, codex, geminiCli };
 //# sourceMappingURL=index.d.ts.map

package/dist/src/adapters/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EAAgD,CAAC;AACxF,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,KAAG,OAAO,GAAG,SAAkD,CAAC;AAC1G,YAAY,EACV,OAAO,EACP,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,SAAS,EACT,UAAU,EACV,aAAa,EACb,YAAY,EACZ,cAAc,EACd,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/adapters/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,eAAO,MAAM,QAAQ,EAAE,SAAS,OAAO,EAAgD,CAAC;AACxF,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,KAAG,OAAO,GAAG,SAAkD,CAAC;AAC1G,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,aAAa,MAAM,0BAA0B,CAAC;AAC1D,YAAY,EACV,OAAO,EACP,YAAY,EACZ,WAAW,EACX,UAAU,EACV,WAAW,EACX,SAAS,EACT,UAAU,EACV,aAAa,EACb,YAAY,EACZ,cAAc,EACd,IAAI,GACL,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC"}

package/dist/src/config.d.ts

@@ -5,6 +5,8 @@ export interface SinkConfig {
     url: string;
     tier: Tier;
     pii?: boolean;
+    /** @deprecated Never set: control is per machine (spec/CONTROL.md §2). Kept so an
+     *  older config still reads. */
     control?: boolean;
     token?: string;
     /** whsec_… for Standard Webhooks signatures. */

package/dist/src/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,IAAI,CAAC;IACX,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,MAAM;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACrE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,cAAc,EAAE,MAAwE,CAAC;AAEtG,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,CAY9D;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,MAAqB,GAAG,IAAI,CAQxE;AAED;;4BAE4B;AAC5B,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG/D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,IAAI,CAAC;IACX,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;oCACgC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,MAAM;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACrE,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,cAAc,EAAE,MAAwE,CAAC;AAEtG,wBAAgB,UAAU,CAAC,IAAI,GAAE,MAAqB,GAAG,MAAM,CAY9D;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,GAAE,MAAqB,GAAG,IAAI,CAQxE;AAED;;4BAE4B;AAC5B,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG/D"}

package/dist/src/control/index.d.ts

@@ -0,0 +1,5 @@
+/** sessionpipe-core/control — the signed control command: format, verification,
+ *  enrollment (spec/CONTROL.md). WebCrypto only; safe to import in a Worker or a
+ *  browser (no node: imports). */
+export * from "./verify.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/control/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/control/index.ts"],"names":[],"mappings":"AACA;;kCAEkC;AAClC,cAAc,aAAa,CAAC"}